Update CVE patchers

This commit is contained in:
Tad 2017-12-04 18:49:19 -05:00
parent dd7454b664
commit 9bed70363b
12 changed files with 222 additions and 7 deletions

View file

@ -58,11 +58,18 @@ git apply $cvePatches/CVE-2017-1000380/^4.11/0001.patch
git apply $cvePatches/CVE-2017-10998/3.18/0002.patch
git apply $cvePatches/CVE-2017-11001/ANY/0001.patch
git apply $cvePatches/CVE-2017-11002/ANY/0002.patch
git apply $cvePatches/CVE-2017-11016/ANY/0001.patch
git apply $cvePatches/CVE-2017-11019/ANY/0001.patch
git apply $cvePatches/CVE-2017-11025/ANY/0001.patch
git apply $cvePatches/CVE-2017-11028/3.18/0001.patch
git apply $cvePatches/CVE-2017-11030/3.18/0001.patch
git apply $cvePatches/CVE-2017-11031/ANY/0001.patch
git apply $cvePatches/CVE-2017-11032/ANY/0001.patch
git apply $cvePatches/CVE-2017-11033/3.18/0002.patch
git apply $cvePatches/CVE-2017-11044/ANY/0001.patch
git apply $cvePatches/CVE-2017-11045/ANY/0001.patch
git apply $cvePatches/CVE-2017-11046/ANY/0001.patch
git apply $cvePatches/CVE-2017-11048/ANY/0001.patch
git apply $cvePatches/CVE-2017-11049/ANY/0001.patch
git apply $cvePatches/CVE-2017-11057/ANY/0001.patch
git apply $cvePatches/CVE-2017-11067/ANY/0001.patch
git apply $cvePatches/CVE-2017-11089/ANY/0001.patch
@ -70,7 +77,9 @@ git apply $cvePatches/CVE-2017-11090/ANY/0001.patch
git apply $cvePatches/CVE-2017-11091/3.18/0001.patch
git apply $cvePatches/CVE-2017-11093/3.18/0001.patch
git apply $cvePatches/CVE-2017-12146/3.16+/0001.patch
git apply $cvePatches/CVE-2017-14897/ANY/0001.patch
git apply $cvePatches/CVE-2017-15265/^4.14/0001.patch
git apply $cvePatches/CVE-2017-15868/ANY/0001.patch
git apply $cvePatches/CVE-2017-16525/^4.13/0002.patch
git apply $cvePatches/CVE-2017-16526/^4.13/0001.patch
git apply $cvePatches/CVE-2017-16530/^4.13/0001.patch
@ -113,8 +122,10 @@ git apply $cvePatches/CVE-2017-9686/ANY/0001.patch
git apply $cvePatches/CVE-2017-9687/3.18/0001.patch
git apply $cvePatches/CVE-2017-9690/3.18/0001.patch
git apply $cvePatches/CVE-2017-9697/3.18/0001.patch
git apply $cvePatches/CVE-2017-9700/ANY/0001.patch
git apply $cvePatches/CVE-2017-9719/3.18/0001.patch
git apply $cvePatches/CVE-2017-9720/3.18/0002.patch
git apply $cvePatches/CVE-2017-9722/3.18/0001.patch
git apply $cvePatches/Untracked/ANY/0002-ozwpan-Use-unsigned-ints-to-prevent-heap-overflow.patch
git apply $cvePatches/Untracked/ANY/0003-tunnels-Don-t-apply-GRO-to-multiple-layers-of-encaps.patch
git apply $cvePatches/Untracked/ANY/0005-tcp-fix-zero-cwnd-in-tcp_cwnd_reduction.patch

View file

@ -95,9 +95,10 @@ git apply $cvePatches/CVE-2017-0862/3.10/0001.patch
git apply $cvePatches/CVE-2017-1000365/3.10/0001.patch
git apply $cvePatches/CVE-2017-1000380/^4.11/0001.patch
git apply $cvePatches/CVE-2017-10999/ANY/0001.patch
git apply $cvePatches/CVE-2017-11019/ANY/0001.patch
git apply $cvePatches/CVE-2017-11024/ANY/0001.patch
git apply $cvePatches/CVE-2017-11033/3.10/0001.patch
git apply $cvePatches/CVE-2017-11046/ANY/0001.patch
git apply $cvePatches/CVE-2017-11048/ANY/0001.patch
git apply $cvePatches/CVE-2017-11056/ANY/0001.patch
git apply $cvePatches/CVE-2017-11059/ANY/0001.patch
git apply $cvePatches/CVE-2017-11085/3.10/0001.patch

View file

@ -57,6 +57,8 @@ git apply $cvePatches/CVE-2017-0648/ANY/0001.patch
git apply $cvePatches/CVE-2017-0824/ANY/0001.patch
git apply $cvePatches/CVE-2017-1000365/3.10/0001.patch
git apply $cvePatches/CVE-2017-1000380/^4.11/0001.patch
git apply $cvePatches/CVE-2017-11016/ANY/0001.patch
git apply $cvePatches/CVE-2017-11033/3.10/0001.patch
git apply $cvePatches/CVE-2017-11600/3.10/0001.patch
git apply $cvePatches/CVE-2017-12153/3.2-^3.16/0001.patch
git apply $cvePatches/CVE-2017-15265/^4.14/0001.patch

View file

@ -51,6 +51,8 @@ git apply $cvePatches/CVE-2017-0537/ANY/0001.patch
git apply $cvePatches/CVE-2017-0648/ANY/0001.patch
git apply $cvePatches/CVE-2017-1000365/3.10/0001.patch
git apply $cvePatches/CVE-2017-1000380/^4.11/0001.patch
git apply $cvePatches/CVE-2017-11016/ANY/0001.patch
git apply $cvePatches/CVE-2017-11033/3.10/0001.patch
git apply $cvePatches/CVE-2017-11600/3.10/0001.patch
git apply $cvePatches/CVE-2017-12153/3.2-^3.16/0001.patch
git apply $cvePatches/CVE-2017-15265/^4.14/0001.patch

View file

@ -32,7 +32,9 @@ git apply $cvePatches/CVE-2017-0648/ANY/0001.patch
git apply $cvePatches/CVE-2017-0750/ANY/0001.patch
git apply $cvePatches/CVE-2017-0861/3.10/0001.patch
git apply $cvePatches/CVE-2017-0862/3.10/0001.patch
git apply $cvePatches/CVE-2017-11016/ANY/0001.patch
git apply $cvePatches/CVE-2017-11024/ANY/0001.patch
git apply $cvePatches/CVE-2017-11033/3.10/0001.patch
git apply $cvePatches/CVE-2017-11085/3.10/0001.patch
git apply $cvePatches/CVE-2017-11089/ANY/0001.patch
git apply $cvePatches/CVE-2017-11090/ANY/0001.patch

View file

@ -69,8 +69,9 @@ git apply $cvePatches/CVE-2017-1000365/3.10/0001.patch
git apply $cvePatches/CVE-2017-1000380/^4.11/0001.patch
git apply $cvePatches/CVE-2017-10997/3.10/0001.patch
git apply $cvePatches/CVE-2017-10998/3.10/0001.patch
git apply $cvePatches/CVE-2017-11019/ANY/0001.patch
git apply $cvePatches/CVE-2017-11024/ANY/0001.patch
git apply $cvePatches/CVE-2017-11048/ANY/0001.patch
git apply $cvePatches/CVE-2017-11033/3.10/0001.patch
git apply $cvePatches/CVE-2017-11056/ANY/0001.patch
git apply $cvePatches/CVE-2017-11059/ANY/0001.patch
git apply $cvePatches/CVE-2017-11085/3.10/0001.patch

View file

@ -17,7 +17,7 @@ git apply $cvePatches/CVE-2017-0751/ANY/0001.patch
git apply $cvePatches/CVE-2017-0786/ANY/0001.patch
git apply $cvePatches/CVE-2017-1000380/^4.11/0001.patch
git apply $cvePatches/CVE-2017-11000/ANY/0002.patch
git apply $cvePatches/CVE-2017-11048/ANY/0001.patch
git apply $cvePatches/CVE-2017-11019/ANY/0001.patch
git apply $cvePatches/CVE-2017-11059/ANY/0001.patch
git apply $cvePatches/CVE-2017-11090/ANY/0001.patch
git apply $cvePatches/CVE-2017-12153/3.2-^3.16/0001.patch

View file

@ -63,6 +63,7 @@ git apply $cvePatches/CVE-2017-1000380/^4.11/0001.patch
git apply $cvePatches/CVE-2017-10996/ANY/0001.patch
git apply $cvePatches/CVE-2017-11089/ANY/0001.patch
git apply $cvePatches/CVE-2017-11090/ANY/0001.patch
git apply $cvePatches/CVE-2017-15868/ANY/0001.patch
git apply $cvePatches/CVE-2017-16525/^4.13/0002.patch
git apply $cvePatches/CVE-2017-16526/^4.13/0001.patch
git apply $cvePatches/CVE-2017-16529/^4.13/0001.patch

View file

@ -129,10 +129,11 @@ patch -p1 < $patches"android_external_sqlite/0001-Secure_Delete.patch" #Enable s
enter "frameworks/base"
git revert 0326bb5e41219cf502727c3aa44ebf2daa19a5b3 #re-enable doze on devices without gms
git fetch https://review.lineageos.org/LineageOS/android_frameworks_base refs/changes/75/151975/37 && git cherry-pick FETCH_HEAD #network traffic
git fetch https://review.lineageos.org/LineageOS/android_frameworks_base refs/changes/75/151975/38 && git cherry-pick FETCH_HEAD #network traffic
sed -i 's/DEFAULT_MAX_FILES = 1000;/DEFAULT_MAX_FILES = 0;/' services/core/java/com/android/server/DropBoxManagerService.java; #Disable DropBox
sed -i 's/com.android.messaging/org.smssecure.smssecure/' core/res/res/values/config.xml; #Change default SMS app to Silence
#sed -i 's|config_permissionReviewRequired">false|config_permissionReviewRequired">true|' core/res/res/values/config.xml; #XXX: Super awesome, but breaks quick tiles
#See https://github.com/CopperheadOS/platform_frameworks_opt_net_wifi/commit/c2a2f077a902226093b25c563e0117e923c7495b
patch -p1 < $patches"android_frameworks_base/0001-Reduced_Resolution.patch" #Allow reducing resolution to save power TODO: Add 800x480
#patch -p1 < $patches"android_frameworks_base/0002-Radio.patch" #Add a QS tile to control radio power #TODO: Breaks cell and SystemUI
patch -p1 < $patches"android_frameworks_base/0003-Signature_Spoofing.patch" #Allow packages to spoof their signature (MicroG)
@ -145,7 +146,7 @@ rm core/res/res/values/config.xml.orig core/res/res/values/strings.xml.orig
enter "packages/apps/CMParts"
rm -rf src/org/cyanogenmod/cmparts/cmstats/ res/xml/anonymous_stats.xml res/xml/preview_data.xml #Nuke part of CMStats
git fetch https://review.lineageos.org/LineageOS/android_packages_apps_CMParts refs/changes/15/113415/25 && git cherry-pick FETCH_HEAD #network traffic
git fetch https://review.lineageos.org/LineageOS/android_packages_apps_CMParts refs/changes/15/113415/26 && git cherry-pick FETCH_HEAD #network traffic
sed -i 's|config_showWeatherMenu">true|config_showWeatherMenu">false|' res/values/config.xml; #Disable Weather
patch -p1 < $patches"android_packages_apps_CMParts/0001-Remove_Analytics.patch" #Remove the rest of CMStats
patch -p1 < $patches"android_packages_apps_CMParts/0002-Reduced_Resolution.patch" #Allow reducing resolution to save power