Re: + kexec-migrate-to-reboot-cpu.patch added to -mm tree

2013-12-17 Thread Baoquan He
On 12/16/13 at 11:14am, Vivek Goyal wrote: > Hi Andrew, > > This patches has not made into Linus's tree yet. Are you planning to push > it soon? Yeah, since people reported bugs about kexec again. I think pushing it can help kexec users who don't pay close attention to kernel mailing list, and a

[PATCH v2] hamradio/yam: fix info leak in ioctl

2013-12-17 Thread Salva Peiró
The yam_ioctl() code fails to initialise the cmd field of the struct yamdrv_ioctl_cfg. Add an explicit memset(0) before filling the structure to avoid the 4-byte info leak. Signed-off-by: Salva Peiró CC: --- drivers/net/hamradio/yam.c |1 + 1 file changed, 1 insertion(+) diff --git a/drive

[PATCH] ALSA: hda - Add Dell headset detection quirk for one more laptop model

2013-12-17 Thread Hui Wang
On the Dell machines with codec whose Subsystem Id is 0x10280640, no external microphone can be detected when plugging a 3-ring headset. If we add "model=dell-headset-multi" for the snd-hda-intel.ko, the problem will disappear. The codec (Vendor ID: 0x10ec0255) on the machine belongs to alc_269 fa

Re: [PATCH] ALSA: hda - Add Dell headset detection quirk for one more laptop model

2013-12-17 Thread David Henningsson
On 12/17/2013 10:39 AM, Hui Wang wrote: > On the Dell machines with codec whose Subsystem Id is 0x10280640, > no external microphone can be detected when plugging a 3-ring headset. > If we add "model=dell-headset-multi" for the snd-hda-intel.ko, the > problem will disappear. > > The codec (Vendor

Re: [PATCH] ALSA: hda - Add Dell headset detection quirk for one more laptop model

2013-12-17 Thread Hui Wang
On 12/17/2013 05:43 PM, David Henningsson wrote: On 12/17/2013 10:39 AM, Hui Wang wrote: On the Dell machines with codec whose Subsystem Id is 0x10280640, no external microphone can be detected when plugging a 3-ring headset. If we add "model=dell-headset-multi" for the snd-hda-intel.ko, the pro

Re: [PATCH] ALSA: hda - Add Dell headset detection quirk for one more laptop model

2013-12-17 Thread David Henningsson
On 12/17/2013 10:57 AM, Hui Wang wrote: > On 12/17/2013 05:43 PM, David Henningsson wrote: >> On 12/17/2013 10:39 AM, Hui Wang wrote: >>> On the Dell machines with codec whose Subsystem Id is 0x10280640, >>> no external microphone can be detected when plugging a 3-ring headset. >>> If we add "model

Re: Patch "HID: kye: Add report fixup for Genius Manticore Keyboard" has been added to the 3.12-stable tree

2013-12-17 Thread Luis Henriques
On Mon, Dec 02, 2013 at 07:16:12AM -0800, Greg Kroah-Hartman wrote: > On Mon, Dec 02, 2013 at 09:41:36AM -0500, Benjamin Tissoires wrote: > > Ben and Dave spotted a mistake in this patch: > > https://lkml.org/lkml/2013/12/2/266 > > https://patchwork.kernel.org/patch/3260871/ > > > > Can we take al

[PATCH 2/2] can: peak_usb: fix mem leak in pcan_usb_pro_init()

2013-12-17 Thread Marc Kleine-Budde
This patch fixes a memory leak in pcan_usb_pro_init(). In patch f14e224 net: can: peak_usb: Do not do dma on the stack the struct pcan_usb_pro_fwinfo *fi and struct pcan_usb_pro_blinfo *bi were converted from stack to dynamic allocation va kmalloc(). However the corresponding kfree() was not

Re: [PATCH][3.11.y] intel_pstate: fix no_turbo

2013-12-17 Thread Luis Henriques
On Wed, Dec 11, 2013 at 10:35:20AM +, Luis Henriques wrote: > On Tue, Dec 10, 2013 at 02:37:28PM -0500, Joseph Salisbury wrote: > > Hello, > > > > Please consider including mainline commit > > 1ccf7a1cdafadd02e33e8f3d74370685a0600ec6 in the next v3.11.y release. > > > > It was included in th

Re: [PATCH] sched/rt: Fix rq's cpupri leak while enqueue/dequeue child RT entities

2013-12-17 Thread Kirill Tkhai
13.12.2013, 19:42, "Peter Zijlstra" : > On Wed, Nov 27, 2013 at 07:59:13PM +0400, Kirill Tkhai wrote: > >>  This patch touches RT group scheduling case. >> >>  Functions inc_rt_prio_smp() and dec_rt_prio_smp() change (global) rq's >> priority, >>  while rt_rq passed to them may be not the top-le

Re: [PATCH] sched/rt: Fix rq's cpupri leak while enqueue/dequeue child RT entities

2013-12-17 Thread Peter Zijlstra
On Tue, Dec 17, 2013 at 04:02:58PM +0400, Kirill Tkhai wrote: > > > 13.12.2013, 19:42, "Peter Zijlstra" : > > On Wed, Nov 27, 2013 at 07:59:13PM +0400, Kirill Tkhai wrote: > > > >>  This patch touches RT group scheduling case. > >> > >>  Functions inc_rt_prio_smp() and dec_rt_prio_smp() change (g

Re: [PATCH] sched/rt: Fix rq's cpupri leak while enqueue/dequeue child RT entities

2013-12-17 Thread Kirill Tkhai
17.12.2013, 16:47, "Peter Zijlstra" : > On Tue, Dec 17, 2013 at 04:02:58PM +0400, Kirill Tkhai wrote: > >>  13.12.2013, 19:42, "Peter Zijlstra" : >>>  On Wed, Nov 27, 2013 at 07:59:13PM +0400, Kirill Tkhai wrote:   This patch touches RT group scheduling case.   Functions inc_rt_prio_

Re: XFS security fix never sent to -stable?

2013-12-17 Thread Luis Henriques
On Mon, Dec 09, 2013 at 11:56:21PM -0800, Greg Kroah-Hartman wrote: > On Tue, Dec 10, 2013 at 10:55:23AM +1100, Dave Chinner wrote: > > [cc xfs list, cc stable@vger.kernel.org] > > > > On Mon, Dec 09, 2013 at 08:17:09AM -0500, Josh Boyer wrote: > > > On Mon, Dec 9, 2013 at 7:15 AM, Luis Henriques

[PATCH] fbcon: Avoid corrupting active workqueue entries

2013-12-17 Thread Chris Wilson
We attempt to reschedule an active work which can itself corrupt the workqueue lists, and we may then free the work item whilst the task is still pending. Both of these may lead to a system deadlock and an unresponsive machine without any outputs for a panic to even be shown. [7.372961] WARNIN

[PATCH] drm/i915: Use the correct GMCH_CTRL register for Sandybridge+

2013-12-17 Thread Chris Wilson
The GMCH_CTRL register (or MGCC in the spec) is at a different address on Sandybridge, and the address to which we currently write to is undefined. These stray writes appear to upset (hard hang) my Ivybridge machine whilst it is in UEFI mode. Note that the register is still marked as locked RO on

Re: [PATCH] drm/i915: Use the correct GMCH_CTRL register for Sandybridge+

2013-12-17 Thread Jani Nikula
On Tue, 17 Dec 2013, Chris Wilson wrote: > The GMCH_CTRL register (or MGCC in the spec) is at a different address > on Sandybridge, and the address to which we currently write to is > undefined. These stray writes appear to upset (hard hang) my Ivybridge > machine whilst it is in UEFI mode. > > No

Re: [RFC][PATCH 3/5] timekeeping: Avoid possible deadlock from clock_was_set_delayed

2013-12-17 Thread John Stultz
On 12/16/2013 10:41 PM, Sasha Levin wrote: > On 12/17/2013 12:15 AM, John Stultz wrote: >> >> Just wanted to follow up here. Did you happen to get a chance to try to >> reproduce w/ the three patch patchset? >> >> I'm hoping to submit them to Ingo tomorrow, and want to make sure I've >> got your te

Re: Bug in tty cooked mode kernel 3.12.3

2013-12-17 Thread Greg Kroah-Hartman
On Mon, Dec 09, 2013 at 06:06:07PM -0500, Peter Hurley wrote: > On 12/07/2013 06:46 PM, Karl Dahlke wrote: > > This may have appeared in 3.9.11 with the changes to tty. > > Don't know; I just started running 3.12 from kernel.org. > > Perhaps nobody saw it before because nobody runs command line pro

patch "serial: 8250_dw: add new ACPI IDs" added to tty tree

2013-12-17 Thread gregkh
This is a note to let you know that I've just added the patch titled serial: 8250_dw: add new ACPI IDs to my tty git tree which can be found at git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty.git in the tty-linus branch. The patch will show up in the next release of the linux-n

Re: Bug in tty cooked mode kernel 3.12.3

2013-12-17 Thread Peter Hurley
On 12/17/2013 12:30 PM, Greg Kroah-Hartman wrote: On Mon, Dec 09, 2013 at 06:06:07PM -0500, Peter Hurley wrote: On 12/07/2013 06:46 PM, Karl Dahlke wrote: This may have appeared in 3.9.11 with the changes to tty. Don't know; I just started running 3.12 from kernel.org. Perhaps nobody saw it bef

patch "n_tty: Fix apparent order of echoed output" added to tty tree

2013-12-17 Thread gregkh
This is a note to let you know that I've just added the patch titled n_tty: Fix apparent order of echoed output to my tty git tree which can be found at git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty.git in the tty-linus branch. The patch will show up in the next release of th

[3.5.y.z extended stable] Linux 3.5.7.28 stable review

2013-12-17 Thread Luis Henriques
This is the start of the review cycle for the Linux 3.5.7.28 stable kernel. This version contains 103 new patches, summarized below. The new patches are posted as replies to this message and also available in this git branch: http://kernel.ubuntu.com/git?p=ubuntu/linux.git;h=linux-3.5.y-review;a

[PATCH 3.5 055/103] Input: mousedev - allow disabling even without CONFIG_EXPERT

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Tom Gundersen commit dfaaed08ecc01bd513248ba7999daf50ce028352 upstream. Moust (if not all) modern software, including X, uses /dev/eventX rather than the legacy /dev/mouseX devices. It t

[PATCH 3.5 025/103] bridge: flush br's address entry in fdb when remove the

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Ding Tianhong commit f873042093c0b418d2351fe14b625c740149 upstream. bridge dev When the following commands are executed: brctl addbr br0 ifconfig br0 hw ether rmmod bridge The c

[PATCH 3.5 040/103] ARM: footbridge: fix VGA initialisation

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Russell King commit 43659222e7a0113912ed02f6b2231550b3e471ac upstream. It's no good setting vga_base after the VGA console has been initialised, because if we do that we get this: Unabl

[PATCH 3.5 026/103] mmc: block: fix a bug of error handling in MMC driver

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: KOBAYASHI Yoshitake commit c8760069627ad3b0dbbea170f0c4c58b16e18d3d upstream. Current MMC driver doesn't handle generic error (bit19 of device status) in write sequence. As a result, wri

[PATCH 3.5 072/103] USB: option: support new huawei devices

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: "Fangxiaozhi (Franko)" commit 2bf308d7bc5e8cdd69672199f59532f35339133c upstream. Add new supporting declarations to option.c, to support Huawei new devices with new bInterfaceProtocol va

[PATCH 3.5 096/103] KVM: Improve create VCPU parameter (CVE-2013-4587)

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Andy Honig commit 338c7dbadd2671189cec7faf64c84d01071b3f96 upstream. In multiple functions the vcpu_id is used as an offset into a bitfield. Ag malicious user could specify a vcpu_id gr

[PATCH 3.5 091/103] ARM: pxa: tosa: fix keys mapping

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Eremin-Solenikov commit 506cac15ac86f204b83e3cfccde73eeb4e7c5f34 upstream. When converting from tosa-keyboard driver to matrix keyboard, tosa keys received extra 1 column shift. R

[PATCH 3.5 092/103] hwmon: (w83l786ng) Fix fan speed control mode setting and reporting

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Brian Carnes commit cf7559bc053471f32373d71d04a9aa19e0b48d59 upstream. The wrong mask is used, which causes some fan speed control modes (pwmX_enable) to be incorrectly reported, and som

[PATCH 3.5 102/103] MIPS: DMA: For BMIPS5000 cores flush region just like non-coherent R10000

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Jim Quinlan commit f86f55d3ad21b21b736bdeb29bee0f0937b77138 upstream. The BMIPS5000 (Zephyr) processor utilizes instruction speculation. A stale misprediction address in either the JTB o

[PATCH 3.5 089/103] x86, efi: Don't use (U)EFI time services on 32 bit

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Matthew Garrett commit 04bf9ba720fcc4fa313fa122b799ae0989b6cd50 upstream. UEFI time services are often broken once we're in virtual mode. We were already refusing to use them on 64-bit s

[PATCH 3.5 097/103] KVM: x86: Fix potential divide by 0 in lapic (CVE-2013-6367)

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Andy Honig commit b963a22e6d1a266a67e9eecc88134713fd54775c upstream. Under guest controllable circumstances apic_get_tmcct will execute a divide by zero and cause a crash. If the guest

[PATCH 3.5 103/103] xfs: underflow bug in xfs_attrlist_by_handle()

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 31978b5cc66b8ba8a7e8eef60b12395d41b7b890 upstream. If we allocate less than sizeof(struct attrlist) then we end up corrupting memory or doing a ZERO_PTR_SIZE derefer

[PATCH 3.5 101/103] drivers/rtc/rtc-at91rm9200.c: correct alarm over day/month wrap

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Linus Pizunski commit eb3c227289840eed95ddfb0516046f08d8993940 upstream. Update month and day of month to the alarm month/day instead of current day/month when setting the RTC alarm mask

[PATCH 3.5 094/103] hwmon: Prevent some divide by zeros in FAN_TO_REG()

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 3806b45ba4655147a011df03242cc197ab986c43 upstream. The "rpm * div" operations can overflow here, so this patch adds an upper limit to rpm to prevent that. Jean Delv

[PATCH 3.5 098/103] KVM: x86: Convert vapic synchronization to _cached functions (CVE-2013-6368)

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Andy Honig commit fda4e2e85589191b123d31cdc21fd33ee70f50fd upstream. In kvm_lapic_sync_from_vapic and kvm_lapic_sync_to_vapic there is the potential to corrupt kernel memory if userspace

[PATCH 3.5 100/103] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Paul Moore commit 446b802437f285de68ffb8d6fac3c44c3cab5b04 upstream. In selinux_ip_postroute() we perform access checks based on the packet's security label. For locally generated traff

[PATCH 3.5 093/103] hwmon: (w83l768ng) Fix fan speed control range

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Jean Delvare commit 33a7ab91d509fa33b4bcd3ce0038cc80298050da upstream. The W83L786NG stores the fan speed on 4 bits while the sysfs interface uses a 0-255 range. Thus the driver should s

[PATCH 3.5 095/103] futex: fix handling of read-only-mapped hugepages

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit f12d5bfceb7e1f9051563381ec047f7f13956c3c upstream. The hugepage code had the exact same bug that regular pages had in commit 7485d0d3758e ("futexes: Remove rw param

[PATCH 3.5 086/103] dm snapshot: avoid snapshot space leak on crash

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka commit 230c83afdd9cd384348475bea1e14b80b3b6b1b8 upstream. There is a possible leak of snapshot space in case of crash. The reason for space leaking is that chunks in the

[PATCH 3.5 085/103] ALSA: memalloc.h - fix wrong truncation of dma_addr_t

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Stefano Panella commit 932e9dec380c67ec15ac3eb073bb55797d8b4801 upstream. When running a 32bit kernel the hda_intel driver is still reporting a 64bit dma_mask if the HW supports it. >Fr

[PATCH 3.5 088/103] x86, build, icc: Remove uninitialized_var() from compiler-intel.h

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: "H. Peter Anvin" commit 503cf95c061a0551eb684da364509297efbe55d9 upstream. When compiling with icc, ends up included because the icc environment defines __GNUC__. Thus, we neither need

[PATCH 3.5 090/103] dm bufio: initialize read-only module parameters

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka commit 4cb57ab4a2e61978f3a9b7d4f53988f30d61c27f upstream. Some module parameters in dm-bufio are read-only. These parameters inform the user about memory consumption. The

[PATCH 3.5 087/103] dm table: fail dm_table_create on dm_round_up overflow

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka commit 5b2d06576c5410c10d95adfd5c4d8b24de861d87 upstream. The dm_round_up function may overflow to zero. In this case, dm_table_create() must fail rather than go on to a

[PATCH 3.5 099/103] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Paul Moore commit 47180068276a04ed31d24fe04c673138208b07a9 upstream. In selinux_ip_output() we always label packets based on the parent socket. While this approach works in almost all c

[PATCH 3.5 001/103] [media] lirc_zilog: Don't use dynamic static allocation

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Mauro Carvalho Chehab commit ac5b4b6bf0c84c48d7e2e3fce22e35b04282ba76 upstream. Dynamic static allocation is evil, as Kernel stack is too low, and ompilation complains about it on some a

[PATCH 3.5 008/103] isdnloop: use strlcpy() instead of strcpy()

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit f9a23c84486ed350cce7bb1b2828abd1f6658796 upstream. These strings come from a copy_from_user() and there is no way to be sure they are NUL terminated. Signed-off-by:

[PATCH 3.5 006/103] 6lowpan: Uncompression of traffic class field was incorrect

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Jukka Rissanen commit 1188f05497e7bd2f2614b99c54adfbe7413d5749 upstream. If priority/traffic class field in IPv6 header is set (seen when using ssh), the uncompression sets the TC and Fl

[PATCH 3.5 010/103] ipv4: fix possible seqlock deadlock

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit c9e9042994d37cbc1ee538c500e9da1bb9d1bcdf upstream. ip4_datagram_connect() being called from process context, it should use IP_INC_STATS() instead of IP_INC_STATS_BH()

[PATCH 3.5 002/103] net: Fix "ip rule delete table 256"

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Andreas Henriksson commit 13eb2ab2d33c57ebddc57437a7d341995fc9138c upstream. When trying to delete a table >= 256 using iproute2 the local table will be deleted. The table id is specifie

[PATCH 3.5 014/103] net: rework recvmsg handler msg_name and msg_namelen logic

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Hannes Frederic Sowa commit f3d3342602f8bcbf37d7c46641cb9bca7618eb1c upstream. This patch now always passes msg->msg_namelen as 0. recvmsg handlers must set msg_namelen to the proper siz

[PATCH 3.5 038/103] ALSA: hda - Fix silent output on ASUS W7J laptop

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 6ddf0fd1c462a418a3cbb8b0653820dc48ffbd98 upstream. The recent kernels got regressions on ASUS W7J with ALC660 codec where no sound comes out. After a long debugging

[PATCH 3.5 047/103] cpuidle: Check for dev before deregistering it.

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Konrad Rzeszutek Wilk commit 813e8e3d6aaa0b511126cce15c16a931afffe768 upstream. If not, we could end up in the unfortunate situation where we dereference a NULL pointer b/c we have cpuid

[PATCH 3.5 059/103] HID: roccat: fix Coverity CID 141438

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Stefan Achatz commit 7be63f20b00840a6f1c718dcee00855688d64acd upstream. Add missing switch breaks. Signed-off-by: Stefan Achatz Signed-off-by: Jiri Kosina Signed-off-by: Luis Henrique

[PATCH 3.5 016/103] packet: fix use after free race in send path when dev is released

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann commit e40526cb20b5ee53419452e1f03d97092f144418 upstream. Salam reported a use after free bug in PF_PACKET that occurs when we're sending out frames on a socket bound dev

[PATCH 3.5 017/103] inet: fix addr_len/msg->msg_namelen assignment in recv_error and rxpmtu functions

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Hannes Frederic Sowa commit 85fbaa75037d0b6b786ff18658ddf0b4014ce2a4 upstream. Commit bceaa90240b6019ed73b49965eac7d167610be69 ("inet: prevent leakage of uninitialized memory to user in

[PATCH 3.5 050/103] dm: fix truncated status strings

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka commit fd7c092e711ebab55b2688d3859d95dfd0301f73 upstream. Avoid returning a truncated table or status string instead of setting the DM_BUFFER_FULL_FLAG when the last targ

[PATCH 3.5 035/103] crypto: s390 - Fix aes-xts parameter corruption

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Gerald Schaefer commit 9dda2769af4f3f3093434648c409bb351120d9e8 upstream. Some s390 crypto algorithms incorrectly use the crypto_tfm structure to store private data. As the tfm can be sh

[PATCH 3.5 051/103] elevator: acquire q->sysfs_lock in elevator_change()

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Tomoki Sekiyama commit 7c8a3679e3d8e9d92d58f282161760a0e247df97 upstream. Add locking of q->sysfs_lock into elevator_change() (an exported function) to ensure it is held to protect q->el

[PATCH 3.5 031/103] xen/gnttab: leave lazy MMU mode in the case of a m2p override failure

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Matt Wilson commit 14883a75ec76b44759385fb12629f4a0f1aef4e3 upstream. Commit f62805f1 introduced a bug where lazy MMU mode isn't exited if a m2p_add/remove_override call fails. Acked-by

[PATCH 3.5 018/103] ipv6: fix leaking uninitialized port number of offender sockaddr

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Hannes Frederic Sowa commit 1fa4c710b6fe7b0aac9907240291b6fe6aafc3b8 upstream. Offenders don't have port numbers, so set it to 0. Signed-off-by: Hannes Frederic Sowa Signed-off-by: Dav

[PATCH 3.5 049/103] um: add missing declaration of 'getrlimit()' and friends

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Sergei Trofimovich commit fdfa4c952844fce881df8c76de9c7180cbe913ab upstream. arch/um/os-Linux/start_up.c: In function 'check_coredump_limit': arch/um/os-Linux/start_up.c:338:16: error: s

[PATCH 3.5 045/103] powerpc/gpio: Fix the wrong GPIO input data on MPC8572/MPC8536

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Liu Gang commit 1aeef303b5d9e243c41d5b80f8bb059366514a10 upstream. For MPC8572/MPC8536, the status of GPIOs defined as output cannot be determined by reading GPDAT register, so the code

[PATCH 3.5 060/103] HID: apple: option to swap the 'Option' ("Alt") and 'Command' ("Flag") keys.

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Nanno Langstraat commit 43c831468b3d26dbe8f2e061ccaf1abaf9cc1b8b upstream. Use case: people who use both Apple and PC keyboards regularly, and desire to keep&use their PC muscle memory.

[PATCH 3.5 077/103] USB: cdc-acm: Added support for the Lenovo RD02-D400 USB Modem

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: David Cluytens commit 3b59d16c513da258ec8f6a0b4db85f257a0380d6 upstream. Signed-off-by: David Cluytens Signed-off-by: Greg Kroah-Hartman Signed-off-by: Luis Henriques --- drivers/usb

[PATCH 3.5 084/103] ARM: 7913/1: fix framepointer check in unwind_frame

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Konstantin Khlebnikov commit 3abb6671a9c04479c4bd026798a05f857393b7e2 upstream. This patch fixes corner case when (fp + 4) overflows unsigned long, for example: fp = 0x -> fp + 4

[PATCH 3.5 067/103] USB: serial: fix race in generic write

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 6f6485463aada1ec6a0f3db6a03eb8e393d6bb55 upstream. Fix race in generic write implementation, which could lead to temporarily degraded throughput. The current generic

[PATCH 3.5 079/103] usb: hub: Use correct reset for wedged USB3 devices that are NOTATTACHED

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Julius Werner commit 2d51f3cd11f414c56a87dc018196b85fd50b04a4 upstream. This patch adds a check for USB_STATE_NOTATTACHED to the hub_port_warm_reset_required() workaround for ports that

[PATCH 3.5 080/103] drivers/char/i8k.c: add Dell XPLS L421X

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Alan Cox commit 9aa5b0181bdf335f0b731d8502e128a862884bcd upstream. Addresses https://bugzilla.kernel.org/show_bug.cgi?id=60772 Signed-off-by: Alan Cox Reported-by: Leho Kraav Signed-o

[PATCH 3.5 069/103] usb: dwc3: fix implementation of endpoint wedge

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Alan Stern commit a535d81c92615b8ffb99b7e1fd1fb01effaed1af upstream. The dwc3 UDC driver doesn't implement endpoint wedging correctly. When an endpoint is wedged, the gadget driver shoul

[PATCH 3.5 076/103] USB: pl2303: fixed handling of CS5 setting

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Colin Leitner commit a313249937820f8b1996133fc285efbd6aad2c5b upstream. This patch fixes the CS5 setting on the PL2303 USB-to-serial devices. CS5 has a value of 0 and the CSIZE setting h

[PATCH 3.5 078/103] drm/radeon: fixup bad vram size on SI

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 0ca223b029a261e82fb2f50c52eb85d510f4260e upstream. Some boards seem to have garbage in the upper 16 bits of the vram size register. Check for this and clamp the size

[PATCH 3.5 066/103] mac80211: don't attempt to reorder multicast frames

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Johannes Berg commit 051a41fa4ee14f5c39668f0980973b9a195de560 upstream. Multicast frames can't be transmitted as part of an aggregation session (such a session couldn't even be set up) s

[PATCH 3.5 081/103] crypto: scatterwalk - Set the chain pointer indication bit

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Tom Lendacky commit 41da8b5adba77e22584f8b45f9641504fa885308 upstream. The scatterwalk_crypto_chain function invokes the scatterwalk_sg_chain function to chain two scatterlists, but the

[PATCH 3.5 083/103] ARM: 7912/1: check stack pointer in get_wchan

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Konstantin Khlebnikov commit 1b15ec7a7427d4188ba91b9bbac696250a059d22 upstream. get_wchan() is lockless. Task may wakeup at any time and change its own stack, thus each next stack frame

[PATCH 3.5 074/103] USB: mos7840: correct handling of CS5 setting

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Colin Leitner commit 78692cc3382e0603a47e1f2aaeffe0d99891994d upstream. This patch removes an erroneous check of CSIZE, which made it impossible to set CS5. Compiles clean, but couldn't

[PATCH 3.5 068/103] usb: gadget: composite: reset delayed_status on reset_config

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Michael Grzeschik commit 2bac51a1827a18821150ed8c9f9752c02f9c2b02 upstream. The delayed_status value is used to keep track of status response packets on ep0. It needs to be reset or the

[PATCH 3.5 070/103] [media] saa7164: fix return value check in saa7164_initdev()

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Wei Yongjun commit 89f4d45b2752df5d222b5f63919ce59e2d8afaf4 upstream. In case of error, the function kthread_run() returns ERR_PTR() and never returns NULL. The NULL test in the return v

[PATCH 3.5 071/103] USB: serial: option: blacklist interface 1 for Huawei E173s-6

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Gustavo Zacarias commit 8f173e22abf2258ddfa73f46eadbb6a6c29f1631 upstream. Interface 1 on this device isn't for option to bind to otherwise an oops on usb_wwan with log flooding will hap

[PATCH 3.5 073/103] USB: spcp8x5: correct handling of CS5 setting

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Colin Leitner commit 711fbdfbf2bc4827214a650afe3f64767a1aba16 upstream. This patch removes an erroneous check of CSIZE, which made it impossible to set CS5. Compiles clean, but couldn't

[PATCH 3.5 075/103] USB: ftdi_sio: fixed handling of unsupported CSIZE setting

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Colin Leitner commit 8704211f65a2106ba01b6ac9727cdaf9ca11594c upstream. FTDI UARTs support only 7 or 8 data bits. Until now the ftdi_sio driver would only report this limitation for CS6

[PATCH 3.5 063/103] sched: Avoid throttle_cfs_rq() racing with period_timer stopping

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Segall commit f9f9ffc237dd924f048204e8799da74f9ecf40cf upstream. throttle_cfs_rq() doesn't check to make sure that period_timer is running, and while update_curr/assign_cfs_runtime d

[PATCH 3.5 064/103] nfs: fix do_div() warning by instead using sector_div()

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Helge Deller commit 3873d064b8538686bbbd4b858dc8a07db1f7f43a upstream. When compiling a 32bit kernel with CONFIG_LBDAF=n the compiler complains like shown below. Fix this warning by ins

[PATCH 3.5 082/103] crypto: scatterwalk - Use sg_chain_ptr on chain entries

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Tom Lendacky commit 389a5390583a18e45bc4abd4439291abec5e7a63 upstream. Now that scatterwalk_sg_chain sets the chain pointer bit the sg_page call in scatterwalk_sg_next hits a BUG_ON when

[PATCH 3.5 062/103] NFSv4 wait on recovery for async session errors

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Andy Adamson commit 4a82fd7c4e78a1b7a224f9ae8bb7e1fd95f670e0 upstream. When the state manager is processing the NFS4CLNT_DELEGRETURN flag, session draining is off, but DELEGRETURN can st

[PATCH 3.5 065/103] dm delay: fix a possible deadlock due to shared workqueue

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka commit 718822c1c112dc99e0c72c8968ee1db9d9d910f0 upstream. The dm-delay target uses a shared workqueue for multiple instances. This can cause deadlock if two or more dm-d

[PATCH 3.5 061/103] 9p: send uevent after adding/removing mount_tag attribute

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Michael Marineau commit e0d6cb9cd3a3ac8a3b8e5b22b83c4f8619786f22 upstream. This driver adds an attribute to the existing virtio device so a CHANGE event is required in order udev rules t

[PATCH 3.5 058/103] HID: hid-multitouch: add support for SiS panels

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Forest Bond commit a6802e008e19845fd9669511b895f7515ef9c48b upstream. Add support for SiS multitouch panels. Signed-off-by: Forest Bond Signed-off-by: Jiri Kosina Signed-off-by: Luis

[PATCH 3.5 046/103] ASoC: wm8731: fix dsp mode configuration

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Bo Shen commit b4af6ef99a60c5b56df137d7accd81ba1ee1254e upstream. According to WM8731 "PD, Rev 4.9 October 2012" datasheet, when it works in DSP mode A, LRP = 1, while works in DSP mode

[PATCH 3.5 054/103] Input: allow deselecting serio drivers even without CONFIG_EXPERT

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Tom Gundersen commit bcd2623073e98f69f84720308db0b142c4da0bd6 upstream. There is plenty of consumer hardware (e.g., mac books) that does not use AT keyboards or PS/2 mice. It therefore m

[PATCH 3.5 039/103] net: smc91: fix crash regression on the versatile

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Linus Walleij commit b268daffdcb9762ad9aa3898096570a9dd92aa9b upstream. After commit e9e4ea74f06635f2ffc1dffe5ef40c854faa0a90 "net: smc91x: dont't use SMC_outw for fixing up halfword-ali

[PATCH 3.5 052/103] iommu/vt-d: Fixed interaction of VFIO_IOMMU_MAP_DMA with IOMMU address limits

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Julian Stecklina commit f9423606ade08653dd8a43334f0a7fb45504c5cc upstream. The BUG_ON in drivers/iommu/intel-iommu.c:785 can be triggered from userspace via VFIO by calling the VFIO_IOM

[PATCH 3.5 033/103] crypto: authenc - Find proper IV address in ablkcipher callback

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Tom Lendacky commit fc019c7122dfcd69c50142b57a735539aec5da95 upstream. When performing an asynchronous ablkcipher operation the authenc completion callback routine is invoked, but it doe

[PATCH 3.5 043/103] ALSA: hda - Another fixup for ASUS laptop with ALC660 codec

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit e7ca237bfcf6a288702cb95e94ab94f642ccad88 upstream. ASUS Z35HL laptop also needs the very same fix as the previous one that was applied to ASUS W7J. Bugzilla: https:/

[PATCH 3.5 030/103] irq: Enable all irqs unconditionally in irq_resume

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Laxman Dewangan commit ac01810c9d2814238f08a227062e66a35a0e1ea2 upstream. When the system enters suspend, it disables all interrupts in suspend_device_irqs(), including the interrupts ma

[PATCH 3.5 023/103] af_packet: block BH in prb_shutdown_retire_blk_timer()

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Veaceslav Falico commit ec6f809ff6f19fafba3212f6aff0dda71dfac8e8 upstream. Currently we're using plain spin_lock() in prb_shutdown_retire_blk_timer(), however the timer might fire right

[PATCH 3.5 041/103] [SCSI] hpsa: do not discard scsi status on aborted commands

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: "Stephen M. Cameron" commit 2e311fbabdc23b7eaec77313dc3b9a151a5407b5 upstream. We inadvertantly discarded the scsi status for aborted commands. For some commands (e.g. reads from tape dr

[PATCH 3.5 015/103] net: add BUG_ON if kernel advertises msg_namelen > sizeof(struct sockaddr_storage)

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Hannes Frederic Sowa commit 68c6beb373955da0886d8f4f5995b3922ceda4be upstream. In that case it is probable that kernel code overwrote part of the stack. So we should bail out loudly here

[PATCH 3.5 032/103] [SCSI] libsas: fix usage of ata_tf_to_fis

2013-12-17 Thread Luis Henriques
3.5.7.28 -stable review patch. If anyone has any objections, please let me know. -- From: Dan Williams commit ae5fbae0ccd982dfca0ce363036ed92f5b13f150 upstream. Since commit 110dd8f19df5 "[SCSI] libsas: fix scr_read/write users and update the libata documentation" we have bee

  1   2   >