tree d65968d5c1cee1c8cf97fdea0461d9d66e904490
parent c4fc0287913f2c8f85702770d5f799c60a7bb91f
author SecurityBot <android-nexus-securitybot@system.gserviceaccount.com> 1618233403 -0700
committer SecurityBot <android-nexus-securitybot@system.gserviceaccount.com> 1618233403 -0700

sunfish: update kernel-and-modules prebuilt

Linux version 4.14.222-g8eee35818454-ab7275981 (android-
    build@abfarm767) (Android (7211189, based on r416183) clang
    version 12.0.4 (https://android.googlesource.com/toolchain/llvm-
    project c935d99d7cf2016289302412d708641d52d2f7ee)) #1 SMP PREEMPT
    Mon Apr 12 10:29:41 UTC 2021

private/msm-google: (50 changes)
  8eee3581 Merge android-msm-pixel-4.14-rvc-qpr3 into android-msm-pixel-4.14
  0a226551 Merge android-msm-floral-4.14-rvc-qpr3 into android-msm-pixel-4.14
  5c4f51c0 Merge branch 'android-msm-floral-4.14-rvc-security' into android-msm-floral-4.14-rvc-qpr3
  db3a1032 msm: ipa3: Add check to validate rule_cnt
  0bde9a9a Merge branch 'android-msm-pixel-4.14-rvc-security' into android-msm-pixel-4.14-rvc-qpr3
  88ae0c26 p9221_charger: use txid to identify devices that implement DD
  0a9d0b2f Merge android-msm-floral-4.14-rvc-qpr2 into android-msm-floral-4.14-rvc-qpr3
  a6965315 Merge android-msm-pixel-4.14-rvc-qpr2 into android-msm-pixel-4.14-rvc-qpr3
  f62e86c2 google_battery: fix fake_temp not work
  a0662a0b HID: make arrays usage and value to be the same
  25ebb20e HID: make arrays usage and value to be the same
  dec1d9be msm: ipa: Fix buffer overflow issue
  da4bf531 msm: ipa: Fix buffer overflow issue
  7e38e52e qseecom: Added boundary checks between two subsequent fields
  01ce0bb4 qseecom: Added boundary checks between two subsequent fields
  baac2aa5 msm: ipa3: Add check to validate rule_cnt
  395e2173 fs/eventpoll.c: fix bad merge resolution in ep_create_wakeup_source()
  7ad36f26 Revert "spi-geni-qcom: add debug log to track SPI stability issue"
  e4ae20f2 fs/eventpoll.c: fix bad merge resolution in ep_create_wakeup_source()
  122a67fc snd: codecs: adnc: added boundary check for apll_clk and bit_clk
  8ff14d06 futex: Handle faults correctly for PI futexes
  add51e84 futex: Handle faults correctly for PI futexes
  c2d5ddc1 futex: Simplify fixup_pi_state_owner()
  230543b9 futex: Simplify fixup_pi_state_owner()
  9abb3806 futex: Use pi_state_update_owner() in put_pi_state()
  f6d356e1 futex: Use pi_state_update_owner() in put_pi_state()
  ff308aad rtmutex: Remove unused argument from rt_mutex_proxy_unlock()
  dcc3f804 rtmutex: Remove unused argument from rt_mutex_proxy_unlock()
  2b3ebc1d futex: Provide and use pi_state_update_owner()
  6cebce2f futex: Provide and use pi_state_update_owner()
  2be4a7e2 futex: Replace pointless printk in fixup_owner()
  1e075ed7 futex: Replace pointless printk in fixup_owner()
  380879b6 futex: Ensure the correct return value from futex_lock_pi()
  2bad7bda futex: Ensure the correct return value from futex_lock_pi()
  548ba761 Merge branch 'android-msm-pixel-4.14-rvc-security' into android-msm-pixel-4.14-rvc-qpr2
  af03eef7 Merge branch 'android-msm-floral-4.14-rvc-security' into android-msm-floral-4.14-rvc-qpr2
  49bb5b06 msm: kgsl: Deregister gpu address on memdesc_sg_virt failure
  ec3c8cf0 msm: kgsl: Protect the memdesc->gpuaddr in SVM use cases
  240fb9f6 msm: kgsl: Stop using memdesc->usermem
  0acbe768 msm: kgsl: Deregister gpu address on memdesc_sg_virt failure
  4e8ec5f6 msm: kgsl: Protect the memdesc->gpuaddr in SVM use cases
  b514f242 msm: kgsl: Stop using memdesc->usermem
  a9ac4a36 msm: kgsl: Correct the refcount on current process PID
  01a39b46 msm: adsprpc: Avoid race condition during map find and free
  d27fcbf7 max1720x_battery: Fix -Wtautological-unsigned-zero-compare warnings
  edc05261 google_charger: add more checks to switch to 5V PD
  05a0564a msm: kgsl: Correct the refcount on current process PID
  99282a47 msm: kgsl: skip if requested address doesn't fall in the svm range
  2081f33a msm:ADSPRPC :Fix to avoid Use after free in fastrpc_internal_munmap
  e5e269f2 msm:ADSPRPC :Fix to avoid Use after free in fastrpc_internal_munmap

private/msm-google-modules/wlan/qca-wifi-host-cmn: (20 changes)
  66ab9de0 Merge android-msm-pixel-4.14-rvc-qpr3 into android-msm-pixel-4.14
  5c0de950 Merge android-msm-floral-4.14-rvc-qpr3 into android-msm-pixel-4.14
  33c6b064 qcacmn: Modify the WIDE_BW_CHAN_SWITCH IE length check
  3e19812c qcacmn: Add CDP intf to flush fragments for a particular peer
  30905b9a qcacmn: Add length check in beacon IE parsing function
  2d034dd2 qcacmn: Fix out of bound read issue in FILS Indication IE parse
  79a559a9 qcacmn: Modify the WIDE_BW_CHAN_SWITCH IE length check
  c4bd328d qcacmn: Add CDP intf to flush fragments for a particular peer
  f5e2ac6f qcacmn: Add length check in beacon IE parsing function
  4cab877d qcacmn: Fix out of bound read issue in FILS Indication IE parse
  e4e062da qcacmn: Fix out of bound read issue in ESP ie parse
  efe7adc4 qcacmn: acquire lock before update connection list
  c53a0ae8 qcacmn: Access scan_req_q under lock
  cea5ad8c qcacmn: Enqueue scan request only after scan scheduling is success
  e7d4167c qcacmn: Fix potential oob issue in wlan_parse_wapi_ie()
  c8ed5810 qcacmn: Fix OOB issue for bwnss oui
  a7dc20b0 qcacmn: Fix possible out of bound access
  0f710160 qcacmn: Reduce the level of logs for reg-domain
  fd386978 qcacmn: Validate NDP app info length before accessing NDP app info
  a54e6e13 qcacmn: Add length check in ndp event handler

private/msm-google-modules/wlan/qcacld-3.0: (28 changes)
  a8bc2d6e Merge android-msm-pixel-4.14-rvc-qpr3 into android-msm-pixel-4.14
  aa7d1478 Merge android-msm-floral-4.14-rvc-qpr3 into android-msm-pixel-4.14
  1a6f8ea3 qcacld-3.0: Limit the BA window buffer size
  f4af73b1 qcacld-3.0: Limit the BA window buffer size
  4d4683ef qcacld-3.0: Do not intrabss forward fragmented EAPOL frames
  bca575c5 qcacld-3.0: Drop EAPOL frame with DA different from SAP vdev mac addr
  02cd8a3d qcacld-3.0: Flush frags for peer on add key request
  231179a0 qcacld-3.0: Fix MIC verification in helium family
  b1cd5ea5 qcacld-3.0: Drop mcast and plaintext frags in protected network
  d7fa59e3 qcacld-3.0: Modify check to ensure consecutive PN for frags
  230f31c2 qcacld-3.0: Do not intrabss fwd EAPOL frames in IPA exc path
  4f26d740 qcacld-3.0: Drop non-EAPOL/WAPI frames from unauthorized peer
  d2c3bd30 qcacld-3.0: Add support to flush fragments for a particular peer
  43713537 qcacld-3.0: Do not intrabss forward fragmented EAPOL frames
  aa852ed9 qcacld-3.0: Drop EAPOL frame with DA different from SAP vdev mac addr
  3f415e41 qcacld-3.0: Flush frags for peer on add key request
  4fe63da8 qcacld-3.0: Fix MIC verification in helium family
  172b7704 qcacld-3.0: Drop mcast and plaintext frags in protected network
  232589a7 qcacld-3.0: Modify check to ensure consecutive PN for frags
  65976edb qcacld-3.0: Do not intrabss fwd EAPOL frames in IPA exc path
  2f2a9f2f qcacld-3.0: Drop non-EAPOL/WAPI frames from unauthorized peer
  c27e9d23 qcacld-3.0: Add support to flush fragments for a particular peer
  dad9f9fd qcacld-3.0: Don't delete hw_filter for NDI mode
  d629b2ad qcacld-3.0: lim_strip_ie to extract multiple IEs
  5e5202d4 qcacld-3.0: Duplicate peer create command
  e9d2d558 qcacld-3.0: Send assoc reject upon failing to post ASSOC_IND
  0c71ddc5 qcacld-3.0: Save self rsn caps in csr roam session
  23a32e60 qcacld-3.0: Update vdev id in bssIdx of bss param

Bug: 161373974
Bug: 168748066
Bug: 170058356
Bug: 170139097
Bug: 172378366
Bug: 172619503
Bug: 172944461
Bug: 173843328
Bug: 174444463
Bug: 175037520
Bug: 175365015
Bug: 176399941
Bug: 177289563
Bug: 177576987
Bug: 177952811
Bug: 177955534
Bug: 178297222
Bug: 178459878
Bug: 178809945
Bug: 178810049
Bug: 178831106
Bug: 179040600
Bug: 179468053
Bug: 180571373
Bug: 180950209
Bug: 181202137
Bug: 181637197
Bug: 181677125
Bug: 181677179
Bug: 181835862
Bug: 182351550
Bug: 182634675
Bug: 182958222
Bug: 183183208
Bug: 183555249
Bug: 184186372
Pick-Prebuilt: 354398374
Build-Id: 7275981
Processing-Config: kernel_headers
Change-Id: Ib4a4b9e1a118dff36e6b058bdd32a89992f1ca0f
Signed-off-by: SecurityBot <android-nexus-securitybot@system.gserviceaccount.com>