[PATCH v12 6/9] mmc: cavium: Add MMC PCI driver for ThunderX SOCs

2017-03-10 Thread Jan Glauber
Add a platform driver for ThunderX ARM SOCs. Signed-off-by: Jan Glauber --- drivers/mmc/host/Kconfig | 10 ++ drivers/mmc/host/Makefile | 2 + drivers/mmc/host/cavium-mmc.h | 10 +- drivers/mmc/host/cavium-pci-thunderx.c | 198 +

[PATCH 3.16 326/370] tcp: fix overflow in __tcp_retransmit_skb()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit ffb4d6c8508657824bcef68a36b2a0f9d8c09d10 ] If a TCP socket gets a large write queue, an overflow can happen in a test in __tcp_retransmit_skb() preventing all re

[PATCH v12 4/9] mmc: cavium: Work-around hardware bug on cn6xxx and cnf7xxx

2017-03-10 Thread Jan Glauber
Prevent data corruption on cn6xxx and cnf7xxx. Due to an imperfection in the design of the MMC bus hardware, the 2nd to last cache block of a DMA read must be locked into the L2 cache. Signed-off-by: Jan Glauber Signed-off-by: David Daney Signed-off-by: Steven J. Hill --- arch/mips/cavium-octe

[PATCH v12 0/9] Cavium MMC driver

2017-03-10 Thread Jan Glauber
Hi Ulf, I've not heard back from you regarding the bitfields so I assume this means you're insisting on that point. I'd really like to make some progress with this series, so I'm reposting now. All comments should be addressed. Patches are on top of 4.11-rc1. @Rob: I kept your ACK after the remov

[PATCH v12 5/9] mmc: cavium: Add support for Octeon cn7890

2017-03-10 Thread Jan Glauber
The MMC unit on Octeon cn7890 differs in that it has multiple interrupts. Requires a lock for the interrupt handler. DMA addresses have a dedicated 64 bit register now, so use that when available. Signed-off-by: Jan Glauber Signed-off-by: David Daney Signed-off-by: Steven J. Hill --- drivers/m

Re: [virtio-dev] Re: [PATCH v7 kernel 3/5] virtio-balloon: implementation of VIRTIO_BALLOON_F_CHUNK_TRANSFER

2017-03-10 Thread David Hildenbrand
Am 10.03.2017 um 11:02 schrieb Wei Wang: > On 03/08/2017 12:01 PM, Michael S. Tsirkin wrote: >> On Fri, Mar 03, 2017 at 01:40:28PM +0800, Wei Wang wrote: >>> From: Liang Li >>> >>> The implementation of the current virtio-balloon is not very >>> efficient, because the pages are transferred to the

[PATCH v12 7/9] mmc: cavium: Add scatter-gather DMA support

2017-03-10 Thread Jan Glauber
Add Support for the scatter-gather DMA available in the ThunderX MMC units. Up to 16 DMA requests can be processed together. Signed-off-by: Jan Glauber --- drivers/mmc/host/cavium-mmc.c | 104 - drivers/mmc/host/cavium-mmc.h | 16 + drivers/

[PATCH v12 9/9] MAINTAINERS: Add entry for Cavium MMC driver

2017-03-10 Thread Jan Glauber
Signed-off-by: Jan Glauber Signed-off-by: David Daney Signed-off-by: Steven J. Hill --- MAINTAINERS | 8 1 file changed, 8 insertions(+) diff --git a/MAINTAINERS b/MAINTAINERS index c265a5f..ead1e89 100644 --- a/MAINTAINERS +++ b/MAINTAINERS @@ -3041,6 +3041,14 @@ S: Supported

[PATCH v12 2/9] mmc: cavium: Add core MMC driver for Cavium SOCs

2017-03-10 Thread Jan Glauber
This core driver will be used by a MIPS platform driver or by an ARM64 PCI driver. The core driver implements the mmc_host_ops and slot probe & remove functions. Callbacks are provided to allow platform specific interrupt enable and bus locking. The host controller supports: - up to 4 slots that c

[PATCH v12 8/9] mmc: cavium: Support DDR mode for eMMC devices

2017-03-10 Thread Jan Glauber
Add support for switching to DDR mode for eMMC devices. Signed-off-by: Jan Glauber --- drivers/mmc/host/cavium-mmc.c | 12 +++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/drivers/mmc/host/cavium-mmc.c b/drivers/mmc/host/cavium-mmc.c index fb6e1c1..e340b95 100644 --- a/

[PATCH v12 1/9] dt-bindings: mmc: Add Cavium SOCs MMC bindings

2017-03-10 Thread Jan Glauber
Add description of Cavium Octeon and ThunderX SOC device tree bindings. CC: Ulf Hansson CC: Rob Herring CC: Mark Rutland CC: devicet...@vger.kernel.org Signed-off-by: Jan Glauber Signed-off-by: David Daney Signed-off-by: Steven J. Hill Acked-by: Rob Herring --- .../devicetree/bindings/mmc

[PATCH 3.16 332/370] net: mangle zero checksum in skb_checksum_help()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 4f2e4ad56a65f3b7d64c258e373cb71e8d2499f4 ] Sending zero checksum is ok for TCP, but not for UDP. UDPv6 receiver should by default drop a frame with a 0 checksum

[PATCH 3.16 298/370] packet: fix races in fanout_add()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit d199fab63c11998a602205f7ee7ff7c05c97164b upstream. Multiple threads can call fanout_add() at the same time. We need to grab fanout_mutex earlier to avoid races that could

Re: Compiling kernels faster (was Re: v4.10: kernel stack frame pointer .. has bad value (null))

2017-03-10 Thread Geert Uytterhoeven
Hi Pavel, On Fri, Mar 10, 2017 at 2:17 PM, Pavel Machek wrote: > On Thu 2017-03-09 13:16:09, Geert Uytterhoeven wrote: >> On Thu, Mar 9, 2017 at 11:56 AM, Pavel Machek wrote: >> > On Thu 2017-03-09 10:38:46, Geert Uytterhoeven wrote: >> >> I hope you do use ccache or distcc? >> > >> > I tried to

[PATCH 3.16 321/370] ipmr/ip6mr: Initialize the last assert time of mfc entries.

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Tom Goff [ Upstream commit 70a0dec45174c976c64b4c8c1d0898581f759948 ] This fixes wrong-interface signaling on 32-bit platforms for entries created when jiffies > 2^31 + MFC_ASSERT_THRESH. Sig

[PATCH 3.16 327/370] net: avoid sk_forward_alloc overflows

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 20c64d5cd5a2bdcdc8982a06cb05e5e1bd851a3d ] A malicious TCP receiver, sending SACK, can force the sender to split skbs in write queue and increase its memory usag

[PATCH 3.16 268/370] ARM: 8643/3: arm/ptrace: Preserve previous registers for short regset write

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Dave Martin commit 228dbbfb5d77f8e047b2a1d78da14b7158433027 upstream. Ensure that if userspace supplies insufficient data to PTRACE_SETREGSET to fill all the registers, the thread's old regist

[PATCH 3.16 325/370] net: fix sk_mem_reclaim_partial()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit 1a24e04e4b50939daa3041682b38b82c896ca438 upstream. sk_mem_reclaim_partial() goal is to ensure each socket has one SK_MEM_QUANTUM forward allocation. This is needed both for

[PATCH 3.16 331/370] net: clear sk_err_soft in sk_clone_lock()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit e551c32d57c88923f99f8f010e89ca7ed0735e83 ] At accept() time, it is possible the parent has a non zero sk_err_soft, leftover from a prior error. Make sure we do

Re: [PATCH] mmc: sdhci-of-at91: Support external regulators

2017-03-10 Thread Ludovic Desroches
Hi Romain, On 03/09/2017 04:18 PM, Romain Izard wrote: The SDHCI controller in the SAMA5D2 chip requires a valid voltage set in the power control register, otherwise commands will fail with a timeout error. When using the regulator framework to specify the regulator used by the mmc device, the

[PATCH 3.16 271/370] USB: serial: pl2303: add ATEN device ID

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: "Marcel J.E. Mol" commit d07830db1bdb254e4b50d366010b219286b8c937 upstream. Seems that ATEN serial-to-usb devices using pl2303 exist with different device ids. This patch adds a missing device

[PATCH 3.16 328/370] tcp: fix wrong checksum calculation on MTU probing

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Douglas Caetano dos Santos [ Upstream commit 2fe664f1fcf7c4da6891f95708a7a56d3c024354 ] With TCP MTU probing enabled and offload TX checksumming disabled, tcp_mtu_probe() calculated the wrong

[PATCH 3.16 299/370] [media] siano: make it work again with CONFIG_VMAP_STACK

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Mauro Carvalho Chehab commit f9c85ee67164b37f9296eab3b754e543e4e96a1c upstream. Reported as a Kaffeine bug: https://bugs.kde.org/show_bug.cgi?id=375811 The USB control messages requir

[PATCH 3.16 248/370] platform/x86: intel_mid_powerbtn: Set IRQ_ONESHOT

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Andy Shevchenko commit 5a00b6c2438460b870a451f14593fc40d3c7edf6 upstream. The commit 1c6c69525b40 ("genirq: Reject bogus threaded irq requests") starts refusing misconfigured interrupt handler

[PATCH 3.16 297/370] mmc: core: fix multi-bit bus width without high-speed mode

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Anssi Hannula commit 3d4ef329757cfd5e0b23cce97cdeca7e2df89c99 upstream. Commit 577fb13199b1 ("mmc: rework selection of bus speed mode") refactored bus width selection code to mmc_select_bus_wi

[PATCH 3.16 273/370] net: use a work queue to defer net_disable_timestamp() work

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit 5fa8bbda38c668e56b0c6cdecced2eac2fe36dec upstream. Dmitry reported a warning [1] showing that we were calling net_disable_timestamp() -> static_key_slow_dec() from a non pr

[PATCH 3.16 266/370] can: bcm: fix hrtimer/tasklet termination in bcm op removal

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Oliver Hartkopp commit a06393ed03167771246c4c43192d9c264bc48412 upstream. When removing a bcm tx operation either a hrtimer or a tasklet might run. As the hrtimer triggers its associated taskl

[PATCH 3.16 315/370] netem: Segment GSO packets on enqueue

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Neil Horman [ Upstream commit 6071bd1aa13ed9e41824bafad845b7b7f4df5cfd ] This was recently reported to me, and reproduced on the latest net kernel, when attempting to run netperf from a host t

[PATCH 3.16 322/370] net: alx: Work around the DMA RX overflow issue

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Feng Tang [ Upstream commit 881d0327db37ad917a367c77aff1afa1ee41e0a9 ] Note: This is a verified backported patch for stable 4.4 kernel, and it could also be applied to 4.3/4.2/4.1/3.18/3.16 T

[PATCH 3.16 309/370] sched/cputime: Fix invalid gtime in proc

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Hiroshi Shimamoto commit 2541117b0cf79977fa11a0d6e17d61010677bd7b upstream. /proc/stats shows invalid gtime when the thread is running in guest. When vtime accounting is not enabled, we cannot

[PATCH 3.16 324/370] bonding: set carrier off for devices created through netlink

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Beniamino Galvani [ Upstream commit 005db31d5f5f7c31cfdc43505d77eb3ca5cf8ec6 ] Commit e826eafa65c6 ("bonding: Call netif_carrier_off after register_netdevice") moved netif_carrier_off() from b

[PATCH 3.16 310/370] lib/vsprintf.c: improve sanity check in vsnprintf()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Rasmus Villemoes commit 2aa2f9e21e4eb25c720b2e7d80f8929638f6ad73 upstream. On 64 bit, size may very well be huge even if bit 31 happens to be 0. Somehow it doesn't feel right that one can pass

[RESEND PATCH 1/2] auxdisplay: img-ascii-lcd: Add a sentinel entry to OF device ID table

2017-03-10 Thread Javier Martinez Canillas
The OF device ID table doesn't have a sentinel NULL entry and so it causes the following error: FATAL: drivers/auxdisplay/img-ascii-lcd: struct of_device_id is not terminated with a NULL entry! scripts/Makefile.modpost:91: recipe for target '__modpost' failed make[1]: *** [__modpost] Error 1 Make

[RESEND PATCH 0/2] auxdisplay: img-ascii-lcd: Trivial fixes

2017-03-10 Thread Javier Martinez Canillas
Hello Andrew, This series contains two trivial fixes for the img-ascii-lcd auxdisplay driver. The first version was posted more than 2 months ago [0] and had no feedback, so I'm resending with you as cc in case these can be picked through your tree. [0]: https://lkml.org/lkml/2017/1/2/395 Best r

[RESEND PATCH 2/2] auxdisplay: img-ascii-lcd: Fix module autoload

2017-03-10 Thread Javier Martinez Canillas
If the driver is built as a module, autoload won't work because the module alias information is not filled. So user-space can't match the registered device with the corresponding module. Export the module alias information using the MODULE_DEVICE_TABLE() macro. Before this patch: $ modinfo drive

[PATCH 3.16 314/370] sch_dsmark: update backlog as well

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: WANG Cong [ Upstream commit bdf17661f63a79c3cb4209b970b1cc39e34f7543 ] Similarly, we need to update backlog too when we update qlen. Cc: Jamal Hadi Salim Signed-off-by: Cong Wang Signed-off

[PATCH 3.16 282/370] ARC: [arcompact] brown paper bag bug in unaligned access delay slot fixup

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Vineet Gupta commit a524c218bc94c705886a0e0fedeee45d1931da32 upstream. Reported-by: Jo-Philipp Wich Fixes: 9aed02feae57bf7 ("ARC: [arcompact] handle unaligned access delay slot") Cc: linux-ke

[PATCH 3.16 283/370] drm/i915: fix use-after-free in page_flip_completed()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Andrey Ryabinin commit 5351fbb1bf1413f6024892093528280769ca852f upstream. page_flip_completed() dereferences 'work' variable after executing queue_work(). This is not safe as the 'work' item m

kvm/arm64: use-after-free in kvm_unmap_hva_handler/unmap_stage2_pmds

2017-03-10 Thread Andrey Konovalov
Hi, I've got the following error report while fuzzing the kernel with syzkaller. On linux-next commit 56b8bad5e066c23e8fa273ef5fba50bd3da2ace8 (Mar 8). Unfortunately I can't reproduce it. == BUG: KASAN: use-after-free in put_page i

[PATCH 3.16 319/370] ipv6: Skip XFRM lookup if dst_entry in socket cache is valid

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Jakub Sitnicki [ Upstream commit 00bc0ef5880dc7b82f9c320dead4afaad48e47be ] At present we perform an xfrm_lookup() for each UDPv6 message we send. The lookup involves querying the flow cache (

[PATCH v1] staging: media: Remove unused function atomisp_set_stop_timeout()

2017-03-10 Thread simran singhal
The function atomisp_set_stop_timeout on being called, simply returns back. The function hasn't been mentioned in the TODO and doesn't have FIXME code around. Hence, atomisp_set_stop_timeout and its calls have been removed. This was done using Coccinelle. @@ identifier f; @@ void f(...) { -retu

[PATCH 3.16 318/370] udp: prevent skbs lingering in tunnel socket queues

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Hannes Frederic Sowa [ Upstream commit e5aed006be918af163eb397e45aa5ea6cefd5e01 ] In case we find a socket with encapsulation enabled we should call the encap_recv function even if just a udp

[PATCH 3.16 252/370] powerpc: Add missing error check to prom_find_boot_cpu()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Darren Stevens commit af2b7fa17eb92e52b65f96604448ff7a2a89ee99 upstream. prom_init.c calls 'instance-to-package' twice, but the return is not checked during prom_find_boot_cpu(). The result is

[PATCH 3.16 304/370] packet: call fanout_release, while UNREGISTERING a netdev

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Anoob Soman commit 6664498280cf17a59c3e7cf1a931444c02633ed1 upstream. If a socket has FANOUT sockopt set, a new proto_hook is registered as part of fanout_add(). When processing a NETDEV_UNREG

[PATCH 3.16 305/370] packet: Do not call fanout_release from atomic contexts

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Anoob Soman commit 2bd624b4611ffee36422782d16e1c944d1351e98 upstream. Commit 6664498280cf ("packet: call fanout_release, while UNREGISTERING a netdev"), unfortunately, introduced the following

[PATCH 3.16 279/370] rtl8150: Use heap buffers for all register access

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit 7926aff5c57b577ab0f43364ff0c59d968f6a414 upstream. Allocating USB buffers on the stack is not portable, and no longer works on x86_64 (with VMAP_STACK enabled as per defau

[PATCH 3.16 269/370] drm/nouveau/nv1a,nv1f/disp: fix memory clock rate retrieval

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Ilia Mirkin commit 24bf7ae359b8cca165bb30742d2b1c03a1eb23af upstream. Based on the xf86-video-nv code, NFORCE (NV1A) and NFORCE2 (NV1F) have a different way of retrieving clocks. See the nv_hw

[PATCH 3.16 278/370] pegasus: Use heap buffers for all register access

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit 5593523f968bc86d42a035c6df47d5e0979b5ace upstream. Allocating USB buffers on the stack is not portable, and no longer works on x86_64 (with VMAP_STACK enabled as per defau

[PATCH 3.16 281/370] catc: Use heap buffer for memory size test

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit 2d6a0e9de03ee658a9adc3bfb2f0ca55dff1e478 upstream. Allocating USB buffers on the stack is not portable, and no longer works on x86_64 (with VMAP_STACK enabled as per defau

[PATCH 3.16 307/370] Fix missing sanity check in /dev/sg

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Al Viro commit 137d01df511b3afe1f05499aea05f3bafc0fb221 upstream. What happens is that a write to /dev/sg is given a request with non-zero ->iovec_count combined with zero ->dxfer_len. Or wit

[PATCH 3.16 296/370] futex: Move futex_init() to core_initcall

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Yang Yang commit 25f71d1c3e98ef0e52371746220d66458eac75bc upstream. The UEVENT user mode helper is enabled before the initcalls are executed and is available when the root filesystem has been

[PATCH 3.16 274/370] mm, fs: check for fatal signals in do_generic_file_read()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Michal Hocko commit 5abf186a30a89d5b9c18a6bf93a2c192c9fd52f6 upstream. do_generic_file_read() can be told to perform a large request from userspace. If the system is under OOM and the reading

kvm/arm64: use-after-free in kvm_vm_ioctl/vmacache_update

2017-03-10 Thread Andrey Konovalov
Hi, I've got the following error report while fuzzing the kernel with syzkaller. On linux-next commit 56b8bad5e066c23e8fa273ef5fba50bd3da2ace8 (Mar 8). Unfortunately I can't reproduce it. == BUG: KASAN: use-after-free in vmacache_u

[PATCH 3.16 133/370] ARM: dts: imx31: fix AVIC base address

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Vladimir Zapolskiy commit af92305e567b7f4c9cf48b9e46c1f48ec9ffb1fb upstream. On i.MX31 AVIC interrupt controller base address is at 0x6800. The problem was shadowed by the AVIC driver, wh

[PATCH 3.16 277/370] ALSA: seq: Don't handle loop timeout at snd_seq_pool_done()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 37a7ea4a9b81f6a864c10a7cb0b96458df5310a3 upstream. snd_seq_pool_done() syncs with closing of all opened threads, but it aborts the wait loop with a timeout, and proceeds to

[PATCH 3.16 134/370] mtd: nand: xway: disable module support

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Hauke Mehrtens commit 73529c872a189c747bdb528ce9b85b67b0e28dec upstream. The xway_nand driver accesses the ltq_ebu_membase symbol which is not exported. This also should not get exported and w

[PATCH 3.16 261/370] sysctl: fix proc_doulongvec_ms_jiffies_minmax()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit ff9f8a7cf935468a94d9927c68b00daae701667e upstream. We perform the conversion between kernel jiffies and ms only when exporting kernel value to user space. We need to do th

[PATCH 3.16 303/370] vfs: fix uninitialized flags in splice_to_pipe()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Miklos Szeredi commit 5a81e6a171cdbd1fa8bc1fdd80c23d3d71816fac upstream. Flags (PIPE_BUF_FLAG_PACKET, PIPE_BUF_FLAG_GIFT) could remain on the unused part of the pipe ring buffer. Previously s

[PATCH 3.16 289/370] ping: fix a null pointer dereference

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: WANG Cong commit 73d2c6678e6c3af7e7a42b1e78cd0211782ade32 upstream. Andrey reported a kernel crash: general protection fault: [#1] SMP KASAN Dumping ftrace buffer: (ftrace buffe

[PATCH 3.16 300/370] net: xilinx_emaclite: fix receive buffer overflow

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Anssi Hannula commit cd224553641848dd17800fe559e4ff5d208553e8 upstream. xilinx_emaclite looks at the received data to try to determine the Ethernet packet length but does not properly clamp it

[PATCH 3.16 270/370] mmc: sdhci: Ignore unexpected CARD_INT interrupts

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Gabriel Krisman Bertazi commit 161e6d44a5e2d3f85365cb717d60e363171b39e6 upstream. One of our kernelCI boxes hanged at boot because a faulty eSDHC device was triggering spurious CARD_INT interr

[PATCH 3.16 272/370] svcrpc: fix oops in absence of krb5 module

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: "J. Bruce Fields" commit 034dd34ff4916ec1f8f74e39ca3efb04eab2f791 upstream. Olga Kornievskaia says: "I ran into this oops in the nfsd (below) (4.10-rc3 kernel). To trigger this I had a client

[PATCH 3.16 301/370] net: xilinx_emaclite: fix freezes due to unordered I/O

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Anssi Hannula commit acf138f1b00bdd1b7cd9894562ed0c2a1670888e upstream. The xilinx_emaclite uses __raw_writel and __raw_readl for register accesses. Those functions do not imply any kind of me

[PATCH 3.16 295/370] net/llc: avoid BUG_ON() in skb_orphan()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit 8b74d439e1697110c5e5c600643e823eb1dd0762 upstream. It seems nobody used LLC since linux-3.12. Fortunately fuzzers like syzkaller still know how to run this code, otherwise

[PATCH 3.16 292/370] xen-netfront: Delete rx_refill_timer in xennet_disconnect_backend()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Boris Ostrovsky commit 74470954857c264168d2b5a113904cf0cfd27d18 upstream. rx_refill_timer should be deleted as soon as we disconnect from the backend since otherwise it is possible for the tim

Re: [RFC] omap3isp: add support for CSI1 bus

2017-03-10 Thread Pavel Machek
On Mon 2017-03-06 08:56:59, Pavel Machek wrote: > omap3isp: add rest of CSI1 support > > CSI1 needs one more bit to be set up. Do just that. > > Signed-off-by: Pavel Machek > > --- > > Hmm. Looking at that... num_data_lanes probably should be modified in > local variable, not globally like thi

[PATCH 3.16 302/370] drm/radeon: Use mode h/vdisplay fields to hide out of bounds HW cursor

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Michel Dänzer commit d74c67dd7800fc7aae381f272875c337f268806c upstream. The crtc_h/vdisplay fields may not match the CRTC viewport dimensions with special modes such as interlaced ones. Fixes

[PATCH 3.16 293/370] l2tp: do not use udp_ioctl()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit 72fb96e7bdbbdd4421b0726992496531060f3636 upstream. udp_ioctl(), as its name suggests, is used by UDP protocols, but is also used by L2TP :( L2TP should use its own handler

[PATCH 3.16 294/370] net/sock: Add sock_efree() function

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings Extracted from commit 62bccb8cdb69 ("net-timestamp: Make the clone operation stand-alone from phy timestamping"). Signed-off-by: Ben Hutchings --- --- a/include/net/sock.h +++ b

[PATCH 3.16 232/370] selftest/powerpc: Wrong PMC initialized in pmc56_overflow test

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Madhavan Srinivasan commit df21d2fa733035e4d414379960f94b2516b41296 upstream. Test uses PMC2 to count the event. But PMC1 is being initialized. Patch to fix it. Fixes: 3752e453f6ba ('selftest

[PATCH 3.16 259/370] USB: Add quirk for WORLDE easykey.25 MIDI keyboard

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Lukáš Lalinský commit d9b2997e4a0a874e452df7cdd7de5a54502bd0aa upstream. Add a quirk for WORLDE easykey.25 MIDI keyboard (idVendor=0218, idProduct=0401). The device reports that it has config

[PATCH 3.16 288/370] btrfs: fix btrfs_compat_ioctl failures on non-compat ioctls

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Jeff Mahoney commit 2a362249187a8d0f6d942d6e1d763d150a296f47 upstream. Commit 4c63c2454ef incorrectly assumed that returning -ENOIOCTLCMD would cause the native ioctl to be called. The ->comp

[PATCH 3.16 285/370] target: Use correct SCSI status during EXTENDED_COPY exception

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Nicholas Bellinger commit 0583c261e6325f392c1f7a1b9112e31298e1a4bd upstream. This patch adds the missing target_complete_cmd() SCSI status parameter change in target_xcopy_do_work(), that was

[PATCH 3.16 287/370] target: Fix COMPARE_AND_WRITE ref leak for non GOOD status

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Nicholas Bellinger commit 9b2792c3da1e80f2d460167d319302a24c9ca2b7 upstream. This patch addresses a long standing bug where the commit phase of COMPARE_AND_WRITE would result in a se_cmd->cmd_

[PATCH 3.16 290/370] ALSA: hda - adding a new NV HDMI/DP codec ID in the driver

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Hui Wang commit af677166cf63c179dc2485053166e02c4aea01eb upstream. Without this change, the HDMI/DP codec will be recognised as a generic codec, and there is no sound when playing through this

[PATCH 3.16 286/370] target: Fix early transport_generic_handle_tmr abort scenario

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Nicholas Bellinger commit c54eeffbe9338fa982dc853d816fda9202a13b5a upstream. This patch fixes a bug where incoming task management requests can be explicitly aborted during an active LUN_RESET

[PATCH 3.16 276/370] mac80211: Fix adding of mesh vendor IEs

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Thorsten Horstmann commit da7061c82e4a1bc6a5e134ef362c86261906c860 upstream. The function ieee80211_ie_split_vendor doesn't return 0 on errors. Instead it returns any offset < ielen when WLAN_

[PATCH 3.16 130/370] net/mlx4_core: Use-after-free causes a resource leak in flow-steering detach

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Jack Morgenstein commit 3b01fe7f91c8e4f9afc4fae3c5af72c14958d2d8 upstream. mlx4_QP_FLOW_STEERING_DETACH_wrapper first removes the steering rule (which results in freeing the rule structure), a

[PATCH 3.16 275/370] netlabel: out of bound access in cipso_v4_validate()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit d71b7896886345c53ef1d84bda2bc758554f5d61 upstream. syzkaller found another out of bound access in ip_options_compile(), or more exactly in cipso_v4_validate() Fixes: 20e2a

[PATCH 3.16 120/370] drm/i915/dsi: Do not clear DPOUNIT_CLOCK_GATE_DISABLE from vlv_init_display_clock_gating

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Hans de Goede commit bb98e72adaf9d19719aba35f802d4836f5d5176c upstream. On my Cherrytrail CUBE iwork8 Air tablet PIPE-A would get stuck on loading i915 at boot 1 out of every 3 boots, resultin

[PATCH 3.16 125/370] clk: renesas: mstp: Support 8-bit registers for r7s72100

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Chris Brandt commit e2a33c34ddff22ee208d80abdd12b88a98d6cb60 upstream. The RZ/A1 is different than the other Renesas SOCs because the MSTP registers are 8-bit instead of 32-bit and if you try

[PATCH 3.16 267/370] perf/core: Fix PERF_RECORD_MMAP2 prot/flags for anonymous memory

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit 0b3589be9b98994ce3d5aeca52445d1f5627c4ba upstream. Andres reported that MMAP2 records for anonymous memory always have their protection field 0. Turns out, someone daft

Re: [PATCH v6 3/5] backlight: lm3533: Support initialization from Device Tree

2017-03-10 Thread Daniel Thompson
On 30/01/17 22:17, Bjorn Andersson wrote: From: Bjorn Andersson Implement support for initialization of the lm3533 backlight from Device Tree. Acked-by: Jingoo Han Acked-by: Pavel Machek Signed-off-by: Bjorn Andersson Signed-off-by: Bjorn Andersson Acked-by: Daniel Thompson --- Note

[PATCH 3.16 140/370] usb: gadgetfs: restrict upper bound on device configuration size

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Greg Kroah-Hartman commit 0994b0a257557e18ee8f0b7c5f0f73fe2b54eec1 upstream. Andrey Konovalov reported that we were not properly checking the upper limit before of a device configuration size

[PATCH 3.16 128/370] net: stmmac: Fix race between stmmac_drv_probe and stmmac_open

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Florian Fainelli commit 5701659004d68085182d2fd4199c79172165fa65 upstream. There is currently a small window during which the network device registered by stmmac can be made visible, yet all r

[PATCH 3.16 135/370] usb: dwc3: ep0: add dwc3_ep0_prepare_one_trb()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Felipe Balbi commit 7931ec86c1b738e4e90e58c6d95e5f720d45ee56 upstream. For now this is just a cleanup patch, no functional changes. We will be using the new function to fix a bug introduced lo

[PATCH 3.16 280/370] catc: Combine failure cleanup code in catc_probe()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit d41149145f98fe26dcd0bfd1d6cc095e6e041418 upstream. Signed-off-by: Ben Hutchings Signed-off-by: David S. Miller --- drivers/net/usb/catc.c | 33 +

[PATCH 3.16 258/370] mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Keno Fischer commit 8310d48b125d19fcd9521d83b8293e63eb1646aa upstream. In commit 19be0eaffa3a ("mm: remove gup_flags FOLL_WRITE games from __get_user_pages()"), the mm code was changed from un

[PATCH 3.16 260/370] drm/i915: Don't leak edid in intel_crt_detect_ddc()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Ander Conselvan de Oliveira commit c34f078675f505c4437919bb1897b1351f16a050 upstream. In the path where intel_crt_detect_ddc() detects a CRT, if would return true without freeing the edid. Fi

[PATCH 3.16 218/370] ARM: ux500: fix prcmu_is_cpu_in_wfi() calculation

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit f0e8faa7a5e894b0fc99d24be1b18685a92ea466 upstream. This function clearly never worked and always returns true, as pointed out by gcc-7: arch/arm/mach-ux500/pm.c: In funct

[PATCH 3.16 145/370] PM / devfreq: Add proper locking around list_del()

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Axel Lin commit 0f376c9cd86c23f37312d37748b233660ef9d9af upstream. Use devfreq_list_lock around list_del() to prevent list corruption. Signed-off-by: Axel Lin Acked-by: MyungJoo Ham Signed-

[PATCH 3.16 263/370] ISDN: eicon: silence misleading array-bounds warning

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 950eabbd6ddedc1b08350b9169a6a51b130ebaaf upstream. With some gcc versions, we get a warning about the eicon driver, and that currently shows up as the only remaining warni

[PATCH 3.16 150/370] usb: xhci: fix possible wild pointer

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Lu Baolu commit 2b985467371a58ae44d76c7ba12b0951fee6ed98 upstream. handle_cmd_completion() frees a command structure which might be still referenced by xhci->current_cmd. This might cause prob

[PATCH 3.16 264/370] ARC: [arcompact] handle unaligned access delay slot corner case

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Vineet Gupta commit 9aed02feae57bf7a40cb04ea0e3017cb7a998db4 upstream. After emulating an unaligned access in delay slot of a branch, we pretend as the delay slot never happened - so return ba

[PATCH 3.16 262/370] nfs: Fix "Don't increment lock sequence ID after NFS4ERR_MOVED"

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Chuck Lever commit 406dab8450ec76eca88a1af2fc15d18a2b36ca49 upstream. Lock sequence IDs are bumped in decode_lock by calling nfs_increment_seqid(). nfs_increment_sequid() does not use the seqi

Re: kexec, x86/purgatory: Cleanup the unholy mess

2017-03-10 Thread Mike Galbraith
On Fri, 2017-03-10 at 13:17 +0100, Thomas Gleixner wrote: > The purgatory code defines global variables which are referenced via a > symbol lookup in the kexec code (core and arch). > > A recent commit addressing sparse warning made these static and thereby > broke kexec file. > > Why did this ha

[PATCH 3.16 229/370] clocksource/exynos_mct: Clear interrupt when cpu is shut down

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Joonyoung Shim commit bc7c36eedb0c7004aa06c2afc3c5385adada8fa3 upstream. When a CPU goes offline a potentially pending timer interrupt is not cleared. When the CPU comes online again then the

[PATCH 3.16 251/370] crypto: arm64/aes-blk - honour iv_out requirement in CBC and CTR modes

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Ard Biesheuvel commit 11e3b725cfc282efe9d4a354153e99d86a16af08 upstream. Update the ARMv8 Crypto Extensions and the plain NEON AES implementations in CBC and CTR modes to return the next IV ba

[PATCH 3.16 265/370] parisc: Don't use BITS_PER_LONG in userspace-exported swab.h header

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: Helge Deller commit 2ad5d52d42810bed95100a3d912679d8864421ec upstream. In swab.h the "#if BITS_PER_LONG > 32" breaks compiling userspace programs if BITS_PER_LONG is #defined by userspace with

[PATCH 3.16 249/370] iio: dht11: Use usleep_range instead of msleep for start signal

2017-03-10 Thread Ben Hutchings
3.16.42-rc1 review patch. If anyone has any objections, please let me know. -- From: John Brooks commit 5c113b5e0082e90d2e1c7b12e96a7b8cf0623e27 upstream. The DHT22 (AM2302) datasheet specifies that the LOW start pulse should not exceed 20ms. However, observations with an osci

<    5   6   7   8   9   10   11   12   13   14   >