[PATCH 083/100] mwifiex: fix NULL pointer dereference in usb suspend handler

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Bing Zhao bz...@marvell.com commit 346ece0b7ba2730b4d633b9e371fe55488803102 upstream. Bug 60815 - Interface hangs in mwifiex_usb https://bugzilla.kernel.org/show_bug.cgi?id=60815 [

[PATCH 088/100] powerpc/sysfs: Disable writing to PURR in guest mode

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Madhavan Srinivasan ma...@linux.vnet.ibm.com commit d1211af3049f4c9c1d8d4eb8f8098cc4f4f0d0c7 upstream. arch/powerpc/kernel/sysfs.c exports PURR with write permission. This may be valid

[PATCH 084/100] USB: serial: option: Ignore card reader interface on Huawei E1750

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: =?UTF-8?q?Michal=20Mal=C3=BD?= madcatxs...@prifuk.cz commit eb2addd4044b4b2ce77693bde5bc810536dd96ee upstream. Hi, my Huawei 3G modem has an embedded Smart Card reader which causes

[PATCH 089/100] powerpc/iommu: Use GFP_KERNEL instead of GFP_ATOMIC in iommu_init_table()

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Nishanth Aravamudan n...@linux.vnet.ibm.com commit 1cf389df090194a0976dc867b7fffe99d9d490cb upstream. Under heavy (DLPAR?) stress, we tripped this panic() in

[PATCH 082/100] mwifiex: fix hang issue for USB chipsets

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Amitkumar Karwar akar...@marvell.com commit bd1c6142edce787b8ac1be15635f845aa9905333 upstream. Bug 60815 - Interface hangs in mwifiex_usb

[PATCH 085/100] ib_srpt: Destroy cm_id before destroying QP.

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Nicholas Bellinger n...@linux-iscsi.org commit 0b41d6ca616ddeb3b6c0a80e8770b6f53cd42806 upstream. This patch fixes a bug where ib_destroy_cm_id() was incorrectly being called after

[PATCH 079/100] Bluetooth: Add support for BCM20702A0 [0b05, 17cb]

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Raphael Kubo da Costa rak...@freebsd.org commit 38a172bef8c93ecbfd69715fd88396988e4073fd upstream. Yet another vendor specific ID for this chipset; this one for the ASUS USB-BT400

[PATCH 077/100] Bluetooth: Fix security level for peripheral role

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Andre Guedes andre.gue...@openbossa.org commit f8776218e8546397be64ad2bc0ebf4748522d6e3 upstream. While playing the peripheral role, the host gets a LE Long Term Key Request Event from

[PATCH 076/100] Bluetooth: Add a new PID/VID 0cf3/e005 for AR3012.

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Peng Chen pengc...@qti.qualcomm.com commit 0a3658cccdf5326ea508efeb1879b0e2508bb0c3 upstream. usb device info: T: Bus=06 Lev=01 Prnt=01 Port=01 Cnt=01 Dev#= 15 Spd=12 MxCh= 0 D:

[PATCH 080/100] rtlwifi: Align private space in rtl_priv struct

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Larry Finger larry.fin...@lwfinger.net commit 60ce314d1750fef843e9db70050e09e49f838b69 upstream. The private array at the end of the rtl_priv struct is not aligned. On ARM architecture,

Re: [PATCH 1/5] gpiolib / ACPI: move acpi_gpiochip_free_interrupts next to the request function

On Tue, Oct 1, 2013 at 4:58 PM, Mika Westerberg mika.westerb...@linux.intel.com wrote: It makes more sense to have these functions close to each other. No functional changes. Signed-off-by: Mika Westerberg mika.westerb...@linux.intel.com Patch applied. Yours, Linus Walleij -- To unsubscribe

[PATCH 078/100] Bluetooth: Fix encryption key size for peripheral role

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Andre Guedes andre.gue...@openbossa.org commit 89cbb4da0abee2f39d75f67f9fd57f7410c8b65c upstream. This patch fixes the connection encryption key size information when the host is playing

[PATCH 075/100] ASoC: 88pm860x: array overflow in snd_soc_put_volsw_2r_st()

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter dan.carpen...@oracle.com commit d967967e8d1116fb38bad25e58714b503cca upstream. This is called from snd_ctl_elem_write() with user supplied data so we need to add some

[PATCH 072/100] sparc64: Remove RWSEM export leftovers

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Kirill Tkhai tk...@yandex.ru commit 61d9b9355b0d427bd1e732bd54628ff9103e496f upstream. The functions __down_read __down_read_trylock

[PATCH 073/100] sparc64: Fix off by one in trampoline TLB mapping installation loop.

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: David S. Miller da...@davemloft.net commit 63d499662aeec1864ec36d042aca8184ea6a938e upstream. Reported-by: Kirill Tkhai tk...@yandex.ru Signed-off-by: David S. Miller da...@davemloft.net

[PATCH 070/100] esp_scsi: Fix tag state corruption when autosensing.

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: David S. Miller da...@davemloft.net commit 21af8107f27878813d0364733c0b08813c2c192a upstream. Meelis Roos reports a crash in esp_free_lun_tag() in the presense of a disk which has died.

Re: [PATCH 092/100] xen/hvc: allow xenboot console to be used again

On 11/10/13 11:42, Luis Henriques wrote: 3.5.7.23 -stable review patch. If anyone has any objections, please let me know. It's harmless to backport this, but it is only needed in 3.10 and later (unless you've backported d0380e6c). From: David Vrabel david.vra...@citrix.com commit

[PATCH 071/100] sparc64: Fix ITLB handler of null page

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Kirill Tkhai tk...@yandex.ru commit 1c2696cdaad84580545a2e9c0879ff597880b1a9 upstream. 1)Use kvmap_itlb_longpath instead of kvmap_dtlb_longpath. 2)Handle page #0 only, don't handle page

[PATCH 069/100] sparc64: Fix not SRA'ed %o5 in 32-bit traced syscall

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Kirill Tkhai tk...@yandex.ru commit ab2abda6377723e0d5fbbfe5f5aa16a5523344d1 upstream. (From v1 to v2: changed comment) On the way linux_sparc_syscall32-linux_syscall_trace32-goto 2f,

[PATCH 063/100] ipv6 mcast: use in6_dev_put in timer handlers instead of __in6_dev_put

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Salam Noureddine nouredd...@aristanetworks.com commit 9260d3e1013701aa814d10c8fc6a9f92bd17d643 upstream. It is possible for the timer handlers to run after the call to ipv6_mc_down so

[PATCH 065/100] ll_temac: Reset dma descriptors indexes on ndo_open

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Ricardo Ribalda ricardo.riba...@gmail.com commit 7167cf0e8cd10287b7912b9ffcccd9616f382922 upstream. The dma descriptors indexes are only initialized on the probe function. If a packet

[PATCH 064/100] dm9601: fix IFF_ALLMULTI handling

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Peter Korsgaard pe...@korsgaard.com commit bf0ea6380724beb64f27a722dfc4b0edabff816e upstream. Pass-all-multicast is controlled by bit 3 in RX control, not bit 2 (pass undersized frames).

[PATCH 066/100] gianfar: Change default HW Tx queue scheduling mode

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Claudiu Manoil claudiu.man...@freescale.com commit b98b8babd6e3370fadb7c6eaacb00eb2f6344a6c upstream. This is primarily to address transmission timeout occurrences, when multiple H/W Tx

[PATCH 055/100] ip: use ip_hdr() in __ip_make_skb() to retrieve IP header

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Ansis Atteka aatt...@nicira.com commit 749154aa56b57652a282cbde57a57abc278d1205 upstream. skb-data already points to IP header, but for the sake of consistency we can also use ip_hdr()

[PATCH 052/100] net: sctp: fix ipv6 ipsec encryption bug in sctp_v6_xmit

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann dbork...@redhat.com commit 95ee62083cb6453e056562d91f597552021e6ae7 upstream. Alan Chester reported an issue with IPv6 on SCTP that IPsec traffic is not being encrypted,

[PATCH 062/100] ipv4 igmp: use in_dev_put in timer handlers instead of __in_dev_put

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Salam Noureddine nouredd...@aristanetworks.com commit e2401654dd0f5f3fb7a8d80dad9554d73d7ca394 upstream. It is possible for the timer handlers to run after the call to ip_mc_down so use

[PATCH 060/100] net: flow_dissector: fix thoff for IPPROTO_AH

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet eduma...@google.com commit b86783587b3d1d552326d955acee37eac48800f1 upstream. In commit 8ed781668dd49 (flow_keys: include thoff into flow_keys for later usage), we missed

[PATCH 061/100] bonding: Fix broken promiscuity reference counting issue

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Neil Horman nhor...@tuxdriver.com commit 5a0068deb611109c5ba77358be533f763f395ee4 upstream. Recently grabbed this report: https://bugzilla.redhat.com/show_bug.cgi?id=1005567 Of an issue

[PATCH 051/100] net: sctp: fix smatch warning in sctp_send_asconf_del_ip

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann dbork...@redhat.com commit 88362ad8f9a6cea787420b57cc27ccacef000dbe upstream. This was originally reported in [1] and posted by Neil Horman [2], he said: Fix up a

[PATCH 059/100] via-rhine: fix VLAN priority field (PCP, IEEE 802.1p)

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Roger Luethi r...@hellgate.ch commit 207070f5221e2a901d56a49df9cde47d9b716cd7 upstream. Outgoing packets sent by via-rhine have their VLAN PCP field off by one (when hardware

[PATCH 058/100] ipv6: udp packets following an UFO enqueued packet need also be handled by UFO

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Hannes Frederic Sowa han...@stressinduktion.org commit 2811ebac2521ceac84f2bdae402455baa6a7fb47 upstream. In the following scenario the socket is corked: If the first UDP packet is

[PATCH 057/100] netpoll: fix NULL pointer dereference in netpoll_cleanup

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Nikolay Aleksandrov niko...@redhat.com commit d0fe8c888b1fd1a2f84b9962cabcb98a70988aec upstream. I've been hitting a NULL ptr deref while using netconsole because the np-dev check and

Re: [PATCH] gpio/lynxpoint: check if the interrupt is enabled in IRQ handler

On Tue, Oct 1, 2013 at 4:35 PM, Mika Westerberg mika.westerb...@linux.intel.com wrote: Checking LP_INT_STAT is not enough in the interrupt handler because its contents get updated regardless of whether the pin has interrupt enabled or not. This causes the driver to loop forever for GPIOs that

[PATCH 056/100] ip: generate unique IP identificator if local fragmentation is allowed

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Ansis Atteka aatt...@nicira.com commit 703133de331a7a7df47f31fb9de51dc6f68a9de8 upstream. If local fragmentation is allowed, then ip_select_ident() and ip_select_ident_more() need to

[PATCH 045/100] USB: fix PM config symbol in uhci-hcd, ehci-hcd, and xhci-hcd

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Alan Stern st...@rowland.harvard.edu commit f875fdbf344b9fde207f66b392c40845dd7e5aa6 upstream. Since uhci-hcd, ehci-hcd, and xhci-hcd support runtime PM, the .pm field in their

[PATCH 053/100] resubmit bridge: fix message_age_timer calculation

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Chris Healy cphe...@gmail.com commit 9a0620133ccce9dd35c00a96405c8d80938c2cc0 upstream. This changes the message_age_timer calculation to use the BPDU's max age as opposed to the local

[PATCH 050/100] caif: Add missing braces to multiline if in cfctrl_linkup_request

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Dave Jones da...@redhat.com commit 0c1db731bfcf3a9fd6c58132134f8b0f423552f0 upstream. The indentation here implies this was meant to be a multi-line if. Introduced several years back in

[PATCH 039/100] x86/reboot: Add quirk to make Dell C6100 use reboot=pci automatically

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Masoud Sharbiani msharbi...@twitter.com commit 4f0acd31c31f03ba42494c8baf6c0465150e2621 upstream. Dell PowerEdge C6100 machines fail to completely reboot about 20% of the time.

[PATCH 048/100] USB: Fix breakage in ffs_fs_mount()

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Al Viro v...@zeniv.linux.org.uk commit 2606b28aabd7dea1766c23a105e1124c95409c96 upstream. There's a bunch of failure exits in ffs_fs_mount() with seriously broken recovery

[PATCH 049/100] usb: dwc3: pci: add support for BayTrail

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Heikki Krogerus heikki.kroge...@linux.intel.com commit b62cd96de3161dfb125a769030eec35a4cab3d3a upstream. Add PCI id for Intel BayTrail. Signed-off-by: Heikki Krogerus

[PATCH 047/100] hwmon: (applesmc) Check key count before proceeding

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Henrik Rydberg rydb...@euromail.se commit 5f4513864304672e6ea9eac60583eeac32e679f2 upstream. After reports from Chris and Josh Boyer of a rare crash in applesmc, Guenter pointed at the

Re: [PATCH v2 1/5] gpiolib / ACPI: move acpi_gpiochip_free_interrupts next to the request function

On Thu, Oct 10, 2013 at 10:01 AM, Mika Westerberg mika.westerb...@linux.intel.com wrote: It makes more sense to have these functions close to each other. No functional changes. Signed-off-by: Mika Westerberg mika.westerb...@linux.intel.com Acked-by: Rafael J. Wysocki

[PATCH 046/100] usb/core/devio.c: Don't reject control message to endpoint with wrong direction bit

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Kurt Garloff k...@garloff.de commit 831abf76643555a99b80a3b54adfa7e4fa0a3259 upstream. Trying to read data from the Pegasus Technologies NoteTaker (0e20:0101) [1] with the Windows App

[PATCH] genirq: Set the irq thread policy without checking CAP_SYS_NICE

From: Thomas Pfaff tpf...@pcs.com In commit ee23871389 (genirq: Set irq thread to RT priority on creation) we moved the assigment of the thread's priority from the thread's function into __setup_irq(). That function may run in user context for instance if the user opens an UART node and then

[PATCH 043/100] drm/i915/dp: increase i2c-over-aux retry interval on AUX DEFER

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Jani Nikula jani.nik...@intel.com commit 8d16f258217f2f583af1fd57c5144aa4bbe73e48 upstream. There is no clear cut rules or specs for the retry interval, as there are many factors that

[PATCH 038/100] dm-snapshot: fix performance degradation due to small hash size

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka mpato...@redhat.com commit 60e356f381954d79088d0455e357db48cfdd6857 upstream. LVM2, since version 2.02.96, creates origin with zero size, then loads the snapshot driver

Re: [BUG] WARN_ON(!context) in drivers/pci/hotplug/acpiphp_glue.c

On Thursday, October 10, 2013 06:42:56 PM Linus Torvalds wrote: On Thu, Oct 10, 2013 at 6:45 PM, Rafael J. Wysocki r...@rjwysocki.net wrote: /* Register slots for ejectable funtions only. */ - if (acpi_pci_check_ejectable(pbus, handle) || is_dock_device(handle)) { +

[PATCH 040/100] drm/radeon: disable tests/benchmarks if accel is disabled

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher alexander.deuc...@amd.com commit 4a1132a023eb48cf10522d84c5908d43b612c041 upstream. The tests are only usable if the acceleration engines have been successfully initialized.

Re: BUG report about ipt_do_table( )

On Fri, Oct 11, 2013 at 02:50:24AM +0100, Wang, Yalin wrote: Hi Will, Hello again, Maybe I know your meaning , If it use spinlock to protected the shared data, The bug will not happen, because spinlock will Use DSB( ) to sync . Actually, the dsb is for something else (the sev). It is

[PATCH 042/100] xhci: Ensure a command structure points to the correct trb on the command ring

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Mathias Nyman mathias.ny...@linux.intel.com commit ec7e43e2d98173483866fe2e4e690143626b659c upstream. If a command on the command ring needs to be cancelled before it is handled it can

[PATCH 044/100] staging: vt6656: [BUG] main_usb.c oops on device_close move flag earlier.

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Malcolm Priestley tvbox...@gmail.com commit e3eb270fab7734427dd8171a93e4946fe28674bc upstream. The vt6656 is prone to resetting on the usb bus. It seems there is a race condition and

[PATCH 031/100] video: mxsfb: Add missing break

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Marek Vasut ma...@denx.de commit 6d0bb818041a02be682abadb3ba35ff608f7d60a upstream. Add missing break into the restore function. Signed-off-by: Marek Vasut ma...@denx.de Cc: Fabio

Re: [PATCH] omapdss: Add new panel driver for Topolly td028ttec1 LCD.

Hi Tomi, Am 11.10.2013 um 12:09 schrieb Tomi Valkeinen: On 11/10/13 12:50, Dr. H. Nikolaus Schaller wrote: Hm. Is this a SPI or does it just look like one? Or is it some - otherwise unknown - 3 wire serial interface. Or is it a 3(+1) GPIO slave device? I am still not sure about this.

[PATCH 037/100] dm snapshot: workaround for a false positive lockdep warning

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka mpato...@redhat.com commit 5ea330a75bd86b2b2a01d7b85c516983238306fb upstream. The kernel reports a lockdep warning if a snapshot is invalidated because it runs out of

Re: [PATCH] gpio/lynxpoint: check if the interrupt is enabled in IRQ handler

On Fri, Oct 11, 2013 at 12:57:37PM +0200, Linus Walleij wrote: On Tue, Oct 1, 2013 at 4:35 PM, Mika Westerberg mika.westerb...@linux.intel.com wrote: Checking LP_INT_STAT is not enough in the interrupt handler because its contents get updated regardless of whether the pin has interrupt

[PATCH 033/100] serial: pch_uart: fix tty-kref leak in rx-error path

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold jhov...@gmail.com commit fc0919c68cb2f75bb1af759315f9d7e2a9443c28 upstream. Fix tty-kref leak introduced by commit 384e301e (pch_uart: fix a deadlock when pch_uart as

[PATCH 036/100] ALSA: compress: Fix compress device unregister.

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Liam Girdwood liam.r.girdw...@linux.intel.com commit 4028b6c4c03f213260e9290ff3a6b5439aad07ce upstream. snd_unregister_device() should return the device type and not stream direction.

[PATCH 029/100] cpqarray: fix info leak in ida_locked_ioctl()

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter dan.carpen...@oracle.com commit 627aad1c01da6f881e7f98d71fd928ca0c316b1a upstream. The pciinfo struct has a two byte hole after -dev_fn so stack information could be leaked

Re: kexec: Clearing registers just before jumping into purgatory

On Fri, Oct 11, 2013 at 03:08:43AM -0700, ebied...@xmission.com wrote: Daniel Kiper daniel.ki...@oracle.com writes: Hi, Could you explain why do you clear all registers just before jumping into purgatory (please look into arch/x86/kernel/relocate_kernel_64.S for more details)? There is

Re: [PATCH 092/100] xen/hvc: allow xenboot console to be used again

David Vrabel david.vra...@citrix.com writes: On 11/10/13 11:42, Luis Henriques wrote: 3.5.7.23 -stable review patch. If anyone has any objections, please let me know. It's harmless to backport this, but it is only needed in 3.10 and later (unless you've backported d0380e6c). Ups, you're

[PATCH 032/100] xhci: Fix race between ep halt and URB cancellation

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Florian Wolter woll...@web.de commit 526867c3ca0caa2e3e846cb993b0f961c33c2abb upstream. The halted state of a endpoint cannot be cleared over CLEAR_HALT from a user process, because the

[PATCH 034/100] serial: pch_uart: fix tty-kref leak in dma-rx path

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold jhov...@gmail.com commit 19b85cfb190eb9980eaf416bff96aef4159a430e upstream. Fix tty_kref leak when tty_buffer_request room fails in dma-rx path. Note that the tty ref isn't

[PATCH 030/100] mm, memcg: give exiting processes access to memory reserves

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: David Rientjes rient...@google.com commit 465adcf1ea7b2e49b2e0899366624f5532b64012 upstream. A memcg may livelock when oom if the process that grabs the hierarchy's oom lock is never the

[PATCH 024/100] workqueue: cond_resched() after processing each work item

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Tejun Heo t...@kernel.org commit b22ce2785d97423846206cceec4efee0c4afd980 upstream. If !PREEMPT, a kworker running work items back to back can hog CPU. This becomes dangerous when a

[PATCH 021/100] HID: Fix Speedlink VAD Cezanne support for some devices

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Stefan Kriwanek d...@stefankriwanek.de commit 06bb5219118fb098f4b0c7dcb484b28a52bf1c14 upstream. Some devices of the Speedlink VAD Cezanne model need more aggressive fixing than already

[PATCH 028/100] cciss: fix info leak in cciss_ioctl32_passthru()

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter dan.carpen...@oracle.com commit 58f09e00ae095e46ef9edfcf3a5fd9ccdfad065e upstream. The arg64 struct has a hole after -buf_size which isn't cleared. Or if any of the calls

Re: [PATCH] ACPI/Power: Check physical device's runtime pm status before requesting to resume it

On Friday, October 11, 2013 04:16:25 PM tianyu@intel.com wrote: From: Lan Tianyu tianyu@intel.com Currently, when one power resource is turned on, devices owning it will be requested to resume regardless of their runtime pm status. ACPI power resource maybe turn on in some devices'

[PATCH 026/100] tg3: Don't turn off led on 5719 serdes port 0

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Nithin Sujir nsu...@broadcom.com commit 989038e217e94161862a959e82f9a1ecf8dda152 upstream. Turning off led on port 0 of the 5719 serdes causes all other ports to lose power and stop

[PATCH 027/100] tg3: Expand led off fix to include 5720

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Nithin Sujir nsu...@broadcom.com commit 300cf9b93f74c3d969a0ad50bdac65416107c44c upstream. Commit 989038e217e94161862a959e82f9a1ecf8dda152 (tg3: Don't turn off led on 5719 serdes port 0)

[PATCH 022/100] HID: usbhid: quirk for N-Trig DuoSense Touch Screen

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Vasily Titskiy qeh...@gmail.com commit 9e0bf92c223dabe0789714f8f85f6e26f8f9cda4 upstream. The DuoSense touchscreen device causes a 10 second timeout. This fix removes the delay.

[PATCH 016/100] perf: Clarify perf_cpu_context::active_pmu usage by renaming it to ::unique_pmu

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra a.p.zijls...@chello.nl commit 3f1f33206c16c7b3839d71372bc2ac3f305aa802 upstream. Stephane thought the perf_cpu_context::active_pmu name confusing and suggested using

[PATCH 020/100] isofs: Refuse RW mount of the filesystem instead of making it RO

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Jan Kara j...@suse.cz commit 17b7f7cf58926844e1dd40f5eb5348d481deca6a upstream. Refuse RW mount of isofs filesystem. So far we just silently changed it to RO mount but when the media is

[PATCH 015/100] sfc: Fix efx_rx_buf_offset() for recycled pages

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings bhutchi...@solarflare.com This bug fix is only for stable branches older than 3.10. The bug was fixed upstream by commit 2768935a4660 ('sfc: reuse pages to avoid DMA

[PATCH 023/100] Revert sctp: fix call to SCTP_CMD_PROCESS_SACK in sctp_cmd_interpreter()

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Luis Henriques luis.henriq...@canonical.com This reverts commit 01ee5a524eaa7928e8ee1ae4a0051084cfcaf904 which is commit f6e80abeab928b7c47cc1fbf53df13b4398a2bec upstream. Michal Kubecek

[PATCH 014/100] drm/ttm: fix the tt_populated check in ttm_tt_destroy()

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Skeggs bske...@redhat.com commit 182b17c8dc4e83aab000ce86587b6810e515da87 upstream. After a vmalloc failure in ttm_dma_tt_alloc_page_directory(), ttm_dma_tt_init() will call

[PATCH 017/100] perf: Fix perf_cgroup_switch for sw-events

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra a.p.zijls...@chello.nl commit 95cf59ea72331d0093010543b8951bb43f262cac upstream. Jiri reported that he could trigger the WARN_ON_ONCE() in perf_cgroup_switch() using

[PATCH 011/100] drm/radeon: fix panel scaling with eDP and LVDS bridges

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher alexander.deuc...@amd.com commit 855f5f1d882a34e4e9dd27b299737cd3508a5624 upstream. We were using the wrong set_properly callback so we always ended up with Full scaling

[PATCH 012/100] net: usb: cdc_ether: Use wwan interface for Telit modules

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Fabio Porcedda fabio.porce...@gmail.com commit 0092820407901a0b2c4e343e85f96bb7abfcded1 upstream. Signed-off-by: Fabio Porcedda fabio.porce...@gmail.com Acked-by: Oliver Neukum

[PATCH 003/100] sched/fair: Fix small race where child-se.parent,cfs_rq might point to invalid ones

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Daisuke Nishimura nishim...@mxp.nes.nec.co.jp commit 6c9a27f5da9609fca46cb2b183724531b48f71ad upstream. There is a small race between copy_process() and cgroup_attach_task() where

Re: [PATCH v2 0/2] cpufreq: exynos: Fixes for v3.12

On Wednesday, October 09, 2013 02:08:41 PM Lukasz Majewski wrote: Attached commits provide cpufreq regression fixes for Trats and Trats2 Exynos4 boards. Since v3.12 Exynos4 uses common clock framework for clock manipulation. Those patches restore correct output for cpuinfo_cur_freq [1] sysfs

[PATCH 010/100] HID: multitouch: validate indexes details

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Benjamin Tissoires benjamin.tissoi...@redhat.com commit 8821f5dc187bdf16cfb32ef5aa8c3035273fa79a upstream. When working on report indexes, always validate that they are in bounds.

[PATCH 008/100] HID: validate feature and input report details

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Benjamin Tissoires benjamin.tissoi...@redhat.com commit cc6b54aa54bf40b762cab45a9fc8aa81653146eb upstream. When dealing with usage_index, be sure to properly use unsigned instead of int

[PATCH 006/100] HID: LG: validate HID output report details

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Kees Cook keesc...@chromium.org commit 0fb6bd06e06792469acc15bbe427361b56ada528 upstream. A HID device could send a malicious output report that would cause the lg, lg3, and lg4 HID

Re: [PATCH] drivers: misc: add gpio wakeup driver

On Tue, Oct 1, 2013 at 3:55 PM, Daniel Mack zon...@gmail.com wrote: This patch adds a very simple driver that enables GPIO lines as wakeup sources. It only operates on information passed in via DT, and depends on CONFIG_OF CONFIG_PM_SLEEP. It can for example be used to connect wake-on-LAN

[PATCH 009/100] HID: logitech-dj: validate output report details

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Kees Cook keesc...@chromium.org commit 297502abb32e225fb23801fcdb0e4f6f8e17099a upstream. A HID device could send a malicious output report that would cause the logitech-dj HID driver to

[PATCH 004/100] HID: provide a helper for validating hid reports

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Kees Cook keesc...@chromium.org commit 331415ff16a12147d57d5c953f3a961b7ede348b upstream. Many drivers need to validate the characteristics of their HID report during initialization to

[PATCH 007/100] HID: add usage_index in struct hid_usage.

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Benjamin Tissoires benjamin.tissoi...@gmail.com commit f262d1fa2c651a5e2f92b6aee8779597631cd5d4 upstream. Currently, there is no way to know the index of the current field in the

[ 3.5.y.z extended stable ] Linux 3.5.7.23 stable review

This is the start of the review cycle for the Linux 3.5.7.23 stable kernel. This version contains 100 new patches, summarized below. The new patches are posted as replies to this message and also available in this git branch:

[PATCH 001/100] drm/radeon/atom: workaround vbios bug in transmitter table on rs880 (v2)

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher alexander.deuc...@amd.com commit 91f3a6aaf280294b07c05dfe606e6c27b7ba3c72 upstream. The OUTPUT_ENABLE action jumps past the point in the coder where the data_offset is set

[PATCH 005/100] HID: zeroplus: validate output report details

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Kees Cook keesc...@chromium.org commit 78214e81a1bf43740ce89bb5efda78eac2f8ef83 upstream. The zeroplus HID driver was not checking the size of allocated values in fields it used. A HID

[PATCH 002/100] drm/ast: fix the ast open key function

3.5.7.23 -stable review patch. If anyone has any objections, please let me know. -- From: Dave Airlie airl...@redhat.com commit 2e8378136f28bea960cec643d3fa5d843c9049ec upstream. When porting from UMS I mistyped this from the wrong place, AST noticed and pointed it out, so we

RE: BUG report about ipt_do_table( )

Hi Will, Thanks for your clarification . I have merged the patch, And need wait some time to get The test result , You know that this BUG is not easy to reproduce, It's very infrequent. Maybe we need run several times stability test to Make sure the patch works . I will update to you the

[PATCH v4 13/17] clk: at91: add PMC usb clock

This patch adds new at91 usb clock implementation using common clk framework. This clock is used to clock usb ports (ohci, ehci and udc). Signed-off-by: Boris BREZILLON b.brezil...@overkiz.com --- arch/arm/mach-at91/Kconfig | 11 ++ drivers/clk/at91/Makefile |1 +

Re: [PATCH 1/2] i2c-mux-gpio: use gpio_set_value_cansleep()

IN == Ionut Nicu ioan.nicu@nsn.com writes: IN Some gpio chips may have get/set operations that IN can sleep. gpio_set_value() only works for chips IN which do not sleep, for the others we will get a IN kernel warning. Using gpio_set_value_cansleep() IN will work for both chips that do sleep

[PATCH] i2c: s3c2410: dont need CPU_FREQ transitions for exynos series

The exynos5 i2c clock is based on a fixed 66 MHz peripheral clock, and therefore is completely independent of the cpu frequency. Thus, registering for a CPU freq notifier is very wasteful. This patch modifes the code such that, i2c bus registers to cpu_freq_transition only for non Exynos SoCs.

Re: [PATCH 3/3] arm64: include: asm: atomic.h: use 'unsigned int' and 'atomic_t' instead of 'unsigned long' for atomic_clear_mask()

On 10/11/2013 06:44 PM, Will Deacon wrote: On Fri, Oct 11, 2013 at 02:18:26AM +0100, Chen Gang wrote: On 10/10/2013 10:23 PM, Will Deacon wrote: On Thu, Oct 10, 2013 at 12:03:52PM +0100, Chen Gang wrote: BTW: do arm64 need atomic_clear_mask()? No. Neither ARM nor arm64 need this function.

Re: [PATCH] fs: make sure we do not read beyond allocation

On Fri, Oct 11, 2013 at 3:26 PM, Dmitry Vyukov dvyu...@google.com wrote: On Fri, Oct 4, 2013 at 5:53 PM, Richard Weinberger rich...@nod.at wrote: Am 04.10.2013 12:53, schrieb Dmitry Vyukov: On Fri, Oct 4, 2013 at 2:38 PM, Richard Weinberger richard.weinber...@gmail.com wrote: ... [1] yes,

Re: [PATCH] fs: make sure we do not read beyond allocation

On Fri, Oct 4, 2013 at 5:53 PM, Richard Weinberger rich...@nod.at wrote: Am 04.10.2013 12:53, schrieb Dmitry Vyukov: On Fri, Oct 4, 2013 at 2:38 PM, Richard Weinberger richard.weinber...@gmail.com wrote: ... [1] yes, yes, I know - the mere mention of security should've prevented such

Re: [RFC][PATCH] Drop FOLL_GET in GUP when doing async_pf in kvm

On Fri, Oct 11, 2013 at 06:08:16PM +0800, chai wen wrote: On 10/10/2013 11:15 PM, Gleb Natapov wrote: On Thu, Oct 10, 2013 at 09:20:15PM +0800, chai wen wrote: Hi Gleb Thanks for you explanation about async_pf in kvm. Page pinning is not mandatory in kvm async_pf processing and probably

Re: [PATCH] regulator: ti-abb: Fix operator precedence typo

On Fri, Oct 11, 2013 at 05:04:12AM -0500, Nishanth Menon wrote: commit 40b1936e (regulator: Introduce TI Adaptive Body Bias(ABB) on-chip LDO driver) missed a pair of brackets which cause the wrong vset data to be picked up from efuse, resulting in bad VBB voltage values. Applied, thanks.

<    7   8   9   10   11   12   13   14   15   16   >