2017.01.06..2017.01.07
project device/hp/tenderloin4g/
86ab733 tenderloin4g: switch to aosp_base_telephony
project device/moto/shamu/
be4baba Revert "Revert "Revert "Revert "Path fix for backend connection to FE upon call disconnection""""
e8b87d9 Update build fingerprint to Android 7.1.1 (N6F26Q)
project kernel/moto/shamu/
3118fef perf: don't leave group_entry on sibling list (use-after-free)
3887caa UPSTREAM: ring-buffer: Prevent overflow of size in ring_buffer_resize()
200e683 net: wireless: bcmdhd: fix buffer overrun in private command path
bf76995 net: wireless: bcmdhd: fix buffer overrun in anqpo config
09a0592 net: wireless: bcmdhd: Fix up the BRCM wifi DHD code
265bfb6 net: wireless: bcmdhd: fix buffer overrun in wl_cfgvendor_hotlist_cfg
16981cc net: wireless: bcmdhd: Heap over write in dhdmsgbuf_query_ioctl
a4dc74f net: wireless: bcmdhd: remove unnecessary PCIe memory access when BUS down.
1fc2353 net: wireless: bcmdhd: fix overrun in dhd_pno_set_cfg_gscan
b8f8f7e msm: ispif: Remove handling of SD_SHUTDOWN
9fc46c1 msm: kgsl: fix sync file error handling
e81ca94 ASoC: msm: set pointers to NULL after kfree
e84f94b BACKPORT: mm: avoid setting up anonymous pages into file mapping
5fff621 ion: Fix use after free during ION_IOC_ALLOC
c42c660 UPSTREAM: mm: remove gup_flags FOLL_WRITE games from __get_user_pages()
86e7597 net: ping: Fix stack buffer overflow in ping_common_sendmsg()
2bf4d8b msm: ocmem: Serialize allocation requests only when necessary
578f1f4 qcom: ssr: Unlock the ssr_order mutex before returning
b3a7909 msm: msm_bus: Suspected fix for deadlock
686adc9 qdsp6v2: blacklist %p kptr_restrict
a479fab UPSTREAM: KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring
4cbc875 ion: blacklist %p kptr_restrict
44f97e7 msm: mdss: blacklist %p kptr_restrict
6ca324c UPSTREAM: KEYS: Fix race between key destruction and finding a keyring by name
24aeb64 ASoC: msm: lock read/write when add/free audio ion memory
0fa16b5 binder: blacklist %p kptr_restrict
6a1a141 BACKPORT: msm: camera: Avoid exposing kernel addresses
8a65d47 BACKPORT: msm: camera: cpp: Add validation for v4l2 ioctl arguments
db0c837 BACKPORT: perf: Fix event->ctx locking
63a2881 perf: protect group_leader from races that cause ctx double-free
d7a1527 netfilter: Change %p to %pK in debug messages
c01b4ad usb: gadget: f_mbim: Change %p to %pK in debug messages
245d47b drivers: video: Add bounds checking in fb_cmap_to_user
bab8623 ASoC: check for null function pointer for dummy device read/write, take 2
a1ce810 UPSTREAM: staging/android/ion : fix a race condition in the ion driver
98c52e5 msm: sensor: validate the i2c table index before use
86f3da1 UPSTREAM: fs,userns: Change inode_capable to capable_wrt_inode_uidgid
16883f5 net: inet: diag: expose the socket mark to privileged processes.
cb7e812 net: diag: make udp_diag_destroy work for mapped addresses.
a3efe51 net: diag: support SOCK_DESTROY for UDP sockets
27e8ba0 net: diag: allow socket bytecode filters to match socket marks
4c72228 net: diag: slightly refactor the inet_diag_bc_audit error checks.
b416511 net: diag: Add support to filter on device index
ebe4556 Revert "Revert "Fix backend connection to FE upon call disconnection""
8375238 msm: crypto: Fix integer over flow check in qcrypto driver
acdbf3d BACKPORT: perf: Fix race in swevent hash
c0bf230 msm: vidc: use %pK instead of %p which respects kptr_restrict sysctl.
097a0d5 UPSTREAM: proc: prevent accessing /proc//environ until it's ready
424668b BACKPORT: pstore: drop pmsg bounce buffer
bc49b7d arm/configs: shamu: disable extra SCSI configs
4339387 soc: qcom: smp2p: Fix kernel address leak
af3940f ASoC: msm: Add Buffer overflow check
6ce5053 Revert "ASoC: msm: Add Buffer overflow check"
d64ed1a UPSTREAM: af_unix: Guard against other == sk in unix_dgram_sendmsg
ef73abd cgroup: prefer %pK to %p
803d17d UPSTREAM: block: fix use-after-free in seq file
488f7d1 msm: camera: Restructure data handling to be more robust
704c463 msm: sensor: Avoid potential stack overflow
45c230d qcedev: Validate Source and Destination addresses
7ee8483 ion: Disable ION_HEAP_TYPE_SYSTEM_CONTIG
b1f2d945 ASoC: msm: initialize the params array before using it
032d668 qseecom: Change format specifier %p to %pK
9bfe8ec UPSTREAM: HID: core: prevent out-of-bound readings
88906d5 BACKPORT: ALSA: usb-audio: Fix double-free in error paths after snd_usb_add_audio_stream() call
031e70b BACKPORT: ALSA: usb-audio: Minor code cleanup in create_fixed_stream_quirk()
5be17f2 BACKPORT: tty: Prevent ldisc drivers from re-using stale tty fields
88b9e9d UPSTREAM: tcp: fix use after free in tcp_xmit_retransmit_queue()
fc5a914 BACKPORT: block: fix use-after-free in sys_ioprio_get()
aa4225b sps: add spinlock protection for pipes_q being tainted
b4753fa Revert "Fix backend connection to FE upon call disconnection"
36102c9 Fix backend connection to FE upon call disconnection
d3260e4 net: ipv6: Fix ping to link-local addresses.
e8540de ipv6: fix endianness error in icmpv6_err
e17c604 ANDROID: binder: Clear binder and cookie when setting handle in flat binder struct
4e87929 ANDROID: binder: Add strong ref checks
345c3b0 qseecom: validate the inputs of __qseecom_send_modfd_resp
a0f521a msm: mdss: Correct block id check for mdss_mdp_misr_table
3d29000 msm: crypto: Fix integer overflow check in qcedev driver
2abd36e msm: camera: sensor: Fix use after free condition
c95d27b msm: camera: restructure data handling to be more robust
f1e5da5 arm64: dma-mapping: always clear allocated buffers
df4b82f binder: prevent kptr leak by using %pK format specifier
c9b7a75 BACKPORT: tcp: make challenge acks less predictable
d71eb6d UPSTREAM: net: Fix use after free in the recvmmsg exit path
851c4c0 ASoC: check for null function pointer for dummy device read/write
56b32fa msm: mdss: Fix to validate data copied from user space
29e762c usb: gadget: f_usbnet: zero out CRC padding
6bb7de1 staging: android: Change %p to %pK in debug messages
a26d9b3 net: ipc_router: Bind only a client port as control port
2740069 ashmem: Validate ashmem memory with fops pointer
da5e00c shamu: Add IPv6 rpfilter support.
dc6dcc3 net: wireless: bcmdhd: fix kernel panic during p2p interface down
5e28530 sdcardfs: Truncate packages_gid.list on overflow
d78af47 fs: ext4: disable support for fallocate FALLOC_FL_PUNCH_HOLE
c91479f msm: dma: remove dma_test from defconfig
8c1012f trace: net: use %pK for kernel pointers
6397321 UPSTREAM: ALSA: control: Fix replacing user controls
c9c8ff0 msm: camera: Fix memory read by adding bounds check
1516359 UPSTREAM: KEYS: close race between key lookup and freeing
dd4085a BACKPORT: netfilter: x_tables: validate e->target_offset early
d980dd4 UPSTREAM: netfilter: x_tables: make sure e->next_offset covers remaining blob size
018cb87 Revert "netfilter: have ip*t REJECT set the sock err when an icmp is to be sent"
b1db6cc BACKPORT: cdc_ncm: do not call usbnet_link_change from cdc_ncm_bind
df0ea25 BACKPORT: KEYS: potential uninitialized variable
6c65687 UPSTREAM: ipv4: try to cache dst_entries which would cause a redirect
4633ef2 UPSTREAM: ipv6: Don't reduce hop limit for an interface
6e88dd6 UPSTREAM: udp: fix behavior of wrong checksums
49737ee UPSTREAM: ppp: take reference on channels netns
46affdb UPSTREAM: netfilter: x_tables: fix unconditional helper
931380e BACKPORT: unix: avoid use-after-free in ep_remove_wait_queue
d22a100 ASoC: msm: qdsp6v2: check param length for EAC3 format
fbfe5b2 spmi: prevent showing the address of spmidev
3bfc96f net: wireless: bcmdhd: security vulnerability - protect array overflow in PNO
project vendor/moto/
67d7ca1 Shamu: Update blobs to Android 7.1.1 (N6F26Q)