Re: [PATCH bpf-next v4 01/30] mm: support nesting memalloc_use_memcg()

2020-08-21 Thread Shakeel Butt
On Fri, Aug 21, 2020 at 8:01 AM Roman Gushchin wrote: > > From: Johannes Weiner > > Support nesting of memalloc_use_memcg() to be able to use > from an interrupt context. > > Make memalloc_use_memcg() return the old memcg and convert existing > users to a stacking model. Delete the unused

[PATCH 2/2] MIPS: Add support for ZSTD-compressed kernels

2020-08-21 Thread Paul Cercueil
Add support for self-extracting kernels with a ZSTD compression. Tested on a kernel for the GCW-Zero, it allows to reduce the size of the kernel file from 4.1 MiB with gzip to 3.5 MiB with ZSTD, and boots just as fast. Signed-off-by: Paul Cercueil --- arch/mips/Kconfig |

[PATCH v2 08/10] fs/ntfs3: Add Kconfig, Makefile and doc

2020-08-21 Thread Konstantin Komarov
This adds fs/ntfs3 Kconfig, Makefile and Documentation file Signed-off-by: Konstantin Komarov --- Documentation/filesystems/ntfs3.rst | 93 + fs/ntfs3/Kconfig| 23 +++ fs/ntfs3/Makefile | 11 3 files changed, 127

[PATCH 1/2] lib: decompress_unzstd: Limit output size

2020-08-21 Thread Paul Cercueil
The zstd decompression code, as it is right now, will have internal values overflow on 32-bit systems when the output size is LONG_MAX. Until someone smarter than me can figure out how to fix the zstd code properly, limit the destination buffer size to 512 MiB, which should be enough for

[PATCH v2 03/10] fs/ntfs3: Add bitmap

2020-08-21 Thread Konstantin Komarov
Bitmap implementation Signed-off-by: Konstantin Komarov --- fs/ntfs3/bitfunc.c | 144 + fs/ntfs3/bitmap.c | 1545 2 files changed, 1689 insertions(+) create mode 100644 fs/ntfs3/bitfunc.c create mode 100644 fs/ntfs3/bitmap.c diff --git

[PATCH AUTOSEL 4.4 16/22] drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open

2020-08-21 Thread Sasha Levin
From: Aditya Pakki [ Upstream commit bfad51c7633325b5d4b32444efe04329d53297b2 ] nouveau_fbcon_open() calls calls pm_runtime_get_sync() that increments the reference count. In case of failure, decrement the ref count before returning the error. Signed-off-by: Aditya Pakki Signed-off-by: Ben

Re: [RFC PATCH 2/3] opp: Set required OPPs in reverse order when scaling down

2020-08-21 Thread Stephan Gerhold
Hi Viresh, On Thu, Jul 30, 2020 at 10:01:45AM +0200, Stephan Gerhold wrote: > The OPP core already has well-defined semantics to ensure required > OPPs/regulators are set before/after the frequency change, depending > on if we scale up or down. > > Similar requirements might exist for the order

[PATCH AUTOSEL 4.4 18/22] locking/lockdep: Fix overflow in presentation of average lock-time

2020-08-21 Thread Sasha Levin
From: Chris Wilson [ Upstream commit a7ef9b28aa8d72a1656fa6f0a01bbd1493886317 ] Though the number of lock-acquisitions is tracked as unsigned long, this is passed as the divisor to div_s64() which interprets it as a s32, giving nonsense values with more than 2 billion acquisitons. E.g.

Re: [PATCH v9 4/6] ACPI: HMAT: Fix handling of changes from ACPI 6.2 to ACPI 6.3

2020-08-21 Thread Jonathan Cameron
On Fri, 21 Aug 2020 09:59:23 -0500 Bjorn Helgaas wrote: > On Fri, Aug 21, 2020 at 08:46:22AM -0500, Bjorn Helgaas wrote: > > On Fri, Aug 21, 2020 at 01:59:01PM +0100, Jonathan Cameron wrote: > > > On Fri, 21 Aug 2020 07:13:56 -0500 > > > Bjorn Helgaas wrote: > > > > > > > [+cc Keith,

[PATCH AUTOSEL 4.4 17/22] drm/nouveau: Fix reference count leak in nouveau_connector_detect

2020-08-21 Thread Sasha Levin
From: Aditya Pakki [ Upstream commit 990a1162986e8eff7ca18cc5a0e03b4304392ae2 ] nouveau_connector_detect() calls pm_runtime_get_sync and in turn increments the reference count. In case of failure, decrement the ref count before returning the error. Signed-off-by: Aditya Pakki Signed-off-by:

[PATCH AUTOSEL 4.4 13/22] PCI: Fix pci_create_slot() reference count leak

2020-08-21 Thread Sasha Levin
From: Qiushi Wu [ Upstream commit 8a94644b440eef5a7b9c104ac8aa7a7f413e35e5 ] kobject_init_and_add() takes a reference even when it fails. If it returns an error, kobject_put() must be called to clean up the memory associated with the object. When kobject_init_and_add() fails, call

[PATCH AUTOSEL 4.4 15/22] mips/vdso: Fix resource leaks in genvdso.c

2020-08-21 Thread Sasha Levin
From: Peng Fan [ Upstream commit a859647b4e6bfeb192284d27d24b6a0c914cae1d ] Close "fd" before the return of map_vdso() and close "out_file" in main(). Signed-off-by: Peng Fan Signed-off-by: Thomas Bogendoerfer Signed-off-by: Sasha Levin --- arch/mips/vdso/genvdso.c | 10 ++ 1 file

Re: [PATCH 5.4 000/152] 5.4.60-rc1 review

2020-08-21 Thread Naresh Kamboju
On Thu, 20 Aug 2020 at 22:54, Naresh Kamboju wrote: > > On Thu, 20 Aug 2020 at 15:15, Greg Kroah-Hartman > wrote: > > > > This is the start of the stable review cycle for the 5.4.60 release. > > There are 152 patches in this series, all will be posted as a response > > to this one. If anyone

Re: [PATCH 3/7] mm: Add an 'end' parameter to find_get_entries

2020-08-21 Thread Matthew Wilcox
On Fri, Aug 21, 2020 at 06:07:59PM +0200, Jan Kara wrote: > On Wed 19-08-20 16:05:51, Matthew Wilcox (Oracle) wrote: > > This simplifies the callers and leads to a more efficient implementation > > since the XArray has this functionality already. > > > > Signed-off-by: Matthew Wilcox (Oracle) >

[PATCH AUTOSEL 4.4 12/22] selftests/powerpc: Purge extra count_pmc() calls of ebb selftests

2020-08-21 Thread Sasha Levin
From: "Desnes A. Nunes do Rosario" [ Upstream commit 3337bf41e0dd70b4064cdf60acdfcdc2d050066c ] An extra count on ebb_state.stats.pmc_count[PMC_INDEX(pmc)] is being per- formed when count_pmc() is used to reset PMCs on a few selftests. This extra pmc_count can occasionally invalidate results,

[PATCH AUTOSEL 4.4 10/22] drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails

2020-08-21 Thread Sasha Levin
From: Navid Emamdoost [ Upstream commit f79f94765f8c39db0b7dec1d335ab046aac03f20 ] The call to pm_runtime_get_sync increments the counter even in case of failure, leading to incorrect ref count. In case of failure, decrement the ref count before returning. Signed-off-by: Navid Emamdoost

[PATCH AUTOSEL 4.4 09/22] drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config

2020-08-21 Thread Sasha Levin
From: Navid Emamdoost [ Upstream commit e008fa6fb41544b63973a529b704ef342f47cc65 ] in amdgpu_display_crtc_set_config, the call to pm_runtime_get_sync increments the counter even in case of failure, leading to incorrect ref count. In case of failure, decrement the ref count before returning.

Re: [PATCH 1/1] mm, oom_adj: don't loop through tasks in __set_oom_adj when not necessary

2020-08-21 Thread Oleg Nesterov
On 08/21, Suren Baghdasaryan wrote: > > On Fri, Aug 21, 2020 at 4:16 AM Oleg Nesterov wrote: > > > > bool probably_has_other_mm_users(tsk) > > { > > return atomic_read_acquire(>mm->mm_users) > > > atomic_read(>signal->live); > > } >

[PATCH AUTOSEL 4.4 11/22] scsi: lpfc: Fix shost refcount mismatch when deleting vport

2020-08-21 Thread Sasha Levin
From: Dick Kennedy [ Upstream commit 03dbfe0668e6692917ac278883e0586cd7f7d753 ] When vports are deleted, it is observed that there is memory/kthread leakage as the vport isn't fully being released. There is a shost reference taken in scsi_add_host_dma that is not released during

[PATCH AUTOSEL 4.4 08/22] drm/amd/display: fix ref count leak in amdgpu_drm_ioctl

2020-08-21 Thread Sasha Levin
From: Navid Emamdoost [ Upstream commit 5509ac65f2fe5aa3c0003237ec629ca55024307c ] in amdgpu_drm_ioctl the call to pm_runtime_get_sync increments the counter even in case of failure, leading to incorrect ref count. In case of failure, decrement the ref count before returning. Signed-off-by:

[PATCH AUTOSEL 4.4 01/22] ALSA: pci: delete repeated words in comments

2020-08-21 Thread Sasha Levin
From: Randy Dunlap [ Upstream commit c7fabbc51352f50cc58242a6dc3b9c1a3599849b ] Drop duplicated words in sound/pci/. {and, the, at} Signed-off-by: Randy Dunlap Link: https://lore.kernel.org/r/20200806021926.32418-1-rdun...@infradead.org Signed-off-by: Takashi Iwai Signed-off-by: Sasha Levin

[PATCH AUTOSEL 4.4 05/22] drm/amdkfd: Fix reference count leaks.

2020-08-21 Thread Sasha Levin
From: Qiushi Wu [ Upstream commit 20eca0123a35305e38b344d571cf32768854168c ] kobject_init_and_add() takes reference even when it fails. If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Signed-off-by: Qiushi Wu

[PATCH AUTOSEL 4.4 06/22] drm/radeon: fix multiple reference count leak

2020-08-21 Thread Sasha Levin
From: Aditya Pakki [ Upstream commit 6f2e8acdb48ed166b65d47837c31b177460491ec ] On calling pm_runtime_get_sync() the reference count of the device is incremented. In case of failure, decrement the reference count before returning the error. Signed-off-by: Aditya Pakki Signed-off-by: Alex

[PATCH AUTOSEL 4.4 07/22] drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms

2020-08-21 Thread Sasha Levin
From: Navid Emamdoost [ Upstream commit 9ba8923cbbe11564dd1bf9f3602add9a9cfbb5c6 ] in amdgpu_driver_open_kms the call to pm_runtime_get_sync increments the counter even in case of failure, leading to incorrect ref count. In case of failure, decrement the ref count before returning.

[PATCH AUTOSEL 4.4 04/22] scsi: target: tcmu: Fix crash on ARM during cmd completion

2020-08-21 Thread Sasha Levin
From: Bodo Stroesser [ Upstream commit 5a0c256d96f020e4771f6fd5524b80f89a2d3132 ] If tcmu_handle_completions() has to process a padding shorter than sizeof(struct tcmu_cmd_entry), the current call to tcmu_flush_dcache_range() with sizeof(struct tcmu_cmd_entry) as length param is wrong and

[PATCH AUTOSEL 4.4 03/22] media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq()

2020-08-21 Thread Sasha Levin
From: Jia-Ju Bai [ Upstream commit 6499a0db9b0f1e903d52f8244eacc1d4be00eea2 ] The value av7110->debi_virt is stored in DMA memory, and it is assigned to data, and thus data[0] can be modified at any time by malicious hardware. In this case, "if (data[0] < 2)" can be passed, but then data[0] can

[PATCH AUTOSEL 4.9 26/26] EDAC/ie31200: Fallback if host bridge device is already initialized

2020-08-21 Thread Sasha Levin
From: Jason Baron [ Upstream commit 709ed1bcef12398ac1a35c149f3e582db04456c2 ] The Intel uncore driver may claim some of the pci ids from ie31200 which means that the ie31200 edac driver will not initialize them as part of pci_register_driver(). Let's add a fallback for this case to

[PATCH AUTOSEL 4.9 25/26] scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del()

2020-08-21 Thread Sasha Levin
From: Javed Hasan [ Upstream commit e95b4789ff4380733006836d28e554dc296b2298 ] In fcoe_sysfs_fcf_del(), we first deleted the fcf from the list and then freed it if ctlr_dev was not NULL. This was causing a memory leak. Free the fcf even if ctlr_dev is NULL. Link:

[PATCH AUTOSEL 4.4 02/22] ASoC: tegra: Fix reference count leaks.

2020-08-21 Thread Sasha Levin
From: Qiushi Wu [ Upstream commit deca195383a6085be62cb453079e03e04d618d6e ] Calling pm_runtime_get_sync increments the counter even in case of failure, causing incorrect ref count if pm_runtime_put is not called in error handling paths. Call pm_runtime_put if pm_runtime_get_sync fails.

[PATCH AUTOSEL 4.9 24/26] ceph: fix potential mdsc use-after-free crash

2020-08-21 Thread Sasha Levin
From: Xiubo Li [ Upstream commit fa9967734227b44acb1b6918033f9122dc7825b9 ] Make sure the delayed work stopped before releasing the resources. cancel_delayed_work_sync() will only guarantee that the work finishes executing if the work is already in the ->worklist. That means after the

Re: [PATCH 1/1] mm, oom_adj: don't loop through tasks in __set_oom_adj when not necessary

2020-08-21 Thread Oleg Nesterov
again, don't really understand... On 08/21, Suren Baghdasaryan wrote: > > Actually, reviewing again and considering where list_add_tail_rcu is > happening, maybe the race with clone(CLONE_VM) does not introduce > false negatives. I think it does... Whatever we check, mm_users or MMF_PROC_SHARED,

[PATCH AUTOSEL 4.9 23/26] scsi: iscsi: Do not put host in iscsi_set_flashnode_param()

2020-08-21 Thread Sasha Levin
From: Jing Xiangfeng [ Upstream commit 68e12e5f61354eb42cfffbc20a693153fc39738e ] If scsi_host_lookup() fails we will jump to put_host which may cause a panic. Jump to exit_set_fnode instead. Link: https://lore.kernel.org/r/20200615081226.183068-1-jingxiangf...@huawei.com Reviewed-by: Mike

Re: mountinfo contents changed when rootfs is ramfs

2020-08-21 Thread Pranay Srivastava
On Wed, Aug 19, 2020 at 5:20 PM Pranay Srivastava wrote: > > Hello, > > I'm running a system where rootfs is ramfs. For kernel version 5.2.11 > > # cat /proc/self/mountinfo > 0 0 0:1 / / rw - rootfs rootfs rw > %<---snip>% > > while for kernel 5.4.58 > # cat /proc/self/mountinfo > 0 0 0:1 / / rw

[PATCH AUTOSEL 4.9 22/26] locking/lockdep: Fix overflow in presentation of average lock-time

2020-08-21 Thread Sasha Levin
From: Chris Wilson [ Upstream commit a7ef9b28aa8d72a1656fa6f0a01bbd1493886317 ] Though the number of lock-acquisitions is tracked as unsigned long, this is passed as the divisor to div_s64() which interprets it as a s32, giving nonsense values with more than 2 billion acquisitons. E.g.

[PATCH AUTOSEL 4.9 21/26] drm/nouveau: Fix reference count leak in nouveau_connector_detect

2020-08-21 Thread Sasha Levin
From: Aditya Pakki [ Upstream commit 990a1162986e8eff7ca18cc5a0e03b4304392ae2 ] nouveau_connector_detect() calls pm_runtime_get_sync and in turn increments the reference count. In case of failure, decrement the ref count before returning the error. Signed-off-by: Aditya Pakki Signed-off-by:

[PATCH AUTOSEL 4.9 18/26] mips/vdso: Fix resource leaks in genvdso.c

2020-08-21 Thread Sasha Levin
From: Peng Fan [ Upstream commit a859647b4e6bfeb192284d27d24b6a0c914cae1d ] Close "fd" before the return of map_vdso() and close "out_file" in main(). Signed-off-by: Peng Fan Signed-off-by: Thomas Bogendoerfer Signed-off-by: Sasha Levin --- arch/mips/vdso/genvdso.c | 10 ++ 1 file

[PATCH AUTOSEL 4.9 20/26] drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open

2020-08-21 Thread Sasha Levin
From: Aditya Pakki [ Upstream commit bfad51c7633325b5d4b32444efe04329d53297b2 ] nouveau_fbcon_open() calls calls pm_runtime_get_sync() that increments the reference count. In case of failure, decrement the ref count before returning the error. Signed-off-by: Aditya Pakki Signed-off-by: Ben

Re: [PATCH v9 4/6] ACPI: HMAT: Fix handling of changes from ACPI 6.2 to ACPI 6.3

2020-08-21 Thread Jonathan Cameron
On Fri, 21 Aug 2020 08:46:22 -0500 Bjorn Helgaas wrote: > On Fri, Aug 21, 2020 at 01:59:01PM +0100, Jonathan Cameron wrote: > > On Fri, 21 Aug 2020 07:13:56 -0500 > > Bjorn Helgaas wrote: > > > > > [+cc Keith, author of 3accf7ae37a9 ("acpi/hmat: Parse and report > > > heterogeneous memory")]

[PATCH AUTOSEL 4.9 17/26] rtlwifi: rtl8192cu: Prevent leaking urb

2020-08-21 Thread Sasha Levin
From: Reto Schneider [ Upstream commit 03128643eb5453a798db5770952c73dc64fcaf00 ] If usb_submit_urb fails the allocated urb should be unanchored and released. Signed-off-by: Reto Schneider Signed-off-by: Kalle Valo Link: https://lore.kernel.org/r/20200622132113.14508-3-c...@reto-schneider.ch

Re: [PATCH v2] tty: ipwireless: fix error handling

2020-08-21 Thread Tong Zhang
On Fri, Aug 21, 2020 at 5:29 AM David Sterba wrote: > This paragraph should not be in the changelog. The patches to ipwireless > go via Greg's tree, please send an updated v3 so he can just apply that > without further edits. Thanks. Thanks David! I've made another patch - hope this one works.

[PATCH AUTOSEL 4.9 15/26] omapfb: fix multiple reference count leaks due to pm_runtime_get_sync

2020-08-21 Thread Sasha Levin
From: Aditya Pakki [ Upstream commit 78c2ce9bde70be5be7e3615a2ae7024ed8173087 ] On calling pm_runtime_get_sync() the reference count of the device is incremented. In case of failure, decrement the reference count before returning the error. Signed-off-by: Aditya Pakki Cc: k...@umn.edu Cc:

[PATCH AUTOSEL 4.9 16/26] PCI: Fix pci_create_slot() reference count leak

2020-08-21 Thread Sasha Levin
From: Qiushi Wu [ Upstream commit 8a94644b440eef5a7b9c104ac8aa7a7f413e35e5 ] kobject_init_and_add() takes a reference even when it fails. If it returns an error, kobject_put() must be called to clean up the memory associated with the object. When kobject_init_and_add() fails, call

Re: [PATCH v3 0/2] Add period size constraint for Atom Chromebook

2020-08-21 Thread Mark Brown
On Fri, 31 Jul 2020 20:26:03 +0800, Brent Lu wrote: > Two different constraints are implemented: one is in platform's CPU > DAI to enforce the period to be multiple of 1ms to align with firmware > design. The other is in Atom Chromebook's machine driver to use 240 as > period size which is

Re: [PATCH v2] regulator: dbx500: Remove unused debugfs goto label

2020-08-21 Thread Mark Brown
On Fri, 21 Aug 2020 11:48:23 -0300, Fabio Estevam wrote: > The following build warning is seen after commit 8bdaa43808b7 ("regulator: > dbx500: no need to check return value of debugfs_create functions"): > > drivers/regulator/dbx500-prcmu.c:144:1: warning: label 'exit_no_debugfs' > defined but

Re: [PATCH v2 00/15] regulator: Fix W=1 build warning when CONFIG_OF=n

2020-08-21 Thread Mark Brown
On Fri, 21 Aug 2020 11:11:35 +0800, Jisheng Zhang wrote: > Fixing W=1 build warning when no support for device tree is there. > > Since v1: > - fix the warning with __maybe_unused instead of CONFIG_OF macro > - add 3 more patches to fix the same issue > > Jisheng Zhang (15): > regulator:

Re: [PATCH] ASoC: da7219: Fix I/O voltage range configuration during probe

2020-08-21 Thread Mark Brown
On Fri, 21 Aug 2020 15:22:59 +0100, Adam Thomson wrote: > Previous improvements around handling device and codec level > probe functionality added the possibility of the voltage level > being undefined for the scenario where the IO voltage retrieved > from the regulator supply was below 1.2V,

Re: [PATCH] regulator: dbx500: Remove unused debugfs goto label

2020-08-21 Thread Mark Brown
On Fri, 21 Aug 2020 11:22:29 -0300, Fabio Estevam wrote: > The following build warning is seen after commit 8bdaa43808b7 ("regulator: > dbx500: no need to check return value of debugfs_create functions"): > > drivers/regulator/dbx500-prcmu.c:144:1: warning: label 'exit_no_debugfs' > defined but

[PATCH AUTOSEL 4.9 14/26] selftests/powerpc: Purge extra count_pmc() calls of ebb selftests

2020-08-21 Thread Sasha Levin
From: "Desnes A. Nunes do Rosario" [ Upstream commit 3337bf41e0dd70b4064cdf60acdfcdc2d050066c ] An extra count on ebb_state.stats.pmc_count[PMC_INDEX(pmc)] is being per- formed when count_pmc() is used to reset PMCs on a few selftests. This extra pmc_count can occasionally invalidate results,

Re: [PATCH 1/2] ASoC: bindings: fsl-asoc-card: add compatible string for TLV320AIC32x4 codec

2020-08-21 Thread Mark Brown
On Fri, 21 Aug 2020 09:11:52 +0200, Matthias Schiffer wrote: > The TLV320AIC32x4 is commonly used on TQ-Systems starterkit mainboards > for i.MX-based SoMs (i.MX6Q/DL, i.MX6UL, i.MX7) and LS1021A. Applied to https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound.git for-next Thanks!

[PATCH AUTOSEL 4.9 11/26] drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config

2020-08-21 Thread Sasha Levin
From: Navid Emamdoost [ Upstream commit e008fa6fb41544b63973a529b704ef342f47cc65 ] in amdgpu_display_crtc_set_config, the call to pm_runtime_get_sync increments the counter even in case of failure, leading to incorrect ref count. In case of failure, decrement the ref count before returning.

[PATCH AUTOSEL 4.9 08/26] drm/radeon: fix multiple reference count leak

2020-08-21 Thread Sasha Levin
From: Aditya Pakki [ Upstream commit 6f2e8acdb48ed166b65d47837c31b177460491ec ] On calling pm_runtime_get_sync() the reference count of the device is incremented. In case of failure, decrement the reference count before returning the error. Signed-off-by: Aditya Pakki Signed-off-by: Alex

[PATCH AUTOSEL 4.9 13/26] scsi: lpfc: Fix shost refcount mismatch when deleting vport

2020-08-21 Thread Sasha Levin
From: Dick Kennedy [ Upstream commit 03dbfe0668e6692917ac278883e0586cd7f7d753 ] When vports are deleted, it is observed that there is memory/kthread leakage as the vport isn't fully being released. There is a shost reference taken in scsi_add_host_dma that is not released during

[PATCH AUTOSEL 4.9 12/26] drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails

2020-08-21 Thread Sasha Levin
From: Navid Emamdoost [ Upstream commit f79f94765f8c39db0b7dec1d335ab046aac03f20 ] The call to pm_runtime_get_sync increments the counter even in case of failure, leading to incorrect ref count. In case of failure, decrement the ref count before returning. Signed-off-by: Navid Emamdoost

[PATCH AUTOSEL 4.9 05/26] scsi: target: tcmu: Fix crash on ARM during cmd completion

2020-08-21 Thread Sasha Levin
From: Bodo Stroesser [ Upstream commit 5a0c256d96f020e4771f6fd5524b80f89a2d3132 ] If tcmu_handle_completions() has to process a padding shorter than sizeof(struct tcmu_cmd_entry), the current call to tcmu_flush_dcache_range() with sizeof(struct tcmu_cmd_entry) as length param is wrong and

[PATCH AUTOSEL 4.9 09/26] drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms

2020-08-21 Thread Sasha Levin
From: Navid Emamdoost [ Upstream commit 9ba8923cbbe11564dd1bf9f3602add9a9cfbb5c6 ] in amdgpu_driver_open_kms the call to pm_runtime_get_sync increments the counter even in case of failure, leading to incorrect ref count. In case of failure, decrement the ref count before returning.

[PATCH AUTOSEL 4.9 10/26] drm/amd/display: fix ref count leak in amdgpu_drm_ioctl

2020-08-21 Thread Sasha Levin
From: Navid Emamdoost [ Upstream commit 5509ac65f2fe5aa3c0003237ec629ca55024307c ] in amdgpu_drm_ioctl the call to pm_runtime_get_sync increments the counter even in case of failure, leading to incorrect ref count. In case of failure, decrement the ref count before returning. Signed-off-by:

[PATCH AUTOSEL 4.9 07/26] drm/amdkfd: Fix reference count leaks.

2020-08-21 Thread Sasha Levin
From: Qiushi Wu [ Upstream commit 20eca0123a35305e38b344d571cf32768854168c ] kobject_init_and_add() takes reference even when it fails. If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Signed-off-by: Qiushi Wu

[PATCH AUTOSEL 4.9 04/26] media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq()

2020-08-21 Thread Sasha Levin
From: Jia-Ju Bai [ Upstream commit 6499a0db9b0f1e903d52f8244eacc1d4be00eea2 ] The value av7110->debi_virt is stored in DMA memory, and it is assigned to data, and thus data[0] can be modified at any time by malicious hardware. In this case, "if (data[0] < 2)" can be passed, but then data[0] can

[PATCH AUTOSEL 4.9 06/26] iommu/iova: Don't BUG on invalid PFNs

2020-08-21 Thread Sasha Levin
From: Robin Murphy [ Upstream commit d3e3d2be688b4b5864538de61e750721a311e4fc ] Unlike the other instances which represent a complete loss of consistency within the rcache mechanism itself, or a fundamental and obvious misconfiguration by an IOMMU driver, the BUG_ON() in

[PATCH v3] tty: ipwireless: fix error handling

2020-08-21 Thread Tong Zhang
ipwireless_send_packet() can only return 0 on success and -ENOMEM on error, the caller should check non zero for error condition Signed-off-by: Tong Zhang --- v2: - According to Jiri's comment, I made the checking consistent with the rest of the kernel. I also rebased the code using

[PATCH AUTOSEL 4.9 03/26] arm64: dts: qcom: msm8916: Pull down PDM GPIOs during sleep

2020-08-21 Thread Sasha Levin
From: Stephan Gerhold [ Upstream commit e2ee9edc282961783d519c760bbaa20fed4dec38 ] The original qcom kernel changed the PDM GPIOs to be pull-down during sleep at some point. Reportedly this was done because there was some "leakage at PDM outputs during sleep":

Re: [PATCH] MAINTAINERS: Add entry for HPE Superdome Flex (UV) maintainers

2020-08-21 Thread Rob Herring
+Joe Perches On Fri, Aug 21, 2020 at 9:48 AM Steve Wahl wrote: > > > Signed-off-by: Steve Wahl get_maintainers.pl doesn't work on MAINTAINERS. You need to send this to the maintainers of the files listed in the entry below. Looks like that would be the x86 maintainers. What did Mauro, David

[PATCH AUTOSEL 4.9 01/26] ALSA: pci: delete repeated words in comments

2020-08-21 Thread Sasha Levin
From: Randy Dunlap [ Upstream commit c7fabbc51352f50cc58242a6dc3b9c1a3599849b ] Drop duplicated words in sound/pci/. {and, the, at} Signed-off-by: Randy Dunlap Link: https://lore.kernel.org/r/20200806021926.32418-1-rdun...@infradead.org Signed-off-by: Takashi Iwai Signed-off-by: Sasha Levin

Re: [PATCH v2 06/10] fs/ntfs3: Add compression

2020-08-21 Thread Randy Dunlap
On 8/21/20 9:25 AM, Konstantin Komarov wrote: > This adds compression > > Signed-off-by: Konstantin Komarov > --- > fs/ntfs3/lznt.c | 449 > 1 file changed, 449 insertions(+) > create mode 100644 fs/ntfs3/lznt.c > > diff --git a/fs/ntfs3/lznt.c

[PATCH AUTOSEL 4.9 02/26] ASoC: tegra: Fix reference count leaks.

2020-08-21 Thread Sasha Levin
From: Qiushi Wu [ Upstream commit deca195383a6085be62cb453079e03e04d618d6e ] Calling pm_runtime_get_sync increments the counter even in case of failure, causing incorrect ref count if pm_runtime_put is not called in error handling paths. Call pm_runtime_put if pm_runtime_get_sync fails.

[PATCH AUTOSEL 4.14 28/30] ceph: fix potential mdsc use-after-free crash

2020-08-21 Thread Sasha Levin
From: Xiubo Li [ Upstream commit fa9967734227b44acb1b6918033f9122dc7825b9 ] Make sure the delayed work stopped before releasing the resources. cancel_delayed_work_sync() will only guarantee that the work finishes executing if the work is already in the ->worklist. That means after the

[PATCH AUTOSEL 4.14 26/30] locking/lockdep: Fix overflow in presentation of average lock-time

2020-08-21 Thread Sasha Levin
From: Chris Wilson [ Upstream commit a7ef9b28aa8d72a1656fa6f0a01bbd1493886317 ] Though the number of lock-acquisitions is tracked as unsigned long, this is passed as the divisor to div_s64() which interprets it as a s32, giving nonsense values with more than 2 billion acquisitons. E.g.

[PATCH AUTOSEL 4.14 25/30] drm/nouveau: Fix reference count leak in nouveau_connector_detect

2020-08-21 Thread Sasha Levin
From: Aditya Pakki [ Upstream commit 990a1162986e8eff7ca18cc5a0e03b4304392ae2 ] nouveau_connector_detect() calls pm_runtime_get_sync and in turn increments the reference count. In case of failure, decrement the ref count before returning the error. Signed-off-by: Aditya Pakki Signed-off-by:

[PATCH AUTOSEL 4.14 27/30] scsi: iscsi: Do not put host in iscsi_set_flashnode_param()

2020-08-21 Thread Sasha Levin
From: Jing Xiangfeng [ Upstream commit 68e12e5f61354eb42cfffbc20a693153fc39738e ] If scsi_host_lookup() fails we will jump to put_host which may cause a panic. Jump to exit_set_fnode instead. Link: https://lore.kernel.org/r/20200615081226.183068-1-jingxiangf...@huawei.com Reviewed-by: Mike

[PATCH AUTOSEL 4.14 23/30] f2fs: fix use-after-free issue

2020-08-21 Thread Sasha Levin
From: Li Guifu [ Upstream commit 99c787cfd2bd04926f1f553b30bd7dcea2caaba1 ] During umount, f2fs_put_super() unregisters procfs entries after f2fs_destroy_segment_manager(), it may cause use-after-free issue when umount races with procfs accessing, fix it by relocating f2fs_unregister_sysfs().

[PATCH AUTOSEL 4.14 24/30] drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open

2020-08-21 Thread Sasha Levin
From: Aditya Pakki [ Upstream commit bfad51c7633325b5d4b32444efe04329d53297b2 ] nouveau_fbcon_open() calls calls pm_runtime_get_sync() that increments the reference count. In case of failure, decrement the ref count before returning the error. Signed-off-by: Aditya Pakki Signed-off-by: Ben

[PATCH AUTOSEL 4.14 21/30] mips/vdso: Fix resource leaks in genvdso.c

2020-08-21 Thread Sasha Levin
From: Peng Fan [ Upstream commit a859647b4e6bfeb192284d27d24b6a0c914cae1d ] Close "fd" before the return of map_vdso() and close "out_file" in main(). Signed-off-by: Peng Fan Signed-off-by: Thomas Bogendoerfer Signed-off-by: Sasha Levin --- arch/mips/vdso/genvdso.c | 10 ++ 1 file

[PATCH AUTOSEL 4.14 22/30] cec-api: prevent leaking memory through hole in structure

2020-08-21 Thread Sasha Levin
From: Hans Verkuil [ Upstream commit 6c42227c3467549ddc65efe99c869021d2f4a570 ] Fix this smatch warning: drivers/media/cec/core/cec-api.c:156 cec_adap_g_log_addrs() warn: check that 'log_addrs' doesn't leak information (struct has a hole after 'features') Signed-off-by: Hans Verkuil

[PATCH AUTOSEL 4.14 19/30] PCI: Fix pci_create_slot() reference count leak

2020-08-21 Thread Sasha Levin
From: Qiushi Wu [ Upstream commit 8a94644b440eef5a7b9c104ac8aa7a7f413e35e5 ] kobject_init_and_add() takes a reference even when it fails. If it returns an error, kobject_put() must be called to clean up the memory associated with the object. When kobject_init_and_add() fails, call

[PATCH AUTOSEL 4.14 16/30] scsi: lpfc: Fix shost refcount mismatch when deleting vport

2020-08-21 Thread Sasha Levin
From: Dick Kennedy [ Upstream commit 03dbfe0668e6692917ac278883e0586cd7f7d753 ] When vports are deleted, it is observed that there is memory/kthread leakage as the vport isn't fully being released. There is a shost reference taken in scsi_add_host_dma that is not released during

[PATCH AUTOSEL 4.14 20/30] rtlwifi: rtl8192cu: Prevent leaking urb

2020-08-21 Thread Sasha Levin
From: Reto Schneider [ Upstream commit 03128643eb5453a798db5770952c73dc64fcaf00 ] If usb_submit_urb fails the allocated urb should be unanchored and released. Signed-off-by: Reto Schneider Signed-off-by: Kalle Valo Link: https://lore.kernel.org/r/20200622132113.14508-3-c...@reto-schneider.ch

[PATCH AUTOSEL 4.14 18/30] omapfb: fix multiple reference count leaks due to pm_runtime_get_sync

2020-08-21 Thread Sasha Levin
From: Aditya Pakki [ Upstream commit 78c2ce9bde70be5be7e3615a2ae7024ed8173087 ] On calling pm_runtime_get_sync() the reference count of the device is incremented. In case of failure, decrement the reference count before returning the error. Signed-off-by: Aditya Pakki Cc: k...@umn.edu Cc:

Re: [PATCH] memory: brcmstb_dpfe: fix array index out of bounds

2020-08-21 Thread Markus Mayer
On Thu, 20 Aug 2020 at 22:40, Krzysztof Kozlowski wrote: > > On Thu, Aug 20, 2020 at 06:03:33PM -0700, Markus Mayer wrote: > > We would overrun the error_text array if we hit a TIMEOUT condition, > > because we were using the error code "ETIMEDOUT" (which is 110) as an > > array index. > > > > We

[PATCH AUTOSEL 4.14 11/30] drm/radeon: fix multiple reference count leak

2020-08-21 Thread Sasha Levin
From: Aditya Pakki [ Upstream commit 6f2e8acdb48ed166b65d47837c31b177460491ec ] On calling pm_runtime_get_sync() the reference count of the device is incremented. In case of failure, decrement the reference count before returning the error. Signed-off-by: Aditya Pakki Signed-off-by: Alex

[PATCH AUTOSEL 4.14 15/30] drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails

2020-08-21 Thread Sasha Levin
From: Navid Emamdoost [ Upstream commit f79f94765f8c39db0b7dec1d335ab046aac03f20 ] The call to pm_runtime_get_sync increments the counter even in case of failure, leading to incorrect ref count. In case of failure, decrement the ref count before returning. Signed-off-by: Navid Emamdoost

[PATCH AUTOSEL 4.14 09/30] iommu/iova: Don't BUG on invalid PFNs

2020-08-21 Thread Sasha Levin
From: Robin Murphy [ Upstream commit d3e3d2be688b4b5864538de61e750721a311e4fc ] Unlike the other instances which represent a complete loss of consistency within the rcache mechanism itself, or a fundamental and obvious misconfiguration by an IOMMU driver, the BUG_ON() in

[PATCH AUTOSEL 4.14 14/30] drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config

2020-08-21 Thread Sasha Levin
From: Navid Emamdoost [ Upstream commit e008fa6fb41544b63973a529b704ef342f47cc65 ] in amdgpu_display_crtc_set_config, the call to pm_runtime_get_sync increments the counter even in case of failure, leading to incorrect ref count. In case of failure, decrement the ref count before returning.

[PATCH AUTOSEL 4.14 13/30] drm/amd/display: fix ref count leak in amdgpu_drm_ioctl

2020-08-21 Thread Sasha Levin
From: Navid Emamdoost [ Upstream commit 5509ac65f2fe5aa3c0003237ec629ca55024307c ] in amdgpu_drm_ioctl the call to pm_runtime_get_sync increments the counter even in case of failure, leading to incorrect ref count. In case of failure, decrement the ref count before returning. Signed-off-by:

[PATCH AUTOSEL 4.14 08/30] scsi: target: tcmu: Fix crash on ARM during cmd completion

2020-08-21 Thread Sasha Levin
From: Bodo Stroesser [ Upstream commit 5a0c256d96f020e4771f6fd5524b80f89a2d3132 ] If tcmu_handle_completions() has to process a padding shorter than sizeof(struct tcmu_cmd_entry), the current call to tcmu_flush_dcache_range() with sizeof(struct tcmu_cmd_entry) as length param is wrong and

[PATCH AUTOSEL 4.14 12/30] drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms

2020-08-21 Thread Sasha Levin
From: Navid Emamdoost [ Upstream commit 9ba8923cbbe11564dd1bf9f3602add9a9cfbb5c6 ] in amdgpu_driver_open_kms the call to pm_runtime_get_sync increments the counter even in case of failure, leading to incorrect ref count. In case of failure, decrement the ref count before returning.

[PATCH AUTOSEL 4.14 10/30] drm/amdkfd: Fix reference count leaks.

2020-08-21 Thread Sasha Levin
From: Qiushi Wu [ Upstream commit 20eca0123a35305e38b344d571cf32768854168c ] kobject_init_and_add() takes reference even when it fails. If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Signed-off-by: Qiushi Wu

Re: [PATCH] spi: spi-fsl-dspi: Add ACPI support

2020-08-21 Thread kernel test robot
Hi kuldip, Thank you for the patch! Perhaps something to improve: [auto build test WARNING on spi/for-next] [also build test WARNING on v5.9-rc1 next-20200821] [If your patch is applied to the wrong git tree, kindly drop us a note. And when submitting patch, we suggest to use '--base

[PATCH AUTOSEL 4.14 06/30] media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq()

2020-08-21 Thread Sasha Levin
From: Jia-Ju Bai [ Upstream commit 6499a0db9b0f1e903d52f8244eacc1d4be00eea2 ] The value av7110->debi_virt is stored in DMA memory, and it is assigned to data, and thus data[0] can be modified at any time by malicious hardware. In this case, "if (data[0] < 2)" can be passed, but then data[0] can

[PATCH AUTOSEL 4.14 03/30] mfd: intel-lpss: Add Intel Emmitsburg PCH PCI IDs

2020-08-21 Thread Sasha Levin
From: Andy Shevchenko [ Upstream commit 3ea2e4eab64cefa06055bb0541fcdedad4b48565 ] Intel Emmitsburg PCH has the same LPSS than Intel Ice Lake. Add the new IDs to the list of supported devices. Signed-off-by: Andy Shevchenko Signed-off-by: Lee Jones Signed-off-by: Sasha Levin ---

[PATCH AUTOSEL 4.14 04/30] arm64: dts: qcom: msm8916: Pull down PDM GPIOs during sleep

2020-08-21 Thread Sasha Levin
From: Stephan Gerhold [ Upstream commit e2ee9edc282961783d519c760bbaa20fed4dec38 ] The original qcom kernel changed the PDM GPIOs to be pull-down during sleep at some point. Reportedly this was done because there was some "leakage at PDM outputs during sleep":

[PATCH AUTOSEL 4.14 05/30] powerpc/xive: Ignore kmemleak false positives

2020-08-21 Thread Sasha Levin
From: Alexey Kardashevskiy [ Upstream commit f0993c839e95dd6c7f054a1015e693c87e33e4fb ] xive_native_provision_pages() allocates memory and passes the pointer to OPAL so kmemleak cannot find the pointer usage in the kernel memory and produces a false positive report (below) (even if the kernel

[PATCH AUTOSEL 4.19 38/38] EDAC/ie31200: Fallback if host bridge device is already initialized

2020-08-21 Thread Sasha Levin
From: Jason Baron [ Upstream commit 709ed1bcef12398ac1a35c149f3e582db04456c2 ] The Intel uncore driver may claim some of the pci ids from ie31200 which means that the ie31200 edac driver will not initialize them as part of pci_register_driver(). Let's add a fallback for this case to

[PATCH AUTOSEL 4.14 01/30] ALSA: pci: delete repeated words in comments

2020-08-21 Thread Sasha Levin
From: Randy Dunlap [ Upstream commit c7fabbc51352f50cc58242a6dc3b9c1a3599849b ] Drop duplicated words in sound/pci/. {and, the, at} Signed-off-by: Randy Dunlap Link: https://lore.kernel.org/r/20200806021926.32418-1-rdun...@infradead.org Signed-off-by: Takashi Iwai Signed-off-by: Sasha Levin

[PATCH AUTOSEL 4.19 36/38] ceph: fix potential mdsc use-after-free crash

2020-08-21 Thread Sasha Levin
From: Xiubo Li [ Upstream commit fa9967734227b44acb1b6918033f9122dc7825b9 ] Make sure the delayed work stopped before releasing the resources. cancel_delayed_work_sync() will only guarantee that the work finishes executing if the work is already in the ->worklist. That means after the

[PATCH AUTOSEL 4.19 37/38] scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del()

2020-08-21 Thread Sasha Levin
From: Javed Hasan [ Upstream commit e95b4789ff4380733006836d28e554dc296b2298 ] In fcoe_sysfs_fcf_del(), we first deleted the fcf from the list and then freed it if ctlr_dev was not NULL. This was causing a memory leak. Free the fcf even if ctlr_dev is NULL. Link:

[PATCH v3 2/3] perf symbols: Try reading the symbol table with libbfd

2020-08-21 Thread Remi Bernon
Wine generates PE binaries for its code modules and also generates debug files in PE or PDB formats, which perf cannot parse either. Trying to read symbols on non-ELF binaries with libbfd, when supported, makes it possible for perf to report symbols and annotations for Windows applications

[PATCH v3 1/3] perf dso: Use libbfd to read build_id and .gnu_debuglink section

2020-08-21 Thread Remi Bernon
Wine generates PE binaries for most of its modules and perf is unable to parse these files to get build_id or .gnu_debuglink section. Using libbfd when available, instead of libelf, makes it possible to resolve debug file location regardless of the dso binary format. Signed-off-by: Remi Bernon

[PATCH AUTOSEL 4.19 34/38] btrfs: file: reserve qgroup space after the hole punch range is locked

2020-08-21 Thread Sasha Levin
From: Qu Wenruo [ Upstream commit a7f8b1c2ac21bf081b41264c9cfd6260dffa6246 ] The incoming qgroup reserved space timing will move the data reservation to ordered extent completely. However in btrfs_punch_hole_lock_range() will call btrfs_invalidate_page(), which will clear QGROUP_RESERVED bit

[PATCH v2] memory: brcmstb_dpfe: fix array index out of bounds

2020-08-21 Thread Markus Mayer
We would overrun the error_text array if we hit a TIMEOUT condition, because we were using the error code "ETIMEDOUT" (which is 110) as an array index. We fix the problem by correcting the array index and by providing a function to retrieve error messages rather than accessing the array directly.

[PATCH v3 3/3] perf tests: Add test for PE binary format support

2020-08-21 Thread Remi Bernon
This adds a precompiled file in PE binary format, with split debug file, and tries to read its build_id and .gnu_debuglink sections, as well as looking up the main symbol from the debug file. This should succeed if libbfd is supported. Signed-off-by: Remi Bernon Cc: Alexander Shishkin Cc:

  1   2   3   4   5   6   7   8   9   10   >