[PATCH 3.9-stable] iwlwifi: mvm: tell firmware to let multicast frames in

2013-05-27 Thread Lingzhu Xiang
Commit 51b6b9e029e81c857f9d8d17060f499cd25febdb upstream. Backported for 3.9-stable. Adjusted context. From: Emmanuel Grumbach Without this command, the firmware will filter out all the multicast frames. Let them all in as for now. Later we will want to optimize this to save power. Cc: stable@

[PATCH 3.9-stable] iwlwifi: mvm: fix aggregation drain flow

2013-05-27 Thread Lingzhu Xiang
Commit e3d4bc8cc0230e8dc8033484666f03f87392a8c4 upstream. Backported for 3.9-stable. Reinstated IWL_FIRST_AMPDU_QUEUE which was obsoleted by IWL_MVM_FIRST_AGG_QUEUE in 398e8c6 3.10-rc1. And adjusted context. From: Emmanuel Grumbach Move the counter for non-AMPDU frames to mvm. It is needed for

RE: [PATCH 3.9-stable] iwlwifi: mvm: fix aggregation drain flow

2013-05-27 Thread Grumbach, Emmanuel
> > Commit e3d4bc8cc0230e8dc8033484666f03f87392a8c4 upstream. > > Backported for 3.9-stable. Reinstated IWL_FIRST_AMPDU_QUEUE which was > obsoleted by IWL_MVM_FIRST_AGG_QUEUE in 398e8c6 3.10-rc1. And adjusted > context. > > From: Emmanuel Grumbach > > Move the counter for non-AMPDU frames to m

RE: [PATCH 3.9-stable] iwlwifi: mvm: tell firmware to let multicast frames in

2013-05-27 Thread Grumbach, Emmanuel
> Commit 51b6b9e029e81c857f9d8d17060f499cd25febdb upstream. > > Backported for 3.9-stable. Adjusted context. > > From: Emmanuel Grumbach > > Without this command, the firmware will filter out all the multicast frames. > Let > them all in as for now. Later we will want to optimize this to save

Re: [PATCH 3.9-stable] staging:iio:light:tsl2x7x: fix the error handling in tsl2x7x_probe()

2013-05-27 Thread Luis Henriques
Hi Jonghwan, Jonghwan Choi writes: > This patch looks like it should be in the 3.9-stable tree, should we apply > it? I'm queuing this patch to the 3.5 kernel as well, as it looks like it is also applicable. Cheers, -- Luis > > -- > > From: "Wei Yongjun " > > commit 3b813798

[PATCH] clocksource: dw_apb: fix error check

2013-05-27 Thread Baruch Siach
irq_of_parse_and_map() returns 0 on error, while the code checks for NO_IRQ. This breaks on platforms that have NO_IRQ != 0. Cc: Signed-off-by: Baruch Siach --- drivers/clocksource/dw_apb_timer_of.c |2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/clocksource/dw_ap

[PATCH 6/8] USB: iuu_phoenix: fix bulk-message timeout

2013-05-27 Thread Johan Hovold
The bulk-message timeout is specified in milliseconds and should not depend on HZ. Cc: stable@vger.kernel.org Signed-off-by: Johan Hovold --- drivers/usb/serial/iuu_phoenix.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/usb/serial/iuu_phoenix.c b/drivers/usb/se

[PATCH 1/8] USB: serial: fix Treo/Kyocera interrrupt-in urb context

2013-05-27 Thread Johan Hovold
The first and second interrupt-in urbs are swapped for some Treo/Kyocera devices, but the urb context was never updated with the new port. Cc: stable@vger.kernel.org Signed-off-by: Johan Hovold --- drivers/usb/serial/visor.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/usb/serial/

[PATCH 7/8] USB: mos7720: fix message timeouts

2013-05-27 Thread Johan Hovold
The control and bulk-message timeouts are specified in milliseconds and should not depend on HZ. Cc: stable@vger.kernel.org Signed-off-by: Johan Hovold --- drivers/usb/serial/mos7720.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/drivers/usb/serial/mos7720.c b/driver

[PATCH 4/8] USB: mos7840: fix DMA to stack

2013-05-27 Thread Johan Hovold
Fix regression introduced by commit 0eafe4de1a ("USB: serial: mos7840: add support for MCS7810 devices") which used stack-allocated buffers for control messages. Cc: stable@vger.kernel.org Signed-off-by: Johan Hovold --- drivers/usb/serial/mos7840.c | 35 +++ 1 fi

[PATCH 5/8] USB: ark3116: fix control-message timeout

2013-05-27 Thread Johan Hovold
The control-message timeout is specified in milliseconds and should not depend on HZ. Cc: stable@vger.kernel.org Signed-off-by: Johan Hovold --- drivers/usb/serial/ark3116.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/usb/serial/ark3116.c b/drivers/usb/serial/ark3

[PATCH 3/8] USB: mos7720: fix DMA to stack

2013-05-27 Thread Johan Hovold
The read_mos_reg function is called with stack-allocated buffers, which must not be used for control messages. Cc: stable@vger.kernel.org Signed-off-by: Johan Hovold --- drivers/usb/serial/mos7720.c | 17 ++--- 1 file changed, 14 insertions(+), 3 deletions(-) diff --git a/drivers/us

[PATCH 8/8] USB: zte_ev: fix control-message timeouts

2013-05-27 Thread Johan Hovold
The control-message timeout is specified in milliseconds and should not depend on HZ. Cc: stable@vger.kernel.org Signed-off-by: Johan Hovold --- drivers/usb/serial/zte_ev.c | 28 ++-- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/drivers/usb/serial/zte_e

[PATCH 2/8] USB: visor: fix initialisation of Treo/Kyocera devices

2013-05-27 Thread Johan Hovold
Fix regression introduced by commit 214916f2e ("USB: visor: reimplement using generic framework") which broke initialisation of Treo/Kyocera devices that re-mapped bulk-in endpoints. Cc: stable@vger.kernel.org Signed-off-by: Johan Hovold --- drivers/usb/serial/visor.c | 8 1 file change

[PATCH] ARM: SAMSUNG: Export MIPI CSIS/DSIM PHY control functions

2013-05-27 Thread Sylwester Nawrocki
commit 30da66eafc015cd7e952829eaf8f86d8680f86d9 upstream The s5p_csis_phy_enable/s5p_dsim_phy_enable functions are now used directly by corresponding drivers and thus need to be exported so the drivers can be built as modules. Signed-off-by: Sylwester Nawrocki Signed-off-by: Kyungmin Park Signe

Re: [PATCH] clocksource: dw_apb: fix error check

2013-05-27 Thread Daniel Lezcano
On 05/27/2013 01:51 PM, Baruch Siach wrote: > irq_of_parse_and_map() returns 0 on error, while the code checks for NO_IRQ. > This breaks on platforms that have NO_IRQ != 0. > > Cc: > Signed-off-by: Baruch Siach > --- Shouldn't the 'irq_of_parse_and_map' function to be fixed and return NO_IRQ in

Re: [PATCH] clocksource: dw_apb: fix error check

2013-05-27 Thread Baruch Siach
Hi Daniel, On Mon, May 27, 2013 at 03:14:23PM +0200, Daniel Lezcano wrote: > On 05/27/2013 01:51 PM, Baruch Siach wrote: > > irq_of_parse_and_map() returns 0 on error, while the code checks for NO_IRQ. > > This breaks on platforms that have NO_IRQ != 0. > > > > Cc: > > Signed-off-by: Baruch Siac

Re: [PATCH] clocksource: dw_apb: fix error check

2013-05-27 Thread Daniel Lezcano
On 05/27/2013 03:49 PM, Baruch Siach wrote: > Hi Daniel, > > On Mon, May 27, 2013 at 03:14:23PM +0200, Daniel Lezcano wrote: >> On 05/27/2013 01:51 PM, Baruch Siach wrote: >>> irq_of_parse_and_map() returns 0 on error, while the code checks for NO_IRQ. >>> This breaks on platforms that have NO_IRQ

[PATCH for 3.10 1/7] brcmfmac: Turn off ARP offloading when configured for AP.

2013-05-27 Thread Arend van Spriel
From: Hante Meuleman ARP offloading should only be used in STA or P2P client mode. It is currently configured once at init. When being configured for AP ARP offloading should be turned off and when AP mode is left it can be turned back on. Cc: stable@vger.kernel.org Reviewed-by: Arend Van Spriel

Re: [stable] xhci: Don't warn on empty ring for suspended devices.

2013-05-27 Thread Ben Hutchings
On Wed, 2013-05-08 at 17:52 +0100, Luis Henriques wrote: > Xiong Y Zhang pointed out that this fix could be applied to stable to > avoid log spam when USB devices are suspended. > > commit a83d6755814e4614ba77e15d82796af0f695c6b8 > Author: Sarah Sharp > Date: Mon Mar 18 10:19:51 2013 -0700 > >

[stable] usb-audio validation fixes [3.0, 3.2]

2013-05-27 Thread Ben Hutchings
It looks these fixes are suitable for inclusion in the 3.0.y and 3.2.y stable branches: commit 4fa0e81b83503900be277e6273a79651b375e288 Author: Xi Wang Date: Sun Jan 8 09:02:52 2012 -0500 ALSA: usb-audio: fix possible hang and overflow in parse_uac2_sample_rate_range() commit 8866f405efd

Re: [ 22/42] sched/debug: Fix sd->*_idx limit range avoiding overflow

2013-05-27 Thread Ben Hutchings
On Fri, 2013-05-10 at 09:59 +0200, Ingo Molnar wrote: > * Ben Hutchings wrote: > > > On Tue, 2013-04-23 at 14:52 -0700, Greg Kroah-Hartman wrote: > > > 3.8-stable review patch. If anyone has any objections, please let me > > > know. > > > > > > -- > > > > > > From: libin > >

Re: [PATCH] pch_dma: Use GFP_ATOMIC because called from interrupt context

2013-05-27 Thread Ben Hutchings
On Mon, 2013-05-13 at 18:58 +1100, Tomoya MORINAGA wrote: > pdc_desc_get() is called from pd_prep_slave_sg, and the function is > called from interrupt context(e.g. Uart driver "pch_uart.c"). > In fact, I saw kernel error message. > So, GFP_ATOMIC must be used not GFP_NOIO. > > commitID:5c1ef59168

Re: [PATCH 3.9-stable ]drbd: fix for deadlock when using automatic split-brain-recovery

2013-05-27 Thread Ben Hutchings
On Tue, 2013-05-14 at 15:25 +0200, 'Lars Ellenberg' wrote: > On Tue, May 14, 2013 at 01:56:55PM +0100, Luis Henriques wrote: > > On Thu, May 09, 2013 at 08:14:47AM +0900, Jonghwan Choi wrote: > > > This patch looks like it should be in the 3.9-stable tree, should we apply > > > it? > > > > This se

[PATCH] Platform/HP: Fix misuse variable bluetooth_rfkill in the hp_wmi_rfkill_setup()

2013-05-27 Thread Lan Tianyu
HP wmi platform driver fails to initialize GPS and causes poweroff failure in HP Elitebook 6930p. [9.462428] Call Trace: [9.462449] [] hp_wmi_bios_setup+0x25a/0x3a0 [hp_wmi] [9.462493] [] platform_drv_probe+0x3c/0x70 [9.462530] [] ? driver_sysfs_add+0x7a/0xb0 [9.462566] []

Re: [PATCHES] Networking bug fixes for -stable.

2013-05-27 Thread Ben Hutchings
On Wed, 2013-05-15 at 20:26 -0700, David Miller wrote: > Please queue up the following -stable patches for 3.0.x, 3.2.x, 3.4.x, > and 3.9.x, respectively. > > Thanks! Queued up for 3.2, thanks. Ben. -- Ben Hutchings If at first you don't succeed, you're doing about average. signature.asc Des

Re: [PATCH stable < v3.7] media mantis: fix silly crash case

2013-05-27 Thread Ben Hutchings
On Tue, 2013-05-21 at 15:07 +0200, Bjørn Mork wrote: > Hello, > > Please apply mainline commit e1d45ae to any maintained stable kernel > prior to v3.7. I just hit this bug on a Debian 3.2.41-2+deb7u2 kernel: [...] Queued up for 3.2, thanks. Ben. -- Ben Hutchings If at first you don't succeed,

Re: Backport of "drm/i915: Fix detection of base of stolen memory"

2013-05-27 Thread Ben Hutchings
On Tue, 2013-05-21 at 22:27 +0200, Daniel Vetter wrote: > Hi Ben, > > The 3.2.x stable backport patch > > commit 53e587aa5ca81497d0ea6e340320ec5778d1f311 > Author: Chris Wilson > Date: Thu Nov 15 11:32:18 2012 + > > drm/i915: Fix detection of base of stolen memory > > errornously add

Re: Kernel v3.2 used in SlackWare 14.00 please, backport all needed patches Re: [PATCH net, 1/2] hyperv: Fix a kernel warning from netvsc_linkstatus_callback()

2013-05-27 Thread Ben Hutchings
On Thu, 2013-05-23 at 16:14 +0300, Victor Miasnikov wrote: > Hi! > > > (the 3.2 version is different, > > and it's instaging. (at not used by distros anyway)) > > No: used > > Linux Kernel v3.2 used in: > -- SlackWare 14.00 > > This is actual stable version SlackWare > > Please, backport all(

Re: UML build broken since 3.0.75 (also affects 3.2.x)

2013-05-27 Thread Ben Hutchings
On Sat, 2013-05-25 at 15:44 +0200, richard -rw- weinberger wrote: > On Sat, May 25, 2013 at 2:18 PM, Greg KH wrote: > > On Sat, May 25, 2013 at 05:55:22PM +0700, Antoine Martin wrote: > >> Linus' vm patches broke the UML build in 3.0.75 onwards: > >> > >> CC mm/memory.o > >> mm/memory.c: In

Re: [PATCH v3 1/6] mm/memory-hotplug: fix lowmem count overflow when offline pages

2013-05-27 Thread Ben Hutchings
On Sun, 2013-05-26 at 13:58 +0800, Wanpeng Li wrote: > Changelog: > v1 -> v2: > * show number of HighTotal before hotremove > * remove CONFIG_HIGHMEM > * cc stable kernels > * add Michal reviewed-by > > Logic memory-remove code fails to correctly account the Total High Me

[21/94] cifs: only set ops for inodes in I_NEW state

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Jeff Layton commit c2b93e0699723700f886ce17bb65ffd771195a6d upstream. It's generally not safe to reset the inode ops once they've been set. In the case where the inode was originally thought to

[43/94] USB: reset resume quirk needed by a hub

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Oliver Neukum commit bac6b03275184c912ad0818c9a0a736847804dca upstream. Werner Fink has reported problems with this hub. Signed-off-by: Oliver Neukum Signed-off-by: Greg Kroah-Hartman Signed

[32/94] avr32: fix relocation check for signed 18-bit offset

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Hans-Christian Egtvedt commit e68c636d88db3fda74e664ecb1a213ae0d50a7d8 upstream. Caught by static code analysis by David. Reported-by: David Binderman Signed-off-by: Hans-Christian Egtvedt S

[07/94] ASoC: wm8994: missing break in wm8994_aif3_hw_params()

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 4495e46fe18f198366961bb2b324a694ef8a9b44 upstream. The missing break here means that we always return early and the function is a no-op. Signed-off-by: Dan Carpenter Sign

[16/94] ACPICA: Fix possible buffer overflow during a field unit read operation

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Bob Moore commit 61388f9e5d93053cf399a356414f31f9b4814c6d upstream. Can only happen under these conditions: 1) The DSDT version is 1, meaning integers are 32-bits. 2) The field is between 33 a

[15/94] iscsi-target: Fix processing of OOO commands

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Shlomo Pongratz commit 3eccfdb01da58fbd0f789ae6ca61cee3769e26de upstream. Fix two issues in OOO commands processing done at iscsit_attach_ooo_cmdsn. Handle command serial numbers wrap around b

[71/94] sched/debug: Limit sd->*_idx range on sysctl

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Namhyung Kim commit 201c373e8e4823700d3160d5c28e1ab18fd1193e upstream. Various sd->*_idx's are used for refering the rq's load average table when selecting a cpu to run. However they can be se

[05/94] mmc: atmel-mci: pio hang on block errors

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Terry Barnaby commit bdbc5d0c60f3e9de3eeccf1c1a18bdc11dca62cc upstream. The driver is doing, by default, multi-block reads. When a block error occurs, card/block.c instigates a single block rea

[78/94] x86,efi: Check max_size only if it is non-zero.

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Richard Weinberger commit 7791c8423f1f7f4dad94e753bae67461d5b80be8 upstream. Some EFI implementations return always a MaximumVariableSize of 0, check against max_size only if it is non-zero. My

[67/94] random: fix accounting race condition with lockless irq entropy_count update

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Jiri Kosina commit 10b3a32d292c21ea5b3ad5ca5975e88bb20b8d68 upstream. Commit 902c098a3663 ("random: use lockless techniques in the interrupt path") turned IRQ path from being spinlock protected

[63/94] mm compaction: fix of improper cache flush in migration code

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Leonid Yegoshin commit c2cc499c5bcf9040a738f49e8051b42078205748 upstream. Page 'new' during MIGRATION can't be flushed with flush_cache_page(). Using flush_cache_page(vma, addr, pfn) is justifi

[73/94] ipvs: ip_vs_sip_fill_param() BUG: bad check of return value

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Hans Schillstrom commit f7a1dd6e3ad59f0cfd51da29dfdbfd54122c5916 upstream. The reason for this patch is crash in kmemdup caused by returning from get_callid with uniialized matchoff and matchle

[18/94] mwifiex: clear is_suspended flag when interrupt is received early

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Bing Zhao commit 48795424acff7215d5eac0b52793a2c1eb3a6283 upstream. When the XO-4 with 8787 wireless is woken up due to wake-on-WLAN mwifiex is often flooded with "not allowed while suspended"

[31/94] Kirkwood: Enable PCIe port 1 on QNAP TS-11x/TS-21x

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Martin Michlmayr commit 99e11334dcb846f9b76fb808196c7f47aa83abb3 upstream. Enable KW_PCIE1 on QNAP TS-11x/TS-21x devices as newer revisions (rev 1.3) have a USB 3.0 chip from Etron on PCIe port

[72/94] sched/debug: Fix sd->*_idx limit range avoiding overflow

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: libin commit fd9b86d37a600488dbd80fe60cca46b822bff1cd upstream. Commit 201c373e8e ("sched/debug: Limit sd->*_idx range on sysctl") was an incomplete bug fix. This patch fixes sd->*_idx limit r

[75/94] drbd: fix for deadlock when using automatic split-brain-recovery

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Philipp Reisner commit 7c689e63a847316c1b2500f86891b0a574ce7e69 upstream. With an automatic after split-brain recovery policy of "after-sb-1pri call-pri-lost-after-sb", when trying to drbd_set_

[36/94] tg3: Skip powering down function 0 on certain serdes devices

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Nithin Sujir commit 44f3b503c16425c8e9db4bbaa2fc9cd0c9d0ba91 upstream. On the 5718, 5719 and 5720 serdes devices, powering down function 0 results in all the other ports being powered down. Add

[01/94] Revert "drm/i915: Fix detection of base of stolen memory"

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings This reverts commit 53e587aa5ca81497d0ea6e340320ec5778d1f311. Yves-Alexis Perez reported that it broke the driver on two machines with GMA4500 and i965 chips. Only the backported

[70/94] xhci: Don't warn on empty ring for suspended devices.

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Sarah Sharp commit a83d6755814e4614ba77e15d82796af0f695c6b8 upstream. When a device attached to the roothub is suspended, the endpoint rings are stopped. The host may generate a completion eve

[33/94] powerpc/pseries: Fix partition migration hang in stop_topology_update

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Brian King commit 444080d13d05dc38d07dd3bf751d38bce7ab7c72 upstream. This fixes a hang that was observed during live partition migration. Since stop_topology_update must not be called from an i

[52/94] USB: cxacru: potential underflow in cxacru_cm_get_array()

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 2a0ebf80aa95cc758d4725f74a7016e992606a39 upstream. The value of "offd" comes off the instance->rcv_buf[] and we used it as the offset into an array. The problem is that we

[34/94] powerpc: Bring all threads online prior to migration/hibernation

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Robert Jennings commit 120496ac2d2d60aee68d3123a68169502a85f4b5 upstream. This patch brings online all threads which are present but not online prior to migration/hibernation. After migration/

[42/94] ipmi: ipmi_devintf: compat_ioctl method fails to take ipmi_mutex

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Benjamin LaHaise commit 6368087e851e697679af059b4247aca33a69cef3 upstream. When a 32 bit version of ipmitool is used on a 64 bit kernel, the ipmi_devintf code fails to correctly acquire ipmi_mu

[60/94] wait: fix false timeouts when using wait_event_timeout()

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Imre Deak commit 4c663cfc523a88d97a8309b04a089c27dc57fd7e upstream. Many callers of the wait_event_timeout() and wait_event_interruptible_timeout() expect that the return value will be positive

[87/94] if_cablemodem.h: Add parenthesis around ioctl macros

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Josh Boyer [ Upstream commit 4f924b2aa4d3cb30f07e57d6b608838edcbc0d88 ] Protect the SIOCGCM* ioctl macros with parenthesis. Reported-by: Paul Wouters Signed-off-by: Josh Boyer Signed-off-by:

[14/94] ALSA: HDA: Fix Oops caused by dereference NULL pointer

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Wang YanQing commit 2195b063f6609e4c6268f291683902f25eaf9aa6 upstream. The interrupt handler azx_interrupt will call azx_update_rirb, which may call snd_hda_queue_unsol_event, snd_hda_queue_uns

[84/94] packet: tpacket_v3: do not trigger bug() on wrong header status

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann [ Upstream commit 8da3056c04bfc5f69f840ab038a38389e2de8189 ] Jakub reported that it is fairly easy to trigger the BUG() macro from user space with TPACKET_V3's RX_RING by just g

[86/94] 3c59x: fix PCI resource management

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Sergei Shtylyov [ Upstream commit 4b264a1676e70dc656ba53a8cac690f2d4b65f4e ] The driver wrongly claimed I/O ports at an address returned by pci_iomap() -- even if it was passed an MMIO address.

[89/94] ipv6: do not clear pinet6 field

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit f77d602124d865c38705df7fa25c03de9c284ad2 ] We have seen multiple NULL dereferences in __inet6_lookup_established() After analysis, I found that inet6_sk() could

[62/94] rapidio/tsi721: fix bug in MSI interrupt handling

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Alexandre Bounine commit 1ccc819da6fda9bee10ab8b72e9adbb5ad3e4959 upstream. Fix bug in MSI interrupt handling which causes loss of event notifications. Typical indication of lost MSI interrupt

[66/94] nilfs2: fix issue of nilfs_set_page_dirty() for page at EOF boundary

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Ryusuke Konishi commit 136e8770cd5d1fe38b3c613100dd6dc4db6d4fa6 upstream. nilfs2: fix issue of nilfs_set_page_dirty for page at EOF boundary DESCRIPTION: There are use-cases when NILFS2 file

[80/94] tcp: force a dst refcount when prequeue packet

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 093162553c33e9479283e107b4431378271c735d ] Before escaping RCU protected section and adding packet into prequeue, make sure the dst is refcounted. Reported-by: M

[37/94] USB: xHCI: override bogus bulk wMaxPacketSize values

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Alan Stern commit e4f47e3675e6f1f40906b785b934ce963e9f2eb3 upstream. This patch shortens the logic in xhci_endpoint_init() by moving common calculations involving max_packet and max_burst outsi

[90/94] xfrm6: release dev before returning error

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Cong Wang [ Upstream commit 84c4a9dfbf430861e7588d95ae3ff61535dca351 ] We forget to call dev_put() on error path in xfrm6_fill_dst(), its caller doesn't handle this. Cc: Herbert Xu Cc: Steffe

[82/94] net_sched: act_ipt forward compat with xtables

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Jamal Hadi Salim [ Upstream commit 0dcffd09641f3abb21ac5cabc61542ab289d1a3c ] Deal with changes in newer xtables while maintaining backward compatibility. Thanks to Jan Engelhardt for suggestio

[10/94] net/eth/ibmveth: Fixup retrieval of MAC address

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Benjamin Herrenschmidt commit 13f85203e1060da83d9ec1c1c5a63343eaab8de4 upstream. Some ancient pHyp versions used to create a 8 bytes local-mac-address property in the device-tree instead of a 6

[69/94] mm/pagewalk.c: walk_page_range should avoid VM_PFNMAP areas

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Cliff Wickman commit a9ff785e4437c83d2179161e012f5bdfbd6381f0 upstream. A panic can be caused by simply cat'ing /proc//smaps while an application has a VM_PFNMAP range. It happened in-house wh

[27/94] ACPI / EC: Restart transaction even when the IBF flag set

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Lan Tianyu commit 28fe5c825f8e15744d04c7c1b8df197950923ecd upstream. The EC driver works abnormally with IBF flag always set. IBF means "The host has written a byte of data to the command or da

[93/94] staging: comedi: prevent auto-unconfig of manually configured devices

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Ian Abbott commit 7d3135af399e92cf4c9bbc5f86b6c140aab3b88c upstream. When a low-level comedi driver auto-configures a device, a `struct comedi_dev_file_info` is allocated (as well as a `struct

[11/94] ext4: limit group search loop for non-extent files

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Lachlan McIlroy commit e6155736ad76b2070652745f9e54cdea3f0d8567 upstream. In the case where we are allocating for a non-extent file, we must limit the groups we allocate from to those below 2^3

[91/94] drivers/rtc/rtc-pcf2123.c: fix error return code in pcf2123_probe()

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Wei Yongjun commit 35623715818dfa720cccf99cd280dcbb4b78da23 upstream. Fix to return -ENODEV in the chip not found error handling case instead of 0, as done elsewhere in this function. Signed-o

[83/94] bridge: fix race with topology change timer

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: stephen hemminger [ Upstream commit 83401eb4990ff6af55aeed8f49681558544192e6 ] A bridge should only send topology change notice if it is not the root bridge. It is possible for message age time

[03/94] mmc: core: Fix bit width test failing on old eMMC cards

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Philip Rakity commit 836dc2fe89c968c10cada87e0dfae6626f8f9da3 upstream. PARTITION_SUPPORT needs to be set before doing the compare on version number so the bit width test does not get invalid d

[06/94] x86: Eliminate irq_mis_count counted in arch_irq_stat

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Li Fei commit f7b0e1055574ce06ab53391263b4e205bf38daf3 upstream. With the current implementation, kstat_cpu(cpu).irqs_sum is also increased in case of irq_mis_count increment. So there is no n

[13/94] autofs - remove autofs dentry mount check

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: David Jeffery commit ce8a5dbdf9e709bdaf4618d7ef8cceb91e8adc69 upstream. When checking if an autofs mount point is busy it isn't sufficient to only check if it's a mount point. For example, if

[24/94] dm snapshot: fix error return code in snapshot_ctr

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Wei Yongjun commit 09e8b813897a0f85bb401435d009228644c81214 upstream. Return -ENOMEM instead of success if unable to allocate pending exception mempool in snapshot_ctr. Signed-off-by: Wei Yong

[68/94] ocfs2: goto out_unlock if ocfs2_get_clusters_nocache() failed in ocfs2_fiemap()

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Joseph Qi commit b4ca2b4b577c3530e34dcfaafccb2cc680ce95d1 upstream. Last time we found there is lock/unlock bug in ocfs2_file_aio_write, and then we did a thorough search for all lock resources

[39/94] tracing: Fix leaks of filter preds

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: "Steven Rostedt (Red Hat)" commit 60705c89460fdc7227f2d153b68b3f34814738a4 upstream. Special preds are created when folding a series of preds that can be done in serial. These are allocated in

[85/94] 3c59x: fix freeing nonexistent resource on driver unload

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Sergei Shtylyov [ Upstream commit c81400be716aa4c76f6ebf339ba94358dbbf6da6 ] When unloading the driver that drives an EISA board, a message similar to the following one is displayed: Trying to

[09/94] nfsd4: don't allow owner override on 4.1 CLAIM_FH opens

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: "J. Bruce Fields" commit 9f415eb25574db4b73a9a712a4438e41dc284922 upstream. The Linux client is using CLAIM_FH to implement regular opens, not just recovery cases, so it depends on the server t

[65/94] drivers/block/brd.c: fix brd_lookup_page() race

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Brian Behlendorf commit dfd20b2b174d3a9b258ea3b7a35ead33576587b1 upstream. The index on the page must be set before it is inserted in the radix tree. Otherwise there is a small race which can

[23/94] KVM: VMX: fix halt emulation while emulating invalid guest sate

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Gleb Natapov commit 8d76c49e9ffeee839bc0b7a3278a23f99101263e upstream. The invalid guest state emulation loop does not check halt_request which causes 100% cpu loop while guest is in halt and i

[20/94] mwifiex: fix setting of multicast filter

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Daniel Drake commit ccd384b10420ac81ba3fb9b0a7d18272c7173552 upstream. A small bug in this code was causing the ALLMULTI filter to be set when in fact we were just wanting to program a selectiv

[74/94] pch_dma: Use GFP_ATOMIC because called from interrupt context

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Tomoya MORINAGA commit 5c1ef59168c485318e40ba485c1eba57d81d0faa upstream. pdc_desc_get() is called from pd_prep_slave_sg, and the function is called from interrupt context(e.g. Uart driver "pch

[26/94] tick: Cleanup NOHZ per cpu data on cpu down

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Thomas Gleixner commit 4b0c0f294f60abcdd20994a8341a95c8ac5eeb96 upstream. Prarit reported a crash on CPU offline/online. The reason is that on CPU down the NOHZ related per cpu data of the dead

[38/94] USB: UHCI: fix for suspend of virtual HP controller

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Alan Stern commit 997ff893603c6455da4c5e26ba1d0f81adfecdfc upstream. HP's virtual UHCI host controller takes a long time to suspend (several hundred microseconds), even when no devices are atta

[46/94] USB: option: add device IDs for Dell 5804 (Novatel E371) WWAN card

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Dan Williams commit 49c6e370dd6400b84897c4100095089b5c13a061 upstream. A rebranded Novatel E371 for AT&T's LTE bands. Signed-off-by: Dan Williams Signed-off-by: Greg Kroah-Hartman Signed-off

[22/94] hp_accel: Ignore the error from lis3lv02d_poweron() at resume

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Shuah Khan commit 7783819920ca52fc582a2782f654fe6ed373f465 upstream. The error in lis3lv02_poweron() is harmless in the resume path, so we should ignore it. It is inline with the other usages o

[45/94] USB: Blacklisted Cinterion's PLxx WWAN Interface

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Schemmel Hans-Christoph commit 8ff10bdb14a52e3f25d4ce09e0582a8684c1a6db upstream. /drivers/usb/serial/option.c: Blacklisted Cinterion's PLxx WWAN Interface (USB Interface 4), because it will be

[50/94] virtio_console: fix uapi header

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: "Michael S. Tsirkin" commit 6407d75afd08545f2252bb39806ffd3f10c7faac upstream. uapi should use __u32 not u32. Fix a macro in virtio_console.h which uses u32. Signed-off-by: Michael S. Tsirkin

[94/94] um: Serve io_remap_pfn_range()

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Richard Weinberger commit 4d94d6d030adfdea4837694d293ec6918d133ab2 upstream. At some places io_remap_pfn_range() is needed. UML has to serve it like all other archs do. Signed-off-by: Richard

[29/94] staging: vt6656: use free_netdev instead of kfree

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Hema Prathaban commit 0a438d5b381e2bdfd5e02d653bf46fcc878356e3 upstream. use free_netdev() instead of kfree(pDevice->apdev) Signed-off-by: Hema Prathaban Signed-off-by: Greg Kroah-Hartman Si

[40/94] usermodehelper: check subprocess_info->path != NULL

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Oleg Nesterov commit 264b83c07a84223f0efd0d1db9ccc66d6f88288f upstream. argv_split(empty_or_all_spaces) happily succeeds, it simply returns argc == 0 and argv[0] == NULL. Change call_usermodehe

[92/94] [media] mantis: fix silly crash case

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Alan Cox commit e1d45ae10aea8e8a403e5d96bf5902ee670007ff upstream. If we set mantis->fe to NULL on an error its not a good idea to then try passing NULL to the unregister paths and oopsing real

[59/94] fat: fix possible overflow for fat_clusters

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: OGAWA Hirofumi commit 7b92d03c3239f43e5b86c9cc9630f026d36ee995 upstream. Intermediate value of fat_clusters can be overflowed on 32bits arch. Reported-by: Krzysztof Strasburger Signed-off-by:

[77/94] efi: Export efi_query_variable_store() for efivars.ko

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Sergey Vlasov commit 3668011d4ad556224f7c012c1e870a6eaa0e59da upstream. Fixes build with CONFIG_EFI_VARS=m which was broken after the commit "x86, efivars: firmware bug workarounds should be in

[41/94] drivers/char/ipmi: memcpy, need additional 2 bytes to avoid memory overflow

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Chen Gang commit a5f2b3d6a738e7d4180012fe7b541172f8c8dcea upstream. When calling memcpy, read_data and write_data need additional 2 bytes. write_data: for checking: "if (size > IPMI_MAX

[47/94] i2c: designware: always clear interrupts before enabling them

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Mika Westerberg commit 2a2d95e9d6d29e726cc294b65391917ed2e32bf4 upstream. If the I2C bus is put to a low power state by an ACPI method it might pull the SDA line low (as its power is removed).

[19/94] mwifiex: fix memory leak issue when driver unload

2013-05-27 Thread Ben Hutchings
3.2.46-rc1 review patch. If anyone has any objections, please let me know. -- From: Amitkumar Karwar commit f16fdc9d2dc1e5b270e9a08377587e831e0d36ac upstream. After unregister_netdevice() call the request is queued and reg_state is changed to NETREG_UNREGISTERING. As we check

  1   2   >