[ROM][P31xx][KitKat][4.4.2] CM 11.0 w/Espresso10++ 3.0.101

[Android-Andi]

@Deltadroid you could try to remove the overlay and add https://github.com/andi34/android_k...mmit/b020f31ca54bbec6eaf981628cd348b8878de802

Gesendet von meinem A0001 mit Tapatalk

 

[Deltadroid]

P3110 Kernel patches

I've applied the latest security patches from kernel.org, added confirmation for vcard importation, and also fixed externel keyboards conflicting with the software keyboards (thanks to @Android-Andi). The kernel module for the official Keyboard-Dock must be manually modprobed now, but third party external hardware keyboards should not conflict with the software keyboard anymore.

cm-11-20170228-NIGHTLY-p3110.zip

device/samsung/espresso-common

    7aae50d (2 hours ago) Remove overlay for broken sec_keyboard driver (syphyr)

kernel/samsung/espresso10

    43a47c2 (2 hours ago) espresso10: build KEYBOARD_SEC_DOCK as module (Andreas Blaesius)
    b9c4f09 (17 hours ago) ALSA: pcm : Call kill_fasync() in stream lock (Takashi Iwai)
    a08b9dc (17 hours ago) sg_write()/bsg_write() is not fit to be called under KERNEL_DS (Al Viro)
    b7d0f68 (17 hours ago) Fix potential infoleak in older kernels (Linus Torvalds)
    253cf3b (17 hours ago) sctp: validate chunk len before actually using it (Marcelo Ricardo Leitner)
    dc95e28 (17 hours ago) tcp: take care of truncations done by sk_filter() (Eric Dumazet)
    397149a (17 hours ago) dccp: limit sk_filter trim to payload (Willem de Bruijn)
    687a006 (17 hours ago) rose: limit sk_filter trim to payload (Willem de Bruijn)
    ed75f88 (17 hours ago) net: Add __sock_queue_rcv_skb() (Ben Hutchings)
    041727d (17 hours ago) perf: Do not double free (Peter Zijlstra)
    d0d0288 (17 hours ago) perf: Fix perf_event_for_each() to use sibling (Michael Ellerman)
    99f0ec0 (17 hours ago) media: info leak in __media_device_enum_links() (Dan Carpenter)
    a0ec2d7 (17 hours ago) ARM: dma-mapping: don't allow DMA mappings to be marked executable (Russell King)
    eec3f00 (17 hours ago) can: raw: raw_setsockopt: limit number of can_filter that can be set (Marc Kleine-Budde)
    a6047b1 (17 hours ago) fuse: fix clearing suid, sgid for chown() (Miklos Szeredi)
    81e1b57 (17 hours ago) net: ping: check minimum size on ICMP header length (Kees Cook)
    3035200 (17 hours ago) locking/rtmutex: Prevent dequeue vs. unlock race (Thomas Gleixner)
    4f62d94 (17 hours ago) coredump: fix unfreezable coredumping task (Andrey Ryabinin)
    89d7a9f (17 hours ago) swapfile: fix memory corruption via malformed swapfile (Jann Horn)
    6e4f940 (18 hours ago) netfilter: nf_conntrack_sip: extend request line validation (Ulrich Weber)
    88fb0e3 (18 hours ago) tty: limit terminal size to 4M chars (Dmitry Vyukov)
    042e04a (18 hours ago) tty: vt, fix bogus division in csi_J (Jiri Slaby)
    9443d11 (18 hours ago) isofs: Do not return EACCES for unknown filesystems (Jan Kara)
    d1979f0 (18 hours ago) isofs: Refuse RW mount of the filesystem instead of making it RO (Jan Kara)
    6b4d442 (18 hours ago) crypto: gcm - Fix IV buffer size in crypto_gcm_setkey (Ondrej Mosnáček)
    b588044 (18 hours ago) fuse: listxattr: verify xattr list (Miklos Szeredi)
    2add406 (18 hours ago) fuse: fix killing s[ug]id in setattr (Miklos Szeredi)
    528220e (18 hours ago) fuse: invalidate dir dentry after chmod (Miklos Szeredi)
    64bd993 (18 hours ago) ext4: release bh in make_indexed_dir (gmail)
    a60cc67 (18 hours ago) ext4: bail out from make_indexed_dir() on first error (Jan Kara)
    f5d1251 (18 hours ago) mmc: block: don't use CMD23 with very old MMC cards (Daniel Glöckner)
    bf18b11 (18 hours ago) sctp: do not return the transmit err back to sctp_sendmsg (Xin Long)
    f3be176 (18 hours ago) ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Daeho Jeong)
    042b8ab (18 hours ago) netfilter: restart search if moved to other chain (Florian Westphal)
    059f6c1 (18 hours ago) dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Andrey Konovalov)
    feccedd (18 hours ago) tcp: avoid infinite loop in tcp_splice_read() (Eric Dumazet)

packages/apps/ContactsCommon

    de1d356 (4 days ago) Ask for confirmation before importing from vcard (xpduyson)

Sources:

https://github.com/syphyr/android_kernel_samsung_espresso10
https://github.com/syphyr/android_device_samsung_espresso-common
https://github.com/syphyr/android_device_samsung_p3110

 

[Deltadroid]

I thought it would be that easy but sadly there is no difference, still there is no way to change keyboard layout. Thanks anyway

It should be fixed now with latest version.

 

[iks8]

It should be fixed now with latest version.

Thank you a lot, it works great as it should. Finnaly I don't have to use some crappy workarounds to use my keyboard great job :good:

 

[Deltadroid]

p3110 more security patches

I have fixed a long standing bug (a few years old) related to booting into the system. Booting into the system would hang because it was always checking and fixing orphaned files. Also, there are a few more kernel and ROM commits related to this month's security patches.

cm-11-20170312-NIGHTLY-p3110.zip

bionic

    182f44f (2 days ago) Update timezone data to 2017a (Joachim Sauer)

external/chromium_org/third_party/opus/src

    c37cbfd (2 days ago) Ensure that NLSF cannot be negative when computing a min distance between them (Felicia Lim)

external/icu4c

    5c7f708 (6 days ago) Update timezone info to 2017a (niks255)

kernel/samsung/espresso10

    ea19721 (15 hours ago) mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any progress (Tetsuo Handa)
    3a250ec (15 hours ago) mm, vmstat: allow WQ concurrency to discover memory reclaim doesn't make any progress (Michal Hocko)
    8fee5fb (15 hours ago) af_unix: fix a fatal race with bit fields (Eric Dumazet)
    61bb15d (16 hours ago) ALSA: tlv: add DECLARE_TLV_DB_RANGE() (Clemens Ladisch)
    6bea2df (16 hours ago) ALSA: tlv: compute TLV_*_ITEM lengths automatically (Clemens Ladisch)
    6b290f10 (16 hours ago) mm/memory_hotplug.c: check for missing sections in test_pages_in_a_zone() (Andrew Banman)
    40f2c81 (16 hours ago) ALSA: seq: Fix race at timer setup and close (Takashi Iwai)
    058b9db (16 hours ago) ALSA: seq: Fix missing NULL check at remove_events ioctl (Takashi Iwai)
    3ff7c03 (16 hours ago) ALSA: control: Avoid kernel warnings from tlv ioctl with numid 0 (Takashi Iwai)
    5928c70 (16 hours ago) ALSA: seq: Fix snd_seq_call_port_info_ioctl in compat mode (Nicolas Boichat)
    8a494f3 (16 hours ago) ALSA: pcm: Fix snd_pcm_hw_params struct copy in compat mode (Nicolas Boichat)
    ae1f14f (16 hours ago) ALSA: seq: Degrade the error message for too many opens (Takashi Iwai)
    1d4d167 (16 hours ago) ALSA: seq: Fix incorrect sanity check at snd_seq_oss_synth_cleanup() (Takashi Iwai)
    b171f4c (16 hours ago) ALSA: timer: Fix race between stop and interrupt (Takashi Iwai)
    b17124e (16 hours ago) ALSA: dummy: Implement timer backend switching more safely (Takashi Iwai)
    4f8da02 (16 hours ago) ALSA: seq: Fix lockdep warnings due to double mutex locks (Takashi Iwai)
    99699850 (16 hours ago) ALSA: timer: Fix link corruption due to double start or stop (Takashi Iwai)
    8140e56 (16 hours ago) ALSA: seq: Fix yet another races among ALSA timer accesses (Takashi Iwai)
    d3d6fee (16 hours ago) ALSA: timer: Fix leftover link at closing (Takashi Iwai)
    99d8e5d (16 hours ago) ALSA: timer: Fix wrong instance passed to slave callbacks (Takashi Iwai)
    a49727b (16 hours ago) ALSA: timer: Fix race at concurrent reads (Takashi Iwai)
    ba493e1 (16 hours ago) ext4: fix NULL pointer dereference in ext4_mark_inode_dirty() (Eryu Guan)
    ea9b30c (2 days ago) ext4: short-cut orphan cleanup on error (Vegard Nossum)
    a521b2e (2 days ago) ext4: fix hang when processing corrupted orphaned inode list (Theodore Ts'o)

This ROM can be reproduced with the following manifest:
https://github.com/syphyr/cm_build_scripts/blob/master/local_manifests/local_manifests_cm-11.xml

 

[Deltadroid]

March 2017 security patches

I've updated to the latest android security patches for March.

cm-11-20170327-NIGHTLY-p3110.zip

build

    0472f41 (3 minutes ago) Fix "Update Security String to 2017-03-01" typo (xpduyson)
    cd55bfe (4 days ago) Update Security String to 2017-03-01 (xpduyson)

external/libnfc-nci

    7237a85 (4 days ago) Fix native crash in nfc_ncif_proc_activate (fang.x.chen)

external/openssl

    26be729 (4 days ago) Fix overflow check in BN_bn2dec() (Kazuki Yamaguchi)
    e47b427 (4 days ago) Check for errors in BN_bn2dec() (Dr. Stephen Henson)

frameworks/av

    9406be7 (4 days ago) DO NOT MERGE - improve audio effect framwework thread safety (xpduyson)
    3ef0f5d (4 days ago) DO NOT MERGE - audioflinger: fix recursive mutex lock in EffectHandle. (Eric Laurent)

frameworks/base

    8306880 (4 days ago) Fix exploit where can hide the fact that a location was mocked (Tom O'Neill)

packages/apps/PackageInstaller

    29b1bb1 (4 days ago) Prioritize package installer intent filter (Philip P. Moltmann)

 

[Deltadroid]

April 2017 Security Patches

I've updated to latest security patches for April 2017. cm-11-20170409-NIGHTLY-p3110.zip

build

    dc95374 (4 minutes ago) Update Security String to 2017-04-01 (xpduyson)

external/skia

    3e04f18 (18 hours ago) Fix out of bounds memory read in GIFMovie.cpp (Leon Scroggins III)

external/sonivox

    6c1603c (17 hours ago) eas_mdls: fix OOB read. (Wei Jia)

frameworks/av

    7432bdd (17 hours ago) CameraBase: Don't return an sp<> by reference (Eino-Ville Talvala)
    0e0d2a8 (18 hours ago) Fix overflow check and check read result (Marco Nelissen)
    31adb9b (18 hours ago) resolve merge conflicts of 79cf158c51 to mnc-dev (Marco Nelissen)

frameworks/native

    7e56e87 (18 hours ago) Fix security vulnerability (Fabien Sanglard)

kernel/samsung/espresso10

    3f75dc7 (4 days ago) l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() (Guillaume Nault)
    2c8734e (4 days ago) l2tp: fix oops in L2TP IP sockets for connect() AF_UNSPEC case (James Chapman)
    34e8965 (4 days ago) keys: Guard against null match function in keyring_search_aux() (Ben Hutchings)
    2def283 (4 days ago) ipv4: keep skb->dst around in presence of IP options (Eric Dumazet)
    14e865b2 (8 days ago) ALSA: seq: Fix race at creating a queue (Takashi Iwai)
    35a1a2f (8 days ago) ping: fix a null pointer dereference (WANG Cong)
    d43dbdb (9 days ago) tcp: fix overflow in __tcp_retransmit_skb() (Eric Dumazet)
    eff2e72 (9 days ago) tcp: fix wrong checksum calculation on MTU probing (Douglas Caetano dos Santos)
    abfa58e (9 days ago) tcp: fix 0 divide in __tcp_select_window() (Eric Dumazet)
    b571625 (9 days ago) tty: n_hdlc: get rid of racy n_hdlc.tbuf (Alexander Popov)
    d35ed50 (9 days ago) TTY: n_hdlc, fix lockdep false positive (Jiri Slaby)

packages/services/Telephony

    997ec20 (18 hours ago) Added permission check for setCellInfoListRate (Jack Yu)

 

[JT1510365]

Does anyone have a stable build of cm11 which is based on 4.4.2 not 4.4.4 I need a snapshot build or any other build that's stable would be good I don't want to use the 4.4.4 version Thanks in advance and I hope you can find it for me

 

[mymeatb18]

Does anyone have a stable build of cm11 which is based on 4.4.2 not 4.4.4 I need a snapshot build or any other build that's stable would be good I don't want to use the 4.4.4 version Thanks in advance and I hope you can find it for me

Is there any reason why u don't want to use kit kat. Ive been using this ROM since it came out and the only problem I ever have is an occasional restart. Could probably use a clean flash but only happens about once a month

Sent from my LG-H811 using Tapatalk

 

[JT1510365]

Is there any reason why u don't want to use kit kat. Ive been using this ROM since it came out and the only problem I ever have is an occasional restart. Could probably use a clean flash but only happens about once a month

4.4.2 is kitkat and i need that rom i dont want 4.4.4

 

[Lightracer]

4.4.2 is kitkat and i need that rom i dont want 4.4.4

4.4.4 is also KitKat?

 

[JT1510365]

4.4.4 is also KitKat?

yes it is 4.4 - 4.4.4 is kitkat 5.0 - 5.1.1 is lollipop 6.0 - 6.0.1 is Marshmallow 7.0 - 7.1.2 is Nougat

 

[Lightracer]

yes it is 4.4 - 4.4.4 is kitkat 5.0 - 5.1.1 is lollipop 6.0 - 6.0.1 is Marshmallow 7.0 - 7.1.2 is Nougat

No 4.4.2-4.4.4 is kitkat

 

[smart-t78]

No 4.4.2-4.4.4 is kitkat

look here https://en.wikipedia.org/wiki/Android_version_history

 

[Lightracer]

look here https://en.wikipedia.org/wiki/Android_version_history

Well 4.4.x is kitkat so 4.4.2 is still kitkat
(Looking back, I thought they said 4.4.2 wasnt kitkat ?)

 

[JT1510365]

No 4.4.2-4.4.4 is kitkat

no 4.4 - 4.4.4 is kitkat i know this because i have seen it there is a 4.4 android version which is kitkat also

---------- Post added at 06:14 PM ---------- Previous post was at 06:13 PM ----------

Well 4.4.x is kitkat so 4.4.2 is still kitkat
(Looking back, I thought they said 4.4.2 wasnt kitkat ?)

omg i am done with you people 4.4-4.4.4 is kitkat and im not going to tell you anymore

 

[Deltadroid]

P3110 ROM security updates for May, 2017 (with additional upstream kernel security updates, including Blind Data Injection Attack Mitigation).

cm-11-20170523-NIGHTLY-p3110.zip

build

    76bf27b (15 hours ago) Update Security String to 2017-05-01 (WolfEnders)
external/freetype

    0fb8dd6 (3 weeks ago) Update FreeType from 2.6.2 to c38be52bf8de (2.7 + a few post-2.7 CLs) (Jungshik Shin)

frameworks/av

    4ff8b71 (9 days ago) codecs: handle onReset() for a few encoders (Wonsik Kim)
    4cf0d75 (9 days ago) FLACExtractor: copy protect mWriteBuffer (Robert Shih)
    dc2dfb0 (2 weeks ago) Add bounds check in SoftAACEncoder2::onQueueFilled() (Ray Essick)
    fd0ece2 (2 weeks ago) Fix NPDs in h263 decoder (Marco Nelissen)
    dceb630 (2 weeks ago) Fix integer overflow and divide-by-zero (Marco Nelissen)
    4772999 (2 weeks ago) Fix out of bounds access (Marco Nelissen)

frameworks/base

    28a24a4 (9 days ago) [DO NOT MERGE] Check bounds in offsetToPtr (Fyodor Kupolov)

kernel/samsung/espresso10

    4f9278d (12 hours ago) tcp: do_tcp_sendpages() must try to push data out on oom conditions (Willy Tarreau)
    48c1ae9 (13 hours ago) vfs: fix uninitialized flags in splice_to_pipe() (Miklos Szeredi)
    f6f0de8 (13 hours ago) tracing: Fix crash from reading trace_pipe with sendfile (Steven Rostedt (Red Hat))
    b3390f0 (13 hours ago) vfs: Avoid softlockups with sendfile(2) (Jan Kara)
    c729720 (13 hours ago) vfs: Make sendfile(2) killable even better (Jan Kara)
    f288aef (13 hours ago) splice: sendfile() at once fails for big files (Christophe Leroy)
    91a88b9 (13 hours ago) splice: Apply generic position and size checks to each write (Ben Hutchings)
    a5c1cca (13 hours ago) sctp: start t5 timer only when peer rwnd is 0 and local state is SHUTDOWN_PENDING (lucien)
    6517401 (13 hours ago) net: possible use after free in dst_release (Francesco Ruggeri)
    c295f41 (13 hours ago) net: fix a race in dst_release() (Eric Dumazet)
    635b397 (13 hours ago) net/ipv6: add sysctl option accept_ra_min_hop_limit (Hangbin Liu)
    4a13b41 (13 hours ago) ipv6/udp: use sticky pktinfo egress ifindex on connect() (Paolo Abeni)
    2fd82bc (13 hours ago) ipv6: update skb->csum when CE mark is propagated (Eric Dumazet)
    c8dfb66 (13 hours ago) tcp_yeah: don't set ssthresh below 2 (Neal Cardwell)
    1d181df (13 hours ago) sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long)
    46b21216 (13 hours ago) splice: handle zero nr_pages in splice_to_pipe() (Rabin Vincent)
    3acffaf (13 hours ago) sctp: Fix port hash table size computation (Neil Horman)
    810720b (13 hours ago) ipv4: fix memory leaks in ip_cmsg_send() callers (Eric Dumazet)
    9342532 (13 hours ago) sctp: lack the check for ports in sctp_v6_cmp_addr (Xin Long)
    21575a5 (13 hours ago) ipv4: l2tp: fix a potential issue in l2tp_ip_recv (Haishuang Yan)
    55bb74b (13 hours ago) net: validate variable length ll headers (Willem de Bruijn)
    0061340 (13 hours ago) vlan: Fix header ops passthru when doing TX VLAN offload. (David S. Miller)
    3ee7140 (13 hours ago) nf_conntrack: avoid kernel pointer value leak in slab name (Linus Torvalds)
    d252183 (13 hours ago) net/sched: em_meta: Fix 'meta vlan' to correctly recognize zero VID frames (Shmulik Ladkani)
    1777c9d (13 hours ago) net, sched: fix soft lockup in tc_classify (Daniel Borkmann)
    28a081a (14 hours ago) ipmr/ip6mr: Initialize the last assert time of mfc entries. (Tom Goff)
    fd6118c (14 hours ago) sctp: deny peeloff operation on asocs with threads sleeping on it (Marcelo Ricardo Leitner)
    6196086 (14 hours ago) sctp: avoid BUG_ON on sctp_wait_for_sndbuf (Marcelo Ricardo Leitner)
    5cde0f2 (14 hours ago) mld: do not remove mld souce list info when set link down (Hangbin Liu)
    2d04463 (14 hours ago) igmp, mld: Fix memory leak in igmpv3/mld_del_delrec() (Hangbin Liu)
    3050077 (14 hours ago) igmp: do not remove igmp souce list info when set link down (Hangbin Liu)
    c1ebf9b (14 hours ago) ipv6: pointer math error in ip6_tnl_parse_tlv_enc_lim() (Dan Carpenter)
    9a9de2d (14 hours ago) ipv6: fix ip6_tnl_parse_tlv_enc_lim() (Eric Dumazet)
    1b7df57 (14 hours ago) net: socket: fix recvmmsg not returning error from sock_error (Maxime Jayat)
    3a8bdd1 (14 hours ago) ipv6: addrconf: Avoid addrconf_disable_change() using RCU read-side lock (Kefeng Wang)
    798ae25 (14 hours ago) igmp: Make igmp group member RFC 3376 compliant (Michal Tesar)
    f93f3a5 (14 hours ago) ipv6: handle -EFAULT from skb_copy_bits (Dave Jones)
    1fa033c (14 hours ago) netvsc: reduce maximum GSO size (stephen hemminger)
    1ece35a (14 hours ago) net/dccp: fix use-after-free in dccp_invalid_packet (Eric Dumazet)
    5e1c513 (14 hours ago) sctp: assign assoc_id earlier in __sctp_connect (Marcelo Ricardo Leitner)
    31bbd19 (14 hours ago) ipv6: dccp: fix out of bound access in dccp_v6_err() (Eric Dumazet)
    5153daf (14 hours ago) dccp: fix out of bound access in dccp_v4_err() (Eric Dumazet)
    9a3123e (14 hours ago) dccp: do not send reset to already closed sockets (Eric Dumazet)
    75be96b (14 hours ago) net: mangle zero checksum in skb_checksum_help() (Eric Dumazet)
    aa99a4e (14 hours ago) net: clear sk_err_soft in sk_clone_lock() (Eric Dumazet)
    9b1e605 (14 hours ago) net: sctp, forbid negative length (Jiri Slaby)
    3f59fb3 (14 hours ago) net: avoid sk_forward_alloc overflows (Eric Dumazet)
    b6b861f (14 hours ago) net: fix sk_mem_reclaim_partial() (Eric Dumazet)
    4a3b7b6 (14 hours ago) sock: fix sendmmsg for partial sendmsg (Soheil Hassas Yeganeh)
    b46b8af (2 weeks ago) tcp: make challenge acks less predictable (Eric Dumazet)
    a79aa75 (2 weeks ago) tcp: RFC 5961 5.2 Blind Data Injection Attack Mitigation (Eric Dumazet)
    eeee63c (2 weeks ago) tcp: tcp_replace_ts_recent() should not be called from tcp_validate_incoming() (Eric Dumazet)
    aa44531 (2 weeks ago) tcp: refine SYN handling in tcp_validate_incoming (Eric Dumazet)
    dab6b02 (2 weeks ago) tcp: implement RFC 5961 4.2 (Eric Dumazet)
    c462e0b (2 weeks ago) tcp: implement RFC 5961 3.2 (Eric Dumazet)
    5166307 (2 weeks ago) tcp: fix build error if !CONFIG_SYN_COOKIES (Eric Dumazet)
    21d7b19 (2 weeks ago) tcp: Change possible SYN flooding messages (Eric Dumazet)
    09cc48c (2 weeks ago) ping: implement proper locking (Eric Dumazet)
    960c975 (6 weeks ago) udp: properly support MSG_PEEK with truncated buffers (Eric Dumazet)
    24fbf44 (6 weeks ago) Revert "udp: remove redundant variable" (David S. Miller)

 

[Deltadroid]

P3110 ROM security updates for June, 2017 ,including commit to hide "su" from the system when root is disabled. This helps to protect system from malicious apps trying to access root privileges. This also allows system to pass safetynet check when root is disabled (disable root in developer settings and then clear play store data to obtain "certified" status in play store).

cm-11-20170613-NIGHTLY-p3110.zip

build

    3b2cbb1 (2 days ago) Update Security String to 2017-06-01 (Dang Duy Son)

external/bluetooth/bluedroid

    47dec84 (2 days ago) Check LE advertising data length before caching advertising records (Jack He)

external/libvpx

    521365d (4 days ago) Limit vpx decoder to 4K frames (Marco Nelissen)

external/libxml2

    762fc8c (2 days ago) DO NOT MERGE: Use correct limit for port values (Brian C. Young)
    3f3e901 (4 days ago) DO NOT MERGE: Disallow namespace nodes in XPointer ranges (Brian C. Young)
    092bc8b (4 days ago) DO NOT MERGE: Heap buffer overflow in xmlAddID (Brian C. Young)
    48268ae (4 days ago) DO NOT MERGE: fix for the XPath nodeTab use-after-free bug from [email protected] (Brian C. Young)
    28203a3 (4 days ago) DO NOT MERGE: Add validation for eternal enities (Brian C. Young)
    fdb2fe6 (4 days ago) DO NOT MERGE: Apply upstream Chromium patch for encoding changes (Brian C. Young)
    6444789 (5 days ago) DO NOT MERGE: Fix XPointer paths beginning with range-to (Brian C. Young)

kernel/samsung/espresso10

    4d7d586 (7 days ago) crypto: ahash - Fix EINPROGRESS notification callback (Herbert Xu)
    8e91c84 (7 days ago) crypto: hash - Simplify the ahash_finup implementation (Marek Vasut)
    d50b2ba (7 days ago) crypto: hash - Pull out the functions to save/restore request (Marek Vasut)
    45ed1ce (7 days ago) crypto: hash - Fix the pointer voodoo in unaligned ahash (Marek Vasut)
    1bdc536 (7 days ago) crypto: ahash - Fully restore ahash request before completing (Marek Vasut)
    6ce2ba9 (7 days ago) xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Andy Whitcroft)
    3a49129 (7 days ago) ALSA: seq: Fix link corruption by event error handling (Takashi Iwai)
    e493057 (7 days ago) ALSA: ctxfi: Fallback DMA mask to 32bit (Takashi Iwai)
    ef65762 (7 days ago) ALSA: timer: Reject user params with too small ticks (Takashi Iwai)
    be8990b (7 days ago) net sched actions: decrement module reference count after table flush. (Roman Mashak)
    c4d47bc (7 days ago) net/dccp: fix use after free in tw_timer_handler() (Andrey Ryabinin)
    943da9cc (7 days ago) fuse: add missing FR_FORCE (Miklos Szeredi)
    871ea8e (7 days ago) KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (Eric Biggers)
    f7d4bad (7 days ago) KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells)
    3d880b5 (7 days ago) KEYS: Reinstate EPERM for a key type name beginning with a '.' (David Howells)
    4e59cda (7 days ago) KEYS: special dot prefixed keyring name bug fix (Mimi Zohar)
    8ffba98 (7 days ago) ipv6/dccp: do not inherit ipv6_mc_list from parent (WANG Cong)
    a6eef9b (7 days ago) sctp: do not inherit ipv6_{mc|ac|fl}_list from parent (Eric Dumazet)
    97e0b90 (7 days ago) ipv6: Check ip6_find_1stfragopt() return value properly. (David S. Miller)
    1adb759 (7 days ago) ipv6: Prevent overrun when parsing v6 header options (Craig Gallek)
    0017e3c (7 days ago) dccp/tcp: do not inherit mc_list from parent (Eric Dumazet)
    aff4e20 (7 days ago) n_tty: Fix n_tty_write crash when echoing in raw mode (Peter Hurley)
    40fc890 (7 days ago) android: drivers: workaround debugfs race in binder (Riley Andrews)
    c7fcc2d (7 days ago) Staging: android: binder: Add some tracepoints (Arve Hjønnevåg)
    cc5a0e7 (7 days ago) Fix CVE-2014-3153 (Thomas Gleixner)
    306da41 (7 days ago) ARM: 7419/1: vfp: fix VFP flushing regression on sigreturn path (Will Deacon)
    e893b18 (7 days ago) ARM: 7400/1: vfp: clear fpscr length and stride bits on entry to sig handler (Will Deacon)
    bc1d5f0 (7 days ago) ARM: 7399/1: vfp: move user vfp state save/restore code out of signal.c (Will Deacon)
    344e26a (7 days ago) mm: reorder can_do_mlock to fix audit denial (Jeff Vander Stoep)
    d663f46 (7 days ago) mnt: Only change user settable mount flags in remount (Eric W. Biederman)
    19db01b (7 days ago) net/l2tp: don't fall back on UDP [get|set]sockopt (Sasha Levin)
    633b2a7 (7 days ago) net: ipv4: current group_info should be put after using. (JP Abgrall)
    8d9f766 (7 days ago) net: add length argument to skb_copy_and_csum_datagram_iovec (Sabrina Dubroca)
    262e5bd (7 days ago) net: Fix skb csum races when peeking (Herbert Xu)
    5bbca7f (7 days ago) bcmdhd wireless: Fix sprintf/sscanf format strings. (Christian Neumüller)
    b119984 (7 days ago) bcmdhd wireless: Fix more off by one errors. (Christian Neumüller)
    9aad3a9 (7 days ago) bcmdhd wireless: Fix off by one in initialization. (Christian Neumüller)
    3ed718f (2 weeks ago) kernel: Fix potential refcount leak in su check (Tom Marshall)
    db7c544 (2 weeks ago) kernel: Only expose su when daemon is running (Tom Marshall)

packages/apps/Bluetooth

    2cdf561 (2 days ago) OPP: Restrict file based URI access to external storage (Jack He)

 

[Juancq]

not work

P3110 ROM security updates for June, 2017 ,including commit to hide "su" from the system when root is disabled. This helps to protect system from malicious apps trying to access root privileges. This also allows system to pass safetynet check when root is disabled (disable root in developer settings and then clear play store data to obtain "certified" status in play store).

build

    3b2cbb1 (2 days ago) Update Security String to 2017-06-01 (Dang Duy Son)

external/bluetooth/bluedroid

    47dec84 (2 days ago) Check LE advertising data length before caching advertising records (Jack He)

external/libvpx

    521365d (4 days ago) Limit vpx decoder to 4K frames (Marco Nelissen)

external/libxml2

    762fc8c (2 days ago) DO NOT MERGE: Use correct limit for port values (Brian C. Young)
    3f3e901 (4 days ago) DO NOT MERGE: Disallow namespace nodes in XPointer ranges (Brian C. Young)
    092bc8b (4 days ago) DO NOT MERGE: Heap buffer overflow in xmlAddID (Brian C. Young)
    48268ae (4 days ago) DO NOT MERGE: fix for the XPath nodeTab use-after-free bug from [email protected] (Brian C. Young)
    28203a3 (4 days ago) DO NOT MERGE: Add validation for eternal enities (Brian C. Young)
    fdb2fe6 (4 days ago) DO NOT MERGE: Apply upstream Chromium patch for encoding changes (Brian C. Young)
    6444789 (5 days ago) DO NOT MERGE: Fix XPointer paths beginning with range-to (Brian C. Young)

kernel/samsung/espresso10

    4d7d586 (7 days ago) crypto: ahash - Fix EINPROGRESS notification callback (Herbert Xu)
    8e91c84 (7 days ago) crypto: hash - Simplify the ahash_finup implementation (Marek Vasut)
    d50b2ba (7 days ago) crypto: hash - Pull out the functions to save/restore request (Marek Vasut)
    45ed1ce (7 days ago) crypto: hash - Fix the pointer voodoo in unaligned ahash (Marek Vasut)
    1bdc536 (7 days ago) crypto: ahash - Fully restore ahash request before completing (Marek Vasut)
    6ce2ba9 (7 days ago) xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Andy Whitcroft)
    3a49129 (7 days ago) ALSA: seq: Fix link corruption by event error handling (Takashi Iwai)
    e493057 (7 days ago) ALSA: ctxfi: Fallback DMA mask to 32bit (Takashi Iwai)
    ef65762 (7 days ago) ALSA: timer: Reject user params with too small ticks (Takashi Iwai)
    be8990b (7 days ago) net sched actions: decrement module reference count after table flush. (Roman Mashak)
    c4d47bc (7 days ago) net/dccp: fix use after free in tw_timer_handler() (Andrey Ryabinin)
    943da9cc (7 days ago) fuse: add missing FR_FORCE (Miklos Szeredi)
    871ea8e (7 days ago) KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (Eric Biggers)
    f7d4bad (7 days ago) KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells)
    3d880b5 (7 days ago) KEYS: Reinstate EPERM for a key type name beginning with a '.' (David Howells)
    4e59cda (7 days ago) KEYS: special dot prefixed keyring name bug fix (Mimi Zohar)
    8ffba98 (7 days ago) ipv6/dccp: do not inherit ipv6_mc_list from parent (WANG Cong)
    a6eef9b (7 days ago) sctp: do not inherit ipv6_{mc|ac|fl}_list from parent (Eric Dumazet)
    97e0b90 (7 days ago) ipv6: Check ip6_find_1stfragopt() return value properly. (David S. Miller)
    1adb759 (7 days ago) ipv6: Prevent overrun when parsing v6 header options (Craig Gallek)
    0017e3c (7 days ago) dccp/tcp: do not inherit mc_list from parent (Eric Dumazet)
    aff4e20 (7 days ago) n_tty: Fix n_tty_write crash when echoing in raw mode (Peter Hurley)
    40fc890 (7 days ago) android: drivers: workaround debugfs race in binder (Riley Andrews)
    c7fcc2d (7 days ago) Staging: android: binder: Add some tracepoints (Arve Hjønnevåg)
    cc5a0e7 (7 days ago) Fix CVE-2014-3153 (Thomas Gleixner)
    306da41 (7 days ago) ARM: 7419/1: vfp: fix VFP flushing regression on sigreturn path (Will Deacon)
    e893b18 (7 days ago) ARM: 7400/1: vfp: clear fpscr length and stride bits on entry to sig handler (Will Deacon)
    bc1d5f0 (7 days ago) ARM: 7399/1: vfp: move user vfp state save/restore code out of signal.c (Will Deacon)
    344e26a (7 days ago) mm: reorder can_do_mlock to fix audit denial (Jeff Vander Stoep)
    d663f46 (7 days ago) mnt: Only change user settable mount flags in remount (Eric W. Biederman)
    19db01b (7 days ago) net/l2tp: don't fall back on UDP [get|set]sockopt (Sasha Levin)
    633b2a7 (7 days ago) net: ipv4: current group_info should be put after using. (JP Abgrall)
    8d9f766 (7 days ago) net: add length argument to skb_copy_and_csum_datagram_iovec (Sabrina Dubroca)
    262e5bd (7 days ago) net: Fix skb csum races when peeking (Herbert Xu)
    5bbca7f (7 days ago) bcmdhd wireless: Fix sprintf/sscanf format strings. (Christian Neumüller)
    b119984 (7 days ago) bcmdhd wireless: Fix more off by one errors. (Christian Neumüller)
    9aad3a9 (7 days ago) bcmdhd wireless: Fix off by one in initialization. (Christian Neumüller)
    3ed718f (2 weeks ago) kernel: Fix potential refcount leak in su check (Tom Marshall)
    db7c544 (2 weeks ago) kernel: Only expose su when daemon is running (Tom Marshall)

packages/apps/Bluetooth

    2cdf561 (2 days ago) OPP: Restrict file based URI access to external storage (Jack He)

i flash the rom but it doesnt work, always stay in the boot animation

 

[Deltadroid]

i flash the rom but it doesnt work, always stay in the boot animation

I think the issue is with gapps.

Try flashing the ROM without installing gapps. Boot into the system, then reboot back to recovery and install gapps..

Edit:

Even though flashing gapps after flashing the ROM seems to work around the issue, I will take a look and see if I can find a better solution.

Edit2:

@Juancq Google Search seems to be the problem. It looks like Google recently broke cm-11 with their latest version of Google Search. The ROM is fine. The latest version of Google Search breaks all the cm-11 ROMS that I have posted.