[Galaxy Tab S2 Original Android Development] Deltadroid:
lineage-14.1-20191204-NIGHTLY-gts210vewifi.zip

Security Patch Level: December 2019

Notes:

Updated bash to 4.3.48

Changelog:

android
e46370ab (27 hours ago) manifest: Updates for 2019-12 N ASB (Kevin F. Haggerty)

build
06469d832 (26 hours ago) Bump Security String to 2019-12-05 (Vasyl Gello)

external/bash
eda2c2a (9 days ago) bash: BASH_CMD is writable in restricted bash shells (Chet Ramey)
ca4d835 (9 days ago) bash: Popd controlled free (Chet Ramey)
40d8fd9 (9 days ago) Bash-4.3 patch 48 (Chet Ramey)
7986617 (9 days ago) Bash-4.3 patch 47 (Chet Ramey)
da932a6 (9 days ago) Bash-4.3 patch 46 (Chet Ramey)
a8b0fd8 (9 days ago) Bash-4.3 patch 45 (Chet Ramey)
e22369b (9 days ago) Bash-4.3 patch 44 (Chet Ramey)
c191862 (10 days ago) Bash-4.3 patch 43 (Chet Ramey)

external/ImageMagick
bc9c8272d (26 hours ago) https://github.com/ImageMagick/ImageMagick/issues/1554 (Cristy)

external/iptables
5dff3468 (10 days ago) iptables: Bump config to 1.4.21 (syphyr)
cd149b05 (10 days ago) iptables 1.4.21 release (Pablo Neira Ayuso)
2df6519c (10 days ago) utils: nfsynproxy: fix error while compiling the BPF filter (Pablo Neira Ayuso)
afd5f271 (10 days ago) utils: add nfsynproxy tool (Patrick McHardy)
bbea8814 (10 days ago) extensions: add SYNPROXY extension (Patrick McHardy)
d7c9d328 (10 days ago) iptables: extensions/GNUMakefile.in use CPPFLAGS (Laurence J. Lane)
90ff8958 (10 days ago) iptables: libxt_recent.{c,man} dead URL (Laurence J. Lane)
14ed804c (10 days ago) build: add software version to manpage first line at configure stage (Pablo Neira Ayuso)
333cb6ac (10 days ago) iptables: iptables-xm1.1 correct man section (Laurence J. Lane)
c5cd5c52 (10 days ago) iptables: spurious error in load_extension (Phil Oester)
1efc61c1 (10 days ago) doc: merge ip6table man pages into ipv4 ones (Florian Westphal)
ee92d1aa (10 days ago) xtables: trivial spelling fix (stephen hemminger)
c5a3b12e (10 days ago) iptables: libxt_string.man add examples (Laurence J. Lane)
e70e9005 (10 days ago) extensions: libxt_socket: update man page (Florian Westphal)
c9ee3745 (10 days ago) doc: add libnetfilter_queue pointer to libxt_NFQUEUE.man (Florian Westphal)
f9eafd13 (10 days ago) extensions: libxt_LOG: use generic syslog reference in manpage (Laurence J. Lane)
9f5f6938 (10 days ago) iptables: libxt_conntrack.man extraneous commas (Laurence J. Lane)
1f43d193 (10 days ago) iptables: libxt_hashlimit.man: correct address (Laurence J. Lane)
b531686d (10 days ago) extensions: libxt_cluster: add note on arptables-jf (Pablo Neira Ayuso)
e9f89639 (10 days ago) iptables: libip(6)t_REJECT.man default icmp types (Laurence J. Lane)
7179d852 (10 days ago) extensions: libxt_set, libxt_SET: check the set family too (Jozsef Kadlecsik)
ff72d82d (10 days ago) ip6tables: Use consistent exit code for EAGAIN (Kevin Cernekee)
ada2219b (10 days ago) iptables: improve chain name validation (Phil Oester)
7672e146 (10 days ago) ip[6]tables: fix incorrect alignment in commands_v_options (Pablo Neira Ayuso)
071b3748 (10 days ago) libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks (Phil Oester)

external/libhevc
c87a59c (26 hours ago) Check change in CTB size when decoding multiple SPS with same id (Harish Mahendrakar)
f58e915 (26 hours ago) decoder: Reset slice header at start of slice header decode (Harish Mahendrakar)

frameworks/base
0f57cbce5b0 (20 minutes ago) TextLine: Prevent OOB reads in measure() (Vasyl Gello)
8186aacfb66 (2 hours ago) RESTRICT AUTOMERGE Do not compute outside given range in TextLine (Seigo Nonaka)

hardware/qcom/display-caf/msm8952
afb35d45c (2 weeks ago) Gralloc: Validate buffer parameters during importBuffer call (Subash Chander)

hardware/qcom/media-caf/msm8952
289765973 (2 weeks ago) mm-video-v4l2: Protect buffer access and increase input buffer size. (Sri Karri)

kernel/samsung/msm8976
d70faa7ef2dae (3 hours ago) USB: gadget: f_midi: fixing a possible double-free in f_midi (Yavuz, Tuba)
0d75001e6cc63 (3 hours ago) usb: gadget: f_midi: fail if set_alt fails to allocate requests (Felipe F. Tonello)
18abfd142cb5b (3 hours ago) usb: gadget: f_midi: fix leak on failed to enqueue out requests (Felipe F. Tonello)
d655fe2a95f43 (3 hours ago) qcacld-2.0: Fix potential buffer overflow htt_t2h_msg_handler (Tiger Yu)
dafb3525f7473 (3 hours ago) qcacld-2.0: Fix buffer overflow in fill_ieee80211_hdr_data (Alok Kumar)
f661674b62298 (3 days ago) qcacld-2.0: Fix SAP restart failure (Liangwei Dong)
30e1c90d8f8e8 (3 days ago) qcacld-2.0: Add ini to force sap into 11n for 11ac (Rajeev Kumar Sirasanagandla)
0b77f98fb9559 (3 days ago) wireguard: Update submodule to 0.0.20191127 (syphyr)
8508df2da7b9d (3 days ago) Revert "fix O_SYNC|O_APPEND syncing the wrong range on write()" (syphyr)
4fdacd5522c65 (9 days ago) msm: vidc: Add checks to avoid OOB access(refined) (Sanjay Singh)
8a44787f79453 (9 days ago) soc: msm-pcm: Add missing mutex lock to protect prvt data (Soumya Managoli)
8ab55a44401ee (9 days ago) Revert "msm: vidc: Add checks to avoid OOB access." (Sanjay Singh)
67f8be7e11650 (9 days ago) soc: msm-pcm: Add mutex lock to protect prvt data (Soumya Managoli)
db7739b1c121e (9 days ago) mm-camera2:isp2: Release buffer lock after use (VijayaKumar T M)
7584db90c1771 (9 days ago) mm-camera2:isp2: Handle use after free buffer (Meera Gande)
d6a3ae4596229 (9 days ago) asoc: msm-pcm: Added lock in controls _put() and _get() callback (Soumya Managoli)
160394e7fdcc4 (2 weeks ago) qcacld-2.0: Remove off-by-one write condition in schBeaconProcess (Will Huang)
33676a69850ff (2 weeks ago) mld: fix memory leak in mld_del_delrec() (Eric Dumazet)
46f531112ef01 (2 weeks ago) arm64: compat: Allow single-byte watchpoints on all addresses (Will Deacon)
d299fd6c11c34 (2 weeks ago) asm-generic: fix -Wtype-limits compiler warnings (Qian Cai)
74498c8b42fc7 (2 weeks ago) dm btree: fix order of block initialization in btree_split_beneath (ZhangXiaoxu)
f2d6fc3251b1c (2 weeks ago) dm table: fix invalid memory accesses with too high sector number (Mikulas Patocka)
ca2ba6be71db5 (2 weeks ago) genirq: Prevent NULL pointer dereference in resend_irqs() (Yunfeng Ye)
34b173593b545 (2 weeks ago) keys: Fix missing null pointer check in request_key_auth_describe() (Hillf Danton)
e0caf88e1660b (2 weeks ago) net: bridge: mcast: don't delete permanent entries when fast leave is enabled (Nikolay Aleksandrov)
5e217880e86ac (2 weeks ago) selinux: fix memory leak in policydb_init() (Ondrej Mosnacek)
e014276fdbfbd (2 weeks ago) sh: kernel: hw_breakpoint: Fix missing break in switch statement (Gustavo A. R. Silva)
e98aa6cb2144d (2 weeks ago) sound: fix a memory leak bug (Wenwen Wang)
348782cd88ca8 (2 weeks ago) usb: cdc-acm: make sure a refcount is taken early enough (Oliver Neukum)
67db40a72b854 (2 weeks ago) USB: cdc-wdm: fix race between write and disconnect due to flag abuse (Oliver Neukum)
e9b0b3b2b7961 (2 weeks ago) USB: core: Fix races in character device registration and deregistraion (Alan Stern

kernel/samsung/msm8976/net/wireguard
88f34aa (2 days ago) ipc: make sure userspace communication frees wgdevice (Jason A. Donenfeld)
f99a92c (5 days ago) send: avoid touching skb->{next,prev} directly (Jason A. Donenfeld)
c48a04f (5 days ago) device: prepare skb_list_walk_safe for upstreaming (Jason A. Donenfeld)
9f8ab32 (6 days ago) send: use kfree_skb_list (Jason A. Donenfeld)
2fc187e (6 days ago) wg-quick: linux: have remove_iptables return true (Jason A. Donenfeld)
19b2fb7 (6 days ago) wg-quick: linux: ensure postdown hooks execute (Jason A. Donenfeld)
3a7750a (7 days ago) netlink: prepare for removal of genl_family_attrbuf in 5.5 (Jason A. Donenfeld)
490c0d3 (7 days ago) wg-quick: linux: suppress error when finding unused table (Jason A. Donenfeld)
7fc30dd (7 days ago) version: bump snapshot (Jason A. Donenfeld)
20cf26f (7 days ago) tools: add syncconf command (Jason A. Donenfeld)
cf3948d (7 days ago) reresolve-dns: remove invalid anchors on regex match (Jason A. Donenfeld)
1f96cdc (7 days ago) qemu: bump version (Jason A. Donenfeld)
bcb5513 (7 days ago) qemu: respect PATH when finding CBUILD (Jason A. Donenfeld)
7b51df7 (7 days ago) qemu: work around build bug with powerpc64le (Jason A. Donenfeld)
dd55a14 (7 days ago) wg-quick: linux: filter bogus injected packets and don't disable rpfilter (Jason A. Donenfeld)
0fadbc4 (8 days ago) wg-quick: linux: only touch net.ipv4 for v4 (Jason A. Donenfeld)
f2bd8c8 (8 days ago) allowedips: avoid double lock in selftest error case (Jason A. Donenfeld)
420bd19 (8 days ago) socket: remove redundant check of new4 (Jason A. Donenfeld)
d0eb40c (8 days ago) allowedips: safely dereference rcu roots (Jason A. Donenfeld)

packages/apps/Email
c16e3d0b9 (26 hours ago) Deleted "" in "com.android.email.activity.ComposeActivityEmailExternal" activity of the AndroidManifest.xml as part of cleanup. (Raman Tenneti)
6bb2a7416 (26 hours ago) AOSP/Email - Secure UPDATE_WIDGET receiver with a new permission (Raman Tenneti)
777362457 (26 hours ago) AOSP/Email - bug fix: do not allow composing message with hidden private data attachments - Switch intent filtering to be blacklist based rather than whitelist based. (Raman Tenneti)

packages/apps/Jelly
970941e (4 days ago) Jelly: Use try-with-resource (Luca Stefani)

packages/apps/UnifiedEmail
03bd19c1e (26 hours ago) AOSP/UnifiedEmail - bug fix: do not allow composing message with hidden private data attachments - Switch intent filtering to be blacklist based rather than whitelist based. (Raman Tenneti)
47cef20c8 (26 hours ago) AOSP/UnifiedEmail - Secure UPDATE_WIDGET receiver with a new permission (Raman Tenneti)

system/bt
567d6ecb9 (26 hours ago) SDP: Disconnect when there is a bad length (Zongheng Wang)
c4f9e832d (26 hours ago) Use memcpy instead of casting to convert device_class to int (Rahul Sabnis)
84cc3cc5e (26 hours ago) SDP: disconnect if sdp_copy_raw_data fails (Zongheng Wang)
327bb7d61 (26 hours ago) JustWorks: Auto-accept only incoming temporary pairing. (Martin Brabham)
1c52e854b (26 hours ago) DO NOT MERGE: btif: require pairing dialog for JustWorks SSP (Martin Brabham)

system/netd
b5c3fe8 (10 days ago) Unsigned integer overflow sanitization for netd/server (Thurston Hou Yeen Dang)
0dfec20 (10 days ago) Fix google-explicit-constructor warnings. (Chih-Hung Hsieh)
2b418c7 (10 days ago) Log the time it takes netd to start up. (Lorenzo Colitti)
3c272f5 (10 days ago) FwMarkServer.cpp: Add O_CLOEXEC to received FDs (Nick Kralevich)
147d047 (10 days ago) SockDiag.cpp: Add O_CLOEXEC to tcpdiag sockets (Nick Kralevich)
bea94d3 (10 days ago) Fix clang static analyzer warnings. (Manoj Gupta)
7aee5e8 (10 days ago) TetherController.cpp: add O_CLOEXEC (Nick Kralevich)
73e902f (10 days ago) Cache flushing no longer occurs updating DNS for a single netid (Erik Kline)
5f01e7f (10 days ago) Clear Element.mRef immediately after deallocating it (Ken Chen)
af314f6 (10 days ago) Fix fortify_fatal issue during DNSServiceProcessResult() (Sehee Park)
297e6f8 (10 days ago) BACKPORT: Avoid netlink socket address conflict (Joel Scherpelz)
0cd7a28 (10 days ago) Really always allow networking on loopback. (Lorenzo Colitti)