- Linux-stable-mirror - lists.linaro.org

FAILED: patch "[PATCH] x86/mm: Prevent kernel Oops in PTDUMP code with HIGHPTE=y" failed to apply to 4.4-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 4.4-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. thanks, greg k-h ------------------ original commit in Linus's tree ------------------ >From d6ef1f194b7569af8b8397876dc9ab07649d63cb Mon Sep 17 00:00:00 2001 From: Joerg Roedel <jroedel(a)suse.de> Date: Tue, 17 Apr 2018 15:27:16 +0200 Subject: [PATCH] x86/mm: Prevent kernel Oops in PTDUMP code with HIGHPTE=y The walk_pte_level() function just uses __va to get the virtual address of the PTE page, but that breaks when the PTE page is not in the direct mapping with HIGHPTE=y. The result is an unhandled kernel paging request at some random address when accessing the current_kernel or current_user file. Use the correct API to access PTE pages. Fixes: fe770bf0310d ('x86: clean up the page table dumper and add 32-bit support') Signed-off-by: Joerg Roedel <jroedel(a)suse.de> Signed-off-by: Thomas Gleixner <tglx(a)linutronix.de> Cc: stable(a)vger.kernel.org Cc: jgross(a)suse.com Cc: JBeulich(a)suse.com Cc: hpa(a)zytor.com Cc: aryabinin(a)virtuozzo.com Cc: kirill.shutemov(a)linux.intel.com Link: https://lkml.kernel.org/r/1523971636-4137-1-git-send-email-joro@8bytes.org diff --git a/arch/x86/mm/dump_pagetables.c b/arch/x86/mm/dump_pagetables.c index 62a7e9f65dec..cc7ff5957194 100644 --- a/arch/x86/mm/dump_pagetables.c +++ b/arch/x86/mm/dump_pagetables.c @@ -18,6 +18,7 @@ #include <linux/init.h> #include <linux/sched.h> #include <linux/seq_file.h> +#include <linux/highmem.h> #include <asm/pgtable.h> @@ -334,16 +335,16 @@ static void walk_pte_level(struct seq_file *m, struct pg_state *st, pmd_t addr, pgprotval_t eff_in, unsigned long P) { int i; - pte_t *start; + pte_t *pte; pgprotval_t prot, eff; - start = (pte_t *)pmd_page_vaddr(addr); for (i = 0; i < PTRS_PER_PTE; i++) { - prot = pte_flags(*start); - eff = effective_prot(eff_in, prot); st->current_address = normalize_addr(P + i * PTE_LEVEL_MULT); + pte = pte_offset_map(&addr, st->current_address); + prot = pte_flags(*pte); + eff = effective_prot(eff_in, prot); note_page(m, st, __pgprot(prot), eff, 5); - start++; + pte_unmap(pte); } } #ifdef CONFIG_KASAN

7 years, 4 months

1
0
0 0

FAILED: patch "[PATCH] x86/mm: Prevent kernel Oops in PTDUMP code with HIGHPTE=y" failed to apply to 4.9-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 4.9-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. thanks, greg k-h ------------------ original commit in Linus's tree ------------------ >From d6ef1f194b7569af8b8397876dc9ab07649d63cb Mon Sep 17 00:00:00 2001 From: Joerg Roedel <jroedel(a)suse.de> Date: Tue, 17 Apr 2018 15:27:16 +0200 Subject: [PATCH] x86/mm: Prevent kernel Oops in PTDUMP code with HIGHPTE=y The walk_pte_level() function just uses __va to get the virtual address of the PTE page, but that breaks when the PTE page is not in the direct mapping with HIGHPTE=y. The result is an unhandled kernel paging request at some random address when accessing the current_kernel or current_user file. Use the correct API to access PTE pages. Fixes: fe770bf0310d ('x86: clean up the page table dumper and add 32-bit support') Signed-off-by: Joerg Roedel <jroedel(a)suse.de> Signed-off-by: Thomas Gleixner <tglx(a)linutronix.de> Cc: stable(a)vger.kernel.org Cc: jgross(a)suse.com Cc: JBeulich(a)suse.com Cc: hpa(a)zytor.com Cc: aryabinin(a)virtuozzo.com Cc: kirill.shutemov(a)linux.intel.com Link: https://lkml.kernel.org/r/1523971636-4137-1-git-send-email-joro@8bytes.org diff --git a/arch/x86/mm/dump_pagetables.c b/arch/x86/mm/dump_pagetables.c index 62a7e9f65dec..cc7ff5957194 100644 --- a/arch/x86/mm/dump_pagetables.c +++ b/arch/x86/mm/dump_pagetables.c @@ -18,6 +18,7 @@ #include <linux/init.h> #include <linux/sched.h> #include <linux/seq_file.h> +#include <linux/highmem.h> #include <asm/pgtable.h> @@ -334,16 +335,16 @@ static void walk_pte_level(struct seq_file *m, struct pg_state *st, pmd_t addr, pgprotval_t eff_in, unsigned long P) { int i; - pte_t *start; + pte_t *pte; pgprotval_t prot, eff; - start = (pte_t *)pmd_page_vaddr(addr); for (i = 0; i < PTRS_PER_PTE; i++) { - prot = pte_flags(*start); - eff = effective_prot(eff_in, prot); st->current_address = normalize_addr(P + i * PTE_LEVEL_MULT); + pte = pte_offset_map(&addr, st->current_address); + prot = pte_flags(*pte); + eff = effective_prot(eff_in, prot); note_page(m, st, __pgprot(prot), eff, 5); - start++; + pte_unmap(pte); } } #ifdef CONFIG_KASAN

7 years, 4 months

1
0
0 0

FAILED: patch "[PATCH] x86/mm: Prevent kernel Oops in PTDUMP code with HIGHPTE=y" failed to apply to 4.14-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 4.14-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. thanks, greg k-h ------------------ original commit in Linus's tree ------------------ >From d6ef1f194b7569af8b8397876dc9ab07649d63cb Mon Sep 17 00:00:00 2001 From: Joerg Roedel <jroedel(a)suse.de> Date: Tue, 17 Apr 2018 15:27:16 +0200 Subject: [PATCH] x86/mm: Prevent kernel Oops in PTDUMP code with HIGHPTE=y The walk_pte_level() function just uses __va to get the virtual address of the PTE page, but that breaks when the PTE page is not in the direct mapping with HIGHPTE=y. The result is an unhandled kernel paging request at some random address when accessing the current_kernel or current_user file. Use the correct API to access PTE pages. Fixes: fe770bf0310d ('x86: clean up the page table dumper and add 32-bit support') Signed-off-by: Joerg Roedel <jroedel(a)suse.de> Signed-off-by: Thomas Gleixner <tglx(a)linutronix.de> Cc: stable(a)vger.kernel.org Cc: jgross(a)suse.com Cc: JBeulich(a)suse.com Cc: hpa(a)zytor.com Cc: aryabinin(a)virtuozzo.com Cc: kirill.shutemov(a)linux.intel.com Link: https://lkml.kernel.org/r/1523971636-4137-1-git-send-email-joro@8bytes.org diff --git a/arch/x86/mm/dump_pagetables.c b/arch/x86/mm/dump_pagetables.c index 62a7e9f65dec..cc7ff5957194 100644 --- a/arch/x86/mm/dump_pagetables.c +++ b/arch/x86/mm/dump_pagetables.c @@ -18,6 +18,7 @@ #include <linux/init.h> #include <linux/sched.h> #include <linux/seq_file.h> +#include <linux/highmem.h> #include <asm/pgtable.h> @@ -334,16 +335,16 @@ static void walk_pte_level(struct seq_file *m, struct pg_state *st, pmd_t addr, pgprotval_t eff_in, unsigned long P) { int i; - pte_t *start; + pte_t *pte; pgprotval_t prot, eff; - start = (pte_t *)pmd_page_vaddr(addr); for (i = 0; i < PTRS_PER_PTE; i++) { - prot = pte_flags(*start); - eff = effective_prot(eff_in, prot); st->current_address = normalize_addr(P + i * PTE_LEVEL_MULT); + pte = pte_offset_map(&addr, st->current_address); + prot = pte_flags(*pte); + eff = effective_prot(eff_in, prot); note_page(m, st, __pgprot(prot), eff, 5); - start++; + pte_unmap(pte); } } #ifdef CONFIG_KASAN

7 years, 4 months

1
0
0 0

FAILED: patch "[PATCH] x86/mm: Prevent kernel Oops in PTDUMP code with HIGHPTE=y" failed to apply to 4.16-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 4.16-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. thanks, greg k-h ------------------ original commit in Linus's tree ------------------ >From d6ef1f194b7569af8b8397876dc9ab07649d63cb Mon Sep 17 00:00:00 2001 From: Joerg Roedel <jroedel(a)suse.de> Date: Tue, 17 Apr 2018 15:27:16 +0200 Subject: [PATCH] x86/mm: Prevent kernel Oops in PTDUMP code with HIGHPTE=y The walk_pte_level() function just uses __va to get the virtual address of the PTE page, but that breaks when the PTE page is not in the direct mapping with HIGHPTE=y. The result is an unhandled kernel paging request at some random address when accessing the current_kernel or current_user file. Use the correct API to access PTE pages. Fixes: fe770bf0310d ('x86: clean up the page table dumper and add 32-bit support') Signed-off-by: Joerg Roedel <jroedel(a)suse.de> Signed-off-by: Thomas Gleixner <tglx(a)linutronix.de> Cc: stable(a)vger.kernel.org Cc: jgross(a)suse.com Cc: JBeulich(a)suse.com Cc: hpa(a)zytor.com Cc: aryabinin(a)virtuozzo.com Cc: kirill.shutemov(a)linux.intel.com Link: https://lkml.kernel.org/r/1523971636-4137-1-git-send-email-joro@8bytes.org diff --git a/arch/x86/mm/dump_pagetables.c b/arch/x86/mm/dump_pagetables.c index 62a7e9f65dec..cc7ff5957194 100644 --- a/arch/x86/mm/dump_pagetables.c +++ b/arch/x86/mm/dump_pagetables.c @@ -18,6 +18,7 @@ #include <linux/init.h> #include <linux/sched.h> #include <linux/seq_file.h> +#include <linux/highmem.h> #include <asm/pgtable.h> @@ -334,16 +335,16 @@ static void walk_pte_level(struct seq_file *m, struct pg_state *st, pmd_t addr, pgprotval_t eff_in, unsigned long P) { int i; - pte_t *start; + pte_t *pte; pgprotval_t prot, eff; - start = (pte_t *)pmd_page_vaddr(addr); for (i = 0; i < PTRS_PER_PTE; i++) { - prot = pte_flags(*start); - eff = effective_prot(eff_in, prot); st->current_address = normalize_addr(P + i * PTE_LEVEL_MULT); + pte = pte_offset_map(&addr, st->current_address); + prot = pte_flags(*pte); + eff = effective_prot(eff_in, prot); note_page(m, st, __pgprot(prot), eff, 5); - start++; + pte_unmap(pte); } } #ifdef CONFIG_KASAN

7 years, 4 months

1
0
0 0

FAILED: patch "[PATCH] btrfs: Fix race condition between delayed refs and blockgroup" failed to apply to 4.14-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 4.14-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. thanks, greg k-h ------------------ original commit in Linus's tree ------------------ >From 5e388e95815408c27f3612190d089afc0774b870 Mon Sep 17 00:00:00 2001 From: Nikolay Borisov <nborisov(a)suse.com> Date: Wed, 18 Apr 2018 09:41:54 +0300 Subject: [PATCH] btrfs: Fix race condition between delayed refs and blockgroup removal When the delayed refs for a head are all run, eventually cleanup_ref_head is called which (in case of deletion) obtains a reference for the relevant btrfs_space_info struct by querying the bg for the range. This is problematic because when the last extent of a bg is deleted a race window emerges between removal of that bg and the subsequent invocation of cleanup_ref_head. This can result in cache being null and either a null pointer dereference or assertion failure. task: ffff8d04d31ed080 task.stack: ffff9e5dc10cc000 RIP: 0010:assfail.constprop.78+0x18/0x1a [btrfs] RSP: 0018:ffff9e5dc10cfbe8 EFLAGS: 00010292 RAX: 0000000000000044 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff8d04ffc1f868 RSI: ffff8d04ffc178c8 RDI: ffff8d04ffc178c8 RBP: ffff8d04d29e5ea0 R08: 00000000000001f0 R09: 0000000000000001 R10: ffff9e5dc0507d58 R11: 0000000000000001 R12: ffff8d04d29e5ea0 R13: ffff8d04d29e5f08 R14: ffff8d04efe29b40 R15: ffff8d04efe203e0 FS: 00007fbf58ead500(0000) GS:ffff8d04ffc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe6c6975648 CR3: 0000000013b2a000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __btrfs_run_delayed_refs+0x10e7/0x12c0 [btrfs] btrfs_run_delayed_refs+0x68/0x250 [btrfs] btrfs_should_end_transaction+0x42/0x60 [btrfs] btrfs_truncate_inode_items+0xaac/0xfc0 [btrfs] btrfs_evict_inode+0x4c6/0x5c0 [btrfs] evict+0xc6/0x190 do_unlinkat+0x19c/0x300 do_syscall_64+0x74/0x140 entry_SYSCALL_64_after_hwframe+0x3d/0xa2 RIP: 0033:0x7fbf589c57a7 To fix this, introduce a new flag "is_system" to head_ref structs, which is populated at insertion time. This allows to decouple the querying for the spaceinfo from querying the possibly deleted bg. Fixes: d7eae3403f46 ("Btrfs: rework delayed ref total_bytes_pinned accounting") CC: stable(a)vger.kernel.org # 4.14+ Suggested-by: Omar Sandoval <osandov(a)osandov.com> Signed-off-by: Nikolay Borisov <nborisov(a)suse.com> Reviewed-by: Omar Sandoval <osandov(a)fb.com> Signed-off-by: David Sterba <dsterba(a)suse.com> diff --git a/fs/btrfs/delayed-ref.c b/fs/btrfs/delayed-ref.c index 9e98295de7ce..e1b0651686f7 100644 --- a/fs/btrfs/delayed-ref.c +++ b/fs/btrfs/delayed-ref.c @@ -540,8 +540,10 @@ add_delayed_ref_head(struct btrfs_fs_info *fs_info, struct btrfs_delayed_ref_head *head_ref, struct btrfs_qgroup_extent_record *qrecord, u64 bytenr, u64 num_bytes, u64 ref_root, u64 reserved, - int action, int is_data, int *qrecord_inserted_ret, + int action, int is_data, int is_system, + int *qrecord_inserted_ret, int *old_ref_mod, int *new_ref_mod) + { struct btrfs_delayed_ref_head *existing; struct btrfs_delayed_ref_root *delayed_refs; @@ -585,6 +587,7 @@ add_delayed_ref_head(struct btrfs_fs_info *fs_info, head_ref->ref_mod = count_mod; head_ref->must_insert_reserved = must_insert_reserved; head_ref->is_data = is_data; + head_ref->is_system = is_system; head_ref->ref_tree = RB_ROOT; INIT_LIST_HEAD(&head_ref->ref_add_list); RB_CLEAR_NODE(&head_ref->href_node); @@ -772,6 +775,7 @@ int btrfs_add_delayed_tree_ref(struct btrfs_fs_info *fs_info, struct btrfs_delayed_ref_root *delayed_refs; struct btrfs_qgroup_extent_record *record = NULL; int qrecord_inserted; + int is_system = (ref_root == BTRFS_CHUNK_TREE_OBJECTID); BUG_ON(extent_op && extent_op->is_data); ref = kmem_cache_alloc(btrfs_delayed_tree_ref_cachep, GFP_NOFS); @@ -800,8 +804,8 @@ int btrfs_add_delayed_tree_ref(struct btrfs_fs_info *fs_info, */ head_ref = add_delayed_ref_head(fs_info, trans, head_ref, record, bytenr, num_bytes, 0, 0, action, 0, - &qrecord_inserted, old_ref_mod, - new_ref_mod); + is_system, &qrecord_inserted, + old_ref_mod, new_ref_mod); add_delayed_tree_ref(fs_info, trans, head_ref, &ref->node, bytenr, num_bytes, parent, ref_root, level, action); @@ -868,7 +872,7 @@ int btrfs_add_delayed_data_ref(struct btrfs_fs_info *fs_info, */ head_ref = add_delayed_ref_head(fs_info, trans, head_ref, record, bytenr, num_bytes, ref_root, reserved, - action, 1, &qrecord_inserted, + action, 1, 0, &qrecord_inserted, old_ref_mod, new_ref_mod); add_delayed_data_ref(fs_info, trans, head_ref, &ref->node, bytenr, @@ -898,9 +902,14 @@ int btrfs_add_delayed_extent_op(struct btrfs_fs_info *fs_info, delayed_refs = &trans->transaction->delayed_refs; spin_lock(&delayed_refs->lock); + /* + * extent_ops just modify the flags of an extent and they don't result + * in ref count changes, hence it's safe to pass false/0 for is_system + * argument + */ add_delayed_ref_head(fs_info, trans, head_ref, NULL, bytenr, num_bytes, 0, 0, BTRFS_UPDATE_DELAYED_HEAD, - extent_op->is_data, NULL, NULL, NULL); + extent_op->is_data, 0, NULL, NULL, NULL); spin_unlock(&delayed_refs->lock); return 0; diff --git a/fs/btrfs/delayed-ref.h b/fs/btrfs/delayed-ref.h index 741869dbc316..7f00db50bd24 100644 --- a/fs/btrfs/delayed-ref.h +++ b/fs/btrfs/delayed-ref.h @@ -127,6 +127,7 @@ struct btrfs_delayed_ref_head { */ unsigned int must_insert_reserved:1; unsigned int is_data:1; + unsigned int is_system:1; unsigned int processing:1; }; diff --git a/fs/btrfs/extent-tree.c b/fs/btrfs/extent-tree.c index 055494ddcace..f99102063366 100644 --- a/fs/btrfs/extent-tree.c +++ b/fs/btrfs/extent-tree.c @@ -2601,13 +2601,19 @@ static int cleanup_ref_head(struct btrfs_trans_handle *trans, trace_run_delayed_ref_head(fs_info, head, 0); if (head->total_ref_mod < 0) { - struct btrfs_block_group_cache *cache; + struct btrfs_space_info *space_info; + u64 flags; - cache = btrfs_lookup_block_group(fs_info, head->bytenr); - ASSERT(cache); - percpu_counter_add(&cache->space_info->total_bytes_pinned, + if (head->is_data) + flags = BTRFS_BLOCK_GROUP_DATA; + else if (head->is_system) + flags = BTRFS_BLOCK_GROUP_SYSTEM; + else + flags = BTRFS_BLOCK_GROUP_METADATA; + space_info = __find_space_info(fs_info, flags); + ASSERT(space_info); + percpu_counter_add(&space_info->total_bytes_pinned, -head->num_bytes); - btrfs_put_block_group(cache); if (head->is_data) { spin_lock(&delayed_refs->lock);

7 years, 4 months

1
0
0 0

FAILED: patch "[PATCH] cifs: smbd: Dump SMB packet when configured" failed to apply to 4.16-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 4.16-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. thanks, greg k-h ------------------ original commit in Linus's tree ------------------ >From ff30b89e0ab71115cbad6ae10a58bd83fe18b41f Mon Sep 17 00:00:00 2001 From: Long Li <longli(a)microsoft.com> Date: Tue, 17 Apr 2018 12:17:10 -0700 Subject: [PATCH] cifs: smbd: Dump SMB packet when configured When sending through SMB Direct, also dump the packet in SMB send path. Also fixed a typo in debug message. Signed-off-by: Long Li <longli(a)microsoft.com> Cc: stable(a)vger.kernel.org Signed-off-by: Steve French <smfrench(a)gmail.com> Reviewed-by: Ronnie Sahlberg <lsahlber(a)redhat.com> diff --git a/fs/cifs/smbdirect.c b/fs/cifs/smbdirect.c index d611ed0537fd..87817ddcc096 100644 --- a/fs/cifs/smbdirect.c +++ b/fs/cifs/smbdirect.c @@ -1028,7 +1028,7 @@ static int smbd_post_send(struct smbd_connection *info, for (i = 0; i < request->num_sge; i++) { log_rdma_send(INFO, "rdma_request sge[%d] addr=%llu length=%u\n", - i, request->sge[0].addr, request->sge[0].length); + i, request->sge[i].addr, request->sge[i].length); ib_dma_sync_single_for_device( info->id->device, request->sge[i].addr, @@ -2139,6 +2139,10 @@ int smbd_send(struct smbd_connection *info, struct smb_rqst *rqst) goto done; } + cifs_dbg(FYI, "Sending smb (RDMA): smb_len=%u\n", buflen); + for (i = 0; i < rqst->rq_nvec-1; i++) + dump_smb(iov[i].iov_base, iov[i].iov_len); + remaining_data_length = buflen; log_write(INFO, "rqst->rq_nvec=%d rqst->rq_npages=%d rq_pagesz=%d "

7 years, 4 months

1
0
0 0

Linux 3.18.106

by Greg KH

I'm announcing the release of the 3.18.106 kernel. All users of the 3.18 kernel series must upgrade. The updated 3.18.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-3.18.y and can be browsed at the normal kernel.org git web browser: http://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/boot/dts/at91sam9g25.dtsi | 2 arch/mips/lib/memset.S | 11 + arch/parisc/kernel/drivers.c | 4 arch/powerpc/include/asm/barrier.h | 3 arch/powerpc/include/asm/opal.h | 3 arch/powerpc/include/asm/synch.h | 4 arch/powerpc/lib/feature-fixups.c | 2 arch/powerpc/platforms/powernv/opal-nvram.c | 11 + arch/s390/hypfs/inode.c | 2 arch/s390/kernel/ipl.c | 1 drivers/char/random.c | 2 drivers/clk/mvebu/armada-38x.c | 15 +- drivers/gpu/drm/radeon/si_dpm.c | 4 drivers/hid/hidraw.c | 5 drivers/hid/i2c-hid/i2c-hid.c | 13 - drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 4 drivers/mmc/host/jz4740_mmc.c | 2 drivers/mtd/ubi/block.c | 2 drivers/mtd/ubi/build.c | 11 + drivers/net/slip/slhc.c | 5 drivers/net/xen-netfront.c | 7 drivers/pci/hotplug/acpiphp_glue.c | 23 ++- drivers/s390/cio/qdio_main.c | 42 +++-- drivers/thermal/imx_thermal.c | 6 drivers/thunderbolt/nhi.c | 1 drivers/usb/core/generic.c | 9 - drivers/usb/dwc3/dwc3-pci.c | 2 drivers/usb/musb/musb_gadget_ep0.c | 14 + drivers/watchdog/f71808e_wdt.c | 2 fs/autofs4/root.c | 2 fs/ext4/inode.c | 6 fs/ext4/super.c | 6 fs/jbd2/journal.c | 5 fs/jffs2/super.c | 2 fs/namespace.c | 3 fs/notify/fanotify/fanotify.c | 34 ++-- fs/reiserfs/journal.c | 2 fs/ubifs/super.c | 14 + include/net/slhc_vj.h | 1 include/sound/pcm_oss.h | 1 kernel/resource.c | 3 net/sunrpc/rpc_pipe.c | 1 sound/core/oss/pcm_oss.c | 189 ++++++++++++++++++++------ sound/core/rawmidi_compat.c | 18 +- sound/soc/codecs/ssm2602.c | 19 +- 46 files changed, 369 insertions(+), 151 deletions(-) Aaron Ma (1): HID: i2c-hid: fix size check and type usage Al Viro (4): jffs2_kill_sb(): deal with failed allocations hypfs_kill_super(): deal with failed allocations rpc_pipefs: fix double-dput() Don't leak MNT_INTERNAL away from internal mounts Alex Smith (1): mmc: jz4740: Fix race condition in IRQ mask update Amir Goldstein (1): fanotify: fix logic of events on child Andrew Morton (1): fs/reiserfs/journal.c: add missing resierfs_warning() arg Greg Kroah-Hartman (1): Linux 3.18.106 Heinrich Schuchardt (1): usb: musb: gadget: misplaced out of bounds check Helge Deller (1): parisc: Fix out of array access in match_pci_device() Ian Kent (1): autofs: mount point create should honour passed in mode Igor Pylypiv (1): watchdog: f71808e_wdt: Fix WD_EN register read James Kelly (1): ASoC: ssm2602: Replace reg_default_raw with reg_default Jason Andryuk (1): xen-netfront: Fix hang on device removal Julian Wiedmann (2): s390/qdio: don't retry EQBS after CCQ 96 s390/qdio: don't merge ERROR output buffers Matt Redfearn (3): MIPS: memset.S: EVA & fault support for small_memset MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup MIPS: memset.S: Fix clobber of v1 in last_fixup Mauro Carvalho Chehab (1): media: v4l2-compat-ioctl32: don't oops on overlay Michael Ellerman (1): powerpc/lib: Fix off-by-one in alternate feature patching Mika Westerberg (2): ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status() thunderbolt: Resume control channel after hibernation image is created Mikhail Lappo (1): thermal: imx: Fix race condition in imx_thermal_probe() Nicholas Mc Guire (1): ALSA: oss: consolidate kmalloc/memset 0 call to kzalloc Nicholas Piggin (4): powerpc/powernv: Handle unknown OPAL errors in opal_nvram_write() powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently powerpc/powernv: define a standard delay for OPAL_BUSY type retry loops powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops Nicolas Ferre (1): ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property Paul Parsons (1): drm/radeon: Fix PCIe lane width calculation Ralph Sennhauser (1): clk: mvebu: armada-38x: add support for 1866MHz variants Richard Genoud (1): clk: mvebu: armada-38x: add support for missing clocks Richard Weinberger (2): ubifs: Check ubifs_wbuf_sync() return code ubi: Reject MLC NAND Rodrigo Rivas Costa (1): HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device Romain Izard (1): ubi: Fix error for write access Takashi Iwai (7): resource: fix integer overflow at reallocation ALSA: pcm: Use ERESTARTSYS instead of EINTR in OSS emulation ALSA: pcm: Avoid potential races between OSS ioctls and read/write ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation ALSA: rawmidi: Fix missing input substream checks in compat ioctls Tejaswi Tanikella (1): slip: Check if rstate is initialized before uncompressing Theodore Ts'o (4): random: use a tighter cap in credit_entropy_bits_safe() jbd2: if the journal is aborted then don't allow update of the log tail ext4: fail ext4_iget for root directory if unallocated ext4: don't allow r/w mounts if metadata blocks overlap the superblock Thinh Nguyen (1): usb: dwc3: pci: Properly cleanup resource Vasily Gorbik (1): s390/ipl: ensure loadparm valid flag is set Zhengjun Xing (1): USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw

7 years, 4 months

2
3
0 0

Linux 4.16.4

by Greg KH

I'm announcing the release of the 4.16.4 kernel. All users of the 4.16 kernel series must upgrade. The updated 4.16.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.16.y and can be browsed at the normal kernel.org git web browser: http://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/boot/dts/at91sam9g25.dtsi | 2 arch/arm/boot/dts/exynos5250.dtsi | 8 arch/arm/boot/dts/mt7623n-bananapi-bpi-r2.dts | 24 + arch/arm/boot/dts/sama5d4.dtsi | 2 arch/arm/mach-exynos/pm.c | 6 arch/arm64/boot/dts/amlogic/meson-gxbb-odroidc2.dts | 2 arch/mips/include/asm/uaccess.h | 11 arch/mips/lib/memset.S | 11 arch/powerpc/include/asm/barrier.h | 3 arch/powerpc/include/asm/opal.h | 3 arch/powerpc/include/asm/synch.h | 4 arch/powerpc/kernel/dt_cpu_ftrs.c | 19 + arch/powerpc/kernel/eeh_driver.c | 68 ++-- arch/powerpc/kernel/eeh_pe.c | 3 arch/powerpc/kernel/kprobes.c | 30 +- arch/powerpc/kernel/machine_kexec_file_64.c | 2 arch/powerpc/lib/feature-fixups.c | 2 arch/powerpc/mm/hash_utils_64.c | 6 arch/powerpc/mm/tlb-radix.c | 5 arch/powerpc/platforms/powernv/opal-nvram.c | 11 arch/powerpc/platforms/pseries/lpar.c | 8 arch/powerpc/sysdev/xive/native.c | 4 arch/s390/Kconfig | 8 arch/s390/hypfs/inode.c | 2 arch/s390/kernel/perf_cpum_cf_events.c | 1 arch/s390/kernel/setup.c | 1 arch/um/os-Linux/file.c | 1 arch/um/os-Linux/signal.c | 3 arch/x86/um/stub_segv.c | 3 arch/x86/xen/enlighten_pv.c | 8 drivers/acpi/nfit/core.c | 59 ++- drivers/acpi/nfit/nfit.h | 5 drivers/acpi/video_detect.c | 9 drivers/base/regmap/regmap.c | 2 drivers/bluetooth/hci_bcm.c | 20 + drivers/char/random.c | 84 ++++- drivers/char/tpm/tpm-interface.c | 4 drivers/clk/bcm/clk-bcm2835.c | 8 drivers/clk/mediatek/clk-mt2701.c | 15 - drivers/clk/mvebu/armada-38x.c | 14 drivers/clk/renesas/clk-sh73a0.c | 6 drivers/clk/tegra/clk-emc.c | 2 drivers/clk/tegra/clk-tegra-periph.c | 2 drivers/clk/tegra/clk-tegra-super-gen4.c | 8 drivers/clk/tegra/clk-tegra114.c | 3 drivers/clk/tegra/clk-tegra124.c | 7 drivers/clk/tegra/clk-tegra20.c | 23 - drivers/clk/tegra/clk-tegra210.c | 3 drivers/clk/tegra/clk-tegra30.c | 14 drivers/cpufreq/armada-37xx-cpufreq.c | 2 drivers/cpufreq/cppc_cpufreq.c | 3 drivers/dax/device.c | 2 drivers/dma/at_xdmac.c | 4 drivers/extcon/extcon-intel-cht-wc.c | 11 drivers/gpu/drm/amd/amdgpu/amdgpu_atpx_handler.c | 1 drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 6 drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 2 drivers/gpu/drm/amd/amdgpu/cik_sdma.c | 2 drivers/gpu/drm/amd/amdgpu/sdma_v2_4.c | 2 drivers/gpu/drm/amd/amdgpu/sdma_v3_0.c | 2 drivers/gpu/drm/amd/amdgpu/sdma_v4_0.c | 2 drivers/gpu/drm/amd/amdgpu/si.c | 67 ++++ drivers/gpu/drm/amd/amdgpu/si_dpm.c | 4 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 31 -- drivers/gpu/drm/amd/display/dc/dce/dce_stream_encoder.c | 2 drivers/gpu/drm/i915/gvt/gvt.h | 5 drivers/gpu/drm/i915/gvt/mmio_context.c | 210 ++++++++++++-- drivers/gpu/drm/i915/gvt/mmio_context.h | 5 drivers/gpu/drm/i915/gvt/scheduler.c | 5 drivers/gpu/drm/i915/i915_drv.c | 22 - drivers/gpu/drm/i915/i915_drv.h | 2 drivers/gpu/drm/i915/i915_reg.h | 10 drivers/gpu/drm/i915/intel_sprite.c | 81 ++++- drivers/gpu/drm/radeon/radeon_device.c | 4 drivers/gpu/drm/radeon/si_dpm.c | 4 drivers/gpu/drm/rockchip/rockchip_drm_vop.c | 23 - drivers/hid/hid-core.c | 10 drivers/hid/hid-ids.h | 3 drivers/hid/hid-input.c | 27 + drivers/hid/hid-multitouch.c | 5 drivers/hid/hid-rmi.c | 4 drivers/hid/hidraw.c | 5 drivers/hid/i2c-hid/i2c-hid.c | 26 + drivers/hid/wacom_sys.c | 4 drivers/hid/wacom_wac.c | 76 +++-- drivers/i2c/busses/i2c-i801.c | 16 - drivers/infiniband/core/ucma.c | 3 drivers/infiniband/core/verbs.c | 12 drivers/infiniband/hw/mlx5/mr.c | 2 drivers/infiniband/sw/rxe/rxe_verbs.c | 5 drivers/infiniband/ulp/srp/ib_srp.c | 18 - drivers/infiniband/ulp/srpt/ib_srpt.c | 16 - drivers/iommu/intel-svm.c | 1 drivers/irqchip/irq-gic-common.c | 9 drivers/md/dm-crypt.c | 66 ++++ drivers/md/dm-raid.c | 3 drivers/md/dm.c | 30 +- drivers/media/common/videobuf2/videobuf2-core.c | 9 drivers/media/platform/vivid/vivid-vid-common.c | 3 drivers/media/platform/vsp1/vsp1_wpf.c | 2 drivers/media/rc/rc-main.c | 6 drivers/misc/cxl/cxllib.c | 85 +++-- drivers/mmc/core/block.c | 1 drivers/mmc/host/jz4740_mmc.c | 2 drivers/mmc/host/sdhci-pci-core.c | 25 + drivers/mmc/host/tmio_mmc_core.c | 2 drivers/mtd/ubi/block.c | 2 drivers/mtd/ubi/build.c | 11 drivers/mtd/ubi/fastmap-wl.c | 1 drivers/nvdimm/dimm.c | 8 drivers/nvdimm/dimm_devs.c | 22 - drivers/nvdimm/namespace_devs.c | 4 drivers/pci/hotplug/acpiphp_glue.c | 23 + drivers/pci/quirks.c | 4 drivers/phy/allwinner/phy-sun4i-usb.c | 10 drivers/pwm/pwm-mediatek.c | 35 ++ drivers/pwm/pwm-rcar.c | 8 drivers/soc/mediatek/mtk-scpsys.c | 2 drivers/spi/spi-atmel.c | 8 drivers/spi/spi.c | 19 - drivers/staging/media/atomisp/pci/atomisp2/atomisp_fops.c | 6 drivers/thermal/imx_thermal.c | 6 drivers/thunderbolt/icm.c | 36 +- drivers/thunderbolt/nhi.c | 1 drivers/thunderbolt/switch.c | 9 drivers/usb/core/generic.c | 9 drivers/usb/dwc3/core.c | 3 drivers/usb/dwc3/dwc3-pci.c | 2 drivers/usb/dwc3/gadget.c | 43 +- drivers/usb/gadget/function/f_midi.c | 3 drivers/usb/gadget/u_f.h | 2 drivers/usb/gadget/udc/core.c | 3 drivers/usb/musb/musb_gadget_ep0.c | 14 drivers/watchdog/f71808e_wdt.c | 2 fs/autofs4/root.c | 2 fs/ceph/inode.c | 10 fs/cifs/Kconfig | 1 fs/cifs/cifsencrypt.c | 85 ----- fs/cifs/cifsfs.c | 1 fs/cifs/cifsglob.h | 8 fs/cifs/cifsproto.h | 5 fs/cifs/inode.c | 33 ++ fs/cifs/link.c | 27 - fs/cifs/misc.c | 54 +++ fs/cifs/smb2misc.c | 64 ++++ fs/cifs/smb2ops.c | 15 - fs/cifs/smb2pdu.c | 38 ++ fs/cifs/smb2pdu.h | 1 fs/cifs/smb2proto.h | 5 fs/cifs/smb2transport.c | 97 ++---- fs/cifs/smbdirect.c | 19 - fs/cifs/smbencrypt.c | 27 - fs/cifs/transport.c | 17 + fs/ext4/balloc.c | 3 fs/ext4/dir.c | 8 fs/ext4/ext4_jbd2.c | 7 fs/ext4/ialloc.c | 47 --- fs/ext4/inode.c | 13 fs/ext4/ioctl.c | 8 fs/ext4/super.c | 21 - fs/ext4/xattr.c | 121 ++++---- fs/ext4/xattr.h | 11 fs/fs-writeback.c | 7 fs/jbd2/journal.c | 30 +- fs/jffs2/super.c | 2 fs/namespace.c | 3 fs/notify/fanotify/fanotify.c | 34 +- fs/orangefs/super.c | 5 fs/reiserfs/journal.c | 2 fs/ubifs/super.c | 14 fs/udf/unicode.c | 6 include/dt-bindings/clock/mt2701-clk.h | 3 include/linux/backing-dev-defs.h | 5 include/linux/backing-dev.h | 30 +- include/linux/blk_types.h | 5 include/linux/compiler-clang.h | 3 include/linux/compiler-gcc.h | 12 include/linux/hid.h | 15 - include/linux/hmm.h | 9 include/linux/mm.h | 1 include/sound/pcm_oss.h | 1 include/uapi/linux/random.h | 3 ipc/shm.c | 23 + kernel/resource.c | 3 kernel/trace/ring_buffer.c | 5 kernel/trace/trace_uprobe.c | 2 lib/swiotlb.c | 2 lib/vsprintf.c | 4 mm/filemap.c | 9 mm/hmm.c | 3 mm/ksm.c | 7 mm/memory-failure.c | 16 + mm/page-writeback.c | 18 - mm/slab.c | 3 net/sunrpc/rpc_pipe.c | 1 net/sunrpc/xprtrdma/rpc_rdma.c | 2 net/sunrpc/xprtrdma/transport.c | 2 net/sunrpc/xprtrdma/verbs.c | 13 net/sunrpc/xprtrdma/xprt_rdma.h | 1 sound/core/oss/pcm_oss.c | 186 ++++++++++-- sound/core/pcm.c | 8 sound/core/rawmidi_compat.c | 18 - sound/pci/hda/hda_intel.c | 3 sound/pci/hda/patch_realtek.c | 3 sound/soc/codecs/ssm2602.c | 19 - sound/soc/soc-topology.c | 23 + sound/usb/line6/midi.c | 2 virt/kvm/arm/vgic/vgic-its.c | 15 - 209 files changed, 2167 insertions(+), 999 deletions(-) Aaron Armstrong Skomra (1): HID: wacom: bluetooth: send exit report for recent Bluetooth devices Aaron Ma (4): HID: i2c-hid: fix size check and type usage HID: Fix hid_report_len usage HID: core: Fix size as type u32 HID: i2c-hid: Fix resume issue on Raydium touchscreen device Al Viro (5): jffs2_kill_sb(): deal with failed allocations hypfs_kill_super(): deal with failed allocations orangefs_kill_sb(): deal with allocation failures rpc_pipefs: fix double-dput() Don't leak MNT_INTERNAL away from internal mounts Alex Deucher (4): drm/amdgpu: Add an ATPX quirk for hybrid laptop drm/amdgpu/sdma: fix mask in emit_pipeline_sync drm/amdgpu: Fix PCIe lane width calculation drm/amdgpu/si: implement get/set pcie_lanes asic callback Alex Smith (1): mmc: jz4740: Fix race condition in IRQ mask update Alexander Kappner (1): mmc: core: Prevent bus reference leak in mmc_blk_init() Amir Goldstein (1): fanotify: fix logic of events on child Andrew Morton (3): fs/reiserfs/journal.c: add missing resierfs_warning() arg drivers/infiniband/core/verbs.c: fix build with gcc-4.4.4 drivers/infiniband/ulp/srpt/ib_srpt.c: fix build with gcc-4.4.4 Aniruddha Banerjee (1): irqchip/gic: Take lock when updating irq type Arnd Bergmann (1): clk: fix false-positive Wmaybe-uninitialized warning Aurelien Aptel (3): CIFS: refactor crypto shash/sdesc allocation&free CIFS: add sha512 secmech CIFS: implement v3.11 preauth integrity Bart Van Assche (5): RDMA/rxe: Fix an out-of-bounds read RDMA/core: Avoid that ib_drain_qp() triggers an out-of-bounds stack access IB/srp: Fix srp_abort() IB/srp: Fix completion vector assignment algorithm IB/srpt: Fix an out-of-bounds stack access in srpt_zerolength_write() Bas Nieuwenhuizen (1): drm/amdgpu: Fix always_valid bos multiple LRU insertions. Benjamin Herrenschmidt (1): powerpc/xive: Fix trying to "push" an already active pool VP Boris Brezillon (1): clk: bcm2835: De-assert/assert PLL reset signal when appropriate Charlene Liu (1): drm/amd/display: HDMI has no sound after Panel power off/on Chen-Yu Tsai (1): phy: allwinner: sun4i-usb: poll vbus changes on A23/A33 when driving VBUS Chris Chiu (1): tpm: self test failure should not cause suspend to fail Chuck Lever (2): xprtrdma: Fix latency regression on NUMA NFS/RDMA clients xprtrdma: Fix corner cases when handling device removal Claudio Imbrenda (1): mm/ksm.c: fix inconsistent accounting of zero pages Dan Carpenter (1): regmap: Fix reversed bounds check in regmap_raw_write() Dan Williams (6): acpi, nfit: rework NVDIMM leaf method detection libnvdimm, dimm: fix dpa reservation vs uninitialized label area libnvdimm, namespace: use a safe lookup for dimm device name nfit, address-range-scrub: fix scrub in-progress reporting nfit: skip region registration for incomplete control regions libnvdimm, dimm: handle EACCES failures from label reads Daniel Kurtz (1): mmc: sdhci-pci: Only do AMD tuning for HS200 Dave Jiang (1): device-dax: allow MAP_SYNC to succeed David Wang (1): ALSA: hda - New VIA controller suppor no-snoop path Dmitry Osipenko (1): clk: tegra: Mark HCLK, SCLK and EMC as critical Dmitry Torokhov (1): HID: input: fix battery level reporting on BT mice Eric Biggers (2): ipc/shm: fix use-after-free of shm file via remap_file_pages() ext4: limit xattr size to INT_MAX Eryu Guan (1): ext4: protect i_disksize update by i_data_sem in direct write path Eugen Hristev (1): spi: atmel: init FIFOs before spi enable Fabián Inostroza (1): ALSA: line6: Use correct endpoint type for midi output Felipe Balbi (2): usb: gadget: udc: core: update usb_ep_queue() documentation usb: dwc3: gadget: never call ->complete() from ->ep_queue() Frederic Barrat (1): cxl: Fix possible deadlock when processing page faults from cxllib George Cherian (1): cpufreq: CPPC: Use transition_delay_us depending transition_latency Greg Kroah-Hartman (1): Linux 4.16.4 Greg Thelen (1): writeback: safer lock nesting Gregory CLEMENT (1): cpufreq: armada-37xx: Fix clock leak Gustavo A. R. Silva (1): CIFS: fix sha512 check in cifs_crypto_secmech_release Hans Verkuil (2): media: atomisp_fops.c: disable atomisp_compat_ioctl32 media: vivid: check if the cec_adapter is valid Hans de Goede (3): Bluetooth: hci_bcm: Add irq_polarity module option ACPI / video: Add quirk to force acpi-video backlight on Samsung 670Z5E extcon: intel-cht-wc: Set direction and drv flags for V5 boost GPIO Harry Wentland (2): Revert "drm/amd/display: fix dereferencing possible ERR_PTR()" Revert "drm/amd/display: disable CRTCs with NULL FB on their primary plane (V2)" Heiko Carstens (1): s390: add support for IBM z14 Model ZR1 Heinrich Schuchardt (1): usb: musb: gadget: misplaced out of bounds check Heinz Mauelshagen (1): dm raid: fix nosync status Hui Wang (2): ALSA: hda/realtek - set PINCFG_HEADSET_MIC to parse_flags ALSA: hda/realtek - adjust the location of one mic Ian Kent (1): autofs: mount point create should honour passed in mode Igor Pylypiv (1): watchdog: f71808e_wdt: Fix WD_EN register read Imre Deak (1): drm/i915: Fix hibernation with ACPI S0 target state James Kelly (1): ASoC: ssm2602: Replace reg_default_raw with reg_default Jan Kara (1): udf: Fix leak of UTF-16 surrogates into encoded strings Jarkko Nikula (1): spi: Fix unregistration of controller with fixed SPI bus number Jason A. Donenfeld (1): um: Compile with modern headers Jason Andryuk (1): x86/xen: Delay get_cpu_cap until stack canary is established Jean Delvare (2): i2c: i801: Save register SMBSLVCMD value only once i2c: i801: Restore configuration at shutdown Jerome Brunet (1): ARM64: dts: meson: reduce odroid-c2 eMMC maximum rate Jiri Kosina (1): HID: i2c-hid: fix inverted return value from i2c_hid_command() Jiri Slaby (1): ext4: fix offset overflow on 32-bit archs in ext4_iomap_begin() Jérôme Glisse (2): mm/hmm: fix header file if/else/endif maze mm/hmm: hmm_pfns_bad() was accessing wrong struct Kees Cook (1): task_struct: only use anon struct under randstruct plugin Kieran Bingham (1): media: vsp1: Fix BRx conditional path in WPF Krzysztof Mazur (1): um: Use POSIX ucontext_t instead of struct ucontext Leon Romanovsky (1): RDMA/mlx5: Protect from NULL pointer derefence Liam Girdwood (1): ASoC: topology: Fix kcontrol name string handling Long Li (2): cifs: smbd: avoid reconnect lockup cifs: smbd: disconnect transport on RDMA errors Lu Baolu (1): iommu/vt-d: Fix a potential memory leak Marc Zyngier (2): KVM: arm/arm64: vgic-its: Fix potential overrun in vgic_copy_lpi_list drm/rockchip: Clear all interrupts before requesting the IRQ Marek Szyprowski (2): ARM: EXYNOS: Fix coupled CPU idle freeze on Exynos4210 ARM: dts: exynos: Fix IOMMU support for GScaler devices on Exynos5250 Masaharu Hayakawa (1): mmc: tmio: Fix error handling when issuing CMD23 Matt Redfearn (4): MIPS: uaccess: Add micromips clobbers to bzero invocation MIPS: memset.S: EVA & fault support for small_memset MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup MIPS: memset.S: Fix clobber of v1 in last_fixup Matthew Wilcox (1): mm/filemap.c: fix NULL pointer in page_cache_tree_insert() Maxime Chevallier (1): spi: Fix scatterlist elements size in spi_map_buf Maxime Jayat (1): dmaengine: at_xdmac: fix rare residue corruption Michael Ellerman (2): powerpc/mm/radix: Fix checkstops caused by invalid tlbiel powerpc/lib: Fix off-by-one in alternate feature patching Michael Neuling (2): powerpc/eeh: Fix race with driver un/bind powerpc/eeh: Fix enabling bridge MMIO windows Mika Westerberg (6): ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status() thunderbolt: Wait a bit longer for ICM to authenticate the active NVM thunderbolt: Serialize PCIe tunnel creation with PCI rescan thunderbolt: Resume control channel after hibernation image is created thunderbolt: Handle connecting device in place of host properly thunderbolt: Prevent crash when ICM firmware is not running Mike Snitzer (1): dm: backfill abnormal IO support to non-splitting IO submission Mikhail Lappo (1): thermal: imx: Fix race condition in imx_thermal_probe() Mikulas Patocka (2): block: use 32-bit blk_status_t on Alpha dm crypt: limit the number of allocated pages Naoya Horiguchi (1): mm: hwpoison: disable memory error handling on 1GB hugepage Naveen N. Rao (1): powerpc/kprobes: Fix call trace due to incorrect preempt count Nicholas Piggin (6): powerpc/64s: Fix pkey support in dt_cpu_ftrs, add CPU_FTR_PKEY bit powerpc/powernv: Handle unknown OPAL errors in opal_nvram_write() powerpc/64s: Fix dt_cpu_ftrs to have restore_cpu clear unwanted LPCR bits powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently powerpc/powernv: define a standard delay for OPAL_BUSY type retry loops powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops Nico Sneck (1): drm/radeon: add PX quirk for Asus K73TK Nicolas Ferre (1): ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property Paul Mackerras (1): powerpc/64: Call H_REGISTER_PROC_TBL when running as a HPT guest on POWER9 Paul Parsons (1): drm/radeon: Fix PCIe lane width calculation Ravi Bangoria (1): trace_uprobe: Use %lx to display offset Richard Genoud (1): clk: mvebu: armada-38x: add support for missing clocks Richard Weinberger (3): ubifs: Check ubifs_wbuf_sync() return code ubi: fastmap: Don't flush fastmap work on detach ubi: Reject MLC NAND Rodrigo Rivas Costa (1): HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device Roger Quadros (1): usb: dwc3: prevent setting PRTCAP to OTG from debugfs Roland Dreier (1): RDMA/ucma: Don't allow setting RDMA_OPTION_IB_PATH without an RDMA device Romain Izard (1): ubi: Fix error for write access Ronnie Sahlberg (2): cifs: fix memory leak in SMB2_open() fix smb3-encryption breakage when CONFIG_DEBUG_SG=y Ryo Kodama (1): pwm: rcar: Fix a condition to prevent mismatch value setting to duty Sakari Ailus (1): media: vb2: core: Finish buffers at the end of the stream Santiago Esteban (1): ARM: dts: at91: sama5d4: fix pinctrl compatible string Sean Wang (6): arm: dts: mt7623: fix USB initialization fails on bananapi-r2 soc: mediatek: fix the mistaken pointer accessed when subdomains are added clk: mediatek: fix PWM clock source by adding a fixed-factor clock pwm: mediatek: Fix up PWM4 and PWM5 malfunction on MT7623 pwm: mediatek: Improve precision in rate calculation dt-bindings: clock: mediatek: add binding for fixed-factor clock axisel_d4 Sean Young (1): media: rc: oops in ir_timer_keyup after device unplug Sinan Kaya (1): PCI: Mark Broadcom HT1100 and HT2000 Root Port Extended Tags as broken Steve French (2): Tree connect for SMB3.1.1 must be signed for non-encrypted shares smb3: Fix root directory when server returns inode number of zero Steven Rostedt (VMware) (2): vsprintf: Do not preprocess non-dereferenced pointers for bprintf (%px and %pK) ring-buffer: Check if memory is available before allocation Takashi Iwai (8): resource: fix integer overflow at reallocation swiotlb: fix unexpected swiotlb_alloc_coherent failures ALSA: pcm: Avoid potential races between OSS ioctls and read/write ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls ALSA: pcm: Fix UAF at PCM release via PCM timer access ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation ALSA: rawmidi: Fix missing input substream checks in compat ioctls Theodore Ts'o (17): random: use a tighter cap in credit_entropy_bits_safe() jbd2: if the journal is aborted then don't allow update of the log tail ext4: shutdown should not prevent get_write_access ext4: eliminate sleep from shutdown ioctl ext4: pass -ESHUTDOWN code to jbd2 layer ext4: don't update checksum of new initialized bitmaps ext4: fail ext4_iget for root directory if unallocated ext4: always initialize the crc32c checksum driver ext4: don't allow r/w mounts if metadata blocks overlap the superblock ext4: move call to ext4_error() into ext4_xattr_check_block() ext4: add bounds checking to ext4_xattr_find_entry() ext4: add extra checks to ext4_xattr_block_get() ext4: force revalidation of directory pointer after seekdir(2) random: fix crng_ready() test random: use a different mixing algorithm for add_device_randomness() random: crng_reseed() should lock the crng instance that it is modifying random: add new ioctl RNDRESEEDCRNG Thiago Jung Bauermann (1): powerpc/kexec_file: Fix error code when trying to load kdump kernel Thinh Nguyen (1): usb: dwc3: pci: Properly cleanup resource Ville Syrjälä (1): drm/i915: Correctly handle limited range YCbCr data on VLV/CHV Vlastimil Babka (1): mm, slab: reschedule cache_reap() on the same CPU Weinan Li (1): drm/i915/gvt: init mmio by lri command in vgpu inhibit context Yan, Zheng (1): ceph: always update atime/mtime/ctime for new inode Yavuz, Tuba (1): USB: gadget: f_midi: fixing a possible double-free in f_midi Zhengjun Xing (1): USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw

7 years, 4 months

1
1
0 0

Linux 4.9.96

by Greg KH

I'm announcing the release of the 4.9.96 kernel. All users of the 4.9 kernel series must upgrade. The updated 4.9.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.9.y and can be browsed at the normal kernel.org git web browser: http://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/boot/dts/at91sam9g25.dtsi | 2 arch/arm/boot/dts/exynos5250.dtsi | 8 arch/arm/boot/dts/sama5d4.dtsi | 2 arch/mips/include/asm/uaccess.h | 11 + arch/mips/lib/memset.S | 11 - arch/powerpc/include/asm/barrier.h | 3 arch/powerpc/include/asm/opal.h | 3 arch/powerpc/include/asm/synch.h | 4 arch/powerpc/kernel/eeh_pe.c | 3 arch/powerpc/lib/feature-fixups.c | 2 arch/powerpc/platforms/powernv/opal-nvram.c | 11 + arch/s390/hypfs/inode.c | 2 arch/um/os-Linux/file.c | 1 arch/um/os-Linux/signal.c | 3 arch/x86/um/stub_segv.c | 3 block/blk-mq.c | 4 drivers/acpi/nfit/core.c | 5 drivers/acpi/video_detect.c | 9 + drivers/base/regmap/regmap.c | 2 drivers/char/random.c | 29 ++- drivers/clk/bcm/clk-bcm2835.c | 8 drivers/clk/mvebu/armada-38x.c | 15 - drivers/clk/renesas/clk-sh73a0.c | 6 drivers/dma/at_xdmac.c | 4 drivers/gpu/drm/amd/amdgpu/amdgpu_atpx_handler.c | 1 drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 6 drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 2 drivers/gpu/drm/amd/amdgpu/si_dpm.c | 4 drivers/gpu/drm/radeon/si_dpm.c | 4 drivers/gpu/drm/rockchip/rockchip_drm_vop.c | 23 +- drivers/hid/hid-core.c | 10 - drivers/hid/hid-input.c | 3 drivers/hid/hid-multitouch.c | 5 drivers/hid/hid-rmi.c | 4 drivers/hid/hidraw.c | 5 drivers/hid/i2c-hid/i2c-hid.c | 13 - drivers/hid/wacom_sys.c | 2 drivers/infiniband/core/ucma.c | 3 drivers/infiniband/sw/rxe/rxe_verbs.c | 5 drivers/infiniband/ulp/srp/ib_srp.c | 18 +- drivers/iommu/intel-svm.c | 1 drivers/irqchip/irq-gic-common.c | 9 - drivers/mmc/host/jz4740_mmc.c | 2 drivers/mtd/ubi/block.c | 2 drivers/mtd/ubi/build.c | 11 + drivers/mtd/ubi/fastmap-wl.c | 1 drivers/net/xen-netfront.c | 7 drivers/nvdimm/namespace_devs.c | 4 drivers/pci/hotplug/acpiphp_glue.c | 23 +- drivers/pwm/pwm-rcar.c | 8 drivers/spi/spi.c | 10 - drivers/thermal/imx_thermal.c | 6 drivers/thunderbolt/nhi.c | 1 drivers/tty/n_tty.c | 6 drivers/tty/tty_io.c | 9 + drivers/usb/core/generic.c | 9 - drivers/usb/dwc3/dwc3-pci.c | 2 drivers/usb/gadget/function/f_midi.c | 3 drivers/usb/gadget/u_f.h | 2 drivers/usb/gadget/udc/core.c | 3 drivers/usb/musb/musb_gadget_ep0.c | 14 + drivers/vfio/pci/vfio_pci_config.c | 29 +++ drivers/watchdog/f71808e_wdt.c | 2 fs/autofs4/root.c | 2 fs/cifs/cifsglob.h | 1 fs/cifs/inode.c | 33 ++++ fs/ext4/balloc.c | 3 fs/ext4/ialloc.c | 47 ----- fs/ext4/inode.c | 11 - fs/ext4/super.c | 6 fs/fs-writeback.c | 7 fs/jbd2/journal.c | 5 fs/jffs2/super.c | 2 fs/namespace.c | 3 fs/notify/fanotify/fanotify.c | 34 +--- fs/orangefs/super.c | 5 fs/reiserfs/journal.c | 2 fs/ubifs/super.c | 14 + fs/udf/unicode.c | 6 include/dt-bindings/clock/mt2701-clk.h | 3 include/linux/backing-dev-defs.h | 5 include/linux/backing-dev.h | 30 +-- include/linux/hid.h | 6 include/linux/tty.h | 1 include/sound/pcm_oss.h | 1 include/uapi/linux/random.h | 3 ipc/shm.c | 23 ++ kernel/resource.c | 3 mm/filemap.c | 9 - mm/page-writeback.c | 18 +- mm/slab.c | 3 net/sunrpc/rpc_pipe.c | 1 sound/core/oss/pcm_oss.c | 186 ++++++++++++++++++----- sound/core/pcm.c | 8 sound/core/rawmidi_compat.c | 18 +- sound/pci/hda/hda_intel.c | 3 sound/soc/codecs/ssm2602.c | 19 +- sound/usb/line6/midi.c | 2 99 files changed, 648 insertions(+), 300 deletions(-) Aaron Ma (3): HID: i2c-hid: fix size check and type usage HID: Fix hid_report_len usage HID: core: Fix size as type u32 Al Viro (5): jffs2_kill_sb(): deal with failed allocations hypfs_kill_super(): deal with failed allocations orangefs_kill_sb(): deal with allocation failures rpc_pipefs: fix double-dput() Don't leak MNT_INTERNAL away from internal mounts Alex Deucher (2): drm/amdgpu: Add an ATPX quirk for hybrid laptop drm/amdgpu: Fix PCIe lane width calculation Alex Smith (1): mmc: jz4740: Fix race condition in IRQ mask update Alex Williamson (1): vfio/pci: Virtualize Maximum Read Request Size Amir Goldstein (1): fanotify: fix logic of events on child Andrew Morton (1): fs/reiserfs/journal.c: add missing resierfs_warning() arg Aniruddha Banerjee (1): irqchip/gic: Take lock when updating irq type Arnd Bergmann (1): clk: fix false-positive Wmaybe-uninitialized warning Bart Van Assche (3): RDMA/rxe: Fix an out-of-bounds read IB/srp: Fix srp_abort() IB/srp: Fix completion vector assignment algorithm Bas Nieuwenhuizen (1): drm/amdgpu: Fix always_valid bos multiple LRU insertions. Boris Brezillon (1): clk: bcm2835: De-assert/assert PLL reset signal when appropriate Dan Carpenter (1): regmap: Fix reversed bounds check in regmap_raw_write() Dan Williams (2): libnvdimm, namespace: use a safe lookup for dimm device name nfit, address-range-scrub: fix scrub in-progress reporting David Wang (1): ALSA: hda - New VIA controller suppor no-snoop path Eric Biggers (1): ipc/shm: fix use-after-free of shm file via remap_file_pages() Eryu Guan (1): ext4: protect i_disksize update by i_data_sem in direct write path Fabián Inostroza (1): ALSA: line6: Use correct endpoint type for midi output Felipe Balbi (1): usb: gadget: udc: core: update usb_ep_queue() documentation Greg Kroah-Hartman (1): Linux 4.9.96 Greg Thelen (1): writeback: safer lock nesting Hans de Goede (1): ACPI / video: Add quirk to force acpi-video backlight on Samsung 670Z5E Heinrich Schuchardt (1): usb: musb: gadget: misplaced out of bounds check Ian Kent (1): autofs: mount point create should honour passed in mode Igor Pylypiv (1): watchdog: f71808e_wdt: Fix WD_EN register read James Kelly (1): ASoC: ssm2602: Replace reg_default_raw with reg_default Jan Kara (1): udf: Fix leak of UTF-16 surrogates into encoded strings Jason A. Donenfeld (1): um: Compile with modern headers Jason Andryuk (1): xen-netfront: Fix hang on device removal Krzysztof Mazur (1): um: Use POSIX ucontext_t instead of struct ucontext Lu Baolu (1): iommu/vt-d: Fix a potential memory leak Marc Zyngier (1): drm/rockchip: Clear all interrupts before requesting the IRQ Marek Szyprowski (1): ARM: dts: exynos: Fix IOMMU support for GScaler devices on Exynos5250 Matt Redfearn (4): MIPS: uaccess: Add micromips clobbers to bzero invocation MIPS: memset.S: EVA & fault support for small_memset MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup MIPS: memset.S: Fix clobber of v1 in last_fixup Matthew Wilcox (1): mm/filemap.c: fix NULL pointer in page_cache_tree_insert() Maxime Chevallier (1): spi: Fix scatterlist elements size in spi_map_buf Maxime Jayat (1): dmaengine: at_xdmac: fix rare residue corruption Michael Ellerman (1): powerpc/lib: Fix off-by-one in alternate feature patching Michael Neuling (1): powerpc/eeh: Fix enabling bridge MMIO windows Mika Westerberg (2): ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status() thunderbolt: Resume control channel after hibernation image is created Mikhail Lappo (1): thermal: imx: Fix race condition in imx_thermal_probe() Nicholas Piggin (4): powerpc/powernv: Handle unknown OPAL errors in opal_nvram_write() powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently powerpc/powernv: define a standard delay for OPAL_BUSY type retry loops powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops Nicolas Ferre (1): ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property Paul Parsons (1): drm/radeon: Fix PCIe lane width calculation Ralph Sennhauser (1): clk: mvebu: armada-38x: add support for 1866MHz variants Richard Genoud (1): clk: mvebu: armada-38x: add support for missing clocks Richard Weinberger (3): ubifs: Check ubifs_wbuf_sync() return code ubi: fastmap: Don't flush fastmap work on detach ubi: Reject MLC NAND Rodrigo Rivas Costa (1): HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device Roland Dreier (1): RDMA/ucma: Don't allow setting RDMA_OPTION_IB_PATH without an RDMA device Romain Izard (1): ubi: Fix error for write access Ryo Kodama (1): pwm: rcar: Fix a condition to prevent mismatch value setting to duty Santiago Esteban (1): ARM: dts: at91: sama5d4: fix pinctrl compatible string Sean Wang (1): dt-bindings: clock: mediatek: add binding for fixed-factor clock axisel_d4 Steve French (1): smb3: Fix root directory when server returns inode number of zero Takashi Iwai (8): resource: fix integer overflow at reallocation ALSA: pcm: Fix UAF at PCM release via PCM timer access ALSA: pcm: Use ERESTARTSYS instead of EINTR in OSS emulation ALSA: pcm: Avoid potential races between OSS ioctls and read/write ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation ALSA: rawmidi: Fix missing input substream checks in compat ioctls Tejun Heo (1): tty: make n_tty_read() always abort if hangup is in progress Theodore Ts'o (8): random: use a tighter cap in credit_entropy_bits_safe() jbd2: if the journal is aborted then don't allow update of the log tail ext4: don't update checksum of new initialized bitmaps ext4: fail ext4_iget for root directory if unallocated ext4: don't allow r/w mounts if metadata blocks overlap the superblock random: fix crng_ready() test random: crng_reseed() should lock the crng instance that it is modifying random: add new ioctl RNDRESEEDCRNG Thinh Nguyen (1): usb: dwc3: pci: Properly cleanup resource Vlastimil Babka (1): mm, slab: reschedule cache_reap() on the same CPU Wanpeng Li (1): block/mq: fix potential deadlock during cpu hotplug Yavuz, Tuba (1): USB: gadget: f_midi: fixing a possible double-free in f_midi Zhengjun Xing (1): USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw

7 years, 4 months

1
1
0 0

Linux 4.4.129

by Greg KH

I'm announcing the release of the 4.4.129 kernel. All users of the 4.4 kernel series must upgrade. The updated 4.4.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.4.y and can be browsed at the normal kernel.org git web browser: http://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/boot/dts/at91sam9g25.dtsi | 2 arch/arm/boot/dts/sama5d4.dtsi | 2 arch/mips/include/asm/uaccess.h | 11 - arch/mips/lib/memset.S | 11 - arch/parisc/kernel/drivers.c | 4 arch/powerpc/include/asm/barrier.h | 3 arch/powerpc/include/asm/opal.h | 3 arch/powerpc/include/asm/synch.h | 4 arch/powerpc/kernel/eeh_pe.c | 3 arch/powerpc/lib/feature-fixups.c | 2 arch/powerpc/platforms/powernv/opal-nvram.c | 11 + arch/s390/hypfs/inode.c | 2 arch/s390/kernel/ipl.c | 1 arch/um/os-Linux/signal.c | 2 arch/x86/Kconfig | 5 arch/x86/include/asm/arch_hweight.h | 24 +- arch/x86/kernel/i386_ksyms_32.c | 2 arch/x86/kernel/x8664_ksyms_64.c | 3 arch/x86/lib/Makefile | 2 arch/x86/lib/hweight.S | 79 ++++++++ arch/x86/um/stub_segv.c | 2 drivers/acpi/video_detect.c | 9 drivers/base/regmap/regmap.c | 2 drivers/block/loop.c | 12 - drivers/char/random.c | 2 drivers/clk/bcm/clk-bcm2835.c | 8 drivers/clk/mvebu/armada-38x.c | 15 - drivers/dma/at_xdmac.c | 4 drivers/gpu/drm/radeon/radeon_object.c | 3 drivers/gpu/drm/radeon/si_dpm.c | 4 drivers/hid/hid-core.c | 10 - drivers/hid/hid-input.c | 3 drivers/hid/hid-multitouch.c | 5 drivers/hid/hid-rmi.c | 4 drivers/hid/hidraw.c | 5 drivers/hid/i2c-hid/i2c-hid.c | 13 - drivers/hwmon/ina2xx.c | 3 drivers/infiniband/core/ucma.c | 3 drivers/infiniband/ulp/srp/ib_srp.c | 18 - drivers/iommu/intel-svm.c | 1 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 4 drivers/mmc/host/jz4740_mmc.c | 2 drivers/mtd/ubi/block.c | 2 drivers/mtd/ubi/build.c | 11 + drivers/mtd/ubi/fastmap-wl.c | 1 drivers/net/slip/slhc.c | 5 drivers/net/usb/cdc_ether.c | 6 drivers/net/usb/lan78xx.c | 3 drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c | 2 drivers/net/xen-netfront.c | 7 drivers/pci/hotplug/acpiphp_glue.c | 23 +- drivers/s390/cio/qdio_main.c | 42 ++-- drivers/thermal/imx_thermal.c | 6 drivers/thunderbolt/nhi.c | 1 drivers/tty/n_tty.c | 6 drivers/tty/tty_io.c | 9 drivers/usb/core/generic.c | 9 drivers/usb/dwc3/dwc3-pci.c | 2 drivers/usb/musb/musb_gadget_ep0.c | 14 - drivers/vfio/pci/vfio_pci_config.c | 107 ++++++++++- drivers/watchdog/f71808e_wdt.c | 2 fs/autofs4/root.c | 2 fs/ext4/balloc.c | 3 fs/ext4/ialloc.c | 47 ---- fs/ext4/inline.c | 66 +++--- fs/ext4/inode.c | 48 ++--- fs/ext4/super.c | 6 fs/ext4/xattr.c | 30 +-- fs/ext4/xattr.h | 32 +++ fs/fs-writeback.c | 7 fs/jbd2/journal.c | 5 fs/jffs2/super.c | 2 fs/namei.c | 3 fs/namespace.c | 3 fs/notify/fanotify/fanotify.c | 34 +-- fs/reiserfs/journal.c | 2 fs/ubifs/super.c | 14 + include/linux/backing-dev-defs.h | 5 include/linux/backing-dev.h | 31 +-- include/linux/hid.h | 6 include/linux/mm.h | 4 include/linux/tty.h | 1 include/net/slhc_vj.h | 1 include/sound/pcm_oss.h | 1 ipc/shm.c | 23 ++ kernel/resource.c | 3 lib/Makefile | 2 lib/hweight.c | 4 mm/filemap.c | 16 - mm/memory.c | 17 + mm/page-writeback.c | 18 - mm/slab.c | 3 net/sunrpc/rpc_pipe.c | 1 sound/core/oss/pcm_oss.c | 189 +++++++++++++++----- sound/core/pcm.c | 8 sound/core/rawmidi_compat.c | 18 + sound/pci/hda/hda_intel.c | 3 sound/soc/codecs/ssm2602.c | 19 +- sound/usb/line6/midi.c | 2 tools/perf/tests/code-reading.c | 20 -- tools/perf/util/intel-pt-decoder/intel-pt-decoder.c | 64 +++--- tools/perf/util/intel-pt-decoder/intel-pt-decoder.h | 2 tools/perf/util/intel-pt.c | 37 +++ 104 files changed, 924 insertions(+), 446 deletions(-) Aaron Ma (3): HID: i2c-hid: fix size check and type usage HID: Fix hid_report_len usage HID: core: Fix size as type u32 Adrian Hunter (4): perf intel-pt: Fix overlap detection to identify consecutive buffers correctly perf intel-pt: Fix sync_switch perf intel-pt: Fix error recovery from missing TIP packet perf intel-pt: Fix timestamp following overflow Al Viro (5): getname_kernel() needs to make sure that ->name != ->iname in long case jffs2_kill_sb(): deal with failed allocations hypfs_kill_super(): deal with failed allocations rpc_pipefs: fix double-dput() Don't leak MNT_INTERNAL away from internal mounts Alex Smith (1): mmc: jz4740: Fix race condition in IRQ mask update Alex Williamson (3): vfio-pci: Virtualize PCIe & AF FLR vfio/pci: Virtualize Maximum Payload Size vfio/pci: Virtualize Maximum Read Request Size Amir Goldstein (1): fanotify: fix logic of events on child Andrew Morton (1): fs/reiserfs/journal.c: add missing resierfs_warning() arg Arnd Bergmann (1): radeon: hide pointless #warning when compile testing Bart Van Assche (2): IB/srp: Fix srp_abort() IB/srp: Fix completion vector assignment algorithm Bassem Boubaker (1): cdc_ether: flag the Cinterion AHS8 modem by gemalto as WWAN Boris Brezillon (1): clk: bcm2835: De-assert/assert PLL reset signal when appropriate Borislav Petkov (1): x86/hweight: Get rid of the special calling convention Dan Carpenter (1): regmap: Fix reversed bounds check in regmap_raw_write() David Wang (1): ALSA: hda - New VIA controller suppor no-snoop path Eric Biggers (1): ipc/shm: fix use-after-free of shm file via remap_file_pages() Fabián Inostroza (1): ALSA: line6: Use correct endpoint type for midi output Greg Kroah-Hartman (2): Revert "perf tests: Decompress kernel module before objdump" Linux 4.4.129 Greg Thelen (1): writeback: safer lock nesting Hans de Goede (1): ACPI / video: Add quirk to force acpi-video backlight on Samsung 670Z5E Heinrich Schuchardt (1): usb: musb: gadget: misplaced out of bounds check Helge Deller (1): parisc: Fix out of array access in match_pci_device() Ian Kent (1): autofs: mount point create should honour passed in mode Igor Pylypiv (1): watchdog: f71808e_wdt: Fix WD_EN register read James Kelly (1): ASoC: ssm2602: Replace reg_default_raw with reg_default Jan Kara (1): ext4: fix crashes in dioread_nolock mode Jason Andryuk (1): xen-netfront: Fix hang on device removal Julian Wiedmann (2): s390/qdio: don't retry EQBS after CCQ 96 s390/qdio: don't merge ERROR output buffers Krzysztof Mazur (1): um: Use POSIX ucontext_t instead of struct ucontext Lu Baolu (1): iommu/vt-d: Fix a potential memory leak Marek Szyprowski (1): hwmon: (ina2xx) Fix access to uninitialized mutex Matt Redfearn (4): MIPS: uaccess: Add micromips clobbers to bzero invocation MIPS: memset.S: EVA & fault support for small_memset MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup MIPS: memset.S: Fix clobber of v1 in last_fixup Matthew Wilcox (1): mm/filemap.c: fix NULL pointer in page_cache_tree_insert() Mauro Carvalho Chehab (1): media: v4l2-compat-ioctl32: don't oops on overlay Maxime Jayat (1): dmaengine: at_xdmac: fix rare residue corruption Michael Ellerman (1): powerpc/lib: Fix off-by-one in alternate feature patching Michael Neuling (1): powerpc/eeh: Fix enabling bridge MMIO windows Michal Hocko (1): mm: allow GFP_{FS,IO} for page_cache_read page cache allocation Mika Westerberg (2): ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status() thunderbolt: Resume control channel after hibernation image is created Mikhail Lappo (1): thermal: imx: Fix race condition in imx_thermal_probe() Nicholas Mc Guire (1): ALSA: oss: consolidate kmalloc/memset 0 call to kzalloc Nicholas Piggin (4): powerpc/powernv: Handle unknown OPAL errors in opal_nvram_write() powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently powerpc/powernv: define a standard delay for OPAL_BUSY type retry loops powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops Nicolas Ferre (1): ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property Paul Parsons (1): drm/radeon: Fix PCIe lane width calculation Phil Elwell (1): lan78xx: Correctly indicate invalid OTP Ralph Sennhauser (1): clk: mvebu: armada-38x: add support for 1866MHz variants Richard Genoud (1): clk: mvebu: armada-38x: add support for missing clocks Richard Weinberger (3): ubifs: Check ubifs_wbuf_sync() return code ubi: fastmap: Don't flush fastmap work on detach ubi: Reject MLC NAND Rodrigo Rivas Costa (1): HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device Roland Dreier (1): RDMA/ucma: Don't allow setting RDMA_OPTION_IB_PATH without an RDMA device Romain Izard (1): ubi: Fix error for write access Santiago Esteban (1): ARM: dts: at91: sama5d4: fix pinctrl compatible string Sudhir Sreedharan (1): rtl8187: Fix NULL pointer dereference in priv->conf_mutex Takashi Iwai (8): resource: fix integer overflow at reallocation ALSA: pcm: Fix UAF at PCM release via PCM timer access ALSA: pcm: Use ERESTARTSYS instead of EINTR in OSS emulation ALSA: pcm: Avoid potential races between OSS ioctls and read/write ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation ALSA: rawmidi: Fix missing input substream checks in compat ioctls Tejaswi Tanikella (1): slip: Check if rstate is initialized before uncompressing Tejun Heo (1): tty: make n_tty_read() always abort if hangup is in progress Tetsuo Handa (1): block/loop: fix deadlock after loop_set_status Theodore Ts'o (6): random: use a tighter cap in credit_entropy_bits_safe() jbd2: if the journal is aborted then don't allow update of the log tail ext4: don't update checksum of new initialized bitmaps ext4: fail ext4_iget for root directory if unallocated ext4: don't allow r/w mounts if metadata blocks overlap the superblock ext4: fix deadlock between inline_data and ext4_expand_extra_isize_ea() Thinh Nguyen (1): usb: dwc3: pci: Properly cleanup resource Vasily Gorbik (1): s390/ipl: ensure loadparm valid flag is set Ville Syrjälä (1): x86/hweight: Don't clobber %rdi Vlastimil Babka (1): mm, slab: reschedule cache_reap() on the same CPU Zhengjun Xing (1): USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw wangguang (1): ext4: bugfix for mmaped pages in mpage_release_unused_pages()

7 years, 4 months

1
1
0 0

Re: [GIT PULL] commits for Linux 4.14

by Sasha Levin

Ping on these? Also, at this point I seem to be building these trees faster than we deal with them (so for example, 4.15 has about 600 patches that didn't make it in before it went EOL). I also have about 600+ outstanding patches for 4.14 queued up. Would you be ok with making these batches bigger? On Sun, Apr 15, 2018 at 05:37:48PM -0400, alexander.levin(a)microsoft.com wrote: >-----BEGIN PGP SIGNED MESSAGE----- >Hash: SHA512 > >Hi Greg, > >Pleae pull commits for Linux 4.14 . > >I've sent a review request for all commits over a week ago and all >comments were addressed. > > >Thanks, >Sasha > >===== > > >The following changes since commit 9a2e216d9e892249b63d10603c75495749202df9: > > Linux 4.14.32 (2018-03-31 18:10:43 +0200) > >are available in the Git repository at: > > git://git.kernel.org/pub/scm/linux/kernel/git/sashal/linux-stable.git tags/for-greg-4.14-15042018 > >for you to fetch changes up to e2397164e55e7ea0328b556363a7b362429916eb: > > RDMA/core: Reduce poll batch for direct cq polling (2018-04-15 10:45:12 -0400) > >- ---------------------------------------------------------------- >for-greg-4.14-15042018 > >- ---------------------------------------------------------------- >Aaron Sierra (1): > tty: serial: exar: Relocate sleep wake-up handling > >Alan Brady (1): > i40evf: ignore link up if not running > >Alex Estrin (2): > IB/hfi1: Fix for potential refcount leak in hfi1_open_file() > IB/ipoib: Fix for potential no-carrier state > >Alex Williamson (1): > PCI: Add function 1 DMA alias quirk for Marvell 9128 > >Alexey Dobriyan (1): > proc: fix /proc/*/map_files lookup > >Anand Jain (1): > btrfs: fail mount when sb flag is not in BTRFS_SUPER_FLAG_SUPP > >Andi Shyti (1): > Input: stmfts - set IRQ_NOAUTOEN to the irq flag > >Andy Shevchenko (1): > device property: Define type of PROPERTY_ENRTY_*() macros > >Andy Spencer (1): > gianfar: prevent integer wrapping in the rx handler > >Aneesh Kumar K.V (1): > powerpc/mm/hash64: Zero PGD pages on allocation > >Anna-Maria Gleixner (1): > tracing/hrtimer: Fix tracing bugs by taking all clock bases and modes into account > >Arnaldo Carvalho de Melo (2): > perf unwind: Do not look just at the global callchain_param.record_mode > perf callchain: Fix attr.sample_max_stack setting > >Arnd Bergmann (4): > scsi: fas216: fix sense buffer initialization > x86/power: Fix swsusp_arch_resume prototype > x86/dumpstack: Avoid uninitlized variable > cifs: silence compiler warnings showing up with gcc-8.0.0 > >Avinash Dayanand (1): > i40evf: Don't schedule reset_task when device is being removed > >Chen Yu (2): > ACPI: processor_perflib: Do not send _PPC change notification if not ready > cpufreq: intel_pstate: Enable HWP during system resume on CPU0 > >Christian Borntraeger (1): > KVM: s390: use created_vcpus in more places > >Chuck Lever (2): > xprtrdma: Fix backchannel allocation of extra rpcrdma_reps > svcrdma: Fix Read chunk round-up > >Coly Li (1): > bcache: properly set task state in bch_writeback_thread() > >Corentin LABBE (1): > crypto: artpec6 - remove select on non-existing CRYPTO_SHA384 > >Corinna Vinschen (1): > igb: Allow to remove administratively set MAC on VFs > >Dan Carpenter (2): > ASoC: au1x: Fix timeout tests in au1xac97c_ac97_read() > HID: roccat: prevent an out of bounds read in kovaplus_profile_activated() > >Daniel Borkmann (1): > bpf: fix rlimit in reuseport net selftest > >Daniel Hua (1): > igb: Clear TXSTMP when ptp_tx_work() is timeout > >David Herrmann (1): > platform/x86: thinkpad_acpi: suppress warning about palm detection > >David Hildenbrand (1): > KVM: s390: vsie: use READ_ONCE to access some SCB fields > >David Howells (1): > rxrpc: Don't put crypto buffers on the stack > >Dmitry Torokhov (1): > Input: psmouse - fix Synaptics detection when protocol is disabled > >Dmitry Vyukov (1): > netfilter: x_tables: fix pointer leaks to userspace > >Don Hiatt (1): > IB/core: Map iWarp AH type to undefined in rdma_ah_find_type > >Ed Swierk (1): > openvswitch: Remove padding from packet before L3+ conntrack processing > >Emil Tantilov (1): > ixgbe: don't set RXDCTL.RLPML for 82599 > >Eryu Guan (1): > blk-mq-debugfs: don't allow write on attributes with seq_operations set > >Geert Uytterhoeven (1): > ubifs: Fix uninitialized variable in search_dh_cookie() > >Goldwyn Rodrigues (1): > block: Set BIO_TRACE_COMPLETION on new bio during split > >Guanglei Li (1): > RDS: IB: Fix null pointer issue > >Guenter Roeck (1): > watchdog: sp5100_tco: Fix watchdog disable bit > >Gustavo A. R. Silva (1): > tcp_nv: fix potential integer overflow in tcpnv_acked > >Hans de Goede (4): > ACPI / LPSS: Do not instiate platform_dev for devs without MMIO resources > platform/x86: dell-laptop: Filter out spurious keyboard backlight change events > ACPI / bus: Do not call _STA on battery devices with unmet dependencies > ACPI / scan: Use acpi_bus_get_status() to initialize ACPI_TYPE_DEVICE devs > >Hector Martin (1): > firewire-ohci: work around oversized DMA reads on JMicron controllers > >Jacob Keller (2): > i40e: program fragmented IPv4 filter input set > i40e: fix reported mask for ntuple filters > >Jake Daryll Obina (1): > jffs2: Fix use-after-free bug in jffs2_iget()'s error handling path > >James Hogan (2): > MIPS: Fix clean of vmlinuz.{32,ecoff,bin,srec} > MIPS: generic: Fix machine compatible matching > >Jan Chochol (1): > nfs: Do not convert nfs_idmap_cache_timeout to jiffies > >Jan H. Sch??nherr (1): > fs/dax.c: release PMD lock even when there is no PMD support in DAX > >Jason Gunthorpe (1): > RDMA/uverbs: Use an unambiguous errno for method not supported > >Jean Delvare (1): > firmware: dmi_scan: Fix handling of empty DMI strings > >Jeffy Chen (1): > ASoC: rockchip: Use dummy_dai for rt5514 dsp dailink > >Jens Axboe (1): > blk-mq: fix discard merge with scheduler attached > >Jesper Dangaard Brouer (2): > libbpf: Makefile set specified permission mode > tools/libbpf: handle issues with bpf ELF objects containing .eh_frames > >Jia Zhang (1): > vfs/proc/kcore, x86/mm/kcore: Fix SMAP fault when dumping vsyscall user page > >Jiri Olsa (2): > perf record: Fix period option handling > perf evsel: Fix period/freq terms setup > >John Fastabend (1): > bpf: sockmap, fix leaking maps with attached but not detached progs > >KarimAllah Ahmed (1): > kvm: Map PFN-type memory regions as writable (if possible) > >Karol Herbst (1): > drm/nouveau/pmu/fuc: don't use movw directly anymore > >Kirill A. Shutemov (1): > asm-generic: provide generic_pmdp_establish() > >Leon Romanovsky (1): > RDMA/mlx5: Avoid memory leak in case of XRCD dealloc failure > >Liu Bo (4): > Btrfs: set plug for fsync > Btrfs: fix scrub to repair raid6 corruption > Btrfs: fix unexpected EEXIST from btrfs_get_extent > Btrfs: raid56: fix race between merge_bio and rbio_orig_end_io > >Logan Gunthorpe (1): > ntb_transport: Fix bug with max_mw_size parameter > >Mark Salter (1): > irqchip/gic-v3: Change pr_debug message to pr_devel > >Martin Blumenstingl (2): > net: stmmac: dwmac-meson8b: fix setting the RGMII TX clock on Meson8b > net: stmmac: dwmac-meson8b: propagate rate changes to the parent clock > >Masami Hiramatsu (1): > selftest: ftrace: Fix to pick text symbols for kprobes > >Mathieu Malaterre (1): > net: Extra '_get' in declaration of arch_get_platform_mac_address > >Matt Redfearn (2): > MIPS: TXx9: use IS_BUILTIN() for CONFIG_LEDS_CLASS > MIPS: Generic: Support GIC in EIC mode > >Max Gurtovoy (1): > RDMA/core: Reduce poll batch for direct cq polling > >Maxime Chevallier (1): > spi: a3700: Clear DATA_OUT when performing a read > >Mel Gorman (1): > mm: pin address_space before dereferencing it while isolating an LRU page > >Michael Bringmann (2): > powerpc/numa: Use ibm,max-associativity-domains to discover possible nodes > powerpc/numa: Ensure nodes initialized for hotplug > >Michael J. Ruhl (1): > IB/hfi1: Re-order IRQ cleanup to address driver cleanup race > >Michael Kelley (1): > cpumask: Make for_each_cpu_wrap() available on UP as well > >Michal Hocko (1): > netfilter: x_tables: make allocation less aggressive > >Micka??l Sala??n (1): > samples/bpf: Partially fixes the bpf.o build > >Ming Lei (2): > dm mpath: return DM_MAPIO_REQUEUE on blk-mq rq allocation failure > blk-mq: turn WARN_ON in __blk_mq_run_hw_queue into printk > >Mustafa Ismail (1): > i40iw: Free IEQ resources > >NeilBrown (1): > NFSv4: always set NFS_LOCK_LOST when a lock is lost. > >Ngai-Mint Kwan (1): > fm10k: fix "failed to kill vid" message for VF > >Nicholas Piggin (2): > powerpc: System reset avoid interleaving oops using die synchronisation > powerpc/powernv: IMC fix out of bounds memory access at shutdown > >Niklas Cassel (2): > PCI: Add dummy pci_irqd_intx_xlate() for CONFIG_PCI=n build > net: stmmac: discard disabled flags in interrupt status register > >Nikolay Borisov (1): > btrfs: Fix out of bounds access in btrfs_search_slot > >Nitin Gupta (1): > sparc64: update pmdp_invalidate() to return old pmd value > >Paolo Bonzini (1): > kvm: x86: fix KVM_XEN_HVM_CONFIG ioctl > >Parav Pandit (2): > RDMA/core: Clarify rdma_ah_find_type > RDMA/cma: Check existence of netdevice during port validation > >Paul Mackerras (2): > KVM: PPC: Book3S HV: Enable migration of decrementer register > KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code > >Peter Hutterer (1): > Input: synaptics - reset the ABS_X/Y fuzz after initializing MT axes > >Peter Xu (1): > iommu/vt-d: Use domain instead of cache fetching > >Peter Zijlstra (1): > x86/tsc: Allow TSC calibration without PIT > >Prashant Bhole (1): > bpf: test_maps: cleanup sockmaps when test ends > >Rafael J. Wysocki (1): > ACPI / EC: Restore polling during noirq suspend/resume phases > >Robin Murphy (1): > iommu/exynos: Don't unconditionally steal bus ops > >Ross Lagerwall (2): > xen-netfront: Fix race between device setup and open > xen/grant-table: Use put_page instead of free_page > >Sagi Grimberg (1): > IB/cq: Don't force IB_POLL_DIRECT poll context for ib_process_cq_direct > >Sebastian Ott (1): > s390/eadm: fix CONFIG_BLOCK include dependency > >Sheng Yong (1): > f2fs: avoid hungtask when GC encrypted block if io_bits is set > >Shiraz Saleem (1): > i40iw: Zero-out consumer key on allocate stag for FMR > >Stephen Boyd (1): > irqchip/gic-v3: Ignore disabled ITS nodes > >Steven Rostedt (VMware) (3): > tools lib traceevent: Simplify pointer print logic and fix %pF > tools lib traceevent: Fix get_field_str() for dynamic strings > selftests/ftrace: Add some missing glob checks > >Subash Abhinov Kasiviswanathan (2): > netfilter: ipv6: nf_defrag: Pass on packets to stack per RFC2460 > netfilter: ipv6: nf_defrag: Kill frag queue on RFC2460 failure > >Takashi Iwai (1): > ALSA: hda - Use IS_REACHABLE() for dependency on input > >Tang Junhui (3): > bcache: fix for allocator and register thread race > bcache: fix for data collapse after re-attaching an attached device > bcache: return attach error when no cache set exist > >Thomas Richter (2): > perf record: Fix failed memory allocation for get_cpuid_str > perf test: Fix test trace+probe_libc_inet_pton.sh for s390x > >Tony Lindgren (1): > PM / wakeirq: Fix unbalanced IRQ enable for wakeirq > >Trond Myklebust (1): > SUNRPC: Don't call __UDPX_INC_STATS() from a preemptible context > >Ulf Hansson (1): > PM / domains: Fix up domain-idle-states OF parsing > >Ulf Magnusson (3): > kconfig: Don't leak main menus during parsing > kconfig: Fix automatic menu creation mem leak > kconfig: Fix expr_free() E_NOT leak > >Vitaly Kuznetsov (3): > x86/hyperv: Stop suppressing X86_FEATURE_PCID > x86/hyperv: Check for required priviliges in hyperv_init() > x86/kvm/vmx: do not use vm-exit instruction length for fast MMIO when running nested > >Wei Yongjun (2): > ipmi/powernv: Fix error return code in ipmi_powernv_probe() > nfp: fix error return code in nfp_pci_probe() > >Will Deacon (2): > arm64: spinlock: Fix theoretical trylock() A-B-A with LSE atomics > locking/qspinlock: Ensure node->count is updated before initialising node > >Xose Vazquez Perez (1): > scsi: devinfo: fix format of the device list > >Yang Shi (1): > mm: thp: use down_read_trylock() in khugepaged to avoid long block > >Yisheng Xie (2): > mm/mempolicy: fix the check of nodemask from user > mm/mempolicy: add nodes_empty check in SYSC_migrate_pages > >Yonghong Song (1): > bpf: fix selftests/bpf test_kmod.sh failure when CONFIG_BPF_JIT_ALWAYS_ON=y > >himanshu.madhani(a)cavium.com (1): > scsi: qla2xxx: Fix warning in qla2x00_async_iocb_timeout() > >mike.travis(a)hpe.com (1): > x86/platform/UV: Fix GAM Range Table entries less than 1GB > >mulhern (1): > dm thin: fix documentation relative to low water mark threshold > >piaojun (3): > ocfs2: return -EROFS to mount.ocfs2 if inode block is invalid > ocfs2/acl: use 'ip_xattr_sem' to protect getting extended attribute > ocfs2: return error when we attempt to access a dirty bh in jbd2 > >shidao.ytt (1): > mm/fadvise: discard partial page if endbyte is also EOF > >weiyongjun (A) (1): > mac80211_hwsim: fix possible memory leak in hwsim_new_radio_nl() > > Documentation/device-mapper/thin-provisioning.txt | 8 +- > Documentation/virtual/kvm/api.txt | 1 + > arch/arm64/include/asm/spinlock.h | 4 +- > arch/mips/boot/compressed/Makefile | 6 +- > arch/mips/generic/irq.c | 18 +- > arch/mips/include/asm/machine.h | 2 +- > arch/mips/txx9/rbtx4939/setup.c | 4 +- > arch/powerpc/include/asm/book3s/64/pgalloc.h | 10 +- > arch/powerpc/include/uapi/asm/kvm.h | 2 + > arch/powerpc/kernel/traps.c | 2 +- > arch/powerpc/kvm/book3s_64_mmu_hv.c | 8 +- > arch/powerpc/kvm/book3s_hv.c | 8 + > arch/powerpc/kvm/powerpc.c | 2 +- > arch/powerpc/mm/numa.c | 78 +- > arch/powerpc/platforms/powernv/opal-imc.c | 6 +- > arch/s390/include/asm/eadm.h | 2 +- > arch/s390/kvm/kvm-s390.c | 4 +- > arch/s390/kvm/vsie.c | 50 +- > arch/sparc/include/asm/pgtable_64.h | 2 +- > arch/sparc/mm/tlb.c | 23 +- > arch/x86/hyperv/hv_init.c | 9 +- > arch/x86/hyperv/mmu.c | 12 +- > arch/x86/include/asm/i8259.h | 5 + > arch/x86/kernel/apic/x2apic_uv_x.c | 15 +- > arch/x86/kernel/dumpstack.c | 2 +- > arch/x86/kernel/tsc.c | 18 + > arch/x86/kvm/vmx.c | 16 +- > arch/x86/kvm/x86.c | 10 +- > arch/x86/mm/init_64.c | 3 +- > arch/x86/power/hibernate_32.c | 2 +- > arch/x86/power/hibernate_64.c | 2 +- > block/bio.c | 2 +- > block/blk-core.c | 2 + > block/blk-merge.c | 29 +- > block/blk-mq-debugfs.c | 6 +- > block/blk-mq.c | 22 +- > drivers/acpi/acpi_lpss.c | 2 + > drivers/acpi/bus.c | 6 + > drivers/acpi/ec.c | 6 + > drivers/acpi/processor_perflib.c | 2 +- > drivers/acpi/scan.c | 20 +- > drivers/base/power/domain.c | 76 +- > drivers/base/power/wakeirq.c | 6 +- > drivers/char/ipmi/ipmi_powernv.c | 5 +- > drivers/cpufreq/intel_pstate.c | 5 + > drivers/crypto/Kconfig | 1 - > drivers/firewire/ohci.c | 8 +- > drivers/firmware/dmi_scan.c | 22 +- > .../drm/nouveau/nvkm/subdev/pmu/fuc/gf100.fuc3.h | 746 +++++++-------- > .../drm/nouveau/nvkm/subdev/pmu/fuc/gk208.fuc5.h | 802 ++++++++-------- > .../drm/nouveau/nvkm/subdev/pmu/fuc/gt215.fuc3.h | 1006 ++++++++++---------- > .../gpu/drm/nouveau/nvkm/subdev/pmu/fuc/memx.fuc | 30 +- > drivers/hid/hid-roccat-kovaplus.c | 2 + > drivers/infiniband/core/cma.c | 8 +- > drivers/infiniband/core/cq.c | 30 +- > drivers/infiniband/core/uverbs_ioctl.c | 19 +- > drivers/infiniband/hw/hfi1/chip.c | 18 +- > drivers/infiniband/hw/hfi1/file_ops.c | 4 +- > drivers/infiniband/hw/hfi1/hfi.h | 1 + > drivers/infiniband/hw/hfi1/init.c | 4 +- > drivers/infiniband/hw/i40iw/i40iw_puda.c | 3 +- > drivers/infiniband/hw/i40iw/i40iw_puda.h | 1 + > drivers/infiniband/hw/i40iw/i40iw_verbs.c | 2 + > drivers/infiniband/hw/mlx5/qp.c | 5 +- > drivers/infiniband/ulp/ipoib/ipoib_main.c | 3 + > drivers/input/mouse/psmouse-base.c | 34 +- > drivers/input/mouse/synaptics.c | 10 + > drivers/input/touchscreen/stmfts.c | 11 +- > drivers/iommu/exynos-iommu.c | 7 + > drivers/iommu/intel-iommu.c | 3 +- > drivers/irqchip/irq-gic-v3-its-pci-msi.c | 2 + > drivers/irqchip/irq-gic-v3-its-platform-msi.c | 2 + > drivers/irqchip/irq-gic-v3-its.c | 2 + > drivers/irqchip/irq-gic-v3.c | 2 +- > drivers/md/bcache/alloc.c | 4 +- > drivers/md/bcache/bcache.h | 2 +- > drivers/md/bcache/btree.c | 9 +- > drivers/md/bcache/super.c | 23 +- > drivers/md/bcache/sysfs.c | 11 +- > drivers/md/bcache/writeback.c | 7 +- > drivers/md/dm-mpath.c | 14 +- > drivers/net/ethernet/freescale/gianfar.c | 9 +- > drivers/net/ethernet/intel/fm10k/fm10k_netdev.c | 14 +- > drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 18 +- > drivers/net/ethernet/intel/i40e/i40e_main.c | 3 + > drivers/net/ethernet/intel/i40evf/i40evf.h | 1 + > drivers/net/ethernet/intel/i40evf/i40evf_main.c | 9 +- > .../net/ethernet/intel/i40evf/i40evf_virtchnl.c | 35 +- > drivers/net/ethernet/intel/igb/igb_main.c | 42 +- > drivers/net/ethernet/intel/igb/igb_ptp.c | 9 + > drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 8 +- > drivers/net/ethernet/netronome/nfp/nfp_main.c | 1 + > .../net/ethernet/stmicro/stmmac/dwmac-meson8b.c | 6 +- > drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c | 6 +- > drivers/net/wireless/mac80211_hwsim.c | 4 +- > drivers/net/xen-netfront.c | 46 +- > drivers/ntb/ntb_transport.c | 3 + > drivers/pci/quirks.c | 2 + > drivers/platform/x86/dell-laptop.c | 24 +- > drivers/platform/x86/thinkpad_acpi.c | 10 + > drivers/scsi/arm/fas216.c | 2 +- > drivers/scsi/qla2xxx/qla_init.c | 4 + > drivers/scsi/scsi_devinfo.c | 7 +- > drivers/spi/spi-armada-3700.c | 5 + > .../staging/fsl-mc/bus/irq-gic-v3-its-fsl-mc-msi.c | 2 + > drivers/tty/serial/8250/8250_exar.c | 34 +- > drivers/tty/serial/8250/8250_port.c | 26 - > drivers/watchdog/sp5100_tco.h | 2 +- > drivers/xen/grant-table.c | 4 +- > fs/btrfs/ctree.c | 12 +- > fs/btrfs/disk-io.c | 6 +- > fs/btrfs/file.c | 9 + > fs/btrfs/inode.c | 17 +- > fs/btrfs/raid56.c | 55 +- > fs/btrfs/volumes.c | 9 +- > fs/cifs/cifssmb.c | 4 +- > fs/dax.c | 2 +- > fs/f2fs/gc.c | 7 +- > fs/jffs2/fs.c | 1 - > fs/nfs/nfs4proc.c | 12 +- > fs/nfs/nfs4state.c | 5 +- > fs/nfs/nfs4sysctl.c | 2 +- > fs/ocfs2/acl.c | 6 + > fs/ocfs2/journal.c | 23 +- > fs/ocfs2/super.c | 5 +- > fs/ocfs2/xattr.c | 2 + > fs/proc/base.c | 29 +- > fs/proc/kcore.c | 4 + > fs/ubifs/tnc.c | 21 +- > include/asm-generic/pgtable.h | 15 + > include/linux/cpumask.h | 2 + > include/linux/etherdevice.h | 2 +- > include/linux/kcore.h | 1 + > include/linux/pci.h | 7 + > include/linux/property.h | 10 +- > include/linux/suspend.h | 2 + > include/rdma/ib_verbs.h | 23 +- > include/trace/events/timer.h | 20 +- > kernel/bpf/sockmap.c | 19 +- > kernel/locking/qspinlock.c | 8 + > kernel/power/power.h | 3 - > lib/test_bpf.c | 31 +- > mm/fadvise.c | 10 +- > mm/khugepaged.c | 12 +- > mm/mempolicy.c | 33 +- > mm/vmscan.c | 14 +- > net/ipv4/tcp_nv.c | 2 +- > net/ipv6/netfilter/nf_conntrack_reasm.c | 16 +- > net/netfilter/x_tables.c | 7 +- > net/netfilter/xt_IDLETIMER.c | 1 + > net/netfilter/xt_LED.c | 1 + > net/netfilter/xt_limit.c | 3 +- > net/netfilter/xt_nfacct.c | 1 + > net/netfilter/xt_statistic.c | 1 + > net/openvswitch/conntrack.c | 34 + > net/rds/ib.c | 3 +- > net/rxrpc/conn_event.c | 1 + > net/rxrpc/rxkad.c | 92 +- > net/sunrpc/xprtrdma/backchannel.c | 12 +- > net/sunrpc/xprtrdma/svc_rdma_rw.c | 12 +- > net/sunrpc/xprtrdma/verbs.c | 32 +- > net/sunrpc/xprtrdma/xprt_rdma.h | 2 +- > net/sunrpc/xprtsock.c | 4 +- > samples/bpf/Makefile | 5 +- > scripts/kconfig/expr.c | 2 +- > scripts/kconfig/menu.c | 1 + > scripts/kconfig/zconf.y | 33 +- > sound/pci/hda/Kconfig | 1 - > sound/pci/hda/patch_realtek.c | 5 + > sound/soc/au1x/ac97c.c | 6 +- > sound/soc/rockchip/rk3399_gru_sound.c | 19 +- > tools/lib/bpf/Makefile | 2 +- > tools/lib/bpf/libbpf.c | 26 + > tools/lib/traceevent/event-parse.c | 17 +- > tools/lib/traceevent/parse-filter.c | 10 +- > tools/perf/arch/x86/util/header.c | 2 +- > tools/perf/builtin-c2c.c | 5 +- > tools/perf/builtin-record.c | 3 +- > tools/perf/builtin-report.c | 5 +- > tools/perf/builtin-script.c | 5 +- > tools/perf/perf.h | 1 + > tools/perf/tests/dwarf-unwind.c | 1 + > .../perf/tests/shell/trace+probe_libc_inet_pton.sh | 21 +- > tools/perf/util/callchain.c | 10 + > tools/perf/util/callchain.h | 2 + > tools/perf/util/evsel.c | 21 +- > tools/perf/util/unwind-libunwind-local.c | 9 +- > tools/testing/selftests/bpf/test_maps.c | 16 +- > .../ftrace/test.d/ftrace/func-filter-glob.tc | 6 + > .../ftrace/test.d/kprobe/multiple_kprobes.tc | 4 +- > tools/testing/selftests/net/reuseport_bpf.c | 21 +- > virt/kvm/kvm_main.c | 7 +- > 192 files changed, 2774 insertions(+), 1876 deletions(-) >-----BEGIN PGP SIGNATURE----- > >iQIzBAEBCgAdFiEE4n5dijQDou9mhzu83qZv95d3LNwFAlrTxiwACgkQ3qZv95d3 >LNxkBA//Rw0JqNQC93MzSLs1nutC4zGqVAN2ioYSclFvM1hlOIXALUjcqFSdv/VE >d3U4zevf4gayuyaWq8T9Y7bpTz1QYZAvyw4fjJrYhhb/89OKH7mEtL+XLv84aywB >AnMqcD1nIU/Nzk994WKu9gRaev5QiY1c6dRQObmHg3O7SYwPhP4TpJyj2IkKAASu >mRsDrIHibuDM92ytC08wvXVjEO6bSzZwv8LXB6MkVk2QruXkEN9SFlDYHho9LG4B >gLZI3yvJB4C+PcTJLnzHozHuscdwrpPfPSTe8ckOMVEfclvOy4vSUYdLA4wt3J7l >rDBcUZuKscHMKi+H4oyMVRjwonB15tLaPYFVHvow76W2kUzs2mFkhkxiTCJkdMpq >gQiWdUr/rXMGbFouAQ57GLlmJUunSmNIx9/BB0vJXWMj4krCn53MK93EhTrG+8vm >A2BaLHdloKr0tR1VFcKUC9tlOJl+srnkXN6ONZTo57tjK/uImrJ7XYdDR08yYOpU >iGgHPabdvWoYsR0qmKbJ+uHK8zsiqeIjjwcBT17h0kI86X6YvDeyqM2MW9/4/x6E >/A4WGP1INyWyKveyTmBlvcJzpzrrift/6yoMGXD7xlNtE1Y/XGG9dDXvl89h0yS+ >L7OOK+/YeBREP50UZ+CKEkgZ7GBkQRp9rUVZ7fghLAa2vn/y4gc= >=1sHf >-----END PGP SIGNATURE-----

7 years, 4 months

2
1
0 0

[PATCH 4.14 000/164] 4.14.36-stable review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 4.14.36 release. There are 164 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Tue Apr 24 13:51:05 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.36-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 4.14.36-rc1 Greg Thelen <gthelen(a)google.com> writeback: safer lock nesting Sean Young <sean(a)mess.org> media: staging: lirc_zilog: incorrect reference counting Sean Young <sean(a)mess.org> Revert "media: lirc_zilog: driver only sends LIRCCODE" Luca Coelho <luciano.coelho(a)intel.com> iwlwifi: add a bunch of new 9000 PCI IDs Luca Coelho <luciano.coelho(a)intel.com> iwlwifi: add shared clock PHY config flag for some devices Andrew Lunn <andrew(a)lunn.ch> net: dsa: Discard frames from unused ports Matthew Wilcox <mawilcox(a)microsoft.com> mm/filemap.c: fix NULL pointer in page_cache_tree_insert() Ian Kent <raven(a)themaw.net> autofs: mount point create should honour passed in mode Al Viro <viro(a)zeniv.linux.org.uk> Don't leak MNT_INTERNAL away from internal mounts Al Viro <viro(a)zeniv.linux.org.uk> rpc_pipefs: fix double-dput() Al Viro <viro(a)zeniv.linux.org.uk> orangefs_kill_sb(): deal with allocation failures Al Viro <viro(a)zeniv.linux.org.uk> hypfs_kill_super(): deal with failed allocations Al Viro <viro(a)zeniv.linux.org.uk> jffs2_kill_sb(): deal with failed allocations Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915: Correctly handle limited range YCbCr data on VLV/CHV Daniel Kurtz <djkurtz(a)chromium.org> mmc: sdhci-pci: Only do AMD tuning for HS200 Amir Goldstein <amir73il(a)gmail.com> fanotify: fix logic of events on child Jan Kara <jack(a)suse.cz> udf: Fix leak of UTF-16 surrogates into encoded strings Michael Ellerman <mpe(a)ellerman.id.au> powerpc/lib: Fix off-by-one in alternate feature patching Benjamin Herrenschmidt <benh(a)kernel.crashing.org> powerpc/xive: Fix trying to "push" an already active pool VP Michael Neuling <mikey(a)neuling.org> powerpc/eeh: Fix enabling bridge MMIO windows Matt Redfearn <matt.redfearn(a)mips.com> MIPS: memset.S: Fix clobber of v1 in last_fixup Matt Redfearn <matt.redfearn(a)mips.com> MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup Matt Redfearn <matt.redfearn(a)mips.com> MIPS: memset.S: EVA & fault support for small_memset Matt Redfearn <matt.redfearn(a)mips.com> MIPS: uaccess: Add micromips clobbers to bzero invocation Aaron Armstrong Skomra <skomra(a)gmail.com> HID: wacom: bluetooth: send exit report for recent Bluetooth devices Rodrigo Rivas Costa <rodrigorivascosta(a)gmail.com> HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device Dmitry Torokhov <dmitry.torokhov(a)gmail.com> HID: input: fix battery level reporting on BT mice Theodore Ts'o <tytso(a)mit.edu> random: add new ioctl RNDRESEEDCRNG Theodore Ts'o <tytso(a)mit.edu> random: crng_reseed() should lock the crng instance that it is modifying Theodore Ts'o <tytso(a)mit.edu> random: set up the NUMA crng instances after the CRNG is fully initialized Theodore Ts'o <tytso(a)mit.edu> random: use a different mixing algorithm for add_device_randomness() Theodore Ts'o <tytso(a)mit.edu> random: fix crng_ready() test Hui Wang <hui.wang(a)canonical.com> ALSA: hda/realtek - adjust the location of one mic Hui Wang <hui.wang(a)canonical.com> ALSA: hda/realtek - set PINCFG_HEADSET_MIC to parse_flags David Wang <davidwang(a)zhaoxin.com> ALSA: hda - New VIA controller suppor no-snoop path Takashi Iwai <tiwai(a)suse.de> ALSA: rawmidi: Fix missing input substream checks in compat ioctls Fabián Inostroza <soulsonceonfire(a)gmail.com> ALSA: line6: Use correct endpoint type for midi output Paul Parsons <lost.distance(a)yahoo.com> drm/radeon: Fix PCIe lane width calculation Nico Sneck <nicosneck(a)hotmail.com> drm/radeon: add PX quirk for Asus K73TK Marc Zyngier <marc.zyngier(a)arm.com> drm/rockchip: Clear all interrupts before requesting the IRQ Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/si: implement get/set pcie_lanes asic callback Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: Fix PCIe lane width calculation Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma: fix mask in emit_pipeline_sync Bas Nieuwenhuizen <basni(a)chromium.org> drm/amdgpu: Fix always_valid bos multiple LRU insertions. Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: Add an ATPX quirk for hybrid laptop Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Avoid potential races between OSS ioctls and read/write Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Use ERESTARTSYS instead of EINTR in OSS emulation Alex Williamson <alex.williamson(a)redhat.com> vfio/pci: Virtualize Maximum Read Request Size Igor Pylypiv <igor.pylypiv(a)gmail.com> watchdog: f71808e_wdt: Fix WD_EN register read Sean Wang <sean.wang(a)mediatek.com> dt-bindings: clock: mediatek: add binding for fixed-factor clock axisel_d4 Mikhail Lappo <mikhail.lappo(a)esrlabs.com> thermal: imx: Fix race condition in imx_thermal_probe() Ryo Kodama <ryo.kodama.vz(a)renesas.com> pwm: rcar: Fix a condition to prevent mismatch value setting to duty Boris Brezillon <boris.brezillon(a)bootlin.com> clk: bcm2835: De-assert/assert PLL reset signal when appropriate Sean Wang <sean.wang(a)mediatek.com> clk: mediatek: fix PWM clock source by adding a fixed-factor clock Arnd Bergmann <arnd(a)arndb.de> clk: fix false-positive Wmaybe-uninitialized warning Richard Genoud <richard.genoud(a)gmail.com> clk: mvebu: armada-38x: add support for missing clocks Sinan Kaya <okaya(a)codeaurora.org> PCI: Mark Broadcom HT1100 and HT2000 Root Port Extended Tags as broken Masaharu Hayakawa <masaharu.hayakawa.ry(a)renesas.com> mmc: tmio: Fix error handling when issuing CMD23 Alex Smith <alex.smith(a)imgtec.com> mmc: jz4740: Fix race condition in IRQ mask update Lu Baolu <baolu.lu(a)linux.intel.com> iommu/vt-d: Fix a potential memory leak Krzysztof Mazur <krzysiek(a)podlesie.net> um: Use POSIX ucontext_t instead of struct ucontext Jason A. Donenfeld <Jason(a)zx2c4.com> um: Compile with modern headers Steven Rostedt (VMware) <rostedt(a)goodmis.org> ring-buffer: Check if memory is available before allocation Dan Williams <dan.j.williams(a)intel.com> nfit: skip region registration for incomplete control regions Dan Williams <dan.j.williams(a)intel.com> nfit, address-range-scrub: fix scrub in-progress reporting Dan Williams <dan.j.williams(a)intel.com> libnvdimm, namespace: use a safe lookup for dimm device name Dan Williams <dan.j.williams(a)intel.com> libnvdimm, dimm: fix dpa reservation vs uninitialized label area Chris Chiu <chiu(a)endlessm.com> tpm: self test failure should not cause suspend to fail Frederic Barrat <fbarrat(a)linux.vnet.ibm.com> cxl: Fix possible deadlock when processing page faults from cxllib Maxime Jayat <maxime.jayat(a)mobile-devices.fr> dmaengine: at_xdmac: fix rare residue corruption Bart Van Assche <bart.vanassche(a)wdc.com> IB/srp: Fix completion vector assignment algorithm Bart Van Assche <bart.vanassche(a)wdc.com> IB/srp: Fix srp_abort() Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Fix UAF at PCM release via PCM timer access Bart Van Assche <bart.vanassche(a)wdc.com> RDMA/rxe: Fix an out-of-bounds read Leon Romanovsky <leonro(a)mellanox.com> RDMA/mlx5: Protect from NULL pointer derefence Roland Dreier <roland(a)purestorage.com> RDMA/ucma: Don't allow setting RDMA_OPTION_IB_PATH without an RDMA device Mikulas Patocka <mpatocka(a)redhat.com> dm crypt: limit the number of allocated pages Theodore Ts'o <tytso(a)mit.edu> ext4: add extra checks to ext4_xattr_block_get() Theodore Ts'o <tytso(a)mit.edu> ext4: add bounds checking to ext4_xattr_find_entry() Theodore Ts'o <tytso(a)mit.edu> ext4: move call to ext4_error() into ext4_xattr_check_block() Theodore Ts'o <tytso(a)mit.edu> ext4: don't allow r/w mounts if metadata blocks overlap the superblock Theodore Ts'o <tytso(a)mit.edu> ext4: always initialize the crc32c checksum driver Theodore Ts'o <tytso(a)mit.edu> ext4: fail ext4_iget for root directory if unallocated Eric Biggers <ebiggers(a)google.com> ext4: limit xattr size to INT_MAX Theodore Ts'o <tytso(a)mit.edu> ext4: add validity checks for bitmap block numbers Eryu Guan <guaneryu(a)gmail.com> ext4: protect i_disksize update by i_data_sem in direct write path Theodore Ts'o <tytso(a)mit.edu> ext4: don't update checksum of new initialized bitmaps Theodore Ts'o <tytso(a)mit.edu> ext4: pass -ESHUTDOWN code to jbd2 layer Theodore Ts'o <tytso(a)mit.edu> ext4: eliminate sleep from shutdown ioctl Theodore Ts'o <tytso(a)mit.edu> ext4: shutdown should not prevent get_write_access Theodore Ts'o <tytso(a)mit.edu> jbd2: if the journal is aborted then don't allow update of the log tail Mikulas Patocka <mpatocka(a)redhat.com> block: use 32-bit blk_status_t on Alpha Hans de Goede <hdegoede(a)redhat.com> extcon: intel-cht-wc: Set direction and drv flags for V5 boost GPIO Theodore Ts'o <tytso(a)mit.edu> random: use a tighter cap in credit_entropy_bits_safe() Aniruddha Banerjee <aniruddhab(a)nvidia.com> irqchip/gic: Take lock when updating irq type Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Prevent crash when ICM firmware is not running Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Resume control channel after hibernation image is created Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Serialize PCIe tunnel creation with PCI rescan Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Wait a bit longer for ICM to authenticate the active NVM Liam Girdwood <liam.r.girdwood(a)linux.intel.com> ASoC: topology: Fix kcontrol name string handling James Kelly <jamespeterkelly(a)gmail.com> ASoC: ssm2602: Replace reg_default_raw with reg_default Sean Wang <sean.wang(a)mediatek.com> soc: mediatek: fix the mistaken pointer accessed when subdomains are added Aaron Ma <aaron.ma(a)canonical.com> HID: core: Fix size as type u32 Aaron Ma <aaron.ma(a)canonical.com> HID: Fix hid_report_len usage Nicholas Piggin <npiggin(a)gmail.com> powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops Thiago Jung Bauermann <bauerman(a)linux.vnet.ibm.com> powerpc/kexec_file: Fix error code when trying to load kdump kernel Naveen N. Rao <naveen.n.rao(a)linux.vnet.ibm.com> powerpc/kprobes: Fix call trace due to incorrect preempt count Nicholas Piggin <npiggin(a)gmail.com> powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently Paul Mackerras <paulus(a)ozlabs.org> powerpc/64: Call H_REGISTER_PROC_TBL when running as a HPT guest on POWER9 Nicholas Piggin <npiggin(a)gmail.com> powerpc/64s: Fix dt_cpu_ftrs to have restore_cpu clear unwanted LPCR bits Nicholas Piggin <npiggin(a)gmail.com> powerpc/powernv: Handle unknown OPAL errors in opal_nvram_write() Gustavo A. R. Silva <gustavo(a)embeddedor.com> CIFS: fix sha512 check in cifs_crypto_secmech_release Aurelien Aptel <aaptel(a)suse.com> CIFS: add sha512 secmech Aurelien Aptel <aaptel(a)suse.com> CIFS: refactor crypto shash/sdesc allocation&free Jean Delvare <jdelvare(a)suse.de> i2c: i801: Restore configuration at shutdown Jean Delvare <jdelvare(a)suse.de> i2c: i801: Save register SMBSLVCMD value only once Aaron Ma <aaron.ma(a)canonical.com> HID: i2c-hid: fix size check and type usage Steve French <stfrench(a)microsoft.com> smb3: Fix root directory when server returns inode number of zero Ronnie Sahlberg <lsahlber(a)redhat.com> fix smb3-encryption breakage when CONFIG_DEBUG_SG=y Ronnie Sahlberg <lsahlber(a)redhat.com> cifs: fix memory leak in SMB2_open() Felipe Balbi <felipe.balbi(a)linux.intel.com> usb: dwc3: gadget: never call ->complete() from ->ep_queue() Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> usb: dwc3: pci: Properly cleanup resource Roger Quadros <rogerq(a)ti.com> usb: dwc3: prevent setting PRTCAP to OTG from debugfs Zhengjun Xing <zhengjun.xing(a)linux.intel.com> USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw Yavuz, Tuba <tuba(a)ece.ufl.edu> USB: gadget: f_midi: fixing a possible double-free in f_midi Mika Westerberg <mika.westerberg(a)linux.intel.com> ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status() Hans de Goede <hdegoede(a)redhat.com> ACPI / video: Add quirk to force acpi-video backlight on Samsung 670Z5E Dan Carpenter <dan.carpenter(a)oracle.com> regmap: Fix reversed bounds check in regmap_raw_write() Jason Andryuk <jandryuk(a)gmail.com> xen-netfront: Fix hang on device removal Jason Andryuk <jandryuk(a)gmail.com> x86/xen: Delay get_cpu_cap until stack canary is established Kieran Bingham <kieran.bingham(a)ideasonboard.com> media: vsp1: Fix BRx conditional path in WPF Hans Verkuil <hverkuil(a)xs4all.nl> media: vivid: check if the cec_adapter is valid Hans Verkuil <hverkuil(a)xs4all.nl> media: atomisp_fops.c: disable atomisp_compat_ioctl32 Jarkko Nikula <jarkko.nikula(a)linux.intel.com> spi: Fix unregistration of controller with fixed SPI bus number Maxime Chevallier <maxime.chevallier(a)bootlin.com> spi: Fix scatterlist elements size in spi_map_buf Eugen Hristev <eugen.hristev(a)microchip.com> spi: atmel: init FIFOs before spi enable Santiago Esteban <Santiago.Esteban(a)microchip.com> ARM: dts: at91: sama5d4: fix pinctrl compatible string Marek Szyprowski <m.szyprowski(a)samsung.com> ARM: dts: exynos: Fix IOMMU support for GScaler devices on Exynos5250 Nicolas Ferre <nicolas.ferre(a)microchip.com> ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property Sean Wang <sean.wang(a)mediatek.com> arm: dts: mt7623: fix USB initialization fails on bananapi-r2 Marek Szyprowski <m.szyprowski(a)samsung.com> ARM: EXYNOS: Fix coupled CPU idle freeze on Exynos4210 David Lechner <david(a)lechnology.com> ARM: dts: da850-lego-ev3: Fix battery voltage gpio Marc Zyngier <marc.zyngier(a)arm.com> KVM: arm/arm64: vgic-its: Fix potential overrun in vgic_copy_lpi_list Jerome Brunet <jbrunet(a)baylibre.com> ARM64: dts: meson: reduce odroid-c2 eMMC maximum rate Felipe Balbi <felipe.balbi(a)linux.intel.com> usb: gadget: udc: core: update usb_ep_queue() documentation Chen-Yu Tsai <wens(a)csie.org> phy: allwinner: sun4i-usb: poll vbus changes on A23/A33 when driving VBUS Heinrich Schuchardt <xypron.glpk(a)gmx.de> usb: musb: gadget: misplaced out of bounds check Vlastimil Babka <vbabka(a)suse.cz> mm, slab: reschedule cache_reap() on the same CPU Eric Biggers <ebiggers(a)google.com> ipc/shm: fix use-after-free of shm file via remap_file_pages() Takashi Iwai <tiwai(a)suse.de> resource: fix integer overflow at reallocation Andrew Morton <akpm(a)linux-foundation.org> fs/reiserfs/journal.c: add missing resierfs_warning() arg Kees Cook <keescook(a)chromium.org> task_struct: only use anon struct under randstruct plugin Jérôme Glisse <jglisse(a)redhat.com> mm/hmm: hmm_pfns_bad() was accessing wrong struct Jérôme Glisse <jglisse(a)redhat.com> mm/hmm: fix header file if/else/endif maze Claudio Imbrenda <imbrenda(a)linux.vnet.ibm.com> mm/ksm.c: fix inconsistent accounting of zero pages Richard Weinberger <richard(a)nod.at> ubi: Reject MLC NAND Romain Izard <romain.izard.pro(a)gmail.com> ubi: Fix error for write access Richard Weinberger <richard(a)nod.at> ubi: fastmap: Don't flush fastmap work on detach Richard Weinberger <richard(a)nod.at> ubifs: Check ubifs_wbuf_sync() return code George Cherian <george.cherian(a)cavium.com> cpufreq: CPPC: Use transition_delay_us depending transition_latency Tejun Heo <tj(a)kernel.org> tty: make n_tty_read() always abort if hangup is in progress ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/at91sam9g25.dtsi | 2 +- arch/arm/boot/dts/da850-lego-ev3.dts | 4 +- arch/arm/boot/dts/exynos5250.dtsi | 8 +- arch/arm/boot/dts/mt7623n-bananapi-bpi-r2.dts | 24 ++- arch/arm/boot/dts/sama5d4.dtsi | 2 +- arch/arm/mach-exynos/pm.c | 6 +- .../arm64/boot/dts/amlogic/meson-gxbb-odroidc2.dts | 2 +- arch/mips/include/asm/uaccess.h | 11 +- arch/mips/lib/memset.S | 11 +- arch/powerpc/include/asm/barrier.h | 3 +- arch/powerpc/include/asm/synch.h | 4 - arch/powerpc/kernel/dt_cpu_ftrs.c | 12 +- arch/powerpc/kernel/eeh_pe.c | 3 +- arch/powerpc/kernel/kprobes.c | 30 ++-- arch/powerpc/kernel/machine_kexec_file_64.c | 2 +- arch/powerpc/lib/feature-fixups.c | 2 +- arch/powerpc/mm/hash_utils_64.c | 6 + arch/powerpc/platforms/powernv/opal-nvram.c | 11 +- arch/powerpc/platforms/pseries/lpar.c | 8 +- arch/powerpc/sysdev/xive/native.c | 4 + arch/s390/hypfs/inode.c | 2 +- arch/um/os-Linux/file.c | 1 + arch/um/os-Linux/signal.c | 3 +- arch/x86/um/stub_segv.c | 3 +- arch/x86/xen/enlighten_pv.c | 8 +- drivers/acpi/nfit/core.c | 18 +- drivers/acpi/video_detect.c | 9 + drivers/base/regmap/regmap.c | 2 +- drivers/char/random.c | 130 ++++++++++---- drivers/char/tpm/tpm-interface.c | 4 + drivers/clk/bcm/clk-bcm2835.c | 8 +- drivers/clk/mediatek/clk-mt2701.c | 15 +- drivers/clk/mvebu/armada-38x.c | 14 +- drivers/clk/renesas/clk-sh73a0.c | 6 +- drivers/cpufreq/cppc_cpufreq.c | 3 + drivers/dma/at_xdmac.c | 4 +- drivers/extcon/extcon-intel-cht-wc.c | 11 +- drivers/gpu/drm/amd/amdgpu/amdgpu_atpx_handler.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 2 +- drivers/gpu/drm/amd/amdgpu/cik_sdma.c | 2 +- drivers/gpu/drm/amd/amdgpu/sdma_v2_4.c | 2 +- drivers/gpu/drm/amd/amdgpu/sdma_v3_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/sdma_v4_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/si.c | 67 +++++++ drivers/gpu/drm/amd/amdgpu/si_dpm.c | 4 +- drivers/gpu/drm/i915/i915_reg.h | 10 ++ drivers/gpu/drm/i915/intel_sprite.c | 81 +++++++-- drivers/gpu/drm/radeon/radeon_device.c | 4 + drivers/gpu/drm/radeon/si_dpm.c | 4 +- drivers/gpu/drm/rockchip/rockchip_drm_vop.c | 23 +-- drivers/hid/hid-core.c | 10 +- drivers/hid/hid-input.c | 27 ++- drivers/hid/hid-multitouch.c | 5 +- drivers/hid/hid-rmi.c | 4 +- drivers/hid/hidraw.c | 5 + drivers/hid/i2c-hid/i2c-hid.c | 13 +- drivers/hid/wacom_sys.c | 4 +- drivers/hid/wacom_wac.c | 76 ++++---- drivers/i2c/busses/i2c-i801.c | 16 +- drivers/infiniband/core/ucma.c | 3 + drivers/infiniband/hw/mlx5/mr.c | 2 + drivers/infiniband/sw/rxe/rxe_verbs.c | 5 +- drivers/infiniband/ulp/srp/ib_srp.c | 18 +- drivers/iommu/intel-svm.c | 1 + drivers/irqchip/irq-gic-common.c | 9 +- drivers/md/dm-crypt.c | 66 ++++++- drivers/media/platform/vivid/vivid-vid-common.c | 3 +- drivers/media/platform/vsp1/vsp1_wpf.c | 2 +- drivers/misc/cxl/cxllib.c | 85 +++++---- drivers/mmc/host/jz4740_mmc.c | 2 +- drivers/mmc/host/sdhci-pci-core.c | 25 ++- drivers/mmc/host/tmio_mmc_core.c | 2 +- drivers/mtd/ubi/block.c | 2 +- drivers/mtd/ubi/build.c | 11 ++ drivers/mtd/ubi/fastmap-wl.c | 1 - drivers/net/wireless/intel/iwlwifi/cfg/9000.c | 62 +++++++ drivers/net/wireless/intel/iwlwifi/fw/file.h | 1 + drivers/net/wireless/intel/iwlwifi/iwl-config.h | 5 + drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 4 + drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 195 ++++++++++++++++++--- drivers/net/xen-netfront.c | 7 +- drivers/nvdimm/dimm.c | 8 +- drivers/nvdimm/namespace_devs.c | 4 +- drivers/pci/hotplug/acpiphp_glue.c | 23 ++- drivers/pci/quirks.c | 4 + drivers/phy/allwinner/phy-sun4i-usb.c | 10 +- drivers/pwm/pwm-rcar.c | 8 +- drivers/soc/mediatek/mtk-scpsys.c | 2 +- drivers/spi/spi-atmel.c | 8 +- drivers/spi/spi.c | 19 +- .../media/atomisp/pci/atomisp2/atomisp_fops.c | 6 + drivers/staging/media/lirc/lirc_zilog.c | 9 +- drivers/thermal/imx_thermal.c | 6 +- drivers/thunderbolt/icm.c | 10 +- drivers/thunderbolt/nhi.c | 1 + drivers/thunderbolt/switch.c | 9 + drivers/tty/n_tty.c | 6 + drivers/tty/tty_io.c | 9 + drivers/usb/core/generic.c | 9 +- drivers/usb/dwc3/core.c | 3 + drivers/usb/dwc3/dwc3-pci.c | 2 +- drivers/usb/dwc3/gadget.c | 43 +++-- drivers/usb/gadget/function/f_midi.c | 3 +- drivers/usb/gadget/u_f.h | 2 + drivers/usb/gadget/udc/core.c | 3 + drivers/usb/musb/musb_gadget_ep0.c | 14 +- drivers/vfio/pci/vfio_pci_config.c | 29 ++- drivers/watchdog/f71808e_wdt.c | 2 +- fs/autofs4/root.c | 2 +- fs/cifs/Kconfig | 1 + fs/cifs/cifsencrypt.c | 85 ++------- fs/cifs/cifsfs.c | 1 + fs/cifs/cifsglob.h | 3 + fs/cifs/cifsproto.h | 5 + fs/cifs/inode.c | 33 ++++ fs/cifs/link.c | 27 +-- fs/cifs/misc.c | 54 ++++++ fs/cifs/smb2ops.c | 15 +- fs/cifs/smb2pdu.c | 8 +- fs/cifs/smb2proto.h | 3 + fs/cifs/smb2transport.c | 97 +++++----- fs/cifs/smbencrypt.c | 27 +-- fs/ext4/balloc.c | 19 +- fs/ext4/ext4_jbd2.c | 7 - fs/ext4/ialloc.c | 54 ++---- fs/ext4/inode.c | 11 +- fs/ext4/ioctl.c | 8 +- fs/ext4/super.c | 21 ++- fs/ext4/xattr.c | 121 +++++++------ fs/ext4/xattr.h | 11 ++ fs/fs-writeback.c | 7 +- fs/jbd2/journal.c | 30 +++- fs/jffs2/super.c | 2 +- fs/namespace.c | 3 +- fs/notify/fanotify/fanotify.c | 34 ++-- fs/orangefs/super.c | 5 + fs/reiserfs/journal.c | 2 +- fs/ubifs/super.c | 14 +- fs/udf/unicode.c | 6 + include/dt-bindings/clock/mt2701-clk.h | 3 +- include/linux/backing-dev-defs.h | 5 + include/linux/backing-dev.h | 30 ++-- include/linux/blk_types.h | 5 + include/linux/compiler-clang.h | 3 - include/linux/compiler-gcc.h | 12 +- include/linux/hid.h | 15 +- include/linux/hmm.h | 9 +- include/linux/tty.h | 1 + include/sound/pcm_oss.h | 1 + include/uapi/linux/random.h | 3 + ipc/shm.c | 23 ++- kernel/resource.c | 3 +- kernel/trace/ring_buffer.c | 5 + mm/filemap.c | 9 +- mm/hmm.c | 3 +- mm/ksm.c | 7 + mm/page-writeback.c | 18 +- mm/slab.c | 3 +- net/dsa/tag_brcm.c | 3 + net/dsa/tag_dsa.c | 3 + net/dsa/tag_edsa.c | 3 + net/dsa/tag_ksz.c | 3 + net/dsa/tag_lan9303.c | 3 + net/dsa/tag_mtk.c | 3 + net/dsa/tag_qca.c | 3 + net/dsa/tag_trailer.c | 3 + net/sunrpc/rpc_pipe.c | 1 + sound/core/oss/pcm_oss.c | 186 ++++++++++++++++---- sound/core/pcm.c | 8 +- sound/core/rawmidi_compat.c | 18 +- sound/pci/hda/hda_intel.c | 3 +- sound/pci/hda/patch_realtek.c | 3 + sound/soc/codecs/ssm2602.c | 19 +- sound/soc/soc-topology.c | 23 ++- sound/usb/line6/midi.c | 2 +- virt/kvm/arm/vgic/vgic-its.c | 15 +- 178 files changed, 1886 insertions(+), 823 deletions(-)

7 years, 4 months

4
160
0 0

RE: [PATCH] [SCSI] mpt3sas: Fix secure erase premature termination (v4)

by Igor Rybak

Hi, We are running kernel 4.4.0-22 and the patch below does not seem to be present in the mpt3sas driver. Can you please confirm? As a reminder the patch was related to a Security Erase ATA command that requires a very long timeout like 100 minutes or more and the drive retains a busy status. And the driver should not try to send other commands or reset the drive. Thanks, Igor Rybak CTO MediaClone Inc 6900 Canby Ave Ste 107 Reseda, CA 91335 USA +1-818-654-6286 ________________________________________ From: Sreekanth Reddy [sreekanth.reddy(a)broadcom.com] Sent: Thursday, November 10, 2016 8:38 PM To: Andrey Grodzovsky Cc: PDL-MPT-FUSIONLINUX; Igor Rybak; Ezra Kohavi; linux-scsi(a)vger.kernel.org; Sathya Prakash; Chaitra P B; Suganath Prabu Subramani; Hannes Reinecke; stable(a)vger.kernel.org Subject: Re: [PATCH] [SCSI] mpt3sas: Fix secure erase premature termination (v4) On Thu, Nov 10, 2016 at 8:05 PM, Andrey Grodzovsky <andrey2805(a)gmail.com> wrote: > Problem: > This is a work around for a bug with LSI Fusion MPT SAS2 when > pefroming secure erase. Due to the very long time the operation > takes commands issued during the erase will time out and will trigger > execution of abort hook. Even though the abort hook is called for > the specific command which timed out this leads to entire device halt > (scsi_state terminated) and premature termination of the secured erase. > > Fix: > Set device state to busy while erase in progress to reject any incoming > commands until the erase is done. The device is blocked any way during > this time and cannot execute any other command. > More data and logs can be found here - > https://drive.google.com/file/d/0B9ocOHYHbbS1Q3VMdkkzeWFkTjg/view > > v2: Update according to example patch by Hannes Reinecke to apply > the blocking logic to any ATA 12/16 command. > > v3: Use SCSI commands opcodes definitions instead of value and > correct identation. > > v4: Fix checkpath errors and warning. > > Signed-off-by: Andrey Grodzovsky <andrey2805(a)gmail.com> > Cc: <linux-scsi(a)vger.kernel.org> > Cc: Sathya Prakash <sathya.prakash(a)broadcom.com> > Cc: Chaitra P B <chaitra.basappa(a)broadcom.com> > Cc: Suganath Prabu Subramani <suganath-prabu.subramani(a)broadcom.com> > Cc: Sreekanth Reddy <Sreekanth.Reddy(a)broadcom.com> > Cc: Hannes Reinecke <hare(a)suse.de> > Cc: <stable(a)vger.kernel.org> Acked-by: Sreekanth Reddy <Sreekanth.Reddy(a)broadcom.com> > --- > drivers/scsi/mpt3sas/mpt3sas_scsih.c | 16 ++++++++++++++++ > 1 file changed, 16 insertions(+) > > diff --git a/drivers/scsi/mpt3sas/mpt3sas_scsih.c b/drivers/scsi/mpt3sas/mpt3sas_scsih.c > index 5a97e32..c032319 100644 > --- a/drivers/scsi/mpt3sas/mpt3sas_scsih.c > +++ b/drivers/scsi/mpt3sas/mpt3sas_scsih.c > @@ -3500,6 +3500,10 @@ _scsih_eedp_error_handling(struct scsi_cmnd *scmd, u16 ioc_status) > SAM_STAT_CHECK_CONDITION; > } > > +static inline bool ata_12_16_cmd(struct scsi_cmnd *scmd) > +{ > + return (scmd->cmnd[0] == ATA_12 || scmd->cmnd[0] == ATA_16); > +} > > /** > * _scsih_qcmd - main scsi request entry point > @@ -3528,6 +3532,14 @@ _scsih_qcmd(struct Scsi_Host *shost, struct scsi_cmnd *scmd) > scsi_print_command(scmd); > #endif > > + /** > + * Lock the device for any subsequent command until > + * command is done. > + */ > + if (ata_12_16_cmd(scmd)) > + scsi_internal_device_block(scmd->device); > + > + > sas_device_priv_data = scmd->device->hostdata; > if (!sas_device_priv_data || !sas_device_priv_data->sas_target) { > scmd->result = DID_NO_CONNECT << 16; > @@ -4062,6 +4074,10 @@ _scsih_io_done(struct MPT3SAS_ADAPTER *ioc, u16 smid, u8 msix_index, u32 reply) > if (scmd == NULL) > return 1; > > + if (ata_12_16_cmd(scmd)) > + scsi_internal_device_unblock(scmd->device, SDEV_RUNNING); > + > + > mpi_request = mpt3sas_base_get_msg_frame(ioc, smid); > > if (mpi_reply == NULL) { > -- > 2.1.4 >

7 years, 4 months

2
1
0 0

[PATCH 0/2] Allow drivers to override stop_engine

by xswang＠marvell.com

From: Evan Wang <xswang(a)marvell.com> There maybe some special operations needed when stop engine for AHCI IP of different vendors, so it is necessary to override ahci_stop_engine() when stop the engine like overriding start_engine(). Evan Wang (2): libahci: Allow drivers to override stop_engine ata: ahci: mvebu: override ahci_stop_engine for mvebu AHCI drivers/ata/ahci.c | 6 ++--- drivers/ata/ahci.h | 7 ++++++ drivers/ata/ahci_mvebu.c | 56 +++++++++++++++++++++++++++++++++++++++++++++ drivers/ata/ahci_qoriq.c | 2 +- drivers/ata/ahci_xgene.c | 4 ++-- drivers/ata/libahci.c | 20 +++++++++------- drivers/ata/sata_highbank.c | 2 +- 7 files changed, 82 insertions(+), 15 deletions(-) -- 1.9.1

7 years, 4 months

2
4
0 0

FAILED: patch "[PATCH] PCI: hv: Serialize the present and eject work items" failed to apply to 4.9-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 4.9-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. thanks, greg k-h ------------------ original commit in Linus's tree ------------------ >From 021ad274d7dc31611d4f47f7dd4ac7a224526f30 Mon Sep 17 00:00:00 2001 From: Dexuan Cui <decui(a)microsoft.com> Date: Thu, 15 Mar 2018 14:20:53 +0000 Subject: [PATCH] PCI: hv: Serialize the present and eject work items When we hot-remove the device, we first receive a PCI_EJECT message and then receive a PCI_BUS_RELATIONS message with bus_rel->device_count == 0. The first message is offloaded to hv_eject_device_work(), and the second is offloaded to pci_devices_present_work(). Both the paths can be running list_del(&hpdev->list_entry), causing general protection fault, because system_wq can run them concurrently. The patch eliminates the race condition. Since access to present/eject work items is serialized, we do not need the hbus->enum_sem anymore, so remove it. Fixes: 4daace0d8ce8 ("PCI: hv: Add paravirtual PCI front-end for Microsoft Hyper-V VMs") Link: https://lkml.kernel.org/r/KL1P15301MB00064DA6B4D221123B5241CFBFD70@KL1P1530… Tested-by: Adrian Suhov <v-adsuho(a)microsoft.com> Tested-by: Chris Valean <v-chvale(a)microsoft.com> Signed-off-by: Dexuan Cui <decui(a)microsoft.com> [lorenzo.pieralisi(a)arm.com: squashed semaphore removal patch] Signed-off-by: Lorenzo Pieralisi <lorenzo.pieralisi(a)arm.com> Reviewed-by: Michael Kelley <mikelley(a)microsoft.com> Acked-by: Haiyang Zhang <haiyangz(a)microsoft.com> Cc: <stable(a)vger.kernel.org> # v4.6+ Cc: Vitaly Kuznetsov <vkuznets(a)redhat.com> Cc: Jack Morgenstein <jackm(a)mellanox.com> Cc: Stephen Hemminger <sthemmin(a)microsoft.com> Cc: K. Y. Srinivasan <kys(a)microsoft.com> diff --git a/drivers/pci/host/pci-hyperv.c b/drivers/pci/host/pci-hyperv.c index 2faf38eab785..b7fd5c157d73 100644 --- a/drivers/pci/host/pci-hyperv.c +++ b/drivers/pci/host/pci-hyperv.c @@ -447,7 +447,6 @@ struct hv_pcibus_device { spinlock_t device_list_lock; /* Protect lists below */ void __iomem *cfg_addr; - struct semaphore enum_sem; struct list_head resources_for_children; struct list_head children; @@ -461,6 +460,8 @@ struct hv_pcibus_device { struct retarget_msi_interrupt retarget_msi_interrupt_params; spinlock_t retarget_msi_interrupt_lock; + + struct workqueue_struct *wq; }; /* @@ -1590,12 +1591,8 @@ static struct hv_pci_dev *get_pcichild_wslot(struct hv_pcibus_device *hbus, * It must also treat the omission of a previously observed device as * notification that the device no longer exists. * - * Note that this function is a work item, and it may not be - * invoked in the order that it was queued. Back to back - * updates of the list of present devices may involve queuing - * multiple work items, and this one may run before ones that - * were sent later. As such, this function only does something - * if is the last one in the queue. + * Note that this function is serialized with hv_eject_device_work(), + * because both are pushed to the ordered workqueue hbus->wq. */ static void pci_devices_present_work(struct work_struct *work) { @@ -1616,11 +1613,6 @@ static void pci_devices_present_work(struct work_struct *work) INIT_LIST_HEAD(&removed); - if (down_interruptible(&hbus->enum_sem)) { - put_hvpcibus(hbus); - return; - } - /* Pull this off the queue and process it if it was the last one. */ spin_lock_irqsave(&hbus->device_list_lock, flags); while (!list_empty(&hbus->dr_list)) { @@ -1637,7 +1629,6 @@ static void pci_devices_present_work(struct work_struct *work) spin_unlock_irqrestore(&hbus->device_list_lock, flags); if (!dr) { - up(&hbus->enum_sem); put_hvpcibus(hbus); return; } @@ -1724,7 +1715,6 @@ static void pci_devices_present_work(struct work_struct *work) break; } - up(&hbus->enum_sem); put_hvpcibus(hbus); kfree(dr); } @@ -1770,7 +1760,7 @@ static void hv_pci_devices_present(struct hv_pcibus_device *hbus, spin_unlock_irqrestore(&hbus->device_list_lock, flags); get_hvpcibus(hbus); - schedule_work(&dr_wrk->wrk); + queue_work(hbus->wq, &dr_wrk->wrk); } /** @@ -1848,7 +1838,7 @@ static void hv_pci_eject_device(struct hv_pci_dev *hpdev) get_pcichild(hpdev, hv_pcidev_ref_pnp); INIT_WORK(&hpdev->wrk, hv_eject_device_work); get_hvpcibus(hpdev->hbus); - schedule_work(&hpdev->wrk); + queue_work(hpdev->hbus->wq, &hpdev->wrk); } /** @@ -2461,13 +2451,18 @@ static int hv_pci_probe(struct hv_device *hdev, spin_lock_init(&hbus->config_lock); spin_lock_init(&hbus->device_list_lock); spin_lock_init(&hbus->retarget_msi_interrupt_lock); - sema_init(&hbus->enum_sem, 1); init_completion(&hbus->remove_event); + hbus->wq = alloc_ordered_workqueue("hv_pci_%x", 0, + hbus->sysdata.domain); + if (!hbus->wq) { + ret = -ENOMEM; + goto free_bus; + } ret = vmbus_open(hdev->channel, pci_ring_size, pci_ring_size, NULL, 0, hv_pci_onchannelcallback, hbus); if (ret) - goto free_bus; + goto destroy_wq; hv_set_drvdata(hdev, hbus); @@ -2536,6 +2531,8 @@ static int hv_pci_probe(struct hv_device *hdev, hv_free_config_window(hbus); close: vmbus_close(hdev->channel); +destroy_wq: + destroy_workqueue(hbus->wq); free_bus: free_page((unsigned long)hbus); return ret; @@ -2615,6 +2612,7 @@ static int hv_pci_remove(struct hv_device *hdev) irq_domain_free_fwnode(hbus->sysdata.fwnode); put_hvpcibus(hbus); wait_for_completion(&hbus->remove_event); + destroy_workqueue(hbus->wq); free_page((unsigned long)hbus); return 0; }

7 years, 4 months

3
7
0 0

[RHEL7.6 PATCH 22/37] Drivers: hv: vmbus: Fix a rescind issue

by Mohammed Gamal

The current rescind processing code will not correctly handle the case where the host immediately rescinds a channel that has been offerred. In this case, we could be blocked in the open call and since the channel is rescinded, the host will not respond and we could be blocked forever in the vmbus open call.i Fix this problem. Signed-off-by: K. Y. Srinivasan <kys(a)microsoft.com> Cc: stable(a)vger.kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> (cherry picked from commit 7fa32e5ec28b1609abc0b797b58267f725fc3964) Signed-off-by: Mohammed Gamal <mgamal(a)redhat.com> --- drivers/hv/channel.c | 10 ++++++++-- drivers/hv/channel_mgmt.c | 7 ++++--- include/linux/hyperv.h | 1 + 3 files changed, 13 insertions(+), 5 deletions(-) diff --git a/drivers/hv/channel.c b/drivers/hv/channel.c index 1c967f5..1d58986 100644 --- a/drivers/hv/channel.c +++ b/drivers/hv/channel.c @@ -659,22 +659,28 @@ void vmbus_close(struct vmbus_channel *channel) */ return; } - mutex_lock(&vmbus_connection.channel_mutex); /* * Close all the sub-channels first and then close the * primary channel. */ list_for_each_safe(cur, tmp, &channel->sc_list) { cur_channel = list_entry(cur, struct vmbus_channel, sc_list); - vmbus_close_internal(cur_channel); if (cur_channel->rescind) { + wait_for_completion(&cur_channel->rescind_event); + mutex_lock(&vmbus_connection.channel_mutex); + vmbus_close_internal(cur_channel); hv_process_channel_removal( cur_channel->offermsg.child_relid); + } else { + mutex_lock(&vmbus_connection.channel_mutex); + vmbus_close_internal(cur_channel); } + mutex_unlock(&vmbus_connection.channel_mutex); } /* * Now close the primary. */ + mutex_lock(&vmbus_connection.channel_mutex); vmbus_close_internal(channel); mutex_unlock(&vmbus_connection.channel_mutex); } diff --git a/drivers/hv/channel_mgmt.c b/drivers/hv/channel_mgmt.c index ec5454f..c21020b 100644 --- a/drivers/hv/channel_mgmt.c +++ b/drivers/hv/channel_mgmt.c @@ -333,6 +333,7 @@ static struct vmbus_channel *alloc_channel(void) return NULL; spin_lock_init(&channel->lock); + init_completion(&channel->rescind_event); INIT_LIST_HEAD(&channel->sc_list); INIT_LIST_HEAD(&channel->percpu_list); @@ -898,6 +899,7 @@ static void vmbus_onoffer_rescind(struct vmbus_channel_message_header *hdr) /* * Now wait for offer handling to complete. */ + vmbus_rescind_cleanup(channel); while (READ_ONCE(channel->probe_done) == false) { /* * We wait here until any channel offer is currently @@ -913,7 +915,6 @@ static void vmbus_onoffer_rescind(struct vmbus_channel_message_header *hdr) if (channel->device_obj) { if (channel->chn_rescind_callback) { channel->chn_rescind_callback(channel); - vmbus_rescind_cleanup(channel); return; } /* @@ -922,7 +923,6 @@ static void vmbus_onoffer_rescind(struct vmbus_channel_message_header *hdr) */ dev = get_device(&channel->device_obj->device); if (dev) { - vmbus_rescind_cleanup(channel); vmbus_device_unregister(channel->device_obj); put_device(dev); } @@ -936,13 +936,14 @@ static void vmbus_onoffer_rescind(struct vmbus_channel_message_header *hdr) * 2. Then close the primary channel. */ mutex_lock(&vmbus_connection.channel_mutex); - vmbus_rescind_cleanup(channel); if (channel->state == CHANNEL_OPEN_STATE) { /* * The channel is currently not open; * it is safe for us to cleanup the channel. */ hv_process_channel_removal(rescind->child_relid); + } else { + complete(&channel->rescind_event); } mutex_unlock(&vmbus_connection.channel_mutex); } diff --git a/include/linux/hyperv.h b/include/linux/hyperv.h index 1552a5f..465d5db 100644 --- a/include/linux/hyperv.h +++ b/include/linux/hyperv.h @@ -724,6 +724,7 @@ struct vmbus_channel { u8 monitor_bit; bool rescind; /* got rescind msg */ + struct completion rescind_event; u32 ringbuffer_gpadlhandle; -- 1.8.3.1

7 years, 4 months

2
1
0 0

[PATCH 3.18 00/52] 3.18.106-stable review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 3.18.106 release. There are 52 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Tue Apr 24 13:53:02 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.106-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 3.18.106-rc1 Amir Goldstein <amir73il(a)gmail.com> fanotify: fix logic of events on child Ian Kent <raven(a)themaw.net> autofs: mount point create should honour passed in mode Al Viro <viro(a)zeniv.linux.org.uk> Don't leak MNT_INTERNAL away from internal mounts Al Viro <viro(a)zeniv.linux.org.uk> rpc_pipefs: fix double-dput() Al Viro <viro(a)zeniv.linux.org.uk> hypfs_kill_super(): deal with failed allocations Al Viro <viro(a)zeniv.linux.org.uk> jffs2_kill_sb(): deal with failed allocations Michael Ellerman <mpe(a)ellerman.id.au> powerpc/lib: Fix off-by-one in alternate feature patching Matt Redfearn <matt.redfearn(a)mips.com> MIPS: memset.S: Fix clobber of v1 in last_fixup Matt Redfearn <matt.redfearn(a)mips.com> MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup Matt Redfearn <matt.redfearn(a)mips.com> MIPS: memset.S: EVA & fault support for small_memset Rodrigo Rivas Costa <rodrigorivascosta(a)gmail.com> HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device Takashi Iwai <tiwai(a)suse.de> ALSA: rawmidi: Fix missing input substream checks in compat ioctls Paul Parsons <lost.distance(a)yahoo.com> drm/radeon: Fix PCIe lane width calculation Theodore Ts'o <tytso(a)mit.edu> ext4: don't allow r/w mounts if metadata blocks overlap the superblock Theodore Ts'o <tytso(a)mit.edu> ext4: fail ext4_iget for root directory if unallocated Theodore Ts'o <tytso(a)mit.edu> ext4: add validity checks for bitmap block numbers Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Avoid potential races between OSS ioctls and read/write Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Use ERESTARTSYS instead of EINTR in OSS emulation Nicholas Mc Guire <hofrat(a)osadl.org> ALSA: oss: consolidate kmalloc/memset 0 call to kzalloc Igor Pylypiv <igor.pylypiv(a)gmail.com> watchdog: f71808e_wdt: Fix WD_EN register read Mikhail Lappo <mikhail.lappo(a)esrlabs.com> thermal: imx: Fix race condition in imx_thermal_probe() Richard Genoud <richard.genoud(a)gmail.com> clk: mvebu: armada-38x: add support for missing clocks Ralph Sennhauser <ralph.sennhauser(a)gmail.com> clk: mvebu: armada-38x: add support for 1866MHz variants Alex Smith <alex.smith(a)imgtec.com> mmc: jz4740: Fix race condition in IRQ mask update Theodore Ts'o <tytso(a)mit.edu> jbd2: if the journal is aborted then don't allow update of the log tail Theodore Ts'o <tytso(a)mit.edu> random: use a tighter cap in credit_entropy_bits_safe() Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Resume control channel after hibernation image is created James Kelly <jamespeterkelly(a)gmail.com> ASoC: ssm2602: Replace reg_default_raw with reg_default Nicholas Piggin <npiggin(a)gmail.com> powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops Nicholas Piggin <npiggin(a)gmail.com> powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently Nicholas Piggin <npiggin(a)gmail.com> powerpc/powernv: Handle unknown OPAL errors in opal_nvram_write() Aaron Ma <aaron.ma(a)canonical.com> HID: i2c-hid: fix size check and type usage Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> usb: dwc3: pci: Properly cleanup resource Zhengjun Xing <zhengjun.xing(a)linux.intel.com> USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw Mika Westerberg <mika.westerberg(a)linux.intel.com> ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status() Jason Andryuk <jandryuk(a)gmail.com> xen-netfront: Fix hang on device removal Nicolas Ferre <nicolas.ferre(a)microchip.com> ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property Heinrich Schuchardt <xypron.glpk(a)gmx.de> usb: musb: gadget: misplaced out of bounds check Takashi Iwai <tiwai(a)suse.de> resource: fix integer overflow at reallocation Andrew Morton <akpm(a)linux-foundation.org> fs/reiserfs/journal.c: add missing resierfs_warning() arg Richard Weinberger <richard(a)nod.at> ubi: Reject MLC NAND Romain Izard <romain.izard.pro(a)gmail.com> ubi: Fix error for write access Richard Weinberger <richard(a)nod.at> ubifs: Check ubifs_wbuf_sync() return code Tejaswi Tanikella <tejaswit(a)codeaurora.org> slip: Check if rstate is initialized before uncompressing Vasily Gorbik <gor(a)linux.ibm.com> s390/ipl: ensure loadparm valid flag is set Julian Wiedmann <jwi(a)linux.vnet.ibm.com> s390/qdio: don't merge ERROR output buffers Julian Wiedmann <jwi(a)linux.vnet.ibm.com> s390/qdio: don't retry EQBS after CCQ 96 Helge Deller <deller(a)gmx.de> parisc: Fix out of array access in match_pci_device() Mauro Carvalho Chehab <mchehab(a)s-opensource.com> media: v4l2-compat-ioctl32: don't oops on overlay ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/at91sam9g25.dtsi | 2 +- arch/mips/lib/memset.S | 11 +- arch/parisc/kernel/drivers.c | 4 + arch/powerpc/include/asm/barrier.h | 3 +- arch/powerpc/include/asm/synch.h | 4 - arch/powerpc/lib/feature-fixups.c | 2 +- arch/powerpc/platforms/powernv/opal-nvram.c | 11 +- arch/s390/hypfs/inode.c | 2 +- arch/s390/kernel/ipl.c | 1 + drivers/char/random.c | 2 +- drivers/clk/mvebu/armada-38x.c | 15 +- drivers/gpu/drm/radeon/si_dpm.c | 4 +- drivers/hid/hidraw.c | 5 + drivers/hid/i2c-hid/i2c-hid.c | 13 +- drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 4 +- drivers/mmc/host/jz4740_mmc.c | 2 +- drivers/mtd/ubi/block.c | 2 +- drivers/mtd/ubi/build.c | 11 ++ drivers/net/slip/slhc.c | 5 + drivers/net/xen-netfront.c | 7 +- drivers/pci/hotplug/acpiphp_glue.c | 23 +++- drivers/s390/cio/qdio_main.c | 42 +++--- drivers/thermal/imx_thermal.c | 6 +- drivers/thunderbolt/nhi.c | 1 + drivers/usb/core/generic.c | 9 +- drivers/usb/dwc3/dwc3-pci.c | 2 +- drivers/usb/musb/musb_gadget_ep0.c | 14 +- drivers/watchdog/f71808e_wdt.c | 2 +- fs/autofs4/root.c | 2 +- fs/ext4/balloc.c | 16 ++- fs/ext4/ialloc.c | 8 +- fs/ext4/inode.c | 6 + fs/ext4/super.c | 6 + fs/jbd2/journal.c | 5 +- fs/jffs2/super.c | 2 +- fs/namespace.c | 3 +- fs/notify/fanotify/fanotify.c | 34 ++--- fs/reiserfs/journal.c | 2 +- fs/ubifs/super.c | 14 +- include/net/slhc_vj.h | 1 + include/sound/pcm_oss.h | 1 + kernel/resource.c | 3 +- net/sunrpc/rpc_pipe.c | 1 + sound/core/oss/pcm_oss.c | 189 ++++++++++++++++++++------ sound/core/rawmidi_compat.c | 18 ++- sound/soc/codecs/ssm2602.c | 19 ++- 47 files changed, 388 insertions(+), 155 deletions(-)

7 years, 4 months

6
57
0 0

[Patch v2 1/6] cifs: smbd: Check for iov length on sending the last iov

by Long Li

From: Long Li <longli(a)microsoft.com> When sending the last iov that breaks into smaller buffers to fit the transfer size, it's necessary to check if this is the last iov. If this is the latest iov, stop and proceed to send pages. Signed-off-by: Long Li <longli(a)microsoft.com> Cc: stable(a)vger.kernel.org --- fs/cifs/smbdirect.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/fs/cifs/smbdirect.c b/fs/cifs/smbdirect.c index 90e673c..b5c6c0d 100644 --- a/fs/cifs/smbdirect.c +++ b/fs/cifs/smbdirect.c @@ -2197,6 +2197,8 @@ int smbd_send(struct smbd_connection *info, struct smb_rqst *rqst) goto done; } i++; + if (i == rqst->rq_nvec) + break; } start = i; buflen = 0; -- 2.7.4

7 years, 4 months

5
12
0 0

[PATCH] mtd: spi-nor: Fix Cadence QSPI page fault kernel panic

by thor.thayer＠linux.intel.com

From: Thor Thayer <thor.thayer(a)linux.intel.com> The current Cadence QSPI driver caused a kernel panic when loading a Root Filesystem from QSPI. The problem was caused by reading more bytes than needed because the QSPI operated on 4 bytes at a time. <snip> [ 7.947754] spi_nor_read[1048]:from 0x037cad74, len 1 [bfe07fff] [ 7.956247] cqspi_read[910]:offset 0x58502516, buffer=bfe07fff [ 7.956247] [ 7.966046] Unable to handle kernel paging request at virtual address bfe08002 [ 7.973239] pgd = eebfc000 [ 7.975931] [bfe08002] *pgd=2fffb811, *pte=00000000, *ppte=00000000 </snip> Notice above how only 1 byte needed to be read but by reading 4 bytes into the end of a mapped page, an unrecoverable page fault occurred. This patch uses a temporary buffer to hold the 4 bytes read and then copies only the bytes required into the buffer. A min() function is used to limit the length to prevent buffer overflows. Request testing of this patch on other platforms. This was tested on the Intel Arria10 SoCFPGA DevKit. Fixes: 0cf1725676a97fc8 ("mtd: spi-nor: cqspi: Fix build on arches missing readsl/writesl") Signed-off-by: Thor Thayer <thor.thayer(a)linux.intel.com> Cc: <stable(a)vger.kernel.org> Reviewed-by: Marek Vasut <marek.vasut(a)gmail.com> --- v2 Changes to only write dangling bytes at end of transfer since previous patch may have multiple dangling byte transfers. Remove write patch since no errors reported and write timeout needs more investigation. v3 Add Fixes tag Cc-stable tag. --- drivers/mtd/spi-nor/cadence-quadspi.c | 19 +++++++++++++++++-- 1 file changed, 17 insertions(+), 2 deletions(-) diff --git a/drivers/mtd/spi-nor/cadence-quadspi.c b/drivers/mtd/spi-nor/cadence-quadspi.c index 2f3a4d4232b3..c3f7aaa5d18f 100644 --- a/drivers/mtd/spi-nor/cadence-quadspi.c +++ b/drivers/mtd/spi-nor/cadence-quadspi.c @@ -507,7 +507,9 @@ static int cqspi_indirect_read_execute(struct spi_nor *nor, u8 *rxbuf, void __iomem *reg_base = cqspi->iobase; void __iomem *ahb_base = cqspi->ahb_base; unsigned int remaining = n_rx; + unsigned int mod_bytes = n_rx % 4; unsigned int bytes_to_read = 0; + u8 *rxbuf_end = rxbuf + n_rx; int ret = 0; writel(from_addr, reg_base + CQSPI_REG_INDIRECTRDSTARTADDR); @@ -536,11 +538,24 @@ static int cqspi_indirect_read_execute(struct spi_nor *nor, u8 *rxbuf, } while (bytes_to_read != 0) { + unsigned int word_remain = round_down(remaining, 4); + bytes_to_read *= cqspi->fifo_width; bytes_to_read = bytes_to_read > remaining ? remaining : bytes_to_read; - ioread32_rep(ahb_base, rxbuf, - DIV_ROUND_UP(bytes_to_read, 4)); + bytes_to_read = round_down(bytes_to_read, 4); + /* Read 4 byte word chunks then single bytes */ + if (bytes_to_read) { + ioread32_rep(ahb_base, rxbuf, + (bytes_to_read / 4)); + } else if (!word_remain && mod_bytes) { + unsigned int temp = ioread32(ahb_base); + + bytes_to_read = mod_bytes; + memcpy(rxbuf, &temp, min((unsigned int) + (rxbuf_end - rxbuf), + bytes_to_read)); + } rxbuf += bytes_to_read; remaining -= bytes_to_read; bytes_to_read = cqspi_get_rd_sram_level(cqspi); -- 2.7.4

7 years, 4 months

2
1
0 0

[PATCH] RDMA/cxgb4: release hw resources on device removal

by Raju Rangoju

The c4iw_rdev_close() logic was not releasing all the hw resources (PBL and RQT memory) during the device removal event (driver unload / system reboot). This can cause panic in gen_pool_destroy(). The module remove function will wait for all the hw resources to be released during the device removal event. Fixes c12a67fe(iw_cxgb4: free EQ queue memory on last deref) Signed-off-by: Raju Rangoju <rajur(a)chelsio.com> Reviewed-by: Steve Wise <swise(a)opengridcomputing.com> Cc: stable(a)vger.kernel.org --- drivers/infiniband/hw/cxgb4/device.c | 9 ++++++++- drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 4 ++++ drivers/infiniband/hw/cxgb4/resource.c | 26 ++++++++++++++++++++++++-- 3 files changed, 36 insertions(+), 3 deletions(-) diff --git a/drivers/infiniband/hw/cxgb4/device.c b/drivers/infiniband/hw/cxgb4/device.c index feeb8ee6f4a2..44161ca4d2a8 100644 --- a/drivers/infiniband/hw/cxgb4/device.c +++ b/drivers/infiniband/hw/cxgb4/device.c @@ -875,6 +875,11 @@ static int c4iw_rdev_open(struct c4iw_rdev *rdev) rdev->status_page->db_off = 0; + init_completion(&rdev->rqt_compl); + init_completion(&rdev->pbl_compl); + kref_init(&rdev->rqt_kref); + kref_init(&rdev->pbl_kref); + return 0; err_free_status_page_and_wr_log: if (c4iw_wr_log && rdev->wr_log) @@ -893,13 +898,15 @@ static int c4iw_rdev_open(struct c4iw_rdev *rdev) static void c4iw_rdev_close(struct c4iw_rdev *rdev) { - destroy_workqueue(rdev->free_workq); kfree(rdev->wr_log); c4iw_release_dev_ucontext(rdev, &rdev->uctx); free_page((unsigned long)rdev->status_page); c4iw_pblpool_destroy(rdev); c4iw_rqtpool_destroy(rdev); + wait_for_completion(&rdev->pbl_compl); + wait_for_completion(&rdev->rqt_compl); c4iw_ocqp_pool_destroy(rdev); + destroy_workqueue(rdev->free_workq); c4iw_destroy_resource(&rdev->resource); } diff --git a/drivers/infiniband/hw/cxgb4/iw_cxgb4.h b/drivers/infiniband/hw/cxgb4/iw_cxgb4.h index cc929002c05e..a60def23e9ef 100644 --- a/drivers/infiniband/hw/cxgb4/iw_cxgb4.h +++ b/drivers/infiniband/hw/cxgb4/iw_cxgb4.h @@ -185,6 +185,10 @@ struct c4iw_rdev { struct wr_log_entry *wr_log; int wr_log_size; struct workqueue_struct *free_workq; + struct completion rqt_compl; + struct completion pbl_compl; + struct kref rqt_kref; + struct kref pbl_kref; }; static inline int c4iw_fatal_error(struct c4iw_rdev *rdev) diff --git a/drivers/infiniband/hw/cxgb4/resource.c b/drivers/infiniband/hw/cxgb4/resource.c index 3cf25997ed2b..0ef25ae05e6f 100644 --- a/drivers/infiniband/hw/cxgb4/resource.c +++ b/drivers/infiniband/hw/cxgb4/resource.c @@ -260,12 +260,22 @@ u32 c4iw_pblpool_alloc(struct c4iw_rdev *rdev, int size) rdev->stats.pbl.cur += roundup(size, 1 << MIN_PBL_SHIFT); if (rdev->stats.pbl.cur > rdev->stats.pbl.max) rdev->stats.pbl.max = rdev->stats.pbl.cur; + kref_get(&rdev->pbl_kref); } else rdev->stats.pbl.fail++; mutex_unlock(&rdev->stats.lock); return (u32)addr; } +static void destroy_pblpool(struct kref *kref) +{ + struct c4iw_rdev *rdev; + + rdev = container_of(kref, struct c4iw_rdev, pbl_kref); + gen_pool_destroy(rdev->pbl_pool); + complete(&rdev->pbl_compl); +} + void c4iw_pblpool_free(struct c4iw_rdev *rdev, u32 addr, int size) { pr_debug("addr 0x%x size %d\n", addr, size); @@ -273,6 +283,7 @@ void c4iw_pblpool_free(struct c4iw_rdev *rdev, u32 addr, int size) rdev->stats.pbl.cur -= roundup(size, 1 << MIN_PBL_SHIFT); mutex_unlock(&rdev->stats.lock); gen_pool_free(rdev->pbl_pool, (unsigned long)addr, size); + kref_put(&rdev->pbl_kref, destroy_pblpool); } int c4iw_pblpool_create(struct c4iw_rdev *rdev) @@ -310,7 +321,7 @@ int c4iw_pblpool_create(struct c4iw_rdev *rdev) void c4iw_pblpool_destroy(struct c4iw_rdev *rdev) { - gen_pool_destroy(rdev->pbl_pool); + kref_put(&rdev->pbl_kref, destroy_pblpool); } /* @@ -331,12 +342,22 @@ u32 c4iw_rqtpool_alloc(struct c4iw_rdev *rdev, int size) rdev->stats.rqt.cur += roundup(size << 6, 1 << MIN_RQT_SHIFT); if (rdev->stats.rqt.cur > rdev->stats.rqt.max) rdev->stats.rqt.max = rdev->stats.rqt.cur; + kref_get(&rdev->rqt_kref); } else rdev->stats.rqt.fail++; mutex_unlock(&rdev->stats.lock); return (u32)addr; } +static void destroy_rqtpool(struct kref *kref) +{ + struct c4iw_rdev *rdev; + + rdev = container_of(kref, struct c4iw_rdev, rqt_kref); + gen_pool_destroy(rdev->rqt_pool); + complete(&rdev->rqt_compl); +} + void c4iw_rqtpool_free(struct c4iw_rdev *rdev, u32 addr, int size) { pr_debug("addr 0x%x size %d\n", addr, size << 6); @@ -344,6 +365,7 @@ void c4iw_rqtpool_free(struct c4iw_rdev *rdev, u32 addr, int size) rdev->stats.rqt.cur -= roundup(size << 6, 1 << MIN_RQT_SHIFT); mutex_unlock(&rdev->stats.lock); gen_pool_free(rdev->rqt_pool, (unsigned long)addr, size << 6); + kref_put(&rdev->rqt_kref, destroy_rqtpool); } int c4iw_rqtpool_create(struct c4iw_rdev *rdev) @@ -380,7 +402,7 @@ int c4iw_rqtpool_create(struct c4iw_rdev *rdev) void c4iw_rqtpool_destroy(struct c4iw_rdev *rdev) { - gen_pool_destroy(rdev->rqt_pool); + kref_put(&rdev->rqt_kref, destroy_rqtpool); } /* -- 2.12.0

7 years, 4 months

1
0
0 0

[PATCH 4.14/4.16 v2] writeback: safer lock nesting

by Nathan Chancellor

From: Greg Thelen <gthelen(a)google.com> commit 2e898e4c0a3897ccd434adac5abb8330194f527b upstream. lock_page_memcg()/unlock_page_memcg() use spin_lock_irqsave/restore() if the page's memcg is undergoing move accounting, which occurs when a process leaves its memcg for a new one that has memory.move_charge_at_immigrate set. unlocked_inode_to_wb_begin,end() use spin_lock_irq/spin_unlock_irq() if the given inode is switching writeback domains. Switches occur when enough writes are issued from a new domain. This existing pattern is thus suspicious: lock_page_memcg(page); unlocked_inode_to_wb_begin(inode, &locked); ... unlocked_inode_to_wb_end(inode, locked); unlock_page_memcg(page); If both inode switch and process memcg migration are both in-flight then unlocked_inode_to_wb_end() will unconditionally enable interrupts while still holding the lock_page_memcg() irq spinlock. This suggests the possibility of deadlock if an interrupt occurs before unlock_page_memcg(). truncate __cancel_dirty_page lock_page_memcg unlocked_inode_to_wb_begin unlocked_inode_to_wb_end <interrupts mistakenly enabled> <interrupt> end_page_writeback test_clear_page_writeback lock_page_memcg <deadlock> unlock_page_memcg Due to configuration limitations this deadlock is not currently possible because we don't mix cgroup writeback (a cgroupv2 feature) and memory.move_charge_at_immigrate (a cgroupv1 feature). If the kernel is hacked to always claim inode switching and memcg moving_account, then this script triggers lockup in less than a minute: cd /mnt/cgroup/memory mkdir a b echo 1 > a/memory.move_charge_at_immigrate echo 1 > b/memory.move_charge_at_immigrate ( echo $BASHPID > a/cgroup.procs while true; do dd if=/dev/zero of=/mnt/big bs=1M count=256 done ) & while true; do sync done & sleep 1h & SLEEP=$! while true; do echo $SLEEP > a/cgroup.procs echo $SLEEP > b/cgroup.procs done The deadlock does not seem possible, so it's debatable if there's any reason to modify the kernel. I suggest we should to prevent future surprises. And Wang Long said "this deadlock occurs three times in our environment", so there's more reason to apply this, even to stable. Stable 4.4 has minor conflicts applying this patch. For a clean 4.4 patch see "[PATCH for-4.4] writeback: safer lock nesting" https://lkml.org/lkml/2018/4/11/146 Wang Long said "this deadlock occurs three times in our environment" [gthelen(a)google.com: v4] Link: http://lkml.kernel.org/r/20180411084653.254724-1-gthelen@google.com [akpm(a)linux-foundation.org: comment tweaks, struct initialization simplification] Change-Id: Ibb773e8045852978f6207074491d262f1b3fb613 Link: http://lkml.kernel.org/r/20180410005908.167976-1-gthelen@google.com Fixes: 682aa8e1a6a1 ("writeback: implement unlocked_inode_to_wb transaction and use it for stat updates") Signed-off-by: Greg Thelen <gthelen(a)google.com> Reported-by: Wang Long <wanglong19(a)meituan.com> Acked-by: Wang Long <wanglong19(a)meituan.com> Acked-by: Michal Hocko <mhocko(a)suse.com> Reviewed-by: Andrew Morton <akpm(a)linux-foundation.org> Cc: Johannes Weiner <hannes(a)cmpxchg.org> Cc: Tejun Heo <tj(a)kernel.org> Cc: Nicholas Piggin <npiggin(a)gmail.com> Cc: <stable(a)vger.kernel.org> [v4.2+] Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds(a)linux-foundation.org> [natechancellor: Adjust context due to lack of b93b016313b3b] Signed-off-by: Nathan Chancellor <natechancellor(a)gmail.com> --- fs/fs-writeback.c | 7 ++++--- include/linux/backing-dev-defs.h | 5 +++++ include/linux/backing-dev.h | 30 ++++++++++++++++-------------- mm/page-writeback.c | 18 +++++++++--------- 4 files changed, 34 insertions(+), 26 deletions(-) diff --git a/fs/fs-writeback.c b/fs/fs-writeback.c index d4d04fee568a..40c34a0ef58a 100644 --- a/fs/fs-writeback.c +++ b/fs/fs-writeback.c @@ -745,11 +745,12 @@ int inode_congested(struct inode *inode, int cong_bits) */ if (inode && inode_to_wb_is_valid(inode)) { struct bdi_writeback *wb; - bool locked, congested; + struct wb_lock_cookie lock_cookie = {}; + bool congested; - wb = unlocked_inode_to_wb_begin(inode, &locked); + wb = unlocked_inode_to_wb_begin(inode, &lock_cookie); congested = wb_congested(wb, cong_bits); - unlocked_inode_to_wb_end(inode, locked); + unlocked_inode_to_wb_end(inode, &lock_cookie); return congested; } diff --git a/include/linux/backing-dev-defs.h b/include/linux/backing-dev-defs.h index bfe86b54f6c1..0bd432a4d7bd 100644 --- a/include/linux/backing-dev-defs.h +++ b/include/linux/backing-dev-defs.h @@ -223,6 +223,11 @@ static inline void set_bdi_congested(struct backing_dev_info *bdi, int sync) set_wb_congested(bdi->wb.congested, sync); } +struct wb_lock_cookie { + bool locked; + unsigned long flags; +}; + #ifdef CONFIG_CGROUP_WRITEBACK /** diff --git a/include/linux/backing-dev.h b/include/linux/backing-dev.h index 3e4ce54d84ab..82e8b73117d1 100644 --- a/include/linux/backing-dev.h +++ b/include/linux/backing-dev.h @@ -346,7 +346,7 @@ static inline struct bdi_writeback *inode_to_wb(const struct inode *inode) /** * unlocked_inode_to_wb_begin - begin unlocked inode wb access transaction * @inode: target inode - * @lockedp: temp bool output param, to be passed to the end function + * @cookie: output param, to be passed to the end function * * The caller wants to access the wb associated with @inode but isn't * holding inode->i_lock, mapping->tree_lock or wb->list_lock. This @@ -354,12 +354,12 @@ static inline struct bdi_writeback *inode_to_wb(const struct inode *inode) * association doesn't change until the transaction is finished with * unlocked_inode_to_wb_end(). * - * The caller must call unlocked_inode_to_wb_end() with *@lockdep - * afterwards and can't sleep during transaction. IRQ may or may not be - * disabled on return. + * The caller must call unlocked_inode_to_wb_end() with *@cookie afterwards and + * can't sleep during the transaction. IRQs may or may not be disabled on + * return. */ static inline struct bdi_writeback * -unlocked_inode_to_wb_begin(struct inode *inode, bool *lockedp) +unlocked_inode_to_wb_begin(struct inode *inode, struct wb_lock_cookie *cookie) { rcu_read_lock(); @@ -367,10 +367,10 @@ unlocked_inode_to_wb_begin(struct inode *inode, bool *lockedp) * Paired with store_release in inode_switch_wb_work_fn() and * ensures that we see the new wb if we see cleared I_WB_SWITCH. */ - *lockedp = smp_load_acquire(&inode->i_state) & I_WB_SWITCH; + cookie->locked = smp_load_acquire(&inode->i_state) & I_WB_SWITCH; - if (unlikely(*lockedp)) - spin_lock_irq(&inode->i_mapping->tree_lock); + if (unlikely(cookie->locked)) + spin_lock_irqsave(&inode->i_mapping->tree_lock, cookie->flags); /* * Protected by either !I_WB_SWITCH + rcu_read_lock() or tree_lock. @@ -382,12 +382,13 @@ unlocked_inode_to_wb_begin(struct inode *inode, bool *lockedp) /** * unlocked_inode_to_wb_end - end inode wb access transaction * @inode: target inode - * @locked: *@lockedp from unlocked_inode_to_wb_begin() + * @cookie: @cookie from unlocked_inode_to_wb_begin() */ -static inline void unlocked_inode_to_wb_end(struct inode *inode, bool locked) +static inline void unlocked_inode_to_wb_end(struct inode *inode, + struct wb_lock_cookie *cookie) { - if (unlikely(locked)) - spin_unlock_irq(&inode->i_mapping->tree_lock); + if (unlikely(cookie->locked)) + spin_unlock_irqrestore(&inode->i_mapping->tree_lock, cookie->flags); rcu_read_unlock(); } @@ -434,12 +435,13 @@ static inline struct bdi_writeback *inode_to_wb(struct inode *inode) } static inline struct bdi_writeback * -unlocked_inode_to_wb_begin(struct inode *inode, bool *lockedp) +unlocked_inode_to_wb_begin(struct inode *inode, struct wb_lock_cookie *cookie) { return inode_to_wb(inode); } -static inline void unlocked_inode_to_wb_end(struct inode *inode, bool locked) +static inline void unlocked_inode_to_wb_end(struct inode *inode, + struct wb_lock_cookie *cookie) { } diff --git a/mm/page-writeback.c b/mm/page-writeback.c index 586f31261c83..8369572e1f7d 100644 --- a/mm/page-writeback.c +++ b/mm/page-writeback.c @@ -2501,13 +2501,13 @@ void account_page_redirty(struct page *page) if (mapping && mapping_cap_account_dirty(mapping)) { struct inode *inode = mapping->host; struct bdi_writeback *wb; - bool locked; + struct wb_lock_cookie cookie = {}; - wb = unlocked_inode_to_wb_begin(inode, &locked); + wb = unlocked_inode_to_wb_begin(inode, &cookie); current->nr_dirtied--; dec_node_page_state(page, NR_DIRTIED); dec_wb_stat(wb, WB_DIRTIED); - unlocked_inode_to_wb_end(inode, locked); + unlocked_inode_to_wb_end(inode, &cookie); } } EXPORT_SYMBOL(account_page_redirty); @@ -2613,15 +2613,15 @@ void __cancel_dirty_page(struct page *page) if (mapping_cap_account_dirty(mapping)) { struct inode *inode = mapping->host; struct bdi_writeback *wb; - bool locked; + struct wb_lock_cookie cookie = {}; lock_page_memcg(page); - wb = unlocked_inode_to_wb_begin(inode, &locked); + wb = unlocked_inode_to_wb_begin(inode, &cookie); if (TestClearPageDirty(page)) account_page_cleaned(page, mapping, wb); - unlocked_inode_to_wb_end(inode, locked); + unlocked_inode_to_wb_end(inode, &cookie); unlock_page_memcg(page); } else { ClearPageDirty(page); @@ -2653,7 +2653,7 @@ int clear_page_dirty_for_io(struct page *page) if (mapping && mapping_cap_account_dirty(mapping)) { struct inode *inode = mapping->host; struct bdi_writeback *wb; - bool locked; + struct wb_lock_cookie cookie = {}; /* * Yes, Virginia, this is indeed insane. @@ -2690,14 +2690,14 @@ int clear_page_dirty_for_io(struct page *page) * always locked coming in here, so we get the desired * exclusion. */ - wb = unlocked_inode_to_wb_begin(inode, &locked); + wb = unlocked_inode_to_wb_begin(inode, &cookie); if (TestClearPageDirty(page)) { dec_lruvec_page_state(page, NR_FILE_DIRTY); dec_zone_page_state(page, NR_ZONE_WRITE_PENDING); dec_wb_stat(wb, WB_RECLAIMABLE); ret = 1; } - unlocked_inode_to_wb_end(inode, locked); + unlocked_inode_to_wb_end(inode, &cookie); return ret; } return TestClearPageDirty(page); -- 2.17.0

7 years, 4 months

4
5
0 0

Re: [4.4, 50/97] ext4: add validity checks for bitmap block numbers -- regression?

by Ilya Dryomov

Hi Greg, Commit 7dac4a1726a9 ("ext4: add validity checks for bitmap block numbers") seems to be the cause of the regression reported here: https://marc.info/?l=linux-ext4&m=152416385122029&w=2 ext4 folks are probably busy at LSF, so no reply yet. Should this commit be held until we get word from Ted? Please excuse broken threading. Thanks, Ilya

7 years, 4 months

2
1
0 0

[PATCH] net/core/skbuff.c fix skb_expand_head off logic error!

by web_czom＠yeah.net

fix logic error! --- linux/net/core/skbuff.c.orig 2018-04-23 20:55:37.747731000 +0800 +++ linux/net/core/skbuff.c 2018-04-23 20:56:30.782520000 +0800 @@ -1492,7 +1492,7 @@ int pskb_expand_head(struct sk_buff *skb } else { skb_free_head(skb); } - off = (data + nhead) - skb->head; + off = (skb->data - skb->head) + nhead; skb->head = data; skb->head_frag = 0;

7 years, 4 months

2
1
0 0

[PATCH] drm/i915/bxt, glk: Increase PCODE timeouts during CDCLK freq changing

by Imre Deak

commit 5e1df40f40ee45a97bb1066c3d71f0ae920a9672 upstream. Currently we see sporadic timeouts during CDCLK changing both on BXT and GLK as reported by the Bugzilla: ticket. It's easy to reproduce this by changing the frequency in a tight loop after blanking the display. The upper bound for the completion time is 800us based on my tests, so increase it from the current 500us to 2ms; with that I couldn't trigger the problem either on BXT or GLK. Note that timeouts happened during both the change notification and the voltage level setting PCODE request. (For the latter one BSpec doesn't require us to wait for completion before further HW programming.) This issue is similar to commit 2c7d0602c815 ("drm/i915/gen9: Fix PCODE polling during CDCLK change notification") but there the PCODE request does complete (as shown by the mbox busy flag), only the reply we get from PCODE indicates a failure. So there we keep resending the request until a success reply, here we just have to increase the timeout for the one PCODE request we send. v2: - s/snb_pcode_request/sandybridge_pcode_write_timeout/ (Ville) Cc: Chris Wilson <chris(a)chris-wilson.co.uk> Cc: Ville Syrjälä <ville.syrjala(a)linux.intel.com> Cc: <stable(a)vger.kernel.org> # v4.15 Acked-by: Chris Wilson <chris(a)chris-wilson.co.uk> (v1) Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=103326 Reviewed-by: Ville Syrjälä <ville.syrjala(a)linux.intel.com> Signed-off-by: Imre Deak <imre.deak(a)intel.com> Link: https://patchwork.freedesktop.org/patch/msgid/20180130142939.17983-1-imre.d… (cherry picked from commit e76019a81921e87a4d9e7b3d86102bc708a6c227) Signed-off-by: Rodrigo Vivi <rodrigo.vivi(a)intel.com> (Rebased for v4.15 stable tree due to upstream s/DIV_ROUND_UP(cdclk, 25000)/cdclk_state->voltage_level/ change ) Signed-off-by: Imre Deak <imre.deak(a)intel.com> --- drivers/gpu/drm/i915/i915_drv.h | 6 +++++- drivers/gpu/drm/i915/intel_cdclk.c | 22 +++++++++++++++++----- drivers/gpu/drm/i915/intel_pm.c | 6 +++--- 3 files changed, 25 insertions(+), 9 deletions(-) diff --git a/drivers/gpu/drm/i915/i915_drv.h b/drivers/gpu/drm/i915/i915_drv.h index e143004e66d5..ffc75271bf7e 100644 --- a/drivers/gpu/drm/i915/i915_drv.h +++ b/drivers/gpu/drm/i915/i915_drv.h @@ -4140,7 +4140,11 @@ extern void intel_display_print_error_state(struct drm_i915_error_state_buf *e, struct intel_display_error_state *error); int sandybridge_pcode_read(struct drm_i915_private *dev_priv, u32 mbox, u32 *val); -int sandybridge_pcode_write(struct drm_i915_private *dev_priv, u32 mbox, u32 val); +int sandybridge_pcode_write_timeout(struct drm_i915_private *dev_priv, u32 mbox, + u32 val, int timeout_us); +#define sandybridge_pcode_write(dev_priv, mbox, val) \ + sandybridge_pcode_write_timeout(dev_priv, mbox, val, 500) + int skl_pcode_request(struct drm_i915_private *dev_priv, u32 mbox, u32 request, u32 reply_mask, u32 reply, int timeout_base_ms); diff --git a/drivers/gpu/drm/i915/intel_cdclk.c b/drivers/gpu/drm/i915/intel_cdclk.c index 60cf4e58389a..658f681eb927 100644 --- a/drivers/gpu/drm/i915/intel_cdclk.c +++ b/drivers/gpu/drm/i915/intel_cdclk.c @@ -1284,10 +1284,15 @@ static void bxt_set_cdclk(struct drm_i915_private *dev_priv, break; } - /* Inform power controller of upcoming frequency change */ + /* + * Inform power controller of upcoming frequency change. BSpec + * requires us to wait up to 150usec, but that leads to timeouts; + * the 2ms used here is based on experiment. + */ mutex_lock(&dev_priv->pcu_lock); - ret = sandybridge_pcode_write(dev_priv, HSW_PCODE_DE_WRITE_FREQ_REQ, - 0x80000000); + ret = sandybridge_pcode_write_timeout(dev_priv, + HSW_PCODE_DE_WRITE_FREQ_REQ, + 0x80000000, 2000); mutex_unlock(&dev_priv->pcu_lock); if (ret) { @@ -1318,8 +1323,15 @@ static void bxt_set_cdclk(struct drm_i915_private *dev_priv, I915_WRITE(CDCLK_CTL, val); mutex_lock(&dev_priv->pcu_lock); - ret = sandybridge_pcode_write(dev_priv, HSW_PCODE_DE_WRITE_FREQ_REQ, - DIV_ROUND_UP(cdclk, 25000)); + /* + * The timeout isn't specified, the 2ms used here is based on + * experiment. + * FIXME: Waiting for the request completion could be delayed until + * the next PCODE request based on BSpec. + */ + ret = sandybridge_pcode_write_timeout(dev_priv, + HSW_PCODE_DE_WRITE_FREQ_REQ, + DIV_ROUND_UP(cdclk, 25000), 2000); mutex_unlock(&dev_priv->pcu_lock); if (ret) { diff --git a/drivers/gpu/drm/i915/intel_pm.c b/drivers/gpu/drm/i915/intel_pm.c index f0d0dbab4150..c4e5db551fc2 100644 --- a/drivers/gpu/drm/i915/intel_pm.c +++ b/drivers/gpu/drm/i915/intel_pm.c @@ -9227,8 +9227,8 @@ int sandybridge_pcode_read(struct drm_i915_private *dev_priv, u32 mbox, u32 *val return 0; } -int sandybridge_pcode_write(struct drm_i915_private *dev_priv, - u32 mbox, u32 val) +int sandybridge_pcode_write_timeout(struct drm_i915_private *dev_priv, + u32 mbox, u32 val, int timeout_us) { int status; @@ -9251,7 +9251,7 @@ int sandybridge_pcode_write(struct drm_i915_private *dev_priv, if (__intel_wait_for_register_fw(dev_priv, GEN6_PCODE_MAILBOX, GEN6_PCODE_READY, 0, - 500, 0, NULL)) { + timeout_us, 0, NULL)) { DRM_ERROR("timeout waiting for pcode write of 0x%08x to mbox %x to finish for %ps\n", val, mbox, __builtin_return_address(0)); return -ETIMEDOUT; -- 2.13.2

7 years, 4 months

2
1
0 0

[PATCH stable v4.15 1/3] media: staging: lirc_zilog: broken reference counting

by Sean Young

commit 615cd3fe6ccc ("[media] media: lirc_dev: make better use of file->private_data") removed the reference get from open, so on the first close the reference count hits zero and the lirc device is freed. BUG: unable to handle kernel NULL pointer dereference at 0000000000000040 IP: lirc_thread+0x94/0x520 [lirc_zilog] PGD 22d69c067 P4D 22d69c067 PUD 22d69d067 PMD 0 Oops: 0000 [#1] SMP NOPTI CPU: 2 PID: 701 Comm: zilog-rx-i2c-7 Tainted: P C OE 4.15.14-300.fc27.x86_64 #1 Hardware name: Gigabyte Technology Co., Ltd. GA-MA790FXT-UD5P/GA-MA790FXT-UD5P, BIOS F6 08/06/2009 RIP: 0010:lirc_thread+0x94/0x520 [lirc_zilog] RSP: 0018:ffffb482c131be98 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff8fdabf056000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000246 RDI: 0000000000000246 RBP: ffff8fdab740af00 R08: ffff8fdacfd214a0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000040 R12: ffffb482c10dba48 R13: ffff8fdabea89e00 R14: ffff8fdab740af00 R15: ffffffffc0b5e500 FS: 0000000000000000(0000) GS:ffff8fdacfd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000040 CR3: 00000002124c0000 CR4: 00000000000006e0 Call Trace: ? __schedule+0x247/0x880 ? get_ir_tx+0x40/0x40 [lirc_zilog] kthread+0x113/0x130 ? kthread_create_worker_on_cpu+0x70/0x70 ? do_syscall_64+0x74/0x180 ? SyS_exit_group+0x10/0x10 ret_from_fork+0x22/0x40 Code: 20 8b 85 80 00 00 00 85 c0 0f 84 a6 00 00 00 bf 04 01 00 00 e8 ee 34 d4 d7 e8 69 88 56 d7 84 c0 75 69 48 8b 45 18 c6 44 24 37 00 <48> 8b 58 40 4c 8d 6b 18 4c 89 ef e8 fc 4d d4 d7 4c 89 ef 48 89 RIP: lirc_thread+0x94/0x520 [lirc_zilog] RSP: ffffb482c131be98 CR2: 0000000000000040 This code has been replaced completely in kernel v4.16 by a new driver, see commit acaa34bf06e9 ("media: rc: implement zilog transmitter"), and commit f95367a7b758 ("media: staging: remove lirc_zilog driver"). Fixes: 615cd3fe6ccc ("[media] media: lirc_dev: make better use of file->private_data") Cc: stable(a)vger.kernel.org # v4.15 Reported-by: Warren Sturm <warren.sturm(a)gmail.com> Tested-by: Warren Sturm <warren.sturm(a)gmail.com> Signed-off-by: Sean Young <sean(a)mess.org> --- drivers/staging/media/lirc/lirc_zilog.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/staging/media/lirc/lirc_zilog.c b/drivers/staging/media/lirc/lirc_zilog.c index 6bd0717bf76e..bf6869e48a0f 100644 --- a/drivers/staging/media/lirc/lirc_zilog.c +++ b/drivers/staging/media/lirc/lirc_zilog.c @@ -1291,6 +1291,7 @@ static int open(struct inode *node, struct file *filep) lirc_init_pdata(node, filep); ir = lirc_get_pdata(filep); + get_ir_device(ir, false); atomic_inc(&ir->open_count); -- 2.14.3

7 years, 4 months

3
8
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror