Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1729696 > unrolled thread

[PATCH 3.2 000/106] 3.2.93-rc1 review

Started byBen Hutchings <ben@decadent.org.uk>
First post2017-09-10 01:00 +0200
Last post2017-09-10 20:50 +0200
Articles 9 — 2 participants

Back to article view | Back to linux.kernel


Contents

  [PATCH 3.2 000/106] 3.2.93-rc1 review Ben Hutchings <ben@decadent.org.uk> - 2017-09-10 01:00 +0200
    [PATCH 3.2 017/106] USB: gadget: dummy_hcd: fix hub-descriptor  removable fields Ben Hutchings <ben@decadent.org.uk> - 2017-09-10 01:00 +0200
    [PATCH 3.2 090/106] rtnetlink: add IFLA_GROUP to ifla_policy Ben Hutchings <ben@decadent.org.uk> - 2017-09-10 01:00 +0200
    [PATCH 3.2 014/106] USB: iowarrior: fix info ioctl on big-endian  hosts Ben Hutchings <ben@decadent.org.uk> - 2017-09-10 01:50 +0200
    [PATCH 3.2 002/106] af_key: Fix slab-out-of-bounds in  pfkey_compile_policy. Ben Hutchings <ben@decadent.org.uk> - 2017-09-10 01:50 +0200
    [PATCH 3.2 009/106] ahci: Acer SA5-271 SSD Not Detected Fix Ben Hutchings <ben@decadent.org.uk> - 2017-09-10 01:50 +0200
    [PATCH 3.2 001/106] xfrm: fix stack access out of bounds with  CONFIG_XFRM_SUB_POLICY Ben Hutchings <ben@decadent.org.uk> - 2017-09-10 01:50 +0200
    Re: [PATCH 3.2 000/106] 3.2.93-rc1 review Guenter Roeck <linux@roeck-us.net> - 2017-09-10 16:40 +0200
      Re: [PATCH 3.2 000/106] 3.2.93-rc1 review Ben Hutchings <ben@decadent.org.uk> - 2017-09-10 20:50 +0200

#1729696 — [PATCH 3.2 000/106] 3.2.93-rc1 review

FromBen Hutchings <ben@decadent.org.uk>
Date2017-09-10 01:00 +0200
Subject[PATCH 3.2 000/106] 3.2.93-rc1 review
Message-ID<unWqe-3ep-23@gated-at.bofh.it>
This is the start of the stable review cycle for the 3.2.93 release.
There are 106 patches in this series, which will be posted as responses
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Tue Sep 12 12:00:00 UTC 2017.
Anything received after that time might be too late.

A combined patch relative to 3.2.92 will be posted as an additional
response to this.  A shortlog and diffstat can be found below.

Ben.

-------------

Al Viro (4):
      excessive checks in ufs_write_failed() and ufs_evict_inode()
         [babef37dccbaa49249a22bae9150686815d7be71]
      fix ufs_isblockset()
         [414cf7186dbec29bd946c138d6b5c09da5955a08]
      osf_wait4(): fix infoleak
         [a8c39544a6eb2093c04afd5005b6192bd0e880c6]
      ufs: set correct ->s_maxsize
         [6b0d144fa758869bdd652c50aa41aaf601232550]

Alan Stern (2):
      USB: ene_usb6250: fix DMA to the stack
         [628c2893d44876ddd11602400c70606ade62e129]
      USB: xhci: fix lock-inversion problem
         [63aea0dbab90a2461faaae357cbc8cfd6c8de9fe]

Alex Deucher (1):
      drm/radeon: add a quirk for Toshiba Satellite L20-183
         [acfd6ee4fa7ebeee75511825fe02be3f7ac1d668]

Alexander Sverdlin (1):
      dmaengine: ep93xx: Always start from BASE0
         [0037ae47812b1f431cc602100d1d51f37d77b61e]

Alexander Tsoy (1):
      ALSA: hda - apply STAC_9200_DELL_M22 quirk for Dell Latitude D430
         [1fc2e41f7af4572b07190f9dec28396b418e9a36]

Andrew Lunn (1):
      net: phy: marvell: Limit errata to 88m1101
         [f2899788353c13891412b273fdff5f02d49aa40f]

Anthony Mallet (1):
      USB: serial: ftdi_sio: fix setting latency for unprivileged users
         [bb246681b3ed0967489a7401ad528c1aaa1a4c2e]

Ben Hutchings (2):
      ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()
         [6e80ac5cc992ab6256c3dae87f7e57db15e1a58c]
      net: add kfree_skb_list()
         [bd8a7036c06cf15779b31a5397d4afcb12be81ea]

Chris Brandt (2):
      usb: r8a66597-hcd: decrease timeout
         [dd14a3e9b92ac6f0918054f9e3477438760a4fa6]
      usb: r8a66597-hcd: select a different endpoint on timeout
         [1f873d857b6c2fefb4dada952674aa01bcfb92bd]

Christoph Lameter (1):
      mm: fix move/migrate_pages() race on task struct
         [3268c63eded4612a3d07b56d1e02ce7731e6608e]

Christophe JAILLET (1):
      [media] vb2: Fix an off by one error in 'vb2_plane_vaddr'
         [5ebb6dd36c9f5fb37b1077b393c254d70a14cb46]

Corentin Labbe (1):
      usb: xhci: ASMedia ASM1042A chipset need shorts TX quirk
         [d2f48f05cd2a2a0a708fbfa45f1a00a87660d937]

Dan Carpenter (5):
      block: fix an error code in add_partition()
         [7bd897cfce1eb373892d35d7f73201b0f9b221c4]
      drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()
         [f0c62e9878024300319ba2438adc7b06c6b9c448]
      libceph: NULL deref on crush_decode() error path
         [293dffaad8d500e1a5336eeb90d544cf40d4fbd8]
      xfrm: NULL dereference on allocation failure
         [e747f64336fc15e1c823344942923195b800aa1e]
      xfrm: Oops on error in pfkey_msg2xfrm_state()
         [1e3d0c2c70cd3edb5deed186c5f5c75f2b84a633]

Daniel Drake (1):
      Input: i8042 - add Fujitsu Lifebook AH544 to notimeout list
         [817ae460c784f32cd45e60b2b1b21378c3c6a847]

David S. Miller (1):
      ipv6: Fix leak in ipv6_gso_segment().
         [e3e86b5119f81e5e2499bea7ea1ebe8ac6aab789]

Eric Biggers (1):
      KEYS: fix dereferencing NULL payload with nonzero length
         [5649645d725c73df4302428ee4e02c869248b4c5]

Eric Dumazet (2):
      net: ping: do not abuse udp_poll()
         [77d4b1d36926a9b8387c6b53eeba42bcaaffcea3]
      net: prevent sign extension in dev_get_stats()
         [6f64ec74515925cced6df4571638b5a099a49aae]

Eric W. Biederman (1):
      signal: Only reschedule timers on signals timers have sent
         [57db7e4a2d92c2d3dfbca4ef8057849b2682436b]

Felipe Balbi (1):
      usb: host: xhci: simplify irq handler return
         [76a35293b901915c5dcb4a87a4a0da8d7caf39fe]

Gilad Ben-Yossef (1):
      crypto: gcm - wait for crypto op not signal safe
         [f3ad587070d6bd961ab942b3fd7a85d00dfc934b]

Gleb Natapov (1):
      KVM: x86: fix use of uninitialized memory as segment descriptor in emulator.
         [378a8b099fc207ddcb91b19a8c1457667e0af398]

Ilya Matveychikov (1):
      lib/cmdline.c: fix get_options() overflow while parsing ranges
         [a91e0f680bcd9e10c253ae8b62462a38bd48f09f]

Jan Kara (2):
      ext4: fix data corruption for mmap writes
         [a056bdaae7a181f7dcc876cfab2f94538e508709]
      ext4: fix fdatasync(2) after extent manipulation operations
         [67a7d5f561f469ad2fa5154d2888258ab8e6df7c]

Jann Horn (1):
      ptrace: use fsuid, fsgid, effective creds for fs access checks
         [caaee6234d05a58c5b4d05e7bf766131b810a657]

Johan Hovold (13):
      USB: gadget: dummy_hcd: fix hub-descriptor removable fields
         [d81182ce30dbd497a1e7047d7fda2af040347790]
      USB: hub: fix SS hub-descriptor handling
         [2c25a2c818023df64463aac3288a9f969491e507]
      USB: hub: fix SS max number of ports
         [93491ced3c87c94b12220dbac0527e1356702179]
      USB: hub: fix non-SS hub-descriptor handling
         [bec444cd1c94c48df409a35ad4e5b143c245c3f7]
      USB: iowarrior: fix info ioctl on big-endian hosts
         [dd5ca753fa92fb736b1395db892bd29f78e6d408]
      USB: serial: io_ti: fix div-by-zero in set_termios
         [6aeb75e6adfaed16e58780309613a578fe1ee90b]
      USB: serial: ir-usb: fix big-endian baud-rate debug printk
         [ad0ccac76dcc92c3331f4c94c9fc54f8bf1ab20c]
      USB: serial: mct_u232: fix big-endian baud-rate handling
         [26cede343656c0bc2c33cdc783771282405c7fb2]
      USB: usbip: fix nonconforming hub descriptor
         [ec963b412a54aac8e527708ecad06a6988a86fb4]
      net: irda: irda-usb: fix firmware name on big-endian hosts
         [75cf067953d5ee543b3bda90bbfcbee5e1f94ae8]
      of: fdt: add missing allocation-failure check
         [49e67dd17649b60b4d54966e18ec9c80198227f0]
      uwb: fix device quirk on big-endian hosts
         [41318a2b82f5d5fe1fb408f6d6e0b22aa557111d]
      watchdog: pcwd_usb: fix NULL-deref at probe
         [46c319b848268dab3f0e7c4a5b6e9146d3bca8a4]

Johannes Thumshirn (1):
      scsi: qla2xxx: don't disable a not previously enabled PCI device
         [ddff7ed45edce4a4c92949d3c61cd25d229c4a14]

Julius Werner (2):
      drivers: char: mem: Check for address space wraparound with mmap()
         [b299cde245b0b76c977f4291162cf668e087b408]
      drivers: char: mem: Fix wraparound check to allow mappings up to the end
         [32829da54d9368103a2f03269a5120aa9ee4d5da]

Konstantin Khlebnikov (1):
      ext4: keep existing extra fields when inode expands
         [887a9730614727c4fff7cb756711b190593fc1df]

Linus Torvalds (1):
      Sanitize 'move_pages()' permission checks
         [197e7e521384a23b9e585178f3f11c9fa08274b9]

Liping Zhang (1):
      netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize
         [fefa92679dbe0c613e62b6c27235dcfbe9640ad1]

Marcin Nowakowski (1):
      MIPS: kprobes: flush_insn_slot should flush only if probe initialised
         [698b851073ddf5a894910d63ca04605e0473414e]

Mathias Nyman (2):
      xhci: apply PME_STUCK_QUIRK and MISSING_CAS quirk for Denverton
         [a0c16630d35a874e82bdf2088f58ecaca1024315]
      xhci: workaround for hosts missing CAS bit
         [346e99736c3ce328fd42d678343b70243aca5f36]

Max Filippov (1):
      net: ethoc: enable NAPI before poll may be scheduled
         [d220b942a4b6a0640aee78841608f4aa5e8e185e]

Michael Ellerman (1):
      powerpc/mm: Fix virt_addr_valid() etc. on 64-bit hash
         [e41e53cd4fe331d0d1f06f8e4ed7e2cc63ee2c34]

Naveen N. Rao (1):
      powerpc/kprobes: Pause function_graph tracing during jprobes handling
         [a9f8553e935f26cb5447f67e280946b0923cd2dc]

NeilBrown (1):
      autofs: sanity check status reported with AUTOFS_DEV_IOCTL_FAIL
         [9fa4eb8e490a28de40964b1b0e583d8db4c7e57c]

Nicholas Bellinger (1):
      configfs: Fix race between create_link and configfs_rmdir
         [ba80aa909c99802c428682c352b0ee0baac0acd3]

Nicholas Piggin (1):
      powerpc/64: Initialise thread_info for emergency stacks
         [34f19ff1b5a0d11e46df479623d6936460105c9f]

Patrik Jakobsson (1):
      drm/gma500/psb: Actually use VBT mode when it is found
         [82bc9a42cf854fdf63155759c0aa790bd1f361b0]

Paul Burton (1):
      MIPS: Fix IRQ tracing & lockdep when rescheduling
         [d8550860d910c6b7b70f830f59003b33daaa52c9]

Paul Moore (1):
      selinux: fix double free in selinux_parse_opts_str()
         [023f108dcc187e34ef864bf10ed966cf25e14e2a]

Peter Chen (1):
      usb: host: xhci-mem: allocate zeroed Scratchpad Buffer
         [7480d912d549f414e0ce39331870899e89a5598c]

Peter Ujfalusi (1):
      usb: musb: tusb6010_omap: Do not reset the other direction's packet size
         [6df2b42f7c040d57d9ecb67244e04e905ab87ac6]

Radim Krčmář (1):
      KVM: x86: zero base3 of unusable segments
         [f0367ee1d64d27fa08be2407df5c125442e885e3]

Rajkumar Manoharan (1):
      mac80211: strictly check mesh address extension mode
         [5667c86acf021e6dcf02584408b4484a273ac68f]

Roger Pau Monne (1):
      xen: fix bio vec merging
         [462cdace790ac2ed6aad1b19c9c0af0143b6aab0]

Russell King (1):
      net: phy: fix marvell phy status reading
         [898805e0cdf7fd860ec21bf661d3a0285a3defbd]

Sabrina Dubroca (2):
      tracing/kprobes: Allow to create probe with a module name starting with a digit
         [9e52b32567126fe146f198971364f68d3bc5233f]
      xfrm: fix stack access out of bounds with CONFIG_XFRM_SUB_POLICY
         [9b3eb54106cf6acd03f07cf0ab01c13676a226c2]

Sasha Levin (2):
      mm: fix NULL ptr dereference in migrate_pages
         [f2a9ef880763d7fbd657a3af646e132a90d70d34]
      mm: fix NULL ptr dereference in move_pages
         [6e8b09eaf268bceac0c62e389b4bc0cb83dfb8e5]

Sean Young (1):
      [media] rc-core: race condition during ir_raw_event_register()
         [963761a0b2e85663ee4a5630f72930885a06598a]

Sebastian Reichel (1):
      i2c: i2c-tiny-usb: fix buffer not being DMA capable
         [5165da5923d6c7df6f2927b0113b2e4d9288661e]

SeongJae Park (6):
      perf probe: Fix examples section of documentation
         [d89269a89ebb6a74512f3f40e89cd12017f60a75]
      perf script python: Fix wrong code snippets in documentation
         [26ddb8722df865aa67fbe459107d2f3f8e5c6829]
      perf script python: Remove dups in documentation examples
         [14fc42fa1b3e7ea5160c84d0e686a3a0c1ffe619]
      perf script python: Updated trace_unhandled() signature
         [1bf8d5a4a5da19b1f6e7958fe67db4118fa7a1c1]
      perf script: Fix documentation errors
         [34d4453dac257be53c21abf2f713c992fb692b5c]
      perf script: Fix outdated comment for perf-trace-python
         [c76132dc5182776b98e946d674cb41c421661ea9]

Serhey Popovych (1):
      rtnetlink: add IFLA_GROUP to ifla_policy
         [db833d40ad3263b2ee3b59a1ba168bb3cfed8137]

Soheil Hassas Yeganeh (1):
      tcp: eliminate negative reordering in tcp_clean_rtx_queue
         [bafbb9c73241760023d8981191ddd30bb1c6dbac]

Steffen Klassert (1):
      af_key: Fix slab-out-of-bounds in pfkey_compile_policy.
         [d90c902449a7561f1b1d58ba5a0d11728ce8b0b2]

Sui Chen (1):
      ahci: Acer SA5-271 SSD Not Detected Fix
         [8bfd174312629866efa535193d9e563768ff4307]

Takashi Iwai (1):
      ASoC: Fix use-after-free at card unregistration
         [4efda5f2130da033aeedc5b3205569893b910de2]

Thinh Nguyen (1):
      usb: gadget: f_mass_storage: Serialize wake and sleep execution
         [dc9217b69dd6089dcfeb86ed4b3c671504326087]

Thomas Gleixner (3):
      alarmtimer: Prevent overflow of relative timers
         [f4781e76f90df7aec400635d73ea4c35ee1d4765]
      alarmtimer: Rate limit periodic intervals
         [ff86bf0c65f14346bf2440534f9ba5ac232c39a0]
      tracing/kprobes: Enforce kprobes teardown after testing
         [30e7d894c1478c88d50ce94ddcdbd7f9763d9cdd]

Uwe Kleine-König (1):
      net: ethernet: ax88796: don't call free_irq without request_irq first
         [82533ad9a1ce3a7a6863849a552c2cc041b55e0d]

Vamsi Krishna Samavedam (1):
      USB: core: replace %p with %pK
         [2f964780c03b73de269b08d12aff96a9618d13f3]

Vladis Dronov (1):
      xfrm: policy: check policy direction value
         [7bab09631c2a303f87a7eb7e3d69e888673b9b7e]

WANG Cong (1):
      ipv6: avoid unregistering inet6_dev for loopback
         [60abc0be96e00ca71bac083215ac91ad2e575096]

Wan Ahmad Zainie (1):
      usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Apollo Lake
         [6c97cfc1a097b1e0786c836e92b7a72b4d031e25]

Wanpeng Li (3):
      KVM: X86: Fix read out-of-bounds vulnerability in kvm pio emulation
         [cbfc6c9184ce71b52df4b1d82af5afc81a709178]
      KVM: async_pf: avoid async pf injection when in guest mode
         [9bc1f09f6fa76fdf31eb7d6a4a4df43574725f93]
      KVM: cpuid: Fix read/write out-of-bounds vulnerability in cpuid emulation
         [a3641631d14571242eec0d30c9faa786cbf52d44]

Wei Wang (1):
      tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
         [499350a5a6e7512d9ed369ed63a4244b6536f4f8]

Yu Zhao (1):
      swap: cond_resched in swap_cgroup_prepare()
         [ef70762948dde012146926720b70e79736336764]

Yuchung Cheng (1):
      tcp: avoid fragmenting peculiar skbs in SACK
         [b451e5d24ba6687c6f0e7319c727a709a1846c06]

Zhaowei Yuan (1):
      [media] vb2: fix plane index sanity check in vb2_plane_cookie()
         [a9ae4692eda4b99f85757b15d60971ff78a0a0e2]

 Makefile                                           |  4 +-
 arch/alpha/kernel/osf_sys.c                        |  6 +-
 arch/mips/include/asm/kprobes.h                    |  3 +-
 arch/mips/kernel/entry.S                           |  3 +
 arch/powerpc/include/asm/page.h                    | 12 +++
 arch/powerpc/kernel/kprobes.c                      | 12 +++
 arch/powerpc/kernel/setup_64.c                     | 25 ++++++
 arch/x86/kvm/mmu.c                                 |  7 +-
 arch/x86/kvm/mmu.h                                 |  1 +
 arch/x86/kvm/x86.c                                 | 53 ++++++++-----
 crypto/gcm.c                                       |  6 +-
 drivers/ata/ahci.c                                 | 38 +++++++++
 drivers/char/mem.c                                 |  5 ++
 drivers/dma/ep93xx_dma.c                           |  2 +
 drivers/gpu/drm/radeon/radeon_combios.c            |  7 ++
 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c               |  2 +
 drivers/i2c/busses/i2c-tiny-usb.c                  | 25 +++++-
 drivers/input/serio/i8042-x86ia64io.h              |  7 ++
 drivers/media/rc/ir-raw.c                          | 13 ++--
 drivers/media/video/videobuf2-core.c               |  4 +-
 drivers/net/ethernet/8390/ax88796.c                |  7 +-
 drivers/net/ethernet/ethoc.c                       |  3 +-
 drivers/net/irda/irda-usb.c                        |  2 +-
 drivers/net/phy/marvell.c                          | 68 ++++++++--------
 drivers/of/fdt.c                                   |  2 +
 drivers/scsi/qla2xxx/qla_os.c                      |  8 +-
 drivers/staging/gma500/psb_intel_lvds.c            | 18 +++--
 drivers/staging/usbip/vhci_hcd.c                   | 11 ++-
 drivers/usb/core/devio.c                           |  4 +-
 drivers/usb/core/hcd.c                             |  4 +-
 drivers/usb/core/hub.c                             | 28 +++++--
 drivers/usb/gadget/dummy_hcd.c                     |  6 +-
 drivers/usb/gadget/f_mass_storage.c                | 13 +++-
 drivers/usb/host/r8a66597-hcd.c                    |  6 +-
 drivers/usb/host/xhci-hub.c                        | 37 +++++++++
 drivers/usb/host/xhci-mem.c                        |  2 +-
 drivers/usb/host/xhci-pci.c                        | 16 +++-
 drivers/usb/host/xhci-ring.c                       | 37 +++++----
 drivers/usb/host/xhci.h                            |  3 +
 drivers/usb/misc/iowarrior.c                       |  2 +-
 drivers/usb/musb/tusb6010_omap.c                   | 13 +++-
 drivers/usb/serial/ftdi_sio.c                      |  2 +-
 drivers/usb/serial/io_ti.c                         |  5 +-
 drivers/usb/serial/ir-usb.c                        | 21 ++---
 drivers/usb/serial/mct_u232.c                      |  2 +-
 drivers/usb/storage/ene_ub6250.c                   | 90 +++++++++++++---------
 drivers/uwb/i1480/dfu/usb.c                        |  5 +-
 drivers/watchdog/pcwd_usb.c                        |  3 +
 drivers/xen/biomerge.c                             |  3 +-
 fs/autofs4/dev-ioctl.c                             |  2 +-
 fs/configfs/symlink.c                              |  3 +-
 fs/ext4/extents.c                                  |  2 +
 fs/ext4/inode.c                                    | 31 ++++++--
 fs/partitions/check.c                              |  4 +-
 fs/proc/array.c                                    |  2 +-
 fs/proc/base.c                                     | 12 +--
 fs/proc/namespaces.c                               |  4 +-
 fs/ufs/inode.c                                     |  5 +-
 fs/ufs/super.c                                     | 18 +++++
 fs/ufs/truncate.c                                  |  6 --
 fs/ufs/util.h                                      | 10 ++-
 include/linux/kprobes.h                            |  4 +-
 include/linux/ptrace.h                             | 24 +++++-
 include/linux/skbuff.h                             |  1 +
 include/linux/usb/ch11.h                           |  3 +
 include/net/xfrm.h                                 | 10 ---
 kernel/events/core.c                               |  2 +-
 kernel/futex.c                                     |  2 +-
 kernel/futex_compat.c                              |  2 +-
 kernel/kprobes.c                                   |  2 +-
 kernel/ptrace.c                                    | 39 ++++++++--
 kernel/signal.c                                    | 20 +++--
 kernel/time/alarmtimer.c                           | 12 ++-
 kernel/trace/trace_kprobe.c                        | 18 +++--
 lib/cmdline.c                                      |  6 +-
 mm/mempolicy.c                                     | 29 ++++---
 mm/migrate.c                                       | 45 +++++------
 mm/page_cgroup.c                                   |  3 +
 mm/process_vm_access.c                             |  2 +-
 net/ceph/osdmap.c                                  |  1 +
 net/core/dev.c                                     |  2 +-
 net/core/rtnetlink.c                               |  2 +
 net/core/skbuff.c                                  | 20 +++--
 net/ipv4/af_inet.c                                 |  2 +-
 net/ipv4/tcp.c                                     |  4 +
 net/ipv4/tcp_input.c                               | 11 +--
 net/ipv6/addrconf.c                                |  5 +-
 net/ipv6/af_inet6.c                                |  4 +-
 net/ipv6/xfrm6_mode_ro.c                           |  2 +
 net/ipv6/xfrm6_mode_transport.c                    |  2 +
 net/key/af_key.c                                   | 19 +++--
 net/mac80211/rx.c                                  |  3 +-
 net/netfilter/nf_conntrack_netlink.c               |  7 +-
 net/wireless/util.c                                | 14 +++-
 net/xfrm/xfrm_policy.c                             | 51 ++----------
 security/commoncap.c                               |  7 +-
 security/keys/keyctl.c                             |  4 +-
 security/selinux/hooks.c                           |  5 +-
 sound/pci/hda/patch_sigmatel.c                     |  2 +
 sound/soc/soc-core.c                               |  5 +-
 tools/perf/Documentation/perf-probe.txt            |  8 +-
 tools/perf/Documentation/perf-script-perl.txt      |  2 +-
 tools/perf/Documentation/perf-script-python.txt    | 23 +++---
 .../util/scripting-engines/trace-event-python.c    |  2 +-
 104 files changed, 794 insertions(+), 392 deletions(-)

-- 
Ben Hutchings
For every complex problem
there is a solution that is simple, neat, and wrong.

[toc] | [next] | [standalone]


#1729697 — [PATCH 3.2 017/106] USB: gadget: dummy_hcd: fix hub-descriptor removable fields

FromBen Hutchings <ben@decadent.org.uk>
Date2017-09-10 01:00 +0200
Subject[PATCH 3.2 017/106] USB: gadget: dummy_hcd: fix hub-descriptor removable fields
Message-ID<unWTi-3q2-71@gated-at.bofh.it>
In reply to#1729696
3.2.93-rc1 review patch.  If anyone has any objections, please let me know.

------------------

From: Johan Hovold <johan@kernel.org>

commit d81182ce30dbd497a1e7047d7fda2af040347790 upstream.

Flag the first and only port as removable while also leaving the
remaining bits (including the reserved bit zero) unset in accordance
with the specifications:

	"Within a byte, if no port exists for a given location, the bit
	field representing the port characteristics shall be 0."

Also add a comment marking the legacy PortPwrCtrlMask field.

Fixes: 1cd8fd2887e1 ("usb: gadget: dummy_hcd: add SuperSpeed support")
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Cc: Tatyana Brokhman <tlinder@codeaurora.org>
Signed-off-by: Johan Hovold <johan@kernel.org>
Acked-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
[bwh: Backported to 3.2: adjust filename]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
 drivers/usb/gadget/dummy_hcd.c | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

--- a/drivers/usb/gadget/dummy_hcd.c
+++ b/drivers/usb/gadget/dummy_hcd.c
@@ -1770,7 +1770,7 @@ ss_hub_descriptor(struct usb_hub_descrip
 	desc->wHubCharacteristics = cpu_to_le16(0x0001);
 	desc->bNbrPorts = 1;
 	desc->u.ss.bHubHdrDecLat = 0x04; /* Worst case: 0.4 micro sec*/
-	desc->u.ss.DeviceRemovable = 0xffff;
+	desc->u.ss.DeviceRemovable = 0;
 }
 
 static inline void
@@ -1781,8 +1781,8 @@ hub_descriptor (struct usb_hub_descripto
 	desc->bDescLength = 9;
 	desc->wHubCharacteristics = cpu_to_le16(0x0001);
 	desc->bNbrPorts = 1;
-	desc->u.hs.DeviceRemovable[0] = 0xff;
-	desc->u.hs.DeviceRemovable[1] = 0xff;
+	desc->u.hs.DeviceRemovable[0] = 0;
+	desc->u.hs.DeviceRemovable[1] = 0xff;	/* PortPwrCtrlMask */
 }
 
 static int dummy_hub_control (

[toc] | [prev] | [next] | [standalone]


#1729698 — [PATCH 3.2 090/106] rtnetlink: add IFLA_GROUP to ifla_policy

FromBen Hutchings <ben@decadent.org.uk>
Date2017-09-10 01:00 +0200
Subject[PATCH 3.2 090/106] rtnetlink: add IFLA_GROUP to ifla_policy
Message-ID<unWTi-3q2-73@gated-at.bofh.it>
In reply to#1729696
3.2.93-rc1 review patch.  If anyone has any objections, please let me know.

------------------

From: Serhey Popovych <serhe.popovych@gmail.com>

commit db833d40ad3263b2ee3b59a1ba168bb3cfed8137 upstream.

Network interface groups support added while ago, however
there is no IFLA_GROUP attribute description in policy
and netlink message size calculations until now.

Add IFLA_GROUP attribute to the policy.

Fixes: cbda10fa97d7 ("net_device: add support for network device groups")
Signed-off-by: Serhey Popovych <serhe.popovych@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
[bwh: Backported to 3.2: adjust context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
 net/core/rtnetlink.c | 2 ++
 1 file changed, 2 insertions(+)

--- a/net/core/rtnetlink.c
+++ b/net/core/rtnetlink.c
@@ -791,6 +791,7 @@ static noinline size_t if_nlmsg_size(con
 	       + nla_total_size(4) /* IFLA_MASTER */
 	       + nla_total_size(1) /* IFLA_OPERSTATE */
 	       + nla_total_size(1) /* IFLA_LINKMODE */
+	       + nla_total_size(4) /* IFLA_GROUP */
 	       + nla_total_size(ext_filter_mask
 			        & RTEXT_FILTER_VF ? 4 : 0) /* IFLA_NUM_VF */
 	       + rtnl_vfinfo_size(dev, ext_filter_mask) /* IFLA_VFINFO_LIST */
@@ -1142,6 +1143,7 @@ const struct nla_policy ifla_policy[IFLA
 	[IFLA_PORT_SELF]	= { .type = NLA_NESTED },
 	[IFLA_AF_SPEC]		= { .type = NLA_NESTED },
 	[IFLA_EXT_MASK]		= { .type = NLA_U32 },
+	[IFLA_GROUP]		= { .type = NLA_U32 },
 };
 EXPORT_SYMBOL(ifla_policy);
 

[toc] | [prev] | [next] | [standalone]


#1729872 — [PATCH 3.2 014/106] USB: iowarrior: fix info ioctl on big-endian hosts

FromBen Hutchings <ben@decadent.org.uk>
Date2017-09-10 01:50 +0200
Subject[PATCH 3.2 014/106] USB: iowarrior: fix info ioctl on big-endian hosts
Message-ID<unXFD-43x-7@gated-at.bofh.it>
In reply to#1729696
3.2.93-rc1 review patch.  If anyone has any objections, please let me know.

------------------

From: Johan Hovold <johan@kernel.org>

commit dd5ca753fa92fb736b1395db892bd29f78e6d408 upstream.

Drop erroneous le16_to_cpu when returning the USB device speed which is
already in host byte order.

Found using sparse:

	warning: cast to restricted __le16

Fixes: 946b960d13c1 ("USB: add driver for iowarrior devices.")
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
 drivers/usb/misc/iowarrior.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

--- a/drivers/usb/misc/iowarrior.c
+++ b/drivers/usb/misc/iowarrior.c
@@ -560,7 +560,7 @@ static long iowarrior_ioctl(struct file
 			info.revision = le16_to_cpu(dev->udev->descriptor.bcdDevice);
 
 			/* 0==UNKNOWN, 1==LOW(usb1.1) ,2=FULL(usb1.1), 3=HIGH(usb2.0) */
-			info.speed = le16_to_cpu(dev->udev->speed);
+			info.speed = dev->udev->speed;
 			info.if_num = dev->interface->cur_altsetting->desc.bInterfaceNumber;
 			info.report_size = dev->report_size;
 

[toc] | [prev] | [next] | [standalone]


#1729877 — [PATCH 3.2 002/106] af_key: Fix slab-out-of-bounds in pfkey_compile_policy.

FromBen Hutchings <ben@decadent.org.uk>
Date2017-09-10 01:50 +0200
Subject[PATCH 3.2 002/106] af_key: Fix slab-out-of-bounds in pfkey_compile_policy.
Message-ID<unXFD-43x-17@gated-at.bofh.it>
In reply to#1729696
3.2.93-rc1 review patch.  If anyone has any objections, please let me know.

------------------

From: Steffen Klassert <steffen.klassert@secunet.com>

commit d90c902449a7561f1b1d58ba5a0d11728ce8b0b2 upstream.

The sadb_x_sec_len is stored in the unit 'byte divided by eight'.
So we have to multiply this value by eight before we can do
size checks. Otherwise we may get a slab-out-of-bounds when
we memcpy the user sec_ctx.

Fixes: df71837d502 ("[LSM-IPSec]: Security association restriction.")
Reported-by: Andrey Konovalov <andreyknvl@google.com>
Tested-by: Andrey Konovalov <andreyknvl@google.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
 net/key/af_key.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

--- a/net/key/af_key.c
+++ b/net/key/af_key.c
@@ -3230,7 +3230,7 @@ static struct xfrm_policy *pfkey_compile
 		p += pol->sadb_x_policy_len*8;
 		sec_ctx = (struct sadb_x_sec_ctx *)p;
 		if (len < pol->sadb_x_policy_len*8 +
-		    sec_ctx->sadb_x_sec_len) {
+		    sec_ctx->sadb_x_sec_len*8) {
 			*dir = -EINVAL;
 			goto out;
 		}

[toc] | [prev] | [next] | [standalone]


#1729883 — [PATCH 3.2 009/106] ahci: Acer SA5-271 SSD Not Detected Fix

FromBen Hutchings <ben@decadent.org.uk>
Date2017-09-10 01:50 +0200
Subject[PATCH 3.2 009/106] ahci: Acer SA5-271 SSD Not Detected Fix
Message-ID<unXFE-43x-29@gated-at.bofh.it>
In reply to#1729696
3.2.93-rc1 review patch.  If anyone has any objections, please let me know.

------------------

From: Sui Chen <suichen6@gmail.com>

commit 8bfd174312629866efa535193d9e563768ff4307 upstream.

(Correction in this resend: fixed function name acer_sa5_271_workaround; fixed
 the always-true condition in the function; fixed description.)

On the Acer Switch Alpha 12 (model number: SA5-271), the internal SSD may not
get detected because the port_map and CAP.nr_ports combination causes the driver
to skip the port that is actually connected to the SSD. More specifically,
either all SATA ports are identified as DUMMY, or all ports get ``link down''
and never get up again.

This problem occurs occasionally. When this problem occurs, CAP may hold a
value of 0xC734FF00 or 0xC734FF01 and port_map may hold a value of 0x00 or 0x01.
When this problem does not occur, CAP holds a value of 0xC734FF02 and port_map
may hold a value of 0x07. Overriding the CAP value to 0xC734FF02 and port_map to
0x7 significantly reduces the occurrence of this problem.

Link: https://bugzilla.kernel.org/attachment.cgi?id=253091
Signed-off-by: Sui Chen <suichen6@gmail.com>
Tested-by: Damian Ivanov <damianatorrpm@gmail.com>
Signed-off-by: Tejun Heo <tj@kernel.org>
[bwh: Backported to 3.2: adjust context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
 drivers/ata/ahci.c | 38 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)

--- a/drivers/ata/ahci.c
+++ b/drivers/ata/ahci.c
@@ -1268,6 +1268,40 @@ static inline void ahci_gtf_filter_worka
 {}
 #endif
 
+/*
+ * On the Acer Aspire Switch Alpha 12, sometimes all SATA ports are detected
+ * as DUMMY, or detected but eventually get a "link down" and never get up
+ * again. When this happens, CAP.NP may hold a value of 0x00 or 0x01, and the
+ * port_map may hold a value of 0x00.
+ *
+ * Overriding CAP.NP to 0x02 and the port_map to 0x7 will reveal all 3 ports
+ * and can significantly reduce the occurrence of the problem.
+ *
+ * https://bugzilla.kernel.org/show_bug.cgi?id=189471
+ */
+static void acer_sa5_271_workaround(struct ahci_host_priv *hpriv,
+				    struct pci_dev *pdev)
+{
+	static const struct dmi_system_id sysids[] = {
+		{
+			.ident = "Acer Switch Alpha 12",
+			.matches = {
+				DMI_MATCH(DMI_SYS_VENDOR, "Acer"),
+				DMI_MATCH(DMI_PRODUCT_NAME, "Switch SA5-271")
+			},
+		},
+		{ }
+	};
+
+	if (dmi_check_system(sysids)) {
+		dev_info(&pdev->dev, "enabling Acer Switch Alpha 12 workaround\n");
+		if ((hpriv->saved_cap & 0xC734FF00) == 0xC734FF00) {
+			hpriv->port_map = 0x7;
+			hpriv->cap = 0xC734FF02;
+		}
+	}
+}
+
 static int ahci_init_one(struct pci_dev *pdev, const struct pci_device_id *ent)
 {
 	unsigned int board_id = ent->driver_data;
@@ -1407,6 +1441,10 @@ static int ahci_init_one(struct pci_dev
 			 "online status unreliable, applying workaround\n");
 	}
 
+
+	/* Acer SA5-271 workaround modifies private_data */
+	acer_sa5_271_workaround(hpriv, pdev);
+
 	/* CAP.NP sometimes indicate the index of the last enabled
 	 * port, at other times, that of the last possible port, so
 	 * determining the maximum port number requires looking at

[toc] | [prev] | [next] | [standalone]


#1729886 — [PATCH 3.2 001/106] xfrm: fix stack access out of bounds with CONFIG_XFRM_SUB_POLICY

FromBen Hutchings <ben@decadent.org.uk>
Date2017-09-10 01:50 +0200
Subject[PATCH 3.2 001/106] xfrm: fix stack access out of bounds with CONFIG_XFRM_SUB_POLICY
Message-ID<unXFF-43x-33@gated-at.bofh.it>
In reply to#1729696
3.2.93-rc1 review patch.  If anyone has any objections, please let me know.

------------------

From: Sabrina Dubroca <sd@queasysnail.net>

commit 9b3eb54106cf6acd03f07cf0ab01c13676a226c2 upstream.

When CONFIG_XFRM_SUB_POLICY=y, xfrm_dst stores a copy of the flowi for
that dst. Unfortunately, the code that allocates and fills this copy
doesn't care about what type of flowi (flowi, flowi4, flowi6) gets
passed. In multiple code paths (from raw_sendmsg, from TCP when
replying to a FIN, in vxlan, geneve, and gre), the flowi that gets
passed to xfrm is actually an on-stack flowi4, so we end up reading
stuff from the stack past the end of the flowi4 struct.

Since xfrm_dst->origin isn't used anywhere following commit
ca116922afa8 ("xfrm: Eliminate "fl" and "pol" args to
xfrm_bundle_ok()."), just get rid of it.  xfrm_dst->partner isn't used
either, so get rid of that too.

Fixes: 9d6ec938019c ("ipv4: Use flowi4 in public route lookup interfaces.")
Signed-off-by: Sabrina Dubroca <sd@queasysnail.net>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
[bwh: Backported to 3.2: deleted code is slightly different]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
--- a/include/net/xfrm.h
+++ b/include/net/xfrm.h
@@ -925,10 +925,6 @@ struct xfrm_dst {
 	struct flow_cache_object flo;
 	struct xfrm_policy *pols[XFRM_POLICY_TYPE_MAX];
 	int num_pols, num_xfrms;
-#ifdef CONFIG_XFRM_SUB_POLICY
-	struct flowi *origin;
-	struct xfrm_selector *partner;
-#endif
 	u32 xfrm_genid;
 	u32 policy_genid;
 	u32 route_mtu_cached;
@@ -944,12 +940,6 @@ static inline void xfrm_dst_destroy(stru
 	dst_release(xdst->route);
 	if (likely(xdst->u.dst.xfrm))
 		xfrm_state_put(xdst->u.dst.xfrm);
-#ifdef CONFIG_XFRM_SUB_POLICY
-	kfree(xdst->origin);
-	xdst->origin = NULL;
-	kfree(xdst->partner);
-	xdst->partner = NULL;
-#endif
 }
 #endif
 
--- a/net/xfrm/xfrm_policy.c
+++ b/net/xfrm/xfrm_policy.c
@@ -1530,41 +1530,6 @@ free_dst:
 	goto out;
 }
 
-static int inline
-xfrm_dst_alloc_copy(void **target, const void *src, int size)
-{
-	if (!*target) {
-		*target = kmalloc(size, GFP_ATOMIC);
-		if (!*target)
-			return -ENOMEM;
-	}
-	memcpy(*target, src, size);
-	return 0;
-}
-
-static int inline
-xfrm_dst_update_parent(struct dst_entry *dst, const struct xfrm_selector *sel)
-{
-#ifdef CONFIG_XFRM_SUB_POLICY
-	struct xfrm_dst *xdst = (struct xfrm_dst *)dst;
-	return xfrm_dst_alloc_copy((void **)&(xdst->partner),
-				   sel, sizeof(*sel));
-#else
-	return 0;
-#endif
-}
-
-static int inline
-xfrm_dst_update_origin(struct dst_entry *dst, const struct flowi *fl)
-{
-#ifdef CONFIG_XFRM_SUB_POLICY
-	struct xfrm_dst *xdst = (struct xfrm_dst *)dst;
-	return xfrm_dst_alloc_copy((void **)&(xdst->origin), fl, sizeof(*fl));
-#else
-	return 0;
-#endif
-}
-
 static int xfrm_expand_policies(const struct flowi *fl, u16 family,
 				struct xfrm_policy **pols,
 				int *num_pols, int *num_xfrms)
@@ -1636,16 +1601,6 @@ xfrm_resolve_and_create_bundle(struct xf
 
 	xdst = (struct xfrm_dst *)dst;
 	xdst->num_xfrms = err;
-	if (num_pols > 1)
-		err = xfrm_dst_update_parent(dst, &pols[1]->selector);
-	else
-		err = xfrm_dst_update_origin(dst, fl);
-	if (unlikely(err)) {
-		dst_free(dst);
-		XFRM_INC_STATS(net, LINUX_MIB_XFRMOUTBUNDLECHECKERROR);
-		return ERR_PTR(err);
-	}
-
 	xdst->num_pols = num_pols;
 	memcpy(xdst->pols, pols, sizeof(struct xfrm_policy*) * num_pols);
 	xdst->policy_genid = atomic_read(&pols[0]->genid);

[toc] | [prev] | [next] | [standalone]


#1729984

FromGuenter Roeck <linux@roeck-us.net>
Date2017-09-10 16:40 +0200
Message-ID<uobyW-58k-5@gated-at.bofh.it>
In reply to#1729696
On 09/09/2017 02:47 PM, Ben Hutchings wrote:
> This is the start of the stable review cycle for the 3.2.93 release.
> There are 106 patches in this series, which will be posted as responses
> to this one.  If anyone has any issues with these being applied, please
> let me know.
> 
> Responses should be made by Tue Sep 12 12:00:00 UTC 2017.
> Anything received after that time might be too late.
> 

Build results:
	total: 86 pass: 86 fail: 0
Qemu test results:
	total: 69 pass: 69 fail: 0

Details are available at http://kerneltests.org/builders.

Guenter

[toc] | [prev] | [next] | [standalone]


#1730035

FromBen Hutchings <ben@decadent.org.uk>
Date2017-09-10 20:50 +0200
Message-ID<uofsR-7Tk-13@gated-at.bofh.it>
In reply to#1729984

[Multipart message — attachments visible in raw view] — view raw

On Sun, 2017-09-10 at 07:31 -0700, Guenter Roeck wrote:
> On 09/09/2017 02:47 PM, Ben Hutchings wrote:
> > This is the start of the stable review cycle for the 3.2.93
> > release.
> > There are 106 patches in this series, which will be posted as
> > responses
> > to this one.  If anyone has any issues with these being applied,
> > please
> > let me know.
> > 
> > Responses should be made by Tue Sep 12 12:00:00 UTC 2017.
> > Anything received after that time might be too late.
> > 
> 
> Build results:
> 	total: 86 pass: 86 fail: 0
> Qemu test results:
> 	total: 69 pass: 69 fail: 0
> 
> Details are available at http://kerneltests.org/builders.

Thanks for checking!

Ben.

-- 
Ben Hutchings
[W]e found...that it wasn't as easy to get programs right as we had thought.
... I realized that a large part of my life from then on was going to be spent
in finding mistakes in my own programs. - Maurice Wilkes, 1949

[toc] | [prev] | [standalone]


Back to top | Article view | linux.kernel


csiph-web