Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1236127 > unrolled thread

[3.16.y-ckt stable] Linux 3.16.7-ckt18 stable review

Started byLuis Henriques <luis.henriques@canonical.com>
First post2015-09-30 12:50 +0200
Last post2015-09-30 12:50 +0200
Articles 4 — 1 participant

Back to article view | Back to linux.kernel


Contents

  [3.16.y-ckt stable] Linux 3.16.7-ckt18 stable review Luis Henriques <luis.henriques@canonical.com> - 2015-09-30 12:50 +0200
    [PATCH 3.16.y-ckt 001/133] ipv6: addrconf: validate new MTU before applying it Luis Henriques <luis.henriques@canonical.com> - 2015-09-30 12:50 +0200
    [PATCH 3.16.y-ckt 007/133] xtensa: fix threadptr reload on return to userspace Luis Henriques <luis.henriques@canonical.com> - 2015-09-30 12:50 +0200
    [PATCH 3.16.y-ckt 006/133] HID: cp2112: fix byte order in SMBUS operations Luis Henriques <luis.henriques@canonical.com> - 2015-09-30 12:50 +0200

#1236127 — [3.16.y-ckt stable] Linux 3.16.7-ckt18 stable review

FromLuis Henriques <luis.henriques@canonical.com>
Date2015-09-30 12:50 +0200
Subject[3.16.y-ckt stable] Linux 3.16.7-ckt18 stable review
Message-ID<qeml5-1mP-5@gated-at.bofh.it>
This is the start of the review cycle for the Linux 3.16.7-ckt18 stable kernel.

This version contains 133 new patches, summarized below.  The new patches are
posted as replies to this message and also available in this git branch:

http://kernel.ubuntu.com/git/ubuntu/linux.git/log/?h=linux-3.16.y-review

git://kernel.ubuntu.com/ubuntu/linux.git  linux-3.16.y-review

The review period for version 3.16.7-ckt18 will be open for the next three days.
To report a problem, please reply to the relevant follow-up patch message.

For more information about the Linux 3.16.y-ckt extended stable kernel version,
see https://wiki.ubuntu.com/Kernel/Dev/ExtendedStable .

 -Luis

--
 .../ABI/testing/configfs-usb-gadget-loopback       |  2 +-
 .../ABI/testing/configfs-usb-gadget-sourcesink     |  2 +-
 arch/arm/Kconfig                                   |  1 +
 arch/arm/mach-omap2/clockdomains7xx_data.c         |  2 +-
 arch/arm/mach-orion5x/include/mach/irqs.h          | 64 +++++++-------
 arch/arm/mach-orion5x/irq.c                        |  4 +-
 arch/arm64/Kconfig                                 |  4 +
 arch/arm64/kernel/fpsimd.c                         |  1 +
 arch/parisc/kernel/irq.c                           |  8 +-
 arch/parisc/kernel/syscall.S                       |  2 +-
 arch/powerpc/include/asm/pgtable-ppc64.h           | 14 ++-
 arch/powerpc/include/asm/rtas.h                    |  1 +
 arch/powerpc/kernel/rtas.c                         | 17 ++++
 arch/powerpc/platforms/powernv/pci.c               |  5 +-
 arch/powerpc/platforms/pseries/ras.c               |  3 +-
 arch/powerpc/sysdev/fsl_msi.c                      |  5 +-
 arch/powerpc/sysdev/mpic_pasemi_msi.c              |  6 +-
 arch/powerpc/sysdev/mpic_u3msi.c                   |  5 +-
 arch/powerpc/sysdev/ppc4xx_msi.c                   |  5 +-
 arch/x86/crypto/ghash-clmulni-intel_glue.c         |  1 +
 arch/x86/kernel/cpu/mcheck/mce_intel.c             | 41 +++++----
 arch/x86/kvm/mmu.c                                 | 45 ----------
 arch/x86/lib/usercopy.c                            |  2 +-
 arch/x86/mm/init_32.c                              |  1 +
 arch/xtensa/include/asm/traps.h                    | 29 ++++---
 arch/xtensa/kernel/entry.S                         |  7 +-
 block/blk-mq-sysfs.c                               | 25 ++++--
 drivers/acpi/acpi_pnp.c                            |  1 +
 drivers/auxdisplay/ks0108.c                        |  1 +
 drivers/base/devres.c                              |  4 +-
 drivers/base/node.c                                | 10 +++
 drivers/base/platform.c                            |  8 +-
 drivers/clk/samsung/clk-exynos4.c                  |  2 +
 drivers/clk/versatile/clk-sp810.c                  |  4 +-
 drivers/gpu/drm/i915/i915_drv.h                    | 10 +--
 drivers/gpu/drm/i915/i915_gem_execbuffer.c         |  2 +-
 drivers/gpu/drm/qxl/qxl_display.c                  | 66 +++++++++------
 drivers/gpu/drm/qxl/qxl_drv.h                      |  2 +
 drivers/gpu/drm/radeon/atombios_dp.c               |  5 +-
 drivers/gpu/drm/radeon/radeon_combios.c            |  8 ++
 drivers/gpu/drm/radeon/radeon_connectors.c         |  5 ++
 drivers/hid/hid-cp2112.c                           | 10 +--
 drivers/hid/usbhid/hid-core.c                      |  2 +-
 drivers/iio/imu/adis16400_core.c                   |  2 +-
 drivers/iio/imu/adis16480.c                        | 39 +++++++--
 drivers/iio/industrialio-buffer.c                  |  2 +-
 drivers/iio/industrialio-event.c                   |  2 +-
 drivers/infiniband/core/uverbs.h                   |  3 +-
 drivers/infiniband/core/uverbs_cmd.c               | 10 ++-
 drivers/infiniband/core/uverbs_main.c              | 43 +++++++---
 drivers/infiniband/hw/mlx4/ah.c                    |  6 +-
 drivers/infiniband/hw/mlx4/mcg.c                   |  7 +-
 drivers/infiniband/hw/mlx4/sysfs.c                 |  5 +-
 drivers/infiniband/hw/qib/qib_keys.c               |  4 +
 drivers/infiniband/hw/qib/qib_verbs.c              | 14 ++-
 drivers/infiniband/hw/qib/qib_verbs.h              |  2 +
 drivers/input/evdev.c                              | 13 +--
 drivers/input/serio/ambakmi.c                      |  8 +-
 drivers/macintosh/windfarm_core.c                  |  2 +-
 drivers/md/Kconfig                                 |  2 +-
 drivers/md/md.c                                    |  2 +
 drivers/md/raid10.c                                |  5 +-
 drivers/media/platform/omap3isp/isp.c              |  4 +-
 drivers/media/rc/rc-main.c                         |  3 -
 drivers/mmc/core/core.c                            |  6 +-
 drivers/mmc/host/sdhci.c                           |  4 +-
 drivers/mtd/nand/pxa3xx_nand.c                     |  3 +
 drivers/mtd/ubi/block.c                            |  1 +
 drivers/net/ethernet/broadcom/genet/bcmgenet.c     |  2 +-
 drivers/net/ethernet/broadcom/tg3.c                |  2 +-
 drivers/net/ethernet/intel/igb/igb.h               |  1 +
 drivers/net/ethernet/intel/igb/igb_ethtool.c       |  5 +-
 drivers/net/ethernet/intel/igb/igb_main.c          | 16 +++-
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |  5 +-
 drivers/net/phy/fixed.c                            |  2 +-
 drivers/net/usb/usbnet.c                           |  7 +-
 drivers/net/virtio_net.c                           |  4 +-
 drivers/net/wireless/ath/ath10k/htc.c              |  4 +-
 drivers/net/wireless/ath/ath10k/htt_tx.c           |  8 +-
 drivers/net/wireless/ath/ath10k/pci.c              |  8 +-
 drivers/net/wireless/ath/ath10k/wmi.c              |  1 +
 drivers/net/wireless/rtlwifi/rtl8192cu/sw.c        |  1 +
 drivers/of/address.c                               |  6 +-
 drivers/pci/access.c                               | 61 ++++++++++++-
 drivers/pci/quirks.c                               | 18 +++-
 drivers/platform/x86/ideapad-laptop.c              |  7 ++
 drivers/regulator/pbias-regulator.c                |  5 ++
 drivers/rtc/rtc-s5m.c                              | 10 +++
 drivers/scsi/scsi_error.c                          | 11 ++-
 drivers/staging/comedi/drivers/adl_pci7x3x.c       | 16 +++-
 drivers/staging/comedi/drivers/usbduxsigma.c       | 99 ++++++++++------------
 drivers/tty/serial/8250/8250_pci.c                 | 81 +++++++++++++-----
 drivers/tty/serial/8250/8250_pnp.c                 | 11 +++
 drivers/usb/dwc3/ep0.c                             | 12 ++-
 drivers/usb/gadget/m66592-udc.c                    |  2 +-
 drivers/usb/host/ehci-sysfs.c                      |  8 +-
 drivers/usb/serial/ftdi_sio.c                      |  4 +
 drivers/usb/serial/ftdi_sio_ids.h                  |  8 ++
 drivers/usb/serial/qcserial.c                      |  1 +
 drivers/usb/serial/symbolserial.c                  |  6 +-
 fs/btrfs/transaction.c                             |  3 +
 fs/ceph/super.c                                    |  3 +-
 fs/cifs/cifsfs.c                                   |  6 +-
 fs/ecryptfs/dentry.c                               | 16 ++--
 fs/ext4/extents.c                                  | 13 ---
 fs/ext4/super.c                                    |  4 +-
 fs/gfs2/super.c                                    |  6 +-
 fs/hfs/bnode.c                                     |  9 +-
 fs/hfs/brec.c                                      | 20 +++--
 fs/hfs/super.c                                     |  4 +-
 fs/hfsplus/bnode.c                                 |  3 -
 fs/hfsplus/options.c                               |  4 +-
 fs/hostfs/hostfs_kern.c                            |  2 +-
 fs/hpfs/namei.c                                    | 25 +++++-
 fs/libfs.c                                         |  2 +-
 fs/nfs/nfs4proc.c                                  |  3 +-
 fs/nfs/pagelist.c                                  |  4 +-
 fs/ocfs2/super.c                                   |  4 +-
 fs/reiserfs/super.c                                |  8 +-
 fs/xfs/xfs_aops.c                                  |  3 +-
 fs/xfs/xfs_da_format.h                             | 11 ++-
 fs/xfs/xfs_dir2_data.c                             |  3 +-
 fs/xfs/xfs_dir2_node.c                             | 10 ++-
 fs/xfs/xfs_super.c                                 |  4 +-
 include/linux/etherdevice.h                        |  2 +-
 include/linux/iio/iio.h                            | 17 ++++
 include/linux/netlink.h                            | 13 ++-
 include/linux/pci.h                                |  2 +
 include/linux/seq_file.h                           | 35 ++++++++
 kernel/cgroup.c                                    |  5 +-
 kernel/fork.c                                      | 28 +++---
 kernel/sched/core.c                                |  8 ++
 kernel/task_work.c                                 | 12 +--
 mm/vmscan.c                                        |  2 +-
 net/batman-adv/distributed-arp-table.c             |  7 +-
 net/batman-adv/multicast.c                         | 87 ++++++++++++++-----
 net/batman-adv/network-coding.c                    |  7 +-
 net/batman-adv/originator.c                        |  5 ++
 net/batman-adv/soft-interface.c                    |  7 +-
 net/batman-adv/translation-table.c                 |  8 +-
 net/batman-adv/types.h                             | 15 ++--
 net/core/fib_rules.c                               | 14 +--
 net/ipv6/addrconf.c                                | 17 +++-
 net/ipv6/exthdrs_offload.c                         |  2 +-
 net/ipv6/ip6mr.c                                   |  2 +-
 net/mac80211/tx.c                                  |  3 -
 net/netfilter/nfnetlink_queue_core.c               |  5 +-
 net/netlink/af_netlink.c                           | 48 ++++++++---
 net/netlink/af_netlink.h                           |  9 ++
 net/openvswitch/datapath.c                         |  4 +-
 net/openvswitch/flow_table.c                       | 23 ++---
 net/openvswitch/flow_table.h                       |  2 +-
 net/rds/connection.c                               |  6 ++
 net/sctp/protocol.c                                | 64 +++++++++-----
 net/sunrpc/xprtrdma/svc_rdma_sendto.c              | 10 ++-
 security/selinux/hooks.c                           |  2 +-
 sound/pci/hda/patch_realtek.c                      |  6 +-
 sound/soc/codecs/adav80x.c                         |  1 -
 sound/soc/codecs/rt5640.c                          | 40 ++++++++-
 sound/soc/spear/spear_pcm.c                        |  2 +-
 sound/usb/mixer.c                                  |  2 +-
 tools/perf/builtin-stat.c                          |  5 +-
 tools/perf/util/hist.c                             |  3 +
 163 files changed, 1202 insertions(+), 564 deletions(-)

Adam Lee (1):
      serial: 8250_pci: Add support for Pericom PI7C9X795[1248]

Adrien Schildknecht (1):
      rtlwifi: rtl8192cu: Add new device ID

Alexey Brodkin (1):
      stmmac: fix check for phydev being open

Andrey Ryabinin (1):
      crypto: ghash-clmulni: specify context size for ghash async algorithm

Antoine Ténart (1):
      mtd: pxa3xx_nand: add a default chunk size

Ard Biesheuvel (1):
      arm64: flush FP/SIMD state correctly after execve()

Arnaldo Carvalho de Melo (1):
      perf hists: Update the column width for the "srcline" sort key

Axel Lin (2):
      ASoC: adav80x: Remove .read_flag_mask setting from adav80x_regmap_config
      ASoC: spear_pcm: Use devm_snd_dmaengine_pcm_register to fix resource leak

Benjamin Cama (1):
      ARM: orion5x: fix legacy orion5x IRQ numbers

Bjorn Helgaas (1):
      PCI: Fix TI816X class code quirk

Bob Copeland (1):
      mac80211: enable assoc check for mesh interfaces

Chris Wilson (2):
      drm/i915: Always mark the object as dirty when used by the GPU
      drm/i915: Limit the number of loops for reading a split 64bit register

Christoph Hellwig (2):
      IB/uverbs: reject invalid or unknown opcodes
      scsi_dh: fix randconfig build error

Chuck Lever (1):
      svcrdma: Fix send_reply() scatter/gather set-up

Cristina Opriceana (2):
      iio: industrialio-buffer: Fix iio_buffer_poll return value
      iio: event: Remove negative error code from iio_event_poll

Dan Carpenter (2):
      clk: versatile: off by one in clk_sp810_timerclken_of_get()
      usb: gadget: m66592-udc: forever loop in set_feature()

Daniel Borkmann (3):
      ipv6: fix exthdrs offload registration in out_rt path
      netlink, mmap: fix edge-case leakages in nf queue zero-copy
      netlink, mmap: transform mmap skb into full skb on taps

Darrick J. Wong (1):
      libxfs: readahead of dir3 data blocks should use the read verifier

David Daney (1):
      of/address: Don't loop forever in of_find_matching_node_by_address().

David Härdeman (1):
      [media] rc-core: fix remove uevent generation

David Jeffery (1):
      xfs: return errors from partial I/O failures to files

David Ward (1):
      USB: qcserial: add HP lt4111 LTE/EV-DO/HSPA+ Gobi 4G Module

Don Zickus (1):
      HID: usbhid: Fix the check for HID_RESET_PENDING in hid_io_error

Ellen Wang (2):
      HID: cp2112: fix I2C_SMBUS_BYTE write
      HID: cp2112: fix byte order in SMBUS operations

Eric Dumazet (1):
      task_work: remove fifo ordering guarantee

Eric W. Biederman (2):
      unshare: Unsharing a thread does not require unsharing a vm
      fs: Set the size of empty dirs to 0.

Eric Whitney (1):
      ext4: fix loss of delalloc extent info in ext4_zero_range()

Eugene Shatokhin (1):
      usbnet: Get EVENT_NO_RUNTIME_PM bit before it is cleared

Filipe Manana (1):
      Btrfs: check if previous transaction aborted to avoid fs corruption

Florian Fainelli (1):
      net: bcmgenet: Use correct dev_id for free_irq

Grant Likely (1):
      drivercore: Fix unregistration path of platform devices

Hans de Goede (1):
      ideapad-laptop: Add Lenovo Yoga 3 14 to no_hw_rfkill dmi list

Helge Deller (1):
      parisc: Filter out spurious interrupts in PA-RISC irq handler

Hin-Tak Leung (2):
      hfs,hfsplus: cache pages correctly between bnode_create and bnode_free
      hfs: fix B-tree corruption after insertion at position 0

Ian Abbott (3):
      staging: comedi: usbduxsigma: don't clobber ai_timer in command test
      staging: comedi: usbduxsigma: don't clobber ao_timer in command test
      staging: comedi: adl_pci7x3x: fix digital output on PCI-7230

Jack Morgenstein (2):
      IB/mlx4: Fix potential deadlock when sending mad to wire
      IB/mlx4: Forbid using sysfs to change RoCE pkeys

Jaewon Kim (1):
      vmscan: fix increasing nr_isolated incurred by putback unevictable pages

Jan H. Schönherr (1):
      sched: Fix cpu_active_mask/cpu_online_mask race

Jan Kara (2):
      xfs: Fix xfs_attr_leafblock definition
      xfs: Fix file type directory corruption for btree directories

Jason Wang (1):
      virtio-net: drop NETIF_F_FRAGLIST

Jean Delvare (1):
      tg3: Fix temperature reporting

Jeff Vander Stoep (1):
      arm64: kconfig: Move LIST_POISON to a safe value

Jeffery Miller (1):
      Add radeon suspend/resume quirk for HP Compaq dc5750.

Jesse Brandeburg (1):
      net: fix endian check warning in etherdevice.h

Jesse Gross (1):
      openvswitch: Zero flows on allocation.

Jialing Fu (1):
      mmc: core: fix race condition in mmc_wait_data_done

Jisheng Zhang (1):
      mmc: sdhci: also get preset value and driver type for MMC_DDR52

John David Anglin (1):
      parisc: Use double word condition in 64bit CAS operation

John Lin (1):
      ASoC: rt5640: fix line out no sound issue

Jonathon Jongsma (1):
      drm/qxl: validate monitors config modes

Joonyoung Shim (1):
      rtc: s5m: fix to update ctrl register

Kan Liang (1):
      perf stat: Get correct cpu id for print_aggr

Kees Cook (1):
      fs: create and use seq_show_option for escaping

Kevin Cernekee (1):
      UBI: block: Add missing cache flushes

Kinglong Mee (1):
      NFS: Fix a NULL pointer dereference of migration recovery ops for v4.2 client

Kishon Vijay Abraham I (2):
      usb: dwc3: ep0: Fix mem corruption on OUT transfers of more than 512 bytes
      regulator: pbias: Fix broken pbias disable functionality

Krzysztof Kozlowski (1):
      clk: exynos4: Fix wrong clock for Exynos4x12 ADC

Lars-Peter Clausen (3):
      iio: adis16400: Fix adis16448 gyroscope scale
      iio: Add inverse unit conversion macros
      iio: adis16480: Fix scale factors

Linus Lüssing (8):
      batman-adv: Make DAT capability changes atomic
      batman-adv: Make NC capability changes atomic
      batman-adv: Make TT capability changes atomic
      batman-adv: fix multicast counter when purging originators
      batman-adv: fix counter for multicast supporting nodes
      batman-adv: Make MCAST capability changes atomic
      batman-adv: Fix potential synchronization issues in mcast tvlv handler
      batman-adv: Fix potentially broken skb network header access

Maciej S. Szmigiero (2):
      serial: 8250: don't bind to SMSC IrCC IR port
      serial: 8250: bind to ALi Fast Infrared Controller (ALI5123)

Marcelo Leitner (1):
      ipv6: addrconf: validate new MTU before applying it

Marcelo Ricardo Leitner (1):
      sctp: fix race on protocol/netns initialization

Mark Rustad (2):
      PCI: Add dev_flags bit to access VPD through function 0
      PCI: Add VPD function 0 quirk for Intel Ethernet devices

Masahiro Yamada (1):
      devres: fix devres_get()

Matthijs Kooijman (1):
      USB: ftdi_sio: Added custom PID for CustomWare products

Max Filippov (2):
      xtensa: fix threadptr reload on return to userspace
      xtensa: fix kernel register spilling

Michael Ellerman (1):
      powerpc/mm: Fix pte_pagesize_index() crash on 4K w/64K hash

Michal Hocko (1):
      scsi: fix scsi_error_handler vs. scsi_host_dev_release race

Michal Kazior (1):
      ath10k: fix dma_mapping_error() handling

Mike Marciniszyn (1):
      IB/qib: Change lkey table allocation to support more MRs

Mikulas Patocka (1):
      hpfs: update ctime and mtime on directory modification

Minfei Huang (1):
      x86/mm: Initialize pmd_idx in page_table_range_init_count()

Ming Lei (1):
      blk-mq: fix buffer overflow when reading sysfs file of 'pending'

NeilBrown (3):
      NFSv4: don't set SETATTR for O_RDONLY|O_EXCL
      md: flush ->event_work before stopping array.
      md/raid10: always set reshape_safe when initializing reshape_position.

Noa Osherovich (1):
      IB/mlx4: Use correct SL on AH query under RoCE

Paul Bolle (1):
      windfarm: decrement client count when unregistering

Paul Mackerras (1):
      powerpc/MSI: Fix race condition in tearing down MSI interrupts

Peter Chen (3):
      Doc: ABI: testing: configfs-usb-gadget-loopback
      Doc: ABI: testing: configfs-usb-gadget-sourcesink
      usb: host: ehci-sys: delete useless bus_to_hcd conversion

Philipp Hachtmann (1):
      USB: symbolserial: Use usb_get_serial_port_data

Richard Laing (1):
      net/ipv6: Correct PIM6 mrt_lock handling

Sakari Ailus (1):
      [media] v4l: omap3isp: Fix sub-device power management code

Sasha Levin (1):
      RDS: verify the underlying transport exists before creating a connection

Sergei Shtylyov (1):
      fixed_phy: pass 'irq' to fixed_phy_add()

Shota Suzuki (1):
      igb: Fix oops caused by missing queue pairing

Stephen Chandler Paul (1):
      DRM - radeon: Don't link train DisplayPort on HPD until we get the dpcd

Sudip Mukherjee (1):
      auxdisplay: ks0108: fix refcount

Takashi Iwai (3):
      Input: evdev - do not report errors form flush()
      ALSA: hda - Enable headphone jack detect on old Fujitsu laptops
      ALSA: hda - Use ALC880_FIXUP_FUJITSU for FSC Amilo M1437

Thomas Huth (1):
      powerpc/rtas: Introduce rtas_get_sensor_fast() for IRQ handlers

Trond Myklebust (1):
      NFS: nfs_set_pgio_error sometimes misses errors

Tyler Hicks (1):
      eCryptfs: Invalidate dcache entries when lower i_nlink is zero

Ulf Hansson (1):
      Input: ambakmi - fix system PM by converting to modern callbacks

Vignesh R (1):
      ARM: OMAP2+: DRA7: clockdomain: change l4per2_7xx_clkdm to SW_WKUP

Ville Syrjälä (1):
      drm/radeon/atom: Send out the full AUX address

Wilson Kok (1):
      fib_rules: fix fib rule dumps across multiple skbs

Xiao Guangrong (1):
      KVM: MMU: fix validation of mmio page fault

Xie XiuQi (1):
      x86/mce: Reenable CMCI banks when swiching back to interrupt mode

Yann Droneaud (1):
      perf/x86: Fix copy_from_user_nmi() return if range is not ok

Yao-Wen Mao (1):
      ALSA: usb-audio: correct the value cache check.

Yinghai Lu (1):
      mm: check if section present during memory block registering

Yishai Hadas (1):
      IB/uverbs: Fix race between ib_uverbs_open and remove_one
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

[toc] | [next] | [standalone]


#1236130 — [PATCH 3.16.y-ckt 001/133] ipv6: addrconf: validate new MTU before applying it

FromLuis Henriques <luis.henriques@canonical.com>
Date2015-09-30 12:50 +0200
Subject[PATCH 3.16.y-ckt 001/133] ipv6: addrconf: validate new MTU before applying it
Message-ID<qen7s-2yO-23@gated-at.bofh.it>
In reply to#1236127
3.16.7-ckt18 -stable review patch.  If anyone has any objections, please let me know.

------------------

From: Marcelo Leitner <mleitner@redhat.com>

commit 77751427a1ff25b27d47a4c36b12c3c8667855ac upstream.

Currently we don't check if the new MTU is valid or not and this allows
one to configure a smaller than minimum allowed by RFCs or even bigger
than interface own MTU, which is a problem as it may lead to packet
drops.

If you have a daemon like NetworkManager running, this may be exploited
by remote attackers by forging RA packets with an invalid MTU, possibly
leading to a DoS. (NetworkManager currently only validates for values
too small, but not for too big ones.)

The fix is just to make sure the new value is valid. That is, between
IPV6_MIN_MTU and interface's MTU.

Note that similar check is already performed at
ndisc_router_discovery(), for when kernel itself parses the RA.

Signed-off-by: Marcelo Ricardo Leitner <mleitner@redhat.com>
Signed-off-by: Sabrina Dubroca <sd@queasysnail.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Cc: Moritz Muehlenhoff <jmm@debian.org>
Signed-off-by: Luis Henriques <luis.henriques@canonical.com>
---
 net/ipv6/addrconf.c | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/net/ipv6/addrconf.c b/net/ipv6/addrconf.c
index 4a9a34954923..75630e173adf 100644
--- a/net/ipv6/addrconf.c
+++ b/net/ipv6/addrconf.c
@@ -4789,6 +4789,21 @@ int addrconf_sysctl_forward(struct ctl_table *ctl, int write,
 	return ret;
 }
 
+static
+int addrconf_sysctl_mtu(struct ctl_table *ctl, int write,
+			void __user *buffer, size_t *lenp, loff_t *ppos)
+{
+	struct inet6_dev *idev = ctl->extra1;
+	int min_mtu = IPV6_MIN_MTU;
+	struct ctl_table lctl;
+
+	lctl = *ctl;
+	lctl.extra1 = &min_mtu;
+	lctl.extra2 = idev ? &idev->dev->mtu : NULL;
+
+	return proc_dointvec_minmax(&lctl, write, buffer, lenp, ppos);
+}
+
 static void dev_disable_change(struct inet6_dev *idev)
 {
 	struct netdev_notifier_info info;
@@ -4940,7 +4955,7 @@ static struct addrconf_sysctl_table
 			.data		= &ipv6_devconf.mtu6,
 			.maxlen		= sizeof(int),
 			.mode		= 0644,
-			.proc_handler	= proc_dointvec,
+			.proc_handler	= addrconf_sysctl_mtu,
 		},
 		{
 			.procname	= "accept_ra",
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

[toc] | [prev] | [next] | [standalone]


#1236131 — [PATCH 3.16.y-ckt 007/133] xtensa: fix threadptr reload on return to userspace

FromLuis Henriques <luis.henriques@canonical.com>
Date2015-09-30 12:50 +0200
Subject[PATCH 3.16.y-ckt 007/133] xtensa: fix threadptr reload on return to userspace
Message-ID<qen7s-2yO-31@gated-at.bofh.it>
In reply to#1236127
3.16.7-ckt18 -stable review patch.  If anyone has any objections, please let me know.

------------------

From: Max Filippov <jcmvbkbc@gmail.com>

commit 4229fb12a03e5da5882b420b0aa4a02e77447b86 upstream.

Userspace return code may skip restoring THREADPTR register if there are
no registers that need to be zeroed. This leads to spurious failures in
libc NPTL tests.

Always restore THREADPTR on return to userspace.

Signed-off-by: Max Filippov <jcmvbkbc@gmail.com>
Signed-off-by: Luis Henriques <luis.henriques@canonical.com>
---
 arch/xtensa/kernel/entry.S | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/arch/xtensa/kernel/entry.S b/arch/xtensa/kernel/entry.S
index a06b7efaae82..8a749f02d8d6 100644
--- a/arch/xtensa/kernel/entry.S
+++ b/arch/xtensa/kernel/entry.S
@@ -568,12 +568,13 @@ user_exception_exit:
 	 *	 (if we have restored WSBITS-1 frames).
 	 */
 
+2:
 #if XCHAL_HAVE_THREADPTR
 	l32i	a3, a1, PT_THREADPTR
 	wur	a3, threadptr
 #endif
 
-2:	j	common_exception_exit
+	j	common_exception_exit
 
 	/* This is the kernel exception exit.
 	 * We avoided to do a MOVSP when we entered the exception, but we
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

[toc] | [prev] | [next] | [standalone]


#1236133 — [PATCH 3.16.y-ckt 006/133] HID: cp2112: fix byte order in SMBUS operations

FromLuis Henriques <luis.henriques@canonical.com>
Date2015-09-30 12:50 +0200
Subject[PATCH 3.16.y-ckt 006/133] HID: cp2112: fix byte order in SMBUS operations
Message-ID<qen7t-2yO-39@gated-at.bofh.it>
In reply to#1236127
3.16.7-ckt18 -stable review patch.  If anyone has any objections, please let me know.

------------------

From: Ellen Wang <ellen@cumulusnetworks.com>

commit 29e2d6d1f6f61ba2b5cc9d9867e01d8c31a6c4f7 upstream.

Change all occurrences of be16 to le16 in cp2112_xfer(),
because SMBUS words are little endian, not big endian.

Signed-off-by: Ellen Wang <ellen@cumulusnetworks.com>
Signed-off-by: Jiri Kosina <jkosina@suse.com>
Signed-off-by: Luis Henriques <luis.henriques@canonical.com>
---
 drivers/hid/hid-cp2112.c | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/drivers/hid/hid-cp2112.c b/drivers/hid/hid-cp2112.c
index 68d6d93cbec9..bc37acd0fc67 100644
--- a/drivers/hid/hid-cp2112.c
+++ b/drivers/hid/hid-cp2112.c
@@ -434,7 +434,7 @@ static int cp2112_xfer(struct i2c_adapter *adap, u16 addr,
 	struct cp2112_device *dev = (struct cp2112_device *)adap->algo_data;
 	struct hid_device *hdev = dev->hdev;
 	u8 buf[64];
-	__be16 word;
+	__le16 word;
 	ssize_t count;
 	size_t read_length = 0;
 	unsigned int retries;
@@ -466,7 +466,7 @@ static int cp2112_xfer(struct i2c_adapter *adap, u16 addr,
 		break;
 	case I2C_SMBUS_WORD_DATA:
 		read_length = 2;
-		word = cpu_to_be16(data->word);
+		word = cpu_to_le16(data->word);
 
 		if (I2C_SMBUS_READ == read_write)
 			count = cp2112_write_read_req(buf, addr, read_length,
@@ -479,7 +479,7 @@ static int cp2112_xfer(struct i2c_adapter *adap, u16 addr,
 		size = I2C_SMBUS_WORD_DATA;
 		read_write = I2C_SMBUS_READ;
 		read_length = 2;
-		word = cpu_to_be16(data->word);
+		word = cpu_to_le16(data->word);
 
 		count = cp2112_write_read_req(buf, addr, read_length, command,
 					      (u8 *)&word, 2);
@@ -572,7 +572,7 @@ static int cp2112_xfer(struct i2c_adapter *adap, u16 addr,
 		data->byte = buf[0];
 		break;
 	case I2C_SMBUS_WORD_DATA:
-		data->word = be16_to_cpup((__be16 *)buf);
+		data->word = le16_to_cpup((__le16 *)buf);
 		break;
 	case I2C_SMBUS_BLOCK_DATA:
 		if (read_length > I2C_SMBUS_BLOCK_MAX) {
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

[toc] | [prev] | [standalone]


Back to top | Article view | linux.kernel


csiph-web