[Galaxy Tab 2 7" Android Development] Deltadroid:
P3110 ROM security updates for May, 2017 (with additional upstream kernel security updates, including Blind Data Injection Attack Mitigation).

cm-11-20170523-NIGHTLY-p3110.zip

build

76bf27b (15 hours ago) Update Security String to 2017-05-01 (WolfEnders)
external/freetype

0fb8dd6 (3 weeks ago) Update FreeType from 2.6.2 to c38be52bf8de (2.7 + a few post-2.7 CLs) (Jungshik Shin)

frameworks/av

4ff8b71 (9 days ago) codecs: handle onReset() for a few encoders (Wonsik Kim)
4cf0d75 (9 days ago) FLACExtractor: copy protect mWriteBuffer (Robert Shih)
dc2dfb0 (2 weeks ago) Add bounds check in SoftAACEncoder2::onQueueFilled() (Ray Essick)
fd0ece2 (2 weeks ago) Fix NPDs in h263 decoder (Marco Nelissen)
dceb630 (2 weeks ago) Fix integer overflow and divide-by-zero (Marco Nelissen)
4772999 (2 weeks ago) Fix out of bounds access (Marco Nelissen)

frameworks/base

28a24a4 (9 days ago) [DO NOT MERGE] Check bounds in offsetToPtr (Fyodor Kupolov)

kernel/samsung/espresso10

4f9278d (12 hours ago) tcp: do_tcp_sendpages() must try to push data out on oom conditions (Willy Tarreau)
48c1ae9 (13 hours ago) vfs: fix uninitialized flags in splice_to_pipe() (Miklos Szeredi)
f6f0de8 (13 hours ago) tracing: Fix crash from reading trace_pipe with sendfile (Steven Rostedt (Red Hat))
b3390f0 (13 hours ago) vfs: Avoid softlockups with sendfile(2) (Jan Kara)
c729720 (13 hours ago) vfs: Make sendfile(2) killable even better (Jan Kara)
f288aef (13 hours ago) splice: sendfile() at once fails for big files (Christophe Leroy)
91a88b9 (13 hours ago) splice: Apply generic position and size checks to each write (Ben Hutchings)
a5c1cca (13 hours ago) sctp: start t5 timer only when peer rwnd is 0 and local state is SHUTDOWN_PENDING (lucien)
6517401 (13 hours ago) net: possible use after free in dst_release (Francesco Ruggeri)
c295f41 (13 hours ago) net: fix a race in dst_release() (Eric Dumazet)
635b397 (13 hours ago) net/ipv6: add sysctl option accept_ra_min_hop_limit (Hangbin Liu)
4a13b41 (13 hours ago) ipv6/udp: use sticky pktinfo egress ifindex on connect() (Paolo Abeni)
2fd82bc (13 hours ago) ipv6: update skb->csum when CE mark is propagated (Eric Dumazet)
c8dfb66 (13 hours ago) tcp_yeah: don't set ssthresh below 2 (Neal Cardwell)
1d181df (13 hours ago) sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long)
46b21216 (13 hours ago) splice: handle zero nr_pages in splice_to_pipe() (Rabin Vincent)
3acffaf (13 hours ago) sctp: Fix port hash table size computation (Neil Horman)
810720b (13 hours ago) ipv4: fix memory leaks in ip_cmsg_send() callers (Eric Dumazet)
9342532 (13 hours ago) sctp: lack the check for ports in sctp_v6_cmp_addr (Xin Long)
21575a5 (13 hours ago) ipv4: l2tp: fix a potential issue in l2tp_ip_recv (Haishuang Yan)
55bb74b (13 hours ago) net: validate variable length ll headers (Willem de Bruijn)
0061340 (13 hours ago) vlan: Fix header ops passthru when doing TX VLAN offload. (David S. Miller)
3ee7140 (13 hours ago) nf_conntrack: avoid kernel pointer value leak in slab name (Linus Torvalds)
d252183 (13 hours ago) net/sched: em_meta: Fix 'meta vlan' to correctly recognize zero VID frames (Shmulik Ladkani)
1777c9d (13 hours ago) net, sched: fix soft lockup in tc_classify (Daniel Borkmann)
28a081a (14 hours ago) ipmr/ip6mr: Initialize the last assert time of mfc entries. (Tom Goff)
fd6118c (14 hours ago) sctp: deny peeloff operation on asocs with threads sleeping on it (Marcelo Ricardo Leitner)
6196086 (14 hours ago) sctp: avoid BUG_ON on sctp_wait_for_sndbuf (Marcelo Ricardo Leitner)
5cde0f2 (14 hours ago) mld: do not remove mld souce list info when set link down (Hangbin Liu)
2d04463 (14 hours ago) igmp, mld: Fix memory leak in igmpv3/mld_del_delrec() (Hangbin Liu)
3050077 (14 hours ago) igmp: do not remove igmp souce list info when set link down (Hangbin Liu)
c1ebf9b (14 hours ago) ipv6: pointer math error in ip6_tnl_parse_tlv_enc_lim() (Dan Carpenter)
9a9de2d (14 hours ago) ipv6: fix ip6_tnl_parse_tlv_enc_lim() (Eric Dumazet)
1b7df57 (14 hours ago) net: socket: fix recvmmsg not returning error from sock_error (Maxime Jayat)
3a8bdd1 (14 hours ago) ipv6: addrconf: Avoid addrconf_disable_change() using RCU read-side lock (Kefeng Wang)
798ae25 (14 hours ago) igmp: Make igmp group member RFC 3376 compliant (Michal Tesar)
f93f3a5 (14 hours ago) ipv6: handle -EFAULT from skb_copy_bits (Dave Jones)
1fa033c (14 hours ago) netvsc: reduce maximum GSO size (stephen hemminger)
1ece35a (14 hours ago) net/dccp: fix use-after-free in dccp_invalid_packet (Eric Dumazet)
5e1c513 (14 hours ago) sctp: assign assoc_id earlier in __sctp_connect (Marcelo Ricardo Leitner)
31bbd19 (14 hours ago) ipv6: dccp: fix out of bound access in dccp_v6_err() (Eric Dumazet)
5153daf (14 hours ago) dccp: fix out of bound access in dccp_v4_err() (Eric Dumazet)
9a3123e (14 hours ago) dccp: do not send reset to already closed sockets (Eric Dumazet)
75be96b (14 hours ago) net: mangle zero checksum in skb_checksum_help() (Eric Dumazet)
aa99a4e (14 hours ago) net: clear sk_err_soft in sk_clone_lock() (Eric Dumazet)
9b1e605 (14 hours ago) net: sctp, forbid negative length (Jiri Slaby)
3f59fb3 (14 hours ago) net: avoid sk_forward_alloc overflows (Eric Dumazet)
b6b861f (14 hours ago) net: fix sk_mem_reclaim_partial() (Eric Dumazet)
4a3b7b6 (14 hours ago) sock: fix sendmmsg for partial sendmsg (Soheil Hassas Yeganeh)
b46b8af (2 weeks ago) tcp: make challenge acks less predictable (Eric Dumazet)
a79aa75 (2 weeks ago) tcp: RFC 5961 5.2 Blind Data Injection Attack Mitigation (Eric Dumazet)
eeee63c (2 weeks ago) tcp: tcp_replace_ts_recent() should not be called from tcp_validate_incoming() (Eric Dumazet)
aa44531 (2 weeks ago) tcp: refine SYN handling in tcp_validate_incoming (Eric Dumazet)
dab6b02 (2 weeks ago) tcp: implement RFC 5961 4.2 (Eric Dumazet)
c462e0b (2 weeks ago) tcp: implement RFC 5961 3.2 (Eric Dumazet)
5166307 (2 weeks ago) tcp: fix build error if !CONFIG_SYN_COOKIES (Eric Dumazet)
21d7b19 (2 weeks ago) tcp: Change possible SYN flooding messages (Eric Dumazet)
09cc48c (2 weeks ago) ping: implement proper locking (Eric Dumazet)
960c975 (6 weeks ago) udp: properly support MSG_PEEK with truncated buffers (Eric Dumazet)
24fbf44 (6 weeks ago) Revert "udp: remove redundant variable" (David S. Miller)