[PATCH 004/100] HID: provide a helper for validating hid reports

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Kees Cook commit 331415ff16a12147d57d5c953f3a961b7ede348b upstream. Many drivers need to validate the characteristics of their HID report during initialization to avoid misusing the repo

[PATCH 007/100] HID: add usage_index in struct hid_usage.

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Benjamin Tissoires commit f262d1fa2c651a5e2f92b6aee8779597631cd5d4 upstream. Currently, there is no way to know the index of the current field in the .input_mapping and .event callbacks

Re: [PATCH] drivers: misc: add gpio wakeup driver

2013-10-11 Thread Linus Walleij
On Tue, Oct 1, 2013 at 3:55 PM, Daniel Mack wrote: > This patch adds a very simple driver that enables GPIO lines as wakeup > sources. It only operates on information passed in via DT, and depends > on CONFIG_OF && CONFIG_PM_SLEEP. It can for example be used to connect > wake-on-LAN (WOL) signals

[PATCH 009/100] HID: logitech-dj: validate output report details

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Kees Cook commit 297502abb32e225fb23801fcdb0e4f6f8e17099a upstream. A HID device could send a malicious output report that would cause the logitech-dj HID driver to leak kernel memory co

[PATCH 006/100] HID: LG: validate HID output report details

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Kees Cook commit 0fb6bd06e06792469acc15bbe427361b56ada528 upstream. A HID device could send a malicious output report that would cause the lg, lg3, and lg4 HID drivers to write beyond th

Re: [PATCH v2 0/2] cpufreq: exynos: Fixes for v3.12

2013-10-11 Thread Rafael J. Wysocki
On Wednesday, October 09, 2013 02:08:41 PM Lukasz Majewski wrote: > Attached commits provide cpufreq regression fixes for Trats and Trats2 > Exynos4 boards. > Since v3.12 Exynos4 uses common clock framework for clock manipulation. > Those patches restore correct output for cpuinfo_cur_freq [1] sysf

[PATCH 010/100] HID: multitouch: validate indexes details

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Benjamin Tissoires commit 8821f5dc187bdf16cfb32ef5aa8c3035273fa79a upstream. When working on report indexes, always validate that they are in bounds. Without this, a HID device could rep

[PATCH 008/100] HID: validate feature and input report details

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Benjamin Tissoires commit cc6b54aa54bf40b762cab45a9fc8aa81653146eb upstream. When dealing with usage_index, be sure to properly use unsigned instead of int to avoid overflows. When work

[PATCH 003/100] sched/fair: Fix small race where child->se.parent,cfs_rq might point to invalid ones

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Daisuke Nishimura commit 6c9a27f5da9609fca46cb2b183724531b48f71ad upstream. There is a small race between copy_process() and cgroup_attach_task() where child->se.parent,cfs_rq points to

[PATCH 011/100] drm/radeon: fix panel scaling with eDP and LVDS bridges

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 855f5f1d882a34e4e9dd27b299737cd3508a5624 upstream. We were using the wrong set_properly callback so we always ended up with Full scaling even if something else (Cente

[PATCH 012/100] net: usb: cdc_ether: Use wwan interface for Telit modules

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Fabio Porcedda commit 0092820407901a0b2c4e343e85f96bb7abfcded1 upstream. Signed-off-by: Fabio Porcedda Acked-by: Oliver Neukum Signed-off-by: David S. Miller Signed-off-by: Luis Henri

[PATCH 014/100] drm/ttm: fix the tt_populated check in ttm_tt_destroy()

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Skeggs commit 182b17c8dc4e83aab000ce86587b6810e515da87 upstream. After a vmalloc failure in ttm_dma_tt_alloc_page_directory(), ttm_dma_tt_init() will call ttm_tt_destroy() to cleanup

[PATCH 017/100] perf: Fix perf_cgroup_switch for sw-events

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit 95cf59ea72331d0093010543b8951bb43f262cac upstream. Jiri reported that he could trigger the WARN_ON_ONCE() in perf_cgroup_switch() using sw-events. This is because s

[PATCH 020/100] isofs: Refuse RW mount of the filesystem instead of making it RO

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Jan Kara commit 17b7f7cf58926844e1dd40f5eb5348d481deca6a upstream. Refuse RW mount of isofs filesystem. So far we just silently changed it to RO mount but when the media is writeable, bl

[PATCH 015/100] sfc: Fix efx_rx_buf_offset() for recycled pages

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings This bug fix is only for stable branches older than 3.10. The bug was fixed upstream by commit 2768935a4660 ('sfc: reuse pages to avoid DMA mapping/unmapping costs'), but t

[PATCH 023/100] Revert "sctp: fix call to SCTP_CMD_PROCESS_SACK in sctp_cmd_interpreter()"

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Luis Henriques This reverts commit 01ee5a524eaa7928e8ee1ae4a0051084cfcaf904 which is commit f6e80abeab928b7c47cc1fbf53df13b4398a2bec upstream. Michal Kubecek reported: Please revert bac

[PATCH 022/100] HID: usbhid: quirk for N-Trig DuoSense Touch Screen

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Vasily Titskiy commit 9e0bf92c223dabe0789714f8f85f6e26f8f9cda4 upstream. The DuoSense touchscreen device causes a 10 second timeout. This fix removes the delay. Signed-off-by: Vasily Ti

[PATCH 016/100] perf: Clarify perf_cpu_context::active_pmu usage by renaming it to ::unique_pmu

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit 3f1f33206c16c7b3839d71372bc2ac3f305aa802 upstream. Stephane thought the perf_cpu_context::active_pmu name confusing and suggested using 'unique_pmu' instead. This

[PATCH 028/100] cciss: fix info leak in cciss_ioctl32_passthru()

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 58f09e00ae095e46ef9edfcf3a5fd9ccdfad065e upstream. The arg64 struct has a hole after ->buf_size which isn't cleared. Or if any of the calls to copy_from_user() fail

Re: [PATCH] ACPI/Power: Check physical device's runtime pm status before requesting to resume it

2013-10-11 Thread Rafael J. Wysocki
On Friday, October 11, 2013 04:16:25 PM tianyu@intel.com wrote: > From: Lan Tianyu > > Currently, when one power resource is turned on, devices owning it > will be requested to resume regardless of their runtime pm status. > ACPI power resource maybe turn on in some devices' runtime pm > resu

[PATCH 026/100] tg3: Don't turn off led on 5719 serdes port 0

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Nithin Sujir commit 989038e217e94161862a959e82f9a1ecf8dda152 upstream. Turning off led on port 0 of the 5719 serdes causes all other ports to lose power and stop functioning. Add tg3_phy

[PATCH 027/100] tg3: Expand led off fix to include 5720

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Nithin Sujir commit 300cf9b93f74c3d969a0ad50bdac65416107c44c upstream. Commit 989038e217e94161862a959e82f9a1ecf8dda152 ("tg3: Don't turn off led on 5719 serdes port 0") added code to ski

[PATCH 024/100] workqueue: cond_resched() after processing each work item

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Tejun Heo commit b22ce2785d97423846206cceec4efee0c4afd980 upstream. If !PREEMPT, a kworker running work items back to back can hog CPU. This becomes dangerous when a self-requeueing work

[PATCH 021/100] HID: Fix Speedlink VAD Cezanne support for some devices

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Stefan Kriwanek commit 06bb5219118fb098f4b0c7dcb484b28a52bf1c14 upstream. Some devices of the "Speedlink VAD Cezanne" model need more aggressive fixing than already done. I made sure th

[PATCH 030/100] mm, memcg: give exiting processes access to memory reserves

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: David Rientjes commit 465adcf1ea7b2e49b2e0899366624f5532b64012 upstream. A memcg may livelock when oom if the process that grabs the hierarchy's oom lock is never the first process with

[PATCH 029/100] cpqarray: fix info leak in ida_locked_ioctl()

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 627aad1c01da6f881e7f98d71fd928ca0c316b1a upstream. The pciinfo struct has a two byte hole after ->dev_fn so stack information could be leaked to the user. This was

Re: kexec: Clearing registers just before jumping into purgatory

2013-10-11 Thread Daniel Kiper
On Fri, Oct 11, 2013 at 03:08:43AM -0700, ebied...@xmission.com wrote: > Daniel Kiper writes: > > > Hi, > > > > Could you explain why do you clear all registers just before jumping > > into purgatory (please look into arch/x86/kernel/relocate_kernel_64.S > > for more details)? There is no any sing

[PATCH 032/100] xhci: Fix race between ep halt and URB cancellation

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Florian Wolter commit 526867c3ca0caa2e3e846cb993b0f961c33c2abb upstream. The halted state of a endpoint cannot be cleared over CLEAR_HALT from a user process, because the stopped_td vari

[PATCH 034/100] serial: pch_uart: fix tty-kref leak in dma-rx path

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 19b85cfb190eb9980eaf416bff96aef4159a430e upstream. Fix tty_kref leak when tty_buffer_request room fails in dma-rx path. Note that the tty ref isn't really needed any

Re: [PATCH 092/100] xen/hvc: allow xenboot console to be used again

2013-10-11 Thread Luis Henriques
David Vrabel writes: > On 11/10/13 11:42, Luis Henriques wrote: >> 3.5.7.23 -stable review patch. If anyone has any objections, please let me >> know. > > It's harmless to backport this, but it is only needed in 3.10 and later > (unless you've backported d0380e6c). Ups, you're right. I'll dro

Re: [PATCH] gpio/lynxpoint: check if the interrupt is enabled in IRQ handler

2013-10-11 Thread Mika Westerberg
On Fri, Oct 11, 2013 at 12:57:37PM +0200, Linus Walleij wrote: > On Tue, Oct 1, 2013 at 4:35 PM, Mika Westerberg > wrote: > > > Checking LP_INT_STAT is not enough in the interrupt handler because its > > contents get updated regardless of whether the pin has interrupt enabled or > > not. This cau

Re: [PATCH] omapdss: Add new panel driver for Topolly td028ttec1 LCD.

2013-10-11 Thread Dr. H. Nikolaus Schaller
Hi Tomi, Am 11.10.2013 um 12:09 schrieb Tomi Valkeinen: > On 11/10/13 12:50, Dr. H. Nikolaus Schaller wrote: > >> Hm. Is this a SPI or does it just look like one? Or is it some - otherwise >> unknown - "3 wire serial interface". Or is it a "3(+1) GPIO slave device"? >> I am still not sure about

[PATCH 037/100] dm snapshot: workaround for a false positive lockdep warning

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka commit 5ea330a75bd86b2b2a01d7b85c516983238306fb upstream. The kernel reports a lockdep warning if a snapshot is invalidated because it runs out of space. The lockdep war

[PATCH 036/100] ALSA: compress: Fix compress device unregister.

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Liam Girdwood commit 4028b6c4c03f213260e9290ff3a6b5439aad07ce upstream. snd_unregister_device() should return the device type and not stream direction. Signed-off-by: Liam Girdwood Ack

[PATCH 033/100] serial: pch_uart: fix tty-kref leak in rx-error path

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit fc0919c68cb2f75bb1af759315f9d7e2a9443c28 upstream. Fix tty-kref leak introduced by commit 384e301e ("pch_uart: fix a deadlock when pch_uart as console") which never p

[PATCH 031/100] video: mxsfb: Add missing break

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Marek Vasut commit 6d0bb818041a02be682abadb3ba35ff608f7d60a upstream. Add missing break into the restore function. Signed-off-by: Marek Vasut Cc: Fabio Estevam Cc: Shawn Guo Cc: Tomi

[PATCH 044/100] staging: vt6656: [BUG] main_usb.c oops on device_close move flag earlier.

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Malcolm Priestley commit e3eb270fab7734427dd8171a93e4946fe28674bc upstream. The vt6656 is prone to resetting on the usb bus. It seems there is a race condition and wpa supplicant is try

[PATCH 040/100] drm/radeon: disable tests/benchmarks if accel is disabled

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 4a1132a023eb48cf10522d84c5908d43b612c041 upstream. The tests are only usable if the acceleration engines have been successfully initialized. Based on an initial patc

Re: BUG report about ipt_do_table( )

2013-10-11 Thread Will Deacon
On Fri, Oct 11, 2013 at 02:50:24AM +0100, Wang, Yalin wrote: > Hi Will, Hello again, > Maybe I know your meaning , > If it use spinlock to protected the shared data, > The bug will not happen, because spinlock will > Use DSB( ) to sync . Actually, the dsb is for something else (the sev). It i

[PATCH 038/100] dm-snapshot: fix performance degradation due to small hash size

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka commit 60e356f381954d79088d0455e357db48cfdd6857 upstream. LVM2, since version 2.02.96, creates origin with zero size, then loads the snapshot driver and then loads the or

Re: [BUG] WARN_ON(!context) in drivers/pci/hotplug/acpiphp_glue.c

2013-10-11 Thread Rafael J. Wysocki
On Thursday, October 10, 2013 06:42:56 PM Linus Torvalds wrote: > On Thu, Oct 10, 2013 at 6:45 PM, Rafael J. Wysocki wrote: > > > > /* Register slots for ejectable funtions only. */ > > - if (acpi_pci_check_ejectable(pbus, handle) || > > is_dock_device(handle)) { > > + if ((a

[PATCH 042/100] xhci: Ensure a command structure points to the correct trb on the command ring

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Mathias Nyman commit ec7e43e2d98173483866fe2e4e690143626b659c upstream. If a command on the command ring needs to be cancelled before it is handled it can be turned to a no-op operation

[PATCH] genirq: Set the irq thread policy without checking CAP_SYS_NICE

2013-10-11 Thread Sebastian Andrzej Siewior
From: Thomas Pfaff In commit ee23871389 ("genirq: Set irq thread to RT priority on creation") we moved the assigment of the thread's priority from the thread's function into __setup_irq(). That function may run in user context for instance if the user opens an UART node and then driver calls requ

[PATCH 043/100] drm/i915/dp: increase i2c-over-aux retry interval on AUX DEFER

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Jani Nikula commit 8d16f258217f2f583af1fd57c5144aa4bbe73e48 upstream. There is no clear cut rules or specs for the retry interval, as there are many factors that affect overall response

[PATCH 046/100] usb/core/devio.c: Don't reject control message to endpoint with wrong direction bit

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Kurt Garloff commit 831abf76643555a99b80a3b54adfa7e4fa0a3259 upstream. Trying to read data from the Pegasus Technologies NoteTaker (0e20:0101) [1] with the Windows App (EasyNote) works n

Re: [PATCH v2 1/5] gpiolib / ACPI: move acpi_gpiochip_free_interrupts next to the request function

2013-10-11 Thread Linus Walleij
On Thu, Oct 10, 2013 at 10:01 AM, Mika Westerberg wrote: > It makes more sense to have these functions close to each other. No > functional changes. > > Signed-off-by: Mika Westerberg > Acked-by: Rafael J. Wysocki So I've applied this first patch, and I'm just waiting for Alexandre's ACK on th

[PATCH 047/100] hwmon: (applesmc) Check key count before proceeding

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Henrik Rydberg commit 5f4513864304672e6ea9eac60583eeac32e679f2 upstream. After reports from Chris and Josh Boyer of a rare crash in applesmc, Guenter pointed at the initialization proble

[PATCH 049/100] usb: dwc3: pci: add support for BayTrail

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Heikki Krogerus commit b62cd96de3161dfb125a769030eec35a4cab3d3a upstream. Add PCI id for Intel BayTrail. Signed-off-by: Heikki Krogerus Signed-off-by: Felipe Balbi Signed-off-by: Luis

[PATCH 048/100] USB: Fix breakage in ffs_fs_mount()

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Al Viro commit 2606b28aabd7dea1766c23a105e1124c95409c96 upstream. There's a bunch of failure exits in ffs_fs_mount() with seriously broken recovery logics. Most of that appears

[PATCH 050/100] caif: Add missing braces to multiline if in cfctrl_linkup_request

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Dave Jones commit 0c1db731bfcf3a9fd6c58132134f8b0f423552f0 upstream. The indentation here implies this was meant to be a multi-line if. Introduced several years back in commit c85c2951d

[PATCH 039/100] x86/reboot: Add quirk to make Dell C6100 use reboot=pci automatically

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Masoud Sharbiani commit 4f0acd31c31f03ba42494c8baf6c0465150e2621 upstream. Dell PowerEdge C6100 machines fail to completely reboot about 20% of the time. Signed-off-by: Masoud Sharbiani

[PATCH 045/100] USB: fix PM config symbol in uhci-hcd, ehci-hcd, and xhci-hcd

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Alan Stern commit f875fdbf344b9fde207f66b392c40845dd7e5aa6 upstream. Since uhci-hcd, ehci-hcd, and xhci-hcd support runtime PM, the .pm field in their pci_driver structures should be pro

[PATCH 053/100] resubmit bridge: fix message_age_timer calculation

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Chris Healy commit 9a0620133ccce9dd35c00a96405c8d80938c2cc0 upstream. This changes the message_age_timer calculation to use the BPDU's max age as opposed to the local bridge's max age.

[PATCH 056/100] ip: generate unique IP identificator if local fragmentation is allowed

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Ansis Atteka commit 703133de331a7a7df47f31fb9de51dc6f68a9de8 upstream. If local fragmentation is allowed, then ip_select_ident() and ip_select_ident_more() need to generate unique IDs to

[PATCH 057/100] netpoll: fix NULL pointer dereference in netpoll_cleanup

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Nikolay Aleksandrov commit d0fe8c888b1fd1a2f84b9962cabcb98a70988aec upstream. I've been hitting a NULL ptr deref while using netconsole because the np->dev check and the pointer manipula

Re: [PATCH] gpio/lynxpoint: check if the interrupt is enabled in IRQ handler

2013-10-11 Thread Linus Walleij
On Tue, Oct 1, 2013 at 4:35 PM, Mika Westerberg wrote: > Checking LP_INT_STAT is not enough in the interrupt handler because its > contents get updated regardless of whether the pin has interrupt enabled or > not. This causes the driver to loop forever for GPIOs that are pulled up. > > Fix this b

[PATCH 051/100] net: sctp: fix smatch warning in sctp_send_asconf_del_ip

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann commit 88362ad8f9a6cea787420b57cc27ccacef000dbe upstream. This was originally reported in [1] and posted by Neil Horman [2], he said: Fix up a missed null pointer chec

[PATCH 059/100] via-rhine: fix VLAN priority field (PCP, IEEE 802.1p)

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Roger Luethi commit 207070f5221e2a901d56a49df9cde47d9b716cd7 upstream. Outgoing packets sent by via-rhine have their VLAN PCP field off by one (when hardware acceleration is enabled). Th

[PATCH 058/100] ipv6: udp packets following an UFO enqueued packet need also be handled by UFO

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Hannes Frederic Sowa commit 2811ebac2521ceac84f2bdae402455baa6a7fb47 upstream. In the following scenario the socket is corked: If the first UDP packet is larger then the mtu we try to ap

[PATCH 062/100] ipv4 igmp: use in_dev_put in timer handlers instead of __in_dev_put

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Salam Noureddine commit e2401654dd0f5f3fb7a8d80dad9554d73d7ca394 upstream. It is possible for the timer handlers to run after the call to ip_mc_down so use in_dev_put instead of __in_dev

[PATCH 060/100] net: flow_dissector: fix thoff for IPPROTO_AH

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit b86783587b3d1d552326d955acee37eac48800f1 upstream. In commit 8ed781668dd49 ("flow_keys: include thoff into flow_keys for later usage"), we missed that existing code w

[PATCH 061/100] bonding: Fix broken promiscuity reference counting issue

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Neil Horman commit 5a0068deb611109c5ba77358be533f763f395ee4 upstream. Recently grabbed this report: https://bugzilla.redhat.com/show_bug.cgi?id=1005567 Of an issue in which the bonding

[PATCH 052/100] net: sctp: fix ipv6 ipsec encryption bug in sctp_v6_xmit

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann commit 95ee62083cb6453e056562d91f597552021e6ae7 upstream. Alan Chester reported an issue with IPv6 on SCTP that IPsec traffic is not being encrypted, whereas on IPv4 it i

[PATCH 063/100] ipv6 mcast: use in6_dev_put in timer handlers instead of __in6_dev_put

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Salam Noureddine commit 9260d3e1013701aa814d10c8fc6a9f92bd17d643 upstream. It is possible for the timer handlers to run after the call to ipv6_mc_down so use in6_dev_put instead of __in6

[PATCH 065/100] ll_temac: Reset dma descriptors indexes on ndo_open

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Ricardo Ribalda commit 7167cf0e8cd10287b7912b9ffcccd9616f382922 upstream. The dma descriptors indexes are only initialized on the probe function. If a packet is on the buffer when temac

[PATCH 066/100] gianfar: Change default HW Tx queue scheduling mode

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Claudiu Manoil commit b98b8babd6e3370fadb7c6eaacb00eb2f6344a6c upstream. This is primarily to address transmission timeout occurrences, when multiple H/W Tx queues are being used concurr

[PATCH 064/100] dm9601: fix IFF_ALLMULTI handling

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Peter Korsgaard commit bf0ea6380724beb64f27a722dfc4b0edabff816e upstream. Pass-all-multicast is controlled by bit 3 in RX control, not bit 2 (pass undersized frames). Reported-by: Josep

[PATCH 055/100] ip: use ip_hdr() in __ip_make_skb() to retrieve IP header

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Ansis Atteka commit 749154aa56b57652a282cbde57a57abc278d1205 upstream. skb->data already points to IP header, but for the sake of consistency we can also use ip_hdr() to retrieve it. Si

[PATCH 071/100] sparc64: Fix ITLB handler of null page

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Kirill Tkhai commit 1c2696cdaad84580545a2e9c0879ff597880b1a9 upstream. 1)Use kvmap_itlb_longpath instead of kvmap_dtlb_longpath. 2)Handle page #0 only, don't handle page #1: bleu -> blu

[PATCH 069/100] sparc64: Fix not SRA'ed %o5 in 32-bit traced syscall

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Kirill Tkhai commit ab2abda6377723e0d5fbbfe5f5aa16a5523344d1 upstream. (From v1 to v2: changed comment) On the way linux_sparc_syscall32->linux_syscall_trace32->goto 2f, register %o5 do

[PATCH 070/100] esp_scsi: Fix tag state corruption when autosensing.

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" commit 21af8107f27878813d0364733c0b08813c2c192a upstream. Meelis Roos reports a crash in esp_free_lun_tag() in the presense of a disk which has died. The issue is that

Re: [PATCH 092/100] xen/hvc: allow xenboot console to be used again

2013-10-11 Thread David Vrabel
On 11/10/13 11:42, Luis Henriques wrote: > 3.5.7.23 -stable review patch. If anyone has any objections, please let me > know. It's harmless to backport this, but it is only needed in 3.10 and later (unless you've backported d0380e6c). > From: David Vrabel > > commit a9fbf4d591da6cd1d3eaab826c

[PATCH 072/100] sparc64: Remove RWSEM export leftovers

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Kirill Tkhai commit 61d9b9355b0d427bd1e732bd54628ff9103e496f upstream. The functions __down_read __down_read_trylock

Re: [PATCH 1/5] gpiolib / ACPI: move acpi_gpiochip_free_interrupts next to the request function

2013-10-11 Thread Linus Walleij
On Tue, Oct 1, 2013 at 4:58 PM, Mika Westerberg wrote: > It makes more sense to have these functions close to each other. No > functional changes. > > Signed-off-by: Mika Westerberg Patch applied. Yours, Linus Walleij -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" i

[PATCH 078/100] Bluetooth: Fix encryption key size for peripheral role

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Andre Guedes commit 89cbb4da0abee2f39d75f67f9fd57f7410c8b65c upstream. This patch fixes the connection encryption key size information when the host is playing the peripheral role. We sh

[PATCH 075/100] ASoC: 88pm860x: array overflow in snd_soc_put_volsw_2r_st()

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit d967967e8d1116fb38bad25e58714b503cca upstream. This is called from snd_ctl_elem_write() with user supplied data so we need to add some bounds checking. Signed-o

[PATCH 073/100] sparc64: Fix off by one in trampoline TLB mapping installation loop.

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" commit 63d499662aeec1864ec36d042aca8184ea6a938e upstream. Reported-by: Kirill Tkhai Signed-off-by: David S. Miller Signed-off-by: Luis Henriques --- arch/sparc/kern

[PATCH 080/100] rtlwifi: Align private space in rtl_priv struct

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Larry Finger commit 60ce314d1750fef843e9db70050e09e49f838b69 upstream. The private array at the end of the rtl_priv struct is not aligned. On ARM architecture, this causes an alignment t

[PATCH 076/100] Bluetooth: Add a new PID/VID 0cf3/e005 for AR3012.

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Peng Chen commit 0a3658cccdf5326ea508efeb1879b0e2508bb0c3 upstream. usb device info: T: Bus=06 Lev=01 Prnt=01 Port=01 Cnt=01 Dev#= 15 Spd=12 MxCh= 0 D: Ver= 1.10 Cls=e0(wlcon) Sub=0

[PATCH 079/100] Bluetooth: Add support for BCM20702A0 [0b05, 17cb]

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Raphael Kubo da Costa commit 38a172bef8c93ecbfd69715fd88396988e4073fd upstream. Yet another vendor specific ID for this chipset; this one for the ASUS USB-BT400 Bluetooth 4.0 adapter. T

[PATCH 077/100] Bluetooth: Fix security level for peripheral role

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Andre Guedes commit f8776218e8546397be64ad2bc0ebf4748522d6e3 upstream. While playing the peripheral role, the host gets a LE Long Term Key Request Event from the controller when a connec

[PATCH 085/100] ib_srpt: Destroy cm_id before destroying QP.

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Nicholas Bellinger commit 0b41d6ca616ddeb3b6c0a80e8770b6f53cd42806 upstream. This patch fixes a bug where ib_destroy_cm_id() was incorrectly being called after srpt_destroy_ch_ib() had d

[PATCH 082/100] mwifiex: fix hang issue for USB chipsets

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Amitkumar Karwar commit bd1c6142edce787b8ac1be15635f845aa9905333 upstream. Bug 60815 - Interface hangs in mwifiex_usb https://bugzilla.kernel.org/show_bug.cgi?id=60815 We have 4 bytes o

[PATCH 083/100] mwifiex: fix NULL pointer dereference in usb suspend handler

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Bing Zhao commit 346ece0b7ba2730b4d633b9e371fe55488803102 upstream. Bug 60815 - Interface hangs in mwifiex_usb https://bugzilla.kernel.org/show_bug.cgi?id=60815 [ 2.883807] BUG: unable

[PATCH 088/100] powerpc/sysfs: Disable writing to PURR in guest mode

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Madhavan Srinivasan commit d1211af3049f4c9c1d8d4eb8f8098cc4f4f0d0c7 upstream. arch/powerpc/kernel/sysfs.c exports PURR with write permission. This may be valid for kernel in phyp mode. B

[PATCH 084/100] USB: serial: option: Ignore card reader interface on Huawei E1750

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: =?UTF-8?q?Michal=20Mal=C3=BD?= commit eb2addd4044b4b2ce77693bde5bc810536dd96ee upstream. Hi, my Huawei 3G modem has an embedded Smart Card reader which causes trouble when the modem is

[PATCH 089/100] powerpc/iommu: Use GFP_KERNEL instead of GFP_ATOMIC in iommu_init_table()

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Nishanth Aravamudan commit 1cf389df090194a0976dc867b7fffe99d9d490cb upstream. Under heavy (DLPAR?) stress, we tripped this panic() in arch/powerpc/kernel/iommu.c::iommu_init_table():

[PATCH] USB: gadget: s3c-hsotg: remove unused label

2013-10-11 Thread Robert Baldyga
This patch removes unused label. Signed-off-by: Robert Baldyga Signed-off-by: Kyungmin Park --- drivers/usb/gadget/s3c-hsotg.c |1 - 1 file changed, 1 deletion(-) diff --git a/drivers/usb/gadget/s3c-hsotg.c b/drivers/usb/gadget/s3c-hsotg.c index a955e6e..0646587 100644 --- a/drivers/usb/ga

[PATCH 090/100] powerpc/vio: Fix modalias_show return values

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Prarit Bhargava commit e82b89a6f19bae73fb064d1b3dd91fcefbb478f4 upstream. modalias_show() should return an empty string on error, not -ENODEV. This causes the following false and annoyi

[PATCH 091/100] ib_srpt: always set response for task management

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Jack Wang commit c807f64340932e19f0d2ac9b30c8381e1f60663a upstream. The SRP specification requires: "Response data shall be provided in any SRP_RSP response that is sent in respons

[PATCH 086/100] powerpc: Fix parameter clobber in csum_partial_copy_generic()

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: "Paul E. McKenney" commit d9813c3681a36774b254c0cdc9cce53c9e22c756 upstream. The csum_partial_copy_generic() uses register r7 to adjust the remaining bytes to process. Unfortunately, r7

[PATCH 087/100] powerpc: Restore registers on error exit from csum_partial_copy_generic()

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: "Paul E. McKenney" commit 8f21bd0090052e740944f9397e2be5ac7957ded7 upstream. The csum_partial_copy_generic() function saves the PowerPC non-volatile r14, r15, and r16 registers for the m

Re: [PATCH] regulator: dts: Fix bindings description of regulator-boot-on

2013-10-11 Thread Nishanth Menon
On 10/11/2013 05:33 AM, Rajendra Nayak wrote: > On Friday 11 October 2013 03:56 PM, Nishanth Menon wrote: >> Since regulator-boot-on property maps back to constraints->boot_on, >> current description of 'regulator-boot-on' property conflicts with >> description of 'boot-on' in include/linux/regulat

[PATCH 093/100] Smack: Fix the bug smackcipso can't set CIPSO correctly

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: "Passion,Zhao" commit 0fcfee61d63b82c1eefb5b1a914240480f17d63f upstream. Bug report: https://tizendev.org/bugs/browse/TDIS-3891 The reason is userspace libsmack only use "smackfs/cipso2

[PATCH 094/100] staging: comedi: ni_65xx: (bug fix) confine insn_bits to one subdevice

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Ian Abbott commit 677a31565692d596ef42ea589b53ba289abf4713 upstream. The `insn_bits` handler `ni_65xx_dio_insn_bits()` has a `for` loop that currently writes (optionally) and reads back

[PATCH 096/100] ext4: avoid hang when mounting non-journal filesystems with orphan list

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit 0e9a9a1ad619e7e987815d20262d36a2f95717ca upstream. When trying to mount a file system which does not contain a journal, but which does have a orphan list containing

[PATCH 092/100] xen/hvc: allow xenboot console to be used again

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: David Vrabel commit a9fbf4d591da6cd1d3eaab826c7c15f77fc8f6a3 upstream. Commit d0380e6c3c0f6edb986d8798a23acfaf33d5df23 (early_printk: consolidate random copies of identical code) added i

[PATCH 099/100] dma: fix comments

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Masanari Iida commit d73111c6d43f08d697a3d986fe3bd8ca796a2096 upstream. Correct spelling typo in drivers/dma. Signed-off-by: Masanari Iida Signed-off-by: Jiri Kosina [ luis: backporte

[PATCH 098/100] dmaengine: imx-dma: fix lockdep issue between irqhandler and tasklet

2013-10-11 Thread Luis Henriques
3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Michael Grzeschik commit 5a276fa6bdf82fd442046969603968c83626ce0b upstream. The tasklet and irqhandler are using spin_lock while other routines are using spin_lock_irqsave/restore. This

Re: [PATCH 3/3] arm64: include: asm: atomic.h: use 'unsigned int' and 'atomic_t' instead of 'unsigned long' for atomic_clear_mask()

2013-10-11 Thread Will Deacon
On Fri, Oct 11, 2013 at 02:18:26AM +0100, Chen Gang wrote: > On 10/10/2013 10:23 PM, Will Deacon wrote: > > On Thu, Oct 10, 2013 at 12:03:52PM +0100, Chen Gang wrote: > >> BTW: do arm64 need atomic_clear_mask()? > > > > No. Neither ARM nor arm64 need this function. > > OK, thank you for your conf

<    4   5   6   7   8   9   10   11   >