I'm announcing the release of the 6.6.43 kernel.
All users of the 6.6 kernel series must upgrade.
The updated 6.6.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.6.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Makefile | 2 -
arch/arm64/boot/dts/qcom/ipq6018.dtsi | 1
arch/arm64/boot/dts/qcom/msm8996.dtsi | 1
arch/arm64/boot/dts/qcom/qrb4210-rb2.dts | 13 ++++++++
arch/arm64/boot/dts/qcom/sdm630.dtsi | 1
arch/arm64/boot/dts/qcom/sm6350.dtsi | 1
drivers/gpu/drm/amd/amdgpu/sdma_v4_0.c | 2 -
drivers/net/tap.c | 5 +++
drivers/net/tun.c | 3 ++
drivers/usb/gadget/function/f_midi2.c | 19 +++++++-----
fs/jfs/xattr.c | 23 ++++++++++++---
fs/locks.c | 9 ++----
fs/ntfs3/fslog.c | 44 ++++++++++++++++++++++++-----
fs/ocfs2/dir.c | 46 +++++++++++++++++++------------
sound/core/pcm_dmaengine.c | 6 +++-
sound/core/seq/seq_ump_client.c | 16 ++++++++++
sound/pci/hda/patch_realtek.c | 2 +
17 files changed, 149 insertions(+), 45 deletions(-)
Dan Carpenter (1):
drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
Dmitry Baryshkov (1):
arm64: dts: qcom: qrb4210-rb2: switch I2C2 to i2c-gpio
Dongli Zhang (1):
tun: add missing verification for short frame
Edson Juliano Drosdeck (1):
ALSA: hda/realtek: Enable headset mic on Positivo SU C1400
Greg Kroah-Hartman (1):
Linux 6.6.43
Jann Horn (1):
filelock: Fix fcntl/close race recovery compat path
Konstantin Komarov (1):
fs/ntfs3: Add a check for attr_names and oatbl
Krishna Kurapati (4):
arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB
arm64: dts: qcom: sm6350: Disable SS instance in Parkmode for USB
arm64: dts: qcom: ipq6018: Disable SS instance in Parkmode for USB
arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB
Seunghun Han (1):
ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
Shengjiu Wang (1):
ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused
Si-Wei Liu (1):
tap: add missing verification for short frame
Takashi Iwai (2):
usb: gadget: midi2: Fix incorrect default MIDI2 protocol setup
ALSA: seq: ump: Skip useless ports for static blocks
lei lu (3):
ocfs2: add bounds checking to ocfs2_check_dir_entry()
jfs: don't walk off the end of ealist
fs/ntfs3: Validate ff offset
I'm announcing the release of the 6.1.102 kernel.
All users of the 6.1 kernel series must upgrade.
The updated 6.1.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.1.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Makefile | 2 -
arch/arm64/boot/dts/qcom/ipq6018.dtsi | 1
arch/arm64/boot/dts/qcom/msm8996.dtsi | 1
arch/arm64/boot/dts/qcom/sdm630.dtsi | 1
drivers/gpu/drm/amd/amdgpu/sdma_v4_0.c | 2 -
drivers/net/tap.c | 5 +++
drivers/net/tun.c | 3 ++
fs/btrfs/transaction.c | 5 ++-
fs/f2fs/super.c | 15 +++++++++-
fs/jfs/xattr.c | 23 +++++++++++++---
fs/locks.c | 9 ++----
fs/ntfs3/fslog.c | 6 +++-
fs/ocfs2/dir.c | 46 ++++++++++++++++++++-------------
sound/core/pcm_dmaengine.c | 6 +++-
sound/pci/hda/patch_realtek.c | 2 +
15 files changed, 94 insertions(+), 33 deletions(-)
Chao Yu (1):
f2fs: avoid dead loop in f2fs_issue_checkpoint()
Dan Carpenter (1):
drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
Dongli Zhang (1):
tun: add missing verification for short frame
Edson Juliano Drosdeck (1):
ALSA: hda/realtek: Enable headset mic on Positivo SU C1400
Filipe Manana (1):
btrfs: do not BUG_ON on failure to get dir index for new snapshot
Greg Kroah-Hartman (1):
Linux 6.1.102
Jann Horn (1):
filelock: Fix fcntl/close race recovery compat path
Krishna Kurapati (3):
arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB
arm64: dts: qcom: ipq6018: Disable SS instance in Parkmode for USB
arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB
Seunghun Han (1):
ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
Shengjiu Wang (1):
ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused
Si-Wei Liu (1):
tap: add missing verification for short frame
lei lu (3):
ocfs2: add bounds checking to ocfs2_check_dir_entry()
jfs: don't walk off the end of ealist
fs/ntfs3: Validate ff offset
This is v6.8 specific; v6.9 is reported as not affected (due to
extensive code refactoring).
Commit dc3f5aae0638 reworked how early cmdline CPU feature parsing
is done, and converted to using memcmp() in preparation for the move to
the pi minimal C standard library.
As a result it caused a regression where-by a parameter >= 146
characters on the kernel command line would cause a silent panic with no
console clues as to why.
It is due to memcmp() in include/linux/fortify-string.h detecting an
attempted out-of-bounds read. The cause itself is subtle.
arch/arm64/kernel/idreg-override.c::__parse_cmdline() compares the
struct aliases entries with each parameter via memcmp().
#define FTR_ALIAS_NAME_LEN 30
#define FTR_ALIAS_OPTION_LEN 116
...
static const struct {
char alias[FTR_ALIAS_NAME_LEN];
char feature[FTR_ALIAS_OPTION_LEN];
} aliases[]
Each element is 146 characters. When a parameter is also 146 characters
the call looks like memcmp(buf, aliases[i].alias, len+1) where len is
the equivalent of strlen(buf) and +1 to compare including the trailing
NUL.
That triggers the fortified memcmp()'s:
if (p_size < size || q_size < size)
fortify_panic(__func__);
where q_size == 146, size == 147
The solution here is to not call memcmp() at all unless the two strings
have the same length.
Initially reported in Ubuntu (and confirmed to affect Debian and
Mainline):
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2069534
Signed-off-by: Tj <tj.iam.tj(a)proton.me>
---
arch/arm64/kernel/idreg-override.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/arch/arm64/kernel/idreg-override.c b/arch/arm64/kernel/idreg-override.c
index e30fd9e32ef3a..9d2c120f378ae 100644
--- a/arch/arm64/kernel/idreg-override.c
+++ b/arch/arm64/kernel/idreg-override.c
@@ -308,7 +308,8 @@ static __init void __parse_cmdline(const char *cmdline, bool parse_aliases)
match_options(buf);
for (i = 0; parse_aliases && i < ARRAY_SIZE(aliases); i++)
- if (!memcmp(buf, aliases[i].alias, len + 1))
+ if (len == strlen(aliases[i].alias) &&
+ !memcmp(buf, aliases[i].alias, len + 1))
__parse_cmdline(aliases[i].feature, false);
} while (1);
}
--
2.39.2
This is the start of the stable review cycle for the 5.15.164 release.
There are 87 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sat, 27 Jul 2024 14:27:16 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.164-r…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.15.164-rc1
Jann Horn <jannh(a)google.com>
filelock: Fix fcntl/close race recovery compat path
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused
Krishna Kurapati <quic_kriskura(a)quicinc.com>
arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB
Krishna Kurapati <quic_kriskura(a)quicinc.com>
arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB
Seunghun Han <kkamagui(a)gmail.com>
ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
Edson Juliano Drosdeck <edson.drosdeck(a)gmail.com>
ALSA: hda/realtek: Enable headset mic on Positivo SU C1400
lei lu <llfamsec(a)gmail.com>
fs/ntfs3: Validate ff offset
lei lu <llfamsec(a)gmail.com>
jfs: don't walk off the end of ealist
lei lu <llfamsec(a)gmail.com>
ocfs2: add bounds checking to ocfs2_check_dir_entry()
Paolo Abeni <pabeni(a)redhat.com>
net: relax socket state check at accept time.
Linus Torvalds <torvalds(a)linux-foundation.org>
Add gitignore file for samples/fanotify/ subdirectory
Gabriel Krisman Bertazi <krisman(a)collabora.com>
docs: Fix formatting of literal sections in fanotify docs
Gabriel Krisman Bertazi <krisman(a)collabora.com>
samples: Make fs-monitor depend on libc and headers
Gabriel Krisman Bertazi <krisman(a)collabora.com>
samples: Add fs error monitoring example
Dan Carpenter <dan.carpenter(a)linaro.org>
drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
Johannes Berg <johannes.berg(a)intel.com>
wifi: mac80211: disable softirqs for queued frame handling
SeongJae Park <sj(a)kernel.org>
mm/damon/core: merge regions aggressively when max_nr_regions is unmet
David Laight <David.Laight(a)ACULAB.COM>
minmax: relax check to allow comparison between unsigned arguments and signed constants
David Laight <David.Laight(a)ACULAB.COM>
minmax: allow comparisons of 'int' against 'unsigned char/short'
David Laight <David.Laight(a)ACULAB.COM>
minmax: allow min()/max()/clamp() if the arguments have the same signedness.
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
minmax: fix header inclusions
Jason A. Donenfeld <Jason(a)zx2c4.com>
minmax: clamp more efficiently by avoiding extra comparison
Jason A. Donenfeld <Jason(a)zx2c4.com>
minmax: sanity check constant bounds when clamping
Bart Van Assche <bvanassche(a)acm.org>
tracing: Define the is_signed_type() macro once
David Lechner <dlechner(a)baylibre.com>
spi: mux: set ctlr->bits_per_word_mask
Edward Adam Davis <eadavis(a)qq.com>
hfsplus: fix uninit-value in copy_name
John Hubbard <jhubbard(a)nvidia.com>
selftests/vDSO: fix clang build errors and warnings
Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de>
spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices
Puranjay Mohan <puranjay(a)kernel.org>
riscv: stacktrace: fix usage of ftrace_graph_ret_addr()
Christian Brauner <brauner(a)kernel.org>
fs: better handle deep ancestor chains in is_subdir()
Pierre-Eric Pelloux-Prayer <pierre-eric.pelloux-prayer(a)amd.com>
drm/radeon: check bo_va->bo is non-NULL before using it
Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp>
Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
Xingui Yang <yangxingui(a)huawei.com>
scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
Ganesh Goudar <ganeshgr(a)linux.ibm.com>
powerpc/eeh: avoid possible crash when edev->pdev changes
Anjali K <anjalik(a)linux.ibm.com>
powerpc/pseries: Whitelist dtl slub object for copying to userspace
Yunshui Jiang <jiangyunshui(a)kylinos.cn>
net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD()
Daniele Palmas <dnlplm(a)gmail.com>
net: usb: qmi_wwan: add Telit FN912 compositions
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ALSA: dmaengine_pcm: terminate dmaengine before synchronize
Aivaz Latypov <reichaivaz(a)gmail.com>
ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx
Filipe Manana <fdmanana(a)suse.com>
btrfs: qgroup: fix quota root leak after quota disable failure
Armin Wolf <W_Armin(a)gmx.de>
platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB
Armin Wolf <W_Armin(a)gmx.de>
platform/x86: lg-laptop: Change ACPI device id
Armin Wolf <W_Armin(a)gmx.de>
platform/x86: lg-laptop: Remove LGEX0815 hotkey handling
Armin Wolf <W_Armin(a)gmx.de>
platform/x86: wireless-hotkey: Add support for LG Airplane Button
Heiko Carstens <hca(a)linux.ibm.com>
s390/sclp: Fix sclp_init() cleanup on failure
Chen Ni <nichen(a)iscas.ac.cn>
can: kvaser_usb: fix return value for hif_usb_send_regout
Primoz Fiser <primoz.fiser(a)norik.com>
ASoC: ti: omap-hdmi: Fix too long driver name
Jai Luthra <j-luthra(a)ti.com>
ASoC: ti: davinci-mcasp: Set min period size using FIFO config
Jai Luthra <j-luthra(a)ti.com>
ALSA: dmaengine: Synchronize dma channel after drop()
Thomas GENTY <tomlohave(a)gmail.com>
bytcr_rt5640 : inverse jack detect for Archos 101 cesium
Tobias Jakobi <tjakobi(a)math.uni-bielefeld.de>
Input: i8042 - add Ayaneo Kun to i8042 quirk table
Jonathan Denose <jdenose(a)google.com>
Input: elantech - fix touchpad state on resume for Lenovo N24
Arnd Bergmann <arnd(a)arndb.de>
mips: fix compat_sys_lseek syscall
Kailang Yang <kailang(a)realtek.com>
ALSA: hda/realtek: Add more codec ID to no shutup pins list
Alexey Makhalov <alexey.makhalov(a)broadcom.com>
drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency
Michael Ellerman <mpe(a)ellerman.id.au>
KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
Dmitry Antipov <dmantipov(a)yandex.ru>
wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
Chunguang Xu <chunguang.xu(a)shopee.com>
nvme: avoid double free special payload
Alexander Usyskin <alexander.usyskin(a)intel.com>
mei: demote client disconnect warning on suspend to debug
Yuntao Wang <yuntao.wang(a)linux.dev>
fs/file: fix the check in find_next_fd()
Masahiro Yamada <masahiroy(a)kernel.org>
kconfig: remove wrong expr_trans_bool()
Masahiro Yamada <masahiroy(a)kernel.org>
kconfig: gconf: give a proper initial state to the Save button
Andreas Hindborg <a.hindborg(a)samsung.com>
null_blk: fix validation of block size
Wei Li <liwei391(a)huawei.com>
arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
Eric Dumazet <edumazet(a)google.com>
ila: block BH in ila_output()
Eric Dumazet <edumazet(a)google.com>
net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input()
Hans de Goede <hdegoede(a)redhat.com>
Input: silead - Always support 10 fingers
Michael Ellerman <mpe(a)ellerman.id.au>
selftests/openat2: Fix build warnings on ppc64
Dmitry Antipov <dmantipov(a)yandex.ru>
wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan()
Ayala Beker <ayala.beker(a)intel.com>
wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option
Yedidya Benshimol <yedidya.ben.shimol(a)intel.com>
wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd
Yedidya Benshimol <yedidya.ben.shimol(a)intel.com>
wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup
Johannes Berg <johannes.berg(a)intel.com>
wifi: mac80211: handle tasklet frames before stopping
Nicolas Escande <nico.escande(a)gmail.com>
wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata
Dhananjay Ugwekar <Dhananjay.Ugwekar(a)amd.com>
tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
Armin Wolf <W_Armin(a)gmx.de>
ACPI: EC: Avoid returning AE_OK on errors in address space handler
Armin Wolf <W_Armin(a)gmx.de>
ACPI: EC: Abort address space access upon error
Saurav Kashyap <skashyap(a)marvell.com>
scsi: qedf: Set qed_slowpath_params to zero before use
Saurav Kashyap <skashyap(a)marvell.com>
scsi: qedf: Wait for stag work during unload
Saurav Kashyap <skashyap(a)marvell.com>
scsi: qedf: Don't process stag work during unload and recovery
Martin Wilck <martin.wilck(a)suse.com>
scsi: core: alua: I/O errors for ALUA state transitions
Bart Van Assche <bvanassche(a)acm.org>
scsi: core: Fix a use-after-free
Daniel Borkmann <daniel(a)iogearbox.net>
bpf: Fix overrunning reservations in ringbuf
Kuan-Wei Chiu <visitorckw(a)gmail.com>
ACPI: processor_idle: Fix invalid comparison with insertion sort for latency
Masahiro Yamada <masahiroy(a)kernel.org>
ARM: 9324/1: fix get_user() broken with veneer
Jann Horn <jannh(a)google.com>
filelock: Remove locks reliably when fcntl/close race is detected
Kees Cook <keescook(a)chromium.org>
gcc-plugins: Rename last_stmt() for GCC 14+
-------------
Diffstat:
.../admin-guide/filesystem-monitoring.rst | 20 +--
Makefile | 4 +-
arch/arm/include/asm/uaccess.h | 14 +-
arch/arm64/boot/dts/qcom/msm8996.dtsi | 1 +
arch/arm64/boot/dts/qcom/sdm630.dtsi | 1 +
arch/arm64/kernel/armv8_deprecated.c | 3 +
arch/mips/kernel/syscalls/syscall_o32.tbl | 2 +-
arch/powerpc/kernel/eeh_pe.c | 7 +-
arch/powerpc/kvm/book3s_64_vio.c | 18 ++-
arch/powerpc/platforms/pseries/setup.c | 4 +-
arch/riscv/kernel/stacktrace.c | 3 +-
drivers/acpi/ec.c | 9 +-
drivers/acpi/processor_idle.c | 40 +++---
drivers/block/null_blk/main.c | 4 +-
drivers/gpu/drm/amd/amdgpu/sdma_v4_0.c | 2 +-
drivers/gpu/drm/radeon/radeon_gem.c | 2 +-
drivers/gpu/drm/vmwgfx/Kconfig | 2 +-
drivers/input/mouse/elantech.c | 31 +++++
drivers/input/serio/i8042-acpipnpio.h | 18 ++-
drivers/input/touchscreen/silead.c | 19 +--
drivers/misc/mei/main.c | 2 +-
drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 2 +-
drivers/net/usb/qmi_wwan.c | 2 +
drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 16 ++-
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 5 +-
drivers/nvme/host/core.c | 1 +
drivers/platform/x86/lg-laptop.c | 89 +++++--------
drivers/platform/x86/wireless-hotkey.c | 2 +
drivers/s390/char/sclp.c | 1 +
drivers/scsi/device_handler/scsi_dh_alua.c | 31 +++--
drivers/scsi/hosts.c | 16 ++-
drivers/scsi/libsas/sas_internal.h | 14 ++
drivers/scsi/qedf/qedf.h | 1 +
drivers/scsi/qedf/qedf_main.c | 47 ++++++-
drivers/scsi/scsi_lib.c | 6 +-
drivers/scsi/scsi_priv.h | 2 +-
drivers/scsi/scsi_scan.c | 1 +
drivers/scsi/scsi_sysfs.c | 1 +
drivers/spi/spi-imx.c | 2 +-
drivers/spi/spi-mux.c | 1 +
fs/btrfs/qgroup.c | 4 +-
fs/dcache.c | 31 ++---
fs/file.c | 4 +-
fs/hfsplus/xattr.c | 2 +-
fs/jfs/xattr.c | 23 +++-
fs/locks.c | 18 ++-
fs/ntfs3/fslog.c | 6 +-
fs/ocfs2/dir.c | 46 ++++---
include/linux/compiler.h | 6 +
include/linux/minmax.h | 87 +++++++++----
include/linux/overflow.h | 1 -
include/linux/trace_events.h | 2 -
include/scsi/scsi_host.h | 2 +
include/sound/dmaengine_pcm.h | 1 +
kernel/bpf/ringbuf.c | 30 ++++-
mm/damon/core.c | 21 ++-
net/bluetooth/hci_core.c | 4 +
net/ipv4/af_inet.c | 4 +-
net/ipv6/ila/ila_lwt.c | 7 +-
net/ipv6/rpl_iptunnel.c | 14 +-
net/mac80211/ieee80211_i.h | 2 +
net/mac80211/main.c | 11 +-
net/mac80211/mesh.c | 1 +
net/mac80211/scan.c | 14 +-
net/mac80211/util.c | 4 +
net/mac802154/tx.c | 8 +-
net/wireless/scan.c | 8 +-
samples/Kconfig | 9 ++
samples/Makefile | 1 +
samples/fanotify/.gitignore | 1 +
samples/fanotify/Makefile | 5 +
samples/fanotify/fs-monitor.c | 142 +++++++++++++++++++++
scripts/gcc-plugins/gcc-common.h | 4 +
scripts/kconfig/expr.c | 29 -----
scripts/kconfig/expr.h | 1 -
scripts/kconfig/gconf.c | 3 +-
scripts/kconfig/menu.c | 2 -
sound/core/pcm_dmaengine.c | 26 ++++
sound/pci/hda/patch_realtek.c | 7 +
sound/soc/intel/boards/bytcr_rt5640.c | 11 ++
sound/soc/soc-generic-dmaengine-pcm.c | 8 ++
sound/soc/ti/davinci-mcasp.c | 9 +-
sound/soc/ti/omap-hdmi.c | 6 +-
tools/power/cpupower/utils/helpers/amd.c | 26 +++-
tools/testing/selftests/openat2/openat2_test.c | 1 +
tools/testing/selftests/vDSO/parse_vdso.c | 16 ++-
.../selftests/vDSO/vdso_standalone_test_x86.c | 18 ++-
87 files changed, 813 insertions(+), 319 deletions(-)
In a commit 1d717123bb1a ("ALSA: firewire-lib: Avoid
-Wflex-array-member-not-at-end warning"), DEFINE_FLEX() macro was used to
handle variable length of array for header field in struct fw_iso_packet
structure. The usage of macro has a side effect that the designated
initializer assigns the count of array to the given field. Therefore
CIP_HEADER_QUADLETS (=2) is assigned to struct fw_iso_packet.header,
while the original designated initializer assigns zero to all fields.
With CIP_NO_HEADER flag, the change causes invalid length of header in
isochronous packet for 1394 OHCI IT context. This bug affects all of
devices supported by ALSA fireface driver; RME Fireface 400, 800, UCX, UFX,
and 802.
This commit fixes the bug by replacing it with the alternative version of
macro which corresponds no initializer.
Cc: <stable(a)vger.kernel.org>
Fixes: 1d717123bb1a ("ALSA: firewire-lib: Avoid -Wflex-array-member-not-at-end warning")
Reported-by: Edmund Raile <edmund.raile(a)proton.me>
Closes: https://lore.kernel.org/r/rrufondjeynlkx2lniot26ablsltnynfaq2gnqvbiso7ds32i…
Signed-off-by: Takashi Sakamoto <o-takashi(a)sakamocchi.jp>
---
sound/firewire/amdtp-stream.c | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)
diff --git a/sound/firewire/amdtp-stream.c b/sound/firewire/amdtp-stream.c
index d35d0a420ee0..1a163bbcabd7 100644
--- a/sound/firewire/amdtp-stream.c
+++ b/sound/firewire/amdtp-stream.c
@@ -1180,8 +1180,7 @@ static void process_rx_packets(struct fw_iso_context *context, u32 tstamp, size_
(void)fw_card_read_cycle_time(fw_parent_device(s->unit)->card, &curr_cycle_time);
for (i = 0; i < packets; ++i) {
- DEFINE_FLEX(struct fw_iso_packet, template, header,
- header_length, CIP_HEADER_QUADLETS);
+ DEFINE_RAW_FLEX(struct fw_iso_packet, template, header, CIP_HEADER_QUADLETS);
bool sched_irq = false;
build_it_pkt_header(s, desc->cycle, template, pkt_header_length,
--
2.43.0
This is the start of the stable review cycle for the 6.10.2 release.
There are 29 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sat, 27 Jul 2024 14:27:16 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.10.2-rc1…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.10.2-rc1
Jann Horn <jannh(a)google.com>
filelock: Fix fcntl/close race recovery compat path
Takashi Iwai <tiwai(a)suse.de>
ALSA: seq: ump: Skip useless ports for static blocks
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused
Krishna Kurapati <quic_kriskura(a)quicinc.com>
arm64: dts: qcom: sm6115: Disable SS instance in Parkmode for USB
Krishna Kurapati <quic_kriskura(a)quicinc.com>
arm64: dts: qcom: sdm845: Disable SS instance in Parkmode for USB
Krishna Kurapati <quic_kriskura(a)quicinc.com>
arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB
Krishna Kurapati <quic_kriskura(a)quicinc.com>
arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB
Krishna Kurapati <quic_kriskura(a)quicinc.com>
arm64: dts: qcom: ipq6018: Disable SS instance in Parkmode for USB
Krishna Kurapati <quic_kriskura(a)quicinc.com>
arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB
Krishna Kurapati <quic_kriskura(a)quicinc.com>
arm64: dts: qcom: sm6350: Disable SS instance in Parkmode for USB
Krishna Kurapati <quic_kriskura(a)quicinc.com>
arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB
Abel Vesa <abel.vesa(a)linaro.org>
arm64: dts: qcom: x1e80100-crd: Fix USB PHYs regulators
Abel Vesa <abel.vesa(a)linaro.org>
arm64: dts: qcom: x1e80100-qcp: Fix the PHY regulator for PCIe 6a
Abel Vesa <abel.vesa(a)linaro.org>
arm64: dts: qcom: x1e80100-crd: Fix the PHY regulator for PCIe 6a
Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org>
arm64: dts: qcom: qrb4210-rb2: switch I2C2 to i2c-gpio
Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org>
arm64: dts: qcom: qrb2210-rb1: switch I2C2 to i2c-gpio
Abel Vesa <abel.vesa(a)linaro.org>
arm64: dts: qcom: x1e80100-qcp: Fix USB PHYs regulators
Krishna Kurapati <quic_kriskura(a)quicinc.com>
arm64: dts: qcom: sc7280: Disable SuperSpeed instances in park mode
Krishna Kurapati <quic_kriskura(a)quicinc.com>
arm64: dts: qcom: sc7180: Disable SuperSpeed instances in park mode
Seunghun Han <kkamagui(a)gmail.com>
ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
Edson Juliano Drosdeck <edson.drosdeck(a)gmail.com>
ALSA: hda/realtek: Enable headset mic on Positivo SU C1400
Shenghao Ding <shenghao-ding(a)ti.com>
ALSA: hda/tas2781: Add new quirk for Lenovo Hera2 Laptop
Takashi Iwai <tiwai(a)suse.de>
usb: gadget: midi2: Fix incorrect default MIDI2 protocol setup
lei lu <llfamsec(a)gmail.com>
fs/ntfs3: Validate ff offset
Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com>
fs/ntfs3: Add a check for attr_names and oatbl
lei lu <llfamsec(a)gmail.com>
jfs: don't walk off the end of ealist
lei lu <llfamsec(a)gmail.com>
ocfs2: add bounds checking to ocfs2_check_dir_entry()
Gerald Schaefer <gerald.schaefer(a)linux.ibm.com>
s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception()
Dan Carpenter <dan.carpenter(a)linaro.org>
drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
-------------
Diffstat:
Makefile | 4 +--
arch/arm64/boot/dts/qcom/ipq6018.dtsi | 1 +
arch/arm64/boot/dts/qcom/ipq8074.dtsi | 2 ++
arch/arm64/boot/dts/qcom/msm8996.dtsi | 1 +
arch/arm64/boot/dts/qcom/msm8998.dtsi | 1 +
arch/arm64/boot/dts/qcom/qrb2210-rb1.dts | 13 ++++++++-
arch/arm64/boot/dts/qcom/qrb4210-rb2.dts | 13 ++++++++-
arch/arm64/boot/dts/qcom/sc7180.dtsi | 1 +
arch/arm64/boot/dts/qcom/sc7280.dtsi | 1 +
arch/arm64/boot/dts/qcom/sdm630.dtsi | 1 +
arch/arm64/boot/dts/qcom/sdm845.dtsi | 2 ++
arch/arm64/boot/dts/qcom/sm6115.dtsi | 1 +
arch/arm64/boot/dts/qcom/sm6350.dtsi | 1 +
arch/arm64/boot/dts/qcom/x1e80100-crd.dts | 17 +++++++++---
arch/arm64/boot/dts/qcom/x1e80100-qcp.dts | 17 +++++++++---
arch/s390/mm/fault.c | 3 +-
drivers/gpu/drm/amd/amdgpu/sdma_v4_0.c | 2 +-
drivers/usb/gadget/function/f_midi2.c | 19 +++++++------
fs/jfs/xattr.c | 23 +++++++++++++---
fs/locks.c | 9 +++---
fs/ntfs3/fslog.c | 44 ++++++++++++++++++++++++-----
fs/ocfs2/dir.c | 46 +++++++++++++++++++------------
sound/core/pcm_dmaengine.c | 6 +++-
sound/core/seq/seq_ump_client.c | 16 +++++++++++
sound/pci/hda/patch_realtek.c | 3 ++
25 files changed, 191 insertions(+), 56 deletions(-)