2017.05.01..2017.05.02
project android/
737e045 Manifest for Android 7.1.2 Release 11
project build/
c1cc1db NHG47L
b382cfe Update Security String to 2017-05-05 on nyc-dev
e5dd8a4 Update Security String to 2017-05-01 on nyc-dev
5bcb8ef NHG47K
4f4cd2e NHG47J
project device/oneplus/oneplus3/
89e359d Enable TelephonyMonitor
583f31a DTAG: Use "WLAN call" instead of "Wi-Fi Calling" in SPN and Setting.
project external/boringssl/
08fcdd0 Always use Fermat's Little Theorem in ecdsa_sign_setup.
project external/giflib/
ccd13ed Update GIFLIB to 5.1.4 DO NOT MERGE
project external/libavc/
9b06ccc Decoder: Fixed error handling for dangling fields
project external/libhevc/
ab14d63 Return error from cabac init if offset is greater than range
e7cd9a6 Handle error return from ref list in slice hdr parsing
ac4084f Return error if SPS parsing reads more bytes than the nal length
project external/libmpeg2/
c87c88e Fix in handling header decode errors
project frameworks/av/
b487c70 Add bounds check in SoftAACEncoder2::onQueueFilled()
900af48 Fix NPDs in h263 decoder
d766d42 Fix out of bounds access
72b9c4f Fix integer overflow and divide-by-zero
795d327 Validate lengths in HEVC metadata parsing
bce047c AudioFlinger: Check framecount overflow when creating track
project frameworks/base/
9fa33e7 [DO NOT MERGE] Don't allow permission change to runtime
413ebd1 [DO NOT MERGE] Throw exception if slot has invalid offset
f76189e [DO NOT MERGE] Check bounds in offsetToPtr
6aa2723 Fix issue with saving admins before finishing loading.
eea3ed2 resolve merge conflicts of ad4aa1ce7d3d to nyc-mr1-dev fix conflict in nyc-mr2-release Change-Id: I97ef31536cd06495a08a3f94f81df2d1376186e0 (cherry picked from commit f806d65e615b942c268a5f68d44bde9d55634972)
4fc5d98 Protect Bluetooth OPP ACCEPT and DECLINE broadcast
project kernel/moto/shamu/
80ba085 net: wireless: bcmdhd: fix for IOVAR GET failed
93cae63 xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window
8476bb6 msm: mdss: install the rel_fence even if retire_fence is skipped
97464bc net: wireless: bcmdhd: fix incorrect IOVAR buffer length use case
202fdde tracing: do not leak kernel addresses
d42777c BACKPORT: pinctrl: msm: fix function name allocation length
40904b3 FROMLIST: ASoC: soc: prevent risk of buffer overflow
a59cbfe BACKPORT: trace: resolve stack corruption due to string copy
6db7fee msm: crypto: set CLR_CNTXT bit for crypto operations
c564f21 ALSA: pcm : Call kill_fasync() in stream lock
cf75741 qseecom: check buffer size when loading firmware images
21821a0 soc: qcom: scm: check for size_t overflow.
7412756 ASoC: soc: msm: initialize buffer to prevent kernel data leakage
15af673 ASoC: msm: qdsp6v2: Add range checking in msm_dai_q6_set_channel_map
6407ffb slim-msm: Synchronize SSR callbacks
6477cca perf: Tighten (and fix) the grouping condition
a752eab crypto: msm: check length before copying to buf in _debug_stats_read
20d08bd UPSTREAM: regulator: core: Fix regualtor_ena_gpio_free not to access pin after freeing
e91b82a ASoC: msm: qdsp6v2: return error when copy from userspace fails
5de0230 msm: mdss: Install sync fences after user copy
5b44cd6 FROMLIST: ASoC: wcd9320: Fix out of bounds for mad input value
7d9d13c qseecom: improve input validatation for qseecom_send_service_cmd
2594215 UPSTREAM: tracing: Fix trace_printk() to print when not using bprintk()
project kernel/oneplus/msm8996/
74a5bb9 qcacld-2.0: Fix memory leak issue
2a2ed09 msm: mdss: Install sync fences after user copy
12a7aaf leds: qpnp-flash: Fix Use-after-free(UAF) for debugfs
72159dc leds: qpnp-flash: Fix possible race condition in debugfs
70f451a power: qpnp-fg: Fix possible race condition in FG debugfs
c52c28e soc: qcom: scm: check for size_t overflow.
b6b7f94 FROMLIST: msm: mdss: handle synchronization issues during DSI debugfs read/write
b7c4f7e crypto: msm: check length before copying to buf in _debug_stats_read
7e2d66b ASoC: msm: q6dspv2: use correct variable type to store ION buff size
9a60fef qseecom: improve input validatation for qseecom_send_service_cmd
a9ba519 ASoC: msm: qdsp6v2: Add range checking in msm_dai_q6_set_channel_map
8cde48f qcacld-2.0: Trim operation classes to max supported in change station
d0c4ffc qcacld-2.0: Acquire lock to protect hdd_ctx in hdd_driver_memdump_read()
e68a09b FROMLIST: ASoC: msm: qdsp6v2: completely deallocate on cal block creation failure
7bfb8ea FROMLIST: drivers: soc: add mutex to prevent response being processed twice
404bda3 msm: ADSPRPC: Check for buffer overflow condition
041a65d msm: mdss: avoid removing wrong multirect on validate failures
77ba0d5 BACKPORT: trace: resolve stack corruption due to string copy
e909758 BACKPORT: BACKPORT: uio: fix potential use after free issue when accessing debug_buffer
project system/bt/
74a7a01 resolve merge conflicts of a3ee2e35 to nyc-dev
project vendor/ev/
20843c6 cm: etc: Mount BFQIO cgroup as /dev/bfqio
c98504c cm: Create cgroup mount point for BFQ
project vendor/oneplus/
b87760f Revert "op3: Add adreno blobs"
7c17265 op3: Add missing & remove unused blobs
08c4299 op3: Update to OB14 blobs
37abab1 op3: Update to OxygenOS 4.1.0 blobs
2511b0d op3: Update adreno blobs
29237b7 op3: Add adreno blobs