[PATCH 4.10 061/129] x86/mpx: Re-add MPX to selftests Makefile

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Dave Hansen commit e64d5fbe56259c94df504af8ce804cfc6a022adb upstream. Ingo pointed out that the MPX tests were no longer in the selftests Makefile. It appears that I shot myself in the foot o

[PATCH 4.10 065/129] x86/platform/intel-mid: Correct MSI IRQ line for watchdog device

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Andy Shevchenko commit 80354c29025833acd72ddac1ffa21c6cb50128cd upstream. The interrupt line used for the watchdog is 12, according to the official Intel Edison BSP code. And indeed after fix

[PATCH 4.10 035/129] ARM: OMAP5 / DRA7: Fix HYP mode boot for thumb2 build

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Matthijs van Duin commit 448c077eeb02240c430db2a2c3bf5285a4c65d66 upstream. 'adr' yields a data-pointer, not a function-pointer. Fixes: 999f934de195 ("ARM: omap5/dra7xx: Enable booting second

[PATCH 4.10 036/129] ARM: OMAP3: Fix smartreflex platform data regression

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Tony Lindgren commit 179125085bd4ca70e8e028913193a93653bd12f7 upstream. Commit d9d9cec02835 ("ARM: OMAP2+: Remove legacy data from hwmod for omap3") dropped platform data that should no longer

[PATCH 4.10 029/129] arm64: Improve detection of user/non-user mappings in set_pte(_at)

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Catalin Marinas commit ec663d967b2276448a416406ca59ff247c0c80c5 upstream. Commit cab15ce604e5 ("arm64: Introduce execute-only page access permissions") allowed a valid user PTE to have the PTE

[PATCH 4.10 083/129] USB: serial: mct_u232: fix modem-status error handling

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 36356a669eddb32917fc4b5c2b9b8bf80ede69de upstream. Make sure to detect short control-message transfers so that errors are logged when reading the modem status at open. Not

[PATCH 4.10 087/129] clk: rockchip: add "," to mux_pll_src_apll_dpll_gpll_usb480m_p on rk3036

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Heiko Stuebner commit 9b1b23f03abdd25ffde8bbfe5824b89bc0448c28 upstream. The mux_pll_src_apll_dpll_gpll_usb480m_p parent list was missing a "," between the 3rd and 4th parent names, making the

[PATCH 4.10 091/129] scsi: qedi: fix build error without DEBUG_FS

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit bd571195c9535c0b074fc7cd1b541b93817ed647 upstream. Without CONFIG_DEBUG_FS, we run into a link error: drivers/scsi/qedi/qedi_iscsi.o: In function `qedi_ep_poll': qedi_isc

[PATCH 4.10 104/129] sparc64: fix fault handling in NGbzero.S and GENbzero.S

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Dave Aldridge commit 3c7f62212018b904ae17f5636ead18a4dca3a88f upstream. When any of the functions contained in NGbzero.S and GENbzero.S vector through *bzero_from_clear_user, we may end up tak

[PATCH 4.10 097/129] brcmfmac: Ensure pointer correctly set if skb data location changes

4.10-stable review patch. If anyone has any objections, please let me know. -- From: James Hughes commit 455a1eb4654c24560eb9dfc634f29cba3d87601e upstream. The incoming skb header may be resized if header space is insufficient, which might change the data adddress in the skb.

[PATCH 4.10 099/129] staging/lustre/llite: move root_squash from sysfs to debugfs

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Oleg Drokin commit 4c13990e35b9f053857d4ad83bf0f58e612ec414 upstream. root_squash control got accidentally moved to sysfs instead of debugfs, and the write side of it was also broken expecting

[PATCH 4.10 101/129] staging: emxx_udc: remove incorrect __init annotations

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 4f3445067d5f78fb8d1970b02610f85c2f377ea4 upstream. The probe function is not marked __init, but some other functions are. This leads to a warning on older compilers (e.g.

[PATCH 4.10 076/129] USB: serial: digi_acceleport: fix incomplete rx sanity check

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 1b0aed2b1600f6e5c7b9acfbd610a4e351ef5232 upstream. Make sure the received data has the required headers before parsing it. Also drop the redundant urb-status check, which

[PATCH 4.10 078/129] USB: serial: io_edgeport: fix epic-descriptor handling

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit e4457d9798adb96272468e93da663de9bd0a4198 upstream. Use a dedicated buffer for the DMA transfer and make sure to detect short transfers to avoid parsing a corrupt descriptor

[PATCH 4.10 070/129] usb: dwc2: host: use msleep() for long delay

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Nicholas Mc Guire commit d3fe81d2ccc41b355e494413115c0c7c18426fa1 upstream. ulseep_range() uses hrtimers and provides no advantage over msleep() for larger delays. Fix up the 100ms delays here

[PATCH 4.10 109/129] geneve: fix incorrect setting of UDP checksum flag

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Girish Moodalbail [ Upstream commit 5e0740c445e6ae4026f5e52456ff8d0be9725183 ] Creating a geneve link with 'udpcsum' set results in a creation of link for which UDP checksum will NOT be compu

[PATCH 4.10 108/129] net: macb: fix phy interrupt parsing

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Alexandre Belloni [ Upstream commit ae3696c167cc04d32634c4af82f43b446c5176b0 ] Since 83a77e9ec415, the phydev irq is explicitly set to PHY_POLL when there is no pdata. It doesn't work on DT e

[PATCH 4.10 129/129] block: get rid of blk_integrity_revalidate()

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Ilya Dryomov commit 19b7ccf8651df09d274671b53039c672a52ad84d upstream. Commit 25520d55cdb6 ("block: Inline blk_integrity in struct gendisk") introduced blk_integrity_revalidate(), which seems

[PATCH 4.10 126/129] drm/hisilicon/hibmc: Fix wrong pointer passed to PTR_ERR()

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Wei Yongjun commit bdf6f135973acb409b3ec5a6214fb597670a0bc0 upstream. PTR_ERR should access the value just tested by IS_ERR, otherwise the wrong error code will be returned. Fixes: d1667b8679

[PATCH 4.10 122/129] net: mdio-mux: bcm-iproc: call mdiobus_free() in error path

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Jon Mason [ Upstream commit 922c60e89d52730050c6ccca218bff40cc8bcd8e ] If an error is encountered in mdio_mux_init(), the error path will call mdiobus_free(). Since mdiobus_register() has be

[PATCH 4.9 012/103] powerpc: Correctly disable latent entropy GCC plugin on prom_init.o

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Andrew Donnellan commit eac6f8b0c7adb003776dbad9d037ee2fc64f9d62 upstream. Commit 38addce8b600 ("gcc-plugins: Add latent_entropy plugin") excludes certain powerpc early boot code from the laten

[PATCH 4.10 124/129] f2fs: sanity check segment count

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Jin Qian commit b9dd46188edc2f0d1f37328637860bb65a771124 upstream. F2FS uses 4 bytes to represent block address. As a result, supported size of disk is 16 TB and it equals to 16 * 1024 * 1024

[PATCH 4.10 117/129] rtnetlink: NUL-terminate IFLA_PHYS_PORT_NAME string

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Michal Schmidt [ Upstream commit 77ef033b687c3e030017c94a29bf6ea3aaaef678 ] IFLA_PHYS_PORT_NAME is a string attribute, so terminate it with \0. Otherwise libnl3 fails to validate netlink mess

[PATCH 4.9 010/103] powerpc/powernv: Fix opal_exit tracepoint opcode

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Michael Ellerman commit a7e0fb6c2029a780444d09560f739e020d54fe4d upstream. Currently the opal_exit tracepoint usually shows the opcode as 0: -0 [047] d.h. 635.654292: opal_entry: opcod

[PATCH 4.9 015/103] power: supply: bq24190_charger: Call set_mode_host() on pm_resume()

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Liam Breck commit e05ad7e0741ce0505e1df157c62b22b95172bb97 upstream. pm_resume() does a register_reset() which clears charger host mode. Fix by calling set_mode_host() after the reset. Fixes:

[PATCH 4.9 023/103] leds: ktd2692: avoid harmless maybe-uninitialized warning

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit cbe99c538d1776009e8710755bb6e726f7fffa9b upstream. gcc gets confused about the control flow in ktd2692_parse_dt(), causing it to warn about what seems like a potential bug:

[PATCH 4.9 013/103] perf/x86/intel/pt: Add format strings for PTWRITE and power event tracing

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Alexander Shishkin commit 5443624bedd0d23e112d5f2a919435182875bce9 upstream. Commit: 8ee83b2ab3 ("perf/x86/intel/pt: Add support for PTWRITE and power event tracing") forgot to add format

[PATCH 4.9 014/103] power: supply: bq24190_charger: Fix irq trigger to IRQF_TRIGGER_FALLING

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Liam Breck commit 767eee362fd72bb2ca44cc80419ca4b38c6d8369 upstream. The interrupt signal is TRIGGER_FALLING. This is is specified in the data sheet PIN FUNCTIONS: "The INT pin sends active low

[PATCH 4.9 003/103] hwmon: (it87) Fix pwm4 detection for IT8620 and IT8628

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Guenter Roeck commit d66777caa57ffade6061782f3a4d4056f0b0c1ac upstream. pwm4 is enabled if bit 2 of GPIO control register 4 is disabled, not when it is enabled. Since the check is for the skip

Re: [PATCH] sched/deadline: Zero out positive runtime after throttling constrained tasks

Hi, On 10/05/17 21:03, Xunlei Pang wrote: > When a contrained task is throttled by dl_check_constrained_dl(), > it may carry the remaining positive runtime, as a result when > dl_task_timer() fires and calls replenish_dl_entity(), it will > not be replenished correctly due to the positive dl_se->r

[PATCH 4.9 028/103] mwifiex: remove redundant dma padding in AMSDU

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Xinming Hu commit 5f0a221f59ad6b72202ef9c6e232086de8c336f2 upstream. We already ensure 64 bytes alignment and add padding if required during skb_aggr allocation. Alignment and padding in mwifi

[PATCH 4.9 026/103] ARM: dts: sun7i: lamobo-r1: Fix CPU port RGMII settings

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Florian Fainelli commit 0cdefd5b5485ee6eb3512a75739d09a4090176ed upstream. The CPU port of the BCM53125 is configured with RGMII (no delays) but this should actually be RGMII with transmit dela

[PATCH 4.9 031/103] iwlwifi: mvm: dont restart HW if suspend fails with unified image

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Luca Coelho commit bac453ab3745eaa64137ea6e77e009b45954f0ae upstream. For unified images, we shouldn't restart the HW if suspend fails. The only reason for restarting the HW with non-unified i

[PATCH 4.9 005/103] tmp: use pdev for parent device in tpm_chip_alloc

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Winkler, Tomas commit 2998b02b2fb58f36ccbc318b00513174e9947d8e upstream. The tpm stack uses pdev name convention for the parent device. Fix that also in tpm_chip_alloc(). Fixes: 3897cd9c8d1d (

[PATCH 4.9 033/103] iwlwifi: pcie: dont increment / decrement a bool

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Emmanuel Grumbach commit 04fa3e680b4dd2fdd11d0152fb9b6067e7aac140 upstream. David reported that the code I added uses the decrement and increment operator on a boolean variable. Fix that. Fix

[PATCH 4.9 046/103] clk: Make x86/ conditional on CONFIG_COMMON_CLK

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Pierre-Louis Bossart commit f35b6542c3ac3f28056d298348a81f7d56d3a041 upstream. Fix Makefile for x86 support, dependency on CONFIG_COMMON_CLK was not explicit Fixes: 701190fd7419 ('clk: x86: ad

[PATCH 4.9 047/103] kprobes/x86: Fix kernel panic when certain exception-handling addresses are probed

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Masami Hiramatsu commit 75013fb16f8484898eaa8d0b08fed942d790f029 upstream. Fix to the exception table entry check by using probed address instead of the address of copied instruction. This bug

[PATCH 4.9 055/103] usb: chipidea: Only read/write OTGSC from one place

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Stephen Boyd commit f60f8ccd54e03c1afafb2b20ceb029a0eaf7a134 upstream. With the id and vbus detection done via extcon we need to make sure we poll the status of OTGSC properly by considering wh

[PATCH 4.9 060/103] USB: serial: io_edgeport: fix epic-descriptor handling

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit e4457d9798adb96272468e93da663de9bd0a4198 upstream. Use a dedicated buffer for the DMA transfer and make sure to detect short transfers to avoid parsing a corrupt descriptor.

[PATCH 4.9 056/103] usb: chipidea: Handle extcon events properly

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Stephen Boyd commit a89b94b53371bbfa582787c2fa3378000ea4263d upstream. We're currently emulating the vbus and id interrupts in the OTGSC read API, but we also need to make sure that if we're ha

[PATCH 4.9 038/103] iwlwifi: mvm/pcie: adjust A-MSDU tx_cmd length in PCIe

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Johannes Berg commit 05e5a7e58d3f8f597ebe6f78aaa13a2656b78239 upstream. Instead of setting the tx_cmd length in the mvm code, which is complicated by the fact that DQA may want to temporarily s

[PATCH 4.9 066/103] USB: serial: io_edgeport: fix descriptor error handling

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 3c0e25d883d06a1fbd1ad35257e8abaa57befb37 upstream. Make sure to detect short control-message transfers and log an error when reading incomplete manufacturer and boot descrip

[PATCH 4.9 062/103] USB: serial: ark3116: fix open error handling

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit b631433b175f1002a31020e09bbfc2e5caecf290 upstream. Fix open error handling which failed to detect errors when reading the MSR and LSR registers, something which could lead t

[PATCH 4.9 036/103] iwlwifi: mvm: fix reorder timer re-arming

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Sara Sharon commit 5351f9ab254c30d41659924265f1ecd7b4758d9e upstream. When NSSN is behind the reorder buffer due to timeout the reorder timer isn't getting re-armed until NSSN catches up. Fix i

[PATCH 4.9 071/103] scsi: qla2xxx: Fix crash in qla2xxx_eh_abort on bad ptr

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Bill Kuzeja commit 5f7c2beef819d9ea2d1b814edf6f5981420e9cf8 upstream. After a Qlogic card breaks when initializing (test case), the system can crash in qla2xxx_eh_abort if processing anything b

[PATCH 4.9 087/103] tcp: fix wraparound issue in tcp_lp

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit a9f11f963a546fea9144f6a6d1a307e814a387e7 ] Be careful when comparing tcp_time_stamp to some u32 quantity, otherwise result can be surprising. Fixes: 7c106d7e782

[PATCH 4.9 083/103] macsec: dynamically allocate space for sglist

4.9-stable review patch. If anyone has any objections, please let me know. -- From: "Jason A. Donenfeld" [ Upstream commit 5294b83086cc1c35b4efeca03644cf9d12282e5b ] We call skb_cow_data, which is good anyway to ensure we can actually modify the skb as such (another error fro

[PATCH 4.9 081/103] ALSA: hda - Fix deadlock of controller device lock at unbinding

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit ab949d519601880fd46e8bc1445d6a453bf2dc09 upstream. Imre Deak reported a deadlock of HD-audio driver at unbinding while it's still in probing. Since we probe the codecs asyn

[PATCH 4.9 086/103] bpf, arm64: fix jit branch offset related to ldimm64

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann [ Upstream commit ddc665a4bb4b728b4e6ecec8db1b64efa9184b9c ] When the instruction right before the branch destination is a 64 bit load immediate, we currently calculate the wro

[PATCH 4.9 088/103] net: ipv6: Do not duplicate DAD on link up

4.9-stable review patch. If anyone has any objections, please let me know. -- From: David Ahern [ Upstream commit 6d717134a1a6e1b34a7d0d70e953037bc2642046 ] Andrey reported a warning triggered by the rcu code: [ cut here ] WARNING: CPU: 1 PID: 5911 at

[PATCH 4.9 093/103] ipv6: initialize route null entry in addrconf_init()

4.9-stable review patch. If anyone has any objections, please let me know. -- From: WANG Cong [ Upstream commit 2f460933f58eee3393aba64f0f6d14acb08d1724 ] Andrey reported a crash on init_net.ipv6.ip6_null_entry->rt6i_idev since it is always NULL. This is clearly wrong, we ha

[PATCH 4.9 095/103] bnxt_en: allocate enough space for ->ntp_fltr_bmap

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter [ Upstream commit ac45bd93a5035c2f39c9862b8b6ed692db0fdc87 ] We have the number of longs, but we need to calculate the number of bytes required. Fixes: c0c050c58d84 ("bnxt_en: N

[PATCH 4.9 091/103] ipv4, ipv6: ensure raw socket message is big enough to hold an IP header

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Alexander Potapenko [ Upstream commit 86f4c90a1c5c1493f07f2d12c1079f5bf01936f2 ] raw_send_hdrinc() and rawv6_send_hdrinc() expect that the buffer copied from the userspace contains the IPv4/IP

[PATCH 4.9 097/103] net: mdio-mux: bcm-iproc: call mdiobus_free() in error path

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Jon Mason [ Upstream commit 922c60e89d52730050c6ccca218bff40cc8bcd8e ] If an error is encountered in mdio_mux_init(), the error path will call mdiobus_free(). Since mdiobus_register() has bee

[PATCH 4.9 092/103] rtnetlink: NUL-terminate IFLA_PHYS_PORT_NAME string

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Michal Schmidt [ Upstream commit 77ef033b687c3e030017c94a29bf6ea3aaaef678 ] IFLA_PHYS_PORT_NAME is a string attribute, so terminate it with \0. Otherwise libnl3 fails to validate netlink messa

[PATCH 4.9 079/103] staging: wlan-ng: add missing byte order conversion

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Igor Pylypiv commit 2c474b8579e9b67ff72b2bcefce9f53c7f4469d4 upstream. Conversion macros le16_to_cpu was removed and that caused new sparse warning sparse output: drivers/staging/wlan-ng/p8021

[PATCH 4.9 094/103] ipv6: reorder ip6_route_dev_notifier after ipv6_dev_notf

4.9-stable review patch. If anyone has any objections, please let me know. -- From: WANG Cong [ Upstream commit 242d3a49a2a1a71d8eb9f953db1bcaa9d698ce00 ] For each netns (except init_net), we initialize its null entry in 3 places: 1) The template itself, as we use kmemdup()

[PATCH 4.4 20/60] x86/platform/intel-mid: Correct MSI IRQ line for watchdog device

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Andy Shevchenko commit 80354c29025833acd72ddac1ffa21c6cb50128cd upstream. The interrupt line used for the watchdog is 12, according to the official Intel Edison BSP code. And indeed after fixi

[PATCH 4.4 26/60] usb: chipidea: Only read/write OTGSC from one place

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Stephen Boyd commit f60f8ccd54e03c1afafb2b20ceb029a0eaf7a134 upstream. With the id and vbus detection done via extcon we need to make sure we poll the status of OTGSC properly by considering wh

[PATCH 4.4 24/60] usb: host: ehci-exynos: Decrese node refcount on exynos_ehci_get_phy() error paths

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Krzysztof Kozlowski commit 3f6026b1dcb3c8ee71198c485a72ac674c6890dd upstream. Returning from for_each_available_child_of_node() loop requires cleaning up node refcount. Error paths lacked it s

[PATCH 4.4 39/60] phy: qcom-usb-hs: Add depends on EXTCON

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Stephen Boyd commit 1a09b6a7c10e22c489a8b212dd6862b1fd9674ad upstream. We get the following compile errors if EXTCON is enabled as a module but this driver is builtin: drivers/built-in.o: In f

[PATCH 4.4 37/60] USB: serial: io_edgeport: fix descriptor error handling

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 3c0e25d883d06a1fbd1ad35257e8abaa57befb37 upstream. Make sure to detect short control-message transfers and log an error when reading incomplete manufacturer and boot descrip

[PATCH 4.4 42/60] scsi: scsi_dh_emc: return success in clariion_std_inquiry()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 4d7d39a18b8b81511f0b893b7d2203790bf8a58b upstream. We accidentally return an uninitialized variable on success. Fixes: b6ff1b14cdf4 ("[SCSI] scsi_dh: Update EMC handler")

[PATCH 4.4 46/60] staging: wlan-ng: add missing byte order conversion

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Igor Pylypiv commit 2c474b8579e9b67ff72b2bcefce9f53c7f4469d4 upstream. Conversion macros le16_to_cpu was removed and that caused new sparse warning sparse output: drivers/staging/wlan-ng/p8021

[PATCH 4.4 58/60] f2fs: sanity check segment count

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Jin Qian commit b9dd46188edc2f0d1f37328637860bb65a771124 upstream. F2FS uses 4 bytes to represent block address. As a result, supported size of disk is 16 TB and it equals to 16 * 1024 * 1024 /

[PATCH 4.4 52/60] tcp: do not inherit fastopen_req from parent

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 8b485ce69876c65db12ed390e7f9c0d2a64eff2c ] Under fuzzer stress, it is possible that a child gets a non NULL fastopen_req pointer from its parent at accept() time

[PATCH 4.4 51/60] tcp: fix wraparound issue in tcp_lp

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit a9f11f963a546fea9144f6a6d1a307e814a387e7 ] Be careful when comparing tcp_time_stamp to some u32 quantity, otherwise result can be surprising. Fixes: 7c106d7e782

[PATCH 4.4 34/60] USB: serial: ftdi_sio: fix latency-timer error handling

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit e3e574ad85a208cb179f33720bb5f12b453de33c upstream. Make sure to detect short responses when reading the latency timer to avoid using stale buffer data. Note that no heap da

[PATCH 4.4 31/60] USB: serial: io_edgeport: fix epic-descriptor handling

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit e4457d9798adb96272468e93da663de9bd0a4198 upstream. Use a dedicated buffer for the DMA transfer and make sure to detect short transfers to avoid parsing a corrupt descriptor.

[PATCH 4.4 48/60] ALSA: hda - Fix deadlock of controller device lock at unbinding

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit ab949d519601880fd46e8bc1445d6a453bf2dc09 upstream. Imre Deak reported a deadlock of HD-audio driver at unbinding while it's still in probing. Since we probe the codecs asyn

[PATCH 4.4 27/60] usb: chipidea: Handle extcon events properly

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Stephen Boyd commit a89b94b53371bbfa582787c2fa3378000ea4263d upstream. We're currently emulating the vbus and id interrupts in the OTGSC read API, but we also need to make sure that if we're ha

[PATCH 4.4 36/60] USB: serial: mct_u232: fix modem-status error handling

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 36356a669eddb32917fc4b5c2b9b8bf80ede69de upstream. Make sure to detect short control-message transfers so that errors are logged when reading the modem status at open. Note

[PATCH 4.4 33/60] USB: serial: ark3116: fix open error handling

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit b631433b175f1002a31020e09bbfc2e5caecf290 upstream. Fix open error handling which failed to detect errors when reading the MSR and LSR registers, something which could lead t

[PATCH 4.4 35/60] USB: serial: quatech2: fix control-message error handling

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 8c34cb8ddfe808d557b51da983ff10c02793beb2 upstream. Make sure to detect short control-message transfers when fetching modem and line state in open and when retrieving registe

Re: [PATCH] omapfb: Use devm_kcalloc() in vrfb_probe()

Hi, On Wednesday, April 26, 2017 11:20:07 AM SF Markus Elfring wrote: > From: Markus Elfring > Date: Wed, 26 Apr 2017 11:08:30 +0200 > > * A multiplication for the size determination of a memory allocation > indicated that an array data structure should be processed. > Thus use the correspo

[PATCH 4.4 60/60] block: get rid of blk_integrity_revalidate()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Ilya Dryomov commit 19b7ccf8651df09d274671b53039c672a52ad84d upstream. Commit 25520d55cdb6 ("block: Inline blk_integrity in struct gendisk") introduced blk_integrity_revalidate(), which seems t

[PATCH 4.4 32/60] USB: serial: ti_usb_3410_5052: fix control-message error handling

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 39712e8bfa8d3aa6ce1e60fc9d62c9b076c17a30 upstream. Make sure to detect and return an error on zero-length control-message transfers when reading from the device. This addre

[PATCH 4.4 57/60] bnxt_en: allocate enough space for ->ntp_fltr_bmap

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter [ Upstream commit ac45bd93a5035c2f39c9862b8b6ed692db0fdc87 ] We have the number of longs, but we need to calculate the number of bytes required. Fixes: c0c050c58d84 ("bnxt_en: N

[PATCH 4.4 30/60] USB: serial: ssu100: fix control-message error handling

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 1eac5c244f705182d1552a53e2f74e2775ed95d6 upstream. Make sure to detect short control-message transfers rather than continue with zero-initialised data when retrieving modem

[PATCH 4.4 56/60] ipv6: reorder ip6_route_dev_notifier after ipv6_dev_notf

4.4-stable review patch. If anyone has any objections, please let me know. -- From: WANG Cong [ Upstream commit 242d3a49a2a1a71d8eb9f953db1bcaa9d698ce00 ] For each netns (except init_net), we initialize its null entry in 3 places: 1) The template itself, as we use kmemdup()

[PATCH 4.4 53/60] ipv4, ipv6: ensure raw socket message is big enough to hold an IP header

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alexander Potapenko [ Upstream commit 86f4c90a1c5c1493f07f2d12c1079f5bf01936f2 ] raw_send_hdrinc() and rawv6_send_hdrinc() expect that the buffer copied from the userspace contains the IPv4/IP

[PATCH 4.4 55/60] ipv6: initialize route null entry in addrconf_init()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: WANG Cong [ Upstream commit 2f460933f58eee3393aba64f0f6d14acb08d1724 ] Andrey reported a crash on init_net.ipv6.ip6_null_entry->rt6i_idev since it is always NULL. This is clearly wrong, we ha

[PATCH 4.4 54/60] rtnetlink: NUL-terminate IFLA_PHYS_PORT_NAME string

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Michal Schmidt [ Upstream commit 77ef033b687c3e030017c94a29bf6ea3aaaef678 ] IFLA_PHYS_PORT_NAME is a string attribute, so terminate it with \0. Otherwise libnl3 fails to validate netlink messa

[PATCH 4.4 29/60] USB: serial: digi_acceleport: fix incomplete rx sanity check

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 1b0aed2b1600f6e5c7b9acfbd610a4e351ef5232 upstream. Make sure the received data has the required headers before parsing it. Also drop the redundant urb-status check, which h

[PATCH 4.4 50/60] bpf, arm64: fix jit branch offset related to ldimm64

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann [ Upstream commit ddc665a4bb4b728b4e6ecec8db1b64efa9184b9c ] When the instruction right before the branch destination is a 64 bit load immediate, we currently calculate the wro

[PATCH 4.4 47/60] staging: emxx_udc: remove incorrect __init annotations

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 4f3445067d5f78fb8d1970b02610f85c2f377ea4 upstream. The probe function is not marked __init, but some other functions are. This leads to a warning on older compilers (e.g. g

Re: [PATCH 07/14] Implement fsopen() to prepare for a mount

Sargun Dhillon wrote: > Instead of string based configuration, does it perhaps make sense to > pass in structured mount data? Something like: I don't think it helps particularly. > enum mount_command_id { > MOUNT_OPTION_STR, > MOUNT_SET_USER_NS > }; > > struct mount_attr { >__u64 c

Re: [PATCH] qed: fix uninitialized data in aRFS intrastructure

On Thu, May 11, 2017 at 4:03 PM, Mintz, Yuval wrote: >> register, which went subtly wrong due to the wrong size in a memset(): >> >> ethernet/qlogic/qed/qed_init_fw_funcs.c: In function >> 'qed_set_rfs_mode_disable': >> ethernet/qlogic/qed/qed_init_fw_funcs.c:993:3: error: '*((void >> *)&ramline+4

[PATCH 4.4 49/60] tcp: do not underestimate skb->truesize in tcp_trim_head()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 7162fb242cb8322beb558828fd26b33c3e9fc805 ] Andrey found a way to trigger the WARN_ON_ONCE(delta < len) in skb_try_coalesce() using syzkaller and a filter attache

[PATCH 4.4 40/60] serial: 8250_omap: Fix probe and remove for PM runtime

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Tony Lindgren commit 4e0f5cc65098ea32a1e77baae74215b9bd5276b1 upstream. Otherwise the interconnect related code implementing PM runtime will produce these errors on a failed probe: omap_uart 4

[PATCH 4.4 41/60] scsi: mac_scsi: Fix MAC_SCSI=m option when SCSI=m

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Finn Thain commit 2559a1ef688f933835912c731bed2254146a9b04 upstream. The mac_scsi driver still gets disabled when SCSI=m. This should have been fixed back when I enabled the tristate but I didn

[PATCH 4.4 45/60] brcmfmac: Make skb header writable before use

4.4-stable review patch. If anyone has any objections, please let me know. -- From: James Hughes commit 9cc4b7cb86cbcc6330a3faa8cd65268cd2d3c227 upstream. The driver was making changes to the skb_header without ensuring it was writable (i.e. uncloned). This patch also removes

[PATCH 4.4 43/60] MIPS: R2-on-R6 MULTU/MADDU/MSUBU emulation bugfix

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Leonid Yegoshin commit d65e5677ad5b3a49c43f60ec07644dc1f87bbd2e upstream. MIPS instructions MULTU, MADDU and MSUBU emulation requires registers HI/LO to be converted to signed 32bits before 64b

[PATCH 4.4 38/60] USB: serial: sierra: fix bogus alternate-setting assumption

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 16620b483eaf7750413bae472f4363b6b959fcaa upstream. Interface numbers do not change when enabling alternate settings as comment and code in this driver suggested. Remove the

[PATCH 4.4 44/60] brcmfmac: Ensure pointer correctly set if skb data location changes

4.4-stable review patch. If anyone has any objections, please let me know. -- From: James Hughes commit 455a1eb4654c24560eb9dfc634f29cba3d87601e upstream. The incoming skb header may be resized if header space is insufficient, which might change the data adddress in the skb. E

Re: [PATCH] gpio: mcp23s08: Use seq_putc() in mcp23s08_dbg_show()

On Mon, May 8, 2017 at 12:50 PM, SF Markus Elfring wrote: > From: Markus Elfring > Date: Mon, 8 May 2017 12:44:36 +0200 > > A single character (line break) should be put into a sequence. > Thus use the corresponding function "seq_putc". > > This issue was detected by using the Coccinelle softwar

Re: [PATCH v3 1/2] selinux: add brief info to policydb

On Thu, 2017-05-11 at 21:59 +0900, Sebastien Buisson wrote: > Add policybrief field to struct policydb. It holds a brief info > of the policydb, in the following form: > <0 or 1 for enforce>:<0 or 1 for checkreqprot>:= > Policy brief is computed every time the policy is loaded, and when > enforce o

[PATCH 4.4 28/60] USB: serial: keyspan_pda: fix receive sanity checks

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit c528fcb116e61afc379a2e0a0f70906b937f1e2c upstream. Make sure to check for short transfers before parsing the receive buffer to avoid acting on stale data. Fixes: 1da177e4c3

[PATCH 4.4 06/60] power: supply: bq24190_charger: Call set_mode_host() on pm_resume()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Liam Breck commit e05ad7e0741ce0505e1df157c62b22b95172bb97 upstream. pm_resume() does a register_reset() which clears charger host mode. Fix by calling set_mode_host() after the reset. Fixes:

[PATCH 4.4 00/60] 4.4.68-stable review

This is the start of the stable review cycle for the 4.4.68 release. There are 60 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat May 13 14:12:22 UTC 2017. Anything receive

<    1   2   3   4   5   6   7   8   9   10   >