Re: [PATCH] KVM: nVMX: Fix trying to cancel vmlauch/vmresume

2017-08-17 18:30-0700, Wanpeng Li: > From: Wanpeng Li > > [ cut here ] > WARNING: CPU: 7 PID: 3861 at /home/kernel/ssd/kvm/arch/x86/kvm//vmx.c:11299 > nested_vmx_vmexit+0x176e/0x1980 [kvm_intel] > CPU: 7 PID: 3861 Comm: qemu-system-x86 Tainted: GW OE 4.13.0-rc4

Re: [PATCH] arm64: dts: ls1088a: Add USB support

On Fri, Aug 18, 2017 at 04:14:45PM +0800, yinbo@nxp.com wrote: > From: "yinbo.zhu" > > Fix the issue that usb is not detected on ls1088ardb > > Signed-off-by: yinbo.zhu > Signed-off-by: Ran Wang You are sending an updated patch. Please have the version number in subject prefix ... > ---

RE: [PATCH 1/2] sched/wait: Break up long wake list walk

> On Thu, Aug 17, 2017 at 1:18 PM, Liang, Kan wrote: > > > > Here is the call stack of wait_on_page_bit_common when the queue is > > long (entries >1000). > > > > # Overhead Trace output > > # .. > > # > >100.00% (931aefca) > > | > >

[PATCH v4 0/8] MIPS: Add virtual Ranchu board as a generic-based board

From: Aleksandar Markovic v3->v4: - corrected RTC clock patch so that it does not cause build errors for some targets, and limited compile support to Mips architecture, since it is the only case where this driver is used - changed titles of patches 2 and 4 to make them

[PATCH v4 1/8] Documentation: Add device tree binding for Goldfish RTC driver

From: Aleksandar Markovic Add documentation for DT binding of Goldfish RTC driver. The compatible string used by OS for binding the driver is "google,goldfish-rtc". Signed-off-by: Miodrag Dinic Signed-off-by: Goran Ferenc Signed-off-by: Aleksandar Markovic --- .../devicetree/bindings/rtc/goo

[PATCH v4 2/8] rtc: goldfish: Add RTC driver for Android emulator

From: Miodrag Dinic Add device driver for a virtual RTC device in Android emulator. The compatible string used by OS for binding the driver is defined as "google,goldfish-rtc". Signed-off-by: Miodrag Dinic Signed-off-by: Goran Ferenc Signed-off-by: Aleksandar Markovic --- MAINTAINERS

[PATCH] netxen: fix incorrect loop counter decrement

From: Colin Ian King The loop counter k is currently being decremented from zero which is incorrect. Fix this by incrementing k instead Detected by CoverityScan, CID#401847 ("Infinite loop") Fixes: 83f18a557c6d ("netxen_nic: fw dump support") Signed-off-by: Colin Ian King --- drivers/net/ethe

[PATCH v4 3/8] Documentation: Add device tree binding for Goldfish PIC driver

From: Aleksandar Markovic Add documentation for DT binding of Goldfish PIC driver. The compatible string used by OS for binding the driver is "google,goldfish-pic". Signed-off-by: Miodrag Dinic Signed-off-by: Goran Ferenc Signed-off-by: Aleksandar Markovic --- .../interrupt-controller/google

[PATCH v4 4/8] irqchip/irq-goldfish-pic: Add Goldfish PIC driver

From: Miodrag Dinic Add device driver for a virtual programmable interrupt controller The virtual PIC is designed as a device tree-based interrupt controller. The compatible string used by OS for binding the driver is "google,goldfish-pic". Signed-off-by: Miodrag Dinic Signed-off-by: Goran Fe

[PATCH v4 8/8] MIPS: Unselect ARCH_MIGHT_HAVE_PC_SERIO if MIPS_GENERIC

From: Miodrag Dinic This effectively disables i8042 driver for MIPS_GENERIC kernel platform. Currently, only sead-3, boston and ranchu boards are supported by the MIPS generic kernel and none of them require this driver. More specifically, kernel would crash if it gets enabled, because i8042 driv

[PATCH v4 6/8] Documentation: Add device tree binding for Goldfish FB driver

From: Aleksandar Markovic Add documentation for DT binding of Goldfish FB driver. The compatible string used by OS for binding the driver is "google,goldfish-fb". Signed-off-by: Miodrag Dinic Signed-off-by: Goran Ferenc Signed-off-by: Aleksandar Markovic --- .../devicetree/bindings/display/g

[PATCH v4 7/8] video: goldfishfb: Add support for device tree bindings

From: Aleksandar Markovic Add ability to the Goldfish FB driver to be recognized by OS via DT. Signed-off-by: Miodrag Dinic Signed-off-by: Goran Ferenc Signed-off-by: Aleksandar Markovic --- drivers/video/fbdev/goldfishfb.c | 8 +++- 1 file changed, 7 insertions(+), 1 deletion(-) diff -

[PATCH v4 5/8] MIPS: ranchu: Add Ranchu as a new generic-based board

From: Miodrag Dinic Provide amendments to the Mips generic platform framework so that the new generic-based board Ranchu can be chosen to be built. Signed-off-by: Miodrag Dinic Signed-off-by: Goran Ferenc Signed-off-by: Aleksandar Markovic --- MAINTAINERS |

[PATCH 3.2 58/59] mqueue: fix a use-after-free in sys_mq_notify()

3.2.92-rc1 review patch. If anyone has any objections, please let me know. -- From: Cong Wang commit f991af3daabaecff34684fd51fac80319d1baad1 upstream. The retry logic for netlink_attachskb() inside sys_mq_notify() is nasty and vulnerable: 1) The sock refcnt is already releas

[PATCH 3.2 03/59] ath9k_htc: Add Panasonic N5HBZ0000055 device id

3.2.92-rc1 review patch. If anyone has any objections, please let me know. -- From: Sujith Manoharan commit d90b570898f7cc3dd0b26d4e646f464408b04022 upstream. Reported-by: Ryan Roper Signed-off-by: Sujith Manoharan Signed-off-by: John W. Linville Signed-off-by: Ben Hutching

[PATCH 3.2 41/59] usb: Make sure usb/phy/of gets built-in

3.2.92-rc1 review patch. If anyone has any objections, please let me know. -- From: Alexey Brodkin commit 3d6159640da9c9175d1ca42f151fc1a14caded59 upstream. DWC3 driver uses of_usb_get_phy_mode() which is implemented in drivers/usb/phy/of.c and in bare minimal configuration it

[PATCH 3.2 55/59] x86/mm/32: Set the '__vmalloc_start_set' flag in initmem_init()

3.2.92-rc1 review patch. If anyone has any objections, please let me know. -- From: Laura Abbott commit 861ce4a3244c21b0af64f880d5bfe5e6e2fb9e4a upstream. '__vmalloc_start_set' currently only gets set in initmem_init() when !CONFIG_NEED_MULTIPLE_NODES. This breaks detection of

[PATCH 3.2 38/59] x86/boot: Fix BSS corruption/overwrite bug in early x86 kernel startup

3.2.92-rc1 review patch. If anyone has any objections, please let me know. -- From: Ashish Kalra commit d594aa0277e541bb997aef0bc0a55172d8138340 upstream. The minimum size for a new stack (512 bytes) setup for arch/x86/boot components when the bootloader does not setup/provide

[PATCH 3.16 001/134] [media] pvrusb2: reduce stack usage pvr2_eeprom_analyze()

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 6830733d53a4517588e56227b9c8538633f0c496 upstream. The driver uses a relatively large data structure on the stack, which showed up on my radar as we get a warning with the

[PATCH 3.2 56/59] ipv6: avoid overflow of offset in ip6_find_1stfragopt

3.2.92-rc1 review patch. If anyone has any objections, please let me know. -- From: Sabrina Dubroca commit 6399f1fae4ec29fab5ec7607043e256ca3a6 upstream. In some cases, offset can overflow and can cause an infinite loop in ip6_find_1stfragopt(). Make it unsigned int to pre

[PATCH 3.16 118/134] target/fileio: Fix zero-length READ and WRITE handling

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Bart Van Assche commit 59ac9c078141b8fd0186c0b18660a1b2c24e724e upstream. This patch fixes zero-length READ and WRITE handling in target/FILEIO, which was broken a long time back by: Since:

[PATCH 3.16 003/134] staging: comedi: jr3_pci: cope with jiffies wraparound

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Ian Abbott commit 8ec04a491825e08068e92bed0bba7821893b6433 upstream. The timer expiry routine `jr3_pci_poll_dev()` checks for expiry by checking whether the absolute value of `jiffies` (stored

[PATCH 3.16 119/134] ipv4: restore rt->fi for reference counting

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: WANG Cong commit 82486aa6f1b9bc8145e6d0fa2bc0b44307f3b875 upstream. IPv4 dst could use fi->fib_metrics to store metrics but fib_info itself is refcnt'ed, so without taking a refcnt fi and fi->

[PATCH 3.16 117/134] fbdev: sti: don't select CONFIG_VT

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 34bf129a7f068e3108dbb051b4b05674e2a270e7 upstream. While working on another build error, I ran into several variations of this dependency loop: subsection "Kconfig recurs

[PATCH 3.16 121/134] x86/mm/32: Set the '__vmalloc_start_set' flag in initmem_init()

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Laura Abbott commit 861ce4a3244c21b0af64f880d5bfe5e6e2fb9e4a upstream. '__vmalloc_start_set' currently only gets set in initmem_init() when !CONFIG_NEED_MULTIPLE_NODES. This breaks detection o

[PATCH 3.16 133/134] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Zheng Li commit e4c5e13aa45c23692e4acf56f0b3533f328199b2 upstream. There is an inconsistent conditional judgement between __ip6_append_data and ip6_finish_output functions, the variable length

[PATCH 3.16 102/134] arm64: KVM: Fix decoding of Rt/Rt2 when trapping AArch32 CP accesses

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Marc Zyngier commit c667186f1c01ca8970c78568b7ffd74e51ee upstream. Our 32bit CP14/15 handling inherited some of the ARMv7 code for handling the trapped system registers, completely missing

[PATCH 3.16 120/134] fs/xattr.c: zero out memory copied to userspace in getxattr

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Michal Hocko commit 81be3dee96346fbe08c31be5ef74f03f6b63cf68 upstream. getxattr uses vmalloc to allocate memory if kzalloc fails. This is filled by vfs_getxattr and then copied to the userspa

[PATCH 3.2 59/59] packet: fix tp_reserve race in packet_set_ring

3.2.92-rc1 review patch. If anyone has any objections, please let me know. -- From: Willem de Bruijn commit c27927e372f0785f3303e8fad94b85945e2c97b7 upstream. Updates to tp_reserve can race with reads of the field in packet_set_ring. Avoid this by holding the socket lock durin

[PATCH 3.16 122/134] virtio_net: fix support for small rings

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: "Michael S. Tsirkin" commit d85b758f72b05a774045545f24d70980e3e9aac4 upstream. When ring size is small (<32 entries) making buffers smaller means a full ring might not be able to hold enough b

[PATCH 0/6] MIPS: math-emu: FP emulation fixes and improvements

From: Aleksandar Markovic This series includes: - a fix for certain SIGILL program crashes on issuing a valid CMP instruction - a fix for RINT emulation inaccuracies - a fix for the output of CLASS.D instruction emulation - several FP emulation debugfs statistics improvements The pa

[PATCH 1/6] MIPS: math-emu: CMP.Sxxx.: Prevent occurences of SIGILL crashes

From: Aleksandar Markovic Fix CMP.Sxxx. SIGILL crashes by fixing main switch/case statement in fpu_emul() function so that inadvertent fall-troughs are prevented. Consider, let's say, CMP.SAF.S instruction when one of inputs is zero and another input is a signalling NaN. The desired output is ze

[PATCH 3.16 128/134] dentry name snapshots

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Al Viro commit 49d31c2f389acfe83417083e1208422b4091cd9e upstream. take_dentry_name_snapshot() takes a safe snapshot of dentry name; if the name is a short one, it gets copied into caller-suppl

[PATCH 3.16 123/134] net/mlx4_en: Change the error print to debug print

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Kamal Heib commit 505a9249c23988768983aaa0766ce54e0dbe037d upstream. The error print within mlx4_en_calc_rx_buf() should be a debug print. Fixes: 51151a16a60f ('mlx4: allow order-0 memory all

[PATCH 2/6] MIPS: math-emu: RINT.: Fix several problems by reimplementation

From: Aleksandar Markovic Reimplement RINT. kernel emulation so that all RINT. specifications are met. For the sake of simplicity, let's analyze RINT.S only. Prior to this patch, RINT.S emulation was essentially implemented as (in pseudocode) = ieee754sp_flong(ieee754sp_tlong()), where ieee754s

[PATCH 3.16 124/134] net/mlx4_en: Avoid adding steering rules with invalid ring

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Talat Batheesh commit 89c557687a32c294e9d25670a96e9287c09f2d5f upstream. Inserting steering rules with illegal ring is an invalid operation, block it. Fixes: 820672812f82 ('net/mlx4_en: Manag

[PATCH 3/6] MIPS: math-emu: CLASS.D: Zero bits 32-63 of the result

From: Aleksandar Markovic Fix content of CLASS.D output bits 32-63 to match hardware behavior. Prior to this patch, bits 32-63 of CLASS.D output were not initialized, causing differnet 32-63 bits content of CLASS.D, based on circumstances. However, the hardware consistently returns all these bit

[PATCH 3.16 125/134] arm64: ensure extension of smp_store_release value

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Mark Rutland commit 994870bead4ab19087a79492400a5478e2906196 upstream. When an inline assembly operand's type is narrower than the register it is allocated to, the least significant bits of th

[PATCH 6/6] MIPS: math-emu: Add FP emu debugfs stats for individual instructions

From: Aleksandar Markovic Add FP emulation debugfs statistics for individual instructions. The counters are placed in a separate directory called "instructions". The default full path of this directory is "/sys/kernel/debug/mips/fpuemustats/instructions"." One example of usage: mips_host::/sys/

[PATCH 4/6] MIPS: math-emu: Add FP emu debugfs statistics for branches

From: Aleksandar Markovic Add FP emu debugfs counter for branches. The new counter is displayed the same way as existing counter, and its default path is /sys/kernel/debug/mips/fpuemustats/. The limitation of this counter is that it counts only R6 branch instructions BC1NEZ and BC1EQZ. Signed-

[PATCH 5/6] MIPS: math-emu: Add FP emu debugfs reset functionality

From: Aleksandar Markovic Add capability for the user to reset all FP emu debugfs counters. This is achieved by having a special debugfs file "fpuemustats_clear" (under default location "/sys/kernel/debug/mips"). Each access to the file results in setting all coounters to zero (it is enough, let

[PATCH 3.16 126/134] arm64: uaccess: ensure extension of access_ok() addr

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Mark Rutland commit a06040d7a791a9177581dcf7293941bd92400856 upstream. Our access_ok() simply hands its arguments over to __range_ok(), which implicitly assummes that the addr parameter is 64

[PATCH 3.16 127/134] ath9k_htc: add device ID for Toshiba WLM-20U2/GN-1080

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Alexander Tsoy commit aea57edf80c6e96d6dc24757599396af99c02b19 upstream. This device is available under different marketing names: WLM-20U2 - Wireless USB Dongle for Toshiba TVs GN-1080 - Wire

[PATCH 3.16 109/134] metag/uaccess: Check access_ok in strncpy_from_user

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: James Hogan commit 3a158a62da0673db918b53ac1440845a5b64fd90 upstream. The metag implementation of strncpy_from_user() doesn't validate the src pointer, which could allow reading of arbitrary k

Re: [PATCH 2/3] MIPS: dts: Add VoCore2 board

Hi Rob, Thanks for the review. On 17/08/17 22:36, Rob Herring wrote: On Tue, Aug 15, 2017 at 05:32:52PM +0100, Harvey Hunt wrote: The VoCore2 board is a low cost MT7628A based board with 128MB RAM, 16MB flash and multiple external peripherals. This initial DTS provides enough support to get t

Re: [PATCH] sdhci: remove redundant check of zero slots

On 18/08/17 15:37, Colin King wrote: > From: Colin Ian King > > Slots can never be zero, PCI_SLOTS_INFO_SLOTS returns a value in the > range 0..7; slots is one more than this, 1..8 so cannot be zero and > so the zero check is redundant and can be removed. > > Detected by CoverityScan, CID#744269

Re: [PATCH] spmi: pmic-arb: Enforce the ownership check optionally

On Fri, Aug 18, 2017 at 05:24:36PM +0530, Kiran Gunda wrote: > The peripheral ownership check is not necessary on single master > platforms. Hence, enforce the peripheral ownership check optioanlly. > > Signed-off-by: Kiran Gunda Tested-by: Shawn Guo

[PATCH 3.16 131/134] mqueue: fix a use-after-free in sys_mq_notify()

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Cong Wang commit f991af3daabaecff34684fd51fac80319d1baad1 upstream. The retry logic for netlink_attachskb() inside sys_mq_notify() is nasty and vulnerable: 1) The sock refcnt is already relea

Re: [PATCH v2 1/2] paravirt,xen: remove xen_patch()

On 08/16/2017 01:31 PM, Juergen Gross wrote: > Xen's paravirt patch function xen_patch() does some special casing for > irq_ops functions to apply relocations when those functions can be > patched inline instead of calls. > > Unfortunately none of the special case function replacements is small > e

[PATCH 3.16 130/134] timerfd: Protect the might cancel mechanism proper

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Thomas Gleixner commit 1e38da300e1e395a15048b0af1e5305bd91402f6 upstream. The handling of the might_cancel queueing is not properly protected, so parallel operations on the file descriptor can

[PATCH 3.16 129/134] ipv6: avoid overflow of offset in ip6_find_1stfragopt

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Sabrina Dubroca commit 6399f1fae4ec29fab5ec7607043e256ca3a6 upstream. In some cases, offset can overflow and can cause an infinite loop in ip6_find_1stfragopt(). Make it unsigned int to pr

[PATCH 3.16 104/134] powerpc/eeh: Avoid use after free in eeh_handle_special_event()

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Russell Currey commit daeba2956f32f91f3493788ff6ee02fb1b2f02fa upstream. eeh_handle_special_event() is called when an EEH event is detected but can't be narrowed down to a specific PE. This f

Re: [PATCH V2 11/12] spmi: pmic-arb: add support for HW version 5

On Fri, Aug 18, 2017 at 04:43:23PM +0530, kgu...@codeaurora.org wrote: > From the logs the ownership for these GPIOs is not assigned to the > application processor but to another master. Considering this is a > (apq8016-sbc) APSS only platform ideally the fix for this would be > to update the owner

[PATCH 3.16 132/134] packet: fix tp_reserve race in packet_set_ring

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Willem de Bruijn commit c27927e372f0785f3303e8fad94b85945e2c97b7 upstream. Updates to tp_reserve can race with reads of the field in packet_set_ring. Avoid this by holding the socket lock duri

[PATCH 3.16 111/134] CIFS: fix oplock break deadlocks

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Rabin Vincent commit 3998e6b87d4258a70df358296d6f1c7234012bfe upstream. When the final cifsFileInfo_put() is called from cifsiod and an oplock break work is queued, lockdep complains loudly:

[PATCH 3.16 134/134] udp: consistently apply ufo or fragmentation

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Willem de Bruijn commit 85f1bd9a7b5a79d5baa8bf44af19658f7bf77bfa upstream. When iteratively building a UDP datagram with MSG_MORE and that datagram exceeds MTU, consistently choose UFO or frag

[PATCH 3.16 114/134] SMB3: Work around mount failure when using SMB3 dialect to Macs

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Steve French commit 7db0a6efdc3e990cdfd4b24820d010e9eb7890ad upstream. Macs send the maximum buffer size in response on ioctl to validate negotiate security information, which causes us to fai

[PATCH 3.16 115/134] ceph: fix memory leak in __ceph_setxattr()

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Luis Henriques commit eeca958dce0a9231d1969f86196653eb50fcc9b3 upstream. The ceph_inode_xattr needs to be released when removing an xattr. Easily reproducible running the 'generic/020' test f

[PATCH 3.16 116/134] of: fix sparse warning in of_pci_range_parser_one

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Rob Herring commit eb3100365791b06242b8bb5c3c2854ba41dabfbc upstream. sparse gives the following warning for 'pci_space': ../drivers/of/address.c:266:26: warning: incorrect type in assignment

[PATCH 3.16 113/134] lockdep: teach lockdep about memalloc_noio_save

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Nikolay Borisov commit 6d7225f0cc1a1fc32cf5dd01b4ab4b8a34c7cdb4 upstream. Patch series "scope GFP_NOFS api", v5. This patch (of 7): Commit 21caf2fc1931 ("mm: teach mm by current context info

[PATCH 3.16 105/134] metag/uaccess: Fix access_ok()

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: James Hogan commit 8a8b56638bcac4e6488bf95a0f9f4b19a2fb upstream. The __user_bad() macro used by access_ok() has a few corner cases noticed by Al Viro where it doesn't behave correctly:

[PATCH 3.2 48/59] ip6_tunnel: Fix missing tunnel encapsulation limit option

3.2.92-rc1 review patch. If anyone has any objections, please let me know. -- From: Craig Gallek commit 89a23c8b528bd2c89f3981573d6cd7d23840c8a6 upstream. The IPv6 tunneling code tries to insert IPV6_TLV_TNL_ENCAP_LIMIT and IPV6_TLV_PADN options when an encapsulation limit is

[PATCH 3.16 112/134] um: Fix PTRACE_POKEUSER on x86_64

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Richard Weinberger commit 9abc74a22d85ab29cef9896a2582a530da7e79bf upstream. This is broken since ever but sadly nobody noticed. Recent versions of GDB set DR_CONTROL unconditionally and UML d

[PATCH 3.16 108/134] Set unicode flag on cifs echo request to avoid Mac error

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Steve French commit 26c9cb668c7fbf9830516b75d8bee70b699ed449 upstream. Mac requires the unicode flag to be set for cifs, even for the smb echo request (which doesn't have strings). Without th

[PATCH 3.16 103/134] drm/edid: Add 10 bpc quirk for LGD 764 panel in HP zBook 17 G2

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Mario Kleiner commit e345da82bd6bdfa8492f80b3ce4370acfd868d95 upstream. The builtin eDP panel in the HP zBook 17 G2 supports 10 bpc, as advertised by the Laptops product specs and verified via

[PATCH 3.16 106/134] tcp: fix wraparound issue in tcp_lp

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit a9f11f963a546fea9144f6a6d1a307e814a387e7 upstream. Be careful when comparing tcp_time_stamp to some u32 quantity, otherwise result can be surprising. Fixes: 7c106d7e782b (

[PATCH 3.16 081/134] fanotify: don't expose EOPENSTALE to userspace

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Amir Goldstein commit 4ff33aafd32e084f5ee7faa54ba06e95f8b1b8af upstream. When delivering an event to userspace for a file on an NFS share, if the file is deleted on server side before user rea

[PATCH 3.16 110/134] tg3: don't clear stats while tg3_close

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: YueHaibing commit 37a7fdf2892be124545ddaf99b85de576121476c upstream. Now tg3 NIC's stats will be cleared after ifdown/ifup. bond_get_stats traverse its salves to get statistics,cumulative the

[PATCH 3.16 096/134] power: supply: isp1704: Fix unchecked return value of devm_kzalloc

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Pan Bian commit 8b20839988f1ed5e534b270f3776709b640dc7e0 upstream. Function devm_kzalloc() will return a NULL pointer. However, in function isp1704_charger_probe(), the return value of devm_kz

[PATCH 3.16 093/134] ext4: evict inline data when writing to memory map

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Biggers commit 7b4cc9787fe35b3ee2dfb1c35e22eafc32e00c33 upstream. Currently the case of writing via mmap to a file with inline data is not handled. This is maybe a rare case since it req

[PATCH 3.16 107/134] cifs: small underflow in cnvrtDosUnixTm()

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 564277eceeca01e02b1ef3e141cfb939184601b4 upstream. January is month 1. There is no zero-th month. If someone passes a zero month then it means we read from one space bef

Re: [PATCH v3 5/5] usb: xhci: Handle USB transaction error on address command

On 16.08.2017 05:15, Lu Baolu wrote: Hi, On 08/15/2017 07:30 PM, Mathias Nyman wrote: On 11.08.2017 05:41, Lu Baolu wrote: Xhci driver handles USB transaction errors on transfer events, but transaction errors are possible on address device command completion events as well. The xHCI specifica

[PATCH 3.2 49/59] ipv6: Need to export ipv6_push_frag_opts for tunneling now.

3.2.92-rc1 review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" commit 5b8481fa42ac58484d633b558579e302aead64c1 upstream. Since that change also made the nfrag function not necessary for exports, remove it. Fixes: 89a23c8b528b ("ip6_tunne

[PATCH 3.16 099/134] ip6_tunnel: Fix missing tunnel encapsulation limit option

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Craig Gallek commit 89a23c8b528bd2c89f3981573d6cd7d23840c8a6 upstream. The IPv6 tunneling code tries to insert IPV6_TLV_TNL_ENCAP_LIMIT and IPV6_TLV_PADN options when an encapsulation limit is

Re: [PATCH v2] irqchip/armada-370-xp: Enable MSI-X support

On 18/08/17 13:59, Stefan Roese wrote: > Armada XP does not only support MSI, but also MSI-X. This patch sets > the MSI_FLAG_PCI_MSIX flag in the interrupt controller driver which > is the only change necessary to enable MSI-X support on this SoC. As > the Linux PCI MSI-X infrastructure takes care

[PATCH 3.16 098/134] Input: twl4030-pwrbutton - use correct device for irq request

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Sebastian Reichel commit 3071e9dd6cd3f2290d770117330f2c8b2e9a97e4 upstream. The interrupt should be requested for the platform device and not for the input device. Fixes: 7f9ce649d267 ("Input

[PATCH 3.16 100/134] ipv6: Need to export ipv6_push_frag_opts for tunneling now.

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" commit 5b8481fa42ac58484d633b558579e302aead64c1 upstream. Since that change also made the nfrag function not necessary for exports, remove it. Fixes: 89a23c8b528b ("ip6_tunn

[PATCH 3.16 097/134] power: supply: pda_power: move from timer to delayed_work

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Michael Trimarchi commit 633e8799ddc09431be2744c4a1efdbda13af2b0b upstream. This changed is needed to avoid locking problem during boot as shown: <5>[8.824096] Registering SWP/SWPB emulat

[PATCH 3.16 101/134] dm bufio: avoid a possible ABBA deadlock

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka commit 1b0fb5a5b2dc0dddcfa575060441a7176ba7ac37 upstream. __get_memory_limit() tests if dm_bufio_cache_size changed and calls __cache_size_refresh() if it did. It takes dm_buf

[PATCH 3.16 091/134] IB/core: For multicast functions, verify that LIDs are multicast LIDs

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: "Michael J. Ruhl" commit 8561eae60ff9417a50fa1fb2b83ae950dc5c1e21 upstream. The Infiniband spec defines "A multicast address is defined by a MGID and a MLID" (section 10.5). Currently the MLI

[PATCH 0/3] JFS: Adjustments for several function implementations

From: Markus Elfring Date: Fri, 18 Aug 2017 15:22:11 +0200 Three update suggestions were taken into account from static source code analysis. Markus Elfring (3): Delete an error message for a failed memory allocation in diMount() Improve size determinations in five functions Adjust 67 chec

Re: [PATCH v7 2/2] sched/rt: Add support for SD_PREFER_SIBLING on find_lowest_rq()

On Fri, 18 Aug 2017 15:05:13 +0900 Byungchul Park wrote: > It would be better to avoid pushing tasks to other cpu within > a SD_PREFER_SIBLING domain, instead, get more chances to check other > siblings. > > Signed-off-by: Byungchul Park Reviewed-by: Steven Rostedt (VMware) Note, we really s

[PATCH 3.16 094/134] net: ethernet: ucc_geth: fix MEM_PART_MURAM mode

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Christophe Leroy commit 8b8642af15ed14b9a7a34d3401afbcc274533e13 upstream. Since commit 5093bb965a163 ("powerpc/QE: switch to the cpm_muram implementation"), muram area is not part of immrbar

Re: [PATCH net-next] net: hns3: Add support to change MTU in hardware & netdev

On Fri, Aug 18, 2017 at 12:35:58PM +0100, Salil Mehta wrote: > This patch adds the following support to the HNS3 driver: > 1. Support to change the Maximum Transmission Unit of a >netdevice and of a port in hardware . > 2. Initializes the supported MTU range for the netdevice. > > Signed-off-b

[PATCH 3.16 095/134] Bluetooth: Fix user channel for 32bit userspace on 64bit kernel

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Szymon Janc commit ab89f0bdd63a3721f7cd3f064f39fc4ac7ca14d4 upstream. Running 32bit userspace on 64bit kernel results in MSG_CMSG_COMPAT being defined as 0x8000. This results in sendmsg fa

[PATCH 3.16 082/134] usb: Make sure usb/phy/of gets built-in

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Alexey Brodkin commit 3d6159640da9c9175d1ca42f151fc1a14caded59 upstream. DWC3 driver uses of_usb_get_phy_mode() which is implemented in drivers/usb/phy/of.c and in bare minimal configuration i

[PATCH 3.16 092/134] libata: reject passthrough WRITE SAME requests

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Christoph Hellwig commit c6ade20f5e50e188d20b711a618b20dd1d50457e upstream. The WRITE SAME to TRIM translation rewrites the DATA OUT buffer. While the SCSI code accomodates for this by passin

[PATCH 3.16 083/134] x86/mm: Fix flush_tlb_page() on Xen

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Andy Lutomirski commit dbd68d8e84c606673ebbcf15862f8c155fa92326 upstream. flush_tlb_page() passes a bogus range to flush_tlb_others() and expects the latter to fix it up. native_flush_tlb_oth

[PATCH 3.16 090/134] IB/core: If the MGID/MLID pair is not on the list return an error

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: "Michael J. Ruhl" commit 20c7840a77ddcb2ed2fbd66e8197db2868495751 upstream. A list of MGID/MLID pairs is built when doing a multicast attach. When the multicast detach is called, the list is

Re: [PATCH V10 1/3] PCI: introduce pci_bus_wait_crs() function

On 8/17/2017 11:00 PM, Bjorn Helgaas wrote: > On Fri, Aug 11, 2017 at 12:56:34PM -0400, Sinan Kaya wrote: >> Kernel is hiding Configuration Request Retry Status (CRS) inside >> pci_bus_read_dev_vendor_id() function. We are looking to add support for >> Function Level Reset (FLR) where vendor id rea

[PATCH 3.16 084/134] usb: misc: legousbtower: Fix buffers on stack

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Maksim Salau commit 942a48730faf149ccbf3e12ac718aee120bb3529 upstream. Allocate buffers on HEAP instead of STACK for local structures that are to be received using usb_control_msg(). Signed-o

[PATCH 3.16 078/134] dm btree: fix for dm_btree_find_lowest_key()

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Vinothkumar Raja commit 7d1fedb6e96a960aa91e4ff70714c3fb09195a5a upstream. dm_btree_find_lowest_key() is giving incorrect results. find_key() traverses the btree correctly for finding the hig

[PATCH] staging/rts5208: fix incorrect shift to extract upper nybble

From: Colin Ian King The mask of sns_key_info1 suggests the upper nybble is being extracted however the following shift of 8 bits is too large and always results in 0. Fix this by shifting only by 4 bits to correctly get the upper nybble. Detected by CoverityScan, CID#142891 ("Operands don't af

Re: [PATCH v3 1/5] perf annotate stdio: Support --show-nr-samples option

Em Fri, Aug 18, 2017 at 05:46:48PM +0900, Taeung Song escreveu: > Add --show-nr-samples option to perf-annotate > so that it corresponds with perf-report. So, at this point I tried to test it and forgot this was just about --stdio, which confused me, so I added the following patch, that I'll lift

[PATCH 3.16 088/134] staging: gdm724x: gdm_mux: Remove create_workqueue()

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Amitoj Kaur Chawla commit c272dc2da14cde0bfd9495a5aafb8e3e94f35601 upstream. With concurrency managed workqueues, use of dedicated workqueues can be replaced by using system_wq. Drop mux_rx_wq

[PATCH 3.16 086/134] dm ioctl: prevent stack leak in dm ioctl call

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Adrian Salido commit 4617f564c06117c7d1b611be49521a4430042287 upstream. When calling a dm ioctl that doesn't process any data (IOCTL_FLAGS_NO_PARAMS), the contents of the data field in struct

[PATCH 3.16 085/134] mfd: omap-usb-tll: Fix inverted bit use for USB TLL mode

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Tony Lindgren commit 8b8a84c54aff4256d592dc18346c65ecf6811b45 upstream. Commit 16fa3dc75c22 ("mfd: omap-usb-tll: HOST TLL platform driver") added support for USB TLL, but uses OMAP_TLL_CHANNEL

[PATCH 3.16 087/134] staging: rtl8188eu: prevent an underflow in rtw_check_beacon_data()

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 784047eb2d3405a35087af70cba46170c5576b25 upstream. The "len" could be as low as -14 so we should check for negatives. Fixes: 9a7fe54ddc3a ("staging: r8188eu: Add source f

[PATCH 3.16 089/134] staging: gdm724x: gdm_mux: fix use-after-free on module unload

3.16.47-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit b58f45c8fc301fe83ee28cad3e64686c19e78f1c upstream. Make sure to deregister the USB driver before releasing the tty driver to avoid use-after-free in the USB disconnect call

[PATCH 3.2 50/59] tcp: fix wraparound issue in tcp_lp

3.2.92-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit a9f11f963a546fea9144f6a6d1a307e814a387e7 upstream. Be careful when comparing tcp_time_stamp to some u32 quantity, otherwise result can be surprising. Fixes: 7c106d7e782b ("

<    1   2   3   4   5   6   7   8   9   10   >