[PATCH 052/270] ACPI: EC: Add a quirk for CLEVO M720T/M730T laptop

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Feng Tang commit 67bfa9b60bd689601554526d144b21d529f78a09 upstream. By enlarging the GPE storm threshold back to 20, that laptop's EC works fine with interrupt mode instead of polling mode

[PATCH 053/270] mmc: sdhci-s3c: fix the wrong number of max bus clocks

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Jaehoon Chung commit 5feb54a1ab91a237e247c013b8c4fb100ea347b1 upstream. We can use up to four bus-clocks; but on module remove, we didn't disable the fourth bus clock. Signed-off-by: Jaeh

[PATCH 055/270] ARM: OMAP: counter: add locking to read_persistent_clock

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Colin Cross commit 9d7d6e363b06934221b81a859d509844c97380df upstream. read_persistent_clock uses a global variable, use a spinlock to ensure non-atomic updates to the variable don't overla

[PATCH 058/270] storvsc: Account for in-transit packets in the RESET path

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: "K. Y. Srinivasan" commit 5c1b10ab7f93d24f29b5630286e323d1c5802d5c upstream. Properly account for I/O in transit before returning from the RESET call. In the absense of this patch, we coul

[PATCH 062/270] video/udlfb: fix line counting in fb_write

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Alexander Holler commit b8c4321f3d194469007f5f5f2b34ec278c264a04 upstream. Line 0 and 1 were both written to line 0 (on the display) and all subsequent lines had an offset of -1. The resul

[PATCH 065/270] ALSA: hda - Fix memory leaks at error path in patch_cirrus.c

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit c5e0b6dbad9b4d18c561af90b384d02373f1c994 upstream. The proper destructor should be called at the error path. Signed-off-by: Takashi Iwai Signed-off-by: Herton Ronaldo

[PATCH 066/270] ALSA: hda - do not detect jack on internal speakers for Realtek

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: David Henningsson commit f7f4b2322bf7b8c5929b7eb5a667091f32592580 upstream. This caused the internal speaker to mute itself because it was present, which happened after powersave. It was f

[PATCH 068/270] pktgen: fix crash when generating IPv6 packets

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Amerigo Wang commit 5aa8b572007c4bca1e6d3dd4c4820f1ae49d6bb2 upstream. For IPv6, sizeof(struct ipv6hdr) = 40, thus the following expression will result negative: datalen = pkt_dev

[PATCH 071/270] kdb,vt_console: Fix missed data due to pager overruns

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Jason Wessel commit 17b572e82032bc246324ce136696656b66d4e3f1 upstream. It is possible to miss data when using the kdb pager. The kdb pager does not pay attention to the maximum column con

[PATCH 074/270] libceph: eliminate connection state "DEAD"

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Elder commit e5e372da9a469dfe3ece40277090a7056c566838 upstream. The ceph connection state "DEAD" is never set and is therefore not needed. Eliminate it. Signed-off-by: Alex Elder R

[PATCH 073/270] xen/bootup: allow {read|write}_cr8 pvops call.

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Konrad Rzeszutek Wilk commit 1a7bbda5b1ab0e02622761305a32dc38735b90b2 upstream. We actually do not do anything about it. Just return a default value of zero and if the kernel tries to writ

[PATCH 077/270] libceph: rename kvec_reset and kvec_add functions

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Elder commit e22004235a900213625acd6583ac913d5a30c155 upstream. The functions ceph_con_out_kvec_reset() and ceph_con_out_kvec_add() are entirely private functions, so drop the "ceph_"

[PATCH 079/270] libceph: start separating connection flags from state

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Elder commit 928443cd9644e7cfd46f687dbeffda2d1a357ff9 upstream. A ceph_connection holds a mixture of connection state (as in "state machine" state) and connection flags in a single "s

[PATCH 081/270] libceph: provide osd number when creating osd

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Elder commit e10006f807ffc4d5b1d861305d18d9e8145891ca upstream. Pass the osd number to the create_osd() routine, and move the initialization of fields that depend on it therein. Sign

[PATCH 086/270] libceph: fully initialize connection in con_init()

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Elder commit 1bfd89f4e6e1adc6a782d94aa5d4c53be1e404d7 upstream. Move the initialization of a ceph connection's private pointer, operations vector pointer, and peer name information in

[PATCH 090/270] libceph: make ceph_con_revoke() a msg operation

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Elder commit 6740a845b2543cc46e1902ba21bac743fbadd0dc upstream. ceph_con_revoke() is passed both a message and a ceph connection. Now that any message associated with a connection hol

[PATCH 095/270] libceph: transition socket state prior to actual connect

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Sage Weil commit 89a86be0ce20022f6ede8bccec078dbb3d63caaa upstream. Once we call ->connect(), we are racing against the actual connection, and a subsequent transition from CONNECTING -> CO

[PATCH 096/270] libceph: fix NULL dereference in reset_connection()

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 26ce171915f348abd1f41da1ed139d93750d987f upstream. We dereference "con->in_msg" on the line after it was set to NULL. Signed-off-by: Dan Carpenter Reviewed-by: Alex

[PATCH 098/270] libceph: drop ceph_con_get/put helpers and nref member

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Sage Weil commit d59315ca8c0de00df9b363f94a2641a30961ca1c upstream. These are no longer used. Every ceph_connection instance is embedded in another structure, and refcounts manipulated vi

[PATCH 099/270] libceph: encapsulate out message data setup

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Elder commit 739c905baa018c99003564ebc367d93aa44d4861 upstream. Move the code that prepares to write the data portion of a message into its own function. Signed-off-by: Alex Elder R

[PATCH 103/270] libceph: move init of bio_iter

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Elder commit 572c588edadaa3da3992bd8a0fed830bbcc861f8 upstream. If a message has a non-null bio pointer, its bio_iter field is initialized in write_partial_msg_pages() if this has not

[PATCH 105/270] libceph: SOCK_CLOSED is a flag, not a state

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Elder commit a8d00e3cdef4c1c4f194414b72b24cd995439a05 upstream. The following commit changed it so SOCK_CLOSED bit was stored in a connection's new "flags" field rather than its "stat

[PATCH 108/270] libceph: don't touch con state in con_close_socket()

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Elder commit 456ea46865787283088b23a8a7f69244513b95f0 upstream. In con_close_socket(), a connection's SOCK_CLOSED flag gets set and then cleared while its shutdown method is called an

[PATCH 109/270] libceph: clear CONNECTING in ceph_con_close()

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Elder commit bb9e6bba5d8b85b631390f8dbe8a24ae1ff5b48a upstream. A connection that is closed will no longer be connecting. So clear the CONNECTING state bit in ceph_con_close(). Simi

[PATCH 112/270] libceph: separate banner and connect writes

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Elder commit ab166d5aa3bc036fba7efaca6e4e43a7e9510acf upstream. There are two phases in the process of linking together the two ends of a ceph connection. The first involves exchangi

[PATCH 113/270] libceph: distinguish two phases of connect sequence

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Elder commit 7593af920baac37752190a0db703d2732bed4a3b upstream. Currently a ceph connection enters a "CONNECTING" state when it begins the process of (re-)connecting with its peer. O

[PATCH 114/270] libceph: small changes to messenger.c

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Elder commit 5821bd8ccdf5d17ab2c391c773756538603838c3 upstream. This patch gathers a few small changes in "net/ceph/messenger.c": out_msg_pos_next() - small logic change that mo

[PATCH 117/270] libceph: initialize mon_client con only once

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Sage Weil commit 735a72ef952d42a256f79ae3e6dc1c17a45c041b upstream. Do not re-initialize the con on every connection attempt. When we ceph_con_close, there may still be work queued on the

[PATCH 118/270] libceph: allow sock transition from CONNECTING to CLOSED

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Sage Weil commit fbb85a478f6d4cce6942f1c25c6a68ec5b1e7e7f upstream. It is possible to close a socket that is in the OPENING state. For example, it can happen if ceph_con_close() is called

[PATCH 122/270] libceph: fix mutex coverage for ceph_con_close

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Sage Weil commit 8c50c817566dfa4581f82373aac39f3e608a7dc8 upstream. Hold the mutex while twiddling all of the state bits to avoid possible races. While we're here, make not of why we cann

[PATCH 127/270] libceph: fix fault locking; close socket on lossy fault

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Sage Weil commit 3b5ede07b55b52c3be27749d183d87257d032065 upstream. If we fault on a lossy connection, we should still close the socket immediately, and do so under the con mutex. We shou

[PATCH 128/270] libceph: move msgr clear_standby under con mutex protection

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Sage Weil commit 00650931e52e97fe64096bec167f5a6780dfd94a upstream. Avoid dropping and retaking con->mutex in the ceph_con_send() case by leaving locking up to the caller. Signed-off-by:

[PATCH 131/270] libceph: close socket directly from ceph_con_close()

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Sage Weil commit ee76e0736db8455e3b11827d6899bd2a4e1d0584 upstream. It is simpler to do this immediately, since we already hold the con mutex. It also avoids the need to deal with a not-qu

[PATCH 132/270] libceph: drop unnecessary CLOSED check in socket state change callback

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Sage Weil commit d7353dd5aaf22ed611fbcd0d4a4a12fb30659290 upstream. If we are CLOSED, the socket is closed and we won't get these. Signed-off-by: Sage Weil Signed-off-by: Herton Ronaldo

[PATCH 134/270] libceph: clean up con flags

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Sage Weil commit 4a8616920860920abaa51193146fe36b38ef09aa upstream. Rename flags with CON_FLAG prefix, move the definitions into the c file, and (better) document their meaning. Signed-of

[PATCH 136/270] libceph: fix handling of immediate socket connect failure

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Sage Weil commit 8007b8d626b49c34fb146ec16dc639d8b10c862f upstream. If the connect() call immediately fails such that sock == NULL, we still need con_close_socket() to reset our socket sta

[PATCH 140/270] libceph: change ceph_con_in_msg_alloc convention to be less weird

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Sage Weil commit 4740a623d20c51d167da7f752b63e2b8714b2543 upstream. This function's calling convention is very limiting. In particular, we can't return any error other than ENOMEM (and on

[PATCH 138/270] libceph: verify state after retaking con lock after dispatch

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Sage Weil commit 7b862e07b1a4d5c963d19027f10ea78085f27f9b upstream. We drop the con mutex when delivering a message. When we retake the lock, we need to verify we are still in the OPEN st

[PATCH 141/270] libceph: recheck con state after allocating incoming message

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Sage Weil commit 6139919133377652992a5fe134e22abce3e9c25e upstream. We drop the lock when calling the ->alloc_msg() con op, which means we need to (a) not clobber con->in_msg without the m

[PATCH 144/270] libceph: avoid truncation due to racing banners

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Jim Schutt commit 6d4221b53707486dfad3f5bfe568d2ce7f4c9863 upstream. Because the Ceph client messenger uses a non-blocking connect, it is possible for the sending of the client banner to r

[PATCH 147/270] libceph: avoid NULL kref_put when osd reset races with alloc_msg

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Sage Weil commit 9bd952615a42d7e2ce3fa2c632e808e804637a1a upstream. The ceph_on_in_msg_alloc() method drops con->mutex while it allocates a message. If that races with a timeout that rese

[PATCH 149/270] ceph: Fix oops when handling mdsmap that decreases max_mds

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: "Yan, Zheng" commit 3e8f43a089f06279c5f76a9ccd42578eebf7bfa5 upstream. When i >= newmap->m_max_mds, ceph_mdsmap_get_addr(newmap, i) return NULL. Passing NULL to memcmp() triggers oops. Si

[PATCH 151/270] ceph: avoid 32-bit page index overflow

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Elder commit 6285bc231277419255f3498d3eb5ddc9f8e7fe79 upstream. A pgoff_t is defined (by default) to have type (unsigned long). On architectures such as i686 that's a 32-bit type. T

[PATCH 153/270] ASoC: wm2200: Fix non-inverted OUT2 mute control

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Mark Brown commit a1b98e12b7f8fad2f0aa3c08a3302bcac7ae1ec7 upstream. Signed-off-by: Mark Brown Signed-off-by: Herton Ronaldo Krzesinski --- sound/soc/codecs/wm2200.c |2 +- 1 file c

[PATCH 157/270] usb: Send Set SEL before enabling parent U1/U2 timeout.

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Sarah Sharp commit 65a95b75bc5afa7bbb844e222481044c1c4767eb upstream. The Set SEL control transfer tells a device the exit latencies associated with a device-initated U1 or U2 exit. Since

[PATCH 158/270] ASoC: fsi: don't reschedule DMA from an atomic context

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Guennadi Liakhovetski commit 57451e437796548d658d03c2c4aab659eafcd799 upstream. shdma doesn't support transfer re-scheduling or triggering from callbacks or from atomic context. The fsi dr

[PATCH 161/270] hwmon: (coretemp) Add support for Atom CE4110/4150/4170

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Guenter Roeck commit 1102dcab849313bd5a340b299b5cf61b518fbc0f upstream. TjMax for the CE4100 series of Atom CPUs was previously reported to be 110 degrees C. cpuinfo logs on the web show

[PATCH 163/270] usb: dwc3: gadget: fix 'endpoint always busy' bug

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Felipe Balbi commit 041d81f493d90c940ec41f0ec98bc7c4f2fba431 upstream. If a USB transfer has already been started, meaning we have already issued StartTransfer command to that particular e

[PATCH 169/270] SUNRPC: Prevent kernel stack corruption on long values of flush

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Sasha Levin commit 212ba90696ab4884e2025b0b13726d67aadc2cd4 upstream. The buffer size in read_flush() is too small for the longest possible values for it. This can lead to a kernel stack c

[PATCH 171/270] usb: acm: fix the computation of the number of data bits

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Nicolas Boullis commit 301a29da6e891e7eb95c843af0ecdbe86d01f723 upstream. The current code assumes that CSIZE is 060, which appears to be wrong on some arches (such as powerpc). Signe

[PATCH 172/270] usb: host: xhci: New system added for Compliance Mode Patch on SN65LVPE502CP

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: "Alexis R. Cortes" commit 470809741a28c3092279f4e1f3f432e534d46068 upstream. This minor change adds a new system to which the "Fix Compliance Mode on SN65LVPE502CP Hardware" patch has to b

[PATCH 176/270] use clamp_t in UNAME26 fix

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Kees Cook commit 31fd84b95eb211d5db460a1dda85e004800a7b52 upstream. The min/max call needed to have explicit types on some architectures (e.g. mn10300). Use clamp_t instead to avoid the wa

[PATCH 179/270] nohz: Fix idle ticks in cpu summary line of /proc/stat

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Michal Hocko commit 7386cdbf2f57ea8cff3c9fde93f206e58b9fe13f upstream. Git commit 09a1d34f8535ecf9 "nohz: Make idle/iowait counter update conditional" introduced a bug in regard to cpu hot

[PATCH 186/270] bcma: fix unregistration of cores

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Piotr Haber commit 1fffa905adffbf0d3767fc978ef09afb830275eb upstream. When cores are unregistered, entries need to be removed from cores list in a safe manner. Reported-by: Stanislaw Grus

[PATCH 185/270] mac80211: use ieee80211_free_txskb in a few more places

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Felix Fietkau commit d4fa14cd62bd078c8e3ef39283b9f237e5b2ff0f upstream. Free tx status skbs when draining power save buffers, pending frames, or when tearing down a vif. Fixes remaining co

[PATCH 191/270] pinctrl: tegra: set low power mode bank width to 2

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Pritesh Raithatha commit 154f3ebf53edcfbe28728452b4ab37a118581125 upstream. Signed-off-by: Pritesh Raithatha Acked-by: Stephen Warren Tested-by: Stephen Warren Signed-off-by: Linus Wall

[PATCH 193/270] s390: fix linker script for 31 bit builds

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Heiko Carstens commit c985cb37f1b39c2c8035af741a2a0b79f1fbaca7 upstream. Because of a change in the s390 arch backend of binutils (commit 23ecd77 "Pick the default arch depending on the ta

[PATCH 196/270] ALSA: hda - add dock support for Thinkpad T430

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: =?UTF-8?q?Stef=C3=A1n=20Freyr?= commit 84f98fdf7865fbd35b312eb39ea91e5618c514c7 upstream. I have a Lenovo ThinkPad T430 and an UltraBase Series 3 docking station. Without this patch, if I

[PATCH 200/270] ext4: Checksum the block bitmap properly with bigalloc enabled

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Tao Ma commit 79f1ba49569e5aec919b653c55b03274c2331701 upstream. In mke2fs, we only checksum the whole bitmap block and it is right. While in the kernel, we use EXT4_BLOCKS_PER_GROUP to in

[PATCH 201/270] ARM: 7559/1: smp: switch away from the idmap before updating init_mm.mm_count

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Will Deacon commit 5f40b909728ad784eb43aa309d3c4e9bdf050781 upstream. When booting a secondary CPU, the primary CPU hands two sets of page tables via the secondary_data struct: (1

[PATCH 204/270] Staging: android: binder: Fix memory leak on thread/process exit

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: =?UTF-8?q?Arve=20Hj=C3=B8nnev=C3=A5g?= commit 675d66b0ed5fd170d6a44cf8dbb3fa56a5347bdb upstream. If a thread or process exited while a reply, one-way transaction or death notification was

[PATCH 206/270] ext4: Avoid underflow in ext4_trim_fs()

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Lukas Czerner commit 5de35e8d5c02d271c20e18337e01bc20e6ef472e upstream. Currently if len argument in ext4_trim_fs() is smaller than one block, the 'end' variable underflow. Avoid that by r

[PATCH 213/270] drm/radeon: add error output if VM CS fails on cayman

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit c71721324c612f7f040657ce9917d87f530f9784 upstream. So we know why the CS was rejected. Signed-off-by: Alex Deucher Signed-off-by: Herton Ronaldo Krzesinski --- driv

[PATCH 214/270] xhci: endianness xhci_calculate_intel_u2_timeout

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Oliver Neukum commit 966e7a854177097083683176ced871558b631a12 upstream. An le16 is accessed without conversion. This patch should be backported to kernels as old as 3.5, that contain the

[PATCH 216/270] dmaengine: imx-dma: fix missing unlock on error in imxdma_xfer_desc()

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Wei Yongjun commit 720dfd250e48a8c7fd1b2b8645955413989c4ee0 upstream. Add the missing unlock on the error handling path in function imxdma_xfer_desc(). Signed-off-by: Wei Yongjun Signed-

[PATCH 217/270] Revert "x86/mm: Fix the size calculation of mapping tables"

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Dave Young commit 7b16bbf97375d9fb7fc107b3f80afeb94a204e44 upstream. Commit: 722bc6b16771 x86/mm: Fix the size calculation of mapping tables Tried to address the issue that the first

[PATCH 218/270] x86-64: Fix page table accounting

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Jan Beulich commit 876ee61aadf01aa0db981b5d249cbdd53dc28b5e upstream. Commit 20167d3421a089a1bf1bd680b150dc69c9506810 ("x86-64: Fix accounting in kernel_physical_mapping_init()") went a li

[PATCH 220/270] dmaengine: sirf: fix a typo in moving running dma_desc to active queue

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Barry Song commit 26fd12209c08fe947be1828896ef4ffc5bd0e6df upstream. list_move_tail(&schan->queued, &schan->active) makes the list_empty(schan->queued) undefined, we either should change

[PATCH 221/270] amd64_edac:__amd64_set_scrub_rate(): avoid overindexing scrubrates[]

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Andrew Morton commit 168bfeef7bba3f9784f7540b053e4ac72b769ce9 upstream. If none of the elements in scrubrates[] matches, this loop will cause __amd64_set_scrub_rate() to incorrectly use th

[PATCH 226/270] iommu/tegra: smmu: Fix deadly typo

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Hiro Sugawara commit d0078e72314df2e5ede03f2102cddde06767c374 upstream. Fix a deadly typo in macro definition. Signed-off-by: Hiro Sugawara Signed-off-by: Hiroshi Doyu Signed-off-by: Jo

[PATCH 229/270] ARM: at91/i2c: change id to let i2c-gpio work

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Bo Shen commit 7840487cd6298f9f931103b558290d8d98d41c49 upstream. The i2c core driver will turn the platform device ID to busnum When using platfrom device ID as -1, it means dynamically a

[PATCH 232/270] USB: serial: Fix memory leak in sierra_release()

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Lennart Sorensen commit f7bc5051667b74c3861f79eed98c60d5c3b883f7 upstream. I found a memory leak in sierra_release() (well sierra_probe() I guess) that looses 8 bytes each time the driver

[PATCH 236/270] Drivers: hv: Cleanup error handling in vmbus_open()

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: "K. Y. Srinivasan" commit 1392550240aaa72ce3a094a38bd23525cd67ce60 upstream. Fix a memory leak in the error handling path in the function vmbus_open(). Signed-off-by: K. Y. Srinivasan R

[PATCH 240/270] USB: whiteheat: fix memory leak in error path

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit c129197c99550d356cf5f69b046994dd53cd1b9d upstream. Make sure command buffer is deallocated in case of errors during attach. Cc: Signed-off-by: Johan Hovold Signed-of

[PATCH 244/270] USB: opticon: fix memory leak in error path

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit acbf0e5263de563e25f7c104868e4490b9e72b13 upstream. Fix memory leak in write error path. Signed-off-by: Johan Hovold Signed-off-by: Greg Kroah-Hartman Signed-off-by:

[PATCH 247/270] USB: sierra: fix memory leak in probe error path

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 084817d79399ab5ccab2f90a148b0369912a8369 upstream. Move interface data allocation to attach so that it is deallocated on errors in usb-serial probe. Signed-off-by: Joh

[PATCH 249/270] USB: mos7840: fix port-device leak in error path

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 3eb55cc4ed88eee3b5230f66abcdbd2a91639eda upstream. The driver set the usb-serial port pointers to NULL on errors in attach, effectively preventing usb-serial core from

[PATCH 245/270] USB: mct_u232: fix broken close

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 5260e458f5eff269a43e4f1e9c47186c57b88ddb upstream. Make sure generic close is called at close. The driver relies on the generic write implementation but did not call g

[PATCH 227/270] ARM: at91/tc: fix typo in the DT document

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Josh Wu commit 11930c530f3edf81160e4962e363d579f5cdce7e upstream. Signed-off-by: Josh Wu Signed-off-by: Nicolas Ferre Acked-by: Jean-Christophe PLAGNIOL-VILLARD Signed-off-by: Herton Ro

[PATCH 230/270] Revert "ath9k_hw: Updated AR9003 tx gain table for 5GHz"

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Felix Fietkau commit 73b26df5fa1a6245d6fc982362518b620bc7c2fe upstream. This reverts commit a240dc7b3c7463bd60cf0a9b2a90f52f78aae0fd. This commit is reducing tx power by at least 10 db on

[PATCH 234/270] x86, mm: Use memblock memory loop instead of e820_RAM

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Yinghai Lu commit 1f2ff682ac951ed82cc043cf140d2851084512df upstream. We need to handle E820_RAM and E820_RESERVED_KERNEL at the same time. Also memblock has page aligned range for ram, so

[PATCH 242/270] USB: quatech2: fix io after disconnect

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 2f0295adf6438188c4cd0868f2b1976a2b034e1d upstream. Make sure no control urb is submitted during close after a disconnect by checking the disconnected flag. Signed-off-

[PATCH 235/270] usb-storage: add unusual_devs entry for Casio EX-N1 digital camera

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Michael Shigorin commit d7870af7e2e3a91b462075ec1ca669b482215187 upstream. This commit sets removable subclass for Casio EX-N1 digital camera. The patch has been tested within an ALT Linu

[PATCH 251/270] USB: mos7840: remove invalid disconnect handling

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit e681b66f2e19fadbe8a7e2a17900978cb6bc921f upstream. Remove private zombie flag used to signal disconnect and to prevent control urb from being submitted from interrupt u

[PATCH 253/270] ehci: Add yet-another Lucid nohandoff pci quirk

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Anisse Astier commit 8daf8b6086f9d575200cd0aa3797e26137255609 upstream. Board name changed on another shipping Lucid tablet. Signed-off-by: Anisse Astier Signed-off-by: Greg Kroah-Hartma

[PATCH 254/270] xhci: Fix potential NULL ptr deref in command cancellation.

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Sarah Sharp commit 43a09f7fb01fa1e091416a2aa49b6c666458c1ee upstream. The command cancellation code doesn't check whether find_trb_seg() couldn't find the segment that contains the TRB to

[PATCH 255/270] freezer: exec should clear PF_NOFREEZE along with PF_KTHREAD

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Oleg Nesterov commit b40a79591ca918e7b91b0d9b6abd5d00f2e88c19 upstream. flush_old_exec() clears PF_KTHREAD but forgets about PF_NOFREEZE. Signed-off-by: Oleg Nesterov Acked-by: Tejun Heo

[PATCH 259/270] gen_init_cpio: avoid stack overflow when expanding

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Kees Cook commit 20f1de659b77364d55d4e7fad2ef657e7730323f upstream. Fix possible overflow of the buffer used for expanding environment variables when building file list. In the extremely

[PATCH 258/270] drivers/rtc/rtc-imxdi.c: add missing spin lock initialization

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Jan Luebbe commit fee0de7791f967c2c5f0d43eb7b7261761b45e64 upstream. Signed-off-by: Jan Luebbe Cc: Alessandro Zummo Cc: Roland Stigge Cc: Grant Likely Tested-by: Roland Stigge Cc: Sas

[PATCH 257/270] genalloc: stop crashing the system when destroying a pool

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Thadeu Lima de Souza Cascardo commit eedce141cd2dad8d0cefc5468ef41898949a7031 upstream. The genalloc code uses the bitmap API from include/linux/bitmap.h and lib/bitmap.c, which is based o

[PATCH 263/270] x86: efi: Turn off efi_enabled after setup on mixed fw/kernel

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Olof Johansson commit 5189c2a7c7769ee9d037d76c1a7b8550ccf3481c upstream. When 32-bit EFI is used with 64-bit kernel (or vice versa), turn off efi_enabled once setup is done. Beyond setup,

[PATCH 265/270] target: Re-add explict zeroing of INQUIRY bounce buffer memory

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Nicholas Bellinger commit dea5f0998aa82bdeca260b87c653db11e91329b2 upstream. This patch fixes a regression in spc_emulate_inquiry() code where the local scope bounce buffer was no longer g

[PATCH 267/270] libceph: drop declaration of ceph_con_get()

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Elder commit 261030215d970c62f799e6e508e3c68fc7ec2aa9 upstream. For some reason the declaration of ceph_con_get() and ceph_con_put() did not get deleted in this commit: d59315ca l

[PATCH 268/270] x86, mm: Find_early_table_space based on ranges that are actually being mapped

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Jacob Shin commit 844ab6f993b1d32eb40512503d35ff6ad0c57030 upstream. Current logic finds enough space for direct mapping page tables from 0 to end. Instead, we only need to find enough spa

[PATCH 256/270] mm: fix XFS oops due to dirty pages without buffers on s390

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Jan Kara commit ef5d437f71afdf4afdbab99213add99f4b1318fd upstream. On s390 any write to a page (even from kernel itself) sets architecture specific page dirty bit. Thus when a page is wri

[PATCH 266/270] ARM: 7566/1: vfp: fix save and restore when running on pre-VFPv3 and CONFIG_VFPv3 set

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Paul Walmsley commit 39141ddfb63a664f26d3f42f64ee386e879b492c upstream. After commit 846a136881b8f73c1f74250bf6acfaa309cab1f2 ("ARM: vfp: fix saving d16-d31 vfp registers on v6+ kernels"),

[PATCH 270/270] Revert "sched: Add missing call to calc_load_exit_idle()"

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Herton Ronaldo Krzesinski This reverts commit 900404e5d201d0a6d2806f615b41e939713d55db on 3.5, which is commit 749c8814f08f12baa4a9c2812a7c6ede7d69507d upstream. The change was originally

[PATCH 269/270] x86, mm: Undo incorrect revert in arch/x86/mm/init.c

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Yinghai Lu commit f82f64dd9f485e13f29f369772d4a0e868e5633a upstream. Commit 844ab6f9 x86, mm: Find_early_table_space based on ranges that are actually being mapped added back some l

[PATCH 264/270] e1000e: add device IDs for i218

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Bruce Allan commit 16e310ae6ed352c4963b1f2413fcd88fa693eeda upstream. i218 is the next-generation LOM that will be available on systems with the Lynx Point LP Platform Controller Hub (PCH)

[PATCH 262/270] efi: Defer freeing boot services memory until after ACPI init

3.5.7u1 -stable review patch. If anyone has any objections, please let me know. -- From: Josh Triplett commit 785107923a83d8456bbd8564e288a24d84109a46 upstream. Some new ACPI 5.0 tables reference resources stored in boot services memory, so keep that memory around until we hav

<    1   2   3   4   5   6   7   8   9   10   >