[PATCH 4.4 31/69] tty: limit terminal size to 4M chars

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Vyukov commit 32b2921e6a7461fe63b71217067a6cf4bddb132f upstream. Size of kmalloc() in vc_do_resize() is controlled by user. Too large kmalloc() size triggers WARNING message on console.

[PATCH 4.4 02/69] i2c: core: fix NULL pointer dereference under race condition

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Vladimir Zapolskiy commit 147b36d5b70c083cc76770c47d60b347e8eaf231 upstream. Race condition between registering an I2C device driver and deregistering an I2C adapter device which is assumed to

[PATCH 4.4 07/69] mm: memcontrol: do not recurse in direct reclaim

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Johannes Weiner commit 89a2848381b5fcd9c4d9c0cd97680e3b28730e31 upstream. On 4.0, we saw a stack corruption from a page fault entering direct memory cgroup reclaim, calling into btrfs_releasepa

[PATCH 4.4 08/69] KEYS: Fix short sprintf buffer in /proc/keys show function

4.4-stable review patch. If anyone has any objections, please let me know. -- From: David Howells commit 03dab869b7b239c4e013ec82aea22e181e441cfc upstream. This fixes CVE-2016-7042. Fix a short sprintf buffer in proc_keys_show(). If the gcc stack protector is turned on, this

Re: [PATCH v1 03/11] drivers: soc: hisi: Add support for Hisilicon Djtag driver

On Tuesday 08 November 2016 08:40 PM, Arnd Bergmann wrote: On Tuesday, November 8, 2016 1:49:43 PM CET John Garry wrote: Hi Arnd, Thanks for the reference. I think the i2c interface doesn't fully satisfy our requirements as we need more than just a slave bus address when accessing the slave

[PATCH 4.4 20/69] mei: txe: dont clean an unprocessed interrupt cause.

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alexander Usyskin commit 43605e293eb13c07acb546c14f407a271837af17 upstream. SEC registers are not accessible when the TXE device is in low power state, hence the SEC interrupt cannot be process

[PATCH 4.4 10/69] ALSA: hda - Merge RIRB_PRE_DELAY into CTX_WORKAROUND caps

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit ef85f299c74e6c5dd98ec0230183be33f4c2813d upstream. AZX_DCAPS_RIRB_PRE_DELAY is always tied with AZX_DCAPS_CTX_WORKAROUND, which is Creative's XFi specific. So, we can repla

Re: linux-next: build warning after merge of the akpm-current tree

On Wed, Nov 09, 2016 at 03:10:06PM +1100, Stephen Rothwell wrote: Hi Stephen, > Hi Andrew, > > After merging the akpm-current tree, today's linux-next build (powerpc > ppc64_defconfig) produced this warning: > > mm/hugetlb.c:1166:21: warning: 'alloc_gigantic_page' defined but not used > [-Wunuse

[PATCH v3] z3fold: use per-page read/write lock

Most of z3fold operations are in-page, such as modifying z3fold page header or moving z3fold objects within a page. Taking per-pool spinlock to protect per-page objects is therefore suboptimal, and the idea of having a per-page spinlock (or rwlock) has been around for some time. However, adding one

Re: KASAN & the vmalloc area

On Tue, Nov 08, 2016 at 02:09:27PM -0800, Dmitry Vyukov wrote: > On Tue, Nov 8, 2016 at 11:03 AM, Mark Rutland wrote: > > When KASAN is selected, we allocate shadow for the whole vmalloc area, > > using common zero pte, pmd, pud tables. Walking over these in the ptdump > > code takes a *very* long

Re: [PATCH net-next 1/2] bpf, mlx4: fix prog refcount in mlx4_en_try_alloc_resources error path

Hi Daniel, [auto build test ERROR on net-next/master] url: https://github.com/0day-ci/linux/commits/Daniel-Borkmann/bpf-mlx4-fix-prog-refcount-in-mlx4_en_try_alloc_resources-error-path/20161109-182712 config: x86_64-acpi-redef (attached as .config) compiler: gcc-6 (Debian 6.2.0-3) 6.2.0

Re: [PATCH v4 0/3] spi-nor: Add support for Intel SPI serial flash controller

On Mon, Oct 17, 2016 at 05:58:55PM +0300, Mika Westerberg wrote: > This is fourth version of the series. Previous versions can be found: > > v3: https://lwn.net/Articles/697231/ > v2: http://lists.infradead.org/pipermail/linux-mtd/2016-June/068277.html > v1: https://lkml.org/lkml/2016/6/14/2

[PATCH 4.4 47/69] scsi: arcmsr: Send SYNCHRONIZE_CACHE command to firmware

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Ching Huang commit 2bf7dc8443e113844d078fd6541b7f4aa544f92f upstream. The arcmsr driver failed to pass SYNCHRONIZE CACHE to controller firmware. Depending on how drive caches are handled intern

[PATCH 4.4 37/69] parisc: Ensure consistent state when switching to kernel stack at syscall entry

4.4-stable review patch. If anyone has any objections, please let me know. -- From: John David Anglin commit 6ed518328d0189e0fdf1bb7c73290d546143ea66 upstream. We have one critical section in the syscall entry path in which we switch from the userspace stack to kernel stack. I

[PATCH 4.4 46/69] scsi: scsi_debug: Fix memory leak if LBP enabled and module is unloaded

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Ewan D. Milne commit 4d2b496f19f3c2cfaca1e8fa0710688b5ff3811d upstream. map_storep was not being vfree()'d in the module_exit call. Signed-off-by: Ewan D. Milne Reviewed-by: Laurence Oberman

[PATCH 4.4 51/69] drm/radeon/si_dpm: workaround for SI kickers

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 7dc86ef5ac91642dfc3eb93ee0f0458e702a343e upstream. Consolidate existing quirks. Fixes stability issues on some kickers. Signed-off-by: Alex Deucher Signed-off-by: Alex Deu

[PATCH 4.4 67/69] kvm: x86: Check memopp before dereference (CVE-2016-8630)

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Owen Hofmann commit d9092f52d7e61dd1557f2db2400ddb430e85937e upstream. Commit 41061cdb98 ("KVM: emulate: do not initialize memopp") removes a check for non-NULL under incorrect assumptions. An

[PATCH 4.4 54/69] perf build: Fix traceevent plugins build race

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Jiri Olsa commit 67befc652845c8ffbefc8d173a6e6ced14d472f1 upstream. Ingo reported following build failure: $ make clean install ... CC plugin_kmem.o fixdep: error opening depfi

[PATCH 4.8 010/138] gpio: GPIO_GET_CHIPINFO_IOCTL: Fix information leak

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Lars-Peter Clausen commit 0f4bbb233743bdfd51d47688b0bc2561f310488b upstream. The GPIO_GET_CHIPINFO_IOCTL handler allocates a gpiochip_info struct on the stack and then passes it to copy_to_user

[PATCH 4.8 014/138] gpio: GPIO_GET_LINEHANDLE_IOCTL: Reject invalid line flags

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Lars-Peter Clausen commit e3e847c7f15a27c80f526b2a7a8d4dd7ce0960a0 upstream. The GPIO_GET_LINEHANDLE_IOCTL currently ignores unknown or undefined linehandle flags. From a backwards and forwards

[PATCH 4.4 38/69] virtio_ring: Make interrupt suppression spec compliant

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Ladi Prosek commit 0ea1e4a6d9b62cf29e210d2b4ba9fd43917522e3 upstream. According to the spec, if the VIRTIO_RING_F_EVENT_IDX feature bit is negotiated the driver MUST set flags to 0. Not dirtyin

[PATCH 4.8 012/138] gpio: GPIOHANDLE_GET_LINE_VALUES_IOCTL: Fix information leak

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Lars-Peter Clausen commit 3eded5d83bf4e36ad78775c7ceb44a45480b0abd upstream. The GPIOHANDLE_GET_LINE_VALUES_IOCTL handler allocates a gpiohandle_data struct on the stack and then passes it to c

[PATCH 4.4 39/69] virtio: console: Unlock vqs while freeing buffers

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Matt Redfearn commit 34563769e438d2881f62cf4d9badc4e589ac0ec0 upstream. Commit c6017e793b93 ("virtio: console: add locks around buffer removal in port unplug path") added locking around the fre

[PATCH 4.4 60/69] cgroup: avoid false positive gcc-6 warning

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit cfe02a8a973e7e5f66926b8ae38dfce404b19e29 upstream. When all subsystems are disabled, gcc notices that cgroup_subsys_enabled_key is a zero-length array and that any access t

[PATCH 4.4 36/69] ovl: fsync after copy-up

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Miklos Szeredi commit 641089c1549d8d3df0b047b5de7e9a111362cdce upstream. Make sure the copied up file hits the disk before renaming to the final destination. If this is not done then the copy-

[PATCH 4.4 42/69] firewire: net: guard against rx buffer overflows

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Stefan Richter commit 667121ace9dbafb368618dbabcf07901c962ddac upstream. The IP-over-1394 driver firewire-net lacked input validation when handling incoming fragmented datagrams. A maliciously

[PATCH 4.4 65/69] usb: dwc3: Fix size used in dma_free_coherent()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Christophe JAILLET commit 51fbc7c06c8900370c6da5fc4a4685add8fa4fb0 upstream. In commit 2abd9d5fa60f9 ("usb: dwc3: ep0: Add chained TRB support"), the size of the memory allocated with 'dma_allo

Re: [PATCH] USB: serial: fix invalid user-pointer checks

On Tue, 2016-11-08 at 16:41 +0100, Johan Hovold wrote: > On Tue, Nov 08, 2016 at 03:13:13PM +0100, Oliver Neukum wrote: > > On Tue, 2016-11-08 at 13:26 +0100, Johan Hovold wrote: > > > Drop invalid user-pointer checks from ioctl handlers. > > > > > > A NULL-pointer can be valid in user space and c

[PATCH 4.4 57/69] ARM: 8584/1: floppy: avoid gcc-6 warning

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit dd665be0e243873343a28e18f9f345927b658daf upstream. gcc-6.0 warns about comparisons between two identical expressions, which is what we get in the floppy driver when writing

[PATCH 4.8 001/138] i2c: rk3x: Give the tuning value 0 during rk3x_i2c_v0_calc_timings

4.8-stable review patch. If anyone has any objections, please let me know. -- From: David Wu commit 399c168ab5ab5e12ed55b6c91d61c24eb84c9164 upstream. We found a bug that i2c transfer sometimes failed on 3066a board with stabel-4.8, the con register would be updated by uniniti

[PATCH 4.8 016/138] gpio: GPIOHANDLE_GET_LINE_VALUES_IOCTL: Fix another information leak

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Lars-Peter Clausen commit d82aa4a8f2e8df9673ddb099262355da4c9b99b1 upstream. The GPIOHANDLE_GET_LINE_VALUES_IOCTL handler allocates a gpiohandle_data struct on the stack and then passes it to c

[PATCH 4.8 002/138] i2c: xgene: Avoid dma_buffer overrun

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Hoan Tran commit 603616017c35f4d0fbdbcace72adf9bf949c4a65 upstream. SMBus block command uses the first byte of buffer for the data length. The dma_buffer should be increased by 1 to avoid the o

[PATCH 4.8 021/138] mm: memcontrol: do not recurse in direct reclaim

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Johannes Weiner commit 89a2848381b5fcd9c4d9c0cd97680e3b28730e31 upstream. On 4.0, we saw a stack corruption from a page fault entering direct memory cgroup reclaim, calling into btrfs_releasepa

[PATCH 4.8 018/138] libxfs: clean up _calc_dquots_per_chunk

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Darrick J. Wong commit 58d789678546d46d7bbd809dd7dab417c0f23655 upstream. The function xfs_calc_dquots_per_chunk takes a parameter in units of basic blocks. The kernel seems to get the units w

[PATCH 4.8 005/138] spi: fsl-espi: avoid processing uninitalized data on error

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 5c0ba57744b1422d528f19430dd66d6803cea86f upstream. When we get a spurious interrupt in fsl_espi_irq, we end up processing four uninitalized bytes of data, as shown in this

[PATCH 4.8 026/138] device-dax: fix percpu_ref_exit ordering

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Dan Williams commit 52e73eb2872c9af6f382b2b22954ca8214397a4e upstream. We need to wait until the percpu_ref is released before exit. Otherwise, we sometimes lose the race and trigger this new w

[PATCH 4.8 040/138] powerpc/64: Fix race condition in setting lock bit in idle/wakeup code

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Paul Mackerras commit 09b7e37b18eecc1e347f4b1a3bc863f32801f634 upstream. This fixes a race condition where one thread that is entering or leaving a power-saving state can inadvertently ignore t

[PATCH 4.8 035/138] cxl: Fix leaking pid refs in some error paths

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Vaibhav Jain commit a05b82d5149dfeef05254a11c3636a89a854520a upstream. In some error paths in functions cxl_start_context and afu_ioctl_start_work pid references to the current & group-leader t

[PATCH 4.8 065/138] iio:chemical:atlas-ph-sensor: Fix use of 32 bit int to hold 16 bit big endian value

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Sandhya Bankar commit d1fe85ec7702917f2f1515b4c421d5d4792201a0 upstream. This will result in a random value being reported on big endian architectures. (thanks to Lars-Peter Clausen for pointin

[PATCH 4.8 096/138] ath10k: cache calibration data when the core is stopped

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Marty Faltesek commit f67b107d4ceddcf7aa65b706aaaf50d68edb52a6 upstream. Commit 0b8e3c4ca29f ("ath10k: move cal data len to hw_params") broke retrieving the calibration data from cal_data debug

[PATCH 4.8 073/138] ARM: dts: fix the SD card on the Snowball

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Linus Walleij commit 1b283eea6228880b765bc40fe4e555416437ce58 upstream. This fixes a very annoying regression on the Snowball SD card that has been around for a while. It turns out that the dev

[PATCH 4.8 056/138] usb: increase ohci watchdog delay to 275 msec

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Bryan Paluch commit ed6d6f8f42d7302f6f9b6245f34927ec20d26c12 upstream. Increase ohci watchout delay to 275 ms. Previous delay was 250 ms with 20 ms of slack, after removing slack time some ohci

[PATCH 4.8 080/138] virtio_ring: Make interrupt suppression spec compliant

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Ladi Prosek commit 0ea1e4a6d9b62cf29e210d2b4ba9fd43917522e3 upstream. According to the spec, if the VIRTIO_RING_F_EVENT_IDX feature bit is negotiated the driver MUST set flags to 0. Not dirtyin

[PATCH 4.8 000/138] 4.8.7-stable review

This is the start of the stable review cycle for the 4.8.7 release. There are 138 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri Nov 11 10:28:05 UTC 2016. Anything receive

[PATCH 4.8 113/138] drm/i915/gen9: fix DDB partitioning for multi-screen cases

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Paulo Zanoni commit 01c72d6c17dc524f04d4dbe361d214e423b35457 upstream. With the previous code we were only recomputing the DDB partitioning for the CRTCs included in the atomic commit, so any o

[PATCH 4.8 066/138] Staging: wilc1000: Fix kernel Oops on opening the device

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Aditya Shankar commit 1d4f1d53e1e2d5e38f4d3ca3bf60f8be5025540f upstream. Commit 2518ac59eb27 ("staging: wilc1000: Replace kthread with workqueue for host interface") adds an unconditional destr

[PATCH 4.8 064/138] arm64: dts: marvell: fix clocksource for CP110 master SPI0

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Marcin Wojtas commit 51227bf52008bd4c4c50da4b749bbc6e7bbbca52 upstream. I2C and SPI interfaces share common clock trees within the CP110 HW block. It occurred that SPI0 interface has wrong cloc

[PATCH 4.8 006/138] spi: mark device nodes only in case of successful instantiation

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Ralf Ramsauer commit e0af98a7e025a7263ae7e50264f6f79ed29642a7 upstream. Instantiated SPI device nodes are marked with OF_POPULATE. This was introduced in bd6c164. On unloading, loaded device no

[PATCH 4.8 067/138] dm: free io_barrier after blk_cleanup_queue call

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Tahsin Erdogan commit d09960b0032174eb493c4c13be5b9c9ef36dc9a7 upstream. dm_old_request_fn() has paths that access md->io_barrier. The party destroying io_barrier should ensure that no future

[PATCH 4.8 045/138] timers: Lock base for same bucket optimization

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Thomas Gleixner commit 4da9152a4308dcbf611cde399c695c359fc9145f upstream. Linus stumbled over the unlocked modification of the timer expiry value in mod_timer() which is an optimization for tim

[PATCH 4.8 047/138] ubifs: Fix regression in ubifs_readdir()

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Richard Weinberger commit a00052a296e54205cf238c75bd98d17d5d02a6db upstream. Commit c83ed4c9dbb35 ("ubifs: Abort readdir upon error") broke overlayfs support because the fix exposed an internal

[PATCH 4.8 049/138] usb: gadget: udc: atmel: fix endpoint name

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Alexandre Belloni commit bbe097f092b0d13e9736bd2794d0ab24547d0e5d upstream. Since commit c32b5bcfa3c4 ("ARM: dts: at91: Fix USB endpoint nodes"), atmel_usba_udc fails with: [ cut h

Re: task isolation discussion at Linux Plumbers

2016-11-05 4:04 GMT+00:00 Chris Metcalf : > A bunch of people got together this week at the Linux Plumbers > Conference to discuss nohz_full, task isolation, and related stuff. > (Thanks to Thomas for getting everyone gathered at one place and time!) > > Here are the notes I took; I welcome any cor

[PATCH 4.8 022/138] thermal/powerclamp: correct cpu support check

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Eric Ernst commit 3105f234e0aba43e44e277c20f9b32ee8add43d4 upstream. Initial logic for checking CPU match resulted in OR of CPU features rather than the intended AND. Updated to use boot_cpu_h

[PATCH 4.8 107/138] drm/radeon/si_dpm: workaround for SI kickers

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 7dc86ef5ac91642dfc3eb93ee0f0458e702a343e upstream. Consolidate existing quirks. Fixes stability issues on some kickers. Signed-off-by: Alex Deucher Signed-off-by: Alex Deu

[PATCH 4.8 069/138] KVM: s390: Fix STHYI buffer alignment for diag224

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Janosch Frank commit 45c7ee43a5184ddbff652ee0d2e826f86f1b616b upstream. Diag224 requires a page-aligned 4k buffer to store the name table into. kmalloc does not guarantee page alignment, hence

[PATCH 4.8 051/138] USB: serial: fix potential NULL-dereference at probe

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 126d26f66d9890a69158812a6caa248c05359daa upstream. Make sure we have at least one port before attempting to register a console. Currently, at least one driver binds to a "d

[PATCH 4.8 055/138] usb: renesas_usbhs: add wait after initialization for R-Car Gen3

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Yoshihiro Shimoda commit b76032396d7958f006bccf5fb2535beb5526837c upstream. Since the controller on R-Car Gen3 doesn't have any status registers to detect initialization (LPSTS.SUSPM = 1) and t

[PATCH 4.8 008/138] gpio / ACPI: fix returned error from acpi_dev_gpio_irq_get()

4.8-stable review patch. If anyone has any objections, please let me know. -- From: David Arcari commit 67bf5156edc4f58241fd7c119ae145c552a6 upstream. acpi_dev_gpio_irq_get() currently ignores the error returned by acpi_get_gpiod_by_index() and overwrites it with -ENOENT.

[PATCH 4.8 100/138] RAID1: ignore discard error

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Shaohua Li commit e3f948cd3283e4fbe5907f1f3967c839912f480e upstream. If a write error occurs, raid1 will try to rewrite the bio in small chunk size. If the rewrite fails, raid1 will record the

[PATCH 4.8 098/138] scsi: arcmsr: Send SYNCHRONIZE_CACHE command to firmware

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Ching Huang commit 2bf7dc8443e113844d078fd6541b7f4aa544f92f upstream. The arcmsr driver failed to pass SYNCHRONIZE CACHE to controller firmware. Depending on how drive caches are handled intern

[PATCH 4.8 131/138] [media] v4l: vsp1: Prevent pipelines from running when not streaming

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Laurent Pinchart commit e4e70a147a48618a36ae1b81c641516cb9d45993 upstream. Pipelines can only be run if all their video nodes are streaming. Commit b4dfb9b35a19 ("[media] v4l: vsp1: Stop the pi

Re: [Intel-gfx] xrandr fails after resume from hibernation in kernels 4.7.4 and 4.8.0

On Sat, Oct 29, 2016 at 09:47:24AM -0400, Greg KH wrote: > On Sat, Oct 29, 2016 at 10:13:25AM -0300, Gaston Gonzalez wrote: > > On Fri, Oct 28, 2016 at 07:23:24PM +0300, Ville Syrjälä wrote: > > > On Fri, Oct 28, 2016 at 11:53:40AM -0400, Greg KH wrote: > > > > On Fri, Oct 07, 2016 at 10:38:17AM -0

[PATCH 4.8 130/138] usb: musb: Fix hardirq-safe hardirq-unsafe lock order error

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Tony Lindgren commit d8e5f0eca1e88215e45aca27115ea747e6164da1 upstream. If we configure musb with 2430 glue as a peripheral, and then rmmod omap2430 module, we'll get the following error: [ IN

[PATCH 4.8 136/138] ubi: fastmap: Fix add_vol() return value test in ubi_attach_fastmap()

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Boris Brezillon commit 40b6e61ac72e99672e47cdb99c8d7d226004169b upstream. Commit e96a8a3bb671 ("UBI: Fastmap: Do not add vol if it already exists") introduced a bug by changing the possible err

[PATCH 4.8 129/138] usb: chipidea: host: fix NULL ptr dereference during shutdown

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Stefan Wahren commit 991d5add50a5bb6ab8f12f2129f5c7487f6baaf6 upstream. After commit b09b5224fe86 ("usb: chipidea: implement platform shutdown callback") and commit 43a404577a93 ("usb: chipidea

[PATCH 4.8 094/138] mac80211: discard multicast and 4-addr A-MSDUs

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Johannes Berg commit ea720935cf6686f72def9d322298bf7e9bd53377 upstream. In mac80211, multicast A-MSDUs are accepted in many cases that they shouldn't be accepted in: * drop A-MSDUs with a mult

Re: [PATCH v3 1/3] thinkpad_acpi: Move tablet detection into separate function

Sorry, I didn't had the time to look at the patches earlier. Now, I did and was wondering why hotkey_tablet_mode doesn't show up in sysfs anymore ... On 7 November 2016 at 18:10, Lyude wrote: > @@ -3464,17 +3495,6 @@ static int __init hotkey_init(struct ibm_init_struct > *iibm) >

Re: task isolation discussion at Linux Plumbers

On Tue, Nov 8, 2016 at 5:40 PM, Paul E. McKenney wrote: > commit 49961e272333ac720ac4ccbaba45521bfea259ae > Author: Paul E. McKenney > Date: Tue Nov 8 14:25:21 2016 -0800 > > rcu: Maintain special bits at bottom of ->dynticks counter > > Currently, IPIs are used to force other CPUs to

Re: [PATCH v10 5/7] x86/cpufeature: Detect CPUID faulting support

On Tue, Nov 08, 2016 at 10:39:54AM -0800, Kyle Huey wrote: > Intel supports faulting on the CPUID instruction beginning with Ivy Bridge. > When enabled, the processor will fault on attempts to execute the CPUID > instruction with CPL>0. This will allow a ptracer to emulate the CPUID > instruction.

[PATCH 4.8 133/138] ARM: fix oops when using older ARMv4T CPUs

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Russell King commit 04946fb60fb157faafa01658dff3131d49f49ccb upstream. Alexander Shiyan reports that CLPS711x fails at boot time in the data exception handler due to a NULL pointer dereference.

[PATCH 4.8 102/138] md: be careful not lot leak internal curr_resync value into metadata. -- (all)

4.8-stable review patch. If anyone has any objections, please let me know. -- From: NeilBrown commit 1217e1d1999ed6c9c1e1b1acae0a74ab70464ae2 upstream. mddev->curr_resync usually records where the current resync is up to, but during the starting phase it has some "magic" value

[PATCH 4.8 128/138] usb: dwc3: Fix size used in dma_free_coherent()

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Christophe JAILLET commit 51fbc7c06c8900370c6da5fc4a4685add8fa4fb0 upstream. In commit 2abd9d5fa60f9 ("usb: dwc3: ep0: Add chained TRB support"), the size of the memory allocated with 'dma_allo

[PATCH 4.8 101/138] RAID10: ignore discard error

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Shaohua Li commit 579ed34f7b751b8add233cba4cf755258dbdd60a upstream. This is the counterpart of raid10 fix. If a write error occurs, raid10 will try to rewrite the bio in small chunk size. If t

[PATCH 4.8 138/138] HID: usbhid: add ATEN CS962 to list of quirky devices

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Neukum commit cf0ea4da4c7df11f7a508b2f37518e0f117f3791 upstream. Like many similar devices it needs a quirk to work. Issuing the request gets the device into an irrecoverable state. Sig

[PATCH 4.8 120/138] drm: i915: Wait for fences on new fb, not old

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Stone commit 1fb3672eaf6ec95fb34c22734feffd6041531c5b upstream. The previous code would wait for fences on the framebuffer from the old plane state to complete, rather than the new, so y

[PATCH 4.8 137/138] cpufreq: intel_pstate: Set P-state upfront in performance mode

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Rafael J. Wysocki commit a6c6ead14183ea4ec8ce7551e1f3451024b9c4db upstream. After commit a4675fbc4a7a (cpufreq: intel_pstate: Replace timers with utilization update callbacks) the cpufreq gover

[PATCH 4.8 134/138] kvm: x86: Check memopp before dereference (CVE-2016-8630)

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Owen Hofmann commit d9092f52d7e61dd1557f2db2400ddb430e85937e upstream. Commit 41061cdb98 ("KVM: emulate: do not initialize memopp") removes a check for non-NULL under incorrect assumptions. An

[PATCH 4.8 135/138] btrfs: qgroup: Prevent qgroup->reserved from going subzero

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Goldwyn Rodrigues commit 0b34c261e235a5c74dcf78bd305845bd15fe2b42 upstream. While free'ing qgroup->reserved resources, we much check if the page has not been invalidated by a truncate operation

[PATCH 4.8 099/138] mmc: dw_mmc-pltfm: fix the potential NULL pointer dereference

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Jaehoon Chung commit 45c7a4908a307a023e237a64a3eadcafc4836493 upstream. platform_get_resource can be returned the NULL pointer. Then regs->start should be referred to NULL Pointer. devm_ioremap

[PATCH 4.8 077/138] ovl: update S_ISGID when setting posix ACLs

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Miklos Szeredi commit fd3220d37b1f6f0cab6142d98b0e6c4082e63299 upstream. This change fixes xfstest generic/375, which failed to clear the setgid bit in the following test case on overlayfs:

[PATCH 4.8 123/138] UBI: fastmap: scrub PEB when bitflips are detected in a free PEB EC header

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Boris Brezillon commit ecbfa8eabae9cd73522d1d3d15869703c263d859 upstream. scan_pool() does not mark the PEB for scrubing when bitflips are detected in the EC header of a free PEB (VID header re

[PATCH 4.8 121/138] i2c: mark device nodes only in case of successful instantiation

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Ralf Ramsauer commit 6a676fb69dcbf3310b9e462c1db66c8e7f6ead38 upstream. Instantiated I2C device nodes are marked with OF_POPULATE. This was introduced in 4f001fd30145a6. On unloading, loaded de

[PATCH 4.8 104/138] drm/imx: ipuv3-plane: Switch EBA buffer only when we dont need modeset

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Liu Ying commit 43daa01323da37a3692cabe1579ef5c2c4372e06 upstream. We added active plane reconfiguration support by forcing a full modeset operation. So, looking at old_plane_state->fb to dete

[PATCH 4.8 109/138] drm/nouveau/acpi: fix check for power resources support

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Peter Wu commit b0a6af8b34c9ad20894aa46f85f4bf59d444f286 upstream. Check whether the kernel really supports power resources for a device, otherwise the power might not be removed when the devic

[PATCH 4.8 097/138] scsi: scsi_debug: Fix memory leak if LBP enabled and module is unloaded

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Ewan D. Milne commit 4d2b496f19f3c2cfaca1e8fa0710688b5ff3811d upstream. map_storep was not being vfree()'d in the module_exit call. Signed-off-by: Ewan D. Milne Reviewed-by: Laurence Oberman

[PATCH 4.8 106/138] drm/radeon/si_dpm: Limit clocks on HD86xx part

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Tom St Denis commit fb9a5b0c1c9893db2e0d18544fd49e19d784a87d upstream. Limit clocks on a specific HD86xx part to avoid crashes (while awaiting an appropriate PP fix). Signed-off-by: Tom St Den

[PATCH 4.8 082/138] virtio: console: Unlock vqs while freeing buffers

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Matt Redfearn commit 34563769e438d2881f62cf4d9badc4e589ac0ec0 upstream. Commit c6017e793b93 ("virtio: console: add locks around buffer removal in port unplug path") added locking around the fre

[PATCH 4.8 114/138] drm/i915/gen9: fix watermarks when using the pipe scaler

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Paulo Zanoni commit 5e33791e1f27c3207e7b44071e7c94a487d1eb39 upstream. Luckily, the necessary adjustments for when we're using the scaler are exactly the same as the ones needed on ILK+, so jus

[PATCH 4.8 105/138] drm/imx: ipuv3-plane: Access old u/vbo properly in ->atomic_check for YU12/YV12

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Liu Ying commit e73aca5184ad9fc948ba22b4d35dce11db35bb25 upstream. Before accessing the u/v offset(aka, u/vbo for IPUv3) of the old plane state's relevant fb, we should make sure the fb is in Y

[PATCH 4.8 127/138] pwm: Unexport children before chip removal

4.8-stable review patch. If anyone has any objections, please let me know. -- From: David Hsu commit 0733424c9ba9f42242409d1ece780777272f7ea1 upstream. Exported pwm channels aren't removed before the pwmchip and are leaked. This results in invalid sysfs files. This fix removes

Re: fsnotify_mark_srcu wtf?

On Sun 06-11-16 08:45:54, Amir Goldstein wrote: > On Sat, Nov 5, 2016 at 11:34 PM, Jan Kara wrote: > > On Wed 02-11-16 23:09:26, Miklos Szeredi wrote: > >> We've got a report where a fanotify daemon that implements permission > >> checks > >> screws up and doesn't send a reply. This then causes

[PATCH 4.8 125/138] video: fbdev: pxafb: potential NULL dereference on error

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit e0299908d606a99e7ffb467bc3c11dfe54133af3 upstream. If we "goto out;" then it calls display_timings_release(timings); Since "timings" is NULL, that's going to oops. Just re

[PATCH 4.8 076/138] ovl: fix get_acl() on tmpfs

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Miklos Szeredi commit b93d4a0eb308d4400b84c8b24c1b80e09a9497d0 upstream. tmpfs doesn't have ->get_acl() because it only uses cached acls. This fixes the acl tests in pjdfstest when tmpfs is us

[PATCH 4.8 122/138] netfilter: xt_NFLOG: fix unexpected truncated packet

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Liping Zhang commit 6d19375b58763fefc2f215fb45117d3353ced888 upstream. Justin and Chris spotted that iptables NFLOG target was broken when they upgraded the kernel to 4.8: "ulogd-2.0.5- IPs are

Re: [Ksummit-discuss] Including images on Sphinx documents

On Wed, 09 Nov 2016, Markus Heiser wrote: > Am 07.11.2016 um 18:01 schrieb Josh Triplett : > >> On Mon, Nov 07, 2016 at 07:55:24AM -0200, Mauro Carvalho Chehab wrote: >>> 2) add an Sphinx extension that would internally call ImageMagick and/or >>> inkscape to convert the bitmap; >> >> This seems

[PATCH 4.8 075/138] MIPS: KASLR: Fix handling of NULL FDT

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Matt Redfearn commit 4736697963385e6257ee8e260e97347e858cd962 upstream. If platform code returns a NULL pointer to the FDT, initial_boot_params will not get set to a valid pointer and attemptin

Re: [PATCH v2] leds: ledtrig-heartbeat: Make top brightness adjustable

On Wed 2016-11-09 11:43:46, Jacek Anaszewski wrote: > LED class heartbeat trigger allowed only for blinking with max_brightness > value. This patch adds more flexibility by exploiting part of LED core > software blink infrastructure. > > Signed-off-by: Jacek Anaszewski Acked-by: Pavel Machek -

[PATCH 4.8 074/138] nfsd: Fix general protection fault in release_lock_stateid()

4.8-stable review patch. If anyone has any objections, please let me know. -- From: Chuck Lever commit f46c445b79906a9da55c13e0a6f6b6a006b892fe upstream. When I push NFSv4.1 / RDMA hard, (xfstests generic/089, for example), I get this crash on the server: Oct 28 22:04:30 klim

Re: [PATCH V5 2/3] ARM64 LPC: Add missing range exception for special ISA

On Wed, Nov 09, 2016 at 10:12:59AM +1100, Benjamin Herrenschmidt wrote: > On Tue, 2016-11-08 at 11:49 +, Mark Rutland wrote: > > I believe that we could theoretically have multiple independent LPC/ISA > > busses, as is possible with PCI on !x86 systems. If the current ISA code > > assumes a sin

<    1   2   3   4   5   6   7   8   9   10   >