[PATCH 3.4 046/177] fs: make cont_expand_zero interruptible

2015-01-27 Thread lizf
From: Mikulas Patocka 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit c2ca0fcd202863b14bd041a7fece2e789926c225 upstream. This patch makes it possible to kill a process looping in cont_expand_zero. A process may spend a lot of time in this

[PATCH 3.4 047/177] fix misuses of f_count() in ppp and netlink

2015-01-27 Thread lizf
o ppp one) and 2.6.17 for sendmsg() (netlink one). OTOH, netlink hadn't grown that check until 3.9 and ppp used to live in drivers/net, not drivers/net/ppp until 3.1. The bug existed well before that, though, and the same fix used to apply in old location of file. Signed-off-by: Al Viro [liz

[PATCH 3.4 044/177] x86: Reject x32 executables if x32 ABI not supported

2015-01-27 Thread lizf
From: Ben Hutchings 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 0e6d3112a4e95d55cf6dca88f298d5f4b8f29bd1 upstream. It is currently possible to execve() an x32 executable on an x86_64 kernel that has only ia32 compat enabled. However

[PATCH 3.4 041/177] dm log userspace: fix memory leak in dm_ulog_tfr_init failure path

2015-01-27 Thread lizf
From: Alexey Khoroshilov 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 56ec16cb1e1ce46354de8511eef962a417c32c92 upstream. If cn_add_callback() fails in dm_ulog_tfr_init(), it does not deallocate prealloced memory but calls cn_del_callba

[PATCH 3.4 054/177] mnt: Prevent pivot_root from creating a loop in the mount tree

2015-01-27 Thread lizf
-by: Andy Lutomirski Reviewed-by: Andy Lutomirski Link: http://lkml.kernel.org/r/87bnpmihks@x220.int.ebiederm.org Signed-off-by: "Eric W. Biederman" Signed-off-by: Andy Lutomirski [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- fs/namespace.c | 3 +++ 1 file changed,

[PATCH 3.4 49/91] NFSv4: Fix another bug in the close/open_downgrade code

2015-01-27 Thread lizf
in the presence...) Signed-off-by: Trond Myklebust [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- fs/nfs/nfs4proc.c | 30 +++--- 1 file changed, 15 insertions(+), 15 deletions(-) diff --git a/fs/nfs/nfs4proc.c b/fs/nfs/nfs4proc.c index 01afcd5

[PATCH 3.4 55/91] can: flexcan: correctly initialize mailboxes

2015-01-27 Thread lizf
From: David Jander 3.4.105-rc1 review patch. If anyone has any objections, please let me know. -- commit fc05b884a31dbf259cc73cc856e634ec3acbebb6 upstream. Apparently mailboxes may contain random data at startup, causing some of them being prepared for message reception. This

[PATCH 3.4 057/177] futex: Ensure get_futex_key_refs() always implies a barrier

2015-01-27 Thread lizf
From: Catalin Marinas 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 76835b0ebf8a7fe85beb03c75121419a7dec52f0 upstream. Commit b0c29f79ecea (futexes: Avoid taking the hb->lock if there's nothing to wake up) changes the futex code to avoi

[PATCH 3.4 055/177] virtio_pci: fix virtio spec compliance on restore

2015-01-27 Thread lizf
From: "Michael S. Tsirkin" 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 6fbc198cf623944ab60a1db6d306a4d55cdd820d upstream. On restore, virtio pci does the following: + set features + init vqs etc - device can be used at this point! + s

[PATCH 3.4 056/177] selinux: fix inode security list corruption

2015-01-27 Thread lizf
From: Stephen Smalley 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 923190d32de4428afbea5e5773be86bea60a9925 upstream. sb_finish_set_opts() can race with inode_free_security() when initializing inode security structures for inodes creat

[PATCH 3.4 048/177] block: fix alignment_offset math that assumes io_min is a power-of-2

2015-01-27 Thread lizf
From: Mike Snitzer 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit b8839b8c55f3fdd60dc36abcda7e0266aff7985c upstream. The math in both blk_stack_limits() and queue_limit_alignment_offset() assume that a block device's io_min (aka minimum_

[PATCH 3.4 75/91] nl80211: clear skb cb before passing to netlink

2015-01-27 Thread lizf
this issue. Reported-by: Assaf Azulay Reported-by: David Spinadel Signed-off-by: Johannes Berg [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- net/wireless/nl80211.c | 6 ++ 1 file changed, 6 insertions(+) diff --git a/net/wireless/nl80211.c b/net/wireless/nl80211.c ind

[PATCH 3.4 058/177] x86,kvm,vmx: Preserve CR4 across VM entry

2015-01-27 Thread lizf
will add a kernel-wide cr4 shadow, reducing the overhead in the common case to just two memory reads and a branch. Signed-off-by: Andy Lutomirski Acked-by: Paolo Bonzini Cc: Petr Matousek Cc: Gleb Natapov Signed-off-by: Linus Torvalds [lizf: Backported to 3.4: - adjust context - add parame

[PATCH 3.4 68/91] shmem: fix nlink for rename overwrite directory

2015-01-27 Thread lizf
From: Miklos Szeredi 3.4.105-rc1 review patch. If anyone has any objections, please let me know. -- commit b928095b0a7cff7fb9fcf4c706348ceb8ab2c295 upstream. If overwriting an empty directory with rename, then need to drop the extra nlink. Test prog: #include #include #in

[PATCH 3.4 69/91] ARM: 8165/1: alignment: don't break misaligned NEON load/store

2015-01-27 Thread lizf
From: Robin Murphy 3.4.105-rc1 review patch. If anyone has any objections, please let me know. -- commit 5ca918e5e3f9df4634077c06585c42bc6a8d699a upstream. The alignment fixup incorrectly decodes faulting ARM VLDn/VSTn instructions (where the optional alignment hint is given

[PATCH 3.4 066/177] crypto: more robust crypto_memneq

2015-01-27 Thread lizf
From: Cesar Eduardo Barros 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit fe8c8a126806fea4465c43d62a1f9d273a572bf5 upstream. [Only use the compiler.h portion of this patch, to get the OPTIMIZER_HIDE_VAR() macro, which we need for other -

[PATCH 3.4 071/177] kernel/fork.c:copy_process(): unify CLONE_THREAD-or-thread_group_leader code

2015-01-27 Thread lizf
From: Oleg Nesterov 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 80628ca06c5d42929de6bc22c0a41589a834d151 upstream. Cleanup and preparation for the next changes. Move the "if (clone_flags & CLONE_THREAD)" code down under "if (likely(p

[PATCH 3.4 81/91] mnt: Only change user settable mount flags in remount

2015-01-27 Thread lizf
From: "Eric W. Biederman" 3.4.105-rc1 review patch. If anyone has any objections, please let me know. -- commit a6138db815df5ee542d848318e5dae681590fccd upstream. Kenton Varda discovered that by remounting a read-only bind mount read-only in a user namespace the MNT_LOCK_REA

[PATCH 3.4 64/91] cpuset: PF_SPREAD_PAGE and PF_SPREAD_SLAB should be atomic flags

2015-01-27 Thread lizf
Cc: Kees Cook Fixes: 950592f7b991 ("cpusets: update tasks' page/slab spread flags in time") Reported-by: Tetsuo Handa Signed-off-by: Zefan Li Signed-off-by: Tejun Heo [lizf: Backported to 3.4: - adjust context - check current->flags & PF_MEMPOLICY rather than current->

[PATCH 3.4 76/91] ext4: propagate errors up to ext4_find_entry()'s callers

2015-01-27 Thread lizf
error instead of a NULL inode, since that will result in a negative dentry cache entry that will stick around long past the OOM condition which caused a transient ENOMEM error. Google-Bug-Id: #17142205 Signed-off-by: Theodore Ts'o [lizf: Backported to 3.4: - adjust context - s/old.bh/old_bh/g

[PATCH 3.4 059/177] ext4: check EA value offset when loading

2015-01-27 Thread lizf
an example.) Signed-off-by: Darrick J. Wong Signed-off-by: Theodore Ts'o [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- fs/ext4/xattr.c | 32 1 file changed, 24 insertions(+), 8 deletions(-) diff --git a/fs/ext4/xattr.c b/fs/ext4/xatt

[PATCH 3.4 062/177] vfs: fix data corruption when blocksize < pagesize for mmaped data

2015-01-27 Thread lizf
at all the necessary moments. Signed-off-by: Jan Kara Signed-off-by: Theodore Ts'o [lizf: Backported to 3.4: - adjust context - truncate_setsize() already has an oldsize variable] Signed-off-by: Zefan Li --- fs/buffer.c| 3 +++ include/linux/mm.h | 1 + mm/truncate.c | 62

[PATCH 3.4 065/177] ext4: fix reservation overflow in ext4_da_write_begin

2015-01-27 Thread lizf
djust the number of credits based on whether the flag is already set, and whether the current write may extend past the LARGE_FILE limit. Signed-off-by: Eric Sandeen Signed-off-by: Theodore Ts'o Reviewed-by: Andreas Dilger [lizf: Backported to 3.4: - adjust context - ext4_journal_star

[PATCH 3.4 102/177] nfsd4: fix crash on unknown operation number

2015-01-27 Thread lizf
From: "J. Bruce Fields" 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 51904b08072a8bf2b9ed74d1bd7a5300a614471d upstream. Unknown operation numbers are caught in nfsd4_decode_compound() which sets op->opnum to OP_ILLEGAL and op->status t

[PATCH 3.4 096/177] usb: serial: ftdi_sio: add Awinda Station and Dongle products

2015-01-27 Thread lizf
From: Frans Klaver 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit edd74ffab1f6909eee400c7de8ce621870aacac9 upstream. Add new IDs for the Xsens Awinda Station and Awinda Dongle. While at it, order the definitions by PID and add a logical

[PATCH 3.4 108/177] ALSA: pcm: Zero-clear reserved fields of PCM status ioctl in compat mode

2015-01-27 Thread lizf
From: Takashi Iwai 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 317168d0c766defd14b3d0e9c2c4a9a258b803ee upstream. In compat mode, we copy each field of snd_pcm_status struct but don't touch the reserved fields, and this leaves uniniti

[PATCH 3.4 111/177] zap_pte_range: update addr when forcing flush after TLB batching faiure

2015-01-27 Thread lizf
reconsider the address for invalidation. This patch fixes the problem by incrementing addr by the PAGE_SIZE before breaking out of the loop on batch failure. Signed-off-by: Will Deacon Signed-off-by: Linus Torvalds [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- mm/memory.c | 4

[PATCH 3.4 115/177] ext4: fix overflow when updating superblock backups after resize

2015-01-27 Thread lizf
erner [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- fs/ext4/resize.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fs/ext4/resize.c b/fs/ext4/resize.c index a43e43c..cfd3211 100644 --- a/fs/ext4/resize.c +++ b/fs/ext4/resize.c @@ -991,7 +991,7 @@ static

[PATCH 3.4 100/177] scsi: Fix error handling in SCSI_IOCTL_SEND_COMMAND

2015-01-27 Thread lizf
From: Jan Kara 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 84ce0f0e94ac97217398b3b69c21c7a62ebeed05 upstream. When sg_scsi_ioctl() fails to prepare request to submit in blk_rq_map_kern() we jump to a label where we just end up copying

[PATCH 3.4 106/177] futex: Fix a race condition between REQUEUE_PI and task death

2015-01-27 Thread lizf
ee_pi_state() call and the hb->lock held debugging. The latter comes via a seperate patch ] Signed-off-by: Brian Silverman Cc: austin.li...@gmail.com Cc: dar...@dvhart.com Cc: pet...@infradead.org Link: http://lkml.kernel.org/r/1414282837-23092-1-git-send-email-bsilver16...@gmail.com

[PATCH 3.4 126/177] USB: opticon: fix non-atomic allocation in write path

2015-01-27 Thread lizf
From: Johan Hovold 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit e681286de221af78fc85db9222b6a203148c005a upstream. Write may be called from interrupt context so make sure to use GFP_ATOMIC for all allocations in write. Fixes: 0d930e51

[PATCH 3.4 123/177] acer-wmi: Add acpi_backlight=video quirk for the Acer KAV80

2015-01-27 Thread lizf
From: Hans de Goede 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 183fd8fcd7f8afb7ac5ec68f83194872f9fecc84 upstream. The acpi-video backlight interface on the Acer KAV80 is broken, and worse it causes the entire machine to slow down sig

[PATCH 3.4 91/91] l2tp: fix race while getting PMTU on PPP pseudo-wire

2015-01-27 Thread lizf
From: Guillaume Nault 3.4.105-rc1 review patch. If anyone has any objections, please let me know. -- commit eed4d839b0cdf9d84b0a9bc63de90fd5e1e886fb upstream. Use dst_entry held by sk_dst_get() to retrieve tunnel's PMTU. The dst_mtu(__sk_dst_get(tunnel->sock)) call was racy.

[PATCH 3.4 88/91] ipv6: reuse ip6_frag_id from ip6_ufo_append_data

2015-01-27 Thread lizf
From: Hannes Frederic Sowa 3.4.105-rc1 review patch. If anyone has any objections, please let me know. -- commit 916e4cf46d0204806c062c8c6c4d1f633852c5b6 upstream. Currently we generate a new fragmentation id on UFO segmentation. It is pretty hairy to identify the correct net

[PATCH 3.4 083/177] KVM: x86: Handle errors when RIP is set during far jumps

2015-01-27 Thread lizf
. This fixes CVE-2014-3647. Signed-off-by: Nadav Amit Signed-off-by: Paolo Bonzini [lizf: Backported to 3.4: - adjust context - __load_segment_descriptor() doesn't take in_task_switch parameter] Signed-off-by: Zefan Li --- arch/x86/kvm/emulate.c

[PATCH 3.4 093/177] USB: serial: cp210x: add Silicon Labs 358x VID and PID

2015-01-27 Thread lizf
From: Nathaniel Ting 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 35cc83eab097e5720a9cc0ec12bdc3a726f58381 upstream. Enable Silicon Labs Ember VID chips to enumerate with the cp210x usb serial driver. EM358x devices operating with the

[PATCH 3.4 132/177] USB: quirks: enable device-qualifier quirk for yet another Elan touchscreen

2015-01-27 Thread lizf
From: Adel Gadllah 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit d749947561af5996ccc076b2ffcc5f48b1be5d74 upstream. Yet another device affected by this. Tested-by: Kevin Fenzi Signed-off-by: Adel Gadllah Signed-off-by: Greg Kroah-Har

[PATCH 3.4 134/177] of: Fix overflow bug in string property parsing functions

2015-01-27 Thread lizf
g Cc: Rob Herring Cc: Arnd Bergmann Cc: Darren Hart [lizf: Backported to 3.4: Drop selftest hunks that don't apply] Signed-off-by: Zefan Li --- drivers/of/base.c | 88 +-- drivers/of/selftest.c | 64 ++--- inc

[PATCH 3.4 104/177] Input: i8042 - quirks for Fujitsu Lifebook A544 and Lifebook AH544

2015-01-27 Thread lizf
From: Hans de Goede 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 993b3a3f80a7842a48cd46c2b41e1b3ef6302468 upstream. These models need i8042.notimeout, otherwise the touchpad will not work. BugLink: https://bugzilla.kernel.org/show_bug

[PATCH 3.4 089/177] staging:iio:ad5933: Drop "raw" from channel names

2015-01-27 Thread lizf
f-by: Lars-Peter Clausen Signed-off-by: Jonathan Cameron [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- drivers/staging/iio/impedance-analyzer/ad5933.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/staging/iio/impedance-analyzer/ad5933.c

[PATCH 3.4 117/177] wireless: rt2x00: add new rt2800usb device

2015-01-27 Thread lizf
From: Cyril Brulebois 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 664d6a792785cc677c2091038ce10322c8d04ae1 upstream. 0x1b75 0xa200 AirLive WN-200USB wireless 11b/g/n dongle References: https://bugs.debian.org/766802 Reported-by: Mart

[PATCH 3.4 119/177] tracing/syscalls: Fix perf syscall tracing when syscall_nr == -1

2015-01-27 Thread lizf
From: Will Deacon 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 60916a9382e88fbf5e54fd36a3e658efd7ab7bed upstream. syscall_get_nr can return -1 in the case that the task is not executing a system call. This patch fixes perf_syscall_{en

[PATCH 3.4 087/177] kvm: fix excessive pages un-pinning in kvm_iommu_map error path.

2015-01-27 Thread lizf
: Quentin Casasnovas Signed-off-by: Vegard Nossum Signed-off-by: Jamie Iles Reviewed-by: Sasha Levin Signed-off-by: Paolo Bonzini [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- virt/kvm/iommu.c | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git

[PATCH 3.4 161/177] srp-target: Retry when QP creation fails with ENOMEM

2015-01-27 Thread lizf
From: Bart Van Assche 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit ab477c1ff5e0a744c072404bf7db51bfe1f05b6e upstream. It is not guaranteed to that srp_sq_size is supported by the HCA. So if we failed to create the QP with ENOMEM, try w

[PATCH 3.4 168/177] of/base: Fix PowerPC address parsing hack

2015-01-27 Thread lizf
From: Benjamin Herrenschmidt 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 746c9e9f92dde2789908e51a354ba90a1962a2eb upstream. We have a historical hack that treats missing ranges properties as the equivalent of an empty one. This is nee

[PATCH 3.4 152/177] KVM: x86: Fix uninitialized op->type for some immediate values

2015-01-27 Thread lizf
From: Nadav Amit 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit d29b9d7ed76c0b961603ca692b8a562556a20212 upstream. The emulator could reuse an op->type from a previous instruction for some immediate values. If it mistakenly considers th

[PATCH 3.4 137/177] staging:iio:ade7758: Fix check if channels are enabled in prenable

2015-01-27 Thread lizf
From: Lars-Peter Clausen 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 79fa64eb2ee8ccb4bcad7f54caa2699730b10b22 upstream. We should check if a channel is enabled, not if no channels are enabled. Fixes: 550268ca ("staging:iio: scrap

[PATCH 3.4 173/177] x86/asm/traps: Disable tracing and kprobes in fixup_bad_iret and sync_regs

2015-01-27 Thread lizf
From: Andy Lutomirski 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 7ddc6a2199f1da405a2fb68c40db8899b1a8cd87 upstream. These functions can be executed on the int3 stack, so kprobes are dangerous. Tracing is probably a bad idea, too. Fi

USB: serial: ftdi_sio: Add support for new Xsens devices

2015-01-27 Thread lizf
From: Patrick Riphagen commit 4bdcde358b4bda74e356841d351945ca3f2245dd upstream. This adds support for new Xsens devices, using Xsens' own Vendor ID. Signed-off-by: Patrick Riphagen Signed-off-by: Frans Klaver Cc: Johan Hovold Signed-off-by: Greg Kroah-Hartman [lizf: Backported t

[PATCH 3.4 167/177] can: esd_usb2: fix memory leak on disconnect

2015-01-27 Thread lizf
From: Alexey Khoroshilov 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit efbd50d2f62fc1f69a3dcd153e63ba28cc8eb27f upstream. It seems struct esd_usb2 dev is not deallocated on disconnect. The patch adds the missing deallocation. Found by

[PATCH 3.4 169/177] MIPS: oprofile: Fix backtrace on 64-bit kernel

2015-01-27 Thread lizf
From: Aaro Koskinen 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit bbaf113a481b6ce32444c125807ad3618643ce57 upstream. Fix incorrect cast that always results in wrong address for the new frame on 64-bit kernels. Signed-off-by: Aaro Koski

[PATCH 3.4 171/177] x86_64, traps: Fix the espfix64 #DF fixup and rewrite it in C

2015-01-27 Thread lizf
From: Andy Lutomirski 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit af726f21ed8af2cdaa4e93098dc211521218ae65 upstream. There's nothing special enough about the espfix64 double fault fixup to justify writing it in assembly. Move it to C

[PATCH 3.4 177/177] x86/tls: Validate TLS entries to protect espfix

2015-01-27 Thread lizf
From: Andy Lutomirski 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 41bdc78544b8a93a9c6814b8bbbfef966272abbe upstream. Installing a 16-bit RW data segment into the GDT defeats espfix. AFAICT this will not affect glibc, Wine, or dosemu a

[PATCH 3.4 176/177] x86, kvm: Clear paravirt_enabled on KVM guests for espfix32's benefit

2015-01-27 Thread lizf
From: Andy Lutomirski 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 29fa6825463c97e5157284db80107d1bfac5d77b upstream. paravirt_enabled has the following effects: - Disables the F00F bug workaround warning. There is no F00F bug wo

[PATCH 3.4 159/177] NFSv4: Ensure that we remove NFSv4.0 delegations when state has expired

2015-01-27 Thread lizf
From: Trond Myklebust 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 4dfd4f7af0afd201706ad186352ca423b0f17d4b upstream. NFSv4.0 does not have TEST_STATEID/FREE_STATEID functionality, so unlike NFSv4.1, the recovery procedure when stateid

[PATCH 3.4 175/177] mm: Remove false WARN_ON from pagecache_isize_extended()

2015-01-27 Thread lizf
From: Jan Kara 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit f55fefd1a5a339b1bd08c120b93312d6eb64a9fb upstream. The WARN_ON checking whether i_mutex is held in pagecache_isize_extended() was wrong because some filesystems (e.g. XFS) use

[PATCH 3.4 163/177] rt2x00: do not align payload on modern H/W

2015-01-27 Thread lizf
From: Stanislaw Gruszka 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit cfd9167af14eb4ec21517a32911d460083ee3d59 upstream. RT2800 and newer hardware require padding between header and payload if header length is not multiple of 4. For hi

[PATCH 3.4 146/177] dm raid: ensure superblock's size matches device's logical block size

2015-01-27 Thread lizf
From: Heinz Mauelshagen 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 40d43c4b4cac4c2647bf07110d7b07d35f399a84 upstream. The dm-raid superblock (struct dm_raid_superblock) is padded to 512 bytes and that size is being used to read it in

[PATCH 3.4 165/177] x86: Require exact match for 'noxsave' command line option

2015-01-27 Thread lizf
From: Dave Hansen 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 2cd3949f702692cf4c5d05b463f19cd706a92dd3 upstream. We have some very similarly named command-line options: arch/x86/kernel/cpu/common.c:__setup("noxsave", x86_xsave_setup)

[PATCH 3.4 174/177] firewire: cdev: prevent kernel stack leaking into ioctl arguments

2015-01-27 Thread lizf
From: Stefan Richter 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit eaca2d8e75e90a70a63a6695c9f61932609db212 upstream. Found by the UC-KLEE tool: A user could supply less input to firewire-cdev ioctls than write- or write/read-type ioct

[PATCH 3.4 170/177] x86_64, traps: Stop using IST for #SS

2015-01-27 Thread lizf
From: Andy Lutomirski 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 6f442be2fb22be02cafa606f1769fa1e6f894441 upstream. On a 32-bit kernel, this has no effect, since there are no IST stacks. On a 64-bit kernel, #SS can only happen in us

[PATCH 3.4 172/177] x86_64, traps: Rework bad_iret

2015-01-27 Thread lizf
From: Andy Lutomirski 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit b645af2d5905c4e32399005b867987919cbfc3ae upstream. It's possible for iretq to userspace to fail. This can happen because of a bad CS, SS, or RIP. Historically, we've

[PATCH 3.4 166/177] can: dev: avoid calling kfree_skb() from interrupt context

2015-01-27 Thread lizf
From: Thomas Körper 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 5247a589c24022ab34e780039cc8000c48f2035e upstream. ikfree_skb() is Called in can_free_echo_skb(), which might be called from (TX Error) interrupt, which triggers the foll

[PATCH 3.4 164/177] ASoC: sgtl5000: Fix SMALL_POP bit definition

2015-01-27 Thread lizf
From: Fabio Estevam 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit c251ea7bd7a04f1f2575467e0de76e803cf59149 upstream. On a mx28evk with a sgtl5000 codec we notice a loud 'click' sound to happen 5 seconds after the end of a playback. Th

[PATCH 3.4 160/177] libceph: do not crash on large auth tickets

2015-01-27 Thread lizf
From: Ilya Dryomov 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit aaef31703a0cf6a733e651885bfb49edc3ac6774 upstream. Large (greater than 32k, the value of PAGE_ALLOC_COSTLY_ORDER) auth tickets will have their buffers vmalloc'ed, which le

[PATCH 3.4 157/177] audit: keep inode pinned

2015-01-27 Thread lizf
From: Miklos Szeredi 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 799b601451b21ebe7af0e6e8f6e2ccd4683c5064 upstream. Audit rules disappear when an inode they watch is evicted from the cache. This is likely not what we want. The guilty

[PATCH 3.4 158/177] nfs: Fix use of uninitialized variable in nfs_getattr()

2015-01-27 Thread lizf
From: Jan Kara 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 16caf5b6101d03335b386e77e9e14136f989be87 upstream. Variable 'err' needn't be initialized when nfs_getattr() uses it to check whether it should call generic_fillattr() or not.

[PATCH 3.4 162/177] ASoC: fsi: remove unsupported PAUSE flag

2015-01-27 Thread lizf
From: Kuninori Morimoto 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit c1b9b9b1ad2df6144ca3fbe6989f7bd9ea5c5562 upstream. FSI doesn't support PAUSE. Remove SNDRV_PCM_INFO_PAUSE flags from snd_pcm_hardware info Signed-off-by: Kuninori Mo

[PATCH 3.4 154/177] Input: alps - ignore potential bare packets when device is out of sync

2015-01-27 Thread lizf
From: Pali Rohár 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 4ab8f7f320f91f279c3f06a9795cfea5c972888a upstream. 5th and 6th byte of ALPS trackstick V3 protocol match condition for first byte of PS/2 3 bytes packet. When driver enters

[PATCH 3.4 155/177] Input: alps - allow up to 2 invalid packets without resetting device

2015-01-27 Thread lizf
From: Pali Rohár 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 9d720b34c0a432639252f63012e18b0507f5b432 upstream. On some Dell Latitude laptops ALPS device or Dell EC send one invalid byte in 6 bytes ALPS packet. In this case psmouse dr

[PATCH 3.4 153/177] drm/radeon: add missing crtc unlock when setting up the MC

2015-01-27 Thread lizf
From: Alex Deucher 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit f0d7bfb9407fccb6499ec01c33afe43512a439a2 upstream. Need to unlock the crtc after updating the blanking state. Signed-off-by: Alex Deucher Signed-off-by: Zefan Li --- d

[PATCH 3.4 156/177] scsi: only re-lock door after EH on devices that were reset

2015-01-27 Thread lizf
From: Christoph Hellwig 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 48379270fe6808cf4612ee094adc8da2b7a83baa upstream. Setups that use the blk-mq I/O path can lock up if a host with a single device that has its door locked enters EH.

[PATCH 3.4 151/177] macvtap: Fix csum_start when VLAN tags are present

2015-01-27 Thread lizf
From: Herbert Xu 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 3ce9b20f1971690b8b3b620e735ec99431573b39 upstream. When VLAN is in use in macvtap_put_user, we end up setting csum_start to the wrong place. The result is that the whoever

[PATCH 3.4 149/177] block: Fix computation of merged request priority

2015-01-27 Thread lizf
Moyer Signed-off-by: Jens Axboe [lizf: Backported to 3.4: adjust filename] Signed-off-by: Zefan Li --- fs/ioprio.c | 14 -- 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/fs/ioprio.c b/fs/ioprio.c index 0f1b951..0dd6a2a 100644 --- a/fs/ioprio.c +++ b/fs/ioprio.c

[PATCH 3.4 148/177] mac80211: properly flush delayed scan work on interface removal

2015-01-27 Thread lizf
asn't processed it. To fix this situation, flush the delayed work when the interface being removed is the one that was executing the scan. Reported-by: Sujith Manoharan Tested-by: Sujith Manoharan Signed-off-by: Johannes Berg [lizf: Backported to 3.4: rcu_access_pointer() isn't used] Signed-o

[PATCH 3.4 150/177] mac80211: fix use-after-free in defragmentation

2015-01-27 Thread lizf
From: Johannes Berg 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit b8fff407a180286aa683d543d878d98d9fc57b13 upstream. Upon receiving the last fragment, all but the first fragment are freed, but the multicast check for statistics at the e

[PATCH 3.4 145/177] xtensa: re-wire umount syscall to sys_oldumount

2015-01-27 Thread lizf
requesting old umount syscall implementation and re-wiring umount to it. Signed-off-by: Max Filippov [lizf: Backported to 3.4: adjust filename] Signed-off-by: Zefan Li --- arch/xtensa/include/asm/unistd.h | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/arch/xtensa/include/asm

[PATCH 3.4 144/177] dm bufio: change __GFP_IO to __GFP_FS in shrinker callbacks

2015-01-27 Thread lizf
t, dm-bufio could still block on filesystem operations if it runs on a loop block device. The change from __GFP_IO to __GFP_FS supposedly fixes one observed (though unreproducible) deadlock involving dm-bufio and loop device. Signed-off-by: Mikulas Patocka Signed-off-by: Mike Snitzer [lizf: Backp

[PATCH 3.4 147/177] ahci: Add Device IDs for Intel Sunrise Point PCH

2015-01-27 Thread lizf
From: James Ralston 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 69b930456a98663567d35dd5c54b688d1e3f upstream. This patch adds the AHCI-mode SATA Device IDs for the Intel Sunrise Point PCH. Signed-off-by: James Ralston Signed-of

[PATCH 3.4 141/177] tty: Prevent "read/write wait queue active!" log flooding

2015-01-27 Thread lizf
: Peter Hurley Signed-off-by: Greg Kroah-Hartman [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- drivers/tty/tty_io.c | 6 +- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/drivers/tty/tty_io.c b/drivers/tty/tty_io.c index 2d66beed..a07eb4c 100644 --- a

[PATCH 3.4 143/177] sysfs: driver core: Fix glue dir race condition by gdp_mutex

2015-01-27 Thread lizf
From: Yijing Wang 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit e4a60d139060975eb956717e4f63ae348d4d8cc5 upstream. There is a race condition when removing glue directory. It can be reproduced in following test: path 1: Add first child

[PATCH 3.4 140/177] tty: Fix high cpu load if tty is unreleaseable

2015-01-27 Thread lizf
From: Peter Hurley 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 37b164578826406a173ca7c20d9ba7430134d23e upstream. Kernel oops can cause the tty to be unreleaseable (for example, if n_tty_read() crashes while on the read_wait queue). T

[PATCH 3.4 139/177] serial: Fix divide-by-zero fault in uart_get_divisor()

2015-01-27 Thread lizf
From: Peter Hurley 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 547039ec502076e60034eeb79611df3433a99b7d upstream. uart_get_baud_rate() will return baud == 0 if the max rate is set to the "magic" 38400 rate and the SPD_* flags are also

[PATCH 3.4 142/177] tty/vt: don't set font mappings on vc not supporting this

2015-01-27 Thread lizf
null ptr BUG. So check for this case and return error for consoles w/o font mapping support. Reference: https://bugzilla.kernel.org/show_bug.cgi?id=59321 Signed-off-by: Imre Deak Signed-off-by: Greg Kroah-Hartman [lizf: Backported to 3.4: just return -EINVAL as we don't need to unlock] Sig

[PATCH 3.4 138/177] USB: cdc-acm: only raise DTR on transitions from B0

2015-01-27 Thread lizf
From: Johan Hovold 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 4473d054ceb572557954f9536731d39b20937b0c upstream. Make sure to only raise DTR on transitions from B0 in set_termios. Also allow set_termios to be called from open with a

[PATCH 3.4 136/177] ALSA: usb-audio: Fix device_del() sysfs warnings at disconnect

2015-01-27 Thread lizf
and-tested-by: Chris J Arges Signed-off-by: Takashi Iwai [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- sound/usb/card.c | 9 +++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/sound/usb/card.c b/sound/usb/card.c index 658ea11..43fca52 100644 --- a

[PATCH 3.4 133/177] xhci: no switching back on non-ULT Haswell

2015-01-27 Thread lizf
. This fixes spontaneous resume from S3 on some HP laptops. Signed-off-by: Oliver Neukum Signed-off-by: Greg Kroah-Hartman [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- drivers/usb/host/xhci-pci.c | 14 -- 1 file changed, 14 deletions(-) diff --git a/drivers/usb

[PATCH 3.4 135/177] Btrfs: fix kfree on list_head in btrfs_lookup_csums_range error cleanup

2015-01-27 Thread lizf
From: Chris Mason 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 6e5aafb27419f32575b27ef9d6a31e5d54661aca upstream. If we hit any errors in btrfs_lookup_csums_range, we'll loop through all the csums we allocate and free them. But the co

[PATCH 3.4 131/177] USB: quirks: enable device-qualifier quirk for another Elan touchscreen

2015-01-27 Thread lizf
From: Adel Gadllah 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 876af5d454548be40327ba9efea4bc92a8575019 upstream. Currently this quirk is enabled for the model with the device id 0x0089, it is needed for the 0x009b model, which is fou

[PATCH 3.4 130/177] USB: core: add device-qualifier quirk

2015-01-27 Thread lizf
From: Johan Hovold 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 2a159389bf5d962359349a76827b2f683276a1c7 upstream. Add new quirk for devices that cannot handle requests for the device_qualifier descriptor. A USB-2.0 compliant device m

[PATCH 3.4 129/177] usb-storage: handle a skipped data phase

2015-01-27 Thread lizf
Tested-by: Paul Osmialowski Signed-off-by: Greg Kroah-Hartman [lizf: Backported to 3.4: change usb_stor_dbg() to US_DEBUGP()] Signed-off-by: Zefan Li --- drivers/usb/storage/transport.c | 26 ++ 1 file changed, 26 insertions(+) diff --git a/drivers/usb/storage/transport.c

[PATCH 3.4 125/177] USB: kobil_sct: fix non-atomic allocation in write path

2015-01-27 Thread lizf
: 1da177e4c3f4 ("Linux-2.6.12-rc2") Signed-off-by: Johan Hovold [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- drivers/usb/serial/kobil_sct.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/usb/serial/kobil_sct.c b/drivers/usb/serial/kobil_s

[PATCH 3.4 128/177] usb: Do not allow usb_alloc_streams on unconfigured devices

2015-01-27 Thread lizf
From: Hans de Goede 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 90a646c770c50cc206ceba0d7b50453c46c13c36 upstream. This commit fixes the following oops: [10238.622067] scsi host3: uas_eh_bus_reset_handler start [10240.766164] usb 3-4

[PATCH 3.4 124/177] powerpc: do_notify_resume can be called with bad thread_info flags argument

2015-01-27 Thread lizf
r hand did trample r4. Signed-off-by: Anton Blanchard Signed-off-by: Michael Ellerman [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- arch/powerpc/kernel/entry_64.S | 6 ++ 1 file changed, 6 insertions(+) diff --git a/arch/powerpc/kernel/entry_64.S b/arch/powerpc/kerne

[PATCH 3.4 121/177] ext4: bail out from make_indexed_dir() on first error

2015-01-27 Thread lizf
rity-id: 741300 Signed-off-by: Jan Kara Signed-off-by: Theodore Ts'o [lizf: Backported to 3.4: - adjust context - replace ext4_handle_dirty_{dx,dirent}_node() with ext4_handle_dirty_metadata()] Signed-off-by: Zefan Li --- fs/ext4/namei.c | 27 +-- 1 file ch

[PATCH 3.4 127/177] USB: cdc-acm: add device id for GW Instek AFG-2225

2015-01-27 Thread lizf
From: Johan Hovold 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit cf84a691a61606a2e7269907d3727e2d9fa148ee upstream. Add device-id entry for GW Instek AFG-2225, which has a byte swapped bInterfaceSubClass (0x20). Reported-by: Karl Palss

[PATCH 3.4 122/177] samsung-laptop: Add broken-acpi-video quirk for NC210/NC110

2015-01-27 Thread lizf
instead. BugLink: https://bugzilla.redhat.com/show_bug.cgi?id=861573 Signed-off-by: Hans de Goede Signed-off-by: Darren Hart [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- drivers/platform/x86/samsung-laptop.c | 10 ++ 1 file changed, 10 insertions(+) diff --git a

[PATCH 3.4 120/177] tracing/syscalls: Ignore numbers outside NR_syscalls' range

2015-01-27 Thread lizf
nvalid syscall nr while tracing syscalls" Signed-off-by: Rabin Vincent Signed-off-by: Steven Rostedt [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- kernel/trace/trace_syscalls.c | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/kernel/trace/tra

[PATCH 3.4 116/177] ext4: fix oops when loading block bitmap failed

2015-01-27 Thread lizf
From: Jan Kara 3.4.106-rc1 review patch. If anyone has any objections, please let me know. -- commit 599a9b77ab289d85c2d5c8607624efbe1f552b0f upstream. When we fail to load block bitmap in __ext4_new_inode() we will dereference NULL pointer in ext4_journal_get_write_access().

[PATCH 3.4 118/177] drm/vmwgfx: Filter out modes those cannot be supported by the current VRAM size.

2015-01-27 Thread lizf
for assumed_bpp. * Fixed mechanism to check for screen objects * Limit the back buffer size to VRAM. Signed-off-by: Sinclair Yeh Reviewed-by: Thomas Hellstrom [lizf: Backported to 3.4: drop the changes to vmw_driver_load()] Signed-off-by: Zefan Li --- drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 16

<    1   2   3   4   5   6   7   8   9   10   >