Re: [PATCH 3.19.y-ckt 116/155] x86/setup: Extend low identity map to cover whole kernel range

On Thu, 12 Nov, at 03:17:50PM, Kamal Mostafa wrote: > 3.19.8-ckt10 -stable review patch. If anyone has any objections, please let > me know. > > -- > > From: Paolo Bonzini > > commit f5f3497cad8c8416a74b9aaceb127908755d020a upstream. Be sure to also apply upstream commit 68ac

Re: [PATCH 3.19.y-ckt 046/155] ASoC: sgtl5000: fix wrong register MIC_BIAS_VOLTAGE setup on probe

On 11/13/2015 12:16 AM, Kamal Mostafa wrote: 3.19.8-ckt10 -stable review patch. If anyone has any objections, please let me know. yes, it should works. Please add the correct message in the device-tree probe for the micbias voltage too. Just to have the same behaviour. -

Re: [PATCH 4.2 031/110] x86/setup: Extend low identity map to cover whole kernel range

On Fri, Nov 06, 2015 at 11:48:30AM -0800, Greg Kroah-Hartman wrote: > Thanks for letting me know, now dropped from all trees. If it ever gets > fixed up, please resend the git commit ids to stable@ Ok, you can pick it back up at your earliest convenience. You need to apply the fix too: 68accac39

Re: [PATCH] KVM: x86: expose MSR_TSC_AUX to userspace

> Paolo, under what circumstances (which versions of Windows? Anything > special running in the guest?) has this failure happened? I'd like to repro > this, I'm not sure if we've observed it before. We saw it with migration under Windows 10, nothing special running in the guest. It's very hard t

Re: [PATCH] [RESEND] crypto: qat - don't use userspace pointer

On Wed, Oct 21, 2015 at 02:57:09PM -0700, Tadeusz Struk wrote: > Bugfix - don't dereference userspace pointer. > > Resend with the correct way for inclusion in the stable kernel. Applied to crypto. -- Email: Herbert Xu Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana

[3.16.y-ckt stable] Linux 3.16.7-ckt20 stable review

This is the start of the review cycle for the Linux 3.16.7-ckt20 stable kernel. This version contains 94 new patches, summarized below. The new patches are posted as replies to this message and also available in this git branch: http://kernel.ubuntu.com/git/ubuntu/linux.git/log/?h=linux-3.16.y-r

[PATCH 3.16.y-ckt 29/94] dm thin: fix missing pool reference count decrement in pool_ctr error path

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Mike Snitzer commit ba30670f4d5292c4e7f7980bbd5071f7c4794cdd upstream. Fixes: ac8c3f3df ("dm thin: generate event when metadata threshold passed") Signed-off-by: Mike Snitzer Signed

[PATCH 3.16.y-ckt 28/94] crypto: ahash - ensure statesize is non-zero

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Russell King commit 8996eafdcbad149ac0f772fb1649fbb75c482a6a upstream. Unlike shash algorithms, ahash drivers must implement export and import as their descriptors may contain hardwa

[PATCH 3.16.y-ckt 47/94] xen-blkfront: check for null drvdata in blkback_changed (XenbusStateClosing)

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Cathy Avery commit a54c8f0f2d7df525ff997e2afe71866a1a013064 upstream. xen-blkfront will crash if the check to talk_to_blkback() in blkback_changed()(XenbusStateInitWait) returns an e

[PATCH 3.16.y-ckt 94/94] sched/preempt: Fix cond_resched_lock() and cond_resched_softirq()

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Konstantin Khlebnikov commit fe32d3cd5e8eb0f82e459763374aa80797023403 upstream. These functions check should_resched() before unlocking spinlock/bh-enable: preempt_count always non-z

[PATCH 3.16.y-ckt 93/94] sched/preempt: Rename PREEMPT_CHECK_OFFSET to PREEMPT_DISABLE_OFFSET

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Frederic Weisbecker commit 90b62b5129d5cb50f62f40e684de7a1961e57197 upstream. "CHECK" suggests it's only used as a comparison mask. But now it's used further as a config-conditional

[PATCH 3.16.y-ckt 91/94] power: bq24190_charger: suppress build warning

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: "Lad, Prabhakar" commit 31f50e48e3e4ea9d503285a389d6a1b5349d66c0 upstream. This patch fixes following build warning: In file included from include/linux/printk.h:261:0,

[PATCH 3.16.y-ckt 92/94] sfc: Fix memcpy() with const destination compiler warning.

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" commit 1d20a16062e771b6e26b843c0cde3b17c1146e00 upstream. drivers/net/ethernet/sfc/selftest.c: In function ‘efx_iterate_state’: drivers/net/ethernet/sfc/selftest.c:

[PATCH 3.16.y-ckt 90/94] staging/dgnc: fix info leak in ioctl

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: =?UTF-8?q?Salva=20Peir=C3=B3?= commit 4b6184336ebb5c8dc1eae7f7ab46ee608a748b05 upstream. The dgnc_mgmt_ioctl() code fails to initialize the 16 _reserved bytes of struct digi_dinfo af

[PATCH 3.16.y-ckt 87/94] serial: 8250_pci: Correct uartclk for xr17v35x expansion chips

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Soeren Grunewald commit 899f0c1c7dbcc487fdc8756a49ff70b1d5d75f89 upstream. The internal clock of the master chip, which is usually 125MHz, is only half (62.5MHz) for the slave chips.

[PATCH 3.16.y-ckt 89/94] ppp, slip: Validate VJ compression slot parameters completely

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit 4ab42d78e37a294ac7bc56901d563c642e03c4ae upstream. Currently slhc_init() treats out-of-range values of rslots and tslots as equivalent to 0, except that if tslot

[PATCH 3.16.y-ckt 88/94] isdn_ppp: Add checks for allocation failure in isdn_ppp_open()

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit 0baa57d8dc32db78369d8b5176ef56c5e2e18ab3 upstream. Compile-tested only. Signed-off-by: Ben Hutchings Signed-off-by: David S. Miller Cc: Moritz Mühlenhoff Sig

[PATCH 3.16.y-ckt 86/94] serial: 8250_pci: Add support for 12 port Exar boards

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Soeren Grunewald commit be32c0cf0462c36f482b5ddcff1d8371be1e183c upstream. The Exar XR17V358 can also be combined with a XR17V354 chip to act as a single 12 port chip. This works the

[PATCH 3.16.y-ckt 84/94] net/mlx4: Copy/set only sizeof struct mlx4_eqe bytes

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Carol L Soto commit c02b05011fadf8e409e41910217ca689f2fc9d91 upstream. When doing memcpy/memset of EQEs, we should use sizeof struct mlx4_eqe as the base size and not caps.eqe_size w

[PATCH 3.16.y-ckt 79/94] md/raid5: fix locking in handle_stripe_clean_event()

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Roman Gushchin commit b8a9d66d043ffac116100775a469f05f5158c16f upstream. After commit 566c09c53455 ("raid5: relieve lock contention in get_active_stripe()") __find_stripe() is calle

[PATCH 3.16.y-ckt 85/94] serial: 8250_pci: Add support for 16 port Exar boards

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Soeren Grunewald commit 96a5d18bc1338786fecac73599f1681f59a59a8e upstream. The Exar XR17V358 chip usually provides only 8 ports. But two chips can be combined to act as a single 16 p

[PATCH 3.16.y-ckt 81/94] ipv6: Fix IPsec pre-encap fragmentation check

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Herbert Xu commit 93efac3f2e03321129de67a3c0ba53048bb53e31 upstream. The IPv6 IPsec pre-encap path performs fragmentation for tunnel-mode packets. That is, we perform fragmentation

[PATCH 3.16.y-ckt 83/94] ipv6: gre: support SIT encapsulation

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit 7e3b6e7423d5f994257c1de88e06b509673fdbcf upstream. gre_gso_segment() chokes if SIT frames were aggregated by GRO engine. Fixes: 61c1db7fae21e ("ipv6: sit: add GS

[PATCH 3.16.y-ckt 82/94] ppp: fix pppoe_dev deletion condition in pppoe_release()

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Guillaume Nault commit 1acea4f6ce1b1c0941438aca75dd2e5c6b09db60 upstream. We can't rely on PPPOX_ZOMBIE to decide whether to clear po->pppoe_dev. PPPOX_ZOMBIE can be set by pppoe_dis

[PATCH 3.16.y-ckt 80/94] Revert "md: allow a partially recovered device to be hot-added to an array."

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: NeilBrown commit d01552a76d71f9879af448e9142389ee9be6e95b upstream. This reverts commit 7eb418851f3278de67126ea0c427641ab4792c57. This commit is poorly justified, I can find not dis

[PATCH 3.16.y-ckt 78/94] rbd: require stable pages if message data CRCs are enabled

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Ronny Hegewald commit bae818ee1577c27356093901a0ea48f672eda514 upstream. rbd requires stable pages, as it performs a crc of the page data before they are send to the OSDs. But since

[PATCH 3.16.y-ckt 77/94] drm/radeon: fix dpms when driver backlight control is disabled

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit ae93580ee59c02395c1711d3e6b90546b8137b86 upstream. If driver backlight control is disabled, either by driver parameter or default per-asic setting, revert to the

[PATCH 3.16.y-ckt 75/94] drm/radeon: Restore LCD backlight level on resume (>= R5xx)

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: =?UTF-8?q?Michel=20D=C3=A4nzer?= commit 4281f46ef839050d2ef60348f661eb463c21cc2e upstream. Instead of only enabling the backlight (which seems to set it to max brightness), just re-s

[PATCH 3.16.y-ckt 73/94] mvsas: Fix NULL pointer dereference in mvs_slot_task_free

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: =?UTF-8?q?D=C4=81vis=20Mos=C4=81ns?= commit 2280521719e81919283b82902ac24058f87dfc1b upstream. When pci_pool_alloc fails in mvs_task_prep then task->lldd_task stays NULL but it's lat

[PATCH 3.16.y-ckt 76/94] drm/radeon: move bl encoder assignment into bl init

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 4cee6a9057d5e13911f0cb6e143d11dc1a3245dd upstream. So that the bl encoder will be null if the GPU does not control the backlight. Reviewed-by: Michel Dänzer Sig

[PATCH 3.16.y-ckt 74/94] Revert "ARM64: unwind: Fix PC calculation"

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Will Deacon commit 9702970c7bd3e2d6fecb642a190269131d4ac16c upstream. This reverts commit e306dfd06fcb44d21c80acb8e5a88d55f3d1cf63. With this patch applied, we were the only archite

[PATCH 3.16.y-ckt 71/94] i2c: mv64xxx: really allow I2C offloading

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Hezi Shahmoon commit 0729a04977d497cf66234fd7f900ddcec3ef1c52 upstream. Commit 00d8689b85a7 ("i2c: mv64xxx: rework offload support to fix several problems") completely reworked the o

[PATCH 3.16.y-ckt 69/94] md/raid10: submit_bio_wait() returns 0 on success

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Jes Sorensen commit 681ab4696062f5aa939c9e04d058732306a97176 upstream. This was introduced with 9e882242c6193ae6f416f2d8d8db0d9126bd996b which changed the return value of submit_bio_

[PATCH 3.16.y-ckt 72/94] drm/radeon: don't try to recreate sysfs entries on resume

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 49abb26651167c892393cd9f2ad23df429645ed9 upstream. Fixes a harmless error message caused by: 51a4726b04e880fdd9b4e0e58b13f70b0a68a7f5 Signed-off-by: Alex Deucher

[PATCH 3.16.y-ckt 68/94] md/raid1: submit_bio_wait() returns 0 on success

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Jes Sorensen commit 203d27b0226a05202438ddb39ef0ef1acb14a759 upstream. This was introduced with 9e882242c6193ae6f416f2d8d8db0d9126bd996b which changed the return value of submit_bio_

[PATCH 3.16.y-ckt 70/94] iommu/amd: Don't clear DTE flags when modifying it

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Joerg Roedel commit cbf3ccd09d683abf1cacd36e3640872ee912d99b upstream. During device assignment/deassignment the flags in the DTE get lost, which might cause spurious faults, for exa

[PATCH 3.16.y-ckt 66/94] module: Fix locking in symbol_put_addr()

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit 275d7d44d802ef271a42dc87ac091a495ba72fc5 upstream. Poma (on the way to another bug) reported an assertion triggering: [] module_assert_mutex_or_preempt+0x49/

Re: [PATCH 3.19.y-ckt 042/155] x86/xen: Support kexec/kdump in HVM guests by doing a soft reset

On 12/11/15 23:16, Kamal Mostafa wrote: > 3.19.8-ckt10 -stable review patch. If anyone has any objections, please let > me know. > > -- > > From: Vitaly Kuznetsov > > commit 0b34a166f291d255755be46e43ed5497cdd194f2 upstream. > > Currently there is a number of issues preventin

[PATCH 3.16.y-ckt 64/94] IB/cm: Fix rb-tree duplicate free and use-after-free

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Doron Tsur commit 0ca81a2840f77855bbad1b9f172c545c4dc9e6a4 upstream. ib_send_cm_sidr_rep could sometimes erase the node from the sidr (depending on errors in the process). Since ib_s

[PATCH 3.16.y-ckt 67/94] crypto: api - Only abort operations on fatal signal

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Herbert Xu commit 3fc89adb9fa4beff31374a4bf50b3d099d88ae83 upstream. Currently a number of Crypto API operations may fail when a signal occurs. This causes nasty problems as the cal

[PATCH 3.16.y-ckt 65/94] iwlwifi: mvm: init card correctly on ctkill exit check

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Arik Nemtsov commit 1a3fe0b2b6778b7866e2b3f5c9a299d5e9bbd89c upstream. During the CT-kill exit flow, the card is powered up and partially initialized to check if the temperature is a

[PATCH 3.16.y-ckt 63/94] dm btree: fix leak of bufio-backed block in btree_split_beneath error path

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Mike Snitzer commit 4dcb8b57df3593dcb20481d9d6cf79d1dc1534be upstream. btree_split_beneath()'s error path had an outstanding FIXME that speaks directly to the potential for _not_ cle

[PATCH 3.16.y-ckt 59/94] mm: make sendfile(2) killable

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Jan Kara commit 296291cdd1629c308114504b850dc343eabc2782 upstream. Currently a simple program below issues a sendfile(2) system call which takes about 62 days to complete in my test

[PATCH 3.16.y-ckt 62/94] dm btree remove: fix a bug when rebalancing nodes after removal

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Joe Thornber commit 2871c69e025e8bc507651d5a9cf81a8a7da9d24b upstream. Commit 4c7e309340ff ("dm btree remove: fix bug in redistribute3") wasn't a complete fix for redistribute3(). T

[PATCH 3.16.y-ckt 55/94] xhci: Add spurious wakeup quirk for LynxPoint-LP controllers

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Laura Abbott commit fd7cd061adcf5f7503515ba52b6a724642a839c8 upstream. We received several reports of systems rebooting and powering on after an attempted shutdown. Testing showed th

[PATCH 3.16.y-ckt 60/94] rbd: don't leak parent_spec in rbd_dev_probe_parent()

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Ilya Dryomov commit 1f2c6651f69c14d0d3a9cfbda44ea101b02160ba upstream. Currently we leak parent_spec and trigger a "parent reference underflow" warning if rbd_dev_create() in rbd_dev

[PATCH 3.16.y-ckt 61/94] rbd: prevent kernel stack blow up on rbd map

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Ilya Dryomov commit 6d69bb536bac0d403d83db1ca841444981b280cd upstream. Mapping an image with a long parent chain (e.g. image foo, whose parent is bar, whose parent is baz, etc) curre

[PATCH 3.16.y-ckt 58/94] powerpc/rtas: Validate rtas.entry before calling enter_rtas()

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Vasant Hegde commit 8832317f662c06f5c06e638f57bfe89a71c9b266 upstream. Currently we do not validate rtas.entry before calling enter_rtas(). This leads to a kernel oops when user spac

[PATCH 3.16.y-ckt 57/94] drm/nouveau/gem: return only valid domain when there's only one

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Ilia Mirkin commit 2a6c521bb41ce862e43db46f52e7681d33e8d771 upstream. On nv50+, we restrict the valid domains to just the one where the buffer was originally created. However after t

[PATCH 3.16.y-ckt 56/94] ASoC: wm8904: Correct number of EQ registers

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Charles Keepax commit 97aff2c03a1e4d343266adadb52313613efb027f upstream. There are 24 EQ registers not 25, I suspect this bug came about because the registers start at EQ1 not zero.

[PATCH 3.16.y-ckt 52/94] ASoC: Add info callback for SX_TLV controls

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Charles Keepax commit 34198710f55b5f359f43e67d9a08fe5aadfbca1b upstream. SX_TLV controls are intended for situations where the register behind the control has some non-zero value ind

[PATCH 3.16.y-ckt 50/94] drm/i915: Deny wrapping an userptr into a framebuffer

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Chris Wilson commit cc917ab43541db3ff66d0136042686d40a1b4c9a upstream. Pinning a userptr onto the hardware raises interesting questions about the lifetime of such a surface as the fr

[PATCH 3.16.y-ckt 54/94] xhci: handle no ping response error properly

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Mathias Nyman commit 3b4739b8951d650becbcd855d7d6f18ac98a9a85 upstream. If a host fails to wake up a isochronous SuperSpeed device from U1/U2 in time for a isoch transfer it will gen

[PATCH 3.16.y-ckt 53/94] xhci: don't finish a TD if we get a short transfer event mid TD

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Mathias Nyman commit e210c422b6fdd2dc123bedc588f399aefd8bf9de upstream. If the difference is big enough between the bytes asked and received in a bulk transfer we can get a short tra

[PATCH 3.16.y-ckt 51/94] x86/efi: Fix multiple GOP device support

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: =?UTF-8?q?K=C5=91v=C3=A1g=C3=B3=2C=20Zolt=C3=A1n?= commit 8a53554e12e98d1759205afd7b8e9e2ea0936f48 upstream. When multiple GOP devices exists, but none of them implements ConOut, the

[PATCH 3.16.y-ckt 46/94] ARM: orion: Fix DSA platform device after mvmdio conversion

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Florian Fainelli commit d836ace65ee98d7079bc3c5afdbcc0e27dca20a3 upstream. DSA expects the host_dev pointer to be the device structure associated with the MDIO bus controller driver.

[PATCH 3.16.y-ckt 49/94] ALSA: hda - Fix inverted internal mic on Lenovo G50-80

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: David Henningsson commit e8d65a8d985271a102f07c7456da5b86c19ffe16 upstream. Add the appropriate quirk to indicate the Lenovo G50-80 has a stereo mic input where one channel has rever

[PATCH 3.16.y-ckt 45/94] iwlwifi: pci: add a few more PCI subvendor IDs for the 7265 series

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Luca Coelho commit f08f625876476b6c4a87834dc86e3b927f4697d2 upstream. Add 3 new subdevice IDs for the 0x095A device ID and 2 for the 0x095B device ID. Reported-by: Jeremy Signed-of

[PATCH 3.16.y-ckt 48/94] iio: mxs-lradc: Fix temperature offset

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Alexandre Belloni commit b94e22805a2224061bb263a82b72e09544a5fbb3 upstream. 0° Kelvin is actually −273.15°C, not -272.15°C. Fix the temperature offset. Also improve the comment expla

[PATCH 3.16.y-ckt 44/94] iwlwifi: fix firmware filename for 3160

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Johannes Berg commit b5a48134f8af08f5243328f8a0b05fc5ae7cf343 upstream. The MODULE_FIRMWARE() for 3160 should be using the 7260 version as it's done in the device configuration struc

[PATCH 3.16.y-ckt 43/94] iwlwifi: mvm: fix D3 firmware PN programming

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Johannes Berg commit 2cf5eb3ab7bb7f2e3a70edcef236cd62c87db030 upstream. The code to send the RX PN data (for each TID) to the firmware has a devastating bug: it overwrites the data f

[PATCH 3.16.y-ckt 42/94] iwlwifi: dvm: fix D3 firmware PN programming

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Johannes Berg commit 5bd166872d8f99f156fac191299d24f828bb2348 upstream. The code to send the RX PN data (for each TID) to the firmware has a devastating bug: it overwrites the data f

[PATCH 3.16.y-ckt 41/94] iio: accel: sca3000: memory corruption in sca3000_read_first_n_hw_rb()

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit eda7d0f38aaf50dbb2a2de15e8db386c4f6f65fc upstream. "num_read" is in byte units but we are write u16s so we end up write twice as much as intended. Signed-off-by

[PATCH 3.16.y-ckt 39/94] rbd: fix double free on rbd_dev->header_name

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Ilya Dryomov commit 3ebe138ac642a195c7f2efdb918f464734421fd6 upstream. If rbd_dev_image_probe() in rbd_dev_probe_parent() fails, header_name is freed twice: once in rbd_dev_probe_par

[PATCH 3.16.y-ckt 40/94] ath9k: declare required extra tx headroom

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Felix Fietkau commit 029cd0370241641eb70235d205aa0b90c84dce44 upstream. ath9k inserts padding between the 802.11 header and the data area (to align it). Since it didn't declare this

[PATCH 3.16.y-ckt 37/94] drm: Reject DRI1 hw lock ioctl functions for kms drivers

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Daniel Vetter commit da168d81b44898404d281d5dbe70154ab5f117c1 upstream. I've done some extensive history digging across libdrm, mesa and xf86-video-{intel,nouveau,ati}. The only pote

[PATCH 3.16.y-ckt 38/94] usb: xhci: Add support for URB_ZERO_PACKET to bulk/sg transfers

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Reyad Attiyat commit 4758dcd19a7d9ba9610b38fecb93f65f56f86346 upstream. This commit checks for the URB_ZERO_PACKET flag and creates an extra zero-length td if the urb transfer length

[PATCH 3.16.y-ckt 35/94] i2c: designware: Do not use parameters from ACPI on Dell Inspiron 7348

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Mika Westerberg commit 56d4b8a24cef5d66f0d10ac778a520d3c2c68a48 upstream. ACPI SSCN/FMCN methods were originally added because then the platform can provide the most accurate HCNT/LC

[PATCH 3.16.y-ckt 36/94] btrfs: fix possible leak in btrfs_ioctl_balance()

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Christian Engelmayer commit 0f89abf56abbd0e1c6e3cef9813e6d9f05383c1e upstream. Commit 8eb934591f8b ("btrfs: check unsupported filters in balance arguments") adds a jump to exit label

[PATCH 3.16.y-ckt 32/94] i2c: rcar: enable RuntimePM before registering to the core

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Wolfram Sang commit 4f7effddf4549d57114289f273710f077c4c330a upstream. The core may register clients attached to this master which may use funtionality from the master. So, RuntimePM

[PATCH 3.16.y-ckt 34/94] i2c: designware-platdrv: enable RuntimePM before registering to the core

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Wolfram Sang commit 36d48fb5766aee9717e429f772046696b215282d upstream. The core may register clients attached to this master which may use funtionality from the master. So, RuntimePM

[PATCH 3.16.y-ckt 33/94] i2c: s3c2410: enable RuntimePM before registering to the core

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Wolfram Sang commit eadd709f5d2e8aebb1b7bf49460e97a68d81a9b0 upstream. The core may register clients attached to this master which may use funtionality from the master. So, RuntimePM

[PATCH 3.16.y-ckt 31/94] btrfs: fix use after free iterating extrefs

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Chris Mason commit dc6c5fb3b514221f2e9d21ee626a9d95d3418dff upstream. The code for btrfs inode-resolve has never worked properly for files with enough hard links to trigger extrefs.

[PATCH 3.16.y-ckt 30/94] btrfs: check unsupported filters in balance arguments

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: David Sterba commit 8eb934591f8bf584969454a658f629cd06e59f3a upstream. We don't verify that all the balance filter arguments supplemented by the flags are actually known to the kerne

[PATCH 3.16.y-ckt 26/94] drm/nouveau/fbcon: take runpm reference when userspace has an open fd

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Skeggs commit f231976c2e8964ceaa9250e57d27c35ff03825c2 upstream. We need to do this in order to prevent accesses to the device while it's powered down. Userspace may have an mma

[PATCH 3.16.y-ckt 27/94] arm64: errata: use KBUILD_CFLAGS_MODULE for erratum #843419

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Will Deacon commit b6dd8e0719c0d2d01429639a11b7bc2677de240c upstream. Commit df057cc7b4fa ("arm64: errata: add module build workaround for erratum #843419") sets CFLAGS_MODULE to ens

[PATCH 3.16.y-ckt 23/94] drm/radeon: add quirk for MSI R7 370

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Maxim Sheviakov commit e78654799135a788a941bacad3452fbd7083e518 upstream. Just adds the quirk for MSI R7 370 Armor 2X Bug: https://bugs.freedesktop.org/show_bug.cgi?id=91294 Signed-

[PATCH 3.16.y-ckt 25/94] crypto: sparc - initialize blkcipher.ivsize

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Dave Kleikamp commit a66d7f724a96d6fd279bfbd2ee488def6b081bea upstream. Some of the crypto algorithms write to the initialization vector, but no space has been allocated for it. This

[PATCH 3.16.y-ckt 24/94] drm/radeon: add quirk for ASUS R7 370

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 2b02ec79004388a8c65e227bc289ed891b5ac8c6 upstream. Bug: https://bugs.freedesktop.org/show_bug.cgi?id=92260 Signed-off-by: Alex Deucher Signed-off-by: Luis Henri

[PATCH 3.16.y-ckt 18/94] sched/core: Fix TASK_DEAD race in finish_task_switch()

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit 95913d97914f44db2b81271c2e2ebd4d2ac2df83 upstream. So the problem this patch is trying to address is as follows: CPU0CPU1

[PATCH 3.16.y-ckt 22/94] drm/radeon: add pm sysfs files late

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 51a4726b04e880fdd9b4e0e58b13f70b0a68a7f5 upstream. They were added relatively early in the driver init process which meant that in some cases the driver was not f

[PATCH 3.16.y-ckt 19/94] dm cache: fix NULL pointer when switching from cleaner policy

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Joe Thornber commit 2bffa1503c5c06192eb1459180fac4416575a966 upstream. The cleaner policy doesn't make use of the per cache block hint space in the metadata (unlike the other policie

[PATCH 3.16.y-ckt 21/94] workqueue: make sure delayed work run in local cpu

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Shaohua Li commit 874bbfe600a660cba9c776b3957b1ce393151b76 upstream. My system keeps crashing with below message. vmstat_update() schedules a delayed work in current cpu and expects

[PATCH 3.16.y-ckt 20/94] 3w-9xxx: don't unmap bounce buffered commands

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Christoph Hellwig commit 15e3d5a285ab9283136dba34bbf72886d9146706 upstream. 3w controller don't dma map small single SGL entry commands but instead bounce buffer them. Add a helper

[PATCH 3.16.y-ckt 16/94] ALSA: synth: Fix conflicting OSS device registration on AWE32

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 225db5762dc1a35b26850477ffa06e5cd0097243 upstream. When OSS emulation is loaded on ISA SB AWE32 chip, we get now kernel warnings like: WARNING: CPU: 0 PID: 2791

[PATCH 3.16.y-ckt 17/94] arm64: readahead: fault retry breaks mmap file read random detection

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Mark Salyzyn commit 569ba74a7ba69f46ce2950bf085b37fea2408385 upstream. This is the arm64 portion of commit 45cac65b0fcd ("readahead: fault retry breaks mmap file read random detectio

[PATCH 3.16.y-ckt 14/94] usb: Add device quirk for Logitech PTZ cameras

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Vincent Palatin commit 72194739f54607bbf8cfded159627a2015381557 upstream. Add a device quirk for the Logitech PTZ Pro Camera and its sibling the ConferenceCam CC3000e Camera. This fi

[PATCH 3.16.y-ckt 13/94] USB: Add reset-resume quirk for two Plantronics usb headphones.

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Yao-Wen Mao commit 8484bf2981b3d006426ac052a3642c9ce1d8d980 upstream. These two headphones need a reset-resume quirk to properly resume to original volume level. Signed-off-by: Yao-

[PATCH 3.16.y-ckt 15/94] staging: speakup: fix speakup-r regression

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: "cov...@ccs.covici.com" commit b1d562acc78f0af46de0dfe447410bc40bdb7ece upstream. Here is a patch to make speakup-r work again. It broke in 3.6 due to commit 4369c64c79a22b98d3b7eff

[PATCH 3.16.y-ckt 09/94] ASoC: dwc: correct irq clear method

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Yitian Bu commit 4873867e5f2bd90faad861dd94865099fc3140f3 upstream. from Designware I2S datasheet, tx/rx XRUN irq is cleared by reading register TOR/ROR, rather than by writing into

[PATCH 3.16.y-ckt 10/94] dm raid: fix round up of default region size

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka commit 042745ee53a0a7c1f5aff191a4a24213c6dcfb52 upstream. Commit 3a0f9aaee028 ("dm raid: round region_size to power of two") intended to make sure that the default re

[PATCH 3.16.y-ckt 08/94] clk: ti: fix dual-registration of uart4_ick

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Dooks commit 19e79687de22f23bcfb5e79cce3daba20af228d1 upstream. On the OMAP AM3517 platform the uart4_ick gets registered twice, causing any power management to /dev/ttyO3 to fai

[PATCH 3.16.y-ckt 12/94] ALSA: hda - Apply SPDIF pin ctl to MacBookPro 12,1

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: John Flatness commit e8ff581f7ac2bc3b8886094b7ca635dcc4d1b0e9 upstream. The MacBookPro 12,1 has the same setup as the 11 for controlling the status of the optical audio light. Simply

[PATCH 3.16.y-ckt 11/94] ALSA: hda: Add dock support for ThinkPad T550

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Laura Abbott commit d05ea7da0e8f6df3c62cfee75538f347cb3d89ef upstream. Much like all the other Lenovo laptops, add a quirk to make sound work with docking. Reported-and-tested-by: l

[PATCH 3.16.y-ckt 05/94] svcrdma: handle rdma read with a non-zero initial page offset

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Steve Wise commit c91aed9896946721bb30705ea2904edb3725dd61 upstream. The server rdma_read_chunk_lcl() and rdma_read_chunk_frmr() functions were not taking into account the initial pa

[PATCH 3.16.y-ckt 07/94] [SMB3] Do not fall back to SMBWriteX in set_file_size error cases

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Steve French commit 646200a041203f440fb6fcf9cacd9efeda9de74c upstream. The error paths in set_file_size for cifs and smb3 are incorrect. In the unlikely event that a server did not

[PATCH 3.16.y-ckt 06/94] dm: fix AB-BA deadlock in __dm_destroy()

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Junichi Nomura commit 2a708cff93f1845b9239bc7d6310aef54e716c6a upstream. __dm_destroy() takes io_barrier SRCU lock (dm_get_live_table) and suspend_lock in reverse order. Doing so ca

[PATCH 3.16.y-ckt 04/94] s390/boot/decompression: disable floating point in decompressor

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Christian Borntraeger commit adc0b7fbf6fe9967505c0254d9535ec7288186ae upstream. my gcc 5.1 used an ldgr instruction with a register != 0,2,4,6 for spilling/filling into a floating po

[PATCH 3.16.y-ckt 03/94] x86/xen: Support kexec/kdump in HVM guests by doing a soft reset

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Vitaly Kuznetsov commit 0b34a166f291d255755be46e43ed5497cdd194f2 upstream. Currently there is a number of issues preventing PVHVM Xen guests from doing successful kexec/kdump: - B

[PATCH 3.16.y-ckt 02/94] regmap: debugfs: Don't bother actually printing when calculating max length

3.16.7-ckt20 -stable review patch. If anyone has any objections, please let me know. -- From: Mark Brown commit 176fc2d5770a0990eebff903ba680d2edd32e718 upstream. The in kernel snprintf() will conveniently return the actual length of the printed string even if not given an ou

  1   2   3   >