summaryrefslogtreecommitdiff
path: root/include/uapi (follow)
Commit message (Collapse)AuthorAge
* Merge LA.UM.7.5.2.r1-03300-8x96.0 of ↵Davide Garberi2019-07-20
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://source.codeaurora.org/quic/la/kernel/msm-4.4 into lineage-16.0 313e787f28bb Merge "power: qpnp-smbcharger: Change ordering of EXTCON_USB_SPEED" into kernel.lnx.4.4.r37-rel dfa5b807ec2c Merge changes I0ab244e6,I05a4aa96 into kernel.lnx.4.4.r37-rel c900b4827149 msm: ipa: Fix array out of bound and use after NULL check b562b057dd2a msm: ipa: Fix pointer checked for NULL may be used 216dfe7e7a14 usb: phy-msm-susb-qmp: Add checks to check clk_enabled 2c0a97a53f77 power: qpnp-smbcharger: Change ordering of EXTCON_USB_SPEED 56d12bfe26c3 Merge commit '09d42880fd9f4d04317f030021b85323b8f8b9b9' into HEAD 09d42880fd9f Merge "msm: camera_v2: isp: update the frame drop during error case" 19d79e95f10c Merge "msm:camera: add trace log support for VFE events" 3ae0451881ca Merge "msm: camera_v2: Remove sysfs bind/unbind files" 45b4ac208b7b msm:camera: add trace log support for VFE events 5974bd4025ea msm: camera_v2: Fix page fault issue in camera ISP ed8c0918eeb1 Merge "icnss: Reduce the shutdown timeout from 50sec to 15sec" 7e4d8780224c Merge "drm/msm/dsi-staging: Add range check in debugfs_dump_info_read" 978400398a92 icnss: Reduce the shutdown timeout from 50sec to 15sec 4e08c8cbacd4 msm: camera_v2: Remove sysfs bind/unbind files 79a8f215703e Merge "ASoC: sdm660_cdc: Set speaker amplifier enable bit" c0f636f83226 Merge "cnss2: Update board data file name format" bd48b0a101e8 Merge "msm: kgsl: Add missing check for snapshot IB dump" 2f5e49a21882 Merge "defconfig: msm: Disable EXT2 and EXT3 FS configs for MSM8998" 46ece1ae20ad Merge "sched/walt: Fix the memory leak of idle task load pointers" 78540133736a Merge "soc: qcom: smem: validate fields of shared structures" 196d97abd323 Merge "Merge android-4.4.183 (94fd428) into msm-4.4" fad4d2e83739 Merge "msm: kgsl: Change data type for GPU ib vote" 54d23a97a07e Merge "drivers: thermal: Use FCAP scm call instead of DMAX in LMH DCVSh" 1379d11803dd msm: kgsl: Add missing check for snapshot IB dump 2c8f4699fdd0 defconfig: msm: Disable EXT2 and EXT3 FS configs for MSM8998 fcc47ec62ae1 soc: qcom: smem: validate fields of shared structures 7151def9c713 ASoC: sdm660_cdc: Set speaker amplifier enable bit f395d5810f27 sched/walt: Fix the memory leak of idle task load pointers 03f0af3c211e drivers: thermal: Use FCAP scm call instead of DMAX in LMH DCVSh f6ee0c2bb45d drivers: thermal: Use FCAP scm call instead of DMAX in KTM cb7df67908b0 msm: kgsl: Change data type for GPU ib vote c94369b4c1fc cnss2: print firmware cap info in stats 9a1c2880320b Merge android-4.4.183 (94fd428) into msm-4.4 94fd42809f7d Merge 4.4.183 into android-4.4 308743255040 Linux 4.4.183 df7ba8162ca1 Abort file_remove_privs() for non-reg. files 8f6345a11caa coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping 3692bc31c1ff Revert "crypto: crypto4xx - properly set IV after de- and encrypt" 39c7c903c63d scsi: libsas: delete sas port if expander discover failed a272035ea1bf scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route() af8cd6101bf5 net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs b25c62cc16e0 KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list 7ef8d778cf3e ia64: fix build errors by exporting paddr_to_nid() 432030b25b86 configfs: Fix use-after-free when accessing sd->s_dentry d5a18c8609f3 i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr be1b9df5bba1 net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() 0bb6c295e463 gpio: fix gpio-adp5588 build errors dd961efe8dee perf/ring_buffer: Add ordering to rb->nest increment 8abd8a9a975e perf/ring_buffer: Fix exposing a temporarily decreased data_head 3e74b3f05abf x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor f4678b7808e7 mISDN: make sure device name is NUL terminated e2f9c0f73454 sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg 753aa7556089 neigh: fix use-after-free read in pneigh_get_next 709d8771fab7 lapb: fixed leak of control-blocks. 1777c35e8d47 ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero 6f057abd08d1 be2net: Fix number of Rx queues used for flow hashing 7139a9f6246d ax25: fix inconsistent lock state in ax25_destroy_timer f1a5c6b083bc USB: serial: option: add Telit 0x1260 and 0x1261 compositions a67d65958e2a USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode b8ee804bba8f USB: serial: pl2303: add Allied Telesis VT-Kit3 f14747c88170 USB: usb-storage: Add new ID to ums-realtek 038c192699a9 USB: Fix chipmunk-like voice when using Logitech C270 for recording audio. 8f6b0e59d2a0 drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() 6e0c7e73232f drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read ce391e4cdef8 KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION a1b9c6b4cba0 KVM: x86/pmu: do not mask the value that is written to fixed PMUs 7caddacf863f usbnet: ipheth: fix racing condition f80a35fcb9e9 scsi: bnx2fc: fix incorrect cast to u64 on shift operation da51a322f197 scsi: lpfc: add check for loss of ndlp when sending RRQ 3a2ff1088c2a Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var 1f8233ca3a48 ASoC: cs42xx8: Add regcache mask dirty 91f1fc1ae409 cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() 8b47af927e2e bcache: fix stack corruption by PRECEDING_KEY() a2aabf288bf7 i2c: acorn: fix i2c warning d774bd27b4f5 ptrace: restore smp_rmb() in __ptrace_may_access() 5aff00ee839a signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO 0b871fc866eb fs/ocfs2: fix race in ocfs2_dentry_attach_lock() c05fed507582 mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node be499b84c3bd libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk d7a18814fff9 ALSA: seq: Cover unsubscribe_port() in list_mutex 4282a0b1db65 Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR connections" cd23996afa14 futex: Fix futex lock the wrong page 38fbd5c2d572 ARM: exynos: Fix undefined instruction during Exynos5422 resume 5767587907fd pwm: Fix deadlock warning when removing PWM device 113a78a0a537 ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa 78184953a2ed pwm: tiehrpwm: Update shadow register for disabling PWMs d24e22cde8b3 dmaengine: idma64: Use actual device for DMA transfers 533171620cd5 gpio: gpio-omap: add check for off wake capable gpios 3b4652ba9d78 PCI: xilinx: Check for __get_free_pages() failure c869210e0ac6 video: imsttfb: fix potential NULL pointer dereferences 5c7fbc5f6a7d video: hgafb: fix potential NULL pointer dereference bea8fa863ce9 PCI: rcar: Fix a potential NULL pointer dereference 76208df36d7a PCI: rpadlpar: Fix leaked device_node references in add/remove paths 100468652e5a ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA 927d2be77e6c ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA 8aee025af280 ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA b49501f51371 clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288 4270dc6a7a79 soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher 845676341c2d platform/chrome: cros_ec_proto: check for NULL transfer function c7155e51cf85 x86/PCI: Fix PCI IRQ routing table memory leak 198a54f07f51 nfsd: allow fh_want_write to be called twice e6779b264d69 fuse: retrieve: cap requested size to negotiated max_write 742cb74bf108 nvmem: core: fix read buffer in place 750c55e69cca ALSA: hda - Register irq handler after the chip initialization 09ad374f23ce iommu/vt-d: Set intel_iommu_gfx_mapped correctly 9e4ed17b9416 f2fs: fix to do sanity check on valid block count of segment 534ef922376e f2fs: fix to avoid panic in do_recover_data() 90a238a8a2d2 ntp: Allow TAI-UTC offset to be set to zero 25be7d51a012 drm/bridge: adv7511: Fix low refresh rate selection 8fdebdd06c4b perf/x86/intel: Allow PEBS multi-entry in watermark mode dee1ba919ca2 mfd: twl6040: Fix device init errors for ACCCTL register 4110c4188853 mfd: intel-lpss: Set the device in reset state when init 1bef19130b5b kernel/sys.c: prctl: fix false positive in validate_prctl_map() 937fa1624a1f mm/cma_debug.c: fix the break condition in cma_maxchunk_get() fceb0be41836 mm/cma.c: fix crash on CMA allocation if bitmap allocation fails 9c8d4d77e3aa hugetlbfs: on restore reserve error path retain subpool reservation d8129a5d7a9d ipc: prevent lockup on alloc_msg and free_msg 50c0db539937 sysctl: return -EINVAL if val violates minmax 8b9241b052a2 fs/fat/file.c: issue flush after the writeback of FAT 335e20ca9562 Merge "soc: qcom: glink_spi_xprt: Sanitize input for short cmd" abc2a59bfdb9 Merge "soc: qcom: hab: add error handling when dt item is missing" 9998d2e52dd4 mm: add /proc/pid/smaps_rollup a2165163680e Merge "msm: ais: sensor: actuator: fix out of bound read for bivcm region params" 7ec9476039c1 soc: qcom: hab: add error handling when dt item is missing 7967865bb4c4 msm: ais: sensor: actuator: fix out of bound read for bivcm region params 14f9c777669f Merge "Merge android-4.4.182 (9c4ab57) into msm-4.4" eee21eb4a635 ANDROID: kernel: cgroup: cpuset: Clear cpus_requested for empty buf f1adac4c222b ANDROID: kernel: cgroup: cpuset: Add missing allocation of cpus_requested in alloc_trial_cpuset 291c54b284a4 i2c: virtio: reallocate memory for each msg buffer ca64572d5459 Merge changes into msm-4.4 a32f2cd75906 Merge android-4.4.182 (9c4ab57) into msm-4.4 2ae4cde5790c Merge "i2c: refine the driver of i2c virtualization" 9c4ab5729952 Merge 4.4.182 into android-4.4 33790f2eda73 Linux 4.4.182 f938ae0ce5ef tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() e757d052f3b8 tcp: add tcp_min_snd_mss sysctl ad472d3a9483 tcp: tcp_fragment() should apply sane memory limits 4657ee0fe05e tcp: limit payload size of sacked skbs 17c66e9e49a1 Merge "msm: vidc: add additional check to avoid out of bound access" 4e933027e684 Merge "Merge android-4.4.181 (bd858d7) into msm-4.4" be5afd934314 i2c: refine the driver of i2c virtualization f1057f82fa62 msm: vidc: add additional check to avoid out of bound access c176a066dfd3 diag: dci: Correct out of bounds check in processing dci pkt rsp cc47c2c325b9 Merge "msm: adsprpc: maintain local copy of rpra offloaded to DSP" 1f3eb68e71cd msm: adsprpc: maintain local copy of rpra offloaded to DSP a50f44266d21 Merge "diag: Prevent out-of-bound access while processing userspace data" c658076e45e0 Merge "ASoC: msm: Add support for AVS version check" f328b4d28d25 Merge "arm: dts: msm: Add avs-version dt property for 8996" 5dbfa1533af8 diag: Prevent out-of-bound access while processing userspace data eb0322ea9b07 arm: dts: msm: Add avs-version dt property for 8996 5ef154a26639 Merge android-4.4.181 (bd858d7) into msm-4.4 7caeb5cb7c4f soc: qcom: glink_spi_xprt: Sanitize input for short cmd 17fd8dbacb92 Merge "soc: qcom: hab: add missing variable declaration" 1cc130f95ec7 UPSTREAM: binder: check for overflow when alloc for security context 784672577648 BACKPORT: binder: fix race between munmap() and direct reclaim 849ecbea5548 soc: qcom: hab: add missing variable declaration bd858d730975 Merge 4.4.181 into android-4.4 0434b31d567e Merge "dwc3-msm: Fix dwc3_drd_state_string for undefined state" 411c38c969a7 Merge "usb: dwc3-msm: Ensure hardware is reset during role change" 8dce56fa0ccf Merge "usb: dwc3-msm: add enum for drd_states to remove otg_state usage" d7b7345c3a5d Linux 4.4.181 f1d7eebd9d67 ethtool: check the return value of get_regs_len 647f72b0d75c ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled c9696a8f3e64 fuse: Add FOPEN_STREAM to use stream_open() 3bf0c459615a fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock 0f5fab865ae9 drm/gma500/cdv: Check vbt config bits when detecting lvds panels e087f7519114 genwqe: Prevent an integer overflow in the ioctl 59565e894518 MIPS: pistachio: Build uImage.gz by default 8061c23f5378 fuse: fallocate: fix return with locked inode cf30c1953467 parisc: Use implicit space register selection for loading the coherence index of I/O pdirs f0d1e74c8120 rcu: locking and unlocking need to always be at least barriers 44657dbba7c4 pktgen: do not sleep with the thread lock held. eded0b11c7a3 net: rds: fix memory leak in rds_ib_flush_mr_pool 54dd5e352cf7 net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query cc475966e5f7 neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit e5c6de6694ed ethtool: fix potential userspace buffer overflow 8795708bc939 media: uvcvideo: Fix uvc_alloc_entity() allocation alignment 2b13a9580ef9 usb: gadget: fix request length error for isoc transfer 8b15aae1baa2 net: cdc_ncm: GetNtbFormat endian fix 613b4bc1951d Revert "x86/build: Move _etext to actual end of .text" 6ad730b83178 userfaultfd: don't pin the user memory in userfaultfd_file_create() 4e06554db5e5 brcmfmac: add subtype check for event handling in data path 993b68aa3ef7 brcmfmac: add length checks in scheduled scan result handler 35bcfbad5d94 brcmfmac: fix incorrect event channel deduction 8c12de962667 brcmfmac: revise handling events in receive path 5f4688a15c24 brcmfmac: screening firmware event packet 6da841e9ae87 brcmfmac: Add length checks on firmware events c55a2cffa5ca bnx2x: disable GSO where gso_size is too big for hardware a33b6d4c8bc7 net: create skb_gso_validate_mac_len() c53c1a821d62 binder: replace "%p" with "%pK" 5280efe442b2 binder: Replace "%p" with "%pK" for stable 336c16621785 CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM 360f8fe46f74 kernel/signal.c: trace_signal_deliver when signal_group_exit 7a47d1873120 memcg: make it work on sparse non-0-node systems 5db0a9c3cc52 tty: max310x: Fix external crystal register setup e498745310d0 tty: serial: msm_serial: Fix XON/XOFF 986adddb9d8f drm/nouveau/i2c: Disable i2c bus access after ->fini() bf8f6b43c2e7 ALSA: hda/realtek - Set default power save node to 0 494447b90d6d Btrfs: fix race updating log root item during fsync af34de02a6a7 scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) e85d002556ea scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove 8282730a0afa media: smsusb: better handle optional alignment 0bce1ea89712 media: usb: siano: Fix false-positive "uninitialized variable" warning b1782be70e1e media: usb: siano: Fix general protection fault in smsusb d52c0ffb383f USB: rio500: fix memory leak in close after disconnect b92be99a0c8b USB: rio500: refuse more than one device at a time ee9d750e9ac8 USB: Add LPM quirk for Surface Dock GigE adapter 30e66d7d2fb9 USB: sisusbvga: fix oops in error path of sisusb_probe 018b7ea9ca24 USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor f5e1ec93b208 usb: xhci: avoid null pointer deref when bos field is NULL 017e6726a4fb xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() ec70e2c130d6 include/linux/bitops.h: sanitize rotate primitives fbbc4fe02a31 sparc64: Fix regression in non-hypervisor TLB flush xcall 5bce46edeb72 tipc: fix modprobe tipc failed after switch order of device registration -v2 416d252ba926 Revert "tipc: fix modprobe tipc failed after switch order of device registration" f1613a9e1bdc xen/pciback: Don't disable PCI_COMMAND on PCI device reset. 383687e15cd0 crypto: vmx - ghash: do nosimd fallback manually 61ba8e9f51b3 net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value 1d33a3ebd945 bnxt_en: Fix aggregation buffer leak under OOM condition. 7d423301240b tipc: Avoid copying bytes beyond the supplied data 332bff9d9a08 usbnet: fix kernel crash after disconnect 16ffb5f7c335 net: stmmac: fix reset gpio free missing 4f9c73aa2930 net-gro: fix use-after-free read in napi_gro_frags() 5cbaa135a0e1 llc: fix skb leak in llc_build_and_send_ui_pkt() 36a7222071d1 ipv6: Consider sk_bound_dev_if when binding a raw socket to an address 9fbf1ac57c7a ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM 0984cb76d294 spi: Fix zero length xfer bug 854415f37aae spi: rspi: Fix sequencer reset during initialization c927451887c1 spi : spi-topcliff-pch: Fix to handle empty DMA buffers 445c07409179 scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices 3a5d11332896 media: saa7146: avoid high stack usage with clang 5a96cf10dc5c media: go7007: avoid clang frame overflow warning with KASAN 0e9f0805eeea media: m88ds3103: serialize reset messages in m88ds3103_set_frontend 9effa38946b6 scsi: qla4xxx: avoid freeing unallocated dma memory 95f0bb0a6c83 usb: core: Add PM runtime calls to usb_hcd_platform_shutdown 1909121a6192 rcutorture: Fix cleanup path for invalid torture_type strings 1081d04a0443 tty: ipwireless: fix missing checks for ioremap c05b2ed7bc1b virtio_console: initialize vtermno value for ports 348ec7b9a1c1 media: wl128x: prevent two potential buffer overflows 557ae685914b spi: tegra114: reset controller on probe 5e75d5e2cd0c cxgb3/l2t: Fix undefined behaviour dc2a8861fdb8 ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put 971e4a273242 ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put 5db3c5adf44a HID: core: move Usage Page concatenation to Main item cb7872f12835 chardev: add additional check for minor range overlap 5680f59f0f15 x86/ia32: Fix ia32_restore_sigcontext() AC leak 94032b2e05c9 arm64: cpu_ops: fix a leaked reference by adding missing of_node_put 04f45a555ec3 scsi: ufs: Avoid configuring regulator with undefined voltage range 60bcfed2ad60 scsi: ufs: Fix regulator load and icc-level configuration 0a597d2badef brcmfmac: fix race during disconnect when USB completion is in progress f95ab00ab455 brcmfmac: convert dev_init_lock mutex to completion db74ef82ca8b b43: shut up clang -Wuninitialized variable warning 951fbf92381a brcmfmac: fix missing checks for kmemdup 1d3ee4d7fc6a rtlwifi: fix a potential NULL pointer dereference 6d7b052d8466 iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data e98ef6767e41 iio: hmc5843: fix potential NULL pointer dereferences a86d06179423 iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion 4400dcd69478 x86/build: Keep local relocations with ld.lld 75ffb58460e3 cpufreq: pmac32: fix possible object reference leak 3d041608fd4b cpufreq/pasemi: fix possible object reference leak 4d02f33a4f42 cpufreq: ppc_cbe: fix possible object reference leak 6be923556aad s390: cio: fix cio_irb declaration 65e3cb04a5a2 extcon: arizona: Disable mic detect if running when driver is removed db7eb206560c PM / core: Propagate dev->power.wakeup_path when no callbacks 066a286679b4 mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support 6a783be705ba mmc: sdhci-of-esdhc: add erratum eSDHC5 support 8b0e6af16ae6 mmc_spi: add a status check for spi_sync_locked a30e90a8eb3a scsi: libsas: Do discovery on empty PHY to update PHY info 915defac2a9a hwmon: (f71805f) Use request_muxed_region for Super-IO accesses 0eb8a476ffc5 hwmon: (pc87427) Use request_muxed_region for Super-IO accesses 79deb6abd1f5 hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses 92b4d16997c4 hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses e3e58378c678 hwmon: (vt1211) Use request_muxed_region for Super-IO accesses 488920af3bb3 RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure 2ff310e6dae2 i40e: don't allow changes to HW VLAN stripping on active port VLANs bc791e819503 x86/irq/64: Limit IST stack overflow check to #DB stack 3557f0857767 USB: core: Don't unbind interfaces following device reset failure 6f5e198878fb sched/core: Handle overflow in cpu_shares_write_u64 9812286a63a1 sched/core: Check quota and period overflow at usec to nsec conversion 9d4961a415ed powerpc/numa: improve control of topology updates 82077215ed25 media: pvrusb2: Prevent a buffer overflow ca865598abf1 media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() a8e0739d465e audit: fix a memory leak bug ff3038fe657d media: ov2659: make S_FMT succeed even if requested format doesn't match 2d97a3abcf2f media: au0828: stop video streaming only when last user stops 115ccd9ca776 media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper 1433d7a0937b media: coda: clear error return value before picture run 5cadb7ae715f dmaengine: at_xdmac: remove BUG_ON macro in tasklet af8b5d7d9477 pinctrl: pistachio: fix leaked of_node references 74dd38a5a447 HID: logitech-hidpp: use RAP instead of FAP to get the protocol version 9bffc62051a9 mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions ae6b1f761180 x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() b059848e119f smpboot: Place the __percpu annotation correctly 28d8827a09b0 x86/build: Move _etext to actual end of .text d3eb2caf6d41 bcache: avoid clang -Wunintialized warning 7bf3463abc95 bcache: add failure check to run_cache_set() for journal replay d4547049bb7f bcache: fix failure in journal relplay 5789884b98ab bcache: return error immediately in bch_journal_replay() 50d25ca802f5 net: cw1200: fix a NULL pointer dereference af2fb022b390 mwifiex: prevent an array overflow 4b24af093631 ASoC: fsl_sai: Update is_slave_mode with correct value c1045350a6c4 mac80211/cfg80211: update bss channel on channel switch a3c50ef9fd43 dmaengine: pl330: _stop: clear interrupt status 958848a1d97c w1: fix the resume command API e4163587c4ee rtc: 88pm860x: prevent use-after-free on device remove a898d150956b brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() 5e1a879d9ab3 spi: pxa2xx: fix SCR (divisor) calculation 3d521a6fba45 ASoC: imx: fix fiq dependencies af283aba93bb powerpc/boot: Fix missing check of lseek() return value dba032038c95 mmc: core: Verify SD bus width 333e8303d6e0 cxgb4: Fix error path in cxgb4_init_module 6948c6bc17d6 gfs2: Fix lru_count going negative 635c71d11234 tools include: Adopt linux/bits.h ed2faf464d9b perf tools: No need to include bitops.h in util.h a1f254dc06f9 at76c50x-usb: Don't register led_trigger if usb_register_driver failed f5e4337e4a9c ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit e39af96f4dc1 media: vivid: use vfree() instead of kfree() for dev->bitmap_cap a04e71a0dbc6 media: cpia2: Fix use-after-free in cpia2_exit 28eeeb86046e fbdev: fix WARNING in __alloc_pages_nodemask bug bf8474c64846 hugetlb: use same fault hash key for shared and private mappings 6bc153907900 fbdev: fix divide error in fb_var_to_videomode 5c9a20390c01 btrfs: sysfs: don't leak memory when failing add fsid 0fa88718cdc5 Btrfs: fix race between ranged fsync and writeback of adjacent ranges 2f5ac0bd2ef7 gfs2: Fix sign extension bug in gfs2_update_stats 8aae5e98fec2 crypto: vmx - CTR: always increment IV as quadword 582bb52e4803 Revert "scsi: sd: Keep disk read-only when re-reading partition" bd020b331706 bio: fix improper use of smp_mb__before_atomic() 603212bdc59c KVM: x86: fix return value for reserved EFER 75d63b131b73 ext4: do not delete unlinked inode from orphan list on failed truncate 31943685dd49 fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough 7d64186e7910 btrfs: Honour FITRIM range constraints during free space trim 57e84e4c073d md/raid: raid5 preserve the writeback action after the parity check 9013f4870848 Revert "Don't jump to compute_result state from check_result state" 0c57364fa0f4 perf bench numa: Add define for RUSAGE_THREAD if not present 66ee750cfdd7 ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour fc0208b3428d power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG dd37fa44dffa KVM: arm/arm64: Ensure vcpu target is unset on reset failure fe4f461ba517 xfrm4: Fix uninitialized memory read in _decode_session4 cd0848733f25 vti4: ipip tunnel deregistration fixes. 8fd94b65d207 xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module 86040d722b29 xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink daea41651d43 dm delay: fix a crash when invalid device is specified 566004721c90 PCI: Mark Atheros AR9462 to avoid bus reset 0dc2ad06ddad fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting 4673eae95b53 fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display c996722f7fff fbdev: sm712fb: fix support for 1024x768-16 mode ebfadb510e3c fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM c92bde52742c fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA 0d5cd17ce037 fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F ca5ce8db7f23 fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75 6c2fb5beecba fbdev: sm712fb: fix brightness control on reboot, don't set SR30 dbc86a927d66 perf intel-pt: Fix sample timestamp wrt non-taken branches eedc9a210f9f perf intel-pt: Fix improved sample timestamp f5da0aeca525 perf intel-pt: Fix instructions sampling rate a5b2e4b6ac21 memory: tegra: Fix integer overflow on tick value calculation 11988047b39a tracing: Fix partial reading of trace event's id file a7929c94860e ceph: flush dirty inodes before proceeding with remount 3c99cd905ba9 iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114 40857ab73988 fuse: honor RLIMIT_FSIZE in fuse_file_fallocate 73724958d129 fuse: fix writepages on 32bit 12060f4740ca clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider 4676a07add08 NFS4: Fix v4.0 client state corruption when mount e8623e7a8f4b media: ov6650: Fix sensor possibly not detected on probe dffc9e5ffae5 cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() b8ab0c4effb8 of: fix clang -Wunsequenced for be32_to_cpu() 2a98d346396a intel_th: msu: Fix single mode with IOMMU bc065776c31e md: add mddev->pers to avoid potential NULL pointer dereference ade291d2230a stm class: Fix channel free in stm output free path 65d14634b694 tipc: fix modprobe tipc failed after switch order of device registration ff69bb4be643 tipc: switch order of device registration to fix a crash 2ff783f3e05e ppp: deflate: Fix possible crash in deflate_init dd20e0c039fe net/mlx4_core: Change the error print to info print b2f72a431142 net: avoid weird emergency message 70064f7ea100 KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes 5e9bc16ff49f ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug 98529ecd313b ext4: zero out the unused memory region in the extent tree block 9ff6372e5a6b fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount bfce20eaf18e writeback: synchronize sync(2) against cgroup writeback membership switches cd042379c6ad crypto: arm/aes-neonbs - don't access already-freed walk.iv b70e97ae5d8e crypto: salsa20 - don't access already-freed walk.iv 6dc48d059646 crypto: chacha20poly1305 - set cra_name correctly b82055365307 crypto: gcm - fix incompatibility between "gcm" and "gcm_base" de087dd9f5c6 crypto: gcm - Fix error return code in crypto_gcm_create_common() 064d0c5a9ae6 ipmi:ssif: compare block number correctly for multi-part return messages bef039b2419e bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() 5651075a1ce3 bcache: fix a race between cache register and cacheset unregister 686e4352e3d8 Btrfs: do not start a transaction at iterate_extent_inodes() b268b6e501ed ext4: fix ext4_show_options for file systems w/o journal f3b9c26f191b ext4: actually request zeroing of inode table after grow e5100e7fa78e tty/vt: fix write/write race in ioctl(KDSKBSENT) handler 592a36c59f4c mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L e3a74fbc42ca ocfs2: fix ocfs2 read inode data panic in ocfs2_iget b614485b6b93 mm/mincore.c: make mincore() more conservative 80cc516ed783 ASoC: RT5677-SPI: Disable 16Bit SPI Transfers e6bf706cee3f ASoC: max98090: Fix restore of DAPM Muxes 2a8188c68e0a ALSA: hda/realtek - EAPD turn on later 1bbb08c8ab6a ALSA: hda/hdmi - Consider eld_valid when reporting jack event 2d8956305ae8 ALSA: usb-audio: Fix a memory leak bug b1c1888ad6c9 crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest() 2ee7c2310cd0 crypto: crct10dif-generic - fix use via crypto_shash_digest() 2ee0dd38a0a0 crypto: vmx - fix copy-paste error in CTR mode f7dee0816e5d ARM: exynos: Fix a leaked reference by adding missing of_node_put ce814dc7e811 x86/speculation/mds: Improve CPU buffer clear documentation 4d68e2bf3834 x86/speculation/mds: Revert CPU buffer clear on double fault exit b1d850962510 ASoC: msm: Add support for AVS version check fbf98df8d02a cnss2: Update board data file name format 5e073ffd6668 drm/msm/dsi-staging: Add range check in debugfs_dump_info_read 9600b86489f9 dwc3-msm: Fix dwc3_drd_state_string for undefined state cc96e0915225 usb: dwc3-msm: Ensure hardware is reset during role change 02d74bda3466 usb: dwc3-msm: add enum for drd_states to remove otg_state usage e4e5a975f4ae Merge remote-tracking branch 'origin/upstream-f2fs-stable-linux-4.4.y' into android-4.4 2d812ba62ee4 f2fs: link f2fs quota ops for sysfile 6dc3fb0ba854 fs: sdcardfs: Add missing option to show_options * Excluded commits: 8be3b55c4cc7 msm: camera_v2: isp: update the frame drop during error case 28e17c1f6505 msm: camera_v2: isp: handle frame drop due to scheduling latency Change-Id: Ib67f22a311625da7dd130d2491ef9e035b1db54f Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
| * Merge android-4.4.182 (9c4ab57) into msm-4.4Srinivasarao P2019-06-18
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-9c4ab57 Linux 4.4.182 tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() tcp: add tcp_min_snd_mss sysctl tcp: tcp_fragment() should apply sane memory limits tcp: limit payload size of sacked skbs UPSTREAM: binder: check for overflow when alloc for security context BACKPORT: binder: fix race between munmap() and direct reclaim Change-Id: I4cfb9eb282f54f083631fec4c8161eed42e8ab54 Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| | * Merge 4.4.182 into android-4.4Greg Kroah-Hartman2019-06-17
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 4.4.182 tcp: limit payload size of sacked skbs tcp: tcp_fragment() should apply sane memory limits tcp: add tcp_min_snd_mss sysctl tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() Linux 4.4.182 Change-Id: I2698fa2ad3884a20d936e6bee638304f52df19bd Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
| | | * tcp: tcp_fragment() should apply sane memory limitsEric Dumazet2019-06-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit f070ef2ac66716357066b683fb0baf55f8191a2e upstream. Jonathan Looney reported that a malicious peer can force a sender to fragment its retransmit queue into tiny skbs, inflating memory usage and/or overflow 32bit counters. TCP allows an application to queue up to sk_sndbuf bytes, so we need to give some allowance for non malicious splitting of retransmit queue. A new SNMP counter is added to monitor how many times TCP did not allow to split an skb if the allowance was exceeded. Note that this counter might increase in the case applications use SO_SNDBUF socket option to lower sk_sndbuf. CVE-2019-11478 : tcp_fragment, prevent fragmenting a packet when the socket is already using more than half the allowed space Signed-off-by: Eric Dumazet <edumazet@google.com> Reported-by: Jonathan Looney <jtl@netflix.com> Acked-by: Neal Cardwell <ncardwell@google.com> Acked-by: Yuchung Cheng <ycheng@google.com> Reviewed-by: Tyler Hicks <tyhicks@canonical.com> Cc: Bruce Curtis <brucec@netflix.com> Cc: Jonathan Lemon <jonathan.lemon@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| * | | Merge android-4.4.181 (bd858d7) into msm-4.4Srinivasarao P2019-06-12
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-bd858d7 Linux 4.4.181 ethtool: check the return value of get_regs_len ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled fuse: Add FOPEN_STREAM to use stream_open() fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock drm/gma500/cdv: Check vbt config bits when detecting lvds panels genwqe: Prevent an integer overflow in the ioctl MIPS: pistachio: Build uImage.gz by default fuse: fallocate: fix return with locked inode parisc: Use implicit space register selection for loading the coherence index of I/O pdirs rcu: locking and unlocking need to always be at least barriers pktgen: do not sleep with the thread lock held. net: rds: fix memory leak in rds_ib_flush_mr_pool net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit ethtool: fix potential userspace buffer overflow media: uvcvideo: Fix uvc_alloc_entity() allocation alignment usb: gadget: fix request length error for isoc transfer net: cdc_ncm: GetNtbFormat endian fix Revert "x86/build: Move _etext to actual end of .text" userfaultfd: don't pin the user memory in userfaultfd_file_create() brcmfmac: add subtype check for event handling in data path brcmfmac: add length checks in scheduled scan result handler brcmfmac: fix incorrect event channel deduction brcmfmac: revise handling events in receive path brcmfmac: screening firmware event packet brcmfmac: Add length checks on firmware events bnx2x: disable GSO where gso_size is too big for hardware net: create skb_gso_validate_mac_len() binder: replace "%p" with "%pK" binder: Replace "%p" with "%pK" for stable CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM kernel/signal.c: trace_signal_deliver when signal_group_exit memcg: make it work on sparse non-0-node systems tty: max310x: Fix external crystal register setup tty: serial: msm_serial: Fix XON/XOFF drm/nouveau/i2c: Disable i2c bus access after ->fini() ALSA: hda/realtek - Set default power save node to 0 Btrfs: fix race updating log root item during fsync scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove media: smsusb: better handle optional alignment media: usb: siano: Fix false-positive "uninitialized variable" warning media: usb: siano: Fix general protection fault in smsusb USB: rio500: fix memory leak in close after disconnect USB: rio500: refuse more than one device at a time USB: Add LPM quirk for Surface Dock GigE adapter USB: sisusbvga: fix oops in error path of sisusb_probe USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor usb: xhci: avoid null pointer deref when bos field is NULL xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() include/linux/bitops.h: sanitize rotate primitives sparc64: Fix regression in non-hypervisor TLB flush xcall tipc: fix modprobe tipc failed after switch order of device registration -v2 Revert "tipc: fix modprobe tipc failed after switch order of device registration" xen/pciback: Don't disable PCI_COMMAND on PCI device reset. crypto: vmx - ghash: do nosimd fallback manually net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value bnxt_en: Fix aggregation buffer leak under OOM condition. tipc: Avoid copying bytes beyond the supplied data usbnet: fix kernel crash after disconnect net: stmmac: fix reset gpio free missing net-gro: fix use-after-free read in napi_gro_frags() llc: fix skb leak in llc_build_and_send_ui_pkt() ipv6: Consider sk_bound_dev_if when binding a raw socket to an address ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM spi: Fix zero length xfer bug spi: rspi: Fix sequencer reset during initialization spi : spi-topcliff-pch: Fix to handle empty DMA buffers scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices media: saa7146: avoid high stack usage with clang media: go7007: avoid clang frame overflow warning with KASAN media: m88ds3103: serialize reset messages in m88ds3103_set_frontend scsi: qla4xxx: avoid freeing unallocated dma memory usb: core: Add PM runtime calls to usb_hcd_platform_shutdown rcutorture: Fix cleanup path for invalid torture_type strings tty: ipwireless: fix missing checks for ioremap virtio_console: initialize vtermno value for ports media: wl128x: prevent two potential buffer overflows spi: tegra114: reset controller on probe cxgb3/l2t: Fix undefined behaviour ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put HID: core: move Usage Page concatenation to Main item chardev: add additional check for minor range overlap x86/ia32: Fix ia32_restore_sigcontext() AC leak arm64: cpu_ops: fix a leaked reference by adding missing of_node_put scsi: ufs: Avoid configuring regulator with undefined voltage range scsi: ufs: Fix regulator load and icc-level configuration brcmfmac: fix race during disconnect when USB completion is in progress brcmfmac: convert dev_init_lock mutex to completion b43: shut up clang -Wuninitialized variable warning brcmfmac: fix missing checks for kmemdup rtlwifi: fix a potential NULL pointer dereference iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data iio: hmc5843: fix potential NULL pointer dereferences iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion x86/build: Keep local relocations with ld.lld cpufreq: pmac32: fix possible object reference leak cpufreq/pasemi: fix possible object reference leak cpufreq: ppc_cbe: fix possible object reference leak s390: cio: fix cio_irb declaration extcon: arizona: Disable mic detect if running when driver is removed PM / core: Propagate dev->power.wakeup_path when no callbacks mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support mmc: sdhci-of-esdhc: add erratum eSDHC5 support mmc_spi: add a status check for spi_sync_locked scsi: libsas: Do discovery on empty PHY to update PHY info hwmon: (f71805f) Use request_muxed_region for Super-IO accesses hwmon: (pc87427) Use request_muxed_region for Super-IO accesses hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses hwmon: (vt1211) Use request_muxed_region for Super-IO accesses RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure i40e: don't allow changes to HW VLAN stripping on active port VLANs x86/irq/64: Limit IST stack overflow check to #DB stack USB: core: Don't unbind interfaces following device reset failure sched/core: Handle overflow in cpu_shares_write_u64 sched/core: Check quota and period overflow at usec to nsec conversion powerpc/numa: improve control of topology updates media: pvrusb2: Prevent a buffer overflow media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() audit: fix a memory leak bug media: ov2659: make S_FMT succeed even if requested format doesn't match media: au0828: stop video streaming only when last user stops media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper media: coda: clear error return value before picture run dmaengine: at_xdmac: remove BUG_ON macro in tasklet pinctrl: pistachio: fix leaked of_node references HID: logitech-hidpp: use RAP instead of FAP to get the protocol version mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() smpboot: Place the __percpu annotation correctly x86/build: Move _etext to actual end of .text bcache: avoid clang -Wunintialized warning bcache: add failure check to run_cache_set() for journal replay bcache: fix failure in journal relplay bcache: return error immediately in bch_journal_replay() net: cw1200: fix a NULL pointer dereference mwifiex: prevent an array overflow ASoC: fsl_sai: Update is_slave_mode with correct value mac80211/cfg80211: update bss channel on channel switch dmaengine: pl330: _stop: clear interrupt status w1: fix the resume command API rtc: 88pm860x: prevent use-after-free on device remove brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() spi: pxa2xx: fix SCR (divisor) calculation ASoC: imx: fix fiq dependencies powerpc/boot: Fix missing check of lseek() return value mmc: core: Verify SD bus width cxgb4: Fix error path in cxgb4_init_module gfs2: Fix lru_count going negative tools include: Adopt linux/bits.h perf tools: No need to include bitops.h in util.h at76c50x-usb: Don't register led_trigger if usb_register_driver failed ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit media: vivid: use vfree() instead of kfree() for dev->bitmap_cap media: cpia2: Fix use-after-free in cpia2_exit fbdev: fix WARNING in __alloc_pages_nodemask bug hugetlb: use same fault hash key for shared and private mappings fbdev: fix divide error in fb_var_to_videomode btrfs: sysfs: don't leak memory when failing add fsid Btrfs: fix race between ranged fsync and writeback of adjacent ranges gfs2: Fix sign extension bug in gfs2_update_stats crypto: vmx - CTR: always increment IV as quadword Revert "scsi: sd: Keep disk read-only when re-reading partition" bio: fix improper use of smp_mb__before_atomic() KVM: x86: fix return value for reserved EFER ext4: do not delete unlinked inode from orphan list on failed truncate fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough btrfs: Honour FITRIM range constraints during free space trim md/raid: raid5 preserve the writeback action after the parity check Revert "Don't jump to compute_result state from check_result state" perf bench numa: Add define for RUSAGE_THREAD if not present ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG KVM: arm/arm64: Ensure vcpu target is unset on reset failure xfrm4: Fix uninitialized memory read in _decode_session4 vti4: ipip tunnel deregistration fixes. xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink dm delay: fix a crash when invalid device is specified PCI: Mark Atheros AR9462 to avoid bus reset fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display fbdev: sm712fb: fix support for 1024x768-16 mode fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75 fbdev: sm712fb: fix brightness control on reboot, don't set SR30 perf intel-pt: Fix sample timestamp wrt non-taken branches perf intel-pt: Fix improved sample timestamp perf intel-pt: Fix instructions sampling rate memory: tegra: Fix integer overflow on tick value calculation tracing: Fix partial reading of trace event's id file ceph: flush dirty inodes before proceeding with remount iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114 fuse: honor RLIMIT_FSIZE in fuse_file_fallocate fuse: fix writepages on 32bit clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider NFS4: Fix v4.0 client state corruption when mount media: ov6650: Fix sensor possibly not detected on probe cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() of: fix clang -Wunsequenced for be32_to_cpu() intel_th: msu: Fix single mode with IOMMU md: add mddev->pers to avoid potential NULL pointer dereference stm class: Fix channel free in stm output free path tipc: fix modprobe tipc failed after switch order of device registration tipc: switch order of device registration to fix a crash ppp: deflate: Fix possible crash in deflate_init net/mlx4_core: Change the error print to info print net: avoid weird emergency message KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug ext4: zero out the unused memory region in the extent tree block fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount writeback: synchronize sync(2) against cgroup writeback membership switches crypto: arm/aes-neonbs - don't access already-freed walk.iv crypto: salsa20 - don't access already-freed walk.iv crypto: chacha20poly1305 - set cra_name correctly crypto: gcm - fix incompatibility between "gcm" and "gcm_base" crypto: gcm - Fix error return code in crypto_gcm_create_common() ipmi:ssif: compare block number correctly for multi-part return messages bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() bcache: fix a race between cache register and cacheset unregister Btrfs: do not start a transaction at iterate_extent_inodes() ext4: fix ext4_show_options for file systems w/o journal ext4: actually request zeroing of inode table after grow tty/vt: fix write/write race in ioctl(KDSKBSENT) handler mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L ocfs2: fix ocfs2 read inode data panic in ocfs2_iget mm/mincore.c: make mincore() more conservative ASoC: RT5677-SPI: Disable 16Bit SPI Transfers ASoC: max98090: Fix restore of DAPM Muxes ALSA: hda/realtek - EAPD turn on later ALSA: hda/hdmi - Consider eld_valid when reporting jack event ALSA: usb-audio: Fix a memory leak bug crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest() crypto: crct10dif-generic - fix use via crypto_shash_digest() crypto: vmx - fix copy-paste error in CTR mode ARM: exynos: Fix a leaked reference by adding missing of_node_put x86/speculation/mds: Improve CPU buffer clear documentation x86/speculation/mds: Revert CPU buffer clear on double fault exit f2fs: link f2fs quota ops for sysfile fs: sdcardfs: Add missing option to show_options Conflicts: drivers/scsi/sd.c drivers/scsi/ufs/ufshcd.c Change-Id: If6679c7cc8c3fee323c749ac359353fbebfd12d9 Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| | * | Merge 4.4.181 into android-4.4Greg Kroah-Hartman2019-06-11
| | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 4.4.181 x86/speculation/mds: Revert CPU buffer clear on double fault exit x86/speculation/mds: Improve CPU buffer clear documentation ARM: exynos: Fix a leaked reference by adding missing of_node_put crypto: vmx - fix copy-paste error in CTR mode crypto: crct10dif-generic - fix use via crypto_shash_digest() crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest() ALSA: usb-audio: Fix a memory leak bug ALSA: hda/hdmi - Consider eld_valid when reporting jack event ALSA: hda/realtek - EAPD turn on later ASoC: max98090: Fix restore of DAPM Muxes ASoC: RT5677-SPI: Disable 16Bit SPI Transfers mm/mincore.c: make mincore() more conservative ocfs2: fix ocfs2 read inode data panic in ocfs2_iget mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L tty/vt: fix write/write race in ioctl(KDSKBSENT) handler ext4: actually request zeroing of inode table after grow ext4: fix ext4_show_options for file systems w/o journal Btrfs: do not start a transaction at iterate_extent_inodes() bcache: fix a race between cache register and cacheset unregister bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() ipmi:ssif: compare block number correctly for multi-part return messages crypto: gcm - Fix error return code in crypto_gcm_create_common() crypto: gcm - fix incompatibility between "gcm" and "gcm_base" crypto: chacha20poly1305 - set cra_name correctly crypto: salsa20 - don't access already-freed walk.iv crypto: arm/aes-neonbs - don't access already-freed walk.iv writeback: synchronize sync(2) against cgroup writeback membership switches fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount ext4: zero out the unused memory region in the extent tree block ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes net: avoid weird emergency message net/mlx4_core: Change the error print to info print ppp: deflate: Fix possible crash in deflate_init tipc: switch order of device registration to fix a crash tipc: fix modprobe tipc failed after switch order of device registration stm class: Fix channel free in stm output free path md: add mddev->pers to avoid potential NULL pointer dereference intel_th: msu: Fix single mode with IOMMU of: fix clang -Wunsequenced for be32_to_cpu() cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() media: ov6650: Fix sensor possibly not detected on probe NFS4: Fix v4.0 client state corruption when mount clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider fuse: fix writepages on 32bit fuse: honor RLIMIT_FSIZE in fuse_file_fallocate iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114 ceph: flush dirty inodes before proceeding with remount tracing: Fix partial reading of trace event's id file memory: tegra: Fix integer overflow on tick value calculation perf intel-pt: Fix instructions sampling rate perf intel-pt: Fix improved sample timestamp perf intel-pt: Fix sample timestamp wrt non-taken branches fbdev: sm712fb: fix brightness control on reboot, don't set SR30 fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75 fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM fbdev: sm712fb: fix support for 1024x768-16 mode fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting PCI: Mark Atheros AR9462 to avoid bus reset dm delay: fix a crash when invalid device is specified xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module vti4: ipip tunnel deregistration fixes. xfrm4: Fix uninitialized memory read in _decode_session4 KVM: arm/arm64: Ensure vcpu target is unset on reset failure power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour perf bench numa: Add define for RUSAGE_THREAD if not present Revert "Don't jump to compute_result state from check_result state" md/raid: raid5 preserve the writeback action after the parity check btrfs: Honour FITRIM range constraints during free space trim fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough ext4: do not delete unlinked inode from orphan list on failed truncate KVM: x86: fix return value for reserved EFER bio: fix improper use of smp_mb__before_atomic() Revert "scsi: sd: Keep disk read-only when re-reading partition" crypto: vmx - CTR: always increment IV as quadword gfs2: Fix sign extension bug in gfs2_update_stats Btrfs: fix race between ranged fsync and writeback of adjacent ranges btrfs: sysfs: don't leak memory when failing add fsid fbdev: fix divide error in fb_var_to_videomode hugetlb: use same fault hash key for shared and private mappings fbdev: fix WARNING in __alloc_pages_nodemask bug media: cpia2: Fix use-after-free in cpia2_exit media: vivid: use vfree() instead of kfree() for dev->bitmap_cap ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit at76c50x-usb: Don't register led_trigger if usb_register_driver failed perf tools: No need to include bitops.h in util.h tools include: Adopt linux/bits.h gfs2: Fix lru_count going negative cxgb4: Fix error path in cxgb4_init_module mmc: core: Verify SD bus width powerpc/boot: Fix missing check of lseek() return value ASoC: imx: fix fiq dependencies spi: pxa2xx: fix SCR (divisor) calculation brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() rtc: 88pm860x: prevent use-after-free on device remove w1: fix the resume command API dmaengine: pl330: _stop: clear interrupt status mac80211/cfg80211: update bss channel on channel switch ASoC: fsl_sai: Update is_slave_mode with correct value mwifiex: prevent an array overflow net: cw1200: fix a NULL pointer dereference bcache: return error immediately in bch_journal_replay() bcache: fix failure in journal relplay bcache: add failure check to run_cache_set() for journal replay bcache: avoid clang -Wunintialized warning x86/build: Move _etext to actual end of .text smpboot: Place the __percpu annotation correctly x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions HID: logitech-hidpp: use RAP instead of FAP to get the protocol version pinctrl: pistachio: fix leaked of_node references dmaengine: at_xdmac: remove BUG_ON macro in tasklet media: coda: clear error return value before picture run media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper media: au0828: stop video streaming only when last user stops media: ov2659: make S_FMT succeed even if requested format doesn't match audit: fix a memory leak bug media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() media: pvrusb2: Prevent a buffer overflow powerpc/numa: improve control of topology updates sched/core: Check quota and period overflow at usec to nsec conversion sched/core: Handle overflow in cpu_shares_write_u64 USB: core: Don't unbind interfaces following device reset failure x86/irq/64: Limit IST stack overflow check to #DB stack i40e: don't allow changes to HW VLAN stripping on active port VLANs RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure hwmon: (vt1211) Use request_muxed_region for Super-IO accesses hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses hwmon: (pc87427) Use request_muxed_region for Super-IO accesses hwmon: (f71805f) Use request_muxed_region for Super-IO accesses scsi: libsas: Do discovery on empty PHY to update PHY info mmc_spi: add a status check for spi_sync_locked mmc: sdhci-of-esdhc: add erratum eSDHC5 support mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support PM / core: Propagate dev->power.wakeup_path when no callbacks extcon: arizona: Disable mic detect if running when driver is removed s390: cio: fix cio_irb declaration cpufreq: ppc_cbe: fix possible object reference leak cpufreq/pasemi: fix possible object reference leak cpufreq: pmac32: fix possible object reference leak x86/build: Keep local relocations with ld.lld iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion iio: hmc5843: fix potential NULL pointer dereferences iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data rtlwifi: fix a potential NULL pointer dereference brcmfmac: fix missing checks for kmemdup b43: shut up clang -Wuninitialized variable warning brcmfmac: convert dev_init_lock mutex to completion brcmfmac: fix race during disconnect when USB completion is in progress scsi: ufs: Fix regulator load and icc-level configuration scsi: ufs: Avoid configuring regulator with undefined voltage range arm64: cpu_ops: fix a leaked reference by adding missing of_node_put x86/ia32: Fix ia32_restore_sigcontext() AC leak chardev: add additional check for minor range overlap HID: core: move Usage Page concatenation to Main item ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put cxgb3/l2t: Fix undefined behaviour spi: tegra114: reset controller on probe media: wl128x: prevent two potential buffer overflows virtio_console: initialize vtermno value for ports tty: ipwireless: fix missing checks for ioremap rcutorture: Fix cleanup path for invalid torture_type strings usb: core: Add PM runtime calls to usb_hcd_platform_shutdown scsi: qla4xxx: avoid freeing unallocated dma memory media: m88ds3103: serialize reset messages in m88ds3103_set_frontend media: go7007: avoid clang frame overflow warning with KASAN media: saa7146: avoid high stack usage with clang scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices spi : spi-topcliff-pch: Fix to handle empty DMA buffers spi: rspi: Fix sequencer reset during initialization spi: Fix zero length xfer bug ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM ipv6: Consider sk_bound_dev_if when binding a raw socket to an address llc: fix skb leak in llc_build_and_send_ui_pkt() net-gro: fix use-after-free read in napi_gro_frags() net: stmmac: fix reset gpio free missing usbnet: fix kernel crash after disconnect tipc: Avoid copying bytes beyond the supplied data bnxt_en: Fix aggregation buffer leak under OOM condition. net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value crypto: vmx - ghash: do nosimd fallback manually xen/pciback: Don't disable PCI_COMMAND on PCI device reset. Revert "tipc: fix modprobe tipc failed after switch order of device registration" tipc: fix modprobe tipc failed after switch order of device registration -v2 sparc64: Fix regression in non-hypervisor TLB flush xcall include/linux/bitops.h: sanitize rotate primitives xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() usb: xhci: avoid null pointer deref when bos field is NULL USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor USB: sisusbvga: fix oops in error path of sisusb_probe USB: Add LPM quirk for Surface Dock GigE adapter USB: rio500: refuse more than one device at a time USB: rio500: fix memory leak in close after disconnect media: usb: siano: Fix general protection fault in smsusb media: usb: siano: Fix false-positive "uninitialized variable" warning media: smsusb: better handle optional alignment scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) Btrfs: fix race updating log root item during fsync ALSA: hda/realtek - Set default power save node to 0 drm/nouveau/i2c: Disable i2c bus access after ->fini() tty: serial: msm_serial: Fix XON/XOFF tty: max310x: Fix external crystal register setup memcg: make it work on sparse non-0-node systems kernel/signal.c: trace_signal_deliver when signal_group_exit CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM binder: Replace "%p" with "%pK" for stable binder: replace "%p" with "%pK" net: create skb_gso_validate_mac_len() bnx2x: disable GSO where gso_size is too big for hardware brcmfmac: Add length checks on firmware events brcmfmac: screening firmware event packet brcmfmac: revise handling events in receive path brcmfmac: fix incorrect event channel deduction brcmfmac: add length checks in scheduled scan result handler brcmfmac: add subtype check for event handling in data path userfaultfd: don't pin the user memory in userfaultfd_file_create() Revert "x86/build: Move _etext to actual end of .text" net: cdc_ncm: GetNtbFormat endian fix usb: gadget: fix request length error for isoc transfer media: uvcvideo: Fix uvc_alloc_entity() allocation alignment ethtool: fix potential userspace buffer overflow neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query net: rds: fix memory leak in rds_ib_flush_mr_pool pktgen: do not sleep with the thread lock held. rcu: locking and unlocking need to always be at least barriers parisc: Use implicit space register selection for loading the coherence index of I/O pdirs fuse: fallocate: fix return with locked inode MIPS: pistachio: Build uImage.gz by default genwqe: Prevent an integer overflow in the ioctl drm/gma500/cdv: Check vbt config bits when detecting lvds panels fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock fuse: Add FOPEN_STREAM to use stream_open() ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled ethtool: check the return value of get_regs_len Linux 4.4.181 Change-Id: Ibadc58ab76330698ff36ffdc0ca8c9d52ce36f9e Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
| | | * fuse: Add FOPEN_STREAM to use stream_open()Kirill Smelkov2019-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit bbd84f33652f852ce5992d65db4d020aba21f882 upstream. Starting from commit 9c225f2655e3 ("vfs: atomic f_pos accesses as per POSIX") files opened even via nonseekable_open gate read and write via lock and do not allow them to be run simultaneously. This can create read vs write deadlock if a filesystem is trying to implement a socket-like file which is intended to be simultaneously used for both read and write from filesystem client. See commit 10dce8af3422 ("fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock") for details and e.g. commit 581d21a2d02a ("xenbus: fix deadlock on writes to /proc/xen/xenbus") for a similar deadlock example on /proc/xen/xenbus. To avoid such deadlock it was tempting to adjust fuse_finish_open to use stream_open instead of nonseekable_open on just FOPEN_NONSEEKABLE flags, but grepping through Debian codesearch shows users of FOPEN_NONSEEKABLE, and in particular GVFS which actually uses offset in its read and write handlers https://codesearch.debian.net/search?q=-%3Enonseekable+%3D https://gitlab.gnome.org/GNOME/gvfs/blob/1.40.0-6-gcbc54396/client/gvfsfusedaemon.c#L1080 https://gitlab.gnome.org/GNOME/gvfs/blob/1.40.0-6-gcbc54396/client/gvfsfusedaemon.c#L1247-1346 https://gitlab.gnome.org/GNOME/gvfs/blob/1.40.0-6-gcbc54396/client/gvfsfusedaemon.c#L1399-1481 so if we would do such a change it will break a real user. Add another flag (FOPEN_STREAM) for filesystem servers to indicate that the opened handler is having stream-like semantics; does not use file position and thus the kernel is free to issue simultaneous read and write request on opened file handle. This patch together with stream_open() should be added to stable kernels starting from v3.14+. This will allow to patch OSSPD and other FUSE filesystems that provide stream-like files to return FOPEN_STREAM | FOPEN_NONSEEKABLE in open handler and this way avoid the deadlock on all kernel versions. This should work because fuse_finish_open ignores unknown open flags returned from a filesystem and so passing FOPEN_STREAM to a kernel that is not aware of this flag cannot hurt. In turn the kernel that is not aware of FOPEN_STREAM will be < v3.14 where just FOPEN_NONSEEKABLE is sufficient to implement streams without read vs write deadlock. Cc: stable@vger.kernel.org # v3.14+ Signed-off-by: Kirill Smelkov <kirr@nexedi.com> Signed-off-by: Miklos Szeredi <mszeredi@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| | | * tipc: Avoid copying bytes beyond the supplied dataChris Packham2019-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | TLV_SET is called with a data pointer and a len parameter that tells us how many bytes are pointed to by data. When invoking memcpy() we need to careful to only copy len bytes. Previously we would copy TLV_LENGTH(len) bytes which would copy an extra 4 bytes past the end of the data pointer which newer GCC versions complain about. In file included from test.c:17: In function 'TLV_SET', inlined from 'test' at test.c:186:5: /usr/include/linux/tipc_config.h:317:3: warning: 'memcpy' forming offset [33, 36] is out of the bounds [0, 32] of object 'bearer_name' with type 'char[32]' [-Warray-bounds] memcpy(TLV_DATA(tlv_ptr), data, tlv_len); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ test.c: In function 'test': test.c::161:10: note: 'bearer_name' declared here char bearer_name[TIPC_MAX_BEARER_NAME]; ^~~~~~~~~~~ We still want to ensure any padding bytes at the end are initialised, do this with a explicit memset() rather than copy bytes past the end of data. Apply the same logic to TCM_SET. Signed-off-by: Chris Packham <chris.packham@alliedtelesis.co.nz> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
* | | | Merge LA.UM.7.5.2.r1-03200-8x96.0 of ↵Davide Garberi2019-06-19
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://source.codeaurora.org/quic/la/kernel/msm-4.4 into lineage-16.0 bcf671504f41 Merge "msm: adsprpc: maintain local copy of rpra offloaded to DSP" into kernel.lnx.4.4.r37-rel 621c16b0342c Merge "arm: dts: msm: Add avs-version dt property for 8996" into kernel.lnx.4.4.r37-rel 22fbeb474b52 Merge "msm: sensor: actuator: fix out of bound read for bivcm region params" into kernel.lnx.4.4.r37-rel 579b4b461cca Merge "diag: Prevent out-of-bound access while processing userspace data" into kernel.lnx.4.4.r37-rel aff3d9629d10 arm: dts: msm: Add avs-version dt property for 8996 fbf5254e319b msm: sensor: actuator: fix out of bound read for bivcm region params d73a74c20cb2 msm: adsprpc: maintain local copy of rpra offloaded to DSP 3c1b5fa08460 diag: Prevent out-of-bound access while processing userspace data d929c539a8e5 msm: ais: sensor: actuator: fix out of bound read for bivcm region params 77a2432a11c2 ASoC: msm: Add support for AVS version check 51ae92e6a401 Merge commit '06ceb6bb61d15d96906733a0a4e1ca5a53a9fe3e' into HEAD 06ceb6bb61d1 Merge "msm: ipa3: Fix to validate check for IP type" c7c174351b81 Merge "diag: Prevent out-of-bound access while processing non-hdlc pkt" bc914679ea33 msm: ipa3: Fix to validate check for IP type f275209c759d diag: Prevent out-of-bound access while processing non-hdlc pkt 77b17af341a0 Merge "ARM: dts: msm: Add support for float charger detection on MSM8996" c9c1e20784b5 Merge "phy: qusb: Add support for DP DM pulsing for HS PHY" 5c004decb393 Merge "dsp: afe: check for minimum size before payload access" f7f2404ce1e5 Merge "soc: msm8998: Add 16ch playback and record support for TDM" 0ee704100065 dsp: afe: check for minimum size before payload access 074cdf9e72eb Merge "cnss2: Return failure if bus type do not match" f73796d0e9f6 Merge "asoc: Update max channels for TDM ports" 3691a75c38f2 soc: msm8998: Add 16ch playback and record support for TDM 4067f83f16aa Merge "ARM: dts: msm: Enable DP DM pulsing support on MSM8996" ced9c94ab135 Merge "soc: qcom: hab: Add open local-cancel and compiler warning fixes" 1058027c8de2 Merge "msm: ipa: fix to validate input parameters" c53f4c9b5b07 Merge "net: sockev: avoid races between sockev and socket_close" c447f451f23b msm: ipa: fix to validate input parameters 0e71405de372 phy: qusb: Add support for DP DM pulsing for HS PHY 923d660f4f8e ARM: dts: msm: Add support for float charger detection on MSM8996 669f50368505 usb: dwc3: Support float charger detection b924e5efad9c net: sockev: avoid races between sockev and socket_close ecf5d04a091c i2c: add virtual i2c driver 3973929bb0c0 asoc: Update max channels for TDM ports f5b94d9b13a2 Merge "fbdev: msm: check the length of the external input buffer properly" 866e7cab7632 Merge "power: qpnp-smbcharger: Add support for dpdm pulsing" 69b14d87db0c Merge "diag: Prevent out-of-bound access while processing dci transaction" 16819b1724ca Merge "diag: Prevent out-of-bound access while processing mask commands" 77b2a5118029 Merge "soc: qcom: smem: validate fields of shared structures" 9c9f59ad526d Merge "msm: mdss: assign block_id for INTF_3" 9482fdb2ac26 Merge "asoc: Ratelimit error logs to avoid excessive logging" c0d5faa72def ARM: dts: msm: Enable DP DM pulsing support on MSM8996 20cff2eff8b0 soc: qcom: hab: Add open local-cancel and compiler warning fixes 2835220d65c2 power: qpnp-smbcharger: Add support for dpdm pulsing 705aac6195a3 Merge "msm: ais : Lock Implementation for avoid race condition" e405d025f373 cnss2: Return failure if bus type do not match cce422722518 soc: qcom: smem: validate fields of shared structures 24cedeb24492 Merge "Merge android-4.4.180 (71cb827) into msm-4.4" 01fcd88c0f94 fbdev: msm: check the length of the external input buffer properly 2f6ef8a30b78 Merge "usb: f_gsi: Increase max control transfer size to 8K" cfb05dba8254 Merge "msm: ipa_v2: Protect ipa default routing table" 44607545fc3a Merge "qcom: smcinvoke: Fix stack overflow for arr_filp" b29d59a33d59 Merge "defconfig: msm8996: Enable radio configs" fa9dbbba7210 qcom: smcinvoke: Fix stack overflow for arr_filp 17fe44d6eb8a msm: ais : Lock Implementation for avoid race condition 547234bc3905 Merge "arm: dts: msm: Add usbin-vadc dt property for 8996" 780ec0d56272 Merge android-4.4.180 (71cb827) into msm-4.4 fe304a42badc Merge "power: qpnp-smbcharger: Add voltage now property in usb psy" 01abac7367ec Merge "soc: qcom: ipc_router_mhi_xprt: Handle error condition" d1a5c0380504 Merge "ARM: dts: msm: Enable HDMI audio support for 8996" f5704ee3fc16 Merge "defconfig: Enable REGMAP_ALLOW_WRITE_DEBUGFS" 726ccfec942d power: qpnp-smbcharger: Add voltage now property in usb psy c77bbe685168 Merge "msm: ais: handle the error value returned during get clock" 765d3befd4ec msm: ais: handle the error value returned during get clock 716a46317a4f power: qpnp-smbcharger: Add support for float charger detection f228ed90951d Merge "ARM: dts: msm: Update avb flag and partition names for auto" fde6bcd6f665 arm: dts: msm: Add usbin-vadc dt property for 8996 f8572fa1920f Merge "ASoC: msm: Update codec name in HDMI dai link" 64c7fea7a615 Merge "serial: msm_serial_hs: Align to HW assisted flow control support" 4249d4516299 asoc: Ratelimit error logs to avoid excessive logging 095ed32dd71f serial: msm_serial_hs: Align to HW assisted flow control support a4cc4b94d2cc usb: f_gsi: Increase max control transfer size to 8K 14ff0dc12ed0 Merge "ARM: dts: msm: add support for apq8096pro CDP" 6666379ae0e6 msm: mdss: assign block_id for INTF_3 79e903bcd908 soc: qcom: ipc_router_mhi_xprt: Handle error condition 4efd54ad69f1 Merge "pwm: pwm-qpnp: Fix the order of configuring PWM value" af0d3ed849b5 Merge "msm: camera: jpegdma: Added missing lock for dqbuf and streamon" 71cb827c0249 Merge 4.4.180 into android-4.4 0f654c12cd72 Linux 4.4.180 5f3cf6b82211 powerpc/lib: fix book3s/32 boot failure due to code patching 95100d253fee powerpc/booke64: set RI in default MSR 9db489ed4971 drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl f518072d1ae1 drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl 7a22a4ea67b7 bonding: fix arp_validate toggling in active-backup mode 6e72e6897efe ipv4: Fix raw socket lookup for local traffic 6e36b31c1b07 vrf: sit mtu should not be updated when vrf netdev is the link 6044ab2a05f6 vlan: disable SIOCSHWTSTAMP in container bf4d21eed0d7 packet: Fix error path in packet_init 1261f44db98c net: ucc_geth - fix Oops when changing number of buffers in the ring 24d2a86b8968 bridge: Fix error path for kobject_init_and_add() b8bb7bc326f2 powerpc/64s: Include cpu header 27d9e822a716 USB: serial: fix unthrottle races f2387d0c3467 USB: serial: use variable for status 6db8c0882912 x86/bugs: Change L1TF mitigation string to match upstream 71041afe26a3 x86/speculation/mds: Fix documentation typo 693eb3bdaf19 Documentation: Correct the possible MDS sysfs values 0f961ec59305 x86/mds: Add MDSUM variant to the MDS documentation 3092ad5c4f2e x86/speculation/mds: Add 'mitigations=' support for MDS a50e2ca5757f x86/speculation: Support 'mitigations=' cmdline option 31a2c5f7a25b cpu/speculation: Add 'mitigations=' cmdline option 2b26dff34698 x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off 0144cbc12474 x86/speculation/mds: Fix comment e2896d6b1e48 x86/speculation/mds: Add SMT warning message 06deb655ae26 x86/speculation: Move arch_smt_update() call to after mitigation decisions 5b0f1f5b4f58 x86/cpu/bugs: Use __initconst for 'const' init data 48204fd98023 Documentation: Add MDS vulnerability documentation e0e64cdc7fd9 Documentation: Move L1TF to separate directory 9fe26a407f0e x86/speculation/mds: Add mitigation mode VMWERV 3fb41b4e2d38 x86/speculation/mds: Add sysfs reporting for MDS 1e9a9ef67033 x86/speculation/l1tf: Document l1tf in sysfs 8c7398befdf1 x86/speculation/mds: Add mitigation control for MDS d4c1e6cbbcdc x86/speculation/mds: Conditionally clear CPU buffers on idle entry a41a2dee403d x86/speculation/mds: Clear CPU buffers on exit to user 7a6c2a6c4235 x86/speculation/mds: Add mds_clear_cpu_buffers() f223c10cf176 x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests adef560d1ef8 x86/speculation/mds: Add BUG_MSBDS_ONLY 179adc415f94 x86/speculation/mds: Add basic bug infrastructure for MDS 8be7f1183d2f x86/speculation: Consolidate CPU whitelists 683f9fba8c27 x86/msr-index: Cleanup bit defines 6eb1dfb0e945 kvm: x86: Report STIBP on GET_SUPPORTED_CPUID f8515b2d8c86 x86/speculation: Provide IBPB always command line options 867931a6cc51 x86/speculation: Add seccomp Spectre v2 user space protection mode 0ec9baa28b62 x86/speculation: Enable prctl mode for spectre_v2_user ff99c966c627 x86/speculation: Add prctl() control for indirect branch speculation bc8a006cb385 x86/speculation: Prevent stale SPEC_CTRL msr content b784ff22d682 x86/speculation: Prepare arch_smt_update() for PRCTL mode 29652de33320 x86/speculation: Split out TIF update e2dafdd0084b x86/speculation: Prepare for conditional IBPB in switch_mm() 708f3ed763fc x86/speculation: Avoid __switch_to_xtra() calls 2db6cf1eba01 x86/process: Consolidate and simplify switch_to_xtra() code 2959c3e36f65 x86/speculation: Prepare for per task indirect branch speculation control a5e8a06268dc x86/speculation: Add command line control for indirect branch speculation 92bc99ff0724 x86/speculation: Unify conditional spectre v2 print functions 3d2149a49e7b x86/speculataion: Mark command line parser data __initdata ad70092da835 x86/speculation: Mark string arrays const correctly 77aaa118c5d1 x86/speculation: Reorder the spec_v2 code 892d9881b437 x86/speculation: Rework SMT state change 1f562beba75c sched: Add sched_smt_active() f576a78075ba x86/Kconfig: Select SCHED_SMT if SMP enabled f68790685aa5 x86/speculation: Reorganize speculation control MSRs update 41ebb68d9a67 x86/speculation: Rename SSBD update functions 9ef693a75208 x86/speculation: Disable STIBP when enhanced IBRS is in use 6a598ce52f69 x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() fb4a4fc139a5 x86/speculation: Remove unnecessary ret variable in cpu_show_common() 809e50eb21e5 x86/speculation: Clean up spectre_v2_parse_cmdline() f97a530be08f x86/speculation: Update the TIF_SSBD comment 0440c2c5e2d2 x86/speculation: Propagate information about RSB filling mitigation to sysfs dc23d0241b97 x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation 4a215a1155ce x86/speculation: Apply IBPB more strictly to avoid cross-process data leak 122b3ad3a068 x86/mm: Use WRITE_ONCE() when setting PTEs 7c50deefa1e9 KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled 2422db18b660 x86/cpu: Sanitize FAM6_ATOM naming 2329f765b53a x86/microcode: Update the new microcode revision unconditionally 0ee359e14c08 x86/microcode: Make sure boot_cpu_data.microcode is up-to-date 12043f0eb5fd x86/speculation: Remove SPECTRE_V2_IBRS in enum spectre_v2_mitigation 9029b6908e1d x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR 8d1385ea4c67 locking/atomics, asm-generic: Move some macros from <linux/bitops.h> to a new <linux/bits.h> file 76869c022795 x86/bugs: Switch the selection of mitigation from CPU vendor to CPU features a9f354ad1c1d x86/bugs: Add AMD's SPEC_CTRL MSR usage 99bd3817b6d7 x86/bugs: Add AMD's variant of SSB_NO 2b8e34665e8f x86/speculation: Simplify the CPU bug detection logic efcb85dd2644 x86/speculation: Support Enhanced IBRS on future CPUs 042c6aee6572 x86/cpufeatures: Hide AMD-specific speculation flags dc7e3b052ab4 x86/MCE: Save microcode revision in machine check records 30c66b528e1f x86/microcode/intel: Check microcode revision before updating sibling threads c2a357d9b429 bitops: avoid integer overflow in GENMASK(_ULL) d7a711b64ff8 x86: stop exporting msr-index.h to userland 98cc1464cfd6 x86/microcode/intel: Add a helper which gives the microcode revision 5ec6421c21c6 locking/static_keys: Provide DECLARE and well as DEFINE macros 40f6c72df9d8 Don't jump to compute_result state from check_result state 07d35512e494 x86/vdso: Pass --eh-frame-hdr to the linker 9767260be0b4 cw1200: fix missing unlock on error in cw1200_hw_scan() ccc2b0f8d4be gpu: ipu-v3: dp: fix CSC handling 795c76f4e50f selftests/net: correct the return value for run_netsocktests 83494cfb0d29 s390: ctcm: fix ctcm_new_device error return code 4c78631d884d ipvs: do not schedule icmp errors from tunnels 2b46b98576cb init: initialize jump labels before command line option parsing a54c490cecd5 tools lib traceevent: Fix missing equality check for strcmp 5664d3298b3b KVM: x86: avoid misreporting level-triggered irqs as edge-triggered in tracing b79c1ea82e3b s390/3270: fix lockdep false positive on view->lock 825c6401f9e9 s390/dasd: Fix capacity calculation for large volumes 905b8964c9d9 libnvdimm/btt: Fix a kmemdup failure check 3007ae4bbf26 HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys c15b4f9f4699 HID: input: add mapping for Expose/Overview key 45679938dc6f iio: adc: xilinx: fix potential use-after-free on remove 619c8933e4af platform/x86: sony-laptop: Fix unintentional fall-through 8ce5ae6912e3 netfilter: compat: initialize all fields in xt_init a9bdfbd494da timer/debug: Change /proc/timer_stats from 0644 to 0600 e212945fe525 ASoC: Intel: avoid Oops if DMA setup fails faf458605614 ipv6: fix a potential deadlock in do_ipv6_setsockopt() dcb33fe3d9a6 UAS: fix alignment of scatter/gather segments d016dc1bd29a Bluetooth: Align minimum encryption key size for LE and BR/EDR connections dd150bcc93ff Bluetooth: hidp: fix buffer overflow 15a12bde0fd9 scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines 88246eb7bf37 usb: dwc3: Fix default lpm_nyet_threshold value 1aec586c25ee genirq: Prevent use-after-free and work list corruption 2984aa6d4a78 iommu/amd: Set exclusion range correctly 4294ec58537d scsi: csiostor: fix missing data copy in csio_scsi_err_handler() 93beb0decfe2 perf/x86/intel: Fix handling of wakeup_events for multi-entry PEBS 5ea6b626b917 ASoC: tlv320aic32x4: Fix Common Pins b7bbb5ce955b ASoC: cs4270: Set auto-increment bit for register writes 79132626f8c7 ASoC:soc-pcm:fix a codec fixup issue in TDM case fe3f6511c9af scsi: libsas: fix a race condition when smp task timeout 0f83a55ca07e media: v4l2: i2c: ov7670: Fix PLL bypass register values d96fc7729c44 x86/mce: Improve error message when kernel cannot recover, p2 08794d181ff6 selinux: never allow relabeling on context mounts 3bf16c452b91 Input: snvs_pwrkey - initialize necessary driver data before enabling IRQ 90b8ab9ee10f staging: iio: adt7316: fix the dac write calculation 7c4744e2c75c staging: iio: adt7316: fix the dac read calculation a45018ff3c06 staging: iio: adt7316: allow adt751x to use internal vref for all dacs 55153b108922 usb: usbip: fix isoc packet num validation in get_pipe 3401512b7831 ARM: iop: don't use using 64-bit DMA masks 03fd6e162398 ARM: orion: don't use using 64-bit DMA masks 9fcbabe209a2 xsysace: Fix error handling in ace_setup 66c57ab148a0 hugetlbfs: fix memory leak for resv_map 550ce5b3b45b net: hns: Fix WARNING when remove HNS driver with SMMU enabled c8d4b98eeed4 net: hns: Use NAPI_POLL_WEIGHT for hns driver 4af8444aff7c scsi: storvsc: Fix calculation of sub-channel count 4328fca13020 vfio/pci: use correct format characters 891c92860383 rtc: da9063: set uie_unsupported when relevant 02395682f19b debugfs: fix use-after-free on symlink traversal 90a015d4d782 jffs2: fix use-after-free on symlink traversal cd43ccbfb5fb bonding: show full hw address in sysfs for slave entries 88020a14a0b7 igb: Fix WARN_ONCE on runtime suspend 6c24038d84a7 rtc: sh: Fix invalid alarm warning for non-enabled alarm e9358b9a5db1 HID: debug: fix race condition with between rdesc_show() and device removal 1b2b6db7765e USB: core: Fix bug caused by duplicate interface PM usage counter b384399a518c USB: core: Fix unterminated string returned by usb_string() 7a52b950902d USB: w1 ds2490: Fix bug caused by improper use of altsetting array 438b075fc77d USB: yurex: Fix protection fault after device removal c6ae8a5a4396 packet: validate msg_namelen in send directly aed15cc2ced6 bnxt_en: Improve multicast address setup logic. c7a9d69b727a ipv6: invert flowlabel sharing check in process and user mode 82ae1a89b134 ipv6/flowlabel: wait rcu grace period before put_pid() 0fe65e4eac33 ipv4: ip_do_fragment: Preserve skb_iif during fragmentation bdbc15205b51 ALSA: line6: use dynamic buffers e1a5cdbf7cb3 vfio/type1: Limit DMA mappings per container e0d9031feb2f kconfig/[mn]conf: handle backspace (^H) key 8c2bbe210936 libata: fix using DMA buffers on stack 4767c30a2bac scsi: zfcp: reduce flood of fcrscn1 trace records on multi-element RSCN cd2bdca329c1 ceph: fix use-after-free on symlink traversal 4663cb7947dd usb: u132-hcd: fix resource leak 783552a9865c scsi: qla4xxx: fix a potential NULL pointer dereference f18c946e6cf1 net: ethernet: ti: fix possible object reference leak 64206dd039fd net: ibm: fix possible object reference leak ae35f101789b net: xilinx: fix possible object reference leak c0d641aa264a net: ks8851: Set initial carrier state to down f41b4fd83fef net: ks8851: Delay requesting IRQ until opened 195aac29efe3 net: ks8851: Reassert reset pin if chip ID check fails 36b1240d4e47 net: ks8851: Dequeue RX packets explicitly 1710b4ad56db ARM: dts: pfla02: increase phy reset duration fd1f90b4fa83 usb: gadget: net2272: Fix net2272_dequeue() 61fb6fa9b32b usb: gadget: net2280: Fix net2280_dequeue() 4ff888ea38c1 usb: gadget: net2280: Fix overrun of OUT messages b9cf1bc4e31e sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init() 6e361910119b netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING d311479911c7 qlcnic: Avoid potential NULL pointer dereference 1652d1194af5 usbnet: ipheth: fix potential null pointer dereference in ipheth_carrier_set 4f2df9fd0769 usbnet: ipheth: prevent TX queue timeouts when device not ready aa24636d3dc2 Documentation: Add nospectre_v1 parameter c816ec25621b powerpc/fsl: Add FSL_PPC_BOOK3E as supported arch for nospectre_v2 boot arg 6a56ecdfd3b2 powerpc/fsl: Fixed warning: orphan section `__btb_flush_fixup' 1a26467578d8 powerpc/fsl: Sanitize the syscall table for NXP PowerPC 32 bit platforms 42b46e985c99 powerpc/fsl: Flush the branch predictor at each kernel entry (32 bit) 5bed4b351268 powerpc/fsl: Emulate SPRN_BUCSR register 4168b2e356bc powerpc/fsl: Flush branch predictor when entering KVM ec206826323a powerpc/fsl: Enable runtime patching if nospectre_v2 boot arg is used 389fd9776f3e ipv4: set the tcp_min_rtt_wlen range from 0 to one day 8cab9c87ee0f net: stmmac: move stmmac_check_ether_addr() to driver probe 1990e41b2339 team: fix possible recursive locking when add slaves 510a733497d3 ipv4: add sanity checks in ipv4_link_failure() f480eb03c88a Revert "block/loop: Use global lock for ioctl() operation." f08db490b406 bpf: reject wrong sized filters earlier 0b7d9b8571ad tipc: check link name with right length in tipc_nl_compat_link_set 625634be3b8b tipc: check bearer name with right length in tipc_nl_compat_bearer_enable cafee685fb48 netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON cec54a8e694c NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family. 76c279c7b6f8 fs/proc/proc_sysctl.c: Fix a NULL pointer dereference 28bd672e7a9f intel_th: gth: Fix an off-by-one in output unassigning 20159939a8b4 slip: make slhc_free() silently accept an error pointer 2996e89c2d62 tipc: handle the err returned from cmd header function 9d688aa11077 powerpc/fsl: Fix the flush of branch predictor. 990c7be76516 powerpc/security: Fix spectre_v2 reporting 5f9678d9c8c7 powerpc/fsl: Update Spectre v2 reporting 0454f7b3282b powerpc/fsl: Flush the branch predictor at each kernel entry (64bit) 932e8acaa806 powerpc/fsl: Add nospectre_v2 command line argument 4cbfad23be50 powerpc/fsl: Fix spectre_v2 mitigations reporting b76f9074d0f3 powerpc/fsl: Add macro to flush the branch predictor 526adfdf029e powerpc/fsl: Add infrastructure to fixup branch predictor flush 7fe905d0973e powerpc: Avoid code patching freed init sections ee1a6e164cac powerpc/powernv: Query firmware for count cache flush settings 67fb764be590 powerpc/pseries: Query hypervisor for count cache flush settings bda04af8692d powerpc/64s: Add support for software count cache flush bfeafa01fa09 powerpc/64s: Add new security feature flags for count cache flush a8d13b364862 powerpc/asm: Add a patch_site macro & helpers for patching instructions 0273c6d73a03 powerpc/fsl: Add barrier_nospec implementation for NXP PowerPC Book3E b7f47c8f0f4c powerpc/64: Make meltdown reporting Book3S 64 specific 04a682df27c1 powerpc/64: Call setup_barrier_nospec() from setup_arch() e7b3fb43b970 powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC 4fb0382d987e powerpc/64: Make stf barrier PPC_BOOK3S_64 specific. 58dbc8def949 powerpc/64: Disable the speculation barrier from the command line d000015f6283 powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 b6a4dce40cb7 powerpc/64s: Enhance the information in cpu_show_spectre_v1() 1110c3ad0b66 powerpc: Use barrier_nospec in copy_from_user() 2a90ebba2fcc powerpc/64: Use barrier_nospec in syscall entry 990ce72a3bab powerpc/64s: Enable barrier_nospec based on firmware settings 39e71d5ae83f powerpc/64s: Patch barrier_nospec in modules 083c37a1bb61 powerpc/64s: Add support for ori barrier_nospec patching fde08a5d395e powerpc/64s: Add barrier_nospec 7b9f9ce1a7a0 powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit 27296b7879d5 powerpc/64s: Fix section mismatch warnings from setup_rfi_flush() 8b1f9a4e2136 powerpc/pseries: Restore default security feature flags on setup adde5de432d6 powerpc: Move default security feature flags b3be4dcbd1a2 powerpc/pseries: Fix clearing of security feature flags d9594148817b powerpc/64s: Wire up cpu_show_spectre_v2() fe126d25bad7 powerpc/64s: Wire up cpu_show_spectre_v1() 5097bf81e845 powerpc/pseries: Use the security flags in pseries_setup_rfi_flush() 10f8cd737a03 powerpc/powernv: Use the security flags in pnv_setup_rfi_flush() 495c34251785 powerpc/64s: Enhance the information in cpu_show_meltdown() dde12e9b3e86 powerpc/64s: Move cpu_show_meltdown() 3b99b3b3fb97 powerpc/powernv: Set or clear security feature flags 2b206ee648f3 powerpc/pseries: Set or clear security feature flags d34ea7873f82 powerpc: Add security feature flags for Spectre/Meltdown 8249ee94a9ca powerpc/rfi-flush: Call setup_rfi_flush() after LPM migration 7777d9cb2c1c powerpc/pseries: Add new H_GET_CPU_CHARACTERISTICS flags e5c8265abdbb powerpc/rfi-flush: Differentiate enabled and patched flush types 8b58add49fef powerpc/rfi-flush: Always enable fallback flush on pseries 22c697163e4d powerpc/rfi-flush: Make it possible to call setup_rfi_flush() again d04664376129 powerpc/rfi-flush: Move the logic to avoid a redo into the debugfs code f93ae3415cf7 powerpc/powernv: Support firmware disable of RFI flush e1759aacdd16 powerpc/pseries: Support firmware disable of RFI flush d9052a2ede31 powerpc/64s: Improve RFI L1-D cache flush fallback 13dc9b34c873 powerpc/xmon: Add RFI flush related fields to paca dump 80c305aeeb09 USB: Consolidate LPM checks to avoid enabling LPM twice 9dad11965ed2 USB: Add new USB LPM helpers fad515213059 sunrpc: don't mark uninitialised items as VALID. 498e9066b480 nfsd: Don't release the callback slot unless it was actually held b8d15c06cf0c ceph: fix ci->i_head_snapc leak 811fb30278b4 ceph: ensure d_name stability in ceph_dentry_hash() 2f14dae91560 sched/numa: Fix a possible divide-by-zero 10dbe2292758 trace: Fix preempt_enable_no_resched() abuse 15c2ac78cb73 MIPS: scall64-o32: Fix indirect syscall number load fd49607468ba cifs: do not attempt cifs operation on smb2+ rename error 4c78eadb3489 KVM: fail KVM_SET_VCPU_EVENTS with invalid exception number 485d15db01ca kbuild: simplify ld-option implementation cd1e9004ddd5 Merge "defconfig: msm8996: Enable PAN emulation" a4b99d2c643c Merge "defconfig: msm8996: Disable DEVPORT" b79e25fe5818 msm: camera : Lock Implementation for avoid race condition ce469a70f3bc ANDROID: cuttlefish_defconfig: Disable DEVTMPFS d5f7b0a5556b diag: Prevent out-of-bound access while processing dci transaction cfef4f88308a diag: Prevent out-of-bound access while processing mask commands c9fa4db90a83 pwm: pwm-qpnp: Fix the order of configuring PWM value fe15f47306a1 ANDROID: Move from clang r349610 to r353983c. 8cb9bdaac97a Merge upstream-f2fs-stable-linux-4.4.y into android-4.4 592adc484920 drm/msm: ensure display driver probe completion 77c04577d922 Merge "msm: camera_v2: handle the error value returned during get clock" 5e144157195d icnss: Add check on msa region 6183ceb8d1e7 msm: camera_v2: handle the error value returned during get clock 779dfa61f7b1 msm: ipa_v2: Protect ipa default routing table 8b5d9f6f8eac ARM: dts: msm: add support for apq8096pro CDP 59dda5e0dcec ASoC: msm: Update codec name in HDMI dai link 0cba1d4c1422 f2fs: fix to avoid accessing xattr across the boundary f32a4e2decb0 ARM: dts: msm: Enable HDMI audio support for 8996 c44c78fab1a2 ARM: dts: msm: Update avb flag and partition names for auto ee588a7f2329 f2fs: fix to avoid potential race on sbi->unusable_block_count access/update 993543bcbad2 f2fs: add tracepoint for f2fs_filemap_fault() b60ff4b3605c f2fs: introduce DATA_GENERIC_ENHANCE 43c33bc93b79 f2fs: fix to handle error in f2fs_disable_checkpoint() 9ca2000e9d76 f2fs: remove redundant check in f2fs_file_write_iter() b6bb1574fce6 f2fs: fix to be aware of readonly device in write_checkpoint() 04139be9047a f2fs: fix to skip recovery on readonly device 25f68cbbdb86 f2fs: fix to consider multiple device for readonly check a90ff12b2ff5 f2fs: relocate chksum_offset for large_nat_bitmap feature ad199c5f600f f2fs: allow unfixed f2fs_checkpoint.checksum_offset a3df88564441 f2fs: Replace spaces with tab 12a9d38a0b11 f2fs: insert space before the open parenthesis '(' e3057056de10 f2fs: allow address pointer number of dnode aligning to specified size c351f529e220 f2fs: introduce f2fs_read_single_page() for cleanup 8ac217148510 f2fs: mark is_extension_exist() inline 2c8359eee2ad f2fs: fix to set FI_UPDATE_WRITE correctly 5f2085bab2e2 f2fs: fix to avoid panic in f2fs_inplace_write_data() d6fe88aef4c1 f2fs: fix to do sanity check on valid block count of segment 1c3e295f67d0 f2fs: fix to do sanity check on valid node/block count 4ffbe8fee8a4 f2fs: fix to avoid panic in do_recover_data() 65f109d717d4 f2fs: fix to do sanity check on free nid c60f9c6ced33 f2fs: fix to do checksum even if inode page is uptodate 9a080abdc30b f2fs: fix to avoid panic in f2fs_remove_inode_page() c0bcbe425670 f2fs: fix to clear dirty inode in error path of f2fs_iget() 299dea1adf40 f2fs: remove new blank line of f2fs kernel message 9b4fc7359ca2 f2fs: fix wrong __is_meta_io() macro 02fb7afdd5f0 f2fs: fix to avoid panic in dec_valid_node_count() 5caebe607e13 f2fs: fix to avoid panic in dec_valid_block_count() b5bc76046b10 f2fs: fix to use inline space only if inline_xattr is enable 9bc578bf83ee f2fs: fix to retrieve inline xattr space 0d7333632d79 f2fs: fix error path of recovery b9973998d9df f2fs: fix to avoid deadloop in foreground GC 5047402dec0e f2fs: data: fix warning Using plain integer as NULL pointer 5bed19fbbba0 f2fs: add tracepoint for f2fs_file_write_iter() 7e37cc9d7161 f2fs: add comment for conditional compilation statement 00e77f15eb1d f2fs: fix potential recursive call when enabling data_flush 6b25d4ac2e7d f2fs: improve discard handling with multi-device volumes c4c54093c71d f2fs: Reduce zoned block device memory usage 2c124ddd98a9 f2fs: Fix use of number of devices 8e638383c1bf msm: camera: jpegdma: Added missing lock for dqbuf and streamon 2bc83184b422 defconfig: Enable REGMAP_ALLOW_WRITE_DEBUGFS 81bbb1b91ed2 defconfig: msm8996: Enable radio configs 0b570560f091 radio: add Silabs FM radio support for msm8996 152bacdd85c4 ANDROID: Communicates LMK events to userland where they can be logged dc0d6bda9e08 defconfig: msm8996: Disable DEVPORT 70d7ff1aa709 defconfig: msm8996: Disable EXT2 and EXT3 FS configs 339eab8aede0 defconfig: msm8996: Enable PAN emulation Signed-off-by: Davide Garberi <dade.garberi@gmail.com> Change-Id: Iac613f6970faeadc98d9ed40aae0d96042502ce4
| * | | i2c: add virtual i2c driverxianzhu2019-06-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | add virtual i2c driver for virtualization platform. Change-Id: I5aafa3b9db1e06d990b25a393f54f8763e73f9aa Signed-off-by: xianzhu <xianzhu@codeaurora.org>
| * | | Merge android-4.4.180 (71cb827) into msm-4.4Srinivasarao P2019-05-23
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-71cb827 Linux 4.4.180 powerpc/lib: fix book3s/32 boot failure due to code patching powerpc/booke64: set RI in default MSR drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl bonding: fix arp_validate toggling in active-backup mode ipv4: Fix raw socket lookup for local traffic vrf: sit mtu should not be updated when vrf netdev is the link vlan: disable SIOCSHWTSTAMP in container packet: Fix error path in packet_init net: ucc_geth - fix Oops when changing number of buffers in the ring bridge: Fix error path for kobject_init_and_add() powerpc/64s: Include cpu header USB: serial: fix unthrottle races USB: serial: use variable for status x86/bugs: Change L1TF mitigation string to match upstream x86/speculation/mds: Fix documentation typo Documentation: Correct the possible MDS sysfs values x86/mds: Add MDSUM variant to the MDS documentation x86/speculation/mds: Add 'mitigations=' support for MDS x86/speculation: Support 'mitigations=' cmdline option cpu/speculation: Add 'mitigations=' cmdline option x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off x86/speculation/mds: Fix comment x86/speculation/mds: Add SMT warning message x86/speculation: Move arch_smt_update() call to after mitigation decisions x86/cpu/bugs: Use __initconst for 'const' init data Documentation: Add MDS vulnerability documentation Documentation: Move L1TF to separate directory x86/speculation/mds: Add mitigation mode VMWERV x86/speculation/mds: Add sysfs reporting for MDS x86/speculation/l1tf: Document l1tf in sysfs x86/speculation/mds: Add mitigation control for MDS x86/speculation/mds: Conditionally clear CPU buffers on idle entry x86/speculation/mds: Clear CPU buffers on exit to user x86/speculation/mds: Add mds_clear_cpu_buffers() x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests x86/speculation/mds: Add BUG_MSBDS_ONLY x86/speculation/mds: Add basic bug infrastructure for MDS x86/speculation: Consolidate CPU whitelists x86/msr-index: Cleanup bit defines kvm: x86: Report STIBP on GET_SUPPORTED_CPUID x86/speculation: Provide IBPB always command line options x86/speculation: Add seccomp Spectre v2 user space protection mode x86/speculation: Enable prctl mode for spectre_v2_user x86/speculation: Add prctl() control for indirect branch speculation x86/speculation: Prevent stale SPEC_CTRL msr content x86/speculation: Prepare arch_smt_update() for PRCTL mode x86/speculation: Split out TIF update x86/speculation: Prepare for conditional IBPB in switch_mm() x86/speculation: Avoid __switch_to_xtra() calls x86/process: Consolidate and simplify switch_to_xtra() code x86/speculation: Prepare for per task indirect branch speculation control x86/speculation: Add command line control for indirect branch speculation x86/speculation: Unify conditional spectre v2 print functions x86/speculataion: Mark command line parser data __initdata x86/speculation: Mark string arrays const correctly x86/speculation: Reorder the spec_v2 code x86/speculation: Rework SMT state change sched: Add sched_smt_active() x86/Kconfig: Select SCHED_SMT if SMP enabled x86/speculation: Reorganize speculation control MSRs update x86/speculation: Rename SSBD update functions x86/speculation: Disable STIBP when enhanced IBRS is in use x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() x86/speculation: Remove unnecessary ret variable in cpu_show_common() x86/speculation: Clean up spectre_v2_parse_cmdline() x86/speculation: Update the TIF_SSBD comment x86/speculation: Propagate information about RSB filling mitigation to sysfs x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation x86/speculation: Apply IBPB more strictly to avoid cross-process data leak x86/mm: Use WRITE_ONCE() when setting PTEs KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled x86/cpu: Sanitize FAM6_ATOM naming x86/microcode: Update the new microcode revision unconditionally x86/microcode: Make sure boot_cpu_data.microcode is up-to-date x86/speculation: Remove SPECTRE_V2_IBRS in enum spectre_v2_mitigation x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR locking/atomics, asm-generic: Move some macros from <linux/bitops.h> to a new <linux/bits.h> file x86/bugs: Switch the selection of mitigation from CPU vendor to CPU features x86/bugs: Add AMD's SPEC_CTRL MSR usage x86/bugs: Add AMD's variant of SSB_NO x86/speculation: Simplify the CPU bug detection logic x86/speculation: Support Enhanced IBRS on future CPUs x86/cpufeatures: Hide AMD-specific speculation flags x86/MCE: Save microcode revision in machine check records x86/microcode/intel: Check microcode revision before updating sibling threads bitops: avoid integer overflow in GENMASK(_ULL) x86: stop exporting msr-index.h to userland x86/microcode/intel: Add a helper which gives the microcode revision locking/static_keys: Provide DECLARE and well as DEFINE macros Don't jump to compute_result state from check_result state x86/vdso: Pass --eh-frame-hdr to the linker cw1200: fix missing unlock on error in cw1200_hw_scan() gpu: ipu-v3: dp: fix CSC handling selftests/net: correct the return value for run_netsocktests s390: ctcm: fix ctcm_new_device error return code ipvs: do not schedule icmp errors from tunnels init: initialize jump labels before command line option parsing tools lib traceevent: Fix missing equality check for strcmp KVM: x86: avoid misreporting level-triggered irqs as edge-triggered in tracing s390/3270: fix lockdep false positive on view->lock s390/dasd: Fix capacity calculation for large volumes libnvdimm/btt: Fix a kmemdup failure check HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys HID: input: add mapping for Expose/Overview key iio: adc: xilinx: fix potential use-after-free on remove platform/x86: sony-laptop: Fix unintentional fall-through netfilter: compat: initialize all fields in xt_init timer/debug: Change /proc/timer_stats from 0644 to 0600 ASoC: Intel: avoid Oops if DMA setup fails ipv6: fix a potential deadlock in do_ipv6_setsockopt() UAS: fix alignment of scatter/gather segments Bluetooth: Align minimum encryption key size for LE and BR/EDR connections Bluetooth: hidp: fix buffer overflow scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines usb: dwc3: Fix default lpm_nyet_threshold value genirq: Prevent use-after-free and work list corruption iommu/amd: Set exclusion range correctly scsi: csiostor: fix missing data copy in csio_scsi_err_handler() perf/x86/intel: Fix handling of wakeup_events for multi-entry PEBS ASoC: tlv320aic32x4: Fix Common Pins ASoC: cs4270: Set auto-increment bit for register writes ASoC:soc-pcm:fix a codec fixup issue in TDM case scsi: libsas: fix a race condition when smp task timeout media: v4l2: i2c: ov7670: Fix PLL bypass register values x86/mce: Improve error message when kernel cannot recover, p2 selinux: never allow relabeling on context mounts Input: snvs_pwrkey - initialize necessary driver data before enabling IRQ staging: iio: adt7316: fix the dac write calculation staging: iio: adt7316: fix the dac read calculation staging: iio: adt7316: allow adt751x to use internal vref for all dacs usb: usbip: fix isoc packet num validation in get_pipe ARM: iop: don't use using 64-bit DMA masks ARM: orion: don't use using 64-bit DMA masks xsysace: Fix error handling in ace_setup hugetlbfs: fix memory leak for resv_map net: hns: Fix WARNING when remove HNS driver with SMMU enabled net: hns: Use NAPI_POLL_WEIGHT for hns driver scsi: storvsc: Fix calculation of sub-channel count vfio/pci: use correct format characters rtc: da9063: set uie_unsupported when relevant debugfs: fix use-after-free on symlink traversal jffs2: fix use-after-free on symlink traversal bonding: show full hw address in sysfs for slave entries igb: Fix WARN_ONCE on runtime suspend rtc: sh: Fix invalid alarm warning for non-enabled alarm HID: debug: fix race condition with between rdesc_show() and device removal USB: core: Fix bug caused by duplicate interface PM usage counter USB: core: Fix unterminated string returned by usb_string() USB: w1 ds2490: Fix bug caused by improper use of altsetting array USB: yurex: Fix protection fault after device removal packet: validate msg_namelen in send directly bnxt_en: Improve multicast address setup logic. ipv6: invert flowlabel sharing check in process and user mode ipv6/flowlabel: wait rcu grace period before put_pid() ipv4: ip_do_fragment: Preserve skb_iif during fragmentation ALSA: line6: use dynamic buffers vfio/type1: Limit DMA mappings per container kconfig/[mn]conf: handle backspace (^H) key libata: fix using DMA buffers on stack scsi: zfcp: reduce flood of fcrscn1 trace records on multi-element RSCN ceph: fix use-after-free on symlink traversal usb: u132-hcd: fix resource leak scsi: qla4xxx: fix a potential NULL pointer dereference net: ethernet: ti: fix possible object reference leak net: ibm: fix possible object reference leak net: xilinx: fix possible object reference leak net: ks8851: Set initial carrier state to down net: ks8851: Delay requesting IRQ until opened net: ks8851: Reassert reset pin if chip ID check fails net: ks8851: Dequeue RX packets explicitly ARM: dts: pfla02: increase phy reset duration usb: gadget: net2272: Fix net2272_dequeue() usb: gadget: net2280: Fix net2280_dequeue() usb: gadget: net2280: Fix overrun of OUT messages sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init() netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING qlcnic: Avoid potential NULL pointer dereference usbnet: ipheth: fix potential null pointer dereference in ipheth_carrier_set usbnet: ipheth: prevent TX queue timeouts when device not ready Documentation: Add nospectre_v1 parameter powerpc/fsl: Add FSL_PPC_BOOK3E as supported arch for nospectre_v2 boot arg powerpc/fsl: Fixed warning: orphan section `__btb_flush_fixup' powerpc/fsl: Sanitize the syscall table for NXP PowerPC 32 bit platforms powerpc/fsl: Flush the branch predictor at each kernel entry (32 bit) powerpc/fsl: Emulate SPRN_BUCSR register powerpc/fsl: Flush branch predictor when entering KVM powerpc/fsl: Enable runtime patching if nospectre_v2 boot arg is used ipv4: set the tcp_min_rtt_wlen range from 0 to one day net: stmmac: move stmmac_check_ether_addr() to driver probe team: fix possible recursive locking when add slaves ipv4: add sanity checks in ipv4_link_failure() Revert "block/loop: Use global lock for ioctl() operation." bpf: reject wrong sized filters earlier tipc: check link name with right length in tipc_nl_compat_link_set tipc: check bearer name with right length in tipc_nl_compat_bearer_enable netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family. fs/proc/proc_sysctl.c: Fix a NULL pointer dereference intel_th: gth: Fix an off-by-one in output unassigning slip: make slhc_free() silently accept an error pointer tipc: handle the err returned from cmd header function powerpc/fsl: Fix the flush of branch predictor. powerpc/security: Fix spectre_v2 reporting powerpc/fsl: Update Spectre v2 reporting powerpc/fsl: Flush the branch predictor at each kernel entry (64bit) powerpc/fsl: Add nospectre_v2 command line argument powerpc/fsl: Fix spectre_v2 mitigations reporting powerpc/fsl: Add macro to flush the branch predictor powerpc/fsl: Add infrastructure to fixup branch predictor flush powerpc: Avoid code patching freed init sections powerpc/powernv: Query firmware for count cache flush settings powerpc/pseries: Query hypervisor for count cache flush settings powerpc/64s: Add support for software count cache flush powerpc/64s: Add new security feature flags for count cache flush powerpc/asm: Add a patch_site macro & helpers for patching instructions powerpc/fsl: Add barrier_nospec implementation for NXP PowerPC Book3E powerpc/64: Make meltdown reporting Book3S 64 specific powerpc/64: Call setup_barrier_nospec() from setup_arch() powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC powerpc/64: Make stf barrier PPC_BOOK3S_64 specific. powerpc/64: Disable the speculation barrier from the command line powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 powerpc/64s: Enhance the information in cpu_show_spectre_v1() powerpc: Use barrier_nospec in copy_from_user() powerpc/64: Use barrier_nospec in syscall entry powerpc/64s: Enable barrier_nospec based on firmware settings powerpc/64s: Patch barrier_nospec in modules powerpc/64s: Add support for ori barrier_nospec patching powerpc/64s: Add barrier_nospec powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit powerpc/64s: Fix section mismatch warnings from setup_rfi_flush() powerpc/pseries: Restore default security feature flags on setup powerpc: Move default security feature flags powerpc/pseries: Fix clearing of security feature flags powerpc/64s: Wire up cpu_show_spectre_v2() powerpc/64s: Wire up cpu_show_spectre_v1() powerpc/pseries: Use the security flags in pseries_setup_rfi_flush() powerpc/powernv: Use the security flags in pnv_setup_rfi_flush() powerpc/64s: Enhance the information in cpu_show_meltdown() powerpc/64s: Move cpu_show_meltdown() powerpc/powernv: Set or clear security feature flags powerpc/pseries: Set or clear security feature flags powerpc: Add security feature flags for Spectre/Meltdown powerpc/rfi-flush: Call setup_rfi_flush() after LPM migration powerpc/pseries: Add new H_GET_CPU_CHARACTERISTICS flags powerpc/rfi-flush: Differentiate enabled and patched flush types powerpc/rfi-flush: Always enable fallback flush on pseries powerpc/rfi-flush: Make it possible to call setup_rfi_flush() again powerpc/rfi-flush: Move the logic to avoid a redo into the debugfs code powerpc/powernv: Support firmware disable of RFI flush powerpc/pseries: Support firmware disable of RFI flush powerpc/64s: Improve RFI L1-D cache flush fallback powerpc/xmon: Add RFI flush related fields to paca dump USB: Consolidate LPM checks to avoid enabling LPM twice USB: Add new USB LPM helpers sunrpc: don't mark uninitialised items as VALID. nfsd: Don't release the callback slot unless it was actually held ceph: fix ci->i_head_snapc leak ceph: ensure d_name stability in ceph_dentry_hash() sched/numa: Fix a possible divide-by-zero trace: Fix preempt_enable_no_resched() abuse MIPS: scall64-o32: Fix indirect syscall number load cifs: do not attempt cifs operation on smb2+ rename error KVM: fail KVM_SET_VCPU_EVENTS with invalid exception number kbuild: simplify ld-option implementation ANDROID: cuttlefish_defconfig: Disable DEVTMPFS ANDROID: Move from clang r349610 to r353983c. f2fs: fix to avoid accessing xattr across the boundary f2fs: fix to avoid potential race on sbi->unusable_block_count access/update f2fs: add tracepoint for f2fs_filemap_fault() f2fs: introduce DATA_GENERIC_ENHANCE f2fs: fix to handle error in f2fs_disable_checkpoint() f2fs: remove redundant check in f2fs_file_write_iter() f2fs: fix to be aware of readonly device in write_checkpoint() f2fs: fix to skip recovery on readonly device f2fs: fix to consider multiple device for readonly check f2fs: relocate chksum_offset for large_nat_bitmap feature f2fs: allow unfixed f2fs_checkpoint.checksum_offset f2fs: Replace spaces with tab f2fs: insert space before the open parenthesis '(' f2fs: allow address pointer number of dnode aligning to specified size f2fs: introduce f2fs_read_single_page() for cleanup f2fs: mark is_extension_exist() inline f2fs: fix to set FI_UPDATE_WRITE correctly f2fs: fix to avoid panic in f2fs_inplace_write_data() f2fs: fix to do sanity check on valid block count of segment f2fs: fix to do sanity check on valid node/block count f2fs: fix to avoid panic in do_recover_data() f2fs: fix to do sanity check on free nid f2fs: fix to do checksum even if inode page is uptodate f2fs: fix to avoid panic in f2fs_remove_inode_page() f2fs: fix to clear dirty inode in error path of f2fs_iget() f2fs: remove new blank line of f2fs kernel message f2fs: fix wrong __is_meta_io() macro f2fs: fix to avoid panic in dec_valid_node_count() f2fs: fix to avoid panic in dec_valid_block_count() f2fs: fix to use inline space only if inline_xattr is enable f2fs: fix to retrieve inline xattr space f2fs: fix error path of recovery f2fs: fix to avoid deadloop in foreground GC f2fs: data: fix warning Using plain integer as NULL pointer f2fs: add tracepoint for f2fs_file_write_iter() f2fs: add comment for conditional compilation statement f2fs: fix potential recursive call when enabling data_flush f2fs: improve discard handling with multi-device volumes f2fs: Reduce zoned block device memory usage f2fs: Fix use of number of devices Sleepable function handle_lmk_event() is called in atomic context, so ignored the commit "ANDROID: Communicates LMK events to userland where they can be logged" Conflicts: arch/powerpc/include/asm/uaccess.h kernel/cpu.c kernel/irq/manage.c kernel/time/timer_stats.c net/ipv4/sysctl_net_ipv4.c Change-Id: I3e5bd447057b44a28fc5000403198ae0fd644480 Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| | * | Merge 4.4.180 into android-4.4Greg Kroah-Hartman2019-05-16
| | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 4.4.180 kbuild: simplify ld-option implementation KVM: fail KVM_SET_VCPU_EVENTS with invalid exception number cifs: do not attempt cifs operation on smb2+ rename error MIPS: scall64-o32: Fix indirect syscall number load trace: Fix preempt_enable_no_resched() abuse sched/numa: Fix a possible divide-by-zero ceph: ensure d_name stability in ceph_dentry_hash() ceph: fix ci->i_head_snapc leak nfsd: Don't release the callback slot unless it was actually held sunrpc: don't mark uninitialised items as VALID. USB: Add new USB LPM helpers USB: Consolidate LPM checks to avoid enabling LPM twice powerpc/xmon: Add RFI flush related fields to paca dump powerpc/64s: Improve RFI L1-D cache flush fallback powerpc/pseries: Support firmware disable of RFI flush powerpc/powernv: Support firmware disable of RFI flush powerpc/rfi-flush: Move the logic to avoid a redo into the debugfs code powerpc/rfi-flush: Make it possible to call setup_rfi_flush() again powerpc/rfi-flush: Always enable fallback flush on pseries powerpc/rfi-flush: Differentiate enabled and patched flush types powerpc/pseries: Add new H_GET_CPU_CHARACTERISTICS flags powerpc/rfi-flush: Call setup_rfi_flush() after LPM migration powerpc: Add security feature flags for Spectre/Meltdown powerpc/pseries: Set or clear security feature flags powerpc/powernv: Set or clear security feature flags powerpc/64s: Move cpu_show_meltdown() powerpc/64s: Enhance the information in cpu_show_meltdown() powerpc/powernv: Use the security flags in pnv_setup_rfi_flush() powerpc/pseries: Use the security flags in pseries_setup_rfi_flush() powerpc/64s: Wire up cpu_show_spectre_v1() powerpc/64s: Wire up cpu_show_spectre_v2() powerpc/pseries: Fix clearing of security feature flags powerpc: Move default security feature flags powerpc/pseries: Restore default security feature flags on setup powerpc/64s: Fix section mismatch warnings from setup_rfi_flush() powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit powerpc/64s: Add barrier_nospec powerpc/64s: Add support for ori barrier_nospec patching powerpc/64s: Patch barrier_nospec in modules powerpc/64s: Enable barrier_nospec based on firmware settings powerpc/64: Use barrier_nospec in syscall entry powerpc: Use barrier_nospec in copy_from_user() powerpc/64s: Enhance the information in cpu_show_spectre_v1() powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 powerpc/64: Disable the speculation barrier from the command line powerpc/64: Make stf barrier PPC_BOOK3S_64 specific. powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC powerpc/64: Call setup_barrier_nospec() from setup_arch() powerpc/64: Make meltdown reporting Book3S 64 specific powerpc/fsl: Add barrier_nospec implementation for NXP PowerPC Book3E powerpc/asm: Add a patch_site macro & helpers for patching instructions powerpc/64s: Add new security feature flags for count cache flush powerpc/64s: Add support for software count cache flush powerpc/pseries: Query hypervisor for count cache flush settings powerpc/powernv: Query firmware for count cache flush settings powerpc: Avoid code patching freed init sections powerpc/fsl: Add infrastructure to fixup branch predictor flush powerpc/fsl: Add macro to flush the branch predictor powerpc/fsl: Fix spectre_v2 mitigations reporting powerpc/fsl: Add nospectre_v2 command line argument powerpc/fsl: Flush the branch predictor at each kernel entry (64bit) powerpc/fsl: Update Spectre v2 reporting powerpc/security: Fix spectre_v2 reporting powerpc/fsl: Fix the flush of branch predictor. tipc: handle the err returned from cmd header function slip: make slhc_free() silently accept an error pointer intel_th: gth: Fix an off-by-one in output unassigning fs/proc/proc_sysctl.c: Fix a NULL pointer dereference NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family. netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON tipc: check bearer name with right length in tipc_nl_compat_bearer_enable tipc: check link name with right length in tipc_nl_compat_link_set bpf: reject wrong sized filters earlier Revert "block/loop: Use global lock for ioctl() operation." ipv4: add sanity checks in ipv4_link_failure() team: fix possible recursive locking when add slaves net: stmmac: move stmmac_check_ether_addr() to driver probe ipv4: set the tcp_min_rtt_wlen range from 0 to one day powerpc/fsl: Enable runtime patching if nospectre_v2 boot arg is used powerpc/fsl: Flush branch predictor when entering KVM powerpc/fsl: Emulate SPRN_BUCSR register powerpc/fsl: Flush the branch predictor at each kernel entry (32 bit) powerpc/fsl: Sanitize the syscall table for NXP PowerPC 32 bit platforms powerpc/fsl: Fixed warning: orphan section `__btb_flush_fixup' powerpc/fsl: Add FSL_PPC_BOOK3E as supported arch for nospectre_v2 boot arg Documentation: Add nospectre_v1 parameter usbnet: ipheth: prevent TX queue timeouts when device not ready usbnet: ipheth: fix potential null pointer dereference in ipheth_carrier_set qlcnic: Avoid potential NULL pointer dereference netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init() usb: gadget: net2280: Fix overrun of OUT messages usb: gadget: net2280: Fix net2280_dequeue() usb: gadget: net2272: Fix net2272_dequeue() ARM: dts: pfla02: increase phy reset duration net: ks8851: Dequeue RX packets explicitly net: ks8851: Reassert reset pin if chip ID check fails net: ks8851: Delay requesting IRQ until opened net: ks8851: Set initial carrier state to down net: xilinx: fix possible object reference leak net: ibm: fix possible object reference leak net: ethernet: ti: fix possible object reference leak scsi: qla4xxx: fix a potential NULL pointer dereference usb: u132-hcd: fix resource leak ceph: fix use-after-free on symlink traversal scsi: zfcp: reduce flood of fcrscn1 trace records on multi-element RSCN libata: fix using DMA buffers on stack kconfig/[mn]conf: handle backspace (^H) key vfio/type1: Limit DMA mappings per container ALSA: line6: use dynamic buffers ipv4: ip_do_fragment: Preserve skb_iif during fragmentation ipv6/flowlabel: wait rcu grace period before put_pid() ipv6: invert flowlabel sharing check in process and user mode bnxt_en: Improve multicast address setup logic. packet: validate msg_namelen in send directly USB: yurex: Fix protection fault after device removal USB: w1 ds2490: Fix bug caused by improper use of altsetting array USB: core: Fix unterminated string returned by usb_string() USB: core: Fix bug caused by duplicate interface PM usage counter HID: debug: fix race condition with between rdesc_show() and device removal rtc: sh: Fix invalid alarm warning for non-enabled alarm igb: Fix WARN_ONCE on runtime suspend bonding: show full hw address in sysfs for slave entries jffs2: fix use-after-free on symlink traversal debugfs: fix use-after-free on symlink traversal rtc: da9063: set uie_unsupported when relevant vfio/pci: use correct format characters scsi: storvsc: Fix calculation of sub-channel count net: hns: Use NAPI_POLL_WEIGHT for hns driver net: hns: Fix WARNING when remove HNS driver with SMMU enabled hugetlbfs: fix memory leak for resv_map xsysace: Fix error handling in ace_setup ARM: orion: don't use using 64-bit DMA masks ARM: iop: don't use using 64-bit DMA masks usb: usbip: fix isoc packet num validation in get_pipe staging: iio: adt7316: allow adt751x to use internal vref for all dacs staging: iio: adt7316: fix the dac read calculation staging: iio: adt7316: fix the dac write calculation Input: snvs_pwrkey - initialize necessary driver data before enabling IRQ selinux: never allow relabeling on context mounts x86/mce: Improve error message when kernel cannot recover, p2 media: v4l2: i2c: ov7670: Fix PLL bypass register values scsi: libsas: fix a race condition when smp task timeout ASoC:soc-pcm:fix a codec fixup issue in TDM case ASoC: cs4270: Set auto-increment bit for register writes ASoC: tlv320aic32x4: Fix Common Pins perf/x86/intel: Fix handling of wakeup_events for multi-entry PEBS scsi: csiostor: fix missing data copy in csio_scsi_err_handler() iommu/amd: Set exclusion range correctly genirq: Prevent use-after-free and work list corruption usb: dwc3: Fix default lpm_nyet_threshold value scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines Bluetooth: hidp: fix buffer overflow Bluetooth: Align minimum encryption key size for LE and BR/EDR connections UAS: fix alignment of scatter/gather segments ipv6: fix a potential deadlock in do_ipv6_setsockopt() ASoC: Intel: avoid Oops if DMA setup fails timer/debug: Change /proc/timer_stats from 0644 to 0600 netfilter: compat: initialize all fields in xt_init platform/x86: sony-laptop: Fix unintentional fall-through iio: adc: xilinx: fix potential use-after-free on remove HID: input: add mapping for Expose/Overview key HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys libnvdimm/btt: Fix a kmemdup failure check s390/dasd: Fix capacity calculation for large volumes s390/3270: fix lockdep false positive on view->lock KVM: x86: avoid misreporting level-triggered irqs as edge-triggered in tracing tools lib traceevent: Fix missing equality check for strcmp init: initialize jump labels before command line option parsing ipvs: do not schedule icmp errors from tunnels s390: ctcm: fix ctcm_new_device error return code selftests/net: correct the return value for run_netsocktests gpu: ipu-v3: dp: fix CSC handling cw1200: fix missing unlock on error in cw1200_hw_scan() x86/vdso: Pass --eh-frame-hdr to the linker Don't jump to compute_result state from check_result state locking/static_keys: Provide DECLARE and well as DEFINE macros x86/microcode/intel: Add a helper which gives the microcode revision x86: stop exporting msr-index.h to userland bitops: avoid integer overflow in GENMASK(_ULL) x86/microcode/intel: Check microcode revision before updating sibling threads x86/MCE: Save microcode revision in machine check records x86/cpufeatures: Hide AMD-specific speculation flags x86/speculation: Support Enhanced IBRS on future CPUs x86/speculation: Simplify the CPU bug detection logic x86/bugs: Add AMD's variant of SSB_NO x86/bugs: Add AMD's SPEC_CTRL MSR usage x86/bugs: Switch the selection of mitigation from CPU vendor to CPU features locking/atomics, asm-generic: Move some macros from <linux/bitops.h> to a new <linux/bits.h> file x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR x86/speculation: Remove SPECTRE_V2_IBRS in enum spectre_v2_mitigation x86/microcode: Make sure boot_cpu_data.microcode is up-to-date x86/microcode: Update the new microcode revision unconditionally x86/cpu: Sanitize FAM6_ATOM naming KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled x86/mm: Use WRITE_ONCE() when setting PTEs x86/speculation: Apply IBPB more strictly to avoid cross-process data leak x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation x86/speculation: Propagate information about RSB filling mitigation to sysfs x86/speculation: Update the TIF_SSBD comment x86/speculation: Clean up spectre_v2_parse_cmdline() x86/speculation: Remove unnecessary ret variable in cpu_show_common() x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() x86/speculation: Disable STIBP when enhanced IBRS is in use x86/speculation: Rename SSBD update functions x86/speculation: Reorganize speculation control MSRs update x86/Kconfig: Select SCHED_SMT if SMP enabled sched: Add sched_smt_active() x86/speculation: Rework SMT state change x86/speculation: Reorder the spec_v2 code x86/speculation: Mark string arrays const correctly x86/speculataion: Mark command line parser data __initdata x86/speculation: Unify conditional spectre v2 print functions x86/speculation: Add command line control for indirect branch speculation x86/speculation: Prepare for per task indirect branch speculation control x86/process: Consolidate and simplify switch_to_xtra() code x86/speculation: Avoid __switch_to_xtra() calls x86/speculation: Prepare for conditional IBPB in switch_mm() x86/speculation: Split out TIF update x86/speculation: Prepare arch_smt_update() for PRCTL mode x86/speculation: Prevent stale SPEC_CTRL msr content x86/speculation: Add prctl() control for indirect branch speculation x86/speculation: Enable prctl mode for spectre_v2_user x86/speculation: Add seccomp Spectre v2 user space protection mode x86/speculation: Provide IBPB always command line options kvm: x86: Report STIBP on GET_SUPPORTED_CPUID x86/msr-index: Cleanup bit defines x86/speculation: Consolidate CPU whitelists x86/speculation/mds: Add basic bug infrastructure for MDS x86/speculation/mds: Add BUG_MSBDS_ONLY x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests x86/speculation/mds: Add mds_clear_cpu_buffers() x86/speculation/mds: Clear CPU buffers on exit to user x86/speculation/mds: Conditionally clear CPU buffers on idle entry x86/speculation/mds: Add mitigation control for MDS x86/speculation/l1tf: Document l1tf in sysfs x86/speculation/mds: Add sysfs reporting for MDS x86/speculation/mds: Add mitigation mode VMWERV Documentation: Move L1TF to separate directory Documentation: Add MDS vulnerability documentation x86/cpu/bugs: Use __initconst for 'const' init data x86/speculation: Move arch_smt_update() call to after mitigation decisions x86/speculation/mds: Add SMT warning message x86/speculation/mds: Fix comment x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off cpu/speculation: Add 'mitigations=' cmdline option x86/speculation: Support 'mitigations=' cmdline option x86/speculation/mds: Add 'mitigations=' support for MDS x86/mds: Add MDSUM variant to the MDS documentation Documentation: Correct the possible MDS sysfs values x86/speculation/mds: Fix documentation typo x86/bugs: Change L1TF mitigation string to match upstream USB: serial: use variable for status USB: serial: fix unthrottle races powerpc/64s: Include cpu header bridge: Fix error path for kobject_init_and_add() net: ucc_geth - fix Oops when changing number of buffers in the ring packet: Fix error path in packet_init vlan: disable SIOCSHWTSTAMP in container vrf: sit mtu should not be updated when vrf netdev is the link ipv4: Fix raw socket lookup for local traffic bonding: fix arp_validate toggling in active-backup mode drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl powerpc/booke64: set RI in default MSR powerpc/lib: fix book3s/32 boot failure due to code patching Linux 4.4.180 Change-Id: If2d2fdd451b55c002666b32022b269cec9545607 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
| | | * x86/speculation: Add prctl() control for indirect branch speculationThomas Gleixner2019-05-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit 9137bb27e60e554dab694eafa4cca241fa3a694f upstream. Add the PR_SPEC_INDIRECT_BRANCH option for the PR_GET_SPECULATION_CTRL and PR_SET_SPECULATION_CTRL prctls to allow fine grained per task control of indirect branch speculation via STIBP and IBPB. Invocations: Check indirect branch speculation status with - prctl(PR_GET_SPECULATION_CTRL, PR_SPEC_INDIRECT_BRANCH, 0, 0, 0); Enable indirect branch speculation with - prctl(PR_SET_SPECULATION_CTRL, PR_SPEC_INDIRECT_BRANCH, PR_SPEC_ENABLE, 0, 0); Disable indirect branch speculation with - prctl(PR_SET_SPECULATION_CTRL, PR_SPEC_INDIRECT_BRANCH, PR_SPEC_DISABLE, 0, 0); Force disable indirect branch speculation with - prctl(PR_SET_SPECULATION_CTRL, PR_SPEC_INDIRECT_BRANCH, PR_SPEC_FORCE_DISABLE, 0, 0); See Documentation/userspace-api/spec_ctrl.rst. Signed-off-by: Tim Chen <tim.c.chen@linux.intel.com> Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Reviewed-by: Ingo Molnar <mingo@kernel.org> Cc: Peter Zijlstra <peterz@infradead.org> Cc: Andy Lutomirski <luto@kernel.org> Cc: Linus Torvalds <torvalds@linux-foundation.org> Cc: Jiri Kosina <jkosina@suse.cz> Cc: Tom Lendacky <thomas.lendacky@amd.com> Cc: Josh Poimboeuf <jpoimboe@redhat.com> Cc: Andrea Arcangeli <aarcange@redhat.com> Cc: David Woodhouse <dwmw@amazon.co.uk> Cc: Andi Kleen <ak@linux.intel.com> Cc: Dave Hansen <dave.hansen@intel.com> Cc: Casey Schaufler <casey.schaufler@intel.com> Cc: Asit Mallick <asit.k.mallick@intel.com> Cc: Arjan van de Ven <arjan@linux.intel.com> Cc: Jon Masters <jcm@redhat.com> Cc: Waiman Long <longman9394@gmail.com> Cc: Greg KH <gregkh@linuxfoundation.org> Cc: Dave Stewart <david.c.stewart@intel.com> Cc: Kees Cook <keescook@chromium.org> Link: https://lkml.kernel.org/r/20181125185005.866780996@linutronix.de [bwh: Backported to 4.4: - Renumber the PFA flags - Drop changes in tools/include/uapi/linux/prctl.h - Adjust filename] Signed-off-by: Ben Hutchings <ben@decadent.org.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
* | | | Merge LA.UM.7.5.2.r1-02900-8x96.0 of ↵Davide Garberi2019-05-23
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://source.codeaurora.org/quic/la/kernel/msm-4.4 into lineage-16.0 406cc39b36ea update markings as per reference 24fb5a925534 Merge changes Icd8b7e33,I275cb471,I7f7420c7,Ib8552e66 into kernel.lnx.4.4.r37-rel 0766f7d0f3a2 Merge "dsp: afe: check for minimum size before payload access" into kernel.lnx.4.4.r37-rel a6207a7ffe45 msm: camera_v2: handle the error value returned during get clock. 342c54c1fff1 msm: ais: handle the error value returned during get clock 82b8bf6d259a msm: camera : Lock Implementation for avoid race condition. 98ca69a73a10 msm: ais : Lock Implementation for avoid race condition 0e3021b2b072 dsp: afe: check for minimum size before payload access 73b996d01780 Merge 22dc337a69af6c8b2aceecb3cbaef9049ef4fb73 on remote branch 22dc337a69af Merge "msm: mdss: mdp: mixer allocation for pluggable primary display" 830b7b50b385 Merge "msm: kgsl: Fix race condition while making page as dirty" cd6e1cd22ba4 Merge "diag: Validate command length against size of command structure" 7939ca71f88f Merge "misc: ksbridge: Add support for sending uevent with pid/vid" a4b2d7442de2 Merge "usb: misc: lvstest: allow specifying port for compliance mode" 0052d7171569 Merge "usb: misc: lvstest: add entry to place port in compliance mode" 64baae1cd96f Merge "usb: xhci: Support enabling of compliance mode for xhci 1.1" 5ee084c81212 Merge "drm/msm/sde: fix null pointer dereference" 40adef7ded1b Merge "Merge android-4.4.179 (aab9adb) into msm-4.4" 061ce1d939fa diag: Validate command length against size of command structure 2b163b082a57 misc: ksbridge: Add support for sending uevent with pid/vid 1d02b55727d5 msm: kgsl: Fix race condition while making page as dirty adebb0daf71c drm/msm/sde: fix null pointer dereference 589a44d37aba Merge "icnss: Add a flag to indicate PDR" d5f5ce057085 usb: misc: lvstest: allow specifying port for compliance mode 210c76dde3d4 usb: misc: lvstest: add entry to place port in compliance mode b989396a449f usb: xhci: Support enabling of compliance mode for xhci 1.1 57cc803c86c0 Merge "defconfig: msm: Enable USB3 Link Layer test driver for 8996 Auto" d65b615af64f Merge "ARM: dts: msm: Add "qcom,core-dev-table" for msm8996 target" 34c8ac8b2bda Merge "soc: qcom: secure_buffer: Process large SG tables in batches" b08dd67c711f icnss: Add a flag to indicate PDR 32ebd2b51c3a ARM: dts: msm: Add "qcom,core-dev-table" for msm8996 target 680e896288b6 soc: qcom: secure_buffer: Process large SG tables in batches 43808cc02cbc Merge "msm: adm: validate ADSP payload size before access" f4d62ca185dd cnss2: Expose idle restart/shutdown APIs 5a03c1bc9c2b Merge "ARM: dts: msm: move bluetooth node under /vendor for 8996 platform" b5b335db32a1 drivers: qpnp-smbcharger: Fix USB3.0 device does not enumerate in SS mode 52fbc05fb3f3 ARM: dts: msm: move bluetooth node under /vendor for 8996 platform 325632da862b Merge android-4.4.179 (aab9adb) into msm-4.4 78a2fca7feac Merge "drm/msm: ekms: Wait for a vblank in ekms disable" 1a886ff9a1ed Merge "diag: Check buffer size against command structure size" 9a7a4b510d9f diag: Check buffer size against command structure size f175c863efb4 Merge "msm: ipa3: add check to load gsi fw once" 67fabb639087 msm: ipa3: add check to load gsi fw once 5b134f53b323 msm: adm: validate ADSP payload size before access 33ddfc515d05 Merge "msm: ipa: Move NAT invalid protocol define to uapi" aab9adb4b81b Merge 4.4.179 into android-4.4 ecfba02e8979 Merge "cfg80211/nl80211: Offload OWE processing to user space in AP mode" 744acb857e4b Merge "dsp: afe: check for payload size before payload access" f3cf97aa3cfd msm: ipa: Move NAT invalid protocol define to uapi f12b2d3f77a5 cnss2: Expose PCIe DRV connection status 641f454cb5de dsp: afe: check for payload size before payload access d9f2f007f3f0 Merge "diag: dci: Validate dci response length before parsing" 5875149a400a Linux 4.4.179 e6ca59daafd0 kernel/sysctl.c: fix out-of-bounds access when setting file-max 70a0882cd600 Revert "locking/lockdep: Add debug_locks check in __lock_downgrade()" abc81720ea87 ALSA: info: Fix racy addition/deletion of nodes 0e4d4e0d6ba9 mm/vmstat.c: fix /proc/vmstat format for CONFIG_DEBUG_TLBFLUSH=y CONFIG_SMP=n 4088997e5dc1 device_cgroup: fix RCU imbalance in error case 20fdfad30c43 sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup 568f6b28743c Revert "kbuild: use -Oz instead of -Os when using clang" 9090d691a874 mac80211: do not call driver wake_tx_queue op during reconfig e70a2d376c59 kprobes: Fix error check when reusing optimized probes abb5b93fe0f5 kprobes: Mark ftrace mcount handler functions nokprobe 3dda8d29b56e x86/kprobes: Verify stack frame on kretprobe bc76b595cd13 arm64: futex: Restore oldval initialization to work around buggy compilers 7977328f4265 crypto: x86/poly1305 - fix overflow during partial reduction f94135f92d97 ALSA: core: Fix card races between register and disconnect 0241c6f9f56c staging: comedi: ni_usb6501: Fix possible double-free of ->usb_rx_buf 9f2bf97bb6c3 staging: comedi: ni_usb6501: Fix use of uninitialized mutex 1d149c6cfcd1 staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf 32ae16ff1eaf staging: comedi: vmk80xx: Fix use of uninitialized semaphore dc4f96499d43 io: accel: kxcjk1013: restore the range after resume. 07921e3cb1ea iio: adc: at91: disable adc channel interrupt in timeout case c69e21be54b4 iio: ad_sigma_delta: select channel when reading register e20204c43c0b iio/gyro/bmg160: Use millidegrees for temperature scale eaa303a2d65d KVM: x86: Don't clear EFER during SMM transitions for 32-bit vCPU 83a98463d6f9 tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete 5721b1717bd6 modpost: file2alias: check prototype of handler 5a25b6f93f84 modpost: file2alias: go back to simple devtable lookup e9a60ab1609a crypto: crypto4xx - properly set IV after de- and encrypt faac81f7cb34 ipv4: ensure rcu_read_lock() in ipv4_link_failure() fbf569d2beee ipv4: recompile ip options in ipv4_link_failure b6d37bba0f7a tcp: tcp_grow_window() needs to respect tcp_space() b1aaee5a97c9 net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv dc20066a631c net: bridge: multicast: use rcu to access port list from br_multicast_start_querier 423ffcd5136c net: atm: Fix potential Spectre v1 vulnerabilities d8e18cccd25e bonding: fix event handling for stacked bonds 9ca0f944a76b appletalk: Fix compile regression 54a07fff4b21 ovl: fix uid/gid when creating over whiteout df57807765dd tpm/tpm_crb: Avoid unaligned reads in crb_recv() c947b45f2e0c include/linux/swap.h: use offsetof() instead of custom __swapoffset macro aaedb76c488e lib/div64.c: off by one in shift d49a75f5add4 appletalk: Fix use-after-free in atalk_proc_exit 4528b128bbbc ARM: 8839/1: kprobe: make patch_lock a raw_spinlock_t 3d1167107004 iommu/dmar: Fix buffer overflow during PCI bus notification cc8c23ad5ec8 crypto: sha512/arm - fix crash bug in Thumb2 build 8a2dd49a63c7 crypto: sha256/arm - fix crash bug in Thumb2 build 740562f32daa cifs: fallback to older infolevels on findfirst queryinfo retry c49c3925a846 ACPI / SBS: Fix GPE storm on recent MacBookPro's 1e3975db46da ARM: samsung: Limit SAMSUNG_PM_CHECK config option to non-Exynos platforms 3e56f3036b4d serial: uartps: console_setup() can't be placed to init section 045aac482ad9 f2fs: fix to do sanity check with current segment number 6891371a2d57 9p locks: add mount option for lock retry interval ff831803330c 9p: do not trust pdu content for stat item size ec759c0015fb rsi: improve kernel thread handling to fix kernel panic 48fda9500637 ext4: prohibit fstrim in norecovery mode 0f2d3133530a fix incorrect error code mapping for OBJECTID_NOT_FOUND 35ee305cfe4c x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return an error 158c4cb0d686 iommu/vt-d: Check capability before disabling protected memory 1a883611e2f2 x86/cpu/cyrix: Use correct macros for Cyrix calls on Geode processors c2dc2fdc0cd1 x86/hpet: Prevent potential NULL pointer dereference b17b42fbad1b perf tests: Fix a memory leak in test__perf_evsel__tp_sched_test() 98977a809cda perf tests: Fix a memory leak of cpu_map object in the openat_syscall_event_on_all_cpus test 8b89e3c3cf7f perf evsel: Free evsel->counts in perf_evsel__exit() f0023871b339 perf top: Fix error handling in cmd_top() 63e03efad5ec tools/power turbostat: return the exit status of a command 3a3e67537041 thermal/int340x_thermal: fix mode setting 25c001949c93 thermal/int340x_thermal: Add additional UUIDs 149f72ff296e ALSA: opl3: fix mismatch between snd_opl3_drum_switch definition and declaration 9bb0b8e34607 mmc: davinci: remove extraneous __init annotation b33c00770b36 IB/mlx4: Fix race condition between catas error reset and aliasguid flows 0a2741cd5269 ALSA: sb8: add a check for request_region 574469ec6dcf ALSA: echoaudio: add a check for ioremap_nocache 0e9bb07a374a ext4: report real fs size after failed resize d8ef8e9465ef ext4: add missing brelse() in add_new_gdb_meta_bg() e92dc325a560 perf/core: Restore mmap record type correctly 653ee8df1f32 PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller 34419534a70a xtensa: fix return_address e15f3c34844e sched/fair: Do not re-read ->h_load_next during hierarchical load calculation c082a57d41de xen: Prevent buffer overflow in privcmd ioctl 442ebc685261 arm64: futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value e9b63a38da24 ARM: dts: at91: Fix typo in ISC_D0 on PC9 39aecae01dd2 genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent() f449309b7f43 block: do not leak memory in bio_copy_user_iov() ad344fb86201 ASoC: fsl_esai: fix channel swap issue when stream starts 4e843163c6d9 include/linux/bitrev.h: fix constant bitrev ae9981cee7b3 ALSA: seq: Fix OOB-reads from strlcpy 3efb978c3c73 ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type 8ed95ff262aa net: ethtool: not call vzalloc for zero sized memory request 0ede14314f6d netns: provide pure entropy for net_hash_mix() 68337354043a tcp: Ensure DCTCP reacts to losses 03328716cb33 sctp: initialize _pad of sockaddr_in before copying to user memory 1edf53ecd2ae qmi_wwan: add Olicard 600 91d95c98c6c2 openvswitch: fix flow actions reallocation c4e97b06cfdc net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock(). a04dde4e15d7 ipv6: sit: reset ip header pointer in ipip6_rcv c0aeeafae944 ipv6: Fix dangling pointer when ipv6 fragment c9b31a7e6726 tty: ldisc: add sysctl to prevent autoloading of ldiscs c3e76f072adb tty: mark Siemens R3964 line discipline as BROKEN 780e236c3737 lib/string.c: implement a basic bcmp 7c45b45fd6e9 x86/vdso: Drop implicit common-page-size linker flag 79739ad2d0ac x86: vdso: Use $LD instead of $CC to link b79e268b1fb4 x86/build: Specify elf_i386 linker emulation explicitly for i386 objects a34640de4046 kbuild: clang: choose GCC_TOOLCHAIN_DIR not on LD 1eb40df35d99 binfmt_elf: switch to new creds when switching to new mm 7ad57b32aa08 drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers 04ce0e76959c dmaengine: tegra: avoid overflow of byte tracking 589562152f36 x86/build: Mark per-CPU symbols as absolute explicitly for LLD 517fbf72718e wlcore: Fix memory leak in case wl12xx_fetch_firmware failure f2606873984e regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting 98bbbf661567 media: s5p-jpeg: Check for fmt_ver_flag when doing fmt enumeration 421d2aae103c netfilter: physdev: relax br_netfilter dependency 10fc10c3270d dmaengine: imx-dma: fix warning comparison of distinct pointer types e5cb8ab4b0e0 hpet: Fix missing '=' character in the __setup() code of hpet_mmap_enable cdc7a66f679e soc/tegra: fuse: Fix illegal free of IO base address 407f1a8b8d7d hwrng: virtio - Avoid repeated init of completion a6adffa0fff4 media: mt9m111: set initial frame size other than 0x0 d1ba82ccffab tty: increase the default flip buffer limit to 2*640K d9c190a5ee92 ARM: avoid Cortex-A9 livelock on tight dmb loops c627e297b9b6 mt7601u: bump supported EEPROM version 5735cd4e0c78 soc: qcom: gsbi: Fix error handling in gsbi_probe() b396b5e89be6 ASoC: fsl-asoc-card: fix object reference leaks in fsl_asoc_card_probe 46ff76bd4ea1 cdrom: Fix race condition in cdrom_sysctl_register 6b8382afa7af fbdev: fbmem: fix memory access if logo is bigger than the screen 267da08ea979 bcache: improve sysfs_strtoul_clamp() 97f00d95dfb0 bcache: fix input overflow to sequential_cutoff d775179e00cd bcache: fix input overflow to cache set sysfs file io_error_halflife b25147b49301 ALSA: PCM: check if ops are defined before suspending PCM b67ef52116de ARM: 8833/1: Ensure that NEON code always compiles with Clang 7d4d46f51d6c kprobes: Prohibit probing on bsearch() f1289edae514 leds: lp55xx: fix null deref on firmware load failure abcbad869e68 media: mx2_emmaprp: Correct return type for mem2mem buffer helpers 0bc5f939031c media: s5p-g2d: Correct return type for mem2mem buffer helpers 9f127b7284eb media: s5p-jpeg: Correct return type for mem2mem buffer helpers 3967d2d6bcc9 media: sh_veu: Correct return type for mem2mem buffer helpers 853e3862a8d0 SoC: imx-sgtl5000: add missing put_device() 7a3626330297 perf test: Fix failure of 'evsel-tp-sched' test on s390 09a6db51dcb4 scsi: megaraid_sas: return error when create DMA pool failed 98f7f1cf74e4 IB/mlx4: Increase the timeout for CM cache f8d1bf871805 e1000e: Fix -Wformat-truncation warnings 3bd631e5360e mmc: omap: fix the maximum timeout setting 1c2bfc4636de ARM: 8840/1: use a raw_spinlock_t in unwind 2f36d3ea8c55 coresight: etm4x: Add support to enable ETMv4.2 2ad89a6a0dba scsi: core: replace GFP_ATOMIC with GFP_KERNEL in scsi_scan.c f3666bfc4bc4 usb: chipidea: Grab the (legacy) USB PHY by phandle first be8e9e9ebffb tools lib traceevent: Fix buffer overflow in arg_eval 2e5086f3ac6f fs: fix guard_bio_eod to check for real EOD errors 8f983d2cbfad cifs: Fix NULL pointer dereference of devname 4a430ac683b3 dm thin: add sanity checks to thin-pool and external snapshot creation 1605df0045d9 cifs: use correct format characters 1eaab115dc7c fs/file.c: initialize init_files.resize_wait 9b7e7899386f f2fs: do not use mutex lock in atomic context 6c96456d9302 ocfs2: fix a panic problem caused by o2cb_ctl b1399497b701 mm/slab.c: kmemleak no scan alien caches cb4d6cd27604 mm/vmalloc.c: fix kernel BUG at mm/vmalloc.c:512! 2ea83494ce11 mm/page_ext.c: fix an imbalance with kmemleak 4970a8ba94ca mm/cma.c: cma_declare_contiguous: correct err handling 722a15d798ff enic: fix build warning without CONFIG_CPUMASK_OFFSTACK cf503f1b938f sysctl: handle overflow for file-max 28833fee9f4a gpio: gpio-omap: fix level interrupt idling f7b7a59b47a0 tracing: kdb: Fix ftdump to not sleep 09f4e69e09f5 h8300: use cc-cross-prefix instead of hardcoding h8300-unknown-linux- f6e4bc5003ff CIFS: fix POSIX lock leak and invalid ptr deref a6efba2fc33b tty/serial: atmel: RS485 HD w/DMA: enable RX after TX is stopped 59ae59920af8 Bluetooth: Fix decrementing reference count twice in releasing socket 02bfc06ca2fa i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA b3b489eea284 mm: mempolicy: make mbind() return -EIO when MPOL_MF_STRICT is specified a526c14d841b tty/serial: atmel: Add is_half_duplex helper 6f88ce1ff225 lib/int_sqrt: optimize initial value compute 3f44dacd111a ext4: cleanup bh release code in ext4_ind_remove_space() 20df60004a3a arm64: debug: Ensure debug handlers check triggering exception level a930f8ce2003 arm64: debug: Don't propagate UNKNOWN FAR into si_code for debug signals c1cd71e6ee5e diag: dci: Validate dci response length before parsing 2f026ab7c4c7 Merge "msm: wlan: Update regulatory rules for JM" cb95c3b72b79 msm: wlan: Update regulatory rules for JM ef08a221c531 Merge "msm: wlan: Update regulatory database" 220e29e977aa msm: wlan: Update regulatory database d7d16e7e87d2 Merge "defconfig: msm: Enable MFSE QMI client driver on automotive" 3cb076a33884 Merge "soc: qcom: Add QMI client driver for MFSE service" c5319c46a1c1 Merge "ARM: dts: msm: Limit USB3 maximum speed to high for MSM8996 ADP" 1ba1a2f71fc1 defconfig: msm: Enable USB3 Link Layer test driver for 8996 Auto 748303a5169c Merge "dsp: q6core: validate payload size before memory copy" 9f6ce3043e2e Merge "msm: ext_disp: re-initialize hpd completion before signaling events" d3a9050f4f7f msm: ext_disp: re-initialize hpd completion before signaling events 3d1854afebdb Merge "diag: Prevent out of bound access while getting build mask" 57a9ae0f5688 Merge "diag: Check command size against the minimum before parsing" 5c6e98d4e4da Merge "diag: dci: Add missing length check before parsing the buffer" ef3ade93af0f diag: Prevent out of bound access while getting build mask 337a4a87989e diag: Check command size against the minimum before parsing c2b12fecfa29 diag: dci: Add missing length check before parsing the buffer 0ef01d4c95a8 dsp: q6core: validate payload size before memory copy 38d4aa7f0277 msm: For camera driver Adding null checks to uninitialize 147ed3c774d9 Merge "Revert "cfg80211/nl80211: Offload OWE processing to user space"" 523d657b6d08 drm/msm: ekms: Wait for a vblank in ekms disable 633bf5e4dbca cfg80211/nl80211: Offload OWE processing to user space in AP mode 8a44273ed583 Revert "cfg80211/nl80211: Offload OWE processing to user space" f555a6f2d830 ARM: dts: msm: Limit USB3 maximum speed to high for MSM8996 ADP d680847c5813 defconfig: msm: Enable MFSE QMI client driver on automotive a419e9823ca9 soc: qcom: Add QMI client driver for MFSE service 74f9ab0d3ed3 Make arm64 serial port config compatible with crosvm e85ceffc863d msm: mdss: mdp: mixer allocation for pluggable primary display 07797f0ce789 Fix merge issue with 4.4.178 abe4979abd87 Fix merge issue with 4.4.177 aa922bed25d4 ANDROID: cuttlefish_defconfig: Enable CONFIG_OVERLAY_FS Change-Id: I0eca09f00b012afd72006541b20fb23969c4531e
| * | | Merge "msm: ipa: Move NAT invalid protocol define to uapi"Linux Build Service Account2019-04-30
| |\ \ \
| | * | | msm: ipa: Move NAT invalid protocol define to uapiAmir Levy2019-04-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | NAT invalid protocol is needed by user space process. Move it to uapi to make it accessible to user space. Change-Id: I4d1700176483c93f78f48979d602f7568867b378 Acked-by: Michal Amsterdam <mamsterd@qti.qualcomm.com> Signed-off-by: Amir Levy <alevy@codeaurora.org>
| * | | | cfg80211/nl80211: Offload OWE processing to user space in AP modeSunil Dutt2019-04-22
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This interface allows the host driver to offload OWE processing to user space. This intends to support OWE (Opportunistic Wireless Encryption) AKM by the drivers that implement SME but rely on the user space for the cryptographic/OWE processing in AP mode. Such drivers are not capable of processing/deriving the DH IE. A new NL80211 command - NL80211_CMD_UPDATE_OWE_INFO is introduced to send the request/event between the host driver and user space. Driver shall provide the OWE info (MAC address and DH IE) of the peer to user space for cryptographic processing of the DH IE through the event. Accordingly, the user space shall update the OWE info/DH IE to the driver. Following is the sequence in AP mode for OWE authentication. Driver passes the OWE info obtained from the peer in the Association Request to the user space through the event cfg80211_update_owe_info_event. User space shall process the OWE info received and generate new OWE info. This OWE info is passed to the driver through NL80211_CMD_UPDATE_OWE_INFO request. Driver eventually uses this OWE info to send the Association Response to the peer. This OWE info in the command interface carries the IEs that include PMKID of the peer if the PMKSA is still valid or an updated DH IE for generating a new PMKSA with the peer. Signed-off-by: Liangwei Dong <liangwei@codeaurora.org> Signed-off-by: Sunil Dutt <usdutt@codeaurora.org> Signed-off-by: Johannes Berg <johannes.berg@intel.com> Git-commit: cb74e9775871f8c82a1297cf76209f10ab5bbe3d Git-repo: git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next.git Change-Id: I3b0391cd6da1ff033f4d8383013deb4ad5ecbe64 CRs-Fixed: 2414077 Signed-off-by: Srinivas Dasari <dasaris@codeaurora.org> Signed-off-by: Min Liu <minliu@codeaurora.org>
| * | | Revert "cfg80211/nl80211: Offload OWE processing to user space"Min Liu2019-04-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit f57fa308b0d8330580a932dcc5c460e9d2352284. bssid in cfg80211_update_owe_info need to be changed to peer. Change-Id: I7cf248926fe1b86c3a75d5441955ce4cb60c91f7 CRs-Fixed: 2414077 Signed-off-by: Min Liu <minliu@codeaurora.org>
| * | | Merge android-4.4.177 (0c3b8c4) into msm-4.4Srinivasarao P2019-03-25
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-0c3b8c4 Linux 4.4.177 KVM: X86: Fix residual mmio emulation request to userspace KVM: nVMX: Ignore limit checks on VMX instructions using flat segments KVM: nVMX: Sign extend displacements of VMX instr's mem operands drm/radeon/evergreen_cs: fix missing break in switch statement media: uvcvideo: Avoid NULL pointer dereference at the end of streaming rcu: Do RCU GP kthread self-wakeup from softirq and interrupt PM / wakeup: Rework wakeup source timer cancellation nfsd: fix wrong check in write_v4_end_grace() nfsd: fix memory corruption caused by readdir NFS: Don't recoalesce on error in nfs_pageio_complete_mirror() NFS: Fix an I/O request leakage in nfs_do_recoalesce md: Fix failed allocation of md_register_thread perf intel-pt: Fix overlap calculation for padding perf auxtrace: Define auxtrace record alignment perf intel-pt: Fix CYC timestamp calculation after OVF NFS41: pop some layoutget errors to application dm: fix to_sector() for 32bit ARM: s3c24xx: Fix boolean expressions in osiris_dvs_notify powerpc/83xx: Also save/restore SPRG4-7 during suspend powerpc/powernv: Make opal log only readable by root powerpc/wii: properly disable use of BATs when requested. powerpc/32: Clear on-stack exception marker upon exception return jbd2: fix compile warning when using JBUFFER_TRACE jbd2: clear dirty flag when revoking a buffer from an older transaction serial: 8250_pci: Have ACCES cards that use the four port Pericom PI7C9X7954 chip use the pci_pericom_setup() serial: 8250_pci: Fix number of ports for ACCES serial cards perf bench: Copy kernel files needed to build mem{cpy,set} x86_64 benchmarks i2c: tegra: fix maximum transfer size parport_pc: fix find_superio io compare code, should use equal test. intel_th: Don't reference unassigned outputs kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv mm/vmalloc: fix size check for remap_vmalloc_range_partial() dmaengine: usb-dmac: Make DMAC system sleep callbacks explicit clk: ingenic: Fix round_rate misbehaving with non-integer dividers ext2: Fix underflow in ext2_max_size() ext4: fix crash during online resizing cpufreq: pxa2xx: remove incorrect __init annotation cpufreq: tegra124: add missing of_node_put() crypto: pcbc - remove bogus memcpy()s with src == dest Btrfs: fix corruption reading shared and compressed extents after hole punching btrfs: ensure that a DUP or RAID1 block group has exactly two stripes m68k: Add -ffreestanding to CFLAGS scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock scsi: virtio_scsi: don't send sc payload with tmfs s390/virtio: handle find on invalid queue gracefully clocksource/drivers/exynos_mct: Clear timer interrupt when shutdown clocksource/drivers/exynos_mct: Move one-shot check from tick clear to ISR regulator: s2mpa01: Fix step values for some LDOs regulator: s2mps11: Fix steps for buck7, buck8 and LDO35 ACPI / device_sysfs: Avoid OF modalias creation for removed device tracing: Do not free iter->trace in fail path of tracing_open_pipe() CIFS: Fix read after write for files with read caching crypto: arm64/aes-ccm - fix logical bug in AAD MAC handling stm class: Prevent division by zero tmpfs: fix uninitialized return value in shmem_link net: set static variable an initial value in atl2_probe() mac80211_hwsim: propagate genlmsg_reply return code phonet: fix building with clang ARC: uacces: remove lp_start, lp_end from clobber list tmpfs: fix link accounting when a tmpfile is linked in arm64: Relax GIC version check during early boot ASoC: topology: free created components in tplg load error net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe() pinctrl: meson: meson8b: fix the sdxc_a data 1..3 pins net: systemport: Fix reception of BPDUs scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task assoc_array: Fix shortcut creation ARM: 8824/1: fix a migrating irq bug when hotplug cpu Input: st-keyscan - fix potential zalloc NULL dereference i2c: cadence: Fix the hold bit setting Input: matrix_keypad - use flush_delayed_work() ARM: OMAP2+: Variable "reg" in function omap4_dsi_mux_pads() could be uninitialized s390/dasd: fix using offset into zero size array error gpu: ipu-v3: Fix CSI offsets for imx53 gpu: ipu-v3: Fix i.MX51 CSI control registers offset crypto: ahash - fix another early termination in hash walk crypto: caam - fixed handling of sg list stm class: Fix an endless loop in channel allocation ASoC: fsl_esai: fix register setting issue in RIGHT_J mode 9p/net: fix memory leak in p9_client_create 9p: use inode->i_lock to protect i_size_write() under 32-bit media: videobuf2-v4l2: drop WARN_ON in vb2_warn_zero_bytesused() It's wrong to add len to sector_nr in raid10 reshape twice fs/9p: use fscache mutex rather than spinlock ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against Liquid Saffire 56 tcp/dccp: remove reqsk_put() from inet_child_forget() gro_cells: make sure device is up in gro_cells_receive() net/hsr: fix possible crash in add_timer() vxlan: Fix GRO cells race condition between receive and link delete vxlan: test dev->flags & IFF_UP before calling gro_cells_receive() ipvlan: disallow userns cap_net_admin to change global mode/flags missing barriers in some of unix_sock ->addr and ->path accesses net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255 mdio_bus: Fix use-after-free on device_register fails net/x25: fix a race in x25_bind() net/mlx4_core: Fix qp mtt size calculation net/mlx4_core: Fix reset flow when in command polling mode tcp: handle inet_csk_reqsk_queue_add() failures route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race ravb: Decrease TxFIFO depth of Q3 and Q2 to one pptp: dst_release sk_dst_cache in pptp_sock_destruct net/x25: reset state in x25_connect() net/x25: fix use-after-free in x25_device_event() net: sit: fix UBSAN Undefined behaviour in check_6rd net: hsr: fix memory leak in hsr_dev_finalize() l2tp: fix infoleak in l2tp_ip6_recvmsg() KEYS: restrict /proc/keys by credentials at open time netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options netfilter: nfnetlink_acct: validate NFACCT_FILTER parameters netfilter: nfnetlink_log: just returns error for unknown command netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES udplite: call proper backlog handlers ARM: dts: exynos: Do not ignore real-world fuse values for thermal zone 0 on Exynos5420 Revert "x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls" ARM: dts: exynos: Add minimal clkout parameters to Exynos3250 PMU futex,rt_mutex: Restructure rt_mutex_finish_proxy_lock() iscsi_ibft: Fix missing break in switch statement Input: elan_i2c - add id for touchpad found in Lenovo s21e-20 Input: wacom_serial4 - add support for Wacom ArtPad II tablet MIPS: Remove function size check in get_frame_info() perf symbols: Filter out hidden symbols from labels s390/qeth: fix use-after-free in error path dmaengine: dmatest: Abort test in case of mapping error dmaengine: at_xdmac: Fix wrongfull report of a channel as in use irqchip/mmp: Only touch the PJ4 IRQ & FIQ bits on enable/disable ARM: pxa: ssp: unneeded to free devm_ allocated data autofs: fix error return in autofs_fill_super() autofs: drop dentry reference only when it is never used fs/drop_caches.c: avoid softlockups in drop_pagecache_sb() mm, memory_hotplug: test_pages_in_a_zone do not pass the end of zone mm, memory_hotplug: is_mem_section_removable do not pass the end of a zone x86_64: increase stack size for KASAN_EXTRA x86/kexec: Don't setup EFI info if EFI runtime is not enabled cifs: fix computation for MAX_SMB2_HDR_SIZE platform/x86: Fix unmet dependency warning for SAMSUNG_Q10 scsi: libfc: free skb when receiving invalid flogi resp nfs: Fix NULL pointer dereference of dev_name gpio: vf610: Mask all GPIO interrupts net: stmmac: dwmac-rk: fix error handling in rk_gmac_powerup() net: hns: Fix wrong read accesses via Clause 45 MDIO protocol net: altera_tse: fix msgdma_tx_completion on non-zero fill_level case xtensa: SMP: limit number of possible CPUs by NR_CPUS xtensa: SMP: mark each possible CPU as present xtensa: smp_lx200_defconfig: fix vectors clash xtensa: SMP: fix secondary CPU initialization xtensa: SMP: fix ccount_timer_shutdown iommu/amd: Fix IOMMU page flush when detach device from a domain ipvs: Fix signed integer overflow when setsockopt timeout IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM perf tools: Handle TOPOLOGY headers with no CPU vti4: Fix a ipip packet processing bug in 'IPCOMP' virtual tunnel media: uvcvideo: Fix 'type' check leading to overflow ip6mr: Do not call __IP6_INC_STATS() from preemptible context net: dsa: mv88e6xxx: Fix u64 statistics netlabel: fix out-of-bounds memory accesses hugetlbfs: fix races and page leaks during migration MIPS: irq: Allocate accurate order pages for irq stack applicom: Fix potential Spectre v1 vulnerabilities x86/CPU/AMD: Set the CPB bit unconditionally on F17h net: phy: Micrel KSZ8061: link failure after cable connect net: avoid use IPCB in cipso_v4_error net: Add __icmp_send helper. xen-netback: fix occasional leak of grant ref mappings under memory pressure net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails bnxt_en: Drop oversize TX packets to prevent errors. team: Free BPF filter when unregistering netdev sky2: Disable MSI on Dell Inspiron 1545 and Gateway P-79 net-sysfs: Fix mem leak in netdev_register_kobject staging: lustre: fix buffer overflow of string buffer isdn: isdn_tty: fix build warning of strncpy ncpfs: fix build warning of strncpy sockfs: getxattr: Fail with -EOPNOTSUPP for invalid attribute names cpufreq: Use struct kobj_attribute instead of struct global_attr USB: serial: ftdi_sio: add ID for Hjelmslund Electronics USB485 USB: serial: cp210x: add ID for Ingenico 3070 USB: serial: option: add Telit ME910 ECM composition x86/uaccess: Don't leak the AC flag into __put_user() value evaluation mm: enforce min addr even if capable() in expand_downwards() mmc: spi: Fix card detection during probe powerpc: Always initialize input array when calling epapr_hypercall() KVM: arm/arm64: Fix MMIO emulation data handling arm/arm64: KVM: Feed initialized memory to MMIO accesses KVM: nSVM: clear events pending from svm_complete_interrupts() when exiting to L1 cfg80211: extend range deviation for DMG mac80211: don't initiate TDLS connection if station is not associated to AP ibmveth: Do not process frames after calling napi_reschedule net: altera_tse: fix connect_local_phy error path scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state() serial: fsl_lpuart: fix maximum acceptable baud rate with over-sampling mac80211: fix miscounting of ttl-dropped frames ARC: fix __ffs return value to avoid build warnings ASoC: imx-audmux: change snprintf to scnprintf for possible overflow ASoC: dapm: change snprintf to scnprintf for possible overflow usb: gadget: Potential NULL dereference on allocation error usb: dwc3: gadget: Fix the uninitialized link_state when udc starts thermal: int340x_thermal: Fix a NULL vs IS_ERR() check ALSA: compress: prevent potential divide by zero bugs ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field drm/msm: Unblock writer if reader closes file scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached libceph: handle an empty authorize reply Revert "bridge: do not add port to router list when receives query with source 0.0.0.0" ARCv2: Enable unaligned access in early ASM code net/mlx4_en: Force CHECKSUM_NONE for short ethernet frames sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach() team: avoid complex list operations in team_nl_cmd_options_set() net/packet: fix 4gb buffer limit due to overflow check batman-adv: fix uninit-value in batadv_interface_tx() KEYS: always initialize keyring_index_key::desc_len KEYS: user: Align the payload buffer RDMA/srp: Rework SCSI device reset handling isdn: avm: Fix string plus integer warning from Clang leds: lp5523: fix a missing check of return value of lp55xx_read atm: he: fix sign-extension overflow on large shift isdn: i4l: isdn_tty: Fix some concurrency double-free bugs MIPS: jazz: fix 64bit build scsi: isci: initialize shost fully before calling scsi_add_host() scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param MIPS: ath79: Enable OF serial ports in the default config net: hns: Fix use after free identified by SLUB debug mfd: mc13xxx: Fix a missing check of a register-read failure mfd: wm5110: Add missing ASRC rate register mfd: qcom_rpm: write fw_version to CTRL_REG mfd: ab8500-core: Return zero in get_register_interruptible() mfd: db8500-prcmu: Fix some section annotations mfd: twl-core: Fix section annotations on {,un}protect_pm_master mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering mfd cells KEYS: allow reaching the keys quotas exactly numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES ceph: avoid repeatedly adding inode to mdsc->snap_flush_list Revert "ANDROID: arm: process: Add display of memory around registers when displaying regs." ANDROID: mnt: Propagate remount correctly ANDROID: cuttlefish_defconfig: Add support for AC97 audio ANDROID: overlayfs: override_creds=off option bypass creator_cred FROMGIT: binder: create node flag to request sender's security context Conflicts: arch/arm/kernel/irq.c drivers/media/v4l2-core/videobuf2-v4l2.c sound/core/compress_offload.c Change-Id: I998f8d53b0c5b8a7102816034452b1779a3b69a3 Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
* | | | hdmi: fix header guardJean-Baptiste Theou2019-04-20
| | | | | | | | | | | | | | | | | | | | Change-Id: I9ec7e1a01a0023be3c6a73c2f40e13a7e632d76e Signed-off-by: celtare21 <celtare21@gmail.com>
* | | | BACKPORT: cfg80211: remove enum ieee80211_bandJohannes Berg2019-04-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This enum is already perfectly aliased to enum nl80211_band, and the only reason for it is that we get IEEE80211_NUM_BANDS out of it. There's no really good reason to not declare the number of bands in nl80211 though, so do that and remove the cfg80211 one. Change-Id: Ifc56e6297146c9095432b757fabd0c463d7cc583 Signed-off-by: Johannes Berg <johannes.berg@intel.com> Bug: 62057517 Signed-off-by: Nick Desaulniers <ndesaulniers@google.com> Signed-off-by: Nathan Chancellor <natechancellor@gmail.com>
* | | | Merge LA.UM.7.5.2.r1-02000-8x96.0 of ↵Davide Garberi2019-04-11
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://source.codeaurora.org/quic/la/kernel/msm-4.4 into lineage-16.0 df2a64cb8c94 msm: asm: validate ADSP data before access 2ab3115b2ea4 fbdev: msm: remove check for rgb source format 3eb07ce90d30 ASoC: msm: Add AVS version check for ADSP 2.7. 16a91e93ed7b ASoC: msm: Add support for AVS version check. fe1277ee048e Merge commit 'e764712fd7f6db7921dc4b3dbbf772d613177633' into HEAD e764712fd7f6 Merge "ARM: dts: msm: add device tree overlay for 8996 V3" 305eb0fc2672 Merge "Revert "tty: msm: reduce pseudo terminal enumeration count"" d03192eb14fb ARM: dts: msm: add device tree overlay for 8996 V3 1271992594e9 Merge "ARM: dts: msm: add DTBO support for MSM8996pro CDP board" eba53bd21a57 Merge "apr: msm: fix compilation for non glink targets" b14a860906a2 Merge "cnss: Enable cnss_msm_pcie_pm_control" a526edca0eb8 apr: msm: fix compilation for non glink targets 48f805d3dda1 ARM: dts: msm: add DTBO support for MSM8996pro CDP board b7d9f06c2f78 ARM: dts: msm: add DTBO support for APQ8096pro CDP board 7ca55cc70040 cnss: Enable cnss_msm_pcie_pm_control da44b5842fe5 ion: fix system secure force alloc 0a0147a03eea Merge "msm: ipa: fix to validate the ioctl WAN_IOC_SEND_LAN_CLIENT_MSG params" 004a90d2203a Merge "ARM: dts: msm: add DTBO support for MSM ADP LITE board" 1a60823ae23d Merge "ARM: dts: msm: add DTBO support for APQ ADP board" ae82de33ed67 msm: ipa: fix to validate the ioctl WAN_IOC_SEND_LAN_CLIENT_MSG params 7a4c37e16d1d mmc: host: Cancel clock gating work in suspend 9280a655b9c1 Merge "icnss: Add support for graceful shutdown" a635a6f9b10e Merge "soc: qcom: hab: unify variable type to avoid implicit conversion" 19b117fed94f Merge "msm: kgsl: Limit log frequency in case of context count maxed out" 1422be08207c Merge "Revert "ASoC: msm: Add support for AVS version check"" a26e07ee16bc Merge "defconfig: msm-auto-gvm: reduce pseudo terminal enumeration count" 8fb70d9047b0 msm: kgsl: Limit log frequency in case of context count maxed out f546088ef813 Merge "cfg80211: indicate support for DH IE update" e011552eeeaf Merge "cfg80211/nl80211: Offload OWE processing to user space" ba8736dd2318 Merge "ARM: dts: msm: Update RX and TX data lines for QUAT_MI2S" 15737accbd92 Merge "ASoC: msm: Enable QUAT_MI2S and SEC_MI2S interface" c1372e642e5d Merge "cnss2: Add support for QCN7605 ver 2 usb device support" 8d4a9db1aa01 dsp: validate token before usage as array index 8e839de595c6 cnss2: Add support for QCN7605 ver 2 usb device support 65a54cf546e3 Merge "diag: dci: Prevent task deallocation and possible resource leak" 032f9c9018b9 Merge "dsp: q6voice: Check size of shared memory buffer before access" 7a9806a85bb5 Merge "cnss2: power up & power down during reg and unreg" 71da316a6e11 Merge "drm: msm: sde: add splash handoff support for shared display" 7c2a9786a2e3 Merge "msm: adsprpc: restrict user apps from sending kernel RPC messages" 8dd97da24d98 Revert "tty: msm: reduce pseudo terminal enumeration count" 19d973d30d64 Revert "ASoC: msm: Add support for AVS version check" 7e5a6acb859e Revert "ASoC: msm: Add AVS version check for ADSP 2.7". fbc5d8ae4062 icnss: Add support for graceful shutdown a8e7641c2292 Merge "ARM: dts: msm: Add HDR support for sharp panel" 11685796a7ce Merge "AndroidKernel: Use host machine tools" e47cd28f0329 Merge "ARM: dts: msm: Modify memory allocation for diag" 1cae0c6ed9ad ASoC: msm: Enable QUAT_MI2S and SEC_MI2S interface e7481adc1998 ARM: dts: msm: Update RX and TX data lines for QUAT_MI2S e556e69bfb91 Merge "soc: qcom: qmi_encdec: Restrict string length in decode" 4a902c0e6b71 diag: dci: Prevent task deallocation and possible resource leak c397cb9371b8 cfg80211: indicate support for DH IE update ac67229d0e34 soc: qcom: hab: unify variable type to avoid implicit conversion e5a6a48ac3cc msm: adsprpc: restrict user apps from sending kernel RPC messages 88d22796e16c cnss2: power up & power down during reg and unreg 2a8658699711 ARM: dts: msm: add DTBO support for MSM ADP LITE board 864ceebd72e5 ARM: dts: msm: add DTBO support for MSM ADP board f8467fdb32f8 ARM: dts: msm: add DTBO support for APQ ADP LITE board 5e3a0c31b88f ARM: dts: msm: add DTBO support for APQ ADP board f57fa308b0d8 cfg80211/nl80211: Offload OWE processing to user space 1d932c57e221 Merge "dsp: codecs: fix range check for audio buffer copying" c83ce01ce1f0 drm: msm: sde: add splash handoff support for shared display 596290e69099 AndroidKernel: Use host machine tools dbf205bb11e2 Merge "qdsp6v2: apr: check for packet size to header size comparison" 9ab453c8c302 dsp: codecs: fix range check for audio buffer copying 961232b0344a ARM: dts: msm: Modify memory allocation for diag 255838278aa3 Merge "soc: qcom: subsystem_notif_virt: Add support for GHS platform" c13862478eb0 Merge "ARM: dts: msm: add dtbo support for MSM8996 ufs device" e18aa7ed0031 ARM: dts: msm: Add HDR support for sharp panel 6e1b880a3e25 ARM: dts: msm: add dtbo support for MSM8996 ufs device 4f5103fd124a msm: kgsl: Correctly limit max number of contexts per process 0a9512706151 soc: qcom: subsystem_notif_virt: Add support for GHS platform cbbe494b0cb5 Merge "ARM: dts: msm: add plane reservation" 9c976729a6fc Merge "drm: msm: sde: reduce black screen duration from null commit" 9945ff0e58f6 defconfig: msm-auto-gvm: reduce pseudo terminal enumeration count db3b23f94285 dsp: q6voice: Check size of shared memory buffer before access caf53b2661cf soc: qcom: qmi_encdec: Restrict string length in decode b442f93cf317 Merge "Revert "drm: msm: Enable asynchronous driver probing"" 92f978aeb5ea Revert "drm: msm: Enable asynchronous driver probing" 733f5a1d1d7d Merge "ASoC: msm: Add AVS version check for ADSP 2.7" 914ff0d90ac5 Merge "Merge android-4.4.176 (cf84cdc) into msm-4.4" 52df3df93df4 Merge "drm/msm: set avmute only if encryption is enabled" 20c0cacb28e9 ASoC: msm: Add AVS version check for ADSP 2.7 6a1198af61ce qdsp6v2: apr: check for packet size to header size comparison f843cadcd582 Merge "defconfig: msm8996: Enable and disable few configs" 82907174ca84 drm/msm: set avmute only if encryption is enabled bd50e3b8b073 defconfig: msm8996: Enable and disable few configs 567c084d6267 Merge android-4.4.176 (cf84cdc) into msm-4.4 5cc972f3a237 ARM: dts: msm: add plane reservation 4a0416cb5eef drm: msm: sde: reduce black screen duration from null commit
| * | | cfg80211/nl80211: Offload OWE processing to user spaceSunil Dutt2019-03-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This interface allows the host driver to offload OWE processing to user space. This intends to support OWE/Enhanced Open AKM by the host drivers that implement SME but rely on the user space for the crypotographic/OWE processing.Such drivers are not capable of processing/deriving the DH IE's. This interface acts as both the event from the driver to userspace and a command from userspace to the driver. Host driver shall use the event to notify the OWE info of the peer to the userspace for the cryptographic processing of the DH ie's. Accordingly, the userspace shall update the OWE info/DH ie's to the host driver corresponding to the peer. Above sequence aims for the AP mode where the event carries the OWE info of the peer(STA) obtained in the Assoc Request. The request interface from the userspace shall update the OWE info to the host driver, which is used to send the Assoc response to the peer. This OWE info in the command interface shall contain the ie's which either include the pmkid of the peer if the PMKSA is still valid or an updated DH ie's for generating a new PMKSA with the peer. Change-Id: Id5a2e800bdae1ea31a20a062d012cc33e5a3c6a3 CRs-Fixed: 2414077 Signed-off-by: Liangwei Dong <liangwei@codeaurora.org> Signed-off-by: Sunil Dutt <usdutt@codeaurora.org>
* | | | camera_v2: Import flashlight control and some edits from ZUKYaroST122019-03-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Striped version of https://github.com/YaroST12/Z2_PLUS_Kernel_EAS/commit/8d54fad0d22bd33ebebbbbed862b9dbaf4a1ff7a Signed-off-by: YaroST12 <yaro330@gmail.com> Signed-off-by: Subhajeet Muhuri <kenny3fcb@gmail.com> Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* | | | Revert "msm: camera: isp: Handle frame drop due to delay"Yaroslav Furman2019-03-23
| | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 5bf83ce8c3f95be88cb8f16324b5863ffc5d5697. Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* | | | msm: camera: ispif: fix wrong payload size errorYaroslav Furman2019-03-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Userspace expects msm_ispif_param_data_ext to have only 3 entries in it. Squash of following commits: commit e3a409b5e55f17a982c879db1a4ba23d8ed87cb4 (HEAD -> 4.4-eas-1.4) Author: Yaroslav Furman <yaro330@gmail.com> Date: Wed Jan 9 12:47:38 2019 +0300 Revert "msm: camera: ispif: adds 3D support" This reverts commit cea9ac19b93db10dd5d40367d6b09d46f6dd8c3a. commit 388522121977c93c1ec4f65c23740040a39c07ba Author: Yaroslav Furman <yaro330@gmail.com> Date: Wed Jan 9 12:46:56 2019 +0300 Revert "msm: camera: ispif: extend interface with line width" This reverts commit cb9a11cd759f1d3348b0f3deb296eb415619d06f. Signed-off-by: Yaroslav Furman <yaro330@gmail.com> Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* | | | camera_v2: Squash reverts to make ZUK's camera working for newer CAF tagsSubhajeet Muhuri2019-03-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Squash of: commit 9c909f4a62201b2ebb0ba56038d31bb85ae55d81 Author: Subhajeet Muhuri <kenny3fcb@gmail.com> Date: Sun Oct 28 14:47:09 2018 +0100 Revert "msm: camera: Add laser LED support for depth sensor" * "Camera error: Can't connect to the camera" This reverts commit 63f5792c5c6a8de2e40a9eee1195dfa264ff9431. Signed-off-by: Davide Garberi <dade.garberi@gmail.com> commit f7229d06853654871e970aa7bf604b01f38c3d37 Author: Subhajeet Muhuri <kenny3fcb@gmail.com> Date: Thu Oct 11 20:21:32 2018 +0530 Revert "msm: camera: Bypass redundant creation of video node in stereo" * Camera crashes upon launching This reverts commit f977e44aeaf5da07338a4649caa45367461226f0. Signed-off-by: Davide Garberi <dade.garberi@gmail.com> commit b0b964a9b6714ee4ff6af4e7f587f99921e3312a Author: YaroST12 <yaro330@gmail.com> Date: Sat Oct 6 18:36:18 2018 +0530 Revert "msm: cpp: Query buffer from buffer manager based on index" * Breaks slow motion video recording This reverts commit ddff1a93bac277b1a0ba14c601d5236c3c36365d. Signed-off-by: Davide Garberi <dade.garberi@gmail.com> commit 5e1c739e4622428fa0b8fd9350946c31d2424b8e Author: Davide Garberi <dade.garberi@gmail.com> Date: Sun Oct 28 14:32:43 2018 +0100 Revert "msm: camera: Framedrop notification" This reverts commit 5925180360bca209c21e9271e277caaca68bcad5. Signed-off-by: Davide Garberi <dade.garberi@gmail.com> commit 0ef5dc40955cd7946f0a851feda516c34dc40d6d Author: YaroST12 <yaro330@gmail.com> Date: Sat Oct 6 18:31:20 2018 +0530 Revert "msm: camera: sensor: Adapting sensor driver to soc layer" * Kernel panics at boot This reverts commit 6b99b4c9a1706f8f7f1745af97e0f4bddecf168b. Signed-off-by: Davide Garberi <dade.garberi@gmail.com> commit 1da8c59614f005d524455147fd78fc5f32cfa33b Author: Subhajeet Muhuri <kenny3fcb@gmail.com> Date: Fri Oct 5 12:24:29 2018 +0530 Revert "msm: camera: sensor: Updating soc layer clock API for i2c drivers" * Required for the proper revert of 6b99b4c This reverts commit a4663702036e6b0ae9b82691027d9913d65d7a02. Signed-off-by: Davide Garberi <dade.garberi@gmail.com> commit 1b138397ea01ae70f653baf6c812fb5748b3783b Author: Subhajeet Muhuri <kenny3fcb@gmail.com> Date: Sat Oct 6 18:19:19 2018 +0530 Revert "msm: camera: Add regulator enable and disable independent of CSID" * Required for the proper revert of 6b99b4c This reverts commit fd39134867896ec5c28ce348816e31e7785e06ba. Signed-off-by: Davide Garberi <dade.garberi@gmail.com> commit 12e0c65509260092e8c3f22717080427a78c9469 Author: Subhajeet Muhuri <kenny3fcb@gmail.com> Date: Sat Oct 6 18:16:32 2018 +0530 Revert "msm: camera: Add regulator enable and disable in csiphy" * Required for the proper revert of 6b99b4c This reverts commit d3e47e331617af3c87138bd205e65c6fa1a1bca7. Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* | | | mdss: fbdev: Import Zuk z2 row drivers changesDavide Garberi2019-03-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * This is needed to make the display turn on after turning it off * All of this isn't needed at all on z2_plus Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* | | | drivers: import zuk sound changesFaiz Authar2019-03-19
| | | | | | | | | | | | | | | | | | | | Signed-off-by: dd3boh <dade.garberi@gmail.com> Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* | | | include: add key_nav and gestureCallMESuper2019-03-19
| | | | | | | | | | | | | | | | | | | | Change-Id: Icd57ecad17abea47cf1c939cde45ea8f4dc3e503 Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
* | | | Merge android-4.4 of https://github.com/aosp-mirror/kernel_common into ↵Davide Garberi2019-03-19
|\ \ \ \ | |/ / / |/| / / | |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | rebase-4.4-8996 49293dce7b72 ANDROID: mnt: Propagate remount correctly bf53364cba2f ANDROID: cuttlefish_defconfig: Add support for AC97 audio f44df02cd202 ANDROID: overlayfs: override_creds=off option bypass creator_cred 0272cd402b73 FROMGIT: binder: create node flag to request sender's security context cf84cdc1d2b5 Merge 4.4.176 into android-4.4 af13f43f01a3 Linux 4.4.176 49e1a9d1169a KVM: VMX: Fix x2apic check in vmx_msr_bitmap_mode() 94801fd5ab23 ax25: fix possible use-after-free c532eb1d4527 mISDN: fix a race in dev_expire_timer() 82379cf03bee net/x25: do not hold the cpu too long in x25_new_lci() c78c9f52afe5 mfd: as3722: Mark PM functions as __maybe_unused e7dff89d7713 mfd: as3722: Handle interrupts on suspend bc4db52485cc kvm: fix kvm_ioctl_create_device() reference counting (CVE-2019-6974) f5aebe74113f x86: livepatch: Treat R_X86_64_PLT32 as R_X86_64_PC32 01fb36063d97 net: ipv4: use a dedicated counter for icmp_v4 redirect packets 3fa6a285279f net: stmmac: Fix a race in EEE enable callback ffed570a85ad vxlan: test dev->flags & IFF_UP before calling netif_rx() a466589807a1 tcp: clear icsk_backoff in tcp_write_queue_purge() 2e7b872833c7 net: Do not allocate page fragments that are not skb aligned 122e4a307793 tcp: tcp_v4_err() should be more careful 817d4a429566 net: Add header for usage of fls64() 7fecacc0d5ff sky2: Increase D3 delay again 1815d11b544a net: Fix for_each_netdev_feature on Big endian 27763b01a4ff hwmon: (lm80) Fix missing unlock on error in set_fan_div() 9d6ca4d88e27 vsock: cope with memory allocation failure at socket creation time 9467d98f6d48 net: fix IPv6 prefix route residue Signed-off-by: Davide Garberi <dade.garberi@gmail.com>
| * | FROMGIT: binder: create node flag to request sender's security contextTodd Kjos2019-03-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To allow servers to verify client identity, allow a node flag to be set that causes the sender's security context to be delivered with the transaction. The BR_TRANSACTION command is extended in BR_TRANSACTION_SEC_CTX to contain a pointer to the security context string. Signed-off-by: Todd Kjos <tkjos@google.com> Reviewed-by: Joel Fernandes (Google) <joel@joelfernandes.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit ec74136ded792deed80780a2f8baf3521eeb72f9 https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master) Change-Id: I44496546e2d0dc0022f818a45cd52feb1c1a92cb Signed-off-by: Todd Kjos <tkjos@google.com>
* | | Merge "nl80211: Allow set/del pmksa operations for AP"Linux Build Service Account2019-03-01
|\ \ \
| * | | nl80211: Allow set/del pmksa operations for APLiangwei Dong2019-02-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Host drivers may offload authentication to the user space through the commit ("cfg80211: Authentication offload to user space in AP mode"). This interface can be used to implement SAE by having the userspace do authentication/PMKID key derivation and driver handle the association. A step ahead, this interface can get further optimized if the PMKID is passed to the host driver and also have it respond to the association request by the STA on a valid PMKID. This commit enables the userspace to pass the PMKID to the host drivers through the set/del pmksa operations in AP mode. Set/Del pmksa is now restricted to STA/P2P client mode only and thus the drivers might not expect them in any other(AP) mode. This commit also introduces a feature flag NL80211_EXT_FEATURE_AP_PMKSA_CACHING (johannes: renamed) to maintain the backward compatibility of such an expectation by the host drivers. These operations are allowed in AP mode only when the drivers advertize the capability through this flag. Signed-off-by: Srinivas Dasari <dasaris@codeaurora.org> [rename flag to NL80211_EXT_FEATURE_AP_PMKSA_CACHING] Signed-off-by: Johannes Berg <johannes.berg@intel.com> Git-commit: 6c900360e7c0df6a4846ac97d7b548d72cd801b0 Git-repo: git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next.git CRs-Fixed: 2396953 Change-Id: I967ec287edb1c685614e965fe67a32e35035ff11 Signed-off-by: Liangwei Dong <liangwei@codeaurora.org>
* | | | Merge "cfg80211: Sync nl80211 commands/feature with upstream"Linux Build Service Account2019-03-01
|\| | |
| * | | cfg80211: Sync nl80211 commands/feature with upstreamLiangwei Dong2019-02-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update header for nl80211 nl80211_ext_feature_index and nl80211_commands enum from master branch of upstream repoistory git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next.git which includes the following changes (with changes to extract "enum" value change only): 91b5ab62892 cfg80211: support 4-way handshake offloading for WPA/WPA2-PSK 3a00df5707b cfg80211: support 4-way handshake offloading for 802.1X 2d23d0736e3 nl80211: add OCE scan and capability flags 65026002d69 nl80211: add an option to allow MFP without requiring it 5037a00992e nl80211: Introduce scan flags to emphasize requested scan behavior 13cf6dec93e cfg80211/nl80211: add DFS offload flag 2576a9ace47 nl80211: Implement TX of control port frames 9c06602b1b9 cfg80211: clarify frames covered by average ACK signal report 52539ca89f3 cfg80211: Expose TXQ stats and parameters to userspace 2e076f19909 nl80211: add scan features for improved scan privac 2b815b04dfe nl80211: Add CAN_REPLACE_PTK0 API 81e54d08d9d cfg80211: support FTM responder configuration/statistics 36647055b37 cfg80211: Add airtime statistics and settings 466b9936bf9 cfg80211: Add support to notify station's opmode change to userspace 6a671a50f81 nl80211: Add CMD_CONTROL_PORT_FRAME API 9bb7e0f24e7 cfg80211: add peer measurement with FTM initiator API 30c63115e20 nl80211: Add support to notify radar event info received from STA CRs-Fixed: 2396941 Change-Id: I976a9177b9dd705c6131a3a9a62d64432e3d715a Signed-off-by: Liangwei Dong <liangwei@codeaurora.org>
* | | | Merge "Merge android-4.4.175 (08d5867) into msm-4.4"Linux Build Service Account2019-02-27
|\ \ \ \ | |/ / / |/| | |
| * | | Merge android-4.4.175 (08d5867) into msm-4.4Srinivasarao P2019-02-22
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-08d5867 Linux 4.4.175 uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define pinctrl: msm: fix gpio-hog related boot issues usb: dwc2: Remove unnecessary kfree kaweth: use skb_cow_head() to deal with cloned skbs ch9200: use skb_cow_head() to deal with cloned skbs smsc95xx: Use skb_cow_head to deal with cloned skbs dm thin: fix bug where bio that overwrites thin block ignores FUA x86/a.out: Clear the dump structure initially signal: Restore the stop PTRACE_EVENT_EXIT x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls tracing/uprobes: Fix output for multiple string arguments alpha: Fix Eiger NR_IRQS to 128 alpha: fix page fault handling for r16-r18 targets Input: elantech - enable 3rd button support on Fujitsu CELSIUS H780 Input: bma150 - register input device after setting private data ALSA: usb-audio: Fix implicit fb endpoint setup by quirk ALSA: hda - Add quirk for HP EliteBook 840 G5 perf/core: Fix impossible ring-buffer sizes warning Input: elan_i2c - add ACPI ID for touchpad in Lenovo V330-15ISK Revert "Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G" Documentation/network: reword kernel version reference cifs: Limit memory used by lock request calls to a page gpio: pl061: handle failed allocations ARM: dts: kirkwood: Fix polarity of GPIO fan lines ARM: dts: da850-evm: Correct the sound card name uapi/if_ether.h: prevent redefinition of struct ethhdr Revert "exec: load_script: don't blindly truncate shebang string" batman-adv: Force mac header to start of data on xmit batman-adv: Avoid WARN on net_device without parent in netns xfrm: refine validation of template and selector families libceph: avoid KEEPALIVE_PENDING races in ceph_con_keepalive() Revert "cifs: In Kconfig CONFIG_CIFS_POSIX needs depends on legacy (insecure cifs)" NFC: nxp-nci: Include unaligned.h instead of access_ok.h HID: debug: fix the ring buffer implementation drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user drm/vmwgfx: Fix setting of dma masks drm/modes: Prevent division by zero htotal mac80211: ensure that mgmt tx skbs have tailroom for encryption ARM: iop32x/n2100: fix PCI IRQ mapping MIPS: VDSO: Include $(ccflags-vdso) in o32,n32 .lds builds MIPS: OCTEON: don't set octeon_dma_bar_type if PCI is disabled mips: cm: reprime error cause debugfs: fix debugfs_rename parameter checking misc: vexpress: Off by one in vexpress_syscfg_exec() signal: Better detection of synchronous signals signal: Always notice exiting tasks mtd: rawnand: gpmi: fix MX28 bus master lockup problem perf tests evsel-tp-sched: Fix bitwise operator perf/core: Don't WARN() for impossible ring-buffer sizes x86/MCE: Initialize mce.bank in the case of a fatal error in mce_no_way_out() perf/x86/intel/uncore: Add Node ID mask KVM: nVMX: unconditionally cancel preemption timer in free_nested (CVE-2019-7221) KVM: x86: work around leak of uninitialized stack contents (CVE-2019-7222) usb: gadget: udc: net2272: Fix bitwise and boolean operations usb: phy: am335x: fix race condition in _probe dmaengine: imx-dma: fix wrong callback invoke fuse: handle zero sized retrieve correctly fuse: decrement NR_WRITEBACK_TEMP on the right page fuse: call pipe_buf_release() under pipe lock ALSA: hda - Serialize codec registrations ALSA: compress: Fix stop handling on compressed capture streams net: dsa: slave: Don't propagate flag changes on down slave interfaces net: systemport: Fix WoL with password after deep sleep skge: potential memory corruption in skge_get_regs() net: dp83640: expire old TX-skb enic: fix checksum validation for IPv6 dccp: fool proof ccid_hc_[rt]x_parse_options() string: drop __must_check from strscpy() and restore strscpy() usages in cgroup tipc: use destination length for copy string test_hexdump: use memcpy instead of strncpy thermal: hwmon: inline helpers when CONFIG_THERMAL_HWMON is not set exec: load_script: don't blindly truncate shebang string fs/epoll: drop ovflist branch prediction kernel/hung_task.c: break RCU locks based on jiffies HID: lenovo: Add checks to fix of_led_classdev_register block/swim3: Fix -EBUSY error when re-opening device after unmount gdrom: fix a memory leak bug isdn: hisax: hfc_pci: Fix a possible concurrency use-after-free bug in HFCPCI_l1hw() ocfs2: don't clear bh uptodate for block read scripts/decode_stacktrace: only strip base path when a prefix of the path niu: fix missing checks of niu_pci_eeprom_read um: Avoid marking pages with "changed protection" cifs: check ntwrk_buf_start for NULL before dereferencing it crypto: ux500 - Use proper enum in hash_set_dma_transfer crypto: ux500 - Use proper enum in cryp_set_dma_transfer seq_buf: Make seq_buf_puts() null-terminate the buffer hwmon: (lm80) fix a missing check of bus read in lm80 probe hwmon: (lm80) fix a missing check of the status of SMBus read NFS: nfs_compare_mount_options always compare auth flavors. KVM: x86: svm: report MSR_IA32_MCG_EXT_CTL as unsupported fbdev: fbcon: Fix unregister crash when more than one framebuffer igb: Fix an issue that PME is not enabled during runtime suspend fbdev: fbmem: behave better with small rotated displays and many CPUs video: clps711x-fb: release disp device node in probe() drbd: Avoid Clang warning about pointless switch statment drbd: skip spurious timeout (ping-timeo) when failing promote drbd: disconnect, if the wrong UUIDs are attached on a connected peer drbd: narrow rcu_read_lock in drbd_sync_handshake cw1200: Fix concurrency use-after-free bugs in cw1200_hw_scan() Bluetooth: Fix unnecessary error message for HCI request completion xfrm6_tunnel: Fix spi check in __xfrm6_tunnel_alloc_spi mac80211: fix radiotap vendor presence bitmap handling powerpc/uaccess: fix warning/error with access_ok() arm64: KVM: Skip MMIO insn after emulation tty: serial: samsung: Properly set flags in autoCTS mode memstick: Prevent memstick host from getting runtime suspended during card detection ASoC: fsl: Fix SND_SOC_EUKREA_TLV320 build error on i.MX8M ARM: pxa: avoid section mismatch warning udf: Fix BUG on corrupted inode i2c-axxia: check for error conditions first cpuidle: big.LITTLE: fix refcount leak clk: imx6sl: ensure MMDC CH0 handshake is bypassed sata_rcar: fix deferred probing iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer mips: bpf: fix encoding bug for mm_srlv32_op ARM: dts: Fix OMAP4430 SDP Ethernet startup timekeeping: Use proper seqcount initializer usb: hub: delay hub autosuspend if USB3 port is still link training smack: fix access permissions for keyring media: DaVinci-VPBE: fix error handling in vpbe_initialize() x86/fpu: Add might_fault() to user_insn() ARM: dts: mmp2: fix TWSI2 arm64: ftrace: don't adjust the LR value nfsd4: fix crash on writing v4_end_grace before nfsd startup sunvdc: Do not spin in an infinite loop when vio_ldc_send() returns EAGAIN f2fs: fix wrong return value of f2fs_acl_create f2fs: move dir data flush to write checkpoint process soc/tegra: Don't leak device tree node reference perf tools: Add Hygon Dhyana support modpost: validate symbol names also in find_elf_symbol ARM: OMAP2+: hwmod: Fix some section annotations staging: iio: ad7780: update voltage on read staging:iio:ad2s90: Make probe handle spi_setup failure ptp: check gettime64 return code in PTP_SYS_OFFSET ioctl serial: fsl_lpuart: clear parity enable bit when disable parity powerpc/pseries: add of_node_put() in dlpar_detach_node() x86/PCI: Fix Broadcom CNB20LE unintended sign extension (redux) dlm: Don't swamp the CPU with callbacks queued during recovery ARM: 8808/1: kexec:offline panic_smp_self_stop CPU scsi: lpfc: Correct LCB RJT handling ASoC: Intel: mrfld: fix uninitialized variable access staging: iio: adc: ad7280a: handle error from __ad7280_read32() drm/bufs: Fix Spectre v1 vulnerability BACKPORT: userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas ANDROID: cuttlefish_defconfig: Enable DEBUG_SET_MODULE_RONX ANDROID: Move from clang r346389b to r349610. UPSTREAM: virt_wifi: fix error return code in virt_wifi_newlink() ion: Disable ION_HEAP_TYPE_SYSTEM_CONTIG Change-Id: I8456a2f1d229a2d454295d660f749a2b436c6440 Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| | * | Merge 4.4.175 into android-4.4Greg Kroah-Hartman2019-02-20
| | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 4.4.175 drm/bufs: Fix Spectre v1 vulnerability staging: iio: adc: ad7280a: handle error from __ad7280_read32() ASoC: Intel: mrfld: fix uninitialized variable access scsi: lpfc: Correct LCB RJT handling ARM: 8808/1: kexec:offline panic_smp_self_stop CPU dlm: Don't swamp the CPU with callbacks queued during recovery x86/PCI: Fix Broadcom CNB20LE unintended sign extension (redux) powerpc/pseries: add of_node_put() in dlpar_detach_node() serial: fsl_lpuart: clear parity enable bit when disable parity ptp: check gettime64 return code in PTP_SYS_OFFSET ioctl staging:iio:ad2s90: Make probe handle spi_setup failure staging: iio: ad7780: update voltage on read ARM: OMAP2+: hwmod: Fix some section annotations modpost: validate symbol names also in find_elf_symbol perf tools: Add Hygon Dhyana support soc/tegra: Don't leak device tree node reference f2fs: move dir data flush to write checkpoint process f2fs: fix wrong return value of f2fs_acl_create sunvdc: Do not spin in an infinite loop when vio_ldc_send() returns EAGAIN nfsd4: fix crash on writing v4_end_grace before nfsd startup arm64: ftrace: don't adjust the LR value ARM: dts: mmp2: fix TWSI2 x86/fpu: Add might_fault() to user_insn() media: DaVinci-VPBE: fix error handling in vpbe_initialize() smack: fix access permissions for keyring usb: hub: delay hub autosuspend if USB3 port is still link training timekeeping: Use proper seqcount initializer ARM: dts: Fix OMAP4430 SDP Ethernet startup mips: bpf: fix encoding bug for mm_srlv32_op iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer sata_rcar: fix deferred probing clk: imx6sl: ensure MMDC CH0 handshake is bypassed cpuidle: big.LITTLE: fix refcount leak i2c-axxia: check for error conditions first udf: Fix BUG on corrupted inode ARM: pxa: avoid section mismatch warning ASoC: fsl: Fix SND_SOC_EUKREA_TLV320 build error on i.MX8M memstick: Prevent memstick host from getting runtime suspended during card detection tty: serial: samsung: Properly set flags in autoCTS mode arm64: KVM: Skip MMIO insn after emulation powerpc/uaccess: fix warning/error with access_ok() mac80211: fix radiotap vendor presence bitmap handling xfrm6_tunnel: Fix spi check in __xfrm6_tunnel_alloc_spi Bluetooth: Fix unnecessary error message for HCI request completion cw1200: Fix concurrency use-after-free bugs in cw1200_hw_scan() drbd: narrow rcu_read_lock in drbd_sync_handshake drbd: disconnect, if the wrong UUIDs are attached on a connected peer drbd: skip spurious timeout (ping-timeo) when failing promote drbd: Avoid Clang warning about pointless switch statment video: clps711x-fb: release disp device node in probe() fbdev: fbmem: behave better with small rotated displays and many CPUs igb: Fix an issue that PME is not enabled during runtime suspend fbdev: fbcon: Fix unregister crash when more than one framebuffer KVM: x86: svm: report MSR_IA32_MCG_EXT_CTL as unsupported NFS: nfs_compare_mount_options always compare auth flavors. hwmon: (lm80) fix a missing check of the status of SMBus read hwmon: (lm80) fix a missing check of bus read in lm80 probe seq_buf: Make seq_buf_puts() null-terminate the buffer crypto: ux500 - Use proper enum in cryp_set_dma_transfer crypto: ux500 - Use proper enum in hash_set_dma_transfer cifs: check ntwrk_buf_start for NULL before dereferencing it um: Avoid marking pages with "changed protection" niu: fix missing checks of niu_pci_eeprom_read scripts/decode_stacktrace: only strip base path when a prefix of the path ocfs2: don't clear bh uptodate for block read isdn: hisax: hfc_pci: Fix a possible concurrency use-after-free bug in HFCPCI_l1hw() gdrom: fix a memory leak bug block/swim3: Fix -EBUSY error when re-opening device after unmount HID: lenovo: Add checks to fix of_led_classdev_register kernel/hung_task.c: break RCU locks based on jiffies fs/epoll: drop ovflist branch prediction exec: load_script: don't blindly truncate shebang string thermal: hwmon: inline helpers when CONFIG_THERMAL_HWMON is not set test_hexdump: use memcpy instead of strncpy tipc: use destination length for copy string string: drop __must_check from strscpy() and restore strscpy() usages in cgroup dccp: fool proof ccid_hc_[rt]x_parse_options() enic: fix checksum validation for IPv6 net: dp83640: expire old TX-skb skge: potential memory corruption in skge_get_regs() net: systemport: Fix WoL with password after deep sleep net: dsa: slave: Don't propagate flag changes on down slave interfaces ALSA: compress: Fix stop handling on compressed capture streams ALSA: hda - Serialize codec registrations fuse: call pipe_buf_release() under pipe lock fuse: decrement NR_WRITEBACK_TEMP on the right page fuse: handle zero sized retrieve correctly dmaengine: imx-dma: fix wrong callback invoke usb: phy: am335x: fix race condition in _probe usb: gadget: udc: net2272: Fix bitwise and boolean operations KVM: x86: work around leak of uninitialized stack contents (CVE-2019-7222) KVM: nVMX: unconditionally cancel preemption timer in free_nested (CVE-2019-7221) perf/x86/intel/uncore: Add Node ID mask x86/MCE: Initialize mce.bank in the case of a fatal error in mce_no_way_out() perf/core: Don't WARN() for impossible ring-buffer sizes perf tests evsel-tp-sched: Fix bitwise operator mtd: rawnand: gpmi: fix MX28 bus master lockup problem signal: Always notice exiting tasks signal: Better detection of synchronous signals misc: vexpress: Off by one in vexpress_syscfg_exec() debugfs: fix debugfs_rename parameter checking mips: cm: reprime error cause MIPS: OCTEON: don't set octeon_dma_bar_type if PCI is disabled MIPS: VDSO: Include $(ccflags-vdso) in o32,n32 .lds builds ARM: iop32x/n2100: fix PCI IRQ mapping mac80211: ensure that mgmt tx skbs have tailroom for encryption drm/modes: Prevent division by zero htotal drm/vmwgfx: Fix setting of dma masks drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user HID: debug: fix the ring buffer implementation NFC: nxp-nci: Include unaligned.h instead of access_ok.h Revert "cifs: In Kconfig CONFIG_CIFS_POSIX needs depends on legacy (insecure cifs)" libceph: avoid KEEPALIVE_PENDING races in ceph_con_keepalive() xfrm: refine validation of template and selector families batman-adv: Avoid WARN on net_device without parent in netns batman-adv: Force mac header to start of data on xmit Revert "exec: load_script: don't blindly truncate shebang string" uapi/if_ether.h: prevent redefinition of struct ethhdr ARM: dts: da850-evm: Correct the sound card name ARM: dts: kirkwood: Fix polarity of GPIO fan lines gpio: pl061: handle failed allocations cifs: Limit memory used by lock request calls to a page Documentation/network: reword kernel version reference Revert "Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G" Input: elan_i2c - add ACPI ID for touchpad in Lenovo V330-15ISK perf/core: Fix impossible ring-buffer sizes warning ALSA: hda - Add quirk for HP EliteBook 840 G5 ALSA: usb-audio: Fix implicit fb endpoint setup by quirk Input: bma150 - register input device after setting private data Input: elantech - enable 3rd button support on Fujitsu CELSIUS H780 alpha: fix page fault handling for r16-r18 targets alpha: Fix Eiger NR_IRQS to 128 tracing/uprobes: Fix output for multiple string arguments x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls signal: Restore the stop PTRACE_EVENT_EXIT x86/a.out: Clear the dump structure initially dm thin: fix bug where bio that overwrites thin block ignores FUA smsc95xx: Use skb_cow_head to deal with cloned skbs ch9200: use skb_cow_head() to deal with cloned skbs kaweth: use skb_cow_head() to deal with cloned skbs usb: dwc2: Remove unnecessary kfree pinctrl: msm: fix gpio-hog related boot issues uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define Linux 4.4.175 Change-Id: I41d95e9717106bcc9342573855fec8f823d9b28c Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
| | | * uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc defineHauke Mehrtens2019-02-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit da360299b6734135a5f66d7db458dcc7801c826a upstream. This fixes a compile problem of some user space applications by not including linux/libc-compat.h in uapi/if_ether.h. linux/libc-compat.h checks which "features" the header files, included from the libc, provide to make the Linux kernel uapi header files only provide no conflicting structures and enums. If a user application mixes kernel headers and libc headers it could happen that linux/libc-compat.h gets included too early where not all other libc headers are included yet. Then the linux/libc-compat.h would not prevent all the redefinitions and we run into compile problems. This patch removes the include of linux/libc-compat.h from uapi/if_ether.h to fix the recently introduced case, but not all as this is more or less impossible. It is no problem to do the check directly in the if_ether.h file and not in libc-compat.h as this does not need any fancy glibc header detection as glibc never provided struct ethhdr and should define __UAPI_DEF_ETHHDR by them self when they will provide this. The following test program did not compile correctly any more: #include <linux/if_ether.h> #include <netinet/in.h> #include <linux/in.h> int main(void) { return 0; } Fixes: 6926e041a892 ("uapi/if_ether.h: prevent redefinition of struct ethhdr") Reported-by: Guillaume Nault <g.nault@alphalink.fr> Cc: <stable@vger.kernel.org> # 4.15 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> Signed-off-by: David S. Miller <davem@davemloft.net> Cc: Sudip Mukherjee <sudipm.mukherjee@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| | | * uapi/if_ether.h: prevent redefinition of struct ethhdrHauke Mehrtens2019-02-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit 6926e041a8920c8ec27e4e155efa760aa01551fd upstream. Musl provides its own ethhdr struct definition. Add a guard to prevent its definition of the appropriate musl header has already been included. glibc does not implement this header, but when glibc will implement this they can just define __UAPI_DEF_ETHHDR 0 to make it work with the kernel. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Linus Walleij <linus.walleij@linaro.org> Signed-off-by: Sasha Levin <sashal@kernel.org>
* | | | cfg80211: Authentication offload to user space in AP modeSrinivas Dasari2019-02-23
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit 40cbfa90218b ("cfg80211/nl80211: Optional authentication offload to userspace")' introduced authentication offload to user space by the host drivers in station mode. This commit extends the same for the AP mode too. Extend NL80211_ATTR_EXTERNAL_AUTH_SUPPORT to also claim the support of external authentication from the user space in AP mode. A new flag parameter is introduced in cfg80211_ap_settings to intend the same while "start ap". Host driver to use NL80211_CMD_FRAME interface to transmit and receive the authentication frames to / from the user space. Host driver to indicate the flag NL80211_RXMGMT_FLAG_EXTERNAL_AUTH while sending the authentication frame to the user space. This intends to the user space that the driver wishes it to process the authentication frame for certain protocols, though it had initially advertised the support for SME functionality. User space shall accordingly do the authentication and indicate its final status through the command NL80211_CMD_EXTERNAL_AUTH. Allow the command even if userspace doesn't include the attribute NL80211_ATTR_SSID for AP interface. Host driver shall continue with the association sequence and indicate the STA connection status through cfg80211_new_sta. To facilitate the host drivers in AP mode for matching the pmkid by the stations during the association, NL80211_CMD_EXTERNAL_AUTH is also enhanced to include the pmkid to drivers after the authentication. This pmkid can also be used in the STA mode to include in the association request. Also modify nl80211_external_auth to not mandate SSID in AP mode. [remove useless nla_get_flag() usage] Signed-off-by: Johannes Berg <johannes.berg@intel.com> Git-commit: fe4943702c850fa07f963eaa6f1530d9d4c2da78 Git-repo: git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next.git Change-Id: I6341814aa334e25f803953fcb855a439644eb1a9 CRs-Fixed: 2396191 Signed-off-by: Srinivas Dasari <dasaris@codeaurora.org> Signed-off-by: Liangwei Dong <liangwei@codeaurora.org>
* | | Merge android-4.4.174 (62872f9) into msm-4.4Srinivasarao P2019-02-11
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-62872f9 Linux 4.4.174 rcu: Force boolean subscript for expedited stall warnings net: ipv4: do not handle duplicate fragments as overlapping net: fix pskb_trim_rcsum_slow() with odd trim offset inet: frags: better deal with smp races ipv4: frags: precedence bug in ip_expire() ip: frags: fix crash in ip_do_fragment() ip: process in-order fragments efficiently ip: add helpers to process in-order fragments faster. ip: use rb trees for IP frag queue. net: pskb_trim_rcsum() and CHECKSUM_COMPLETE are friends ipv6: defrag: drop non-last frags smaller than min mtu net: modify skb_rbtree_purge to return the truesize of all purged skbs. ip: discard IPv4 datagrams with overlapping segments. inet: frags: fix ip6frag_low_thresh boundary inet: frags: get rid of ipfrag_skb_cb/FRAG_CB inet: frags: reorganize struct netns_frags rhashtable: reorganize struct rhashtable layout ipv6: frags: rewrite ip6_expire_frag_queue() inet: frags: do not clone skb in ip_expire() inet: frags: break the 2GB limit for frags storage inet: frags: remove inet_frag_maybe_warn_overflow() inet: frags: get rif of inet_frag_evicting() inet: frags: remove some helpers ipfrag: really prevent allocation on netns exit net: ieee802154: 6lowpan: fix frag reassembly inet: frags: use rhashtables for reassembly units rhashtable: add schedule points rhashtable: Add rhashtable_lookup() rhashtable: add rhashtable_lookup_get_insert_key() inet: frags: refactor lowpan_net_frag_init() inet: frags: refactor ipv6_frag_init() inet: frags: refactor ipfrag_init() inet: frags: add a pointer to struct netns_frags inet: frags: change inet_frags_init_net() return value Change-Id: I1f6e2fd6f7960509fa52b726458c74c9fb070b5b Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| * | Merge 4.4.174 into android-4.4Greg Kroah-Hartman2019-02-08
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 4.4.174 inet: frags: change inet_frags_init_net() return value inet: frags: add a pointer to struct netns_frags inet: frags: refactor ipfrag_init() inet: frags: refactor ipv6_frag_init() inet: frags: refactor lowpan_net_frag_init() rhashtable: add rhashtable_lookup_get_insert_key() rhashtable: Add rhashtable_lookup() rhashtable: add schedule points inet: frags: use rhashtables for reassembly units net: ieee802154: 6lowpan: fix frag reassembly ipfrag: really prevent allocation on netns exit inet: frags: remove some helpers inet: frags: get rif of inet_frag_evicting() inet: frags: remove inet_frag_maybe_warn_overflow() inet: frags: break the 2GB limit for frags storage inet: frags: do not clone skb in ip_expire() ipv6: frags: rewrite ip6_expire_frag_queue() rhashtable: reorganize struct rhashtable layout inet: frags: reorganize struct netns_frags inet: frags: get rid of ipfrag_skb_cb/FRAG_CB inet: frags: fix ip6frag_low_thresh boundary ip: discard IPv4 datagrams with overlapping segments. net: modify skb_rbtree_purge to return the truesize of all purged skbs. ipv6: defrag: drop non-last frags smaller than min mtu net: pskb_trim_rcsum() and CHECKSUM_COMPLETE are friends ip: use rb trees for IP frag queue. ip: add helpers to process in-order fragments faster. ip: process in-order fragments efficiently ip: frags: fix crash in ip_do_fragment() ipv4: frags: precedence bug in ip_expire() inet: frags: better deal with smp races net: fix pskb_trim_rcsum_slow() with odd trim offset net: ipv4: do not handle duplicate fragments as overlapping rcu: Force boolean subscript for expedited stall warnings Linux 4.4.174 Change-Id: I47eace4f47ffe0bf16b29615d09ed903c40a272b Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
| | * ip: discard IPv4 datagrams with overlapping segments.Peter Oskolkov2019-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit 7969e5c40dfd04799d4341f1b7cd266b6e47f227 upstream. This behavior is required in IPv6, and there is little need to tolerate overlapping fragments in IPv4. This change simplifies the code and eliminates potential DDoS attack vectors. Tested: ran ip_defrag selftest (not yet available uptream). Suggested-by: David S. Miller <davem@davemloft.net> Signed-off-by: Peter Oskolkov <posk@google.com> Signed-off-by: Eric Dumazet <edumazet@google.com> Cc: Florian Westphal <fw@strlen.de> Acked-by: Stephen Hemminger <stephen@networkplumber.org> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Mao Wenan <maowenan@huawei.com> [bwh: Backported to 4.4: - s/__IP_INC_STATS/IP_INC_STATS_BH/ - Deleted code is slightly different] Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
* | | Merge "Revert "i2c: add virtual i2c driver""Linux Build Service Account2019-01-30
|\ \ \
| * | | Revert "i2c: add virtual i2c driver"xianzhu2019-01-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 320b7b16475357b630b5f612bb3ebaf8e5159559. This change refers to an inappropriate document, so we'd better revert it first. Change-Id: Ia7b806e911665d89a84b8d8377c2a5da5982f372 Signed-off-by: xianzhu <xianzhu@codeaurora.org>
* | | | Merge "Merge android-4.4.171 (b355d4f) into msm-4.4"Linux Build Service Account2019-01-30
|\ \ \ \ | |/ / / |/| | |
| * | | Merge android-4.4.171 (b355d4f) into msm-4.4Srinivasarao P2019-01-29
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * refs/heads/tmp-b355d4f Linux 4.4.171 sunrpc: use-after-free in svc_process_common() ext4: fix a potential fiemap/page fault deadlock w/ inline_data crypto: cts - fix crash on short inputs i2c: dev: prevent adapter retries and timeout being set as minus value ACPI: power: Skip duplicate power resource references in _PRx PCI: altera: Move retrain from fixup to altera_pcie_host_init() PCI: altera: Rework config accessors for use without a struct pci_bus PCI: altera: Poll for link training status after retraining the link PCI: altera: Poll for link up status after retraining the link PCI: altera: Check link status before retrain link PCI: altera: Reorder read/write functions PCI: altera: Fix altera_pcie_link_is_up() slab: alien caches must not be initialized if the allocation of the alien cache failed USB: Add USB_QUIRK_DELAY_CTRL_MSG quirk for Corsair K70 RGB USB: storage: add quirk for SMI SM3350 USB: storage: don't insert sane sense for SPC3+ when bad sense specified usb: cdc-acm: send ZLP for Telit 3G Intel based modems cifs: Fix potential OOB access of lock element array CIFS: Do not hide EINTR after sending network packets btrfs: tree-checker: Fix misleading group system information btrfs: tree-checker: Check level for leaves and nodes btrfs: Verify that every chunk has corresponding block group at mount time btrfs: Check that each block group has corresponding chunk at mount time btrfs: validate type when reading a chunk btrfs: tree-checker: Detect invalid and empty essential trees btrfs: tree-checker: Verify block_group_item btrfs: tree-check: reduce stack consumption in check_dir_item btrfs: tree-checker: use %zu format string for size_t btrfs: tree-checker: Add checker for dir item btrfs: tree-checker: Fix false panic for sanity test btrfs: tree-checker: Enhance btrfs_check_node output btrfs: Move leaf and node validation checker to tree-checker.c btrfs: Add checker for EXTENT_CSUM btrfs: Add sanity check for EXTENT_DATA when reading out leaf btrfs: Check if item pointer overlaps with the item itself btrfs: Refactor check_leaf function for later expansion btrfs: struct-funcs, constify readers Btrfs: fix emptiness check for dirtied extent buffers at check_leaf() Btrfs: memset to avoid stale content in btree leaf Btrfs: kill BUG_ON in run_delayed_tree_ref Btrfs: improve check_node to avoid reading corrupted nodes Btrfs: memset to avoid stale content in btree node block Btrfs: fix BUG_ON in btrfs_mark_buffer_dirty Btrfs: check btree node's nritems Btrfs: detect corruption when non-root leaf has zero item Btrfs: fix em leak in find_first_block_group Btrfs: check inconsistence between chunk and block group Btrfs: add validadtion checks for chunk loading btrfs: Enhance chunk validation check btrfs: cleanup, stop casting for extent_map->lookup everywhere ALSA: hda/realtek - Disable headset Mic VREF for headset mode of ALC225 UPSTREAM: virtio: new feature to detect IOMMU device quirk UPSTREAM: vring: Use the DMA API on Xen UPSTREAM: virtio_ring: Support DMA APIs UPSTREAM: vring: Introduce vring_use_dma_api() ANDROID: cuttlefish_defconfig: Enable vsock options UPSTREAM: vhost/vsock: fix reset orphans race with close timeout UPSTREAM: vhost/vsock: fix use-after-free in network stack callers UPSTREAM: vhost: correctly check the iova range when waking virtqueue UPSTREAM: vhost: synchronize IOTLB message with dev cleanup UPSTREAM: vhost: fix info leak due to uninitialized memory UPSTREAM: vhost: fix vhost_vq_access_ok() log check UPSTREAM: vhost: validate log when IOTLB is enabled UPSTREAM: vhost_net: add missing lock nesting notation UPSTREAM: vhost: use mutex_lock_nested() in vhost_dev_lock_vqs() UPSTREAM: vhost/vsock: fix uninitialized vhost_vsock->guest_cid UPSTREAM: vhost_net: correctly check tx avail during rx busy polling UPSTREAM: vsock: use new wait API for vsock_stream_sendmsg() UPSTREAM: vsock: cancel packets when failing to connect UPSTREAM: vhost-vsock: add pkt cancel capability UPSTREAM: vsock: track pkt owner vsock UPSTREAM: vhost: fix initialization for vq->is_le UPSTREAM: vhost/vsock: handle vhost_vq_init_access() error UPSTREAM: vsock: lookup and setup guest_cid inside vhost_vsock_lock UPSTREAM: vhost-vsock: fix orphan connection reset UPSTREAM: vsock/virtio: fix src/dst cid format UPSTREAM: VSOCK: Don't dec ack backlog twice for rejected connections UPSTREAM: vhost/vsock: drop space available check for TX vq UPSTREAM: virtio-vsock: fix include guard typo UPSTREAM: vhost/vsock: fix vhost virtio_vsock_pkt use-after-free UPSTREAM: VSOCK: Use kvfree() BACKPORT: vhost: split out vringh Kconfig UPSTREAM: vhost: drop vringh dependency UPSTREAM: vhost: drop vringh dependency UPSTREAM: vhost: detect 32 bit integer wrap around UPSTREAM: VSOCK: Add Makefile and Kconfig UPSTREAM: VSOCK: Introduce vhost_vsock.ko UPSTREAM: VSOCK: Introduce virtio_transport.ko BACKPORT: VSOCK: Introduce virtio_vsock_common.ko UPSTREAM: VSOCK: defer sock removal to transports UPSTREAM: VSOCK: transport-specific vsock_transport functions UPSTREAM: vsock: make listener child lock ordering explicit UPSTREAM: vhost: new device IOTLB API BACKPORT: vhost: convert pre sorted vhost memory array to interval tree UPSTREAM: vhost: introduce vhost memory accessors UPSTREAM: vhost_net: stop polling socket during rx processing UPSTREAM: VSOCK: constify vsock_transport structure UPSTREAM: vhost: lockless enqueuing UPSTREAM: vhost: simplify work flushing UPSTREAM: VSOCK: Only check error on skb_recv_datagram when skb is NULL BACKPORT: AF_VSOCK: Shrink the area influenced by prepare_to_wait UPSTREAM: vhost_net: basic polling support UPSTREAM: vhost: introduce vhost_vq_avail_empty() UPSTREAM: vhost: introduce vhost_has_work() UPSTREAM: vhost: rename vhost_init_used() UPSTREAM: vhost: rename cross-endian helpers UPSTREAM: vhost: fix error path in vhost_init_used() UPSTREAM: virtio: make find_vqs() checkpatch.pl-friendly UPSTREAM: net: move napi_hash[] into read mostly section ANDROID: cuttlefish_defconfig: remove DM_VERITY_HASH_PREFETCH_MIN_SIZE Revert "ANDROID: dm verity: add minimum prefetch size" ANDROID: f2fs: Complement "android_fs" tracepoint of read path Removed config DM_VERITY_HASH_PREFETCH_MIN_SIZE in defconfig files as this feature got reverted. Change-Id: I9117e3080eaf0e0c99888468037855fc7713ff88 Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
| | * | UPSTREAM: virtio: new feature to detect IOMMU device quirkMichael S. Tsirkin2019-01-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The interaction between virtio and IOMMUs is messy. On most systems with virtio, physical addresses match bus addresses, and it doesn't particularly matter which one we use to program the device. On some systems, including Xen and any system with a physical device that speaks virtio behind a physical IOMMU, we must program the IOMMU for virtio DMA to work at all. On other systems, including SPARC and PPC64, virtio-pci devices are enumerated as though they are behind an IOMMU, but the virtio host ignores the IOMMU, so we must either pretend that the IOMMU isn't there or somehow map everything as the identity. Add a feature bit to detect that quirk: VIRTIO_F_IOMMU_PLATFORM. Any device with this feature bit set to 0 needs a quirk and has to be passed physical addresses (as opposed to bus addresses) even though the device is behind an IOMMU. Note: it has to be a per-device quirk because for example, there could be a mix of passed-through and virtual virtio devices. As another example, some devices could be implemented by an out of process hypervisor backend (in case of qemu vhost, or vhost-user) and so support for an IOMMU needs to be coded up separately. It would be cleanest to handle this in IOMMU core code, but that needs per-device DMA ops. While we are waiting for that to be implemented, use a work-around in virtio core. Note: a "noiommu" feature is a quirk - add a wrapper to make that clear. Signed-off-by: Michael S. Tsirkin <mst@redhat.com> (cherry picked from commit 1a937693993ff10d7e80cca6ddd55f3000aa6376) [astrachan: should fix CONFIG_IOMMU builds] Bug: 121166534 Test: Ran cuttlefish with android-4.4 + VSOCKETS, VMWARE_VMCI_VSOCKETS Signed-off-by: Alistair Strachan <astrachan@google.com> Change-Id: If09b9b34a2410de7453d2c38812550615e098b10