PA-CAF weekly changelog 2017.09.21

project bionic/
efb49f1df bionic: Added a missing write call trapping at initialization
ee068b1b0 libc: ARM64: optimize memset.
170484db4 Speed-up ARM memcmp by leveraging NEON.
0a8d33dac libc: optimize memcpy and memmove for 32-bit kryo
3fd5b5e66 linker: Allow text relocations
06248baf7 Revert "kernel-header : add alarm type and clock type for power off alarm"
83550b23a linker: Add support for dynamic "shim" libs
daff31151 linker: Inject shim libs as if they were DT_NEEDED
60152e5fb linker: load shims prior to DT_NEEDED check
ddee46d76 Move glibc-syscalls.h into bits/.
fa7bfc177 Don't declare SYS_* constants for unavailable __NR_* constants.
315659103 libm: add AArch32 math instructions
811518277 libm: add more aarch64 hardware instructions
5abcbf0db wrapper: Reverting write call changes for N-MR1
3134f7640 libc: Always build in CAF's PropClient definitions
25d9ace71 bionic: Reverting commit as N-MR1 changes have been altered
372562d53 Compile fix after cortex-a7 refactor.
18f1cb4f1 malloc_debug: Enable signal handling for SIGWINCH(sig: 28)
4d46c8a13 linker: convert 'mov pc' instruction to 'bx'
72c66fa24 wrapper: Reverting write call changes for N-MR1
40d5e29e3 bionic: arm64: generic: strcmp: align to cache and preload
64a778f20 libc: import ARM strlen from Apple C library
43d5d6e10 Revert "Fix streaming(memcpy) performance on Cortex-A7"
113a57aa2 Revert "Compile fix after cortex-a7 refactor."
1bb0ad014 Revert "Add cortex-a7 specific routines."
f9217b842 libc: ARM: add Apple strcmp
d5bb5e846 linker: try remaining locations on library load failure
1c1049561 bionic: Add BOARD_USES_QCNE macro check for LIBC_WRAPPER
f78a72c6d bionic: Reverting commit as N-MR1 changes have been altered
2ef38a5ae libc: Cleanup libc wrapper cflags
7fdca9bf8 libc: add optimized ARM64 strrchr from newlib
73379e288 libc: arm: add NEON-optimized memchr implementation from newlib
651af6ea4 libc: import ARM strcmp from newlib
ea5586831 Set __ARM_ARCH__ correctly for ARMv8 32bit builds
4872ee5da Add support for modifying decay timer.
79e015ffa libc: Fix minor issues in memchr NEON implementation
bf8d3eff7 [BACKPORT] Add support for cortex-a73.
eadabddb5 [AArch64] Optimized memcmp
7609cdd6a libc: fix incorrectly named cortex-a73 makefile
59ed9f4fc libm: add Cortex-A73 to AArch32 math instructions list

project build/
b35cac8807 build: Add Qualcomm's helper macros
5a78c16439 Updating Security String to 2017-09-05 Bug:63846344
f712d7d611 build: envsetup: propogate return code in mka

project device/motorola/msm8916-common/
5e669ab squash pacaf commit

project device/motorola/surnia/
fd52b26 squash pacaf commit

project device/nextbit/robin/
89c8a64 init: Check boot reason prop when setting alarm_boot prop
61fce72 init: check if power off alarm is set
a72f8f1 ether: Enable sdcardfs
64aa145 n-mr2: Squash bringup for PA-CAF

project device/oneplus/oneplus2/
6b86b6a3 oneplus2: correct frp partition
c5982d3d Revert "oneplus2: copy modem firmware from where it is"
ebbe3ece oneplus2: add modem firmware
03656ac8 oneplus2: Audio merge with CAF branch LA.BF64.1.2.3_rb1.16
5c4475ea Update README.md
f4c7d1cd oneplus2: audio cleanup
e6019e5e oneplus2: stage AOSP/A sensors
af6fc4d6 NON-CM scripts
b6670672 oneplus2: enable gestures proc
55c2892e bump up booting cpus

project device/oneplus/oneplus3/
4909bd1f oneplus3: squash commit for building
417f1a78 remove qcom/common to fix build errors

project device/qcom/common/
a1ab28d8c Remove conflicting cryptfs_hw target to fix encrypted build errors
80be22ae4 common: add support for SDCLANG
d50eee7ab common: sdclang: Enable by default!
8401ec556 common: add support for SDCLANG
75b1c1689 Only warn about SDCLANG exclusion once
af4f11929 Install video seccomp policy files in /vendor
8ac28e427 common: sdclang: Enable by default!
33c2c09a1 common: add support for SDCLANG
ec7f8f788 common: sdclang: Enable by default!
f874f583a qcom-common: Drop local copy of dtbTool for dtbToolCM
dec1c515d Use CAF's dtbtool
29f866b46 power: Add support for tap-to-wake feature control
10f844fa9 Refactor TARGET_TAP_TO_WAKE_NODE
85fdbcb5c common: sdclang: Explicitly enable Automatic Vectorization
d461e4631 Revert "common: remove gestures dependencies"
c7036aade Mms: Turn on the flag to send mms via wifi
48c2e990b Telephony: Enable conference support for video calls.
ced2b926c Allow per-target dtbTool
6e832ee73 Adding wirelessCalling QuickSettingsTile to config
c87ffd634 Add QPerformance jar to PRODUCT_BOOT_JARS
08f50c308 FRP: Define overlay of GMS

project frameworks/av/
9c3451dfe0 libmedia : Fix for AudioRecord CTS test case
339020e3df frameworks/av: Set Protected flag only for secure
e49b8b8785 soundtrigger: Support multiple clients attaching to a module
4d962733e6 AudioRecord: Check object state on entering read
b77d877641 HLS: force audio/video both to start from IDR position
e9a521aa57 Revert "frameworks/av: Set Protected flag only for secure"
706b808eea audio: Reduce offload pause timeout to 3 secs
9da1f85be1 libstagefright: Add NULL check during memcpy for MediaCodecSource
d378dadc25 stagefright: MPEG4Writer: defer video stop to match last audio time
9f4d80603b audio flinger: Fix native crash during underruns for patch track
e530fda4d7 audioflinger: remove redundant adding to tracksToRemove
27c7d137ce StagefrightRecorder: avoid 30ms offset with QC AAC encoder
20854a15bc libstagefright: Check trackMeta for NULL
e58ab71329 stagefright: Optimize stop-delay for EIS enabled recording
6f70116122 stagefright: MPEG4Writer: fix Integer overflow
0020fd8cd6 Stagefright: Create CameraSource for HSR
99fe99af3b vraudioservice: Instantiation
35a21d81e2 NuPlayerRenderer: update mAnchorTimeMediaUs on new audio time
5512b5a33a Revert "update stune group for cameraserver to top-app"
400f390170 StagefrightRecorder: avoid 30ms offset in pause duration for HSR recording
50133cf84b stagefright: correct timestamp in buffer metadata
15e1b5eeb2 video: Skip wait for audio for video only recording
b8e0af2af4 frameworks/av: enable bytestream mode in extractor selectively
0a5a2710c3 soundtrigger: Modify conditional check in detach
32f5fddd25 audiopolicy: return proper devices from getDevicesForStream
67f9ec1ec8 Revert "audiopolicy: return proper devices from getDevicesForStream"
963b55c504 media : Changing time stamp manipulation in HFR recording.
fb06c12a6e stagefright: MPEG4Writer: Skip wait for audio in few conditions
f1acad3beb audio: resize resampler's inframe buffer independent of out buffer
2b43a20b55 media: Modify timestamps for HFR use case
b4a972541e Camera: Skip stream size check for whitelisted apps.
b8c93495e5 Modifying MetaData invalidates previous char*
7d2afb95de audioflinger: Use offloaded effects in case of PCM offload

project hardware/libhardware/
a2f2a158 Add gestures control [1/4]
b81a8b78 power: Add new power hints
8862f46e power: Add missing ,

project hardware/qcom/audio-caf/msm8916/
7a797d40a Equalizer: Check value size for get preset name

project hardware/qcom/audio-caf/msm8952/
0bf8b308e Equalizer: Check value size for get preset name

project hardware/qcom/audio-caf/msm8960/
01e8f3b2a Equalizer: Check value size for get preset name

project hardware/qcom/audio-caf/msm8974/
f5a8e83b8 Equalizer: Check value size for get preset name

project hardware/qcom/audio-caf/msm8994/
7da7e5ea5 Equalizer: Check value size for get preset name

project hardware/qcom/audio-caf/msm8996/
53c7f7410 Equalizer: Check value size for get preset name

project hardware/qcom/audio-caf/msm8998/
c736bfe01 Equalizer: Check value size for get preset name

project hardware/qcom/audio/default/
3f7e7022a Equalizer: Check value size for get preset name

project hardware/qcom/bt-caf/
ffb8434 Merge tag 'LA.UM.5.8.r1-02800-8x98.0' into nougat-mr2

project kernel/motorola/msm8916/
5f78e4fe99d ext4: validate s_first_meta_bg at mount time
d77d2de3203 time: Remove CONFIG_TIMER_STATS
5f36e3d905b defconfig: Remove CONFIG_TIMER_STATS
93debbcab12 wlan:Restore DXE power state when InitScanRSp fail
bdd9bedb663 wlan: Log IP address of the first Rx packet after wakeup
9cb1071d5be wlan: Remove PTK/GTK debug logs
f6b51a73f06 wlan: Add support for SAP restart in case of lte coex event
0d10b89c9aa prima: Fix array out-of-bounds & integer underflow in _iw_set_genie
15338c45ae8 wlan: Add configuration option for bad RSSI in PER based roaming
3d6b2f6d555 wlan: Check for config support before sendig carrier off
5eb5e4e1abd wlan: Replace time of the day with jiffies during scan reject
8ed9a0a1588 wlan: Request FW recovery after three mgmt TX timeout
c7a3dbaec8f wlan: Enable DFS channel for a single channel scan
e479ee9a8f0 wlan: Send proper IEs number when sec chan bcn filter is skipped
c050fc70791 wlan: Add support for new cfg80211 connect api
c01b6cd0c7c wlan: Use cfg80211_roamed_bss API to indicate the roaming
64d604cffc8 wlan: Prioritize the bssid_hint, if it fails try with other BSS
526723c1652 prima: Process pno ioctl appropriately
f91eab3fe5a wlan: Allow fastreassoc driver command for connected BSSID
204bfb4be2a wlan: Configure correct max tx power to firmware
de86641dcb7 wlan: Fix bssid hint logic to keep the AP on head of the list
8c7e0d2ddf1 wlan: Remove the support for iw_set_priv ioctl
86cf774a5ff wlan: Add NULL check for tail, probe response and assoc response
bacd0f7a4be prima: Resolve out of bound memory access, while processing setpno
ae3a5a351ba wlan: Add support in driver to do sap restart during SSR
c0e1355e484 prima: Avoid overflow of "set_bssid_hotlist" params
089a5a1778b wlan: Correct value for bad RSSI in PER based roaming
e7f4ff9052a wlan: Get debug information when the HAL_START_RSP fails
3fd8dd16e99 ANDROID: sdcardfs: Allow non-owners to touch
98bb4abca16 ANDROID: sdcardfs: Refactor configfs interface
7ae7ee98c28 ANDROID: sdcardfs: add support for user permission isolation
a9b237f85db ANDROID: sdcardfs: Remove redundant operation
373c62dd05e ANDROID: sdcardfs: Add GID Derivation to sdcardfs
c2afe43b5b9 ANDROID: sdcardfs: switch to full_name_hash and qstr
234c165582c ANDROID: sdcardfs: Switch strcasecmp for internal call
d7441477484 ANDROID: sdcardfs: Add missing path_put
162653d267e ANDROID: sdcardfs: Don't bother deleting freelist
a89a370b55d mpi: Fix NULL ptr dereference in mpi_powm() [ver #3]
4cb9520995b net/sched: pedit: make sure that offset is valid
5b0cdc0ffc9 ipc/shm: Fix shmat mmap nil-page protection
bc7264970e2 tcp: avoid infinite loop in tcp_splice_read()
bdb397a2970 ANDROID: sdcardfs: implement vm_ops->page_mkwrite
b5215dc8afe ANDROID: sdcardfs: support direct-IO (DIO) operations
0dd7b786593 perf/core: Fix concurrent sys_perf_event_open() vs. 'move_group' race
d214d662b87 qcacld-2.0: Add buf len check in wlan_hdd_cfg80211_testmode
64662f647d1 net: ipc_router: Register services only on client port
8651bbd1018 msm: camera: fix bound check of offset to avoid overread overwrite
a465429ba91 msm: camera: sensor: Validate eeprom_name string length
f47b2dacad3 msm: vidc: WARN_ON() reveals fuction addresses
ded98f1ad26 input: misc: fix heap overflow issue in hbtp_input.c
3337b3ae890 ANDROID: ion: check for kref overflow
2b5a1a19d83 msm: cpp: Fix for integer overflow in cpp
12028d1308c net: rmnet_data: Fix incorrect netlink handling
8c82ad97bf1 msm: crypto: fix issues on digest buf and copy_from_user in qcedev.c
967e06b5210 ASoC: msm: qdsp6v2: Add range checking in msm_dai_q6_set_channel_map
402f6456f87 mfd: wcd9xxx: Add range checking in function wcd9xxx_init_slimslave
7c477873a23 power: align wakeup_sources format
5ec4524b77f msm: mdss: mdss_set_rgb: Print a new line in pr_info
4fb90916122 ANDROID: sdcardfs: Fix case insensitive lookup
8fc7002ed99 ANDROID: sdcardfs: rate limit warning print
d64dddb42dc ANDROID: sdcardfs: Replace get/put with d_lock
6f141868067 ANDROID: sdcardfs: Use spin_lock_nested
56f9b9a4cae ANDROID: sdcardfs: Switch to internal case insensitive compare
bd5cc2cfa3c ANDROID: sdcardfs: Use d_invalidate instead of drop_recurisve
6fdd61e9b02 ANDROID: sdcardfs: Get the blocksize from the lower fs
7f255aebbdc ANDROID: sdcardfs: declare MODULE_ALIAS_FS
5d0c5126084 ANDROID: sdcardfs: Use case insensitive hash function
b693e89216f ANDROID: sdcardfs: move path_put outside of spinlock
cc0d723f768 ANDROID: sdcardfs: Remove uninformative prints
5f04e94496b ANDROID: sdcardfs: Use tabs instead of spaces in multiuser.h
cccb5f233bd ANDROID: sdcardfs: Fix gid issue
85e460cd948 ANDROID: sdcardfs: correct order of descriptors
7fd0c9cc2f0 ANDROID: sdcardfs: Fix formatting
d2724389179 ANDROID: sdcardfs: Fix style issues with comments
4b165933eab ANDROID: sdcardfs: remove unneeded null check
74ab225c420 ANDROID: sdcardfs: Use pr_[...] instead of printk
1008f2ba3ff ANDROID: sdcardfs: Use to kstrout
0b7094c2a3d ANDROID: sdcardfs: Use seq_puts over seq_printf
7f682fe5c64 ANDROID: sdcardfs: Fix style issues in macros
c7b7c3c1d92 ANDROID: sdcardfs: Fix incorrect hash
eaf8cfb165e harpia: Enable CONFIG_INET_DIAG_DESTROY
3357a9f6e4f UPSTREAM: udp: properly support MSG_PEEK with truncated buffers
93367c50f82 crypto: msm: check integer overflow on total data len in qcedev.c
81b11e72b23 msm: mdss: Correct the format specifiers in sscanf function
7e64c10faae avtimer: update ioctl call to query avtimer
8fb51626038 drivers: soc: qcom: Add error handling in function avtimer_ioctl
a51c3ebb9f3 sdcardfs: limit stacking depth
fa3eb55b356 ANDROID: ion: Protect kref from userspace manipulation
721b30c0dcf BACKPORT: fs: limit filesystem stacking depth
39e3d90f620 FROMLIST: CHROMIUM: usb: gadget: configfs: Fix KASAN use-after-free
98382a599cd ASoC: msm: qdsp6v2: Fix out-of-bounds access in put functions
1847a54aff1 UPSTREAM: seccomp: always propagate NO_NEW_PRIVS on tsync
719b8f9ff5c BACKPORT: HID: input: generic hidinput_input_event handler
4ab6fbfa70f wlan: send RSSI info correctly to CNE
45867b75405 wlan: Fix P2P scan faliure by updating channel list properly
f5a8e85612b wlan: Fix buffer overflow in WLANSAP_Set_WPARSNIes()
607387a5c8b wlan: SAP: During SSR, don't check for logp in progress
996b13b309c wlan: On SSR, update SAP operating band, start and end channels
e7a320406f5 prima: Wait for clear filter request's response from firmware
49a3c99d3fd wlan: Reset Rx last SSN after clear filter
d70e31f9d88 wlan: Avoid dropping packets if data packet filter is set
25e6611c0c8 Revert "sdcardfs: Flag files as non-mappable"
4936259edf5 ANDROID: sdcardfs: remove unnecessary call to do_munmap
9a7ca26b376 ANDROID: sdcardfs: copy lower inode attributes in ->ioctl
01aa6f4a6dd ANDROID: sdcardfs: fix ->llseek to update upper and lower offset
5927b598e37 ANDROID: sdcardfs: use d_splice_alias
6dea78926e6 ANDROID: sdcardfs: update module info
15232ca684f BACKPORT: UPSTREAM: sg_start_req(): make sure that there's not too many elements in iovec
1904e6746b6 BACKPORT: UPSTREAM: selinux: fix off-by-one in setprocattr
f626d871b88 ANDROID: sdcardfs: Directly pass lower file for mmap
8222eea561e Android: sdcardfs: Change cache GID value
3e5b075be02 ANDROID: sdcardfs: ->iget fixes
4e13f2d2dda Android: sdcardfs: Don't complain in fixup_lower_ownership
0e4b1e1d302 ipv4: keep skb->dst around in presence of IP options
21245c36452 wlan: Changes to force roam in low RSSI scenarios
66e902b4f2a wlan: Indicate disconnect to SME to abort pre-auth
77b5c60d02f wlan: Interface API change for NUD stats debug
018810c2c61 wlan: Fix SAP SSR reinit for uninitialized config
e2a41f3a19b wlan: Add Vendor command to set/get NUD debug stats
9621fd9f169 wlan: During ARP debug set FW in datapath for ARP
f10c36a883d wlan: Add changes to collect Arp packet stats
2ac26520605 wlan: Add ARP stats to WE_GET_STATS ioctl
0517e5fd050 wlan: Implement Duplicate Address Detection (DAD)
4fc15e5a5e3 wlan: Don't reset the dad variable for non duplicate address ARP requests
838a1d28f2a wlan: Send ADDBA req to test the connection status
529cd273c1c wlan: Refactor trigger ADDBA code for test connection status
0921eb6d94b wlan: Send DELBA for BA session set up to test connection
4f9bdfc77c4 wlan: ARP stats for only request and reponse from gateway IP
7878fc4e847 trace: resolve stack corruption due to string copy
53ce64f3aaa perf: Tighten (and fix) the grouping condition
8943374c027 ASoC: msm: qdsp6v2: completely deallocate on cal block creation failure
14ae0000022 drivers: soc: add mutex to prevent response being processed twice
aa823d6fab5 ASoC: msm: qdsp6v2: return error when copy from userspace fails
9f5837df30e ASoC: soc: prevent risk of buffer overflow
9cd9f46d51f crypto: msm: check length before copying to buf in _debug_stats_read
09a3e1a9e2f uio: fix potential use after free issue when accessing debug_buffer
db70fd091bc msm: ADSPRPC: Check for buffer overflow condition
263935c375e qseecom: improve input validatation for qseecom_send_service_cmd
39c45a34833 soc: qcom: scm: add check to avoid buffer overflow
e1d5421e222 regulator: core: Fix regualtor_ena_gpio_free not to access pin after freeing
cd7b878d29d msm: camera: sensor: Fix the improper pointer dereference
058ea030c83 msm: rndis_ipa: Remove rndis_ipa loopback functionality
1f8b379e2f6 xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window
761fde93137 msm: crypto: set CLR_CNTXT bit for crypto operations
0178a0fdc1d msm: camera: sensor: Validate i2c_freq_mode in msm_cci_set_clk_param
ab161f45f97 msm: camera: flash: Validate the power setting size
27988a0af96 ASoC: soc: msm: initialize buffer to prevent kernel data leakage
82520621321 ASoC: msm8x16-wcd: prevent out of bounds access
a9f438fb1f1 bcl: fix allocation for BCL attribute
dda299f2df3 FROMLIST: ASoC: msm-cpe-lsm: cleanup ioctl functions
57df7c6f31e UPSTREAM: tracing: Fix trace_printk() to print when not using bprintk()
95915feeccb tracing: do not leak kernel addresses
aaeb35b71e9 msm: mdss: Install sync fences after user copy
f9f34274bfc xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder
72169be01b4 msm: vidc: Protect debug_buffer access in core_info_read with lock.
a922bc9b39c drivers: soc: add size check
9bb463bc0f9 ASoC : msm: qdsp6v2: set pointer to NULL after free.
651f54b4507 mm: migrate dirty page without clear_page_dirty_for_io etc
cfb1df45f73 KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings
717fc5a4254 KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings
6f671b58b6b KEYS: Change the name of the dead type to ".dead" to prevent user access
7a09ec47bee BACKPORT: block: add blk_rq_set_block_pc()
2da5e6fb36d BACKPORT: sg: relax 16 byte cdb restriction
b0bb72b998c scsi: sg: check length passed to SG_NEXT_CMD_LEN
bb98211b5ef msm: mdss: install the rel_fence even if retire_fence is skipped
1a8a7937912 kernel: Only expose su when daemon is running
1ebf948ffa0 soc: qcom: socinfo: Protect current_image using semaphore lock.
54abf380c70 msm: thermal-dev: Protect IOCTL from race condition
5b10795e4ba misc: qcom: qdsp6v2: Add range check in function aac_in_ioctl_shared
49061e3955c soc: qcom: smem: Fix uninitialized usage of a stack variable
dae590b2c38 ASoC: soc: change audio drivers to use %pK
2ef024edcb2 usb: replace %p with %pK
62ab88c15e7 mhi: core: remove unused dbgfs function
87a357e129e wlan: Trim operation classes to max supported in change station
d9018c9e527 UPSTREAM: packet: handle too big packets for PACKET_V3
9afcaf9be18 net/packet: fix overflow in check for tp_reserve
f66ccd002c8 net/packet: fix overflow in check for tp_frame_nr
19fb2f841df UPSTREAM: net/packet: fix overflow in check for priv area size
d10b5c93a2d mm/mempolicy.c: fix error handling in set_mempolicy and mbind.
e003afe672d mm: Tighten x86 /dev/mem with zeroing reads
bed7b2e1b72 dccp/tcp: do not inherit mc_list from parent
31343be9248 tcp: do not lock listener to process SYN packets
067f882765d slim-msm: Synchronize SSR callbacks
b14ca3ad73b kernel: Fix potential refcount leak in su check
1db37c8f4ca input: touchscreen: remove msg21xx mstar touch driver
4c7d6de80c9 ASoC: Add backend user count checking
31d6852bf21 msm: mdss: Fix invalid dma attachment during fb shutdown
83c89559edb qseecom: add mutex around qseecom_set_client_mem_param
027104f123a msm: sensor: validating the flash initialization parameters
b5fddd348e8 ASoC: msm: initialize the params array before using it
ce82b9a212e msm-core: debug: Fix the number of arguments for sysfs nodes
3d9620af850 msm-core: debug: Update the number of supported pstates
21f88e11111 ipv6: fix out of bound writes in __ip6_append_data()
8c07f3920e8 sctp: do not inherit ipv6_{mc|ac|fl}_list from parent
09e946fd918 ipv6/dccp: do not inherit ipv6_mc_list from parent
99a28acec57 ipv6: Prevent overrun when parsing v6 header options
fd1b95b5e7b ANDROID: sdcardfs: Use filesystem specific hash
182cfd19b42 Revert "Revert "Android: sdcardfs: Don't do d_add for lower fs""
1b2252d79ae ANDROID: sdcardfs: Avoid setting GIDs outside of valid ranges
c47f37c4264 ANDROID: sdcardfs: Call lower fs's revalidate
7ff2e031aeb ANDROID: sdcardfs: Don't iput if we didn't igrab
1062b6dcc09 ANDROID: sdcardfs: fix sdcardfs_destroy_inode for the inode RCU approach
9e11b55e67b ANDROID: sdcardfs: Move top to its own struct
ce20ac862da ANDROID: sdcardfs: Add linux/kref.h include
62f3f309003 ANDROID: sdcardfs: Check for NULL in revalidate
27bc06fd31d ANDROID: mnt: Fix next_descendent
8733706e9ca ANDROID: sdcardfs: d_splice_alias can return error values
ed1b285f089 ANDROID: sdcardfs: remove dead function open_flags_to_access_mode()
65e538a990f BACKPORT: ip6_gre: fix ip6gre_err() invalid reads
83b882190cc UPSTREAM: ipx: call ipxitf_put() in ioctl error path
181ba4b1942 wlan: Check OUI and OUI type to confirm if its p2p action frame
6f8edfbf25b wlan: Fix suspicious dereference of pointer
9a41672e8a8 wlan: Avoid switch channel during preauth
0319cd13b97 Prima: Do not queue multiple setMaxTxPower cmd in SME pending queue
116b70ffcac wlan: Handle HID connect/disconnect indication
8415652ec1d wlan: Handle HID connect/disconnect indication
f22c8348a45 wlan:Set reg treament as per reg domain change.
99c7fd41b34 msm: wlan: Update wifi regulatory database for TW
2934a87027b cfg80211: Convert del_station() callback to use a param struct
5ac24bbf8d8 cfg80211: Specify frame and reason code for NL80211_CMD_DEL_STATION
af8b0721b0e Revert "cfg80211: Pass PTK as part of key management offload completion"
fec22c89389 Revert "cfg80211: Key management offload support for 802.1X LEAP"
d16f0d536e7 Revert "cfg80211: Key management offload support for SHA-256 and FT/8021.X"
fa2c29f7a7e Revert "nl80211: fixes for event reordering."
db3a9f67164 Revert "cfg80211: Changes to support key managment offload"
8a698256ba8 msm: wlan: update regulatory database
21d121f6fea wlan: Add interface changes for Probe resp template ver1
52bed085cd3 wlan: Update probe rsp template according to host and FW feature capability
d04c5f8222d wlan: Process roam disable after roam completion
f8de06bd663 wlan: Filter channels based on gRoamIntraBand in driver
cf1ce15c5e3 wlan: Enable IMPS/BMPS if TDLS is disabled internally
147adc130d5 wlan: Invalid error handling if watchdog thread creation fails
812bd17ad88 wlan: Validate BA tid before accessing
09d98477feb wlan: Drop assoc request if RSNIE/WPAIE parsing fail
5f69c27bdd7 wlan: Trim extn capability to max supported in change station
7941b22a11c prima: Block scan during SCO call in wlan disconnected state
27b480de0cf prima: Flush scan results during SCO call in wlan disconnected state
1bcba9cf6f0 Revert "qcacld-2.0: Add buf len check in wlan_hdd_cfg80211_testmode"
aeb1f45582b wlan: Add buf len check in wlan_hdd_cfg80211_testmode
679b7e976a3 wlan: Remove obsolete set/reset ssid hotlist
860a2d68a0b BACKPORT: ext4: fix data exposure after a crash
e4dd45896c5 BACKPORT: ALSA: timer: Fix race between read and ioctl
3fddbc5bb90 UPSTREAM: ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT
c993090182e UPSTREAM: packet: fix races in fanout_add()
88d9a1b7398 input: synaptics_dsx: add update bounds checks.
cd3465983d3 sctp: validate chunk len before actually using it
025cb1435df android: fiq_debugger: restrict access to critical commands.
629ef8e174a ping: fix a null pointer dereference
edb4311b479 ping: implement proper locking
c9fcbbe1f38 UPSTREAM: mm: propagate error from stack expansion even for guard page
3afa64d834c UPSTREAM: vm: make stack guard page errors return VM_FAULT_SIGSEGV rather than SIGBUS
c1a5c27f23f UPSTREAM: mm: larger stack guard gap, between vmas
5a019891cde UPSTREAM: mm: fix new crash in unmapped_area_topdown()
9e49aca814a msm: camera: sensor: Add boundary check for cci master
a8178ae5684 soc: pil-msa: Extend RMB registers logging on modem failures
40f1d637985 soc: pil-msa: Add module parameter to force crash system
ba02b460dda soc: qcom: pil-msa: Notify MBA about PIL loading failure
40a73b271c0 soc: qcom: pil-msa: Free mba region if metadata authentication fails
d99ea64de4f soc: qcom: pil: Allow the MBA memory to be dyanmic or a carveout
4673a01b3f5 soc: qcom: pil: Avoid possible buffer overflow during Modem boot
250086b3d50 msm: camera: don't cut to 8bits for validating enum variable
06ca2c6b676 msm: vidc: Allocate bus vote data during initialization
2e6d9a90da5 Revert "proc: smaps: Allow smaps access for CAP_SYS_RESOURCE"
4445ab5d770 ashmem: remove cache maintenance support
7ca0228290a BACKPORT: udf: Check path length when reading symlink
eb70f432f90 msm: kgsl: Fix kgsl memory allocation and free race condition
c7be08f5b32 Fixing an issue that caused DEVPORT to always be set.
eb1a0a5e66d UPSTREAM: char: Drop bogus dependency of DEVPORT on !M68K
e52ebbba098 BACKPORT: UPSTREAM: dccp: fix freeing skb too early for IPV6_RECVPKTINFO
d30c9b8ec08 fs: readdir: Fix su hide patch for non-iterate filesystems
6484e456ab8 UPSTREAM: f2fs: sanity check segment count
4a14fd81775 qcdev: Check the digest length during the SHA operations
8bff69ed468 msm: kgsl: Fix the race between context create and destroy
e468eace6cd ASoC: msm: qdspv2: add result check when audio process fail
1e0917308d7 UPSTREAM: timerfd: Protect the might cancel mechanism proper
c9b774d57e9 USB: f_qc_rndis: Prevent use-after-free for _rndis_qc
a2353d25f87 FROMLIST: f2fs: sanity check checkpoint segno and blkoff
9e44d2f3f53 msm: ipa: Fix for missing int overflow check in the refcount library
36845554c7a Input: ati_remote2 - fix crashes on detecting device with invalid descriptor
704ac65b2ec Input: powermate - fix oops with malicious USB descriptors
c85083f3bb1 Input: gtco - fix crash on detecting device without endpoints
2b3fb70155e UPSTREAM: USB: iowarrior: fix oops with malicious USB descriptors
585e4adbdfb USB: iowarrior: fix NULL-deref at probe
d675938cdb4 UPSTREAM: USB: mct_u232: add sanity checking in probe
f240ea9ebd9 USB: digi_acceleport: do sanity checking for the number of ports
378b70fe02f Input: ims-pcu - sanity check against missing interfaces
de993fd7fa0 msm: ipa: fix potential race condition ioctls
6ed5297ec9a hid: usbhid: Changes to prevent buffer overflow
1739e7c4711 fs/exec.c: account for argv/envp pointers
095ddafb912 msm: rmnet_ipa: fix security issue
41eb30c293a fs/exec: fix use after free in execve
036196a3e0b ANDROID: sdcardfs: use mount_nodev and fix a issue in sdcardfs_kill_sb
78ca1072a74 ANDROID: sdcardfs: Remove unnecessary lock
0933d5def78 ANDROID: sdcardfs: override credential for ioctl to lower fs
0fc1d73fbd5 ion: Fix unprotected userspace access
0fb4bc1b7f4 ASoC: msm: remove unused msm-compr-q6-v2
1e26414d6e3 ASoC: msm: qdsp6v2: extend validation of virtual address
bc3f2c683c6 ASoC: msm: qdsp6v2: extend validation of virtual address
c4a5b623684 Revert "msm: msm_bus: add mutex to protect cl_list"
8e5b76d97e5 msm: msm_bus: Add new APIs for bus scaling
aa43f6496a8 msm: msm_bus: Add trace events to ad-hoc bus driver
c0b3f335903 soc: qcom: msm_bus: add mutex lock for cllist data
178560adb60 wcnss: fix the potential memory leak and heap overflow
c9e7d6833f9 msm: camera: isp: fix for out of bound access array
ccc9461bb7f msm: camera: Allow driver file to be opend only once.
8e75c517e5f Prevent heap overflow in uvc driver
418ecd43f82 msm: pcie: add bounds check for debugfs register write
25559369086 msm: camera: fix off-by-one overflow in msm_isp_get_bufq
3baa58f1513 ANDROID: mnt: Fix freeing of mount data
49ec2d14f6f ANDROID: Sdcardfs: Move gid derivation under flag
653da65dcf6 ANDROID: sdcardfs: Add missing break
393be89f60c regenerate surnia_defconfig

project kernel/oneplus/msm8994/
140d5e5b83cd input: synaptics: s3320: Silence log spam
7cfc68cbb85d misc: fpc1020: Clean up interrupt handler
01bf9974ea62 qpnp-smbcharger: Publish charger voltage to the usb psy
78b21ed571b9 pwm: qpnp-pwm: add api for synchronous enable of pwms
0b49cb6ebe32 Revert "pwm: qpnp-pwm: add api for synchronous enable of pwms"
8fcd1d457b8e Add security hooks to binder and implement the hooks for SELinux.
a2b26be31493 android: binder: Use wake up hint for synchronous transactions.
3bb19c6a148c android: binder: Disable preemption while holding the global binder lock.
0ec9c1d2abd8 CHROMIUM: android: binder: Fix potential scheduling-while-atomic
4a6a8d2b1323 android: binder: split flat_binder_object.
d76609e8f1ae android: binder: support multiple context managers.
207c2d284d2f android: binder: deal with contexts in debugfs.
9aa86cb8c5d2 android: binder: support multiple /dev instances.
79ca69f688fd android: binder: refactor binder_transact()
a59a60ddbaa1 android: binder: add extra size to allocator.
daa696133157 android: binder: support for scatter-gather.
080344a6b093 android: binder: support for file-descriptor arrays.
0c63ecf8583d android: binder: use copy_from_user_preempt_disabled
a705451ffade UPSTREAM: drivers: android: correct the size of struct binder_uintptr_t for BC_DEAD_BINDER_DONE
1be2e08a79e3 binder: use group leader instead of open thread
75af596b9ec6 android: binder: move global binder state into context struct.
20b6f13b69ee android: binder: add padding to binder_fd_array_object.
7aff895f674f ANDROID: binder: add hwbinder,vndbinder to BINDER_DEVICES.
368ad75c381b UPSTREAM: capabilities: ambient capabilities
9209c847d43b BACKPORT: commoncap: don't alloc the credential unless needed in cap_task_prctl
7170a13d3c85 msm: vidc: Allow clients to specify/query the colorspace
fa75b33322b6 Revert "Handle 'sk' being NULL in UID-based routing."
a3db9bdf1f9e Revert "net: core: Support UID-based routing."
1aa35d3cc50b net: core: Add a UID field to struct sock.
0639028786c9 oneplus2: Unsetting DEVPORT from configurations.
5896df5d6ee9 seccomp: always propagate NO_NEW_PRIVS on tsync
5fe804316abf net: core: add UID to flows, rules, and routes
bebadce3730d regenerate oneplus2_defconfig
5b5ade83eb6a pwm: qpnp-pwm: add api for synchronous enable of pwms

project kernel/oneplus/msm8996/
bd454a27ead Merge tag 'LA.UM.5.5.r1-05700-8x96.0' of https://source.codeaurora.org/quic/la/kernel/msm-3.18 into cm-14.1
a4944643139 qcacld-2.0: Update to LA.UM.5.5.r1-05700-8x96.0
ba45d0ebf61 generate oneplus3_defconfig

project packages/apps/Launcher3/
0940176c3 Launcher3: implement search menu in ChooseIconActivity
2c48704b4 Launcher3: fixes to icons handling
ab485bd18 Launcher3: add the ability to choose dock color
c0468cad2 Launcher3: implement hidden app feature

project packages/apps/Mms/
0d5fe010 Mms: Add our new Messaging icon

project packages/services/Telephony/
9ca1f86d Telephony: Remove vibrate on call connected preference

project vendor/aosp/
3bd86967 pa: Update Browser Makefile
58e26016 pa: Update Browser to M60
442497de Revert "vendor: Enjoy the sweetness of Jelly"
40bbe066 vendor: merge CAF tag LA.UM.5.8.r1-02800-8x98.0
6f9b7705 vendor: include qcom target-specific config
5edaf3a0 vendor: include Qualcomm's helper macros
f9dfac13 vendor: update common.mk
3bb8624e vendor: cleanup common

project vendor/motorola/
b9ed5ef8 shamu: update blobs from NGI55D factory image

project vendor/oneplus/
69a73ed oneplus2: add modem firmware