&&&????
del not support
ASoC: msm: Null dereference check added

In asm_read function we should check buffer pointer
before it is dererferenced.

CRs-Fixed: 612682
Change-Id: I1968c038e1d35381bf174000287d542441e41092
Signed-off-by: Anish Kumar <kanish@codeaurora.org>
(cherry picked from commit f9196fba8024d7d9de928a89b5849fa6b0bee3c3)
msm-camera: Fix various small issues in Actuator driver

Bound check and validate userspace parameters direction,
number of steps and direction sign. Also fix possible
memory leak in certain error cases.

CRs-Fixed: 511349

Conflicts:
        drivers/media/video/msm/actuators/msm_actuator.c

Change-Id: I05a3f63583845851df36b122f2079d345657cb99
Signed-off-by: Abhinay Reddy Vanipally <avanip@codeaurora.org>
(cherry picked from commit 555756e6de946e18812b15bb7867148b1054a2a1)
qseecom: Validate pointer offset in qseecom_send_modfd_cmd.

Validate cmd_req_buf pointer offset in qseecom_send_modfy_cmd, and
make sure cmd buffer address to be within shared bufffer.

Conflicts:
	drivers/misc/qseecom.c

Change-Id: I431511a92ab2cccbc2daebc0cf76cc3872689a97
Signed-off-by: Abhinay Reddy Vanipally <avanip@codeaurora.org>
(cherry picked from commit 1b7fb4be57d022e6f04e1ff449c51f790c41e94d)
Fix for compilation issues.

Change-Id: I255c8378fd8b573cef3e938ca67e10d6e7de1e6e
Signed-off-by: Gopal G Goberu <ggober@codeaurora.org>
(cherry picked from commit 3ffef73a3b8806ea5155d4210d071e64752aa29d)

Conflicts:
	drivers/media/radio/radio-tavarua.c
msm-camera: Fix to prevent kernel heap buffer overflow in actuator

Fix to prevent kernel heap buffer overflow allows user
controlled data to be written to the heap via the
msm_camera actuator IOCTLs

Change-Id: I5d511e8c1aa2f76f4209a6712a58d8757bc53367
CRs-Fixed: 545979
Signed-off-by: Katta Santhisindhu <kattas@codeaurora.org>
Signed-off-by: Monika Alekhya <malekh@codeaurora.org>
Signed-off-by: Gopal G Goberu <ggober@codeaurora.org>
(cherry picked from commit bc73ffdbdba24fdf5bdc0b81ecde7053f2794214)
msm-camera:  Return from DQBUF ioctl in case of error.

Incase the vb2_dqbuf call returns error, we are continuing
ahead and trying to access the fields of the vb2 buffer which
may not be initialized yet. Avoid this by checking the
return value of vb2_dqbuf and return immediately in case of
errors.

CRs-Fixed: 495635

Change-Id: Iaf8173247d44b457e7800d283e699a1514bb5ae5
Signed-off-by: Katta Santhisindhu <kattas@codeaurora.org>
(cherry picked from commit 1947f953bd05958d6d160ebdab25334a367376d4)