prebuilt kernel (stable mergedown 3.4.39, security fix for CVE-2013-0914)

Bug: 8531623
(fixed for CVE-2013-0914 in  44ddae4 signal: always clear sa_restorer on execve)

0b847a4 Merge remote-tracking branch 'exynos/android-exynos-3.4' into android-exynos-manta-3.4
5864848 Merge remote-tracking branch 'common/android-3.4' into android-exynos-3.4
d80428a Merge tag 'v3.4.39' into android-3.4
cbfed95 Linux 3.4.39
29fcbcb Revert "xen/blkback: Don't trust the handle from the frontend."
aa5ec22 bonding: get netdev_rx_handler_unregister out of locks
c843819 smsc75xx: fix jumbo frame support
74bed69 pch_gbe: fix ip_summed checksum reporting on rx
f0180de net: add a synchronize_net() in netdev_rx_handler_unregister()
5afd933 ks8851: Fix interpretation of rxlen field.
567a4ac ipv6: don't accept node local multicast traffic from the wire
6a51997 ipv6: fix bad free of addrconf_init_net
df19106 ipv6: don't accept multicast traffic with scope 0
ccb926f DM9000B: driver initialization upgrade
98b3a57 atl1e: drop pci-msi support because of packet corruption
d97bcfa aoe: reserve enough headroom on skbs
a930484 net: fix *_DIAG_MAX constants
71ec40e drivers: net: ethernet: cpsw: use netif_wake_queue() while restarting tx queue
86f1b8c drivers: net: ethernet: davinci_emac: use netif_wake_queue() while restarting tx queue
ae8c63b bonding: fix disabling of arp_interval and miimon
d98ea18 bonding: fix miimon and arp_interval delayed work race conditions
b11b7d9 bonding: remove already created master sysfs link on failure
fbb7347 unix: fix a race condition in unix_release()
b9f3bf1 thermal: shorten too long mcast group name
a834179 8021q: fix a potential use-after-free
d1f60c6 tcp: undo spurious timeout after SACK reneging
21b56e0 tcp: preserve ACK clocking in TSO
8787606 sky2: Threshold for Pause Packet is set wrong
27d365a sky2: Receive Overflows not counted
a897b79 net: remove a WARN_ON() in net_enable_timestamp()
7b7cf9f tracing: Prevent buffer overwrite disabled for latency tracers
2f6b6e2 tracing: Protect tracer flags with trace_types_lock
2457a40 ext4: use atomic64_t for the per-flexbg free_clusters count
46c14b9 ext4: convert number of blocks to clusters properly
4025b05 efivars: Handle duplicate names from get_next_variable()
5c44ddd efivars: explicitly calculate length of VariableName
2ee4a8e Btrfs: fix space leak when we fail to reserve metadata space
3c7fe7b drm/i915: Don't clobber crtc->fb when queue_flip fails
49e6724 nfsd4: reject "negative" acl lengths
c14d752 ARM: cns3xxx: fix mapping of private memory region
ccb3d56 loop: prevent bdev freeing while device in use
39d4978 usb: gadget: udc-core: fix a regression during gadget driver unbinding
d50597f Btrfs: don't drop path when printing out tree errors in scrub
1c7b6ea Btrfs: limit the global reserve to 512mb
84519c0 Btrfs: fix race between mmap writes and compression
e18e866 usb: xhci: Fix TRB transfer length macro used for Event TRB.
afc3097 net/irda: add missing error path release_sock call
75e4839 pnfs-block: removing DM device maybe cause oops when call dev_remove
e92c5ef mwifiex: cancel cmd timer and free curr_cmd in shutdown process
8630260 vt: synchronize_rcu() under spinlock is not nice...
840d38a usb: ftdi_sio: Add support for Mitsubishi FX-USB-AW/-BD
d32cdd3 tty: atmel_serial_probe(): index of atmel_ports[] fix
2f21ae2 xen-blkback: fix dispatch_rw_block_io() error path
119016c xen/blkback: correctly respond to unknown, non-native requests
2c0260b iommu/amd: Make sure dma_ops are set for hotplug devices
60f18f4 tg3: fix length overflow in VPD firmware parsing
554293b b43: N-PHY: use more bits for offset in RSSI calibration
123dad7 b43: A fix for DMA transmission sequence errors
0883afbb b43: N-PHY: increase initial value of "mind" in RSSI calibration
e401e13 rtlwifi: usb: add missing freeing of skbuff
698d31b HID: usbhid: quirk for Realtek Multi-card reader
5050633 ath9k_hw: revert chainmask to user configuration after calibration
bb4619e can: sja1000: fix define conflict on SH
cde9833 sysfs: handle failure path correctly for readdir()
01fadbb sysfs: fix race between readdir and lseek
d8022cb staging: comedi: s626: fix continuous acquisition
c643e01 Bluetooth: Add support for Dell[QCA 0cf3:817a]
42c4b74 Bluetooth: Add support for Dell[QCA 0cf3:0036]
caef33a Bluetooth: Fix not closing SCO sockets in the BT_CONNECT2 state
c625222 tile: expect new initramfs name from hypervisor file system
66156e6 SUNRPC: Add barriers to ensure read ordering in rpc_wake_up_task_queue_locked
30e8f45 kernel/signal.c: use __ARCH_HAS_SA_RESTORER instead of SA_RESTORER
556ba70 signal: Define __ARCH_HAS_SA_RESTORER so we know whether to clear sa_restorer
f3b5af9 Linux 3.4.38
1014986 asus-laptop: Do not call HWRS on init
553ce45 rt2x00: error in configurations with mesh support disabled
023eae6 exec: use -ELOOP for max recursion depth
2f7dea3 i915: initialize CADL in opregion
5fb9149 tools: hv: Netlink source address validation allows DoS
66de393 udf: avoid info leak on export
19b4376 isofs: avoid info leak on export
b647ebe key: Fix resource leak
8b55bf5 USB: io_ti: fix get_icount for two port adapters
00de47e USB: garmin_gps: fix memory leak on disconnect
bc914c3 udf: Fix bitmap overflow on large filesystems with small block size
5899ef0 nohz: Make tick_nohz_irq_exit() irq safe
cbff2b6 USB: serial: fix interface refcounting
10a00e3 USB: cdc-acm: fix device unregistration
d581bb3 USB: xhci: correctly enable interrupts
31e8d29 USB: xhci - fix bit definitions for IMAN register
56d833d x86-64: Fix the failure case in copy_user_handle_tail()
8d96fce clockevents: Don't allow dummy broadcast timers
3d2e742 IPoIB: Fix send lockup due to missed TX completion
2bb5c2c ext4: fix data=journal fast mount/umount hang
120c355 usb-storage: add unusual_devs entry for Samsung YP-Z3 mp3 player
d24f139 ext4: fix the wrong number of the allocated blocks in ext4_split_extent()
ac4f52e jbd2: fix use after free in jbd2_journal_dirty_metadata()
056f8c8 cifs: ignore everything in SPNEGO blob after mechTypes
f16d21e drm/radeon/benchmark: make sure bo blit copy exists before using it
ae7952e drm/radeon: add support for Richland APUs
2cf470d drm/radeon: add Richland pci ids
6e8d94d target/iscsi: Fix mutual CHAP auth on big-endian arches
bea7cce mm/hugetlb: fix total hugetlbfs pages count when using memory overcommit accouting
612dade KMS: fix EDID detailed timing frame rate
2c5d816 KMS: fix EDID detailed timing vsync parsing
e03f8b8 drm/i915: bounds check execbuffer relocation count
5cec2bb mwifiex: fix potential out-of-boundary access to ibss rate table
5a468a7 rtlwifi: rtl8192cu: Fix problem that prevents reassociation
b903216 rtlwifi: rtl8192cu: Fix schedule while atomic bug splat
52cecaa tracing: Fix free of probe entry by calling call_rcu_sched()
1e3b58b tracing: Fix race in snapshot swapping
74a523f drm/i915: restrict kernel address leak in debugfs
cb8a094 ALSA: snd-usb: mixer: ignore -EINVAL in snd_usb_mixer_controls()
184f526 ALSA: snd-usb: mixer: propagate errors up the call chain
e978145 ALSA: hda - Fix typo in checking IEC958 emphasis bit
184e91c ALSA: hda/cirrus - Fix the digital beep registration
46a84db sfc: Only use TX push if a single descriptor is to be written
70a3336 sfc: Disable soft interrupt handling during efx_device_detach_sync()
bea3099 sfc: Detach net device when stopping queues for reconfiguration
4b8fd2a sfc: Fix efx_rx_buf_offset() in the presence of swiotlb
56bed2f sfc: Properly sync RX DMA buffer when it is not the last in the page
41ade8e sfc: Correctly initialise reset_method in siena_test_chip()
2672f1c sfc: Avoid generating over-length MC_CMD_FLUSH_RX_QUEUES request
ab2c550 sfc: Disable VF queues during register self-test
3ad735c sfc: Fix timekeeping in efx_mcdi_poll()
54ad9a8 sfc: lock TX queues when calling netif_device_detach()
e0992b7 sfc: Work-around flush timeout when flushes have completed
6099070d sfc: Really disable flow control while flushing
4d64cdb sfc: Fix MCDI structure field lookup
9a17de1 sfc: Add parentheses around use of bitfield macro arguments
0f1ac29 sfc: Convert firmware subtypes to native byte order in efx_mcdi_get_board_cfg()
be29fc5 sfc: Do not attempt to flush queues if DMA is disabled
1280938 inet: limit length of fragment queue hash table bucket lists
05bec9d bnx2x: fix occasional statistics off-by-4GB error
c2abe8a vhost/net: fix heads usage of ubuf_info
08ebc8f rtnetlink: Mask the rta_type when range checking
b6da578 tcp: fix skb_availroom()
6a2d122 ipv4: fix definition of FIB_TABLE_HASHSZ
ca42fad sctp: don't break the loop while meeting the active_path so as to find the matched transport
0aa8bf9 sctp: Use correct sideffect command in duplicate cookie handling
147289d tg3: 5715 does not link up when autoneg off
e7778a6 bonding: don't call update_speed_duplex() under spinlocks
b52f067 netconsole: don't call __netpoll_cleanup() while atomic
7436bcf net/ipv4: Ensure that location of timestamp option is stored
1c93c2e sunsu: Fix panic in case of nonexistent port at "console=ttySY" cmdline option
3ff8924 Revert "USB: EHCI: don't check DMA values in QH overlays"
dbfe085 Linux 3.4.37
7cba6ae 6lowpan: Fix endianness issue in is_addr_link_local().
32ceecc dcbnl: fix various netlink info leaks
78d3a46 rtnl: fix info leak on RTM_GETLINK request for VF devices
47d7ed1 ipv6: stop multicast forwarding to process interface scoped addresses
c7a226b bridging: fix rx_handlers return code
8c6292a netlabel: correctly list all the static label mappings
e86429f macvlan: Set IFF_UNICAST_FLT flag to prevent unnecessary promisc mode.
094b503 tun: add a missing nf_reset() in tun_net_xmit()
8bd2b8fa tcp: fix double-counted receiver RTT when leaving receiver fast path
6202fe4 net: ipv6: Don't purge default router if accept_ra=2
2b2066c rds: limit the size allocated by rds_message_alloc()
136d76d l2tp: Restore socket refcount when sendmsg succeeds
0530082 drm/i915: Increase the RC6p threshold.
51dfcbf loopdev: remove an user triggerable oops
187c2bd loopdev: fix a deadlock
d72b4f9 block: use i_size_write() in bd_set_size()
969ff7d hwmon: (sht15) Fix memory leak if regulator_enable() fails
81da76a drm/i915: EBUSY status handling added to i915_gem_fault().
cb505e2 atmel_lcdfb: fix 16-bpp modes on older SOCs
a40a945 btrfs: use rcu_barrier() to wait for bdev puts at unmount
59c0110 s390/mm: fix flush_tlb_kernel_range()
8a52ddf s390: critical section cleanup vs. machine checks
6bf083f perf,x86: fix link failure for non-Intel configs
d780563 perf,x86: fix wrmsr_on_cpu() warning on suspend/resume
8c97feb selinux: use GFP_ATOMIC under spin_lock
e550050 powerpc: Fix cputable entry for 970MP rev 1.0
9d4a6f2 powerpc: Fix STAB initialization
32f8134 w1: fix oops when w1_search is called from netlink connector
dce5c33 hwmon: (lineage-pem) Add missing terminating entry for pem_[input|fan]_attributes
fa55537 hwmon: (pmbus/ltc2978) Fix temperature reporting
fe88b8b ALSA: seq: Fix missing error handling in snd_seq_timer_open()
9a9b01c perf,x86: fix kernel crash with PEBS/BTS after suspend/resume
75750fc TTY: do not reset master's packet mode
3b11e57 tty: serial: fix typo "ARCH_S5P6450"
d91371b serial: 8250_pci: add support for another kind of NetMos Technology PCI 9835 Multi-I/O Controller
e3c51d6 ext3: Fix format string issues
44ddae4 signal: always clear sa_restorer on execve
a4371b6 staging: vt6656: Fix oops on resume from suspend.
0319f99 USB: EHCI: don't check DMA values in QH overlays
0b520a5 USB: storage: fix Huawei mode switching regression
e870d9d usb: serial: Add Rigblaster Advantage to device table
5c1892e USB: added support for Cinterion's products AH6 and PLS8
0864bc5 usb: cp210x new Vendor/Device IDs
5c6142c USB: cdc-wdm: fix buffer overflow
82eccc2 USB: option: add Huawei E5331
c8fba58 virtio: rng: disallow multiple device registrations, fixes crashes
40e0c1e xen/pciback: Don't disable a PCI device that is already disabled.
9909423 qcaux: add Franklin U600
92a7adf Linux 3.4.36
8420d82 USB: Fix connected device switch to Inactive state.
983c9b4 Revert "ALSA: hda - hdmi: Make jacks phantom, if they're not detectable"
beabe20 USB: Rip out recursive call on warm port reset.
e850004 USB: Prepare for refactoring by adding extra udev checks.
ac79dc9 USB: Don't use EHCI port sempahore for USB 3.0 hubs.
d2c96b7 dmi_scan: fix missing check for _DMI_ signature in smbios_present()
abf73cb ftrace: Update the kconfig for DYNAMIC_FTRACE
f39e4f1 Fix memory leak in cpufreq stats.
cc6de71 vfs: fix pipe counter breakage
3126603 Fix: compat_rw_copy_check_uvector() misuse in aio, readv, writev, and security keys
96ace77 keys: fix race with concurrent install_user_keyrings()
30e39b7 crypto: user - fix info leaks in report API
76de736 xen/pat: Disable PAT using pat_enabled value.
626614b HID: logitech-dj: do not directly call hid_output_raw_report() during probe
1c48233 e1000e: fix pci-device enable-counter balance
f4ec9b2 ALSA: vmaster: Fix slave change notification
1515f18 ALSA: ice1712: Initialize card->private_data properly
724285c ARM: 7663/1: perf: fix ARMv7 EVTYPE_MASK to include NSH bit
b08994d drm/radeon: add primary dac adj quirk for R200 board
bc37694 hwmon: (pmbus/ltc2978) Use detected chip ID to select supported functionality
ec2bc2f hwmon: (pmbus/ltc2978) Fix peak attribute handling
cca30bd hwmon: (sht15) Check return value of regulator_enable()
fbad807 md: raid0: fix error return from create_stripe_zones.
c443082 md: fix two bugs when attempting to resize RAID0 array.
517557f md: protect against crash upon fsync on ro array
f9c89da ath9k_hw: improve reset reliability after errors
34127f3 ath9k: fix RSSI dummy marker value
97cf710 mwifiex: correct sleep delay counter
681e3b1 hw_random: make buffer usable in scatterlist.
7ae6c92 ata_piix: reenable MS Virtual PC guests
1ecb693 SUNRPC: Don't start the retransmission timer when out of socket space
d3e8a18 NFS: Don't allow NFS silly-renamed files to be deleted, no signal
18d2c79 cifs: ensure that cifs_get_root() only traverses directories
d0e44ed btrfs: Init io_lock after cloning btrfs device struct
a564641 target/pscsi: Fix page increment
c60de93 SCSI: storvsc: Initialize the sglist
7628421 SCSI: dc395x: uninitialized variable in device_alloc()
f8ac697 xen/pci: We don't do multiple MSI's.
b9dfac7 ARM: fix scheduling while atomic warning in alignment handling code
65723919 ARM: VFP: fix emulation of second VFP instruction

Bug: 8531623
Change-Id: I33e46f02e12deb6ab9f963392bec77aca8a5d66a
1 file changed