summaryrefslogtreecommitdiff
path: root/drivers/misc (follow)
Commit message (Collapse)AuthorAge
* Merge LA.UM.7.5.2.r1-03300-8x96.0 of ↵Davide Garberi2019-07-20
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://source.codeaurora.org/quic/la/kernel/msm-4.4 into lineage-16.0 313e787f28bb Merge "power: qpnp-smbcharger: Change ordering of EXTCON_USB_SPEED" into kernel.lnx.4.4.r37-rel dfa5b807ec2c Merge changes I0ab244e6,I05a4aa96 into kernel.lnx.4.4.r37-rel c900b4827149 msm: ipa: Fix array out of bound and use after NULL check b562b057dd2a msm: ipa: Fix pointer checked for NULL may be used 216dfe7e7a14 usb: phy-msm-susb-qmp: Add checks to check clk_enabled 2c0a97a53f77 power: qpnp-smbcharger: Change ordering of EXTCON_USB_SPEED 56d12bfe26c3 Merge commit '09d42880fd9f4d04317f030021b85323b8f8b9b9' into HEAD 09d42880fd9f Merge "msm: camera_v2: isp: update the frame drop during error case" 19d79e95f10c Merge "msm:camera: add trace log support for VFE events" 3ae0451881ca Merge "msm: camera_v2: Remove sysfs bind/unbind files" 45b4ac208b7b msm:camera: add trace log support for VFE events 5974bd4025ea msm: camera_v2: Fix page fault issue in camera ISP ed8c0918eeb1 Merge "icnss: Reduce the shutdown timeout from 50sec to 15sec" 7e4d8780224c Merge "drm/msm/dsi-staging: Add range check in debugfs_dump_info_read" 978400398a92 icnss: Reduce the shutdown timeout from 50sec to 15sec 4e08c8cbacd4 msm: camera_v2: Remove sysfs bind/unbind files 79a8f215703e Merge "ASoC: sdm660_cdc: Set speaker amplifier enable bit" c0f636f83226 Merge "cnss2: Update board data file name format" bd48b0a101e8 Merge "msm: kgsl: Add missing check for snapshot IB dump" 2f5e49a21882 Merge "defconfig: msm: Disable EXT2 and EXT3 FS configs for MSM8998" 46ece1ae20ad Merge "sched/walt: Fix the memory leak of idle task load pointers" 78540133736a Merge "soc: qcom: smem: validate fields of shared structures" 196d97abd323 Merge "Merge android-4.4.183 (94fd428) into msm-4.4" fad4d2e83739 Merge "msm: kgsl: Change data type for GPU ib vote" 54d23a97a07e Merge "drivers: thermal: Use FCAP scm call instead of DMAX in LMH DCVSh" 1379d11803dd msm: kgsl: Add missing check for snapshot IB dump 2c8f4699fdd0 defconfig: msm: Disable EXT2 and EXT3 FS configs for MSM8998 fcc47ec62ae1 soc: qcom: smem: validate fields of shared structures 7151def9c713 ASoC: sdm660_cdc: Set speaker amplifier enable bit f395d5810f27 sched/walt: Fix the memory leak of idle task load pointers 03f0af3c211e drivers: thermal: Use FCAP scm call instead of DMAX in LMH DCVSh f6ee0c2bb45d drivers: thermal: Use FCAP scm call instead of DMAX in KTM cb7df67908b0 msm: kgsl: Change data type for GPU ib vote c94369b4c1fc cnss2: print firmware cap info in stats 9a1c2880320b Merge android-4.4.183 (94fd428) into msm-4.4 94fd42809f7d Merge 4.4.183 into android-4.4 308743255040 Linux 4.4.183 df7ba8162ca1 Abort file_remove_privs() for non-reg. files 8f6345a11caa coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping 3692bc31c1ff Revert "crypto: crypto4xx - properly set IV after de- and encrypt" 39c7c903c63d scsi: libsas: delete sas port if expander discover failed a272035ea1bf scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route() af8cd6101bf5 net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs b25c62cc16e0 KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list 7ef8d778cf3e ia64: fix build errors by exporting paddr_to_nid() 432030b25b86 configfs: Fix use-after-free when accessing sd->s_dentry d5a18c8609f3 i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr be1b9df5bba1 net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() 0bb6c295e463 gpio: fix gpio-adp5588 build errors dd961efe8dee perf/ring_buffer: Add ordering to rb->nest increment 8abd8a9a975e perf/ring_buffer: Fix exposing a temporarily decreased data_head 3e74b3f05abf x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor f4678b7808e7 mISDN: make sure device name is NUL terminated e2f9c0f73454 sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg 753aa7556089 neigh: fix use-after-free read in pneigh_get_next 709d8771fab7 lapb: fixed leak of control-blocks. 1777c35e8d47 ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero 6f057abd08d1 be2net: Fix number of Rx queues used for flow hashing 7139a9f6246d ax25: fix inconsistent lock state in ax25_destroy_timer f1a5c6b083bc USB: serial: option: add Telit 0x1260 and 0x1261 compositions a67d65958e2a USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode b8ee804bba8f USB: serial: pl2303: add Allied Telesis VT-Kit3 f14747c88170 USB: usb-storage: Add new ID to ums-realtek 038c192699a9 USB: Fix chipmunk-like voice when using Logitech C270 for recording audio. 8f6b0e59d2a0 drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() 6e0c7e73232f drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read ce391e4cdef8 KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION a1b9c6b4cba0 KVM: x86/pmu: do not mask the value that is written to fixed PMUs 7caddacf863f usbnet: ipheth: fix racing condition f80a35fcb9e9 scsi: bnx2fc: fix incorrect cast to u64 on shift operation da51a322f197 scsi: lpfc: add check for loss of ndlp when sending RRQ 3a2ff1088c2a Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var 1f8233ca3a48 ASoC: cs42xx8: Add regcache mask dirty 91f1fc1ae409 cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() 8b47af927e2e bcache: fix stack corruption by PRECEDING_KEY() a2aabf288bf7 i2c: acorn: fix i2c warning d774bd27b4f5 ptrace: restore smp_rmb() in __ptrace_may_access() 5aff00ee839a signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO 0b871fc866eb fs/ocfs2: fix race in ocfs2_dentry_attach_lock() c05fed507582 mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node be499b84c3bd libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk d7a18814fff9 ALSA: seq: Cover unsubscribe_port() in list_mutex 4282a0b1db65 Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR connections" cd23996afa14 futex: Fix futex lock the wrong page 38fbd5c2d572 ARM: exynos: Fix undefined instruction during Exynos5422 resume 5767587907fd pwm: Fix deadlock warning when removing PWM device 113a78a0a537 ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa 78184953a2ed pwm: tiehrpwm: Update shadow register for disabling PWMs d24e22cde8b3 dmaengine: idma64: Use actual device for DMA transfers 533171620cd5 gpio: gpio-omap: add check for off wake capable gpios 3b4652ba9d78 PCI: xilinx: Check for __get_free_pages() failure c869210e0ac6 video: imsttfb: fix potential NULL pointer dereferences 5c7fbc5f6a7d video: hgafb: fix potential NULL pointer dereference bea8fa863ce9 PCI: rcar: Fix a potential NULL pointer dereference 76208df36d7a PCI: rpadlpar: Fix leaked device_node references in add/remove paths 100468652e5a ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA 927d2be77e6c ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA 8aee025af280 ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA b49501f51371 clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288 4270dc6a7a79 soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher 845676341c2d platform/chrome: cros_ec_proto: check for NULL transfer function c7155e51cf85 x86/PCI: Fix PCI IRQ routing table memory leak 198a54f07f51 nfsd: allow fh_want_write to be called twice e6779b264d69 fuse: retrieve: cap requested size to negotiated max_write 742cb74bf108 nvmem: core: fix read buffer in place 750c55e69cca ALSA: hda - Register irq handler after the chip initialization 09ad374f23ce iommu/vt-d: Set intel_iommu_gfx_mapped correctly 9e4ed17b9416 f2fs: fix to do sanity check on valid block count of segment 534ef922376e f2fs: fix to avoid panic in do_recover_data() 90a238a8a2d2 ntp: Allow TAI-UTC offset to be set to zero 25be7d51a012 drm/bridge: adv7511: Fix low refresh rate selection 8fdebdd06c4b perf/x86/intel: Allow PEBS multi-entry in watermark mode dee1ba919ca2 mfd: twl6040: Fix device init errors for ACCCTL register 4110c4188853 mfd: intel-lpss: Set the device in reset state when init 1bef19130b5b kernel/sys.c: prctl: fix false positive in validate_prctl_map() 937fa1624a1f mm/cma_debug.c: fix the break condition in cma_maxchunk_get() fceb0be41836 mm/cma.c: fix crash on CMA allocation if bitmap allocation fails 9c8d4d77e3aa hugetlbfs: on restore reserve error path retain subpool reservation d8129a5d7a9d ipc: prevent lockup on alloc_msg and free_msg 50c0db539937 sysctl: return -EINVAL if val violates minmax 8b9241b052a2 fs/fat/file.c: issue flush after the writeback of FAT 335e20ca9562 Merge "soc: qcom: glink_spi_xprt: Sanitize input for short cmd" abc2a59bfdb9 Merge "soc: qcom: hab: add error handling when dt item is missing" 9998d2e52dd4 mm: add /proc/pid/smaps_rollup a2165163680e Merge "msm: ais: sensor: actuator: fix out of bound read for bivcm region params" 7ec9476039c1 soc: qcom: hab: add error handling when dt item is missing 7967865bb4c4 msm: ais: sensor: actuator: fix out of bound read for bivcm region params 14f9c777669f Merge "Merge android-4.4.182 (9c4ab57) into msm-4.4" eee21eb4a635 ANDROID: kernel: cgroup: cpuset: Clear cpus_requested for empty buf f1adac4c222b ANDROID: kernel: cgroup: cpuset: Add missing allocation of cpus_requested in alloc_trial_cpuset 291c54b284a4 i2c: virtio: reallocate memory for each msg buffer ca64572d5459 Merge changes into msm-4.4 a32f2cd75906 Merge android-4.4.182 (9c4ab57) into msm-4.4 2ae4cde5790c Merge "i2c: refine the driver of i2c virtualization" 9c4ab5729952 Merge 4.4.182 into android-4.4 33790f2eda73 Linux 4.4.182 f938ae0ce5ef tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() e757d052f3b8 tcp: add tcp_min_snd_mss sysctl ad472d3a9483 tcp: tcp_fragment() should apply sane memory limits 4657ee0fe05e tcp: limit payload size of sacked skbs 17c66e9e49a1 Merge "msm: vidc: add additional check to avoid out of bound access" 4e933027e684 Merge "Merge android-4.4.181 (bd858d7) into msm-4.4" be5afd934314 i2c: refine the driver of i2c virtualization f1057f82fa62 msm: vidc: add additional check to avoid out of bound access c176a066dfd3 diag: dci: Correct out of bounds check in processing dci pkt rsp cc47c2c325b9 Merge "msm: adsprpc: maintain local copy of rpra offloaded to DSP" 1f3eb68e71cd msm: adsprpc: maintain local copy of rpra offloaded to DSP a50f44266d21 Merge "diag: Prevent out-of-bound access while processing userspace data" c658076e45e0 Merge "ASoC: msm: Add support for AVS version check" f328b4d28d25 Merge "arm: dts: msm: Add avs-version dt property for 8996" 5dbfa1533af8 diag: Prevent out-of-bound access while processing userspace data eb0322ea9b07 arm: dts: msm: Add avs-version dt property for 8996 5ef154a26639 Merge android-4.4.181 (bd858d7) into msm-4.4 7caeb5cb7c4f soc: qcom: glink_spi_xprt: Sanitize input for short cmd 17fd8dbacb92 Merge "soc: qcom: hab: add missing variable declaration" 1cc130f95ec7 UPSTREAM: binder: check for overflow when alloc for security context 784672577648 BACKPORT: binder: fix race between munmap() and direct reclaim 849ecbea5548 soc: qcom: hab: add missing variable declaration bd858d730975 Merge 4.4.181 into android-4.4 0434b31d567e Merge "dwc3-msm: Fix dwc3_drd_state_string for undefined state" 411c38c969a7 Merge "usb: dwc3-msm: Ensure hardware is reset during role change" 8dce56fa0ccf Merge "usb: dwc3-msm: add enum for drd_states to remove otg_state usage" d7b7345c3a5d Linux 4.4.181 f1d7eebd9d67 ethtool: check the return value of get_regs_len 647f72b0d75c ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled c9696a8f3e64 fuse: Add FOPEN_STREAM to use stream_open() 3bf0c459615a fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock 0f5fab865ae9 drm/gma500/cdv: Check vbt config bits when detecting lvds panels e087f7519114 genwqe: Prevent an integer overflow in the ioctl 59565e894518 MIPS: pistachio: Build uImage.gz by default 8061c23f5378 fuse: fallocate: fix return with locked inode cf30c1953467 parisc: Use implicit space register selection for loading the coherence index of I/O pdirs f0d1e74c8120 rcu: locking and unlocking need to always be at least barriers 44657dbba7c4 pktgen: do not sleep with the thread lock held. eded0b11c7a3 net: rds: fix memory leak in rds_ib_flush_mr_pool 54dd5e352cf7 net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query cc475966e5f7 neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit e5c6de6694ed ethtool: fix potential userspace buffer overflow 8795708bc939 media: uvcvideo: Fix uvc_alloc_entity() allocation alignment 2b13a9580ef9 usb: gadget: fix request length error for isoc transfer 8b15aae1baa2 net: cdc_ncm: GetNtbFormat endian fix 613b4bc1951d Revert "x86/build: Move _etext to actual end of .text" 6ad730b83178 userfaultfd: don't pin the user memory in userfaultfd_file_create() 4e06554db5e5 brcmfmac: add subtype check for event handling in data path 993b68aa3ef7 brcmfmac: add length checks in scheduled scan result handler 35bcfbad5d94 brcmfmac: fix incorrect event channel deduction 8c12de962667 brcmfmac: revise handling events in receive path 5f4688a15c24 brcmfmac: screening firmware event packet 6da841e9ae87 brcmfmac: Add length checks on firmware events c55a2cffa5ca bnx2x: disable GSO where gso_size is too big for hardware a33b6d4c8bc7 net: create skb_gso_validate_mac_len() c53c1a821d62 binder: replace "%p" with "%pK" 5280efe442b2 binder: Replace "%p" with "%pK" for stable 336c16621785 CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM 360f8fe46f74 kernel/signal.c: trace_signal_deliver when signal_group_exit 7a47d1873120 memcg: make it work on sparse non-0-node systems 5db0a9c3cc52 tty: max310x: Fix external crystal register setup e498745310d0 tty: serial: msm_serial: Fix XON/XOFF 986adddb9d8f drm/nouveau/i2c: Disable i2c bus access after ->fini() bf8f6b43c2e7 ALSA: hda/realtek - Set default power save node to 0 494447b90d6d Btrfs: fix race updating log root item during fsync af34de02a6a7 scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) e85d002556ea scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove 8282730a0afa media: smsusb: better handle optional alignment 0bce1ea89712 media: usb: siano: Fix false-positive "uninitialized variable" warning b1782be70e1e media: usb: siano: Fix general protection fault in smsusb d52c0ffb383f USB: rio500: fix memory leak in close after disconnect b92be99a0c8b USB: rio500: refuse more than one device at a time ee9d750e9ac8 USB: Add LPM quirk for Surface Dock GigE adapter 30e66d7d2fb9 USB: sisusbvga: fix oops in error path of sisusb_probe 018b7ea9ca24 USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor f5e1ec93b208 usb: xhci: avoid null pointer deref when bos field is NULL 017e6726a4fb xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() ec70e2c130d6 include/linux/bitops.h: sanitize rotate primitives fbbc4fe02a31 sparc64: Fix regression in non-hypervisor TLB flush xcall 5bce46edeb72 tipc: fix modprobe tipc failed after switch order of device registration -v2 416d252ba926 Revert "tipc: fix modprobe tipc failed after switch order of device registration" f1613a9e1bdc xen/pciback: Don't disable PCI_COMMAND on PCI device reset. 383687e15cd0 crypto: vmx - ghash: do nosimd fallback manually 61ba8e9f51b3 net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value 1d33a3ebd945 bnxt_en: Fix aggregation buffer leak under OOM condition. 7d423301240b tipc: Avoid copying bytes beyond the supplied data 332bff9d9a08 usbnet: fix kernel crash after disconnect 16ffb5f7c335 net: stmmac: fix reset gpio free missing 4f9c73aa2930 net-gro: fix use-after-free read in napi_gro_frags() 5cbaa135a0e1 llc: fix skb leak in llc_build_and_send_ui_pkt() 36a7222071d1 ipv6: Consider sk_bound_dev_if when binding a raw socket to an address 9fbf1ac57c7a ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM 0984cb76d294 spi: Fix zero length xfer bug 854415f37aae spi: rspi: Fix sequencer reset during initialization c927451887c1 spi : spi-topcliff-pch: Fix to handle empty DMA buffers 445c07409179 scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices 3a5d11332896 media: saa7146: avoid high stack usage with clang 5a96cf10dc5c media: go7007: avoid clang frame overflow warning with KASAN 0e9f0805eeea media: m88ds3103: serialize reset messages in m88ds3103_set_frontend 9effa38946b6 scsi: qla4xxx: avoid freeing unallocated dma memory 95f0bb0a6c83 usb: core: Add PM runtime calls to usb_hcd_platform_shutdown 1909121a6192 rcutorture: Fix cleanup path for invalid torture_type strings 1081d04a0443 tty: ipwireless: fix missing checks for ioremap c05b2ed7bc1b virtio_console: initialize vtermno value for ports 348ec7b9a1c1 media: wl128x: prevent two potential buffer overflows 557ae685914b spi: tegra114: reset controller on probe 5e75d5e2cd0c cxgb3/l2t: Fix undefined behaviour dc2a8861fdb8 ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put 971e4a273242 ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put 5db3c5adf44a HID: core: move Usage Page concatenation to Main item cb7872f12835 chardev: add additional check for minor range overlap 5680f59f0f15 x86/ia32: Fix ia32_restore_sigcontext() AC leak 94032b2e05c9 arm64: cpu_ops: fix a leaked reference by adding missing of_node_put 04f45a555ec3 scsi: ufs: Avoid configuring regulator with undefined voltage range 60bcfed2ad60 scsi: ufs: Fix regulator load and icc-level configuration 0a597d2badef brcmfmac: fix race during disconnect when USB completion is in progress f95ab00ab455 brcmfmac: convert dev_init_lock mutex to completion db74ef82ca8b b43: shut up clang -Wuninitialized variable warning 951fbf92381a brcmfmac: fix missing checks for kmemdup 1d3ee4d7fc6a rtlwifi: fix a potential NULL pointer dereference 6d7b052d8466 iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data e98ef6767e41 iio: hmc5843: fix potential NULL pointer dereferences a86d06179423 iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion 4400dcd69478 x86/build: Keep local relocations with ld.lld 75ffb58460e3 cpufreq: pmac32: fix possible object reference leak 3d041608fd4b cpufreq/pasemi: fix possible object reference leak 4d02f33a4f42 cpufreq: ppc_cbe: fix possible object reference leak 6be923556aad s390: cio: fix cio_irb declaration 65e3cb04a5a2 extcon: arizona: Disable mic detect if running when driver is removed db7eb206560c PM / core: Propagate dev->power.wakeup_path when no callbacks 066a286679b4 mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support 6a783be705ba mmc: sdhci-of-esdhc: add erratum eSDHC5 support 8b0e6af16ae6 mmc_spi: add a status check for spi_sync_locked a30e90a8eb3a scsi: libsas: Do discovery on empty PHY to update PHY info 915defac2a9a hwmon: (f71805f) Use request_muxed_region for Super-IO accesses 0eb8a476ffc5 hwmon: (pc87427) Use request_muxed_region for Super-IO accesses 79deb6abd1f5 hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses 92b4d16997c4 hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses e3e58378c678 hwmon: (vt1211) Use request_muxed_region for Super-IO accesses 488920af3bb3 RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure 2ff310e6dae2 i40e: don't allow changes to HW VLAN stripping on active port VLANs bc791e819503 x86/irq/64: Limit IST stack overflow check to #DB stack 3557f0857767 USB: core: Don't unbind interfaces following device reset failure 6f5e198878fb sched/core: Handle overflow in cpu_shares_write_u64 9812286a63a1 sched/core: Check quota and period overflow at usec to nsec conversion 9d4961a415ed powerpc/numa: improve control of topology updates 82077215ed25 media: pvrusb2: Prevent a buffer overflow ca865598abf1 media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() a8e0739d465e audit: fix a memory leak bug ff3038fe657d media: ov2659: make S_FMT succeed even if requested format doesn't match 2d97a3abcf2f media: au0828: stop video streaming only when last user stops 115ccd9ca776 media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper 1433d7a0937b media: coda: clear error return value before picture run 5cadb7ae715f dmaengine: at_xdmac: remove BUG_ON macro in tasklet af8b5d7d9477 pinctrl: pistachio: fix leaked of_node references 74dd38a5a447 HID: logitech-hidpp: use RAP instead of FAP to get the protocol version 9bffc62051a9 mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions ae6b1f761180 x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() b059848e119f smpboot: Place the __percpu annotation correctly 28d8827a09b0 x86/build: Move _etext to actual end of .text d3eb2caf6d41 bcache: avoid clang -Wunintialized warning 7bf3463abc95 bcache: add failure check to run_cache_set() for journal replay d4547049bb7f bcache: fix failure in journal relplay 5789884b98ab bcache: return error immediately in bch_journal_replay() 50d25ca802f5 net: cw1200: fix a NULL pointer dereference af2fb022b390 mwifiex: prevent an array overflow 4b24af093631 ASoC: fsl_sai: Update is_slave_mode with correct value c1045350a6c4 mac80211/cfg80211: update bss channel on channel switch a3c50ef9fd43 dmaengine: pl330: _stop: clear interrupt status 958848a1d97c w1: fix the resume command API e4163587c4ee rtc: 88pm860x: prevent use-after-free on device remove a898d150956b brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() 5e1a879d9ab3 spi: pxa2xx: fix SCR (divisor) calculation 3d521a6fba45 ASoC: imx: fix fiq dependencies af283aba93bb powerpc/boot: Fix missing check of lseek() return value dba032038c95 mmc: core: Verify SD bus width 333e8303d6e0 cxgb4: Fix error path in cxgb4_init_module 6948c6bc17d6 gfs2: Fix lru_count going negative 635c71d11234 tools include: Adopt linux/bits.h ed2faf464d9b perf tools: No need to include bitops.h in util.h a1f254dc06f9 at76c50x-usb: Don't register led_trigger if usb_register_driver failed f5e4337e4a9c ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit e39af96f4dc1 media: vivid: use vfree() instead of kfree() for dev->bitmap_cap a04e71a0dbc6 media: cpia2: Fix use-after-free in cpia2_exit 28eeeb86046e fbdev: fix WARNING in __alloc_pages_nodemask bug bf8474c64846 hugetlb: use same fault hash key for shared and private mappings 6bc153907900 fbdev: fix divide error in fb_var_to_videomode 5c9a20390c01 btrfs: sysfs: don't leak memory when failing add fsid 0fa88718cdc5 Btrfs: fix race between ranged fsync and writeback of adjacent ranges 2f5ac0bd2ef7 gfs2: Fix sign extension bug in gfs2_update_stats 8aae5e98fec2 crypto: vmx - CTR: always increment IV as quadword 582bb52e4803 Revert "scsi: sd: Keep disk read-only when re-reading partition" bd020b331706 bio: fix improper use of smp_mb__before_atomic() 603212bdc59c KVM: x86: fix return value for reserved EFER 75d63b131b73 ext4: do not delete unlinked inode from orphan list on failed truncate 31943685dd49 fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough 7d64186e7910 btrfs: Honour FITRIM range constraints during free space trim 57e84e4c073d md/raid: raid5 preserve the writeback action after the parity check 9013f4870848 Revert "Don't jump to compute_result state from check_result state" 0c57364fa0f4 perf bench numa: Add define for RUSAGE_THREAD if not present 66ee750cfdd7 ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour fc0208b3428d power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG dd37fa44dffa KVM: arm/arm64: Ensure vcpu target is unset on reset failure fe4f461ba517 xfrm4: Fix uninitialized memory read in _decode_session4 cd0848733f25 vti4: ipip tunnel deregistration fixes. 8fd94b65d207 xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module 86040d722b29 xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink daea41651d43 dm delay: fix a crash when invalid device is specified 566004721c90 PCI: Mark Atheros AR9462 to avoid bus reset 0dc2ad06ddad fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting 4673eae95b53 fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display c996722f7fff fbdev: sm712fb: fix support for 1024x768-16 mode ebfadb510e3c fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM c92bde52742c fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA 0d5cd17ce037 fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F ca5ce8db7f23 fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75 6c2fb5beecba fbdev: sm712fb: fix brightness control on reboot, don't set SR30 dbc86a927d66 perf intel-pt: Fix sample timestamp wrt non-taken branches eedc9a210f9f perf intel-pt: Fix improved sample timestamp f5da0aeca525 perf intel-pt: Fix instructions sampling rate a5b2e4b6ac21 memory: tegra: Fix integer overflow on tick value calculation 11988047b39a tracing: Fix partial reading of trace event's id file a7929c94860e ceph: flush dirty inodes before proceeding with remount 3c99cd905ba9 iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114 40857ab73988 fuse: honor RLIMIT_FSIZE in fuse_file_fallocate 73724958d129 fuse: fix writepages on 32bit 12060f4740ca clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider 4676a07add08 NFS4: Fix v4.0 client state corruption when mount e8623e7a8f4b media: ov6650: Fix sensor possibly not detected on probe dffc9e5ffae5 cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() b8ab0c4effb8 of: fix clang -Wunsequenced for be32_to_cpu() 2a98d346396a intel_th: msu: Fix single mode with IOMMU bc065776c31e md: add mddev->pers to avoid potential NULL pointer dereference ade291d2230a stm class: Fix channel free in stm output free path 65d14634b694 tipc: fix modprobe tipc failed after switch order of device registration ff69bb4be643 tipc: switch order of device registration to fix a crash 2ff783f3e05e ppp: deflate: Fix possible crash in deflate_init dd20e0c039fe net/mlx4_core: Change the error print to info print b2f72a431142 net: avoid weird emergency message 70064f7ea100 KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes 5e9bc16ff49f ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug 98529ecd313b ext4: zero out the unused memory region in the extent tree block 9ff6372e5a6b fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount bfce20eaf18e writeback: synchronize sync(2) against cgroup writeback membership switches cd042379c6ad crypto: arm/aes-neonbs - don't access already-freed walk.iv b70e97ae5d8e crypto: salsa20 - don't access already-freed walk.iv 6dc48d059646 crypto: chacha20poly1305 - set cra_name correctly b82055365307 crypto: gcm - fix incompatibility between "gcm" and "gcm_base" de087dd9f5c6 crypto: gcm - Fix error return code in crypto_gcm_create_common() 064d0c5a9ae6 ipmi:ssif: compare block number correctly for multi-part return messages bef039b2419e bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() 5651075a1ce3 bcache: fix a race between cache register and cacheset unregister 686e4352e3d8 Btrfs: do not start a transaction at iterate_extent_inodes() b268b6e501ed ext4: fix ext4_show_options for file systems w/o journal f3b9c26f191b ext4: actually request zeroing of inode table after grow e5100e7fa78e tty/vt: fix write/write race in ioctl(KDSKBSENT) handler 592a36c59f4c mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L e3a74fbc42ca ocfs2: fix ocfs2 read inode data panic in ocfs2_iget b614485b6b93 mm/mincore.c: make mincore() more conservative 80cc516ed783 ASoC: RT5677-SPI: Disable 16Bit SPI Transfers e6bf706cee3f ASoC: max98090: Fix restore of DAPM Muxes 2a8188c68e0a ALSA: hda/realtek - EAPD turn on later 1bbb08c8ab6a ALSA: hda/hdmi - Consider eld_valid when reporting jack event 2d8956305ae8 ALSA: usb-audio: Fix a memory leak bug b1c1888ad6c9 crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest() 2ee7c2310cd0 crypto: crct10dif-generic - fix use via crypto_shash_digest() 2ee0dd38a0a0 crypto: vmx - fix copy-paste error in CTR mode f7dee0816e5d ARM: exynos: Fix a leaked reference by adding missing of_node_put ce814dc7e811 x86/speculation/mds: Improve CPU buffer clear documentation 4d68e2bf3834 x86/speculation/mds: Revert CPU buffer clear on double fault exit b1d850962510 ASoC: msm: Add support for AVS version check fbf98df8d02a cnss2: Update board data file name format 5e073ffd6668 drm/msm/dsi-staging: Add range check in debugfs_dump_info_read 9600b86489f9 dwc3-msm: Fix dwc3_drd_state_string for undefined state cc96e0915225 usb: dwc3-msm: Ensure hardware is reset during role change 02d74bda3466 usb: dwc3-msm: add enum for drd_states to remove otg_state usage e4e5a975f4ae Merge remote-tracking branch 'origin/upstream-f2fs-stable-linux-4.4.y' into android-4.4 2d812ba62ee4 f2fs: link f2fs quota ops for sysfile 6dc3fb0ba854 fs: sdcardfs: Add missing option to show_options * Excluded commits: 8be3b55c4cc7 msm: camera_v2: isp: update the frame drop during error case 28e17c1f6505 msm: camera_v2: isp: handle frame drop due to scheduling latency Change-Id: Ib67f22a311625da7dd130d2491ef9e035b1db54f Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
| * Merge android-4.4.183 (94fd428) into msm-4.4Srinivasarao P2019-06-24
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-94fd428 Linux 4.4.183 Abort file_remove_privs() for non-reg. files coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping Revert "crypto: crypto4xx - properly set IV after de- and encrypt" scsi: libsas: delete sas port if expander discover failed scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route() net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list ia64: fix build errors by exporting paddr_to_nid() configfs: Fix use-after-free when accessing sd->s_dentry i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() gpio: fix gpio-adp5588 build errors perf/ring_buffer: Add ordering to rb->nest increment perf/ring_buffer: Fix exposing a temporarily decreased data_head x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor mISDN: make sure device name is NUL terminated sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg neigh: fix use-after-free read in pneigh_get_next lapb: fixed leak of control-blocks. ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero be2net: Fix number of Rx queues used for flow hashing ax25: fix inconsistent lock state in ax25_destroy_timer USB: serial: option: add Telit 0x1260 and 0x1261 compositions USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode USB: serial: pl2303: add Allied Telesis VT-Kit3 USB: usb-storage: Add new ID to ums-realtek USB: Fix chipmunk-like voice when using Logitech C270 for recording audio. drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION KVM: x86/pmu: do not mask the value that is written to fixed PMUs usbnet: ipheth: fix racing condition scsi: bnx2fc: fix incorrect cast to u64 on shift operation scsi: lpfc: add check for loss of ndlp when sending RRQ Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var ASoC: cs42xx8: Add regcache mask dirty cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() bcache: fix stack corruption by PRECEDING_KEY() i2c: acorn: fix i2c warning ptrace: restore smp_rmb() in __ptrace_may_access() signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO fs/ocfs2: fix race in ocfs2_dentry_attach_lock() mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk ALSA: seq: Cover unsubscribe_port() in list_mutex Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR connections" futex: Fix futex lock the wrong page ARM: exynos: Fix undefined instruction during Exynos5422 resume pwm: Fix deadlock warning when removing PWM device ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa pwm: tiehrpwm: Update shadow register for disabling PWMs dmaengine: idma64: Use actual device for DMA transfers gpio: gpio-omap: add check for off wake capable gpios PCI: xilinx: Check for __get_free_pages() failure video: imsttfb: fix potential NULL pointer dereferences video: hgafb: fix potential NULL pointer dereference PCI: rcar: Fix a potential NULL pointer dereference PCI: rpadlpar: Fix leaked device_node references in add/remove paths ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288 soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher platform/chrome: cros_ec_proto: check for NULL transfer function x86/PCI: Fix PCI IRQ routing table memory leak nfsd: allow fh_want_write to be called twice fuse: retrieve: cap requested size to negotiated max_write nvmem: core: fix read buffer in place ALSA: hda - Register irq handler after the chip initialization iommu/vt-d: Set intel_iommu_gfx_mapped correctly f2fs: fix to do sanity check on valid block count of segment f2fs: fix to avoid panic in do_recover_data() ntp: Allow TAI-UTC offset to be set to zero drm/bridge: adv7511: Fix low refresh rate selection perf/x86/intel: Allow PEBS multi-entry in watermark mode mfd: twl6040: Fix device init errors for ACCCTL register mfd: intel-lpss: Set the device in reset state when init kernel/sys.c: prctl: fix false positive in validate_prctl_map() mm/cma_debug.c: fix the break condition in cma_maxchunk_get() mm/cma.c: fix crash on CMA allocation if bitmap allocation fails hugetlbfs: on restore reserve error path retain subpool reservation ipc: prevent lockup on alloc_msg and free_msg sysctl: return -EINVAL if val violates minmax fs/fat/file.c: issue flush after the writeback of FAT ANDROID: kernel: cgroup: cpuset: Clear cpus_requested for empty buf ANDROID: kernel: cgroup: cpuset: Add missing allocation of cpus_requested in alloc_trial_cpuset Change-Id: I5b33449bd21ec21d91b1030d53df3658a305bded Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| | * Merge 4.4.183 into android-4.4Greg Kroah-Hartman2019-06-22
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 4.4.183 fs/fat/file.c: issue flush after the writeback of FAT sysctl: return -EINVAL if val violates minmax ipc: prevent lockup on alloc_msg and free_msg hugetlbfs: on restore reserve error path retain subpool reservation mm/cma.c: fix crash on CMA allocation if bitmap allocation fails mm/cma_debug.c: fix the break condition in cma_maxchunk_get() kernel/sys.c: prctl: fix false positive in validate_prctl_map() mfd: intel-lpss: Set the device in reset state when init mfd: twl6040: Fix device init errors for ACCCTL register perf/x86/intel: Allow PEBS multi-entry in watermark mode drm/bridge: adv7511: Fix low refresh rate selection ntp: Allow TAI-UTC offset to be set to zero f2fs: fix to avoid panic in do_recover_data() f2fs: fix to do sanity check on valid block count of segment iommu/vt-d: Set intel_iommu_gfx_mapped correctly ALSA: hda - Register irq handler after the chip initialization nvmem: core: fix read buffer in place fuse: retrieve: cap requested size to negotiated max_write nfsd: allow fh_want_write to be called twice x86/PCI: Fix PCI IRQ routing table memory leak platform/chrome: cros_ec_proto: check for NULL transfer function soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288 ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA PCI: rpadlpar: Fix leaked device_node references in add/remove paths PCI: rcar: Fix a potential NULL pointer dereference video: hgafb: fix potential NULL pointer dereference video: imsttfb: fix potential NULL pointer dereferences PCI: xilinx: Check for __get_free_pages() failure gpio: gpio-omap: add check for off wake capable gpios dmaengine: idma64: Use actual device for DMA transfers pwm: tiehrpwm: Update shadow register for disabling PWMs ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa pwm: Fix deadlock warning when removing PWM device ARM: exynos: Fix undefined instruction during Exynos5422 resume futex: Fix futex lock the wrong page Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR connections" ALSA: seq: Cover unsubscribe_port() in list_mutex libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node fs/ocfs2: fix race in ocfs2_dentry_attach_lock() signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO ptrace: restore smp_rmb() in __ptrace_may_access() i2c: acorn: fix i2c warning bcache: fix stack corruption by PRECEDING_KEY() cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() ASoC: cs42xx8: Add regcache mask dirty Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var scsi: lpfc: add check for loss of ndlp when sending RRQ scsi: bnx2fc: fix incorrect cast to u64 on shift operation usbnet: ipheth: fix racing condition KVM: x86/pmu: do not mask the value that is written to fixed PMUs KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() USB: Fix chipmunk-like voice when using Logitech C270 for recording audio. USB: usb-storage: Add new ID to ums-realtek USB: serial: pl2303: add Allied Telesis VT-Kit3 USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode USB: serial: option: add Telit 0x1260 and 0x1261 compositions ax25: fix inconsistent lock state in ax25_destroy_timer be2net: Fix number of Rx queues used for flow hashing ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero lapb: fixed leak of control-blocks. neigh: fix use-after-free read in pneigh_get_next sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg mISDN: make sure device name is NUL terminated x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor perf/ring_buffer: Fix exposing a temporarily decreased data_head perf/ring_buffer: Add ordering to rb->nest increment gpio: fix gpio-adp5588 build errors net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr configfs: Fix use-after-free when accessing sd->s_dentry ia64: fix build errors by exporting paddr_to_nid() KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route() scsi: libsas: delete sas port if expander discover failed Revert "crypto: crypto4xx - properly set IV after de- and encrypt" coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping Abort file_remove_privs() for non-reg. files Linux 4.4.183 Change-Id: I2b3dee46a31e5dfb485364e1039bcf513173d7b2 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
| | | * Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_varYoung Xiao2019-06-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ Upstream commit b281218ad4311a0342a40cb02fb17a363df08b48 ] There is an out-of-bounds access to "config[len - 1]" array when the variable "len" is zero. See commit dada6a43b040 ("kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var()") for details. Signed-off-by: Young Xiao <YangX92@hotmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>
| * | | Merge android-4.4.181 (bd858d7) into msm-4.4Srinivasarao P2019-06-12
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-bd858d7 Linux 4.4.181 ethtool: check the return value of get_regs_len ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled fuse: Add FOPEN_STREAM to use stream_open() fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock drm/gma500/cdv: Check vbt config bits when detecting lvds panels genwqe: Prevent an integer overflow in the ioctl MIPS: pistachio: Build uImage.gz by default fuse: fallocate: fix return with locked inode parisc: Use implicit space register selection for loading the coherence index of I/O pdirs rcu: locking and unlocking need to always be at least barriers pktgen: do not sleep with the thread lock held. net: rds: fix memory leak in rds_ib_flush_mr_pool net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit ethtool: fix potential userspace buffer overflow media: uvcvideo: Fix uvc_alloc_entity() allocation alignment usb: gadget: fix request length error for isoc transfer net: cdc_ncm: GetNtbFormat endian fix Revert "x86/build: Move _etext to actual end of .text" userfaultfd: don't pin the user memory in userfaultfd_file_create() brcmfmac: add subtype check for event handling in data path brcmfmac: add length checks in scheduled scan result handler brcmfmac: fix incorrect event channel deduction brcmfmac: revise handling events in receive path brcmfmac: screening firmware event packet brcmfmac: Add length checks on firmware events bnx2x: disable GSO where gso_size is too big for hardware net: create skb_gso_validate_mac_len() binder: replace "%p" with "%pK" binder: Replace "%p" with "%pK" for stable CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM kernel/signal.c: trace_signal_deliver when signal_group_exit memcg: make it work on sparse non-0-node systems tty: max310x: Fix external crystal register setup tty: serial: msm_serial: Fix XON/XOFF drm/nouveau/i2c: Disable i2c bus access after ->fini() ALSA: hda/realtek - Set default power save node to 0 Btrfs: fix race updating log root item during fsync scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove media: smsusb: better handle optional alignment media: usb: siano: Fix false-positive "uninitialized variable" warning media: usb: siano: Fix general protection fault in smsusb USB: rio500: fix memory leak in close after disconnect USB: rio500: refuse more than one device at a time USB: Add LPM quirk for Surface Dock GigE adapter USB: sisusbvga: fix oops in error path of sisusb_probe USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor usb: xhci: avoid null pointer deref when bos field is NULL xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() include/linux/bitops.h: sanitize rotate primitives sparc64: Fix regression in non-hypervisor TLB flush xcall tipc: fix modprobe tipc failed after switch order of device registration -v2 Revert "tipc: fix modprobe tipc failed after switch order of device registration" xen/pciback: Don't disable PCI_COMMAND on PCI device reset. crypto: vmx - ghash: do nosimd fallback manually net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value bnxt_en: Fix aggregation buffer leak under OOM condition. tipc: Avoid copying bytes beyond the supplied data usbnet: fix kernel crash after disconnect net: stmmac: fix reset gpio free missing net-gro: fix use-after-free read in napi_gro_frags() llc: fix skb leak in llc_build_and_send_ui_pkt() ipv6: Consider sk_bound_dev_if when binding a raw socket to an address ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM spi: Fix zero length xfer bug spi: rspi: Fix sequencer reset during initialization spi : spi-topcliff-pch: Fix to handle empty DMA buffers scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices media: saa7146: avoid high stack usage with clang media: go7007: avoid clang frame overflow warning with KASAN media: m88ds3103: serialize reset messages in m88ds3103_set_frontend scsi: qla4xxx: avoid freeing unallocated dma memory usb: core: Add PM runtime calls to usb_hcd_platform_shutdown rcutorture: Fix cleanup path for invalid torture_type strings tty: ipwireless: fix missing checks for ioremap virtio_console: initialize vtermno value for ports media: wl128x: prevent two potential buffer overflows spi: tegra114: reset controller on probe cxgb3/l2t: Fix undefined behaviour ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put HID: core: move Usage Page concatenation to Main item chardev: add additional check for minor range overlap x86/ia32: Fix ia32_restore_sigcontext() AC leak arm64: cpu_ops: fix a leaked reference by adding missing of_node_put scsi: ufs: Avoid configuring regulator with undefined voltage range scsi: ufs: Fix regulator load and icc-level configuration brcmfmac: fix race during disconnect when USB completion is in progress brcmfmac: convert dev_init_lock mutex to completion b43: shut up clang -Wuninitialized variable warning brcmfmac: fix missing checks for kmemdup rtlwifi: fix a potential NULL pointer dereference iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data iio: hmc5843: fix potential NULL pointer dereferences iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion x86/build: Keep local relocations with ld.lld cpufreq: pmac32: fix possible object reference leak cpufreq/pasemi: fix possible object reference leak cpufreq: ppc_cbe: fix possible object reference leak s390: cio: fix cio_irb declaration extcon: arizona: Disable mic detect if running when driver is removed PM / core: Propagate dev->power.wakeup_path when no callbacks mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support mmc: sdhci-of-esdhc: add erratum eSDHC5 support mmc_spi: add a status check for spi_sync_locked scsi: libsas: Do discovery on empty PHY to update PHY info hwmon: (f71805f) Use request_muxed_region for Super-IO accesses hwmon: (pc87427) Use request_muxed_region for Super-IO accesses hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses hwmon: (vt1211) Use request_muxed_region for Super-IO accesses RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure i40e: don't allow changes to HW VLAN stripping on active port VLANs x86/irq/64: Limit IST stack overflow check to #DB stack USB: core: Don't unbind interfaces following device reset failure sched/core: Handle overflow in cpu_shares_write_u64 sched/core: Check quota and period overflow at usec to nsec conversion powerpc/numa: improve control of topology updates media: pvrusb2: Prevent a buffer overflow media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() audit: fix a memory leak bug media: ov2659: make S_FMT succeed even if requested format doesn't match media: au0828: stop video streaming only when last user stops media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper media: coda: clear error return value before picture run dmaengine: at_xdmac: remove BUG_ON macro in tasklet pinctrl: pistachio: fix leaked of_node references HID: logitech-hidpp: use RAP instead of FAP to get the protocol version mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() smpboot: Place the __percpu annotation correctly x86/build: Move _etext to actual end of .text bcache: avoid clang -Wunintialized warning bcache: add failure check to run_cache_set() for journal replay bcache: fix failure in journal relplay bcache: return error immediately in bch_journal_replay() net: cw1200: fix a NULL pointer dereference mwifiex: prevent an array overflow ASoC: fsl_sai: Update is_slave_mode with correct value mac80211/cfg80211: update bss channel on channel switch dmaengine: pl330: _stop: clear interrupt status w1: fix the resume command API rtc: 88pm860x: prevent use-after-free on device remove brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() spi: pxa2xx: fix SCR (divisor) calculation ASoC: imx: fix fiq dependencies powerpc/boot: Fix missing check of lseek() return value mmc: core: Verify SD bus width cxgb4: Fix error path in cxgb4_init_module gfs2: Fix lru_count going negative tools include: Adopt linux/bits.h perf tools: No need to include bitops.h in util.h at76c50x-usb: Don't register led_trigger if usb_register_driver failed ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit media: vivid: use vfree() instead of kfree() for dev->bitmap_cap media: cpia2: Fix use-after-free in cpia2_exit fbdev: fix WARNING in __alloc_pages_nodemask bug hugetlb: use same fault hash key for shared and private mappings fbdev: fix divide error in fb_var_to_videomode btrfs: sysfs: don't leak memory when failing add fsid Btrfs: fix race between ranged fsync and writeback of adjacent ranges gfs2: Fix sign extension bug in gfs2_update_stats crypto: vmx - CTR: always increment IV as quadword Revert "scsi: sd: Keep disk read-only when re-reading partition" bio: fix improper use of smp_mb__before_atomic() KVM: x86: fix return value for reserved EFER ext4: do not delete unlinked inode from orphan list on failed truncate fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough btrfs: Honour FITRIM range constraints during free space trim md/raid: raid5 preserve the writeback action after the parity check Revert "Don't jump to compute_result state from check_result state" perf bench numa: Add define for RUSAGE_THREAD if not present ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG KVM: arm/arm64: Ensure vcpu target is unset on reset failure xfrm4: Fix uninitialized memory read in _decode_session4 vti4: ipip tunnel deregistration fixes. xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink dm delay: fix a crash when invalid device is specified PCI: Mark Atheros AR9462 to avoid bus reset fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display fbdev: sm712fb: fix support for 1024x768-16 mode fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75 fbdev: sm712fb: fix brightness control on reboot, don't set SR30 perf intel-pt: Fix sample timestamp wrt non-taken branches perf intel-pt: Fix improved sample timestamp perf intel-pt: Fix instructions sampling rate memory: tegra: Fix integer overflow on tick value calculation tracing: Fix partial reading of trace event's id file ceph: flush dirty inodes before proceeding with remount iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114 fuse: honor RLIMIT_FSIZE in fuse_file_fallocate fuse: fix writepages on 32bit clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider NFS4: Fix v4.0 client state corruption when mount media: ov6650: Fix sensor possibly not detected on probe cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() of: fix clang -Wunsequenced for be32_to_cpu() intel_th: msu: Fix single mode with IOMMU md: add mddev->pers to avoid potential NULL pointer dereference stm class: Fix channel free in stm output free path tipc: fix modprobe tipc failed after switch order of device registration tipc: switch order of device registration to fix a crash ppp: deflate: Fix possible crash in deflate_init net/mlx4_core: Change the error print to info print net: avoid weird emergency message KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug ext4: zero out the unused memory region in the extent tree block fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount writeback: synchronize sync(2) against cgroup writeback membership switches crypto: arm/aes-neonbs - don't access already-freed walk.iv crypto: salsa20 - don't access already-freed walk.iv crypto: chacha20poly1305 - set cra_name correctly crypto: gcm - fix incompatibility between "gcm" and "gcm_base" crypto: gcm - Fix error return code in crypto_gcm_create_common() ipmi:ssif: compare block number correctly for multi-part return messages bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() bcache: fix a race between cache register and cacheset unregister Btrfs: do not start a transaction at iterate_extent_inodes() ext4: fix ext4_show_options for file systems w/o journal ext4: actually request zeroing of inode table after grow tty/vt: fix write/write race in ioctl(KDSKBSENT) handler mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L ocfs2: fix ocfs2 read inode data panic in ocfs2_iget mm/mincore.c: make mincore() more conservative ASoC: RT5677-SPI: Disable 16Bit SPI Transfers ASoC: max98090: Fix restore of DAPM Muxes ALSA: hda/realtek - EAPD turn on later ALSA: hda/hdmi - Consider eld_valid when reporting jack event ALSA: usb-audio: Fix a memory leak bug crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest() crypto: crct10dif-generic - fix use via crypto_shash_digest() crypto: vmx - fix copy-paste error in CTR mode ARM: exynos: Fix a leaked reference by adding missing of_node_put x86/speculation/mds: Improve CPU buffer clear documentation x86/speculation/mds: Revert CPU buffer clear on double fault exit f2fs: link f2fs quota ops for sysfile fs: sdcardfs: Add missing option to show_options Conflicts: drivers/scsi/sd.c drivers/scsi/ufs/ufshcd.c Change-Id: If6679c7cc8c3fee323c749ac359353fbebfd12d9 Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| | * | Merge 4.4.181 into android-4.4Greg Kroah-Hartman2019-06-11
| | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 4.4.181 x86/speculation/mds: Revert CPU buffer clear on double fault exit x86/speculation/mds: Improve CPU buffer clear documentation ARM: exynos: Fix a leaked reference by adding missing of_node_put crypto: vmx - fix copy-paste error in CTR mode crypto: crct10dif-generic - fix use via crypto_shash_digest() crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest() ALSA: usb-audio: Fix a memory leak bug ALSA: hda/hdmi - Consider eld_valid when reporting jack event ALSA: hda/realtek - EAPD turn on later ASoC: max98090: Fix restore of DAPM Muxes ASoC: RT5677-SPI: Disable 16Bit SPI Transfers mm/mincore.c: make mincore() more conservative ocfs2: fix ocfs2 read inode data panic in ocfs2_iget mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L tty/vt: fix write/write race in ioctl(KDSKBSENT) handler ext4: actually request zeroing of inode table after grow ext4: fix ext4_show_options for file systems w/o journal Btrfs: do not start a transaction at iterate_extent_inodes() bcache: fix a race between cache register and cacheset unregister bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() ipmi:ssif: compare block number correctly for multi-part return messages crypto: gcm - Fix error return code in crypto_gcm_create_common() crypto: gcm - fix incompatibility between "gcm" and "gcm_base" crypto: chacha20poly1305 - set cra_name correctly crypto: salsa20 - don't access already-freed walk.iv crypto: arm/aes-neonbs - don't access already-freed walk.iv writeback: synchronize sync(2) against cgroup writeback membership switches fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount ext4: zero out the unused memory region in the extent tree block ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes net: avoid weird emergency message net/mlx4_core: Change the error print to info print ppp: deflate: Fix possible crash in deflate_init tipc: switch order of device registration to fix a crash tipc: fix modprobe tipc failed after switch order of device registration stm class: Fix channel free in stm output free path md: add mddev->pers to avoid potential NULL pointer dereference intel_th: msu: Fix single mode with IOMMU of: fix clang -Wunsequenced for be32_to_cpu() cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() media: ov6650: Fix sensor possibly not detected on probe NFS4: Fix v4.0 client state corruption when mount clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider fuse: fix writepages on 32bit fuse: honor RLIMIT_FSIZE in fuse_file_fallocate iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114 ceph: flush dirty inodes before proceeding with remount tracing: Fix partial reading of trace event's id file memory: tegra: Fix integer overflow on tick value calculation perf intel-pt: Fix instructions sampling rate perf intel-pt: Fix improved sample timestamp perf intel-pt: Fix sample timestamp wrt non-taken branches fbdev: sm712fb: fix brightness control on reboot, don't set SR30 fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75 fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM fbdev: sm712fb: fix support for 1024x768-16 mode fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting PCI: Mark Atheros AR9462 to avoid bus reset dm delay: fix a crash when invalid device is specified xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module vti4: ipip tunnel deregistration fixes. xfrm4: Fix uninitialized memory read in _decode_session4 KVM: arm/arm64: Ensure vcpu target is unset on reset failure power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour perf bench numa: Add define for RUSAGE_THREAD if not present Revert "Don't jump to compute_result state from check_result state" md/raid: raid5 preserve the writeback action after the parity check btrfs: Honour FITRIM range constraints during free space trim fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough ext4: do not delete unlinked inode from orphan list on failed truncate KVM: x86: fix return value for reserved EFER bio: fix improper use of smp_mb__before_atomic() Revert "scsi: sd: Keep disk read-only when re-reading partition" crypto: vmx - CTR: always increment IV as quadword gfs2: Fix sign extension bug in gfs2_update_stats Btrfs: fix race between ranged fsync and writeback of adjacent ranges btrfs: sysfs: don't leak memory when failing add fsid fbdev: fix divide error in fb_var_to_videomode hugetlb: use same fault hash key for shared and private mappings fbdev: fix WARNING in __alloc_pages_nodemask bug media: cpia2: Fix use-after-free in cpia2_exit media: vivid: use vfree() instead of kfree() for dev->bitmap_cap ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit at76c50x-usb: Don't register led_trigger if usb_register_driver failed perf tools: No need to include bitops.h in util.h tools include: Adopt linux/bits.h gfs2: Fix lru_count going negative cxgb4: Fix error path in cxgb4_init_module mmc: core: Verify SD bus width powerpc/boot: Fix missing check of lseek() return value ASoC: imx: fix fiq dependencies spi: pxa2xx: fix SCR (divisor) calculation brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() rtc: 88pm860x: prevent use-after-free on device remove w1: fix the resume command API dmaengine: pl330: _stop: clear interrupt status mac80211/cfg80211: update bss channel on channel switch ASoC: fsl_sai: Update is_slave_mode with correct value mwifiex: prevent an array overflow net: cw1200: fix a NULL pointer dereference bcache: return error immediately in bch_journal_replay() bcache: fix failure in journal relplay bcache: add failure check to run_cache_set() for journal replay bcache: avoid clang -Wunintialized warning x86/build: Move _etext to actual end of .text smpboot: Place the __percpu annotation correctly x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions HID: logitech-hidpp: use RAP instead of FAP to get the protocol version pinctrl: pistachio: fix leaked of_node references dmaengine: at_xdmac: remove BUG_ON macro in tasklet media: coda: clear error return value before picture run media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper media: au0828: stop video streaming only when last user stops media: ov2659: make S_FMT succeed even if requested format doesn't match audit: fix a memory leak bug media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() media: pvrusb2: Prevent a buffer overflow powerpc/numa: improve control of topology updates sched/core: Check quota and period overflow at usec to nsec conversion sched/core: Handle overflow in cpu_shares_write_u64 USB: core: Don't unbind interfaces following device reset failure x86/irq/64: Limit IST stack overflow check to #DB stack i40e: don't allow changes to HW VLAN stripping on active port VLANs RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure hwmon: (vt1211) Use request_muxed_region for Super-IO accesses hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses hwmon: (pc87427) Use request_muxed_region for Super-IO accesses hwmon: (f71805f) Use request_muxed_region for Super-IO accesses scsi: libsas: Do discovery on empty PHY to update PHY info mmc_spi: add a status check for spi_sync_locked mmc: sdhci-of-esdhc: add erratum eSDHC5 support mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support PM / core: Propagate dev->power.wakeup_path when no callbacks extcon: arizona: Disable mic detect if running when driver is removed s390: cio: fix cio_irb declaration cpufreq: ppc_cbe: fix possible object reference leak cpufreq/pasemi: fix possible object reference leak cpufreq: pmac32: fix possible object reference leak x86/build: Keep local relocations with ld.lld iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion iio: hmc5843: fix potential NULL pointer dereferences iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data rtlwifi: fix a potential NULL pointer dereference brcmfmac: fix missing checks for kmemdup b43: shut up clang -Wuninitialized variable warning brcmfmac: convert dev_init_lock mutex to completion brcmfmac: fix race during disconnect when USB completion is in progress scsi: ufs: Fix regulator load and icc-level configuration scsi: ufs: Avoid configuring regulator with undefined voltage range arm64: cpu_ops: fix a leaked reference by adding missing of_node_put x86/ia32: Fix ia32_restore_sigcontext() AC leak chardev: add additional check for minor range overlap HID: core: move Usage Page concatenation to Main item ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put cxgb3/l2t: Fix undefined behaviour spi: tegra114: reset controller on probe media: wl128x: prevent two potential buffer overflows virtio_console: initialize vtermno value for ports tty: ipwireless: fix missing checks for ioremap rcutorture: Fix cleanup path for invalid torture_type strings usb: core: Add PM runtime calls to usb_hcd_platform_shutdown scsi: qla4xxx: avoid freeing unallocated dma memory media: m88ds3103: serialize reset messages in m88ds3103_set_frontend media: go7007: avoid clang frame overflow warning with KASAN media: saa7146: avoid high stack usage with clang scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices spi : spi-topcliff-pch: Fix to handle empty DMA buffers spi: rspi: Fix sequencer reset during initialization spi: Fix zero length xfer bug ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM ipv6: Consider sk_bound_dev_if when binding a raw socket to an address llc: fix skb leak in llc_build_and_send_ui_pkt() net-gro: fix use-after-free read in napi_gro_frags() net: stmmac: fix reset gpio free missing usbnet: fix kernel crash after disconnect tipc: Avoid copying bytes beyond the supplied data bnxt_en: Fix aggregation buffer leak under OOM condition. net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value crypto: vmx - ghash: do nosimd fallback manually xen/pciback: Don't disable PCI_COMMAND on PCI device reset. Revert "tipc: fix modprobe tipc failed after switch order of device registration" tipc: fix modprobe tipc failed after switch order of device registration -v2 sparc64: Fix regression in non-hypervisor TLB flush xcall include/linux/bitops.h: sanitize rotate primitives xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() usb: xhci: avoid null pointer deref when bos field is NULL USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor USB: sisusbvga: fix oops in error path of sisusb_probe USB: Add LPM quirk for Surface Dock GigE adapter USB: rio500: refuse more than one device at a time USB: rio500: fix memory leak in close after disconnect media: usb: siano: Fix general protection fault in smsusb media: usb: siano: Fix false-positive "uninitialized variable" warning media: smsusb: better handle optional alignment scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) Btrfs: fix race updating log root item during fsync ALSA: hda/realtek - Set default power save node to 0 drm/nouveau/i2c: Disable i2c bus access after ->fini() tty: serial: msm_serial: Fix XON/XOFF tty: max310x: Fix external crystal register setup memcg: make it work on sparse non-0-node systems kernel/signal.c: trace_signal_deliver when signal_group_exit CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM binder: Replace "%p" with "%pK" for stable binder: replace "%p" with "%pK" net: create skb_gso_validate_mac_len() bnx2x: disable GSO where gso_size is too big for hardware brcmfmac: Add length checks on firmware events brcmfmac: screening firmware event packet brcmfmac: revise handling events in receive path brcmfmac: fix incorrect event channel deduction brcmfmac: add length checks in scheduled scan result handler brcmfmac: add subtype check for event handling in data path userfaultfd: don't pin the user memory in userfaultfd_file_create() Revert "x86/build: Move _etext to actual end of .text" net: cdc_ncm: GetNtbFormat endian fix usb: gadget: fix request length error for isoc transfer media: uvcvideo: Fix uvc_alloc_entity() allocation alignment ethtool: fix potential userspace buffer overflow neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query net: rds: fix memory leak in rds_ib_flush_mr_pool pktgen: do not sleep with the thread lock held. rcu: locking and unlocking need to always be at least barriers parisc: Use implicit space register selection for loading the coherence index of I/O pdirs fuse: fallocate: fix return with locked inode MIPS: pistachio: Build uImage.gz by default genwqe: Prevent an integer overflow in the ioctl drm/gma500/cdv: Check vbt config bits when detecting lvds panels fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock fuse: Add FOPEN_STREAM to use stream_open() ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled ethtool: check the return value of get_regs_len Linux 4.4.181 Change-Id: Ibadc58ab76330698ff36ffdc0ca8c9d52ce36f9e Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
| | | * genwqe: Prevent an integer overflow in the ioctlDan Carpenter2019-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit 110080cea0d0e4dfdb0b536e7f8a5633ead6a781 upstream. There are a couple potential integer overflows here. round_up(m->size + (m->addr & ~PAGE_MASK), PAGE_SIZE); The first thing is that the "m->size + (...)" addition could overflow, and the second is that round_up() overflows to zero if the result is within PAGE_SIZE of the type max. In this code, the "m->size" variable is an u64 but we're saving the result in "map_size" which is an unsigned long and genwqe_user_vmap() takes an unsigned long as well. So I have used ULONG_MAX as the upper bound. From a practical perspective unsigned long is fine/better than trying to change all the types to u64. Fixes: eaf4722d4645 ("GenWQE Character device and DDCB queue") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Cc: stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
* | | | Merge LA.UM.7.5.2.r1-02600-8x96.0 of ↵Davide Garberi2019-05-11
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://source.codeaurora.org/quic/la/kernel/msm-4.4 into lineage-16.0 d4f47e6c2367 defconfig: msm8996: Enable radio configs 9f27be024a7f Merge "radio: add Silabs FM radio support for msm8996" into kernel.lnx.4.4.r37-rel 4fe98eb7bec2 defconfig: Enable REGMAP_ALLOW_WRITE_DEBUGFS 0c7d031bda1b radio: add Silabs FM radio support for msm8996 1f558d13f0f2 Merge "ASoC: msm: Add support for AVS version check" into kernel.lnx.4.4.r37-rel d104a604676a dsp: correct comparison condition for VSS_ICOMMON_RSP_GET_PARAM_V3 edef41f4dd6e ASoC: msm: Add support for AVS version check 837581d8c691 Merge "Revert "ASoC: msm: Add support for AVS version check."" into kernel.lnx.4.4.r37-rel 9e558fb9e3ee Merge "Revert "ASoC: msm: Add AVS version check for ADSP 2.7."" into kernel.lnx.4.4.r37-rel 9d3be6c18d3a Revert "ASoC: msm: Add support for AVS version check." d5d09e79ec00 Revert "ASoC: msm: Add AVS version check for ADSP 2.7." 72d4da407550 Merge "defconfig: msm8996: Enable PAN emulation" into kernel.lnx.4.4.r37-rel f6e50563bac0 defconfig: msm8996: Enable PAN emulation e0743de00dbb ARM: dts: msm: move bluetooth node under /vendor for 8996 platform 433d0135344e Merge "drivers: qpnp-smbcharger: Fix USB3.0 device does not enumerate in SS mode" into kernel.lnx.4.4.r37-rel 46150d3805a6 Merge changes I72e0c499,Iceb44b1f into kernel.lnx.4.4.r37-rel 6b9dcbcd8ed4 drivers: qpnp-smbcharger: Fix USB3.0 device does not enumerate in SS mode b819c88494b4 defconfig: msm8996: Disable DEVPORT 5dc9c9cdad31 defconfig: msm8996: Disable EXT2 and EXT3 FS configs 7020e575305b ARM: dts: msm: Add "qcom,core-dev-table" for msm8996 target 2d8f5e66d396 Merge e0f69caa36e88038fc27962308b0bb865759736d on remote branch e0f69caa36e8 Merge changes into msm-4.4 d1f0a27facf5 Merge "msm: sps: Update debug message format specifier" ff6c90ba7689 Merge "ASoC: msm: Check adsp state after SSR" 8589eec6817a Merge "lsm: check payload size validity before using it as array index" 3c74f04c2acd msm: sps: Update debug message format specifier 8229f3db343f ASoC: msm: Check adsp state after SSR 8b618604151d Merge "cnss2: Remove setting recovery state during driver unload" 30af8d44d51c Merge "cnss2: Add device version to SOC info structure" 9d116c810844 Merge "msm: kgsl: Add common Boot KPI marker" 27f1619b2f38 cnss2: Add device version to SOC info structure 110e25da9d04 Merge "drm/msm/sde: fix null pointer dereference" e41fee9833ae lsm: check payload size validity before using it as array index f3ec53af1d65 Merge "drm: msm: sde: remove hdr property setting error message" e69141d2f854 Merge "drm: msm: sde: improve display interface timeout mechanism" 7ddcfc4bd2a3 Merge "drm/msm/sde: do not send stop splash signal from eDRM to LK" 00389026f8c9 cnss2: Remove setting recovery state during driver unload a18089dad122 drm/msm: ensure msm_drm probe and eDRM Probe completion 15e17660ba55 Merge "icnss: return recovery success to wlan driver" e3b50ff0b555 Merge "usb: xhci: Reduce command abort handshake timeout" b6645f622203 Merge "usb: xhci: remove unnecessary second abort try" f02dfcce2cb2 Merge "usb: XHCI: Implement xhci_handshake_check_state() API" bb31c0f2ef11 icnss: return recovery success to wlan driver dd7aeab5ed91 drm: msm: sde: improve display interface timeout mechanism 61436825c4de drm/msm/sde: do not send stop splash signal from eDRM to LK c8fffde012b6 drm/msm/sde: fix null pointer dereference e2a49d1ee492 msm: kgsl: Add common Boot KPI marker 55b4dd9721ab Merge "Merge android-4.4.178 (7af10f2) into msm-4.4" 6a75b0f79e6d Merge "diag: Update new msg, log and event logging codes" e776f6472683 diag: Update new msg, log and event logging codes 04235478f297 cnss2: Support USB SSR and disconnect scenarios 9ec08ea59b83 cnss2: Export a platform API to force collect ramdump 6e658671eeac drm: msm: sde: remove hdr property setting error message f5387f19b78d Merge "dsp: q6usm: Release spinlock before return if invalid payload size" 43751312d7a1 Merge android-4.4.178 (7af10f2) into msm-4.4 14c735f15182 msm: v4l2loopback: to resolve issues for kernel defconfigs 26e111f650c7 msm: v4l2loopback: to enable 4l2loopback in kernel defconfigs ef1fab24b2da Merge "fbdev: msm: remove check for rgb source format" 4594ebbba3cc Merge "drm/msm: adjust HDMI DDC speed configuration" e124f4878919 Merge "drm/msm/sde: add post_disable stage for phys encoder" 7af10f2966c2 Merge 4.4.178 into android-4.4 12ae58ca7ec4 Linux 4.4.178 b1b1efe07ea0 stm class: Hide STM-specific options if STM is disabled c003b5675d34 coresight: removing bind/unbind options from sysfs 455b9a675ecf arm64: support keyctl() system call in 32-bit mode d14ac4368f22 Revert "USB: core: only clean up what we allocated" 78d145f71db5 xhci: Fix port resume done detection for SS ports with LPM enabled 9aacea736c9a KVM: Reject device ioctls from processes other than the VM's creator 5ce6e5bd23f0 x86/smp: Enforce CONFIG_HOTPLUG_CPU when SMP=y 0fe681f4ef50 perf intel-pt: Fix TSC slip e250a5ac0e12 gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input 6271fa6fc366 fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links 98bc2f91e918 Disable kgdboc failed by echo space to /sys/module/kgdboc/parameters/kgdboc 6c1c9cfc2fdd USB: serial: option: add Olicard 600 09d3f1eb8499 USB: serial: option: set driver_info for SIM5218 and compatibles 6ef819f7158a USB: serial: mos7720: fix mos_parport refcount imbalance on error path ef0d78184aff USB: serial: ftdi_sio: add additional NovaTech products 7139e4d5bf83 USB: serial: cp210x: add new device id 327ee45823eb serial: sh-sci: Fix setting SCSCR_TIE while transferring data 7124c71944ee serial: max310x: Fix to avoid potential NULL pointer dereference 2e7c2f25e902 staging: vt6655: Fix interrupt race condition on device start up. 17400647682a staging: vt6655: Remove vif check from vnt_interrupt 13f6808ec2bb tty: atmel_serial: fix a potential NULL pointer dereference 21da2b461fbd scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP devices d8007fb2e816 scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host 2f369124b97a scsi: sd: Fix a race between closing an sd device and sd I/O 49ad73985443 ALSA: pcm: Don't suspend stream in unrecoverable PCM state c07db6f073ab ALSA: pcm: Fix possible OOB access in PCM oss plugins f98242a8debb ALSA: seq: oss: Fix Spectre v1 vulnerability 619ae9f179de ALSA: rawmidi: Fix potential Spectre v1 vulnerability e162927cd161 ALSA: compress: add support for 32bit calls in a 64bit kernel ed2f3c82b0b4 ARM: imx6q: cpuidle: fix bug that CPU might not wake up at expected time 61bde5e5af49 btrfs: raid56: properly unmap parity page in finish_parity_scrub() a23f00416aae btrfs: remove WARN_ON in log_dir_items 48b22ac58998 mac8390: Fix mmio access size probe 981cb03ec5a6 sctp: get sctphdr by offset in sctp_compute_cksum c5874f35b86b vxlan: Don't call gro_cells_destroy() before device is unregistered 6c362ffe2a22 tcp: do not use ipv6 header for ipv4 flow 617ac1aa4dd4 packets: Always register packet sk in the same order dd3351b81fac Add hlist_add_tail_rcu() (Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net) 2c2d8a1c8f12 net: rose: fix a possible stack overflow b969da5f7e8d net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec 3f1c0e4b7965 mISDN: hfcpci: Test both vendor & device ID for Digium HFC4S 2f242b299bcd dccp: do not use ipv6 header for ipv4 flow 46c8459158ae stmmac: copy unicast mac address to MAC registers 949c4ef45eee cfg80211: size various nl80211 messages correctly 695fc282c337 mmc: mmc: fix switch timeout issue caused by jiffies precision c89eceddfaeb arm64: kconfig: drop CONFIG_RTC_LIB dependency 4a024ea936b6 video: fbdev: Set pixclock = 0 in goldfishfb d200cc995188 cpu/hotplug: Handle unbalanced hotplug enable/disable 13e84cdbd790 usb: gadget: rndis: free response queue during REMOTE_NDIS_RESET_MSG 0752035a776e usb: gadget: configfs: add mutex lock before unregister gadget 01855b6299eb ipv6: fix endianness error in icmpv6_err b0351a51ffda stm class: Fix stm device initialization order 2040e80d8095 stm class: Do not leak the chrdev in error path fbfaa26fa9e7 PM / Hibernate: Call flush_icache_range() on pages restored in-place 60e4a50d332b arm64: kernel: Include _AC definition in page.h 2ba2cca736d8 perf/ring_buffer: Refuse to begin AUX transaction after rb->aux_mmap_count drops e5a19cf78a23 mac80211: fix "warning: ‘target_metric’ may be used uninitialized" 08d870c51ec5 arm64/kernel: fix incorrect EL0 check in inv_entry macro 823e262919f9 ARM: 8510/1: rework ARM_CPU_SUSPEND dependencies a99d340dc70b staging: goldfish: audio: fix compiliation on arm 9d4b4395067b staging: ion: Set minimum carveout heap allocation order to PAGE_SHIFT efa2ec29dd4e staging: ashmem: Add missing include 4dcbf6fa3b47 staging: ashmem: Avoid deadlock with mmap/shrink 021c0d5cdfc0 asm-generic: Fix local variable shadow in __set_fixmap_offset 43ea28e71c2d coresight: etm4x: Check every parameter used by dma_xx_coherent. 58af2f0f6fdf coresight: "DEVICE_ATTR_RO" should defined as static. c66866b13b3c stm class: Fix a race in unlinking 8c0bfd9d7cb3 stm class: Fix unbalanced module/device refcounting f34bc5ad7a84 stm class: Guard output assignment against concurrency bc9d781bed9d stm class: Fix unlocking braino in the error path 65b52bbc35a6 stm class: Support devices with multiple instances ffb2f3f86b3a stm class: Prevent user-controllable allocations 30e94dc24edd stm class: Fix link list locking a556f0babe56 stm class: Fix locking in unbinding policy path 03d7b4edf78a coresight: remove csdev's link from topology a2828b944591 coresight: release reference taken by 'bus_find_device()' 3e2070abcc90 coresight: coresight_unregister() function cleanup f485f972de3d coresight: fixing lockdep error 9bda5e6b1819 writeback: initialize inode members that track writeback history cb8251f8d667 Revert "mmc: block: don't use parameter prefix if built as module" ab3f1a5b9ce5 net: diag: support v4mapped sockets in inet_diag_find_one_icsk() 6f311381f318 perf: Synchronously free aux pages in case of allocation failure b6496f00a29d arm64: hide __efistub_ aliases from kallsyms 2aeca9a27ba4 hid-sensor-hub.c: fix wrong do_div() usage bdf3c006b9a2 vmstat: make vmstat_updater deferrable again and shut down on idle 119dbcde59da android: unconditionally remove callbacks in sync_fence_free() 7276c3fbd3b6 ARM: 8494/1: mm: Enable PXN when running non-LPAE kernel on LPAE processor 717da8c75b41 ARM: 8458/1: bL_switcher: add GIC dependency 1f2c3b46811d efi: stub: define DISABLE_BRANCH_PROFILING for all architectures 599dcbf7e8c6 arm64: fix COMPAT_SHMLBA definition for large pages 4afe1affaa6d mmc: block: Allow more than 8 partitions per card e43196819cc3 sched/fair: Fix new task's load avg removed from source CPU in wake_up_new_task() ade4560e4fea Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer d22036003893 Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt a1402232e193 ath10k: avoid possible string overflow ee8f5d476dc9 rtc: Fix overflow when converting time64_t to rtc_time 0cd08672e0aa USB: core: only clean up what we allocated 466ab66b5c2f lib/int_sqrt: optimize small argument 7a47e3c3232d serial: sprd: clear timeout interrupt only rather than all interrupts 4104b44e5d92 usb: renesas_usbhs: gadget: fix unused-but-set-variable warning e86206bd8758 arm64: traps: disable irq in die() a3fbab100127 Hang/soft lockup in d_invalidate with simultaneous calls 4a97f086f192 serial: sprd: adjust TIMEOUT to a big value 7ed7c0386ef2 tcp/dccp: drop SYN packets if accept queue is full a12cf3214235 usb: gadget: Add the gserial port checking in gs_start_tx() 36be44e1905d usb: gadget: composite: fix dereference after null check coverify warning c0f71babf7bb kbuild: setlocalversion: print error to STDERR 1e647cf23fb2 extcon: usb-gpio: Don't miss event during suspend/resume 7f69a980f635 mm/rmap: replace BUG_ON(anon_vma->degree) with VM_WARN_ON 1394b1bdfd00 mmc: core: fix using wrong io voltage if mmc_select_hs200 fails aa8b7ed21685 arm64: mm: Add trace_irqflags annotations to do_debug_exception() df2ca3271569 usb: dwc3: gadget: Fix suspend/resume during device mode f2427238c9ed mmc: core: shut up "voltage-ranges unspecified" pr_info() 6a0f5752f1fd mmc: sanitize 'bus width' in debug output 40c01c8301b8 mmc: make MAN_BKOPS_EN message a debug 282d5f0567be mmc: debugfs: Add a restriction to mmc debugfs clock setting c8816bb0ed6d mmc: pwrseq_simple: Make reset-gpios optional to match doc 4d026d221b34 ALSA: hda - Enforces runtime_resume after S3 and S4 for each codec 2569eed24d93 ALSA: hda - Record the current power state before suspend/resume calls 4aada79c6793 locking/lockdep: Add debug_locks check in __lock_downgrade() 786207750b49 media: v4l2-ctrls.c/uvc: zero v4l2_event a8dea33440f1 mmc: tmio_mmc_core: don't claim spurious interrupts c37fd9822514 ext4: brelse all indirect buffer in ext4_ind_remove_space() 2ebfb9ae0047 ext4: fix data corruption caused by unaligned direct AIO 2b6575ed8c7e ext4: fix NULL pointer dereference while journal is aborted 2f59c12b47c1 futex: Ensure that futex address is aligned in handle_futex_death() 8df0d57e5c08 MIPS: Fix kernel crash for R6 in jump label branch function 5c06f2409550 mips: loongson64: lemote-2f: Add IRQF_NO_SUSPEND to "cascade" irqaction. c30b41bbbb87 udf: Fix crash on IO error during truncate 8b12fd7c5f36 drm/vmwgfx: Don't double-free the mode stored in par->set_mode e884f7d5c627 mmc: pxamci: fix enum type confusion 74a50c62c4ee Merge "msm: v4l2loopback: to create V4L2 loopback devices" 023eab95f93f Merge changes into msm-4.4 b6870ada9882 dsp: q6usm: Release spinlock before return if invalid payload size 6a214b82afd7 Merge "Merge android-4.4.177 (0c3b8c4) into msm-4.4" b20fa86720f8 ANDROID: drop CONFIG_INPUT_KEYCHORD from cuttlefish and ranchu 6e016ebde638 Merge "Scsi: ufs: fix issue of task tag in used" 643dbe00f480 UPSTREAM: virt_wifi: Remove REGULATORY_WIPHY_SELF_MANAGED 1dca5a048f4f scripts: gcc-wrapper: Route the GCC errors to stderr 11306d8c058e Scsi: ufs: fix issue of task tag in used 1c25c9cc4ab7 Merge upstream-f2fs-stable-linux-4.4.y into android-4.4 2fe82d10f2fe Merge "msm: asm: validate ADSP data before access" 337623ba25ee Merge "soc: qcom: subsystem_notif_virt: Add waitqueue support for SSR" 3ad287e4ef9a msm: v4l2loopback: to create V4L2 loopback devices af3c1903749c drm/msm/sde: add post_disable stage for phys encoder daaf0eeb1ce4 Merge "usb: gadget: f_fs: Queue request after setting is_busy flag" 9e6526c9a143 UPSTREAM: net: socket: set sock->sk to NULL after calling proto_ops::release() ab9f5d883785 soc: qcom: subsystem_notif_virt: Add waitqueue support for SSR bff3c3db6b11 Merge "drivers: soc: qcom: Added check to avoid opening multiple instance" a7aa04bc7002 Merge "msm: vidc: Disable DCVS in DTSI" 184af681d4c4 Merge "msm: vidc: Add common Boot KPI marker" 10ea8a72f6da Merge "drm/msm: read V' only for non-zero device count repeater" 1c738b6a5f82 usb: gadget: f_fs: Queue request after setting is_busy flag 108157a55130 msm: asm: validate ADSP data before access 1b1e63b1a766 drm/msm: adjust HDMI DDC speed configuration 38e93647f780 drm/msm: read V' only for non-zero device count repeater 83fc1fe4359f Merge "icnss: Add Api to Block/Unblock modem shutdown" 5ac9e067c5d6 msm: vidc: Disable DCVS in DTSI 5219134535d3 msm: vidc: Add common Boot KPI marker 90059640cc78 Merge "cnss2: Initialize plat_priv during bus_init" 6a53afbc7e9d Merge "icnss: Defer modem graceful shutdown until probe complete" 8846ee70c326 icnss: Add Api to Block/Unblock modem shutdown 1174076aa273 icnss: Defer modem graceful shutdown until probe complete a7370a6289ea cnss2: Initialize plat_priv during bus_init 9ccdcef08733 cnss2: Add QCN7605 USB for cold boot cal via fs_ready 6543b0a4ad9a Merge "diag: Add protection while accessing usb_info's buffer table" c739d9858bb9 diag: Add protection while accessing usb_info's buffer table 875833b037e1 diag: Free usb buffer's entry after removing from list 19342ee004a9 Merge android-4.4.177 (0c3b8c4) into msm-4.4 0c3b8c486664 Merge 4.4.177 into android-4.4 6b50202a4d53 Linux 4.4.177 5d8f03acc1a4 KVM: X86: Fix residual mmio emulation request to userspace 8c7543e3b8eb KVM: nVMX: Ignore limit checks on VMX instructions using flat segments 2866808ffc0f KVM: nVMX: Sign extend displacements of VMX instr's mem operands 71e005f009ff drm/radeon/evergreen_cs: fix missing break in switch statement e4de142d0a07 media: uvcvideo: Avoid NULL pointer dereference at the end of streaming 25c4c4519352 rcu: Do RCU GP kthread self-wakeup from softirq and interrupt 06a7cc29d18a PM / wakeup: Rework wakeup source timer cancellation d18bcfe45510 nfsd: fix wrong check in write_v4_end_grace() d2f777c50bfa nfsd: fix memory corruption caused by readdir 295aac3a5a37 NFS: Don't recoalesce on error in nfs_pageio_complete_mirror() a853de72abbe NFS: Fix an I/O request leakage in nfs_do_recoalesce 128f60fe3bb0 md: Fix failed allocation of md_register_thread 4426d5f7be8f perf intel-pt: Fix overlap calculation for padding 5664e60dc0b1 perf auxtrace: Define auxtrace record alignment ecd307da7771 perf intel-pt: Fix CYC timestamp calculation after OVF 58cc0b4098d3 NFS41: pop some layoutget errors to application cbb0f82ebbc4 dm: fix to_sector() for 32bit fd2ebccb5884 ARM: s3c24xx: Fix boolean expressions in osiris_dvs_notify 7ea0c2f9788a powerpc/83xx: Also save/restore SPRG4-7 during suspend d9fbe055bc95 powerpc/powernv: Make opal log only readable by root aa3995f04e39 powerpc/wii: properly disable use of BATs when requested. 788b1a98f415 powerpc/32: Clear on-stack exception marker upon exception return 86ca0da1ddb0 jbd2: fix compile warning when using JBUFFER_TRACE 1fb35b7eda3d jbd2: clear dirty flag when revoking a buffer from an older transaction 98257572f7c7 serial: 8250_pci: Have ACCES cards that use the four port Pericom PI7C9X7954 chip use the pci_pericom_setup() 1a366cb3ae98 serial: 8250_pci: Fix number of ports for ACCES serial cards 7bc0cb4da25e perf bench: Copy kernel files needed to build mem{cpy,set} x86_64 benchmarks fefcb294a459 i2c: tegra: fix maximum transfer size ddc6521426c9 parport_pc: fix find_superio io compare code, should use equal test. dba3801e8dc8 intel_th: Don't reference unassigned outputs c8d2a21fdf51 kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv 49b3c4a292b0 mm/vmalloc: fix size check for remap_vmalloc_range_partial() f7572a4534b5 dmaengine: usb-dmac: Make DMAC system sleep callbacks explicit 96ad35532ccc clk: ingenic: Fix round_rate misbehaving with non-integer dividers 64847df5bff1 ext2: Fix underflow in ext2_max_size() 8b710dc8a5e2 ext4: fix crash during online resizing 0d97ba8b9a5f cpufreq: pxa2xx: remove incorrect __init annotation b14854612972 cpufreq: tegra124: add missing of_node_put() 9bde9df79f24 crypto: pcbc - remove bogus memcpy()s with src == dest efe908169f4f Btrfs: fix corruption reading shared and compressed extents after hole punching eb4763b1bb4a btrfs: ensure that a DUP or RAID1 block group has exactly two stripes 22058c290c94 m68k: Add -ffreestanding to CFLAGS 5c6e7bd3a627 scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock 1cda5468c04a scsi: virtio_scsi: don't send sc payload with tmfs 62a86906494d s390/virtio: handle find on invalid queue gracefully 185ca832f7d7 clocksource/drivers/exynos_mct: Clear timer interrupt when shutdown 3e08ffef4286 clocksource/drivers/exynos_mct: Move one-shot check from tick clear to ISR 3f0edcec1da0 regulator: s2mpa01: Fix step values for some LDOs f20f5fca3b45 regulator: s2mps11: Fix steps for buck7, buck8 and LDO35 84d798497ea9 ACPI / device_sysfs: Avoid OF modalias creation for removed device 19c53c1f817e tracing: Do not free iter->trace in fail path of tracing_open_pipe() b1faf3d2b5b4 CIFS: Fix read after write for files with read caching a2ef87f9d268 crypto: arm64/aes-ccm - fix logical bug in AAD MAC handling aa9c7ee2922a stm class: Prevent division by zero 5f4c9964d107 tmpfs: fix uninitialized return value in shmem_link 8bbb2ce3da91 net: set static variable an initial value in atl2_probe() 8e91a0b4d5f1 mac80211_hwsim: propagate genlmsg_reply return code 5115ca2ba428 phonet: fix building with clang 225bbd61b3ab ARC: uacces: remove lp_start, lp_end from clobber list f8f413336b0c tmpfs: fix link accounting when a tmpfile is linked in aa5740d660ac arm64: Relax GIC version check during early boot c8380f42e82e ASoC: topology: free created components in tplg load error 764498fa2d2b net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe() 0b6f466dfc62 pinctrl: meson: meson8b: fix the sdxc_a data 1..3 pins 3685be7cb47f net: systemport: Fix reception of BPDUs 75330ce98d95 scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task 526efb1049bf assoc_array: Fix shortcut creation 823c717dbf5d ARM: 8824/1: fix a migrating irq bug when hotplug cpu 27bd1497181c Input: st-keyscan - fix potential zalloc NULL dereference c18daf1bdae9 i2c: cadence: Fix the hold bit setting 65513463874c Input: matrix_keypad - use flush_delayed_work() 4e873fa21052 ARM: OMAP2+: Variable "reg" in function omap4_dsi_mux_pads() could be uninitialized 21442c73253b s390/dasd: fix using offset into zero size array error e212aa684767 gpu: ipu-v3: Fix CSI offsets for imx53 8512f804fd88 gpu: ipu-v3: Fix i.MX51 CSI control registers offset 82351c83b1c5 crypto: ahash - fix another early termination in hash walk ef3e805c9476 crypto: caam - fixed handling of sg list 5672988e09e1 stm class: Fix an endless loop in channel allocation fdeefd2af1f3 ASoC: fsl_esai: fix register setting issue in RIGHT_J mode d96e50a53ba1 9p/net: fix memory leak in p9_client_create f289ac1f6eb2 9p: use inode->i_lock to protect i_size_write() under 32-bit 7b5115689bf9 media: videobuf2-v4l2: drop WARN_ON in vb2_warn_zero_bytesused() b83f73aa7608 It's wrong to add len to sector_nr in raid10 reshape twice 9b37b964775e fs/9p: use fscache mutex rather than spinlock f83a38bf2ccd ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against Liquid Saffire 56 e13ab6c19547 tcp/dccp: remove reqsk_put() from inet_child_forget() dcf54e4f0717 gro_cells: make sure device is up in gro_cells_receive() 2d5f55d65a36 net/hsr: fix possible crash in add_timer() b0e8ca9a1eb3 vxlan: Fix GRO cells race condition between receive and link delete 195e9aa9fe13 vxlan: test dev->flags & IFF_UP before calling gro_cells_receive() cb604342bc85 ipvlan: disallow userns cap_net_admin to change global mode/flags f412aeb9167d missing barriers in some of unix_sock ->addr and ->path accesses b4986f23b4d8 net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255 a1b4ace43842 mdio_bus: Fix use-after-free on device_register fails c1b7d9363334 net/x25: fix a race in x25_bind() 2eace0d069ff net/mlx4_core: Fix qp mtt size calculation 0c21ccb8d70e net/mlx4_core: Fix reset flow when in command polling mode 191aa19ab8c1 tcp: handle inet_csk_reqsk_queue_add() failures d31b540d63b1 route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race d15bfd4603dc ravb: Decrease TxFIFO depth of Q3 and Q2 to one 051612738631 pptp: dst_release sk_dst_cache in pptp_sock_destruct e0b2bbd93ef0 net/x25: reset state in x25_connect() 70ed8a0a9ec3 net/x25: fix use-after-free in x25_device_event() d84e9d3c97ee net: sit: fix UBSAN Undefined behaviour in check_6rd 453e3b319d28 net: hsr: fix memory leak in hsr_dev_finalize() a795edbd6cd7 l2tp: fix infoleak in l2tp_ip6_recvmsg() 52f6c8da89b9 KEYS: restrict /proc/keys by credentials at open time b71ec041cce3 netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options a55ea87f70ae netfilter: nfnetlink_acct: validate NFACCT_FILTER parameters c92b434e70db netfilter: nfnetlink_log: just returns error for unknown command 9a07167f70a7 netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES da517f513b86 udplite: call proper backlog handlers ec117204466e ARM: dts: exynos: Do not ignore real-world fuse values for thermal zone 0 on Exynos5420 a20168a13836 Revert "x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls" a264be2b4108 ARM: dts: exynos: Add minimal clkout parameters to Exynos3250 PMU 7570acb21061 futex,rt_mutex: Restructure rt_mutex_finish_proxy_lock() f7ff45b8c3f2 iscsi_ibft: Fix missing break in switch statement 91c44982f503 Input: elan_i2c - add id for touchpad found in Lenovo s21e-20 4038a524616e Input: wacom_serial4 - add support for Wacom ArtPad II tablet 861e94995054 MIPS: Remove function size check in get_frame_info() 39ee160c4f82 perf symbols: Filter out hidden symbols from labels 74daf70b852a s390/qeth: fix use-after-free in error path 683c0116fbc1 dmaengine: dmatest: Abort test in case of mapping error 86785a16817c dmaengine: at_xdmac: Fix wrongfull report of a channel as in use 4560637bde5c irqchip/mmp: Only touch the PJ4 IRQ & FIQ bits on enable/disable e83b1928c838 ARM: pxa: ssp: unneeded to free devm_ allocated data 648fca89b734 autofs: fix error return in autofs_fill_super() 0d456fae1fb5 autofs: drop dentry reference only when it is never used 5d5a802ec2eb fs/drop_caches.c: avoid softlockups in drop_pagecache_sb() fcd11325572d mm, memory_hotplug: test_pages_in_a_zone do not pass the end of zone 3ba0452668ea mm, memory_hotplug: is_mem_section_removable do not pass the end of a zone d4cf6d934f72 x86_64: increase stack size for KASAN_EXTRA b8c82bd0cc5e x86/kexec: Don't setup EFI info if EFI runtime is not enabled 3cefd2a42568 cifs: fix computation for MAX_SMB2_HDR_SIZE 177a51b9adad platform/x86: Fix unmet dependency warning for SAMSUNG_Q10 930cc2bd8d5c scsi: libfc: free skb when receiving invalid flogi resp e7e01b2acf94 nfs: Fix NULL pointer dereference of dev_name 35709d642488 gpio: vf610: Mask all GPIO interrupts ec1f9572c841 net: stmmac: dwmac-rk: fix error handling in rk_gmac_powerup() f398c84acf98 net: hns: Fix wrong read accesses via Clause 45 MDIO protocol a270c6f52f5a net: altera_tse: fix msgdma_tx_completion on non-zero fill_level case 3afc8b846438 xtensa: SMP: limit number of possible CPUs by NR_CPUS 19960e19a7f9 xtensa: SMP: mark each possible CPU as present ce73d179cf66 xtensa: smp_lx200_defconfig: fix vectors clash 56b84e420189 xtensa: SMP: fix secondary CPU initialization f6efc18bbfc3 xtensa: SMP: fix ccount_timer_shutdown 9974f32f34d5 iommu/amd: Fix IOMMU page flush when detach device from a domain 81f097d689e5 ipvs: Fix signed integer overflow when setsockopt timeout e5bff433d050 IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM aa7fb4026321 perf tools: Handle TOPOLOGY headers with no CPU a4fa2a130412 vti4: Fix a ipip packet processing bug in 'IPCOMP' virtual tunnel bba078c9fc3c media: uvcvideo: Fix 'type' check leading to overflow c9b1f8506672 ip6mr: Do not call __IP6_INC_STATS() from preemptible context aaf68ba03cf7 net: dsa: mv88e6xxx: Fix u64 statistics dc18101f95fa netlabel: fix out-of-bounds memory accesses aba029c8e7a8 hugetlbfs: fix races and page leaks during migration 5b98f0928666 MIPS: irq: Allocate accurate order pages for irq stack 0adb8a1d60b1 applicom: Fix potential Spectre v1 vulnerabilities 5d58d8969037 x86/CPU/AMD: Set the CPB bit unconditionally on F17h 3f7902c723cf net: phy: Micrel KSZ8061: link failure after cable connect b98af83bc709 net: avoid use IPCB in cipso_v4_error 826987f6f98f net: Add __icmp_send helper. 51d27870ecf1 xen-netback: fix occasional leak of grant ref mappings under memory pressure 6e7339d5ee30 net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails 7fb2b5380fee bnxt_en: Drop oversize TX packets to prevent errors. 7e7a271035c4 team: Free BPF filter when unregistering netdev 89ef111eb52f sky2: Disable MSI on Dell Inspiron 1545 and Gateway P-79 d28a029290fd net-sysfs: Fix mem leak in netdev_register_kobject fcee2927c057 staging: lustre: fix buffer overflow of string buffer b48715dcf16b isdn: isdn_tty: fix build warning of strncpy eeb234f7f907 ncpfs: fix build warning of strncpy c776cff6de52 sockfs: getxattr: Fail with -EOPNOTSUPP for invalid attribute names c8d66722d84b cpufreq: Use struct kobj_attribute instead of struct global_attr 25d05441f9e5 USB: serial: ftdi_sio: add ID for Hjelmslund Electronics USB485 a78f651889f4 USB: serial: cp210x: add ID for Ingenico 3070 83e29e445132 USB: serial: option: add Telit ME910 ECM composition e90171edbef7 x86/uaccess: Don't leak the AC flag into __put_user() value evaluation 40952b6a649b mm: enforce min addr even if capable() in expand_downwards() 7404c65cac2d mmc: spi: Fix card detection during probe 1a8ccbf263d6 powerpc: Always initialize input array when calling epapr_hypercall() 05de33f10001 KVM: arm/arm64: Fix MMIO emulation data handling be96dcc315c7 arm/arm64: KVM: Feed initialized memory to MMIO accesses 37131ae9135c KVM: nSVM: clear events pending from svm_complete_interrupts() when exiting to L1 31f49f68d27e cfg80211: extend range deviation for DMG 39aabcb7dcf9 mac80211: don't initiate TDLS connection if station is not associated to AP b83f68e0396c ibmveth: Do not process frames after calling napi_reschedule 14ae77e8a4f8 net: altera_tse: fix connect_local_phy error path ff028bbb57aa scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state() e9fdf60dafdc serial: fsl_lpuart: fix maximum acceptable baud rate with over-sampling f5c5093be741 mac80211: fix miscounting of ttl-dropped frames e120f9d8596e ARC: fix __ffs return value to avoid build warnings bf36c587df83 ASoC: imx-audmux: change snprintf to scnprintf for possible overflow df7a151d53b1 ASoC: dapm: change snprintf to scnprintf for possible overflow 8751b9509990 usb: gadget: Potential NULL dereference on allocation error f84996563d7b usb: dwc3: gadget: Fix the uninitialized link_state when udc starts 0a9ecf2b3012 thermal: int340x_thermal: Fix a NULL vs IS_ERR() check c56caf662ad1 ALSA: compress: prevent potential divide by zero bugs 2fa06f59d44e ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field 59f6c707704a drm/msm: Unblock writer if reader closes file bbb07fa8dfe3 scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached 82774efd6d34 libceph: handle an empty authorize reply 0effb9fb3dfe Revert "bridge: do not add port to router list when receives query with source 0.0.0.0" 2c2433eba19a ARCv2: Enable unaligned access in early ASM code 6f0ec47b9a61 net/mlx4_en: Force CHECKSUM_NONE for short ethernet frames 9a24e9286b5b sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach() bd49916ee0f7 team: avoid complex list operations in team_nl_cmd_options_set() e41a4dc253df net/packet: fix 4gb buffer limit due to overflow check b76ca18c8588 batman-adv: fix uninit-value in batadv_interface_tx() 00c3ec3af87a KEYS: always initialize keyring_index_key::desc_len d76ef3c98024 KEYS: user: Align the payload buffer 2ef22c73c241 RDMA/srp: Rework SCSI device reset handling 1c3d88357065 isdn: avm: Fix string plus integer warning from Clang 65aac32fee80 leds: lp5523: fix a missing check of return value of lp55xx_read 4949b728976c atm: he: fix sign-extension overflow on large shift fd8662fa5930 isdn: i4l: isdn_tty: Fix some concurrency double-free bugs 2b285e446056 MIPS: jazz: fix 64bit build 61c0c195980b scsi: isci: initialize shost fully before calling scsi_add_host() 40ff741a7b49 scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param 5647975ec2b6 MIPS: ath79: Enable OF serial ports in the default config b8265637ec8a net: hns: Fix use after free identified by SLUB debug d8189ee86c3a mfd: mc13xxx: Fix a missing check of a register-read failure 81456de2d4b3 mfd: wm5110: Add missing ASRC rate register 6a422b0676ed mfd: qcom_rpm: write fw_version to CTRL_REG c02e9400dc2e mfd: ab8500-core: Return zero in get_register_interruptible() 40f1c388f263 mfd: db8500-prcmu: Fix some section annotations 2309acaeee2d mfd: twl-core: Fix section annotations on {,un}protect_pm_master 3e442a35c361 mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering mfd cells 1e73c0aeb3ee KEYS: allow reaching the keys quotas exactly d3f2228a22ab numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES 1ff6adf14549 ceph: avoid repeatedly adding inode to mdsc->snap_flush_list a71fc927e552 Revert "ANDROID: arm: process: Add display of memory around registers when displaying regs." 8940467d34f9 drivers: soc: qcom: Added check to avoid opening multiple instance 47fae5d1652c usb: xhci: Reduce command abort handshake timeout 7de60546d8f1 usb: xhci: remove unnecessary second abort try b6a6377d0e09 usb: XHCI: Bailout command abort operation upon XHCI remove 70dc54f5deaa usb: XHCI: Implement xhci_handshake_check_state() API 331c1249b130 fbdev: msm: remove check for rgb source format Change-Id: I78d7ebcce7a7fc0a6709c4fb602e88fa919ceec5
| * | | Merge "dsp: q6usm: Release spinlock before return if invalid payload size"Linux Build Service Account2019-04-05
| |\ \ \
| | * | | dsp: q6usm: Release spinlock before return if invalid payload sizeVatsal Bucha2019-04-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release spinlock in EVENT_READ_DONE before return if payload size is invalid. Change-Id: I0fe4f841ce73ecfc30fe70334e203443e5e2cb28 Signed-off-by: Vatsal Bucha <vbucha@codeaurora.org>
* | | | | qseecom: Fix ignored attribute warningsNathan Chancellor2019-04-20
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Nathan Chancellor <natechancellor@gmail.com>
* | | | | treewide: Fix code issues detected using GCC 8.2.0Sultan Alsawaf2019-04-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use the latest version of GCC to take advantage of improved static analysis. These issues appeared as warnings from the compiler. Many of these fixes are for clearly incorrect code; compiler warnings should not be taken lightly. Signed-off-by: Sultan Alsawaf <sultanxda@gmail.com>
* | | | | Merge LA.UM.7.5.2.r1-02000-8x96.0 of ↵Davide Garberi2019-04-11
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://source.codeaurora.org/quic/la/kernel/msm-4.4 into lineage-16.0 df2a64cb8c94 msm: asm: validate ADSP data before access 2ab3115b2ea4 fbdev: msm: remove check for rgb source format 3eb07ce90d30 ASoC: msm: Add AVS version check for ADSP 2.7. 16a91e93ed7b ASoC: msm: Add support for AVS version check. fe1277ee048e Merge commit 'e764712fd7f6db7921dc4b3dbbf772d613177633' into HEAD e764712fd7f6 Merge "ARM: dts: msm: add device tree overlay for 8996 V3" 305eb0fc2672 Merge "Revert "tty: msm: reduce pseudo terminal enumeration count"" d03192eb14fb ARM: dts: msm: add device tree overlay for 8996 V3 1271992594e9 Merge "ARM: dts: msm: add DTBO support for MSM8996pro CDP board" eba53bd21a57 Merge "apr: msm: fix compilation for non glink targets" b14a860906a2 Merge "cnss: Enable cnss_msm_pcie_pm_control" a526edca0eb8 apr: msm: fix compilation for non glink targets 48f805d3dda1 ARM: dts: msm: add DTBO support for MSM8996pro CDP board b7d9f06c2f78 ARM: dts: msm: add DTBO support for APQ8096pro CDP board 7ca55cc70040 cnss: Enable cnss_msm_pcie_pm_control da44b5842fe5 ion: fix system secure force alloc 0a0147a03eea Merge "msm: ipa: fix to validate the ioctl WAN_IOC_SEND_LAN_CLIENT_MSG params" 004a90d2203a Merge "ARM: dts: msm: add DTBO support for MSM ADP LITE board" 1a60823ae23d Merge "ARM: dts: msm: add DTBO support for APQ ADP board" ae82de33ed67 msm: ipa: fix to validate the ioctl WAN_IOC_SEND_LAN_CLIENT_MSG params 7a4c37e16d1d mmc: host: Cancel clock gating work in suspend 9280a655b9c1 Merge "icnss: Add support for graceful shutdown" a635a6f9b10e Merge "soc: qcom: hab: unify variable type to avoid implicit conversion" 19b117fed94f Merge "msm: kgsl: Limit log frequency in case of context count maxed out" 1422be08207c Merge "Revert "ASoC: msm: Add support for AVS version check"" a26e07ee16bc Merge "defconfig: msm-auto-gvm: reduce pseudo terminal enumeration count" 8fb70d9047b0 msm: kgsl: Limit log frequency in case of context count maxed out f546088ef813 Merge "cfg80211: indicate support for DH IE update" e011552eeeaf Merge "cfg80211/nl80211: Offload OWE processing to user space" ba8736dd2318 Merge "ARM: dts: msm: Update RX and TX data lines for QUAT_MI2S" 15737accbd92 Merge "ASoC: msm: Enable QUAT_MI2S and SEC_MI2S interface" c1372e642e5d Merge "cnss2: Add support for QCN7605 ver 2 usb device support" 8d4a9db1aa01 dsp: validate token before usage as array index 8e839de595c6 cnss2: Add support for QCN7605 ver 2 usb device support 65a54cf546e3 Merge "diag: dci: Prevent task deallocation and possible resource leak" 032f9c9018b9 Merge "dsp: q6voice: Check size of shared memory buffer before access" 7a9806a85bb5 Merge "cnss2: power up & power down during reg and unreg" 71da316a6e11 Merge "drm: msm: sde: add splash handoff support for shared display" 7c2a9786a2e3 Merge "msm: adsprpc: restrict user apps from sending kernel RPC messages" 8dd97da24d98 Revert "tty: msm: reduce pseudo terminal enumeration count" 19d973d30d64 Revert "ASoC: msm: Add support for AVS version check" 7e5a6acb859e Revert "ASoC: msm: Add AVS version check for ADSP 2.7". fbc5d8ae4062 icnss: Add support for graceful shutdown a8e7641c2292 Merge "ARM: dts: msm: Add HDR support for sharp panel" 11685796a7ce Merge "AndroidKernel: Use host machine tools" e47cd28f0329 Merge "ARM: dts: msm: Modify memory allocation for diag" 1cae0c6ed9ad ASoC: msm: Enable QUAT_MI2S and SEC_MI2S interface e7481adc1998 ARM: dts: msm: Update RX and TX data lines for QUAT_MI2S e556e69bfb91 Merge "soc: qcom: qmi_encdec: Restrict string length in decode" 4a902c0e6b71 diag: dci: Prevent task deallocation and possible resource leak c397cb9371b8 cfg80211: indicate support for DH IE update ac67229d0e34 soc: qcom: hab: unify variable type to avoid implicit conversion e5a6a48ac3cc msm: adsprpc: restrict user apps from sending kernel RPC messages 88d22796e16c cnss2: power up & power down during reg and unreg 2a8658699711 ARM: dts: msm: add DTBO support for MSM ADP LITE board 864ceebd72e5 ARM: dts: msm: add DTBO support for MSM ADP board f8467fdb32f8 ARM: dts: msm: add DTBO support for APQ ADP LITE board 5e3a0c31b88f ARM: dts: msm: add DTBO support for APQ ADP board f57fa308b0d8 cfg80211/nl80211: Offload OWE processing to user space 1d932c57e221 Merge "dsp: codecs: fix range check for audio buffer copying" c83ce01ce1f0 drm: msm: sde: add splash handoff support for shared display 596290e69099 AndroidKernel: Use host machine tools dbf205bb11e2 Merge "qdsp6v2: apr: check for packet size to header size comparison" 9ab453c8c302 dsp: codecs: fix range check for audio buffer copying 961232b0344a ARM: dts: msm: Modify memory allocation for diag 255838278aa3 Merge "soc: qcom: subsystem_notif_virt: Add support for GHS platform" c13862478eb0 Merge "ARM: dts: msm: add dtbo support for MSM8996 ufs device" e18aa7ed0031 ARM: dts: msm: Add HDR support for sharp panel 6e1b880a3e25 ARM: dts: msm: add dtbo support for MSM8996 ufs device 4f5103fd124a msm: kgsl: Correctly limit max number of contexts per process 0a9512706151 soc: qcom: subsystem_notif_virt: Add support for GHS platform cbbe494b0cb5 Merge "ARM: dts: msm: add plane reservation" 9c976729a6fc Merge "drm: msm: sde: reduce black screen duration from null commit" 9945ff0e58f6 defconfig: msm-auto-gvm: reduce pseudo terminal enumeration count db3b23f94285 dsp: q6voice: Check size of shared memory buffer before access caf53b2661cf soc: qcom: qmi_encdec: Restrict string length in decode b442f93cf317 Merge "Revert "drm: msm: Enable asynchronous driver probing"" 92f978aeb5ea Revert "drm: msm: Enable asynchronous driver probing" 733f5a1d1d7d Merge "ASoC: msm: Add AVS version check for ADSP 2.7" 914ff0d90ac5 Merge "Merge android-4.4.176 (cf84cdc) into msm-4.4" 52df3df93df4 Merge "drm/msm: set avmute only if encryption is enabled" 20c0cacb28e9 ASoC: msm: Add AVS version check for ADSP 2.7 6a1198af61ce qdsp6v2: apr: check for packet size to header size comparison f843cadcd582 Merge "defconfig: msm8996: Enable and disable few configs" 82907174ca84 drm/msm: set avmute only if encryption is enabled bd50e3b8b073 defconfig: msm8996: Enable and disable few configs 567c084d6267 Merge android-4.4.176 (cf84cdc) into msm-4.4 5cc972f3a237 ARM: dts: msm: add plane reservation 4a0416cb5eef drm: msm: sde: reduce black screen duration from null commit
| * | | | dsp: codecs: fix range check for audio buffer copyingXiaoyu Ye2019-03-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The range checking for audio buffer copying in function "audio_in_write" is using the incorrect buffer size. Change it to the actual allocated audio buffer size. Change-Id: Ib7aaa2163c0d99161369eb85d09dc2d23d8c787b Signed-off-by: Xiaoyu Ye <benyxy@codeaurora.org>
* | | | | misc: cclogic: shut upYaroslav Furman2019-03-24
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Yaroslav Furman <yaro330@gmail.com>
* | | | | cclogic: LinuxifyDavide Garberi2019-03-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Bring the coding style closer to Linux's fixing most checkpatch.pl warnings on all the files of the directories * I didn't fix every 80 chars line warning because that was way too much Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* | | | | cclogic: Add some edits from ZUKDavide Garberi2019-03-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Reworked from ZUK sources to make it looks a bit better * Also adapted to 4.4 and moved to the new directory Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* | | | | cclogic: Adapt for 4.4Davide Garberi2019-03-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * CONFIG_PM_RUNTIME has been deleted in 4.4 so let's use CONFIG_PM * regulator_set_optimum_mode doesn't exist anymore, use regulator_set_load as seen in msm-thermal Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* | | | | cclogic: Remove unused filesDavide Garberi2019-03-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * These files are completely unused and not build by any device * Probably not even ZUK knows why these files were here Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* | | | | cclogic: Fix a wrong ifdefDavide Garberi2019-03-19
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* | | | | drivers: misc: Fix cclogic driver inclusionDavide Garberi2019-03-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Thanks @AyushR1 for making me notice with https://github.com/AyushR1/AR_Beast-Zuk_Z2/commit/95b15f1930ccbf9705e047c1ab34a6ef5f9cca75 * Fixes 5b86e5045ac9d7f64719b3f41c9f3fdbd069703e * Faiz I'm gonna kill you someday Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* | | | | drivers: add cclogic usb type-c driverFaiz Authar2019-03-19
|/ / / / | | | | | | | | | | | | | | | | | | | | Change-Id: I783aaf058c42e85712f861369cc85db2d6adab61 Signed-off-by: Faiz Authar <faizauthar@gmail.com> Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* | | | Merge "qdsp6v2: q6usm: Check size of payload before access"Linux Build Service Account2019-02-28
|\ \ \ \
| * | | | qdsp6v2: q6usm: Check size of payload before accessVatsal Bucha2019-02-15
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | Check size of payload before access in q6usm_mmapcallback. Change-Id: Iff0672532c2ea40e7129237a92d8365d6b554cf2 Signed-off-by: Vatsal Bucha <vbucha@codeaurora.org>
* | | | Merge "qdsp6v2: q6usm: Check size of payload before access"Linux Build Service Account2019-02-28
|\| | |
| * | | qdsp6v2: q6usm: Check size of payload before accessVatsal Bucha2019-02-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Check size of payload array before access in q6usm_callback. Change-Id: Id0c85209a053f9dfdb53133aeb6b2510ecf18eb8 Signed-off-by: Vatsal Bucha <vbucha@codeaurora.org>
* | | | Merge android-4.4.175 (08d5867) into msm-4.4Srinivasarao P2019-02-22
|\ \ \ \ | | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-08d5867 Linux 4.4.175 uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define pinctrl: msm: fix gpio-hog related boot issues usb: dwc2: Remove unnecessary kfree kaweth: use skb_cow_head() to deal with cloned skbs ch9200: use skb_cow_head() to deal with cloned skbs smsc95xx: Use skb_cow_head to deal with cloned skbs dm thin: fix bug where bio that overwrites thin block ignores FUA x86/a.out: Clear the dump structure initially signal: Restore the stop PTRACE_EVENT_EXIT x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls tracing/uprobes: Fix output for multiple string arguments alpha: Fix Eiger NR_IRQS to 128 alpha: fix page fault handling for r16-r18 targets Input: elantech - enable 3rd button support on Fujitsu CELSIUS H780 Input: bma150 - register input device after setting private data ALSA: usb-audio: Fix implicit fb endpoint setup by quirk ALSA: hda - Add quirk for HP EliteBook 840 G5 perf/core: Fix impossible ring-buffer sizes warning Input: elan_i2c - add ACPI ID for touchpad in Lenovo V330-15ISK Revert "Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G" Documentation/network: reword kernel version reference cifs: Limit memory used by lock request calls to a page gpio: pl061: handle failed allocations ARM: dts: kirkwood: Fix polarity of GPIO fan lines ARM: dts: da850-evm: Correct the sound card name uapi/if_ether.h: prevent redefinition of struct ethhdr Revert "exec: load_script: don't blindly truncate shebang string" batman-adv: Force mac header to start of data on xmit batman-adv: Avoid WARN on net_device without parent in netns xfrm: refine validation of template and selector families libceph: avoid KEEPALIVE_PENDING races in ceph_con_keepalive() Revert "cifs: In Kconfig CONFIG_CIFS_POSIX needs depends on legacy (insecure cifs)" NFC: nxp-nci: Include unaligned.h instead of access_ok.h HID: debug: fix the ring buffer implementation drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user drm/vmwgfx: Fix setting of dma masks drm/modes: Prevent division by zero htotal mac80211: ensure that mgmt tx skbs have tailroom for encryption ARM: iop32x/n2100: fix PCI IRQ mapping MIPS: VDSO: Include $(ccflags-vdso) in o32,n32 .lds builds MIPS: OCTEON: don't set octeon_dma_bar_type if PCI is disabled mips: cm: reprime error cause debugfs: fix debugfs_rename parameter checking misc: vexpress: Off by one in vexpress_syscfg_exec() signal: Better detection of synchronous signals signal: Always notice exiting tasks mtd: rawnand: gpmi: fix MX28 bus master lockup problem perf tests evsel-tp-sched: Fix bitwise operator perf/core: Don't WARN() for impossible ring-buffer sizes x86/MCE: Initialize mce.bank in the case of a fatal error in mce_no_way_out() perf/x86/intel/uncore: Add Node ID mask KVM: nVMX: unconditionally cancel preemption timer in free_nested (CVE-2019-7221) KVM: x86: work around leak of uninitialized stack contents (CVE-2019-7222) usb: gadget: udc: net2272: Fix bitwise and boolean operations usb: phy: am335x: fix race condition in _probe dmaengine: imx-dma: fix wrong callback invoke fuse: handle zero sized retrieve correctly fuse: decrement NR_WRITEBACK_TEMP on the right page fuse: call pipe_buf_release() under pipe lock ALSA: hda - Serialize codec registrations ALSA: compress: Fix stop handling on compressed capture streams net: dsa: slave: Don't propagate flag changes on down slave interfaces net: systemport: Fix WoL with password after deep sleep skge: potential memory corruption in skge_get_regs() net: dp83640: expire old TX-skb enic: fix checksum validation for IPv6 dccp: fool proof ccid_hc_[rt]x_parse_options() string: drop __must_check from strscpy() and restore strscpy() usages in cgroup tipc: use destination length for copy string test_hexdump: use memcpy instead of strncpy thermal: hwmon: inline helpers when CONFIG_THERMAL_HWMON is not set exec: load_script: don't blindly truncate shebang string fs/epoll: drop ovflist branch prediction kernel/hung_task.c: break RCU locks based on jiffies HID: lenovo: Add checks to fix of_led_classdev_register block/swim3: Fix -EBUSY error when re-opening device after unmount gdrom: fix a memory leak bug isdn: hisax: hfc_pci: Fix a possible concurrency use-after-free bug in HFCPCI_l1hw() ocfs2: don't clear bh uptodate for block read scripts/decode_stacktrace: only strip base path when a prefix of the path niu: fix missing checks of niu_pci_eeprom_read um: Avoid marking pages with "changed protection" cifs: check ntwrk_buf_start for NULL before dereferencing it crypto: ux500 - Use proper enum in hash_set_dma_transfer crypto: ux500 - Use proper enum in cryp_set_dma_transfer seq_buf: Make seq_buf_puts() null-terminate the buffer hwmon: (lm80) fix a missing check of bus read in lm80 probe hwmon: (lm80) fix a missing check of the status of SMBus read NFS: nfs_compare_mount_options always compare auth flavors. KVM: x86: svm: report MSR_IA32_MCG_EXT_CTL as unsupported fbdev: fbcon: Fix unregister crash when more than one framebuffer igb: Fix an issue that PME is not enabled during runtime suspend fbdev: fbmem: behave better with small rotated displays and many CPUs video: clps711x-fb: release disp device node in probe() drbd: Avoid Clang warning about pointless switch statment drbd: skip spurious timeout (ping-timeo) when failing promote drbd: disconnect, if the wrong UUIDs are attached on a connected peer drbd: narrow rcu_read_lock in drbd_sync_handshake cw1200: Fix concurrency use-after-free bugs in cw1200_hw_scan() Bluetooth: Fix unnecessary error message for HCI request completion xfrm6_tunnel: Fix spi check in __xfrm6_tunnel_alloc_spi mac80211: fix radiotap vendor presence bitmap handling powerpc/uaccess: fix warning/error with access_ok() arm64: KVM: Skip MMIO insn after emulation tty: serial: samsung: Properly set flags in autoCTS mode memstick: Prevent memstick host from getting runtime suspended during card detection ASoC: fsl: Fix SND_SOC_EUKREA_TLV320 build error on i.MX8M ARM: pxa: avoid section mismatch warning udf: Fix BUG on corrupted inode i2c-axxia: check for error conditions first cpuidle: big.LITTLE: fix refcount leak clk: imx6sl: ensure MMDC CH0 handshake is bypassed sata_rcar: fix deferred probing iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer mips: bpf: fix encoding bug for mm_srlv32_op ARM: dts: Fix OMAP4430 SDP Ethernet startup timekeeping: Use proper seqcount initializer usb: hub: delay hub autosuspend if USB3 port is still link training smack: fix access permissions for keyring media: DaVinci-VPBE: fix error handling in vpbe_initialize() x86/fpu: Add might_fault() to user_insn() ARM: dts: mmp2: fix TWSI2 arm64: ftrace: don't adjust the LR value nfsd4: fix crash on writing v4_end_grace before nfsd startup sunvdc: Do not spin in an infinite loop when vio_ldc_send() returns EAGAIN f2fs: fix wrong return value of f2fs_acl_create f2fs: move dir data flush to write checkpoint process soc/tegra: Don't leak device tree node reference perf tools: Add Hygon Dhyana support modpost: validate symbol names also in find_elf_symbol ARM: OMAP2+: hwmod: Fix some section annotations staging: iio: ad7780: update voltage on read staging:iio:ad2s90: Make probe handle spi_setup failure ptp: check gettime64 return code in PTP_SYS_OFFSET ioctl serial: fsl_lpuart: clear parity enable bit when disable parity powerpc/pseries: add of_node_put() in dlpar_detach_node() x86/PCI: Fix Broadcom CNB20LE unintended sign extension (redux) dlm: Don't swamp the CPU with callbacks queued during recovery ARM: 8808/1: kexec:offline panic_smp_self_stop CPU scsi: lpfc: Correct LCB RJT handling ASoC: Intel: mrfld: fix uninitialized variable access staging: iio: adc: ad7280a: handle error from __ad7280_read32() drm/bufs: Fix Spectre v1 vulnerability BACKPORT: userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas ANDROID: cuttlefish_defconfig: Enable DEBUG_SET_MODULE_RONX ANDROID: Move from clang r346389b to r349610. UPSTREAM: virt_wifi: fix error return code in virt_wifi_newlink() ion: Disable ION_HEAP_TYPE_SYSTEM_CONTIG Change-Id: I8456a2f1d229a2d454295d660f749a2b436c6440 Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| * | | Merge 4.4.175 into android-4.4Greg Kroah-Hartman2019-02-20
| |\ \ \ | | | |/ | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 4.4.175 drm/bufs: Fix Spectre v1 vulnerability staging: iio: adc: ad7280a: handle error from __ad7280_read32() ASoC: Intel: mrfld: fix uninitialized variable access scsi: lpfc: Correct LCB RJT handling ARM: 8808/1: kexec:offline panic_smp_self_stop CPU dlm: Don't swamp the CPU with callbacks queued during recovery x86/PCI: Fix Broadcom CNB20LE unintended sign extension (redux) powerpc/pseries: add of_node_put() in dlpar_detach_node() serial: fsl_lpuart: clear parity enable bit when disable parity ptp: check gettime64 return code in PTP_SYS_OFFSET ioctl staging:iio:ad2s90: Make probe handle spi_setup failure staging: iio: ad7780: update voltage on read ARM: OMAP2+: hwmod: Fix some section annotations modpost: validate symbol names also in find_elf_symbol perf tools: Add Hygon Dhyana support soc/tegra: Don't leak device tree node reference f2fs: move dir data flush to write checkpoint process f2fs: fix wrong return value of f2fs_acl_create sunvdc: Do not spin in an infinite loop when vio_ldc_send() returns EAGAIN nfsd4: fix crash on writing v4_end_grace before nfsd startup arm64: ftrace: don't adjust the LR value ARM: dts: mmp2: fix TWSI2 x86/fpu: Add might_fault() to user_insn() media: DaVinci-VPBE: fix error handling in vpbe_initialize() smack: fix access permissions for keyring usb: hub: delay hub autosuspend if USB3 port is still link training timekeeping: Use proper seqcount initializer ARM: dts: Fix OMAP4430 SDP Ethernet startup mips: bpf: fix encoding bug for mm_srlv32_op iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer sata_rcar: fix deferred probing clk: imx6sl: ensure MMDC CH0 handshake is bypassed cpuidle: big.LITTLE: fix refcount leak i2c-axxia: check for error conditions first udf: Fix BUG on corrupted inode ARM: pxa: avoid section mismatch warning ASoC: fsl: Fix SND_SOC_EUKREA_TLV320 build error on i.MX8M memstick: Prevent memstick host from getting runtime suspended during card detection tty: serial: samsung: Properly set flags in autoCTS mode arm64: KVM: Skip MMIO insn after emulation powerpc/uaccess: fix warning/error with access_ok() mac80211: fix radiotap vendor presence bitmap handling xfrm6_tunnel: Fix spi check in __xfrm6_tunnel_alloc_spi Bluetooth: Fix unnecessary error message for HCI request completion cw1200: Fix concurrency use-after-free bugs in cw1200_hw_scan() drbd: narrow rcu_read_lock in drbd_sync_handshake drbd: disconnect, if the wrong UUIDs are attached on a connected peer drbd: skip spurious timeout (ping-timeo) when failing promote drbd: Avoid Clang warning about pointless switch statment video: clps711x-fb: release disp device node in probe() fbdev: fbmem: behave better with small rotated displays and many CPUs igb: Fix an issue that PME is not enabled during runtime suspend fbdev: fbcon: Fix unregister crash when more than one framebuffer KVM: x86: svm: report MSR_IA32_MCG_EXT_CTL as unsupported NFS: nfs_compare_mount_options always compare auth flavors. hwmon: (lm80) fix a missing check of the status of SMBus read hwmon: (lm80) fix a missing check of bus read in lm80 probe seq_buf: Make seq_buf_puts() null-terminate the buffer crypto: ux500 - Use proper enum in cryp_set_dma_transfer crypto: ux500 - Use proper enum in hash_set_dma_transfer cifs: check ntwrk_buf_start for NULL before dereferencing it um: Avoid marking pages with "changed protection" niu: fix missing checks of niu_pci_eeprom_read scripts/decode_stacktrace: only strip base path when a prefix of the path ocfs2: don't clear bh uptodate for block read isdn: hisax: hfc_pci: Fix a possible concurrency use-after-free bug in HFCPCI_l1hw() gdrom: fix a memory leak bug block/swim3: Fix -EBUSY error when re-opening device after unmount HID: lenovo: Add checks to fix of_led_classdev_register kernel/hung_task.c: break RCU locks based on jiffies fs/epoll: drop ovflist branch prediction exec: load_script: don't blindly truncate shebang string thermal: hwmon: inline helpers when CONFIG_THERMAL_HWMON is not set test_hexdump: use memcpy instead of strncpy tipc: use destination length for copy string string: drop __must_check from strscpy() and restore strscpy() usages in cgroup dccp: fool proof ccid_hc_[rt]x_parse_options() enic: fix checksum validation for IPv6 net: dp83640: expire old TX-skb skge: potential memory corruption in skge_get_regs() net: systemport: Fix WoL with password after deep sleep net: dsa: slave: Don't propagate flag changes on down slave interfaces ALSA: compress: Fix stop handling on compressed capture streams ALSA: hda - Serialize codec registrations fuse: call pipe_buf_release() under pipe lock fuse: decrement NR_WRITEBACK_TEMP on the right page fuse: handle zero sized retrieve correctly dmaengine: imx-dma: fix wrong callback invoke usb: phy: am335x: fix race condition in _probe usb: gadget: udc: net2272: Fix bitwise and boolean operations KVM: x86: work around leak of uninitialized stack contents (CVE-2019-7222) KVM: nVMX: unconditionally cancel preemption timer in free_nested (CVE-2019-7221) perf/x86/intel/uncore: Add Node ID mask x86/MCE: Initialize mce.bank in the case of a fatal error in mce_no_way_out() perf/core: Don't WARN() for impossible ring-buffer sizes perf tests evsel-tp-sched: Fix bitwise operator mtd: rawnand: gpmi: fix MX28 bus master lockup problem signal: Always notice exiting tasks signal: Better detection of synchronous signals misc: vexpress: Off by one in vexpress_syscfg_exec() debugfs: fix debugfs_rename parameter checking mips: cm: reprime error cause MIPS: OCTEON: don't set octeon_dma_bar_type if PCI is disabled MIPS: VDSO: Include $(ccflags-vdso) in o32,n32 .lds builds ARM: iop32x/n2100: fix PCI IRQ mapping mac80211: ensure that mgmt tx skbs have tailroom for encryption drm/modes: Prevent division by zero htotal drm/vmwgfx: Fix setting of dma masks drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user HID: debug: fix the ring buffer implementation NFC: nxp-nci: Include unaligned.h instead of access_ok.h Revert "cifs: In Kconfig CONFIG_CIFS_POSIX needs depends on legacy (insecure cifs)" libceph: avoid KEEPALIVE_PENDING races in ceph_con_keepalive() xfrm: refine validation of template and selector families batman-adv: Avoid WARN on net_device without parent in netns batman-adv: Force mac header to start of data on xmit Revert "exec: load_script: don't blindly truncate shebang string" uapi/if_ether.h: prevent redefinition of struct ethhdr ARM: dts: da850-evm: Correct the sound card name ARM: dts: kirkwood: Fix polarity of GPIO fan lines gpio: pl061: handle failed allocations cifs: Limit memory used by lock request calls to a page Documentation/network: reword kernel version reference Revert "Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G" Input: elan_i2c - add ACPI ID for touchpad in Lenovo V330-15ISK perf/core: Fix impossible ring-buffer sizes warning ALSA: hda - Add quirk for HP EliteBook 840 G5 ALSA: usb-audio: Fix implicit fb endpoint setup by quirk Input: bma150 - register input device after setting private data Input: elantech - enable 3rd button support on Fujitsu CELSIUS H780 alpha: fix page fault handling for r16-r18 targets alpha: Fix Eiger NR_IRQS to 128 tracing/uprobes: Fix output for multiple string arguments x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls signal: Restore the stop PTRACE_EVENT_EXIT x86/a.out: Clear the dump structure initially dm thin: fix bug where bio that overwrites thin block ignores FUA smsc95xx: Use skb_cow_head to deal with cloned skbs ch9200: use skb_cow_head() to deal with cloned skbs kaweth: use skb_cow_head() to deal with cloned skbs usb: dwc2: Remove unnecessary kfree pinctrl: msm: fix gpio-hog related boot issues uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define Linux 4.4.175 Change-Id: I41d95e9717106bcc9342573855fec8f823d9b28c Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
| | * | misc: vexpress: Off by one in vexpress_syscfg_exec()Dan Carpenter2019-02-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit f8a70d8b889f180e6860cb1f85fed43d37844c5a upstream. The > comparison should be >= to prevent reading beyond the end of the func->template[] array. (The func->template array is allocated in vexpress_syscfg_regmap_init() and it has func->num_templates elements.) Fixes: 974cc7b93441 ("mfd: vexpress: Define the device as MFD cells") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Acked-by: Sudeep Holla <sudeep.holla@arm.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
* | | | Merge android-4.4.171 (b355d4f) into msm-4.4Srinivasarao P2019-01-29
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-b355d4f Linux 4.4.171 sunrpc: use-after-free in svc_process_common() ext4: fix a potential fiemap/page fault deadlock w/ inline_data crypto: cts - fix crash on short inputs i2c: dev: prevent adapter retries and timeout being set as minus value ACPI: power: Skip duplicate power resource references in _PRx PCI: altera: Move retrain from fixup to altera_pcie_host_init() PCI: altera: Rework config accessors for use without a struct pci_bus PCI: altera: Poll for link training status after retraining the link PCI: altera: Poll for link up status after retraining the link PCI: altera: Check link status before retrain link PCI: altera: Reorder read/write functions PCI: altera: Fix altera_pcie_link_is_up() slab: alien caches must not be initialized if the allocation of the alien cache failed USB: Add USB_QUIRK_DELAY_CTRL_MSG quirk for Corsair K70 RGB USB: storage: add quirk for SMI SM3350 USB: storage: don't insert sane sense for SPC3+ when bad sense specified usb: cdc-acm: send ZLP for Telit 3G Intel based modems cifs: Fix potential OOB access of lock element array CIFS: Do not hide EINTR after sending network packets btrfs: tree-checker: Fix misleading group system information btrfs: tree-checker: Check level for leaves and nodes btrfs: Verify that every chunk has corresponding block group at mount time btrfs: Check that each block group has corresponding chunk at mount time btrfs: validate type when reading a chunk btrfs: tree-checker: Detect invalid and empty essential trees btrfs: tree-checker: Verify block_group_item btrfs: tree-check: reduce stack consumption in check_dir_item btrfs: tree-checker: use %zu format string for size_t btrfs: tree-checker: Add checker for dir item btrfs: tree-checker: Fix false panic for sanity test btrfs: tree-checker: Enhance btrfs_check_node output btrfs: Move leaf and node validation checker to tree-checker.c btrfs: Add checker for EXTENT_CSUM btrfs: Add sanity check for EXTENT_DATA when reading out leaf btrfs: Check if item pointer overlaps with the item itself btrfs: Refactor check_leaf function for later expansion btrfs: struct-funcs, constify readers Btrfs: fix emptiness check for dirtied extent buffers at check_leaf() Btrfs: memset to avoid stale content in btree leaf Btrfs: kill BUG_ON in run_delayed_tree_ref Btrfs: improve check_node to avoid reading corrupted nodes Btrfs: memset to avoid stale content in btree node block Btrfs: fix BUG_ON in btrfs_mark_buffer_dirty Btrfs: check btree node's nritems Btrfs: detect corruption when non-root leaf has zero item Btrfs: fix em leak in find_first_block_group Btrfs: check inconsistence between chunk and block group Btrfs: add validadtion checks for chunk loading btrfs: Enhance chunk validation check btrfs: cleanup, stop casting for extent_map->lookup everywhere ALSA: hda/realtek - Disable headset Mic VREF for headset mode of ALC225 UPSTREAM: virtio: new feature to detect IOMMU device quirk UPSTREAM: vring: Use the DMA API on Xen UPSTREAM: virtio_ring: Support DMA APIs UPSTREAM: vring: Introduce vring_use_dma_api() ANDROID: cuttlefish_defconfig: Enable vsock options UPSTREAM: vhost/vsock: fix reset orphans race with close timeout UPSTREAM: vhost/vsock: fix use-after-free in network stack callers UPSTREAM: vhost: correctly check the iova range when waking virtqueue UPSTREAM: vhost: synchronize IOTLB message with dev cleanup UPSTREAM: vhost: fix info leak due to uninitialized memory UPSTREAM: vhost: fix vhost_vq_access_ok() log check UPSTREAM: vhost: validate log when IOTLB is enabled UPSTREAM: vhost_net: add missing lock nesting notation UPSTREAM: vhost: use mutex_lock_nested() in vhost_dev_lock_vqs() UPSTREAM: vhost/vsock: fix uninitialized vhost_vsock->guest_cid UPSTREAM: vhost_net: correctly check tx avail during rx busy polling UPSTREAM: vsock: use new wait API for vsock_stream_sendmsg() UPSTREAM: vsock: cancel packets when failing to connect UPSTREAM: vhost-vsock: add pkt cancel capability UPSTREAM: vsock: track pkt owner vsock UPSTREAM: vhost: fix initialization for vq->is_le UPSTREAM: vhost/vsock: handle vhost_vq_init_access() error UPSTREAM: vsock: lookup and setup guest_cid inside vhost_vsock_lock UPSTREAM: vhost-vsock: fix orphan connection reset UPSTREAM: vsock/virtio: fix src/dst cid format UPSTREAM: VSOCK: Don't dec ack backlog twice for rejected connections UPSTREAM: vhost/vsock: drop space available check for TX vq UPSTREAM: virtio-vsock: fix include guard typo UPSTREAM: vhost/vsock: fix vhost virtio_vsock_pkt use-after-free UPSTREAM: VSOCK: Use kvfree() BACKPORT: vhost: split out vringh Kconfig UPSTREAM: vhost: drop vringh dependency UPSTREAM: vhost: drop vringh dependency UPSTREAM: vhost: detect 32 bit integer wrap around UPSTREAM: VSOCK: Add Makefile and Kconfig UPSTREAM: VSOCK: Introduce vhost_vsock.ko UPSTREAM: VSOCK: Introduce virtio_transport.ko BACKPORT: VSOCK: Introduce virtio_vsock_common.ko UPSTREAM: VSOCK: defer sock removal to transports UPSTREAM: VSOCK: transport-specific vsock_transport functions UPSTREAM: vsock: make listener child lock ordering explicit UPSTREAM: vhost: new device IOTLB API BACKPORT: vhost: convert pre sorted vhost memory array to interval tree UPSTREAM: vhost: introduce vhost memory accessors UPSTREAM: vhost_net: stop polling socket during rx processing UPSTREAM: VSOCK: constify vsock_transport structure UPSTREAM: vhost: lockless enqueuing UPSTREAM: vhost: simplify work flushing UPSTREAM: VSOCK: Only check error on skb_recv_datagram when skb is NULL BACKPORT: AF_VSOCK: Shrink the area influenced by prepare_to_wait UPSTREAM: vhost_net: basic polling support UPSTREAM: vhost: introduce vhost_vq_avail_empty() UPSTREAM: vhost: introduce vhost_has_work() UPSTREAM: vhost: rename vhost_init_used() UPSTREAM: vhost: rename cross-endian helpers UPSTREAM: vhost: fix error path in vhost_init_used() UPSTREAM: virtio: make find_vqs() checkpatch.pl-friendly UPSTREAM: net: move napi_hash[] into read mostly section ANDROID: cuttlefish_defconfig: remove DM_VERITY_HASH_PREFETCH_MIN_SIZE Revert "ANDROID: dm verity: add minimum prefetch size" ANDROID: f2fs: Complement "android_fs" tracepoint of read path Removed config DM_VERITY_HASH_PREFETCH_MIN_SIZE in defconfig files as this feature got reverted. Change-Id: I9117e3080eaf0e0c99888468037855fc7713ff88 Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| * | | UPSTREAM: virtio: make find_vqs() checkpatch.pl-friendlyStefan Hajnoczi2019-01-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | checkpatch.pl wants arrays of strings declared as follows: static const char * const names[] = { "vq-1", "vq-2", "vq-3" }; Currently the find_vqs() function takes a const char *names[] argument so passing checkpatch.pl's const char * const names[] results in a compiler error due to losing the second const. This patch adjusts the find_vqs() prototype and updates all virtio transports. This makes it possible for virtio_balloon.c, virtio_input.c, virtgpu_kms.c, and virtio_rpmsg_bus.c to use the checkpatch.pl-friendly type. Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com> Signed-off-by: Michael S. Tsirkin <mst@redhat.com> Acked-by: Bjorn Andersson <bjorn.andersson@sonymobile.com> (cherry picked from commit f7ad26ff952b3ca2702d7da03aad0ab1f6c01d7c) Bug: 121166534 Test: Ran cuttlefish with android-4.4 + VSOCKETS, VMWARE_VMCI_VSOCKETS Signed-off-by: Cody Schuffelen <schuffelen@google.com> Change-Id: I23513ea85e7a43efd0c604fc4445b301b4f610ba
* | | | Merge android-4.4.170 (241f76b1) into msm-4.4Srinivasarao P2019-01-25
|\| | | | |_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-241f76b1 Linux 4.4.170 power: supply: olpc_battery: correct the temperature units intel_th: msu: Fix an off-by-one in attribute store genwqe: Fix size check ceph: don't update importing cap's mseq when handing cap export iommu/vt-d: Handle domain agaw being less than iommu agaw 9p/net: put a lower bound on msize b43: Fix error in cordic routine gfs2: Fix loop in gfs2_rbm_find dlm: memory leaks on error path in dlm_user_request() dlm: lost put_lkb on error path in receive_convert() and receive_unlock() dlm: possible memory leak on error path in create_lkb() dlm: fixed memory leaks after failed ls_remove_names allocation ALSA: usb-audio: Fix an out-of-bound read in create_composite_quirks ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit() ALSA: cs46xx: Potential NULL dereference in probe crypto: x86/chacha20 - avoid sleeping with preemption disabled sunrpc: use SVC_NET() in svcauth_gss_* functions sunrpc: fix cache_head leak due to queued request mm, devm_memremap_pages: kill mapping "System RAM" support mm, devm_memremap_pages: mark devm_memremap_pages() EXPORT_SYMBOL_GPL hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined fork: record start_time late scsi: zfcp: fix posting too many status read buffers leading to adapter shutdown Input: omap-keypad - fix idle configuration to not block SoC idle states scsi: bnx2fc: Fix NULL dereference in error handling xfrm: Fix bucket count reported to userspace checkstack.pl: fix for aarch64 Input: restore EV_ABS ABS_RESERVED ARM: imx: update the cpu power up timing setting on i.mx6sx powerpc: Fix COFF zImage booting on old powermacs spi: bcm2835: Unbreak the build of esoteric configs x86/kvm/vmx: do not use vm-exit instruction length for fast MMIO when running nested CIFS: Fix error mapping for SMB2_LOCK command which caused OFD lock problem MIPS: Align kernel load address to 64KB MIPS: Ensure pmd_present() returns false after pmd_mknotpresent() media: vivid: free bitmap_cap when updating std/timings/etc. cdc-acm: fix abnormal DATA RX issue for Mediatek Preloader. spi: bcm2835: Avoid finishing transfer prematurely in IRQ mode spi: bcm2835: Fix book-keeping of DMA termination spi: bcm2835: Fix race on DMA termination ext4: force inode writes when nfsd calls commit_metadata() ext4: fix EXT4_IOC_GROUP_ADD ioctl ext4: missing unlock/put_page() in ext4_try_to_write_inline_data() ext4: fix possible use after free in ext4_quota_enable perf pmu: Suppress potential format-truncation warning KVM: x86: Use jmp to invoke kvm_spurious_fault() from .fixup Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G usb: r8a66597: Fix a possible concurrency use-after-free bug in r8a66597_endpoint_disable() USB: serial: option: add Fibocom NL678 series USB: serial: pl2303: add ids for Hewlett-Packard HP POS pole displays ALSA: hda/tegra: clear pending irq handlers ALSA: hda: add mute LED support for HP EliteBook 840 G4 ALSA: emux: Fix potential Spectre v1 vulnerabilities ALSA: pcm: Fix potential Spectre v1 vulnerability ALSA: emu10k1: Fix potential Spectre v1 vulnerabilities ALSA: rme9652: Fix potential Spectre v1 vulnerability sock: Make sock->sk_stamp thread-safe gro_cell: add napi_disable in gro_cells_destroy xen/netfront: tolerate frags with no data VSOCK: Send reset control packet when socket is partially bound vhost: make sure used idx is seen before log in vhost_add_used_n() sctp: initialize sin6_flowinfo for ipv6 addrs in sctp_inet6addr_event packet: validate address length if non-zero packet: validate address length netrom: fix locking in nr_find_socket() isdn: fix kernel-infoleak in capi_unlocked_ioctl ipv6: explicitly initialize udp6_addr in udp_sock_create6() ieee802154: lowpan_header_create check must check daddr ibmveth: fix DMA unmap error in ibmveth_xmit_start error path ax25: fix a use-after-free in ax25_fillin_cb() ipv4: Fix potential Spectre v1 vulnerability ip6mr: Fix potential Spectre v1 vulnerability drm/ioctl: Fix Spectre v1 vulnerabilities x86/mtrr: Don't copy uninitialized gentry fields back to userspace Drivers: hv: vmbus: Return -EINVAL for the sys files for unopened channels gpio: max7301: fix driver for use with CONFIG_VMAP_STACK mmc: omap_hsmmc: fix DMA API warning mmc: core: Reset HPI enabled state during re-init and in case of errors USB: serial: option: add Telit LN940 series USB: serial: option: add Fibocom NL668 series USB: serial: option: add Simcom SIM7500/SIM7600 (MBIM mode) USB: serial: option: add HP lt4132 USB: serial: option: add GosunCn ZTE WeLink ME3630 xhci: Don't prevent USB2 bus suspend in state check intended for USB3 only USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data f2fs: don't access node/meta inode mapping after iput f2fs: wait on atomic writes to count F2FS_CP_WB_DATA f2fs: sanity check of xattr entry size f2fs: fix use-after-free issue when accessing sbi->stat_info f2fs: check PageWriteback flag for ordered case f2fs: fix validation of the block count in sanity_check_raw_super f2fs: fix missing unlock(sbi->gc_mutex) f2fs: clean up structure extent_node f2fs: fix block address for __check_sit_bitmap f2fs: fix sbi->extent_list corruption issue f2fs: clean up checkpoint flow f2fs: flush stale issued discard candidates f2fs: correct wrong spelling, issing_* f2fs: use kvmalloc, if kmalloc is failed f2fs: remove redundant comment of unused wio_mutex f2fs: fix to reorder set_page_dirty and wait_on_page_writeback f2fs: clear PG_writeback if IPU failed f2fs: add an ioctl() to explicitly trigger fsck later f2fs: avoid frequent costly fsck triggers f2fs: fix m_may_create to make OPU DIO write correctly f2fs: fix to update new block address correctly for OPU f2fs: adjust trace print in f2fs_get_victim() to cover all paths f2fs: fix to allow node segment for GC by ioctl path f2fs: make "f2fs_fault_name[]" const char * f2fs: read page index before freeing f2fs: fix wrong return value of f2fs_acl_create f2fs: avoid build warn of fall_through f2fs: fix race between write_checkpoint and write_begin f2fs: check memory boundary by insane namelen f2fs: only flush the single temp bio cache which owns the target page f2fs: fix out-place-update DIO write f2fs: fix to be aware discard/preflush/dio command in is_idle() f2fs: add to account direct IO f2fs: move dir data flush to write checkpoint process f2fs: change segment to section in f2fs_ioc_gc_range f2fs: export migration_granularity sysfs entry f2fs: support subsectional garbage collection f2fs: introduce __is_large_section() for cleanup f2fs: clean up f2fs_sb_has_##feature_name f2fs: remove codes of unused wio_mutex f2fs: fix count of seg_freed to make sec_freed correct f2fs: fix to account preflush command for noflush_merge mode f2fs: avoid GC causing encrypted file corrupted ANDROID: cuttlefish_defconfig: Enable VIRTIO_INPUT Conflicts: mm/memory_hotplug.c Change-Id: I8dc4545b59eff285a0fdb22cd06e8d5dffbe1330 Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| * | Merge 4.4.170 into android-4.4Greg Kroah-Hartman2019-01-13
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 4.4.170 USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data xhci: Don't prevent USB2 bus suspend in state check intended for USB3 only USB: serial: option: add GosunCn ZTE WeLink ME3630 USB: serial: option: add HP lt4132 USB: serial: option: add Simcom SIM7500/SIM7600 (MBIM mode) USB: serial: option: add Fibocom NL668 series USB: serial: option: add Telit LN940 series mmc: core: Reset HPI enabled state during re-init and in case of errors mmc: omap_hsmmc: fix DMA API warning gpio: max7301: fix driver for use with CONFIG_VMAP_STACK Drivers: hv: vmbus: Return -EINVAL for the sys files for unopened channels x86/mtrr: Don't copy uninitialized gentry fields back to userspace drm/ioctl: Fix Spectre v1 vulnerabilities ip6mr: Fix potential Spectre v1 vulnerability ipv4: Fix potential Spectre v1 vulnerability ax25: fix a use-after-free in ax25_fillin_cb() ibmveth: fix DMA unmap error in ibmveth_xmit_start error path ieee802154: lowpan_header_create check must check daddr ipv6: explicitly initialize udp6_addr in udp_sock_create6() isdn: fix kernel-infoleak in capi_unlocked_ioctl netrom: fix locking in nr_find_socket() packet: validate address length packet: validate address length if non-zero sctp: initialize sin6_flowinfo for ipv6 addrs in sctp_inet6addr_event vhost: make sure used idx is seen before log in vhost_add_used_n() VSOCK: Send reset control packet when socket is partially bound xen/netfront: tolerate frags with no data gro_cell: add napi_disable in gro_cells_destroy sock: Make sock->sk_stamp thread-safe ALSA: rme9652: Fix potential Spectre v1 vulnerability ALSA: emu10k1: Fix potential Spectre v1 vulnerabilities ALSA: pcm: Fix potential Spectre v1 vulnerability ALSA: emux: Fix potential Spectre v1 vulnerabilities ALSA: hda: add mute LED support for HP EliteBook 840 G4 ALSA: hda/tegra: clear pending irq handlers USB: serial: pl2303: add ids for Hewlett-Packard HP POS pole displays USB: serial: option: add Fibocom NL678 series usb: r8a66597: Fix a possible concurrency use-after-free bug in r8a66597_endpoint_disable() Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G KVM: x86: Use jmp to invoke kvm_spurious_fault() from .fixup perf pmu: Suppress potential format-truncation warning ext4: fix possible use after free in ext4_quota_enable ext4: missing unlock/put_page() in ext4_try_to_write_inline_data() ext4: fix EXT4_IOC_GROUP_ADD ioctl ext4: force inode writes when nfsd calls commit_metadata() spi: bcm2835: Fix race on DMA termination spi: bcm2835: Fix book-keeping of DMA termination spi: bcm2835: Avoid finishing transfer prematurely in IRQ mode cdc-acm: fix abnormal DATA RX issue for Mediatek Preloader. media: vivid: free bitmap_cap when updating std/timings/etc. MIPS: Ensure pmd_present() returns false after pmd_mknotpresent() MIPS: Align kernel load address to 64KB CIFS: Fix error mapping for SMB2_LOCK command which caused OFD lock problem x86/kvm/vmx: do not use vm-exit instruction length for fast MMIO when running nested spi: bcm2835: Unbreak the build of esoteric configs powerpc: Fix COFF zImage booting on old powermacs ARM: imx: update the cpu power up timing setting on i.mx6sx Input: restore EV_ABS ABS_RESERVED checkstack.pl: fix for aarch64 xfrm: Fix bucket count reported to userspace scsi: bnx2fc: Fix NULL dereference in error handling Input: omap-keypad - fix idle configuration to not block SoC idle states scsi: zfcp: fix posting too many status read buffers leading to adapter shutdown fork: record start_time late hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined mm, devm_memremap_pages: mark devm_memremap_pages() EXPORT_SYMBOL_GPL mm, devm_memremap_pages: kill mapping "System RAM" support sunrpc: fix cache_head leak due to queued request sunrpc: use SVC_NET() in svcauth_gss_* functions crypto: x86/chacha20 - avoid sleeping with preemption disabled ALSA: cs46xx: Potential NULL dereference in probe ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit() ALSA: usb-audio: Fix an out-of-bound read in create_composite_quirks dlm: fixed memory leaks after failed ls_remove_names allocation dlm: possible memory leak on error path in create_lkb() dlm: lost put_lkb on error path in receive_convert() and receive_unlock() dlm: memory leaks on error path in dlm_user_request() gfs2: Fix loop in gfs2_rbm_find b43: Fix error in cordic routine 9p/net: put a lower bound on msize iommu/vt-d: Handle domain agaw being less than iommu agaw ceph: don't update importing cap's mseq when handing cap export genwqe: Fix size check intel_th: msu: Fix an off-by-one in attribute store power: supply: olpc_battery: correct the temperature units Linux 4.4.170 Change-Id: I1b2927583f8853bfeb3ad11d045c2cf5c5c926f3 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
| | * genwqe: Fix size checkChristian Borntraeger2019-01-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit fdd669684655c07dacbdb0d753fd13833de69a33 upstream. Calling the test program genwqe_cksum with the default buffer size of 2MB triggers the following kernel warning on s390: WARNING: CPU: 30 PID: 9311 at mm/page_alloc.c:3189 __alloc_pages_nodemask+0x45c/0xbe0 CPU: 30 PID: 9311 Comm: genwqe_cksum Kdump: loaded Not tainted 3.10.0-957.el7.s390x #1 task: 00000005e5d13980 ti: 00000005e7c6c000 task.ti: 00000005e7c6c000 Krnl PSW : 0704c00180000000 00000000002780ac (__alloc_pages_nodemask+0x45c/0xbe0) R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:3 CC:0 PM:0 EA:3 Krnl GPRS: 00000000002932b8 0000000000b73d7c 0000000000000010 0000000000000009 0000000000000041 00000005e7c6f9b8 0000000000000001 00000000000080d0 0000000000000000 0000000000b70500 0000000000000001 0000000000000000 0000000000b70528 00000000007682c0 0000000000277df2 00000005e7c6f9a0 Krnl Code: 000000000027809e: de7195001000 ed 1280(114,%r9),0(%r1) 00000000002780a4: a774fead brc 7,277dfe #00000000002780a8: a7f40001 brc 15,2780aa >00000000002780ac: 92011000 mvi 0(%r1),1 00000000002780b0: a7f4fea7 brc 15,277dfe 00000000002780b4: 9101c6b6 tm 1718(%r12),1 00000000002780b8: a784ff3a brc 8,277f2c 00000000002780bc: a7f4fe2e brc 15,277d18 Call Trace: ([<0000000000277df2>] __alloc_pages_nodemask+0x1a2/0xbe0) [<000000000013afae>] s390_dma_alloc+0xfe/0x310 [<000003ff8065f362>] __genwqe_alloc_consistent+0xfa/0x148 [genwqe_card] [<000003ff80658f7a>] genwqe_mmap+0xca/0x248 [genwqe_card] [<00000000002b2712>] mmap_region+0x4e2/0x778 [<00000000002b2c54>] do_mmap+0x2ac/0x3e0 [<0000000000292d7e>] vm_mmap_pgoff+0xd6/0x118 [<00000000002b081c>] SyS_mmap_pgoff+0xdc/0x268 [<00000000002b0a34>] SyS_old_mmap+0x8c/0xb0 [<000000000074e518>] sysc_tracego+0x14/0x1e [<000003ffacf87dc6>] 0x3ffacf87dc6 turns out the check in __genwqe_alloc_consistent uses "> MAX_ORDER" while the mm code uses ">= MAX_ORDER". Fix genwqe. Cc: stable@vger.kernel.org Signed-off-by: Christian Borntraeger <borntraeger@de.ibm.com> Signed-off-by: Frank Haverkamp <haver@linux.vnet.ibm.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
* | | Merge android-4.4.168 (66a37fc) into msm-4.4Srinivasarao P2018-12-21
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-66a37fc Linux 4.4.168 selftests: Move networking/timestamping from Documentation rocker: fix rocker_tlv_put_* functions for KASAN staging: speakup: Replace strncpy with memcpy matroxfb: fix size of memcpy media: dvb-frontends: fix i2c access helpers for KASAN proc: do not access cmdline nor environ from file-backed areas proc: don't use FOLL_FORCE for reading cmdline and environment mm: replace access_remote_vm() write parameter with gup_flags mm: replace __access_remote_vm() write parameter with gup_flags mm: replace get_user_pages() write/force parameters with gup_flags mm: replace get_vaddr_frames() write/force parameters with gup_flags mm: replace get_user_pages_locked() write/force parameters with gup_flags mm: replace get_user_pages_unlocked() write/force parameters with gup_flags mm/nommu.c: Switch __get_user_pages_unlocked() to use __get_user_pages() mm: remove write/force parameters from __get_user_pages_unlocked() mm: remove write/force parameters from __get_user_pages_locked() sr: pass down correctly sized SCSI sense buffer swiotlb: clean up reporting hugetlbfs: fix bug in pgoff overflow checking hugetlbfs: check for pgoff value overflow hugetlbfs: fix offset overflow in hugetlbfs mmap mm/hugetlb.c: don't call region_abort if region_chg fails posix-timers: Sanitize overrun handling wil6210: missing length check in wmi_set_ie bpf: Prevent memory disambiguation attack bpf/verifier: Pass instruction index to check_mem_access() and check_xadd() bpf/verifier: Add spi variable to check_stack_write() bpf: support 8-byte metafield access KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD x86/speculation: Use synthetic bits for IBRS/IBPB/STIBP x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL KVM: SVM: Move spec control call after restore of GS x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest x86/bugs, KVM: Support the combination of guest and host IBRS x86/uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec x86/usercopy: Replace open coded stac/clac with __uaccess_{begin, end} x86: Introduce __uaccess_begin_nospec() and uaccess_try_nospec x86: fix SMAP in 32-bit environments x86: reorganize SMAP handling in user space accesses KVM/x86: Remove indirect MSR op calls from SPEC_CTRL KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES KVM/x86: Add IBPB support KVM: VMX: make MSR bitmaps per-VCPU KVM: VMX: introduce alloc_loaded_vmcs KVM: nVMX: Eliminate vmcs02 pool KVM: nVMX: mark vmcs12 pages dirty on L2 exit KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0 x2APIC ALSA: pcm: remove SNDRV_PCM_IOCTL1_INFO internal command pstore: Convert console write to use ->write_buf ocfs2: fix potential use after free debugobjects: avoid recursive calls with kmemleak hfsplus: do not free node before using hfs: do not free node before using ocfs2: fix deadlock caused by ocfs2_defrag_extent() fscache, cachefiles: remove redundant variable 'cache' fscache: fix race between enablement and dropping of object xen: xlate_mmu: add missing header to fix 'W=1' warning drm/ast: fixed reading monitor EDID not stable issue net: hisilicon: remove unexpected free_netdev ixgbe: recognize 1000BaseLX SFP modules as 1Gbps net: thunderx: fix NULL pointer dereference in nic_remove KVM: x86: fix empty-body warnings USB: omap_udc: fix USB gadget functionality on Palm Tungsten E USB: omap_udc: fix omap_udc_start() on 15xx machines USB: omap_udc: fix crashes on probe error and module removal USB: omap_udc: use devm_request_irq() bpf: fix check of allowed specifiers in bpf_trace_printk exportfs: do not read dentry after free ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE Btrfs: send, fix infinite loop due to directory rename dependencies hwmon: (w83795) temp4_type has writable permission ASoC: dapm: Recalculate audio map forcely when card instantiated hwmon: (ina2xx) Fix current value calculation s390/cpum_cf: Reject request for sampling in event initialization sysv: return 'err' instead of 0 in __sysv_write_inode ARM: OMAP1: ams-delta: Fix possible use of uninitialized field ARM: OMAP2+: prm44xx: Fix section annotation on omap44xx_prm_enable_io_wakeup neighbour: Avoid writing before skb->head in neigh_hh_output() tun: forbid iface creation with rtnl ops tcp: fix NULL ref in tail loss probe rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices net: Prevent invalid access to skb->prev in __qdisc_drop_all net: phy: don't allow __set_phy_supported to add unsupported modes net: 8139cp: fix a BUG triggered by changing mtu with network traffic ipv6: Check available headroom in ip6_xmit() even without options ANDROID: uid_sys_stats: Copy task_struct comm field to bigger buffer Conflicts: arch/x86/include/asm/uaccess_32.h sound/core/pcm_native.c Change-Id: I1d20594091279ae84c58669dd8ad5fa5e31989ab [fixed compilation issue in kgsl.c] Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| * | Merge 4.4.168 into android-4.4Greg Kroah-Hartman2018-12-19
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 4.4.168 ipv6: Check available headroom in ip6_xmit() even without options net: 8139cp: fix a BUG triggered by changing mtu with network traffic net: phy: don't allow __set_phy_supported to add unsupported modes net: Prevent invalid access to skb->prev in __qdisc_drop_all rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices tcp: fix NULL ref in tail loss probe tun: forbid iface creation with rtnl ops neighbour: Avoid writing before skb->head in neigh_hh_output() ARM: OMAP2+: prm44xx: Fix section annotation on omap44xx_prm_enable_io_wakeup ARM: OMAP1: ams-delta: Fix possible use of uninitialized field sysv: return 'err' instead of 0 in __sysv_write_inode s390/cpum_cf: Reject request for sampling in event initialization hwmon: (ina2xx) Fix current value calculation ASoC: dapm: Recalculate audio map forcely when card instantiated hwmon: (w83795) temp4_type has writable permission Btrfs: send, fix infinite loop due to directory rename dependencies ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE exportfs: do not read dentry after free bpf: fix check of allowed specifiers in bpf_trace_printk USB: omap_udc: use devm_request_irq() USB: omap_udc: fix crashes on probe error and module removal USB: omap_udc: fix omap_udc_start() on 15xx machines USB: omap_udc: fix USB gadget functionality on Palm Tungsten E KVM: x86: fix empty-body warnings net: thunderx: fix NULL pointer dereference in nic_remove ixgbe: recognize 1000BaseLX SFP modules as 1Gbps net: hisilicon: remove unexpected free_netdev drm/ast: fixed reading monitor EDID not stable issue xen: xlate_mmu: add missing header to fix 'W=1' warning fscache: fix race between enablement and dropping of object fscache, cachefiles: remove redundant variable 'cache' ocfs2: fix deadlock caused by ocfs2_defrag_extent() hfs: do not free node before using hfsplus: do not free node before using debugobjects: avoid recursive calls with kmemleak ocfs2: fix potential use after free pstore: Convert console write to use ->write_buf ALSA: pcm: remove SNDRV_PCM_IOCTL1_INFO internal command KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0 x2APIC KVM: nVMX: mark vmcs12 pages dirty on L2 exit KVM: nVMX: Eliminate vmcs02 pool KVM: VMX: introduce alloc_loaded_vmcs KVM: VMX: make MSR bitmaps per-VCPU KVM/x86: Add IBPB support KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL KVM/x86: Remove indirect MSR op calls from SPEC_CTRL x86: reorganize SMAP handling in user space accesses x86: fix SMAP in 32-bit environments x86: Introduce __uaccess_begin_nospec() and uaccess_try_nospec x86/usercopy: Replace open coded stac/clac with __uaccess_{begin, end} x86/uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec x86/bugs, KVM: Support the combination of guest and host IBRS x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest KVM: SVM: Move spec control call after restore of GS x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL x86/speculation: Use synthetic bits for IBRS/IBPB/STIBP KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD bpf: support 8-byte metafield access bpf/verifier: Add spi variable to check_stack_write() bpf/verifier: Pass instruction index to check_mem_access() and check_xadd() bpf: Prevent memory disambiguation attack wil6210: missing length check in wmi_set_ie posix-timers: Sanitize overrun handling mm/hugetlb.c: don't call region_abort if region_chg fails hugetlbfs: fix offset overflow in hugetlbfs mmap hugetlbfs: check for pgoff value overflow hugetlbfs: fix bug in pgoff overflow checking swiotlb: clean up reporting sr: pass down correctly sized SCSI sense buffer mm: remove write/force parameters from __get_user_pages_locked() mm: remove write/force parameters from __get_user_pages_unlocked() mm/nommu.c: Switch __get_user_pages_unlocked() to use __get_user_pages() mm: replace get_user_pages_unlocked() write/force parameters with gup_flags mm: replace get_user_pages_locked() write/force parameters with gup_flags mm: replace get_vaddr_frames() write/force parameters with gup_flags mm: replace get_user_pages() write/force parameters with gup_flags mm: replace __access_remote_vm() write parameter with gup_flags mm: replace access_remote_vm() write parameter with gup_flags proc: don't use FOLL_FORCE for reading cmdline and environment proc: do not access cmdline nor environ from file-backed areas media: dvb-frontends: fix i2c access helpers for KASAN matroxfb: fix size of memcpy staging: speakup: Replace strncpy with memcpy rocker: fix rocker_tlv_put_* functions for KASAN selftests: Move networking/timestamping from Documentation Linux 4.4.168 Change-Id: I71a633f645fada4b473abcff660a9ada3103592b Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
| | * mm: replace get_user_pages() write/force parameters with gup_flagsLorenzo Stoakes2018-12-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit 768ae309a96103ed02eb1e111e838c87854d8b51 upstream. This removes the 'write' and 'force' from get_user_pages() and replaces them with 'gup_flags' to make the use of FOLL_FORCE explicit in callers as use of this flag can result in surprising behaviour (and hence bugs) within the mm subsystem. Signed-off-by: Lorenzo Stoakes <lstoakes@gmail.com> Acked-by: Christian König <christian.koenig@amd.com> Acked-by: Jesper Nilsson <jesper.nilsson@axis.com> Acked-by: Michal Hocko <mhocko@suse.com> Reviewed-by: Jan Kara <jack@suse.cz> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> [bwh: Backported to 4.4: - Drop changes in rapidio, vchiq, goldfish - Keep the "write" variable in amdgpu_ttm_tt_pin_userptr() as it's still needed - Also update calls from various other places that now use get_user_pages_remote() upstream, which were updated there by commit 9beae1ea8930 "mm: replace get_user_pages_remote() write/force ..." - Also update calls from hfi1 and ipath - Adjust context] Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| * | ANDROID: uid_sys_stats: Copy task_struct comm field to bigger bufferDmitry Shmidt2018-12-13
| | | | | | | | | | | | | | | | | | | | | | | | get_task_comm() currently checks if buf_size != TASK_COMM_LEN and fails even if sizeof(buf) > TASK_COMM_LEN. Change-Id: Icb3e9c172607534ef1db10baf5d626083db73498 Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
* | | Merge android-4.4.167 (ad9ce19) into msm-4.4Srinivasarao P2018-12-14
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-ad9ce19 Linux 4.4.167 mac80211: ignore NullFunc frames in the duplicate detection mac80211: fix reordering of buffered broadcast packets mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext mac80211: Clear beacon_int in ieee80211_do_stop mac80211_hwsim: Timer should be initialized before device registered kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var() tty: serial: 8250_mtk: always resume the device in probe. cifs: Fix separator when building path from dentry Staging: lustre: remove two build warnings xhci: Prevent U1/U2 link pm states if exit latency is too long SUNRPC: Fix leak of krb5p encode pages virtio/s390: fix race in ccw_io_helper() virtio/s390: avoid race on vcdev->config ALSA: pcm: Fix interval evaluation with openmin/max ALSA: pcm: Call snd_pcm_unlink() conditionally at closing ALSA: pcm: Fix starvation on down_write_nonblock() ALSA: hda: Add support for AMD Stoney Ridge ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c USB: check usb_get_extra_descriptor for proper size usb: appledisplay: Add 27" Apple Cinema Display usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device net: amd: add missing of_node_put() iommu/vt-d: Use memunmap to free memremap net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts net/mlx4: Fix UBSAN warning of signed integer overflow net/mlx4_core: Fix uninitialized variable compilation warning net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command qed: Fix reading wrong value in loop condition qed: Fix PTT leak in qed_drain() bnx2x: Assign unique DMAE channel number for FW DMAE transactions. batman-adv: Expand merged fragment buffer for full packet can: rcar_can: Fix erroneous registration iommu/ipmmu-vmsa: Fix crash on early domain free iommu/vt-d: Fix NULL pointer dereference in prq_event_thread() usb: gadget: dummy: fix nonsensical comparisons mm: mlock: avoid increase mm->locked_vm on mlock() when already mlock2(,MLOCK_ONFAULT) mm: cleancache: fix corruption on missed inode invalidation arc: [devboards] Add support of NFSv3 ACL ARC: change defconfig defaults to ARCv2 Btrfs: fix use-after-free when dumping free space btrfs: Always try all copies when reading extent buffers Input: elan_i2c - add support for ELAN0621 touchpad Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR Input: elan_i2c - add ELAN0620 to the ACPI table Input: matrix_keypad - check for errors from of_get_named_gpio() Input: xpad - quirk all PDP Xbox One gamepads leds: leds-gpio: Fix return value check in create_gpio_led() leds: turn off the LED and wait for completion on unregistering LED class device leds: call led_pwm_set() in leds-pwm to enforce default LED_OFF kgdboc: Fix warning with module build kgdboc: Fix restrict error scsi: csiostor: Avoid content leaks and casts ALSA: trident: Suppress gcc string warning scsi: scsi_devinfo: cleanly zero-pad devinfo strings drm/ast: Fix incorrect free on ioregs mips: fix mips_get_syscall_arg o32 check MIPS: ralink: Fix mt7620 nd_sd pinmux uprobes: Fix handle_swbp() vs. unregister() + register() race once more iser: set sector for ambiguous mr status errors kdb: use memmove instead of overlapping memcpy staging: rts5208: fix gcc-8 logic error warning scsi: bfa: convert to strlcpy/strlcat drm: gma500: fix logic error ip_tunnel: Fix name string concatenate in __ip_tunnel_create() kernfs: Replace strncpy with memcpy unifdef: use memcpy instead of strncpy kobject: Replace strncpy with memcpy disable stringop truncation warnings for now exec: avoid gcc-8 warning for get_task_comm Kbuild: suppress packed-not-aligned warning for default setting only misc: mic/scif: fix copy-paste error in scif_create_remote_lookup usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series USB: usb-storage: Add new IDs to ums-realtek btrfs: release metadata before running delayed refs dmaengine: at_hdmac: fix module unloading dmaengine: at_hdmac: fix memory leak in at_dma_xlate() ext2: fix potential use after free ALSA: sparc: Fix invalid snd_free_pages() at error path ALSA: control: Fix race between adding and removing a user element ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write ALSA: wss: Fix invalid snd_free_pages() at error path Btrfs: ensure path name is null terminated at btrfs_control_ioctl xtensa: fix coprocessor context offset definitions xtensa: enable coprocessors that are being flushed kvm: mmu: Fix race in emulated page table writes usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2 s390/qeth: fix length check in SNMP processing rapidio/rionet: do not free skb before reading its length Revert "wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()" media: em28xx: Fix use-after-free when disconnecting ANDROID: cuttlefish_defconfig: Enable VIRT_WIFI FROMGIT, BACKPORT: mac80211-next: rtnetlink wifi simulation device ANDROID: Move from clang r328903 to r346389b. UPSTREAM: binder: fix race that allows malicious free of live buffer Change-Id: If4e5a3a45f6f0b7de31f203c09fce5bae1466e49 Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| * | Merge 4.4.167 into android-4.4Greg Kroah-Hartman2018-12-13
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 4.4.167 media: em28xx: Fix use-after-free when disconnecting Revert "wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()" rapidio/rionet: do not free skb before reading its length s390/qeth: fix length check in SNMP processing usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2 kvm: mmu: Fix race in emulated page table writes xtensa: enable coprocessors that are being flushed xtensa: fix coprocessor context offset definitions Btrfs: ensure path name is null terminated at btrfs_control_ioctl ALSA: wss: Fix invalid snd_free_pages() at error path ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write ALSA: control: Fix race between adding and removing a user element ALSA: sparc: Fix invalid snd_free_pages() at error path ext2: fix potential use after free dmaengine: at_hdmac: fix memory leak in at_dma_xlate() dmaengine: at_hdmac: fix module unloading btrfs: release metadata before running delayed refs USB: usb-storage: Add new IDs to ums-realtek usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series misc: mic/scif: fix copy-paste error in scif_create_remote_lookup Kbuild: suppress packed-not-aligned warning for default setting only exec: avoid gcc-8 warning for get_task_comm disable stringop truncation warnings for now kobject: Replace strncpy with memcpy unifdef: use memcpy instead of strncpy kernfs: Replace strncpy with memcpy ip_tunnel: Fix name string concatenate in __ip_tunnel_create() drm: gma500: fix logic error scsi: bfa: convert to strlcpy/strlcat staging: rts5208: fix gcc-8 logic error warning kdb: use memmove instead of overlapping memcpy iser: set sector for ambiguous mr status errors uprobes: Fix handle_swbp() vs. unregister() + register() race once more MIPS: ralink: Fix mt7620 nd_sd pinmux mips: fix mips_get_syscall_arg o32 check drm/ast: Fix incorrect free on ioregs scsi: scsi_devinfo: cleanly zero-pad devinfo strings ALSA: trident: Suppress gcc string warning scsi: csiostor: Avoid content leaks and casts kgdboc: Fix restrict error kgdboc: Fix warning with module build leds: call led_pwm_set() in leds-pwm to enforce default LED_OFF leds: turn off the LED and wait for completion on unregistering LED class device leds: leds-gpio: Fix return value check in create_gpio_led() Input: xpad - quirk all PDP Xbox One gamepads Input: matrix_keypad - check for errors from of_get_named_gpio() Input: elan_i2c - add ELAN0620 to the ACPI table Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR Input: elan_i2c - add support for ELAN0621 touchpad btrfs: Always try all copies when reading extent buffers Btrfs: fix use-after-free when dumping free space ARC: change defconfig defaults to ARCv2 arc: [devboards] Add support of NFSv3 ACL mm: cleancache: fix corruption on missed inode invalidation mm: mlock: avoid increase mm->locked_vm on mlock() when already mlock2(,MLOCK_ONFAULT) usb: gadget: dummy: fix nonsensical comparisons iommu/vt-d: Fix NULL pointer dereference in prq_event_thread() iommu/ipmmu-vmsa: Fix crash on early domain free can: rcar_can: Fix erroneous registration batman-adv: Expand merged fragment buffer for full packet bnx2x: Assign unique DMAE channel number for FW DMAE transactions. qed: Fix PTT leak in qed_drain() qed: Fix reading wrong value in loop condition net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command net/mlx4_core: Fix uninitialized variable compilation warning net/mlx4: Fix UBSAN warning of signed integer overflow net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts iommu/vt-d: Use memunmap to free memremap net: amd: add missing of_node_put() usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device usb: appledisplay: Add 27" Apple Cinema Display USB: check usb_get_extra_descriptor for proper size ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c ALSA: hda: Add support for AMD Stoney Ridge ALSA: pcm: Fix starvation on down_write_nonblock() ALSA: pcm: Call snd_pcm_unlink() conditionally at closing ALSA: pcm: Fix interval evaluation with openmin/max virtio/s390: avoid race on vcdev->config virtio/s390: fix race in ccw_io_helper() SUNRPC: Fix leak of krb5p encode pages xhci: Prevent U1/U2 link pm states if exit latency is too long Staging: lustre: remove two build warnings cifs: Fix separator when building path from dentry tty: serial: 8250_mtk: always resume the device in probe. kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var() mac80211_hwsim: Timer should be initialized before device registered mac80211: Clear beacon_int in ieee80211_do_stop mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext mac80211: fix reordering of buffered broadcast packets mac80211: ignore NullFunc frames in the duplicate detection Linux 4.4.167 Change-Id: Ib893e2bb7e739960eed0710447033f7ab65dab4f Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
| | * misc: mic/scif: fix copy-paste error in scif_create_remote_lookupYueHaibing2018-12-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit 6484a677294aa5d08c0210f2f387ebb9be646115 upstream. gcc '-Wunused-but-set-variable' warning: drivers/misc/mic/scif/scif_rma.c: In function 'scif_create_remote_lookup': drivers/misc/mic/scif/scif_rma.c:373:25: warning: variable 'vmalloc_num_pages' set but not used [-Wunused-but-set-variable] 'vmalloc_num_pages' should be used to determine if the address is within the vmalloc range. Fixes: ba612aa8b487 ("misc: mic: SCIF memory registration and unregistration") Signed-off-by: YueHaibing <yuehaibing@huawei.com> Cc: stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
* | | Merge android-4.4.165 (f34ff9e) into msm-4.4Srinivasarao P2018-11-28
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-f34ff9e Linux 4.4.165 xhci: Fix USB3 NULL pointer dereference at logical disconnect. HID: uhid: forbid UHID_CREATE under KERNEL_DS or elevated privileges new helper: uaccess_kernel() ACPI / platform: Add SMB0001 HID to forbidden_id_list drivers/misc/sgi-gru: fix Spectre v1 vulnerability USB: misc: appledisplay: add 20" Apple Cinema Display misc: atmel-ssc: Fix section annotation on atmel_ssc_get_driver_data usb: quirks: Add delay-init quirk for Corsair K70 LUX RGB USB: quirks: Add no-lpm quirk for Raydium touchscreens usb: cdc-acm: add entry for Hiro (Conexant) modem uio: Fix an Oops on load media: v4l: event: Add subscription to list before calling "add" operation Revert "Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV" Revert "media: videobuf2-core: don't call memop 'finish' when queueing" btrfs: fix pinned underflow after transaction aborted gfs2: Put bitmap buffers in put_super SUNRPC: drop pointless static qualifier in xdr_get_next_encode_buffer() zram: close udev startup race condition as default groups lib/raid6: Fix arm64 test build hwmon: (ibmpowernv) Remove bogus __init annotations netfilter: xt_IDLETIMER: add sysfs filename checking routine netfilter: ipset: Correct rcu_dereference() call in ip_set_put_comment() s390/mm: Fix ERROR: "__node_distance" undefined! netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,net s390/vdso: add missing FORCE to build targets arm64: percpu: Initialize ret in the default case platform/x86: acerhdf: Add BIOS entry for Gateway LT31 v1.3307 clk: samsung: exynos5420: Enable PERIS clocks for suspend fs/exofs: fix potential memory leak in mount option parsing um: Give start_idle_thread() a return code hfsplus: prevent btree data loss on root split hfs: prevent btree data loss on root split reiserfs: propagate errors from fill_with_dentries() properly x86/build: Use cc-option to validate stack alignment parameter x86/build: Fix stack alignment for CLang x86/boot: #undef memcpy() et al in string.c x86/build: Specify stack alignment for clang x86/build: Use __cc-option for boot code compiler options kbuild: Add __cc-option macro x86/mm/kaslr: Use the _ASM_MUL macro for multiplication to work around Clang incompatibility crypto, x86: aesni - fix token pasting for clang x86/kbuild: Use cc-option to enable -falign-{jumps/loops} arm64: Disable asm-operand-width warning for clang kbuild: allow to use GCC toolchain not in Clang search path kbuild: set no-integrated-as before incl. arch Makefile kbuild: clang: disable unused variable warnings only when constant kbuild: clang: remove crufty HOSTCFLAGS kbuild: clang: fix build failures with sparse check kbuild: move cc-option and cc-disable-warning after incl. arch Makefile kbuild: Set KBUILD_CFLAGS before incl. arch Makefile kbuild: fix linker feature test macros when cross compiling with Clang efi/libstub/arm64: Set -fpie when building the EFI stub efi/libstub/arm64: Force 'hidden' visibility for section markers crypto: arm64/sha - avoid non-standard inline asm tricks kbuild: clang: Disable 'address-of-packed-member' warning modules: mark __inittest/__exittest as __maybe_unused kbuild: Add support to generate LLVM assembly files kbuild: use -Oz instead of -Os when using clang kbuild, LLVMLinux: Add -Werror to cc-option to support clang kbuild: drop -Wno-unknown-warning-option from clang options kbuild: fix asm-offset generation to work with clang kbuild: consolidate redundant sed script ASM offset generation kbuild: Consolidate header generation from ASM offset information kbuild: clang: add -no-integrated-as to KBUILD_[AC]FLAGS kbuild: Add better clang cross build support ipv6: Fix PMTU updates for UDP/raw sockets in presence of VRF tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths net-gro: reset skb->pkt_type in napi_reuse_skb() ip_tunnel: don't force DF when MTU is locked flow_dissector: do not dissect l4 ports for fragments Conflicts: arch/um/os-Linux/skas/process.c Change-Id: I6587d94332e204c068f7d44428a2ec1280bc3a7f Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| * | Merge 4.4.165 into android-4.4Greg Kroah-Hartman2018-11-27
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 4.4.165 flow_dissector: do not dissect l4 ports for fragments ip_tunnel: don't force DF when MTU is locked net-gro: reset skb->pkt_type in napi_reuse_skb() tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths ipv6: Fix PMTU updates for UDP/raw sockets in presence of VRF kbuild: Add better clang cross build support kbuild: clang: add -no-integrated-as to KBUILD_[AC]FLAGS kbuild: Consolidate header generation from ASM offset information kbuild: consolidate redundant sed script ASM offset generation kbuild: fix asm-offset generation to work with clang kbuild: drop -Wno-unknown-warning-option from clang options kbuild, LLVMLinux: Add -Werror to cc-option to support clang kbuild: use -Oz instead of -Os when using clang kbuild: Add support to generate LLVM assembly files modules: mark __inittest/__exittest as __maybe_unused kbuild: clang: Disable 'address-of-packed-member' warning crypto: arm64/sha - avoid non-standard inline asm tricks efi/libstub/arm64: Force 'hidden' visibility for section markers efi/libstub/arm64: Set -fpie when building the EFI stub kbuild: fix linker feature test macros when cross compiling with Clang kbuild: Set KBUILD_CFLAGS before incl. arch Makefile kbuild: move cc-option and cc-disable-warning after incl. arch Makefile kbuild: clang: fix build failures with sparse check kbuild: clang: remove crufty HOSTCFLAGS kbuild: clang: disable unused variable warnings only when constant kbuild: set no-integrated-as before incl. arch Makefile kbuild: allow to use GCC toolchain not in Clang search path arm64: Disable asm-operand-width warning for clang x86/kbuild: Use cc-option to enable -falign-{jumps/loops} crypto, x86: aesni - fix token pasting for clang x86/mm/kaslr: Use the _ASM_MUL macro for multiplication to work around Clang incompatibility kbuild: Add __cc-option macro x86/build: Use __cc-option for boot code compiler options x86/build: Specify stack alignment for clang x86/boot: #undef memcpy() et al in string.c x86/build: Fix stack alignment for CLang x86/build: Use cc-option to validate stack alignment parameter reiserfs: propagate errors from fill_with_dentries() properly hfs: prevent btree data loss on root split hfsplus: prevent btree data loss on root split um: Give start_idle_thread() a return code fs/exofs: fix potential memory leak in mount option parsing clk: samsung: exynos5420: Enable PERIS clocks for suspend platform/x86: acerhdf: Add BIOS entry for Gateway LT31 v1.3307 arm64: percpu: Initialize ret in the default case s390/vdso: add missing FORCE to build targets netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,net s390/mm: Fix ERROR: "__node_distance" undefined! netfilter: ipset: Correct rcu_dereference() call in ip_set_put_comment() netfilter: xt_IDLETIMER: add sysfs filename checking routine hwmon: (ibmpowernv) Remove bogus __init annotations lib/raid6: Fix arm64 test build zram: close udev startup race condition as default groups SUNRPC: drop pointless static qualifier in xdr_get_next_encode_buffer() gfs2: Put bitmap buffers in put_super btrfs: fix pinned underflow after transaction aborted Revert "media: videobuf2-core: don't call memop 'finish' when queueing" Revert "Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV" media: v4l: event: Add subscription to list before calling "add" operation uio: Fix an Oops on load usb: cdc-acm: add entry for Hiro (Conexant) modem USB: quirks: Add no-lpm quirk for Raydium touchscreens usb: quirks: Add delay-init quirk for Corsair K70 LUX RGB misc: atmel-ssc: Fix section annotation on atmel_ssc_get_driver_data USB: misc: appledisplay: add 20" Apple Cinema Display drivers/misc/sgi-gru: fix Spectre v1 vulnerability ACPI / platform: Add SMB0001 HID to forbidden_id_list new helper: uaccess_kernel() HID: uhid: forbid UHID_CREATE under KERNEL_DS or elevated privileges xhci: Fix USB3 NULL pointer dereference at logical disconnect. Linux 4.4.165 Change-Id: I5bd20327e0c1139c46f74e8d5916fa0530a307d3 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
| | * drivers/misc/sgi-gru: fix Spectre v1 vulnerabilityGustavo A. R. Silva2018-11-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit fee05f455ceb5c670cbe48e2f9454ebc4a388554 upstream. req.gid can be indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre variant 1 vulnerability. This issue was detected with the help of Smatch: vers/misc/sgi-gru/grukdump.c:200 gru_dump_chiplet_request() warn: potential spectre issue 'gru_base' [w] Fix this by sanitizing req.gid before calling macro GID_TO_GRU, which uses it to index gru_base. Notice that given that speculation windows are large, the policy is to kill the speculation on the first load and not worry if it can be completed with a dependent load/store [1]. [1] https://marc.info/?l=linux-kernel&m=152449131114778&w=2 Cc: stable@vger.kernel.org Signed-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| | * misc: atmel-ssc: Fix section annotation on atmel_ssc_get_driver_dataNathan Chancellor2018-11-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit 7c97301285b62a41d6bceded7d964085fc8cc50f upstream. After building the kernel with Clang, the following section mismatch warning appears: WARNING: vmlinux.o(.text+0x3bf19a6): Section mismatch in reference from the function ssc_probe() to the function .init.text:atmel_ssc_get_driver_data() The function ssc_probe() references the function __init atmel_ssc_get_driver_data(). This is often because ssc_probe lacks a __init annotation or the annotation of atmel_ssc_get_driver_data is wrong. Remove __init from atmel_ssc_get_driver_data to get rid of the mismatch. Signed-off-by: Nathan Chancellor <natechancellor@gmail.com> Cc: stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
* | | Merge android-4.4.164 (564ce1b) into msm-4.4Srinivasarao P2018-11-21
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-564ce1b Linux 4.4.164 drm/i915/hdmi: Add HDMI 2.0 audio clock recovery N values drm/dp_mst: Check if primary mstb is null drm/rockchip: Allow driver to be shutdown on reboot/kexec mm: migration: fix migration of huge PMD shared pages hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! configfs: replace strncpy with memcpy fuse: fix leaked notify reply rtc: hctosys: Add missing range error reporting sunrpc: correct the computation for page_ptr when truncating mount: Prevent MNT_DETACH from disconnecting locked mounts mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts mount: Retest MNT_LOCKED in do_umount ext4: fix buffer leak in __ext4_read_dirblock() on error path ext4: fix buffer leak in ext4_xattr_move_to_block() on error path ext4: release bs.bh before re-using in ext4_xattr_block_find() ext4: fix possible leak of sbi->s_group_desc_leak in error path ext4: avoid possible double brelse() in add_new_gdb() on error path ext4: fix missing cleanup if ext4_alloc_flex_bg_array() fails while resizing ext4: avoid buffer leak in ext4_orphan_add() after prior errors ext4: fix possible inode leak in the retry loop of ext4_resize_fs() ext4: avoid potential extra brelse in setup_new_flex_group_blocks() ext4: add missing brelse() add_new_gdb_meta_bg()'s error path ext4: add missing brelse() in set_flexbg_block_bitmap()'s error path ext4: add missing brelse() update_backups()'s error path clockevents/drivers/i8253: Add support for PIT shutdown quirk Btrfs: fix data corruption due to cloning of eof block arch/alpha, termios: implement BOTHER, IBSHIFT and termios2 termios, tty/tty_baudrate.c: fix buffer overrun mtd: docg3: don't set conflicting BCH_CONST_PARAMS option mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings ocfs2: fix a misuse a of brelse after failing ocfs2_check_dir_entry vhost/scsi: truncate T10 PI iov_iter to prot_bytes mach64: fix image corruption due to reading accelerator registers mach64: fix display corruption on big endian machines libceph: bump CEPH_MSG_MAX_DATA_LEN clk: s2mps11: Fix matching when built as module and DT node contains compatible xtensa: fix boot parameters address translation xtensa: make sure bFLT stack is 16 byte aligned xtensa: add NOTES section to the linker script MIPS: Loongson-3: Fix BRIDGE irq delivery problem MIPS: Loongson-3: Fix CPU UART irq delivery problem bna: ethtool: Avoid reading past end of buffer e1000: fix race condition between e1000_down() and e1000_watchdog e1000: avoid null pointer dereference on invalid stat type mm: do not bug_on on incorrect length in __mm_populate() fs, elf: make sure to page align bss in load_elf_library mm: refuse wrapped vm_brk requests binfmt_elf: fix calculations for bss padding mm, elf: handle vm_brk error fuse: set FR_SENT while locked fuse: fix blocked_waitq wakeup fuse: Fix use-after-free in fuse_dev_do_write() fuse: Fix use-after-free in fuse_dev_do_read() scsi: qla2xxx: Fix incorrect port speed being set for FC adapters cdrom: fix improper type cast, which can leat to information leak. 9p: clear dangling pointers in p9stat_free 9p locks: fix glock.client_id leak in do_lock media: tvp5150: fix width alignment during set_selection() sc16is7xx: Fix for multi-channel stall powerpc/boot: Ensure _zimage_start is a weak symbol MIPS: kexec: Mark CPU offline before disabling local IRQ media: pci: cx23885: handle adding to list failure drm/omap: fix memory barrier bug in DMM driver powerpc/nohash: fix undefined behaviour when testing page size support tty: check name length in tty_find_polling_driver() MD: fix invalid stored role for a disk - try2 btrfs: set max_extent_size properly Btrfs: fix null pointer dereference on compressed write path error btrfs: qgroup: Dirty all qgroups before rescan Btrfs: fix wrong dentries after fsync of file that got its parent replaced btrfs: make sure we create all new block groups btrfs: reset max_extent_size on clear in a bitmap btrfs: wait on caching when putting the bg cache btrfs: don't attempt to trim devices that don't support it btrfs: iterate all devices during trim, instead of fs_devices::alloc_list btrfs: locking: Add extra check in btrfs_init_new_buffer() to avoid deadlock btrfs: Handle owner mismatch gracefully when walking up tree soc/tegra: pmc: Fix child-node lookup arm64: dts: stratix10: Correct System Manager register size Cramfs: fix abad comparison when wrap-arounds occur ext4: avoid running out of journal credits when appending to an inline file media: em28xx: make v4l2-compliance happier by starting sequence on zero media: em28xx: fix input name for Terratec AV 350 media: em28xx: use a default format if TRY_FMT fails xen: fix xen_qlock_wait() kgdboc: Passing ekgdboc to command line causes panic TC: Set DMA masks for devices MIPS: OCTEON: fix out of bounds array access on CN68XX powerpc/msi: Fix compile error on mpc83xx dm ioctl: harden copy_params()'s copy_from_user() from malicious users lockd: fix access beyond unterminated strings in prints nfsd: Fix an Oops in free_session() NFSv4.1: Fix the r/wsize checking genirq: Fix race on spurious interrupt detection printk: Fix panic caused by passing log_buf_len to command line smb3: on kerberos mount if server doesn't specify auth type use krb5 smb3: do not attempt cifs operation in smb3 query info error path smb3: allow stats which track session and share reconnects to be reset w1: omap-hdq: fix missing bus unregister at removal iio: adc: at91: fix wrong channel number in triggered buffer mode iio: adc: at91: fix acking DRDY irq on simple conversions kbuild: fix kernel/bounds.c 'W=1' warning hugetlbfs: dirty pages as they are added to pagecache ima: fix showing large 'violations' or 'runtime_measurements_count' crypto: lrw - Fix out-of bounds access on counter overflow signal/GenWQE: Fix sending of SIGKILL PCI: Add Device IDs for Intel GPU "spurious interrupt" quirk HID: hiddev: fix potential Spectre v1 ext4: initialize retries variable in ext4_da_write_inline_data_begin() gfs2_meta: ->mount() can get NULL dev_name jbd2: fix use after free in jbd2_log_do_checkpoint() libnvdimm: Hold reference on parent while scheduling async init net/ipv4: defensive cipso option parsing xen: make xen_qlock_wait() nestable xen: fix race in xen_qlock_wait() tpm: Restore functionality to xen vtpm driver. xen-swiotlb: use actually allocated size on check physical continuous ALSA: hda: Check the non-cached stream buffers more explicitly dmaengine: dma-jz4780: Return error if not probed from DT signal: Always deliver the kernel's SIGKILL and SIGSTOP to a pid namespace init scsi: lpfc: Correct soft lockup when running mds diagnostics uio: ensure class is registered before devices driver/dma/ioat: Call del_timer_sync() without holding prep_lock usb: chipidea: Prevent unbalanced IRQ disable MD: fix invalid stored role for a disk ext4: fix argument checking in EXT4_IOC_MOVE_EXT tpm: suppress transmit cmd error logs when TPM 1.2 is disabled/deactivated scsi: megaraid_sas: fix a missing-check bug scsi: esp_scsi: Track residual for PIO transfers ath10k: schedule hardware restart if WMI command times out pinctrl: ssbi-gpio: Fix pm8xxx_pin_config_get() to be compliant pinctrl: spmi-mpp: Fix pmic_mpp_config_get() to be compliant pinctrl: qcom: spmi-mpp: Fix drive strength setting ACPI / LPSS: Add alternative ACPI HIDs for Cherry Trail DMA controllers kprobes: Return error if we fail to reuse kprobe instead of BUG_ON() pinctrl: qcom: spmi-mpp: Fix err handling of pmic_mpp_set_mux x86: boot: Fix EFI stub alignment Bluetooth: btbcm: Add entry for BCM4335C0 UART bluetooth mmc: sdhci-pci-o2micro: Add quirk for O2 Micro dev 0x8620 rev 0x01 perf tools: Cleanup trace-event-info 'tdata' leak perf tools: Free temporary 'sys' string in read_event_files() tun: Consistently configure generic netdev params via rtnetlink swim: fix cleanup on setup error ataflop: fix error handling during setup locking/lockdep: Fix debug_locks off performance problem selftests: ftrace: Add synthetic event syntax testcase net: qla3xxx: Remove overflowing shift statement x86/fpu: Remove second definition of fpu in __fpu__restore_sig() sparc: Fix single-pcr perf event counter management. x86/kconfig: Fall back to ticket spinlocks x86/corruption-check: Fix panic in memory_corruption_check() when boot option without value is provided ALSA: ca0106: Disable IZD on SB0570 DAC to fix audio pops ALSA: hda - Add mic quirk for the Lenovo G50-30 (17aa:3905) parisc: Fix map_pages() to not overwrite existing pte entries parisc: Fix address in HPMC IVA ipmi: Fix timer race with module unload pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges jffs2: free jffs2_sb_info through jffs2_kill_sb() hwmon: (pmbus) Fix page count auto-detection. bcache: fix miss key refill->end in writeback ANDROID: zram: set comp_len to PAGE_SIZE when page is huge Conflicts: drivers/hid/usbhid/hiddev.c Change-Id: I42874613e3b4102ef4ed051e1e8ed25b2d4ae7f2 Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| * | Merge 4.4.164 into android-4.4Greg Kroah-Hartman2018-11-21
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 4.4.164 bcache: fix miss key refill->end in writeback hwmon: (pmbus) Fix page count auto-detection. jffs2: free jffs2_sb_info through jffs2_kill_sb() pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges ipmi: Fix timer race with module unload parisc: Fix address in HPMC IVA parisc: Fix map_pages() to not overwrite existing pte entries ALSA: hda - Add mic quirk for the Lenovo G50-30 (17aa:3905) ALSA: ca0106: Disable IZD on SB0570 DAC to fix audio pops x86/corruption-check: Fix panic in memory_corruption_check() when boot option without value is provided x86/kconfig: Fall back to ticket spinlocks sparc: Fix single-pcr perf event counter management. x86/fpu: Remove second definition of fpu in __fpu__restore_sig() net: qla3xxx: Remove overflowing shift statement selftests: ftrace: Add synthetic event syntax testcase locking/lockdep: Fix debug_locks off performance problem ataflop: fix error handling during setup swim: fix cleanup on setup error tun: Consistently configure generic netdev params via rtnetlink perf tools: Free temporary 'sys' string in read_event_files() perf tools: Cleanup trace-event-info 'tdata' leak mmc: sdhci-pci-o2micro: Add quirk for O2 Micro dev 0x8620 rev 0x01 Bluetooth: btbcm: Add entry for BCM4335C0 UART bluetooth x86: boot: Fix EFI stub alignment pinctrl: qcom: spmi-mpp: Fix err handling of pmic_mpp_set_mux kprobes: Return error if we fail to reuse kprobe instead of BUG_ON() ACPI / LPSS: Add alternative ACPI HIDs for Cherry Trail DMA controllers pinctrl: qcom: spmi-mpp: Fix drive strength setting pinctrl: spmi-mpp: Fix pmic_mpp_config_get() to be compliant pinctrl: ssbi-gpio: Fix pm8xxx_pin_config_get() to be compliant ath10k: schedule hardware restart if WMI command times out scsi: esp_scsi: Track residual for PIO transfers scsi: megaraid_sas: fix a missing-check bug tpm: suppress transmit cmd error logs when TPM 1.2 is disabled/deactivated ext4: fix argument checking in EXT4_IOC_MOVE_EXT MD: fix invalid stored role for a disk usb: chipidea: Prevent unbalanced IRQ disable driver/dma/ioat: Call del_timer_sync() without holding prep_lock uio: ensure class is registered before devices scsi: lpfc: Correct soft lockup when running mds diagnostics signal: Always deliver the kernel's SIGKILL and SIGSTOP to a pid namespace init dmaengine: dma-jz4780: Return error if not probed from DT ALSA: hda: Check the non-cached stream buffers more explicitly xen-swiotlb: use actually allocated size on check physical continuous tpm: Restore functionality to xen vtpm driver. xen: fix race in xen_qlock_wait() xen: make xen_qlock_wait() nestable net/ipv4: defensive cipso option parsing libnvdimm: Hold reference on parent while scheduling async init jbd2: fix use after free in jbd2_log_do_checkpoint() gfs2_meta: ->mount() can get NULL dev_name ext4: initialize retries variable in ext4_da_write_inline_data_begin() HID: hiddev: fix potential Spectre v1 PCI: Add Device IDs for Intel GPU "spurious interrupt" quirk signal/GenWQE: Fix sending of SIGKILL crypto: lrw - Fix out-of bounds access on counter overflow ima: fix showing large 'violations' or 'runtime_measurements_count' hugetlbfs: dirty pages as they are added to pagecache kbuild: fix kernel/bounds.c 'W=1' warning iio: adc: at91: fix acking DRDY irq on simple conversions iio: adc: at91: fix wrong channel number in triggered buffer mode w1: omap-hdq: fix missing bus unregister at removal smb3: allow stats which track session and share reconnects to be reset smb3: do not attempt cifs operation in smb3 query info error path smb3: on kerberos mount if server doesn't specify auth type use krb5 printk: Fix panic caused by passing log_buf_len to command line genirq: Fix race on spurious interrupt detection NFSv4.1: Fix the r/wsize checking nfsd: Fix an Oops in free_session() lockd: fix access beyond unterminated strings in prints dm ioctl: harden copy_params()'s copy_from_user() from malicious users powerpc/msi: Fix compile error on mpc83xx MIPS: OCTEON: fix out of bounds array access on CN68XX TC: Set DMA masks for devices kgdboc: Passing ekgdboc to command line causes panic xen: fix xen_qlock_wait() media: em28xx: use a default format if TRY_FMT fails media: em28xx: fix input name for Terratec AV 350 media: em28xx: make v4l2-compliance happier by starting sequence on zero ext4: avoid running out of journal credits when appending to an inline file Cramfs: fix abad comparison when wrap-arounds occur arm64: dts: stratix10: Correct System Manager register size soc/tegra: pmc: Fix child-node lookup btrfs: Handle owner mismatch gracefully when walking up tree btrfs: locking: Add extra check in btrfs_init_new_buffer() to avoid deadlock btrfs: iterate all devices during trim, instead of fs_devices::alloc_list btrfs: don't attempt to trim devices that don't support it btrfs: wait on caching when putting the bg cache btrfs: reset max_extent_size on clear in a bitmap btrfs: make sure we create all new block groups Btrfs: fix wrong dentries after fsync of file that got its parent replaced btrfs: qgroup: Dirty all qgroups before rescan Btrfs: fix null pointer dereference on compressed write path error btrfs: set max_extent_size properly MD: fix invalid stored role for a disk - try2 tty: check name length in tty_find_polling_driver() powerpc/nohash: fix undefined behaviour when testing page size support drm/omap: fix memory barrier bug in DMM driver media: pci: cx23885: handle adding to list failure MIPS: kexec: Mark CPU offline before disabling local IRQ powerpc/boot: Ensure _zimage_start is a weak symbol sc16is7xx: Fix for multi-channel stall media: tvp5150: fix width alignment during set_selection() 9p locks: fix glock.client_id leak in do_lock 9p: clear dangling pointers in p9stat_free cdrom: fix improper type cast, which can leat to information leak. scsi: qla2xxx: Fix incorrect port speed being set for FC adapters fuse: Fix use-after-free in fuse_dev_do_read() fuse: Fix use-after-free in fuse_dev_do_write() fuse: fix blocked_waitq wakeup fuse: set FR_SENT while locked mm, elf: handle vm_brk error binfmt_elf: fix calculations for bss padding mm: refuse wrapped vm_brk requests fs, elf: make sure to page align bss in load_elf_library mm: do not bug_on on incorrect length in __mm_populate() e1000: avoid null pointer dereference on invalid stat type e1000: fix race condition between e1000_down() and e1000_watchdog bna: ethtool: Avoid reading past end of buffer MIPS: Loongson-3: Fix CPU UART irq delivery problem MIPS: Loongson-3: Fix BRIDGE irq delivery problem xtensa: add NOTES section to the linker script xtensa: make sure bFLT stack is 16 byte aligned xtensa: fix boot parameters address translation clk: s2mps11: Fix matching when built as module and DT node contains compatible libceph: bump CEPH_MSG_MAX_DATA_LEN mach64: fix display corruption on big endian machines mach64: fix image corruption due to reading accelerator registers vhost/scsi: truncate T10 PI iov_iter to prot_bytes ocfs2: fix a misuse a of brelse after failing ocfs2_check_dir_entry mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings mtd: docg3: don't set conflicting BCH_CONST_PARAMS option termios, tty/tty_baudrate.c: fix buffer overrun arch/alpha, termios: implement BOTHER, IBSHIFT and termios2 Btrfs: fix data corruption due to cloning of eof block clockevents/drivers/i8253: Add support for PIT shutdown quirk ext4: add missing brelse() update_backups()'s error path ext4: add missing brelse() in set_flexbg_block_bitmap()'s error path ext4: add missing brelse() add_new_gdb_meta_bg()'s error path ext4: avoid potential extra brelse in setup_new_flex_group_blocks() ext4: fix possible inode leak in the retry loop of ext4_resize_fs() ext4: avoid buffer leak in ext4_orphan_add() after prior errors ext4: fix missing cleanup if ext4_alloc_flex_bg_array() fails while resizing ext4: avoid possible double brelse() in add_new_gdb() on error path ext4: fix possible leak of sbi->s_group_desc_leak in error path ext4: release bs.bh before re-using in ext4_xattr_block_find() ext4: fix buffer leak in ext4_xattr_move_to_block() on error path ext4: fix buffer leak in __ext4_read_dirblock() on error path mount: Retest MNT_LOCKED in do_umount mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts mount: Prevent MNT_DETACH from disconnecting locked mounts sunrpc: correct the computation for page_ptr when truncating rtc: hctosys: Add missing range error reporting fuse: fix leaked notify reply configfs: replace strncpy with memcpy hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! mm: migration: fix migration of huge PMD shared pages drm/rockchip: Allow driver to be shutdown on reboot/kexec drm/dp_mst: Check if primary mstb is null drm/i915/hdmi: Add HDMI 2.0 audio clock recovery N values Linux 4.4.164 Change-Id: I55f9e5e33efd8c8ae2609d2393696c810f49f33e Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
| | * signal/GenWQE: Fix sending of SIGKILLEric W. Biederman2018-11-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit 0ab93e9c99f8208c0a1a7b7170c827936268c996 upstream. The genweq_add_file and genwqe_del_file by caching current without using reference counting embed the assumption that a file descriptor will never be passed from one process to another. It even embeds the assumption that the the thread that opened the file will be in existence when the process terminates. Neither of which are guaranteed to be true. Therefore replace caching the task_struct of the opener with pid of the openers thread group id. All the knowledge of the opener is used for is as the target of SIGKILL and a SIGKILL will kill the entire process group. Rename genwqe_force_sig to genwqe_terminate, remove it's unncessary signal argument, update it's ownly caller, and use kill_pid instead of force_sig. The work force_sig does in changing signal handling state is not relevant to SIGKILL sent as SEND_SIG_PRIV. The exact same processess will be killed just with less work, and less confusion. The work done by force_sig is really only needed for handling syncrhonous exceptions. It will still be possible to cause genwqe_device_remove to wait 8 seconds by passing a file descriptor to another process but the possible user after free is fixed. Fixes: eaf4722d4645 ("GenWQE Character device and DDCB queue") Cc: stable@vger.kernel.org Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Cc: Frank Haverkamp <haver@linux.vnet.ibm.com> Cc: Joerg-Stephan Vogt <jsvogt@de.ibm.com> Cc: Michael Jung <mijung@gmx.net> Cc: Michael Ruettger <michael@ibmra.de> Cc: Kleber Sacilotto de Souza <klebers@linux.vnet.ibm.com> Cc: Sebastian Ott <sebott@linux.vnet.ibm.com> Cc: Eberhard S. Amann <esa@linux.vnet.ibm.com> Cc: Gabriel Krisman Bertazi <krisman@linux.vnet.ibm.com> Cc: Guilherme G. Piccoli <gpiccoli@linux.vnet.ibm.com> Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
* | | drivers/misc: ignore minimum encryption level change for stream type 1Abhinav Kumar2018-10-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If the HDCP repeater is already authenticated with a stream type 1 ignore subsequent writes to change minimum encryption level. This shall ensure that there are no transitions to other encryption levels in the middle of a secure playback and thus avoid any visual artifacts in case of re-authentication. Change-Id: I8496c0a82101df4dcc5234e2afd5a2fe11a5eabd Signed-off-by: Abhinav Kumar <abhinavk@codeaurora.org>
* | | drivers/misc: attempt to resend RepeaterAuth_Stream_Manage messageAbhinav Kumar2018-10-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently when we timeout while waiting to receive an RepeaterAuth_Stream_Ready from the repeater when we transmit the RepeaterAuth_Stream_Manage message, we do not attempt to resend it with an incremented sequence number as required by the HDCP 2.2 specification. Add logic to resend the message till a timeout happens after exceeding certain number of retries. Signed-off-by: Abhinav Kumar <abhinavk@codeaurora.org> Change-Id: I4ab0f5f08784790cb04189ac68251178b2416197