Security patches for OnePlus 3 Kernel (Marshmallow) - #16

Closed

NewEraCracker wants to merge 118 commits into

OnePlusOSS:oneplus3/6.0.1from

NewEraCracker:oneplus3/6.0.1-security4

Commits on Nov 26, 2016

arm64: Log the machine name string during boot up

Stepan Moskovchenko
authored and
NewEraCracker
committed
BACKPORT: security: fix typo in security_task_prctl

thejh
authored and
NewEraCracker
committed
KEYS: Fix race between read and revoke

dhowells
authored and
NewEraCracker
committed
leds: qpnp-flash: check power supply variable in flash led driver

Shantanu Jain
authored and
NewEraCracker
committed
perf: duplicate deletion of perf event

Srinivasarao P
authored and
NewEraCracker
committed
ASoc: soundwire: add null check before using map

Meng Wang
authored and
NewEraCracker
committed
msm: ADSPRPC: Fix buffer overflow for session

Sathish Ambley
authored and
NewEraCracker
committed
Bluetooth: Replace %p with %pK

Dibyendu Roy
authored and
NewEraCracker
committed
diag: Use correct index while accessing DCI channel

Sreelakshmi Gownipalli
authored and
NewEraCracker
committed
net: fix infoleak in rtnetlink

kengiter
authored and
NewEraCracker
committed
msm: ADSPRPC: Validate the SMMU session count

Sathish Ambley
authored and
NewEraCracker
committed
Replace %p with %pK to prevent leaking kernel address

mkayyash
authored and
NewEraCracker
committed
KEYS: potential uninitialized variable

Dan Carpenter
authored and
NewEraCracker
committed
BACKPORT: tcp: make challenge acks less predictable

edumazet
authored and
NewEraCracker
committed
soc: qcom: smp2p: Fix kernel address leak

Karthikeyan Ramasubramanian
authored and
NewEraCracker
committed
misc: qcom: qdsp6v2: initialize wma_config_32

Siena Richard
authored and
NewEraCracker
committed
binder: prevent kptr leak by using %pK format specifier

nickdesaulniers
authored and
NewEraCracker
committed
misc: qcom: qdsp6v2: initialize config_32

Laxminath Kasam
authored and
NewEraCracker
committed
UPSTREAM: Input: powermate - fix oops with malicious USB descriptors

Badhri Jagan Sridharan
authored and
NewEraCracker
committed
UPSTREAM: USB: cypress_m8: add endpoint sanity check

Badhri Jagan Sridharan
authored and
NewEraCracker
committed
UPSTREAM: USB: mct_u232: add sanity checking in probe

Badhri Jagan Sridharan
authored and
NewEraCracker
committed
UPSTREAM: USB: usb_driver_claim_interface: add sanity checking

Badhri Jagan Sridharan
authored and
NewEraCracker
committed
UPSTREAM: USB: iowarrior: fix oops with malicious USB descriptors

Badhri Jagan Sridharan
authored and
NewEraCracker
committed
UPSTREAM: USB: cdc-acm: more sanity checking

Badhri Jagan Sridharan
authored and
NewEraCracker
committed
KEYS: Fix short sprintf buffer in /proc/keys show function

dhowells
authored and
NewEraCracker
committed
mm: remove gup_flags FOLL_WRITE games from __get_user_pages()

torvalds
authored and
NewEraCracker
committed

Commits on Nov 29, 2016

KEYS: Fix race between key destruction and finding a keyring by name

dhowells
authored and
NewEraCracker
committed
KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring

dhowells
authored and
NewEraCracker
committed
KEYS: Fix handling of stored error in a negatively instantiated user key

dhowells
authored and
NewEraCracker
committed
Input: aiptek - fix crash on detecting device without endpoints

nefigtut
authored and
NewEraCracker
committed
qseecom: Fix stack out of bounds issue

AnilKumar Chimata
authored and
NewEraCracker
committed
crypto: msm: crypto driver performance improvement

Sivanesan Rajapupathi
authored and
NewEraCracker
committed
KEYS: Fix ASN.1 indefinite length object parsing

dhowells
authored and
NewEraCracker
committed
netfilter: x_tables: check for size overflow

Florian Westphal
authored and
NewEraCracker
committed
net: Fix use after free in the recvmmsg exit path

acmel
authored and
NewEraCracker
committed
crypto: fix pointer dereference

William Clark
authored and
NewEraCracker
committed
msm: mdss: Fix memleak in panel_debug_reg_write

Krishna Srinivas
authored and
NewEraCracker
committed
UPSTREAM: ppp: defer netns reference release for ppp channel

congwang
authored and
NewEraCracker
committed
ANDROID: binder: Clear binder and cookie when setting handle in flat binder struct

arve-android
authored and
NewEraCracker
committed

Commits on Dec 6, 2016

UPSTREAM: arm64: make sys_call_table const

mrutland-arm
authored and
NewEraCracker
committed
usb: gadget: f_mtp: simplify ptp NULL pointer check

pundiramit
authored and
NewEraCracker
committed
ANDROID: video: adf: Avoid directly referencing user pointers

Jonathan Hamilton
authored and
NewEraCracker
committed
diag: dci: avoid out of bounds memory access

nickdesaulniers
authored and
NewEraCracker
committed
binder: blacklist %p kptr_restrict

nickdesaulniers
authored and
NewEraCracker
committed
msm: camera: Avoid exposing kernel addresses

Siqi Lin
authored and
NewEraCracker
committed
drivers: video: Add bounds checking in fb_cmap_to_user

spfetsch
authored and
NewEraCracker
committed
shmem: fix shm fallocate() list corruption

torvalds
authored and
NewEraCracker
committed
blk-mq: update hardware and software queues for sleeping alloc

axboe
authored and
NewEraCracker
committed

Commits on Dec 7, 2016

msm: msm_bus: limit max chars read by sscanf

David Dai
authored and
NewEraCracker
committed
msm: crypto: Fix integer over flow check in qcrypto driver

Zhen Kong
authored and
NewEraCracker
committed
qcedev: Validate Source and Destination addresses

AnilKumar Chimata
authored and
NewEraCracker
committed
msm: sensor: Avoid potential stack overflow

Samyukta Mogily
authored and
NewEraCracker
committed
net: ipc_router: fix NULL pointer de-reference issue

Arun Kumar Neelakantam
authored and
NewEraCracker
committed

Commits on Dec 9, 2016

trace: prevent NULL pointer dereference

Kishor PK
authored and
NewEraCracker
committed
cgroup: prefer %pK to %p

nickdesaulniers
authored and
NewEraCracker
committed
ext4: fix potential use after free in __ext4_journal_stop

Lukas Czerner
authored and
NewEraCracker
committed
ext4: fix potential integer overflow

insuyun
authored and
NewEraCracker
committed
ext4: fix NULL pointer dereference in ext4_mark_inode_dirty()

guaneryu
authored and
NewEraCracker
committed
ext4: check for extents that wrap around

vegard
authored and
NewEraCracker
committed

Commits on Dec 11, 2016

USB: visor: fix null-deref at probe

jhovold
authored and
NewEraCracker
committed
msm: ultrasound: Various static analysis fixes

vkathota
authored and
NewEraCracker
committed
net: rmnet_data: Change the print format for addresses

Subash Abhinov Kasiviswanathan
authored and
NewEraCracker
committed
net: core: neighbour: Change the print format for addresses

Subash Abhinov Kasiviswanathan
authored and
NewEraCracker
committed
UPSTREAM: USB: usbfs: fix potential infoleak in devio

kengiter
authored and
NewEraCracker
committed
net: fix infoleak in llc

kengiter
authored and
NewEraCracker
committed
net: fix infoleak in rtnetlink (Edited)

kengiter
authored and
NewEraCracker
committed
net: fix a kernel infoleak in x25 module

kengiter
authored and
NewEraCracker
committed
ASoC: msm: qdsp6v2: Change audio drivers to use %pK

Ben Romberger
authored and
NewEraCracker
committed
netfilter: nfnetlink: work around wrong endianess in res_id field

ummakynes
authored and
NewEraCracker
committed
netfilter: nfnetlink: correctly validate length of batch messages

Phil Turnbull
authored and
NewEraCracker
committed

Commits on Dec 12, 2016

mm: thp: fix SMP race condition between THP page fault and MADV_DONTNEED

aagit
authored and
NewEraCracker
committed
BACKPORT: usb: gadget: f_fs: Fix use-after-free

larsclausen
authored and
NewEraCracker
committed
ASoC: msm: qdsp6v2: check param length for EAC3 format

Surendar karka
authored and
NewEraCracker
committed
tcp: fix use after free in tcp_xmit_retransmit_queue()

edumazet
authored and
NewEraCracker
committed
ASoC: msm: initialize the params array before using it

Walter Yang
authored and
NewEraCracker
committed

Commits on Dec 16, 2016

UPSTREAM: arm64: vdso: Mark vDSO code as read-only

d3zd3z
authored and
NewEraCracker
committed
ext4: fix oops on corrupted filesystem

jankara
authored and
NewEraCracker
committed
input: synaptics: Add checks of user input data

jiayy
authored and
NewEraCracker
committed
input: synaptics_dsx: add checks of user input data

m-chong
authored and
NewEraCracker
committed
jbd2: fix incorrect unlock on j_list_lock

tsgates
authored and
NewEraCracker
committed

Commits on Dec 17, 2016

ASN.1: Fix non-match detection failure on data overrun

dhowells
authored and
NewEraCracker
committed
diag: Fix possible kernel addresses leak

Manoj Prabhu B
authored and
NewEraCracker
committed
Don't show empty tag stats for unprivileged uids

mkayyash
authored and
NewEraCracker
committed
ASoC: msm: Add Buffer overflow check

Karthik Reddy Katta
authored and
NewEraCracker
committed
coresight: fix the dangling pointer issues on coresight

Charan Teja Reddy
authored and
NewEraCracker
committed

Commits on Dec 18, 2016

sched: Fix integer overflow in sched_update_nr_prod()

Pavankumar Kondeti
authored and
NewEraCracker
committed

Commits on Dec 19, 2016

msm: kgsl: Fix overflow in sharedmem read/write functions

Sunil Khatri
authored and
NewEraCracker
committed
ASoC: qdsp6v2: fix potential bug of infinite loop

Xiaojun Sang
authored and
NewEraCracker
committed
net: ping: Fix stack buffer overflow in ping_common_sendmsg()

Qidan He
authored and
NewEraCracker
committed
netfilter: Change %p to %pK in debug messages

m-chong
authored and
NewEraCracker
committed
qcom: scm: remove printing input arguments

Swetha Chikkaboraiah
authored and
NewEraCracker
committed
ASoC: soc: prevent risk of buffer overflow

Xiaojun Sang
authored and
NewEraCracker
committed
msm: kgsl: Fix overflow in sharedmem cache range operation function

Sudeep Yedalapure
authored and
NewEraCracker
committed
ASoC: msm: q6dspv2: fix potentional information leak

Meng Wang
authored and
NewEraCracker
committed

Commits on Dec 20, 2016

drivers: video: Add bounds checking in fb_copy_cmap

spfetsch
authored and
NewEraCracker
committed
soc: qcom: scm: add check to avoid buffer overflow (Edited)

Satya Durga Srinivasu Prabhala
authored and
NewEraCracker
committed

Commits on Dec 26, 2016

Revert "UPSTREAM: ppp: defer netns reference release for ppp channel"
NewEraCracker
committed
ppp: take reference on channels netns

Guillaume Nault
authored and
NewEraCracker
committed
ASoC: msm: qdsp6v2: DAP: Fix buffer overflow

ashishrjain
authored and
NewEraCracker
committed
UPSTREAM: ppp: defer netns reference release for ppp channel

congwang
authored and
NewEraCracker
committed
fs: ext4: disable support for fallocate FALLOC_FL_PUNCH_HOLE

nickdesaulniers
authored and
NewEraCracker
committed
msm: crypto: Fix integer over flow check in qce driver

Zhen Kong
authored and
NewEraCracker
committed

Commits on Jan 4, 2017

BACKPORT: Bluetooth: Fix potential NULL dereference in RFCOMM bind callback

Jaganath Kanakkassery
authored and
NewEraCracker
committed
ANDROID: trace: net: use %pK for kernel pointers

gquiche
authored and
NewEraCracker
committed

Commits on Jan 5, 2017

perf: Fix event->ctx locking

Peter Zijlstra
authored and
NewEraCracker
committed
msm: mdss: Fix NULL pointer dereference

Shalini Krishnamoorthi
authored and
NewEraCracker
committed
ring-buffer: Prevent overflow of size in ring_buffer_resize()

rostedt
authored and
NewEraCracker
committed
ASoC: msm: set pointers to NULL after kfree

Walter Yang
authored and
NewEraCracker
committed
msm: sensor: Adding mutex for actuator power down operations

Sureshnaidu Laveti
authored and
NewEraCracker
committed
radio-iris: check argument values before copying the data

Kamal Negi
authored and
NewEraCracker
committed

Commits on Jan 6, 2017

staging/android/ion : fix a race condition in the ion driver

euntaik
authored and
NewEraCracker
committed
staging: android: ion: fix up file mode

gregkh
authored and
NewEraCracker
committed
ion: use %pK instead of %p which respects kptr_restrict sysctl

Satyajit Desai
authored and
NewEraCracker
committed
ion: blacklist %p kptr_restrict

nickdesaulniers
authored and
NewEraCracker
committed

Commits on Jan 13, 2017

msm: camera: Avoid exposing kernel addresses

Azam Sadiq Pasha Kapatrala Syed
authored and
NewEraCracker
committed
msm: ipa: fix the potential heap overflow on wan-driver

Skylar Chang
authored and
NewEraCracker
committed
usb: Avoid exposing kernel addresses

Dennis Cagle
authored and
NewEraCracker
committed
msm: camera: cpp: Add validation for v4l2 ioctl arguments

Krishnankutty Kolathappilly
authored and
NewEraCracker
committed