{"push_id":687822927,"size":26,"distinct_size":1,"ref":"refs/heads/FI","head":"bffda9bc3bc5127aa1a4ec608fff1756ba18b1ec","before":"cbffedf38e8937995c10a8a9908e44dd6841d87c","commits":[{"sha":"4aec80645d27edb55b2f0a16eebf9e990e95ab20","author":{"email":"2b3b9fc888dc984486ef7a0ec0e18f2e0c042603@cyngn.com","name":"Howard M. Harte"},"message":"Merge tag 'android-5.1.0_r0.8' into cm-12.1\n\nAndroid 5.1.0 Release 0.8","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/4aec80645d27edb55b2f0a16eebf9e990e95ab20"},{"sha":"fad644aa2085da9ec293fd3c455cff73ed660a3a","author":{"email":"6082032113d890a554bd03b2cd0e6cba719fad69@google.com","name":"Mohamad Ayyash"},"message":"xt_qtaguid: Use sk_callback_lock read locks before reading sk->sk_socket\n\nIt prevents a kernel panic when accessing sk->sk_socket fields due to NULLing sk->sk_socket when sock_orphan is called through\nsk_common_release.\n\nChange-Id: I4aa46b4e2d8600e4d4ef8dcdd363aa4e6e5f8433\nSigned-off-by: Mohamad Ayyash <mkayyash@google.com>\n(cherry picked from commit cdea0ebcb8bcfe57688f6cb692b49e550ebd9796)","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/fad644aa2085da9ec293fd3c455cff73ed660a3a"},{"sha":"9a932eedf05e6b988652b61c2c8b04d2c418698a","author":{"email":"4452d71687b6bc2c9389c3349fdc17fbd73b833b@queasysnail.net","name":"Sabrina Dubroca"},"message":"ipv6: clean up anycast when an interface is destroyed\n\nIf we try to rmmod the driver for an interface while sockets with\nsetsockopt(JOIN_ANYCAST) are alive, some refcounts aren't cleaned up\nand we get stuck on:\n\n  unregister_netdevice: waiting for ens3 to become free. Usage count = 1\n\nIf we LEAVE_ANYCAST/close everything before rmmod'ing, there is no\nproblem.\n\nWe need to perform a cleanup similar to the one for multicast in\naddrconf_ifdown(how == 1).\n\nBUG: 18902601\nChange-Id: I6d51aed5755eb5738fcba91950e7773a1c985d2e\nSigned-off-by: Sabrina Dubroca <sd@queasysnail.net>\nAcked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/9a932eedf05e6b988652b61c2c8b04d2c418698a"},{"sha":"dafa6612602bef468be2db29332238b5dc03c8ae","author":{"email":"86995a091f8a1385082bd10715048b52ee386a6a@google.com","name":"Lorenzo Colitti"},"message":"net: ipv6: make \"ip -6 route get mark xyz\" work.\n\nCurrently, \"ip -6 route get mark xyz\" ignores the mark passed in\nby userspace. Make it honour the mark, just like IPv4 does.\n\n[net-next commit 2e47b291953c35afa4e20a65475954c1a1b9afe1]\n\nChange-Id: Ief6cd1e1b7e43dc0d008b7e692be62cadc5cc7ca\nSigned-off-by: Lorenzo Colitti <lorenzo@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/dafa6612602bef468be2db29332238b5dc03c8ae"},{"sha":"1fb7fb89ba054adaf4c94cc9bad5ff7ae86f4483","author":{"email":"2b3b59efb30d692c772b2f93c636eba69bba4f54@twopensource.com","name":"Cong Wang"},"message":"ipv4, fib: pass LOOPBACK_IFINDEX instead of 0 to flowi4_iif\n\nAs suggested by Julian:\n\n\tSimply, flowi4_iif must not contain 0, it does not\n\tlook logical to ignore all ip rules with specified iif.\n\nbecause in fib_rule_match() we do:\n\n        if (rule->iifindex && (rule->iifindex != fl->flowi_iif))\n                goto out;\n\nflowi4_iif should be LOOPBACK_IFINDEX by default.\n\nWe need to move LOOPBACK_IFINDEX to include/net/flow.h:\n\n1) It is mostly used by flowi_iif\n\n2) Fix the following compile error if we use it in flow.h\nby the patches latter:\n\nIn file included from include/linux/netfilter.h:277:0,\n                 from include/net/netns/netfilter.h:5,\n                 from include/net/net_namespace.h:21,\n                 from include/linux/netdevice.h:43,\n                 from include/linux/icmpv6.h:12,\n                 from include/linux/ipv6.h:61,\n                 from include/net/ipv6.h:16,\n                 from include/linux/sunrpc/clnt.h:27,\n                 from include/linux/nfs_fs.h:30,\n                 from init/do_mounts.c:32:\ninclude/net/flow.h: In function ‘flowi4_init_output’:\ninclude/net/flow.h:84:32: error: ‘LOOPBACK_IFINDEX’ undeclared (first use in this function)\n\n[Backport of net-next 6a662719c9868b3d6c7d26b3a085f0cd3cc15e64]\n\nChange-Id: Ib7a0a08d78c03800488afa1b2c170cb70e34cfd9\nCc: Eric Biederman <ebiederm@xmission.com>\nCc: Julian Anastasov <ja@ssi.bg>\nCc: David S. Miller <davem@davemloft.net>\nSigned-off-by: Cong Wang <xiyou.wangcong@gmail.com>\nSigned-off-by: Cong Wang <cwang@twopensource.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Lorenzo Colitti <lorenzo@google.com>","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/1fb7fb89ba054adaf4c94cc9bad5ff7ae86f4483"},{"sha":"4f19bb0e78c5ee65f9fc092f6dbf0e3efa57da4b","author":{"email":"86995a091f8a1385082bd10715048b52ee386a6a@google.com","name":"Lorenzo Colitti"},"message":"net: ping: Return EAFNOSUPPORT when appropriate.\n\n1. For an IPv4 ping socket, ping_check_bind_addr does not check\n   the family of the socket address that's passed in. Instead,\n   make it behave like inet_bind, which enforces either that the\n   address family is AF_INET, or that the family is AF_UNSPEC and\n   the address is 0.0.0.0.\n2. For an IPv6 ping socket, ping_check_bind_addr returns EINVAL\n   if the socket family is not AF_INET6. Return EAFNOSUPPORT\n   instead, for consistency with inet6_bind.\n3. Make ping_v4_sendmsg and ping_v6_sendmsg return EAFNOSUPPORT\n   instead of EINVAL if an incorrect socket address structure is\n   passed in.\n4. Make IPv6 ping sockets be IPv6-only. The code does not support\n   IPv4, and it cannot easily be made to support IPv4 because\n   the protocol numbers for ICMP and ICMPv6 are different. This\n   makes connect(::ffff:192.0.2.1) fail with EAFNOSUPPORT instead\n   of making the socket unusable.\n\nAmong other things, this fixes an oops that can be triggered by:\n\n    int s = socket(AF_INET, SOCK_DGRAM, IPPROTO_ICMP);\n    struct sockaddr_in6 sin6 = {\n        .sin6_family = AF_INET6,\n        .sin6_addr = in6addr_any,\n    };\n    bind(s, (struct sockaddr *) &sin6, sizeof(sin6));\n\n[backport of net 9145736d4862145684009d6a72a6e61324a9439e]\n\nChange-Id: If06ca86d9f1e4593c0d6df174caca3487c57a241\nSigned-off-by: Lorenzo Colitti <lorenzo@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/4f19bb0e78c5ee65f9fc092f6dbf0e3efa57da4b"},{"sha":"46c7df65c414ca1f6682269a96603cfabff3ca50","author":{"email":"77d2ac97f60e5d5b905585669b1154dbc647411c@gmail.com","name":"dhacker29"},"message":"fugu_defconfig: enable NTFS and CIFS\n\nChange-Id: Ic882fc138cfdb82d5d7aa12f9554e6b624e86208","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/46c7df65c414ca1f6682269a96603cfabff3ca50"},{"sha":"71056c93207bc8c977da46b733b7272b4ed8d724","author":{"email":"2b3b9fc888dc984486ef7a0ec0e18f2e0c042603@cyngn.com","name":"Howard Harte"},"message":"Merge \"fugu_defconfig: enable NTFS and CIFS\" into cm-12.1","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/71056c93207bc8c977da46b733b7272b4ed8d724"},{"sha":"7a93af45f6a0624257399da794f5d18a95e59cd7","author":{"email":"2ad7b89f9c0e03e0762ce300ba71ebec2c095f59@gmail.com","name":"ion-storm"},"message":"Enable External USB Webcam Support with USB Audio, confirmed working\n\nChange-Id: I30c9bca03c98cb224a1fc45752c597f5cc4a6cc2","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/7a93af45f6a0624257399da794f5d18a95e59cd7"},{"sha":"6ce5aeaccb7655f3c26c2434a5c921786cef26e5","author":{"email":"6bd3f43fd5b2b5689bccc97f6d09e3eb28307598@rab.in","name":"Rabin Vincent"},"message":"tracing/syscalls: Ignore numbers outside NR_syscalls' range\n\nARM has some private syscalls (for example, set_tls(2)) which lie\noutside the range of NR_syscalls.  If any of these are called while\nsyscall tracing is being performed, out-of-bounds array access will\noccur in the ftrace and perf sys_{enter,exit} handlers.\n\n # trace-cmd record -e raw_syscalls:* true && trace-cmd report\n ...\n true-653   [000]   384.675777: sys_enter:            NR 192 (0, 1000, 3, 4000022, ffffffff, 0)\n true-653   [000]   384.675812: sys_exit:             NR 192 = 1995915264\n true-653   [000]   384.675971: sys_enter:            NR 983045 (76f74480, 76f74000, 76f74b28, 76f74480, 76f76f74, 1)\n true-653   [000]   384.675988: sys_exit:             NR 983045 = 0\n ...\n\n # trace-cmd record -e syscalls:* true\n [   17.289329] Unable to handle kernel paging request at virtual address aaaaaace\n [   17.289590] pgd = 9e71c000\n [   17.289696] [aaaaaace] *pgd=00000000\n [   17.289985] Internal error: Oops: 5 [#1] PREEMPT SMP ARM\n [   17.290169] Modules linked in:\n [   17.290391] CPU: 0 PID: 704 Comm: true Not tainted 3.18.0-rc2+ #21\n [   17.290585] task: 9f4dab00 ti: 9e710000 task.ti: 9e710000\n [   17.290747] PC is at ftrace_syscall_enter+0x48/0x1f8\n [   17.290866] LR is at syscall_trace_enter+0x124/0x184\n\nFix this by ignoring out-of-NR_syscalls-bounds syscall numbers.\n\nCommit cd0980fc8add \"tracing: Check invalid syscall nr while tracing syscalls\"\nadded the check for less than zero, but it should have also checked\nfor greater than NR_syscalls.\n\nLink: http://lkml.kernel.org/p/1414620418-29472-1-git-send-email-rabin@rab.in\n\nChange-Id: I817501f0edbe758ef91d197876a5ee4c3d10b339\nFixes: cd0980fc8add \"tracing: Check invalid syscall nr while tracing syscalls\"\nCc: stable@vger.kernel.org # 2.6.33+\nSigned-off-by: Rabin Vincent <rabin@rab.in>\nSigned-off-by: Steven Rostedt <rostedt@goodmis.org>","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/6ce5aeaccb7655f3c26c2434a5c921786cef26e5"},{"sha":"60794cedea53b3cc073832baff0a633be595793b","author":{"email":"e642b69ed2fc111e09ffdc37feb733a52253340d@oracle.com","name":"Sasha Levin"},"message":"KEYS: close race between key lookup and freeing\n\nWhen a key is being garbage collected, it's key->user would get put before\nthe ->destroy() callback is called, where the key is removed from it's\nrespective tracking structures.\n\nThis leaves a key hanging in a semi-invalid state which leaves a window open\nfor a different task to try an access key->user. An example is\nfind_keyring_by_name() which would dereference key->user for a key that is\nin the process of being garbage collected (where key->user was freed but\n->destroy() wasn't called yet - so it's still present in the linked list).\n\nThis would cause either a panic, or corrupt memory.\n\nFixes CVE-2014-9529.\n\nChange-Id: I3b2569b9f791748b8a26c2e55a573b5ccad55d95\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>\nSigned-off-by: David Howells <dhowells@redhat.com>","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/60794cedea53b3cc073832baff0a633be595793b"},{"sha":"afd7eafb583b5ee4c2c8fcb2d7c632a67bde7e00","author":{"email":"331be22c6b63ca3e0a03d408c2d906b1b02cd5f2@stressinduktion.org","name":"Hannes Frederic Sowa"},"message":"ipv4: try to cache dst_entries which would cause a redirect\n\nNot caching dst_entries which cause redirects could be exploited by hosts\non the same subnet, causing a severe DoS attack. This effect aggravated\nsince commit f88649721268999 (\"ipv4: fix dst race in sk_dst_get()\").\n\nLookups causing redirects will be allocated with DST_NOCACHE set which\nwill force dst_release to free them via RCU.  Unfortunately waiting for\nRCU grace period just takes too long, we can end up with >1M dst_entries\nwaiting to be released and the system will run OOM. rcuos threads cannot\ncatch up under high softirq load.\n\nAttaching the flag to emit a redirect later on to the specific skb allows\nus to cache those dst_entries thus reducing the pressure on allocation\nand deallocation.\n\nThis issue was discovered by Marcelo Leitner.\n\nChange-Id: I50ec24078acae917eba4a8ba80f39aa21702874e\nCc: Julian Anastasov <ja@ssi.bg>\nSigned-off-by: Marcelo Leitner <mleitner@redhat.com>\nSigned-off-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>\nSigned-off-by: Julian Anastasov <ja@ssi.bg>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/afd7eafb583b5ee4c2c8fcb2d7c632a67bde7e00"},{"sha":"7e545f26cce18c518ccb64de990118e775265b1b","author":{"email":"8c1011c9d06fc72acd93645d683782ab9543044d@google.com","name":"Michael Halcrow"},"message":"eCryptfs: Remove buggy and unnecessary write in file name decode routine\n\nDmitry Chernenkov used KASAN to discover that eCryptfs writes past the\nend of the allocated buffer during encrypted filename decoding. This\nfix corrects the issue by getting rid of the unnecessary 0 write when\nthe current bit offset is 2.\n\nChange-Id: If823702cfb8f755dbf45f12ca1280b526b5b05f1\nSigned-off-by: Michael Halcrow <mhalcrow@google.com>\nReported-by: Dmitry Chernenkov <dmitryc@google.com>\nSuggested-by: Kees Cook <keescook@chromium.org>\nCc: stable@vger.kernel.org # v2.6.29+: 51ca58d eCryptfs: Filename Encryption: Encoding and encryption functions\nSigned-off-by: Tyler Hicks <tyhicks@canonical.com>","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/7e545f26cce18c518ccb64de990118e775265b1b"},{"sha":"9cf3789e4675d391d118c7f03cc4e9f9b217ff2e","author":{"email":"cef439e78636cdab99cd2923826c5065a0743e5b@strlen.de","name":"Florian Westphal"},"message":"netfilter: conntrack: disable generic tracking for known protocols\n\nGiven following iptables ruleset:\n\n-P FORWARD DROP\n-A FORWARD -m sctp --dport 9 -j ACCEPT\n-A FORWARD -p tcp --dport 80 -j ACCEPT\n-A FORWARD -p tcp -m conntrack -m state ESTABLISHED,RELATED -j ACCEPT\n\nOne would assume that this allows SCTP on port 9 and TCP on port 80.\nUnfortunately, if the SCTP conntrack module is not loaded, this allows\n*all* SCTP communication, to pass though, i.e. -p sctp -j ACCEPT,\nwhich we think is a security issue.\n\nThis is because on the first SCTP packet on port 9, we create a dummy\n\"generic l4\" conntrack entry without any port information (since\nconntrack doesn't know how to extract this information).\n\nAll subsequent packets that are unknown will then be in established\nstate since they will fallback to proto_generic and will match the\n'generic' entry.\n\nOur originally proposed version [1] completely disabled generic protocol\ntracking, but Jozsef suggests to not track protocols for which a more\nsuitable helper is available, hence we now mitigate the issue for in\ntree known ct protocol helpers only, so that at least NAT and direction\ninformation will still be preserved for others.\n\n [1] http://www.spinics.net/lists/netfilter-devel/msg33430.html\n\nJoint work with Daniel Borkmann.\n\nChange-Id: I7e1726002126c0338e82f03573d060870e90492f\nSigned-off-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Daniel Borkmann <dborkman@redhat.com>\nAcked-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/9cf3789e4675d391d118c7f03cc4e9f9b217ff2e"},{"sha":"99c339e8e6b98d9e58b98ac1ea2af157997f347f","author":{"email":"8a741aa8cbd77ebc4a56ddb528ce9fd15d42f034@xmission.com","name":"Eric W. Biederman"},"message":"mnt: Only change user settable mount flags in remount\n\nKenton Varda <kenton@sandstorm.io> discovered that by remounting a\nread-only bind mount read-only in a user namespace the\nMNT_LOCK_READONLY bit would be cleared, allowing an unprivileged user\nto the remount a read-only mount read-write.\n\nCorrect this by replacing the mask of mount flags to preserve\nwith a mask of mount flags that may be changed, and preserve\nall others.   This ensures that any future bugs with this mask and\nremount will fail in an easy to detect way where new mount flags\nsimply won't change.\n\nCc: stable@vger.kernel.org\nAcked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>\nSigned-off-by: \"Eric W. Biederman\" <ebiederm@xmission.com>\n\nConflicts:\n\tfs/namespace.c\n\nChange-Id: I6f52f5e26b1a0892b398888aa2a7a8c87a7ccf41","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/99c339e8e6b98d9e58b98ac1ea2af157997f347f"},{"sha":"a6b1bdfbaeec6314ad72b24071930680c32f11cb","author":{"email":"8a741aa8cbd77ebc4a56ddb528ce9fd15d42f034@xmission.com","name":"Eric W. Biederman"},"message":"mnt: Prevent pivot_root from creating a loop in the mount tree\n\nAndy Lutomirski recently demonstrated that when chroot is used to set\nthe root path below the path for the new ``root'' passed to pivot_root\nthe pivot_root system call succeeds and leaks mounts.\n\nIn examining the code I see that starting with a new root that is\nbelow the current root in the mount tree will result in a loop in the\nmount tree after the mounts are detached and then reattached to one\nanother.  Resulting in all kinds of ugliness including a leak of that\nmounts involved in the leak of the mount loop.\n\nPrevent this problem by ensuring that the new mount is reachable from\nthe current root of the mount tree.\n\n[Added stable cc.  Fixes CVE-2014-7970.  --Andy]\n\nChange-Id: I63cd6dfb16846d87386af1800b717420004db9f4\nCc: stable@vger.kernel.org\nReported-by: Andy Lutomirski <luto@amacapital.net>\nReviewed-by: Andy Lutomirski <luto@amacapital.net>\nLink: http://lkml.kernel.org/r/87bnpmihks.fsf@x220.int.ebiederm.org\nSigned-off-by: \"Eric W. Biederman\" <ebiederm@xmission.com>\nSigned-off-by: Andy Lutomirski <luto@amacapital.net>","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/a6b1bdfbaeec6314ad72b24071930680c32f11cb"},{"sha":"6bf76e8d4b710471848d7fd2d7819863b50bc055","author":{"email":"e642b69ed2fc111e09ffdc37feb733a52253340d@oracle.com","name":"Sasha Levin"},"message":"vfs: read file_handle only once in handle_to_path\n\nWe used to read file_handle twice. Once to get the amount of extra bytes, and\nonce to fetch the entire structure.\n\nThis may be problematic since we do size verifications only after the first\nread, so if the number of extra bytes changes in userspace between the first\nand second calls, we'll have an incoherent view of file_handle.\n\nInstead, read the constant size once, and copy that over to the final\nstructure without having to re-read it again.\n\nChange-Id: Ib05e5129629e27d5a05953098c5bc470fae40d2a\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/6bf76e8d4b710471848d7fd2d7819863b50bc055"},{"sha":"d364059c4df11c78bfba5e2e4e67510858115016","author":{"email":"eec72676ad9a62f2727dfed6d270d98c0d02adec@linux.intel.com","name":"Kirill A. Shutemov"},"message":"mm: Fix NULL pointer dereference in madvise(MADV_WILLNEED) support\n\nSasha Levin found a NULL pointer dereference that is due to a missing\npage table lock, which in turn is due to the pmd entry in question being\na transparent huge-table entry.\n\nThe code - introduced in commit 1998cc048901 (\"mm: make\nmadvise(MADV_WILLNEED) support swap file prefetch\") - correctly checks\nfor this situation using pmd_none_or_trans_huge_or_clear_bad(), but it\nturns out that that function doesn't work correctly.\n\npmd_none_or_trans_huge_or_clear_bad() expected that pmd_bad() would\ntrigger if the transparent hugepage bit was set, but it doesn't do that\nif pmd_numa() is also set. Note that the NUMA bit only gets set on real\nNUMA machines, so people trying to reproduce this on most normal\ndevelopment systems would never actually trigger this.\n\nFix it by removing the very subtle (and subtly incorrect) expectation,\nand instead just checking pmd_trans_huge() explicitly.\n\nReported-by: Sasha Levin <sasha.levin@oracle.com>\nAcked-by: Andrea Arcangeli <aarcange@redhat.com>\n[ Additionally remove the now stale test for pmd_trans_huge() inside the\n  pmd_bad() case - Linus ]\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>\n\nChange-Id: I5ef24e239eacb87aa58ed6bb7a10b9aef601779c","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/d364059c4df11c78bfba5e2e4e67510858115016"},{"sha":"418ad0510af812941ee4139db313610cef4bc7e5","author":{"email":"257d7d5bef225e0a56b3375b0c1e95c6bb0ab871@modio.se","name":"D.S. Ljungmark"},"message":"ipv6: Don't reduce hop limit for an interface\n\nA local route may have a lower hop_limit set than global routes do.\n\nRFC 3756, Section 4.2.7, \"Parameter Spoofing\"\n\n>   1.  The attacker includes a Current Hop Limit of one or another small\n>       number which the attacker knows will cause legitimate packets to\n>       be dropped before they reach their destination.\n\n>   As an example, one possible approach to mitigate this threat is to\n>   ignore very small hop limits.  The nodes could implement a\n>   configurable minimum hop limit, and ignore attempts to set it below\n>   said limit.\n\nChange-Id: I36abaeb40f4188580343257600a0b920c3148005\nSigned-off-by: D.S. Ljungmark <ljungmark@modio.se>\nAcked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/418ad0510af812941ee4139db313610cef4bc7e5"},{"sha":"43b649e9dcc0904ed7e9edc0dcc3927f63e94a97","author":{"email":"77d2ac97f60e5d5b905585669b1154dbc647411c@gmail.com","name":"dhacker29"},"message":"fugu_defconfig: Properly enable V4L2 support for 3.10 kernel\n\n * Enable CONFIG_MEDIA_USB_SUPPORT and CONFIG_USB_VIDEO_CLASS\n * run savedefconfig and clean up obsolete configs\n\nChange-Id: If30607a5ef3549ee8430f6a8e50259beda77dbf7","distinct":false,"url":"https://api.github.com/repos/USBhost/Nexus-payer-kernel/commits/43b649e9dcc0904ed7e9edc0dcc3927f63e94a97"}]}