[PATCH 02/11] devicetree: bindings: Document Qualcomm cpus and enable-method

From: Rohit Vaswani Scorpion and Krait are Qualcomm cpus. These cpus don't use the spin-table enable-method. Instead they rely on mmio register accesses to enable power and clocks to bring CPUs out of reset. Cc: Signed-off-by: Rohit Vaswani [sboyd: Split off into separate patch, renamed method

[PATCH 00/11] CPU enable method based SMP/hotplug + MSM conversion

This is a rework of patches sent a few months back by Rohit[1]. The goal of these patches is to add support for SMP and (basic) hotplug on MSM based SoCs. To get there, we add support for a generic way to add SMP/hotplug support code in the kernel. To show how it's used, we convert the MSM8660 SMP

[PATCH 03/11] devicetree: bindings: Document qcom,kpss-acc

The kpss acc binding describes the clock, reset, and power domain controller for a Krait CPU. Cc: Signed-off-by: Stephen Boyd --- .../devicetree/bindings/arm/msm/qcom,kpss-acc.txt | 21 + 1 file changed, 21 insertions(+) create mode 100644 Documentation/devicetree/binding

[PATCH 3.11 64/66] USB: serial: ti_usb_3410_5052: add Abbott strip port ID to combined table as well.

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Diego Elio Pettenò commit c9d09dc7ad106492c17c587b6eeb99fe3f43e522 upstream. Without this change, the USB cable for Freestyle Option and compatible glucometers will not be detected by the driv

[PATCH 3.11 61/66] wireless: radiotap: fix parsing buffer overrun

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Johannes Berg commit f5563318ff1bde15b10e736e97ffce13be08bc1a upstream. When parsing an invalid radiotap header, the parser can overrun the buffer that is passed in because it doesn't correctl

[PATCH 3.11 63/66] serial: vt8500: add missing braces

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Roel Kluin commit d969de8d83401683420638c8107dcfedb2146f37 upstream. Due to missing braces on an if statement, in presence of a device_node a port was always assigned -1, regardless of any ali

[PATCH 3.11 55/66] mm/zswap: bugfix: memory leak when re-swapon

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Weijie Yang commit aa9bca05a467c61dcea4142b2877d5392de5bdce upstream. zswap_tree is not freed when swapoff, and it got re-kmalloced in swapon, so a memory leak occurs. Free the memory of zswa

[PATCH 3.11 54/66] mm: migration: do not lose soft dirty bit if page is in migration state

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Cyrill Gorcunov commit c3d16e16522fe3fe8759735850a0676da18f4b1d upstream. If page migration is turned on in config and the page is migrating, we may lose the soft dirty bit. If fork and mprot

[PATCH 3.11 62/66] wireless: cw1200: acquire hwbus lock around cw1200_irq_handler() call.

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Solomon Peachy commit 4978705d26149a629b9f50ff221caed6f1ae3048 upstream. This fixes "lost interrupt" problems that occurred on SPI-based systems. cw1200_irq_handler() expects the hwbus to be l

[PATCH 3.11 60/66] w1 - call request_module with w1 master mutex unlocked

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Hans-Frieder Vogt commit bc04d76d6942068f75c10790072280b847ec6f1f upstream. request_module for w1 slave modules needs to be called with the w1 master mutex unlocked. Because w1_attach_slave_de

[PATCH 3.11 50/66] ext[34]: fix double put in tmpfile

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Miklos Szeredi commit 43ae9e3fc70ca0057ae0a24ef5eedff05e3fae06 upstream. d_tmpfile() already swallowed the inode ref. Signed-off-by: Miklos Szeredi Signed-off-by: Al Viro Signed-off-by: Gre

[PATCH 3.11 59/66] writeback: fix negative bdi max pause

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Fengguang Wu commit e3b6c655b91e01a1dade056cfa358581b47a5351 upstream. Toralf runs trinity on UML/i386. After some time it hangs and the last message line is BUG: soft lockup - CPU#0

[PATCH 3.11 39/66] be2net: pass if_id for v1 and V2 versions of TX_CREATE cmd

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Vasundhara Volam [ Upstream commit 0fb88d61bc60779dde88b0fc268da17eb81d0412 ] It is a required field for all TX_CREATE cmd versions > 0. This fixes a driver initialization failure, caused by r

[PATCH 3.11 57/66] ALSA: us122l: Fix pcm_usb_stream mmapping regression

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit ac536a848a1643e4b87e8fbd376a63091afc2ccc upstream. The pcm_usb_stream plugin requires the mremap explicitly for the read buffer, as it expands itself once after reading the

[PATCH 3.11 58/66] ALSA: hda - Fix inverted internal mic not indicated on some machines

3.11-stable review patch. If anyone has any objections, please let me know. -- From: David Henningsson commit ccb041571b73888785ef7828a276e380125891a4 upstream. The create_bind_cap_vol_ctl does not create any control indicating that an inverted dmic is present. Therefore, crea

[PATCH 3.11 56/66] mm: fix BUG in __split_huge_page_pmd

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Hugh Dickins commit 750e8165f5e87b6a142be953640eabb13a9d350a upstream. Occasionally we hit the BUG_ON(pmd_trans_huge(*pmd)) at the end of __split_huge_page_pmd(): seen when doing madvise(,,MAD

[PATCH 3.11 48/66] ARM: 7851/1: check for number of arguments in syscall_get/set_arguments()

3.11-stable review patch. If anyone has any objections, please let me know. -- From: AKASHI Takahiro commit 3c1532df5c1b54b5f6246cdef94eeb73a39fe43a upstream. In ftrace_syscall_enter(), syscall_get_arguments(..., 0, n, ...) if (i == 0) { ...; n--;} memcpy(

[PATCH 3.11 47/66] davinci_emac.c: Fix IFF_ALLMULTI setup

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Mariusz Ceier [ Upstream commit d69e0f7ea95fef8059251325a79c004bac01f018 ] When IFF_ALLMULTI flag is set on interface and IFF_PROMISC isn't, emac_dev_mcast_set should only enable RX of multica

[PATCH 3.11 45/66] netfilter: nf_conntrack: fix rt6i_gateway checks for H.323 helper

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Julian Anastasov [ Upstream commit 56e42441ed54b092d6c7411138ce60d049e7c731 ] Now when rt6_nexthop() can return nexthop address we can use it for proper nexthop comparison of directly connecte

[PATCH 3.11 51/66] gpio/lynxpoint: check if the interrupt is enabled in IRQ handler

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Mika Westerberg commit 03d152d5582abc8a1c19cb107164c3724bbd4be4 upstream. Checking LP_INT_STAT is not enough in the interrupt handler because its contents get updated regardless of whether the

[PATCH 3.11 53/66] i2c: ismt: initialize DMA buffer

3.11-stable review patch. If anyone has any objections, please let me know. -- From: James Ralston commit bf4169100c909667ede6af67668b3ecce6928343 upstream. This patch adds code to initialize the DMA buffer to compensate for possible hardware data corruption. Signed-off-by: J

[PATCH 3.11 31/66] bnx2x: record rx queue for LRO packets

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 60e66fee56b2256dcb1dc2ea1b2ddcb6e273857d ] RPS support is kind of broken on bnx2x, because only non LRO packets get proper rx queue information. This triggers re

[PATCH 3.11 46/66] ipv6: probe routes asynchronous in rt6_probe

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Hannes Frederic Sowa [ Upstream commit c2f17e827b419918c856131f592df9521e1a38e3 ] Routes need to be probed asynchronous otherwise the call stack gets exhausted when the kernel attemps to deliv

[PATCH 3.11 52/66] dm snapshot: fix data corruption

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka commit e9c6a182649f4259db704ae15a91ac820e63b0ca upstream. This patch fixes a particular type of data corruption that has been encountered when loading a snapshot's metadata fro

[PATCH 3.11 44/66] ipv6: fill rt6i_gateway with nexthop address

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Julian Anastasov [ Upstream commit 550bab42f83308c9d6ab04a980cc4333cef1c8fa ] Make sure rt6i_gateway contains nexthop information in all routes returned from lookup or when routes are directly

[PATCH 3.11 49/66] ARM: integrator: deactivate timer0 on the Integrator/CP

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Linus Walleij commit 29114fd7db2fc82a34da8340d29b8fa413e03dca upstream. This fixes a long-standing Integrator/CP regression from commit 870e2928cf3368ca9b06bc925d0027b0a56bcd8e "ARM: integrato

[PATCH 3.11 38/66] wanxl: fix info leak in ioctl

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Salva Peiró [ Upstream commit 2b13d06c9584b4eb773f1e80bbaedab9a1c344e1 ] The wanxl_ioctl() code fails to initialize the two padding bytes of struct sync_serial_settings after the ->loopback me

[PATCH 3.11 43/66] ipv6: always prefer rt6i_gateway if present

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Julian Anastasov [ Upstream commit 96dc809514fb2328605198a0602b67554d8cce7b ] In v3.9 6fd6ce2056de2709 ("ipv6: Do not depend on rt->n in ip6_finish_output2()." changed the behaviour of ip6_fin

[PATCH 3.11 41/66] net: fix cipso packet validation when !NETLABEL

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Seif Mazareeb [ Upstream commit f2e5ddcc0d12f9c4c7b254358ad245c9dddce13b ] When CONFIG_NETLABEL is disabled, the cipso_v4_validate() function could loop forever in the main loop if opt[opt_ite

[PATCH 3.11 42/66] inet: fix possible memory corruption with UDP_CORK and UFO

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Hannes Frederic Sowa [ This is a simplified -stable version of a set of upstream commits. ] This is a replacement patch only for stable which does fix the problems handled by the following two

[PATCH 3.11 36/66] sctp: Use software crc32 checksum when xfrm transform will happen.

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Fan Du [ Upstream commit 27127a82561a2a3ed955ce207048e1b066a80a2a ] igb/ixgbe have hardware sctp checksum support, when this feature is enabled and also IPsec is armed to protect sctp traffic,

[PATCH 3.11 40/66] net: unix: inherit SOCK_PASS{CRED, SEC} flags from socket to fix race

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann [ Upstream commit 90c6bd34f884cd9cee21f1d152baf6c18bcac949 ] In the case of credentials passing in unix stream sockets (dgram sockets seem not affected), we get a rather sparse

[PATCH 3.11 35/66] net: dst: provide accessor function to dst->xfrm

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Vlad Yasevich [ Upstream commit e87b3998d795123b4139bc3f25490dd236f68212 ] dst->xfrm is conditionally defined. Provide accessor funtion that is always available. Signed-off-by: Vlad Yasevich

[PATCH 3.11 29/66] unix_diag: fix info leak

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Mathias Krause [ Upstream commit 6865d1e834be84ddd5808d93d5035b492346c64a ] When filling the netlink message we miss to wipe the pad field, therefore leak one byte of heap memory to userland.

[PATCH 3.11 32/66] virtio-net: dont respond to cpu hotplug notifier if were not ready

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Jason Wang [ Upstream commit 3ab098df35f8b98b6553edc2e40234af512ba877 ] We're trying to re-configure the affinity unconditionally in cpu hotplug callback. This may lead the issue during resumi

[PATCH 3.11 28/66] farsync: fix info leak in ioctl

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Salva Peiró [ Upstream commit 96b340406724d87e4621284ebac5e059d67b2194 ] The fst_get_iface() code fails to initialize the two padding bytes of struct sync_serial_settings after the ->loopback

[PATCH 3.11 34/66] bridge: Correctly clamp MAX forward_delay when enabling STP

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Vlad Yasevich [ Upstream commit 4b6c7879d84ad06a2ac5b964808ed599187a188d ] Commit be4f154d5ef0ca147ab6bcd38857a774133f5450 bridge: Clamp forward_delay when enabling STP had a typo when

[PATCH 3.11 23/66] Revert "bridge: only expire the mdb entry when query is received"

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Linus Lüssing [ Upstream commit 454594f3b93a49ef568cd190c5af31376b105a7b ] While this commit was a good attempt to fix issues occuring when no multicast querier is present, this commit still h

[PATCH 3.11 27/66] netem: free skbs in tree on reset

3.11-stable review patch. If anyone has any objections, please let me know. -- From: stephen hemminger [ Upstream commit ff704050f2fc0f3382b5a70bba56a51a3feca79d ] Netem can leak memory because packets get stored in red-black tree and it is not cleared on reset. Reported by:

[PATCH 3.11 30/66] connector: use nlmsg_len() to check message length

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Mathias Krause [ Upstream commit 162b2bedc084d2d908a04c93383ba02348b648b0 ] The current code tests the length of the whole netlink message to be at least as long to fit a cn_msg. This is wrong

[PATCH 3.11 26/66] netem: update backlog after drop

3.11-stable review patch. If anyone has any objections, please let me know. -- From: stephen hemminger [ Upstream commit 638a52b801e40ed276ceb69b73579ad99365361a ] When packet is dropped from rb-tree netem the backlog statistic should also be updated. Reported-by: Сергеев Сер

[PATCH 3.11 22/66] bridge: update mdb expiration timer upon reports.

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Vlad Yasevich [ Upstream commit f144febd93d5ee534fdf23505ab091b2b9088edc ] commit 9f00b2e7cf241fa389733d41b615efdaa2cb0f5b bridge: only expire the mdb entry when query is received chan

[PATCH 3.11 18/66] xen-netback: Dont destroy the netdev until the vif is shut down

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Paul Durrant [ upstream commit id: 279f438e36c0a70b23b86d2090aeec50155034a9 ] Without this patch, if a frontend cycles through states Closing and Closed (which Windows frontends need to do) th

[PATCH 3.11 16/66] can: dev: fix nlmsg size calculation in can_get_size()

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Marc Kleine-Budde [ Upstream commit fe119a05f8ca481623a8d02efcc984332e612528 ] This patch fixes the calculation of the nlmsg size, by adding the missing nla_total_size(). Signed-off-by: Marc

[PATCH 3.11 21/66] net: vlan: fix nlmsg size calculation in vlan_get_size()

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Marc Kleine-Budde [ Upstream commit c33a39c575068c2ea9bffb22fd6de2df19c74b89 ] This patch fixes the calculation of the nlmsg size, by adding the missing nla_total_size(). Cc: Patrick McHardy

[PATCH 3.11 25/66] l2tp: must disable bh before calling l2tp_xmit_skb()

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 455cc32bf128e114455d11ad919321ab89a2c312 ] François Cachereul made a very nice bug report and suspected the bh_lock_sock() / bh_unlok_sock() pair used in l2tp_xm

[PATCH 3.11 20/66] net/mlx4_en: Fix pages never dma unmapped on rx

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Amir Vadai [ Upstream commit 021f1107ffdae7a82af6c53f4c52654062e365c6 ] This patch fixes a bug introduced by commit 51151a16 (mlx4: allow order-0 memory allocations in RX path). dma_unmap_pag

[PATCH 3.11 19/66] net/mlx4_en: Rename name of mlx4_en_rx_alloc members

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Amir Vadai [ Upstream commit 70fbe0794393829d9acd686428d87c27b6f6984b ] Add page prefix to page related members: @size and @offset into @page_size and @page_offset CC: Eric Dumazet Signed-of

[PATCH 3.11 13/66] sit: amend "allow to use rtnl ops on fb tunnel"

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Willem de Bruijn Amend backport to 3.11.y of [ Upstream commit 205983c43700ac3a81e7625273a3fa83cd2759b5 ] The discussion thread in the upstream commit mentions that in backports to stable-*

Re: linux-next: manual merge of the dt-rh tree with the powerpc tree

On 11/01/2013 12:20 AM, Stephen Rothwell wrote: > Hi Rob, > > Today's linux-next merge of the dt-rh tree got a conflict in > arch/powerpc/include/asm/prom.h between commit a3e31b458844 ("of: > Move definition of of_find_next_cache_node into common code") from > the powerpc tree and commit 0c3f061

[PATCH 3.11 12/66] net: heap overflow in __audit_sockaddr()

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter [ Upstream commit 1661bf364ae9c506bc8795fef70d1532931be1e8 ] We need to cap ->msg_namelen or it leads to a buffer overflow when we to the memcpy() in __audit_sockaddr(). It requ

[PATCH 3.11 17/66] net: secure_seq: Fix warning when CONFIG_IPV6 and CONFIG_INET are not selected

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Fabio Estevam [ Upstream commit cb03db9d0e964568407fb08ea46cc2b6b7f67587 ] net_secret() is only used when CONFIG_IPV6 or CONFIG_INET are selected. Building a defconfig with both of these symb

[PATCH 3.11 11/66] net: mv643xx_eth: fix orphaned statistics timer crash

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Sebastian Hesselbarth [ Upstream commit f564412c935111c583b787bcc18157377b208e2e ] The periodic statistics timer gets started at port _probe() time, but is stopped on _stop() only. In a modula

[PATCH 3.11 14/66] proc connector: fix info leaks

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Mathias Krause [ Upstream commit e727ca82e0e9616ab4844301e6bae60ca7327682 ] Initialize event_data for all possible message types to prevent leaking kernel stack contents to userland (up to 20

[PATCH 3.11 05/66] tcp: fix incorrect ca_state in tail loss probe

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Yuchung Cheng [ Upstream commit 031afe4990a7c9dbff41a3a742c44d3e740ea0a1 ] On receiving an ACK that covers the loss probe sequence, TLP immediately sets the congestion state to Open, even thou

[PATCH 3.11 15/66] ipv4: fix ineffective source address selection

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Jiri Benc [ Upstream commit 0a7e22609067ff524fc7bbd45c6951dd08561667 ] When sending out multicast messages, the source address in inet->mc_addr is ignored and rewritten by an autoselected one.

[PATCH 3.11 08/66] l2tp: fix kernel panic when using IPv4-mapped IPv6 addresses

3.11-stable review patch. If anyone has any objections, please let me know. -- From: François CACHEREUL [ Upstream commit e18503f41f9b12132c95d7c31ca6ee5155e44e5c ] IPv4 mapped addresses cause kernel panic. The patch juste check whether the IPv6 address is an IPv4 mapped addre

[PATCH 3.11 10/66] net: mv643xx_eth: update statistics timer from timer context only

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Sebastian Hesselbarth [ Upstream commit 041b4ddb84989f06ff1df0ca869b950f1ee3cb1c ] Each port driver installs a periodic timer to update port statistics by calling mib_counters_update. As mib_c

[PATCH 3.11 06/66] net: do not call sock_put() on TIMEWAIT sockets

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 80ad1d61e72d626e30ebe8529a0455e660ca4693 ] commit 3ab5aee7fe84 ("net: Convert TCP & DCCP hash tables to use RCU / hlist_nulls") incorrectly used sock_put() on TI

[PATCH 3.11 07/66] batman-adv: set up network coding packet handlers during module init

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Matthias Schiffer [ Upstream commit 6c519bad7b19a2c14a075b400edabaa630330123 ] batman-adv saves its table of packet handlers as a global state, so handlers must be set up only once (and settin

Re: linux-next: manual merge of the dt-rh tree with the powerpc tree

Hi Rob, On Fri, 01 Nov 2013 17:24:42 -0500 Rob Herring wrote: > > On 11/01/2013 12:20 AM, Stephen Rothwell wrote: > > > > Today's linux-next merge of the dt-rh tree got a conflict in > > arch/powerpc/include/asm/prom.h between commit a3e31b458844 ("of: > > Move definition of of_find_next_cache_

[PATCH 3.11 09/66] l2tp: Fix build warning with ipv6 disabled.

3.11-stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" [ Upstream commit 8d8a51e26a6d415e1470759f2cf5f3ee3ee86196 ] net/l2tp/l2tp_core.c: In function ‘l2tp_verify_udp_checksum’: net/l2tp/l2tp_core.c:499:22: warning: unused variab

[PATCH 3.10 43/54] gpio/lynxpoint: check if the interrupt is enabled in IRQ handler

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Mika Westerberg commit 03d152d5582abc8a1c19cb107164c3724bbd4be4 upstream. Checking LP_INT_STAT is not enough in the interrupt handler because its contents get updated regardless of whether the

[PATCH 3.11 02/66] tcp: TSQ can use a dynamic limit

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit c9eeec26e32e087359160406f96e0949b3cc6f10 ] When TCP Small Queues was added, we used a sysctl to limit amount of packets queues on Qdisc/device queues for a given

[PATCH 3.11 01/66] tcp: TSO packets automatic sizing

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commits 6d36824e730f247b602c90e8715a792003e3c5a7, 02cf4ebd82ff0ac7254b88e466820a290ed8289a, and parts of 7eec4174ff29cd42f2acfae8112f51c228545d40 ] After hearing ma

[PATCH 3.11 00/66] 3.11.7-stable review

This is the start of the stable review cycle for the 3.11.7 release. There are 66 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun Nov 3 22:04:49 UTC 2013. Anything receive

[PATCH 3.11 04/66] tcp: do not forget FIN in tcp_shifted_skb()

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 5e8a402f831dbe7ee831340a91439e46f0d38acd ] Yuchung found following problem : There are bugs in the SACK processing code, merging part in tcp_shift_skb_data(),

[PATCH 3.11 03/66] tcp: must unclone packets before mangling them

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit c52e2421f7368fd36cbe330d2cf41b10452e39a9 ] TCP stack should make sure it owns skbs before mangling them. We had various crashes using bnx2x, and it turned out g

[PATCH 3.10 36/54] ipv6: always prefer rt6i_gateway if present

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Julian Anastasov [ Upstream commit 96dc809514fb2328605198a0602b67554d8cce7b ] In v3.9 6fd6ce2056de2709 ("ipv6: Do not depend on rt->n in ip6_finish_output2()." changed the behaviour of ip6_fin

[PATCH 3.10 42/54] ARM: integrator: deactivate timer0 on the Integrator/CP

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Linus Walleij commit 29114fd7db2fc82a34da8340d29b8fa413e03dca upstream. This fixes a long-standing Integrator/CP regression from commit 870e2928cf3368ca9b06bc925d0027b0a56bcd8e "ARM: integrato

[PATCH 3.10 35/54] inet: fix possible memory corruption with UDP_CORK and UFO

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Hannes Frederic Sowa [ This is a simplified -stable version of a set of upstream commits. ] This is a replacement patch only for stable which does fix the problems handled by the following two

[PATCH 3.10 41/54] ARM: 7851/1: check for number of arguments in syscall_get/set_arguments()

3.10-stable review patch. If anyone has any objections, please let me know. -- From: AKASHI Takahiro commit 3c1532df5c1b54b5f6246cdef94eeb73a39fe43a upstream. In ftrace_syscall_enter(), syscall_get_arguments(..., 0, n, ...) if (i == 0) { ...; n--;} memcpy(

[PATCH 3.10 52/54] USB: serial: ti_usb_3410_5052: add Abbott strip port ID to combined table as well.

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Diego Elio Pettenò commit c9d09dc7ad106492c17c587b6eeb99fe3f43e522 upstream. Without this change, the USB cable for Freestyle Option and compatible glucometers will not be detected by the driv

[PATCH 3.10 51/54] serial: vt8500: add missing braces

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Roel Kluin commit d969de8d83401683420638c8107dcfedb2146f37 upstream. Due to missing braces on an if statement, in presence of a device_node a port was always assigned -1, regardless of any ali

[PATCH 3.10 33/54] net: unix: inherit SOCK_PASS{CRED, SEC} flags from socket to fix race

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann [ Upstream commit 90c6bd34f884cd9cee21f1d152baf6c18bcac949 ] In the case of credentials passing in unix stream sockets (dgram sockets seem not affected), we get a rather sparse

[PATCH 3.10 28/54] net: dst: provide accessor function to dst->xfrm

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Vlad Yasevich [ Upstream commit e87b3998d795123b4139bc3f25490dd236f68212 ] dst->xfrm is conditionally defined. Provide accessor funtion that is always available. Signed-off-by: Vlad Yasevich

[PATCH 3.10 37/54] ipv6: fill rt6i_gateway with nexthop address

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Julian Anastasov [ Upstream commit 550bab42f83308c9d6ab04a980cc4333cef1c8fa ] Make sure rt6i_gateway contains nexthop information in all routes returned from lookup or when routes are directly

[PATCH 3.10 32/54] be2net: pass if_id for v1 and V2 versions of TX_CREATE cmd

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Vasundhara Volam [ Upstream commit 0fb88d61bc60779dde88b0fc268da17eb81d0412 ] It is a required field for all TX_CREATE cmd versions > 0. This fixes a driver initialization failure, caused by r

[PATCH 3.10 50/54] wireless: radiotap: fix parsing buffer overrun

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Johannes Berg commit f5563318ff1bde15b10e736e97ffce13be08bc1a upstream. When parsing an invalid radiotap header, the parser can overrun the buffer that is passed in because it doesn't correctl

[PATCH 3.10 31/54] wanxl: fix info leak in ioctl

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Salva Peiró [ Upstream commit 2b13d06c9584b4eb773f1e80bbaedab9a1c344e1 ] The wanxl_ioctl() code fails to initialize the two padding bytes of struct sync_serial_settings after the ->loopback me

[PATCH 3.10 29/54] sctp: Use software crc32 checksum when xfrm transform will happen.

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Fan Du [ Upstream commit 27127a82561a2a3ed955ce207048e1b066a80a2a ] igb/ixgbe have hardware sctp checksum support, when this feature is enabled and also IPsec is armed to protect sctp traffic,

[PATCH 3.10 24/54] virtio-net: dont respond to cpu hotplug notifier if were not ready

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Jason Wang [ Upstream commit 3ab098df35f8b98b6553edc2e40234af512ba877 ] We're trying to re-configure the affinity unconditionally in cpu hotplug callback. This may lead the issue during resumi

[PATCH 3.10 34/54] net: fix cipso packet validation when !NETLABEL

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Seif Mazareeb [ Upstream commit f2e5ddcc0d12f9c4c7b254358ad245c9dddce13b ] When CONFIG_NETLABEL is disabled, the cipso_v4_validate() function could loop forever in the main loop if opt[opt_ite

[PATCH 3.10 30/54] sctp: Perform software checksum if packet has to be fragmented.

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Vlad Yasevich [ Upstream commit d2dbbba77e95dff4b4f901fee236fef6d9552072 ] IP/IPv6 fragmentation knows how to compute only TCP/UDP checksum. This causes problems if SCTP packets has to be frag

[PATCH 3.10 38/54] netfilter: nf_conntrack: fix rt6i_gateway checks for H.323 helper

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Julian Anastasov [ Upstream commit 56e42441ed54b092d6c7411138ce60d049e7c731 ] Now when rt6_nexthop() can return nexthop address we can use it for proper nexthop comparison of directly connecte

[PATCH 3.10 27/54] bridge: Correctly clamp MAX forward_delay when enabling STP

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Vlad Yasevich [ Upstream commit 4b6c7879d84ad06a2ac5b964808ed599187a188d ] Commit be4f154d5ef0ca147ab6bcd38857a774133f5450 bridge: Clamp forward_delay when enabling STP had a typo when

[PATCH 3.10 25/54] virtio-net: fix the race between channels setting and refill

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Jason Wang [ Upstream commit 9b9cd8024a2882e896c65222aa421d461354e3f2 ] Commit 55257d72bd1c51f25106350f4983ec19f62ed1fa (virtio-net: fill only rx queues which are being used) tries to refill o

[PATCH 3.10 39/54] ipv6: probe routes asynchronous in rt6_probe

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Hannes Frederic Sowa [ Upstream commit c2f17e827b419918c856131f592df9521e1a38e3 ] Routes need to be probed asynchronous otherwise the call stack gets exhausted when the kernel attemps to deliv

[PATCH 3.10 26/54] virtio-net: refill only when device is up during setting queues

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Jason Wang [ Upstream commit 35ed159bfd96a7547ec277ed8b550c7cbd9841b6 ] We used to schedule the refill work unconditionally after changing the number of queues. This may lead an issue if the d

[PATCH 3.10 21/54] unix_diag: fix info leak

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Mathias Krause [ Upstream commit 6865d1e834be84ddd5808d93d5035b492346c64a ] When filling the netlink message we miss to wipe the pad field, therefore leak one byte of heap memory to userland.

[PATCH 3.10 15/54] net: secure_seq: Fix warning when CONFIG_IPV6 and CONFIG_INET are not selected

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Fabio Estevam [ Upstream commit cb03db9d0e964568407fb08ea46cc2b6b7f67587 ] net_secret() is only used when CONFIG_IPV6 or CONFIG_INET are selected. Building a defconfig with both of these symb

[PATCH 3.10 20/54] farsync: fix info leak in ioctl

3.10-stable review patch. If anyone has any objections, please let me know. -- From: =?UTF-8?q?Salva=20Peir=C3=B3?= [ Upstream commit 96b340406724d87e4621284ebac5e059d67b2194 ] The fst_get_iface() code fails to initialize the two padding bytes of struct sync_serial_settings af

[PATCH 3.10 17/54] net: vlan: fix nlmsg size calculation in vlan_get_size()

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Marc Kleine-Budde [ Upstream commit c33a39c575068c2ea9bffb22fd6de2df19c74b89 ] This patch fixes the calculation of the nlmsg size, by adding the missing nla_total_size(). Cc: Patrick McHardy

[PATCH 3.10 22/54] connector: use nlmsg_len() to check message length

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Mathias Krause [ Upstream commit 162b2bedc084d2d908a04c93383ba02348b648b0 ] The current code tests the length of the whole netlink message to be at least as long to fit a cn_msg. This is wrong

[PATCH 3.10 18/54] vti: get rid of nf mark rule in prerouting

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Christophe Gouault [ Upstream commit 7263a5187f9e9de45fcb51349cf0e031142c19a1 ] This patch fixes and improves the use of vti interfaces (while lightly changing the way of configuring them). C

[PATCH 3.10 19/54] l2tp: must disable bh before calling l2tp_xmit_skb()

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 455cc32bf128e114455d11ad919321ab89a2c312 ] François Cachereul made a very nice bug report and suspected the bh_lock_sock() / bh_unlok_sock() pair used in l2tp_xm

[PATCH 3.10 16/54] xen-netback: Dont destroy the netdev until the vif is shut down

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Paul Durrant [ upstream commit id: 279f438e36c0a70b23b86d2090aeec50155034a9 ] Without this patch, if a frontend cycles through states Closing and Closed (which Windows frontends need to do) th

[PATCH 3.10 03/54] tcp: must unclone packets before mangling them

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit c52e2421f7368fd36cbe330d2cf41b10452e39a9 ] TCP stack should make sure it owns skbs before mangling them. We had various crashes using bnx2x, and it turned out g

[PATCH 3.10 06/54] net: do not call sock_put() on TIMEWAIT sockets

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 80ad1d61e72d626e30ebe8529a0455e660ca4693 ] commit 3ab5aee7fe84 ("net: Convert TCP & DCCP hash tables to use RCU / hlist_nulls") incorrectly used sock_put() on TI

[PATCH 3.10 10/54] net: mv643xx_eth: fix orphaned statistics timer crash

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Sebastian Hesselbarth [ Upstream commit f564412c935111c583b787bcc18157377b208e2e ] The periodic statistics timer gets started at port _probe() time, but is stopped on _stop() only. In a modula

<    1   2   3   4   5   6   7   >