Git-Mirrors/DivestOS
1
0
Fork 0
mirror of https://github.com/Divested-Mobile/DivestOS-Build.git synced 2024-10-01 01:35:54 -04:00
Code Issues Packages Projects Releases Wiki Activity
e36a91facc
DivestOS/Scripts/LineageOS-16.0/CVE_Patchers/android_kernel_essential_msm8998.sh

103 lines
6.5 KiB
Bash
Raw Normal View History

Lots of device updates - d802: 15.1 -> 16.0 - d852: 15.1 -> 16.0 - d855: 15.1 -> 16.0 - fugu: 15.1 -> 16.0 - jfltexx: 14.1 -> 16.0 - m8: 15.1 -> 16.0 - mata: 15.1 -> 16.0 - update cherrypicks - defconfig: enable MMC_SECDISCARD
2019-08-22 12:24:29 -04:00
#!/bin/bash
cd "$DOS_BUILD_BASE""kernel/essential/msm8998"
git apply $DOS_PATCHES_LINUX_CVES/0007-Accelerated_AES/3.10+/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0007-Accelerated_AES/3.10+/0020.patch
Many changes - processRelease: Support AVB - sort device build order by SoC Additions: - taimen/muskie: 15.1, 16.0 - crosshatch/blueline: 16.0 - bonito/sargo: 16.0
2019-09-02 20:00:39 -04:00
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0010.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0011.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0012.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0013.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0014.patch
Update CVE patchers
2020-09-02 14:28:29 -04:00
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0015.patch
#git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0019.patch
Update CVE patchers Includes many fixes for a69326f3 but probably breaks other things
2020-08-08 13:41:43 -04:00
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/ANY/0001.patch
Lots of device updates - d802: 15.1 -> 16.0 - d852: 15.1 -> 16.0 - d855: 15.1 -> 16.0 - fugu: 15.1 -> 16.0 - jfltexx: 14.1 -> 16.0 - m8: 15.1 -> 16.0 - mata: 15.1 -> 16.0 - update cherrypicks - defconfig: enable MMC_SECDISCARD
2019-08-22 12:24:29 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2015-7837/ANY/0001.patch
Update CVE patchers Untested. I expect some breakage.
2020-08-08 12:03:23 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-1583/^4.6.3/0003.patch
Lots of device updates - d802: 15.1 -> 16.0 - d852: 15.1 -> 16.0 - d855: 15.1 -> 16.0 - fugu: 15.1 -> 16.0 - jfltexx: 14.1 -> 16.0 - m8: 15.1 -> 16.0 - mata: 15.1 -> 16.0 - update cherrypicks - defconfig: enable MMC_SECDISCARD
2019-08-22 12:24:29 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-6187/^4.6.5/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-6693/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-6696/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-8394/ANY/0001.patch
Update CVE patchers
2020-05-18 16:25:41 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-16USB/ANY/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-16USB/ANY/0009.patch
Lots of device updates - d802: 15.1 -> 16.0 - d852: 15.1 -> 16.0 - d855: 15.1 -> 16.0 - fugu: 15.1 -> 16.0 - jfltexx: 14.1 -> 16.0 - m8: 15.1 -> 16.0 - mata: 15.1 -> 16.0 - update cherrypicks - defconfig: enable MMC_SECDISCARD
2019-08-22 12:24:29 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-0610/ANY/0001.patch
Update CVE patchers I expect some breakage here
2020-10-06 21:14:18 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-0627/4.4/0009.patch
Update CVE patchers Includes many fixes for a69326f3 but probably breaks other things
2020-08-08 13:41:43 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-0627/ANY/0001.patch
Lots of device updates - d802: 15.1 -> 16.0 - d852: 15.1 -> 16.0 - d855: 15.1 -> 16.0 - fugu: 15.1 -> 16.0 - jfltexx: 14.1 -> 16.0 - m8: 15.1 -> 16.0 - mata: 15.1 -> 16.0 - update cherrypicks - defconfig: enable MMC_SECDISCARD
2019-08-22 12:24:29 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-0750/ANY/0001.patch
Update CVE patchers Untested. I expect some breakage.
2020-08-08 12:03:23 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-9059/^4.11.1/0001.patch
Update CVE patchers
2020-05-18 16:25:41 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-9711/4.4/0003.patch
Update CVE patchers I expect some breakage here
2020-10-06 21:14:18 -04:00
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-13218/4.4/0019.patch
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-13218/4.4/0027.patch
Lots of device updates - d802: 15.1 -> 16.0 - d852: 15.1 -> 16.0 - d855: 15.1 -> 16.0 - fugu: 15.1 -> 16.0 - jfltexx: 14.1 -> 16.0 - m8: 15.1 -> 16.0 - mata: 15.1 -> 16.0 - update cherrypicks - defconfig: enable MMC_SECDISCARD
2019-08-22 12:24:29 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-13693/^4.12.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-13694/^4.12.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-14875/ANY/0001.patch
Update CVE patchers Untested. I expect some breakage.
2020-08-08 12:03:23 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-18174/^4.7/0001.patch
Update CVE patchers
2020-11-04 10:20:46 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-18204/4.4/0004.patch
Lots of device updates - d802: 15.1 -> 16.0 - d852: 15.1 -> 16.0 - d855: 15.1 -> 16.0 - fugu: 15.1 -> 16.0 - jfltexx: 14.1 -> 16.0 - m8: 15.1 -> 16.0 - mata: 15.1 -> 16.0 - update cherrypicks - defconfig: enable MMC_SECDISCARD
2019-08-22 12:24:29 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-18306/4.4/0003.patch
Update CVE patchers Untested. I expect some breakage.
2020-08-08 12:03:23 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-1000252/^4.13.3/0002.patch
Update CVE patchers
2020-05-18 16:25:41 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5896/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5897/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5897/ANY/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5905/ANY/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5906/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5908/4.4/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5909/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5910/4.4/0003.patch
Update CVE patchers
2020-11-04 10:20:46 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-9415/ANY/0005.patch
Lots of device updates - d802: 15.1 -> 16.0 - d852: 15.1 -> 16.0 - d855: 15.1 -> 16.0 - fugu: 15.1 -> 16.0 - jfltexx: 14.1 -> 16.0 - m8: 15.1 -> 16.0 - mata: 15.1 -> 16.0 - update cherrypicks - defconfig: enable MMC_SECDISCARD
2019-08-22 12:24:29 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11273/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11818/ANY/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11919/4.4/0002.patch
Update CVE patchers
2019-09-03 17:42:03 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11984/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11986/ANY/0001.patch
Lots of device updates - d802: 15.1 -> 16.0 - d852: 15.1 -> 16.0 - d855: 15.1 -> 16.0 - fugu: 15.1 -> 16.0 - jfltexx: 14.1 -> 16.0 - m8: 15.1 -> 16.0 - mata: 15.1 -> 16.0 - update cherrypicks - defconfig: enable MMC_SECDISCARD
2019-08-22 12:24:29 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11987/ANY/0001.patch
Update CVE patchers
2019-09-03 17:42:03 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11988/ANY/0002.patch
Update CVE patchers I expect some breakage here
2020-10-06 21:14:18 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11988/ANY/0003.patch
Lots of device updates - d802: 15.1 -> 16.0 - d852: 15.1 -> 16.0 - d855: 15.1 -> 16.0 - fugu: 15.1 -> 16.0 - jfltexx: 14.1 -> 16.0 - m8: 15.1 -> 16.0 - mata: 15.1 -> 16.0 - update cherrypicks - defconfig: enable MMC_SECDISCARD
2019-08-22 12:24:29 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-12010/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-13912/ANY/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-13913/ANY/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-13914/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-13917/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-13920/ANY/0001.patch
Update CVE patchers
2020-11-04 10:20:46 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-16597/4.4/0002.patch
Update CVE patchers Untested. I expect some breakage.
2020-08-08 12:03:23 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-2054/ANY/0013.patch
Update CVE patchers - Drop tcp_sack=0 sysctl, as most devices are now patched
2020-10-12 15:19:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-2054/ANY/0014.patch
Update CVE patchers
2020-05-18 16:25:41 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-2264/ANY/0001.patch
Update CVE patchers I expect some breakage here
2020-10-06 21:14:18 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-2333/ANY/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-2341/ANY/0002.patch
Update CVE patchers
2020-05-18 16:25:41 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-8912/^4.20.11/0001.patch
Update CVE patchers
2019-11-04 18:57:33 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10494/ANY/0001.patch
processRelease features - support removing device out after complete - support malware scan before sign - Update cherry picks
2019-10-13 20:35:24 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10503/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10503/ANY/0002.patch
Update CVE patchers
2019-09-03 17:42:03 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10515/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10524/ANY/0003.patch
Update CVE patchers I expect some breakage here
2020-10-06 21:14:18 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10527/ANY/0004.patch
Update CVE patchers
2019-11-04 18:57:33 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10555/ANY/0002.patch
Update CVE patchers
2020-02-03 21:16:29 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10567/ANY/0004.patch
Update CVE patchers CVE-2019-19252 was dropped dependent on https://github.com/torvalds/linux/commit/d21b0be246bf3bbf569e6e239f56abb529c7154e
2019-12-02 19:42:35 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10584/ANY/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10614/ANY/0002.patch
Update CVE patchers
2020-05-04 17:18:50 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10622/ANY/0002.patch
Lots of device updates - d802: 15.1 -> 16.0 - d852: 15.1 -> 16.0 - d855: 15.1 -> 16.0 - fugu: 15.1 -> 16.0 - jfltexx: 14.1 -> 16.0 - m8: 15.1 -> 16.0 - mata: 15.1 -> 16.0 - update cherrypicks - defconfig: enable MMC_SECDISCARD
2019-08-22 12:24:29 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12378/^5.1.5/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12456/^5.1.5/0001.patch
Update CVE patchers I expect some breakage here
2020-10-06 21:14:18 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-14040/ANY/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-14041/ANY/0002.patch
Small fixes CVE-2019-14047/ANY/0002.patch will probably need to be disabled on more devices
2020-06-02 17:33:27 -04:00
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-14047/ANY/0002.patch
Update CVE patchers - Drop tcp_sack=0 sysctl, as most devices are now patched
2020-10-12 15:19:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-15291/4.4/0006.patch
Update CVE patchers
2019-11-04 18:57:33 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-16994/^5.0/0001.patch
Update CVE patchers - Drop tcp_sack=0 sysctl, as most devices are now patched
2020-10-12 15:19:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-19051/4.4/0012.patch
Update CVE patchers
2020-11-04 10:20:46 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-19068/4.4/0004.patch
Update CVE patchers
2020-12-03 21:47:27 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-19813/4.4/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-19816/4.4/0006.patch
Update CVE patchers - Drop tcp_sack=0 sysctl, as most devices are now patched
2020-10-12 15:19:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-11608/4.4/0006.patch
Update CVE patchers Includes many fixes for a69326f3 but probably breaks other things
2020-08-08 13:41:43 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-11608/^5.6.1/0001.patch
Update CVE patchers
2020-10-30 13:54:24 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-12352/ANY/0011.patch
Update CVE patchers - Drop tcp_sack=0 sysctl, as most devices are now patched
2020-10-12 15:19:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-14386/3.10-^4.4/0002.patch
Update CVE patchers
2020-10-14 14:35:00 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-16119/^5.10/0002.patch
Update CVE patchers
2020-12-03 21:47:27 -05:00
editKernelLocalversion "-dos.p98"
Lots of device updates - d802: 15.1 -> 16.0 - d852: 15.1 -> 16.0 - d855: 15.1 -> 16.0 - fugu: 15.1 -> 16.0 - jfltexx: 14.1 -> 16.0 - m8: 15.1 -> 16.0 - mata: 15.1 -> 16.0 - update cherrypicks - defconfig: enable MMC_SECDISCARD
2019-08-22 12:24:29 -04:00
cd "$DOS_BUILD_BASE"
Reference in New Issue Copy Permalink