2017.05.04..2017.05.05
project device/oneplus/oneplus3/
377825c Fix issue of incorrect set of used_in_fix flag
9c131ed Mark SV used_in_fix based on the most recent position report When SV report comes, mark used_in_fix based on the most recent position report.
2f4a70a ipacm: Fix KW issues
8cc6add ipacm: Fix race condition between nat delete rule and update timestamp
5af38e6 op3: Update IPACM for new BSP
297feda Revert "oneplus: cleanup wifi packages"
8e35152 op3: update dependencies
project kernel/oneplus/msm8996/
ce14afb Revert "msm: isp: Add support for VFE resolution limit"
233ced3 tcp: take care of truncations done by sk_filter()
1efc82c rose: limit sk_filter trim to payload
9ad79cd msm: thermal-dev: Protect IOCTL from race condition
951037d msm: camera: sensor: Validate csid lane count
722c01a msm: mdss: Fix integer overflow in cursor validaton
6580390 msm: kgsl: Increase memstore size
1f48d87 soc: qcom: Avoid possible buffer overflow in service-locator
abaf996 input: touchscreen: synaptics: Remove fw_update sysfs entries
e1dcdc7 input: touchscreen: synaptics_dsx: Remove fw_update sysfs entries
cef330b qseecom: fix potential memory leak in __qseecom_update_cmd_buf_64
6f7b1e9 msm: ispif: fix a bug in checking the validity of vfe intf
91f1795 qseecom: check img_len and mdt_len against ion buf len
b1987fe Revert "mm: vmscan: Add a debug file for shrinkers"
bf68a57 msm: mdss: Add lock to avoid release of active session in rotator
e2db856 msm: mdss: fix race condition in mdp debugfs
7aec5d7 msm: mdss: Validate cursor image size
a36c7f4 msm: mdss: Install sync fences after user copy
a9cccfc USB: gadget: midi: Fix use-after-free after midi_unbind
7b9264c msm: camera: isp: Handle array out of bounds
c745937 msm: mdss: Fix possible integer overflow
7570ff3 usb: f_serial: Check port_num before allocating serial instance
d1d99f0 msm: camera: Add error check for cmd in IOCTL.
ac76086 msm: mdss: Add lock to avoid release of active session in rotator
17597b4 msm: mdss: fix race condition in mdp debugfs
ff31baf msm: mdss: Install sync fences after user copy
5dc87fc msm: mdss: Validate cursor image size
2d5874c msm: camera: isp: fix for out of bound access array
f06f029 msm: isp: fix for potentitial array out of bound access
2faff53 msm: camera: cpp: Replace const by macro
44c9633 CHROMIUM: usb: gadget: configfs: Fix KASAN use-after-free
00bfaa0 mpi: Fix NULL ptr dereference in mpi_powm() [ver #3]
19899b3 input: synaptics: put offset checks under mutex.
384722a net: avoid signed overflows for SO_{SND|RCV}BUFFORCE
0e8cc58 packet: fix race condition in packet_set_ring
61c5e5a l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind()
8bc3aaf android: fiq_debugger: restrict access to critical commands.
84be788 msm: mdss: mask DSI FIFO overflow errors during BTA operation
ad49cf6 ANDROID: ion: check for kref overflow
a2e932c msm: mdss: fix check for igc read
af37375 hid: usbhid: Changes to prevent buffer overflow
f1af7d1 msm: msm_bus: Set current index to default value
b031e38 Revert "mm: vmscan: Add a debug file for shrinkers"
b3be444 ASoC: msm: qdsp6v2: set pointer to NULL after free
70fac83 wcnss: Dump WCNSS registers during reset FIQ
e5e728d msm: mdss: Fix DSPP usage inconsistency issue
6a65eef msm: camera: Lack of copy_from_user in camera driver.
cb1c0d3 msm: IPA: add the check on intf query
c848c28 qseecom: add mutex around qseecom_set_client_mem_param
31a19db ASoC: Add backend user count checking
92f93db usb: dwc3: Replace sscanf with kstrtou8_from_user
884e81c msm: camera: cpp: Fixing Heap overflow in output buffer
ed066a1 drivers: soc: add size check
c774f63 msm: mdss: Trigger idle fallback when no update due to touch
828703c input: touchscreen: fix buffer overflow issue in synaptics driver
0bc6c35 input: touchscreen: remove data pointer from driver structure
e7481ca msm: camera: fix Information leak
ad524d5 usb: host: xhci: Fix bound check for interrupter number
3a7fdf9 HID: Remove playstation4 as special driver
1c51538 ASoC: msm: acquire lock in ioctl
37c554b msm: ipa: Modify IPAERR to IPADBG
e08ea92 msm: ADSPRPC: Fix leak that happens while the list gets empty
9d5a0bc bluetooth: Fix free data pointer routine
1120652 msm: camera: Add check to ensure task wont hog CPU
79f371d ANDROID: cpu: send KOBJ_ONLINE event when enabling cpus
f991ded ARM: dts: msm: Update L1 D/I cache dump ids for msm8917
430deb1 msm: wlan: update regulatory database
042ec27 msm: mdss: ensure proper state transition during ULPS exit
930ccf9 leds: qpnp-flash: Fix Use-after-free(UAF) for debugfs
1070e57 msm: mdss: handle synchronization issues during DSI debugfs read/write
891b176 msm: camera: sensor: Validate destination step position
4b5893db USB: gadget: Replace %pK with %pM
18f49d3 drivers: soc: add mutex to prevent response being processed twice
28bd334 input: touchscreen: remove msg21xx mstar touch driver
6435854 msm: camera: Validate size param before allocating memory
49f6701 misc: qcom: qdsp6v2: Add range check in function aac_in_ioctl_shared
6835769 msm: camera: cpp: Avoid exposing kernel information to user space
c14c17b regulator: msm_gfx_ldo: Fix the CX voting logic
36a2a76 ice: fix security issue with validating error in pointer
92367fe0 cpp: Reset vbif and load firmware on poll failures
e024c8d msm: cpp: Check for validity of processed frame in cpp timeout
b0aad6d msm: ADSPRPC: Buffer length to be copied is truncated
e939c4c usb: gadget: f_uac2: Fix sound card registration failure
2bc3ef6 ASoC: msm: qdsp6v2: completely deallocate on cal block creation failure
4a20082 uio: fix potential use after free issue when accessing debug_buffer
db99abe qseecom: release memory when failed to get fw size
8d05975 crypto: msm: check length before copying to buf in _debug_stats_read
0707065 input: touchscreen: gt9xx: fix memory corruption in Goodix driver
a115f47 BACKPORT: aio: mark AIO pseudo-fs noexec
9862275 fs/proc/array.c: make safe access to group_leader
eecbf23 msm: ba: Fix race conditions in debug writes
6bad287 msm: pm: Add mutex lock for shared data
1af0d6b msm: vidc: Check for sanity of size while mapping buffers
9b01816 ASoC: msm: qdsp6v2: extend validation of virtual address
f81bccb input: synaptics_dsx: reallocate buffer under lock.
2740c5a ASoC: msm8x16-wcd: modify interrupt handling
16b6825 ARM: dts: msm: Limit max gpu power level jump for MSM8940
f68f727 msm: kgsl: Add facility to limit max GPU power level jump
6ff4a74 usb: gadget: Fixes enumeration failure on Windows 10
f8927e6 usb: android: f_uac2: Fix audio quality issues
9214188 ASoC: wcd9xxx: fix out of bound access
6b3b4f3 msm: wlan: update regulatory database
cda4910 msm: kgsl: Increase fault detection threshold value
8567ef3 mm: cma: check the max limit for cma allocation
ee3a4ef msm: ADSPRPC: Check for buffer overflow condition
9a9f38b msm: mdss: Avoid unnecessary warnings during pipe unstaging
2046ec8 msm: ipa3: Validate IPA and GSI firmwares before loading
2ac0054 input: misc: fix heap overflow issue in hbtp_input.c
7e50889 msm: camera: avoid race condition while configuring ping pong buffer
5ff829c ASoc: wcd-mbhc: correct handling of electrical interrupts
34c3eeb soc: qcom: fingerprint: keep QSEE handle in kernel space
6154ef0 QBT1000: check for null pointer before copying command
5673cc4 QBT1000: copy qseecom handle to user when loading/unloading app
95076f6 scsi: ufs: check for err state when polling for doorbell
2f255b5 msm: vidc: Check for sanity of size while mapping buffers
d5640ac crypto: ice: Fix NULL pointer exception in ice.
03e27dd MMC: core: Check for return value of card init
9429e9b MMC: core: sd: Check for return value of sd_card init
aad0070 msm: kgsl: refcount irq to avoid racing against idle check
dfbd215 usb: gadget: Fix ep_flush issue on composition switch
aa998a3 qseecom: improve input validatation for qseecom_send_service_cmd
c66fd21 USB: gadget: midi: Replace snd_card_free with snd_card_free_closed
4b20c7d msm: camera: Synchronize jpeg ISR and userspace call
1ad8a7e msm: camera: jpegdma: Check for compat config
dd61d28 msm: jpeg: DMA V4L2 driver changes
0e1a0ed memshare: Fix parameters to collect ramdump
41aa725 msm: mdss: fix to handle multi-rect configuration in error cases
13b2149 soc: qcom: pil: Initialize variable to avoid invalid access
6c41eb7 soc: qcom: make debugfs support configurable for kryo l2 accessors driver
0e59a90 USB: android: Fix gsmd_setup() error path cleanup on sigkill
c72bac0 platform: msm: spmi: Fix possible race condition in debugfs
30b85ec leds: qpnp-flash: Fix possible race condition in debugfs
bc5697f power: qpnp-fg: Fix possible race condition in FG debugfs
a03cd43 ecm_ipa: remove redundant code
52190da platform: msm: spmi: Add flag to make SPMI debugfs write optional
d911373 crypto: msm: check integer overflow on total data len in qcedev.c
fc3c346 ASoC: msm-lsm-client: cleanup ioctl functions
df1985e seemp: use local stack mem when encoding params
d89b150 Revert "ASoC: wcd_cpe_core: Perform irq cleanup once the bus is up"
349109a mfd: wcd9xxx: send down notification to devices before cleaning-up IRQs
f09a69e net: rmnet_data: Fix incorrect netlink handling
a873a99 msm: mdss: Fix invalid dma attachment during fb shutdown
17b3750 msm: mdss: Add sanity check for Gamut LUT size
e22c58e msm: mdss: Clear compat structures before copying to user
c35a81e soc: qcom: pil: Fix kernel pointer leak
af03135 msm: ipa: Prevent multiple header deletion from user space
796af26 ARM: dts: msm: Update APC CPR voltage margins for msm8920
63a46cf ASoC: msm: qdsp6v2: Fix out-of-bounds access in put functions
02b1a65 mfd: wcd9xxx: Add range checking in function wcd9xxx_init_slimslave
5bc15f7 clk: msm: gcc: Add support for 19.2MHz for MCLK clocks
1cf0666 msm: vidc: Enable WARN_ON based on debug level
02fab88 usb: replace %p with %pK
56b4fb7 ASoC: msm: qdsp6v2: DAP: Add check to validate param length
36719de ASoC: msm: qdsp6v2: Add range checking in msm_dai_q6_set_channel_map
ede4bb5 security: switched to stackable model for PFT/PFK module
965f76b drivers: soc: qcom: Add overflow check in ADM driver
d4800e6 ASoC: msm: qdsp6v2: DAP: Add check to validate param length
6c78f46 USB: gadget: qdss: Fix null pointer dereference
691ea3c ARM: dts: msm: Update frequency to 1804.8MHz for MSM8953
32ed501 msm: qpnp-haptic: Manage the state of PON regulator
ebdc70c msm: isp: Add support for VFE resolution limit
27fdbcb msm: vidc: read capability version from efuse register
e421357 ARM: dts: msm: Add VFE efuse support for 8953
9ed1e02 usb: gadget: f_uvc: Fixed wrong length of H.264 frame descriptor
ece5486 msm: mdss: avoid removing wrong multirect on validate failures
afd7809 msm: thermal: Update error handling of device offline
b737ad3 defconfig: msm: Use RCU_BOOST option for msm8917/37/53
3157b1a diag: Synchronize threads to fix possible deadlock
d85427c soc: qcom: glink: add NULL check for edge_ctx
f647ed4 soc: qcom: smem: Fix uninitialized usage of a stack variable
d2df6c9 msm: kgsl: Make sure USE_CPU_MAP + MAP_USER_MEM work together
b271101 msm: kgsl: Fix pagetable member of struct kgsl_memdesc
3f369f8 ARM: dts: msm: add efuse register information on msm8953
c720640 ARM: dts: msm: Add use_32bit_app_setting in bootargs for msm8996
b73883e defconfig: arm64: Enable app specific setting on MSM8996
a2a6a33 arm64: Modify support for 32bit app specfic settings
54fce36 msm: camera: isp: handle frame id out of sync for B+M
da28d9e ASOC: msm: Restrict loop index to avoid buffer overread
5bc1232 arm64: cache: change ARCH_DMA_MINALIGN and L1_CACHE_SHIFT values
3add031 clk: msm: gcc: Add support for active clients of SNOC/BIMC
fe3be55 msm: camera: Print kernel pointer using correct specifier
6d87c02 msm-camera: Validation of input parameter
8bdaed2 ASoC: qdsp6v2: prevent null pointer dereference for _vol_cmds
fc25dc4 ASoC: msm: Fix memory leakage in dts eagle
c0a8e61 ASoC: msm: q6dspv2: fix potentional information leak
6b08b1b ASoC: msm: q6dspv2: use correct variable type to store ION buff size
c292a95 msm: mdss: Fix potential deferencing of null pointer
44e3eb7 mmc: mmc: Don't send CMD13 after switch command while switching speed modes
c9f53d5 mmc: mmc_ops: Factor out mmc_switch_status from __mmc_switch
fec533d mmc: core: Enable HS mode first in the device and then in the host
3ab15bf msm: camera: handle error case for B+M
cc6b3cb scsi: ufs: Add clock ungating to a separate workqueue
7bba701 msm: camera: Fix frame ID jump in dualcam.
1eb63b1 usb: gadget: Support H264 format for f_uvc driver
cf54529 usb: android: f_uac2: Add support for UAC2 function
ff1379a usb: android: f_uvc: Add support for UVC function
fd816e4 msm: mdss: clear previous DSI_VIDEO_DONE interrupt
85ab8da memshare: Listen to SUBSYS_BEFORE_POWERUP to collect ramdump
66b31c6 usb: phy: qusb: Keep LDOs ON during disconnect if PMI voted for it
977ed5b rcu: Kick rcuo kthreads after their CPU goes offline
eea6f34 msm: camera: Enable (2+1) lane csiphy combo mode
a71cae9 ARM: dts: msm: Enable csiphy clk in csid for msm8937 and msm8953
babc69e leds: qpnp-wled: Fix configuration of ovp register
project packages/apps/ThemeInterfacer/
cf642f0 JobService: Expose configuration shim refresh delay
e34e440 Add a looper to the locale change handler
220a944 README: Recommend Interfacer be put in the services folder