summaryrefslogtreecommitdiff
path: root/drivers/net/wireless (follow)
Commit message (Collapse)AuthorAge
* Merge LA.UM.7.5.2.r1-03300-8x96.0 of ↵Davide Garberi2019-07-20
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://source.codeaurora.org/quic/la/kernel/msm-4.4 into lineage-16.0 313e787f28bb Merge "power: qpnp-smbcharger: Change ordering of EXTCON_USB_SPEED" into kernel.lnx.4.4.r37-rel dfa5b807ec2c Merge changes I0ab244e6,I05a4aa96 into kernel.lnx.4.4.r37-rel c900b4827149 msm: ipa: Fix array out of bound and use after NULL check b562b057dd2a msm: ipa: Fix pointer checked for NULL may be used 216dfe7e7a14 usb: phy-msm-susb-qmp: Add checks to check clk_enabled 2c0a97a53f77 power: qpnp-smbcharger: Change ordering of EXTCON_USB_SPEED 56d12bfe26c3 Merge commit '09d42880fd9f4d04317f030021b85323b8f8b9b9' into HEAD 09d42880fd9f Merge "msm: camera_v2: isp: update the frame drop during error case" 19d79e95f10c Merge "msm:camera: add trace log support for VFE events" 3ae0451881ca Merge "msm: camera_v2: Remove sysfs bind/unbind files" 45b4ac208b7b msm:camera: add trace log support for VFE events 5974bd4025ea msm: camera_v2: Fix page fault issue in camera ISP ed8c0918eeb1 Merge "icnss: Reduce the shutdown timeout from 50sec to 15sec" 7e4d8780224c Merge "drm/msm/dsi-staging: Add range check in debugfs_dump_info_read" 978400398a92 icnss: Reduce the shutdown timeout from 50sec to 15sec 4e08c8cbacd4 msm: camera_v2: Remove sysfs bind/unbind files 79a8f215703e Merge "ASoC: sdm660_cdc: Set speaker amplifier enable bit" c0f636f83226 Merge "cnss2: Update board data file name format" bd48b0a101e8 Merge "msm: kgsl: Add missing check for snapshot IB dump" 2f5e49a21882 Merge "defconfig: msm: Disable EXT2 and EXT3 FS configs for MSM8998" 46ece1ae20ad Merge "sched/walt: Fix the memory leak of idle task load pointers" 78540133736a Merge "soc: qcom: smem: validate fields of shared structures" 196d97abd323 Merge "Merge android-4.4.183 (94fd428) into msm-4.4" fad4d2e83739 Merge "msm: kgsl: Change data type for GPU ib vote" 54d23a97a07e Merge "drivers: thermal: Use FCAP scm call instead of DMAX in LMH DCVSh" 1379d11803dd msm: kgsl: Add missing check for snapshot IB dump 2c8f4699fdd0 defconfig: msm: Disable EXT2 and EXT3 FS configs for MSM8998 fcc47ec62ae1 soc: qcom: smem: validate fields of shared structures 7151def9c713 ASoC: sdm660_cdc: Set speaker amplifier enable bit f395d5810f27 sched/walt: Fix the memory leak of idle task load pointers 03f0af3c211e drivers: thermal: Use FCAP scm call instead of DMAX in LMH DCVSh f6ee0c2bb45d drivers: thermal: Use FCAP scm call instead of DMAX in KTM cb7df67908b0 msm: kgsl: Change data type for GPU ib vote c94369b4c1fc cnss2: print firmware cap info in stats 9a1c2880320b Merge android-4.4.183 (94fd428) into msm-4.4 94fd42809f7d Merge 4.4.183 into android-4.4 308743255040 Linux 4.4.183 df7ba8162ca1 Abort file_remove_privs() for non-reg. files 8f6345a11caa coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping 3692bc31c1ff Revert "crypto: crypto4xx - properly set IV after de- and encrypt" 39c7c903c63d scsi: libsas: delete sas port if expander discover failed a272035ea1bf scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route() af8cd6101bf5 net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs b25c62cc16e0 KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list 7ef8d778cf3e ia64: fix build errors by exporting paddr_to_nid() 432030b25b86 configfs: Fix use-after-free when accessing sd->s_dentry d5a18c8609f3 i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr be1b9df5bba1 net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() 0bb6c295e463 gpio: fix gpio-adp5588 build errors dd961efe8dee perf/ring_buffer: Add ordering to rb->nest increment 8abd8a9a975e perf/ring_buffer: Fix exposing a temporarily decreased data_head 3e74b3f05abf x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor f4678b7808e7 mISDN: make sure device name is NUL terminated e2f9c0f73454 sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg 753aa7556089 neigh: fix use-after-free read in pneigh_get_next 709d8771fab7 lapb: fixed leak of control-blocks. 1777c35e8d47 ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero 6f057abd08d1 be2net: Fix number of Rx queues used for flow hashing 7139a9f6246d ax25: fix inconsistent lock state in ax25_destroy_timer f1a5c6b083bc USB: serial: option: add Telit 0x1260 and 0x1261 compositions a67d65958e2a USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode b8ee804bba8f USB: serial: pl2303: add Allied Telesis VT-Kit3 f14747c88170 USB: usb-storage: Add new ID to ums-realtek 038c192699a9 USB: Fix chipmunk-like voice when using Logitech C270 for recording audio. 8f6b0e59d2a0 drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() 6e0c7e73232f drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read ce391e4cdef8 KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION a1b9c6b4cba0 KVM: x86/pmu: do not mask the value that is written to fixed PMUs 7caddacf863f usbnet: ipheth: fix racing condition f80a35fcb9e9 scsi: bnx2fc: fix incorrect cast to u64 on shift operation da51a322f197 scsi: lpfc: add check for loss of ndlp when sending RRQ 3a2ff1088c2a Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var 1f8233ca3a48 ASoC: cs42xx8: Add regcache mask dirty 91f1fc1ae409 cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() 8b47af927e2e bcache: fix stack corruption by PRECEDING_KEY() a2aabf288bf7 i2c: acorn: fix i2c warning d774bd27b4f5 ptrace: restore smp_rmb() in __ptrace_may_access() 5aff00ee839a signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO 0b871fc866eb fs/ocfs2: fix race in ocfs2_dentry_attach_lock() c05fed507582 mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node be499b84c3bd libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk d7a18814fff9 ALSA: seq: Cover unsubscribe_port() in list_mutex 4282a0b1db65 Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR connections" cd23996afa14 futex: Fix futex lock the wrong page 38fbd5c2d572 ARM: exynos: Fix undefined instruction during Exynos5422 resume 5767587907fd pwm: Fix deadlock warning when removing PWM device 113a78a0a537 ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa 78184953a2ed pwm: tiehrpwm: Update shadow register for disabling PWMs d24e22cde8b3 dmaengine: idma64: Use actual device for DMA transfers 533171620cd5 gpio: gpio-omap: add check for off wake capable gpios 3b4652ba9d78 PCI: xilinx: Check for __get_free_pages() failure c869210e0ac6 video: imsttfb: fix potential NULL pointer dereferences 5c7fbc5f6a7d video: hgafb: fix potential NULL pointer dereference bea8fa863ce9 PCI: rcar: Fix a potential NULL pointer dereference 76208df36d7a PCI: rpadlpar: Fix leaked device_node references in add/remove paths 100468652e5a ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA 927d2be77e6c ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA 8aee025af280 ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA b49501f51371 clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288 4270dc6a7a79 soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher 845676341c2d platform/chrome: cros_ec_proto: check for NULL transfer function c7155e51cf85 x86/PCI: Fix PCI IRQ routing table memory leak 198a54f07f51 nfsd: allow fh_want_write to be called twice e6779b264d69 fuse: retrieve: cap requested size to negotiated max_write 742cb74bf108 nvmem: core: fix read buffer in place 750c55e69cca ALSA: hda - Register irq handler after the chip initialization 09ad374f23ce iommu/vt-d: Set intel_iommu_gfx_mapped correctly 9e4ed17b9416 f2fs: fix to do sanity check on valid block count of segment 534ef922376e f2fs: fix to avoid panic in do_recover_data() 90a238a8a2d2 ntp: Allow TAI-UTC offset to be set to zero 25be7d51a012 drm/bridge: adv7511: Fix low refresh rate selection 8fdebdd06c4b perf/x86/intel: Allow PEBS multi-entry in watermark mode dee1ba919ca2 mfd: twl6040: Fix device init errors for ACCCTL register 4110c4188853 mfd: intel-lpss: Set the device in reset state when init 1bef19130b5b kernel/sys.c: prctl: fix false positive in validate_prctl_map() 937fa1624a1f mm/cma_debug.c: fix the break condition in cma_maxchunk_get() fceb0be41836 mm/cma.c: fix crash on CMA allocation if bitmap allocation fails 9c8d4d77e3aa hugetlbfs: on restore reserve error path retain subpool reservation d8129a5d7a9d ipc: prevent lockup on alloc_msg and free_msg 50c0db539937 sysctl: return -EINVAL if val violates minmax 8b9241b052a2 fs/fat/file.c: issue flush after the writeback of FAT 335e20ca9562 Merge "soc: qcom: glink_spi_xprt: Sanitize input for short cmd" abc2a59bfdb9 Merge "soc: qcom: hab: add error handling when dt item is missing" 9998d2e52dd4 mm: add /proc/pid/smaps_rollup a2165163680e Merge "msm: ais: sensor: actuator: fix out of bound read for bivcm region params" 7ec9476039c1 soc: qcom: hab: add error handling when dt item is missing 7967865bb4c4 msm: ais: sensor: actuator: fix out of bound read for bivcm region params 14f9c777669f Merge "Merge android-4.4.182 (9c4ab57) into msm-4.4" eee21eb4a635 ANDROID: kernel: cgroup: cpuset: Clear cpus_requested for empty buf f1adac4c222b ANDROID: kernel: cgroup: cpuset: Add missing allocation of cpus_requested in alloc_trial_cpuset 291c54b284a4 i2c: virtio: reallocate memory for each msg buffer ca64572d5459 Merge changes into msm-4.4 a32f2cd75906 Merge android-4.4.182 (9c4ab57) into msm-4.4 2ae4cde5790c Merge "i2c: refine the driver of i2c virtualization" 9c4ab5729952 Merge 4.4.182 into android-4.4 33790f2eda73 Linux 4.4.182 f938ae0ce5ef tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() e757d052f3b8 tcp: add tcp_min_snd_mss sysctl ad472d3a9483 tcp: tcp_fragment() should apply sane memory limits 4657ee0fe05e tcp: limit payload size of sacked skbs 17c66e9e49a1 Merge "msm: vidc: add additional check to avoid out of bound access" 4e933027e684 Merge "Merge android-4.4.181 (bd858d7) into msm-4.4" be5afd934314 i2c: refine the driver of i2c virtualization f1057f82fa62 msm: vidc: add additional check to avoid out of bound access c176a066dfd3 diag: dci: Correct out of bounds check in processing dci pkt rsp cc47c2c325b9 Merge "msm: adsprpc: maintain local copy of rpra offloaded to DSP" 1f3eb68e71cd msm: adsprpc: maintain local copy of rpra offloaded to DSP a50f44266d21 Merge "diag: Prevent out-of-bound access while processing userspace data" c658076e45e0 Merge "ASoC: msm: Add support for AVS version check" f328b4d28d25 Merge "arm: dts: msm: Add avs-version dt property for 8996" 5dbfa1533af8 diag: Prevent out-of-bound access while processing userspace data eb0322ea9b07 arm: dts: msm: Add avs-version dt property for 8996 5ef154a26639 Merge android-4.4.181 (bd858d7) into msm-4.4 7caeb5cb7c4f soc: qcom: glink_spi_xprt: Sanitize input for short cmd 17fd8dbacb92 Merge "soc: qcom: hab: add missing variable declaration" 1cc130f95ec7 UPSTREAM: binder: check for overflow when alloc for security context 784672577648 BACKPORT: binder: fix race between munmap() and direct reclaim 849ecbea5548 soc: qcom: hab: add missing variable declaration bd858d730975 Merge 4.4.181 into android-4.4 0434b31d567e Merge "dwc3-msm: Fix dwc3_drd_state_string for undefined state" 411c38c969a7 Merge "usb: dwc3-msm: Ensure hardware is reset during role change" 8dce56fa0ccf Merge "usb: dwc3-msm: add enum for drd_states to remove otg_state usage" d7b7345c3a5d Linux 4.4.181 f1d7eebd9d67 ethtool: check the return value of get_regs_len 647f72b0d75c ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled c9696a8f3e64 fuse: Add FOPEN_STREAM to use stream_open() 3bf0c459615a fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock 0f5fab865ae9 drm/gma500/cdv: Check vbt config bits when detecting lvds panels e087f7519114 genwqe: Prevent an integer overflow in the ioctl 59565e894518 MIPS: pistachio: Build uImage.gz by default 8061c23f5378 fuse: fallocate: fix return with locked inode cf30c1953467 parisc: Use implicit space register selection for loading the coherence index of I/O pdirs f0d1e74c8120 rcu: locking and unlocking need to always be at least barriers 44657dbba7c4 pktgen: do not sleep with the thread lock held. eded0b11c7a3 net: rds: fix memory leak in rds_ib_flush_mr_pool 54dd5e352cf7 net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query cc475966e5f7 neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit e5c6de6694ed ethtool: fix potential userspace buffer overflow 8795708bc939 media: uvcvideo: Fix uvc_alloc_entity() allocation alignment 2b13a9580ef9 usb: gadget: fix request length error for isoc transfer 8b15aae1baa2 net: cdc_ncm: GetNtbFormat endian fix 613b4bc1951d Revert "x86/build: Move _etext to actual end of .text" 6ad730b83178 userfaultfd: don't pin the user memory in userfaultfd_file_create() 4e06554db5e5 brcmfmac: add subtype check for event handling in data path 993b68aa3ef7 brcmfmac: add length checks in scheduled scan result handler 35bcfbad5d94 brcmfmac: fix incorrect event channel deduction 8c12de962667 brcmfmac: revise handling events in receive path 5f4688a15c24 brcmfmac: screening firmware event packet 6da841e9ae87 brcmfmac: Add length checks on firmware events c55a2cffa5ca bnx2x: disable GSO where gso_size is too big for hardware a33b6d4c8bc7 net: create skb_gso_validate_mac_len() c53c1a821d62 binder: replace "%p" with "%pK" 5280efe442b2 binder: Replace "%p" with "%pK" for stable 336c16621785 CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM 360f8fe46f74 kernel/signal.c: trace_signal_deliver when signal_group_exit 7a47d1873120 memcg: make it work on sparse non-0-node systems 5db0a9c3cc52 tty: max310x: Fix external crystal register setup e498745310d0 tty: serial: msm_serial: Fix XON/XOFF 986adddb9d8f drm/nouveau/i2c: Disable i2c bus access after ->fini() bf8f6b43c2e7 ALSA: hda/realtek - Set default power save node to 0 494447b90d6d Btrfs: fix race updating log root item during fsync af34de02a6a7 scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) e85d002556ea scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove 8282730a0afa media: smsusb: better handle optional alignment 0bce1ea89712 media: usb: siano: Fix false-positive "uninitialized variable" warning b1782be70e1e media: usb: siano: Fix general protection fault in smsusb d52c0ffb383f USB: rio500: fix memory leak in close after disconnect b92be99a0c8b USB: rio500: refuse more than one device at a time ee9d750e9ac8 USB: Add LPM quirk for Surface Dock GigE adapter 30e66d7d2fb9 USB: sisusbvga: fix oops in error path of sisusb_probe 018b7ea9ca24 USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor f5e1ec93b208 usb: xhci: avoid null pointer deref when bos field is NULL 017e6726a4fb xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() ec70e2c130d6 include/linux/bitops.h: sanitize rotate primitives fbbc4fe02a31 sparc64: Fix regression in non-hypervisor TLB flush xcall 5bce46edeb72 tipc: fix modprobe tipc failed after switch order of device registration -v2 416d252ba926 Revert "tipc: fix modprobe tipc failed after switch order of device registration" f1613a9e1bdc xen/pciback: Don't disable PCI_COMMAND on PCI device reset. 383687e15cd0 crypto: vmx - ghash: do nosimd fallback manually 61ba8e9f51b3 net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value 1d33a3ebd945 bnxt_en: Fix aggregation buffer leak under OOM condition. 7d423301240b tipc: Avoid copying bytes beyond the supplied data 332bff9d9a08 usbnet: fix kernel crash after disconnect 16ffb5f7c335 net: stmmac: fix reset gpio free missing 4f9c73aa2930 net-gro: fix use-after-free read in napi_gro_frags() 5cbaa135a0e1 llc: fix skb leak in llc_build_and_send_ui_pkt() 36a7222071d1 ipv6: Consider sk_bound_dev_if when binding a raw socket to an address 9fbf1ac57c7a ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM 0984cb76d294 spi: Fix zero length xfer bug 854415f37aae spi: rspi: Fix sequencer reset during initialization c927451887c1 spi : spi-topcliff-pch: Fix to handle empty DMA buffers 445c07409179 scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices 3a5d11332896 media: saa7146: avoid high stack usage with clang 5a96cf10dc5c media: go7007: avoid clang frame overflow warning with KASAN 0e9f0805eeea media: m88ds3103: serialize reset messages in m88ds3103_set_frontend 9effa38946b6 scsi: qla4xxx: avoid freeing unallocated dma memory 95f0bb0a6c83 usb: core: Add PM runtime calls to usb_hcd_platform_shutdown 1909121a6192 rcutorture: Fix cleanup path for invalid torture_type strings 1081d04a0443 tty: ipwireless: fix missing checks for ioremap c05b2ed7bc1b virtio_console: initialize vtermno value for ports 348ec7b9a1c1 media: wl128x: prevent two potential buffer overflows 557ae685914b spi: tegra114: reset controller on probe 5e75d5e2cd0c cxgb3/l2t: Fix undefined behaviour dc2a8861fdb8 ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put 971e4a273242 ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put 5db3c5adf44a HID: core: move Usage Page concatenation to Main item cb7872f12835 chardev: add additional check for minor range overlap 5680f59f0f15 x86/ia32: Fix ia32_restore_sigcontext() AC leak 94032b2e05c9 arm64: cpu_ops: fix a leaked reference by adding missing of_node_put 04f45a555ec3 scsi: ufs: Avoid configuring regulator with undefined voltage range 60bcfed2ad60 scsi: ufs: Fix regulator load and icc-level configuration 0a597d2badef brcmfmac: fix race during disconnect when USB completion is in progress f95ab00ab455 brcmfmac: convert dev_init_lock mutex to completion db74ef82ca8b b43: shut up clang -Wuninitialized variable warning 951fbf92381a brcmfmac: fix missing checks for kmemdup 1d3ee4d7fc6a rtlwifi: fix a potential NULL pointer dereference 6d7b052d8466 iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data e98ef6767e41 iio: hmc5843: fix potential NULL pointer dereferences a86d06179423 iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion 4400dcd69478 x86/build: Keep local relocations with ld.lld 75ffb58460e3 cpufreq: pmac32: fix possible object reference leak 3d041608fd4b cpufreq/pasemi: fix possible object reference leak 4d02f33a4f42 cpufreq: ppc_cbe: fix possible object reference leak 6be923556aad s390: cio: fix cio_irb declaration 65e3cb04a5a2 extcon: arizona: Disable mic detect if running when driver is removed db7eb206560c PM / core: Propagate dev->power.wakeup_path when no callbacks 066a286679b4 mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support 6a783be705ba mmc: sdhci-of-esdhc: add erratum eSDHC5 support 8b0e6af16ae6 mmc_spi: add a status check for spi_sync_locked a30e90a8eb3a scsi: libsas: Do discovery on empty PHY to update PHY info 915defac2a9a hwmon: (f71805f) Use request_muxed_region for Super-IO accesses 0eb8a476ffc5 hwmon: (pc87427) Use request_muxed_region for Super-IO accesses 79deb6abd1f5 hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses 92b4d16997c4 hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses e3e58378c678 hwmon: (vt1211) Use request_muxed_region for Super-IO accesses 488920af3bb3 RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure 2ff310e6dae2 i40e: don't allow changes to HW VLAN stripping on active port VLANs bc791e819503 x86/irq/64: Limit IST stack overflow check to #DB stack 3557f0857767 USB: core: Don't unbind interfaces following device reset failure 6f5e198878fb sched/core: Handle overflow in cpu_shares_write_u64 9812286a63a1 sched/core: Check quota and period overflow at usec to nsec conversion 9d4961a415ed powerpc/numa: improve control of topology updates 82077215ed25 media: pvrusb2: Prevent a buffer overflow ca865598abf1 media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() a8e0739d465e audit: fix a memory leak bug ff3038fe657d media: ov2659: make S_FMT succeed even if requested format doesn't match 2d97a3abcf2f media: au0828: stop video streaming only when last user stops 115ccd9ca776 media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper 1433d7a0937b media: coda: clear error return value before picture run 5cadb7ae715f dmaengine: at_xdmac: remove BUG_ON macro in tasklet af8b5d7d9477 pinctrl: pistachio: fix leaked of_node references 74dd38a5a447 HID: logitech-hidpp: use RAP instead of FAP to get the protocol version 9bffc62051a9 mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions ae6b1f761180 x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() b059848e119f smpboot: Place the __percpu annotation correctly 28d8827a09b0 x86/build: Move _etext to actual end of .text d3eb2caf6d41 bcache: avoid clang -Wunintialized warning 7bf3463abc95 bcache: add failure check to run_cache_set() for journal replay d4547049bb7f bcache: fix failure in journal relplay 5789884b98ab bcache: return error immediately in bch_journal_replay() 50d25ca802f5 net: cw1200: fix a NULL pointer dereference af2fb022b390 mwifiex: prevent an array overflow 4b24af093631 ASoC: fsl_sai: Update is_slave_mode with correct value c1045350a6c4 mac80211/cfg80211: update bss channel on channel switch a3c50ef9fd43 dmaengine: pl330: _stop: clear interrupt status 958848a1d97c w1: fix the resume command API e4163587c4ee rtc: 88pm860x: prevent use-after-free on device remove a898d150956b brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() 5e1a879d9ab3 spi: pxa2xx: fix SCR (divisor) calculation 3d521a6fba45 ASoC: imx: fix fiq dependencies af283aba93bb powerpc/boot: Fix missing check of lseek() return value dba032038c95 mmc: core: Verify SD bus width 333e8303d6e0 cxgb4: Fix error path in cxgb4_init_module 6948c6bc17d6 gfs2: Fix lru_count going negative 635c71d11234 tools include: Adopt linux/bits.h ed2faf464d9b perf tools: No need to include bitops.h in util.h a1f254dc06f9 at76c50x-usb: Don't register led_trigger if usb_register_driver failed f5e4337e4a9c ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit e39af96f4dc1 media: vivid: use vfree() instead of kfree() for dev->bitmap_cap a04e71a0dbc6 media: cpia2: Fix use-after-free in cpia2_exit 28eeeb86046e fbdev: fix WARNING in __alloc_pages_nodemask bug bf8474c64846 hugetlb: use same fault hash key for shared and private mappings 6bc153907900 fbdev: fix divide error in fb_var_to_videomode 5c9a20390c01 btrfs: sysfs: don't leak memory when failing add fsid 0fa88718cdc5 Btrfs: fix race between ranged fsync and writeback of adjacent ranges 2f5ac0bd2ef7 gfs2: Fix sign extension bug in gfs2_update_stats 8aae5e98fec2 crypto: vmx - CTR: always increment IV as quadword 582bb52e4803 Revert "scsi: sd: Keep disk read-only when re-reading partition" bd020b331706 bio: fix improper use of smp_mb__before_atomic() 603212bdc59c KVM: x86: fix return value for reserved EFER 75d63b131b73 ext4: do not delete unlinked inode from orphan list on failed truncate 31943685dd49 fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough 7d64186e7910 btrfs: Honour FITRIM range constraints during free space trim 57e84e4c073d md/raid: raid5 preserve the writeback action after the parity check 9013f4870848 Revert "Don't jump to compute_result state from check_result state" 0c57364fa0f4 perf bench numa: Add define for RUSAGE_THREAD if not present 66ee750cfdd7 ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour fc0208b3428d power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG dd37fa44dffa KVM: arm/arm64: Ensure vcpu target is unset on reset failure fe4f461ba517 xfrm4: Fix uninitialized memory read in _decode_session4 cd0848733f25 vti4: ipip tunnel deregistration fixes. 8fd94b65d207 xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module 86040d722b29 xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink daea41651d43 dm delay: fix a crash when invalid device is specified 566004721c90 PCI: Mark Atheros AR9462 to avoid bus reset 0dc2ad06ddad fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting 4673eae95b53 fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display c996722f7fff fbdev: sm712fb: fix support for 1024x768-16 mode ebfadb510e3c fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM c92bde52742c fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA 0d5cd17ce037 fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F ca5ce8db7f23 fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75 6c2fb5beecba fbdev: sm712fb: fix brightness control on reboot, don't set SR30 dbc86a927d66 perf intel-pt: Fix sample timestamp wrt non-taken branches eedc9a210f9f perf intel-pt: Fix improved sample timestamp f5da0aeca525 perf intel-pt: Fix instructions sampling rate a5b2e4b6ac21 memory: tegra: Fix integer overflow on tick value calculation 11988047b39a tracing: Fix partial reading of trace event's id file a7929c94860e ceph: flush dirty inodes before proceeding with remount 3c99cd905ba9 iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114 40857ab73988 fuse: honor RLIMIT_FSIZE in fuse_file_fallocate 73724958d129 fuse: fix writepages on 32bit 12060f4740ca clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider 4676a07add08 NFS4: Fix v4.0 client state corruption when mount e8623e7a8f4b media: ov6650: Fix sensor possibly not detected on probe dffc9e5ffae5 cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() b8ab0c4effb8 of: fix clang -Wunsequenced for be32_to_cpu() 2a98d346396a intel_th: msu: Fix single mode with IOMMU bc065776c31e md: add mddev->pers to avoid potential NULL pointer dereference ade291d2230a stm class: Fix channel free in stm output free path 65d14634b694 tipc: fix modprobe tipc failed after switch order of device registration ff69bb4be643 tipc: switch order of device registration to fix a crash 2ff783f3e05e ppp: deflate: Fix possible crash in deflate_init dd20e0c039fe net/mlx4_core: Change the error print to info print b2f72a431142 net: avoid weird emergency message 70064f7ea100 KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes 5e9bc16ff49f ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug 98529ecd313b ext4: zero out the unused memory region in the extent tree block 9ff6372e5a6b fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount bfce20eaf18e writeback: synchronize sync(2) against cgroup writeback membership switches cd042379c6ad crypto: arm/aes-neonbs - don't access already-freed walk.iv b70e97ae5d8e crypto: salsa20 - don't access already-freed walk.iv 6dc48d059646 crypto: chacha20poly1305 - set cra_name correctly b82055365307 crypto: gcm - fix incompatibility between "gcm" and "gcm_base" de087dd9f5c6 crypto: gcm - Fix error return code in crypto_gcm_create_common() 064d0c5a9ae6 ipmi:ssif: compare block number correctly for multi-part return messages bef039b2419e bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() 5651075a1ce3 bcache: fix a race between cache register and cacheset unregister 686e4352e3d8 Btrfs: do not start a transaction at iterate_extent_inodes() b268b6e501ed ext4: fix ext4_show_options for file systems w/o journal f3b9c26f191b ext4: actually request zeroing of inode table after grow e5100e7fa78e tty/vt: fix write/write race in ioctl(KDSKBSENT) handler 592a36c59f4c mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L e3a74fbc42ca ocfs2: fix ocfs2 read inode data panic in ocfs2_iget b614485b6b93 mm/mincore.c: make mincore() more conservative 80cc516ed783 ASoC: RT5677-SPI: Disable 16Bit SPI Transfers e6bf706cee3f ASoC: max98090: Fix restore of DAPM Muxes 2a8188c68e0a ALSA: hda/realtek - EAPD turn on later 1bbb08c8ab6a ALSA: hda/hdmi - Consider eld_valid when reporting jack event 2d8956305ae8 ALSA: usb-audio: Fix a memory leak bug b1c1888ad6c9 crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest() 2ee7c2310cd0 crypto: crct10dif-generic - fix use via crypto_shash_digest() 2ee0dd38a0a0 crypto: vmx - fix copy-paste error in CTR mode f7dee0816e5d ARM: exynos: Fix a leaked reference by adding missing of_node_put ce814dc7e811 x86/speculation/mds: Improve CPU buffer clear documentation 4d68e2bf3834 x86/speculation/mds: Revert CPU buffer clear on double fault exit b1d850962510 ASoC: msm: Add support for AVS version check fbf98df8d02a cnss2: Update board data file name format 5e073ffd6668 drm/msm/dsi-staging: Add range check in debugfs_dump_info_read 9600b86489f9 dwc3-msm: Fix dwc3_drd_state_string for undefined state cc96e0915225 usb: dwc3-msm: Ensure hardware is reset during role change 02d74bda3466 usb: dwc3-msm: add enum for drd_states to remove otg_state usage e4e5a975f4ae Merge remote-tracking branch 'origin/upstream-f2fs-stable-linux-4.4.y' into android-4.4 2d812ba62ee4 f2fs: link f2fs quota ops for sysfile 6dc3fb0ba854 fs: sdcardfs: Add missing option to show_options * Excluded commits: 8be3b55c4cc7 msm: camera_v2: isp: update the frame drop during error case 28e17c1f6505 msm: camera_v2: isp: handle frame drop due to scheduling latency Change-Id: Ib67f22a311625da7dd130d2491ef9e035b1db54f Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
| * Merge "cnss2: Update board data file name format"Linux Build Service Account2019-07-01
| |\
| | * cnss2: Update board data file name formatNirav Shah2019-06-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If board ID is larger than 0xFF (e.g. 0xABCD), the proper BDF file name format should be updated to bdwlanAB.bCD or bdwlanAB.eCD based on corresponding BDF types. Add snapshot of data file name format change from msm-4.14 commit 48129d773e327f7131116bb8bb8d7b91cc235e90. Change-Id: Ib076d16d2faeb5ee1e9006e215a9ed4d279c35e9 Signed-off-by: Nirav Shah <nnshah@codeaurora.org>
| * | cnss2: print firmware cap info in statsRajasekaran Kalidoss2019-06-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | Show firmware capability information i.e Chip ID Chip family, SOC Info, Board id,Firmware Version, and Firmware Build Timestamp in /d/cnss/stats. Change-Id: I1d2f2e4a88960e690aabe610182d33cf8035f6c1 Signed-off-by: Rajasekaran Kalidoss <rkalidos@codeaurora.org>
| * | Merge android-4.4.181 (bd858d7) into msm-4.4Srinivasarao P2019-06-12
| |\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-bd858d7 Linux 4.4.181 ethtool: check the return value of get_regs_len ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled fuse: Add FOPEN_STREAM to use stream_open() fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock drm/gma500/cdv: Check vbt config bits when detecting lvds panels genwqe: Prevent an integer overflow in the ioctl MIPS: pistachio: Build uImage.gz by default fuse: fallocate: fix return with locked inode parisc: Use implicit space register selection for loading the coherence index of I/O pdirs rcu: locking and unlocking need to always be at least barriers pktgen: do not sleep with the thread lock held. net: rds: fix memory leak in rds_ib_flush_mr_pool net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit ethtool: fix potential userspace buffer overflow media: uvcvideo: Fix uvc_alloc_entity() allocation alignment usb: gadget: fix request length error for isoc transfer net: cdc_ncm: GetNtbFormat endian fix Revert "x86/build: Move _etext to actual end of .text" userfaultfd: don't pin the user memory in userfaultfd_file_create() brcmfmac: add subtype check for event handling in data path brcmfmac: add length checks in scheduled scan result handler brcmfmac: fix incorrect event channel deduction brcmfmac: revise handling events in receive path brcmfmac: screening firmware event packet brcmfmac: Add length checks on firmware events bnx2x: disable GSO where gso_size is too big for hardware net: create skb_gso_validate_mac_len() binder: replace "%p" with "%pK" binder: Replace "%p" with "%pK" for stable CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM kernel/signal.c: trace_signal_deliver when signal_group_exit memcg: make it work on sparse non-0-node systems tty: max310x: Fix external crystal register setup tty: serial: msm_serial: Fix XON/XOFF drm/nouveau/i2c: Disable i2c bus access after ->fini() ALSA: hda/realtek - Set default power save node to 0 Btrfs: fix race updating log root item during fsync scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove media: smsusb: better handle optional alignment media: usb: siano: Fix false-positive "uninitialized variable" warning media: usb: siano: Fix general protection fault in smsusb USB: rio500: fix memory leak in close after disconnect USB: rio500: refuse more than one device at a time USB: Add LPM quirk for Surface Dock GigE adapter USB: sisusbvga: fix oops in error path of sisusb_probe USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor usb: xhci: avoid null pointer deref when bos field is NULL xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() include/linux/bitops.h: sanitize rotate primitives sparc64: Fix regression in non-hypervisor TLB flush xcall tipc: fix modprobe tipc failed after switch order of device registration -v2 Revert "tipc: fix modprobe tipc failed after switch order of device registration" xen/pciback: Don't disable PCI_COMMAND on PCI device reset. crypto: vmx - ghash: do nosimd fallback manually net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value bnxt_en: Fix aggregation buffer leak under OOM condition. tipc: Avoid copying bytes beyond the supplied data usbnet: fix kernel crash after disconnect net: stmmac: fix reset gpio free missing net-gro: fix use-after-free read in napi_gro_frags() llc: fix skb leak in llc_build_and_send_ui_pkt() ipv6: Consider sk_bound_dev_if when binding a raw socket to an address ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM spi: Fix zero length xfer bug spi: rspi: Fix sequencer reset during initialization spi : spi-topcliff-pch: Fix to handle empty DMA buffers scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices media: saa7146: avoid high stack usage with clang media: go7007: avoid clang frame overflow warning with KASAN media: m88ds3103: serialize reset messages in m88ds3103_set_frontend scsi: qla4xxx: avoid freeing unallocated dma memory usb: core: Add PM runtime calls to usb_hcd_platform_shutdown rcutorture: Fix cleanup path for invalid torture_type strings tty: ipwireless: fix missing checks for ioremap virtio_console: initialize vtermno value for ports media: wl128x: prevent two potential buffer overflows spi: tegra114: reset controller on probe cxgb3/l2t: Fix undefined behaviour ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put HID: core: move Usage Page concatenation to Main item chardev: add additional check for minor range overlap x86/ia32: Fix ia32_restore_sigcontext() AC leak arm64: cpu_ops: fix a leaked reference by adding missing of_node_put scsi: ufs: Avoid configuring regulator with undefined voltage range scsi: ufs: Fix regulator load and icc-level configuration brcmfmac: fix race during disconnect when USB completion is in progress brcmfmac: convert dev_init_lock mutex to completion b43: shut up clang -Wuninitialized variable warning brcmfmac: fix missing checks for kmemdup rtlwifi: fix a potential NULL pointer dereference iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data iio: hmc5843: fix potential NULL pointer dereferences iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion x86/build: Keep local relocations with ld.lld cpufreq: pmac32: fix possible object reference leak cpufreq/pasemi: fix possible object reference leak cpufreq: ppc_cbe: fix possible object reference leak s390: cio: fix cio_irb declaration extcon: arizona: Disable mic detect if running when driver is removed PM / core: Propagate dev->power.wakeup_path when no callbacks mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support mmc: sdhci-of-esdhc: add erratum eSDHC5 support mmc_spi: add a status check for spi_sync_locked scsi: libsas: Do discovery on empty PHY to update PHY info hwmon: (f71805f) Use request_muxed_region for Super-IO accesses hwmon: (pc87427) Use request_muxed_region for Super-IO accesses hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses hwmon: (vt1211) Use request_muxed_region for Super-IO accesses RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure i40e: don't allow changes to HW VLAN stripping on active port VLANs x86/irq/64: Limit IST stack overflow check to #DB stack USB: core: Don't unbind interfaces following device reset failure sched/core: Handle overflow in cpu_shares_write_u64 sched/core: Check quota and period overflow at usec to nsec conversion powerpc/numa: improve control of topology updates media: pvrusb2: Prevent a buffer overflow media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() audit: fix a memory leak bug media: ov2659: make S_FMT succeed even if requested format doesn't match media: au0828: stop video streaming only when last user stops media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper media: coda: clear error return value before picture run dmaengine: at_xdmac: remove BUG_ON macro in tasklet pinctrl: pistachio: fix leaked of_node references HID: logitech-hidpp: use RAP instead of FAP to get the protocol version mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() smpboot: Place the __percpu annotation correctly x86/build: Move _etext to actual end of .text bcache: avoid clang -Wunintialized warning bcache: add failure check to run_cache_set() for journal replay bcache: fix failure in journal relplay bcache: return error immediately in bch_journal_replay() net: cw1200: fix a NULL pointer dereference mwifiex: prevent an array overflow ASoC: fsl_sai: Update is_slave_mode with correct value mac80211/cfg80211: update bss channel on channel switch dmaengine: pl330: _stop: clear interrupt status w1: fix the resume command API rtc: 88pm860x: prevent use-after-free on device remove brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() spi: pxa2xx: fix SCR (divisor) calculation ASoC: imx: fix fiq dependencies powerpc/boot: Fix missing check of lseek() return value mmc: core: Verify SD bus width cxgb4: Fix error path in cxgb4_init_module gfs2: Fix lru_count going negative tools include: Adopt linux/bits.h perf tools: No need to include bitops.h in util.h at76c50x-usb: Don't register led_trigger if usb_register_driver failed ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit media: vivid: use vfree() instead of kfree() for dev->bitmap_cap media: cpia2: Fix use-after-free in cpia2_exit fbdev: fix WARNING in __alloc_pages_nodemask bug hugetlb: use same fault hash key for shared and private mappings fbdev: fix divide error in fb_var_to_videomode btrfs: sysfs: don't leak memory when failing add fsid Btrfs: fix race between ranged fsync and writeback of adjacent ranges gfs2: Fix sign extension bug in gfs2_update_stats crypto: vmx - CTR: always increment IV as quadword Revert "scsi: sd: Keep disk read-only when re-reading partition" bio: fix improper use of smp_mb__before_atomic() KVM: x86: fix return value for reserved EFER ext4: do not delete unlinked inode from orphan list on failed truncate fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough btrfs: Honour FITRIM range constraints during free space trim md/raid: raid5 preserve the writeback action after the parity check Revert "Don't jump to compute_result state from check_result state" perf bench numa: Add define for RUSAGE_THREAD if not present ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG KVM: arm/arm64: Ensure vcpu target is unset on reset failure xfrm4: Fix uninitialized memory read in _decode_session4 vti4: ipip tunnel deregistration fixes. xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink dm delay: fix a crash when invalid device is specified PCI: Mark Atheros AR9462 to avoid bus reset fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display fbdev: sm712fb: fix support for 1024x768-16 mode fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75 fbdev: sm712fb: fix brightness control on reboot, don't set SR30 perf intel-pt: Fix sample timestamp wrt non-taken branches perf intel-pt: Fix improved sample timestamp perf intel-pt: Fix instructions sampling rate memory: tegra: Fix integer overflow on tick value calculation tracing: Fix partial reading of trace event's id file ceph: flush dirty inodes before proceeding with remount iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114 fuse: honor RLIMIT_FSIZE in fuse_file_fallocate fuse: fix writepages on 32bit clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider NFS4: Fix v4.0 client state corruption when mount media: ov6650: Fix sensor possibly not detected on probe cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() of: fix clang -Wunsequenced for be32_to_cpu() intel_th: msu: Fix single mode with IOMMU md: add mddev->pers to avoid potential NULL pointer dereference stm class: Fix channel free in stm output free path tipc: fix modprobe tipc failed after switch order of device registration tipc: switch order of device registration to fix a crash ppp: deflate: Fix possible crash in deflate_init net/mlx4_core: Change the error print to info print net: avoid weird emergency message KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug ext4: zero out the unused memory region in the extent tree block fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount writeback: synchronize sync(2) against cgroup writeback membership switches crypto: arm/aes-neonbs - don't access already-freed walk.iv crypto: salsa20 - don't access already-freed walk.iv crypto: chacha20poly1305 - set cra_name correctly crypto: gcm - fix incompatibility between "gcm" and "gcm_base" crypto: gcm - Fix error return code in crypto_gcm_create_common() ipmi:ssif: compare block number correctly for multi-part return messages bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() bcache: fix a race between cache register and cacheset unregister Btrfs: do not start a transaction at iterate_extent_inodes() ext4: fix ext4_show_options for file systems w/o journal ext4: actually request zeroing of inode table after grow tty/vt: fix write/write race in ioctl(KDSKBSENT) handler mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L ocfs2: fix ocfs2 read inode data panic in ocfs2_iget mm/mincore.c: make mincore() more conservative ASoC: RT5677-SPI: Disable 16Bit SPI Transfers ASoC: max98090: Fix restore of DAPM Muxes ALSA: hda/realtek - EAPD turn on later ALSA: hda/hdmi - Consider eld_valid when reporting jack event ALSA: usb-audio: Fix a memory leak bug crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest() crypto: crct10dif-generic - fix use via crypto_shash_digest() crypto: vmx - fix copy-paste error in CTR mode ARM: exynos: Fix a leaked reference by adding missing of_node_put x86/speculation/mds: Improve CPU buffer clear documentation x86/speculation/mds: Revert CPU buffer clear on double fault exit f2fs: link f2fs quota ops for sysfile fs: sdcardfs: Add missing option to show_options Conflicts: drivers/scsi/sd.c drivers/scsi/ufs/ufshcd.c Change-Id: If6679c7cc8c3fee323c749ac359353fbebfd12d9 Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| | * \ Merge 4.4.181 into android-4.4Greg Kroah-Hartman2019-06-11
| | |\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 4.4.181 x86/speculation/mds: Revert CPU buffer clear on double fault exit x86/speculation/mds: Improve CPU buffer clear documentation ARM: exynos: Fix a leaked reference by adding missing of_node_put crypto: vmx - fix copy-paste error in CTR mode crypto: crct10dif-generic - fix use via crypto_shash_digest() crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest() ALSA: usb-audio: Fix a memory leak bug ALSA: hda/hdmi - Consider eld_valid when reporting jack event ALSA: hda/realtek - EAPD turn on later ASoC: max98090: Fix restore of DAPM Muxes ASoC: RT5677-SPI: Disable 16Bit SPI Transfers mm/mincore.c: make mincore() more conservative ocfs2: fix ocfs2 read inode data panic in ocfs2_iget mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L tty/vt: fix write/write race in ioctl(KDSKBSENT) handler ext4: actually request zeroing of inode table after grow ext4: fix ext4_show_options for file systems w/o journal Btrfs: do not start a transaction at iterate_extent_inodes() bcache: fix a race between cache register and cacheset unregister bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() ipmi:ssif: compare block number correctly for multi-part return messages crypto: gcm - Fix error return code in crypto_gcm_create_common() crypto: gcm - fix incompatibility between "gcm" and "gcm_base" crypto: chacha20poly1305 - set cra_name correctly crypto: salsa20 - don't access already-freed walk.iv crypto: arm/aes-neonbs - don't access already-freed walk.iv writeback: synchronize sync(2) against cgroup writeback membership switches fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount ext4: zero out the unused memory region in the extent tree block ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes net: avoid weird emergency message net/mlx4_core: Change the error print to info print ppp: deflate: Fix possible crash in deflate_init tipc: switch order of device registration to fix a crash tipc: fix modprobe tipc failed after switch order of device registration stm class: Fix channel free in stm output free path md: add mddev->pers to avoid potential NULL pointer dereference intel_th: msu: Fix single mode with IOMMU of: fix clang -Wunsequenced for be32_to_cpu() cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() media: ov6650: Fix sensor possibly not detected on probe NFS4: Fix v4.0 client state corruption when mount clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider fuse: fix writepages on 32bit fuse: honor RLIMIT_FSIZE in fuse_file_fallocate iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114 ceph: flush dirty inodes before proceeding with remount tracing: Fix partial reading of trace event's id file memory: tegra: Fix integer overflow on tick value calculation perf intel-pt: Fix instructions sampling rate perf intel-pt: Fix improved sample timestamp perf intel-pt: Fix sample timestamp wrt non-taken branches fbdev: sm712fb: fix brightness control on reboot, don't set SR30 fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75 fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM fbdev: sm712fb: fix support for 1024x768-16 mode fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting PCI: Mark Atheros AR9462 to avoid bus reset dm delay: fix a crash when invalid device is specified xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module vti4: ipip tunnel deregistration fixes. xfrm4: Fix uninitialized memory read in _decode_session4 KVM: arm/arm64: Ensure vcpu target is unset on reset failure power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour perf bench numa: Add define for RUSAGE_THREAD if not present Revert "Don't jump to compute_result state from check_result state" md/raid: raid5 preserve the writeback action after the parity check btrfs: Honour FITRIM range constraints during free space trim fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough ext4: do not delete unlinked inode from orphan list on failed truncate KVM: x86: fix return value for reserved EFER bio: fix improper use of smp_mb__before_atomic() Revert "scsi: sd: Keep disk read-only when re-reading partition" crypto: vmx - CTR: always increment IV as quadword gfs2: Fix sign extension bug in gfs2_update_stats Btrfs: fix race between ranged fsync and writeback of adjacent ranges btrfs: sysfs: don't leak memory when failing add fsid fbdev: fix divide error in fb_var_to_videomode hugetlb: use same fault hash key for shared and private mappings fbdev: fix WARNING in __alloc_pages_nodemask bug media: cpia2: Fix use-after-free in cpia2_exit media: vivid: use vfree() instead of kfree() for dev->bitmap_cap ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit at76c50x-usb: Don't register led_trigger if usb_register_driver failed perf tools: No need to include bitops.h in util.h tools include: Adopt linux/bits.h gfs2: Fix lru_count going negative cxgb4: Fix error path in cxgb4_init_module mmc: core: Verify SD bus width powerpc/boot: Fix missing check of lseek() return value ASoC: imx: fix fiq dependencies spi: pxa2xx: fix SCR (divisor) calculation brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() rtc: 88pm860x: prevent use-after-free on device remove w1: fix the resume command API dmaengine: pl330: _stop: clear interrupt status mac80211/cfg80211: update bss channel on channel switch ASoC: fsl_sai: Update is_slave_mode with correct value mwifiex: prevent an array overflow net: cw1200: fix a NULL pointer dereference bcache: return error immediately in bch_journal_replay() bcache: fix failure in journal relplay bcache: add failure check to run_cache_set() for journal replay bcache: avoid clang -Wunintialized warning x86/build: Move _etext to actual end of .text smpboot: Place the __percpu annotation correctly x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions HID: logitech-hidpp: use RAP instead of FAP to get the protocol version pinctrl: pistachio: fix leaked of_node references dmaengine: at_xdmac: remove BUG_ON macro in tasklet media: coda: clear error return value before picture run media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper media: au0828: stop video streaming only when last user stops media: ov2659: make S_FMT succeed even if requested format doesn't match audit: fix a memory leak bug media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() media: pvrusb2: Prevent a buffer overflow powerpc/numa: improve control of topology updates sched/core: Check quota and period overflow at usec to nsec conversion sched/core: Handle overflow in cpu_shares_write_u64 USB: core: Don't unbind interfaces following device reset failure x86/irq/64: Limit IST stack overflow check to #DB stack i40e: don't allow changes to HW VLAN stripping on active port VLANs RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure hwmon: (vt1211) Use request_muxed_region for Super-IO accesses hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses hwmon: (pc87427) Use request_muxed_region for Super-IO accesses hwmon: (f71805f) Use request_muxed_region for Super-IO accesses scsi: libsas: Do discovery on empty PHY to update PHY info mmc_spi: add a status check for spi_sync_locked mmc: sdhci-of-esdhc: add erratum eSDHC5 support mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support PM / core: Propagate dev->power.wakeup_path when no callbacks extcon: arizona: Disable mic detect if running when driver is removed s390: cio: fix cio_irb declaration cpufreq: ppc_cbe: fix possible object reference leak cpufreq/pasemi: fix possible object reference leak cpufreq: pmac32: fix possible object reference leak x86/build: Keep local relocations with ld.lld iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion iio: hmc5843: fix potential NULL pointer dereferences iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data rtlwifi: fix a potential NULL pointer dereference brcmfmac: fix missing checks for kmemdup b43: shut up clang -Wuninitialized variable warning brcmfmac: convert dev_init_lock mutex to completion brcmfmac: fix race during disconnect when USB completion is in progress scsi: ufs: Fix regulator load and icc-level configuration scsi: ufs: Avoid configuring regulator with undefined voltage range arm64: cpu_ops: fix a leaked reference by adding missing of_node_put x86/ia32: Fix ia32_restore_sigcontext() AC leak chardev: add additional check for minor range overlap HID: core: move Usage Page concatenation to Main item ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put cxgb3/l2t: Fix undefined behaviour spi: tegra114: reset controller on probe media: wl128x: prevent two potential buffer overflows virtio_console: initialize vtermno value for ports tty: ipwireless: fix missing checks for ioremap rcutorture: Fix cleanup path for invalid torture_type strings usb: core: Add PM runtime calls to usb_hcd_platform_shutdown scsi: qla4xxx: avoid freeing unallocated dma memory media: m88ds3103: serialize reset messages in m88ds3103_set_frontend media: go7007: avoid clang frame overflow warning with KASAN media: saa7146: avoid high stack usage with clang scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices spi : spi-topcliff-pch: Fix to handle empty DMA buffers spi: rspi: Fix sequencer reset during initialization spi: Fix zero length xfer bug ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM ipv6: Consider sk_bound_dev_if when binding a raw socket to an address llc: fix skb leak in llc_build_and_send_ui_pkt() net-gro: fix use-after-free read in napi_gro_frags() net: stmmac: fix reset gpio free missing usbnet: fix kernel crash after disconnect tipc: Avoid copying bytes beyond the supplied data bnxt_en: Fix aggregation buffer leak under OOM condition. net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value crypto: vmx - ghash: do nosimd fallback manually xen/pciback: Don't disable PCI_COMMAND on PCI device reset. Revert "tipc: fix modprobe tipc failed after switch order of device registration" tipc: fix modprobe tipc failed after switch order of device registration -v2 sparc64: Fix regression in non-hypervisor TLB flush xcall include/linux/bitops.h: sanitize rotate primitives xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() usb: xhci: avoid null pointer deref when bos field is NULL USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor USB: sisusbvga: fix oops in error path of sisusb_probe USB: Add LPM quirk for Surface Dock GigE adapter USB: rio500: refuse more than one device at a time USB: rio500: fix memory leak in close after disconnect media: usb: siano: Fix general protection fault in smsusb media: usb: siano: Fix false-positive "uninitialized variable" warning media: smsusb: better handle optional alignment scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) Btrfs: fix race updating log root item during fsync ALSA: hda/realtek - Set default power save node to 0 drm/nouveau/i2c: Disable i2c bus access after ->fini() tty: serial: msm_serial: Fix XON/XOFF tty: max310x: Fix external crystal register setup memcg: make it work on sparse non-0-node systems kernel/signal.c: trace_signal_deliver when signal_group_exit CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM binder: Replace "%p" with "%pK" for stable binder: replace "%p" with "%pK" net: create skb_gso_validate_mac_len() bnx2x: disable GSO where gso_size is too big for hardware brcmfmac: Add length checks on firmware events brcmfmac: screening firmware event packet brcmfmac: revise handling events in receive path brcmfmac: fix incorrect event channel deduction brcmfmac: add length checks in scheduled scan result handler brcmfmac: add subtype check for event handling in data path userfaultfd: don't pin the user memory in userfaultfd_file_create() Revert "x86/build: Move _etext to actual end of .text" net: cdc_ncm: GetNtbFormat endian fix usb: gadget: fix request length error for isoc transfer media: uvcvideo: Fix uvc_alloc_entity() allocation alignment ethtool: fix potential userspace buffer overflow neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query net: rds: fix memory leak in rds_ib_flush_mr_pool pktgen: do not sleep with the thread lock held. rcu: locking and unlocking need to always be at least barriers parisc: Use implicit space register selection for loading the coherence index of I/O pdirs fuse: fallocate: fix return with locked inode MIPS: pistachio: Build uImage.gz by default genwqe: Prevent an integer overflow in the ioctl drm/gma500/cdv: Check vbt config bits when detecting lvds panels fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock fuse: Add FOPEN_STREAM to use stream_open() ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled ethtool: check the return value of get_regs_len Linux 4.4.181 Change-Id: Ibadc58ab76330698ff36ffdc0ca8c9d52ce36f9e Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
| | | * | brcmfmac: add subtype check for event handling in data pathArend van Spriel2019-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit a4176ec356c73a46c07c181c6d04039fafa34a9f upstream. For USB there is no separate channel being used to pass events from firmware to the host driver and as such are passed over the data path. In order to detect mock event messages an additional check is needed on event subtype. This check is added conditionally using unlikely() keyword. Reviewed-by: Hante Meuleman <hante.meuleman@broadcom.com> Reviewed-by: Pieter-Paul Giesberts <pieter-paul.giesberts@broadcom.com> Reviewed-by: Franky Lin <franky.lin@broadcom.com> Signed-off-by: Arend van Spriel <arend.vanspriel@broadcom.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> [bwh: Backported to 4.4: adjust filenames] Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| | | * | brcmfmac: add length checks in scheduled scan result handlerArend Van Spriel2019-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit 4835f37e3bafc138f8bfa3cbed2920dd56fed283 upstream. Assure the event data buffer is long enough to hold the array of netinfo items and that SSID length does not exceed the maximum of 32 characters as per 802.11 spec. Reviewed-by: Hante Meuleman <hante.meuleman@broadcom.com> Reviewed-by: Pieter-Paul Giesberts <pieter-paul.giesberts@broadcom.com> Reviewed-by: Franky Lin <franky.lin@broadcom.com> Signed-off-by: Arend van Spriel <arend.vanspriel@broadcom.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> [bwh: Backported to 4.4: - Move the assignment to "data" along with the assignment to "netinfo_start" that depends on it - Adjust filename, context, indentation] Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| | | * | brcmfmac: fix incorrect event channel deductionGavin Li2019-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit 8e290cecdd0178f3d4cf7d463c51dc7e462843b4 upstream. brcmf_sdio_fromevntchan() was being called on the the data frame rather than the software header, causing some frames to be mischaracterized as on the event channel rather than the data channel. This fixes a major performance regression (due to dropped packets). With this patch the download speed jumped from 1Mbit/s back up to 40MBit/s due to the sheer amount of packets being incorrectly processed. Fixes: c56caa9db8ab ("brcmfmac: screening firmware event packet") Signed-off-by: Gavin Li <git@thegavinli.com> Acked-by: Arend van Spriel <arend.vanspriel@broadcom.com> [kvalo@codeaurora.org: improve commit logs based on email discussion] Signed-off-by: Kalle Valo <kvalo@codeaurora.org> [bwh: Backported to 4.4: adjust filename] Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| | | * | brcmfmac: revise handling events in receive pathArend van Spriel2019-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit 9c349892ccc90c6de2baaa69cc78449f58082273 upstream. Move event handling out of brcmf_netif_rx() avoiding the need to pass a flag. This flag is only ever true for USB hosts as other interface use separate brcmf_rx_event() function. Reviewed-by: Hante Meuleman <hante.meuleman@broadcom.com> Reviewed-by: Pieter-Paul Giesberts <pieter-paul.giesberts@broadcom.com> Reviewed-by: Franky Lin <franky.lin@broadcom.com> Signed-off-by: Arend van Spriel <arend@broadcom.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> [bwh: Backported to 4.4 as dependency of commit a4176ec356c7 "brcmfmac: add subtype check for event handling in data path" - Adjust filenames, context] Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| | | * | brcmfmac: screening firmware event packetFranky Lin2019-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit c56caa9db8abbbfb9e31325e0897705aa897db37 upstream. Firmware uses asynchronized events as a communication method to the host. The event packets are marked as ETH_P_LINK_CTL protocol type. For SDIO and PCIe bus, this kind of packets are delivered through virtual event channel not data channel. This patch adds a screening logic to make sure the event handler only processes the events coming from the correct channel. Reviewed-by: Pieter-Paul Giesberts <pieter-paul.giesberts@broadcom.com> Signed-off-by: Franky Lin <franky.lin@broadcom.com> Signed-off-by: Arend van Spriel <arend@broadcom.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> [bwh: Backported to 4.4 adjust filenames] Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| | | * | brcmfmac: Add length checks on firmware eventsHante Meuleman2019-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit 0aedbcaf6f182690790d98d90d5fe1e64c846c34 upstream. Add additional length checks on firmware events to create more robust code. Reviewed-by: Arend Van Spriel <arend@broadcom.com> Reviewed-by: Franky (Zhenhui) Lin <frankyl@broadcom.com> Reviewed-by: Pieter-Paul Giesberts <pieterpg@broadcom.com> Reviewed-by: Lei Zhang <leizh@broadcom.com> Signed-off-by: Hante Meuleman <meuleman@broadcom.com> Signed-off-by: Arend van Spriel <arend@broadcom.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> [bwh: Backported to 4.4: - Drop changes to brcmf_wowl_nd_results() - Adjust filenames] Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| | | * | brcmfmac: fix race during disconnect when USB completion is in progressPiotr Figiel2019-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ Upstream commit db3b9e2e1d58080d0754bdf9293dabf8c6491b67 ] It was observed that rarely during USB disconnect happening shortly after connect (before full initialization completes) usb_hub_wq would wait forever for the dev_init_lock to be unlocked. dev_init_lock would remain locked though because of infinite wait during usb_kill_urb: [ 2730.656472] kworker/0:2 D 0 260 2 0x00000000 [ 2730.660700] Workqueue: events request_firmware_work_func [ 2730.664807] [<809dca20>] (__schedule) from [<809dd164>] (schedule+0x4c/0xac) [ 2730.670587] [<809dd164>] (schedule) from [<8069af44>] (usb_kill_urb+0xdc/0x114) [ 2730.676815] [<8069af44>] (usb_kill_urb) from [<7f258b50>] (brcmf_usb_free_q+0x34/0xa8 [brcmfmac]) [ 2730.684833] [<7f258b50>] (brcmf_usb_free_q [brcmfmac]) from [<7f2517d4>] (brcmf_detach+0xa0/0xb8 [brcmfmac]) [ 2730.693557] [<7f2517d4>] (brcmf_detach [brcmfmac]) from [<7f251a34>] (brcmf_attach+0xac/0x3d8 [brcmfmac]) [ 2730.702094] [<7f251a34>] (brcmf_attach [brcmfmac]) from [<7f2587ac>] (brcmf_usb_probe_phase2+0x468/0x4a0 [brcmfmac]) [ 2730.711601] [<7f2587ac>] (brcmf_usb_probe_phase2 [brcmfmac]) from [<7f252888>] (brcmf_fw_request_done+0x194/0x220 [brcmfmac]) [ 2730.721795] [<7f252888>] (brcmf_fw_request_done [brcmfmac]) from [<805748e4>] (request_firmware_work_func+0x4c/0x88) [ 2730.731125] [<805748e4>] (request_firmware_work_func) from [<80141474>] (process_one_work+0x228/0x808) [ 2730.739223] [<80141474>] (process_one_work) from [<80141a80>] (worker_thread+0x2c/0x564) [ 2730.746105] [<80141a80>] (worker_thread) from [<80147bcc>] (kthread+0x13c/0x16c) [ 2730.752227] [<80147bcc>] (kthread) from [<801010b4>] (ret_from_fork+0x14/0x20) [ 2733.099695] kworker/0:3 D 0 1065 2 0x00000000 [ 2733.103926] Workqueue: usb_hub_wq hub_event [ 2733.106914] [<809dca20>] (__schedule) from [<809dd164>] (schedule+0x4c/0xac) [ 2733.112693] [<809dd164>] (schedule) from [<809e2a8c>] (schedule_timeout+0x214/0x3e4) [ 2733.119621] [<809e2a8c>] (schedule_timeout) from [<809dde2c>] (wait_for_common+0xc4/0x1c0) [ 2733.126810] [<809dde2c>] (wait_for_common) from [<7f258d00>] (brcmf_usb_disconnect+0x1c/0x4c [brcmfmac]) [ 2733.135206] [<7f258d00>] (brcmf_usb_disconnect [brcmfmac]) from [<8069e0c8>] (usb_unbind_interface+0x5c/0x1e4) [ 2733.143943] [<8069e0c8>] (usb_unbind_interface) from [<8056d3e8>] (device_release_driver_internal+0x164/0x1fc) [ 2733.152769] [<8056d3e8>] (device_release_driver_internal) from [<8056c078>] (bus_remove_device+0xd0/0xfc) [ 2733.161138] [<8056c078>] (bus_remove_device) from [<8056977c>] (device_del+0x11c/0x310) [ 2733.167939] [<8056977c>] (device_del) from [<8069cba8>] (usb_disable_device+0xa0/0x1cc) [ 2733.174743] [<8069cba8>] (usb_disable_device) from [<8069507c>] (usb_disconnect+0x74/0x1dc) [ 2733.181823] [<8069507c>] (usb_disconnect) from [<80695e88>] (hub_event+0x478/0xf88) [ 2733.188278] [<80695e88>] (hub_event) from [<80141474>] (process_one_work+0x228/0x808) [ 2733.194905] [<80141474>] (process_one_work) from [<80141a80>] (worker_thread+0x2c/0x564) [ 2733.201724] [<80141a80>] (worker_thread) from [<80147bcc>] (kthread+0x13c/0x16c) [ 2733.207913] [<80147bcc>] (kthread) from [<801010b4>] (ret_from_fork+0x14/0x20) It was traced down to a case where usb_kill_urb would be called on an URB structure containing more or less random data, including large number in its use_count. During the debugging it appeared that in brcmf_usb_free_q() the traversal over URBs' lists is not synchronized with operations on those lists in brcmf_usb_rx_complete() leading to handling brcmf_usbdev_info structure (holding lists' head) as lists' element and in result causing above problem. Fix it by walking through all URBs during brcmf_cancel_all_urbs using the arrays of requests instead of linked lists. Signed-off-by: Piotr Figiel <p.figiel@camlintechnologies.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> Signed-off-by: Sasha Levin <sashal@kernel.org>
| | | * | brcmfmac: convert dev_init_lock mutex to completionPiotr Figiel2019-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ Upstream commit a9fd0953fa4a62887306be28641b4b0809f3b2fd ] Leaving dev_init_lock mutex locked in probe causes BUG and a WARNING when kernel is compiled with CONFIG_PROVE_LOCKING. Convert mutex to completion which silences those warnings and improves code readability. Fix below errors when connecting the USB WiFi dongle: brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43143 for chip BCM43143/2 BUG: workqueue leaked lock or atomic: kworker/0:2/0x00000000/434 last function: hub_event 1 lock held by kworker/0:2/434: #0: 18d5dcdf (&devinfo->dev_init_lock){+.+.}, at: brcmf_usb_probe+0x78/0x550 [brcmfmac] CPU: 0 PID: 434 Comm: kworker/0:2 Not tainted 4.19.23-00084-g454a789-dirty #123 Hardware name: Freescale i.MX6 Quad/DualLite (Device Tree) Workqueue: usb_hub_wq hub_event [<8011237c>] (unwind_backtrace) from [<8010d74c>] (show_stack+0x10/0x14) [<8010d74c>] (show_stack) from [<809c4324>] (dump_stack+0xa8/0xd4) [<809c4324>] (dump_stack) from [<8014195c>] (process_one_work+0x710/0x808) [<8014195c>] (process_one_work) from [<80141a80>] (worker_thread+0x2c/0x564) [<80141a80>] (worker_thread) from [<80147bcc>] (kthread+0x13c/0x16c) [<80147bcc>] (kthread) from [<801010b4>] (ret_from_fork+0x14/0x20) Exception stack(0xed1d9fb0 to 0xed1d9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 ====================================================== WARNING: possible circular locking dependency detected 4.19.23-00084-g454a789-dirty #123 Not tainted ------------------------------------------------------ kworker/0:2/434 is trying to acquire lock: e29cf799 ((wq_completion)"events"){+.+.}, at: process_one_work+0x174/0x808 but task is already holding lock: 18d5dcdf (&devinfo->dev_init_lock){+.+.}, at: brcmf_usb_probe+0x78/0x550 [brcmfmac] which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #2 (&devinfo->dev_init_lock){+.+.}: mutex_lock_nested+0x1c/0x24 brcmf_usb_probe+0x78/0x550 [brcmfmac] usb_probe_interface+0xc0/0x1bc really_probe+0x228/0x2c0 __driver_attach+0xe4/0xe8 bus_for_each_dev+0x68/0xb4 bus_add_driver+0x19c/0x214 driver_register+0x78/0x110 usb_register_driver+0x84/0x148 process_one_work+0x228/0x808 worker_thread+0x2c/0x564 kthread+0x13c/0x16c ret_from_fork+0x14/0x20 (null) -> #1 (brcmf_driver_work){+.+.}: worker_thread+0x2c/0x564 kthread+0x13c/0x16c ret_from_fork+0x14/0x20 (null) -> #0 ((wq_completion)"events"){+.+.}: process_one_work+0x1b8/0x808 worker_thread+0x2c/0x564 kthread+0x13c/0x16c ret_from_fork+0x14/0x20 (null) other info that might help us debug this: Chain exists of: (wq_completion)"events" --> brcmf_driver_work --> &devinfo->dev_init_lock Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&devinfo->dev_init_lock); lock(brcmf_driver_work); lock(&devinfo->dev_init_lock); lock((wq_completion)"events"); *** DEADLOCK *** 1 lock held by kworker/0:2/434: #0: 18d5dcdf (&devinfo->dev_init_lock){+.+.}, at: brcmf_usb_probe+0x78/0x550 [brcmfmac] stack backtrace: CPU: 0 PID: 434 Comm: kworker/0:2 Not tainted 4.19.23-00084-g454a789-dirty #123 Hardware name: Freescale i.MX6 Quad/DualLite (Device Tree) Workqueue: events request_firmware_work_func [<8011237c>] (unwind_backtrace) from [<8010d74c>] (show_stack+0x10/0x14) [<8010d74c>] (show_stack) from [<809c4324>] (dump_stack+0xa8/0xd4) [<809c4324>] (dump_stack) from [<80172838>] (print_circular_bug+0x210/0x330) [<80172838>] (print_circular_bug) from [<80175940>] (__lock_acquire+0x160c/0x1a30) [<80175940>] (__lock_acquire) from [<8017671c>] (lock_acquire+0xe0/0x268) [<8017671c>] (lock_acquire) from [<80141404>] (process_one_work+0x1b8/0x808) [<80141404>] (process_one_work) from [<80141a80>] (worker_thread+0x2c/0x564) [<80141a80>] (worker_thread) from [<80147bcc>] (kthread+0x13c/0x16c) [<80147bcc>] (kthread) from [<801010b4>] (ret_from_fork+0x14/0x20) Exception stack(0xed1d9fb0 to 0xed1d9ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 Signed-off-by: Piotr Figiel <p.figiel@camlintechnologies.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> Signed-off-by: Sasha Levin <sashal@kernel.org>
| | | * | b43: shut up clang -Wuninitialized variable warningArnd Bergmann2019-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ Upstream commit d825db346270dbceef83b7b750dbc29f1d7dcc0e ] Clang warns about what is clearly a case of passing an uninitalized variable into a static function: drivers/net/wireless/broadcom/b43/phy_lp.c:1852:23: error: variable 'gains' is uninitialized when used here [-Werror,-Wuninitialized] lpphy_papd_cal(dev, gains, 0, 1, 30); ^~~~~ drivers/net/wireless/broadcom/b43/phy_lp.c:1838:2: note: variable 'gains' is declared here struct lpphy_tx_gains gains, oldgains; ^ 1 error generated. However, this function is empty, and its arguments are never evaluated, so gcc in contrast does not warn here. Both compilers behave in a reasonable way as far as I can tell, so we should change the code to avoid the warning everywhere. We could just eliminate the lpphy_papd_cal() function entirely, given that it has had the TODO comment in it for 10 years now and is rather unlikely to ever get done. I'm doing a simpler change here, and just pass the 'oldgains' variable in that has been initialized, based on the guess that this is what was originally meant. Fixes: 2c0d6100da3e ("b43: LP-PHY: Begin implementing calibration & software RFKILL support") Signed-off-by: Arnd Bergmann <arnd@arndb.de> Acked-by: Larry Finger <Larry.Finger@lwfinger.net> Reviewed-by: Nathan Chancellor <natechancellor@gmail.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> Signed-off-by: Sasha Levin <sashal@kernel.org>
| | | * | brcmfmac: fix missing checks for kmemdupKangjie Lu2019-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ Upstream commit 46953f97224d56a12ccbe9c6acaa84ca0dab2780 ] In case kmemdup fails, the fix sets conn_info->req_ie_len and conn_info->resp_ie_len to zero to avoid buffer overflows. Signed-off-by: Kangjie Lu <kjlu@umn.edu> Acked-by: Arend van Spriel <arend.vanspriel@broadcom.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> Signed-off-by: Sasha Levin <sashal@kernel.org>
| | | * | rtlwifi: fix a potential NULL pointer dereferenceKangjie Lu2019-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ Upstream commit 765976285a8c8db3f0eb7f033829a899d0c2786e ] In case alloc_workqueue fails, the fix reports the error and returns to avoid NULL pointer dereference. Signed-off-by: Kangjie Lu <kjlu@umn.edu> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> Signed-off-by: Sasha Levin <sashal@kernel.org>
| | | * | net: cw1200: fix a NULL pointer dereferenceKangjie Lu2019-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ Upstream commit 0ed2a005347400500a39ea7c7318f1fea57fb3ca ] In case create_singlethread_workqueue fails, the fix free the hardware and returns NULL to avoid NULL pointer dereference. Signed-off-by: Kangjie Lu <kjlu@umn.edu> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> Signed-off-by: Sasha Levin <sashal@kernel.org>
| | | * | mwifiex: prevent an array overflowDan Carpenter2019-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ Upstream commit b4c35c17227fe437ded17ce683a6927845f8c4a4 ] The "rate_index" is only used as an index into the phist_data->rx_rate[] array in the mwifiex_hist_data_set() function. That array has MWIFIEX_MAX_AC_RX_RATES (74) elements and it's used to generate some debugfs information. The "rate_index" variable comes from the network skb->data[] and it is a u8 so it's in the 0-255 range. We need to cap it to prevent an array overflow. Fixes: cbf6e05527a7 ("mwifiex: add rx histogram statistics support") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> Signed-off-by: Sasha Levin <sashal@kernel.org>
| | | * | brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler()Dan Carpenter2019-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ Upstream commit e025da3d7aa4770bb1d1b3b0aa7cc4da1744852d ] If "ret_len" is negative then it could lead to a NULL dereference. The "ret_len" value comes from nl80211_vendor_cmd(), if it's negative then we don't allocate the "dcmd_buf" buffer. Then we pass "ret_len" to brcmf_fil_cmd_data_set() where it is cast to a very high u32 value. Most of the functions in that call tree check whether the buffer we pass is NULL but there are at least a couple places which don't such as brcmf_dbg_hex_dump() and brcmf_msgbuf_query_dcmd(). We memcpy() to and from the buffer so it would result in a NULL dereference. The fix is to change the types so that "ret_len" can't be negative. (If we memcpy() zero bytes to NULL, that's a no-op and doesn't cause an issue). Fixes: 1bacb0487d0e ("brcmfmac: replace cfg80211 testmode with vendor command") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> Signed-off-by: Sasha Levin <sashal@kernel.org>
| | | * | at76c50x-usb: Don't register led_trigger if usb_register_driver failedYueHaibing2019-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit 09ac2694b0475f96be895848687ebcbba97eeecf upstream. Syzkaller report this: [ 1213.468581] BUG: unable to handle kernel paging request at fffffbfff83bf338 [ 1213.469530] #PF error: [normal kernel read fault] [ 1213.469530] PGD 237fe4067 P4D 237fe4067 PUD 237e60067 PMD 1c868b067 PTE 0 [ 1213.473514] Oops: 0000 [#1] SMP KASAN PTI [ 1213.473514] CPU: 0 PID: 6321 Comm: syz-executor.0 Tainted: G C 5.1.0-rc3+ #8 [ 1213.473514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1ubuntu1 04/01/2014 [ 1213.473514] RIP: 0010:strcmp+0x31/0xa0 [ 1213.473514] Code: 00 00 00 00 fc ff df 55 53 48 83 ec 08 eb 0a 84 db 48 89 ef 74 5a 4c 89 e6 48 89 f8 48 89 fa 48 8d 6f 01 48 c1 e8 03 83 e2 07 <42> 0f b6 04 28 38 d0 7f 04 84 c0 75 50 48 89 f0 48 89 f2 0f b6 5d [ 1213.473514] RSP: 0018:ffff8881f2b7f950 EFLAGS: 00010246 [ 1213.473514] RAX: 1ffffffff83bf338 RBX: ffff8881ea6f7240 RCX: ffffffff825350c6 [ 1213.473514] RDX: 0000000000000000 RSI: ffffffffc1ee19c0 RDI: ffffffffc1df99c0 [ 1213.473514] RBP: ffffffffc1df99c1 R08: 0000000000000001 R09: 0000000000000004 [ 1213.473514] R10: 0000000000000000 R11: ffff8881de353f00 R12: ffff8881ee727900 [ 1213.473514] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffffffc1eeaaf0 [ 1213.473514] FS: 00007fa66fa01700(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 1213.473514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1213.473514] CR2: fffffbfff83bf338 CR3: 00000001ebb9e005 CR4: 00000000007606f0 [ 1213.473514] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1213.473514] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1213.473514] PKRU: 55555554 [ 1213.473514] Call Trace: [ 1213.473514] led_trigger_register+0x112/0x3f0 [ 1213.473514] led_trigger_register_simple+0x7a/0x110 [ 1213.473514] ? 0xffffffffc1c10000 [ 1213.473514] at76_mod_init+0x77/0x1000 [at76c50x_usb] [ 1213.473514] do_one_initcall+0xbc/0x47d [ 1213.473514] ? perf_trace_initcall_level+0x3a0/0x3a0 [ 1213.473514] ? kasan_unpoison_shadow+0x30/0x40 [ 1213.473514] ? kasan_unpoison_shadow+0x30/0x40 [ 1213.473514] do_init_module+0x1b5/0x547 [ 1213.473514] load_module+0x6405/0x8c10 [ 1213.473514] ? module_frob_arch_sections+0x20/0x20 [ 1213.473514] ? kernel_read_file+0x1e6/0x5d0 [ 1213.473514] ? find_held_lock+0x32/0x1c0 [ 1213.473514] ? cap_capable+0x1ae/0x210 [ 1213.473514] ? __do_sys_finit_module+0x162/0x190 [ 1213.473514] __do_sys_finit_module+0x162/0x190 [ 1213.473514] ? __ia32_sys_init_module+0xa0/0xa0 [ 1213.473514] ? __mutex_unlock_slowpath+0xdc/0x690 [ 1213.473514] ? wait_for_completion+0x370/0x370 [ 1213.473514] ? vfs_write+0x204/0x4a0 [ 1213.473514] ? do_syscall_64+0x18/0x450 [ 1213.473514] do_syscall_64+0x9f/0x450 [ 1213.473514] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1213.473514] RIP: 0033:0x462e99 [ 1213.473514] Code: f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.473514] RSP: 002b:00007fa66fa00c58 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 1213.473514] RAX: ffffffffffffffda RBX: 000000000073bf00 RCX: 0000000000462e99 [ 1213.473514] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 1213.473514] RBP: 00007fa66fa00c70 R08: 0000000000000000 R09: 0000000000000000 [ 1213.473514] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa66fa016bc [ 1213.473514] R13: 00000000004bcefa R14: 00000000006f6fb0 R15: 0000000000000004 If usb_register failed, no need to call led_trigger_register_simple. Reported-by: Hulk Robot <hulkci@huawei.com> Fixes: 1264b951463a ("at76c50x-usb: add driver") Signed-off-by: YueHaibing <yuehaibing@huawei.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
* | | | | Merge LA.UM.7.5.2.r1-03200-8x96.0 of ↵Davide Garberi2019-06-19
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://source.codeaurora.org/quic/la/kernel/msm-4.4 into lineage-16.0 bcf671504f41 Merge "msm: adsprpc: maintain local copy of rpra offloaded to DSP" into kernel.lnx.4.4.r37-rel 621c16b0342c Merge "arm: dts: msm: Add avs-version dt property for 8996" into kernel.lnx.4.4.r37-rel 22fbeb474b52 Merge "msm: sensor: actuator: fix out of bound read for bivcm region params" into kernel.lnx.4.4.r37-rel 579b4b461cca Merge "diag: Prevent out-of-bound access while processing userspace data" into kernel.lnx.4.4.r37-rel aff3d9629d10 arm: dts: msm: Add avs-version dt property for 8996 fbf5254e319b msm: sensor: actuator: fix out of bound read for bivcm region params d73a74c20cb2 msm: adsprpc: maintain local copy of rpra offloaded to DSP 3c1b5fa08460 diag: Prevent out-of-bound access while processing userspace data d929c539a8e5 msm: ais: sensor: actuator: fix out of bound read for bivcm region params 77a2432a11c2 ASoC: msm: Add support for AVS version check 51ae92e6a401 Merge commit '06ceb6bb61d15d96906733a0a4e1ca5a53a9fe3e' into HEAD 06ceb6bb61d1 Merge "msm: ipa3: Fix to validate check for IP type" c7c174351b81 Merge "diag: Prevent out-of-bound access while processing non-hdlc pkt" bc914679ea33 msm: ipa3: Fix to validate check for IP type f275209c759d diag: Prevent out-of-bound access while processing non-hdlc pkt 77b17af341a0 Merge "ARM: dts: msm: Add support for float charger detection on MSM8996" c9c1e20784b5 Merge "phy: qusb: Add support for DP DM pulsing for HS PHY" 5c004decb393 Merge "dsp: afe: check for minimum size before payload access" f7f2404ce1e5 Merge "soc: msm8998: Add 16ch playback and record support for TDM" 0ee704100065 dsp: afe: check for minimum size before payload access 074cdf9e72eb Merge "cnss2: Return failure if bus type do not match" f73796d0e9f6 Merge "asoc: Update max channels for TDM ports" 3691a75c38f2 soc: msm8998: Add 16ch playback and record support for TDM 4067f83f16aa Merge "ARM: dts: msm: Enable DP DM pulsing support on MSM8996" ced9c94ab135 Merge "soc: qcom: hab: Add open local-cancel and compiler warning fixes" 1058027c8de2 Merge "msm: ipa: fix to validate input parameters" c53f4c9b5b07 Merge "net: sockev: avoid races between sockev and socket_close" c447f451f23b msm: ipa: fix to validate input parameters 0e71405de372 phy: qusb: Add support for DP DM pulsing for HS PHY 923d660f4f8e ARM: dts: msm: Add support for float charger detection on MSM8996 669f50368505 usb: dwc3: Support float charger detection b924e5efad9c net: sockev: avoid races between sockev and socket_close ecf5d04a091c i2c: add virtual i2c driver 3973929bb0c0 asoc: Update max channels for TDM ports f5b94d9b13a2 Merge "fbdev: msm: check the length of the external input buffer properly" 866e7cab7632 Merge "power: qpnp-smbcharger: Add support for dpdm pulsing" 69b14d87db0c Merge "diag: Prevent out-of-bound access while processing dci transaction" 16819b1724ca Merge "diag: Prevent out-of-bound access while processing mask commands" 77b2a5118029 Merge "soc: qcom: smem: validate fields of shared structures" 9c9f59ad526d Merge "msm: mdss: assign block_id for INTF_3" 9482fdb2ac26 Merge "asoc: Ratelimit error logs to avoid excessive logging" c0d5faa72def ARM: dts: msm: Enable DP DM pulsing support on MSM8996 20cff2eff8b0 soc: qcom: hab: Add open local-cancel and compiler warning fixes 2835220d65c2 power: qpnp-smbcharger: Add support for dpdm pulsing 705aac6195a3 Merge "msm: ais : Lock Implementation for avoid race condition" e405d025f373 cnss2: Return failure if bus type do not match cce422722518 soc: qcom: smem: validate fields of shared structures 24cedeb24492 Merge "Merge android-4.4.180 (71cb827) into msm-4.4" 01fcd88c0f94 fbdev: msm: check the length of the external input buffer properly 2f6ef8a30b78 Merge "usb: f_gsi: Increase max control transfer size to 8K" cfb05dba8254 Merge "msm: ipa_v2: Protect ipa default routing table" 44607545fc3a Merge "qcom: smcinvoke: Fix stack overflow for arr_filp" b29d59a33d59 Merge "defconfig: msm8996: Enable radio configs" fa9dbbba7210 qcom: smcinvoke: Fix stack overflow for arr_filp 17fe44d6eb8a msm: ais : Lock Implementation for avoid race condition 547234bc3905 Merge "arm: dts: msm: Add usbin-vadc dt property for 8996" 780ec0d56272 Merge android-4.4.180 (71cb827) into msm-4.4 fe304a42badc Merge "power: qpnp-smbcharger: Add voltage now property in usb psy" 01abac7367ec Merge "soc: qcom: ipc_router_mhi_xprt: Handle error condition" d1a5c0380504 Merge "ARM: dts: msm: Enable HDMI audio support for 8996" f5704ee3fc16 Merge "defconfig: Enable REGMAP_ALLOW_WRITE_DEBUGFS" 726ccfec942d power: qpnp-smbcharger: Add voltage now property in usb psy c77bbe685168 Merge "msm: ais: handle the error value returned during get clock" 765d3befd4ec msm: ais: handle the error value returned during get clock 716a46317a4f power: qpnp-smbcharger: Add support for float charger detection f228ed90951d Merge "ARM: dts: msm: Update avb flag and partition names for auto" fde6bcd6f665 arm: dts: msm: Add usbin-vadc dt property for 8996 f8572fa1920f Merge "ASoC: msm: Update codec name in HDMI dai link" 64c7fea7a615 Merge "serial: msm_serial_hs: Align to HW assisted flow control support" 4249d4516299 asoc: Ratelimit error logs to avoid excessive logging 095ed32dd71f serial: msm_serial_hs: Align to HW assisted flow control support a4cc4b94d2cc usb: f_gsi: Increase max control transfer size to 8K 14ff0dc12ed0 Merge "ARM: dts: msm: add support for apq8096pro CDP" 6666379ae0e6 msm: mdss: assign block_id for INTF_3 79e903bcd908 soc: qcom: ipc_router_mhi_xprt: Handle error condition 4efd54ad69f1 Merge "pwm: pwm-qpnp: Fix the order of configuring PWM value" af0d3ed849b5 Merge "msm: camera: jpegdma: Added missing lock for dqbuf and streamon" 71cb827c0249 Merge 4.4.180 into android-4.4 0f654c12cd72 Linux 4.4.180 5f3cf6b82211 powerpc/lib: fix book3s/32 boot failure due to code patching 95100d253fee powerpc/booke64: set RI in default MSR 9db489ed4971 drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl f518072d1ae1 drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl 7a22a4ea67b7 bonding: fix arp_validate toggling in active-backup mode 6e72e6897efe ipv4: Fix raw socket lookup for local traffic 6e36b31c1b07 vrf: sit mtu should not be updated when vrf netdev is the link 6044ab2a05f6 vlan: disable SIOCSHWTSTAMP in container bf4d21eed0d7 packet: Fix error path in packet_init 1261f44db98c net: ucc_geth - fix Oops when changing number of buffers in the ring 24d2a86b8968 bridge: Fix error path for kobject_init_and_add() b8bb7bc326f2 powerpc/64s: Include cpu header 27d9e822a716 USB: serial: fix unthrottle races f2387d0c3467 USB: serial: use variable for status 6db8c0882912 x86/bugs: Change L1TF mitigation string to match upstream 71041afe26a3 x86/speculation/mds: Fix documentation typo 693eb3bdaf19 Documentation: Correct the possible MDS sysfs values 0f961ec59305 x86/mds: Add MDSUM variant to the MDS documentation 3092ad5c4f2e x86/speculation/mds: Add 'mitigations=' support for MDS a50e2ca5757f x86/speculation: Support 'mitigations=' cmdline option 31a2c5f7a25b cpu/speculation: Add 'mitigations=' cmdline option 2b26dff34698 x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off 0144cbc12474 x86/speculation/mds: Fix comment e2896d6b1e48 x86/speculation/mds: Add SMT warning message 06deb655ae26 x86/speculation: Move arch_smt_update() call to after mitigation decisions 5b0f1f5b4f58 x86/cpu/bugs: Use __initconst for 'const' init data 48204fd98023 Documentation: Add MDS vulnerability documentation e0e64cdc7fd9 Documentation: Move L1TF to separate directory 9fe26a407f0e x86/speculation/mds: Add mitigation mode VMWERV 3fb41b4e2d38 x86/speculation/mds: Add sysfs reporting for MDS 1e9a9ef67033 x86/speculation/l1tf: Document l1tf in sysfs 8c7398befdf1 x86/speculation/mds: Add mitigation control for MDS d4c1e6cbbcdc x86/speculation/mds: Conditionally clear CPU buffers on idle entry a41a2dee403d x86/speculation/mds: Clear CPU buffers on exit to user 7a6c2a6c4235 x86/speculation/mds: Add mds_clear_cpu_buffers() f223c10cf176 x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests adef560d1ef8 x86/speculation/mds: Add BUG_MSBDS_ONLY 179adc415f94 x86/speculation/mds: Add basic bug infrastructure for MDS 8be7f1183d2f x86/speculation: Consolidate CPU whitelists 683f9fba8c27 x86/msr-index: Cleanup bit defines 6eb1dfb0e945 kvm: x86: Report STIBP on GET_SUPPORTED_CPUID f8515b2d8c86 x86/speculation: Provide IBPB always command line options 867931a6cc51 x86/speculation: Add seccomp Spectre v2 user space protection mode 0ec9baa28b62 x86/speculation: Enable prctl mode for spectre_v2_user ff99c966c627 x86/speculation: Add prctl() control for indirect branch speculation bc8a006cb385 x86/speculation: Prevent stale SPEC_CTRL msr content b784ff22d682 x86/speculation: Prepare arch_smt_update() for PRCTL mode 29652de33320 x86/speculation: Split out TIF update e2dafdd0084b x86/speculation: Prepare for conditional IBPB in switch_mm() 708f3ed763fc x86/speculation: Avoid __switch_to_xtra() calls 2db6cf1eba01 x86/process: Consolidate and simplify switch_to_xtra() code 2959c3e36f65 x86/speculation: Prepare for per task indirect branch speculation control a5e8a06268dc x86/speculation: Add command line control for indirect branch speculation 92bc99ff0724 x86/speculation: Unify conditional spectre v2 print functions 3d2149a49e7b x86/speculataion: Mark command line parser data __initdata ad70092da835 x86/speculation: Mark string arrays const correctly 77aaa118c5d1 x86/speculation: Reorder the spec_v2 code 892d9881b437 x86/speculation: Rework SMT state change 1f562beba75c sched: Add sched_smt_active() f576a78075ba x86/Kconfig: Select SCHED_SMT if SMP enabled f68790685aa5 x86/speculation: Reorganize speculation control MSRs update 41ebb68d9a67 x86/speculation: Rename SSBD update functions 9ef693a75208 x86/speculation: Disable STIBP when enhanced IBRS is in use 6a598ce52f69 x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() fb4a4fc139a5 x86/speculation: Remove unnecessary ret variable in cpu_show_common() 809e50eb21e5 x86/speculation: Clean up spectre_v2_parse_cmdline() f97a530be08f x86/speculation: Update the TIF_SSBD comment 0440c2c5e2d2 x86/speculation: Propagate information about RSB filling mitigation to sysfs dc23d0241b97 x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation 4a215a1155ce x86/speculation: Apply IBPB more strictly to avoid cross-process data leak 122b3ad3a068 x86/mm: Use WRITE_ONCE() when setting PTEs 7c50deefa1e9 KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled 2422db18b660 x86/cpu: Sanitize FAM6_ATOM naming 2329f765b53a x86/microcode: Update the new microcode revision unconditionally 0ee359e14c08 x86/microcode: Make sure boot_cpu_data.microcode is up-to-date 12043f0eb5fd x86/speculation: Remove SPECTRE_V2_IBRS in enum spectre_v2_mitigation 9029b6908e1d x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR 8d1385ea4c67 locking/atomics, asm-generic: Move some macros from <linux/bitops.h> to a new <linux/bits.h> file 76869c022795 x86/bugs: Switch the selection of mitigation from CPU vendor to CPU features a9f354ad1c1d x86/bugs: Add AMD's SPEC_CTRL MSR usage 99bd3817b6d7 x86/bugs: Add AMD's variant of SSB_NO 2b8e34665e8f x86/speculation: Simplify the CPU bug detection logic efcb85dd2644 x86/speculation: Support Enhanced IBRS on future CPUs 042c6aee6572 x86/cpufeatures: Hide AMD-specific speculation flags dc7e3b052ab4 x86/MCE: Save microcode revision in machine check records 30c66b528e1f x86/microcode/intel: Check microcode revision before updating sibling threads c2a357d9b429 bitops: avoid integer overflow in GENMASK(_ULL) d7a711b64ff8 x86: stop exporting msr-index.h to userland 98cc1464cfd6 x86/microcode/intel: Add a helper which gives the microcode revision 5ec6421c21c6 locking/static_keys: Provide DECLARE and well as DEFINE macros 40f6c72df9d8 Don't jump to compute_result state from check_result state 07d35512e494 x86/vdso: Pass --eh-frame-hdr to the linker 9767260be0b4 cw1200: fix missing unlock on error in cw1200_hw_scan() ccc2b0f8d4be gpu: ipu-v3: dp: fix CSC handling 795c76f4e50f selftests/net: correct the return value for run_netsocktests 83494cfb0d29 s390: ctcm: fix ctcm_new_device error return code 4c78631d884d ipvs: do not schedule icmp errors from tunnels 2b46b98576cb init: initialize jump labels before command line option parsing a54c490cecd5 tools lib traceevent: Fix missing equality check for strcmp 5664d3298b3b KVM: x86: avoid misreporting level-triggered irqs as edge-triggered in tracing b79c1ea82e3b s390/3270: fix lockdep false positive on view->lock 825c6401f9e9 s390/dasd: Fix capacity calculation for large volumes 905b8964c9d9 libnvdimm/btt: Fix a kmemdup failure check 3007ae4bbf26 HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys c15b4f9f4699 HID: input: add mapping for Expose/Overview key 45679938dc6f iio: adc: xilinx: fix potential use-after-free on remove 619c8933e4af platform/x86: sony-laptop: Fix unintentional fall-through 8ce5ae6912e3 netfilter: compat: initialize all fields in xt_init a9bdfbd494da timer/debug: Change /proc/timer_stats from 0644 to 0600 e212945fe525 ASoC: Intel: avoid Oops if DMA setup fails faf458605614 ipv6: fix a potential deadlock in do_ipv6_setsockopt() dcb33fe3d9a6 UAS: fix alignment of scatter/gather segments d016dc1bd29a Bluetooth: Align minimum encryption key size for LE and BR/EDR connections dd150bcc93ff Bluetooth: hidp: fix buffer overflow 15a12bde0fd9 scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines 88246eb7bf37 usb: dwc3: Fix default lpm_nyet_threshold value 1aec586c25ee genirq: Prevent use-after-free and work list corruption 2984aa6d4a78 iommu/amd: Set exclusion range correctly 4294ec58537d scsi: csiostor: fix missing data copy in csio_scsi_err_handler() 93beb0decfe2 perf/x86/intel: Fix handling of wakeup_events for multi-entry PEBS 5ea6b626b917 ASoC: tlv320aic32x4: Fix Common Pins b7bbb5ce955b ASoC: cs4270: Set auto-increment bit for register writes 79132626f8c7 ASoC:soc-pcm:fix a codec fixup issue in TDM case fe3f6511c9af scsi: libsas: fix a race condition when smp task timeout 0f83a55ca07e media: v4l2: i2c: ov7670: Fix PLL bypass register values d96fc7729c44 x86/mce: Improve error message when kernel cannot recover, p2 08794d181ff6 selinux: never allow relabeling on context mounts 3bf16c452b91 Input: snvs_pwrkey - initialize necessary driver data before enabling IRQ 90b8ab9ee10f staging: iio: adt7316: fix the dac write calculation 7c4744e2c75c staging: iio: adt7316: fix the dac read calculation a45018ff3c06 staging: iio: adt7316: allow adt751x to use internal vref for all dacs 55153b108922 usb: usbip: fix isoc packet num validation in get_pipe 3401512b7831 ARM: iop: don't use using 64-bit DMA masks 03fd6e162398 ARM: orion: don't use using 64-bit DMA masks 9fcbabe209a2 xsysace: Fix error handling in ace_setup 66c57ab148a0 hugetlbfs: fix memory leak for resv_map 550ce5b3b45b net: hns: Fix WARNING when remove HNS driver with SMMU enabled c8d4b98eeed4 net: hns: Use NAPI_POLL_WEIGHT for hns driver 4af8444aff7c scsi: storvsc: Fix calculation of sub-channel count 4328fca13020 vfio/pci: use correct format characters 891c92860383 rtc: da9063: set uie_unsupported when relevant 02395682f19b debugfs: fix use-after-free on symlink traversal 90a015d4d782 jffs2: fix use-after-free on symlink traversal cd43ccbfb5fb bonding: show full hw address in sysfs for slave entries 88020a14a0b7 igb: Fix WARN_ONCE on runtime suspend 6c24038d84a7 rtc: sh: Fix invalid alarm warning for non-enabled alarm e9358b9a5db1 HID: debug: fix race condition with between rdesc_show() and device removal 1b2b6db7765e USB: core: Fix bug caused by duplicate interface PM usage counter b384399a518c USB: core: Fix unterminated string returned by usb_string() 7a52b950902d USB: w1 ds2490: Fix bug caused by improper use of altsetting array 438b075fc77d USB: yurex: Fix protection fault after device removal c6ae8a5a4396 packet: validate msg_namelen in send directly aed15cc2ced6 bnxt_en: Improve multicast address setup logic. c7a9d69b727a ipv6: invert flowlabel sharing check in process and user mode 82ae1a89b134 ipv6/flowlabel: wait rcu grace period before put_pid() 0fe65e4eac33 ipv4: ip_do_fragment: Preserve skb_iif during fragmentation bdbc15205b51 ALSA: line6: use dynamic buffers e1a5cdbf7cb3 vfio/type1: Limit DMA mappings per container e0d9031feb2f kconfig/[mn]conf: handle backspace (^H) key 8c2bbe210936 libata: fix using DMA buffers on stack 4767c30a2bac scsi: zfcp: reduce flood of fcrscn1 trace records on multi-element RSCN cd2bdca329c1 ceph: fix use-after-free on symlink traversal 4663cb7947dd usb: u132-hcd: fix resource leak 783552a9865c scsi: qla4xxx: fix a potential NULL pointer dereference f18c946e6cf1 net: ethernet: ti: fix possible object reference leak 64206dd039fd net: ibm: fix possible object reference leak ae35f101789b net: xilinx: fix possible object reference leak c0d641aa264a net: ks8851: Set initial carrier state to down f41b4fd83fef net: ks8851: Delay requesting IRQ until opened 195aac29efe3 net: ks8851: Reassert reset pin if chip ID check fails 36b1240d4e47 net: ks8851: Dequeue RX packets explicitly 1710b4ad56db ARM: dts: pfla02: increase phy reset duration fd1f90b4fa83 usb: gadget: net2272: Fix net2272_dequeue() 61fb6fa9b32b usb: gadget: net2280: Fix net2280_dequeue() 4ff888ea38c1 usb: gadget: net2280: Fix overrun of OUT messages b9cf1bc4e31e sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init() 6e361910119b netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING d311479911c7 qlcnic: Avoid potential NULL pointer dereference 1652d1194af5 usbnet: ipheth: fix potential null pointer dereference in ipheth_carrier_set 4f2df9fd0769 usbnet: ipheth: prevent TX queue timeouts when device not ready aa24636d3dc2 Documentation: Add nospectre_v1 parameter c816ec25621b powerpc/fsl: Add FSL_PPC_BOOK3E as supported arch for nospectre_v2 boot arg 6a56ecdfd3b2 powerpc/fsl: Fixed warning: orphan section `__btb_flush_fixup' 1a26467578d8 powerpc/fsl: Sanitize the syscall table for NXP PowerPC 32 bit platforms 42b46e985c99 powerpc/fsl: Flush the branch predictor at each kernel entry (32 bit) 5bed4b351268 powerpc/fsl: Emulate SPRN_BUCSR register 4168b2e356bc powerpc/fsl: Flush branch predictor when entering KVM ec206826323a powerpc/fsl: Enable runtime patching if nospectre_v2 boot arg is used 389fd9776f3e ipv4: set the tcp_min_rtt_wlen range from 0 to one day 8cab9c87ee0f net: stmmac: move stmmac_check_ether_addr() to driver probe 1990e41b2339 team: fix possible recursive locking when add slaves 510a733497d3 ipv4: add sanity checks in ipv4_link_failure() f480eb03c88a Revert "block/loop: Use global lock for ioctl() operation." f08db490b406 bpf: reject wrong sized filters earlier 0b7d9b8571ad tipc: check link name with right length in tipc_nl_compat_link_set 625634be3b8b tipc: check bearer name with right length in tipc_nl_compat_bearer_enable cafee685fb48 netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON cec54a8e694c NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family. 76c279c7b6f8 fs/proc/proc_sysctl.c: Fix a NULL pointer dereference 28bd672e7a9f intel_th: gth: Fix an off-by-one in output unassigning 20159939a8b4 slip: make slhc_free() silently accept an error pointer 2996e89c2d62 tipc: handle the err returned from cmd header function 9d688aa11077 powerpc/fsl: Fix the flush of branch predictor. 990c7be76516 powerpc/security: Fix spectre_v2 reporting 5f9678d9c8c7 powerpc/fsl: Update Spectre v2 reporting 0454f7b3282b powerpc/fsl: Flush the branch predictor at each kernel entry (64bit) 932e8acaa806 powerpc/fsl: Add nospectre_v2 command line argument 4cbfad23be50 powerpc/fsl: Fix spectre_v2 mitigations reporting b76f9074d0f3 powerpc/fsl: Add macro to flush the branch predictor 526adfdf029e powerpc/fsl: Add infrastructure to fixup branch predictor flush 7fe905d0973e powerpc: Avoid code patching freed init sections ee1a6e164cac powerpc/powernv: Query firmware for count cache flush settings 67fb764be590 powerpc/pseries: Query hypervisor for count cache flush settings bda04af8692d powerpc/64s: Add support for software count cache flush bfeafa01fa09 powerpc/64s: Add new security feature flags for count cache flush a8d13b364862 powerpc/asm: Add a patch_site macro & helpers for patching instructions 0273c6d73a03 powerpc/fsl: Add barrier_nospec implementation for NXP PowerPC Book3E b7f47c8f0f4c powerpc/64: Make meltdown reporting Book3S 64 specific 04a682df27c1 powerpc/64: Call setup_barrier_nospec() from setup_arch() e7b3fb43b970 powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC 4fb0382d987e powerpc/64: Make stf barrier PPC_BOOK3S_64 specific. 58dbc8def949 powerpc/64: Disable the speculation barrier from the command line d000015f6283 powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 b6a4dce40cb7 powerpc/64s: Enhance the information in cpu_show_spectre_v1() 1110c3ad0b66 powerpc: Use barrier_nospec in copy_from_user() 2a90ebba2fcc powerpc/64: Use barrier_nospec in syscall entry 990ce72a3bab powerpc/64s: Enable barrier_nospec based on firmware settings 39e71d5ae83f powerpc/64s: Patch barrier_nospec in modules 083c37a1bb61 powerpc/64s: Add support for ori barrier_nospec patching fde08a5d395e powerpc/64s: Add barrier_nospec 7b9f9ce1a7a0 powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit 27296b7879d5 powerpc/64s: Fix section mismatch warnings from setup_rfi_flush() 8b1f9a4e2136 powerpc/pseries: Restore default security feature flags on setup adde5de432d6 powerpc: Move default security feature flags b3be4dcbd1a2 powerpc/pseries: Fix clearing of security feature flags d9594148817b powerpc/64s: Wire up cpu_show_spectre_v2() fe126d25bad7 powerpc/64s: Wire up cpu_show_spectre_v1() 5097bf81e845 powerpc/pseries: Use the security flags in pseries_setup_rfi_flush() 10f8cd737a03 powerpc/powernv: Use the security flags in pnv_setup_rfi_flush() 495c34251785 powerpc/64s: Enhance the information in cpu_show_meltdown() dde12e9b3e86 powerpc/64s: Move cpu_show_meltdown() 3b99b3b3fb97 powerpc/powernv: Set or clear security feature flags 2b206ee648f3 powerpc/pseries: Set or clear security feature flags d34ea7873f82 powerpc: Add security feature flags for Spectre/Meltdown 8249ee94a9ca powerpc/rfi-flush: Call setup_rfi_flush() after LPM migration 7777d9cb2c1c powerpc/pseries: Add new H_GET_CPU_CHARACTERISTICS flags e5c8265abdbb powerpc/rfi-flush: Differentiate enabled and patched flush types 8b58add49fef powerpc/rfi-flush: Always enable fallback flush on pseries 22c697163e4d powerpc/rfi-flush: Make it possible to call setup_rfi_flush() again d04664376129 powerpc/rfi-flush: Move the logic to avoid a redo into the debugfs code f93ae3415cf7 powerpc/powernv: Support firmware disable of RFI flush e1759aacdd16 powerpc/pseries: Support firmware disable of RFI flush d9052a2ede31 powerpc/64s: Improve RFI L1-D cache flush fallback 13dc9b34c873 powerpc/xmon: Add RFI flush related fields to paca dump 80c305aeeb09 USB: Consolidate LPM checks to avoid enabling LPM twice 9dad11965ed2 USB: Add new USB LPM helpers fad515213059 sunrpc: don't mark uninitialised items as VALID. 498e9066b480 nfsd: Don't release the callback slot unless it was actually held b8d15c06cf0c ceph: fix ci->i_head_snapc leak 811fb30278b4 ceph: ensure d_name stability in ceph_dentry_hash() 2f14dae91560 sched/numa: Fix a possible divide-by-zero 10dbe2292758 trace: Fix preempt_enable_no_resched() abuse 15c2ac78cb73 MIPS: scall64-o32: Fix indirect syscall number load fd49607468ba cifs: do not attempt cifs operation on smb2+ rename error 4c78eadb3489 KVM: fail KVM_SET_VCPU_EVENTS with invalid exception number 485d15db01ca kbuild: simplify ld-option implementation cd1e9004ddd5 Merge "defconfig: msm8996: Enable PAN emulation" a4b99d2c643c Merge "defconfig: msm8996: Disable DEVPORT" b79e25fe5818 msm: camera : Lock Implementation for avoid race condition ce469a70f3bc ANDROID: cuttlefish_defconfig: Disable DEVTMPFS d5f7b0a5556b diag: Prevent out-of-bound access while processing dci transaction cfef4f88308a diag: Prevent out-of-bound access while processing mask commands c9fa4db90a83 pwm: pwm-qpnp: Fix the order of configuring PWM value fe15f47306a1 ANDROID: Move from clang r349610 to r353983c. 8cb9bdaac97a Merge upstream-f2fs-stable-linux-4.4.y into android-4.4 592adc484920 drm/msm: ensure display driver probe completion 77c04577d922 Merge "msm: camera_v2: handle the error value returned during get clock" 5e144157195d icnss: Add check on msa region 6183ceb8d1e7 msm: camera_v2: handle the error value returned during get clock 779dfa61f7b1 msm: ipa_v2: Protect ipa default routing table 8b5d9f6f8eac ARM: dts: msm: add support for apq8096pro CDP 59dda5e0dcec ASoC: msm: Update codec name in HDMI dai link 0cba1d4c1422 f2fs: fix to avoid accessing xattr across the boundary f32a4e2decb0 ARM: dts: msm: Enable HDMI audio support for 8996 c44c78fab1a2 ARM: dts: msm: Update avb flag and partition names for auto ee588a7f2329 f2fs: fix to avoid potential race on sbi->unusable_block_count access/update 993543bcbad2 f2fs: add tracepoint for f2fs_filemap_fault() b60ff4b3605c f2fs: introduce DATA_GENERIC_ENHANCE 43c33bc93b79 f2fs: fix to handle error in f2fs_disable_checkpoint() 9ca2000e9d76 f2fs: remove redundant check in f2fs_file_write_iter() b6bb1574fce6 f2fs: fix to be aware of readonly device in write_checkpoint() 04139be9047a f2fs: fix to skip recovery on readonly device 25f68cbbdb86 f2fs: fix to consider multiple device for readonly check a90ff12b2ff5 f2fs: relocate chksum_offset for large_nat_bitmap feature ad199c5f600f f2fs: allow unfixed f2fs_checkpoint.checksum_offset a3df88564441 f2fs: Replace spaces with tab 12a9d38a0b11 f2fs: insert space before the open parenthesis '(' e3057056de10 f2fs: allow address pointer number of dnode aligning to specified size c351f529e220 f2fs: introduce f2fs_read_single_page() for cleanup 8ac217148510 f2fs: mark is_extension_exist() inline 2c8359eee2ad f2fs: fix to set FI_UPDATE_WRITE correctly 5f2085bab2e2 f2fs: fix to avoid panic in f2fs_inplace_write_data() d6fe88aef4c1 f2fs: fix to do sanity check on valid block count of segment 1c3e295f67d0 f2fs: fix to do sanity check on valid node/block count 4ffbe8fee8a4 f2fs: fix to avoid panic in do_recover_data() 65f109d717d4 f2fs: fix to do sanity check on free nid c60f9c6ced33 f2fs: fix to do checksum even if inode page is uptodate 9a080abdc30b f2fs: fix to avoid panic in f2fs_remove_inode_page() c0bcbe425670 f2fs: fix to clear dirty inode in error path of f2fs_iget() 299dea1adf40 f2fs: remove new blank line of f2fs kernel message 9b4fc7359ca2 f2fs: fix wrong __is_meta_io() macro 02fb7afdd5f0 f2fs: fix to avoid panic in dec_valid_node_count() 5caebe607e13 f2fs: fix to avoid panic in dec_valid_block_count() b5bc76046b10 f2fs: fix to use inline space only if inline_xattr is enable 9bc578bf83ee f2fs: fix to retrieve inline xattr space 0d7333632d79 f2fs: fix error path of recovery b9973998d9df f2fs: fix to avoid deadloop in foreground GC 5047402dec0e f2fs: data: fix warning Using plain integer as NULL pointer 5bed19fbbba0 f2fs: add tracepoint for f2fs_file_write_iter() 7e37cc9d7161 f2fs: add comment for conditional compilation statement 00e77f15eb1d f2fs: fix potential recursive call when enabling data_flush 6b25d4ac2e7d f2fs: improve discard handling with multi-device volumes c4c54093c71d f2fs: Reduce zoned block device memory usage 2c124ddd98a9 f2fs: Fix use of number of devices 8e638383c1bf msm: camera: jpegdma: Added missing lock for dqbuf and streamon 2bc83184b422 defconfig: Enable REGMAP_ALLOW_WRITE_DEBUGFS 81bbb1b91ed2 defconfig: msm8996: Enable radio configs 0b570560f091 radio: add Silabs FM radio support for msm8996 152bacdd85c4 ANDROID: Communicates LMK events to userland where they can be logged dc0d6bda9e08 defconfig: msm8996: Disable DEVPORT 70d7ff1aa709 defconfig: msm8996: Disable EXT2 and EXT3 FS configs 339eab8aede0 defconfig: msm8996: Enable PAN emulation Signed-off-by: Davide Garberi <dade.garberi@gmail.com> Change-Id: Iac613f6970faeadc98d9ed40aae0d96042502ce4
| * | | | Merge "cnss2: Return failure if bus type do not match"Linux Build Service Account2019-06-06
| |\ \ \ \ | | |_|_|/ | |/| | |
| | * | | cnss2: Return failure if bus type do not matchNirav Shah2019-05-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Return failure in bus register if bus_type do not match between cnss and wlan driver. Change-Id: I9c322e4f6eca3220f1de18a6031715381ba495d7 Signed-off-by: Nirav Shah <nnshah@codeaurora.org>
| * | | | Merge android-4.4.180 (71cb827) into msm-4.4Srinivasarao P2019-05-23
| |\ \ \ \ | | |/ / / | |/| / / | | |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-71cb827 Linux 4.4.180 powerpc/lib: fix book3s/32 boot failure due to code patching powerpc/booke64: set RI in default MSR drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl bonding: fix arp_validate toggling in active-backup mode ipv4: Fix raw socket lookup for local traffic vrf: sit mtu should not be updated when vrf netdev is the link vlan: disable SIOCSHWTSTAMP in container packet: Fix error path in packet_init net: ucc_geth - fix Oops when changing number of buffers in the ring bridge: Fix error path for kobject_init_and_add() powerpc/64s: Include cpu header USB: serial: fix unthrottle races USB: serial: use variable for status x86/bugs: Change L1TF mitigation string to match upstream x86/speculation/mds: Fix documentation typo Documentation: Correct the possible MDS sysfs values x86/mds: Add MDSUM variant to the MDS documentation x86/speculation/mds: Add 'mitigations=' support for MDS x86/speculation: Support 'mitigations=' cmdline option cpu/speculation: Add 'mitigations=' cmdline option x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off x86/speculation/mds: Fix comment x86/speculation/mds: Add SMT warning message x86/speculation: Move arch_smt_update() call to after mitigation decisions x86/cpu/bugs: Use __initconst for 'const' init data Documentation: Add MDS vulnerability documentation Documentation: Move L1TF to separate directory x86/speculation/mds: Add mitigation mode VMWERV x86/speculation/mds: Add sysfs reporting for MDS x86/speculation/l1tf: Document l1tf in sysfs x86/speculation/mds: Add mitigation control for MDS x86/speculation/mds: Conditionally clear CPU buffers on idle entry x86/speculation/mds: Clear CPU buffers on exit to user x86/speculation/mds: Add mds_clear_cpu_buffers() x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests x86/speculation/mds: Add BUG_MSBDS_ONLY x86/speculation/mds: Add basic bug infrastructure for MDS x86/speculation: Consolidate CPU whitelists x86/msr-index: Cleanup bit defines kvm: x86: Report STIBP on GET_SUPPORTED_CPUID x86/speculation: Provide IBPB always command line options x86/speculation: Add seccomp Spectre v2 user space protection mode x86/speculation: Enable prctl mode for spectre_v2_user x86/speculation: Add prctl() control for indirect branch speculation x86/speculation: Prevent stale SPEC_CTRL msr content x86/speculation: Prepare arch_smt_update() for PRCTL mode x86/speculation: Split out TIF update x86/speculation: Prepare for conditional IBPB in switch_mm() x86/speculation: Avoid __switch_to_xtra() calls x86/process: Consolidate and simplify switch_to_xtra() code x86/speculation: Prepare for per task indirect branch speculation control x86/speculation: Add command line control for indirect branch speculation x86/speculation: Unify conditional spectre v2 print functions x86/speculataion: Mark command line parser data __initdata x86/speculation: Mark string arrays const correctly x86/speculation: Reorder the spec_v2 code x86/speculation: Rework SMT state change sched: Add sched_smt_active() x86/Kconfig: Select SCHED_SMT if SMP enabled x86/speculation: Reorganize speculation control MSRs update x86/speculation: Rename SSBD update functions x86/speculation: Disable STIBP when enhanced IBRS is in use x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() x86/speculation: Remove unnecessary ret variable in cpu_show_common() x86/speculation: Clean up spectre_v2_parse_cmdline() x86/speculation: Update the TIF_SSBD comment x86/speculation: Propagate information about RSB filling mitigation to sysfs x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation x86/speculation: Apply IBPB more strictly to avoid cross-process data leak x86/mm: Use WRITE_ONCE() when setting PTEs KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled x86/cpu: Sanitize FAM6_ATOM naming x86/microcode: Update the new microcode revision unconditionally x86/microcode: Make sure boot_cpu_data.microcode is up-to-date x86/speculation: Remove SPECTRE_V2_IBRS in enum spectre_v2_mitigation x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR locking/atomics, asm-generic: Move some macros from <linux/bitops.h> to a new <linux/bits.h> file x86/bugs: Switch the selection of mitigation from CPU vendor to CPU features x86/bugs: Add AMD's SPEC_CTRL MSR usage x86/bugs: Add AMD's variant of SSB_NO x86/speculation: Simplify the CPU bug detection logic x86/speculation: Support Enhanced IBRS on future CPUs x86/cpufeatures: Hide AMD-specific speculation flags x86/MCE: Save microcode revision in machine check records x86/microcode/intel: Check microcode revision before updating sibling threads bitops: avoid integer overflow in GENMASK(_ULL) x86: stop exporting msr-index.h to userland x86/microcode/intel: Add a helper which gives the microcode revision locking/static_keys: Provide DECLARE and well as DEFINE macros Don't jump to compute_result state from check_result state x86/vdso: Pass --eh-frame-hdr to the linker cw1200: fix missing unlock on error in cw1200_hw_scan() gpu: ipu-v3: dp: fix CSC handling selftests/net: correct the return value for run_netsocktests s390: ctcm: fix ctcm_new_device error return code ipvs: do not schedule icmp errors from tunnels init: initialize jump labels before command line option parsing tools lib traceevent: Fix missing equality check for strcmp KVM: x86: avoid misreporting level-triggered irqs as edge-triggered in tracing s390/3270: fix lockdep false positive on view->lock s390/dasd: Fix capacity calculation for large volumes libnvdimm/btt: Fix a kmemdup failure check HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys HID: input: add mapping for Expose/Overview key iio: adc: xilinx: fix potential use-after-free on remove platform/x86: sony-laptop: Fix unintentional fall-through netfilter: compat: initialize all fields in xt_init timer/debug: Change /proc/timer_stats from 0644 to 0600 ASoC: Intel: avoid Oops if DMA setup fails ipv6: fix a potential deadlock in do_ipv6_setsockopt() UAS: fix alignment of scatter/gather segments Bluetooth: Align minimum encryption key size for LE and BR/EDR connections Bluetooth: hidp: fix buffer overflow scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines usb: dwc3: Fix default lpm_nyet_threshold value genirq: Prevent use-after-free and work list corruption iommu/amd: Set exclusion range correctly scsi: csiostor: fix missing data copy in csio_scsi_err_handler() perf/x86/intel: Fix handling of wakeup_events for multi-entry PEBS ASoC: tlv320aic32x4: Fix Common Pins ASoC: cs4270: Set auto-increment bit for register writes ASoC:soc-pcm:fix a codec fixup issue in TDM case scsi: libsas: fix a race condition when smp task timeout media: v4l2: i2c: ov7670: Fix PLL bypass register values x86/mce: Improve error message when kernel cannot recover, p2 selinux: never allow relabeling on context mounts Input: snvs_pwrkey - initialize necessary driver data before enabling IRQ staging: iio: adt7316: fix the dac write calculation staging: iio: adt7316: fix the dac read calculation staging: iio: adt7316: allow adt751x to use internal vref for all dacs usb: usbip: fix isoc packet num validation in get_pipe ARM: iop: don't use using 64-bit DMA masks ARM: orion: don't use using 64-bit DMA masks xsysace: Fix error handling in ace_setup hugetlbfs: fix memory leak for resv_map net: hns: Fix WARNING when remove HNS driver with SMMU enabled net: hns: Use NAPI_POLL_WEIGHT for hns driver scsi: storvsc: Fix calculation of sub-channel count vfio/pci: use correct format characters rtc: da9063: set uie_unsupported when relevant debugfs: fix use-after-free on symlink traversal jffs2: fix use-after-free on symlink traversal bonding: show full hw address in sysfs for slave entries igb: Fix WARN_ONCE on runtime suspend rtc: sh: Fix invalid alarm warning for non-enabled alarm HID: debug: fix race condition with between rdesc_show() and device removal USB: core: Fix bug caused by duplicate interface PM usage counter USB: core: Fix unterminated string returned by usb_string() USB: w1 ds2490: Fix bug caused by improper use of altsetting array USB: yurex: Fix protection fault after device removal packet: validate msg_namelen in send directly bnxt_en: Improve multicast address setup logic. ipv6: invert flowlabel sharing check in process and user mode ipv6/flowlabel: wait rcu grace period before put_pid() ipv4: ip_do_fragment: Preserve skb_iif during fragmentation ALSA: line6: use dynamic buffers vfio/type1: Limit DMA mappings per container kconfig/[mn]conf: handle backspace (^H) key libata: fix using DMA buffers on stack scsi: zfcp: reduce flood of fcrscn1 trace records on multi-element RSCN ceph: fix use-after-free on symlink traversal usb: u132-hcd: fix resource leak scsi: qla4xxx: fix a potential NULL pointer dereference net: ethernet: ti: fix possible object reference leak net: ibm: fix possible object reference leak net: xilinx: fix possible object reference leak net: ks8851: Set initial carrier state to down net: ks8851: Delay requesting IRQ until opened net: ks8851: Reassert reset pin if chip ID check fails net: ks8851: Dequeue RX packets explicitly ARM: dts: pfla02: increase phy reset duration usb: gadget: net2272: Fix net2272_dequeue() usb: gadget: net2280: Fix net2280_dequeue() usb: gadget: net2280: Fix overrun of OUT messages sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init() netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING qlcnic: Avoid potential NULL pointer dereference usbnet: ipheth: fix potential null pointer dereference in ipheth_carrier_set usbnet: ipheth: prevent TX queue timeouts when device not ready Documentation: Add nospectre_v1 parameter powerpc/fsl: Add FSL_PPC_BOOK3E as supported arch for nospectre_v2 boot arg powerpc/fsl: Fixed warning: orphan section `__btb_flush_fixup' powerpc/fsl: Sanitize the syscall table for NXP PowerPC 32 bit platforms powerpc/fsl: Flush the branch predictor at each kernel entry (32 bit) powerpc/fsl: Emulate SPRN_BUCSR register powerpc/fsl: Flush branch predictor when entering KVM powerpc/fsl: Enable runtime patching if nospectre_v2 boot arg is used ipv4: set the tcp_min_rtt_wlen range from 0 to one day net: stmmac: move stmmac_check_ether_addr() to driver probe team: fix possible recursive locking when add slaves ipv4: add sanity checks in ipv4_link_failure() Revert "block/loop: Use global lock for ioctl() operation." bpf: reject wrong sized filters earlier tipc: check link name with right length in tipc_nl_compat_link_set tipc: check bearer name with right length in tipc_nl_compat_bearer_enable netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family. fs/proc/proc_sysctl.c: Fix a NULL pointer dereference intel_th: gth: Fix an off-by-one in output unassigning slip: make slhc_free() silently accept an error pointer tipc: handle the err returned from cmd header function powerpc/fsl: Fix the flush of branch predictor. powerpc/security: Fix spectre_v2 reporting powerpc/fsl: Update Spectre v2 reporting powerpc/fsl: Flush the branch predictor at each kernel entry (64bit) powerpc/fsl: Add nospectre_v2 command line argument powerpc/fsl: Fix spectre_v2 mitigations reporting powerpc/fsl: Add macro to flush the branch predictor powerpc/fsl: Add infrastructure to fixup branch predictor flush powerpc: Avoid code patching freed init sections powerpc/powernv: Query firmware for count cache flush settings powerpc/pseries: Query hypervisor for count cache flush settings powerpc/64s: Add support for software count cache flush powerpc/64s: Add new security feature flags for count cache flush powerpc/asm: Add a patch_site macro & helpers for patching instructions powerpc/fsl: Add barrier_nospec implementation for NXP PowerPC Book3E powerpc/64: Make meltdown reporting Book3S 64 specific powerpc/64: Call setup_barrier_nospec() from setup_arch() powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC powerpc/64: Make stf barrier PPC_BOOK3S_64 specific. powerpc/64: Disable the speculation barrier from the command line powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 powerpc/64s: Enhance the information in cpu_show_spectre_v1() powerpc: Use barrier_nospec in copy_from_user() powerpc/64: Use barrier_nospec in syscall entry powerpc/64s: Enable barrier_nospec based on firmware settings powerpc/64s: Patch barrier_nospec in modules powerpc/64s: Add support for ori barrier_nospec patching powerpc/64s: Add barrier_nospec powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit powerpc/64s: Fix section mismatch warnings from setup_rfi_flush() powerpc/pseries: Restore default security feature flags on setup powerpc: Move default security feature flags powerpc/pseries: Fix clearing of security feature flags powerpc/64s: Wire up cpu_show_spectre_v2() powerpc/64s: Wire up cpu_show_spectre_v1() powerpc/pseries: Use the security flags in pseries_setup_rfi_flush() powerpc/powernv: Use the security flags in pnv_setup_rfi_flush() powerpc/64s: Enhance the information in cpu_show_meltdown() powerpc/64s: Move cpu_show_meltdown() powerpc/powernv: Set or clear security feature flags powerpc/pseries: Set or clear security feature flags powerpc: Add security feature flags for Spectre/Meltdown powerpc/rfi-flush: Call setup_rfi_flush() after LPM migration powerpc/pseries: Add new H_GET_CPU_CHARACTERISTICS flags powerpc/rfi-flush: Differentiate enabled and patched flush types powerpc/rfi-flush: Always enable fallback flush on pseries powerpc/rfi-flush: Make it possible to call setup_rfi_flush() again powerpc/rfi-flush: Move the logic to avoid a redo into the debugfs code powerpc/powernv: Support firmware disable of RFI flush powerpc/pseries: Support firmware disable of RFI flush powerpc/64s: Improve RFI L1-D cache flush fallback powerpc/xmon: Add RFI flush related fields to paca dump USB: Consolidate LPM checks to avoid enabling LPM twice USB: Add new USB LPM helpers sunrpc: don't mark uninitialised items as VALID. nfsd: Don't release the callback slot unless it was actually held ceph: fix ci->i_head_snapc leak ceph: ensure d_name stability in ceph_dentry_hash() sched/numa: Fix a possible divide-by-zero trace: Fix preempt_enable_no_resched() abuse MIPS: scall64-o32: Fix indirect syscall number load cifs: do not attempt cifs operation on smb2+ rename error KVM: fail KVM_SET_VCPU_EVENTS with invalid exception number kbuild: simplify ld-option implementation ANDROID: cuttlefish_defconfig: Disable DEVTMPFS ANDROID: Move from clang r349610 to r353983c. f2fs: fix to avoid accessing xattr across the boundary f2fs: fix to avoid potential race on sbi->unusable_block_count access/update f2fs: add tracepoint for f2fs_filemap_fault() f2fs: introduce DATA_GENERIC_ENHANCE f2fs: fix to handle error in f2fs_disable_checkpoint() f2fs: remove redundant check in f2fs_file_write_iter() f2fs: fix to be aware of readonly device in write_checkpoint() f2fs: fix to skip recovery on readonly device f2fs: fix to consider multiple device for readonly check f2fs: relocate chksum_offset for large_nat_bitmap feature f2fs: allow unfixed f2fs_checkpoint.checksum_offset f2fs: Replace spaces with tab f2fs: insert space before the open parenthesis '(' f2fs: allow address pointer number of dnode aligning to specified size f2fs: introduce f2fs_read_single_page() for cleanup f2fs: mark is_extension_exist() inline f2fs: fix to set FI_UPDATE_WRITE correctly f2fs: fix to avoid panic in f2fs_inplace_write_data() f2fs: fix to do sanity check on valid block count of segment f2fs: fix to do sanity check on valid node/block count f2fs: fix to avoid panic in do_recover_data() f2fs: fix to do sanity check on free nid f2fs: fix to do checksum even if inode page is uptodate f2fs: fix to avoid panic in f2fs_remove_inode_page() f2fs: fix to clear dirty inode in error path of f2fs_iget() f2fs: remove new blank line of f2fs kernel message f2fs: fix wrong __is_meta_io() macro f2fs: fix to avoid panic in dec_valid_node_count() f2fs: fix to avoid panic in dec_valid_block_count() f2fs: fix to use inline space only if inline_xattr is enable f2fs: fix to retrieve inline xattr space f2fs: fix error path of recovery f2fs: fix to avoid deadloop in foreground GC f2fs: data: fix warning Using plain integer as NULL pointer f2fs: add tracepoint for f2fs_file_write_iter() f2fs: add comment for conditional compilation statement f2fs: fix potential recursive call when enabling data_flush f2fs: improve discard handling with multi-device volumes f2fs: Reduce zoned block device memory usage f2fs: Fix use of number of devices Sleepable function handle_lmk_event() is called in atomic context, so ignored the commit "ANDROID: Communicates LMK events to userland where they can be logged" Conflicts: arch/powerpc/include/asm/uaccess.h kernel/cpu.c kernel/irq/manage.c kernel/time/timer_stats.c net/ipv4/sysctl_net_ipv4.c Change-Id: I3e5bd447057b44a28fc5000403198ae0fd644480 Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| | * | Merge 4.4.180 into android-4.4Greg Kroah-Hartman2019-05-16
| | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 4.4.180 kbuild: simplify ld-option implementation KVM: fail KVM_SET_VCPU_EVENTS with invalid exception number cifs: do not attempt cifs operation on smb2+ rename error MIPS: scall64-o32: Fix indirect syscall number load trace: Fix preempt_enable_no_resched() abuse sched/numa: Fix a possible divide-by-zero ceph: ensure d_name stability in ceph_dentry_hash() ceph: fix ci->i_head_snapc leak nfsd: Don't release the callback slot unless it was actually held sunrpc: don't mark uninitialised items as VALID. USB: Add new USB LPM helpers USB: Consolidate LPM checks to avoid enabling LPM twice powerpc/xmon: Add RFI flush related fields to paca dump powerpc/64s: Improve RFI L1-D cache flush fallback powerpc/pseries: Support firmware disable of RFI flush powerpc/powernv: Support firmware disable of RFI flush powerpc/rfi-flush: Move the logic to avoid a redo into the debugfs code powerpc/rfi-flush: Make it possible to call setup_rfi_flush() again powerpc/rfi-flush: Always enable fallback flush on pseries powerpc/rfi-flush: Differentiate enabled and patched flush types powerpc/pseries: Add new H_GET_CPU_CHARACTERISTICS flags powerpc/rfi-flush: Call setup_rfi_flush() after LPM migration powerpc: Add security feature flags for Spectre/Meltdown powerpc/pseries: Set or clear security feature flags powerpc/powernv: Set or clear security feature flags powerpc/64s: Move cpu_show_meltdown() powerpc/64s: Enhance the information in cpu_show_meltdown() powerpc/powernv: Use the security flags in pnv_setup_rfi_flush() powerpc/pseries: Use the security flags in pseries_setup_rfi_flush() powerpc/64s: Wire up cpu_show_spectre_v1() powerpc/64s: Wire up cpu_show_spectre_v2() powerpc/pseries: Fix clearing of security feature flags powerpc: Move default security feature flags powerpc/pseries: Restore default security feature flags on setup powerpc/64s: Fix section mismatch warnings from setup_rfi_flush() powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit powerpc/64s: Add barrier_nospec powerpc/64s: Add support for ori barrier_nospec patching powerpc/64s: Patch barrier_nospec in modules powerpc/64s: Enable barrier_nospec based on firmware settings powerpc/64: Use barrier_nospec in syscall entry powerpc: Use barrier_nospec in copy_from_user() powerpc/64s: Enhance the information in cpu_show_spectre_v1() powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 powerpc/64: Disable the speculation barrier from the command line powerpc/64: Make stf barrier PPC_BOOK3S_64 specific. powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC powerpc/64: Call setup_barrier_nospec() from setup_arch() powerpc/64: Make meltdown reporting Book3S 64 specific powerpc/fsl: Add barrier_nospec implementation for NXP PowerPC Book3E powerpc/asm: Add a patch_site macro & helpers for patching instructions powerpc/64s: Add new security feature flags for count cache flush powerpc/64s: Add support for software count cache flush powerpc/pseries: Query hypervisor for count cache flush settings powerpc/powernv: Query firmware for count cache flush settings powerpc: Avoid code patching freed init sections powerpc/fsl: Add infrastructure to fixup branch predictor flush powerpc/fsl: Add macro to flush the branch predictor powerpc/fsl: Fix spectre_v2 mitigations reporting powerpc/fsl: Add nospectre_v2 command line argument powerpc/fsl: Flush the branch predictor at each kernel entry (64bit) powerpc/fsl: Update Spectre v2 reporting powerpc/security: Fix spectre_v2 reporting powerpc/fsl: Fix the flush of branch predictor. tipc: handle the err returned from cmd header function slip: make slhc_free() silently accept an error pointer intel_th: gth: Fix an off-by-one in output unassigning fs/proc/proc_sysctl.c: Fix a NULL pointer dereference NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family. netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON tipc: check bearer name with right length in tipc_nl_compat_bearer_enable tipc: check link name with right length in tipc_nl_compat_link_set bpf: reject wrong sized filters earlier Revert "block/loop: Use global lock for ioctl() operation." ipv4: add sanity checks in ipv4_link_failure() team: fix possible recursive locking when add slaves net: stmmac: move stmmac_check_ether_addr() to driver probe ipv4: set the tcp_min_rtt_wlen range from 0 to one day powerpc/fsl: Enable runtime patching if nospectre_v2 boot arg is used powerpc/fsl: Flush branch predictor when entering KVM powerpc/fsl: Emulate SPRN_BUCSR register powerpc/fsl: Flush the branch predictor at each kernel entry (32 bit) powerpc/fsl: Sanitize the syscall table for NXP PowerPC 32 bit platforms powerpc/fsl: Fixed warning: orphan section `__btb_flush_fixup' powerpc/fsl: Add FSL_PPC_BOOK3E as supported arch for nospectre_v2 boot arg Documentation: Add nospectre_v1 parameter usbnet: ipheth: prevent TX queue timeouts when device not ready usbnet: ipheth: fix potential null pointer dereference in ipheth_carrier_set qlcnic: Avoid potential NULL pointer dereference netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init() usb: gadget: net2280: Fix overrun of OUT messages usb: gadget: net2280: Fix net2280_dequeue() usb: gadget: net2272: Fix net2272_dequeue() ARM: dts: pfla02: increase phy reset duration net: ks8851: Dequeue RX packets explicitly net: ks8851: Reassert reset pin if chip ID check fails net: ks8851: Delay requesting IRQ until opened net: ks8851: Set initial carrier state to down net: xilinx: fix possible object reference leak net: ibm: fix possible object reference leak net: ethernet: ti: fix possible object reference leak scsi: qla4xxx: fix a potential NULL pointer dereference usb: u132-hcd: fix resource leak ceph: fix use-after-free on symlink traversal scsi: zfcp: reduce flood of fcrscn1 trace records on multi-element RSCN libata: fix using DMA buffers on stack kconfig/[mn]conf: handle backspace (^H) key vfio/type1: Limit DMA mappings per container ALSA: line6: use dynamic buffers ipv4: ip_do_fragment: Preserve skb_iif during fragmentation ipv6/flowlabel: wait rcu grace period before put_pid() ipv6: invert flowlabel sharing check in process and user mode bnxt_en: Improve multicast address setup logic. packet: validate msg_namelen in send directly USB: yurex: Fix protection fault after device removal USB: w1 ds2490: Fix bug caused by improper use of altsetting array USB: core: Fix unterminated string returned by usb_string() USB: core: Fix bug caused by duplicate interface PM usage counter HID: debug: fix race condition with between rdesc_show() and device removal rtc: sh: Fix invalid alarm warning for non-enabled alarm igb: Fix WARN_ONCE on runtime suspend bonding: show full hw address in sysfs for slave entries jffs2: fix use-after-free on symlink traversal debugfs: fix use-after-free on symlink traversal rtc: da9063: set uie_unsupported when relevant vfio/pci: use correct format characters scsi: storvsc: Fix calculation of sub-channel count net: hns: Use NAPI_POLL_WEIGHT for hns driver net: hns: Fix WARNING when remove HNS driver with SMMU enabled hugetlbfs: fix memory leak for resv_map xsysace: Fix error handling in ace_setup ARM: orion: don't use using 64-bit DMA masks ARM: iop: don't use using 64-bit DMA masks usb: usbip: fix isoc packet num validation in get_pipe staging: iio: adt7316: allow adt751x to use internal vref for all dacs staging: iio: adt7316: fix the dac read calculation staging: iio: adt7316: fix the dac write calculation Input: snvs_pwrkey - initialize necessary driver data before enabling IRQ selinux: never allow relabeling on context mounts x86/mce: Improve error message when kernel cannot recover, p2 media: v4l2: i2c: ov7670: Fix PLL bypass register values scsi: libsas: fix a race condition when smp task timeout ASoC:soc-pcm:fix a codec fixup issue in TDM case ASoC: cs4270: Set auto-increment bit for register writes ASoC: tlv320aic32x4: Fix Common Pins perf/x86/intel: Fix handling of wakeup_events for multi-entry PEBS scsi: csiostor: fix missing data copy in csio_scsi_err_handler() iommu/amd: Set exclusion range correctly genirq: Prevent use-after-free and work list corruption usb: dwc3: Fix default lpm_nyet_threshold value scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines Bluetooth: hidp: fix buffer overflow Bluetooth: Align minimum encryption key size for LE and BR/EDR connections UAS: fix alignment of scatter/gather segments ipv6: fix a potential deadlock in do_ipv6_setsockopt() ASoC: Intel: avoid Oops if DMA setup fails timer/debug: Change /proc/timer_stats from 0644 to 0600 netfilter: compat: initialize all fields in xt_init platform/x86: sony-laptop: Fix unintentional fall-through iio: adc: xilinx: fix potential use-after-free on remove HID: input: add mapping for Expose/Overview key HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys libnvdimm/btt: Fix a kmemdup failure check s390/dasd: Fix capacity calculation for large volumes s390/3270: fix lockdep false positive on view->lock KVM: x86: avoid misreporting level-triggered irqs as edge-triggered in tracing tools lib traceevent: Fix missing equality check for strcmp init: initialize jump labels before command line option parsing ipvs: do not schedule icmp errors from tunnels s390: ctcm: fix ctcm_new_device error return code selftests/net: correct the return value for run_netsocktests gpu: ipu-v3: dp: fix CSC handling cw1200: fix missing unlock on error in cw1200_hw_scan() x86/vdso: Pass --eh-frame-hdr to the linker Don't jump to compute_result state from check_result state locking/static_keys: Provide DECLARE and well as DEFINE macros x86/microcode/intel: Add a helper which gives the microcode revision x86: stop exporting msr-index.h to userland bitops: avoid integer overflow in GENMASK(_ULL) x86/microcode/intel: Check microcode revision before updating sibling threads x86/MCE: Save microcode revision in machine check records x86/cpufeatures: Hide AMD-specific speculation flags x86/speculation: Support Enhanced IBRS on future CPUs x86/speculation: Simplify the CPU bug detection logic x86/bugs: Add AMD's variant of SSB_NO x86/bugs: Add AMD's SPEC_CTRL MSR usage x86/bugs: Switch the selection of mitigation from CPU vendor to CPU features locking/atomics, asm-generic: Move some macros from <linux/bitops.h> to a new <linux/bits.h> file x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR x86/speculation: Remove SPECTRE_V2_IBRS in enum spectre_v2_mitigation x86/microcode: Make sure boot_cpu_data.microcode is up-to-date x86/microcode: Update the new microcode revision unconditionally x86/cpu: Sanitize FAM6_ATOM naming KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled x86/mm: Use WRITE_ONCE() when setting PTEs x86/speculation: Apply IBPB more strictly to avoid cross-process data leak x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation x86/speculation: Propagate information about RSB filling mitigation to sysfs x86/speculation: Update the TIF_SSBD comment x86/speculation: Clean up spectre_v2_parse_cmdline() x86/speculation: Remove unnecessary ret variable in cpu_show_common() x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() x86/speculation: Disable STIBP when enhanced IBRS is in use x86/speculation: Rename SSBD update functions x86/speculation: Reorganize speculation control MSRs update x86/Kconfig: Select SCHED_SMT if SMP enabled sched: Add sched_smt_active() x86/speculation: Rework SMT state change x86/speculation: Reorder the spec_v2 code x86/speculation: Mark string arrays const correctly x86/speculataion: Mark command line parser data __initdata x86/speculation: Unify conditional spectre v2 print functions x86/speculation: Add command line control for indirect branch speculation x86/speculation: Prepare for per task indirect branch speculation control x86/process: Consolidate and simplify switch_to_xtra() code x86/speculation: Avoid __switch_to_xtra() calls x86/speculation: Prepare for conditional IBPB in switch_mm() x86/speculation: Split out TIF update x86/speculation: Prepare arch_smt_update() for PRCTL mode x86/speculation: Prevent stale SPEC_CTRL msr content x86/speculation: Add prctl() control for indirect branch speculation x86/speculation: Enable prctl mode for spectre_v2_user x86/speculation: Add seccomp Spectre v2 user space protection mode x86/speculation: Provide IBPB always command line options kvm: x86: Report STIBP on GET_SUPPORTED_CPUID x86/msr-index: Cleanup bit defines x86/speculation: Consolidate CPU whitelists x86/speculation/mds: Add basic bug infrastructure for MDS x86/speculation/mds: Add BUG_MSBDS_ONLY x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests x86/speculation/mds: Add mds_clear_cpu_buffers() x86/speculation/mds: Clear CPU buffers on exit to user x86/speculation/mds: Conditionally clear CPU buffers on idle entry x86/speculation/mds: Add mitigation control for MDS x86/speculation/l1tf: Document l1tf in sysfs x86/speculation/mds: Add sysfs reporting for MDS x86/speculation/mds: Add mitigation mode VMWERV Documentation: Move L1TF to separate directory Documentation: Add MDS vulnerability documentation x86/cpu/bugs: Use __initconst for 'const' init data x86/speculation: Move arch_smt_update() call to after mitigation decisions x86/speculation/mds: Add SMT warning message x86/speculation/mds: Fix comment x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off cpu/speculation: Add 'mitigations=' cmdline option x86/speculation: Support 'mitigations=' cmdline option x86/speculation/mds: Add 'mitigations=' support for MDS x86/mds: Add MDSUM variant to the MDS documentation Documentation: Correct the possible MDS sysfs values x86/speculation/mds: Fix documentation typo x86/bugs: Change L1TF mitigation string to match upstream USB: serial: use variable for status USB: serial: fix unthrottle races powerpc/64s: Include cpu header bridge: Fix error path for kobject_init_and_add() net: ucc_geth - fix Oops when changing number of buffers in the ring packet: Fix error path in packet_init vlan: disable SIOCSHWTSTAMP in container vrf: sit mtu should not be updated when vrf netdev is the link ipv4: Fix raw socket lookup for local traffic bonding: fix arp_validate toggling in active-backup mode drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl powerpc/booke64: set RI in default MSR powerpc/lib: fix book3s/32 boot failure due to code patching Linux 4.4.180 Change-Id: If2d2fdd451b55c002666b32022b269cec9545607 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
| | | * cw1200: fix missing unlock on error in cw1200_hw_scan()Wei Yongjun2019-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit 51c8d24101c79ffce3e79137e2cee5dfeb956dd7 upstream. Add the missing unlock before return from function cw1200_hw_scan() in the error handling case. Fixes: 4f68ef64cd7f ("cw1200: Fix concurrency use-after-free bugs in cw1200_hw_scan()") Signed-off-by: Wei Yongjun <weiyongjun1@huawei.com> Acked-by: Jia-Ju Bai <baijiaju1990@gmail.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> [iwamatsu: Change the patching file from drivers/net/wireless/st/cw1200/scan.c to drivers/net/wireless/cw1200/scan.c] Signed-off-by: Nobuhiro Iwamatsu <nobuhiro1.iwamatsu@toshiba.co.jp> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
* | | | Merge LA.UM.7.5.2.r1-02900-8x96.0 of ↵Davide Garberi2019-05-23
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://source.codeaurora.org/quic/la/kernel/msm-4.4 into lineage-16.0 406cc39b36ea update markings as per reference 24fb5a925534 Merge changes Icd8b7e33,I275cb471,I7f7420c7,Ib8552e66 into kernel.lnx.4.4.r37-rel 0766f7d0f3a2 Merge "dsp: afe: check for minimum size before payload access" into kernel.lnx.4.4.r37-rel a6207a7ffe45 msm: camera_v2: handle the error value returned during get clock. 342c54c1fff1 msm: ais: handle the error value returned during get clock 82b8bf6d259a msm: camera : Lock Implementation for avoid race condition. 98ca69a73a10 msm: ais : Lock Implementation for avoid race condition 0e3021b2b072 dsp: afe: check for minimum size before payload access 73b996d01780 Merge 22dc337a69af6c8b2aceecb3cbaef9049ef4fb73 on remote branch 22dc337a69af Merge "msm: mdss: mdp: mixer allocation for pluggable primary display" 830b7b50b385 Merge "msm: kgsl: Fix race condition while making page as dirty" cd6e1cd22ba4 Merge "diag: Validate command length against size of command structure" 7939ca71f88f Merge "misc: ksbridge: Add support for sending uevent with pid/vid" a4b2d7442de2 Merge "usb: misc: lvstest: allow specifying port for compliance mode" 0052d7171569 Merge "usb: misc: lvstest: add entry to place port in compliance mode" 64baae1cd96f Merge "usb: xhci: Support enabling of compliance mode for xhci 1.1" 5ee084c81212 Merge "drm/msm/sde: fix null pointer dereference" 40adef7ded1b Merge "Merge android-4.4.179 (aab9adb) into msm-4.4" 061ce1d939fa diag: Validate command length against size of command structure 2b163b082a57 misc: ksbridge: Add support for sending uevent with pid/vid 1d02b55727d5 msm: kgsl: Fix race condition while making page as dirty adebb0daf71c drm/msm/sde: fix null pointer dereference 589a44d37aba Merge "icnss: Add a flag to indicate PDR" d5f5ce057085 usb: misc: lvstest: allow specifying port for compliance mode 210c76dde3d4 usb: misc: lvstest: add entry to place port in compliance mode b989396a449f usb: xhci: Support enabling of compliance mode for xhci 1.1 57cc803c86c0 Merge "defconfig: msm: Enable USB3 Link Layer test driver for 8996 Auto" d65b615af64f Merge "ARM: dts: msm: Add "qcom,core-dev-table" for msm8996 target" 34c8ac8b2bda Merge "soc: qcom: secure_buffer: Process large SG tables in batches" b08dd67c711f icnss: Add a flag to indicate PDR 32ebd2b51c3a ARM: dts: msm: Add "qcom,core-dev-table" for msm8996 target 680e896288b6 soc: qcom: secure_buffer: Process large SG tables in batches 43808cc02cbc Merge "msm: adm: validate ADSP payload size before access" f4d62ca185dd cnss2: Expose idle restart/shutdown APIs 5a03c1bc9c2b Merge "ARM: dts: msm: move bluetooth node under /vendor for 8996 platform" b5b335db32a1 drivers: qpnp-smbcharger: Fix USB3.0 device does not enumerate in SS mode 52fbc05fb3f3 ARM: dts: msm: move bluetooth node under /vendor for 8996 platform 325632da862b Merge android-4.4.179 (aab9adb) into msm-4.4 78a2fca7feac Merge "drm/msm: ekms: Wait for a vblank in ekms disable" 1a886ff9a1ed Merge "diag: Check buffer size against command structure size" 9a7a4b510d9f diag: Check buffer size against command structure size f175c863efb4 Merge "msm: ipa3: add check to load gsi fw once" 67fabb639087 msm: ipa3: add check to load gsi fw once 5b134f53b323 msm: adm: validate ADSP payload size before access 33ddfc515d05 Merge "msm: ipa: Move NAT invalid protocol define to uapi" aab9adb4b81b Merge 4.4.179 into android-4.4 ecfba02e8979 Merge "cfg80211/nl80211: Offload OWE processing to user space in AP mode" 744acb857e4b Merge "dsp: afe: check for payload size before payload access" f3cf97aa3cfd msm: ipa: Move NAT invalid protocol define to uapi f12b2d3f77a5 cnss2: Expose PCIe DRV connection status 641f454cb5de dsp: afe: check for payload size before payload access d9f2f007f3f0 Merge "diag: dci: Validate dci response length before parsing" 5875149a400a Linux 4.4.179 e6ca59daafd0 kernel/sysctl.c: fix out-of-bounds access when setting file-max 70a0882cd600 Revert "locking/lockdep: Add debug_locks check in __lock_downgrade()" abc81720ea87 ALSA: info: Fix racy addition/deletion of nodes 0e4d4e0d6ba9 mm/vmstat.c: fix /proc/vmstat format for CONFIG_DEBUG_TLBFLUSH=y CONFIG_SMP=n 4088997e5dc1 device_cgroup: fix RCU imbalance in error case 20fdfad30c43 sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup 568f6b28743c Revert "kbuild: use -Oz instead of -Os when using clang" 9090d691a874 mac80211: do not call driver wake_tx_queue op during reconfig e70a2d376c59 kprobes: Fix error check when reusing optimized probes abb5b93fe0f5 kprobes: Mark ftrace mcount handler functions nokprobe 3dda8d29b56e x86/kprobes: Verify stack frame on kretprobe bc76b595cd13 arm64: futex: Restore oldval initialization to work around buggy compilers 7977328f4265 crypto: x86/poly1305 - fix overflow during partial reduction f94135f92d97 ALSA: core: Fix card races between register and disconnect 0241c6f9f56c staging: comedi: ni_usb6501: Fix possible double-free of ->usb_rx_buf 9f2bf97bb6c3 staging: comedi: ni_usb6501: Fix use of uninitialized mutex 1d149c6cfcd1 staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf 32ae16ff1eaf staging: comedi: vmk80xx: Fix use of uninitialized semaphore dc4f96499d43 io: accel: kxcjk1013: restore the range after resume. 07921e3cb1ea iio: adc: at91: disable adc channel interrupt in timeout case c69e21be54b4 iio: ad_sigma_delta: select channel when reading register e20204c43c0b iio/gyro/bmg160: Use millidegrees for temperature scale eaa303a2d65d KVM: x86: Don't clear EFER during SMM transitions for 32-bit vCPU 83a98463d6f9 tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete 5721b1717bd6 modpost: file2alias: check prototype of handler 5a25b6f93f84 modpost: file2alias: go back to simple devtable lookup e9a60ab1609a crypto: crypto4xx - properly set IV after de- and encrypt faac81f7cb34 ipv4: ensure rcu_read_lock() in ipv4_link_failure() fbf569d2beee ipv4: recompile ip options in ipv4_link_failure b6d37bba0f7a tcp: tcp_grow_window() needs to respect tcp_space() b1aaee5a97c9 net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv dc20066a631c net: bridge: multicast: use rcu to access port list from br_multicast_start_querier 423ffcd5136c net: atm: Fix potential Spectre v1 vulnerabilities d8e18cccd25e bonding: fix event handling for stacked bonds 9ca0f944a76b appletalk: Fix compile regression 54a07fff4b21 ovl: fix uid/gid when creating over whiteout df57807765dd tpm/tpm_crb: Avoid unaligned reads in crb_recv() c947b45f2e0c include/linux/swap.h: use offsetof() instead of custom __swapoffset macro aaedb76c488e lib/div64.c: off by one in shift d49a75f5add4 appletalk: Fix use-after-free in atalk_proc_exit 4528b128bbbc ARM: 8839/1: kprobe: make patch_lock a raw_spinlock_t 3d1167107004 iommu/dmar: Fix buffer overflow during PCI bus notification cc8c23ad5ec8 crypto: sha512/arm - fix crash bug in Thumb2 build 8a2dd49a63c7 crypto: sha256/arm - fix crash bug in Thumb2 build 740562f32daa cifs: fallback to older infolevels on findfirst queryinfo retry c49c3925a846 ACPI / SBS: Fix GPE storm on recent MacBookPro's 1e3975db46da ARM: samsung: Limit SAMSUNG_PM_CHECK config option to non-Exynos platforms 3e56f3036b4d serial: uartps: console_setup() can't be placed to init section 045aac482ad9 f2fs: fix to do sanity check with current segment number 6891371a2d57 9p locks: add mount option for lock retry interval ff831803330c 9p: do not trust pdu content for stat item size ec759c0015fb rsi: improve kernel thread handling to fix kernel panic 48fda9500637 ext4: prohibit fstrim in norecovery mode 0f2d3133530a fix incorrect error code mapping for OBJECTID_NOT_FOUND 35ee305cfe4c x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return an error 158c4cb0d686 iommu/vt-d: Check capability before disabling protected memory 1a883611e2f2 x86/cpu/cyrix: Use correct macros for Cyrix calls on Geode processors c2dc2fdc0cd1 x86/hpet: Prevent potential NULL pointer dereference b17b42fbad1b perf tests: Fix a memory leak in test__perf_evsel__tp_sched_test() 98977a809cda perf tests: Fix a memory leak of cpu_map object in the openat_syscall_event_on_all_cpus test 8b89e3c3cf7f perf evsel: Free evsel->counts in perf_evsel__exit() f0023871b339 perf top: Fix error handling in cmd_top() 63e03efad5ec tools/power turbostat: return the exit status of a command 3a3e67537041 thermal/int340x_thermal: fix mode setting 25c001949c93 thermal/int340x_thermal: Add additional UUIDs 149f72ff296e ALSA: opl3: fix mismatch between snd_opl3_drum_switch definition and declaration 9bb0b8e34607 mmc: davinci: remove extraneous __init annotation b33c00770b36 IB/mlx4: Fix race condition between catas error reset and aliasguid flows 0a2741cd5269 ALSA: sb8: add a check for request_region 574469ec6dcf ALSA: echoaudio: add a check for ioremap_nocache 0e9bb07a374a ext4: report real fs size after failed resize d8ef8e9465ef ext4: add missing brelse() in add_new_gdb_meta_bg() e92dc325a560 perf/core: Restore mmap record type correctly 653ee8df1f32 PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller 34419534a70a xtensa: fix return_address e15f3c34844e sched/fair: Do not re-read ->h_load_next during hierarchical load calculation c082a57d41de xen: Prevent buffer overflow in privcmd ioctl 442ebc685261 arm64: futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value e9b63a38da24 ARM: dts: at91: Fix typo in ISC_D0 on PC9 39aecae01dd2 genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent() f449309b7f43 block: do not leak memory in bio_copy_user_iov() ad344fb86201 ASoC: fsl_esai: fix channel swap issue when stream starts 4e843163c6d9 include/linux/bitrev.h: fix constant bitrev ae9981cee7b3 ALSA: seq: Fix OOB-reads from strlcpy 3efb978c3c73 ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type 8ed95ff262aa net: ethtool: not call vzalloc for zero sized memory request 0ede14314f6d netns: provide pure entropy for net_hash_mix() 68337354043a tcp: Ensure DCTCP reacts to losses 03328716cb33 sctp: initialize _pad of sockaddr_in before copying to user memory 1edf53ecd2ae qmi_wwan: add Olicard 600 91d95c98c6c2 openvswitch: fix flow actions reallocation c4e97b06cfdc net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock(). a04dde4e15d7 ipv6: sit: reset ip header pointer in ipip6_rcv c0aeeafae944 ipv6: Fix dangling pointer when ipv6 fragment c9b31a7e6726 tty: ldisc: add sysctl to prevent autoloading of ldiscs c3e76f072adb tty: mark Siemens R3964 line discipline as BROKEN 780e236c3737 lib/string.c: implement a basic bcmp 7c45b45fd6e9 x86/vdso: Drop implicit common-page-size linker flag 79739ad2d0ac x86: vdso: Use $LD instead of $CC to link b79e268b1fb4 x86/build: Specify elf_i386 linker emulation explicitly for i386 objects a34640de4046 kbuild: clang: choose GCC_TOOLCHAIN_DIR not on LD 1eb40df35d99 binfmt_elf: switch to new creds when switching to new mm 7ad57b32aa08 drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers 04ce0e76959c dmaengine: tegra: avoid overflow of byte tracking 589562152f36 x86/build: Mark per-CPU symbols as absolute explicitly for LLD 517fbf72718e wlcore: Fix memory leak in case wl12xx_fetch_firmware failure f2606873984e regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting 98bbbf661567 media: s5p-jpeg: Check for fmt_ver_flag when doing fmt enumeration 421d2aae103c netfilter: physdev: relax br_netfilter dependency 10fc10c3270d dmaengine: imx-dma: fix warning comparison of distinct pointer types e5cb8ab4b0e0 hpet: Fix missing '=' character in the __setup() code of hpet_mmap_enable cdc7a66f679e soc/tegra: fuse: Fix illegal free of IO base address 407f1a8b8d7d hwrng: virtio - Avoid repeated init of completion a6adffa0fff4 media: mt9m111: set initial frame size other than 0x0 d1ba82ccffab tty: increase the default flip buffer limit to 2*640K d9c190a5ee92 ARM: avoid Cortex-A9 livelock on tight dmb loops c627e297b9b6 mt7601u: bump supported EEPROM version 5735cd4e0c78 soc: qcom: gsbi: Fix error handling in gsbi_probe() b396b5e89be6 ASoC: fsl-asoc-card: fix object reference leaks in fsl_asoc_card_probe 46ff76bd4ea1 cdrom: Fix race condition in cdrom_sysctl_register 6b8382afa7af fbdev: fbmem: fix memory access if logo is bigger than the screen 267da08ea979 bcache: improve sysfs_strtoul_clamp() 97f00d95dfb0 bcache: fix input overflow to sequential_cutoff d775179e00cd bcache: fix input overflow to cache set sysfs file io_error_halflife b25147b49301 ALSA: PCM: check if ops are defined before suspending PCM b67ef52116de ARM: 8833/1: Ensure that NEON code always compiles with Clang 7d4d46f51d6c kprobes: Prohibit probing on bsearch() f1289edae514 leds: lp55xx: fix null deref on firmware load failure abcbad869e68 media: mx2_emmaprp: Correct return type for mem2mem buffer helpers 0bc5f939031c media: s5p-g2d: Correct return type for mem2mem buffer helpers 9f127b7284eb media: s5p-jpeg: Correct return type for mem2mem buffer helpers 3967d2d6bcc9 media: sh_veu: Correct return type for mem2mem buffer helpers 853e3862a8d0 SoC: imx-sgtl5000: add missing put_device() 7a3626330297 perf test: Fix failure of 'evsel-tp-sched' test on s390 09a6db51dcb4 scsi: megaraid_sas: return error when create DMA pool failed 98f7f1cf74e4 IB/mlx4: Increase the timeout for CM cache f8d1bf871805 e1000e: Fix -Wformat-truncation warnings 3bd631e5360e mmc: omap: fix the maximum timeout setting 1c2bfc4636de ARM: 8840/1: use a raw_spinlock_t in unwind 2f36d3ea8c55 coresight: etm4x: Add support to enable ETMv4.2 2ad89a6a0dba scsi: core: replace GFP_ATOMIC with GFP_KERNEL in scsi_scan.c f3666bfc4bc4 usb: chipidea: Grab the (legacy) USB PHY by phandle first be8e9e9ebffb tools lib traceevent: Fix buffer overflow in arg_eval 2e5086f3ac6f fs: fix guard_bio_eod to check for real EOD errors 8f983d2cbfad cifs: Fix NULL pointer dereference of devname 4a430ac683b3 dm thin: add sanity checks to thin-pool and external snapshot creation 1605df0045d9 cifs: use correct format characters 1eaab115dc7c fs/file.c: initialize init_files.resize_wait 9b7e7899386f f2fs: do not use mutex lock in atomic context 6c96456d9302 ocfs2: fix a panic problem caused by o2cb_ctl b1399497b701 mm/slab.c: kmemleak no scan alien caches cb4d6cd27604 mm/vmalloc.c: fix kernel BUG at mm/vmalloc.c:512! 2ea83494ce11 mm/page_ext.c: fix an imbalance with kmemleak 4970a8ba94ca mm/cma.c: cma_declare_contiguous: correct err handling 722a15d798ff enic: fix build warning without CONFIG_CPUMASK_OFFSTACK cf503f1b938f sysctl: handle overflow for file-max 28833fee9f4a gpio: gpio-omap: fix level interrupt idling f7b7a59b47a0 tracing: kdb: Fix ftdump to not sleep 09f4e69e09f5 h8300: use cc-cross-prefix instead of hardcoding h8300-unknown-linux- f6e4bc5003ff CIFS: fix POSIX lock leak and invalid ptr deref a6efba2fc33b tty/serial: atmel: RS485 HD w/DMA: enable RX after TX is stopped 59ae59920af8 Bluetooth: Fix decrementing reference count twice in releasing socket 02bfc06ca2fa i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA b3b489eea284 mm: mempolicy: make mbind() return -EIO when MPOL_MF_STRICT is specified a526c14d841b tty/serial: atmel: Add is_half_duplex helper 6f88ce1ff225 lib/int_sqrt: optimize initial value compute 3f44dacd111a ext4: cleanup bh release code in ext4_ind_remove_space() 20df60004a3a arm64: debug: Ensure debug handlers check triggering exception level a930f8ce2003 arm64: debug: Don't propagate UNKNOWN FAR into si_code for debug signals c1cd71e6ee5e diag: dci: Validate dci response length before parsing 2f026ab7c4c7 Merge "msm: wlan: Update regulatory rules for JM" cb95c3b72b79 msm: wlan: Update regulatory rules for JM ef08a221c531 Merge "msm: wlan: Update regulatory database" 220e29e977aa msm: wlan: Update regulatory database d7d16e7e87d2 Merge "defconfig: msm: Enable MFSE QMI client driver on automotive" 3cb076a33884 Merge "soc: qcom: Add QMI client driver for MFSE service" c5319c46a1c1 Merge "ARM: dts: msm: Limit USB3 maximum speed to high for MSM8996 ADP" 1ba1a2f71fc1 defconfig: msm: Enable USB3 Link Layer test driver for 8996 Auto 748303a5169c Merge "dsp: q6core: validate payload size before memory copy" 9f6ce3043e2e Merge "msm: ext_disp: re-initialize hpd completion before signaling events" d3a9050f4f7f msm: ext_disp: re-initialize hpd completion before signaling events 3d1854afebdb Merge "diag: Prevent out of bound access while getting build mask" 57a9ae0f5688 Merge "diag: Check command size against the minimum before parsing" 5c6e98d4e4da Merge "diag: dci: Add missing length check before parsing the buffer" ef3ade93af0f diag: Prevent out of bound access while getting build mask 337a4a87989e diag: Check command size against the minimum before parsing c2b12fecfa29 diag: dci: Add missing length check before parsing the buffer 0ef01d4c95a8 dsp: q6core: validate payload size before memory copy 38d4aa7f0277 msm: For camera driver Adding null checks to uninitialize 147ed3c774d9 Merge "Revert "cfg80211/nl80211: Offload OWE processing to user space"" 523d657b6d08 drm/msm: ekms: Wait for a vblank in ekms disable 633bf5e4dbca cfg80211/nl80211: Offload OWE processing to user space in AP mode 8a44273ed583 Revert "cfg80211/nl80211: Offload OWE processing to user space" f555a6f2d830 ARM: dts: msm: Limit USB3 maximum speed to high for MSM8996 ADP d680847c5813 defconfig: msm: Enable MFSE QMI client driver on automotive a419e9823ca9 soc: qcom: Add QMI client driver for MFSE service 74f9ab0d3ed3 Make arm64 serial port config compatible with crosvm e85ceffc863d msm: mdss: mdp: mixer allocation for pluggable primary display 07797f0ce789 Fix merge issue with 4.4.178 abe4979abd87 Fix merge issue with 4.4.177 aa922bed25d4 ANDROID: cuttlefish_defconfig: Enable CONFIG_OVERLAY_FS Change-Id: I0eca09f00b012afd72006541b20fb23969c4531e
| * | | Merge "Merge android-4.4.179 (aab9adb) into msm-4.4"Linux Build Service Account2019-05-08
| |\ \ \
| | * | | Merge android-4.4.179 (aab9adb) into msm-4.4Srinivasarao P2019-05-02
| | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-aab9adb Linux 4.4.179 kernel/sysctl.c: fix out-of-bounds access when setting file-max Revert "locking/lockdep: Add debug_locks check in __lock_downgrade()" ALSA: info: Fix racy addition/deletion of nodes mm/vmstat.c: fix /proc/vmstat format for CONFIG_DEBUG_TLBFLUSH=y CONFIG_SMP=n device_cgroup: fix RCU imbalance in error case sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup Revert "kbuild: use -Oz instead of -Os when using clang" mac80211: do not call driver wake_tx_queue op during reconfig kprobes: Fix error check when reusing optimized probes kprobes: Mark ftrace mcount handler functions nokprobe x86/kprobes: Verify stack frame on kretprobe arm64: futex: Restore oldval initialization to work around buggy compilers crypto: x86/poly1305 - fix overflow during partial reduction ALSA: core: Fix card races between register and disconnect staging: comedi: ni_usb6501: Fix possible double-free of ->usb_rx_buf staging: comedi: ni_usb6501: Fix use of uninitialized mutex staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf staging: comedi: vmk80xx: Fix use of uninitialized semaphore io: accel: kxcjk1013: restore the range after resume. iio: adc: at91: disable adc channel interrupt in timeout case iio: ad_sigma_delta: select channel when reading register iio/gyro/bmg160: Use millidegrees for temperature scale KVM: x86: Don't clear EFER during SMM transitions for 32-bit vCPU tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete modpost: file2alias: check prototype of handler modpost: file2alias: go back to simple devtable lookup crypto: crypto4xx - properly set IV after de- and encrypt ipv4: ensure rcu_read_lock() in ipv4_link_failure() ipv4: recompile ip options in ipv4_link_failure tcp: tcp_grow_window() needs to respect tcp_space() net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv net: bridge: multicast: use rcu to access port list from br_multicast_start_querier net: atm: Fix potential Spectre v1 vulnerabilities bonding: fix event handling for stacked bonds appletalk: Fix compile regression ovl: fix uid/gid when creating over whiteout tpm/tpm_crb: Avoid unaligned reads in crb_recv() include/linux/swap.h: use offsetof() instead of custom __swapoffset macro lib/div64.c: off by one in shift appletalk: Fix use-after-free in atalk_proc_exit ARM: 8839/1: kprobe: make patch_lock a raw_spinlock_t iommu/dmar: Fix buffer overflow during PCI bus notification crypto: sha512/arm - fix crash bug in Thumb2 build crypto: sha256/arm - fix crash bug in Thumb2 build cifs: fallback to older infolevels on findfirst queryinfo retry ACPI / SBS: Fix GPE storm on recent MacBookPro's ARM: samsung: Limit SAMSUNG_PM_CHECK config option to non-Exynos platforms serial: uartps: console_setup() can't be placed to init section f2fs: fix to do sanity check with current segment number 9p locks: add mount option for lock retry interval 9p: do not trust pdu content for stat item size rsi: improve kernel thread handling to fix kernel panic ext4: prohibit fstrim in norecovery mode fix incorrect error code mapping for OBJECTID_NOT_FOUND x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return an error iommu/vt-d: Check capability before disabling protected memory x86/cpu/cyrix: Use correct macros for Cyrix calls on Geode processors x86/hpet: Prevent potential NULL pointer dereference perf tests: Fix a memory leak in test__perf_evsel__tp_sched_test() perf tests: Fix a memory leak of cpu_map object in the openat_syscall_event_on_all_cpus test perf evsel: Free evsel->counts in perf_evsel__exit() perf top: Fix error handling in cmd_top() tools/power turbostat: return the exit status of a command thermal/int340x_thermal: fix mode setting thermal/int340x_thermal: Add additional UUIDs ALSA: opl3: fix mismatch between snd_opl3_drum_switch definition and declaration mmc: davinci: remove extraneous __init annotation IB/mlx4: Fix race condition between catas error reset and aliasguid flows ALSA: sb8: add a check for request_region ALSA: echoaudio: add a check for ioremap_nocache ext4: report real fs size after failed resize ext4: add missing brelse() in add_new_gdb_meta_bg() perf/core: Restore mmap record type correctly PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller xtensa: fix return_address sched/fair: Do not re-read ->h_load_next during hierarchical load calculation xen: Prevent buffer overflow in privcmd ioctl arm64: futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value ARM: dts: at91: Fix typo in ISC_D0 on PC9 genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent() block: do not leak memory in bio_copy_user_iov() ASoC: fsl_esai: fix channel swap issue when stream starts include/linux/bitrev.h: fix constant bitrev ALSA: seq: Fix OOB-reads from strlcpy ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type net: ethtool: not call vzalloc for zero sized memory request netns: provide pure entropy for net_hash_mix() tcp: Ensure DCTCP reacts to losses sctp: initialize _pad of sockaddr_in before copying to user memory qmi_wwan: add Olicard 600 openvswitch: fix flow actions reallocation net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock(). ipv6: sit: reset ip header pointer in ipip6_rcv ipv6: Fix dangling pointer when ipv6 fragment tty: ldisc: add sysctl to prevent autoloading of ldiscs tty: mark Siemens R3964 line discipline as BROKEN lib/string.c: implement a basic bcmp x86/vdso: Drop implicit common-page-size linker flag x86: vdso: Use $LD instead of $CC to link x86/build: Specify elf_i386 linker emulation explicitly for i386 objects kbuild: clang: choose GCC_TOOLCHAIN_DIR not on LD binfmt_elf: switch to new creds when switching to new mm drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers dmaengine: tegra: avoid overflow of byte tracking x86/build: Mark per-CPU symbols as absolute explicitly for LLD wlcore: Fix memory leak in case wl12xx_fetch_firmware failure regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting media: s5p-jpeg: Check for fmt_ver_flag when doing fmt enumeration netfilter: physdev: relax br_netfilter dependency dmaengine: imx-dma: fix warning comparison of distinct pointer types hpet: Fix missing '=' character in the __setup() code of hpet_mmap_enable soc/tegra: fuse: Fix illegal free of IO base address hwrng: virtio - Avoid repeated init of completion media: mt9m111: set initial frame size other than 0x0 tty: increase the default flip buffer limit to 2*640K ARM: avoid Cortex-A9 livelock on tight dmb loops mt7601u: bump supported EEPROM version soc: qcom: gsbi: Fix error handling in gsbi_probe() ASoC: fsl-asoc-card: fix object reference leaks in fsl_asoc_card_probe cdrom: Fix race condition in cdrom_sysctl_register fbdev: fbmem: fix memory access if logo is bigger than the screen bcache: improve sysfs_strtoul_clamp() bcache: fix input overflow to sequential_cutoff bcache: fix input overflow to cache set sysfs file io_error_halflife ALSA: PCM: check if ops are defined before suspending PCM ARM: 8833/1: Ensure that NEON code always compiles with Clang kprobes: Prohibit probing on bsearch() leds: lp55xx: fix null deref on firmware load failure media: mx2_emmaprp: Correct return type for mem2mem buffer helpers media: s5p-g2d: Correct return type for mem2mem buffer helpers media: s5p-jpeg: Correct return type for mem2mem buffer helpers media: sh_veu: Correct return type for mem2mem buffer helpers SoC: imx-sgtl5000: add missing put_device() perf test: Fix failure of 'evsel-tp-sched' test on s390 scsi: megaraid_sas: return error when create DMA pool failed IB/mlx4: Increase the timeout for CM cache e1000e: Fix -Wformat-truncation warnings mmc: omap: fix the maximum timeout setting ARM: 8840/1: use a raw_spinlock_t in unwind coresight: etm4x: Add support to enable ETMv4.2 scsi: core: replace GFP_ATOMIC with GFP_KERNEL in scsi_scan.c usb: chipidea: Grab the (legacy) USB PHY by phandle first tools lib traceevent: Fix buffer overflow in arg_eval fs: fix guard_bio_eod to check for real EOD errors cifs: Fix NULL pointer dereference of devname dm thin: add sanity checks to thin-pool and external snapshot creation cifs: use correct format characters fs/file.c: initialize init_files.resize_wait f2fs: do not use mutex lock in atomic context ocfs2: fix a panic problem caused by o2cb_ctl mm/slab.c: kmemleak no scan alien caches mm/vmalloc.c: fix kernel BUG at mm/vmalloc.c:512! mm/page_ext.c: fix an imbalance with kmemleak mm/cma.c: cma_declare_contiguous: correct err handling enic: fix build warning without CONFIG_CPUMASK_OFFSTACK sysctl: handle overflow for file-max gpio: gpio-omap: fix level interrupt idling tracing: kdb: Fix ftdump to not sleep h8300: use cc-cross-prefix instead of hardcoding h8300-unknown-linux- CIFS: fix POSIX lock leak and invalid ptr deref tty/serial: atmel: RS485 HD w/DMA: enable RX after TX is stopped Bluetooth: Fix decrementing reference count twice in releasing socket i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA mm: mempolicy: make mbind() return -EIO when MPOL_MF_STRICT is specified tty/serial: atmel: Add is_half_duplex helper lib/int_sqrt: optimize initial value compute ext4: cleanup bh release code in ext4_ind_remove_space() arm64: debug: Ensure debug handlers check triggering exception level arm64: debug: Don't propagate UNKNOWN FAR into si_code for debug signals Make arm64 serial port config compatible with crosvm Fix merge issue with 4.4.178 Fix merge issue with 4.4.177 ANDROID: cuttlefish_defconfig: Enable CONFIG_OVERLAY_FS Change-Id: I0d6e7b00f0198867803d5fe305ce13e205cc7518 Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| | | * | Merge 4.4.179 into android-4.4Greg Kroah-Hartman2019-04-30
| | | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 4.4.179 arm64: debug: Don't propagate UNKNOWN FAR into si_code for debug signals arm64: debug: Ensure debug handlers check triggering exception level ext4: cleanup bh release code in ext4_ind_remove_space() lib/int_sqrt: optimize initial value compute tty/serial: atmel: Add is_half_duplex helper mm: mempolicy: make mbind() return -EIO when MPOL_MF_STRICT is specified i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA Bluetooth: Fix decrementing reference count twice in releasing socket tty/serial: atmel: RS485 HD w/DMA: enable RX after TX is stopped CIFS: fix POSIX lock leak and invalid ptr deref h8300: use cc-cross-prefix instead of hardcoding h8300-unknown-linux- tracing: kdb: Fix ftdump to not sleep gpio: gpio-omap: fix level interrupt idling sysctl: handle overflow for file-max enic: fix build warning without CONFIG_CPUMASK_OFFSTACK mm/cma.c: cma_declare_contiguous: correct err handling mm/page_ext.c: fix an imbalance with kmemleak mm/vmalloc.c: fix kernel BUG at mm/vmalloc.c:512! mm/slab.c: kmemleak no scan alien caches ocfs2: fix a panic problem caused by o2cb_ctl f2fs: do not use mutex lock in atomic context fs/file.c: initialize init_files.resize_wait cifs: use correct format characters dm thin: add sanity checks to thin-pool and external snapshot creation cifs: Fix NULL pointer dereference of devname fs: fix guard_bio_eod to check for real EOD errors tools lib traceevent: Fix buffer overflow in arg_eval usb: chipidea: Grab the (legacy) USB PHY by phandle first scsi: core: replace GFP_ATOMIC with GFP_KERNEL in scsi_scan.c coresight: etm4x: Add support to enable ETMv4.2 ARM: 8840/1: use a raw_spinlock_t in unwind mmc: omap: fix the maximum timeout setting e1000e: Fix -Wformat-truncation warnings IB/mlx4: Increase the timeout for CM cache scsi: megaraid_sas: return error when create DMA pool failed perf test: Fix failure of 'evsel-tp-sched' test on s390 SoC: imx-sgtl5000: add missing put_device() media: sh_veu: Correct return type for mem2mem buffer helpers media: s5p-jpeg: Correct return type for mem2mem buffer helpers media: s5p-g2d: Correct return type for mem2mem buffer helpers media: mx2_emmaprp: Correct return type for mem2mem buffer helpers leds: lp55xx: fix null deref on firmware load failure kprobes: Prohibit probing on bsearch() ARM: 8833/1: Ensure that NEON code always compiles with Clang ALSA: PCM: check if ops are defined before suspending PCM bcache: fix input overflow to cache set sysfs file io_error_halflife bcache: fix input overflow to sequential_cutoff bcache: improve sysfs_strtoul_clamp() fbdev: fbmem: fix memory access if logo is bigger than the screen cdrom: Fix race condition in cdrom_sysctl_register ASoC: fsl-asoc-card: fix object reference leaks in fsl_asoc_card_probe soc: qcom: gsbi: Fix error handling in gsbi_probe() mt7601u: bump supported EEPROM version ARM: avoid Cortex-A9 livelock on tight dmb loops tty: increase the default flip buffer limit to 2*640K media: mt9m111: set initial frame size other than 0x0 hwrng: virtio - Avoid repeated init of completion soc/tegra: fuse: Fix illegal free of IO base address hpet: Fix missing '=' character in the __setup() code of hpet_mmap_enable dmaengine: imx-dma: fix warning comparison of distinct pointer types netfilter: physdev: relax br_netfilter dependency media: s5p-jpeg: Check for fmt_ver_flag when doing fmt enumeration regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting wlcore: Fix memory leak in case wl12xx_fetch_firmware failure x86/build: Mark per-CPU symbols as absolute explicitly for LLD dmaengine: tegra: avoid overflow of byte tracking drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers binfmt_elf: switch to new creds when switching to new mm kbuild: clang: choose GCC_TOOLCHAIN_DIR not on LD x86/build: Specify elf_i386 linker emulation explicitly for i386 objects x86: vdso: Use $LD instead of $CC to link x86/vdso: Drop implicit common-page-size linker flag lib/string.c: implement a basic bcmp tty: mark Siemens R3964 line discipline as BROKEN tty: ldisc: add sysctl to prevent autoloading of ldiscs ipv6: Fix dangling pointer when ipv6 fragment ipv6: sit: reset ip header pointer in ipip6_rcv net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock(). openvswitch: fix flow actions reallocation qmi_wwan: add Olicard 600 sctp: initialize _pad of sockaddr_in before copying to user memory tcp: Ensure DCTCP reacts to losses netns: provide pure entropy for net_hash_mix() net: ethtool: not call vzalloc for zero sized memory request ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type ALSA: seq: Fix OOB-reads from strlcpy include/linux/bitrev.h: fix constant bitrev ASoC: fsl_esai: fix channel swap issue when stream starts block: do not leak memory in bio_copy_user_iov() genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent() ARM: dts: at91: Fix typo in ISC_D0 on PC9 arm64: futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value xen: Prevent buffer overflow in privcmd ioctl sched/fair: Do not re-read ->h_load_next during hierarchical load calculation xtensa: fix return_address PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller perf/core: Restore mmap record type correctly ext4: add missing brelse() in add_new_gdb_meta_bg() ext4: report real fs size after failed resize ALSA: echoaudio: add a check for ioremap_nocache ALSA: sb8: add a check for request_region IB/mlx4: Fix race condition between catas error reset and aliasguid flows mmc: davinci: remove extraneous __init annotation ALSA: opl3: fix mismatch between snd_opl3_drum_switch definition and declaration thermal/int340x_thermal: Add additional UUIDs thermal/int340x_thermal: fix mode setting tools/power turbostat: return the exit status of a command perf top: Fix error handling in cmd_top() perf evsel: Free evsel->counts in perf_evsel__exit() perf tests: Fix a memory leak of cpu_map object in the openat_syscall_event_on_all_cpus test perf tests: Fix a memory leak in test__perf_evsel__tp_sched_test() x86/hpet: Prevent potential NULL pointer dereference x86/cpu/cyrix: Use correct macros for Cyrix calls on Geode processors iommu/vt-d: Check capability before disabling protected memory x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return an error fix incorrect error code mapping for OBJECTID_NOT_FOUND ext4: prohibit fstrim in norecovery mode rsi: improve kernel thread handling to fix kernel panic 9p: do not trust pdu content for stat item size 9p locks: add mount option for lock retry interval f2fs: fix to do sanity check with current segment number serial: uartps: console_setup() can't be placed to init section ARM: samsung: Limit SAMSUNG_PM_CHECK config option to non-Exynos platforms ACPI / SBS: Fix GPE storm on recent MacBookPro's cifs: fallback to older infolevels on findfirst queryinfo retry crypto: sha256/arm - fix crash bug in Thumb2 build crypto: sha512/arm - fix crash bug in Thumb2 build iommu/dmar: Fix buffer overflow during PCI bus notification ARM: 8839/1: kprobe: make patch_lock a raw_spinlock_t appletalk: Fix use-after-free in atalk_proc_exit lib/div64.c: off by one in shift include/linux/swap.h: use offsetof() instead of custom __swapoffset macro tpm/tpm_crb: Avoid unaligned reads in crb_recv() ovl: fix uid/gid when creating over whiteout appletalk: Fix compile regression bonding: fix event handling for stacked bonds net: atm: Fix potential Spectre v1 vulnerabilities net: bridge: multicast: use rcu to access port list from br_multicast_start_querier net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv tcp: tcp_grow_window() needs to respect tcp_space() ipv4: recompile ip options in ipv4_link_failure ipv4: ensure rcu_read_lock() in ipv4_link_failure() crypto: crypto4xx - properly set IV after de- and encrypt modpost: file2alias: go back to simple devtable lookup modpost: file2alias: check prototype of handler tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete KVM: x86: Don't clear EFER during SMM transitions for 32-bit vCPU iio/gyro/bmg160: Use millidegrees for temperature scale iio: ad_sigma_delta: select channel when reading register iio: adc: at91: disable adc channel interrupt in timeout case io: accel: kxcjk1013: restore the range after resume. staging: comedi: vmk80xx: Fix use of uninitialized semaphore staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf staging: comedi: ni_usb6501: Fix use of uninitialized mutex staging: comedi: ni_usb6501: Fix possible double-free of ->usb_rx_buf ALSA: core: Fix card races between register and disconnect crypto: x86/poly1305 - fix overflow during partial reduction arm64: futex: Restore oldval initialization to work around buggy compilers x86/kprobes: Verify stack frame on kretprobe kprobes: Mark ftrace mcount handler functions nokprobe kprobes: Fix error check when reusing optimized probes mac80211: do not call driver wake_tx_queue op during reconfig Revert "kbuild: use -Oz instead of -Os when using clang" sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup device_cgroup: fix RCU imbalance in error case mm/vmstat.c: fix /proc/vmstat format for CONFIG_DEBUG_TLBFLUSH=y CONFIG_SMP=n ALSA: info: Fix racy addition/deletion of nodes Revert "locking/lockdep: Add debug_locks check in __lock_downgrade()" kernel/sysctl.c: fix out-of-bounds access when setting file-max Linux 4.4.179 Change-Id: Ib81a248d73ba7504649be93bd6882b290e548882 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
| | | | * rsi: improve kernel thread handling to fix kernel panicSiva Rebbagondla2019-04-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ Upstream commit 4c62764d0fc21a34ffc44eec1210038c3a2e4473 ] While running regressions, observed below kernel panic when sdio disconnect called. This is because of, kthread_stop() is taking care of wait_for_completion() by default. When wait_for_completion triggered in kthread_stop and as it was done already, giving kernel panic. Hence, removing redundant wait_for_completion() from rsi_kill_thread(). ... skipping ... BUG: unable to handle kernel NULL pointer dereference at (null) IP: [<ffffffff810a63df>] exit_creds+0x1f/0x50 PGD 0 Oops: 0002 [#1] SMP CPU: 0 PID: 6502 Comm: rmmod Tainted: G OE 4.15.9-Generic #154-Ubuntu Hardware name: Dell Inc. Edge Gateway 3003/ , BIOS 01.00.00 04/17/2017 Stack: ffff88007392e600 ffff880075847dc0 ffffffff8108160a 0000000000000000 ffff88007392e600 ffff880075847de8 ffffffff810a484b ffff880076127000 ffff88003cd3a800 ffff880074f12a00 ffff880075847e28 ffffffffc09bed15 Call Trace: [<ffffffff8108160a>] __put_task_struct+0x5a/0x140 [<ffffffff810a484b>] kthread_stop+0x10b/0x110 [<ffffffffc09bed15>] rsi_disconnect+0x2f5/0x300 [ven_rsi_sdio] [<ffffffff81578bcb>] ? __pm_runtime_resume+0x5b/0x80 [<ffffffff816f0918>] sdio_bus_remove+0x38/0x100 [<ffffffff8156cc64>] __device_release_driver+0xa4/0x150 [<ffffffff8156d7a5>] driver_detach+0xb5/0xc0 [<ffffffff8156c6c5>] bus_remove_driver+0x55/0xd0 [<ffffffff8156dfbc>] driver_unregister+0x2c/0x50 [<ffffffff816f0b8a>] sdio_unregister_driver+0x1a/0x20 [<ffffffffc09bf0f5>] rsi_module_exit+0x15/0x30 [ven_rsi_sdio] [<ffffffff8110cad8>] SyS_delete_module+0x1b8/0x210 [<ffffffff81851dc8>] entry_SYSCALL_64_fastpath+0x1c/0xbb Signed-off-by: Siva Rebbagondla <siva.rebbagondla@redpinesignals.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> Signed-off-by: Sasha Levin <sashal@kernel.org>
| | | | * wlcore: Fix memory leak in case wl12xx_fetch_firmware failureZumeng Chen2019-04-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ Upstream commit ba2ffc96321c8433606ceeb85c9e722b8113e5a7 ] Release fw_status, raw_fw_status, and tx_res_if when wl12xx_fetch_firmware failed instead of meaningless goto out to avoid the following memory leak reports(Only the last one listed): unreferenced object 0xc28a9a00 (size 512): comm "kworker/0:4", pid 31298, jiffies 2783204 (age 203.290s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<6624adab>] kmemleak_alloc+0x40/0x74 [<500ddb31>] kmem_cache_alloc_trace+0x1ac/0x270 [<db4d731d>] wl12xx_chip_wakeup+0xc4/0x1fc [wlcore] [<76c5db53>] wl1271_op_add_interface+0x4a4/0x8f4 [wlcore] [<cbf30777>] drv_add_interface+0xa4/0x1a0 [mac80211] [<65bac325>] ieee80211_reconfig+0x9c0/0x1644 [mac80211] [<2817c80e>] ieee80211_restart_work+0x90/0xc8 [mac80211] [<7e1d425a>] process_one_work+0x284/0x42c [<55f9432e>] worker_thread+0x2fc/0x48c [<abb582c6>] kthread+0x148/0x160 [<63144b13>] ret_from_fork+0x14/0x2c [< (null)>] (null) [<1f6e7715>] 0xffffffff Signed-off-by: Zumeng Chen <zumeng.chen@gmail.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> Signed-off-by: Sasha Levin <sashal@kernel.org>
| | | | * mt7601u: bump supported EEPROM versionStanislaw Gruszka2019-04-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ Upstream commit 3bd1505fed71d834f45e87b32ff07157fdda47e0 ] As reported by Michael eeprom 0d is supported and work with the driver. Dump of /sys/kernel/debug/ieee80211/phy1/mt7601u/eeprom_param with 0d EEPORM looks like this: RSSI offset: 0 0 Reference temp: f9 LNA gain: 8 Reg channels: 1-14 Per rate power: raw:05 bw20:05 bw40:05 raw:05 bw20:05 bw40:05 raw:03 bw20:03 bw40:03 raw:03 bw20:03 bw40:03 raw:04 bw20:04 bw40:04 raw:00 bw20:00 bw40:00 raw:00 bw20:00 bw40:00 raw:00 bw20:00 bw40:00 raw:02 bw20:02 bw40:02 raw:00 bw20:00 bw40:00 Per channel power: tx_power ch1:09 ch2:09 tx_power ch3:0a ch4:0a tx_power ch5:0a ch6:0a tx_power ch7:0b ch8:0b tx_power ch9:0b ch10:0b tx_power ch11:0b ch12:0b tx_power ch13:0b ch14:0b Reported-and-tested-by: Michael <ZeroBeat@gmx.de> Signed-off-by: Stanislaw Gruszka <sgruszka@redhat.com> Acked-by: Jakub Kicinski <kubakici@wp.pl> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> Signed-off-by: Sasha Levin <sashal@kernel.org>
| * | | | cnss2: Expose idle restart/shutdown APIsYue Ma2019-05-03
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Interface change to expose idle restart/shutdown APIs for WLAN driver. This patch is to provide API interface to ease compilation issues among various branches of kernel and WLAN driver. The actual implementation will be in a separate patch. Change-Id: I7f4a0079c32875c362d36c9f794d55609f924198 Signed-off-by: Yue Ma <yuem@codeaurora.org>
| * | | cnss2: Expose PCIe DRV connection statusYue Ma2019-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Interface change to expose PCIe DRV connection status to WLAN driver so that it is able to suspend/resume based on the status. Change-Id: If8f706b0eb38f209a5e322b112beb9a95babdcad Signed-off-by: Yue Ma <yuem@codeaurora.org>
* | | | Merge LA.UM.7.5.2.r1-02600-8x96.0 of ↵Davide Garberi2019-05-11
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://source.codeaurora.org/quic/la/kernel/msm-4.4 into lineage-16.0 d4f47e6c2367 defconfig: msm8996: Enable radio configs 9f27be024a7f Merge "radio: add Silabs FM radio support for msm8996" into kernel.lnx.4.4.r37-rel 4fe98eb7bec2 defconfig: Enable REGMAP_ALLOW_WRITE_DEBUGFS 0c7d031bda1b radio: add Silabs FM radio support for msm8996 1f558d13f0f2 Merge "ASoC: msm: Add support for AVS version check" into kernel.lnx.4.4.r37-rel d104a604676a dsp: correct comparison condition for VSS_ICOMMON_RSP_GET_PARAM_V3 edef41f4dd6e ASoC: msm: Add support for AVS version check 837581d8c691 Merge "Revert "ASoC: msm: Add support for AVS version check."" into kernel.lnx.4.4.r37-rel 9e558fb9e3ee Merge "Revert "ASoC: msm: Add AVS version check for ADSP 2.7."" into kernel.lnx.4.4.r37-rel 9d3be6c18d3a Revert "ASoC: msm: Add support for AVS version check." d5d09e79ec00 Revert "ASoC: msm: Add AVS version check for ADSP 2.7." 72d4da407550 Merge "defconfig: msm8996: Enable PAN emulation" into kernel.lnx.4.4.r37-rel f6e50563bac0 defconfig: msm8996: Enable PAN emulation e0743de00dbb ARM: dts: msm: move bluetooth node under /vendor for 8996 platform 433d0135344e Merge "drivers: qpnp-smbcharger: Fix USB3.0 device does not enumerate in SS mode" into kernel.lnx.4.4.r37-rel 46150d3805a6 Merge changes I72e0c499,Iceb44b1f into kernel.lnx.4.4.r37-rel 6b9dcbcd8ed4 drivers: qpnp-smbcharger: Fix USB3.0 device does not enumerate in SS mode b819c88494b4 defconfig: msm8996: Disable DEVPORT 5dc9c9cdad31 defconfig: msm8996: Disable EXT2 and EXT3 FS configs 7020e575305b ARM: dts: msm: Add "qcom,core-dev-table" for msm8996 target 2d8f5e66d396 Merge e0f69caa36e88038fc27962308b0bb865759736d on remote branch e0f69caa36e8 Merge changes into msm-4.4 d1f0a27facf5 Merge "msm: sps: Update debug message format specifier" ff6c90ba7689 Merge "ASoC: msm: Check adsp state after SSR" 8589eec6817a Merge "lsm: check payload size validity before using it as array index" 3c74f04c2acd msm: sps: Update debug message format specifier 8229f3db343f ASoC: msm: Check adsp state after SSR 8b618604151d Merge "cnss2: Remove setting recovery state during driver unload" 30af8d44d51c Merge "cnss2: Add device version to SOC info structure" 9d116c810844 Merge "msm: kgsl: Add common Boot KPI marker" 27f1619b2f38 cnss2: Add device version to SOC info structure 110e25da9d04 Merge "drm/msm/sde: fix null pointer dereference" e41fee9833ae lsm: check payload size validity before using it as array index f3ec53af1d65 Merge "drm: msm: sde: remove hdr property setting error message" e69141d2f854 Merge "drm: msm: sde: improve display interface timeout mechanism" 7ddcfc4bd2a3 Merge "drm/msm/sde: do not send stop splash signal from eDRM to LK" 00389026f8c9 cnss2: Remove setting recovery state during driver unload a18089dad122 drm/msm: ensure msm_drm probe and eDRM Probe completion 15e17660ba55 Merge "icnss: return recovery success to wlan driver" e3b50ff0b555 Merge "usb: xhci: Reduce command abort handshake timeout" b6645f622203 Merge "usb: xhci: remove unnecessary second abort try" f02dfcce2cb2 Merge "usb: XHCI: Implement xhci_handshake_check_state() API" bb31c0f2ef11 icnss: return recovery success to wlan driver dd7aeab5ed91 drm: msm: sde: improve display interface timeout mechanism 61436825c4de drm/msm/sde: do not send stop splash signal from eDRM to LK c8fffde012b6 drm/msm/sde: fix null pointer dereference e2a49d1ee492 msm: kgsl: Add common Boot KPI marker 55b4dd9721ab Merge "Merge android-4.4.178 (7af10f2) into msm-4.4" 6a75b0f79e6d Merge "diag: Update new msg, log and event logging codes" e776f6472683 diag: Update new msg, log and event logging codes 04235478f297 cnss2: Support USB SSR and disconnect scenarios 9ec08ea59b83 cnss2: Export a platform API to force collect ramdump 6e658671eeac drm: msm: sde: remove hdr property setting error message f5387f19b78d Merge "dsp: q6usm: Release spinlock before return if invalid payload size" 43751312d7a1 Merge android-4.4.178 (7af10f2) into msm-4.4 14c735f15182 msm: v4l2loopback: to resolve issues for kernel defconfigs 26e111f650c7 msm: v4l2loopback: to enable 4l2loopback in kernel defconfigs ef1fab24b2da Merge "fbdev: msm: remove check for rgb source format" 4594ebbba3cc Merge "drm/msm: adjust HDMI DDC speed configuration" e124f4878919 Merge "drm/msm/sde: add post_disable stage for phys encoder" 7af10f2966c2 Merge 4.4.178 into android-4.4 12ae58ca7ec4 Linux 4.4.178 b1b1efe07ea0 stm class: Hide STM-specific options if STM is disabled c003b5675d34 coresight: removing bind/unbind options from sysfs 455b9a675ecf arm64: support keyctl() system call in 32-bit mode d14ac4368f22 Revert "USB: core: only clean up what we allocated" 78d145f71db5 xhci: Fix port resume done detection for SS ports with LPM enabled 9aacea736c9a KVM: Reject device ioctls from processes other than the VM's creator 5ce6e5bd23f0 x86/smp: Enforce CONFIG_HOTPLUG_CPU when SMP=y 0fe681f4ef50 perf intel-pt: Fix TSC slip e250a5ac0e12 gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input 6271fa6fc366 fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links 98bc2f91e918 Disable kgdboc failed by echo space to /sys/module/kgdboc/parameters/kgdboc 6c1c9cfc2fdd USB: serial: option: add Olicard 600 09d3f1eb8499 USB: serial: option: set driver_info for SIM5218 and compatibles 6ef819f7158a USB: serial: mos7720: fix mos_parport refcount imbalance on error path ef0d78184aff USB: serial: ftdi_sio: add additional NovaTech products 7139e4d5bf83 USB: serial: cp210x: add new device id 327ee45823eb serial: sh-sci: Fix setting SCSCR_TIE while transferring data 7124c71944ee serial: max310x: Fix to avoid potential NULL pointer dereference 2e7c2f25e902 staging: vt6655: Fix interrupt race condition on device start up. 17400647682a staging: vt6655: Remove vif check from vnt_interrupt 13f6808ec2bb tty: atmel_serial: fix a potential NULL pointer dereference 21da2b461fbd scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP devices d8007fb2e816 scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host 2f369124b97a scsi: sd: Fix a race between closing an sd device and sd I/O 49ad73985443 ALSA: pcm: Don't suspend stream in unrecoverable PCM state c07db6f073ab ALSA: pcm: Fix possible OOB access in PCM oss plugins f98242a8debb ALSA: seq: oss: Fix Spectre v1 vulnerability 619ae9f179de ALSA: rawmidi: Fix potential Spectre v1 vulnerability e162927cd161 ALSA: compress: add support for 32bit calls in a 64bit kernel ed2f3c82b0b4 ARM: imx6q: cpuidle: fix bug that CPU might not wake up at expected time 61bde5e5af49 btrfs: raid56: properly unmap parity page in finish_parity_scrub() a23f00416aae btrfs: remove WARN_ON in log_dir_items 48b22ac58998 mac8390: Fix mmio access size probe 981cb03ec5a6 sctp: get sctphdr by offset in sctp_compute_cksum c5874f35b86b vxlan: Don't call gro_cells_destroy() before device is unregistered 6c362ffe2a22 tcp: do not use ipv6 header for ipv4 flow 617ac1aa4dd4 packets: Always register packet sk in the same order dd3351b81fac Add hlist_add_tail_rcu() (Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net) 2c2d8a1c8f12 net: rose: fix a possible stack overflow b969da5f7e8d net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec 3f1c0e4b7965 mISDN: hfcpci: Test both vendor & device ID for Digium HFC4S 2f242b299bcd dccp: do not use ipv6 header for ipv4 flow 46c8459158ae stmmac: copy unicast mac address to MAC registers 949c4ef45eee cfg80211: size various nl80211 messages correctly 695fc282c337 mmc: mmc: fix switch timeout issue caused by jiffies precision c89eceddfaeb arm64: kconfig: drop CONFIG_RTC_LIB dependency 4a024ea936b6 video: fbdev: Set pixclock = 0 in goldfishfb d200cc995188 cpu/hotplug: Handle unbalanced hotplug enable/disable 13e84cdbd790 usb: gadget: rndis: free response queue during REMOTE_NDIS_RESET_MSG 0752035a776e usb: gadget: configfs: add mutex lock before unregister gadget 01855b6299eb ipv6: fix endianness error in icmpv6_err b0351a51ffda stm class: Fix stm device initialization order 2040e80d8095 stm class: Do not leak the chrdev in error path fbfaa26fa9e7 PM / Hibernate: Call flush_icache_range() on pages restored in-place 60e4a50d332b arm64: kernel: Include _AC definition in page.h 2ba2cca736d8 perf/ring_buffer: Refuse to begin AUX transaction after rb->aux_mmap_count drops e5a19cf78a23 mac80211: fix "warning: ‘target_metric’ may be used uninitialized" 08d870c51ec5 arm64/kernel: fix incorrect EL0 check in inv_entry macro 823e262919f9 ARM: 8510/1: rework ARM_CPU_SUSPEND dependencies a99d340dc70b staging: goldfish: audio: fix compiliation on arm 9d4b4395067b staging: ion: Set minimum carveout heap allocation order to PAGE_SHIFT efa2ec29dd4e staging: ashmem: Add missing include 4dcbf6fa3b47 staging: ashmem: Avoid deadlock with mmap/shrink 021c0d5cdfc0 asm-generic: Fix local variable shadow in __set_fixmap_offset 43ea28e71c2d coresight: etm4x: Check every parameter used by dma_xx_coherent. 58af2f0f6fdf coresight: "DEVICE_ATTR_RO" should defined as static. c66866b13b3c stm class: Fix a race in unlinking 8c0bfd9d7cb3 stm class: Fix unbalanced module/device refcounting f34bc5ad7a84 stm class: Guard output assignment against concurrency bc9d781bed9d stm class: Fix unlocking braino in the error path 65b52bbc35a6 stm class: Support devices with multiple instances ffb2f3f86b3a stm class: Prevent user-controllable allocations 30e94dc24edd stm class: Fix link list locking a556f0babe56 stm class: Fix locking in unbinding policy path 03d7b4edf78a coresight: remove csdev's link from topology a2828b944591 coresight: release reference taken by 'bus_find_device()' 3e2070abcc90 coresight: coresight_unregister() function cleanup f485f972de3d coresight: fixing lockdep error 9bda5e6b1819 writeback: initialize inode members that track writeback history cb8251f8d667 Revert "mmc: block: don't use parameter prefix if built as module" ab3f1a5b9ce5 net: diag: support v4mapped sockets in inet_diag_find_one_icsk() 6f311381f318 perf: Synchronously free aux pages in case of allocation failure b6496f00a29d arm64: hide __efistub_ aliases from kallsyms 2aeca9a27ba4 hid-sensor-hub.c: fix wrong do_div() usage bdf3c006b9a2 vmstat: make vmstat_updater deferrable again and shut down on idle 119dbcde59da android: unconditionally remove callbacks in sync_fence_free() 7276c3fbd3b6 ARM: 8494/1: mm: Enable PXN when running non-LPAE kernel on LPAE processor 717da8c75b41 ARM: 8458/1: bL_switcher: add GIC dependency 1f2c3b46811d efi: stub: define DISABLE_BRANCH_PROFILING for all architectures 599dcbf7e8c6 arm64: fix COMPAT_SHMLBA definition for large pages 4afe1affaa6d mmc: block: Allow more than 8 partitions per card e43196819cc3 sched/fair: Fix new task's load avg removed from source CPU in wake_up_new_task() ade4560e4fea Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer d22036003893 Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt a1402232e193 ath10k: avoid possible string overflow ee8f5d476dc9 rtc: Fix overflow when converting time64_t to rtc_time 0cd08672e0aa USB: core: only clean up what we allocated 466ab66b5c2f lib/int_sqrt: optimize small argument 7a47e3c3232d serial: sprd: clear timeout interrupt only rather than all interrupts 4104b44e5d92 usb: renesas_usbhs: gadget: fix unused-but-set-variable warning e86206bd8758 arm64: traps: disable irq in die() a3fbab100127 Hang/soft lockup in d_invalidate with simultaneous calls 4a97f086f192 serial: sprd: adjust TIMEOUT to a big value 7ed7c0386ef2 tcp/dccp: drop SYN packets if accept queue is full a12cf3214235 usb: gadget: Add the gserial port checking in gs_start_tx() 36be44e1905d usb: gadget: composite: fix dereference after null check coverify warning c0f71babf7bb kbuild: setlocalversion: print error to STDERR 1e647cf23fb2 extcon: usb-gpio: Don't miss event during suspend/resume 7f69a980f635 mm/rmap: replace BUG_ON(anon_vma->degree) with VM_WARN_ON 1394b1bdfd00 mmc: core: fix using wrong io voltage if mmc_select_hs200 fails aa8b7ed21685 arm64: mm: Add trace_irqflags annotations to do_debug_exception() df2ca3271569 usb: dwc3: gadget: Fix suspend/resume during device mode f2427238c9ed mmc: core: shut up "voltage-ranges unspecified" pr_info() 6a0f5752f1fd mmc: sanitize 'bus width' in debug output 40c01c8301b8 mmc: make MAN_BKOPS_EN message a debug 282d5f0567be mmc: debugfs: Add a restriction to mmc debugfs clock setting c8816bb0ed6d mmc: pwrseq_simple: Make reset-gpios optional to match doc 4d026d221b34 ALSA: hda - Enforces runtime_resume after S3 and S4 for each codec 2569eed24d93 ALSA: hda - Record the current power state before suspend/resume calls 4aada79c6793 locking/lockdep: Add debug_locks check in __lock_downgrade() 786207750b49 media: v4l2-ctrls.c/uvc: zero v4l2_event a8dea33440f1 mmc: tmio_mmc_core: don't claim spurious interrupts c37fd9822514 ext4: brelse all indirect buffer in ext4_ind_remove_space() 2ebfb9ae0047 ext4: fix data corruption caused by unaligned direct AIO 2b6575ed8c7e ext4: fix NULL pointer dereference while journal is aborted 2f59c12b47c1 futex: Ensure that futex address is aligned in handle_futex_death() 8df0d57e5c08 MIPS: Fix kernel crash for R6 in jump label branch function 5c06f2409550 mips: loongson64: lemote-2f: Add IRQF_NO_SUSPEND to "cascade" irqaction. c30b41bbbb87 udf: Fix crash on IO error during truncate 8b12fd7c5f36 drm/vmwgfx: Don't double-free the mode stored in par->set_mode e884f7d5c627 mmc: pxamci: fix enum type confusion 74a50c62c4ee Merge "msm: v4l2loopback: to create V4L2 loopback devices" 023eab95f93f Merge changes into msm-4.4 b6870ada9882 dsp: q6usm: Release spinlock before return if invalid payload size 6a214b82afd7 Merge "Merge android-4.4.177 (0c3b8c4) into msm-4.4" b20fa86720f8 ANDROID: drop CONFIG_INPUT_KEYCHORD from cuttlefish and ranchu 6e016ebde638 Merge "Scsi: ufs: fix issue of task tag in used" 643dbe00f480 UPSTREAM: virt_wifi: Remove REGULATORY_WIPHY_SELF_MANAGED 1dca5a048f4f scripts: gcc-wrapper: Route the GCC errors to stderr 11306d8c058e Scsi: ufs: fix issue of task tag in used 1c25c9cc4ab7 Merge upstream-f2fs-stable-linux-4.4.y into android-4.4 2fe82d10f2fe Merge "msm: asm: validate ADSP data before access" 337623ba25ee Merge "soc: qcom: subsystem_notif_virt: Add waitqueue support for SSR" 3ad287e4ef9a msm: v4l2loopback: to create V4L2 loopback devices af3c1903749c drm/msm/sde: add post_disable stage for phys encoder daaf0eeb1ce4 Merge "usb: gadget: f_fs: Queue request after setting is_busy flag" 9e6526c9a143 UPSTREAM: net: socket: set sock->sk to NULL after calling proto_ops::release() ab9f5d883785 soc: qcom: subsystem_notif_virt: Add waitqueue support for SSR bff3c3db6b11 Merge "drivers: soc: qcom: Added check to avoid opening multiple instance" a7aa04bc7002 Merge "msm: vidc: Disable DCVS in DTSI" 184af681d4c4 Merge "msm: vidc: Add common Boot KPI marker" 10ea8a72f6da Merge "drm/msm: read V' only for non-zero device count repeater" 1c738b6a5f82 usb: gadget: f_fs: Queue request after setting is_busy flag 108157a55130 msm: asm: validate ADSP data before access 1b1e63b1a766 drm/msm: adjust HDMI DDC speed configuration 38e93647f780 drm/msm: read V' only for non-zero device count repeater 83fc1fe4359f Merge "icnss: Add Api to Block/Unblock modem shutdown" 5ac9e067c5d6 msm: vidc: Disable DCVS in DTSI 5219134535d3 msm: vidc: Add common Boot KPI marker 90059640cc78 Merge "cnss2: Initialize plat_priv during bus_init" 6a53afbc7e9d Merge "icnss: Defer modem graceful shutdown until probe complete" 8846ee70c326 icnss: Add Api to Block/Unblock modem shutdown 1174076aa273 icnss: Defer modem graceful shutdown until probe complete a7370a6289ea cnss2: Initialize plat_priv during bus_init 9ccdcef08733 cnss2: Add QCN7605 USB for cold boot cal via fs_ready 6543b0a4ad9a Merge "diag: Add protection while accessing usb_info's buffer table" c739d9858bb9 diag: Add protection while accessing usb_info's buffer table 875833b037e1 diag: Free usb buffer's entry after removing from list 19342ee004a9 Merge android-4.4.177 (0c3b8c4) into msm-4.4 0c3b8c486664 Merge 4.4.177 into android-4.4 6b50202a4d53 Linux 4.4.177 5d8f03acc1a4 KVM: X86: Fix residual mmio emulation request to userspace 8c7543e3b8eb KVM: nVMX: Ignore limit checks on VMX instructions using flat segments 2866808ffc0f KVM: nVMX: Sign extend displacements of VMX instr's mem operands 71e005f009ff drm/radeon/evergreen_cs: fix missing break in switch statement e4de142d0a07 media: uvcvideo: Avoid NULL pointer dereference at the end of streaming 25c4c4519352 rcu: Do RCU GP kthread self-wakeup from softirq and interrupt 06a7cc29d18a PM / wakeup: Rework wakeup source timer cancellation d18bcfe45510 nfsd: fix wrong check in write_v4_end_grace() d2f777c50bfa nfsd: fix memory corruption caused by readdir 295aac3a5a37 NFS: Don't recoalesce on error in nfs_pageio_complete_mirror() a853de72abbe NFS: Fix an I/O request leakage in nfs_do_recoalesce 128f60fe3bb0 md: Fix failed allocation of md_register_thread 4426d5f7be8f perf intel-pt: Fix overlap calculation for padding 5664e60dc0b1 perf auxtrace: Define auxtrace record alignment ecd307da7771 perf intel-pt: Fix CYC timestamp calculation after OVF 58cc0b4098d3 NFS41: pop some layoutget errors to application cbb0f82ebbc4 dm: fix to_sector() for 32bit fd2ebccb5884 ARM: s3c24xx: Fix boolean expressions in osiris_dvs_notify 7ea0c2f9788a powerpc/83xx: Also save/restore SPRG4-7 during suspend d9fbe055bc95 powerpc/powernv: Make opal log only readable by root aa3995f04e39 powerpc/wii: properly disable use of BATs when requested. 788b1a98f415 powerpc/32: Clear on-stack exception marker upon exception return 86ca0da1ddb0 jbd2: fix compile warning when using JBUFFER_TRACE 1fb35b7eda3d jbd2: clear dirty flag when revoking a buffer from an older transaction 98257572f7c7 serial: 8250_pci: Have ACCES cards that use the four port Pericom PI7C9X7954 chip use the pci_pericom_setup() 1a366cb3ae98 serial: 8250_pci: Fix number of ports for ACCES serial cards 7bc0cb4da25e perf bench: Copy kernel files needed to build mem{cpy,set} x86_64 benchmarks fefcb294a459 i2c: tegra: fix maximum transfer size ddc6521426c9 parport_pc: fix find_superio io compare code, should use equal test. dba3801e8dc8 intel_th: Don't reference unassigned outputs c8d2a21fdf51 kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv 49b3c4a292b0 mm/vmalloc: fix size check for remap_vmalloc_range_partial() f7572a4534b5 dmaengine: usb-dmac: Make DMAC system sleep callbacks explicit 96ad35532ccc clk: ingenic: Fix round_rate misbehaving with non-integer dividers 64847df5bff1 ext2: Fix underflow in ext2_max_size() 8b710dc8a5e2 ext4: fix crash during online resizing 0d97ba8b9a5f cpufreq: pxa2xx: remove incorrect __init annotation b14854612972 cpufreq: tegra124: add missing of_node_put() 9bde9df79f24 crypto: pcbc - remove bogus memcpy()s with src == dest efe908169f4f Btrfs: fix corruption reading shared and compressed extents after hole punching eb4763b1bb4a btrfs: ensure that a DUP or RAID1 block group has exactly two stripes 22058c290c94 m68k: Add -ffreestanding to CFLAGS 5c6e7bd3a627 scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock 1cda5468c04a scsi: virtio_scsi: don't send sc payload with tmfs 62a86906494d s390/virtio: handle find on invalid queue gracefully 185ca832f7d7 clocksource/drivers/exynos_mct: Clear timer interrupt when shutdown 3e08ffef4286 clocksource/drivers/exynos_mct: Move one-shot check from tick clear to ISR 3f0edcec1da0 regulator: s2mpa01: Fix step values for some LDOs f20f5fca3b45 regulator: s2mps11: Fix steps for buck7, buck8 and LDO35 84d798497ea9 ACPI / device_sysfs: Avoid OF modalias creation for removed device 19c53c1f817e tracing: Do not free iter->trace in fail path of tracing_open_pipe() b1faf3d2b5b4 CIFS: Fix read after write for files with read caching a2ef87f9d268 crypto: arm64/aes-ccm - fix logical bug in AAD MAC handling aa9c7ee2922a stm class: Prevent division by zero 5f4c9964d107 tmpfs: fix uninitialized return value in shmem_link 8bbb2ce3da91 net: set static variable an initial value in atl2_probe() 8e91a0b4d5f1 mac80211_hwsim: propagate genlmsg_reply return code 5115ca2ba428 phonet: fix building with clang 225bbd61b3ab ARC: uacces: remove lp_start, lp_end from clobber list f8f413336b0c tmpfs: fix link accounting when a tmpfile is linked in aa5740d660ac arm64: Relax GIC version check during early boot c8380f42e82e ASoC: topology: free created components in tplg load error 764498fa2d2b net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe() 0b6f466dfc62 pinctrl: meson: meson8b: fix the sdxc_a data 1..3 pins 3685be7cb47f net: systemport: Fix reception of BPDUs 75330ce98d95 scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task 526efb1049bf assoc_array: Fix shortcut creation 823c717dbf5d ARM: 8824/1: fix a migrating irq bug when hotplug cpu 27bd1497181c Input: st-keyscan - fix potential zalloc NULL dereference c18daf1bdae9 i2c: cadence: Fix the hold bit setting 65513463874c Input: matrix_keypad - use flush_delayed_work() 4e873fa21052 ARM: OMAP2+: Variable "reg" in function omap4_dsi_mux_pads() could be uninitialized 21442c73253b s390/dasd: fix using offset into zero size array error e212aa684767 gpu: ipu-v3: Fix CSI offsets for imx53 8512f804fd88 gpu: ipu-v3: Fix i.MX51 CSI control registers offset 82351c83b1c5 crypto: ahash - fix another early termination in hash walk ef3e805c9476 crypto: caam - fixed handling of sg list 5672988e09e1 stm class: Fix an endless loop in channel allocation fdeefd2af1f3 ASoC: fsl_esai: fix register setting issue in RIGHT_J mode d96e50a53ba1 9p/net: fix memory leak in p9_client_create f289ac1f6eb2 9p: use inode->i_lock to protect i_size_write() under 32-bit 7b5115689bf9 media: videobuf2-v4l2: drop WARN_ON in vb2_warn_zero_bytesused() b83f73aa7608 It's wrong to add len to sector_nr in raid10 reshape twice 9b37b964775e fs/9p: use fscache mutex rather than spinlock f83a38bf2ccd ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against Liquid Saffire 56 e13ab6c19547 tcp/dccp: remove reqsk_put() from inet_child_forget() dcf54e4f0717 gro_cells: make sure device is up in gro_cells_receive() 2d5f55d65a36 net/hsr: fix possible crash in add_timer() b0e8ca9a1eb3 vxlan: Fix GRO cells race condition between receive and link delete 195e9aa9fe13 vxlan: test dev->flags & IFF_UP before calling gro_cells_receive() cb604342bc85 ipvlan: disallow userns cap_net_admin to change global mode/flags f412aeb9167d missing barriers in some of unix_sock ->addr and ->path accesses b4986f23b4d8 net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255 a1b4ace43842 mdio_bus: Fix use-after-free on device_register fails c1b7d9363334 net/x25: fix a race in x25_bind() 2eace0d069ff net/mlx4_core: Fix qp mtt size calculation 0c21ccb8d70e net/mlx4_core: Fix reset flow when in command polling mode 191aa19ab8c1 tcp: handle inet_csk_reqsk_queue_add() failures d31b540d63b1 route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race d15bfd4603dc ravb: Decrease TxFIFO depth of Q3 and Q2 to one 051612738631 pptp: dst_release sk_dst_cache in pptp_sock_destruct e0b2bbd93ef0 net/x25: reset state in x25_connect() 70ed8a0a9ec3 net/x25: fix use-after-free in x25_device_event() d84e9d3c97ee net: sit: fix UBSAN Undefined behaviour in check_6rd 453e3b319d28 net: hsr: fix memory leak in hsr_dev_finalize() a795edbd6cd7 l2tp: fix infoleak in l2tp_ip6_recvmsg() 52f6c8da89b9 KEYS: restrict /proc/keys by credentials at open time b71ec041cce3 netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options a55ea87f70ae netfilter: nfnetlink_acct: validate NFACCT_FILTER parameters c92b434e70db netfilter: nfnetlink_log: just returns error for unknown command 9a07167f70a7 netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES da517f513b86 udplite: call proper backlog handlers ec117204466e ARM: dts: exynos: Do not ignore real-world fuse values for thermal zone 0 on Exynos5420 a20168a13836 Revert "x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls" a264be2b4108 ARM: dts: exynos: Add minimal clkout parameters to Exynos3250 PMU 7570acb21061 futex,rt_mutex: Restructure rt_mutex_finish_proxy_lock() f7ff45b8c3f2 iscsi_ibft: Fix missing break in switch statement 91c44982f503 Input: elan_i2c - add id for touchpad found in Lenovo s21e-20 4038a524616e Input: wacom_serial4 - add support for Wacom ArtPad II tablet 861e94995054 MIPS: Remove function size check in get_frame_info() 39ee160c4f82 perf symbols: Filter out hidden symbols from labels 74daf70b852a s390/qeth: fix use-after-free in error path 683c0116fbc1 dmaengine: dmatest: Abort test in case of mapping error 86785a16817c dmaengine: at_xdmac: Fix wrongfull report of a channel as in use 4560637bde5c irqchip/mmp: Only touch the PJ4 IRQ & FIQ bits on enable/disable e83b1928c838 ARM: pxa: ssp: unneeded to free devm_ allocated data 648fca89b734 autofs: fix error return in autofs_fill_super() 0d456fae1fb5 autofs: drop dentry reference only when it is never used 5d5a802ec2eb fs/drop_caches.c: avoid softlockups in drop_pagecache_sb() fcd11325572d mm, memory_hotplug: test_pages_in_a_zone do not pass the end of zone 3ba0452668ea mm, memory_hotplug: is_mem_section_removable do not pass the end of a zone d4cf6d934f72 x86_64: increase stack size for KASAN_EXTRA b8c82bd0cc5e x86/kexec: Don't setup EFI info if EFI runtime is not enabled 3cefd2a42568 cifs: fix computation for MAX_SMB2_HDR_SIZE 177a51b9adad platform/x86: Fix unmet dependency warning for SAMSUNG_Q10 930cc2bd8d5c scsi: libfc: free skb when receiving invalid flogi resp e7e01b2acf94 nfs: Fix NULL pointer dereference of dev_name 35709d642488 gpio: vf610: Mask all GPIO interrupts ec1f9572c841 net: stmmac: dwmac-rk: fix error handling in rk_gmac_powerup() f398c84acf98 net: hns: Fix wrong read accesses via Clause 45 MDIO protocol a270c6f52f5a net: altera_tse: fix msgdma_tx_completion on non-zero fill_level case 3afc8b846438 xtensa: SMP: limit number of possible CPUs by NR_CPUS 19960e19a7f9 xtensa: SMP: mark each possible CPU as present ce73d179cf66 xtensa: smp_lx200_defconfig: fix vectors clash 56b84e420189 xtensa: SMP: fix secondary CPU initialization f6efc18bbfc3 xtensa: SMP: fix ccount_timer_shutdown 9974f32f34d5 iommu/amd: Fix IOMMU page flush when detach device from a domain 81f097d689e5 ipvs: Fix signed integer overflow when setsockopt timeout e5bff433d050 IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM aa7fb4026321 perf tools: Handle TOPOLOGY headers with no CPU a4fa2a130412 vti4: Fix a ipip packet processing bug in 'IPCOMP' virtual tunnel bba078c9fc3c media: uvcvideo: Fix 'type' check leading to overflow c9b1f8506672 ip6mr: Do not call __IP6_INC_STATS() from preemptible context aaf68ba03cf7 net: dsa: mv88e6xxx: Fix u64 statistics dc18101f95fa netlabel: fix out-of-bounds memory accesses aba029c8e7a8 hugetlbfs: fix races and page leaks during migration 5b98f0928666 MIPS: irq: Allocate accurate order pages for irq stack 0adb8a1d60b1 applicom: Fix potential Spectre v1 vulnerabilities 5d58d8969037 x86/CPU/AMD: Set the CPB bit unconditionally on F17h 3f7902c723cf net: phy: Micrel KSZ8061: link failure after cable connect b98af83bc709 net: avoid use IPCB in cipso_v4_error 826987f6f98f net: Add __icmp_send helper. 51d27870ecf1 xen-netback: fix occasional leak of grant ref mappings under memory pressure 6e7339d5ee30 net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails 7fb2b5380fee bnxt_en: Drop oversize TX packets to prevent errors. 7e7a271035c4 team: Free BPF filter when unregistering netdev 89ef111eb52f sky2: Disable MSI on Dell Inspiron 1545 and Gateway P-79 d28a029290fd net-sysfs: Fix mem leak in netdev_register_kobject fcee2927c057 staging: lustre: fix buffer overflow of string buffer b48715dcf16b isdn: isdn_tty: fix build warning of strncpy eeb234f7f907 ncpfs: fix build warning of strncpy c776cff6de52 sockfs: getxattr: Fail with -EOPNOTSUPP for invalid attribute names c8d66722d84b cpufreq: Use struct kobj_attribute instead of struct global_attr 25d05441f9e5 USB: serial: ftdi_sio: add ID for Hjelmslund Electronics USB485 a78f651889f4 USB: serial: cp210x: add ID for Ingenico 3070 83e29e445132 USB: serial: option: add Telit ME910 ECM composition e90171edbef7 x86/uaccess: Don't leak the AC flag into __put_user() value evaluation 40952b6a649b mm: enforce min addr even if capable() in expand_downwards() 7404c65cac2d mmc: spi: Fix card detection during probe 1a8ccbf263d6 powerpc: Always initialize input array when calling epapr_hypercall() 05de33f10001 KVM: arm/arm64: Fix MMIO emulation data handling be96dcc315c7 arm/arm64: KVM: Feed initialized memory to MMIO accesses 37131ae9135c KVM: nSVM: clear events pending from svm_complete_interrupts() when exiting to L1 31f49f68d27e cfg80211: extend range deviation for DMG 39aabcb7dcf9 mac80211: don't initiate TDLS connection if station is not associated to AP b83f68e0396c ibmveth: Do not process frames after calling napi_reschedule 14ae77e8a4f8 net: altera_tse: fix connect_local_phy error path ff028bbb57aa scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state() e9fdf60dafdc serial: fsl_lpuart: fix maximum acceptable baud rate with over-sampling f5c5093be741 mac80211: fix miscounting of ttl-dropped frames e120f9d8596e ARC: fix __ffs return value to avoid build warnings bf36c587df83 ASoC: imx-audmux: change snprintf to scnprintf for possible overflow df7a151d53b1 ASoC: dapm: change snprintf to scnprintf for possible overflow 8751b9509990 usb: gadget: Potential NULL dereference on allocation error f84996563d7b usb: dwc3: gadget: Fix the uninitialized link_state when udc starts 0a9ecf2b3012 thermal: int340x_thermal: Fix a NULL vs IS_ERR() check c56caf662ad1 ALSA: compress: prevent potential divide by zero bugs 2fa06f59d44e ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field 59f6c707704a drm/msm: Unblock writer if reader closes file bbb07fa8dfe3 scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached 82774efd6d34 libceph: handle an empty authorize reply 0effb9fb3dfe Revert "bridge: do not add port to router list when receives query with source 0.0.0.0" 2c2433eba19a ARCv2: Enable unaligned access in early ASM code 6f0ec47b9a61 net/mlx4_en: Force CHECKSUM_NONE for short ethernet frames 9a24e9286b5b sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach() bd49916ee0f7 team: avoid complex list operations in team_nl_cmd_options_set() e41a4dc253df net/packet: fix 4gb buffer limit due to overflow check b76ca18c8588 batman-adv: fix uninit-value in batadv_interface_tx() 00c3ec3af87a KEYS: always initialize keyring_index_key::desc_len d76ef3c98024 KEYS: user: Align the payload buffer 2ef22c73c241 RDMA/srp: Rework SCSI device reset handling 1c3d88357065 isdn: avm: Fix string plus integer warning from Clang 65aac32fee80 leds: lp5523: fix a missing check of return value of lp55xx_read 4949b728976c atm: he: fix sign-extension overflow on large shift fd8662fa5930 isdn: i4l: isdn_tty: Fix some concurrency double-free bugs 2b285e446056 MIPS: jazz: fix 64bit build 61c0c195980b scsi: isci: initialize shost fully before calling scsi_add_host() 40ff741a7b49 scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param 5647975ec2b6 MIPS: ath79: Enable OF serial ports in the default config b8265637ec8a net: hns: Fix use after free identified by SLUB debug d8189ee86c3a mfd: mc13xxx: Fix a missing check of a register-read failure 81456de2d4b3 mfd: wm5110: Add missing ASRC rate register 6a422b0676ed mfd: qcom_rpm: write fw_version to CTRL_REG c02e9400dc2e mfd: ab8500-core: Return zero in get_register_interruptible() 40f1c388f263 mfd: db8500-prcmu: Fix some section annotations 2309acaeee2d mfd: twl-core: Fix section annotations on {,un}protect_pm_master 3e442a35c361 mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering mfd cells 1e73c0aeb3ee KEYS: allow reaching the keys quotas exactly d3f2228a22ab numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES 1ff6adf14549 ceph: avoid repeatedly adding inode to mdsc->snap_flush_list a71fc927e552 Revert "ANDROID: arm: process: Add display of memory around registers when displaying regs." 8940467d34f9 drivers: soc: qcom: Added check to avoid opening multiple instance 47fae5d1652c usb: xhci: Reduce command abort handshake timeout 7de60546d8f1 usb: xhci: remove unnecessary second abort try b6a6377d0e09 usb: XHCI: Bailout command abort operation upon XHCI remove 70dc54f5deaa usb: XHCI: Implement xhci_handshake_check_state() API 331c1249b130 fbdev: msm: remove check for rgb source format Change-Id: I78d7ebcce7a7fc0a6709c4fb602e88fa919ceec5
| * | | cnss2: Remove setting recovery state during driver unloadJayachandran Sreekumaran2019-04-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove setting the recovery state in wlan driver unload path. Change-Id: Ib59c8d406fe67f14b7893884f23d323e87e2490f Signed-off-by: Jayachandran Sreekumaran <jsreekum@codeaurora.org>
| * | | Merge "Merge android-4.4.178 (7af10f2) into msm-4.4"Linux Build Service Account2019-04-10
| |\ \ \
| | * | | Merge android-4.4.178 (7af10f2) into msm-4.4Srinivasarao P2019-04-05
| | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-7af10f2 Linux 4.4.178 stm class: Hide STM-specific options if STM is disabled coresight: removing bind/unbind options from sysfs arm64: support keyctl() system call in 32-bit mode Revert "USB: core: only clean up what we allocated" xhci: Fix port resume done detection for SS ports with LPM enabled KVM: Reject device ioctls from processes other than the VM's creator x86/smp: Enforce CONFIG_HOTPLUG_CPU when SMP=y perf intel-pt: Fix TSC slip gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links Disable kgdboc failed by echo space to /sys/module/kgdboc/parameters/kgdboc USB: serial: option: add Olicard 600 USB: serial: option: set driver_info for SIM5218 and compatibles USB: serial: mos7720: fix mos_parport refcount imbalance on error path USB: serial: ftdi_sio: add additional NovaTech products USB: serial: cp210x: add new device id serial: sh-sci: Fix setting SCSCR_TIE while transferring data serial: max310x: Fix to avoid potential NULL pointer dereference staging: vt6655: Fix interrupt race condition on device start up. staging: vt6655: Remove vif check from vnt_interrupt tty: atmel_serial: fix a potential NULL pointer dereference scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP devices scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host scsi: sd: Fix a race between closing an sd device and sd I/O ALSA: pcm: Don't suspend stream in unrecoverable PCM state ALSA: pcm: Fix possible OOB access in PCM oss plugins ALSA: seq: oss: Fix Spectre v1 vulnerability ALSA: rawmidi: Fix potential Spectre v1 vulnerability ALSA: compress: add support for 32bit calls in a 64bit kernel ARM: imx6q: cpuidle: fix bug that CPU might not wake up at expected time btrfs: raid56: properly unmap parity page in finish_parity_scrub() btrfs: remove WARN_ON in log_dir_items mac8390: Fix mmio access size probe sctp: get sctphdr by offset in sctp_compute_cksum vxlan: Don't call gro_cells_destroy() before device is unregistered tcp: do not use ipv6 header for ipv4 flow packets: Always register packet sk in the same order Add hlist_add_tail_rcu() (Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net) net: rose: fix a possible stack overflow net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec mISDN: hfcpci: Test both vendor & device ID for Digium HFC4S dccp: do not use ipv6 header for ipv4 flow stmmac: copy unicast mac address to MAC registers cfg80211: size various nl80211 messages correctly mmc: mmc: fix switch timeout issue caused by jiffies precision arm64: kconfig: drop CONFIG_RTC_LIB dependency video: fbdev: Set pixclock = 0 in goldfishfb cpu/hotplug: Handle unbalanced hotplug enable/disable usb: gadget: rndis: free response queue during REMOTE_NDIS_RESET_MSG usb: gadget: configfs: add mutex lock before unregister gadget ipv6: fix endianness error in icmpv6_err stm class: Fix stm device initialization order stm class: Do not leak the chrdev in error path PM / Hibernate: Call flush_icache_range() on pages restored in-place arm64: kernel: Include _AC definition in page.h perf/ring_buffer: Refuse to begin AUX transaction after rb->aux_mmap_count drops mac80211: fix "warning: ‘target_metric’ may be used uninitialized" arm64/kernel: fix incorrect EL0 check in inv_entry macro ARM: 8510/1: rework ARM_CPU_SUSPEND dependencies staging: goldfish: audio: fix compiliation on arm staging: ion: Set minimum carveout heap allocation order to PAGE_SHIFT staging: ashmem: Add missing include staging: ashmem: Avoid deadlock with mmap/shrink asm-generic: Fix local variable shadow in __set_fixmap_offset coresight: etm4x: Check every parameter used by dma_xx_coherent. coresight: "DEVICE_ATTR_RO" should defined as static. stm class: Fix a race in unlinking stm class: Fix unbalanced module/device refcounting stm class: Guard output assignment against concurrency stm class: Fix unlocking braino in the error path stm class: Support devices with multiple instances stm class: Prevent user-controllable allocations stm class: Fix link list locking stm class: Fix locking in unbinding policy path coresight: remove csdev's link from topology coresight: release reference taken by 'bus_find_device()' coresight: coresight_unregister() function cleanup coresight: fixing lockdep error writeback: initialize inode members that track writeback history Revert "mmc: block: don't use parameter prefix if built as module" net: diag: support v4mapped sockets in inet_diag_find_one_icsk() perf: Synchronously free aux pages in case of allocation failure arm64: hide __efistub_ aliases from kallsyms hid-sensor-hub.c: fix wrong do_div() usage vmstat: make vmstat_updater deferrable again and shut down on idle android: unconditionally remove callbacks in sync_fence_free() ARM: 8494/1: mm: Enable PXN when running non-LPAE kernel on LPAE processor ARM: 8458/1: bL_switcher: add GIC dependency efi: stub: define DISABLE_BRANCH_PROFILING for all architectures arm64: fix COMPAT_SHMLBA definition for large pages mmc: block: Allow more than 8 partitions per card sched/fair: Fix new task's load avg removed from source CPU in wake_up_new_task() Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt ath10k: avoid possible string overflow rtc: Fix overflow when converting time64_t to rtc_time USB: core: only clean up what we allocated lib/int_sqrt: optimize small argument serial: sprd: clear timeout interrupt only rather than all interrupts usb: renesas_usbhs: gadget: fix unused-but-set-variable warning arm64: traps: disable irq in die() Hang/soft lockup in d_invalidate with simultaneous calls serial: sprd: adjust TIMEOUT to a big value tcp/dccp: drop SYN packets if accept queue is full usb: gadget: Add the gserial port checking in gs_start_tx() usb: gadget: composite: fix dereference after null check coverify warning kbuild: setlocalversion: print error to STDERR extcon: usb-gpio: Don't miss event during suspend/resume mm/rmap: replace BUG_ON(anon_vma->degree) with VM_WARN_ON mmc: core: fix using wrong io voltage if mmc_select_hs200 fails arm64: mm: Add trace_irqflags annotations to do_debug_exception() usb: dwc3: gadget: Fix suspend/resume during device mode mmc: core: shut up "voltage-ranges unspecified" pr_info() mmc: sanitize 'bus width' in debug output mmc: make MAN_BKOPS_EN message a debug mmc: debugfs: Add a restriction to mmc debugfs clock setting mmc: pwrseq_simple: Make reset-gpios optional to match doc ALSA: hda - Enforces runtime_resume after S3 and S4 for each codec ALSA: hda - Record the current power state before suspend/resume calls locking/lockdep: Add debug_locks check in __lock_downgrade() media: v4l2-ctrls.c/uvc: zero v4l2_event mmc: tmio_mmc_core: don't claim spurious interrupts ext4: brelse all indirect buffer in ext4_ind_remove_space() ext4: fix data corruption caused by unaligned direct AIO ext4: fix NULL pointer dereference while journal is aborted futex: Ensure that futex address is aligned in handle_futex_death() MIPS: Fix kernel crash for R6 in jump label branch function mips: loongson64: lemote-2f: Add IRQF_NO_SUSPEND to "cascade" irqaction. udf: Fix crash on IO error during truncate drm/vmwgfx: Don't double-free the mode stored in par->set_mode mmc: pxamci: fix enum type confusion ANDROID: drop CONFIG_INPUT_KEYCHORD from cuttlefish and ranchu UPSTREAM: virt_wifi: Remove REGULATORY_WIPHY_SELF_MANAGED UPSTREAM: net: socket: set sock->sk to NULL after calling proto_ops::release() f2fs: set pin_file under CAP_SYS_ADMIN f2fs: fix to avoid deadlock in f2fs_read_inline_dir() f2fs: fix to adapt small inline xattr space in __find_inline_xattr() f2fs: fix to do sanity check with inode.i_inline_xattr_size f2fs: give some messages for inline_xattr_size f2fs: don't trigger read IO for beyond EOF page f2fs: fix to add refcount once page is tagged PG_private f2fs: remove wrong comment in f2fs_invalidate_page() f2fs: fix to use kvfree instead of kzfree f2fs: print more parameters in trace_f2fs_map_blocks f2fs: trace f2fs_ioc_shutdown f2fs: fix to avoid deadlock of atomic file operations f2fs: fix to dirty inode for i_mode recovery f2fs: give random value to i_generation f2fs: no need to take page lock in readdir f2fs: fix to update iostat correctly in IPU path f2fs: fix encrypted page memory leak f2fs: make fault injection covering __submit_flush_wait() f2fs: fix to retry fill_super only if recovery failed f2fs: silence VM_WARN_ON_ONCE in mempool_alloc f2fs: correct spelling mistake f2fs: fix wrong #endif f2fs: don't clear CP_QUOTA_NEED_FSCK_FLAG f2fs: don't allow negative ->write_io_size_bits f2fs: fix to check inline_xattr_size boundary correctly Revert "f2fs: fix to avoid deadlock of atomic file operations" Revert "f2fs: fix to check inline_xattr_size boundary correctly" f2fs: do not use mutex lock in atomic context f2fs: fix potential data inconsistence of checkpoint f2fs: fix to avoid deadlock of atomic file operations f2fs: fix to check inline_xattr_size boundary correctly f2fs: jump to label 'free_node_inode' when failing from d_make_root() f2fs: fix to document inline_xattr_size option f2fs: fix to data block override node segment by mistake f2fs: fix typos in code comments f2fs: sync filesystem after roll-forward recovery fs: export evict_inodes f2fs: flush quota blocks after turnning it off f2fs: avoid null pointer exception in dcc_info f2fs: don't wake up too frequently, if there is lots of IOs f2fs: try to keep CP_TRIMMED_FLAG after successful umount f2fs: add quick mode of checkpoint=disable for QA f2fs: run discard jobs when put_super f2fs: fix to set sbi dirty correctly f2fs: UBSAN: set boolean value iostat_enable correctly f2fs: add brackets for macros f2fs: check if file namelen exceeds max value f2fs: fix to trigger fsck if dirent.name_len is zero f2fs: no need to check return value of debugfs_create functions f2fs: export FS_NOCOW_FL flag to user f2fs: check inject_rate validity during configuring f2fs: remove set but not used variable 'err' f2fs: fix compile warnings: 'struct *' declared inside parameter list f2fs: change error code to -ENOMEM from -EINVAL Conflicts: arch/arm/Kconfig arch/arm64/kernel/traps.c drivers/hwtracing/coresight/coresight-etm4x.c drivers/hwtracing/coresight/coresight-tmc.c drivers/hwtracing/stm/Kconfig drivers/hwtracing/stm/core.c drivers/mmc/core/mmc.c drivers/usb/gadget/function/u_serial.c kernel/events/ring_buffer.c net/wireless/nl80211.c sound/core/compress_offload.c Change-Id: I33783dbd0a25d678d6c61204f9e67690e57bed8f Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| | | * | Merge 4.4.178 into android-4.4Greg Kroah-Hartman2019-04-03
| | | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 4.4.178 mmc: pxamci: fix enum type confusion drm/vmwgfx: Don't double-free the mode stored in par->set_mode udf: Fix crash on IO error during truncate mips: loongson64: lemote-2f: Add IRQF_NO_SUSPEND to "cascade" irqaction. MIPS: Fix kernel crash for R6 in jump label branch function futex: Ensure that futex address is aligned in handle_futex_death() ext4: fix NULL pointer dereference while journal is aborted ext4: fix data corruption caused by unaligned direct AIO ext4: brelse all indirect buffer in ext4_ind_remove_space() mmc: tmio_mmc_core: don't claim spurious interrupts media: v4l2-ctrls.c/uvc: zero v4l2_event locking/lockdep: Add debug_locks check in __lock_downgrade() ALSA: hda - Record the current power state before suspend/resume calls ALSA: hda - Enforces runtime_resume after S3 and S4 for each codec mmc: pwrseq_simple: Make reset-gpios optional to match doc mmc: debugfs: Add a restriction to mmc debugfs clock setting mmc: make MAN_BKOPS_EN message a debug mmc: sanitize 'bus width' in debug output mmc: core: shut up "voltage-ranges unspecified" pr_info() usb: dwc3: gadget: Fix suspend/resume during device mode arm64: mm: Add trace_irqflags annotations to do_debug_exception() mmc: core: fix using wrong io voltage if mmc_select_hs200 fails mm/rmap: replace BUG_ON(anon_vma->degree) with VM_WARN_ON extcon: usb-gpio: Don't miss event during suspend/resume kbuild: setlocalversion: print error to STDERR usb: gadget: composite: fix dereference after null check coverify warning usb: gadget: Add the gserial port checking in gs_start_tx() tcp/dccp: drop SYN packets if accept queue is full serial: sprd: adjust TIMEOUT to a big value Hang/soft lockup in d_invalidate with simultaneous calls arm64: traps: disable irq in die() usb: renesas_usbhs: gadget: fix unused-but-set-variable warning serial: sprd: clear timeout interrupt only rather than all interrupts lib/int_sqrt: optimize small argument USB: core: only clean up what we allocated rtc: Fix overflow when converting time64_t to rtc_time ath10k: avoid possible string overflow Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer sched/fair: Fix new task's load avg removed from source CPU in wake_up_new_task() mmc: block: Allow more than 8 partitions per card arm64: fix COMPAT_SHMLBA definition for large pages efi: stub: define DISABLE_BRANCH_PROFILING for all architectures ARM: 8458/1: bL_switcher: add GIC dependency ARM: 8494/1: mm: Enable PXN when running non-LPAE kernel on LPAE processor android: unconditionally remove callbacks in sync_fence_free() vmstat: make vmstat_updater deferrable again and shut down on idle hid-sensor-hub.c: fix wrong do_div() usage arm64: hide __efistub_ aliases from kallsyms perf: Synchronously free aux pages in case of allocation failure net: diag: support v4mapped sockets in inet_diag_find_one_icsk() Revert "mmc: block: don't use parameter prefix if built as module" writeback: initialize inode members that track writeback history coresight: fixing lockdep error coresight: coresight_unregister() function cleanup coresight: release reference taken by 'bus_find_device()' coresight: remove csdev's link from topology stm class: Fix locking in unbinding policy path stm class: Fix link list locking stm class: Prevent user-controllable allocations stm class: Support devices with multiple instances stm class: Fix unlocking braino in the error path stm class: Guard output assignment against concurrency stm class: Fix unbalanced module/device refcounting stm class: Fix a race in unlinking coresight: "DEVICE_ATTR_RO" should defined as static. coresight: etm4x: Check every parameter used by dma_xx_coherent. asm-generic: Fix local variable shadow in __set_fixmap_offset staging: ashmem: Avoid deadlock with mmap/shrink staging: ashmem: Add missing include staging: ion: Set minimum carveout heap allocation order to PAGE_SHIFT staging: goldfish: audio: fix compiliation on arm ARM: 8510/1: rework ARM_CPU_SUSPEND dependencies arm64/kernel: fix incorrect EL0 check in inv_entry macro mac80211: fix "warning: ‘target_metric’ may be used uninitialized" perf/ring_buffer: Refuse to begin AUX transaction after rb->aux_mmap_count drops arm64: kernel: Include _AC definition in page.h PM / Hibernate: Call flush_icache_range() on pages restored in-place stm class: Do not leak the chrdev in error path stm class: Fix stm device initialization order ipv6: fix endianness error in icmpv6_err usb: gadget: configfs: add mutex lock before unregister gadget usb: gadget: rndis: free response queue during REMOTE_NDIS_RESET_MSG cpu/hotplug: Handle unbalanced hotplug enable/disable video: fbdev: Set pixclock = 0 in goldfishfb arm64: kconfig: drop CONFIG_RTC_LIB dependency mmc: mmc: fix switch timeout issue caused by jiffies precision cfg80211: size various nl80211 messages correctly stmmac: copy unicast mac address to MAC registers dccp: do not use ipv6 header for ipv4 flow mISDN: hfcpci: Test both vendor & device ID for Digium HFC4S net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec net: rose: fix a possible stack overflow Add hlist_add_tail_rcu() (Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net) packets: Always register packet sk in the same order tcp: do not use ipv6 header for ipv4 flow vxlan: Don't call gro_cells_destroy() before device is unregistered sctp: get sctphdr by offset in sctp_compute_cksum mac8390: Fix mmio access size probe btrfs: remove WARN_ON in log_dir_items btrfs: raid56: properly unmap parity page in finish_parity_scrub() ARM: imx6q: cpuidle: fix bug that CPU might not wake up at expected time ALSA: compress: add support for 32bit calls in a 64bit kernel ALSA: rawmidi: Fix potential Spectre v1 vulnerability ALSA: seq: oss: Fix Spectre v1 vulnerability ALSA: pcm: Fix possible OOB access in PCM oss plugins ALSA: pcm: Don't suspend stream in unrecoverable PCM state scsi: sd: Fix a race between closing an sd device and sd I/O scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP devices tty: atmel_serial: fix a potential NULL pointer dereference staging: vt6655: Remove vif check from vnt_interrupt staging: vt6655: Fix interrupt race condition on device start up. serial: max310x: Fix to avoid potential NULL pointer dereference serial: sh-sci: Fix setting SCSCR_TIE while transferring data USB: serial: cp210x: add new device id USB: serial: ftdi_sio: add additional NovaTech products USB: serial: mos7720: fix mos_parport refcount imbalance on error path USB: serial: option: set driver_info for SIM5218 and compatibles USB: serial: option: add Olicard 600 Disable kgdboc failed by echo space to /sys/module/kgdboc/parameters/kgdboc fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input perf intel-pt: Fix TSC slip x86/smp: Enforce CONFIG_HOTPLUG_CPU when SMP=y KVM: Reject device ioctls from processes other than the VM's creator xhci: Fix port resume done detection for SS ports with LPM enabled Revert "USB: core: only clean up what we allocated" arm64: support keyctl() system call in 32-bit mode coresight: removing bind/unbind options from sysfs stm class: Hide STM-specific options if STM is disabled Linux 4.4.178 Change-Id: Ia7fc9419e85c78352eef494a0c914dec7650062f Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
| | | | * ath10k: avoid possible string overflowArnd Bergmann2019-04-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit 6707ba0105a2d350710bc0a537a98f49eb4b895d upstream. The way that 'strncat' is used here raised a warning in gcc-8: drivers/net/wireless/ath/ath10k/wmi.c: In function 'ath10k_wmi_tpc_stats_final_disp_tables': drivers/net/wireless/ath/ath10k/wmi.c:4649:4: error: 'strncat' output truncated before terminating nul copying as many bytes from a string as its length [-Werror=stringop-truncation] Effectively, this is simply a strcat() but the use of strncat() suggests some form of overflow check. Regardless of whether this might actually overflow, using strlcat() instead of strncat() avoids the warning and makes the code more robust. Fixes: bc64d05220f3 ("ath10k: debugfs support to get final TPC stats for 10.4 variants") Signed-off-by: Arnd Bergmann <arnd@arndb.de> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| | | * | UPSTREAM: virt_wifi: Remove REGULATORY_WIPHY_SELF_MANAGEDCody Schuffelen2019-03-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | REGULATORY_WIPHY_SELF_MANAGED as set here breaks NL80211_CMD_GET_REG, because it expects the wiphy to do regulatory management. Since virt_wifi does not do regulatory management, this triggers a WARN_ON in NL80211_CMD_GET_REG and fails the netlink command. Removing REGULATORY_WIPHY_SELF_MANAGED fixes the problem and the virtual wireless network continues to work. Signed-off-by: Cody Schuffelen <schuffelen@google.com> Acked-by: Alistair Strachan <astrachan@google.com> Acked-by: Greg Hartman <ghartman@google.com> Signed-off-by: Johannes Berg <johannes.berg@intel.com> (cherry picked from commit f440b125450dfc65ce0386eb231da2f663c45ca0) Bug: 119771992 Change-Id: Ida660b77a2f091e7aaabcecf8a60e66cc2f1f91d Signed-off-by: Alistair Strachan <astrachan@google.com>
| * | | | cnss2: Support USB SSR and disconnect scenariosRajasekaran Kalidoss2019-04-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For USB devices, irrecoverable scenarios in firmware can lead to USB bus disconnect. In USB disconnect, the interface and dev structures passed by USB sub system are freed and are no longer valid. The current implementation is PCIe specific and assumes dev struct being present and valid always. The clean way to handle this for HL(USB/SDIO) is to call pld_usb_remove in disconnect and pld_usb_probe in re-connect after a recovery Change-Id: I3fc9a5a2fc7bb53439b0410e61f381aa94e18634 Signed-off-by: Rajasekaran Kalidoss <rkalidos@codeaurora.org>
| * | | | cnss2: Export a platform API to force collect ramdumpGuisen Yang2019-04-08
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add an API to force collect ramdump in platform driver. This API will be called from WLAN driver to collect ramdump before calling kernel panic. CRs-Fixed: 2351811 Change-Id: Ic88769beec4f7f8303fc2c0803012789e02c9f4f Signed-off-by: Guisen Yang <guiseny@codeaurora.org>
| * | | Merge "Merge android-4.4.177 (0c3b8c4) into msm-4.4"Linux Build Service Account2019-04-02
| |\ \ \
| | * | | Merge android-4.4.177 (0c3b8c4) into msm-4.4Srinivasarao P2019-03-25
| | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-0c3b8c4 Linux 4.4.177 KVM: X86: Fix residual mmio emulation request to userspace KVM: nVMX: Ignore limit checks on VMX instructions using flat segments KVM: nVMX: Sign extend displacements of VMX instr's mem operands drm/radeon/evergreen_cs: fix missing break in switch statement media: uvcvideo: Avoid NULL pointer dereference at the end of streaming rcu: Do RCU GP kthread self-wakeup from softirq and interrupt PM / wakeup: Rework wakeup source timer cancellation nfsd: fix wrong check in write_v4_end_grace() nfsd: fix memory corruption caused by readdir NFS: Don't recoalesce on error in nfs_pageio_complete_mirror() NFS: Fix an I/O request leakage in nfs_do_recoalesce md: Fix failed allocation of md_register_thread perf intel-pt: Fix overlap calculation for padding perf auxtrace: Define auxtrace record alignment perf intel-pt: Fix CYC timestamp calculation after OVF NFS41: pop some layoutget errors to application dm: fix to_sector() for 32bit ARM: s3c24xx: Fix boolean expressions in osiris_dvs_notify powerpc/83xx: Also save/restore SPRG4-7 during suspend powerpc/powernv: Make opal log only readable by root powerpc/wii: properly disable use of BATs when requested. powerpc/32: Clear on-stack exception marker upon exception return jbd2: fix compile warning when using JBUFFER_TRACE jbd2: clear dirty flag when revoking a buffer from an older transaction serial: 8250_pci: Have ACCES cards that use the four port Pericom PI7C9X7954 chip use the pci_pericom_setup() serial: 8250_pci: Fix number of ports for ACCES serial cards perf bench: Copy kernel files needed to build mem{cpy,set} x86_64 benchmarks i2c: tegra: fix maximum transfer size parport_pc: fix find_superio io compare code, should use equal test. intel_th: Don't reference unassigned outputs kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv mm/vmalloc: fix size check for remap_vmalloc_range_partial() dmaengine: usb-dmac: Make DMAC system sleep callbacks explicit clk: ingenic: Fix round_rate misbehaving with non-integer dividers ext2: Fix underflow in ext2_max_size() ext4: fix crash during online resizing cpufreq: pxa2xx: remove incorrect __init annotation cpufreq: tegra124: add missing of_node_put() crypto: pcbc - remove bogus memcpy()s with src == dest Btrfs: fix corruption reading shared and compressed extents after hole punching btrfs: ensure that a DUP or RAID1 block group has exactly two stripes m68k: Add -ffreestanding to CFLAGS scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock scsi: virtio_scsi: don't send sc payload with tmfs s390/virtio: handle find on invalid queue gracefully clocksource/drivers/exynos_mct: Clear timer interrupt when shutdown clocksource/drivers/exynos_mct: Move one-shot check from tick clear to ISR regulator: s2mpa01: Fix step values for some LDOs regulator: s2mps11: Fix steps for buck7, buck8 and LDO35 ACPI / device_sysfs: Avoid OF modalias creation for removed device tracing: Do not free iter->trace in fail path of tracing_open_pipe() CIFS: Fix read after write for files with read caching crypto: arm64/aes-ccm - fix logical bug in AAD MAC handling stm class: Prevent division by zero tmpfs: fix uninitialized return value in shmem_link net: set static variable an initial value in atl2_probe() mac80211_hwsim: propagate genlmsg_reply return code phonet: fix building with clang ARC: uacces: remove lp_start, lp_end from clobber list tmpfs: fix link accounting when a tmpfile is linked in arm64: Relax GIC version check during early boot ASoC: topology: free created components in tplg load error net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe() pinctrl: meson: meson8b: fix the sdxc_a data 1..3 pins net: systemport: Fix reception of BPDUs scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task assoc_array: Fix shortcut creation ARM: 8824/1: fix a migrating irq bug when hotplug cpu Input: st-keyscan - fix potential zalloc NULL dereference i2c: cadence: Fix the hold bit setting Input: matrix_keypad - use flush_delayed_work() ARM: OMAP2+: Variable "reg" in function omap4_dsi_mux_pads() could be uninitialized s390/dasd: fix using offset into zero size array error gpu: ipu-v3: Fix CSI offsets for imx53 gpu: ipu-v3: Fix i.MX51 CSI control registers offset crypto: ahash - fix another early termination in hash walk crypto: caam - fixed handling of sg list stm class: Fix an endless loop in channel allocation ASoC: fsl_esai: fix register setting issue in RIGHT_J mode 9p/net: fix memory leak in p9_client_create 9p: use inode->i_lock to protect i_size_write() under 32-bit media: videobuf2-v4l2: drop WARN_ON in vb2_warn_zero_bytesused() It's wrong to add len to sector_nr in raid10 reshape twice fs/9p: use fscache mutex rather than spinlock ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against Liquid Saffire 56 tcp/dccp: remove reqsk_put() from inet_child_forget() gro_cells: make sure device is up in gro_cells_receive() net/hsr: fix possible crash in add_timer() vxlan: Fix GRO cells race condition between receive and link delete vxlan: test dev->flags & IFF_UP before calling gro_cells_receive() ipvlan: disallow userns cap_net_admin to change global mode/flags missing barriers in some of unix_sock ->addr and ->path accesses net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255 mdio_bus: Fix use-after-free on device_register fails net/x25: fix a race in x25_bind() net/mlx4_core: Fix qp mtt size calculation net/mlx4_core: Fix reset flow when in command polling mode tcp: handle inet_csk_reqsk_queue_add() failures route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race ravb: Decrease TxFIFO depth of Q3 and Q2 to one pptp: dst_release sk_dst_cache in pptp_sock_destruct net/x25: reset state in x25_connect() net/x25: fix use-after-free in x25_device_event() net: sit: fix UBSAN Undefined behaviour in check_6rd net: hsr: fix memory leak in hsr_dev_finalize() l2tp: fix infoleak in l2tp_ip6_recvmsg() KEYS: restrict /proc/keys by credentials at open time netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options netfilter: nfnetlink_acct: validate NFACCT_FILTER parameters netfilter: nfnetlink_log: just returns error for unknown command netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES udplite: call proper backlog handlers ARM: dts: exynos: Do not ignore real-world fuse values for thermal zone 0 on Exynos5420 Revert "x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls" ARM: dts: exynos: Add minimal clkout parameters to Exynos3250 PMU futex,rt_mutex: Restructure rt_mutex_finish_proxy_lock() iscsi_ibft: Fix missing break in switch statement Input: elan_i2c - add id for touchpad found in Lenovo s21e-20 Input: wacom_serial4 - add support for Wacom ArtPad II tablet MIPS: Remove function size check in get_frame_info() perf symbols: Filter out hidden symbols from labels s390/qeth: fix use-after-free in error path dmaengine: dmatest: Abort test in case of mapping error dmaengine: at_xdmac: Fix wrongfull report of a channel as in use irqchip/mmp: Only touch the PJ4 IRQ & FIQ bits on enable/disable ARM: pxa: ssp: unneeded to free devm_ allocated data autofs: fix error return in autofs_fill_super() autofs: drop dentry reference only when it is never used fs/drop_caches.c: avoid softlockups in drop_pagecache_sb() mm, memory_hotplug: test_pages_in_a_zone do not pass the end of zone mm, memory_hotplug: is_mem_section_removable do not pass the end of a zone x86_64: increase stack size for KASAN_EXTRA x86/kexec: Don't setup EFI info if EFI runtime is not enabled cifs: fix computation for MAX_SMB2_HDR_SIZE platform/x86: Fix unmet dependency warning for SAMSUNG_Q10 scsi: libfc: free skb when receiving invalid flogi resp nfs: Fix NULL pointer dereference of dev_name gpio: vf610: Mask all GPIO interrupts net: stmmac: dwmac-rk: fix error handling in rk_gmac_powerup() net: hns: Fix wrong read accesses via Clause 45 MDIO protocol net: altera_tse: fix msgdma_tx_completion on non-zero fill_level case xtensa: SMP: limit number of possible CPUs by NR_CPUS xtensa: SMP: mark each possible CPU as present xtensa: smp_lx200_defconfig: fix vectors clash xtensa: SMP: fix secondary CPU initialization xtensa: SMP: fix ccount_timer_shutdown iommu/amd: Fix IOMMU page flush when detach device from a domain ipvs: Fix signed integer overflow when setsockopt timeout IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM perf tools: Handle TOPOLOGY headers with no CPU vti4: Fix a ipip packet processing bug in 'IPCOMP' virtual tunnel media: uvcvideo: Fix 'type' check leading to overflow ip6mr: Do not call __IP6_INC_STATS() from preemptible context net: dsa: mv88e6xxx: Fix u64 statistics netlabel: fix out-of-bounds memory accesses hugetlbfs: fix races and page leaks during migration MIPS: irq: Allocate accurate order pages for irq stack applicom: Fix potential Spectre v1 vulnerabilities x86/CPU/AMD: Set the CPB bit unconditionally on F17h net: phy: Micrel KSZ8061: link failure after cable connect net: avoid use IPCB in cipso_v4_error net: Add __icmp_send helper. xen-netback: fix occasional leak of grant ref mappings under memory pressure net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails bnxt_en: Drop oversize TX packets to prevent errors. team: Free BPF filter when unregistering netdev sky2: Disable MSI on Dell Inspiron 1545 and Gateway P-79 net-sysfs: Fix mem leak in netdev_register_kobject staging: lustre: fix buffer overflow of string buffer isdn: isdn_tty: fix build warning of strncpy ncpfs: fix build warning of strncpy sockfs: getxattr: Fail with -EOPNOTSUPP for invalid attribute names cpufreq: Use struct kobj_attribute instead of struct global_attr USB: serial: ftdi_sio: add ID for Hjelmslund Electronics USB485 USB: serial: cp210x: add ID for Ingenico 3070 USB: serial: option: add Telit ME910 ECM composition x86/uaccess: Don't leak the AC flag into __put_user() value evaluation mm: enforce min addr even if capable() in expand_downwards() mmc: spi: Fix card detection during probe powerpc: Always initialize input array when calling epapr_hypercall() KVM: arm/arm64: Fix MMIO emulation data handling arm/arm64: KVM: Feed initialized memory to MMIO accesses KVM: nSVM: clear events pending from svm_complete_interrupts() when exiting to L1 cfg80211: extend range deviation for DMG mac80211: don't initiate TDLS connection if station is not associated to AP ibmveth: Do not process frames after calling napi_reschedule net: altera_tse: fix connect_local_phy error path scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state() serial: fsl_lpuart: fix maximum acceptable baud rate with over-sampling mac80211: fix miscounting of ttl-dropped frames ARC: fix __ffs return value to avoid build warnings ASoC: imx-audmux: change snprintf to scnprintf for possible overflow ASoC: dapm: change snprintf to scnprintf for possible overflow usb: gadget: Potential NULL dereference on allocation error usb: dwc3: gadget: Fix the uninitialized link_state when udc starts thermal: int340x_thermal: Fix a NULL vs IS_ERR() check ALSA: compress: prevent potential divide by zero bugs ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field drm/msm: Unblock writer if reader closes file scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached libceph: handle an empty authorize reply Revert "bridge: do not add port to router list when receives query with source 0.0.0.0" ARCv2: Enable unaligned access in early ASM code net/mlx4_en: Force CHECKSUM_NONE for short ethernet frames sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach() team: avoid complex list operations in team_nl_cmd_options_set() net/packet: fix 4gb buffer limit due to overflow check batman-adv: fix uninit-value in batadv_interface_tx() KEYS: always initialize keyring_index_key::desc_len KEYS: user: Align the payload buffer RDMA/srp: Rework SCSI device reset handling isdn: avm: Fix string plus integer warning from Clang leds: lp5523: fix a missing check of return value of lp55xx_read atm: he: fix sign-extension overflow on large shift isdn: i4l: isdn_tty: Fix some concurrency double-free bugs MIPS: jazz: fix 64bit build scsi: isci: initialize shost fully before calling scsi_add_host() scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param MIPS: ath79: Enable OF serial ports in the default config net: hns: Fix use after free identified by SLUB debug mfd: mc13xxx: Fix a missing check of a register-read failure mfd: wm5110: Add missing ASRC rate register mfd: qcom_rpm: write fw_version to CTRL_REG mfd: ab8500-core: Return zero in get_register_interruptible() mfd: db8500-prcmu: Fix some section annotations mfd: twl-core: Fix section annotations on {,un}protect_pm_master mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering mfd cells KEYS: allow reaching the keys quotas exactly numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES ceph: avoid repeatedly adding inode to mdsc->snap_flush_list Revert "ANDROID: arm: process: Add display of memory around registers when displaying regs." ANDROID: mnt: Propagate remount correctly ANDROID: cuttlefish_defconfig: Add support for AC97 audio ANDROID: overlayfs: override_creds=off option bypass creator_cred FROMGIT: binder: create node flag to request sender's security context Conflicts: arch/arm/kernel/irq.c drivers/media/v4l2-core/videobuf2-v4l2.c sound/core/compress_offload.c Change-Id: I998f8d53b0c5b8a7102816034452b1779a3b69a3 Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| | | * | Merge 4.4.177 into android-4.4Greg Kroah-Hartman2019-03-23
| | | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 4.4.177 ceph: avoid repeatedly adding inode to mdsc->snap_flush_list numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES KEYS: allow reaching the keys quotas exactly mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering mfd cells mfd: twl-core: Fix section annotations on {,un}protect_pm_master mfd: db8500-prcmu: Fix some section annotations mfd: ab8500-core: Return zero in get_register_interruptible() mfd: qcom_rpm: write fw_version to CTRL_REG mfd: wm5110: Add missing ASRC rate register mfd: mc13xxx: Fix a missing check of a register-read failure net: hns: Fix use after free identified by SLUB debug MIPS: ath79: Enable OF serial ports in the default config scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param scsi: isci: initialize shost fully before calling scsi_add_host() MIPS: jazz: fix 64bit build isdn: i4l: isdn_tty: Fix some concurrency double-free bugs atm: he: fix sign-extension overflow on large shift leds: lp5523: fix a missing check of return value of lp55xx_read isdn: avm: Fix string plus integer warning from Clang RDMA/srp: Rework SCSI device reset handling KEYS: user: Align the payload buffer KEYS: always initialize keyring_index_key::desc_len batman-adv: fix uninit-value in batadv_interface_tx() net/packet: fix 4gb buffer limit due to overflow check team: avoid complex list operations in team_nl_cmd_options_set() sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach() net/mlx4_en: Force CHECKSUM_NONE for short ethernet frames ARCv2: Enable unaligned access in early ASM code Revert "bridge: do not add port to router list when receives query with source 0.0.0.0" libceph: handle an empty authorize reply scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached drm/msm: Unblock writer if reader closes file ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field ALSA: compress: prevent potential divide by zero bugs thermal: int340x_thermal: Fix a NULL vs IS_ERR() check usb: dwc3: gadget: Fix the uninitialized link_state when udc starts usb: gadget: Potential NULL dereference on allocation error ASoC: dapm: change snprintf to scnprintf for possible overflow ASoC: imx-audmux: change snprintf to scnprintf for possible overflow ARC: fix __ffs return value to avoid build warnings mac80211: fix miscounting of ttl-dropped frames serial: fsl_lpuart: fix maximum acceptable baud rate with over-sampling scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state() net: altera_tse: fix connect_local_phy error path ibmveth: Do not process frames after calling napi_reschedule mac80211: don't initiate TDLS connection if station is not associated to AP cfg80211: extend range deviation for DMG KVM: nSVM: clear events pending from svm_complete_interrupts() when exiting to L1 arm/arm64: KVM: Feed initialized memory to MMIO accesses KVM: arm/arm64: Fix MMIO emulation data handling powerpc: Always initialize input array when calling epapr_hypercall() mmc: spi: Fix card detection during probe mm: enforce min addr even if capable() in expand_downwards() x86/uaccess: Don't leak the AC flag into __put_user() value evaluation USB: serial: option: add Telit ME910 ECM composition USB: serial: cp210x: add ID for Ingenico 3070 USB: serial: ftdi_sio: add ID for Hjelmslund Electronics USB485 cpufreq: Use struct kobj_attribute instead of struct global_attr sockfs: getxattr: Fail with -EOPNOTSUPP for invalid attribute names ncpfs: fix build warning of strncpy isdn: isdn_tty: fix build warning of strncpy staging: lustre: fix buffer overflow of string buffer net-sysfs: Fix mem leak in netdev_register_kobject sky2: Disable MSI on Dell Inspiron 1545 and Gateway P-79 team: Free BPF filter when unregistering netdev bnxt_en: Drop oversize TX packets to prevent errors. net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails xen-netback: fix occasional leak of grant ref mappings under memory pressure net: Add __icmp_send helper. net: avoid use IPCB in cipso_v4_error net: phy: Micrel KSZ8061: link failure after cable connect x86/CPU/AMD: Set the CPB bit unconditionally on F17h applicom: Fix potential Spectre v1 vulnerabilities MIPS: irq: Allocate accurate order pages for irq stack hugetlbfs: fix races and page leaks during migration netlabel: fix out-of-bounds memory accesses net: dsa: mv88e6xxx: Fix u64 statistics ip6mr: Do not call __IP6_INC_STATS() from preemptible context media: uvcvideo: Fix 'type' check leading to overflow vti4: Fix a ipip packet processing bug in 'IPCOMP' virtual tunnel perf tools: Handle TOPOLOGY headers with no CPU IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM ipvs: Fix signed integer overflow when setsockopt timeout iommu/amd: Fix IOMMU page flush when detach device from a domain xtensa: SMP: fix ccount_timer_shutdown xtensa: SMP: fix secondary CPU initialization xtensa: smp_lx200_defconfig: fix vectors clash xtensa: SMP: mark each possible CPU as present xtensa: SMP: limit number of possible CPUs by NR_CPUS net: altera_tse: fix msgdma_tx_completion on non-zero fill_level case net: hns: Fix wrong read accesses via Clause 45 MDIO protocol net: stmmac: dwmac-rk: fix error handling in rk_gmac_powerup() gpio: vf610: Mask all GPIO interrupts nfs: Fix NULL pointer dereference of dev_name scsi: libfc: free skb when receiving invalid flogi resp platform/x86: Fix unmet dependency warning for SAMSUNG_Q10 cifs: fix computation for MAX_SMB2_HDR_SIZE x86/kexec: Don't setup EFI info if EFI runtime is not enabled x86_64: increase stack size for KASAN_EXTRA mm, memory_hotplug: is_mem_section_removable do not pass the end of a zone mm, memory_hotplug: test_pages_in_a_zone do not pass the end of zone fs/drop_caches.c: avoid softlockups in drop_pagecache_sb() autofs: drop dentry reference only when it is never used autofs: fix error return in autofs_fill_super() ARM: pxa: ssp: unneeded to free devm_ allocated data irqchip/mmp: Only touch the PJ4 IRQ & FIQ bits on enable/disable dmaengine: at_xdmac: Fix wrongfull report of a channel as in use dmaengine: dmatest: Abort test in case of mapping error s390/qeth: fix use-after-free in error path perf symbols: Filter out hidden symbols from labels MIPS: Remove function size check in get_frame_info() Input: wacom_serial4 - add support for Wacom ArtPad II tablet Input: elan_i2c - add id for touchpad found in Lenovo s21e-20 iscsi_ibft: Fix missing break in switch statement futex,rt_mutex: Restructure rt_mutex_finish_proxy_lock() ARM: dts: exynos: Add minimal clkout parameters to Exynos3250 PMU Revert "x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls" ARM: dts: exynos: Do not ignore real-world fuse values for thermal zone 0 on Exynos5420 udplite: call proper backlog handlers netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES netfilter: nfnetlink_log: just returns error for unknown command netfilter: nfnetlink_acct: validate NFACCT_FILTER parameters netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options KEYS: restrict /proc/keys by credentials at open time l2tp: fix infoleak in l2tp_ip6_recvmsg() net: hsr: fix memory leak in hsr_dev_finalize() net: sit: fix UBSAN Undefined behaviour in check_6rd net/x25: fix use-after-free in x25_device_event() net/x25: reset state in x25_connect() pptp: dst_release sk_dst_cache in pptp_sock_destruct ravb: Decrease TxFIFO depth of Q3 and Q2 to one route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race tcp: handle inet_csk_reqsk_queue_add() failures net/mlx4_core: Fix reset flow when in command polling mode net/mlx4_core: Fix qp mtt size calculation net/x25: fix a race in x25_bind() mdio_bus: Fix use-after-free on device_register fails net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255 missing barriers in some of unix_sock ->addr and ->path accesses ipvlan: disallow userns cap_net_admin to change global mode/flags vxlan: test dev->flags & IFF_UP before calling gro_cells_receive() vxlan: Fix GRO cells race condition between receive and link delete net/hsr: fix possible crash in add_timer() gro_cells: make sure device is up in gro_cells_receive() tcp/dccp: remove reqsk_put() from inet_child_forget() ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against Liquid Saffire 56 fs/9p: use fscache mutex rather than spinlock It's wrong to add len to sector_nr in raid10 reshape twice media: videobuf2-v4l2: drop WARN_ON in vb2_warn_zero_bytesused() 9p: use inode->i_lock to protect i_size_write() under 32-bit 9p/net: fix memory leak in p9_client_create ASoC: fsl_esai: fix register setting issue in RIGHT_J mode stm class: Fix an endless loop in channel allocation crypto: caam - fixed handling of sg list crypto: ahash - fix another early termination in hash walk gpu: ipu-v3: Fix i.MX51 CSI control registers offset gpu: ipu-v3: Fix CSI offsets for imx53 s390/dasd: fix using offset into zero size array error ARM: OMAP2+: Variable "reg" in function omap4_dsi_mux_pads() could be uninitialized Input: matrix_keypad - use flush_delayed_work() i2c: cadence: Fix the hold bit setting Input: st-keyscan - fix potential zalloc NULL dereference ARM: 8824/1: fix a migrating irq bug when hotplug cpu assoc_array: Fix shortcut creation scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task net: systemport: Fix reception of BPDUs pinctrl: meson: meson8b: fix the sdxc_a data 1..3 pins net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe() ASoC: topology: free created components in tplg load error arm64: Relax GIC version check during early boot tmpfs: fix link accounting when a tmpfile is linked in ARC: uacces: remove lp_start, lp_end from clobber list phonet: fix building with clang mac80211_hwsim: propagate genlmsg_reply return code net: set static variable an initial value in atl2_probe() tmpfs: fix uninitialized return value in shmem_link stm class: Prevent division by zero crypto: arm64/aes-ccm - fix logical bug in AAD MAC handling CIFS: Fix read after write for files with read caching tracing: Do not free iter->trace in fail path of tracing_open_pipe() ACPI / device_sysfs: Avoid OF modalias creation for removed device regulator: s2mps11: Fix steps for buck7, buck8 and LDO35 regulator: s2mpa01: Fix step values for some LDOs clocksource/drivers/exynos_mct: Move one-shot check from tick clear to ISR clocksource/drivers/exynos_mct: Clear timer interrupt when shutdown s390/virtio: handle find on invalid queue gracefully scsi: virtio_scsi: don't send sc payload with tmfs scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock m68k: Add -ffreestanding to CFLAGS btrfs: ensure that a DUP or RAID1 block group has exactly two stripes Btrfs: fix corruption reading shared and compressed extents after hole punching crypto: pcbc - remove bogus memcpy()s with src == dest cpufreq: tegra124: add missing of_node_put() cpufreq: pxa2xx: remove incorrect __init annotation ext4: fix crash during online resizing ext2: Fix underflow in ext2_max_size() clk: ingenic: Fix round_rate misbehaving with non-integer dividers dmaengine: usb-dmac: Make DMAC system sleep callbacks explicit mm/vmalloc: fix size check for remap_vmalloc_range_partial() kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv intel_th: Don't reference unassigned outputs parport_pc: fix find_superio io compare code, should use equal test. i2c: tegra: fix maximum transfer size perf bench: Copy kernel files needed to build mem{cpy,set} x86_64 benchmarks serial: 8250_pci: Fix number of ports for ACCES serial cards serial: 8250_pci: Have ACCES cards that use the four port Pericom PI7C9X7954 chip use the pci_pericom_setup() jbd2: clear dirty flag when revoking a buffer from an older transaction jbd2: fix compile warning when using JBUFFER_TRACE powerpc/32: Clear on-stack exception marker upon exception return powerpc/wii: properly disable use of BATs when requested. powerpc/powernv: Make opal log only readable by root powerpc/83xx: Also save/restore SPRG4-7 during suspend ARM: s3c24xx: Fix boolean expressions in osiris_dvs_notify dm: fix to_sector() for 32bit NFS41: pop some layoutget errors to application perf intel-pt: Fix CYC timestamp calculation after OVF perf auxtrace: Define auxtrace record alignment perf intel-pt: Fix overlap calculation for padding md: Fix failed allocation of md_register_thread NFS: Fix an I/O request leakage in nfs_do_recoalesce NFS: Don't recoalesce on error in nfs_pageio_complete_mirror() nfsd: fix memory corruption caused by readdir nfsd: fix wrong check in write_v4_end_grace() PM / wakeup: Rework wakeup source timer cancellation rcu: Do RCU GP kthread self-wakeup from softirq and interrupt media: uvcvideo: Avoid NULL pointer dereference at the end of streaming drm/radeon/evergreen_cs: fix missing break in switch statement KVM: nVMX: Sign extend displacements of VMX instr's mem operands KVM: nVMX: Ignore limit checks on VMX instructions using flat segments KVM: X86: Fix residual mmio emulation request to userspace Linux 4.4.177 Change-Id: Ide9813404248e6d7f9dc4024ac244dc1fbdd21b6 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
| | | | * mac80211_hwsim: propagate genlmsg_reply return codeLi RongQing2019-03-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ Upstream commit 17407715240456448e4989bee46ffc93991add83 ] genlmsg_reply can fail, so propagate its return code Signed-off-by: Li RongQing <lirongqing@baidu.com> Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: Sasha Levin <sashal@kernel.org>
| * | | | Merge "cnss2: Initialize plat_priv during bus_init"Linux Build Service Account2019-03-26
| |\ \ \ \