[PATCH 3.16 241/370] arm64: avoid returning from bad_mode

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Mark Rutland commit 7d9e8f71b989230bc613d121ca38507d34ada849 upstream. Generally, taking an unexpected exception should be a fatal event, and bad_mode is intended to cater for this. However, i

[PATCH 3.16 363/370] igmp: do not remove igmp souce list info when set link down

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Hangbin Liu commit 24803f38a5c0b6c57ed800b47e695f9ce474bc3a upstream. In commit 24cf3af3fed5 ("igmp: call ip_mc_clear_src..."), we forgot to remove igmpv3_clear_delrec() in ip_mc_down(), which

[PATCH 3.16 225/370] be2net: fix status check in be_cmd_pmac_add()

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Ivan Vecera commit fe68d8bfe59c561664aa87d827aa4b320eb08895 upstream. Return value from be_mcc_notify_wait() contains a base completion status together with an additional status. The base_stat

[PATCH 3.16 148/370] btrfs: fix locking when we put back a delayed ref that's too new

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Jeff Mahoney commit d0280996437081dd12ed1e982ac8aeaa62835ec4 upstream. In __btrfs_run_delayed_refs, when we put back a delayed ref that's too new, we have already dropped the lock on locked_re

[PATCH 3.2 023/199] ext4: add sanity checking to count_overhead()

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit c48ae41bafe31e9a66d8be2ced4e42a6b57fa814 upstream. The commit "ext4: sanity check the block and cluster size at mount time" should prevent any problems, but in case the sup

[PATCH 3.2 187/199] ipv6: fix ip6_tnl_parse_tlv_enc_lim()

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit fbfa743a9d2a0ffa24251764f10afc13eb21e739 ] This function suffers from multiple issues. First one is that pskb_may_pull() may reallocate skb->head, so the 'raw' p

Re: [PATCH 3.16 125/370] clk: renesas: mstp: Support 8-bit registers for r7s72100

Hi Ben, On Fri, Mar 10, 2017 at 12:46 PM, Ben Hutchings wrote: > 3.16.42-rc1 review patch. If anyone has any objections, please let me know. No objections, but you also want commit f59de563358eb9351b7f8f0ba2d3be2ebb70b93d Author: Chris Brandt Date: Tue Feb 14 11:08:05 2017 -0500 clk: r

[PATCH 3.16 365/370] igmp, mld: Fix memory leak in igmpv3/mld_del_delrec()

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Hangbin Liu commit 9c8bb163ae784be4f79ae504e78c862806087c54 upstream. In function igmpv3/mld_add_delrec() we allocate pmc and put it in idev->mc_tomb, so we should free it when we don't need i

[PATCH 3.16 368/370] ipc/shm: Fix shmat mmap nil-page protection

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Davidlohr Bueso commit 95e91b831f87ac8e1f8ed50c14d709089b4e01b8 upstream. The issue is described here, with a nice testcase: https://bugzilla.kernel.org/show_bug.cgi?id=192931 The proble

[PATCH 3.16 244/370] nbd: only set MSG_MORE when we have more to send

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Josef Bacik commit d61b7f972dab2a7d187c38254845546dfc8eed85 upstream. A user noticed that write performance was horrible over loopback and we traced it to an inversion of when we need to set M

[PATCH 3.16 350/370] ipv6: addrconf: Avoid addrconf_disable_change() using RCU read-side lock

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Kefeng Wang [ Upstream commit 03e4deff4987f79c34112c5ba4eb195d4f9382b0 ] Just like commit 4acd4945cd1e ("ipv6: addrconf: Avoid calling netdevice notifiers with RCU read-side lock"), it is unne

[PATCH 3.16 146/370] PM / devfreq: Fix the bug of devfreq_add_device when governor is NULL

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Chanwoo Choi commit 73613b16cb5c5d5a659fc8832eff99eead3f9afb upstream. This patch fixes the bug of devfreq_add_device(). The devfreq device must have the default governor. If find_devfreq_gove

[PATCH 3.16 201/370] USB: serial: ch341: fix modem-control and B0 handling

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 030ee7ae52a46a2be52ccc8242c4a330aba8d38e upstream. The modem-control signals are managed by the tty-layer during open and should not be asserted prematurely when set_termio

[PATCH 3.16 138/370] usb: gadget: composite: Test get_alt() presence instead of set_alt()

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Krzysztof Opasiak commit 7e4da3fcf7c9fe042f2f7cb7bf23861a899b4a8f upstream. By convention (according to doc) if function does not provide get_alt() callback composite framework should assume t

[PATCH 3.16 360/370] mlx4: Invoke softirqs after napi_reschedule

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Benjamin Poirier [ Upstream commit bd4ce941c8d5b862b2f83364be5dbe8fc8ab48f8 ] mlx4 may schedule napi from a workqueue. Afterwards, softirqs are not run in a deterministic time frame and the fo

[PATCH 3.16 202/370] USB: serial: ch341: fix open error handling

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit f2950b78547ffb8475297ada6b92bc2d774d5461 upstream. Make sure to stop the interrupt URB before returning on errors during open. Fixes: 664d5df92e88 ("USB: usb-serial ch341:

[PATCH 3.16 245/370] ARM: dts: da850-evm: fix read access to SPI flash

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Fabien Parent commit 43849785e1079f6606a31cb7fda92d1200849728 upstream. Read access to the SPI flash are broken on da850-evm, i.e. the data read is not what is actually programmed on the flash

[PATCH 3.2 011/199] crypto: caam - fix AEAD givenc descriptors

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Alex Porosanu commit d128af17876d79b87edf048303f98b35f6a53dbc upstream. The AEAD givenc descriptor relies on moving the IV through the output FIFO and then back to the CTX2 for authentication.

[PATCH 3.2 199/199] sctp: deny peeloff operation on asocs with threads sleeping on it

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Marcelo Ricardo Leitner commit dfcb9f4f99f1e9a49e43398a7bfbf56927544af1 upstream. commit 2dcab5984841 ("sctp: avoid BUG_ON on sctp_wait_for_sndbuf") attempted to avoid a BUG_ON call when the as

[PATCH 3.16 167/370] USB: serial: mos7840: fix NULL-deref at open

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 5c75633ef751dd4cd8f443dc35152c1ae563162e upstream. Fix NULL-pointer dereference in open() should the device lack the expected endpoints: Unable to handle kernel NULL point

[PATCH 3.2 007/199] cris: Only build flash rescue image if CONFIG_ETRAX_AXISFLASHMAP is selected

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Guenter Roeck commit 328cf6927bb72cadefddebbc9a23c793108147a2 upstream. If CONFIG_ETRAX_AXISFLASHMAP is not configured, the flash rescue image object file is empty. With recent versions of binu

[PATCH 3.16 341/370] net/sched: pedit: make sure that offset is valid

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Amir Vadai [ Upstream commit 95c2027bfeda21a28eb245121e6a249f38d0788e ] Add a validation function to make sure offset is valid: 1. Not below skb head (could happen when offset is negative). 2.

[PATCH 3.16 175/370] ALSA: hda - Fix up GPIO for ASUS ROG Ranger

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 85bcf96caba8b4a7c080638629ba3c67ea0c upstream. ASUS ROG Ranger VIII with ALC1150 codec requires the extra GPIO pin to up for the front panel. Just use the existing fix

[PATCH 3.16 156/370] USB: serial: garmin_gps: fix memory leak on failed URB submit

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit c4ac4496e835b78a45dfbf74f6173932217e4116 upstream. Make sure to free the URB transfer buffer in case submission fails (e.g. due to a disconnect). Fixes: 1da177e4c3f4 ("Lin

ERROR: "pm_power_off" [drivers/watchdog/bcm2835_wdt.ko] undefined!

tree: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master head: c1aa905a304e4b5e6a3fe112ec62d9c1c7b0c155 commit: da2a68b3eb47b9fb071def3f374258b2ce454096 watchdog: Enable COMPILE_TEST where possible date: 2 weeks ago config: openrisc-allmodconfig (attached as .config)

[PATCH 3.16 362/370] xfs: update MAINTAINERS

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: "Darrick J. Wong" commit 721a0edfbe1f302b93274ce75e0d62843ca63e0d upstream. I am taking over as XFS maintainer from Dave Chinner[1], so update contact information and git tree pointers. [1] h

[PATCH 3.16 198/370] USB: serial: ch341: reinitialize chip on reconfiguration

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Aidan Thornton commit 4e46c410e050bcac36deadbd8e20449d078204e8 upstream. Changing the LCR register after initialization does not seem to be reliable on all chips (particularly not on CH341A).

[PATCH 3.2 018/199] IB/mlx4: Put non zero value in max_ah device attribute

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Maor Gottlieb commit 731e0415b4af3a133d0316e4dc8ef0ea57dc3fdf upstream. Use INT_MAX since this is the max value the attribute can hold, though hardware capability is unlimited. Fixes: 225c7b1f

[PATCH 3.16 353/370] can: Fix kernel panic at security_sock_rcv_skb

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit f1712c73714088a7252d276a57126d56c7d37e64 ] Zhang Yanmin reported crashes [1] and provided a patch adding a synchronize_rcu() call in can_rx_unregister() The mai

[PATCH 3.2 027/199] ALSA: usb-audio: Fix bogus error return in snd_usb_create_stream()

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 4763601a56f155ddf94ef35fc2c41504a2de15f5 upstream. The function returns -EINVAL even if it builds the stream properly. The bogus error code sneaked in during the code refact

[PATCH 3.16 207/370] gro: Disable frag0 optimization on IPv6 ext headers

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Herbert Xu commit 57ea52a865144aedbcd619ee0081155e658b6f7d upstream. The GRO fast path caches the frag0 address. This address becomes invalid if frag0 is modified by pskb_may_pull or its vari

[PATCH 3.2 013/199] powerpc/ibmebus: Fix further device reference leaks

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 815a7141c4d1b11610dccb7fcbb38633759824f2 upstream. Make sure to drop any reference taken by bus_find_device() when creating devices during init and driver registration. Fix

[PATCH 3.16 179/370] ALSA: hda - Apply asus-mode8 fixup to ASUS X71SL

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit c7efff9284dfde95a11aaa811c9d8ec8167f0f6e upstream. Although the old quirk table showed ASUS X71SL with ALC663 codec being compatible with asus-mode3 fixup, the bugzilla rep

[PATCH 3.16 240/370] USB: serial: qcserial: add Dell DW5570 QDL

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Aleksander Morgado commit 24d615a694d649aa2e167c3f97f62bdad07e3f84 upstream. The Dell DW5570 is a re-branded Sierra Wireless MC8805 which will by default boot with vid 0x413c and pid 0x81a3. W

[PATCH 3.2 193/199] igmp: do not remove igmp souce list info when set link down

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Hangbin Liu commit 24803f38a5c0b6c57ed800b47e695f9ce474bc3a upstream. In commit 24cf3af3fed5 ("igmp: call ip_mc_clear_src..."), we forgot to remove igmpv3_clear_delrec() in ip_mc_down(), which

[PATCH 3.16 152/370] xhci: Handle command completion and timeout race

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Mathias Nyman commit a5a1b9514154437aa1ed35c291191f82fd3e941a upstream. If we get a command completion event at the same time as the command timeout work starts on another cpu we might end up

[PATCH 3.16 222/370] svcrpc: don't leak contexts on PROC_DESTROY

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: "J. Bruce Fields" commit 78794d1890708cf94e3961261e52dcec2cc34722 upstream. Context expiry times are in units of seconds since boot, not unix time. The use of get_seconds() here therefore set

[PATCH 3.16 349/370] tcp: fix tcp_fastopen unaligned access complaints on sparc

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Shannon Nelson [ Upstream commit 003c941057eaa868ca6fedd29a274c863167230d ] Fix up a data alignment issue on sparc by swapping the order of the cookie byte array field with the length field in

[PATCH 3.16 226/370] net/mlx4_core: Fix racy CQ (Completion Queue) free

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Jack Morgenstein commit 291c566a28910614ce42d0ffe82196eddd6346f4 upstream. In function mlx4_cq_completion() and mlx4_cq_event(), the radix_tree_lookup requires a rcu_read_lock. This is mandato

[PATCH 3.16 159/370] USB: serial: io_ti: fix another NULL-deref at open

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 4f9785cc99feeb3673993b471f646b4dbaec2cc1 upstream. In case a device is left in "boot-mode" we must not register any port devices in order to avoid a NULL-pointer dereferenc

[PATCH 3.16 337/370] sctp: assign assoc_id earlier in __sctp_connect

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Marcelo Ricardo Leitner [ Upstream commit 7233bc84a3aeda835d334499dc00448373caf5c0 ] sctp_wait_for_connect() currently already holds the asoc to keep it alive during the sleep, in case another

[PATCH 3.16 346/370] drop_monitor: consider inserted data in genlmsg_end

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Reiter Wolfgang [ Upstream commit 3b48ab2248e61408910e792fe84d6ec466084c1a ] Final nlmsg_len field update must reflect inserted net_dm_drop_point data. This patch depends on previous patch: "

[PATCH 3.16 169/370] USB: serial: omninet: fix NULL-derefs at open and disconnect

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit a5bc01949e3b19d8a23b5eabc6fc71bb50dc820e upstream. Fix NULL-pointer dereferences at open() and disconnect() should the device lack the expected bulk-out endpoints: Unable

[PATCH 3.2 020/199] ssb: Fix error routine when fallback SPROM fails

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Larry Finger commit 8052d7245b6089992343c80b38b14dbbd8354651 upstream. When there is a CRC error in the SPROM read from the device, the code attempts to handle a fallback SPROM. When this also

[PATCH 3.2 198/199] sctp: avoid BUG_ON on sctp_wait_for_sndbuf

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Marcelo Ricardo Leitner commit 2dcab598484185dea7ec22219c76dcdd59e3cb90 upstream. Alexander Popov reported that an application may trigger a BUG_ON in sctp_wait_for_sndbuf if the socket tx buff

[PATCH 3.16 221/370] i2c: fix kernel memory disclosure in dev interface

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Vlad Tsyrklevich commit 30f939feaeee23e21391cfc7b484f012eb189c3c upstream. i2c_smbus_xfer() does not always fill an entire block, allowing kernel stack memory disclosure through the temp varia

kexec, x86/purgatory: Cleanup the unholy mess

The purgatory code defines global variables which are referenced via a symbol lookup in the kexec code (core and arch). A recent commit addressing sparse warning made these static and thereby broke kexec file. Why did this happen? Simply because the whole machinery is undocumented and lacks any f

[PATCH 3.16 137/370] usb: dwc3: gadget: always unmap EP0 requests

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Felipe Balbi commit d62145929992f331fdde924d5963ab49588ccc7d upstream. commit 0416e494ce7d ("usb: dwc3: ep0: correct cache sync issue in case of ep0_bounced") introduced a bug where we would l

[PATCH 3.16 165/370] USB: serial: mos7720: fix parport use-after-free on probe errors

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 75dd211e773afcbc264677b0749d1cf7d937ab2d upstream. Do not submit the interrupt URB until after the parport has been successfully registered to avoid another use-after-free

[PATCH 3.16 219/370] jump_labels: API for flushing deferred jump label updates

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: David Matlack commit b6416e61012429e0277bd15a229222fd17afc1c1 upstream. Modules that use static_key_deferred need a way to synchronize with any delayed work that is still pending when the modu

[PATCH 3.16 348/370] r8152: fix the sw rx checksum is unavailable

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: hayeswang [ Upstream commit 19c0f40d4fca3a47b8f784a627f0467f0138ccc8 ] Fix the hw rx checksum is always enabled, and the user couldn't switch it to sw rx checksum. Note that the RTL_VER_01 on

[PATCH 3.16 359/370] macvtap: read vnet_hdr_size once

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Willem de Bruijn [ Upstream commit 837585a5375c38d40361cfe64e6fd11e1addb936 ] When IFF_VNET_HDR is enabled, a virtio_net header must precede data. Data length is verified to be greater than or

[PATCH 3.16 182/370] KVM: MIPS: Flush KVM entry code from icache globally

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: James Hogan commit 32eb12a6c11034867401d56b012e3c15d5f8141e upstream. Flush the KVM entry code from the icache on all CPUs, not just the one that built the entry code. Signed-off-by: James Ho

[PATCH 3.2 197/199] ipc/shm: Fix shmat mmap nil-page protection

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Davidlohr Bueso commit 95e91b831f87ac8e1f8ed50c14d709089b4e01b8 upstream. The issue is described here, with a nice testcase: https://bugzilla.kernel.org/show_bug.cgi?id=192931 The problem

[PATCH 3.16 239/370] net: fix harmonize_features() vs NETIF_F_HIGHDMA

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit 7be2c82cfd5d28d7adb66821a992604eb6dd112e upstream. Ashizuka reported a highmem oddity and sent a patch for freescale fec driver. But the problem root cause is that core ne

[PATCH 3.2 192/199] macvtap: read vnet_hdr_size once

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Willem de Bruijn [ Upstream commit 837585a5375c38d40361cfe64e6fd11e1addb936 ] When IFF_VNET_HDR is enabled, a virtio_net header must precede data. Data length is verified to be greater than or

[PATCH 3.2 191/199] tun: read vnet_hdr_sz once

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Willem de Bruijn [ Upstream commit e1edab87faf6ca30cd137e0795bc73aa9a9a22ec ] When IFF_VNET_HDR is enabled, a virtio_net header must precede data. Data length is verified to be greater than or

[PATCH 3.2 000/199] 3.2.87-rc1 review

This is the start of the stable review cycle for the 3.2.87 release. There are 199 patches in this series, which will be posted as responses to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Mar 15 00:00:00 UTC 2017. Anything recei

[PATCH 3.16 214/370] gro: use min_t() in skb_gro_reset_offset()

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit 7cfd5fd5a9813f1430290d20c0fead9b4582a307 upstream. On 32bit arches, (skb->end - skb->data) is not 'unsigned int', so we shall use min_t() instead of min() to avoid a compil

[PATCH 3.16 183/370] usb: musb: Fix trying to free already-free IRQ 4

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Tony Lindgren commit 8c300fe282fa254ea730c92cb0983e2642dc1fff upstream. When unloading omap2430, we can get the following splat: WARNING: CPU: 1 PID: 295 at kernel/irq/manage.c:1478 __free_ir

[PATCH 3.16 246/370] powerpc/ptrace: Preserve previous fprs/vsrs on short regset write

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Dave Martin commit 99dfe80a2a246c600440a815741fd2e74a8b4977 upstream. Ensure that if userspace supplies insufficient data to PTRACE_SETREGSET to fill all the registers, the thread's old regist

[PATCH 3.2 029/199] USB: serial: kl5kusb105: fix open error path

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 6774d5f53271d5f60464f824748995b71da401ab upstream. Kill urbs and disable read before returning from open on failure to retrieve the line state. Fixes: 1da177e4c3f4 ("Linux-

[PATCH 3.2 186/199] can: Fix kernel panic at security_sock_rcv_skb

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit f1712c73714088a7252d276a57126d56c7d37e64 ] Zhang Yanmin reported crashes [1] and provided a patch adding a synchronize_rcu() call in can_rx_unregister() The main

[PATCH 3.2 024/199] dm crypt: mark key as invalid until properly loaded

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Ondrej Kozina commit 265e9098bac02bc5e36cda21fdbad34cb5b2f48d upstream. In crypt_set_key(), if a failure occurs while replacing the old key (e.g. tfm->setkey() fails) the key must not have DM_C

[PATCH 3.16 243/370] nbd: fix use-after-free of rq/bio in the xmit path

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Jens Axboe commit 429a787be6793554ee02aacc7e1f11ebcecc4453 upstream. For writes, we can get a completion in while we're still iterating the request and bio chain. If that happens, we're readin

[PATCH 3.16 187/370] selftests: do not require bash to run netsocktests testcase

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Rolf Eike Beer commit 3659f98b5375d195f1870c3e508fe51e52206839 upstream. Nothing in this minimal script seems to require bash. We often run these tests on embedded devices where the only shell

[PATCH 3.16 335/370] ipv6: dccp: fix out of bound access in dccp_v6_err()

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 1aa9d1a0e7eefcc61696e147d123453fc0016005 ] dccp_v6_err() does not use pskb_may_pull() and might access garbage. We only need 4 bytes at the beginning of the DCC

[PATCH 3.16 336/370] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 990ff4d84408fc55942ca6644f67e361737b3d8e ] While fuzzing kernel with syzkaller, Andrey reported a nasty crash in inet6_bind() caused by DCCP lacking a required m

[PATCH 3.2 009/199] PCI: Check for PME in targeted sleep state

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Alan Stern commit 6496ebd7edf446fccf8266a1a70ffcb64252593e upstream. One some systems, the firmware does not allow certain PCI devices to be put in deep D-states. This can cause problems for w

[PATCH 3.16 160/370] USB: serial: iuu_phoenix: fix NULL-deref at open

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 90507d54f712d81b74815ef3a4bbb555cd9fab2f upstream. Fix NULL-pointer dereference at open should the device lack a bulk-in or bulk-out endpoint: Unable to handle kernel NULL

[PATCH 3.2 194/199] mld: do not remove mld souce list info when set link down

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Hangbin Liu commit 1666d49e1d416fcc2cce708242a52fe3317ea8ba upstream. This is an IPv6 version of commit 24803f38a5c0 ("igmp: do not remove igmp souce list..."). In mld_del_delrec(), we will res

[PATCH 3.16 356/370] tcp: fix 0 divide in __tcp_select_window()

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 06425c308b92eaf60767bc71d359f4cbc7a561f8 ] syszkaller fuzzer was able to trigger a divide by zero, when TCP window scaling is not enabled. SO_RCVBUF can be used

[PATCH 3.16 369/370] sctp: avoid BUG_ON on sctp_wait_for_sndbuf

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Marcelo Ricardo Leitner commit 2dcab598484185dea7ec22219c76dcdd59e3cb90 upstream. Alexander Popov reported that an application may trigger a BUG_ON in sctp_wait_for_sndbuf if the socket tx buf

[PATCH 3.16 364/370] mld: do not remove mld souce list info when set link down

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Hangbin Liu commit 1666d49e1d416fcc2cce708242a52fe3317ea8ba upstream. This is an IPv6 version of commit 24803f38a5c0 ("igmp: do not remove igmp souce list..."). In mld_del_delrec(), we will re

[PATCH 3.2 028/199] thermal: hwmon: Properly report critical temperature in sysfs

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Krzysztof Kozlowski commit f37fabb8643eaf8e3b61a72f683770c85eca upstream. In the critical sysfs entry the thermal hwmon was returning wrong temperature to the user-space. It was reporting

[PATCH 3.16 209/370] mm/hugetlb.c: fix reservation race when freeing surplus pages

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Mike Kravetz commit e5bbc8a6c992901058bc09e2ce01d16c111ff047 upstream. return_unused_surplus_pages() decrements the global reservation count, and frees any unused surplus pages that were backi

[PATCH 3.16 340/370] net: sky2: Fix shutdown crash

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Jeremy Linton [ Upstream commit 06ba3b2133dc203e1e9bc36cee7f0839b79a9e8b ] The sky2 frequently crashes during machine shutdown with: sky2_get_stats+0x60/0x3d8 [sky2] dev_get_stats+0x68/0xd8 r

[PATCH 3.16 357/370] tun: Fix TUN_PKT_STRIP setting

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Herbert Xu commit 2eb783c43e7cf807a45899c10ed556b6dc116625 upstream. We set the flag TUN_PKT_STRIP if the user buffer provided is too small to contain the entire packet plus meta-data. Howeve

[PATCH 3.16 194/370] x86/boot: Add missing declaration of string functions

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Nicholas Mc Guire commit fac69d0efad08fc15e4dbfc116830782acc0dc9a upstream. Add the missing declarations of basic string functions to string.h to allow a clean build. Fixes: 5be865661516 ("St

Re: [RESEND PATCH v3 4/7] PCI: dwc: all: Modify dbi accessors to take dbi_base as argument

On 03/10/2017 12:36 PM, Kishon Vijay Abraham I wrote: > Hi, > > On Thursday 09 March 2017 08:35 PM, Niklas Cassel wrote: >> >> On 03/09/2017 03:48 PM, Niklas Cassel wrote: >>> On 03/09/2017 07:39 AM, Kishon Vijay Abraham I wrote: dwc has 2 dbi address space labeled dbics and dbics2. The existi

[PATCH 3.16 203/370] USB: serial: ch341: fix resume after reset

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit ce5e292828117d1b71cbd3edf9e9137cf31acd30 upstream. Fix reset-resume handling which failed to resubmit the read and interrupt URBs, thereby leaving a port that was open befo

[PATCH 3.16 143/370] USB: gadgetfs: fix checks of wTotalLength in config descriptors

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Alan Stern commit 1c069b057dcf64fada952eaa868d35f02bb0cfc2 upstream. Andrey Konovalov's fuzz testing of gadgetfs showed that we should improve the driver's checks for valid configuration descr

[PATCH 3.16 195/370] USB: ch341: remove redundant close from open error path

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 394a10331a9e43100a8ee293255cfc428c7355ac upstream. Remove redundant call to ch341_close from error path when submission of the interrupt urb fails in open. Signed-off-by:

[PATCH 3.16 200/370] USB: serial: ch341: fix open and resume after B0

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit a20047f36e2f6a1eea4f1fd261aaa55882369868 upstream. The private baud_rate variable is used to configure the port at open and reset-resume and must never be set to (and left

[PATCH 3.16 224/370] netfilter: rpfilter: fix incorrect loopback packet judgment

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Liping Zhang commit 6443ebc3fdd6f3c766d9442c18be274b3d736050 upstream. Currently, we check the existing rtable in PREROUTING hook, if RTCF_LOCAL is set, we assume that the packet is loopback.

[PATCH 3.16 132/370] net/mlx4: Remove BUG_ON from ICM allocation routine

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Leon Romanovsky commit c1d5f8ff80ea84768f5fae1ca9d1abfbb5e6bbaa upstream. This patch removes BUG_ON() macro from mlx4_alloc_icm_coherent() by checking DMA address alignment in advance and perf

[PATCH 3.16 119/370] NFSv4.1: nfs4_fl_prepare_ds must be careful about reporting success.

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: NeilBrown commit cfd278c280f997cf2fe4662e0acab0fe465f637b upstream. Various places assume that if nfs4_fl_prepare_ds() turns a non-NULL 'ds', then ds->ds_clp will also be non-NULL. This is no

[PATCH 3.16 142/370] USB: gadgetfs: fix use-after-free bug

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Alan Stern commit add333a81a16abbd4f106266a2553677a165725f upstream. Andrey Konovalov reports that fuzz testing with syzkaller causes a KASAN use-after-free bug report in gadgetfs: BUG: KASAN

[PATCH 3.16 191/370] sh_eth: R8A7740 supports packet shecksumming

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Sergei Shtylyov commit 0f1f9cbc04dbb3cc310f70a11cba0cf1f2109d9c upstream. The R8A7740 GEther controller supports the packet checksum offloading but the 'hw_crc' (bad name, I'll fix it) flag is

[PATCH 3.16 212/370] vme: Fix wrong pointer utilization in ca91cx42_slave_get

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Augusto Mecking Caringi commit c8a6a09c1c617402cc9254b2bc8da359a0347d75 upstream. In ca91cx42_slave_get function, the value pointed by vme_base pointer is set through: *vme_base = ioread32(br

Re: [PATCH v2 05/11] Documentation: DT: bindings: mfd: add A33 GPADC binding

On Fri, Mar 10, 2017 at 11:39:15AM +0100, Quentin Schulz wrote: > This patch adds documentation for the A33 GPADC binding. > > Signed-off-by: Quentin Schulz > --- > > added in v2 > > .../devicetree/bindings/mfd/sun4i-gpadc.txt| 59 > ++ > 1 file changed, 59 inserti

[PATCH 3.2 188/199] ipv6: pointer math error in ip6_tnl_parse_tlv_enc_lim()

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter [ Upstream commit 63117f09c768be05a0bf465911297dc76394f686 ] Casting is a high precedence operation but "off" and "i" are in terms of bytes so we need to have some parenthesis her

[PATCH 3.2 012/199] powerpc/ibmebus: Fix device reference leaks in sysfs interface

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit fe0f3168169f7c34c29b0cf0c489f126a7f29643 upstream. Make sure to drop any reference taken by bus_find_device() in the sysfs callbacks that are used to create and destroy devi

[PATCH 3.2 017/199] ext4: fix stack memory corruption with 64k block size

3.2.87-rc1 review patch. If anyone has any objections, please let me know. -- From: Chandan Rajendra commit 30a9d7afe70ed6bd9191d3000e2ef1a34fb58493 upstream. The number of 'counters' elements needed in 'struct sg' is super_block->s_blocksize_bits + 2. Presently we have 16 'co

[PATCH 3.16 154/370] usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Apollo Lake

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Wan Ahmad Zainie commit 6c97cfc1a097b1e0786c836e92b7a72b4d031e25 upstream. Intel Apollo Lake also requires XHCI_PME_STUCK_QUIRK. Adding its PCI ID to quirk. Signed-off-by: Wan Ahmad Zainie S

[PATCH 3.16 166/370] USB: serial: mos7720: fix parallel probe

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit fde1faf872ed86d88e245191bc15a8e57368cd1c upstream. A static usb-serial-driver structure that is used to initialise the interrupt URB was modified during probe depending on

[PATCH 3.16 178/370] net: systemport: Pad packet before inserting TSB

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Florian Fainelli commit 38e5a85562a6cd911fc26d951d576551a688574c upstream. Inserting the TSB means adding an extra 8 bytes in front the of packet that is going to be used as metadata informati

[PATCH 3.16 236/370] arm64/ptrace: Preserve previous registers for short regset write

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Dave Martin commit 9a17b876b573441bfb3387ad55d98bf7184daf9d upstream. Ensure that if userspace supplies insufficient data to PTRACE_SETREGSET to fill all the registers, the thread's old regist

[PATCH 3.16 139/370] USB: dummy-hcd: fix bug in stop_activity (handle ep0)

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Alan Stern commit bcdbeb84477d2d1c08004f3b3e25921040e5 upstream. The stop_activity() routine in dummy-hcd is supposed to unlink all active requests for every endpoint, among other things.

[PATCH 3.16 192/370] ata: sata_mv:- Handle return value of devm_ioremap.

3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Arvind Yadav commit 064c3db9c564cc5be514ac21fb4aa26cc33db746 upstream. Here, If devm_ioremap will fail. It will return NULL. Then hpriv->base = NULL - 0x2; Kernel can run into a NULL-point

<    2   3   4   5   6   7   8   9   10   11   >