gpu: pvr: Update to DDK 1.9.RC1.JB@2113614

Change-Id: Id62b25908d2cd0519c4d5126193ac9b18135a971
Tuna bluetooth: set rfkill state before register it

rfkill_register was turning on bluetooth module by accident because
rfkill state was not set. The default setting was used which happened to
be turning on bluetooth.
Also remove a uncessary poweroff call.

Signed-off-by: Matthew Xie <mattx@google.com>
Merge branch 'android-omap-3.0' into android-omap-tuna-3.0
Revert "gpu: pvr: Update to DDK 1.9.RC1.JB@2113614"

This reverts commit 19aecca9756540787ff2057f07ca327b9baf4dde.

Change-Id: I9be7eaddf893f58fbbe23dcd936f15daa8b306b8
Signed-off-by: Todd Poynor <toddpoynor@google.com>
Merge branch 'android-omap-3.0' into android-omap-tuna-3.0
Merge branch 'android-omap-3.0' into android-omap-tuna-3.0
ARM: omap4: tuna: enable CONFIG_UHID in defconfig

Enable CONFIG_UHID to allow userspace to inject HID packets.

Change-Id: I1da222310040de1d08952f099a74e5b0f75e76fc
Signed-off-by: Colin Cross <ccross@android.com>
misc: modem_if: link_mipi: fix the missing of initialize recv_step for next rx

After modem boots up, recv_step value didn't reset to 'IDLE' step sometimes in handshaking mode.
The 'IDLE' step means that ap is ready to receive next packet data.
If it's not 'IDLE' when modem sends packet data to ap, ap will deny the packet data by sending NAK command

bug: 6482295
Change-Id: Icf6ce444607c4744ba9cf642ec71c4e25de3cd38
Signed-off-by: wonhee <wonhee48.seo@samsung.com>
misc: modem_if: link_mipi: add message break command recovery

If modem goes into interface fault case, then modem will send 'message break' command for recovery.
After link_mipi gets 'message break' from modem,
link_mipi needs to send 'message break' command back to modem and re-open all mipi channel.

- Add removing all tx-command saved in command-q in recovery logic.
- Add reset logic for 'message break' command from modem.
- Add sending 'message break' command, when link_mipi gets 'message break' from modem.

bug: 6768080
Change-Id: I48fa18b50640a5f0c84a8b6e7cbc936f9de75569
Signed-off-by: wonhee <wonhee48.seo@samsung.com>
Merge branch 'android-omap-3.0' into android-omap-tuna-3.0
Merge branch 'android-omap-3.0' into android-omap-tuna-3.0
Merge branch 'android-omap-3.0' into android-omap-tuna-3.0
Merge branch 'android-omap-3.0' into android-omap-tuna-3.0
Merge branch 'android-omap-3.0' into android-omap-tuna-3.0
input: mms_ts: max x/y are max coordinates, not the x/y size

Set max x/y to size - 1

Change-Id: I5bf99bfb45d5ae170049cc574694882e62194e60
Signed-off-by: Dima Zavin <dima@android.com>
Merge branch 'android-omap-3.0' into android-omap-tuna-3.0
Merge branch 'android-omap-3.0' into android-omap-tuna-3.0
Merge branch 'android-omap-3.0' into android-omap-tuna-3.0
Merge branch 'android-omap-3.0' into android-omap-tuna-3.0
kernel/sys.c: fix stack memory content leak via UNAME26

commit 2702b1526c7278c4d65d78de209a465d4de2885e upstream.

Calling uname() with the UNAME26 personality set allows a leak of kernel
stack contents.  This fixes it by defensively calculating the length of
copy_to_user() call, making the len argument unsigned, and initializing
the stack buffer to zero (now technically unneeded, but hey, overkill).

CVE-2012-0957

Reported-by: PaX Team <pageexec@freemail.hu>
Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: Andi Kleen <ak@linux.intel.com>
Cc: PaX Team <pageexec@freemail.hu>
Cc: Brad Spengler <spender@grsecurity.net>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>