qseecom: Validate pointer offset in qseecom_send_modfd_cmd

Validate cmd_req_buf pointer offset in qseecom_send_modfy_cmd, and
make sure cmd buffer address to be within shared bufffer.

Conflicts:
	drivers/misc/qseecom.c

Change-Id: I431511a92ab2cccbc2daebc0cf76cc3872689a97
Signed-off-by: Zhen Kong <zkong@codeaurora.org>
Signed-off-by: Vignesh Veeramani <quicvignes@codeaurora.org>
mmc: core : fix arbitrary read/write to user space

In the MMC card debug_fs the read and write handlers use the strlcat
and sscanf, without checking the pointer given.
Since the pointer is not checked it is possible to write
everywhere (ring 0 or 3).
In order to fix it, an access_ok function is being used to verify
the buffer's pointer supplied by user is valid.

CRs-fixed: 545716
Change-Id: Ia710b6af5a95974fc930ca902e8ff18afa4e17ba
Signed-off-by: Raviv Shvili <rshvili@codeaurora.org>
Merge "mmc: core : fix arbitrary read/write to user space"
kernel/dvb: Fix Target crash when performing PVR playback trick modes randomly

division by zero causes CPU 0 tainted, ts_packet_num is becoming zero
during fast trick mode. Conditional check avoids this crash.

CRs-Fixed: 638994
Change-Id: I55871594a28154d4b0d57c41bea7cead3bc9c5da
Signed-off-by: c_hharis <hharis@codeaurora.org>
Merge "kernel/dvb: Fix Target crash when performing PVR playback trick modes randomly"
Merge "qseecom: Validate pointer offset in qseecom_send_modfd_cmd"
kernel/dvb: Fix crash with "-" index in dvb_ringbuffer_pkt_read

if index of next streambuffer is zero, mutex will be released.

CRs-Fixed: 668668
Change-Id: I02b3879534b8644541a6b2b7d35f7f5e158b0a86
Signed-off-by: c_hharis <hharis@codeaurora.org>
Merge "kernel/dvb: Fix crash with "-" index in dvb_ringbuffer_pkt_read"
kernel/msm : kernel code changes for real EOF timing detection

mpq_int_vid_dec_decode_frame_eos function is implemented to mark EOS is
during Normal Playback. It is called from the DMX_EOS_PACKET in fucntion
mpq_get_frame_and_write.

Change-Id: Iac6d25d6b93d6cd55df6e7db061d6009ba76af24
Signed-off-by: Dishendra Deshmukh <ddeshm@codeaurora.org>
Merge "kernel/msm : kernel code changes for real EOF timing detection"