Please help review: [PATCH] | [PATCH] jffs2: bug fix of rename when jffs2_do_unlink failed

2014-11-11 Thread chenjie6
From: chenjie when jffs2_do_unlink return error will lead the jffs2 panic Testcase "touch a b; mv a b" when jffs2_do_unlink return error jffs2_rename(): Link succeeded, unlink failed (err -4). You now have a hard link [ cut here ] kernel BUG at fs/dcache.c:1018! Oops: E

Re: [PATCH 3.17 000/319] 3.17.3-stable review

2014-11-11 Thread Greg Kroah-Hartman
On Tue, Nov 11, 2014 at 10:25:39PM -0800, Guenter Roeck wrote: > On 11/11/2014 05:12 PM, Greg Kroah-Hartman wrote: > >This is the start of the stable review cycle for the 3.17.3 release. > >There are 319 patches in this series, all will be posted as a response > >to this one. If anyone has any iss

Re: [PATCH v2] n_tty: Fix read_buf race condition, increment read_head after pushing data

2014-11-11 Thread Christian Riesch
On Tue, Nov 11, 2014 at 2:04 PM, Måns Rullgård wrote: > Christian Riesch writes: [...]>> diff --git a/drivers/tty/n_tty.c b/drivers/tty/n_tty.c >> index 2e900a9..b09f326 100644 >> --- a/drivers/tty/n_tty.c >> +++ b/drivers/tty/n_tty.c >> @@ -321,7 +321,9 @@ static void n_tty_check_unthrottle(stru

Re: [PATCH 3.14 000/203] 3.14.24-stable review

2014-11-11 Thread Greg Kroah-Hartman
On Tue, Nov 11, 2014 at 10:29:14PM -0800, Guenter Roeck wrote: > On 11/11/2014 05:14 PM, Greg Kroah-Hartman wrote: > >This is the start of the stable review cycle for the 3.14.24 release. > >There are 203 patches in this series, all will be posted as a response > >to this one. If anyone has any is

Re: [PATCH 3.10 000/123] 3.10.60-stable review

2014-11-11 Thread Greg Kroah-Hartman
On Wed, Nov 12, 2014 at 03:22:55PM +0900, Greg Kroah-Hartman wrote: > On Tue, Nov 11, 2014 at 09:21:48PM -0800, Guenter Roeck wrote: > > On 11/11/2014 05:16 PM, Greg Kroah-Hartman wrote: > > >This is the start of the stable review cycle for the 3.10.60 release. > > >There are 123 patches in this se

Re: FAILED: patch "[PATCH] mtd: m25p80,spi-nor: Fix module aliases for m25p80" failed to apply to 3.17-stable tree

2014-11-11 Thread Rafał Miłecki
On 12 November 2014 07:21, Greg KH wrote: > On Wed, Nov 12, 2014 at 07:06:57AM +0100, Rafał Miłecki wrote: >> On 11 November 2014 23:11, Brian Norris wrote: >> > How about the following backport? I compile tested with >> > CONFIG_MTD_M25P80 as 'm' and 'y', and I made sure the module aliases >> >

Re: [PATCH 3.10 000/123] 3.10.60-stable review

2014-11-11 Thread Guenter Roeck
On 11/11/2014 05:16 PM, Greg Kroah-Hartman wrote: This is the start of the stable review cycle for the 3.10.60 release. There are 123 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be

Re: [PATCH 3.14 000/203] 3.14.24-stable review

2014-11-11 Thread Guenter Roeck
On 11/11/2014 05:14 PM, Greg Kroah-Hartman wrote: This is the start of the stable review cycle for the 3.14.24 release. There are 203 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be

Re: [PATCH 3.10 000/123] 3.10.60-stable review

2014-11-11 Thread Greg Kroah-Hartman
On Tue, Nov 11, 2014 at 09:21:48PM -0800, Guenter Roeck wrote: > On 11/11/2014 05:16 PM, Greg Kroah-Hartman wrote: > >This is the start of the stable review cycle for the 3.10.60 release. > >There are 123 patches in this series, all will be posted as a response > >to this one. If anyone has any is

Re: FAILED: patch "[PATCH] mtd: m25p80,spi-nor: Fix module aliases for m25p80" failed to apply to 3.17-stable tree

2014-11-11 Thread Greg KH
On Wed, Nov 12, 2014 at 07:06:57AM +0100, Rafał Miłecki wrote: > On 11 November 2014 23:11, Brian Norris wrote: > > How about the following backport? I compile tested with > > CONFIG_MTD_M25P80 as 'm' and 'y', and I made sure the module aliases > > show up in modinfo. > > > > From: Ben Hutchings

Re: [PATCH 3.17 000/319] 3.17.3-stable review

2014-11-11 Thread Guenter Roeck
On 11/11/2014 05:12 PM, Greg Kroah-Hartman wrote: This is the start of the stable review cycle for the 3.17.3 release. There are 319 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be m

Re: FAILED: patch "[PATCH] mtd: m25p80,spi-nor: Fix module aliases for m25p80" failed to apply to 3.17-stable tree

2014-11-11 Thread Rafał Miłecki
On 11 November 2014 23:11, Brian Norris wrote: > How about the following backport? I compile tested with > CONFIG_MTD_M25P80 as 'm' and 'y', and I made sure the module aliases > show up in modinfo. > > From: Ben Hutchings > Date: Tue, 30 Sep 2014 03:14:55 +0100 > Subject: [PATCH] mtd: m25p80: Fix

[PULL] params fix

2014-11-11 Thread Rusty Russell
The following changes since commit 206c5f60a3d902bc4b56dab2de3e88de5eb06108: Linux 3.18-rc4 (2014-11-09 14:55:29 -0800) are available in the git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux.git for you to fetch changes up to 3438cf549d2f3ee8e52c82acc8e2a9710ac21

Re: [PATCH 3.10 000/123] 3.10.60-stable review

2014-11-11 Thread Guenter Roeck
On 11/11/2014 05:16 PM, Greg Kroah-Hartman wrote: This is the start of the stable review cycle for the 3.10.60 release. There are 123 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be

Re: [PATCH v2 2/2] mem-hotplug: Reset node present pages when hot-adding a new pgdat.

2014-11-11 Thread Yasuaki Ishimatsu
(2014/11/11 10:27), Tang Chen wrote: > When onlining memory on node2, node2 zoneinfo and node3 meminfo corrupted: > > # for ((i = 2048; i < 2064; i++)); do echo online_movable > > /sys/devices/system/node/node2/memory$i/state; done > # cat /sys/devices/system/node/node2/meminfo > Node 2 MemTotal:

[PATCH 3.17 010/319] tipc: fix bug in bundled buffer reception

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Jon Paul Maloy [ Upstream commit 643566d4b47e2956110e79c0e6f65db9b9ea42c6 ] In commit ec8a2e5621db2da24badb3969eda7fd359e1869f ("tipc: same receive code path for connection protocol and data m

[PATCH 3.17 013/319] net: tso: fix unaligned access to crafted TCP header in helper API

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Karl Beldan [ Upstream commit a63ba13eec092b70d4e5522d692eaeb2f9747387 ] The crafted header start address is from a driver supplied buffer, which one can reasonably expect to be aligned on a 4

[PATCH 3.17 014/319] net: fix saving TX flow hash in sock for outgoing connections

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Sathya Perla [ Upstream commit 9e7ceb060754f134231f68cb29d5db31419fe1ed ] The commit "net: Save TX flow hash in sock and set in skbuf on xmit" introduced the inet_set_txhash() and ip6_set_txha

[PATCH 3.17 016/319] tcp: md5: do not use alloc_percpu()

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 349ce993ac706869d553a1816426d3a4bfda02b1 ] percpu tcp_md5sig_pool contains memory blobs that ultimately go through sg_set_buf(). -> sg_set_page(sg, virt_to_page

[PATCH 3.17 012/319] netlink: Re-add locking to netlink_lookup() and seq walker

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Thomas Graf [ Upstream commit 78fd1d0ab072d4d9b5f0b7c14a1516665170b565 ] The synchronize_rcu() in netlink_release() introduces unacceptable latency. Reintroduce minimal lookup so we can drop t

[PATCH 3.17 015/319] hyperv: Fix the total_data_buflen in send path

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Haiyang Zhang [ Upstream commit 942396b01989d54977120f3625e5ba31afe7a75c ] total_data_buflen is used by netvsc_send() to decide if a packet can be put into send buffer. It should also include

[PATCH 3.17 017/319] macvlan: fix a race on port dismantle and possible skb leaks

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit fe0ca7328d03d36aafecebb3af650e1bb2841c20 ] We need to cancel the work queue after rcu grace period, otherwise it can be rescheduled by incoming packets. We need

[PATCH 3.17 022/319] gre: Use inner mac length when computing tunnel length

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Tom Herbert [ Upstream commit 14051f0452a2c26a3f4791e6ad6a435e8f1945ff ] Currently, skb_inner_network_header is used but this does not account for Ethernet header for ETH_P_TEB. Use skb_inner_

[PATCH 3.17 002/319] KVM: emulator: fix execution close to the segment limit

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Paolo Bonzini commit fd56e1546a5f734290cbedd2b81c518850736511 upstream. Emulation of code that is 14 bytes to the segment limit or closer (e.g. RIP = 0xFFF2 after reset) is broken because

[PATCH 3.17 024/319] drivers/net, ipv6: Select IPv6 fragment idents for virtio UFO packets

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings [ Upstream commit 5188cd44c55db3e92cd9e77a40b5baa7ed4340f7 ] UFO is now disabled on all drivers that work with virtio net headers, but userland may try to send UFO/IPv6 packets a

[PATCH 3.17 019/319] ipv4: Do not cache routing failures due to disabled forwarding.

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Nicolas Cavallari [ Upstream commit fa19c2b050ab5254326f5fc07096dd3c6a8d5d58 ] If we cache them, the kernel will reuse them, independently of whether forwarding is enabled or not. Which means

[PATCH 3.17 018/319] cxgb4 : Fix missing initialization of win0_lock

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Anish Bhatt [ Upstream commit e327c225c911529898ec300cb96d2088893de3df ] win0_lock was being used un-initialized, resulting in warning traces being seen when lock debugging is enabled (and jus

[PATCH 3.17 021/319] mlx4: Avoid leaking steering rules on flow creation error flow

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Or Gerlitz [ Upstream commit 571e1b2c7a4c2fd5faa1648462a6b65fa26530d7 ] If mlx4_ib_create_flow() attempts to create > 1 rules with the firmware, and one of these registrations fail, we leaked

[PATCH 3.17 023/319] drivers/net: Disable UFO through virtio

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings [ Upstream commit 3d0ad09412ffe00c9afa201d01effdb6023d09b4 ] IPv6 does not allow fragmentation by routers, so there is no fragmentation ID in the fixed header. UFO for IPv6 requ

[PATCH 3.17 027/319] lockd: Try to reconnect if statd has moved

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Benjamin Coddington commit 173b3afceebe76fa2205b2c8808682d5b541fe3c upstream. If rpc.statd is restarted, upcalls to monitor hosts can fail with ECONNREFUSED. In that case force a lookup of st

[PATCH 3.17 025/319] drivers/net: macvtap and tun depend on INET

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings [ Upstream commit de11b0e8c569b96c2cf6a811e3805b7aeef498a3 ] These drivers now call ipv6_proxy_select_ident(), which is defined only if CONFIG_INET is enabled. However, they hav

[PATCH 3.17 026/319] stmmac: pci: set default of the filter bins

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Andy Shevchenko [ Upstream commit 1e19e084eae727654052339757ab7f1eaff58bad ] The commit 3b57de958e2a brought the support for a different amount of the filter bins, but didn't update the PCI dr

[PATCH 3.17 029/319] SUNRPC: Add missing support for RPC_CLNT_CREATE_NO_RETRANS_TIMEOUT

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust commit 2aca5b869ace67a63aab895659e5dc14c33a4d6e upstream. The flag RPC_CLNT_CREATE_NO_RETRANS_TIMEOUT was intended introduced in order to allow NFSv4 clients to disable resend

[PATCH 3.17 028/319] SUNRPC: Dont wake tasks during connection abort

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Benjamin Coddington commit a743419f420a64d442280845c0377a915b76644f upstream. When aborting a connection to preserve source ports, don't wake the task in xs_error_report. This allows tasks wi

[PATCH 3.17 031/319] pata_serverworks: disable 64-KB DMA transfers on Broadcom OSB4 IDE Controller

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Scott Carter commit 37017ac6849e772e67dd187ba2fbd056c4afa533 upstream. The Broadcom OSB4 IDE Controller (vendor and device IDs: 1166:0211) does not support 64-KB DMA transfers. Whenever a 64-K

[PATCH 3.17 030/319] Revert "percpu: free percpu allocation info for uniprocessor system"

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Guenter Roeck commit bb2e226b3bef596dd56be97df655d857b4603923 upstream. This reverts commit 3189eddbcafc ("percpu: free percpu allocation info for uniprocessor system"). The commit causes a h

[PATCH 3.17 004/319] ipv4: fix nexthop attlen check in fib_nh_match

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Jiri Pirko [ Upstream commit f76936d07c4eeb36d8dbb64ebd30ab46ff85d9f7 ] fib_nh_match does not match nexthops correctly. Example: ip route add 172.16.10/24 nexthop via 192.168.122.12 dev eth0

[PATCH 3.17 003/319] x86: bpf_jit: fix two bugs in eBPF JIT compiler

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Alexei Starovoitov [ Upstream commit e0ee9c12157dc74e49e4731e0d07512e7d1ceb95 ] 1. JIT compiler using multi-pass approach to converge to final image size, since x86 instructions are variable l

[PATCH 3.17 006/319] vxlan: using pskb_may_pull as early as possible

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Li RongQing [ Upstream commit 91269e390d062b526432f2ef1352b8df82e0e0bc ] pskb_may_pull should be used to check if skb->data has enough space, skb->len can not ensure that. Cc: Cong Wang Sign

[PATCH 3.17 008/319] ipv4: dst_entry leak in ip_send_unicast_reply()

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Vasily Averin [ Upstream commit 4062090e3e5caaf55bed4523a69f26c3265cc1d2 ] ip_setup_cork() called inside ip_append_data() steals dst entry from rt to cork and in case errors in __ip_append_dat

[PATCH 3.17 007/319] vxlan: fix a free after use

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Li RongQing [ Upstream commit 7a9f526fc3ee49b6034af2f243676ee0a27dcaa8 ] pskb_may_pull maybe change skb->data and make eth pointer oboslete, so eth needs to reload Fixes: 91269e390d062 ("vxla

[PATCH 3.17 042/319] mmc: dont request CD IRQ until mmc_start_host()

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Stephen Warren commit d4d11449088ee9aca16fd1884b852b8b73a4bda1 upstream. As soon as the CD IRQ is requested, it can trigger, since it's an externally controlled event. If it does, delayed_work

[PATCH 3.17 043/319] mmc: rtsx_pci_sdmmc: fix incorrect last byte in R2 response

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Roger Tseng commit d1419d50c1bf711e9fd27b516a739c86b23f7cf9 upstream. Current code erroneously fill the last byte of R2 response with an undefined value. In addition, the controller actually '

[PATCH 3.17 045/319] fs: make cont_expand_zero interruptible

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka commit c2ca0fcd202863b14bd041a7fece2e789926c225 upstream. This patch makes it possible to kill a process looping in cont_expand_zero. A process may spend a lot of time in this

[PATCH 3.17 044/319] mmc: sdhci-s3c: fix runtime PM handling on sdhci_add_host() failure

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Bartlomiej Zolnierkiewicz commit 221414db1934c1c883501998f510bb75acfbaa51 upstream. Runtime Power Management handling for the sdhci_add_host() failure case in sdhci_s3c_probe() should match th

[PATCH 3.17 009/319] ipv4: fix a potential use after free in ip_tunnel_core.c

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Li RongQing [ Upstream commit 1245dfc8cadb258386fcd27df38215a0eccb1f17 ] pskb_may_pull() maybe change skb->data and make eth pointer oboslete, so set eth after pskb_may_pull() Fixes:3d7b46cd(

[PATCH 3.17 000/319] 3.17.3-stable review

2014-11-11 Thread Greg Kroah-Hartman
This is the start of the stable review cycle for the 3.17.3 release. There are 319 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri Nov 14 01:07:52 UTC 2014. Anything receiv

[PATCH 3.17 033/319] ASoC: core: fix use after free in snd_soc_remove_platform()

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Mack commit decc27b01d584c985c231e73d3b493de6ec07af8 upstream. Coverity spotted an use-after-free condition in snd_soc_remove_platform(). Fix this by moving snd_soc_component_cleanup()

[PATCH 3.17 046/319] fs: Fix theoretical division by 0 in super_cache_scan().

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Tetsuo Handa commit 475d0db742e3755c6b267f48577ff7cbb7dfda0d upstream. total_objects could be 0 and is used as a denom. While total_objects is a "long", total_objects == 0 unlikely happens fo

[PATCH 3.17 050/319] vfs: fix data corruption when blocksize < pagesize for mmaped data

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Jan Kara commit 90a8020278c1598fafd071736a0846b38510309c upstream. ->page_mkwrite() is used by filesystems to allocate blocks under a page which is becoming writeably mmapped in some process'

[PATCH 3.17 049/319] UBIFS: fix free log space calculation

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Artem Bityutskiy commit ba29e721eb2df6df8f33c1f248388bb037a47914 upstream. Hu (hujianyang ) discovered an issue in the 'empty_log_bytes()' function, which calculates how many bytes are left in

[PATCH 3.17 048/319] UBIFS: fix a race condition

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Artem Bityutskiy commit 052c28073ff26f771d44ef33952a41d18dadd255 upstream. Hu (hujiany...@huawei.com) discovered a race condition which may lead to a situation when UBIFS is unable to mount th

[PATCH 3.17 047/319] fs: allow open(dir, O_TMPFILE|..., 0) with mode 0

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Eric Rannaud commit 69a91c237ab0ebe4e9fdeaf6d0090c85275594ec upstream. The man page for open(2) indicates that when O_CREAT is specified, the 'mode' argument applies only to future accesses to

[PATCH 3.17 051/319] x86: Reject x32 executables if x32 ABI not supported

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit 0e6d3112a4e95d55cf6dca88f298d5f4b8f29bd1 upstream. It is currently possible to execve() an x32 executable on an x86_64 kernel that has only ia32 compat enabled. However a

[PATCH 3.17 034/319] ASoC: soc-dapm: fix use after free

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Mack commit e5092c96c9c28f4d12811edcd02ca8eec16e748e upstream. Coverity spotted the following possible use-after-free condition in dapm_create_or_share_mixmux_kcontrol(): If kcontrol i

[PATCH 3.17 055/319] x86_64, entry: Fix out of bounds read on sysenter

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Andy Lutomirski commit 653bc77af60911ead1f423e588f54fc2547c4957 upstream. Rusty noticed a Really Bad Bug (tm) in my NT fix. The entry code reads out of bounds, causing the NT fix to be unreli

[PATCH 3.17 052/319] x86, fpu: __restore_xstate_sig()->math_state_restore() needs preempt_disable()

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Oleg Nesterov commit df24fb859a4e200d9324e2974229fbb7adf00aef upstream. Add preempt_disable() + preempt_enable() around math_state_restore() in __restore_xstate_sig(). Otherwise __switch_to()

[PATCH 3.17 053/319] x86, fpu: shift drop_init_fpu() from save_xstate_sig() to handle_signal()

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Oleg Nesterov commit 66463db4fc5605d51c7bb81d009d5bf30a783a2c upstream. save_xstate_sig()->drop_init_fpu() doesn't look right. setup_rt_frame() can fail after that, in this case the next setup

[PATCH 3.17 054/319] x86_64, entry: Filter RFLAGS.NT on entry from userspace

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Andy Lutomirski commit 8c7aa698baca5e8f1ba9edb68081f1e7a1abf455 upstream. The NT flag doesn't do anything in long mode other than causing IRET to #GP. Oddly, CPL3 code can still set NT using

[PATCH 3.17 057/319] perf: Fix unclone_ctx() vs. locking

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit 211de6eba8960521e2be450a7d07db85fba4604c upstream. The idiot who did 4a1c0f262f88 ("perf: Fix lockdep warning on process exit") forgot to pay attention and fix all simila

[PATCH 3.17 059/319] evm: check xattr value length and type in evm_inode_setxattr()

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Kasatkin commit 3b1deef6b1289a99505858a3b212c5b50adf0c2f upstream. evm_inode_setxattr() can be called with no value. The function does not check the length so that following command can

[PATCH 3.17 056/319] x86, pageattr: Prevent overflow in slow_virt_to_phys() for X86_PAE

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Dexuan Cui commit d1cd1210834649ce1ca6bafe5ac25d2f40331343 upstream. pte_pfn() returns a PFN of long (32 bits in 32-PAE), so "long << PAGE_SHIFT" will overflow for PFNs above 4GB. Due to this

[PATCH 3.17 058/319] evm: properly handle INTEGRITY_NOXATTRS EVM status

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Kasatkin commit 3dcbad52cf18c3c379e96b992d22815439ebbe53 upstream. Unless an LSM labels a file during d_instantiate(), newly created files are not labeled with an initial security.evm x

[PATCH 3.17 035/319] ASoC: soc-pcm: fix sig_bits determination in soc_pcm_apply_msb()

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Mack commit 5e63dfccf34d4dbf21429c4919f33c028ff49991 upstream. In the SNDRV_PCM_STREAM_CAPTURE branch in soc_pcm_apply_msb(), look at sig_bits of the capture stream, not the playback on

[PATCH 3.17 063/319] missing data dependency barrier in prepend_name()

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Al Viro commit 6d13f69444bd3d4888e43f7756449748f5a98bad upstream. AFAICS, prepend_name() is broken on SMP alpha. Disclaimer: I don't have SMP alpha boxen to reproduce it on. However, it real

[PATCH 3.17 061/319] ALSA: bebob: Uninitialized id returned by saffirepro_both_clk_src_get

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Christian Vogel commit d1d0b6b668818571122d30d68a0b3f768bd83a52 upstream. snd_bebob_stream_check_internal_clock() may get an id from saffirepro_both_clk_src_get (via clk_src->get()) that was u

[PATCH 3.17 062/319] ALSA: pcm: Zero-clear reserved fields of PCM status ioctl in compat mode

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 317168d0c766defd14b3d0e9c2c4a9a258b803ee upstream. In compat mode, we copy each field of snd_pcm_status struct but don't touch the reserved fields, and this leaves uninitia

[PATCH 3.17 060/319] ALSA: hda - Add workaround for CMI8888 snoop behavior

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 3b70bdba2fcb374a2235a56ab73334348d819579 upstream. CMI shows the stuttering playback when the snooping is disabled on the audio buffer. Meanwhile, we've got reports th

[PATCH 3.17 064/319] [jffs2] kill wbuf_queued/wbuf_dwork_lock

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Al Viro commit 99358a1ca53e8e6ce09423500191396f0e6584d2 upstream. schedule_delayed_work() happening when the work is already pending is a cheap no-op. Don't bother with ->wbuf_queued logics -

[PATCH 3.17 065/319] fix misuses of f_count() in ppp and netlink

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Al Viro commit 24dff96a37a2ca319e75a74d3929b2de22447ca6 upstream. we used to check for "nobody else could start doing anything with that opened file" by checking that refcount was 2 or less -

[PATCH 3.17 067/319] libceph: ceph-msgr workqueue needs a resque worker

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Ilya Dryomov commit f9865f06f7f18c6661c88d0511f05c48612319cc upstream. Commit f363e45fd118 ("net/ceph: make ceph_msgr_wq non-reentrant") effectively removed WQ_MEM_RECLAIM flag from ceph_msgr_

[PATCH 3.17 066/319] rbd: rbd workqueues need a resque worker

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Ilya Dryomov commit 792c3a914910bd34302c5345578f85cfcb5e2c01 upstream. Need to use WQ_MEM_RECLAIM for our workqueues to prevent I/O lockups under memory pressure - we sit on the memory reclaim

[PATCH 3.17 036/319] ASoC: tlv320aic3x: fix PLL D configuration

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Lavnikevich commit 31d9f8faf9a54c851e835af489c82f45105a442f upstream. Current caching implementation during regcache_sync() call bypasses all register writes of values that are already

[PATCH 3.17 037/319] ASoC: Intel: HSW/BDW only support S16 and S24 formats.

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Liam Girdwood commit 2ccf3bd4f8b120936cdfc796baf40c5d3dfab68d upstream. Fix driver with correct formats. Signed-off-by: Liam Girdwood Signed-off-by: Mark Brown Signed-off-by: Greg Kroah-Har

[PATCH 3.17 039/319] mmc: core: sdio: Fix unconditional wake_up_process() on sdio thread

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Fu Zhonghui commit dea67c4ec8218b301d7cac7ee6e63dac0bc566cb upstream. 781e989cf59 ("mmc: sdhci: convert to new SDIO IRQ handling") and bf3b5ec66bd ("mmc: sdio_irq: rework sdio irq handling") d

[PATCH 3.17 038/319] ASoC: adau1761: Fix input PGA volume

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Lars-Peter Clausen commit 3b283f0893f55cb79e4507e5ec34e49c17d0a787 upstream. For the input PGA to work correctly the ALC clock needs to be active. Otherwise volume changes are not applied. Fi

[PATCH 3.17 041/319] mmc: rtsx_usb_sdmmc: fix incorrect last byte in R2 response

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Roger Tseng commit 6f67cc6fd1cf339a0f19b9d4a998ec3c0123b1b6 upstream. Current code erroneously fill the last byte of R2 response with an undefined value. In addition, the controller actually '

[PATCH 3.17 040/319] mmc: sdhci-pxav3: set_uhs_signaling is initialized twice differently

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Peter Griffin commit b315376573778b195e640a163675fb9f5937ddca upstream. .set_uhs_signaling field is currently initialised twice once to the arch specific callback pxav3_set_uhs_signaling, and

[PATCH 3.17 032/319] libata-sff: Fix controllers with no ctl port

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Ondrej Zary commit 6d8ca28fa688a9354bc9fbc935bdaeb3651b6677 upstream. Currently, ata_sff_softreset is skipped for controllers with no ctl port. But that also skips ata_sff_dev_classify require

[PATCH 3.17 078/319] mfd: ti_am335x_tscadc: Fix TSC resume

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Sebastian Andrzej Siewior commit 6a71f38dd87f255a0586104ce2a14d5a3ddf3401 upstream. In the resume path, the ADC invokes am335x_tsc_se_set_cache() with 0 as the steps argument if continous mode

[PATCH 3.17 069/319] um: ubd: Fix for processes stuck in D state forever

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Thorsten Knabe commit 2a2361228c5e6d8c1733f00653481de918598e50 upstream. Starting with Linux 3.12 processes get stuck in D state forever in UserModeLinux under sync heavy workloads. This bug w

[PATCH 3.17 079/319] mfd: rtsx_pcr: Fix MSI enable error handling

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Chris Ball commit 5152970538a5e16c03bbcb9f1c780489a795ed40 upstream. pci_enable_msi() can return failure with both positive and negative integers -- it returns 0 for success -- but is only tes

[PATCH 3.17 070/319] random: add and use memzero_explicit() for clearing data

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann commit d4c5efdb97773f59a2b711754ca0953f24516739 upstream. zatimend has reported that in his environment (3.16/gcc4.8.3/corei7) memset() calls which clear out sensitive data in

[PATCH 3.17 085/319] virtio_pci: fix virtio spec compliance on restore

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: "Michael S. Tsirkin" commit 6fbc198cf623944ab60a1db6d306a4d55cdd820d upstream. On restore, virtio pci does the following: + set features + init vqs etc - device can be used at this point! + se

[PATCH 3.17 084/319] power: charger-manager: Fix NULL pointer exception with missing cm-fuel-gauge

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Krzysztof Kozlowski commit 661a88860274e059fdb744dfaa98c045db7b5d1d upstream. NULL pointer exception happens during charger-manager probe if 'cm-fuel-gauge' property is not present. [2.44

[PATCH 3.17 083/319] selinux: fix inode security list corruption

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Stephen Smalley commit 923190d32de4428afbea5e5773be86bea60a9925 upstream. sb_finish_set_opts() can race with inode_free_security() when initializing inode security structures for inodes create

[PATCH 3.17 082/319] pstore: Fix duplicate {console,ftrace}-efi entries

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Valdis Kletnieks commit d4bf205da618bbd0b038e404d646f14e76915718 upstream. The pstore filesystem still creates duplicate filename/inode pairs for some pstore types. Add the id to the filename

[PATCH 3.17 081/319] iommu/amd: Split init_iommu_group() from iommu_init_device()

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Alex Williamson commit 25b11ce2a3607d7c39a2ca121eea0c67c722b34e upstream. For a PCI device, aliases from the IVRS table won't be populated into dma_alias_devfn until after iommu_init_device()

[PATCH 3.17 080/319] iommu: Rework iommu_group_get_for_pci_dev()

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Alex Williamson commit f096c061f5525d1b35a65b793057b52061dcb486 upstream. It turns out that our assumption that aliases are always to the same slot isn't true. One particular platform reports

[PATCH 3.17 090/319] dm bufio: update last_accessed when relinking a buffer

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Joe Thornber commit eb76faf53b1ff7a77ce3f78cc98ad392ac70c2a0 upstream. The 'last_accessed' member of the dm_buffer structure was only set when the the buffer was created. This led to each buf

[PATCH 3.17 089/319] blk-mq: fix potential hang if rolling wakeup depth is too high

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Jens Axboe commit abab13b5c4fd1fec4f9a61622548012d93dc2831 upstream. We currently divide the queue depth by 4 as our batch wakeup count, but we split the wakeups over BT_WAIT_QUEUES number of

[PATCH 3.17 088/319] drm/cirrus: bind also to qemu-xen-traditional

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Olaf Hering commit c0c3e735fa7bae29c6623511127fd021b2d6d849 upstream. qemu as used by xend/xm toolstack uses a different subvendor id. Bind the drm driver also to this emulated card. Signed-o

[PATCH 3.17 092/319] drbd: compute the end before rb_insert_augmented()

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Lai Jiangshan commit 82cfb90bc99d7b7e0ec62d0505b9d4f06805d5db upstream. Commit 98683650 "Merge branch 'drbd-8.4_ed6' into for-3.8-drivers-drbd-8.4_ed6" switches to the new augment API, but the

[PATCH 3.17 093/319] block: fix alignment_offset math that assumes io_min is a power-of-2

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Mike Snitzer commit b8839b8c55f3fdd60dc36abcda7e0266aff7985c upstream. The math in both blk_stack_limits() and queue_limit_alignment_offset() assume that a block device's io_min (aka minimum_i

[PATCH 3.17 091/319] dm bufio: when done scanning return from __scan immediately

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka commit 0e825862f3c04cee40e25f55680333728a4ffa9b upstream. When __scan frees the required number of buffer entries that the shrinker requested (nr_to_scan becomes zero) it must

[PATCH 3.17 094/319] Revert "block: all blk-mq requests are tagged"

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Christoph Hellwig commit e999dbc254044e8d2a5818d92d205f65bae28f37 upstream. This reverts commit fb3ccb5da71273e7f0d50b50bc879e50cedd60e7. SCSI-2/SPI actually needs the tagged/untagged flag in

[PATCH 3.17 096/319] modules, lock around setting of MODULE_STATE_UNFORMED

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Prarit Bhargava commit d3051b489aa81ca9ba62af366149ef42b8dae97c upstream. A panic was seen in the following sitation. There are two threads running on the system. The first thread is a system

[PATCH 3.17 097/319] framebuffer: fix screen corruption when copying

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka commit 5b789da8a7fc357661fc61faaf853e9161cc9700 upstream. The function bitcpy_rev has a bug that may result in screen corruption. The bug happens under these conditions: * the

[PATCH 3.17 095/319] dm log userspace: fix memory leak in dm_ulog_tfr_init failure path

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Alexey Khoroshilov commit 56ec16cb1e1ce46354de8511eef962a417c32c92 upstream. If cn_add_callback() fails in dm_ulog_tfr_init(), it does not deallocate prealloced memory but calls cn_del_callbac

[PATCH 3.17 071/319] s390/topology: call set_sched_topology early

2014-11-11 Thread Greg Kroah-Hartman
3.17-stable review patch. If anyone has any objections, please let me know. -- From: Martin Schwidefsky commit 48e9a6c1f54695609b709bf674aac133794ada00 upstream. The call to topology_init is too late for the set_sched_topology call. The initial scheduling domain structure has

  1   2   3   4   5   6   7   8   9   10   >