2017.07.07..2017.07.08
project device/oneplus/oneplus3/
67409af op3: Update qti telephony extension from MIUI 7.6.5 dev
6c78d92 op3: Abandon TARGET_UNIFIED_DEVICE flag
de13f35 op3: Allow vendor init to override props
ff94d15 op3: Update power profile from latest OOS
0f301b3 op3: Automatically set bluetooth name based on rf version
84c09e7 op3: Convert rf_version to integer before comparison
de2d7b0 op3: Update from Open Beta 18
118c5eb op3: Adjust lmk parameters
11b8a32 op3: Restore original CAF gps configuration
a069257 ipacm: fix the heap-use-after-free issue on bootup
8eec48b IPACM: fix the security issue in ConntrackClient
79ad5a5 IPACM: fix security issue in querying if index
c06d9dc Re-enable delete_aiding_data for user build
project kernel/asus/flo/
86f9d5b ring-buffer: Prevent overflow of size in ring_buffer_resize()
dfd25ad KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings
95ca0af splice: introduce FMODE_SPLICE_READ and FMODE_SPLICE_WRITE
44c9daa mpi: Fix NULL ptr dereference in mpi_powm() [ver #3]
4a2dedf msm: camera: sensor: Validate eeprom_name string length
c980b65 qseecom: add mutex around qseecom_set_client_mem_param
3476bca ipv6: Check ip6_find_1stfragopt() return value properly.
d8873f4 ipv6: Prevent overrun when parsing v6 header options
293f398 fs: fuse: Add replacment for CMA pages into the LRU cache
e12d560 prima: Use heap memory for station_info instead of stack
d142047 ASoC: msm: qdsp6v2: set pointer to NULL after free.
41da22a usb: diag: change %p to %pK in debug messages
5024014 cgroup: prefer %pK to %p
e7820e0 qseecom: Change format specifier %p to %pK
a48f56b msm: camera: sensor: Fix use after free condition
dfc0796 USB: cypress_m8: add endpoint sanity check
fedfc4a mm: migrate dirty page without clear_page_dirty_for_io etc
7f79c57 ALSA: seq: Fix race at timer setup and close
93872bbd ALSA: compress: fix an integer overflow check
7953fe9 [media] media: info leak in __media_device_enum_links()
6a928a2 Revert "media: Init the reserved fields of struct media_link_desc"
08fbfe9 mmc: card: fix arbitrary write via read handler in mmc_block_test
c56b65d ASoC: msm: qdsp6v2: Fix buffer overflow in voice driver
a4c7f87 unix: correctly track in-flight fds in sending process user_struct
cf88f77 unix: properly account for FDs passed over unix sockets
1f7b81b fs/proc/array.c: make safe access to group_leader
be0d49e ALSA: info: Check for integer overflow in snd_info_entry_write()
143d65e perf: don't leave group_entry on sibling list (use-after-free)
a7e58fc dccp/tcp: do not inherit mc_list from parent
3180c72 sctp: do not inherit ipv6_{mc|ac|fl}_list from parent
4cd2fbb ipv6/dccp: do not inherit ipv6_mc_list from parent
583a604 ipv6: fix out of bound writes in __ip6_append_data()
1352825 kernel: Fix potential refcount leak in su check
93adf67 kernel: Only expose su when daemon is running
373daa46 KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings
project kernel/moto/shamu/
06eff2a UPSTREAM: net/packet: fix overflow in check for tp_reserve
f2153ad UPSTREAM: net/packet: fix overflow in check for tp_frame_nr
6e95883 msm: kgsl: Fix kgsl memory allocation and free race condition
4268b75 BACKPORT: msm: camera: Add regulator enable and disable independent of CSID
edd3729 ipv4: keep skb->dst around in presence of IP options
f37e859 Revert "proc: smaps: Allow smaps access for CAP_SYS_RESOURCE"
e7f623a ashmem: remove cache maintenance support
d90e251 msm-vidc: Allocate bus vote data during initialization
1bc21cd net: wireless: bcmdhd: adding boundary check in SWC gscan config
f44ecc3 BACKPORT: UPSTREAM: dccp: fix freeing skb too early for IPV6_RECVPKTINFO
be556c5 BACKPORT: UPSTREAM: sg_start_req(): make sure that there's not too many elements in iovec
116b9a2 BACKPORT: udf: Check path length when reading symlink
ec35000 UPSTREAM: char: lack of bool string made CONFIG_DEVPORT always on
c9cb3e1 UPSTREAM: char: Drop bogus dependency of DEVPORT on !M68K
d1a51d5 Disable /dev/port
847467c UPSTREAM: net/packet: fix overflow in check for priv area size
cedc36d UPSTREAM: packet: handle too big packets for PACKET_V3
94cc829 net: wireless: bcmdhd: arpoe/ndoe IOVAR bug patch
2c104e5 BACKPORT: UPSTREAM: HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands
6a46920 net: wireless: bcmdhd: adding boundary check in wl_cfg80211_mgmt_tx
6cda862 msm: camera: don't cut to 8bits for validating enum variable
81ab42e msm: camera: sensor: Add boundary check for cci master
f3adbf7 ASoC: msm: qdsp6v2: check audio client pointer before accessing
d8dcf2c ASoC: msm: qdsp6v2: validate audio client in callback
400b660 BACKPORT: udf: Verify symlink size before loading it
f366654 FROMLIST: msm: qdsp6v2: set pointer to NULL after free
project kernel/oneplus/msm8996/
de1a73f UPSTREAM: ext4: fix fencepost in s_first_meta_bg validation
606bdd9 ext4: fix condition of validate s_first_meta_bg
0715b33 ext4: validate s_first_meta_bg at mount time
8c84012 UPSTREAM: packet: fix races in fanout_add()
15e5dce ping: implement proper locking
c9b4683 selinux: fix off-by-one in setprocattr
00e3bff fs/exec.c: account for argv/envp pointers
019213f cpu-hotplug: convert cpu_hotplug_disabled to a counter
1f9c40c ANDROID: sdcardfs: remove dead function open_flags_to_access_mode()
project vendor/oneplus/
7ef0626 op3: Update qti telephony extension from MIUI 7.6.5 dev
718ac8e op3: Update to Open Beta 18 blobs