[PATCH 4.12 102/196] f2fs: load inodes flag from disk

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Jaegeuk Kim commit 93607124c5450148e592c3d18ac533b4e5f25b8b upstream. This patch fixes missing inode flag loaded from disk, reported by Tom. [tom@localhost ~]$ sudo mount /dev/loop0 /mnt/ [to

[PATCH 4.12 098/196] ipmi: use rcu lock around call to intf->handlers->sender()

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Tony Camuso commit cdea46566bb21ce309725a024208322a409055cc upstream. A vendor with a system having more than 128 CPUs occasionally encounters the following crash during shutdown. This is not

[PATCH 4.12 100/196] xfs: Dont clear SGID when inheriting ACLs

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Jan Kara commit 8ba358756aa08414fa9e65a1a41d28304ed6fd7f upstream. When new directory 'DIR1' is created in a directory 'DIR0' with SGID bit set, DIR1 is expected to have SGID bit set (and owni

[PATCH 4.12 080/196] tools/testing/nvdimm: fix nfit_test buffer overflow

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Yasunori Goto commit a117699c6c4a4b1b4e90ed51e393590986567cb4 upstream. The root cause of panic is the num_pm of nfit_test1 is wrong. Though 1 is specified for num_pm at nfit_test_init(), it m

[PATCH 4.12 083/196] libnvdimm: fix badblock range handling of ARS range

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Toshi Kani commit 4e3f0701f25ab194c5362576b1146a1e6cc6c2e7 upstream. __add_badblock_range() does not account sector alignment when it sets 'num_sectors'. Therefore, an ARS error record range

[PATCH 4.12 067/196] xhci: Fix NULL pointer dereference when cleaning up streams for removed host

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Mathias Nyman commit 4b895868bb2da60a386a17cde3bf9ecbc70c79f4 upstream. This off by one in stream_id indexing caused NULL pointer dereference and soft lockup on machines with USB attached SCSI

[PATCH 4.12 066/196] xhci: fix 20000ms port resume timeout

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Mathias Nyman commit a54408d0a004757789863d74e29c2297edae0b4d upstream. A uncleared PLC (port link change) bit will prevent furuther port event interrupts for that port. Leaving it uncleared c

[PATCH 4.12 088/196] drm/amdgpu/gfx8: drop per-APU CU limits

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 943c05bdb53da273c43ec44eec37c6a70409b5e9 upstream. Always use the max for the family rather than the per sku limits. This makes sure the mask is always the max size to avoi

[PATCH 4.12 082/196] libnvdimm: fix the clear-error check in nsio_rw_bytes

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Vishal Verma commit 7e5a21dfe5524a85705d3bc7b540c849cc13e9a1 upstream. A leftover from the 'bandaid' fix that disabled BTT error clearing in rw_bytes resulted in an incorrect check. After we c

[PATCH 4.12 087/196] s390/syscalls: Fix out of bounds arguments access

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Jiri Olsa commit c46fc0424ced3fb71208e72bd597d91b9169a781 upstream. Zorro reported following crash while having enabled syscall tracing (CONFIG_FTRACE_SYSCALLS): Unable to handle kernel poi

[PATCH 4.12 081/196] libnvdimm, btt: fix btt_rw_page not returning errors

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Vishal Verma commit c13c43d54f2c6a3be1c675766778ac1ad8dfbfcc upstream. btt_rw_page was not propagating errors frm btt_do_bvec, resulting in any IO errors via the rw_page path going unnoticed.

[PATCH 4.12 086/196] Raid5 should update rdev->sectors after reshape

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Xiao Ni commit b5d27718f38843a74552e9a93d32e2391fd3999f upstream. The raid5 md device is created by the disks which we don't use the total size. For example, the size of the device is 5G and

[PATCH 4.12 085/196] dm raid: stop using BUG() in __rdev_sectors()

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Heinz Mauelshagen commit 4d49f1b4a1fcab16b6dd1c79ef14f2b6531d50a6 upstream. Return 0 rather than BUG() if __rdev_sectors() fails and catch invalid rdev size in the constructor. Reported-by: H

[PATCH 4.12 084/196] ext2: Dont clear SGID when inheriting ACLs

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Jan Kara commit a992f2d38e4ce17b8c7d1f7f67b2de0eebdea069 upstream. When new directory 'DIR1' is created in a directory 'DIR0' with SGID bit set, DIR1 is expected to have SGID bit set (and owni

[PATCH 4.12 075/196] md: dont use flush_signals in userspace processes

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka commit f9c79bc05a2a91f4fba8bfd653579e066714b1ec upstream. The function flush_signals clears all pending signals for the process. It may be used by kernel threads when we need t

[PATCH 4.12 078/196] [media] cx88: Fix regression in initial video standard setting

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Devin Heitmueller commit 4e0973a918b9a42e217093f078e04a61e5dd95a5 upstream. Setting initial standard at the top of cx8800_initdev would cause the first call to cx88_set_tvnorm() to return with

[PATCH 4.12 036/196] ASoC: compress: Derive substream from stream based on direction

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Satish Babu Patakokila commit 01b8cedfd0422326caae308641dcadaa85e0ca72 upstream. Currently compress driver hardcodes direction as playback to get substream from the stream. This results in get

[PATCH 4.12 076/196] md: fix deadlock between mddev_suspend() and md_write_start()

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: NeilBrown commit cc27b0c78c79680d128dbac79de0d40556d041bb upstream. If mddev_suspend() races with md_write_start() we can deadlock with mddev_suspend() waiting for the request that is currentl

[PATCH 4.12 074/196] HID: multitouch: do not blindly set EV_KEY or EV_ABS bits

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Torokhov commit 4cf56a89c696e66d10612b43b7e95852611e76c2 upstream. Now that input core insists on having dev->absinfo when device claims to generate EV_ABS in its dev->evbit, we should

[PATCH 4.12 053/196] powerpc: Fix emulation of mcrf in emulate_step()

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Anton Blanchard commit 87c4b83e0fe234a1f0eed131ab6fa232036860d5 upstream. The mcrf emulation code was using the CR field number directly as the shift value, without taking into account that CR

[PATCH 4.12 063/196] PCI/MSI: Ignore affinity if pre/post vector count is more than min_vecs

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Michael Hernandez commit 6f9a22bc5775d231ab8fbe2c2f3c88e45e3e7c28 upstream. min_vecs is the minimum amount of vectors needed to operate in MSI-X mode which may just include the vectors that do

[PATCH 4.12 065/196] xhci: fix memleak in xhci_run()

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Shu Wang commit d6f5f071f1e13cadecf8aef1faa7e5d6fbc9f33b upstream. Found this issue by kmemleak. xhci_run() did not check return val and free command for xhci_queue_vendor_command() unreferen

[PATCH 4.12 062/196] PCI/PM: Restore the status of PCI devices across hibernation

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Chen Yu commit e60514bd4485c0c7c5a7cf779b200ce0b95c70d6 upstream. Currently we saw a lot of "No irq handler" errors during hibernation, which caused the system hang finally: ata4.00: qc tim

[PATCH 4.12 061/196] PCI: rockchip: Use normal register bank for config accessors

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Shawn Lin commit dc8cca5ef25ac4cb0dfc37467521a759767ff361 upstream. Rockchip's RC has two banks of registers for the root port: a normal bank that is strictly compatible with the PCIe spec, an

[PATCH 4.12 052/196] powerpc/64: Fix atomic64_inc_not_zero() to return an int

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Michael Ellerman commit 01e6a61aceb82e13bec29502a8eb70d9574f97ad upstream. Although it's not documented anywhere, there is an expectation that atomic64_inc_not_zero() returns a result which fi

[PATCH 4.12 060/196] PCI: Work around poweroff & suspend-to-RAM issue on Macbook Pro 11

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Bjorn Helgaas commit 13cfc732160f7bc7e596128ce34cda361c556966 upstream. Neither soft poweroff (transition to ACPI power state S5) nor suspend-to-RAM (transition to state S3) works on the Macbo

[PATCH 4.12 058/196] xen/x86: fix cpu hotplug

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Juergen Gross commit c185ddec54657c145a0c2055e4b87918da24974f upstream. Commit dc6416f1d711eb4c1726e845d653235dcaae12e1 ("xen/x86: Call cpu_startup_entry(CPUHP_AP_ONLINE_IDLE) from xen_play_de

[PATCH 4.12 051/196] powerpc/mm/radix: Fix execute permissions for interrupt_vectors

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Balbir Singh commit 7f6d498ed3354740cfd100e4aa99e388f1a95be7 upstream. Commit 9abcc981de97 ("powerpc/mm/radix: Only add X for pages overlapping kernel text") changed the linear mapping on Radi

[PATCH 4.12 059/196] PCI: vmd: Move SRCU cleanup after bus, child device removal

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Jon Derrick commit 0cb259c47a4df466d641c1f07ae3eccaa9ba3ccb upstream. Recent __call_srcu() changes have exposed that we need to cleanup SRCU structures after pci_stop_root_bus() calls into vmd

[PATCH 4.12 057/196] powerpc/perf: Fix SDAR_MODE value for continous sampling on Power9

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Madhavan Srinivasan commit 20dd4c624d25156d5ec3345bbb690b98175ef879 upstream. In case of continous sampling (non-marked), the code currently sets MMCRA[SDAR_MODE] to 0b01 (Update on TLB miss)

[PATCH 4.12 050/196] powerpc/pseries: Fix passing of pp0 in updatepp() and updateboltedpp()

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Balbir Singh commit e71ff982ae4c17d176e9f0132157d54973788377 upstream. Once upon a time there were only two PP (page protection) bits. In ISA 2.03 an additional PP bit was added, but because o

[PATCH 4.12 055/196] powerpc/asm: Mark cr0 as clobbered in mftb()

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Oliver O'Halloran commit 2400fd822f467cb4c886c879d8ad99feac9cf319 upstream. The workaround for the CELL timebase bug does not correctly mark cr0 as being clobbered. This means GCC doesn't know

Re: [PATCH 1/3] arm/syscalls: Move address limit check in loop

2017-07-25 Thread Thomas Garnier
On Tue, Jul 25, 2017 at 3:38 AM, Russell King - ARM Linux wrote: > On Tue, Jul 25, 2017 at 01:28:01PM +0300, Leonard Crestez wrote: >> On Mon, 2017-07-24 at 10:07 -0700, Thomas Garnier wrote: >> > On Wed, Jul 19, 2017 at 10:58 AM, Thomas Garnier > > > wrote: >> > > >> > > The work pending loop can

[PATCH 4.12 056/196] powerpc/mm/radix: Properly clear process table entry

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Benjamin Herrenschmidt commit c6bb0b8d426a8cf865ca9c8a532cc3a2927cfceb upstream. On radix, the process table entry we want to clear when destroying a context is entry 0, not entry 1. This has

[PATCH 4.12 054/196] powerpc: Fix emulation of mfocrf in emulate_step()

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Anton Blanchard commit 64e756c55aa46fc18fd53e8f3598b73b528d8637 upstream. >From POWER4 onwards, mfocrf() only places the specified CR field into the destination GPR, and the rest of it is set

[PATCH 4.12 049/196] powerpc/mm/radix: Only add X for pages overlapping kernel text

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Michael Ellerman commit 9abcc981de9775659a0f6e4a52a3448ea72e59da upstream. Currently we map the whole linear mapping with PAGE_KERNEL_X. Instead we should check if the page overlaps the kernel

[PATCH 4.12 043/196] scsi: qla2xxx: Allow ABTS, PURX, RIDA on ATIOQ for ISP83XX/27XX

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Quinn Tran commit 3c4810ffdc8e4f34d387f59baf0abefcfa4ada6a upstream. Driver added mechanism to move ABTS/PUREX/RIDA mailbox to ATIO queue as part of commit id 41dc529a4602ac737020f423f84686a81

Re: [PATCH V2 net-next 01/21] net-next/hinic: Initialize hw interface

2017-07-25 Thread Francois Romieu
Aviad Krawczyk : [...] > module_pci_driver - is not used in other drivers in the same segments, it > is necessary ? /me checks... Ok, there seems to be some overenthusiastic copy'paste. See drivers/net/ethernet/intel/ixgb/ixgb_main.c: [...] /** * ixgb_init_module - Driver Registration Routine

[PATCH 4.12 047/196] xen/scsiback: Fix a TMR related use-after-free

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Bart Van Assche commit 9f4ab18ac51dc87345a9cbd2527e6acf7a0a9335 upstream. scsiback_release_cmd() must not dereference se_cmd->se_tmr_req because that memory is freed by target_free_cmd_mem() b

[PATCH 4.12 048/196] scsi: virtio_scsi: always read VPD pages for multiqueue too

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Paolo Bonzini commit a680f1d463aeaeb00d22af257a56e111967c2f18 upstream. Multi-queue virtio-scsi uses a different scsi_host_template struct. Add the .device_alloc field there, too. Fixes: 25d

[PATCH 4.12 046/196] iscsi-target: Add login_keys_workaround attribute for non RFC initiators

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Nicholas Bellinger commit 138d351eefb727ab9e41a3dc5f112ceb4f6e59f2 upstream. This patch re-introduces part of a long standing login workaround that was recently dropped by: commit 1c99de981

[PATCH 4.12 027/196] wlcore: fix 64K page support

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 4a4274bf2dbbd1c7a45be0c89a1687c9d2eef4a0 upstream. In the stable linux-3.16 branch, I ran into a warning in the wlcore driver: drivers/net/wireless/ti/wlcore/spi.c: In fu

[PATCH 4.12 045/196] scsi: Avoid that scsi_exit_rq() triggers a use-after-free

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Bart Van Assche commit 8e6882545d8c06f99e9e117741cc87f3338b0bef upstream. Dereferencing shost from scsi_exit_rq() is not safe because the SCSI host may already have been freed when scsi_exit_r

[PATCH 4.12 037/196] ASoC: atmel: tse850: fix off-by-one in the "ANA" enumeration count

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Peter Rosin commit a00cebf51d5ceed8ba9f6fac5fb189b38cd5a7c2 upstream. At some point I added the "Low" entry at the beginning of the array without bumping the enumeration count from 9 to 10. Fi

[PATCH 4.12 044/196] scsi: Add STARGET_CREATED_REMOVE state to scsi_target_state

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Ewan D. Milne commit f9279c968c257ee39b0d7bd2571a4d231a67bcc1 upstream. The addition of the STARGET_REMOVE state had the side effect of introducing a race condition that can cause a crash. sc

[PATCH 4.12 042/196] scsi: virtio_scsi: let host do exception handling

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Paolo Bonzini commit e72c9a2a67a6400c8ef3d01d4c461dbbbfa0e1f0 upstream. virtio_scsi tries to do exception handling after the default 30 seconds timeout expires. However, it's better to let th

[PATCH 4.12 041/196] scsi: ses: do not add a device to an enclosure if enclosure_add_links() fails.

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Maurizio Lombardi commit 62e62ffd95539b9220894a7900a619e0f3ef4756 upstream. The enclosure_add_device() function should fail if it can't create the relevant sysfs links. Signed-off-by: Maurizi

[PATCH 4.12 039/196] PM / Domains: Fix unsafe iteration over modified list of domain providers

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Krzysztof Kozlowski commit b556b15dc04e9b9b98790f04c21acf5e24f994b2 upstream. of_genpd_del_provider() iterates over list of domain provides and removes matching element thus it has to use safe

[PATCH 4.12 040/196] PM / Domains: Fix unsafe iteration over modified list of domains

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Krzysztof Kozlowski commit a7e2d1bce4c1db471f1cbc0c4666a3112bbf0994 upstream. of_genpd_remove_last() iterates over list of domains and removes matching element thus it has to use safe version

[PATCH 4.12 034/196] spi: atmel: fix corrupted data issue on SAM9 family SoCs

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Cyrille Pitchen commit 7094576ccdc3acfe1e06a1e2ab547add375baf7f upstream. This patch disables the use of the DMA for data transfer and forces the use of PIO transfers instead as a quick fixup

[PATCH 4.12 038/196] PM / Domains: Fix unsafe iteration over modified list of device links

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Krzysztof Kozlowski commit c6e83cac3eda5f7dd32ee1453df2f7abb5c6cd46 upstream. pm_genpd_remove_subdomain() iterates over domain's master_links list and removes matching element thus it has to u

[PATCH 4.12 033/196] igb: Explicitly select page 0 at initialization

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Matwey V Kornilov commit 440aeca4b9858248d8f16d724d9fa87a4f65fa33 upstream. The functions igb_read_phy_reg_gs40g/igb_write_phy_reg_gs40g (which were removed in 2a3cdea) explicitly selected the

[PATCH 4.12 031/196] btrfs: Dont clear SGID when inheriting ACLs

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Jan Kara commit b7f8a09f8097db776b8d160862540e4fc1f51296 upstream. When new directory 'DIR1' is created in a directory 'DIR0' with SGID bit set, DIR1 is expected to have SGID bit set (and owni

[PATCH 4.12 032/196] Btrfs: incremental send, fix invalid memory access

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Filipe Manana commit 24e52b11e0ca788513b945a87b57cc0522a92933 upstream. When doing an incremental send, while processing an extent that changed between the parent and send snapshots and that e

[PATCH 4.12 004/196] thermal: max77620: fix device-node reference imbalance

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit c592fafbdbb6b1279b76a54722d1465ca77e5bde upstream. The thermal child device reuses the parent MFD-device device-tree node when registering a thermal zone, but did not take

[PATCH 4.12 030/196] Btrfs: fix invalid extent maps due to hole punching

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Filipe Manana commit 609805d809733d0c669f21f710bdac308cc63cba upstream. While punching a hole in a range that is not aligned with the sector size (currently the same as the page size) we can e

[PATCH 4.12 028/196] pstore: Dont warn if data is uncompressed and type is not PSTORE_TYPE_DMESG

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Ankit Kumar commit 4a16d1cb245c56e72fd40a28f3cdb394cde4b341 upstream. commit 9abd3d5f ("pstore: Extract common arguments into structure") moved record decompression to function. decompress

[PATCH 4.12 009/196] iwlwifi: mvm: fix the recovery flow while connecting

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Emmanuel Grumbach commit 6b28f9784c394f0692e160f81b07c82cb64af160 upstream. In BSS mode in the disconnection flow, mac80211 removes the AP station before the vif is set to unassociated. Our fi

[PATCH 4.12 026/196] Bluetooth: use constant time memory comparison for secret values

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Jason A. Donenfeld commit 329d82309824ff1082dc4a91a5bbed8c3bec1580 upstream. This file is filled with complex cryptography. Thus, the comparisons of MACs and secret keys and curve points and s

[PATCH 4.12 008/196] ath9k: fix an invalid pointer dereference in ath9k_rng_stop()

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Miaoqing Pan commit 07246c115801c27652700e3679bb58661ef7ed65 upstream. The bug was triggered when do suspend/resuming continuously on Dell XPS L322X/0PJHXN version 9333 (2013) with kernel 4.12

[PATCH 4.12 007/196] ath9k: fix tx99 bus error

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Miaoqing Pan commit bde717ab473668377fc65872398a102d40cb2d58 upstream. The hard coded register 0x9864 and 0x9924 are invalid for ar9300 chips. Signed-off-by: Miaoqing Pan Signed-off-by: Kall

[PATCH 4.12 006/196] ath9k: fix tx99 use after free

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Miaoqing Pan commit cf8ce1ea61b75712a154c93e40f2a5af2e4dd997 upstream. One scenario that could lead to UAF is two threads writing simultaneously to the "tx99" debug file. One of them would set

[PATCH 4.12 003/196] [media] s5p-jpeg: dont return a random width/height

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Mauro Carvalho Chehab commit a16e37726c444cbda91e73ed5f742e717bfe866f upstream. Gcc 7.1 complains about: drivers/media/platform/s5p-jpeg/jpeg-core.c: In function 's5p_jpeg_parse_hdr.isra.9':

[PATCH 4.12 017/196] NFC: Add sockaddr length checks before accessing sa_family in bind handlers

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Mateusz Jurczyk commit f6a5885fc4d68e7f25ffb42b9d8d80aebb3bacbb upstream. Verify that the caller-provided sockaddr structure is large enough to contain the sa_family field, before accessing it

Re: [PATCH v1 02/13] xen/pvcalls: connect to the backend

2017-07-25 Thread Stefano Stabellini
On Mon, 24 Jul 2017, Juergen Gross wrote: > On 22/07/17 02:11, Stefano Stabellini wrote: > > Implement the probe function for the pvcalls frontend. Read the > > supported versions, max-page-order and function-calls nodes from > > xenstore. > > > > Introduce a data structure named pvcalls_bedata. I

[PATCH 4.12 025/196] perf intel-pt: Clear FUP flag on error

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Adrian Hunter commit 6a558f12dbe85437acbdec5e149ea07b5554eced upstream. Sometimes a FUP packet is associated with a TSX transaction and a flag is set to indicate that. Ensure that flag is clea

[PATCH 4.12 005/196] thermal: cpu_cooling: Avoid accessing potentially freed structures

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Viresh Kumar commit 289d72afddf83440117c35d864bf0c6309c1d011 upstream. After the lock is dropped, it is possible that the cpufreq_dev gets freed before we call get_level() and that can cause k

[PATCH 4.12 024/196] perf intel-pt: Use FUP always when scanning for an IP

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Adrian Hunter commit 622b7a47b843c78626f40c1d1aeef8483383fba2 upstream. The decoder will try to use branch packets to find an IP to start decoding or to recover from errors. Currently the FUP

[PATCH 4.12 001/196] disable new gcc-7.1.1 warnings for now

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit bd664f6b3e376a8ef4990f87d08271cc2d01ba9a upstream. I made the mistake of upgrading my desktop to the new Fedora 26 that comes with gcc-7.1.1. There's nothing wrong per s

[PATCH 4.12 022/196] perf intel-pt: Fix last_ip usage

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Adrian Hunter commit ee14ac0ef6827cd6f9a572cc83dd0191ea17812c upstream. Intel PT uses IP compression based on the last IP. For decoding purposes, 'last IP' is considered to be reset to zero wh

[PATCH 4.12 023/196] perf intel-pt: Ensure never to set last_ip when packet count is zero

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Adrian Hunter commit f952eaceb089b691eba7c4e13686e742a8f26bf5 upstream. Intel PT uses IP compression based on the last IP. For decoding purposes, 'last IP' is not updated when a branch target

[PATCH 4.12 021/196] perf intel-pt: Ensure IP is zero when state is INTEL_PT_STATE_NO_IP

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Adrian Hunter commit ad7167a8cd174ba7d8c0d0ed8d8410521206d104 upstream. A value of zero is used to indicate that there is no IP. Ensure the value is zero when the state is INTEL_PT_STATE_NO_IP

Re: [RFC PATCH 1/5] ima: extend clone() with IMA namespace support

2017-07-25 Thread Stefan Berger
On 07/25/2017 03:48 PM, Mimi Zohar wrote: On Tue, 2017-07-25 at 12:08 -0700, James Bottomley wrote: On Tue, 2017-07-25 at 14:04 -0500, Serge E. Hallyn wrote: On Tue, Jul 25, 2017 at 11:49:14AM -0700, James Bottomley wrote: On Tue, 2017-07-25 at 12:53 -0500, Serge E. Hallyn wrote: On Thu, Jul

[PATCH 4.12 020/196] perf intel-pt: Fix missing stack clear

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Adrian Hunter commit 12b7080609097753fd8198cc1daf589be3ec1cca upstream. The return compression stack must be cleared whenever there is a PSB. Fix one case where that was not happening. Signed

[PATCH 4.12 013/196] NFC: nfcmrvl: use nfc-device for firmware download

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit e5834ac22948169bbd7c45996d8d4905edd20f5e upstream. Use the nfc- rather than phy-device in firmware-management code that needs a valid struct device. This specifically fixe

[PATCH 4.12 002/196] [media] ir-core: fix gcc-7 warning on bool arithmetic

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit bd7e31bbade02bc1e92aa00d5cf2cee2da66838a upstream. gcc-7 suggests that an expression using a bitwise not and a bitmask on a 'bool' variable is better written using boolean

[PATCH 4.12 019/196] perf intel-pt: Improve sample timestamp

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Adrian Hunter commit 3f04d98e972b59706bd43d6cc75efac91f8fba50 upstream. The decoder uses its current timestamp in samples. Usually that is a timestamp that has already passed, but in some case

[PATCH 4.12 010/196] NFC: fix broken device allocation

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 20777bc57c346b6994f465e0d8261a7fbf213a09 upstream. Commit 7eda8b8e9677 ("NFC: Use IDR library to assing NFC devices IDs") moved device-id allocation and struct-device initi

[PATCH 4.12 018/196] perf intel-pt: Move decoder error setting into one condition

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Adrian Hunter commit 22c06892332d8916115525145b78e606e9cc6492 upstream. Move decoder error setting into one condition. Cc'ed to stable because later fixes depend on it. Signed-off-by: Adrian

[PATCH 4.12 011/196] NFC: nfcmrvl_uart: add missing tty-device sanity check

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 15e0c59f1535926a939d1df66d6edcf997d7c1b9 upstream. Make sure to check the tty-device pointer before trying to access the parent device to avoid dereferencing a NULL-pointer

[PATCH 4.12 016/196] nfc: Fix the sockaddr length sanitization in llcp_sock_connect

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Mateusz Jurczyk commit 608c4adfcabab220142ee335a2a003ccd1c0b25b upstream. Fix the sockaddr length verification in the connect() handler of NFC/LLCP sockets, to compare against the size of the

[PATCH 4.12 015/196] nfc: Ensure presence of required attributes in the activate_target handler

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Mateusz Jurczyk commit a0323b979f81ad2deb2c8836eab506534891876a upstream. Check that the NFC_ATTR_TARGET_INDEX and NFC_ATTR_PROTOCOLS attributes (in addition to NFC_ATTR_DEVICE_INDEX) are prov

[PATCH 4.12 012/196] NFC: nfcmrvl: do not use device-managed resources

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 0cbe40112f42cf5e008f9127f6cd5952ba3946c7 upstream. This specifically fixes resource leaks in the registration error paths. Device-managed resources is a bad fit for this d

[PATCH 4.12 014/196] NFC: nfcmrvl: fix firmware-management initialisation

2017-07-25 Thread Greg Kroah-Hartman
4.12-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 45dd39b974f663dd5cdcbea7358a077ab0b0 upstream. The nci-device was never deregistered in the event that fw-initialisation failed. Fix this by moving the firmware initia

[PATCH 4.9 101/125] NFS: only invalidate dentrys that are clearly invalid.

2017-07-25 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: NeilBrown commit cc89684c9a265828ce061037f1f79f4a68ccd3f7 upstream. Since commit bafc9b754f75 ("vfs: More precise tests in d_invalidate") in v3.18, a return of '0' from ->d_revalidate() will ca

[PATCH 4.12 000/196] 4.12.4-stable review

2017-07-25 Thread Greg Kroah-Hartman
This is the start of the stable review cycle for the 4.12.4 release. There are 196 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu Jul 27 19:20:09 UTC 2017. Anything receiv

[PATCH 4.9 124/125] tracing: Fix kmemleak in instance_rmdir

2017-07-25 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Chunyu Hu commit db9108e054700c96322b0f0028546aa4e643cf0b upstream. Hit the kmemleak when executing instance_rmdir, it forgot releasing mem of tracing_cpumask. With this fix, the warn does not

[PATCH 4.9 097/125] Input: i8042 - fix crash at boot time

2017-07-25 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Chen Hong commit 340d394a789518018f834ff70f7534fc463d3226 upstream. The driver checks port->exists twice in i8042_interrupt(), first when trying to assign temporary "serio" variable, and second

Re: [RFC PATCH 2/5] ima: Add ns_status for storing namespaced iint data

2017-07-25 Thread Mimi Zohar
On Tue, 2017-07-25 at 14:43 -0500, Serge E. Hallyn wrote: > ... > > +static void free_ns_status_cache(struct ima_namespace *ns) > > +{ > > + struct ns_status *status, *next; > > + > > + write_lock(&ns->ns_status_lock); > > + rbtree_postorder_for_each_entry_safe(status, next, > > +

[PATCH 4.9 123/125] PM / Domains: defer dev_pm_domain_set() until genpd->attach_dev succeeds if present

2017-07-25 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Sudeep Holla commit 975e83cfb8dc16e7a2fdc58188c77c0c605876c2 upstream. If the genpd->attach_dev or genpd->power_on fails, genpd_dev_pm_attach may return -EPROBE_DEFER initially. However genpd_a

[PATCH 4.9 100/125] sunrpc: use constant time memory comparison for mac

2017-07-25 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Jason A. Donenfeld commit 15a8b93fd5690de017ce665382ea45e5d61811a4 upstream. Otherwise, we enable a MAC forgery via timing attack. Signed-off-by: Jason A. Donenfeld Cc: "J. Bruce Fields" Cc:

[PATCH 4.9 125/125] alarmtimer: dont rate limit one-shot timers

2017-07-25 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Greg Hackmann Commit ff86bf0c65f1 ("alarmtimer: Rate limit periodic intervals") sets a minimum bound on the alarm timer interval. This minimum bound shouldn't be applied if the interval is 0.

[PATCH 4.9 117/125] hfsplus: Dont clear SGID when inheriting ACLs

2017-07-25 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Jan Kara commit 84969465ddc4f8aeb3b993123b571aa01c5f2683 upstream. When new directory 'DIR1' is created in a directory 'DIR0' with SGID bit set, DIR1 is expected to have SGID bit set (and ownin

[PATCH 4.9 096/125] MIPS: Fix a typo: s/preset/present/ in r2-to-r6 emulation error message

2017-07-25 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Maciej W. Rozycki commit 27fe2200dad2de8207a694024a7b9037dff1b280 upstream. This is a user-visible message, so we want it to be spelled correctly. Fixes: 5f9f41c474be ("MIPS: kernel: Prepare t

[PATCH 4.9 122/125] reiserfs: Dont clear SGID when inheriting ACLs

2017-07-25 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Jan Kara commit 6883cd7f68245e43e91e5ee583b7550abf14523f upstream. When new directory 'DIR1' is created in a directory 'DIR0' with SGID bit set, DIR1 is expected to have SGID bit set (and ownin

[PATCH 4.9 106/125] Revert "perf/core: Drop kernel samples even though :u is specified"

2017-07-25 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Ingo Molnar commit 6a8a75f3235724c5941a33e287b2f98966ad14c5 upstream. This reverts commit cc1582c231ea041fbc68861dfaf957eaf902b829. This commit introduced a regression that broke rr-project, w

[PATCH 4.9 121/125] spmi: Include OF based modalias in device uevent

2017-07-25 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Bjorn Andersson commit d50daa2af2618dab6d21634e65a5fbcf4ae437d6 upstream. Include the OF-based modalias in the uevent sent when registering SPMI devices, so that user space has a chance to auto

[PATCH 4.9 120/125] of: device: Export of_device_{get_modalias, uvent_modalias} to modules

2017-07-25 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Stephen Boyd commit 7a3b7cd332db08546f3cdd984f11773e0d1999e7 upstream. The ULPI bus can be built as a module, and it will soon be calling these functions when it supports probing devices from D

[PATCH 4.9 109/125] staging: sm750fb: avoid conflicting vesafb

2017-07-25 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Teddy Wang commit 740c433ec35187b45abe08bb6c45a321a791be8e upstream. If vesafb is enabled in the config then /dev/fb0 is created by vesa and this sm750 driver gets fb1, fb2. But we need to be f

[PATCH 4.9 119/125] acpi/nfit: Fix memory corruption/Unregister mce decoder on failure

2017-07-25 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Prarit Bhargava commit 7e700d2c59e5853c9126642976b4f5768f64c9b3 upstream. nfit_init() calls nfit_mce_register() on module load. When the module load fails the nfit mce decoder is not unregiste

<    4   5   6   7   8   9   10   11   12   13   >