Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1715113 > unrolled thread
| Started by | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| First post | 2017-08-18 16:10 +0200 |
| Last post | 2017-08-18 22:20 +0200 |
| Articles | 16 — 2 participants |
Back to article view | Back to linux.kernel
[PATCH 3.16 000/134] 3.16.47-rc1 review Ben Hutchings <ben@decadent.org.uk> - 2017-08-18 16:10 +0200
[PATCH 3.16 005/134] ima: accept previously set IMA_NEW_FILE Ben Hutchings <ben@decadent.org.uk> - 2017-08-18 16:10 +0200
[PATCH 3.16 010/134] pinctrl: sh-pfc: Update info pointer after SoC-specific init Ben Hutchings <ben@decadent.org.uk> - 2017-08-18 16:10 +0200
[PATCH 3.16 008/134] perf hists browser: Fix typo in function switch_data_file Ben Hutchings <ben@decadent.org.uk> - 2017-08-18 16:10 +0200
[PATCH 3.16 015/134] [media] serial_ir: iommap is a memory address, not bool Ben Hutchings <ben@decadent.org.uk> - 2017-08-18 16:10 +0200
[PATCH 3.16 016/134] [media] mceusb: fix NULL-deref at probe Ben Hutchings <ben@decadent.org.uk> - 2017-08-18 16:10 +0200
[PATCH 3.16 013/134] usb: hub: Do not attempt to autosuspend disconnected devices Ben Hutchings <ben@decadent.org.uk> - 2017-08-18 16:10 +0200
[PATCH 3.16 018/134] USB: Proper handling of Race Condition when two USB class drivers try to call init_usb_class simultaneously Ben Hutchings <ben@decadent.org.uk> - 2017-08-18 16:10 +0200
[PATCH 3.16 012/134] usb: hub: Fix error loop seen after hub communication errors Ben Hutchings <ben@decadent.org.uk> - 2017-08-18 16:10 +0200
[PATCH 3.16 006/134] ath9k_htc: Add new USB ID Ben Hutchings <ben@decadent.org.uk> - 2017-08-18 16:10 +0200
[PATCH 3.16 019/134] cdc-acm: fix possible invalid access when processing notification Ben Hutchings <ben@decadent.org.uk> - 2017-08-18 16:10 +0200
[PATCH 3.16 014/134] mtd: nand: fsmc: fix NAND width handling Ben Hutchings <ben@decadent.org.uk> - 2017-08-18 16:10 +0200
[PATCH 3.16 007/134] ath9k_htc: Add support of AirTies 1eda:2315 AR9271 device Ben Hutchings <ben@decadent.org.uk> - 2017-08-18 16:10 +0200
[PATCH 3.16 002/134] staging: comedi: jr3_pci: fix possible null pointer dereference Ben Hutchings <ben@decadent.org.uk> - 2017-08-18 16:20 +0200
Re: [PATCH 3.16 000/134] 3.16.47-rc1 review Guenter Roeck <linux@roeck-us.net> - 2017-08-18 17:00 +0200
Re: [PATCH 3.16 000/134] 3.16.47-rc1 review Ben Hutchings <ben@decadent.org.uk> - 2017-08-18 22:20 +0200
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2017-08-18 16:10 +0200 |
| Subject | [PATCH 3.16 000/134] 3.16.47-rc1 review |
| Message-ID | <ufPlT-4d0-3@gated-at.bofh.it> |
This is the start of the stable review cycle for the 3.16.47 release.
There are 134 patches in this series, which will be posted as responses
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Mon Aug 21 18:00:00 UTC 2017.
Anything received after that time might be too late.
A combined patch relative to 3.16.46 will be posted as an additional
response to this. A shortlog and diffstat can be found below.
Ben.
-------------
Adrian Salido (1):
dm ioctl: prevent stack leak in dm ioctl call
[4617f564c06117c7d1b611be49521a4430042287]
Ajay Kaher (1):
USB: Proper handling of Race Condition when two USB class drivers try to call init_usb_class simultaneously
[2f86a96be0ccb1302b7eee7855dbee5ce4dc5dfb]
Al Viro (1):
dentry name snapshots
[49d31c2f389acfe83417083e1208422b4091cd9e]
Alex Williamson (1):
vfio/type1: Remove locked page accounting workqueue
[0cfef2b7410b64d7a430947e0b533314c4f97153]
Alexander Tsoy (1):
ath9k_htc: add device ID for Toshiba WLM-20U2/GN-1080
[aea57edf80c6e96d6dc24757599396af99c02b19]
Alexey Brodkin (1):
usb: Make sure usb/phy/of gets built-in
[3d6159640da9c9175d1ca42f151fc1a14caded59]
Alyssa Milburn (4):
[media] digitv: limit messages to buffer size
[821117dc21083a99dd99174c10848d70ff43de29]
[media] dw2102: limit messages to buffer size
[950e252cb469f323740d78e4907843acef89eedb]
[media] ttusb2: limit messages to buffer size
[a12b8ab8c5ff7ccd7b107a564743507c850a441d]
[media] zr364xx: enforce minimum size when reading header
[ee0fe833d96793853335844b6d99fb76bd12cbeb]
Amir Goldstein (1):
fanotify: don't expose EOPENSTALE to userspace
[4ff33aafd32e084f5ee7faa54ba06e95f8b1b8af]
Amitoj Kaur Chawla (1):
staging: gdm724x: gdm_mux: Remove create_workqueue()
[c272dc2da14cde0bfd9495a5aafb8e3e94f35601]
Andrew Jones (1):
KVM: arm/arm64: fix races in kvm_psci_vcpu_on
[6c7a5dce22b3f3cc44be098e2837fa6797edb8b8]
Andy Lutomirski (1):
x86/mm: Fix flush_tlb_page() on Xen
[dbd68d8e84c606673ebbcf15862f8c155fa92326]
Arnd Bergmann (2):
[media] pvrusb2: reduce stack usage pvr2_eeprom_analyze()
[6830733d53a4517588e56227b9c8538633f0c496]
fbdev: sti: don't select CONFIG_VT
[34bf129a7f068e3108dbb051b4b05674e2a270e7]
Ashish Kalra (1):
x86/boot: Fix BSS corruption/overwrite bug in early x86 kernel startup
[d594aa0277e541bb997aef0bc0a55172d8138340]
Bart Van Assche (1):
target/fileio: Fix zero-length READ and WRITE handling
[59ac9c078141b8fd0186c0b18660a1b2c24e724e]
Benjamin Coddington (1):
NFS: Use GFP_NOIO for two allocations in writeback
[ae97aa524ef495b6276fd26f5d5449fb22975d7c]
Bjorn Helgaas (2):
PCI: Ignore write combining when mapping I/O port space
[3a92c319c44a7bcee9f48dff9d97d001943b54c6]
PCI: dwc: Unindent dw_handle_msi_irq() loop
[dbe4a09e8bbcf88809a8394d6a359d8cebd22a86]
Brian Norris (1):
mwifiex: pcie: fix cmd_buf use-after-free in remove/reset
[3c8cb9ad032d737b874e402c59eb51e3c991a144]
Changbin Du (1):
perf hists browser: Fix typo in function switch_data_file
[3ef5b4023c64c16c793a066a7a2ed6ea3767e0d7]
Christoph Hellwig (1):
libata: reject passthrough WRITE SAME requests
[c6ade20f5e50e188d20b711a618b20dd1d50457e]
Christophe Leroy (1):
net: ethernet: ucc_geth: fix MEM_PART_MURAM mode
[8b8642af15ed14b9a7a34d3401afbcc274533e13]
Cong Wang (1):
mqueue: fix a use-after-free in sys_mq_notify()
[f991af3daabaecff34684fd51fac80319d1baad1]
Craig Gallek (1):
ip6_tunnel: Fix missing tunnel encapsulation limit option
[89a23c8b528bd2c89f3981573d6cd7d23840c8a6]
Dan Carpenter (5):
HSI: ssi_protocol: double free in ssip_pn_xmit()
[3026050179a3a9a6f5c892c414b5e36ecf092081]
PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
[1b497e6493c49bbb55c89f53562f7f853495e90d]
ath9k: off by one in ath9k_hw_nvram_read_array()
[b7dcf68f383a05567bd16a390907b67022a62d3d]
cifs: small underflow in cnvrtDosUnixTm()
[564277eceeca01e02b1ef3e141cfb939184601b4]
staging: rtl8188eu: prevent an underflow in rtw_check_beacon_data()
[784047eb2d3405a35087af70cba46170c5576b25]
Daniel Glöckner (1):
ima: accept previously set IMA_NEW_FILE
[1ac202e978e18f045006d75bd549612620c6ec3a]
David Ahern (1):
net: ipv6: send unsolicited NA on admin up
[4a6e3c5def13c91adf2acc613837001f09af3baa]
David Carrillo-Cisneros (1):
perf inject: Don't proceed if perf_session__process_event() fails
[bb8d521f77f3e68a713456b7fb1e99f52ff3342c]
David S. Miller (1):
ipv6: Need to export ipv6_push_frag_opts for tunneling now.
[5b8481fa42ac58484d633b558579e302aead64c1]
David Woodhouse (3):
PCI: Fix another sanity check bug in /proc/pci mmap
[17caf56731311c9596e7d38a70c88fcb6afa6a1b]
PCI: Fix pci_mmap_fits() for HAVE_PCI_RESOURCE_TO_USER platforms
[6bccc7f426abd640f08d8c75fb22f99483f201b4]
PCI: Only allow WC mmap on prefetchable resources
[cef4d02305a06be581bb7f4353446717a1b319ec]
Dmitry Kasatkin (1):
ima: pass 'opened' flag to identify newly created files
[3034a146820c26fe6da66a45f6340fe87fe0983a]
Dmitry Tunin (1):
ath9k_htc: Add support of AirTies 1eda:2315 AR9271 device
[16ff1fb0e32f76a5d285a6f23b82d21aa52813c6]
Eric Biggers (1):
ext4: evict inline data when writing to memory map
[7b4cc9787fe35b3ee2dfb1c35e22eafc32e00c33]
Eric Dumazet (1):
tcp: fix wraparound issue in tcp_lp
[a9f11f963a546fea9144f6a6d1a307e814a387e7]
Eva Rachel Retuya (1):
staging: iio: tsl2x7x_core: Fix standard deviation calculation
[cf6c77323a96fc40309cc8a4921ef206cccdd961]
Fabian Frederick (1):
IPoIB: Remove unnecessary test for NULL before debugfs_remove()
[e42fa2092c1049ac9c0e38aaac39ef3c40e91a36]
Feras Daoud (1):
IB/ipoib: Update broadcast object if PKey value was changed in index 0
[9a9b8112699d78e7f317019b37f377e90023f3ed]
Frank Schaefer (1):
[media] ov2640: fix vflip control
[7f140fc2064bcd23e0490d8210650e2ef21c1c89]
Geert Uytterhoeven (1):
pinctrl: sh-pfc: Update info pointer after SoC-specific init
[3091ae775fae17084013021d01513bc1ad274e6a]
Giedrius Statkevičius (1):
power: supply: lp8788: prevent out of bounds array access
[bdd9968d35f7fcdb76089347d1529bf079534214]
Guenter Roeck (2):
usb: hub: Do not attempt to autosuspend disconnected devices
[f5cccf49428447dfbc9edb7a04bb8fc316269781]
usb: hub: Fix error loop seen after hub communication errors
[245b2eecee2aac6fdc77dcafaa73c33f9644c3c7]
Hannes Reinecke (1):
scsi: scsi_error: count medium access timeout only once per EH run
[7a38dc0bfb4cc39ed57e120e2224673f3d4d200f]
Huacai Chen (1):
MIPS: Loongson-3: Select MIPS_L1_CACHE_SHIFT_6
[17c99d9421695a0e0de18bf1e7091d859e20ec1d]
Ian Abbott (2):
staging: comedi: jr3_pci: cope with jiffies wraparound
[8ec04a491825e08068e92bed0bba7821893b6433]
staging: comedi: jr3_pci: fix possible null pointer dereference
[45292be0b3db0b7f8286683b376e2d9f949d11f9]
Jack Morgenstein (1):
IB/mlx4: Fix ib device initialization error flow
[99e68909d5aba1861897fe7afc3306c3c81b6de0]
James Hogan (2):
metag/uaccess: Check access_ok in strncpy_from_user
[3a158a62da0673db918b53ac1440845a5b64fd90]
metag/uaccess: Fix access_ok()
[8a8b56638bcac4e64cccc88bf95a0f9f4b19a2fb]
Jason A. Donenfeld (1):
padata: free correct variable
[07a77929ba672d93642a56dc2255dd21e6e2290b]
Johan Hovold (12):
[media] cx231xx-audio: fix NULL-deref at probe
[65f921647f4c89a2068478c89691f39b309b58f7]
[media] cx231xx-audio: fix init error path
[fff1abc4d54e469140a699612b4db8d6397bfcba]
[media] cx231xx-cards: fix NULL-deref at probe
[0cd273bb5e4d1828efaaa8dfd11b7928131ed149]
[media] dib0700: fix NULL-deref at probe
[d5823511c0f8719a39e72ede1bce65411ac653b7]
[media] gspca: konica: add missing endpoint sanity check
[aa58fedb8c7b6cf2f05941d238495f9e2f29655c]
[media] mceusb: fix NULL-deref at probe
[03eb2a557ed552e920a0942b774aaf931596eec1]
[media] usbvision: fix NULL-deref at probe
[eacb975b48272f54532b62f515a3cf7eefa35123]
ath9k_htc: fix NULL-deref at probe
[ebeb36670ecac36c179b5fb5d5c88ff03ba191ec]
serial: omap: fix runtime-pm handling on unbind
[099bd73dc17ed77aa8c98323e043613b6e8f54fc]
serial: omap: suspend device on probe errors
[77e6fe7fd2b7cba0bf2f2dc8cde51d7b9a35bf74]
staging: gdm724x: gdm_mux: fix use-after-free on module unload
[b58f45c8fc301fe83ee28cad3e64686c19e78f1c]
zd1211rw: fix NULL-deref at probe
[ca260ece6a57dc7d751e0685f51fa2c55d851873]
Kamal Heib (1):
net/mlx4_en: Change the error print to debug print
[505a9249c23988768983aaa0766ce54e0dbe037d]
Kan Liang (1):
perf/x86: Fix spurious NMI with PEBS Load Latency event
[fd583ad1563bec5f00140e1f2444adbcd331caad]
Kieran Bingham (1):
[media] uvcvideo: Fix empty packet statistic
[360a3a90c6261fe24a959ff38f8f6c3a8468f23c]
Laura Abbott (1):
x86/mm/32: Set the '__vmalloc_start_set' flag in initmem_init()
[861ce4a3244c21b0af64f880d5bfe5e6e2fb9e4a]
Leon Nardella (1):
ath9k_htc: Add new USB ID
[0088d27b78f2c0118aee82923269518616481ea0]
Liping Zhang (2):
netfilter: ctnetlink: fix deadlock due to acquire _expect_lock twice
[88be4c09d9008f9ff337cbf48c5d0f06c8f872e7]
netfilter: ctnetlink: make it safer when updating ct->status
[53b56da83d7899de375a9de153fd7f5397de85e6]
Ludovic Desroches (2):
ARM: dts: at91: sama5d3_xplained: fix ADC vref
[9cdd31e5913c1f86dce7e201b086155b3f24896b]
ARM: dts: at91: sama5d3_xplained: not all ADC channels are available
[d3df1ec06353e51fc44563d2e7e18d42811af290]
Luis Henriques (1):
ceph: fix memory leak in __ceph_setxattr()
[eeca958dce0a9231d1969f86196653eb50fcc9b3]
Lukas Wunner (1):
PCI: Freeze PME scan before suspending devices
[ea00353f36b64375518662a8ad15e39218a1f324]
Maksim Salau (1):
usb: misc: legousbtower: Fix buffers on stack
[942a48730faf149ccbf3e12ac718aee120bb3529]
Marc Zyngier (1):
arm64: KVM: Fix decoding of Rt/Rt2 when trapping AArch32 CP accesses
[c667186f1c01ca8970c785888868b7ffd74e51ee]
Marek Szyprowski (1):
[media] s5p-mfc: Fix unbalanced call to clock management
[a5cb00eb4223458250b55daf03ac7ea5f424d601]
Marek Vasut (1):
USB: serial: ftdi_sio: add device ID for Microsemi/Arrow SF2PLUS Dev Kit
[31c5d1922b90ddc1da6a6ddecef7cd31f17aa32b]
Mario Kleiner (1):
drm/edid: Add 10 bpc quirk for LGD 764 panel in HP zBook 17 G2
[e345da82bd6bdfa8492f80b3ce4370acfd868d95]
Mark Rutland (2):
arm64: ensure extension of smp_store_release value
[994870bead4ab19087a79492400a5478e2906196]
arm64: uaccess: ensure extension of access_ok() addr
[a06040d7a791a9177581dcf7293941bd92400856]
Matt Ranostay (1):
iio: proximity: as3935: fix as3935_write
[84ca8e364acb26aba3292bc113ca8ed4335380fd]
Michael J. Ruhl (2):
IB/core: For multicast functions, verify that LIDs are multicast LIDs
[8561eae60ff9417a50fa1fb2b83ae950dc5c1e21]
IB/core: If the MGID/MLID pair is not on the list return an error
[20c7840a77ddcb2ed2fbd66e8197db2868495751]
Michael S. Tsirkin (1):
virtio_net: fix support for small rings
[d85b758f72b05a774045545f24d70980e3e9aac4]
Michael Trimarchi (1):
power: supply: pda_power: move from timer to delayed_work
[633e8799ddc09431be2744c4a1efdbda13af2b0b]
Michal Hocko (1):
fs/xattr.c: zero out memory copied to userspace in getxattr
[81be3dee96346fbe08c31be5ef74f03f6b63cf68]
Mikulas Patocka (1):
dm bufio: avoid a possible ABBA deadlock
[1b0fb5a5b2dc0dddcfa575060441a7176ba7ac37]
Nikolay Borisov (1):
lockdep: teach lockdep about memalloc_noio_save
[6d7225f0cc1a1fc32cf5dd01b4ab4b8a34c7cdb4]
Pan Bian (1):
power: supply: isp1704: Fix unchecked return value of devm_kzalloc
[8b20839988f1ed5e534b270f3776709b640dc7e0]
Pavel Roskin (1):
iio: dac: ad7303: fix channel description
[ce420fd4251809b4c3119b3b20c8b13bd8eba150]
Peter Chen (1):
usb: host: xhci: print correct command ring address
[6fc091fb0459ade939a795bfdcaf645385b951d4]
Rabin Vincent (1):
CIFS: fix oplock break deadlocks
[3998e6b87d4258a70df358296d6f1c7234012bfe]
Richard Cochran (1):
regulator: tps65023: Fix inverted core enable logic.
[c90722b54a4f5e21ac59301ed9a6dbaa439bdb16]
Richard Weinberger (1):
um: Fix PTRACE_POKEUSER on x86_64
[9abc74a22d85ab29cef9896a2582a530da7e79bf]
Rob Herring (1):
of: fix sparse warning in of_pci_range_parser_one
[eb3100365791b06242b8bb5c3c2854ba41dabfbc]
Russell Currey (1):
powerpc/eeh: Avoid use after free in eeh_handle_special_event()
[daeba2956f32f91f3493788ff6ee02fb1b2f02fa]
Sabrina Dubroca (1):
ipv6: avoid overflow of offset in ip6_find_1stfragopt
[6399f1fae4ec29fab5ec76070435555e256ca3a6]
Sean Young (1):
[media] serial_ir: iommap is a memory address, not bool
[069f3b10aed966b2da6bb1161af41da0e8880724]
Sebastian Reichel (1):
Input: twl4030-pwrbutton - use correct device for irq request
[3071e9dd6cd3f2290d770117330f2c8b2e9a97e4]
Sergei Shtylyov (4):
pinctrl: sh-pfc: r8a7791: Add missing DVC_MUTE signal
[3908632fb829d73317c64c3d04f584b49f62e4ae]
pinctrl: sh-pfc: r8a7791: Add missing HSCIF1 pinmux data
[da7a692fbbab07f4e9798b5b52798f6e3256dd8f]
pinctrl: sh-pfc: r8a7791: Fix IPSR comment typos
[0cbdc11482d72ad164e33ef7cc57b01e8b61e40d]
pinctrl: sh-pfc: r8a7791: Fix SCIF2 pinmux data
[58439280f84e6b39fd7d61f25ab30489c1aaf0a9]
Shamir Rabinovitch (1):
IB/IPoIB: ibX: failed to create mcg debug file
[771a52584096c45e4565e8aabb596eece9d73d61]
Somasundaram Krishnasamy (1):
dm era: save spacemap metadata root after the pre-commit
[117aceb030307dcd431fdcff87ce988d3016c34a]
Stefan Assmann (1):
PCI: Disable boot interrupt quirk for ASUS M2N-LR
[c4e649b09f55595e6df6da5465a5b3cfc93557c1]
Stephane Eranian (1):
perf/x86/pebs: Fix handling of PEBS buffer overflows
[daa864b8f8e34477bde817f26d736d89dc6032f3]
Steve French (2):
SMB3: Work around mount failure when using SMB3 dialect to Macs
[7db0a6efdc3e990cdfd4b24820d010e9eb7890ad]
Set unicode flag on cifs echo request to avoid Mac error
[26c9cb668c7fbf9830516b75d8bee70b699ed449]
Steven Rostedt (1):
ftrace: Fix removing of second function probe
[82cc4fc2e70ec5baeff8f776f2773abc8b2cc0ae]
Szymon Janc (1):
Bluetooth: Fix user channel for 32bit userspace on 64bit kernel
[ab89f0bdd63a3721f7cd3f064f39fc4ac7ca14d4]
Takatoshi Akiyama (1):
serial: sh-sci: Fix panic when serial console and DMA are enabled
[3c9101766b502a0163d1d437fada5801cf616be2]
Talat Batheesh (1):
net/mlx4_en: Avoid adding steering rules with invalid ring
[89c557687a32c294e9d25670a96e9287c09f2d5f]
Thomas Gleixner (1):
timerfd: Protect the might cancel mechanism proper
[1e38da300e1e395a15048b0af1e5305bd91402f6]
Thomas Petazzoni (1):
mtd: nand: fsmc: fix NAND width handling
[ee56874f23e5c11576540bd695177a5ebc4f4352]
Tobias Herzog (1):
cdc-acm: fix possible invalid access when processing notification
[1bb9914e1730417d530de9ed37e59efdc647146b]
Tony Lindgren (1):
mfd: omap-usb-tll: Fix inverted bit use for USB TLL mode
[8b8a84c54aff4256d592dc18346c65ecf6811b45]
Tyrel Datwyler (2):
powerpc/pseries: Fix of_node_put() underflow during DLPAR remove
[68baf692c435339e6295cb470ea5545cbc28160e]
powerpc/sysfs: Fix reference leak of cpu device_nodes present at boot
[e76ca27790a514590af782f83f6eae49e0ccf8c9]
Vinothkumar Raja (1):
dm btree: fix for dm_btree_find_lowest_key()
[7d1fedb6e96a960aa91e4ff70714c3fb09195a5a]
WANG Cong (1):
ipv4: restore rt->fi for reference counting
[82486aa6f1b9bc8145e6d0fa2bc0b44307f3b875]
Willem de Bruijn (2):
packet: fix tp_reserve race in packet_set_ring
[c27927e372f0785f3303e8fad94b85945e2c97b7]
udp: consistently apply ufo or fragmentation
[85f1bd9a7b5a79d5baa8bf44af19658f7bf77bfa]
YueHaibing (1):
tg3: don't clear stats while tg3_close
[37a7fdf2892be124545ddaf99b85de576121476c]
Zheng Li (1):
ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output
[e4c5e13aa45c23692e4acf56f0b3533f328199b2]
Makefile | 4 +-
arch/arm/boot/dts/at91-sama5d3_xplained.dts | 5 +-
arch/arm/kvm/psci.c | 8 +-
arch/arm64/include/asm/barrier.h | 12 ++-
arch/arm64/include/asm/kvm_emulate.h | 6 ++
arch/arm64/include/asm/uaccess.h | 3 +-
arch/arm64/kvm/sys_regs.c | 8 +-
arch/metag/include/asm/uaccess.h | 49 +++++++-----
arch/mips/Kconfig | 1 +
arch/powerpc/include/asm/qe.h | 1 +
arch/powerpc/kernel/eeh_driver.c | 19 ++++-
arch/powerpc/kernel/sysfs.c | 6 ++
arch/powerpc/platforms/pseries/dlpar.c | 1 -
arch/x86/boot/boot.h | 2 +-
arch/x86/kernel/cpu/perf_event.h | 1 +
arch/x86/kernel/cpu/perf_event_intel.c | 31 +++++---
arch/x86/mm/numa_32.c | 1 +
arch/x86/mm/tlb.c | 4 +-
arch/x86/um/ptrace_64.c | 2 +-
drivers/Makefile | 1 +
drivers/ata/libata-scsi.c | 8 ++
drivers/gpu/drm/drm_edid.c | 8 ++
drivers/hsi/clients/ssi_protocol.c | 5 +-
drivers/iio/dac/ad7303.c | 6 +-
drivers/iio/proximity/as3935.c | 3 +-
drivers/infiniband/core/uverbs_cmd.c | 13 ++-
drivers/infiniband/core/verbs.c | 8 +-
drivers/infiniband/hw/mlx4/main.c | 1 +
drivers/infiniband/ulp/ipoib/ipoib_fs.c | 9 ++-
drivers/infiniband/ulp/ipoib/ipoib_ib.c | 13 +++
drivers/infiniband/ulp/ipoib/ipoib_main.c | 44 +++++++++--
drivers/infiniband/ulp/ipoib/ipoib_vlan.c | 3 -
drivers/input/misc/twl4030-pwrbutton.c | 2 +-
drivers/md/dm-bufio.c | 9 ++-
drivers/md/dm-era-target.c | 8 +-
drivers/md/dm-ioctl.c | 2 +-
drivers/md/persistent-data/dm-btree.c | 8 +-
drivers/media/i2c/soc_camera/ov2640.c | 6 +-
drivers/media/platform/s5p-mfc/s5p_mfc.c | 1 +
drivers/media/rc/mceusb.c | 4 +-
drivers/media/usb/cx231xx/cx231xx-audio.c | 41 +++++++---
drivers/media/usb/cx231xx/cx231xx-cards.c | 46 +++++++++--
drivers/media/usb/dvb-usb/dib0700_core.c | 3 +
drivers/media/usb/dvb-usb/digitv.c | 4 +
drivers/media/usb/dvb-usb/dw2102.c | 54 +++++++++++++
drivers/media/usb/dvb-usb/ttusb2.c | 19 +++++
drivers/media/usb/gspca/konica.c | 3 +
drivers/media/usb/pvrusb2/pvrusb2-eeprom.c | 13 +--
drivers/media/usb/usbvision/usbvision-video.c | 9 ++-
drivers/media/usb/uvc/uvc_video.c | 2 +-
drivers/media/usb/zr364xx/zr364xx.c | 8 ++
drivers/mfd/omap-usb-tll.c | 2 +-
drivers/mtd/nand/fsmc_nand.c | 9 ++-
drivers/net/ethernet/broadcom/tg3.c | 4 -
drivers/net/ethernet/freescale/ucc_geth.c | 8 +-
drivers/net/ethernet/mellanox/mlx4/en_ethtool.c | 5 ++
drivers/net/ethernet/mellanox/mlx4/en_rx.c | 3 +-
drivers/net/virtio_net.c | 30 ++++++-
drivers/net/wireless/ath/ath9k/eeprom.c | 2 +-
drivers/net/wireless/ath/ath9k/hif_usb.c | 7 ++
drivers/net/wireless/mwifiex/pcie.c | 7 ++
drivers/net/wireless/zd1211rw/zd_usb.c | 3 +
drivers/of/address.c | 2 +-
drivers/pci/host/pcie-designware.c | 28 +++----
drivers/pci/pci-sysfs.c | 10 ++-
drivers/pci/pci.c | 9 ++-
drivers/pci/proc.c | 20 ++++-
drivers/pci/quirks.c | 24 ++++++
drivers/pinctrl/sh-pfc/core.c | 3 +
drivers/pinctrl/sh-pfc/pfc-r8a7791.c | 18 +++--
drivers/power/isp1704_charger.c | 4 +
drivers/power/lp8788-charger.c | 2 +-
drivers/power/pda_power.c | 49 ++++++------
drivers/regulator/tps65023-regulator.c | 3 +-
drivers/scsi/scsi_error.c | 18 +++++
drivers/scsi/sd.c | 27 ++++++-
drivers/scsi/sd.h | 1 +
drivers/staging/comedi/drivers/jr3_pci.c | 13 +--
drivers/staging/gdm724x/gdm_mux.c | 21 +----
drivers/staging/iio/light/tsl2x7x_core.c | 2 +-
drivers/staging/media/lirc/lirc_serial.c | 4 +-
drivers/staging/rtl8188eu/core/rtw_ap.c | 2 +-
drivers/target/target_core_file.c | 3 +-
drivers/tty/serial/omap-serial.c | 9 ++-
drivers/tty/serial/sh-sci.c | 10 ++-
drivers/usb/class/cdc-acm.c | 13 ++-
drivers/usb/core/driver.c | 21 +++++
drivers/usb/core/file.c | 9 ++-
drivers/usb/core/hub.c | 11 ++-
drivers/usb/host/xhci-mem.c | 2 +-
drivers/usb/misc/legousbtower.c | 37 ++++++---
drivers/usb/serial/ftdi_sio.c | 1 +
drivers/usb/serial/ftdi_sio_ids.h | 6 ++
drivers/vfio/vfio_iommu_type1.c | 92 ++++++++++------------
drivers/video/Makefile | 1 +
drivers/video/fbdev/Kconfig | 2 -
fs/ceph/xattr.c | 3 +
fs/cifs/cifsfs.c | 15 +++-
fs/cifs/cifsglob.h | 1 +
fs/cifs/cifssmb.c | 3 +
fs/cifs/misc.c | 2 +-
fs/cifs/netmisc.c | 6 +-
fs/cifs/smb2misc.c | 5 +-
fs/cifs/smb2pdu.c | 14 +++-
fs/dcache.c | 37 +++++++++
fs/debugfs/inode.c | 10 +--
fs/ext4/inode.c | 5 ++
fs/namei.c | 10 +--
fs/nfs/pagelist.c | 10 ++-
fs/nfsd/vfs.c | 2 +-
fs/notify/fanotify/fanotify_user.c | 26 ++++--
fs/notify/fsnotify.c | 8 +-
fs/timerfd.c | 17 +++-
fs/xattr.c | 2 +-
include/linux/dcache.h | 7 ++
include/linux/fsnotify.h | 31 --------
include/linux/ima.h | 4 +-
include/net/route.h | 1 +
include/scsi/scsi_driver.h | 1 +
include/uapi/linux/netfilter/nf_conntrack_common.h | 9 +++
ipc/mqueue.c | 4 +-
kernel/locking/lockdep.c | 4 +-
kernel/padata.c | 2 +-
kernel/trace/ftrace.c | 14 +++-
net/bluetooth/hci_sock.c | 3 +-
net/ipv4/ip_output.c | 7 +-
net/ipv4/route.c | 24 +++++-
net/ipv4/tcp_lp.c | 6 +-
net/ipv4/udp.c | 2 +-
net/ipv6/exthdrs.c | 1 +
net/ipv6/ip6_output.c | 7 +-
net/ipv6/ip6_tunnel.c | 4 +-
net/ipv6/ndisc.c | 2 +
net/ipv6/output_core.c | 8 +-
net/netfilter/nf_conntrack_netlink.c | 60 ++++++++------
net/packet/af_packet.c | 13 ++-
security/integrity/ima/ima.h | 4 +-
security/integrity/ima/ima_appraise.c | 7 +-
security/integrity/ima/ima_main.c | 14 ++--
tools/perf/builtin-inject.c | 2 +
tools/perf/ui/browsers/hists.c | 2 +-
141 files changed, 1061 insertions(+), 443 deletions(-)
--
Ben Hutchings
Reality is just a crutch for people who can't handle science fiction.
[toc] | [next] | [standalone]
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2017-08-18 16:10 +0200 |
| Subject | [PATCH 3.16 005/134] ima: accept previously set IMA_NEW_FILE |
| Message-ID | <ufQ8j-4Qn-37@gated-at.bofh.it> |
| In reply to | #1715113 |
3.16.47-rc1 review patch. If anyone has any objections, please let me know.
------------------
From: Daniel Glöckner <dg@emlix.com>
commit 1ac202e978e18f045006d75bd549612620c6ec3a upstream.
Modifying the attributes of a file makes ima_inode_post_setattr reset
the IMA cache flags. So if the file, which has just been created,
is opened a second time before the first file descriptor is closed,
verification fails since the security.ima xattr has not been written
yet. We therefore have to look at the IMA_NEW_FILE even if the file
already existed.
With this patch there should no longer be an error when cat tries to
open testfile:
$ rm -f testfile
$ ( echo test >&3 ; touch testfile ; cat testfile ) 3>testfile
A file being new is no reason to accept that it is missing a digital
signature demanded by the policy.
Signed-off-by: Daniel Glöckner <dg@emlix.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
security/integrity/ima/ima_appraise.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
--- a/security/integrity/ima/ima_appraise.c
+++ b/security/integrity/ima/ima_appraise.c
@@ -195,10 +195,11 @@ int ima_appraise_measurement(int func, s
cause = "missing-hash";
status = INTEGRITY_NOLABEL;
- if (opened & FILE_CREATED) {
+ if (opened & FILE_CREATED)
iint->flags |= IMA_NEW_FILE;
+ if ((iint->flags & IMA_NEW_FILE) &&
+ !(iint->flags & IMA_DIGSIG_REQUIRED))
status = INTEGRITY_PASS;
- }
goto out;
}
[toc] | [prev] | [next] | [standalone]
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2017-08-18 16:10 +0200 |
| Subject | [PATCH 3.16 010/134] pinctrl: sh-pfc: Update info pointer after SoC-specific init |
| Message-ID | <ufQ8j-4Qn-41@gated-at.bofh.it> |
| In reply to | #1715113 |
3.16.47-rc1 review patch. If anyone has any objections, please let me know.
------------------
From: Geert Uytterhoeven <geert+renesas@glider.be>
commit 3091ae775fae17084013021d01513bc1ad274e6a upstream.
Update the sh_pfc_soc_info pointer after calling the SoC-specific
initialization function, as it may have been updated to e.g. handle
different SoC revisions. This makes sure the correct subdriver name is
printed later.
Fixes: 0c151062f32c9db8 ("sh-pfc: Add support for SoC-specific initialization")
Signed-off-by: Geert Uytterhoeven <geert+renesas@glider.be>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
drivers/pinctrl/sh-pfc/core.c | 3 +++
1 file changed, 3 insertions(+)
--- a/drivers/pinctrl/sh-pfc/core.c
+++ b/drivers/pinctrl/sh-pfc/core.c
@@ -529,6 +529,9 @@ static int sh_pfc_probe(struct platform_
ret = info->ops->init(pfc);
if (ret < 0)
return ret;
+
+ /* .init() may have overridden pfc->info */
+ info = pfc->info;
}
pinctrl_provide_dummies();
[toc] | [prev] | [next] | [standalone]
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2017-08-18 16:10 +0200 |
| Subject | [PATCH 3.16 008/134] perf hists browser: Fix typo in function switch_data_file |
| Message-ID | <ufQ8k-4Qn-55@gated-at.bofh.it> |
| In reply to | #1715113 |
3.16.47-rc1 review patch. If anyone has any objections, please let me know.
------------------
From: Changbin Du <changbin.du@intel.com>
commit 3ef5b4023c64c16c793a066a7a2ed6ea3767e0d7 upstream.
Should clear buf 'abs_path', not 'options'.
Signed-off-by: Changbin Du <changbin.du@intel.com>
Cc: Feng Tang <feng.tang@intel.com>
Cc: Peter Zijlstra <peterz@infradead.org>
Fixes: 341487ab561f ("perf hists browser: Add option for runtime switching perf data file")
Link: http://lkml.kernel.org/r/20170313114652.9207-1-changbin.du@intel.com
Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
tools/perf/ui/browsers/hists.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
--- a/tools/perf/ui/browsers/hists.c
+++ b/tools/perf/ui/browsers/hists.c
@@ -1305,7 +1305,7 @@ static int switch_data_file(void)
return ret;
memset(options, 0, sizeof(options));
- memset(options, 0, sizeof(abs_path));
+ memset(abs_path, 0, sizeof(abs_path));
while ((dent = readdir(pwd_dir))) {
char path[PATH_MAX];
[toc] | [prev] | [next] | [standalone]
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2017-08-18 16:10 +0200 |
| Subject | [PATCH 3.16 015/134] [media] serial_ir: iommap is a memory address, not bool |
| Message-ID | <ufQ8j-4Qn-53@gated-at.bofh.it> |
| In reply to | #1715113 |
3.16.47-rc1 review patch. If anyone has any objections, please let me know.
------------------
From: Sean Young <sean@mess.org>
commit 069f3b10aed966b2da6bb1161af41da0e8880724 upstream.
This has been broken for a long time, so presumably it is not used. I
have no hardware to test this on.
Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=61401
Fixes: 90ab5ee ("module_param: make bool parameters really bool")
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
[bwh: Backported to 3.16: adjust filename, context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
drivers/staging/media/lirc/lirc_serial.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
--- a/drivers/staging/media/lirc/lirc_serial.c
+++ b/drivers/staging/media/lirc/lirc_serial.c
@@ -105,7 +105,7 @@ struct lirc_serial {
static int type;
static int io;
static int irq;
-static bool iommap;
+static ulong iommap;
static int ioshift;
static bool softcarrier = 1;
static bool share_irq;
@@ -1205,7 +1205,7 @@ module_param(io, int, S_IRUGO);
MODULE_PARM_DESC(io, "I/O address base (0x3f8 or 0x2f8)");
/* some architectures (e.g. intel xscale) have memory mapped registers */
-module_param(iommap, bool, S_IRUGO);
+module_param(iommap, ulong, S_IRUGO);
MODULE_PARM_DESC(iommap, "physical base for memory mapped I/O"
" (0 = no memory mapped io)");
[toc] | [prev] | [next] | [standalone]
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2017-08-18 16:10 +0200 |
| Subject | [PATCH 3.16 016/134] [media] mceusb: fix NULL-deref at probe |
| Message-ID | <ufQ8k-4Qn-59@gated-at.bofh.it> |
| In reply to | #1715113 |
3.16.47-rc1 review patch. If anyone has any objections, please let me know.
------------------
From: Johan Hovold <johan@kernel.org>
commit 03eb2a557ed552e920a0942b774aaf931596eec1 upstream.
Make sure to check for the required out endpoint to avoid dereferencing
a NULL-pointer in mce_request_packet should a malicious device lack such
an endpoint. Note that this path is hit during probe.
Fixes: 66e89522aff7 ("V4L/DVB: IR: add mceusb IR receiver driver")
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
drivers/media/rc/mceusb.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
--- a/drivers/media/rc/mceusb.c
+++ b/drivers/media/rc/mceusb.c
@@ -1299,8 +1299,8 @@ static int mceusb_dev_probe(struct usb_i
}
}
}
- if (ep_in == NULL) {
- dev_dbg(&intf->dev, "inbound and/or endpoint not found");
+ if (!ep_in || !ep_out) {
+ dev_dbg(&intf->dev, "required endpoints not found\n");
return -ENODEV;
}
[toc] | [prev] | [next] | [standalone]
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2017-08-18 16:10 +0200 |
| Subject | [PATCH 3.16 013/134] usb: hub: Do not attempt to autosuspend disconnected devices |
| Message-ID | <ufQ8k-4Qn-57@gated-at.bofh.it> |
| In reply to | #1715113 |
3.16.47-rc1 review patch. If anyone has any objections, please let me know. ------------------ From: Guenter Roeck <linux@roeck-us.net> commit f5cccf49428447dfbc9edb7a04bb8fc316269781 upstream. While running a bind/unbind stress test with the dwc3 usb driver on rk3399, the following crash was observed. Unable to handle kernel NULL pointer dereference at virtual address 00000218 pgd = ffffffc00165f000 [00000218] *pgd=000000000174f003, *pud=000000000174f003, *pmd=0000000001750003, *pte=00e8000001751713 Internal error: Oops: 96000005 [#1] PREEMPT SMP Modules linked in: uinput uvcvideo videobuf2_vmalloc cmac ipt_MASQUERADE nf_nat_masquerade_ipv4 iptable_nat nf_nat_ipv4 nf_nat rfcomm xt_mark fuse bridge stp llc zram btusb btrtl btbcm btintel bluetooth ip6table_filter mwifiex_pcie mwifiex cfg80211 cdc_ether usbnet r8152 mii joydev snd_seq_midi snd_seq_midi_event snd_rawmidi snd_seq snd_seq_device ppp_async ppp_generic slhc tun CPU: 1 PID: 29814 Comm: kworker/1:1 Not tainted 4.4.52 #507 Hardware name: Google Kevin (DT) Workqueue: pm pm_runtime_work task: ffffffc0ac540000 ti: ffffffc0af4d4000 task.ti: ffffffc0af4d4000 PC is at autosuspend_check+0x74/0x174 LR is at autosuspend_check+0x70/0x174 ... Call trace: [<ffffffc00080dcc0>] autosuspend_check+0x74/0x174 [<ffffffc000810500>] usb_runtime_idle+0x20/0x40 [<ffffffc000785ae0>] __rpm_callback+0x48/0x7c [<ffffffc000786af0>] rpm_idle+0x1e8/0x498 [<ffffffc000787cdc>] pm_runtime_work+0x88/0xcc [<ffffffc000249bb8>] process_one_work+0x390/0x6b8 [<ffffffc00024abcc>] worker_thread+0x480/0x610 [<ffffffc000251a80>] kthread+0x164/0x178 [<ffffffc0002045d0>] ret_from_fork+0x10/0x40 Source: (gdb) l *0xffffffc00080dcc0 0xffffffc00080dcc0 is in autosuspend_check (drivers/usb/core/driver.c:1778). 1773 /* We don't need to check interfaces that are 1774 * disabled for runtime PM. Either they are unbound 1775 * or else their drivers don't support autosuspend 1776 * and so they are permanently active. 1777 */ 1778 if (intf->dev.power.disable_depth) 1779 continue; 1780 if (atomic_read(&intf->dev.power.usage_count) > 0) 1781 return -EBUSY; 1782 w |= intf->needs_remote_wakeup; Code analysis shows that intf is set to NULL in usb_disable_device() prior to setting actconfig to NULL. At the same time, usb_runtime_idle() does not lock the usb device, and neither does any of the functions in the traceback. This means that there is no protection against a race condition where usb_disable_device() is removing dev->actconfig->interface[] pointers while those are being accessed from autosuspend_check(). To solve the problem, synchronize and validate device state between autosuspend_check() and usb_disconnect(). Acked-by: Alan Stern <stern@rowland.harvard.edu> Signed-off-by: Guenter Roeck <linux@roeck-us.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Ben Hutchings <ben@decadent.org.uk> --- drivers/usb/core/driver.c | 3 +++ drivers/usb/core/hub.c | 6 ++++++ 2 files changed, 9 insertions(+) --- a/drivers/usb/core/driver.c +++ b/drivers/usb/core/driver.c @@ -1785,6 +1785,9 @@ static int autosuspend_check(struct usb_ int w, i; struct usb_interface *intf; + if (udev->state == USB_STATE_NOTATTACHED) + return -ENODEV; + /* Fail if autosuspend is disabled, or any interfaces are in use, or * any interface drivers require remote wakeup but it isn't available. */ --- a/drivers/usb/core/hub.c +++ b/drivers/usb/core/hub.c @@ -2069,6 +2069,12 @@ void usb_disconnect(struct usb_device ** dev_info(&udev->dev, "USB disconnect, device number %d\n", udev->devnum); + /* + * Ensure that the pm runtime code knows that the USB device + * is in the process of being disconnected. + */ + pm_runtime_barrier(&udev->dev); + usb_lock_device(udev); hub_disconnect_children(udev);
[toc] | [prev] | [next] | [standalone]
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2017-08-18 16:10 +0200 |
| Subject | [PATCH 3.16 018/134] USB: Proper handling of Race Condition when two USB class drivers try to call init_usb_class simultaneously |
| Message-ID | <ufQ8k-4Qn-63@gated-at.bofh.it> |
| In reply to | #1715113 |
3.16.47-rc1 review patch. If anyone has any objections, please let me know.
------------------
From: Ajay Kaher <ajay.kaher@samsung.com>
commit 2f86a96be0ccb1302b7eee7855dbee5ce4dc5dfb upstream.
There is race condition when two USB class drivers try to call
init_usb_class at the same time and leads to crash.
code path: probe->usb_register_dev->init_usb_class
To solve this, mutex locking has been added in init_usb_class() and
destroy_usb_class().
As pointed by Alan, removed "if (usb_class)" test from destroy_usb_class()
because usb_class can never be NULL there.
Signed-off-by: Ajay Kaher <ajay.kaher@samsung.com>
Acked-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
drivers/usb/core/file.c | 9 +++++++--
1 file changed, 7 insertions(+), 2 deletions(-)
--- a/drivers/usb/core/file.c
+++ b/drivers/usb/core/file.c
@@ -26,6 +26,7 @@
#define MAX_USB_MINORS 256
static const struct file_operations *usb_minors[MAX_USB_MINORS];
static DECLARE_RWSEM(minor_rwsem);
+static DEFINE_MUTEX(init_usb_class_mutex);
static int usb_open(struct inode *inode, struct file *file)
{
@@ -108,8 +109,9 @@ static void release_usb_class(struct kre
static void destroy_usb_class(void)
{
- if (usb_class)
- kref_put(&usb_class->kref, release_usb_class);
+ mutex_lock(&init_usb_class_mutex);
+ kref_put(&usb_class->kref, release_usb_class);
+ mutex_unlock(&init_usb_class_mutex);
}
int usb_major_init(void)
@@ -171,7 +173,10 @@ int usb_register_dev(struct usb_interfac
if (intf->minor >= 0)
return -EADDRINUSE;
+ mutex_lock(&init_usb_class_mutex);
retval = init_usb_class();
+ mutex_unlock(&init_usb_class_mutex);
+
if (retval)
return retval;
[toc] | [prev] | [next] | [standalone]
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2017-08-18 16:10 +0200 |
| Subject | [PATCH 3.16 012/134] usb: hub: Fix error loop seen after hub communication errors |
| Message-ID | <ufQ8k-4Qn-65@gated-at.bofh.it> |
| In reply to | #1715113 |
3.16.47-rc1 review patch. If anyone has any objections, please let me know.
------------------
From: Guenter Roeck <linux@roeck-us.net>
commit 245b2eecee2aac6fdc77dcafaa73c33f9644c3c7 upstream.
While stress testing a usb controller using a bind/unbind looop, the
following error loop was observed.
usb 7-1.2: new low-speed USB device number 3 using xhci-hcd
usb 7-1.2: hub failed to enable device, error -108
usb 7-1-port2: cannot disable (err = -22)
usb 7-1-port2: couldn't allocate usb_device
usb 7-1-port2: cannot disable (err = -22)
hub 7-1:1.0: hub_ext_port_status failed (err = -22)
hub 7-1:1.0: hub_ext_port_status failed (err = -22)
hub 7-1:1.0: activate --> -22
hub 7-1:1.0: hub_ext_port_status failed (err = -22)
hub 7-1:1.0: hub_ext_port_status failed (err = -22)
hub 7-1:1.0: activate --> -22
hub 7-1:1.0: hub_ext_port_status failed (err = -22)
hub 7-1:1.0: hub_ext_port_status failed (err = -22)
hub 7-1:1.0: activate --> -22
hub 7-1:1.0: hub_ext_port_status failed (err = -22)
hub 7-1:1.0: hub_ext_port_status failed (err = -22)
hub 7-1:1.0: activate --> -22
hub 7-1:1.0: hub_ext_port_status failed (err = -22)
hub 7-1:1.0: hub_ext_port_status failed (err = -22)
hub 7-1:1.0: activate --> -22
hub 7-1:1.0: hub_ext_port_status failed (err = -22)
hub 7-1:1.0: hub_ext_port_status failed (err = -22)
hub 7-1:1.0: activate --> -22
hub 7-1:1.0: hub_ext_port_status failed (err = -22)
hub 7-1:1.0: hub_ext_port_status failed (err = -22)
hub 7-1:1.0: activate --> -22
hub 7-1:1.0: hub_ext_port_status failed (err = -22)
hub 7-1:1.0: hub_ext_port_status failed (err = -22)
hub 7-1:1.0: activate --> -22
hub 7-1:1.0: hub_ext_port_status failed (err = -22)
hub 7-1:1.0: hub_ext_port_status failed (err = -22)
** 57 printk messages dropped ** hub 7-1:1.0: activate --> -22
** 82 printk messages dropped ** hub 7-1:1.0: hub_ext_port_status failed (err = -22)
This continues forever. After adding tracebacks into the code,
the call sequence leading to this is found to be as follows.
[<ffffffc0007fc8e0>] hub_activate+0x368/0x7b8
[<ffffffc0007fceb4>] hub_resume+0x2c/0x3c
[<ffffffc00080b3b8>] usb_resume_interface.isra.6+0x128/0x158
[<ffffffc00080b5d0>] usb_suspend_both+0x1e8/0x288
[<ffffffc00080c9c4>] usb_runtime_suspend+0x3c/0x98
[<ffffffc0007820a0>] __rpm_callback+0x48/0x7c
[<ffffffc00078217c>] rpm_callback+0xa8/0xd4
[<ffffffc000786234>] rpm_suspend+0x84/0x758
[<ffffffc000786ca4>] rpm_idle+0x2c8/0x498
[<ffffffc000786ed4>] __pm_runtime_idle+0x60/0xac
[<ffffffc00080eba8>] usb_autopm_put_interface+0x6c/0x7c
[<ffffffc000803798>] hub_event+0x10ac/0x12ac
[<ffffffc000249bb8>] process_one_work+0x390/0x6b8
[<ffffffc00024abcc>] worker_thread+0x480/0x610
[<ffffffc000251a80>] kthread+0x164/0x178
[<ffffffc0002045d0>] ret_from_fork+0x10/0x40
kick_hub_wq() is called from hub_activate() even after failures to
communicate with the hub. This results in an endless sequence of
hub event -> hub activate -> wq trigger -> hub event -> ...
Provide two solutions for the problem.
- Only trigger the hub event queue if communication with the hub
is successful.
- After a suspend failure, only resume already suspended interfaces
if the communication with the device is still possible.
Each of the changes fixes the observed problem. Use both to improve
robustness.
Acked-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Guenter Roeck <linux@roeck-us.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
[bwh: Backported to 3.16: adjust context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
drivers/usb/core/driver.c | 18 ++++++++++++++++++
drivers/usb/core/hub.c | 5 ++++-
2 files changed, 22 insertions(+), 1 deletion(-)
--- a/drivers/usb/core/driver.c
+++ b/drivers/usb/core/driver.c
@@ -1331,6 +1331,24 @@ static int usb_suspend_both(struct usb_d
*/
if (udev->parent && !PMSG_IS_AUTO(msg))
status = 0;
+
+ /*
+ * If the device is inaccessible, don't try to resume
+ * suspended interfaces and just return the error.
+ */
+ if (status && status != -EBUSY) {
+ int err;
+ u16 devstat;
+
+ err = usb_get_status(udev, USB_RECIP_DEVICE, 0,
+ &devstat);
+ if (err) {
+ dev_err(&udev->dev,
+ "Failed to suspend device, error %d\n",
+ status);
+ goto done;
+ }
+ }
}
/* If the suspend failed, resume interfaces that did get suspended */
--- a/drivers/usb/core/hub.c
+++ b/drivers/usb/core/hub.c
@@ -1044,6 +1044,9 @@ static void hub_activate(struct usb_hub
portstatus = portchange = 0;
status = hub_port_status(hub, port1, &portstatus, &portchange);
+ if (status)
+ goto abort;
+
if (udev || (portstatus & USB_PORT_STAT_CONNECTION))
dev_dbg(&port_dev->dev, "status %04x change %04x\n",
portstatus, portchange);
@@ -1176,7 +1179,7 @@ static void hub_activate(struct usb_hub
/* Scan all ports that need attention */
kick_khubd(hub);
-
+ abort:
/* Allow autosuspend if it was suppressed */
if (type <= HUB_INIT3)
usb_autopm_put_interface_async(to_usb_interface(hub->intfdev));
[toc] | [prev] | [next] | [standalone]
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2017-08-18 16:10 +0200 |
| Subject | [PATCH 3.16 006/134] ath9k_htc: Add new USB ID |
| Message-ID | <ufQ8k-4Qn-69@gated-at.bofh.it> |
| In reply to | #1715113 |
3.16.47-rc1 review patch. If anyone has any objections, please let me know.
------------------
From: Leon Nardella <leon.nardella@gmail.com>
commit 0088d27b78f2c0118aee82923269518616481ea0 upstream.
This device is a dongle made by Philips to enhance their TVs with wireless capabilities,
but works flawlessly on any upstream kernel, provided that the ath9k_htc module is attached to it.
It's correctly recognized by lsusb as "0471:209e Philips (or NXP) PTA01 Wireless Adapter" and the
patch has been tested on real hardware.
Signed-off-by: Leon Nardella <leon.nardella@gmail.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
drivers/net/wireless/ath/ath9k/hif_usb.c | 1 +
1 file changed, 1 insertion(+)
--- a/drivers/net/wireless/ath/ath9k/hif_usb.c
+++ b/drivers/net/wireless/ath/ath9k/hif_usb.c
@@ -40,6 +40,7 @@ static struct usb_device_id ath9k_hif_us
{ USB_DEVICE(0x0cf3, 0xb003) }, /* Ubiquiti WifiStation Ext */
{ USB_DEVICE(0x0cf3, 0xb002) }, /* Ubiquiti WifiStation */
{ USB_DEVICE(0x057c, 0x8403) }, /* AVM FRITZ!WLAN 11N v2 USB */
+ { USB_DEVICE(0x0471, 0x209e) }, /* Philips (or NXP) PTA01 */
{ USB_DEVICE(0x0cf3, 0x7015),
.driver_info = AR9287_USB }, /* Atheros */
[toc] | [prev] | [next] | [standalone]
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2017-08-18 16:10 +0200 |
| Subject | [PATCH 3.16 019/134] cdc-acm: fix possible invalid access when processing notification |
| Message-ID | <ufQ8k-4Qn-73@gated-at.bofh.it> |
| In reply to | #1715113 |
3.16.47-rc1 review patch. If anyone has any objections, please let me know.
------------------
From: Tobias Herzog <t-herzog@gmx.de>
commit 1bb9914e1730417d530de9ed37e59efdc647146b upstream.
Notifications may only be 8 bytes long. Accessing the 9th and
10th byte of unimplemented/unknown notifications may be insecure.
Also check the length of known notifications before accessing anything
behind the 8th byte.
Signed-off-by: Tobias Herzog <t-herzog@gmx.de>
Acked-by: Oliver Neukum <oneukum@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
drivers/usb/class/cdc-acm.c | 13 +++++++++----
1 file changed, 9 insertions(+), 4 deletions(-)
--- a/drivers/usb/class/cdc-acm.c
+++ b/drivers/usb/class/cdc-acm.c
@@ -312,6 +312,12 @@ static void acm_ctrl_irq(struct urb *urb
break;
case USB_CDC_NOTIFY_SERIAL_STATE:
+ if (le16_to_cpu(dr->wLength) != 2) {
+ dev_dbg(&acm->control->dev,
+ "%s - malformed serial state\n", __func__);
+ break;
+ }
+
newctrl = get_unaligned_le16(data);
if (!acm->clocal && (acm->ctrlin & ~newctrl & ACM_CTRL_DCD)) {
@@ -348,11 +354,10 @@ static void acm_ctrl_irq(struct urb *urb
default:
dev_dbg(&acm->control->dev,
- "%s - unknown notification %d received: index %d "
- "len %d data0 %d data1 %d\n",
+ "%s - unknown notification %d received: index %d len %d\n",
__func__,
- dr->bNotificationType, dr->wIndex,
- dr->wLength, data[0], data[1]);
+ dr->bNotificationType, dr->wIndex, dr->wLength);
+
break;
}
exit:
[toc] | [prev] | [next] | [standalone]
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2017-08-18 16:10 +0200 |
| Subject | [PATCH 3.16 014/134] mtd: nand: fsmc: fix NAND width handling |
| Message-ID | <ufQ8k-4Qn-75@gated-at.bofh.it> |
| In reply to | #1715113 |
3.16.47-rc1 review patch. If anyone has any objections, please let me know.
------------------
From: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
commit ee56874f23e5c11576540bd695177a5ebc4f4352 upstream.
In commit eea628199d5b ("mtd: Add device-tree support to fsmc_nand"),
Device Tree support was added to the fmsc_nand driver. However, this
code has a bug in how it handles the bank-width DT property to set the
bus width.
Indeed, in the function fsmc_nand_probe_config_dt() that parses the
Device Tree, it sets pdata->width to either 8 or 16 depending on the
value of the bank-width DT property.
Then, the ->probe() function will test if pdata->width is equal to
FSMC_NAND_BW16 (which is 2) to set NAND_BUSWIDTH_16 in
nand->options. Therefore, with the DT probing, this condition will never
match.
This commit fixes that by removing the "width" field from
fsmc_nand_platform_data and instead have the fsmc_nand_probe_config_dt()
function directly set the appropriate nand->options value.
It is worth mentioning that if this commit gets backported to older
kernels, prior to the drop of non-DT probing, then non-DT probing will
be broken because nand->options will no longer be set to
NAND_BUSWIDTH_16.
Fixes: eea628199d5b ("mtd: Add device-tree support to fsmc_nand")
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Reviewed-by: Linus Walleij <linus.walleij@linaro.org>
Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
[bwh: Backported to 3.16: keep fsmc_and_platform_data::width and the
test in fsmc_nand_probe()]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
--- a/drivers/mtd/nand/fsmc_nand.c
+++ b/drivers/mtd/nand/fsmc_nand.c
@@ -874,18 +874,19 @@ static int fsmc_nand_probe_config_dt(str
struct fsmc_nand_platform_data *pdata = dev_get_platdata(&pdev->dev);
u32 val;
- /* Set default NAND width to 8 bits */
- pdata->width = 8;
+ pdata->options = 0;
+
if (!of_property_read_u32(np, "bank-width", &val)) {
if (val == 2) {
- pdata->width = 16;
+ pdata->options |= NAND_BUSWIDTH_16;
} else if (val != 1) {
dev_err(&pdev->dev, "invalid bank-width %u\n", val);
return -EINVAL;
}
}
+
if (of_get_property(np, "nand-skip-bbtscan", NULL))
- pdata->options = NAND_SKIP_BBTSCAN;
+ pdata->options |= NAND_SKIP_BBTSCAN;
pdata->nand_timings = devm_kzalloc(&pdev->dev,
sizeof(*pdata->nand_timings), GFP_KERNEL);
[toc] | [prev] | [next] | [standalone]
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2017-08-18 16:10 +0200 |
| Subject | [PATCH 3.16 007/134] ath9k_htc: Add support of AirTies 1eda:2315 AR9271 device |
| Message-ID | <ufQ8k-4Qn-77@gated-at.bofh.it> |
| In reply to | #1715113 |
3.16.47-rc1 review patch. If anyone has any objections, please let me know.
------------------
From: Dmitry Tunin <hanipouspilot@gmail.com>
commit 16ff1fb0e32f76a5d285a6f23b82d21aa52813c6 upstream.
T: Bus=01 Lev=02 Prnt=02 Port=02 Cnt=01 Dev#= 7 Spd=480 MxCh= 0
D: Ver= 2.00 Cls=ff(vend.) Sub=ff Prot=ff MxPS=64 #Cfgs= 1
P: Vendor=1eda ProdID=2315 Rev=01.08
S: Manufacturer=ATHEROS
S: Product=USB2.0 WLAN
S: SerialNumber=12345
C: #Ifs= 1 Cfg#= 1 Atr=80 MxPwr=500mA
I: If#= 0 Alt= 0 #EPs= 6 Cls=ff(vend.) Sub=00 Prot=00 Driver=(none)
Signed-off-by: Dmitry Tunin <hanipouspilot@gmail.com>
Signed-off-by: Kalle Valo <kvalo@qca.qualcomm.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
drivers/net/wireless/ath/ath9k/hif_usb.c | 1 +
1 file changed, 1 insertion(+)
--- a/drivers/net/wireless/ath/ath9k/hif_usb.c
+++ b/drivers/net/wireless/ath/ath9k/hif_usb.c
@@ -41,6 +41,7 @@ static struct usb_device_id ath9k_hif_us
{ USB_DEVICE(0x0cf3, 0xb002) }, /* Ubiquiti WifiStation */
{ USB_DEVICE(0x057c, 0x8403) }, /* AVM FRITZ!WLAN 11N v2 USB */
{ USB_DEVICE(0x0471, 0x209e) }, /* Philips (or NXP) PTA01 */
+ { USB_DEVICE(0x1eda, 0x2315) }, /* AirTies */
{ USB_DEVICE(0x0cf3, 0x7015),
.driver_info = AR9287_USB }, /* Atheros */
[toc] | [prev] | [next] | [standalone]
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2017-08-18 16:20 +0200 |
| Subject | [PATCH 3.16 002/134] staging: comedi: jr3_pci: fix possible null pointer dereference |
| Message-ID | <ufQi0-4UA-81@gated-at.bofh.it> |
| In reply to | #1715113 |
3.16.47-rc1 review patch. If anyone has any objections, please let me know.
------------------
From: Ian Abbott <abbotti@mev.co.uk>
commit 45292be0b3db0b7f8286683b376e2d9f949d11f9 upstream.
For some reason, the driver does not consider allocation of the
subdevice private data to be a fatal error when attaching the COMEDI
device. It tests the subdevice private data pointer for validity at
certain points, but omits some crucial tests. In particular,
`jr3_pci_auto_attach()` calls `jr3_pci_alloc_spriv()` to allocate and
initialize the subdevice private data, but the same function
subsequently dereferences the pointer to access the `next_time_min` and
`next_time_max` members without checking it first. The other missing
test is in the timer expiry routine `jr3_pci_poll_dev()`, but it will
crash before it gets that far.
Fix the bug by returning `-ENOMEM` from `jr3_pci_auto_attach()` as soon
as one of the calls to `jr3_pci_alloc_spriv()` returns `NULL`. The
COMEDI core will subsequently call `jr3_pci_detach()` to clean up.
Signed-off-by: Ian Abbott <abbotti@mev.co.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
drivers/staging/comedi/drivers/jr3_pci.c | 11 ++++++-----
1 file changed, 6 insertions(+), 5 deletions(-)
--- a/drivers/staging/comedi/drivers/jr3_pci.c
+++ b/drivers/staging/comedi/drivers/jr3_pci.c
@@ -726,11 +726,12 @@ static int jr3_pci_auto_attach(struct co
s->insn_read = jr3_pci_ai_insn_read;
spriv = jr3_pci_alloc_spriv(dev, s);
- if (spriv) {
- /* Channel specific range and maxdata */
- s->range_table_list = spriv->range_table_list;
- s->maxdata_list = spriv->maxdata_list;
- }
+ if (!spriv)
+ return -ENOMEM;
+
+ /* Channel specific range and maxdata */
+ s->range_table_list = spriv->range_table_list;
+ s->maxdata_list = spriv->maxdata_list;
}
/* Reset DSP card */
[toc] | [prev] | [next] | [standalone]
| From | Guenter Roeck <linux@roeck-us.net> |
|---|---|
| Date | 2017-08-18 17:00 +0200 |
| Message-ID | <ufQUG-58U-33@gated-at.bofh.it> |
| In reply to | #1715113 |
On 08/18/2017 06:13 AM, Ben Hutchings wrote: > This is the start of the stable review cycle for the 3.16.47 release. > There are 134 patches in this series, which will be posted as responses > to this one. If anyone has any issues with these being applied, please > let me know. > > Responses should be made by Mon Aug 21 18:00:00 UTC 2017. > Anything received after that time might be too late. > Build results: total: 136 pass: 136 fail: 0 Qemu test results: total: 107 pass: 107 fail: 0 Details are available at http://kerneltests.org/builders. Guenter
[toc] | [prev] | [next] | [standalone]
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2017-08-18 22:20 +0200 |
| Message-ID | <ufVUl-8uR-9@gated-at.bofh.it> |
| In reply to | #1715223 |
[Multipart message — attachments visible in raw view] — view raw
On Fri, 2017-08-18 at 07:55 -0700, Guenter Roeck wrote: > On 08/18/2017 06:13 AM, Ben Hutchings wrote: > > This is the start of the stable review cycle for the 3.16.47 release. > > There are 134 patches in this series, which will be posted as responses > > to this one. If anyone has any issues with these being applied, please > > let me know. > > > > Responses should be made by Mon Aug 21 18:00:00 UTC 2017. > > Anything received after that time might be too late. > > > > Build results: > total: 136 pass: 136 fail: 0 > Qemu test results: > total: 107 pass: 107 fail: 0 > > Details are available at http://kerneltests.org/builders. Thanks for checking. Ben. -- Ben Hutchings Reality is just a crutch for people who can't handle science fiction.
[toc] | [prev] | [standalone]
Back to top | Article view | linux.kernel
csiph-web