[PATCH] usb: musb: make use_sg flag URB specific

From: Virupax Sadashivpetimath Since highmem PIO URB handling was introduced in: 8e8a551 usb: musb: host: Handle highmem in PIO mode when a URB is being handled it may happen that the static use_sg flag was set by a previous URB with buffer in highmem. This leads to error in handling the prese

Re: helping with tracking commits across repos

Greg> On Mon, Apr 15, 2013 at 05:13:45PM -0700, D M German wrote: >> >> >> Greg KH twisted the bytes to say: >> >> >> http://o.cs.uvic.ca:20810/perl/next.pl >> Greg> Yes, that's a great thing. Maybe the ability to see the subject: line Greg> of the commit somewhere easier than havin

[PATCH 2/2] random: Account for entropy loss due to overwrites

From: "H. Peter Anvin" When we write entropy into a non-empty pool, we currently don't account at all for the fact that we will probabilistically overwrite some of the entropy in that pool. This means that unless the pool is fully empty, we are currently *guaranteed* to overestimate the amount o

[PATCH 1/2] random: Statically compute poolbitshift, poolbytes, poolbits

From: "H. Peter Anvin" Use a macro to statically compute poolbitshift (will be used in a subsequent patch), poolbytes, and poolbits. On virtually all architectures the cost of a memory load with an offset is the same as the one of a memory load. It is still possible for this to generate worse c

Re: [PATCH] block: fix max discard sectors limit

2013/4/23, James Bottomley : > On Tue, 2013-04-23 at 22:06 +0900, Namjae Jeon wrote: >> From: Namjae Jeon > > Hey, it's very impolite to send a patch I just gave you as a suggestion > to fix the issue under your own authorship. > > What we need to know is has this been tested ... there's no tested

[ 00/42] 3.8.9-stable review

This is the start of the stable review cycle for the 3.8.9 release. There are 42 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu Apr 25 21:50:11 UTC 2013. Anything received

[ 02/42] kvm/powerpc/e500mc: fix tlb invalidation on cpu migration

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Scott Wood commit c5e6cb051c5f7d56f05bd6a4af22cb300a4ced79 upstream. The existing check handles the case where we've migrated to a different core than we last ran on, but it doesn't handle the

[ 05/42] hrtimer: Dont reinitialize a cpu_base lock on CPU_UP

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Michael Bohan commit 84cc8fd2fe65866e49d70b38b3fdf7219dd92fe0 upstream. The current code makes the assumption that a cpu_base lock won't be held if the CPU corresponding to that cpu_base is off

[ 07/42] can: sja1000: fix handling on dt properties on little endian systems

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Christoph Fritz commit 0443de5fbf224abf41f688d8487b0c307dc5a4b4 upstream. To get correct endianes on little endian cpus (like arm) while reading device tree properties, this patch replaces of_g

[ 06/42] can: mcp251x: add missing IRQF_ONESHOT to request_threaded_irq

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Marc Kleine-Budde commit db388d6460ffa53b3b38429da6f70a913f89b048 upstream. Since commit: 1c6c695 genirq: Reject bogus threaded irq requests threaded irqs must provide a primary handler o

[ 09/42] hugetlbfs: add swap entry check in follow_hugetlb_page()

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Naoya Horiguchi commit 9cc3a5bd40067b9a0fbd49199d0780463fc2140f upstream. With applying the previous patch "hugetlbfs: stop setting VM_DONTDUMP in initializing vma(VM_HUGETLB)" to reenable huge

[ 08/42] hugetlbfs: stop setting VM_DONTDUMP in initializing vma(VM_HUGETLB)

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Naoya Horiguchi commit a2fce9143057f4eb7675a21cca1b6beabe585c8b upstream. Currently we fail to include any data on hugepages into coredump, because VM_DONTDUMP is set on hugetlbfs's vma. This

[ 10/42] fs/binfmt_elf.c: fix hugetlb memory check in vma_dump_size()

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Naoya Horiguchi commit 23d9e482136e31c9d287633a6e473daa172767c4 upstream. Documentation/filesystems/proc.txt says about coredump_filter bitmask, Note bit 0-4 doesn't effect any hugetlb memor

[ 14/42] KVM: x86: fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (CVE-2013-1796)

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Andy Honig commit c300aa64ddf57d9c5d9c898a64b36877345dd4a9 upstream. If the guest sets the GPA of the time_page so that the request to update the time straddles a page then KVM will write onto

[ 11/42] kernel/signal.c: stop info leak via the tkill and the tgkill syscalls

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Emese Revfy commit b9e146d8eb3b9ecae5086d373b50fa0c1f3e7f0f upstream. This fixes a kernel memory contents leak via the tkill and tgkill syscalls for compat processes. This is visible in the si

[ 15/42] KVM: x86: Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache functions (CVE-2013-1797)

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Andy Honig commit 0b79459b482e85cb7426aa7da683a9f2c97aeae1 upstream. There is a potential use after free issue with the handling of MSR_KVM_SYSTEM_TIME. If the guest specifies a GPA in a movab

[ 03/42] ARM: Do 15e0d9e37c (ARM: pm: let platforms select cpu_suspend support) properly

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Russell King commit b6c7aabd923a17af993c5a5d5d7995f0b27c000a upstream. Let's do the changes properly and fix the same problem everywhere, not just for one case. Signed-off-by: Russell King Si

[ 17/42] KVM: Allow cross page reads and writes from cached translations.

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Andrew Honig commit 8f964525a121f2ff2df948dac908dcc65be21b5b upstream. This patch adds support for kvm_gfn_to_hva_cache_init functions for reads and writes that will cross a page. If the range

[ 16/42] KVM: Fix bounds checking in ioapic indirect register reads (CVE-2013-1798)

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Andy Honig commit a2c118bfab8bc6b8bb213abfc35201e441693d55 upstream. If the guest specifies a IOAPIC_REG_SELECT with an invalid value and follows that with a read of the IOAPIC_REG_WINDOW KVM d

[ 13/42] md: raid1,10: Handle REQ_WRITE_SAME flag in write bios

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Joe Lawrence commit c8dc9c654794a765ca61baed07f84ed8aaa7ca8c upstream. Set mddev queue's max_write_same_sectors to its chunk_sector value (before disk_stack_limits merges the underlying disk li

[ 18/42] ARM: i.MX35: enable MAX clock

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Sascha Hauer commit 5dc2eb7da1e387e31ce54f54af580c6a6f512ca6 upstream. The i.MX35 has two bits per clock gate which are decoded as follows: 0b00 -> clock off 0b01 -> clock is on in

[ 19/42] ARM: clk-imx35: Bugfix iomux clock

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Markus Pargmann commit cab1e0a36c9dd0b0671fb84197ed294513f5adc1 upstream. This patch enables iomuxc_gate clock. It is necessary to be able to reconfigure iomux pads. Without this clock enabled,

[ 20/42] tg3: Add 57766 device support.

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Matt Carlson commit d3f677afb8076d09d090ff0a5d1229c9dd9f136e upstream. The patch also adds a couple of fixes - For the 57766 and non Ax versions of 57765, bootcode needs to setup the PCIE

[ 21/42] sched: Convert BUG_ON()s in try_to_wake_up_local() to WARN_ON_ONCE()s

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Tejun Heo commit 383efcd00053ec40023010ce5034bd702e7ab373 upstream. try_to_wake_up_local() should only be invoked to wake up another task in the same runqueue and BUG_ON()s are used to enforce

[ 24/42] ARM: 7698/1: perf: fix group validation when using enable_on_exec

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Will Deacon commit cb2d8b342aa084d1f3ac29966245dec9163677fb upstream. Events may be created with attr->disabled == 1 and attr->enable_on_exec == 1, which confuses the group validation code beca

[ 23/42] ARM: 7696/1: Fix kexec by setting outer_cache.inv_all for Feroceon

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Illia Ragozin commit cd272d1ea71583170e95dde02c76166c7f9017e6 upstream. On Feroceon the L2 cache becomes non-coherent with the CPU when the L1 caches are disabled. Thus the L2 needs to be inval

[ 25/42] ath9k_htc: accept 1.x firmware newer than 1.3

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Felix Fietkau commit 319e7bd96aca64a478f3aad40711c928405b8b77 upstream. Since the firmware has been open sourced, the minor version has been bumped to 1.4 and the API/ABI will stay compatible a

[ 22/42] sched/debug: Fix sd->*_idx limit range avoiding overflow

3.8-stable review patch. If anyone has any objections, please let me know. -- From: libin commit fd9b86d37a600488dbd80fe60cca46b822bff1cd upstream. Commit 201c373e8e ("sched/debug: Limit sd->*_idx range on sysctl") was an incomplete bug fix. This patch fixes sd->*_idx limit r

[ 27/42] mac80211: fix cfg80211 interaction on auth/assoc request

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Johannes Berg commit 7b119dc06d871405fc7c3e9a73a6c987409ba639 upstream. If authentication (or association with FT) is requested by userspace, mac80211 currently doesn't tell cfg80211 that it di

[ 33/42] userns: Check uid_maps openers fsuid, not the current fsuid

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Andy Lutomirski commit e3211c120a85b792978bcb4be7b2886df18d27f0 upstream. Signed-off-by: Andy Lutomirski Signed-off-by: Greg Kroah-Hartman --- kernel/user_namespace.c |4 ++-- 1 file ch

[ 28/42] ssb: implement spurious tone avoidance

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Rafał Miłecki commit 46fc4c909339f5a84d1679045297d9d2fb596987 upstream. And make use of it in b43. This fixes a regression introduced with 49d55cef5b1925a5c1efb6aaddaa40fc7c693335 b43: N-PHY: i

[ 32/42] userns: Dont let unprivileged users trick privileged users into setting the id_map

3.8-stable review patch. If anyone has any objections, please let me know. -- From: "Eric W. Biederman" commit 6708075f104c3c9b04b23336bb0366ca30c3931b upstream. When we require privilege for setting /proc//uid_map or /proc//gid_map no longer allow an unprivileged user to open

[ 34/42] userns: Changing any namespace id mappings should require privileges

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Andy Lutomirski commit 41c21e351e79004dbb4efa4bc14a53a7e0af38c5 upstream. Changing uid/gid/projid mappings doesn't change your id within the namespace; it reconfigures the namespace. Unprivile

[ 29/42] crypto: algif - suppress sending source address information in recvmsg

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Mathias Krause commit 72a763d805a48ac8c0bf48fdb510e84c12de51fe upstream. The current code does not set the msg_namelen member to 0 and therefore makes net/socket.c leak the local sockaddr_stora

[ 30/42] perf: Treat attr.config as u64 in perf_swevent_init()

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Tommi Rantala commit 8176cced706b5e5d15887584150764894e94e02f upstream. Trinity discovered that we fail to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds acce

[ 35/42] vm: add vm_iomap_memory() helper function

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit b4cbb197c7e7a68dbad0d491242e3ca67420c13e upstream. Various drivers end up replicating the code to mmap() their memory buffers into user space, and our core memory remappin

[ 36/42] vm: convert snd_pcm_lib_mmap_iomem() to vm_iomap_memory() helper

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit 0fe09a45c4848b5b5607b968d959fdc1821c161d upstream. This is my example conversion of a few existing mmap users. The pcm mmap case is one of the more straightforward ones.

[ 37/42] vm: convert fb_mmap to vm_iomap_memory() helper

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit fc9bbca8f650e5f738af8806317c0a041a48ae4a upstream. This is my example conversion of a few existing mmap users. The fb_mmap() case is a good example because it is a bit mo

[ 38/42] vm: convert HPET mmap to vm_iomap_memory() helper

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit 2323036dfec8ce3ce6e1c86a49a31b039f3300d1 upstream. This is my example conversion of a few existing mmap users. The HPET case is simple, widely available, and easy to test

[ 39/42] vm: convert mtdchar mmap to vm_iomap_memory() helper

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit 8558e4a26b00225efeb085725bc319f91201b239 upstream. This is my example conversion of a few existing mmap users. The mtdchar case is actually disabled right now (and stays

[ 40/42] Btrfs: make sure nbytes are right after log replay

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Josef Bacik commit 4bc4bee4595662d8bff92180d5c32e3313a704b0 upstream. While trying to track down a tree log replay bug I noticed that fsck was always complaining about nbytes not being right fo

[ 02/26] hrtimer: Dont reinitialize a cpu_base lock on CPU_UP

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Michael Bohan commit 84cc8fd2fe65866e49d70b38b3fdf7219dd92fe0 upstream. The current code makes the assumption that a cpu_base lock won't be held if the CPU corresponding to that cpu_base is off

[ 03/26] can: sja1000: fix handling on dt properties on little endian systems

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Christoph Fritz commit 0443de5fbf224abf41f688d8487b0c307dc5a4b4 upstream. To get correct endianes on little endian cpus (like arm) while reading device tree properties, this patch replaces of_g

[ 01/26] ARM: Do 15e0d9e37c (ARM: pm: let platforms select cpu_suspend support) properly

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Russell King commit b6c7aabd923a17af993c5a5d5d7995f0b27c000a upstream. Let's do the changes properly and fix the same problem everywhere, not just for one case. Signed-off-by: Russell King Si

[ 31/42] perf/x86: Fix offcore_rsp valid mask for SNB/IVB

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Stephane Eranian commit f1923820c447e986a9da0fc6bf60c1dccdf0408e upstream. The valid mask for both offcore_response_0 and offcore_response_1 was wrong for SNB/SNB-EP, IVB/IVB-EP. It was possibl

[ 04/26] hugetlbfs: add swap entry check in follow_hugetlb_page()

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Naoya Horiguchi commit 9cc3a5bd40067b9a0fbd49199d0780463fc2140f upstream. With applying the previous patch "hugetlbfs: stop setting VM_DONTDUMP in initializing vma(VM_HUGETLB)" to reenable huge

[ 00/26] 3.4.42-stable review

This is the start of the stable review cycle for the 3.4.42 release. There are 26 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu Apr 25 21:52:47 UTC 2013. Anything receive

[ 05/26] kernel/signal.c: stop info leak via the tkill and the tgkill syscalls

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Emese Revfy commit b9e146d8eb3b9ecae5086d373b50fa0c1f3e7f0f upstream. This fixes a kernel memory contents leak via the tkill and tgkill syscalls for compat processes. This is visible in the si

[ 07/26] KVM: x86: fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (CVE-2013-1796)

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Andy Honig commit c300aa64ddf57d9c5d9c898a64b36877345dd4a9 upstream. If the guest sets the GPA of the time_page so that the request to update the time straddles a page then KVM will write onto

[ 08/26] KVM: x86: Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache functions (CVE-2013-1797)

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Andy Honig commit 0b79459b482e85cb7426aa7da683a9f2c97aeae1 upstream. There is a potential use after free issue with the handling of MSR_KVM_SYSTEM_TIME. If the guest specifies a GPA in a movab

[ 06/26] hfsplus: fix potential overflow in hfsplus_file_truncate()

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Vyacheslav Dubeyko commit 12f267a20aecf8b84a2a9069b9011f1661c779b4 upstream. Change a u32 to loff_t hfsplus_file_truncate(). Signed-off-by: Vyacheslav Dubeyko Cc: Christoph Hellwig Cc: Al Vi

[ 09/26] KVM: Fix bounds checking in ioapic indirect register reads (CVE-2013-1798)

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Andy Honig commit a2c118bfab8bc6b8bb213abfc35201e441693d55 upstream. If the guest specifies a IOAPIC_REG_SELECT with an invalid value and follows that with a read of the IOAPIC_REG_WINDOW KVM d

[ 14/26] ath9k_htc: accept 1.x firmware newer than 1.3

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Felix Fietkau commit 319e7bd96aca64a478f3aad40711c928405b8b77 upstream. Since the firmware has been open sourced, the minor version has been bumped to 1.4 and the API/ABI will stay compatible a

[ 10/26] KVM: Allow cross page reads and writes from cached translations.

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Andrew Honig commit 8f964525a121f2ff2df948dac908dcc65be21b5b upstream. This patch adds support for kvm_gfn_to_hva_cache_init functions for reads and writes that will cross a page. If the range

[ 17/26] crypto: algif - suppress sending source address information in recvmsg

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Mathias Krause commit 72a763d805a48ac8c0bf48fdb510e84c12de51fe upstream. The current code does not set the msg_namelen member to 0 and therefore makes net/socket.c leak the local sockaddr_stora

[ 15/26] ath9k_hw: change AR9580 initvals to fix a stability issue

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Felix Fietkau commit f09a878511997c25a76bf111a32f6b8345a701a5 upstream. The hardware parsing of Control Wrapper Frames needs to be disabled, as it has been causing spurious decryption error rep

[ 13/26] ARM: 7698/1: perf: fix group validation when using enable_on_exec

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Will Deacon commit cb2d8b342aa084d1f3ac29966245dec9163677fb upstream. Events may be created with attr->disabled == 1 and attr->enable_on_exec == 1, which confuses the group validation code beca

[ 12/26] ARM: 7696/1: Fix kexec by setting outer_cache.inv_all for Feroceon

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Illia Ragozin commit cd272d1ea71583170e95dde02c76166c7f9017e6 upstream. On Feroceon the L2 cache becomes non-coherent with the CPU when the L1 caches are disabled. Thus the L2 needs to be inval

[ 18/26] perf: Treat attr.config as u64 in perf_swevent_init()

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Tommi Rantala commit 8176cced706b5e5d15887584150764894e94e02f upstream. Trinity discovered that we fail to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds acce

[ 20/26] fbcon: fix locking harder

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Dave Airlie commit 054430e773c9a1e26f38e30156eff02dedfffc17 upstream. Okay so Alan's patch handled the case where there was no registered fbcon, however the other path entered in set_con2fb_map

[ 21/26] vm: add vm_iomap_memory() helper function

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit b4cbb197c7e7a68dbad0d491242e3ca67420c13e upstream. Various drivers end up replicating the code to mmap() their memory buffers into user space, and our core memory remappin

[ 22/26] vm: convert snd_pcm_lib_mmap_iomem() to vm_iomap_memory() helper

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit 0fe09a45c4848b5b5607b968d959fdc1821c161d upstream. This is my example conversion of a few existing mmap users. The pcm mmap case is one of the more straightforward ones.

[ 02/23] Revert "8021q: fix a potential use-after-free"

3.0-stable review patch. If anyone has any objections, please let me know. -- This reverts commit 9829fe9806e22d7a822f4c947cc432c8d1774b54 which is upstream commit 4a7df340ed1bac190c124c1601bfc10cde9fb4fb It turns out this causes problems on the 3.0-stable release. Reported-by

[ 00/23] 3.0.75-stable review

This is the start of the stable review cycle for the 3.0.75 release. There are 23 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu Apr 25 21:54:13 UTC 2013. Anything receive

[ 03/23] can: sja1000: fix handling on dt properties on little endian systems

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Christoph Fritz commit 0443de5fbf224abf41f688d8487b0c307dc5a4b4 upstream. To get correct endianes on little endian cpus (like arm) while reading device tree properties, this patch replaces of_g

[ 23/26] vm: convert fb_mmap to vm_iomap_memory() helper

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit fc9bbca8f650e5f738af8806317c0a041a48ae4a upstream. This is my example conversion of a few existing mmap users. The fb_mmap() case is a good example because it is a bit mo

[ 05/23] kernel/signal.c: stop info leak via the tkill and the tgkill syscalls

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Emese Revfy commit b9e146d8eb3b9ecae5086d373b50fa0c1f3e7f0f upstream. This fixes a kernel memory contents leak via the tkill and tgkill syscalls for compat processes. This is visible in the si

[ 04/23] hugetlbfs: add swap entry check in follow_hugetlb_page()

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Naoya Horiguchi commit 9cc3a5bd40067b9a0fbd49199d0780463fc2140f upstream. With applying the previous patch "hugetlbfs: stop setting VM_DONTDUMP in initializing vma(VM_HUGETLB)" to reenable huge

[ 06/23] hfsplus: fix potential overflow in hfsplus_file_truncate()

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Vyacheslav Dubeyko commit 12f267a20aecf8b84a2a9069b9011f1661c779b4 upstream. Change a u32 to loff_t hfsplus_file_truncate(). Signed-off-by: Vyacheslav Dubeyko Cc: Christoph Hellwig Cc: Al Vi

[ 08/23] KVM: x86: Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache functions (CVE-2013-1797)

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Andy Honig commit 0b79459b482e85cb7426aa7da683a9f2c97aeae1 upstream. There is a potential use after free issue with the handling of MSR_KVM_SYSTEM_TIME. If the guest specifies a GPA in a movab

[ 09/23] KVM: Fix bounds checking in ioapic indirect register reads (CVE-2013-1798)

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Andy Honig commit a2c118bfab8bc6b8bb213abfc35201e441693d55 upstream. If the guest specifies a IOAPIC_REG_SELECT with an invalid value and follows that with a read of the IOAPIC_REG_WINDOW KVM d

[ 13/23] sched: Convert BUG_ON()s in try_to_wake_up_local() to WARN_ON_ONCE()s

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Tejun Heo commit 383efcd00053ec40023010ce5034bd702e7ab373 upstream. try_to_wake_up_local() should only be invoked to wake up another task in the same runqueue and BUG_ON()s are used to enforce

[ 01/23] hrtimer: Dont reinitialize a cpu_base lock on CPU_UP

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Michael Bohan commit 84cc8fd2fe65866e49d70b38b3fdf7219dd92fe0 upstream. The current code makes the assumption that a cpu_base lock won't be held if the CPU corresponding to that cpu_base is off

[ 14/23] crypto: algif - suppress sending source address information in recvmsg

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Mathias Krause commit 72a763d805a48ac8c0bf48fdb510e84c12de51fe upstream. The current code does not set the msg_namelen member to 0 and therefore makes net/socket.c leak the local sockaddr_stora

[ 12/23] ath9k_htc: accept 1.x firmware newer than 1.3

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Felix Fietkau commit 319e7bd96aca64a478f3aad40711c928405b8b77 upstream. Since the firmware has been open sourced, the minor version has been bumped to 1.4 and the API/ABI will stay compatible a

[ 15/23] Revert "sysfs: fix race between readdir and lseek"

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Jiri Kosina This reverts commit 991f76f837bf22c5bb07261cfd86525a0a96650c in Linus' tree which is f366c8f271888f48e15cc7c0ab70f184c220c8a4 in linux-stable.git It depends on ef3d0fd27e90f ("vfs:

[ 16/23] perf: Treat attr.config as u64 in perf_swevent_init()

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Tommi Rantala commit 8176cced706b5e5d15887584150764894e94e02f upstream. Trinity discovered that we fail to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds acce

[ 18/23] vm: add vm_iomap_memory() helper function

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit b4cbb197c7e7a68dbad0d491242e3ca67420c13e upstream. Various drivers end up replicating the code to mmap() their memory buffers into user space, and our core memory remappin

[ 17/23] fbcon: fix locking harder

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Dave Airlie commit 054430e773c9a1e26f38e30156eff02dedfffc17 upstream. Okay so Alan's patch handled the case where there was no registered fbcon, however the other path entered in set_con2fb_map

[ 11/23] ARM: 7696/1: Fix kexec by setting outer_cache.inv_all for Feroceon

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Illia Ragozin commit cd272d1ea71583170e95dde02c76166c7f9017e6 upstream. On Feroceon the L2 cache becomes non-coherent with the CPU when the L1 caches are disabled. Thus the L2 needs to be inval

[ 23/23] Btrfs: make sure nbytes are right after log replay

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Josef Bacik commit 4bc4bee4595662d8bff92180d5c32e3313a704b0 upstream. While trying to track down a tree log replay bug I noticed that fsck was always complaining about nbytes not being right fo

[ 19/23] vm: convert snd_pcm_lib_mmap_iomem() to vm_iomap_memory() helper

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit 0fe09a45c4848b5b5607b968d959fdc1821c161d upstream. This is my example conversion of a few existing mmap users. The pcm mmap case is one of the more straightforward ones.

[ 20/23] vm: convert fb_mmap to vm_iomap_memory() helper

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit fc9bbca8f650e5f738af8806317c0a041a48ae4a upstream. This is my example conversion of a few existing mmap users. The fb_mmap() case is a good example because it is a bit mo

[ 21/23] vm: convert HPET mmap to vm_iomap_memory() helper

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit 2323036dfec8ce3ce6e1c86a49a31b039f3300d1 upstream. This is my example conversion of a few existing mmap users. The HPET case is simple, widely available, and easy to test

[ 10/23] KVM: Allow cross page reads and writes from cached translations.

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Andrew Honig commit 8f964525a121f2ff2df948dac908dcc65be21b5b upstream. This patch adds support for kvm_gfn_to_hva_cache_init functions for reads and writes that will cross a page. If the range

[ 22/23] vm: convert mtdchar mmap to vm_iomap_memory() helper

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit 8558e4a26b00225efeb085725bc319f91201b239 upstream. This is my example conversion of a few existing mmap users. The mtdchar case is actually disabled right now (and stays

[ 07/23] KVM: x86: fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (CVE-2013-1796)

3.0-stable review patch. If anyone has any objections, please let me know. -- From: Andy Honig commit c300aa64ddf57d9c5d9c898a64b36877345dd4a9 upstream. If the guest sets the GPA of the time_page so that the request to update the time straddles a page then KVM will write onto

[ 24/26] vm: convert HPET mmap to vm_iomap_memory() helper

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit 2323036dfec8ce3ce6e1c86a49a31b039f3300d1 upstream. This is my example conversion of a few existing mmap users. The HPET case is simple, widely available, and easy to test

[ 16/26] ssb: implement spurious tone avoidance

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Rafał Miłecki commit 46fc4c909339f5a84d1679045297d9d2fb596987 upstream. And make use of it in b43. This fixes a regression introduced with 49d55cef5b1925a5c1efb6aaddaa40fc7c693335 b43: N-PHY: i

[ 26/26] Btrfs: make sure nbytes are right after log replay

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Josef Bacik commit 4bc4bee4595662d8bff92180d5c32e3313a704b0 upstream. While trying to track down a tree log replay bug I noticed that fsck was always complaining about nbytes not being right fo

[ 25/26] vm: convert mtdchar mmap to vm_iomap_memory() helper

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit 8558e4a26b00225efeb085725bc319f91201b239 upstream. This is my example conversion of a few existing mmap users. The mtdchar case is actually disabled right now (and stays

[ 19/26] perf/x86: Fix offcore_rsp valid mask for SNB/IVB

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Stephane Eranian commit f1923820c447e986a9da0fc6bf60c1dccdf0408e upstream. The valid mask for both offcore_response_0 and offcore_response_1 was wrong for SNB/SNB-EP, IVB/IVB-EP. It was possibl

[ 11/26] sched: Convert BUG_ON()s in try_to_wake_up_local() to WARN_ON_ONCE()s

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Tejun Heo commit 383efcd00053ec40023010ce5034bd702e7ab373 upstream. try_to_wake_up_local() should only be invoked to wake up another task in the same runqueue and BUG_ON()s are used to enforce

[ 42/42] Revert "MIPS: page.h: Provide more readable definition for PAGE_MASK."

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Ralf Baechle commit 3b5e50edaf500f392f4a372296afc0b99ffa7e70 upstream. This reverts commit c17a6554782ad531f4713b33fd6339ba67ef6391. Manuel Lauss writes: lmo commit c17a6554 (MIPS: page.h: Pr

[ 41/42] s390: move dummy io_remap_pfn_range() to asm/pgtable.h

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit 4f2e29031e6c67802e7370292dd050fd62f337ee upstream. Commit b4cbb197c7e7 ("vm: add vm_iomap_memory() helper function") added a helper function wrapper around io_remap_pfn_ra

[ 26/42] ath9k_hw: change AR9580 initvals to fix a stability issue

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Felix Fietkau commit f09a878511997c25a76bf111a32f6b8345a701a5 upstream. The hardware parsing of Control Wrapper Frames needs to be disabled, as it has been causing spurious decryption error rep

[ 12/42] hfsplus: fix potential overflow in hfsplus_file_truncate()

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Vyacheslav Dubeyko commit 12f267a20aecf8b84a2a9069b9011f1661c779b4 upstream. Change a u32 to loff_t hfsplus_file_truncate(). Signed-off-by: Vyacheslav Dubeyko Cc: Christoph Hellwig Cc: Al Vi

[ 01/42] powerpc: add a missing label in resume_kernel

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Kevin Hao commit d8b92292408831d86ff7b781e66bf79301934b99 upstream. A label 0 was missed in the patch a9c4e541 (powerpc/kprobe: Complete kprobe and migrate exception frame). This will cause the

[ 04/42] kthread: Prevent unpark race which puts threads on the wrong cpu

3.8-stable review patch. If anyone has any objections, please let me know. -- From: Thomas Gleixner commit f2530dc71cf0822f90bb63ea4600caaef33a66bb upstream. The smpboot threads rely on the park/unpark mechanism which binds per cpu threads on a particular core. Though the func

+ random-fix-accounting-race-condition-with-lockless-irq-entropy_count-update.patch added to -mm tree

The patch titled Subject: random: fix accounting race condition with lockless irq entropy_count update has been added to the -mm tree. Its filename is random-fix-accounting-race-condition-with-lockless-irq-entropy_count-update.patch Before you just go and hit "reply", please: a) C

  1   2   >