September 2021 - Linux-stable-mirror

[PATCH] usb: typec: tipd: Remove dependency on "connector" child fwnode

by Heikki Krogerus

There is no "connector" child node available on every platform, so the driver can't fail to probe when it's missing. Fixes: 57560ee95cb7 ("usb: typec: tipd: Don't block probing of consumer of "connector" nodes") Reported-by: "Regupathy, Rajaram" <rajaram.regupathy(a)intel.com> Cc: stable(a)vger.kernel.org # 5.14+ Signed-off-by: Heikki Krogerus <heikki.krogerus(a)linux.intel.com> --- drivers/usb/typec/tipd/core.c | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/drivers/usb/typec/tipd/core.c b/drivers/usb/typec/tipd/core.c index 93e56291f0cf1..b30efdb9fa9ed 100644 --- a/drivers/usb/typec/tipd/core.c +++ b/drivers/usb/typec/tipd/core.c @@ -628,10 +628,6 @@ static int tps6598x_probe(struct i2c_client *client) if (ret < 0) return ret; - fwnode = device_get_named_child_node(&client->dev, "connector"); - if (!fwnode) - return -ENODEV; - /* * This fwnode has a "compatible" property, but is never populated as a * struct device. Instead we simply parse it to read the properties. @@ -639,7 +635,9 @@ static int tps6598x_probe(struct i2c_client *client) * with existing DT files, we work around this by deleting any * fwnode_links to/from this fwnode. */ - fw_devlink_purge_absent_suppliers(fwnode); + fwnode = device_get_named_child_node(&client->dev, "connector"); + if (fwnode) + fw_devlink_purge_absent_suppliers(fwnode); tps->role_sw = fwnode_usb_role_switch_get(fwnode); if (IS_ERR(tps->role_sw)) { -- 2.33.0

3 years, 2 months

1
0
0 0

[PATCH 1/2] mac80211: mesh: fix HE operation element length check

by Johannes Berg

From: Johannes Berg <johannes.berg(a)intel.com> The length check here was bad, if the length doesn't at least include the length of the fixed part, we cannot call ieee80211_he_oper_size() to determine the total. Fix this, and convert to cfg80211_find_ext_elem() while at it. Cc: stable(a)vger.kernel.org Fixes: 70debba3ab7d ("mac80211: save HE oper info in BSS config for mesh") Signed-off-by: Johannes Berg <johannes.berg(a)intel.com> --- net/mac80211/mesh.c | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/net/mac80211/mesh.c b/net/mac80211/mesh.c index a4212a333d61..15ac08d111ea 100644 --- a/net/mac80211/mesh.c +++ b/net/mac80211/mesh.c @@ -672,7 +672,7 @@ ieee80211_mesh_update_bss_params(struct ieee80211_sub_if_data *sdata, u8 *ie, u8 ie_len) { struct ieee80211_supported_band *sband; - const u8 *cap; + const struct element *cap; const struct ieee80211_he_operation *he_oper = NULL; sband = ieee80211_get_sband(sdata); @@ -687,9 +687,10 @@ ieee80211_mesh_update_bss_params(struct ieee80211_sub_if_data *sdata, sdata->vif.bss_conf.he_support = true; - cap = cfg80211_find_ext_ie(WLAN_EID_EXT_HE_OPERATION, ie, ie_len); - if (cap && cap[1] >= ieee80211_he_oper_size(&cap[3])) - he_oper = (void *)(cap + 3); + cap = cfg80211_find_ext_elem(WLAN_EID_EXT_HE_OPERATION, ie, ie_len); + if (cap && cap->datalen >= 1 + sizeof(*he_oper) && + cap->datalen >= 1 + ieee80211_he_oper_size(cap->data + 1)) + he_oper = (void *)(cap->data + 1); if (he_oper) sdata->vif.bss_conf.he_oper.params = -- 2.31.1

3 years, 2 months

1
0
0 0

Linux 5.14.9

by Greg Kroah-Hartman

I'm announcing the release of the 5.14.9 kernel. All users of the 5.14 kernel series must upgrade. The updated 5.14.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.14.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/alpha/include/asm/io.h | 6 arch/arm64/include/asm/assembler.h | 5 arch/arm64/include/asm/mte.h | 6 arch/arm64/include/asm/string.h | 2 arch/arm64/kernel/cpufeature.c | 8 arch/arm64/kernel/mte.c | 10 arch/arm64/kernel/process.c | 2 arch/arm64/lib/strcmp.S | 2 arch/arm64/lib/strncmp.S | 2 arch/m68k/include/asm/raw_io.h | 20 - arch/parisc/include/asm/page.h | 2 arch/sparc/kernel/ioport.c | 4 arch/sparc/kernel/mdesc.c | 3 arch/x86/include/asm/pkeys.h | 2 arch/x86/include/asm/special_insns.h | 2 arch/x86/kernel/setup.c | 26 - arch/x86/mm/fault.c | 26 - arch/x86/xen/enlighten_pv.c | 15 block/blk-cgroup.c | 8 block/blk-integrity.c | 9 block/blk-mq-tag.c | 2 drivers/android/binder.c | 58 ++- drivers/android/binder_internal.h | 2 drivers/base/swnode.c | 3 drivers/comedi/comedi_fops.c | 1 drivers/cpufreq/intel_pstate.c | 22 - drivers/edac/dmc520_edac.c | 2 drivers/edac/synopsys_edac.c | 2 drivers/fpga/machxo2-spi.c | 6 drivers/gpio/gpio-uniphier.c | 4 drivers/gpio/gpiolib-acpi.c | 6 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 44 +- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 1 drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 152 +++++-- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 53 ++ drivers/gpu/drm/amd/display/dc/core/dc_link_dp.c | 10 drivers/gpu/drm/amd/pm/powerplay/si_dpm.c | 2 drivers/gpu/drm/ttm/ttm_pool.c | 3 drivers/gpu/drm/vc4/vc4_hdmi.c | 44 -- drivers/irqchip/Kconfig | 1 drivers/irqchip/irq-armada-370-xp.c | 4 drivers/irqchip/irq-gic-v3-its.c | 2 drivers/mcb/mcb-core.c | 12 drivers/md/md.c | 5 drivers/misc/bcm-vk/bcm_vk_tty.c | 6 drivers/misc/genwqe/card_base.c | 2 drivers/net/dsa/mv88e6xxx/chip.c | 16 drivers/net/dsa/mv88e6xxx/devlink.c | 73 --- drivers/net/dsa/mv88e6xxx/devlink.h | 6 drivers/net/dsa/realtek-smi-core.c | 2 drivers/net/ethernet/aquantia/atlantic/aq_pci_func.c | 4 drivers/net/ethernet/broadcom/bgmac-bcma.c | 2 drivers/net/ethernet/broadcom/bnxt/bnxt.c | 8 drivers/net/ethernet/broadcom/bnxt/bnxt.h | 5 drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 2 drivers/net/ethernet/cadence/macb_pci.c | 2 drivers/net/ethernet/freescale/enetc/enetc.c | 7 drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_err.c | 8 drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 80 ++-- drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 10 drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 2 drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 52 +- drivers/net/ethernet/i825xx/82596.c | 2 drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 3 drivers/net/ethernet/mellanox/mlx4/en_netdev.c | 3 drivers/net/ethernet/mscc/ocelot.c | 11 drivers/net/ethernet/qlogic/qed/qed_iwarp.c | 8 drivers/net/ethernet/qlogic/qed/qed_roce.c | 8 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 2 drivers/net/hamradio/6pack.c | 4 drivers/net/phy/phylink.c | 30 + drivers/net/usb/hso.c | 12 drivers/net/virtio_net.c | 4 drivers/net/vxlan.c | 2 drivers/nfc/st-nci/spi.c | 1 drivers/nvme/host/core.c | 33 - drivers/nvme/host/multipath.c | 7 drivers/nvme/host/rdma.c | 16 drivers/nvme/host/tcp.c | 13 drivers/nvme/target/configfs.c | 2 drivers/platform/x86/amd-pmc.c | 2 drivers/platform/x86/dell/Kconfig | 3 drivers/platform/x86/intel_punit_ipc.c | 3 drivers/regulator/max14577-regulator.c | 2 drivers/regulator/qcom-rpmh-regulator.c | 2 drivers/s390/net/qeth_core_main.c | 3 drivers/scsi/lpfc/lpfc_attr.c | 3 drivers/scsi/qla2xxx/qla_init.c | 3 drivers/scsi/scsi_transport_iscsi.c | 8 drivers/scsi/sd_zbc.c | 8 drivers/scsi/ufs/ufshcd.c | 81 +--- drivers/scsi/ufs/ufshcd.h | 5 drivers/scsi/ufs/ufshci.h | 1 drivers/spi/spi-tegra20-slink.c | 4 drivers/spi/spi.c | 8 drivers/staging/greybus/uart.c | 62 +-- drivers/target/target_core_configfs.c | 32 + drivers/thermal/intel/int340x_thermal/processor_thermal_device.c | 5 drivers/thermal/thermal_core.c | 7 drivers/tty/serial/8250/8250_omap.c | 2 drivers/tty/serial/mvebu-uart.c | 2 drivers/tty/synclink_gt.c | 44 +- drivers/usb/cdns3/cdns3-gadget.c | 14 drivers/usb/class/cdc-acm.c | 7 drivers/usb/class/cdc-acm.h | 2 drivers/usb/core/hcd.c | 29 + drivers/usb/dwc2/gadget.c | 193 +++++----- drivers/usb/dwc3/core.c | 30 - drivers/usb/gadget/function/f_uac2.c | 19 drivers/usb/gadget/function/u_audio.c | 13 drivers/usb/gadget/udc/r8a66597-udc.c | 2 drivers/usb/host/bcma-hcd.c | 5 drivers/usb/host/xhci.c | 1 drivers/usb/isp1760/isp1760-hcd.c | 6 drivers/usb/musb/tusb6010.c | 1 drivers/usb/serial/cp210x.c | 36 + drivers/usb/serial/mos7840.c | 2 drivers/usb/serial/option.c | 11 drivers/usb/storage/unusual_devs.h | 9 drivers/usb/storage/unusual_uas.h | 2 drivers/xen/balloon.c | 62 ++- fs/afs/dir.c | 46 -- fs/afs/dir_edit.c | 4 fs/afs/fs_probe.c | 8 fs/afs/fsclient.c | 31 + fs/afs/inode.c | 10 fs/afs/internal.h | 11 fs/afs/protocol_afs.h | 15 fs/afs/protocol_yfs.h | 6 fs/afs/write.c | 12 fs/btrfs/space-info.c | 5 fs/cifs/cifsglob.h | 1 fs/cifs/connect.c | 5 fs/cifs/file.c | 4 fs/cifs/misc.c | 4 fs/io_uring.c | 13 fs/lockd/svcxdr.h | 13 fs/ocfs2/dlmglue.c | 3 fs/qnx4/dir.c | 69 ++- include/linux/compiler.h | 2 include/linux/pkeys.h | 2 include/linux/usb/hcd.h | 2 include/net/dsa.h | 8 include/trace/events/erofs.h | 6 include/uapi/linux/android/binder.h | 7 kernel/bpf/verifier.c | 2 kernel/dma/debug.c | 3 kernel/entry/kvm.c | 4 kernel/rseq.c | 14 kernel/trace/blktrace.c | 8 mm/debug.c | 3 mm/memory-failure.c | 2 mm/util.c | 4 net/core/dev.c | 16 net/dsa/dsa2.c | 64 ++- net/ipv4/nexthop.c | 21 - net/ipv6/ip6_fib.c | 3 net/mptcp/protocol.c | 4 net/smc/smc_clc.c | 3 net/smc/smc_core.c | 2 tools/lib/perf/evsel.c | 64 ++- tools/testing/selftests/arm64/signal/test_signals.h | 2 tools/testing/selftests/arm64/signal/test_signals_utils.c | 10 164 files changed, 1439 insertions(+), 862 deletions(-) Andreas Larsson (1): sparc32: page align size in arch_dma_alloc Andy Shevchenko (1): platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR() Antoine Tenart (1): thermal/drivers/int340x: Do not set a wrong tcc offset on resume Anton Eidelman (1): nvme-multipath: fix ANA state updates when a namespace is not present Aya Levin (1): net/mlx4_en: Don't allow aRFS for encapsulated packets Baokun Li (1): scsi: iscsi: Adjust iface sysfs attr detection Bart Van Assche (4): scsi: sd_zbc: Support disks with more than 2**32 logical blocks scsi: ufs: Revert "Utilize Transfer Request List Completion Notification Register" scsi: ufs: Retry aborted SCSI commands instead of completing these successfully scsi: ufs: core: Unbreak the reset handler Bixuan Cui (1): bpf: Add oversize check before call kvcalloc() Borislav Petkov (1): EDAC/dmc520: Assign the proper type to dimm->edac_mode Carlo Lobrano (1): USB: serial: option: add Telit LN920 compositions Chen Jun (1): mm: fix uninitialized use in overcommit_policy_handler Christian Lamparter (1): net: bgmac-bcma: handle deferred probe error due to mac-address Christoph Hellwig (3): nvme: keep ctrl->namespaces ordered md: fix a lock order reversal in md_alloc block: check if a profile is actually registered in blk_integrity_unregister Christophe JAILLET (1): misc: genwqe: Fixes DMA mask setting Chuck Lever (1): NLM: Fix svcxdr_encode_owner() Claudiu Manoil (2): enetc: Fix illegal access when reading affinity_hint enetc: Fix uninitialized struct dim_sample field usage Cristian Marussi (1): kselftest/arm64: signal: Skip tests if required features are missing Dan Carpenter (7): usb: gadget: r8a66597: fix a loop in set_feature() usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() mcb: fix error handling in mcb_alloc_bus() thermal/core: Potential buffer overflow in thermal_build_list_of_policies() cifs: fix a sign extension bug scsi: lpfc: Use correct scnprintf() limit nvmet: fix a width vs precision bug in nvmet_subsys_attr_serial_show() Dan Li (1): arm64: Mark __stack_chk_guard as __ro_after_init David Howells (4): afs: Fix page leak afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server afs: Fix updating of i_blocks on file/dir extension Dmitry Baryshkov (1): regulator: qcom-rpmh-regulator: fix pm8009-1 ldo7 resource name Dmitry Bogdanov (1): scsi: qla2xxx: Restore initiator in dual mode Doug Smythies (1): cpufreq: intel_pstate: Override parameters if HWP forced by BIOS Felix Fietkau (1): net: ethernet: mtk_eth_soc: avoid creating duplicate offload entries Felix Kuehling (1): drm/amdkfd: make needs_pcie_atomics FW-version dependent Gao Xiang (1): erofs: fix up erofs_lookup tracepoint Greg Kroah-Hartman (1): Linux 5.14.9 Guenter Roeck (5): m68k: Double cast io functions to unsigned long compiler.h: Introduce absolute_pointer macro net: i825xx: Use absolute_pointer for memcpy from fixed memory location alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile net: 6pack: Fix tx timeout and slot time Hamza Mahfooz (1): dma-debug: prevent an error message from causing runtime problems Hans de Goede (1): gpiolib: acpi: Make set-debounce-timeout failures non fatal Hao Xu (2): io_uring: fix race between poll completion and cancel_hash insertion io_uring: fix missing set of EPOLLONESHOT for CQ ring overflow Helge Deller (1): parisc: Use absolute_pointer() to define PAGE0 Huang Rui (1): drm/ttm: fix type mismatch error on sparc64 Ian Abbott (1): comedi: Fix memory leak in compat_insnlist() Ian Rogers (1): libperf evsel: Make use of FD robust. Ido Schimmel (2): nexthop: Fix division by zero while replacing a resilient group nexthop: Fix memory leaks in nexthop notification chain listeners Jack Pham (2): usb: gadget: f_uac2: Add missing companion descriptor for feedback EP usb: gadget: f_uac2: Populate SS descriptors' wBytesPerInterval Jan Beulich (1): xen/x86: fix PV trap handling on secondary processors Jason Wang (1): virtio-net: fix pages leaking when building skb in big mode Jens Axboe (2): io_uring: put provided buffer meta data under memcg accounting io_uring: don't punt files update to io-wq unconditionally Jesper Nilsson (1): net: stmmac: allow CSR clock of 300MHz Jian Shen (2): net: hns3: fix change RSS 'hfunc' ineffective issue net: hns3: fix inconsistent vf id print Jiapeng Chong (1): fpga: machxo2-spi: Fix missing error code in machxo2_write_complete() Jiaran Zhang (1): net: hns3: fix misuse vf id and vport id in some logs Jiashuo Liang (1): x86/fault: Fix wrong signal when vsyscall fails with pkey Johan Hovold (5): USB: cdc-acm: fix minor-number release staging: greybus: uart: fix tty use after free misc: bcm-vk: fix tty registration race net: hso: fix muxed tty registration USB: serial: cp210x: fix dropped characters with CP2102 Juergen Gross (3): xen/balloon: use a kernel thread instead a workqueue x86/setup: Call early_reserve_memory() earlier xen/balloon: fix balloon kthread freezing Julian Sikorski (1): Re-enable UAS for LaCie Rugged USB3-FW with fk quirk Julian Wiedmann (1): s390/qeth: fix NULL deref in qeth_clear_working_pool_list() Kaige Fu (1): irqchip/gic-v3-its: Fix potential VPE leak on error Karsten Graul (2): net/smc: add missing error check in smc_clc_prfx_set() net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work Kees Cook (1): x86/asm: Fix SETZ size enqcmds() build failure Kishon Vijay Abraham I (2): usb: core: hcd: Add support for deferring roothub registration xhci: Set HCD flag to defer primary roothub registration Krzysztof Kozlowski (3): USB: serial: mos7840: remove duplicated 0xac24 device ID USB: serial: option: remove duplicate USB device ID regulator: max14577: Revert "regulator: max14577: Add proper module aliases strings" Kunihiko Hayashi (1): gpio: uniphier: Fix void functions to remove return value Laurentiu Tudor (1): software node: balance refcount for managed software nodes Li Jinlin (1): blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd Li Jun (1): usb: dwc3: core: balance phy init and exit Li Li (1): binder: fix freeze race Lihong Kou (1): block: flush the integrity workqueue in blk_integrity_unregister Lijo Lazar (1): drm/amd/pm: Update intermediate power state for SI Linus Torvalds (5): sparc: avoid stringop-overread errors qnx4: avoid stringop-overread errors spi: Fix tegra20 build with CONFIG_PM=n Revert drm/vc4 hdmi runtime PM changes qnx4: work around gcc false positive warning bug Marc Zyngier (1): irqchip/armada-370-xp: Fix ack/eoi breakage Mario Limonciello (1): platform/x86: amd-pmc: Increase the response register timeout Mark Brown (3): kselftest/arm64: signal: Add SVE to the set of features we can check for spi: Revert modalias changes nfc: st-nci: Add SPI ID matching DT compatible Maurizio Lombardi (1): scsi: target: Fix the pgr/alua_support_store functions Meenakshikumar Somasundaram (1): drm/amd/display: Link training retry fix for abort case Michael Chan (1): bnxt_en: Fix TX timeout when TX ring size is set to the smallest Minas Harutyunyan (2): usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA Ming Lei (1): blk-mq: avoid to iterate over stale request Naohiro Aota (1): scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE Naoya Horiguchi (1): mm, hwpoison: add is_free_buddy_page() in HWPoisonHandlable() Nathan Rossi (1): net: phylink: Update SFP selected interface on advertising changes Nishanth Menon (1): serial: 8250: 8250_omap: Fix RX_LVL register offset Ondrej Zary (1): usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c Pali Rohár (1): serial: mvebu-uart: fix driver's tx_empty callback Paolo Abeni (1): mptcp: ensure tx skbs always have the MPTCP ext Pavel Hofman (1): usb: gadget: u_audio: EP-OUT bInterval in fback frequency Pawel Laszczak (1): usb: cdns3: fix race condition before setting doorbell Peter Collingbourne (1): arm64: add MTE supported check to thread switching and syscall entry/exit Philip Yang (2): drm/amdkfd: map SVM range with correct access permission drm/amdkfd: fix dma mapping leaking warning Qingqing Zhuo (1): drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo Qu Wenruo (1): btrfs: prevent __btrfs_dump_space_info() to underflow its free space Rafał Miłecki (1): Revert "USB: bcma: Add a check for devm_gpiod_get" Randy Dunlap (3): platform/x86: dell: fix DELL_WMI_PRIVACY dependencies & build error tty: synclink_gt: rename a conflicting function name irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build Robin Murphy (1): arm64: Mitigate MTE issues with str{n}cmp() Rohith Surabattula (2): cifs: Not to defer close on file when lock is set cifs: Fix soft lockup during fsstress Rui Miguel Silva (1): usb: isp1760: do not sleep in field register poll Ruozhu Li (1): nvme-rdma: destroy cm id before destroy qp to avoid use after free Sagi Grimberg (1): nvme-tcp: fix incorrect h2cdata pdu offset accounting Sai Krishna Potthuri (1): EDAC/synopsys: Fix wrong value type assignment for edac_mode Sean Christopherson (1): KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest Shai Malin (1): qed: rdma - don't wait for resources under hw error recovery flow Simon Ser (2): amd/display: downgrade validation failure log level amd/display: enable panel orientation quirks Slark Xiao (1): USB: serial: option: add device id for Foxconn T99W265 Steve French (1): cifs: fix incorrect check for null pointer in header_assemble Sudarsana Reddy Kalluru (1): atlantic: Fix issue in the pm resume flow. Todd Kjos (1): binder: make sure fd closes complete Tom Rix (1): fpga: machxo2-spi: Return an error on failure Tong Zhang (1): net: macb: fix use after free on rmmod Uwe Brandt (1): USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter Vladimir Oltean (5): net: dsa: tear down devlink port regions when tearing down the devlink port on error net: dsa: fix dsa_tree_setup error path net: dsa: don't allocate the slave_mii_bus using devres net: dsa: realtek: register the MDIO bus under devres net: mscc: ocelot: fix forwarding from BLOCKING ports remaining enabled Weizhao Ouyang (1): mm/debug: sync up MR_CONTIG_RANGE and MR_LONGTERM_PIN Wengang Wang (1): ocfs2: drop acl cache for directories too Xuan Zhuo (1): napi: fix race inside napi_enable Yufeng Mo (2): net: hns3: check queue id range before using net: hns3: fix a return value error in hclge_get_reset_status() Zhihao Cheng (1): blktrace: Fix uaf in blk_trace access after removing by sysfs dann frazier (1): arm64: Restore forced disabling of KPTI on ThunderX liaoguojia (1): net: hns3: check vlan id before using it zhang kai (1): ipv6: delay fib6_sernum increase in fib6_add

3 years, 2 months

1
1
0 0

Linux 5.10.70

by Greg Kroah-Hartman

I'm announcing the release of the 5.10.70 kernel. All users of the 5.10 kernel series must upgrade. The updated 5.10.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/alpha/include/asm/io.h | 6 arch/arm64/kernel/process.c | 2 arch/arm64/kvm/vgic/vgic-its.c | 8 arch/arm64/kvm/vgic/vgic.c | 3 arch/m68k/include/asm/raw_io.h | 20 - arch/parisc/include/asm/page.h | 2 arch/sparc/kernel/ioport.c | 4 arch/sparc/kernel/mdesc.c | 3 arch/x86/include/asm/special_insns.h | 4 arch/x86/xen/enlighten_pv.c | 15 block/blk-cgroup.c | 8 block/blk-integrity.c | 9 block/blk-mq-sched.c | 3 block/blk-mq-tag.c | 2 block/blk-mq.c | 3 drivers/acpi/nfit/core.c | 3 drivers/acpi/numa/hmat.c | 3 drivers/android/binder.c | 23 - drivers/clk/keystone/sci-clk.c | 4 drivers/cpufreq/intel_pstate.c | 22 - drivers/edac/dmc520_edac.c | 2 drivers/edac/synopsys_edac.c | 2 drivers/fpga/machxo2-spi.c | 6 drivers/gpio/gpio-uniphier.c | 4 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 3 drivers/gpu/drm/amd/pm/powerplay/si_dpm.c | 2 drivers/gpu/drm/drm_modes.c | 3 drivers/gpu/drm/i915/gt/intel_engine_user.c | 3 drivers/gpu/drm/i915/gvt/debugfs.c | 2 drivers/gpu/drm/i915/selftests/i915_gem_gtt.c | 3 drivers/gpu/drm/radeon/radeon_cs.c | 4 drivers/infiniband/hw/usnic/usnic_uiom_interval_tree.c | 3 drivers/interconnect/qcom/bcm-voter.c | 2 drivers/irqchip/Kconfig | 1 drivers/irqchip/irq-gic-v3-its.c | 2 drivers/mcb/mcb-core.c | 12 drivers/md/md.c | 5 drivers/md/raid5.c | 3 drivers/misc/sram.c | 4 drivers/net/dsa/realtek-smi-core.c | 2 drivers/net/ethernet/aquantia/atlantic/aq_pci_func.c | 4 drivers/net/ethernet/broadcom/bnxt/bnxt.c | 8 drivers/net/ethernet/broadcom/bnxt/bnxt.h | 5 drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 2 drivers/net/ethernet/cadence/macb_pci.c | 2 drivers/net/ethernet/freescale/enetc/enetc.c | 7 drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 45 +- drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 8 drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 52 +- drivers/net/ethernet/i825xx/82596.c | 2 drivers/net/ethernet/mellanox/mlx4/en_netdev.c | 3 drivers/net/ethernet/qlogic/qed/qed_iwarp.c | 8 drivers/net/ethernet/qlogic/qed/qed_roce.c | 8 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 2 drivers/net/hamradio/6pack.c | 4 drivers/net/phy/phylink.c | 30 + drivers/net/usb/hso.c | 12 drivers/nvme/host/core.c | 32 - drivers/nvme/host/multipath.c | 7 drivers/nvme/host/rdma.c | 16 drivers/nvme/host/tcp.c | 13 drivers/pci/controller/cadence/pcie-cadence-host.c | 3 drivers/pci/controller/pci-aardvark.c | 2 drivers/platform/x86/intel_punit_ipc.c | 3 drivers/s390/net/qeth_core_main.c | 3 drivers/scsi/lpfc/lpfc_attr.c | 3 drivers/scsi/qla2xxx/qla_init.c | 3 drivers/scsi/scsi_transport_iscsi.c | 8 drivers/scsi/sd_zbc.c | 6 drivers/spi/spi-loopback-test.c | 3 drivers/spi/spi-tegra20-slink.c | 4 drivers/staging/comedi/comedi_fops.c | 1 drivers/staging/greybus/uart.c | 62 +-- drivers/target/target_core_configfs.c | 32 + drivers/thermal/intel/int340x_thermal/processor_thermal_device.c | 5 drivers/thermal/thermal_core.c | 7 drivers/tty/serial/8250/8250_omap.c | 2 drivers/tty/serial/mvebu-uart.c | 2 drivers/tty/synclink_gt.c | 101 +---- drivers/usb/class/cdc-acm.c | 7 drivers/usb/class/cdc-acm.h | 2 drivers/usb/core/hcd.c | 29 + drivers/usb/dwc2/gadget.c | 193 +++++----- drivers/usb/dwc3/core.c | 30 - drivers/usb/gadget/udc/r8a66597-udc.c | 2 drivers/usb/host/bcma-hcd.c | 5 drivers/usb/host/xhci.c | 1 drivers/usb/musb/tusb6010.c | 1 drivers/usb/serial/cp210x.c | 47 ++ drivers/usb/serial/mos7840.c | 2 drivers/usb/serial/option.c | 11 drivers/usb/storage/unusual_devs.h | 9 drivers/usb/storage/unusual_uas.h | 2 drivers/xen/balloon.c | 62 ++- fs/afs/dir.c | 46 -- fs/afs/dir_edit.c | 4 fs/afs/inode.c | 10 fs/afs/internal.h | 10 fs/afs/write.c | 2 fs/btrfs/raid56.c | 3 fs/btrfs/space-info.c | 5 fs/btrfs/tree-log.c | 3 fs/btrfs/volumes.c | 3 fs/cifs/connect.c | 5 fs/cifs/file.c | 2 fs/ext4/fsmap.c | 4 fs/gfs2/glock.c | 3 fs/gfs2/log.c | 2 fs/gfs2/lops.c | 3 fs/io_uring.c | 2 fs/iomap/buffered-io.c | 3 fs/ocfs2/dlmglue.c | 3 fs/qnx4/dir.c | 69 ++- fs/ubifs/gc.c | 7 fs/ubifs/replay.c | 4 fs/xfs/scrub/bitmap.c | 4 fs/xfs/xfs_bmap_item.c | 4 fs/xfs/xfs_buf.c | 6 fs/xfs/xfs_extent_busy.c | 4 fs/xfs/xfs_extent_busy.h | 3 fs/xfs/xfs_extfree_item.c | 4 fs/xfs/xfs_refcount_item.c | 4 fs/xfs/xfs_rmap_item.c | 4 include/linux/compiler.h | 2 include/linux/list_sort.h | 7 include/linux/usb/hcd.h | 2 include/trace/events/erofs.h | 6 kernel/bpf/verifier.c | 2 kernel/trace/blktrace.c | 8 lib/list_sort.c | 17 lib/test_list_sort.c | 3 mm/util.c | 4 net/dsa/dsa2.c | 12 net/ipv6/ip6_fib.c | 3 net/smc/smc_clc.c | 3 net/smc/smc_core.c | 2 net/tipc/name_table.c | 4 tools/testing/selftests/arm64/signal/test_signals.h | 2 tools/testing/selftests/arm64/signal/test_signals_utils.c | 10 140 files changed, 861 insertions(+), 592 deletions(-) Andreas Larsson (1): sparc32: page align size in arch_dma_alloc Andy Shevchenko (1): platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR() Antoine Tenart (1): thermal/drivers/int340x: Do not set a wrong tcc offset on resume Anton Eidelman (1): nvme-multipath: fix ANA state updates when a namespace is not present Aya Levin (1): net/mlx4_en: Don't allow aRFS for encapsulated packets Baokun Li (1): scsi: iscsi: Adjust iface sysfs attr detection Bixuan Cui (1): bpf: Add oversize check before call kvcalloc() Borislav Petkov (1): EDAC/dmc520: Assign the proper type to dimm->edac_mode Carlo Lobrano (1): USB: serial: option: add Telit LN920 compositions Chen Jun (1): mm: fix uninitialized use in overcommit_policy_handler Christoph Hellwig (3): nvme: keep ctrl->namespaces ordered md: fix a lock order reversal in md_alloc block: check if a profile is actually registered in blk_integrity_unregister Claudiu Manoil (2): enetc: Fix illegal access when reading affinity_hint enetc: Fix uninitialized struct dim_sample field usage Cristian Marussi (1): kselftest/arm64: signal: Skip tests if required features are missing Dan Carpenter (6): usb: gadget: r8a66597: fix a loop in set_feature() usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() mcb: fix error handling in mcb_alloc_bus() thermal/core: Potential buffer overflow in thermal_build_list_of_policies() cifs: fix a sign extension bug scsi: lpfc: Use correct scnprintf() limit Dan Li (1): arm64: Mark __stack_chk_guard as __ro_after_init Dave Jiang (1): x86/asm: Add a missing __iomem annotation in enqcmds() David Howells (2): afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation afs: Fix updating of i_blocks on file/dir extension Dmitry Bogdanov (1): scsi: qla2xxx: Restore initiator in dual mode Doug Smythies (1): cpufreq: intel_pstate: Override parameters if HWP forced by BIOS Gao Xiang (1): erofs: fix up erofs_lookup tracepoint Greg Kroah-Hartman (1): Linux 5.10.70 Guenter Roeck (5): m68k: Double cast io functions to unsigned long compiler.h: Introduce absolute_pointer macro net: i825xx: Use absolute_pointer for memcpy from fixed memory location alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile net: 6pack: Fix tx timeout and slot time Helge Deller (1): parisc: Use absolute_pointer() to define PAGE0 Ian Abbott (1): comedi: Fix memory leak in compat_insnlist() Jan Beulich (1): xen/x86: fix PV trap handling on secondary processors Jens Axboe (1): io_uring: put provided buffer meta data under memcg accounting Jesper Nilsson (1): net: stmmac: allow CSR clock of 300MHz Jian Shen (1): net: hns3: fix change RSS 'hfunc' ineffective issue Jiapeng Chong (1): fpga: machxo2-spi: Fix missing error code in machxo2_write_complete() Jiri Slaby (1): tty: synclink_gt, drop unneeded forward declarations Johan Hovold (4): USB: cdc-acm: fix minor-number release staging: greybus: uart: fix tty use after free net: hso: fix muxed tty registration USB: serial: cp210x: fix dropped characters with CP2102 Juergen Gross (2): xen/balloon: use a kernel thread instead a workqueue xen/balloon: fix balloon kthread freezing Julian Sikorski (1): Re-enable UAS for LaCie Rugged USB3-FW with fk quirk Julian Wiedmann (1): s390/qeth: fix NULL deref in qeth_clear_working_pool_list() Kaige Fu (1): irqchip/gic-v3-its: Fix potential VPE leak on error Karsten Graul (2): net/smc: add missing error check in smc_clc_prfx_set() net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work Kees Cook (1): x86/asm: Fix SETZ size enqcmds() build failure Kishon Vijay Abraham I (2): usb: core: hcd: Add support for deferring roothub registration xhci: Set HCD flag to defer primary roothub registration Krzysztof Kozlowski (2): USB: serial: mos7840: remove duplicated 0xac24 device ID USB: serial: option: remove duplicate USB device ID Kunihiko Hayashi (1): gpio: uniphier: Fix void functions to remove return value Li Jinlin (1): blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd Li Jun (1): usb: dwc3: core: balance phy init and exit Lihong Kou (1): block: flush the integrity workqueue in blk_integrity_unregister Lijo Lazar (1): drm/amd/pm: Update intermediate power state for SI Linus Torvalds (4): sparc: avoid stringop-overread errors qnx4: avoid stringop-overread errors spi: Fix tegra20 build with CONFIG_PM=n qnx4: work around gcc false positive warning bug Mark Brown (1): kselftest/arm64: signal: Add SVE to the set of features we can check for Maurizio Lombardi (1): scsi: target: Fix the pgr/alua_support_store functions Michael Chan (1): bnxt_en: Fix TX timeout when TX ring size is set to the smallest Minas Harutyunyan (2): usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA Ming Lei (1): blk-mq: avoid to iterate over stale request Naohiro Aota (1): scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE Nathan Rossi (1): net: phylink: Update SFP selected interface on advertising changes Nishanth Menon (1): serial: 8250: 8250_omap: Fix RX_LVL register offset Ondrej Zary (1): usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c Pali Rohár (2): PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response serial: mvebu-uart: fix driver's tx_empty callback Qu Wenruo (1): btrfs: prevent __btrfs_dump_space_info() to underflow its free space Rafał Miłecki (1): Revert "USB: bcma: Add a check for devm_gpiod_get" Randy Dunlap (2): tty: synclink_gt: rename a conflicting function name irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build Ruozhu Li (1): nvme-rdma: destroy cm id before destroy qp to avoid use after free Sagi Grimberg (1): nvme-tcp: fix incorrect h2cdata pdu offset accounting Sai Krishna Potthuri (1): EDAC/synopsys: Fix wrong value type assignment for edac_mode Sami Tolvanen (1): treewide: Change list_sort to use const pointers Shai Malin (1): qed: rdma - don't wait for resources under hw error recovery flow Simon Ser (1): amd/display: downgrade validation failure log level Slark Xiao (1): USB: serial: option: add device id for Foxconn T99W265 Steve French (1): cifs: fix incorrect check for null pointer in header_assemble Sudarsana Reddy Kalluru (1): atlantic: Fix issue in the pm resume flow. Todd Kjos (1): binder: make sure fd closes complete Tom Rix (1): fpga: machxo2-spi: Return an error on failure Tong Zhang (1): net: macb: fix use after free on rmmod Uwe Brandt (1): USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter Vladimir Oltean (2): net: dsa: don't allocate the slave_mii_bus using devres net: dsa: realtek: register the MDIO bus under devres Wengang Wang (1): ocfs2: drop acl cache for directories too Yufeng Mo (1): net: hns3: check queue id range before using Zhihao Cheng (1): blktrace: Fix uaf in blk_trace access after removing by sysfs zhang kai (1): ipv6: delay fib6_sernum increase in fib6_add

3 years, 2 months

1
1
0 0

Linux 5.4.150

by Greg Kroah-Hartman

I'm announcing the release of the 5.4.150 kernel. All users of the 5.4 kernel series must upgrade. The updated 5.4.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.4.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/alpha/include/asm/io.h | 6 arch/arm64/boot/dts/marvell/armada-3720-turris-mox.dts | 17 arch/arm64/boot/dts/marvell/armada-37xx.dtsi | 11 arch/arm64/kernel/process.c | 2 arch/m68k/include/asm/raw_io.h | 20 - arch/parisc/include/asm/page.h | 2 arch/sparc/kernel/ioport.c | 4 arch/sparc/kernel/mdesc.c | 3 arch/x86/xen/enlighten_pv.c | 15 block/blk-cgroup.c | 8 drivers/android/binder.c | 23 - drivers/edac/synopsys_edac.c | 2 drivers/fpga/machxo2-spi.c | 6 drivers/gpio/gpio-uniphier.c | 4 drivers/irqchip/Kconfig | 1 drivers/irqchip/irq-gic-v3-its.c | 2 drivers/mcb/mcb-core.c | 12 drivers/md/md.c | 5 drivers/net/ethernet/broadcom/bnxt/bnxt.c | 8 drivers/net/ethernet/broadcom/bnxt/bnxt.h | 5 drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 2 drivers/net/ethernet/cadence/macb_pci.c | 2 drivers/net/ethernet/freescale/enetc/enetc.c | 5 drivers/net/ethernet/i825xx/82596.c | 2 drivers/net/ethernet/mellanox/mlx4/en_netdev.c | 3 drivers/net/ethernet/qlogic/qed/qed_iwarp.c | 8 drivers/net/ethernet/qlogic/qed/qed_roce.c | 8 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 2 drivers/net/hamradio/6pack.c | 4 drivers/net/usb/hso.c | 12 drivers/nvme/host/multipath.c | 7 drivers/platform/x86/intel_punit_ipc.c | 3 drivers/scsi/lpfc/lpfc_attr.c | 3 drivers/scsi/qla2xxx/qla_init.c | 3 drivers/scsi/scsi_transport_iscsi.c | 8 drivers/spi/spi-tegra20-slink.c | 4 drivers/staging/greybus/uart.c | 62 +-- drivers/thermal/intel/int340x_thermal/processor_thermal_device.c | 5 drivers/thermal/thermal_core.c | 7 drivers/tty/serial/mvebu-uart.c | 2 drivers/tty/synclink_gt.c | 101 +---- drivers/usb/class/cdc-acm.c | 7 drivers/usb/class/cdc-acm.h | 2 drivers/usb/core/hcd.c | 29 + drivers/usb/dwc2/gadget.c | 193 +++++----- drivers/usb/gadget/udc/r8a66597-udc.c | 2 drivers/usb/host/xhci.c | 1 drivers/usb/musb/tusb6010.c | 1 drivers/usb/serial/cp210x.c | 1 drivers/usb/serial/mos7840.c | 2 drivers/usb/serial/option.c | 11 drivers/usb/storage/unusual_devs.h | 9 drivers/usb/storage/unusual_uas.h | 2 drivers/xen/balloon.c | 62 ++- fs/afs/dir.c | 46 -- fs/btrfs/space-info.c | 5 fs/cifs/connect.c | 5 fs/cifs/file.c | 2 fs/ocfs2/dlmglue.c | 3 fs/qnx4/dir.c | 69 ++- include/linux/compiler.h | 2 include/linux/usb/hcd.h | 2 include/trace/events/erofs.h | 6 kernel/bpf/verifier.c | 2 kernel/trace/blktrace.c | 8 net/ipv6/ip6_fib.c | 3 net/smc/smc_clc.c | 3 68 files changed, 508 insertions(+), 381 deletions(-) Andreas Larsson (1): sparc32: page align size in arch_dma_alloc Andy Shevchenko (1): platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR() Antoine Tenart (1): thermal/drivers/int340x: Do not set a wrong tcc offset on resume Anton Eidelman (1): nvme-multipath: fix ANA state updates when a namespace is not present Aya Levin (1): net/mlx4_en: Don't allow aRFS for encapsulated packets Baokun Li (1): scsi: iscsi: Adjust iface sysfs attr detection Bixuan Cui (1): bpf: Add oversize check before call kvcalloc() Carlo Lobrano (1): USB: serial: option: add Telit LN920 compositions Christoph Hellwig (1): md: fix a lock order reversal in md_alloc Claudiu Manoil (1): enetc: Fix illegal access when reading affinity_hint Dan Carpenter (6): usb: gadget: r8a66597: fix a loop in set_feature() usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() mcb: fix error handling in mcb_alloc_bus() thermal/core: Potential buffer overflow in thermal_build_list_of_policies() cifs: fix a sign extension bug scsi: lpfc: Use correct scnprintf() limit Dan Li (1): arm64: Mark __stack_chk_guard as __ro_after_init David Howells (1): afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation Dmitry Bogdanov (1): scsi: qla2xxx: Restore initiator in dual mode Gao Xiang (1): erofs: fix up erofs_lookup tracepoint Greg Kroah-Hartman (1): Linux 5.4.150 Guenter Roeck (5): m68k: Double cast io functions to unsigned long compiler.h: Introduce absolute_pointer macro net: i825xx: Use absolute_pointer for memcpy from fixed memory location alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile net: 6pack: Fix tx timeout and slot time Helge Deller (1): parisc: Use absolute_pointer() to define PAGE0 Jan Beulich (1): xen/x86: fix PV trap handling on secondary processors Jesper Nilsson (1): net: stmmac: allow CSR clock of 300MHz Jiapeng Chong (1): fpga: machxo2-spi: Fix missing error code in machxo2_write_complete() Jiri Slaby (1): tty: synclink_gt, drop unneeded forward declarations Johan Hovold (3): USB: cdc-acm: fix minor-number release staging: greybus: uart: fix tty use after free net: hso: fix muxed tty registration Juergen Gross (2): xen/balloon: use a kernel thread instead a workqueue xen/balloon: fix balloon kthread freezing Julian Sikorski (1): Re-enable UAS for LaCie Rugged USB3-FW with fk quirk Kaige Fu (1): irqchip/gic-v3-its: Fix potential VPE leak on error Karsten Graul (1): net/smc: add missing error check in smc_clc_prfx_set() Kishon Vijay Abraham I (2): usb: core: hcd: Add support for deferring roothub registration xhci: Set HCD flag to defer primary roothub registration Krzysztof Kozlowski (2): USB: serial: mos7840: remove duplicated 0xac24 device ID USB: serial: option: remove duplicate USB device ID Kunihiko Hayashi (1): gpio: uniphier: Fix void functions to remove return value Li Jinlin (1): blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd Linus Torvalds (4): sparc: avoid stringop-overread errors qnx4: avoid stringop-overread errors spi: Fix tegra20 build with CONFIG_PM=n qnx4: work around gcc false positive warning bug Michael Chan (1): bnxt_en: Fix TX timeout when TX ring size is set to the smallest Minas Harutyunyan (2): usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA Ondrej Zary (1): usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c Pali Rohár (2): serial: mvebu-uart: fix driver's tx_empty callback arm64: dts: marvell: armada-37xx: Extend PCIe MEM space Qu Wenruo (1): btrfs: prevent __btrfs_dump_space_info() to underflow its free space Randy Dunlap (2): tty: synclink_gt: rename a conflicting function name irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build Sai Krishna Potthuri (1): EDAC/synopsys: Fix wrong value type assignment for edac_mode Shai Malin (1): qed: rdma - don't wait for resources under hw error recovery flow Slark Xiao (1): USB: serial: option: add device id for Foxconn T99W265 Steve French (1): cifs: fix incorrect check for null pointer in header_assemble Todd Kjos (1): binder: make sure fd closes complete Tom Rix (1): fpga: machxo2-spi: Return an error on failure Tong Zhang (1): net: macb: fix use after free on rmmod Uwe Brandt (1): USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter Wengang Wang (1): ocfs2: drop acl cache for directories too Zhihao Cheng (1): blktrace: Fix uaf in blk_trace access after removing by sysfs zhang kai (1): ipv6: delay fib6_sernum increase in fib6_add

3 years, 2 months

1
1
0 0

[PATCH] ocfs2: Fix data corruption after conversion from inline format

by Jan Kara

Commit 6dbf7bb55598 ("fs: Don't invalidate page buffers in block_write_full_page()") uncovered a latent bug in ocfs2 conversion from inline inode format to a normal inode format. The code in ocfs2_convert_inline_data_to_extents() attempts to zero out the whole cluster allocated for file data by grabbing, zeroing, and dirtying all pages covering this cluster. However these pages are beyond i_size, thus writeback code generally ignores these dirty pages and no blocks were ever actually zeroed on the disk. This oversight was fixed by commit 693c241a5f6a ("ocfs2: No need to zero pages past i_size.") for standard ocfs2 write path, inline conversion path was apparently forgotten; the commit log also has a reasoning why the zeroing actually is not needed. After commit 6dbf7bb55598, things became worse as writeback code stopped invalidating buffers on pages beyond i_size and thus these pages end up with clean PageDirty bit but with buffers attached to these pages being still dirty. So when a file is converted from inline format, then writeback triggers, and then the file is grown so that these pages become valid, the invalid dirtiness state is preserved, mark_buffer_dirty() does nothing on these pages (buffers are already dirty) but page is never written back because it is clean. So data written to these pages is lost once pages are reclaimed. Simple reproducer for the problem is: xfs_io -f -c "pwrite 0 2000" -c "pwrite 2000 2000" -c "fsync" \ -c "pwrite 4000 2000" ocfs2_file After unmounting and mounting the fs again, you can observe that end of 'ocfs2_file' has lost its contents. Fix the problem by not doing the pointless zeroing during conversion from inline format similarly as in the standard write path. CC: stable(a)vger.kernel.org Fixes: 6dbf7bb55598 ("fs: Don't invalidate page buffers in block_write_full_page()") Signed-off-by: Jan Kara <jack(a)suse.cz> --- fs/ocfs2/alloc.c | 46 ++++++++++++---------------------------------- 1 file changed, 12 insertions(+), 34 deletions(-) diff --git a/fs/ocfs2/alloc.c b/fs/ocfs2/alloc.c index f1cc8258d34a..12aead0dabe2 100644 --- a/fs/ocfs2/alloc.c +++ b/fs/ocfs2/alloc.c @@ -7045,7 +7045,7 @@ void ocfs2_set_inode_data_inline(struct inode *inode, struct ocfs2_dinode *di) int ocfs2_convert_inline_data_to_extents(struct inode *inode, struct buffer_head *di_bh) { - int ret, i, has_data, num_pages = 0; + int ret,has_data, num_pages = 0; int need_free = 0; u32 bit_off, num; handle_t *handle; @@ -7054,26 +7054,17 @@ int ocfs2_convert_inline_data_to_extents(struct inode *inode, struct ocfs2_super *osb = OCFS2_SB(inode->i_sb); struct ocfs2_dinode *di = (struct ocfs2_dinode *)di_bh->b_data; struct ocfs2_alloc_context *data_ac = NULL; - struct page **pages = NULL; - loff_t end = osb->s_clustersize; + struct page *page = NULL; struct ocfs2_extent_tree et; int did_quota = 0; has_data = i_size_read(inode) ? 1 : 0; if (has_data) { - pages = kcalloc(ocfs2_pages_per_cluster(osb->sb), - sizeof(struct page *), GFP_NOFS); - if (pages == NULL) { - ret = -ENOMEM; - mlog_errno(ret); - return ret; - } - ret = ocfs2_reserve_clusters(osb, 1, &data_ac); if (ret) { mlog_errno(ret); - goto free_pages; + goto out; } } @@ -7093,7 +7084,8 @@ int ocfs2_convert_inline_data_to_extents(struct inode *inode, } if (has_data) { - unsigned int page_end; + unsigned int page_end = min_t(unsigned, PAGE_SIZE, + osb->s_clustersize); u64 phys; ret = dquot_alloc_space_nodirty(inode, @@ -7117,15 +7109,8 @@ int ocfs2_convert_inline_data_to_extents(struct inode *inode, */ block = phys = ocfs2_clusters_to_blocks(inode->i_sb, bit_off); - /* - * Non sparse file systems zero on extend, so no need - * to do that now. - */ - if (!ocfs2_sparse_alloc(osb) && - PAGE_SIZE < osb->s_clustersize) - end = PAGE_SIZE; - - ret = ocfs2_grab_eof_pages(inode, 0, end, pages, &num_pages); + ret = ocfs2_grab_eof_pages(inode, 0, page_end, &page, + &num_pages); if (ret) { mlog_errno(ret); need_free = 1; @@ -7136,20 +7121,15 @@ int ocfs2_convert_inline_data_to_extents(struct inode *inode, * This should populate the 1st page for us and mark * it up to date. */ - ret = ocfs2_read_inline_data(inode, pages[0], di_bh); + ret = ocfs2_read_inline_data(inode, page, di_bh); if (ret) { mlog_errno(ret); need_free = 1; goto out_unlock; } - page_end = PAGE_SIZE; - if (PAGE_SIZE > osb->s_clustersize) - page_end = osb->s_clustersize; - - for (i = 0; i < num_pages; i++) - ocfs2_map_and_dirty_page(inode, handle, 0, page_end, - pages[i], i > 0, &phys); + ocfs2_map_and_dirty_page(inode, handle, 0, page_end, page, 0, + &phys); } spin_lock(&oi->ip_lock); @@ -7180,8 +7160,8 @@ int ocfs2_convert_inline_data_to_extents(struct inode *inode, } out_unlock: - if (pages) - ocfs2_unlock_and_free_pages(pages, num_pages); + if (page) + ocfs2_unlock_and_free_pages(&page, num_pages); out_commit: if (ret < 0 && did_quota) @@ -7205,8 +7185,6 @@ int ocfs2_convert_inline_data_to_extents(struct inode *inode, out: if (data_ac) ocfs2_free_alloc_context(data_ac); -free_pages: - kfree(pages); return ret; } -- 2.26.2

3 years, 2 months

1
0
0 0

[PATCH] USB: xhci: dbc: fix tty registration race

by Johan Hovold

Make sure to allocate resources before registering the tty device to avoid having a racing open() and write() fail to enable rx or dereference a NULL pointer when accessing the uninitialised fifo. Fixes: dfba2174dc42 ("usb: xhci: Add DbC support in xHCI driver") Cc: stable(a)vger.kernel.org # 4.16 Cc: Lu Baolu <baolu.lu(a)linux.intel.com> Signed-off-by: Johan Hovold <johan(a)kernel.org> --- drivers/usb/host/xhci-dbgtty.c | 28 +++++++++++++--------------- 1 file changed, 13 insertions(+), 15 deletions(-) diff --git a/drivers/usb/host/xhci-dbgtty.c b/drivers/usb/host/xhci-dbgtty.c index 6e784f2fc26d..eb46e642e87a 100644 --- a/drivers/usb/host/xhci-dbgtty.c +++ b/drivers/usb/host/xhci-dbgtty.c @@ -408,40 +408,38 @@ static int xhci_dbc_tty_register_device(struct xhci_dbc *dbc) return -EBUSY; xhci_dbc_tty_init_port(dbc, port); - tty_dev = tty_port_register_device(&port->port, - dbc_tty_driver, 0, NULL); - if (IS_ERR(tty_dev)) { - ret = PTR_ERR(tty_dev); - goto register_fail; - } ret = kfifo_alloc(&port->write_fifo, DBC_WRITE_BUF_SIZE, GFP_KERNEL); if (ret) - goto buf_alloc_fail; + goto err_exit_port; ret = xhci_dbc_alloc_requests(dbc, BULK_IN, &port->read_pool, dbc_read_complete); if (ret) - goto request_fail; + goto err_free_fifo; ret = xhci_dbc_alloc_requests(dbc, BULK_OUT, &port->write_pool, dbc_write_complete); if (ret) - goto request_fail; + goto err_free_requests; + + tty_dev = tty_port_register_device(&port->port, + dbc_tty_driver, 0, NULL); + if (IS_ERR(tty_dev)) { + ret = PTR_ERR(tty_dev); + goto err_free_requests; + } port->registered = true; return 0; -request_fail: +err_free_requests: xhci_dbc_free_requests(&port->read_pool); xhci_dbc_free_requests(&port->write_pool); +err_free_fifo: kfifo_free(&port->write_fifo); - -buf_alloc_fail: - tty_unregister_device(dbc_tty_driver, 0); - -register_fail: +err_exit_port: xhci_dbc_tty_exit_port(port); dev_err(dbc->dev, "can't register tty port, err %d\n", ret); -- 2.32.0

3 years, 2 months

2
1
0 0

[PATCH 1/2] usb: cdc-wdm: Fix check for WWAN

by Rikard Falkeborn

Commit 5c912e679506 ("usb: cdc-wdm: fix build error when CONFIG_WWAN_CORE is not set") fixed a build error when CONFIG_WWAN was set but CONFIG_WWAN_CORE was not. Since then CONFIG_WWAN_CORE was removed and joined with CONFIG_WWAN in commit 89212e160b81 ("net: wwan: Fix WWAN config symbols"). Also, since CONFIG_WWAN has class tri-state instead of bool, we cannot check if it is defined directly, but have to use IS_DEFINED() instead. Fixes: 5c912e679506 ("usb: cdc-wdm: fix build error when CONFIG_WWAN_CORE is not set") Cc: <stable(a)vger.kernel.org> Signed-off-by: Rikard Falkeborn <rikard.falkeborn(a)gmail.com> --- drivers/usb/class/cdc-wdm.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/drivers/usb/class/cdc-wdm.c b/drivers/usb/class/cdc-wdm.c index 35d5908b5478..03b25aaaa1dd 100644 --- a/drivers/usb/class/cdc-wdm.c +++ b/drivers/usb/class/cdc-wdm.c @@ -824,7 +824,7 @@ static struct usb_class_driver wdm_class = { }; /* --- WWAN framework integration --- */ -#ifdef CONFIG_WWAN_CORE +#if IS_ENABLED(CONFIG_WWAN) static int wdm_wwan_port_start(struct wwan_port *port) { struct wdm_device *desc = wwan_port_get_drvdata(port); @@ -963,11 +963,11 @@ static void wdm_wwan_rx(struct wdm_device *desc, int length) /* inbuf has been copied, it is safe to check for outstanding data */ schedule_work(&desc->service_outs_intr); } -#else /* CONFIG_WWAN_CORE */ +#else /* CONFIG_WWAN */ static void wdm_wwan_init(struct wdm_device *desc) {} static void wdm_wwan_deinit(struct wdm_device *desc) {} static void wdm_wwan_rx(struct wdm_device *desc, int length) {} -#endif /* CONFIG_WWAN_CORE */ +#endif /* CONFIG_WWAN */ /* --- error handling --- */ static void wdm_rxwork(struct work_struct *work) -- 2.33.0

3 years, 2 months

2
2
0 0

[PATCH 2/2] USB: cdc-acm: fix break reporting

by Johan Hovold

A recent change that started reporting break events forgot to push the event to the line discipline, which meant that a detected break would not be reported until further characters had been receive (the port could even have been closed and reopened in between). Fixes: 08dff274edda ("cdc-acm: fix BREAK rx code path adding necessary calls") Cc: stable(a)vger.kernel.org Signed-off-by: Johan Hovold <johan(a)kernel.org> --- drivers/usb/class/cdc-acm.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/drivers/usb/class/cdc-acm.c b/drivers/usb/class/cdc-acm.c index c7a1736720e7..7b2e2420ecae 100644 --- a/drivers/usb/class/cdc-acm.c +++ b/drivers/usb/class/cdc-acm.c @@ -340,6 +340,9 @@ static void acm_process_notification(struct acm *acm, unsigned char *buf) acm->iocount.overrun++; spin_unlock_irqrestore(&acm->read_lock, flags); + if (newctrl & ACM_CTRL_BRK) + tty_flip_buffer_push(&acm->port); + if (difference) wake_up_all(&acm->wioctl); -- 2.32.0

3 years, 2 months

2
1
0 0

[PATCH 1/2] USB: cdc-acm: fix racy tty buffer accesses

by Johan Hovold

A recent change that started reporting break events to the line discipline caused the tty-buffer insertions to no longer be serialised by inserting events also from the completion handler for the interrupt endpoint. Completion calls for distinct endpoints are not guaranteed to be serialised. For example, in case a host-controller driver uses bottom-half completion, the interrupt and bulk-in completion handlers can end up running in parallel on two CPUs (high-and low-prio tasklets, respectively) thereby breaking the tty layer's single producer assumption. Fix this by holding the read lock also when inserting characters from the bulk endpoint. Fixes: 08dff274edda ("cdc-acm: fix BREAK rx code path adding necessary calls") Cc: stable(a)vger.kernel.org Signed-off-by: Johan Hovold <johan(a)kernel.org> --- drivers/usb/class/cdc-acm.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/drivers/usb/class/cdc-acm.c b/drivers/usb/class/cdc-acm.c index 4e2f1552f4b7..c7a1736720e7 100644 --- a/drivers/usb/class/cdc-acm.c +++ b/drivers/usb/class/cdc-acm.c @@ -475,11 +475,16 @@ static int acm_submit_read_urbs(struct acm *acm, gfp_t mem_flags) static void acm_process_read_urb(struct acm *acm, struct urb *urb) { + unsigned long flags; + if (!urb->actual_length) return; + spin_lock_irqsave(&acm->read_lock, flags); tty_insert_flip_string(&acm->port, urb->transfer_buffer, urb->actual_length); + spin_unlock_irqrestore(&acm->read_lock, flags); + tty_flip_buffer_push(&acm->port); } -- 2.32.0

3 years, 2 months

2
1
0 0

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror September 2021