Merge "Merge "msm: vidc: Validate userspace buffer count""
Merge "Merge "Merge "msm: vidc: Validate userspace buffer count"""
Merge "Merge "msm: vidc: Validate userspace buffer count""
Merge "Merge "Merge "msm: vidc: Validate userspace buffer count"""
Merge "Merge "msm: vidc: Validate userspace buffer count""
Merge "Merge "Merge "msm: vidc: Validate userspace buffer count"""
Merge "Merge "msm: vidc: Validate userspace buffer count""
Merge "Merge "Merge "msm: vidc: Validate userspace buffer count"""
Merge "Merge "msm: vidc: Validate userspace buffer count""
Merge "Merge "Merge "msm: vidc: Validate userspace buffer count"""
Merge "Merge "msm: vidc: Validate userspace buffer count""
Merge "Merge "Merge "msm: vidc: Validate userspace buffer count"""
Merge "Merge "qseecom: Copy userspace buffer into kernel space before dereferencing""
msm: camera: Fix various small issues in Actuator driver

Bound check and validate userspace parameters direction,
number of steps and direction sign. Also fix possible
memory leak in certain error cases.

CRs-Fixed: 511349
Change-Id: Icaa324468574494fb40f2de78e522090806744cb
Signed-off-by: Yiduo Wang <yiduow@codeaurora.org>
Merge "Merge "msm: usbaudio: Add check for NULL before dereferencing""
arm: mach-msm: Remove the unused rmt_storage code

The rmt_storage module is no longer used.
Remove the unused module and cleanup the makefile and kconfig.

CRs-Fixed: 549951
Change-Id: Ie9ebaa2209ea9fa0df05dc892504fcb882f00f29
Signed-off-by: Nikhilesh Reddy <reddyn@codeaurora.org>
unix: fix a race condition in unix_release()

As reported by Jan, and others over the past few years, there is a
race condition caused by unix_release setting the sock->sk pointer
to NULL before properly marking the socket as dead/orphaned.  This
can cause a problem with the LSM hook security_unix_may_send() if
there is another socket attempting to write to this partially
released socket in between when sock->sk is set to NULL and it is
marked as dead/orphaned.  This patch fixes this by only setting
sock->sk to NULL after the socket has been marked as dead; I also
take the opportunity to make unix_release_sock() a void function
as it only ever returned 0/success.

Dave, I think this one should go on the -stable pile.

Special thanks to Jan for coming up with a reproducer for this
problem.

CRs-Fixed: 660580
Change-Id: I0e39b84464cf3f4c9daf8677bba444d0d6d94825
Reported-by: Jan Stancek <jan.stancek@gmail.com>
Signed-off-by: Paul Moore <pmoore@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Git-commit: ded34e0fe8fe8c2d595bfa30626654e4b87621e0
Git-repo: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/
Signed-off-by: Vignesh Radhakrishnan <vigneshr@codeaurora.org>
Merge "Merge "msm: mdss: Move histogram completion initialization to pp_init""
Merge "arm: mach-msm: Remove the unused rmt_storage code"
Merge "unix: fix a race condition in unix_release()"