[PATCH v2] irqchip/gicv3: Add support for Range Selector (RS) feature

2017-09-19 Thread Shanker Donthineni
A new feature Range Selector (RS) has been added to GIC specification in order to support more than 16 CPUs at affinity level 0. New fields are introduced in SGI system registers (ICC_SGI0R_EL1, ICC_SGI1R_EL1 and ICC_ASGI1R_EL1) to relax an artificial limit of 16 at level 0. - A new RSS field in I

[PATCH] rtc: interface: set the next alarm event appropriately

2017-09-19 Thread Xu Yiping
From: Xu YiPing After commit 2b2f5ff00f63 ("rtc: interface: ignore expired timers when enqueuing new timers"), the rtc_timer_enqueue will not reprogram the RTC when there is any non-expired timers in the timerqueue. If we set a RTC_TIMER between now and the next non-expired timers, it won't go i

[RFC] A multithread lockless deduplication engine

2017-09-19 Thread XaviLi
PageONE (Page Object Non-duplicate Engine) is a multithread kernel page deduplication engine. It is based on a lock-less tree algorithm we currently named as SD (Static and Dynamic) Tree. Normal operations such as insert/query/delete to this tree are block-less. Adding more CPU cores can linear

[RFC] Another Para-Virtualization page recycler. Empty Guest OS free pages every few seconds

2017-09-19 Thread XaviLi
PPR (Per Page Recycler) is a para virtualization driver currently available for KVM hosts and Linux/Windows guests. With PPR, every page freed to Guest OS can be recycled in seconds by hypervisor. Therefore, VMs can dynamical allocate/free pages from hypervisor according to application’s request

Re: [PATCH v3] Make initramfs honor CONFIG_DEVTMPFS_MOUNT

2017-09-19 Thread Rob Landley
On 09/17/2017 08:51 AM, Henrique de Moraes Holschuh wrote: > On Sat, 16 Sep 2017, Rob Landley wrote: >> So, I added a workaround with a printk in hopes of embarassing them into >> someday fixing it. > > Oh, it will be fixed in Debian alright. Cool! But part of the problem is people upgrade the k

Re: [tip:timers/core] kselftests: timers: set-timer-lat: Tweak reporting when timer fires early

2017-09-19 Thread John Stultz
On Tue, Sep 19, 2017 at 6:02 PM, Shuah Khan wrote: > Hi Greg, > > On 08/20/2017 03:56 AM, tip-bot for Greg Hackmann wrote: >> Commit-ID: a524b1184b8e86141d689fa78ad150fbf2db9b4c >> Gitweb: >> http://git.kernel.org/tip/a524b1184b8e86141d689fa78ad150fbf2db9b4c >> Author: Greg Hackmann >>

Re: [PATCH 01/11] Makefile: kselftest and kselftest-clean fail for make O=dir case

2017-09-19 Thread Masahiro Yamada
2017-09-19 8:14 GMT+09:00 Shuah Khan : > On 09/12/2017 05:52 PM, Shuah Khan wrote: >> kselftest and kselftest-clean targets fail when object directory is >> specified to relocate objects. Fix it so it can find the source tree >> to build from. >> >> make O=/tmp/kselftest_top kselftest >> >> make[1]

Re: Traceback due to 'powerpc/mm: Fix kernel RAM protection...' when running ppc image in qemu

2017-09-19 Thread Guenter Roeck
On 09/19/2017 08:05 PM, Michael Ellerman wrote: Guenter Roeck writes: Hi, I see a the following traceback when running an SMP image based on 85xx/mpc85xx_cds_defconfig in qemu. [ cut here ] WARNING: CPU: 0 PID: 1 at kernel/smp.c:416 smp_call_function_many+0xcc/0x2fc C

RE: [PATCH v6 0/3] enable eeprom "size" property and runtime pm

2017-09-19 Thread Mani, Rajmohan
Adding Tomasz... > -Original Message- > From: Sakari Ailus [mailto:sakari.ai...@iki.fi] > Sent: Tuesday, September 05, 2017 6:48 AM > To: Mohandass, Divagar > Cc: robh...@kernel.org; mark.rutl...@arm.com; w...@the-dreams.de; > devicet...@vger.kernel.org; linux-...@vger.kernel.org; linux-

RE: [PATCH v6 1/3] dt-bindings: add eeprom "size" property

2017-09-19 Thread Mani, Rajmohan
Adding Tomasz... > -Original Message- > From: Mohandass, Divagar > Sent: Monday, September 04, 2017 3:29 AM > To: robh...@kernel.org; mark.rutl...@arm.com; w...@the-dreams.de; > sakari.ai...@iki.fi > Cc: devicet...@vger.kernel.org; linux-...@vger.kernel.org; linux- > ker...@vger.kernel.org

RE: [PATCH v6 2/3] eeprom: at24: add support to fetch eeprom device property "size"

2017-09-19 Thread Mani, Rajmohan
Adding Tomasz... > -Original Message- > From: Mohandass, Divagar > Sent: Monday, September 04, 2017 3:29 AM > To: robh...@kernel.org; mark.rutl...@arm.com; w...@the-dreams.de; > sakari.ai...@iki.fi > Cc: devicet...@vger.kernel.org; linux-...@vger.kernel.org; linux- > ker...@vger.kernel.org

RE: [PATCH v6 3/3] eeprom: at24: enable runtime pm support

2017-09-19 Thread Mani, Rajmohan
Adding Tomasz... > -Original Message- > From: Mohandass, Divagar > Sent: Monday, September 04, 2017 3:29 AM > To: robh...@kernel.org; mark.rutl...@arm.com; w...@the-dreams.de; > sakari.ai...@iki.fi > Cc: devicet...@vger.kernel.org; linux-...@vger.kernel.org; linux- > ker...@vger.kernel.org

Re: [PATCH v6 3/3] eeprom: at24: enable runtime pm support

2017-09-19 Thread Tomasz Figa
Thanks Raj. Let me post my comments inline. On Wed, Sep 20, 2017 at 12:52 PM, Mani, Rajmohan wrote: > Adding Tomasz... > >> -Original Message- >> From: Mohandass, Divagar >> Sent: Monday, September 04, 2017 3:29 AM >> To: robh...@kernel.org; mark.rutl...@arm.com; w...@the-dreams.de; >> s

[PATCH] aacraid: fix potential double-fetch issue

2017-09-19 Thread Meng Xu
While examining the kernel source code, I found a dangerous operation that could turn into a double-fetch situation (a race condition bug) where the same userspace memory region are fetched twice into kernel with sanity checks after the first fetch while missing checks after the second fetch. 1. T

[PATCH net] net/ncsi: Don't assume last available channel exists

2017-09-19 Thread Samuel Mendoza-Jonas
When handling new VLAN tags in NCSI we check the maximum allowed number of filters on the last active ("hot") channel. However if the 'add' callback is called before NCSI has configured a channel, this causes a NULL dereference. Check that we actually have a hot channel, and warn if it is missing.

Re: [PATCH 6/6] fs-writeback: only allow one inflight and pending !nr_pages flush

2017-09-19 Thread Jens Axboe
On 09/19/2017 09:10 PM, Amir Goldstein wrote: > On Tue, Sep 19, 2017 at 10:53 PM, Jens Axboe wrote: >> A few callers pass in nr_pages == 0 when they wakeup the flusher >> threads, which means that the flusher should just flush everything >> that was currently dirty. If we are tight on memory, we c

Re: [PATCH v2] drivers: cpufreq: Fix sysfs duplicate filename creation for platform-device

2017-09-19 Thread Suniel Mahesh
On Wednesday 20 September 2017 04:06 AM, Viresh Kumar wrote: > On 19-09-17, 10:12, Dave Gerlach wrote: >> Hi, >> On 09/18/2017 02:18 PM, suni...@techveda.org wrote: >>> From: Suniel Mahesh >>> >>> ti-cpufreq and cpufreq-dt-platdev drivers are registering platform-device >>> with same name "cpufreq

linux-next: Tree for Sep 20

2017-09-19 Thread Stephen Rothwell
Hi all, Changes since 20170919: Linus' tree still had its build failure for which I reverted a commit. The net-next tree gained a conflict against the driver-core.current tree. The sound-asoc tree gained a build failure so I used the version from next-20170919. The devicetree tree g

linux-next: Signed-off-by missing for commit in the cifs tree

2017-09-19 Thread Stephen Rothwell
Hi all, Commit b8b14037d451 ("cifs: show 'soft' in the mount options for !hard mounts") is missing a Signed-off-by from its committer. -- Cheers, Stephen Rothwell

Re: [RFC] sched/fair: Use wake_q length as a hint for wake_wide

2017-09-19 Thread Joel Fernandes
On Tue, Sep 19, 2017 at 3:05 AM, Brendan Jackman wrote: > On Mon, Sep 18 2017 at 22:15, Joel Fernandes wrote: >> Hi Brendan, > Hi Joel, > > Thanks for taking a look :) > >> On Fri, Aug 11, 2017 at 2:45 AM, Brendan Jackman >> wrote: >>> This patch adds a parameter to select_task_rq, sibling_count_

[PATCH review for 4.4 03/47] GFS2: Fix reference to ERR_PTR in gfs2_glock_iter_next

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Dan Carpenter [ Upstream commit 14d37564fa3dc4e5d4c6828afcd26ac14e6796c5 ] This patch fixes a place where function gfs2_glock_iter_next can reference an invalid error pointer. Signed-off-by: Dan Carpenter Signed-off-by: Bob Peterson Signed-off-by: Sasha Levin --- fs/gfs2/glock.c | 12

[PATCH review for 4.4 30/47] MIPS: Lantiq: Fix another request_mem_region() return code check

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Arnd Bergmann [ Upstream commit 98ea51cb0c8ce009d9da1fd7b48f0ff1d7a9bbb0 ] Hauke already fixed a couple of them, but one instance remains that checks for a negative integer when it should check for a NULL pointer: arch/mips/lantiq/xway/sysctrl.c: In function 'ltq_soc_init': arch/mips/lant

[PATCH review for 3.18 12/30] IB/ipoib: Replace list_del of the neigh->list with list_del_init

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Feras Daoud [ Upstream commit c586071d1dc8227a7182179b8e50ee92cc43f6d2 ] In order to resolve a situation where a few process delete the same list element in sequence and cause panic, list_del is replaced with list_del_init. In this case if the first process that calls list_del releases the

[PATCH review for 4.4 27/47] audit: log 32-bit socketcalls

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Richard Guy Briggs [ Upstream commit 62bc306e2083436675e33b5bdeb6a77907d35971 ] 32-bit socketcalls were not being logged by audit on x86_64 systems. Log them. This is basically a duplicate of the call from net/socket.c:sys_socketcall(), but it addresses the impedance mismatch between 32-b

[PATCH review for 3.18 22/30] mmc: sdio: fix alignment issue in struct sdio_func

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Heiner Kallweit [ Upstream commit 5ef1ecf060f28ecef313b5723f1fd39bf5a35f56 ] Certain 64-bit systems (e.g. Amlogic Meson GX) require buffers to be used for DMA to be 8-byte-aligned. struct sdio_func has an embedded small DMA buffer not meeting this requirement. When testing switching to des

[PATCH review for 3.18 18/30] net: core: Prevent from dereferencing null pointer when releasing SKB

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Myungho Jung [ Upstream commit 9899886d5e8ec5b343b1efe44f185a0e68dc6454 ] Added NULL check to make __dev_kfree_skb_irq consistent with kfree family of functions. Link: https://bugzilla.kernel.org/show_bug.cgi?id=195289 Signed-off-by: Myungho Jung Signed-off-by: David S. Miller Signed-o

[PATCH review for 3.18 21/30] usb: plusb: Add support for PL-27A1

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Roman Spychała [ Upstream commit 6f2aee0c0de6501bbc26fe50c9c7b09a37f7 ] This patch adds support for the PL-27A1 by adding the appropriate USB ID's. This chip is used in the goobay Active USB 3.0 Data Link and Unitek Y-3501 cables. Signed-off-by: Roman Spychała Signed-off-by: David S.

[PATCH review for 3.18 27/30] rds: ib: add error handle

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Zhu Yanjun [ Upstream commit 3b12f73a5c2977153f28a224392fd4729b50d1dc ] In the function rds_ib_setup_qp, the error handle is missing. When some error occurs, it is possible that memory leak occurs. As such, error handle is added. Cc: Joe Jin Reviewed-by: Junxiao Bi Reviewed-by: Guanglei

[PATCH v3] doc: coresight: correct usage for disabling idle states

2017-09-19 Thread Leo Yan
In the coresight CPU debug document it suggests to use 'echo' command to set latency request to /dev/cpu_dma_latency so can disable all CPU idle states, but in fact this doesn't work. This is because when the command 'echo' exits, it releases the device node's file descriptor and the kernel releas

[PATCH review for 3.18 23/30] netfilter: invoke synchronize_rcu after set the _hook_ to NULL

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Liping Zhang [ Upstream commit 3b7dabf029478bb80507a6c4500ca94132a2bc0b ] Otherwise, another CPU may access the invalid pointer. For example: CPU0CPU1 - rcu_read_lock(); - pfunc = _hook_; _hook_ = NULL; - mod unload

[PATCH review for 3.18 15/30] pinctrl: mvebu: Use seq_puts() in mvebu_pinconf_group_dbg_show()

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Markus Elfring [ Upstream commit 420dc61642920849d824a0de2aa853db59f5244f ] Strings which did not contain data format specifications should be put into a sequence. Thus use the corresponding function "seq_puts". This issue was detected by using the Coccinelle software. Signed-off-by: Mar

[PATCH review for 3.18 20/30] team: fix memory leaks

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Pan Bian [ Upstream commit 72ec0bc64b9a5d8e0efcb717abfc757746b101b7 ] In functions team_nl_send_port_list_get() and team_nl_send_options_get(), pointer skb keeps the return value of nlmsg_new(). When the call to genlmsg_put() fails, the memory is not freed(). This will result in memory lea

[PATCH review for 3.18 24/30] [media] exynos-gsc: Do not swap cb/cr for semi planar formats

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Thibault Saunier [ Upstream commit d7f3e33df4fbdc9855fb151f4a328ec46447e3ba ] In the case of semi planar formats cb and cr are in the same plane in memory, meaning that will be set to 'cb' whatever the format is, and whatever the (packed) order of those components are. Suggested-by: Nicol

[PATCH review for 3.18 25/30] netfilter: nfnl_cthelper: fix incorrect helper->expect_class_max

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Liping Zhang [ Upstream commit ae5c682113f9f94cc5e76f92cf041ee624c173ee ] The helper->expect_class_max must be set to the total number of expect_policy minus 1, since we will use the statement "if (class > helper->expect_class_max)" to validate the CTA_EXPECT_CLASS attr in ctnetlink_alloc_

[PATCH review for 3.18 19/30] net/packet: check length in getsockopt() called with PACKET_HDRLEN

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Alexander Potapenko [ Upstream commit fd2c83b35752f0a8236b976978ad4658df14a59f ] In the case getsockopt() is called with PACKET_HDRLEN and optlen < 4 |val| remains uninitialized and the syscall may behave differently depending on its value, and even copy garbage to userspace on certain arc

[PATCH review for 3.18 16/30] partitions/efi: Fix integer overflow in GPT size calculation

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Alden Tondettar [ Upstream commit c5082b70adfe8e1ea1cf4a8eff92c9f260e364d2 ] If a GUID Partition Table claims to have more than 2**25 entries, the calculation of the partition table size in alloc_read_gpt_entries() will overflow a 32-bit integer and not enough space will be allocated for t

[PATCH review for 3.18 29/30] xfs: remove kmem_zalloc_greedy

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: "Darrick J. Wong" [ Upstream commit 08b005f1333154ae5b404ca28766e0ffb9f1c150 ] The sole remaining caller of kmem_zalloc_greedy is bulkstat, which uses it to grab 1-4 pages for staging of inobt records. The infinite loop in the greedy allocation function is causing hangs[1] in generic/269,

[PATCH review for 3.18 17/30] audit: log 32-bit socketcalls

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Richard Guy Briggs [ Upstream commit 62bc306e2083436675e33b5bdeb6a77907d35971 ] 32-bit socketcalls were not being logged by audit on x86_64 systems. Log them. This is basically a duplicate of the call from net/socket.c:sys_socketcall(), but it addresses the impedance mismatch between 32-b

[PATCH review for 3.18 28/30] md/raid10: submit bio directly to replacement disk

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Shaohua Li [ Upstream commit 6d399783e9d4e9bd44931501948059d24ad96ff8 ] Commit 57c67df(md/raid10: submit IO from originating thread instead of md thread) submits bio directly for normal disks but not for replacement disks. There is no point we shouldn't do this for replacement disks. Cc:

[PATCH review for 3.18 26/30] parisc: perf: Fix potential NULL pointer dereference

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Arvind Yadav [ Upstream commit 74e3f6e63da6c8e8246fba1689e040bc926b4a1a ] Fix potential NULL pointer dereference and clean up coding style errors (code indent, trailing whitespaces). Signed-off-by: Arvind Yadav Signed-off-by: Helge Deller Signed-off-by: Sasha Levin --- arch/parisc/ker

[PATCH review for 3.18 14/30] USB: serial: mos7840: fix control-message error handling

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Johan Hovold [ Upstream commit cd8db057e93ddaacbec025b567490555d2bca280 ] Make sure to detect short transfers when reading a device register. The modem-status handling had sufficient error checks in place, but move handling of short transfers into the register accessor function itself for

[PATCH review for 3.18 30/30] libata: transport: Remove circular dependency at free time

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Gwendal Grignou [ Upstream commit d85fc67dd11e9a32966140677d4d6429ca540b25 ] Without this patch, failed probe would not free resources like irq. ata port tdev object currently hold a reference to the ata port object. Therefore the ata port object release function will not get called unti

[PATCH review for 4.4 09/47] igb: re-assign hw address pointer on reset after PCI error

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Guilherme G Piccoli [ Upstream commit 69b97cf6dbce7403845a28bbc75d57f5be7b12ac ] Whenever the igb driver detects the result of a read operation returns a value composed only by F's (like 0x), it will detach the net_device, clear the hw_addr pointer and warn to the user that adapter

[PATCH review for 4.4 20/47] IB/ipoib: Replace list_del of the neigh->list with list_del_init

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Feras Daoud [ Upstream commit c586071d1dc8227a7182179b8e50ee92cc43f6d2 ] In order to resolve a situation where a few process delete the same list element in sequence and cause panic, list_del is replaced with list_del_init. In this case if the first process that calls list_del releases the

[PATCH review for 4.4 46/47] xfs: remove kmem_zalloc_greedy

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: "Darrick J. Wong" [ Upstream commit 08b005f1333154ae5b404ca28766e0ffb9f1c150 ] The sole remaining caller of kmem_zalloc_greedy is bulkstat, which uses it to grab 1-4 pages for staging of inobt records. The infinite loop in the greedy allocation function is causing hangs[1] in generic/269,

[PATCH review for 3.18 13/30] USB: serial: mos7720: fix control-message error handling

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Johan Hovold [ Upstream commit 0d130367abf582e7cbf60075c2a7ab53817b1d14 ] Make sure to log an error on short transfers when reading a device register. Also clear the provided buffer (which if often an uninitialised automatic variable) on errors as the driver currently does not bother to c

[PATCH review for 4.4 43/47] rds: ib: add error handle

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Zhu Yanjun [ Upstream commit 3b12f73a5c2977153f28a224392fd4729b50d1dc ] In the function rds_ib_setup_qp, the error handle is missing. When some error occurs, it is possible that memory leak occurs. As such, error handle is added. Cc: Joe Jin Reviewed-by: Junxiao Bi Reviewed-by: Guanglei

[PATCH review for 3.18 01/30] drm: bridge: add DT bindings for TI ths8135

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Bartosz Golaszewski [ Upstream commit 2e644be30fcc08c736f66b60f4898d274d4873ab ] THS8135 is a configurable video DAC. Add DT bindings for this chip. Signed-off-by: Bartosz Golaszewski Reviewed-by: Laurent Pinchart Acked-by: Rob Herring Signed-off-by: Archit Taneja Link: http://patchw

[PATCH review for 4.4 47/47] libata: transport: Remove circular dependency at free time

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Gwendal Grignou [ Upstream commit d85fc67dd11e9a32966140677d4d6429ca540b25 ] Without this patch, failed probe would not free resources like irq. ata port tdev object currently hold a reference to the ata port object. Therefore the ata port object release function will not get called unti

[PATCH review for 4.4 32/47] net/packet: check length in getsockopt() called with PACKET_HDRLEN

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Alexander Potapenko [ Upstream commit fd2c83b35752f0a8236b976978ad4658df14a59f ] In the case getsockopt() is called with PACKET_HDRLEN and optlen < 4 |val| remains uninitialized and the syscall may behave differently depending on its value, and even copy garbage to userspace on certain arc

[PATCH review for 4.4 10/47] extcon: axp288: Use vbus-valid instead of -present to determine cable presence

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Hans de Goede [ Upstream commit 5757aca10146061befd168dab37fb0db1ccd8f73 ] The vbus-present bit in the power status register also gets set to 1 when a usb-host cable (id-pin shorted to ground) is plugged in and a 5v boost converter is supplying 5v to the otg usb bus. This causes a "discon

[PATCH review for 4.4 36/47] bridge: netlink: register netdevice before executing changelink

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Ido Schimmel [ Upstream commit 5b8d5429daa05bebef6ffd3297df3b502cc6f184 ] Peter reported a kernel oops when executing the following command: $ ip link add name test type bridge vlan_default_pvid 1 [13634.939408] BUG: unable to handle kernel NULL pointer dereference at 0190 [1

[PATCH review for 3.18 08/30] ARM: 8635/1: nommu: allow enabling REMAP_VECTORS_TO_RAM

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Afzal Mohammed [ Upstream commit 8a792e9afbce84a0fdaf213fe42bb97382487094 ] REMAP_VECTORS_TO_RAM depends on DRAM_BASE, but since DRAM_BASE is a hex, REMAP_VECTORS_TO_RAM could never get enabled. Also depending on DRAM_BASE is redundant as whenever REMAP_VECTORS_TO_RAM makes itself availabl

[PATCH review for 3.18 06/30] clk: wm831x: fix usleep_range with bad range

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Nicholas Mc Guire [ Upstream commit ed784c532a3d0959db488f40a96c5127f63d42dc ] The delay here is not in atomic context and does not seem critical with respect to precision, but usleep_range(min,max) with min==max results in giving the timer subsystem no room to optimize uncritical delays.

[PATCH review for 3.18 11/30] IB/ipoib: rtnl_unlock can not come after free_netdev

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Feras Daoud [ Upstream commit 89a3987ab7a923c047c6dec008e60ad6f41fac22 ] The ipoib_vlan_add function calls rtnl_unlock after free_netdev, rtnl_unlock not only releases the lock, but also calls netdev_run_todo. The latter function browses the net_todo_list array and completes the unregistra

[PATCH review for 3.18 07/30] hwmon: (gl520sm) Fix overflows and crash seen when writing into limit attributes

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Guenter Roeck [ Upstream commit 87cdfa9d60f4f40e6d71b04b10b36d9df3c89282 ] Writes into limit attributes can overflow due to multplications and additions with unbound input values. Writing into fan limit attributes can result in a crash with a division by zero if very large values are writt

[PATCH review for 3.18 04/30] MIPS: kexec: Do not reserve invalid crashkernel memory on boot

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Marcin Nowakowski [ Upstream commit a8f108d70c74d83574c157648383eb2e4285a190 ] Do not reserve memory for the crashkernel if the commandline argument points to a wrong location. This can happen if the location is specified wrong or if the same commandline is reused when starting the crashke

[PATCH review for 3.18 02/30] RDS: RDMA: Fix the composite message user notification

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Santosh Shilimkar [ Upstream commit 941f8d55f6d613a460a5e080d25a38509f45eb75 ] When application sends an RDS RDMA composite message consist of RDMA transfer to be followed up by non RDMA payload, it expect to be notified *only* when the full message gets delivered. RDS RDMA notification do

[PATCH review for 4.4 44/47] md/raid10: submit bio directly to replacement disk

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Shaohua Li [ Upstream commit 6d399783e9d4e9bd44931501948059d24ad96ff8 ] Commit 57c67df(md/raid10: submit IO from originating thread instead of md thread) submits bio directly for normal disks but not for replacement disks. There is no point we shouldn't do this for replacement disks. Cc:

[PATCH review for 3.18 10/30] IB/ipoib: Fix deadlock over vlan_mutex

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Feras Daoud [ Upstream commit 1c3098cdb05207e740715857df7b0998e372f527 ] This patch fixes Deadlock while executing ipoib_vlan_delete. The function takes the vlan_rwsem semaphore and calls unregister_netdevice. The later function calls ipoib_mcast_stop_thread that cause workqueue flush. W

[PATCH review for 4.4 45/47] i2c: meson: fix wrong variable usage in meson_i2c_put_data

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Heiner Kallweit [ Upstream commit 3b0277f198ac928f323c42e180680d2f79aa980d ] Most likely a copy & paste error. Signed-off-by: Heiner Kallweit Acked-by: Jerome Brunet Signed-off-by: Wolfram Sang Fixes: 30021e3707a7 ("i2c: add support for Amlogic Meson I2C controller") Signed-off-by: Sas

[PATCH review for 4.4 17/47] tty: goldfish: Fix a parameter of a call to free_irq

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Christophe JAILLET [ Upstream commit 1a5c2d1de7d35f5eb9793266237903348989502b ] 'request_irq()' and 'free_irq()' should be called with the same dev_id. Signed-off-by: Christophe JAILLET Signed-off-by: Greg Kroah-Hartman Signed-off-by: Sasha Levin --- drivers/tty/goldfish.c | 2 +- 1 f

[PATCH review for 3.18 09/30] tty: goldfish: Fix a parameter of a call to free_irq

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Christophe JAILLET [ Upstream commit 1a5c2d1de7d35f5eb9793266237903348989502b ] 'request_irq()' and 'free_irq()' should be called with the same dev_id. Signed-off-by: Christophe JAILLET Signed-off-by: Greg Kroah-Hartman Signed-off-by: Sasha Levin --- drivers/tty/goldfish.c | 2 +- 1 f

[PATCH review for 4.4 41/47] parisc: perf: Fix potential NULL pointer dereference

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Arvind Yadav [ Upstream commit 74e3f6e63da6c8e8246fba1689e040bc926b4a1a ] Fix potential NULL pointer dereference and clean up coding style errors (code indent, trailing whitespaces). Signed-off-by: Arvind Yadav Signed-off-by: Helge Deller Signed-off-by: Sasha Levin --- arch/parisc/ker

[PATCH review for 4.4 31/47] net: core: Prevent from dereferencing null pointer when releasing SKB

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Myungho Jung [ Upstream commit 9899886d5e8ec5b343b1efe44f185a0e68dc6454 ] Added NULL check to make __dev_kfree_skb_irq consistent with kfree family of functions. Link: https://bugzilla.kernel.org/show_bug.cgi?id=195289 Signed-off-by: Myungho Jung Signed-off-by: David S. Miller Signed-o

[PATCH review for 4.4 34/47] usb: plusb: Add support for PL-27A1

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Roman Spychała [ Upstream commit 6f2aee0c0de6501bbc26fe50c9c7b09a37f7 ] This patch adds support for the PL-27A1 by adding the appropriate USB ID's. This chip is used in the goobay Active USB 3.0 Data Link and Unitek Y-3501 cables. Signed-off-by: Roman Spychała Signed-off-by: David S.

[PATCH review for 3.18 05/30] sh_eth: use correct name for ECMR_MPDE bit

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Niklas Söderlund [ Upstream commit 6dcf45e514974a1ff10755015b5e06746a033e5f ] This bit was wrongly named due to a typo, Sergei checked the SH7734/63 manuals and this bit should be named MPDE. Suggested-by: Sergei Shtylyov Signed-off-by: Niklas Söderlund Signed-off-by: David S. Miller S

[PATCH review for 4.4 06/47] MIPS: Ensure bss section ends on a long-aligned address

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Paul Burton [ Upstream commit 3f00f4d8f083bc61005d0a1ef592b149f5c88bbd ] When clearing the .bss section in kernel_entry we do so using LONG_S instructions, and branch whilst the current write address doesn't equal the end of the .bss section minus the size of a long integer. The .bss secti

[PATCH review for 3.18 03/30] MIPS: Ensure bss section ends on a long-aligned address

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Paul Burton [ Upstream commit 3f00f4d8f083bc61005d0a1ef592b149f5c88bbd ] When clearing the .bss section in kernel_entry we do so using LONG_S instructions, and branch whilst the current write address doesn't equal the end of the .bss section minus the size of a long integer. The .bss secti

Re: usb/hid: slab-out-of-bounds read in usbhid_parse

2017-09-19 Thread Kim Jaejoong
Hi Andrey 2017-09-19 21:38 GMT+09:00 Andrey Konovalov : > On Tue, Sep 19, 2017 at 1:47 PM, Kim Jaejoong wrote: >> Hi, Andrey Konovalov >> >> Thanks for the report. >> >> 2017-09-19 2:33 GMT+09:00 Andrey Konovalov : >>> Hi! >>> >>> I've got the following crash while fuzzing the kernel with syzkall

[PATCH review for 4.4 42/47] iommu/io-pgtable-arm: Check for leaf entry before dereferencing it

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Oleksandr Tyshchenko [ Upstream commit ed46e66cc1b3d684042f92dfa2ab15ee917b4cac ] Do a check for already installed leaf entry at the current level before dereferencing it in order to avoid walking the page table down with wrong pointer to the next level. Signed-off-by: Oleksandr Tyshchenk

[PATCH review for 4.4 07/47] MIPS: kexec: Do not reserve invalid crashkernel memory on boot

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Marcin Nowakowski [ Upstream commit a8f108d70c74d83574c157648383eb2e4285a190 ] Do not reserve memory for the crashkernel if the commandline argument points to a wrong location. This can happen if the location is specified wrong or if the same commandline is reused when starting the crashke

[PATCH review for 4.4 39/47] [media] exynos-gsc: Do not swap cb/cr for semi planar formats

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Thibault Saunier [ Upstream commit d7f3e33df4fbdc9855fb151f4a328ec46447e3ba ] In the case of semi planar formats cb and cr are in the same plane in memory, meaning that will be set to 'cb' whatever the format is, and whatever the (packed) order of those components are. Suggested-by: Nicol

[PATCH review for 4.4 33/47] team: fix memory leaks

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Pan Bian [ Upstream commit 72ec0bc64b9a5d8e0efcb717abfc757746b101b7 ] In functions team_nl_send_port_list_get() and team_nl_send_options_get(), pointer skb keeps the return value of nlmsg_new(). When the call to genlmsg_put() fails, the memory is not freed(). This will result in memory lea

[PATCH review for 4.4 38/47] MIPS: IRQ Stack: Unwind IRQ stack onto task stack

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Matt Redfearn [ Upstream commit db8466c581cca1a08b505f1319c3ecd246f16fa8 ] When the separate IRQ stack was introduced, stack unwinding only proceeded as far as the top of the IRQ stack, leading to kernel backtraces being less useful, lacking the trace of what was interrupted. Fix this by

[PATCH review for 4.4 29/47] ASoC: dapm: fix some pointer error handling

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Linus Walleij [ Upstream commit 639467c8f26d834c934215e8b59129ce442475fe ] commit 66feeec9322132689d42723df2537d60f96f8e44 "RFC: ASoC: dapm: handle probe deferrals" forgot a to update some two sites where the call was used. The static codechecks quickly found them. Reported-by: Dan Carpen

[PATCH review for 4.4 26/47] ASoC: dapm: handle probe deferrals

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Linus Walleij [ Upstream commit 37e1df8c95e2c8a57c77eafc097648f6e40a60ff ] This starts to handle probe deferrals on regulators and clocks on the ASoC DAPM. I came to this patch after audio stopped working on Ux500 ages ago and I finally looked into it to see what is wrong. I had messages

[PATCH review for 4.4 16/47] ARM: 8635/1: nommu: allow enabling REMAP_VECTORS_TO_RAM

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Afzal Mohammed [ Upstream commit 8a792e9afbce84a0fdaf213fe42bb97382487094 ] REMAP_VECTORS_TO_RAM depends on DRAM_BASE, but since DRAM_BASE is a hex, REMAP_VECTORS_TO_RAM could never get enabled. Also depending on DRAM_BASE is redundant as whenever REMAP_VECTORS_TO_RAM makes itself availabl

[PATCH review for 4.4 23/47] USB: serial: mos7840: fix control-message error handling

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Johan Hovold [ Upstream commit cd8db057e93ddaacbec025b567490555d2bca280 ] Make sure to detect short transfers when reading a device register. The modem-status handling had sufficient error checks in place, but move handling of short transfers into the register accessor function itself for

[PATCH review for 4.4 24/47] pinctrl: mvebu: Use seq_puts() in mvebu_pinconf_group_dbg_show()

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Markus Elfring [ Upstream commit 420dc61642920849d824a0de2aa853db59f5244f ] Strings which did not contain data format specifications should be put into a sequence. Thus use the corresponding function "seq_puts". This issue was detected by using the Coccinelle software. Signed-off-by: Mar

[PATCH review for 4.4 40/47] netfilter: nfnl_cthelper: fix incorrect helper->expect_class_max

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Liping Zhang [ Upstream commit ae5c682113f9f94cc5e76f92cf041ee624c173ee ] The helper->expect_class_max must be set to the total number of expect_policy minus 1, since we will use the statement "if (class > helper->expect_class_max)" to validate the CTA_EXPECT_CLASS attr in ctnetlink_alloc_

[PATCH review for 4.4 37/47] netfilter: invoke synchronize_rcu after set the _hook_ to NULL

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Liping Zhang [ Upstream commit 3b7dabf029478bb80507a6c4500ca94132a2bc0b ] Otherwise, another CPU may access the invalid pointer. For example: CPU0CPU1 - rcu_read_lock(); - pfunc = _hook_; _hook_ = NULL; - mod unload

[PATCH review for 4.4 04/47] RDS: RDMA: Fix the composite message user notification

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Santosh Shilimkar [ Upstream commit 941f8d55f6d613a460a5e080d25a38509f45eb75 ] When application sends an RDS RDMA composite message consist of RDMA transfer to be followed up by non RDMA payload, it expect to be notified *only* when the full message gets delivered. RDS RDMA notification do

[PATCH review for 4.4 22/47] USB: serial: mos7720: fix control-message error handling

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Johan Hovold [ Upstream commit 0d130367abf582e7cbf60075c2a7ab53817b1d14 ] Make sure to log an error on short transfers when reading a device register. Also clear the provided buffer (which if often an uninitialised automatic variable) on errors as the driver currently does not bother to c

[PATCH review for 4.4 21/47] drm/amdkfd: fix improper return value on error

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Pan Bian [ Upstream commit 8bf793883da213864efc50c274d2b38ec0ca58b2 ] In function kfd_wait_on_events(), when the call to copy_from_user() fails, the value of return variable ret is 0. 0 indicates success, which is inconsistent with the execution status. This patch fixes the bug by assignin

[PATCH review for 4.4 18/47] IB/ipoib: Fix deadlock over vlan_mutex

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Feras Daoud [ Upstream commit 1c3098cdb05207e740715857df7b0998e372f527 ] This patch fixes Deadlock while executing ipoib_vlan_delete. The function takes the vlan_rwsem semaphore and calls unregister_netdevice. The later function calls ipoib_mcast_stop_thread that cause workqueue flush. W

[PATCH review for 4.4 35/47] mmc: sdio: fix alignment issue in struct sdio_func

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Heiner Kallweit [ Upstream commit 5ef1ecf060f28ecef313b5723f1fd39bf5a35f56 ] Certain 64-bit systems (e.g. Amlogic Meson GX) require buffers to be used for DMA to be 8-byte-aligned. struct sdio_func has an embedded small DMA buffer not meeting this requirement. When testing switching to des

[PATCH review for 4.4 05/47] ARM: dts: r8a7790: Use R-Car Gen 2 fallback binding for msiof nodes

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Simon Horman [ Upstream commit 654450baf2afba86cf328e1849ccac61ec4630af ] Use recently added R-Car Gen 2 fallback binding for msiof nodes in DT for r8a7790 SoC. This has no run-time effect for the current driver as the initialisation sequence is the same for the SoC-specific binding for r

[PATCH review for 4.4 19/47] IB/ipoib: rtnl_unlock can not come after free_netdev

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Feras Daoud [ Upstream commit 89a3987ab7a923c047c6dec008e60ad6f41fac22 ] The ipoib_vlan_add function calls rtnl_unlock after free_netdev, rtnl_unlock not only releases the lock, but also calls netdev_run_todo. The latter function browses the net_todo_list array and completes the unregistra

[PATCH review for 4.4 15/47] iio: adc: hx711: Add DT binding for avia,hx711

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Andreas Klinger [ Upstream commit ff1293f67734da68e23fecb6ecdae7112b8c43f9 ] Add DT bindings for avia,hx711 Add vendor avia to vendor list Signed-off-by: Andreas Klinger Acked-by: Rob Herring Signed-off-by: Jonathan Cameron Signed-off-by: Sasha Levin --- .../devicetree/bindings/iio/a

[PATCH review for 4.4 11/47] sh_eth: use correct name for ECMR_MPDE bit

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Niklas Söderlund [ Upstream commit 6dcf45e514974a1ff10755015b5e06746a033e5f ] This bit was wrongly named due to a typo, Sergei checked the SH7734/63 manuals and this bit should be named MPDE. Suggested-by: Sergei Shtylyov Signed-off-by: Niklas Söderlund Signed-off-by: David S. Miller S

[PATCH review for 4.4 08/47] MIPS: ralink: Fix incorrect assignment on ralink_soc

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Colin Ian King [ Upstream commit 08d90c81b714482dceb5323d14f6617bcf55ee61 ] ralink_soc sould be assigned to RT3883_SOC, replace incorrect comparision with assignment. Signed-off-by: Colin Ian King Fixes: 418d29c87061 ("MIPS: ralink: Unify SoC id handling") Cc: John Crispin Cc: linux-m..

[PATCH review for 4.4 12/47] clk: wm831x: fix usleep_range with bad range

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Nicholas Mc Guire [ Upstream commit ed784c532a3d0959db488f40a96c5127f63d42dc ] The delay here is not in atomic context and does not seem critical with respect to precision, but usleep_range(min,max) with min==max results in giving the timer subsystem no room to optimize uncritical delays.

[PATCH review for 4.4 13/47] hwmon: (gl520sm) Fix overflows and crash seen when writing into limit attributes

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Guenter Roeck [ Upstream commit 87cdfa9d60f4f40e6d71b04b10b36d9df3c89282 ] Writes into limit attributes can overflow due to multplications and additions with unbound input values. Writing into fan limit attributes can result in a crash with a division by zero if very large values are writt

[PATCH review for 4.4 02/47] drm: bridge: add DT bindings for TI ths8135

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Bartosz Golaszewski [ Upstream commit 2e644be30fcc08c736f66b60f4898d274d4873ab ] THS8135 is a configurable video DAC. Add DT bindings for this chip. Signed-off-by: Bartosz Golaszewski Reviewed-by: Laurent Pinchart Acked-by: Rob Herring Signed-off-by: Archit Taneja Link: http://patchw

[PATCH review for 4.4 28/47] usb: chipidea: vbus event may exist before starting gadget

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Peter Chen [ Upstream commit c3b674a04b8ab62a1d35e86714d466af0a0ecc18 ] At some situations, the vbus may already be there before starting gadget. So we need to check vbus event after switching to gadget in order to handle missing vbus event. The typical use cases are plugging vbus cable be

[PATCH review for 4.4 01/47] drm_fourcc: Fix DRM_FORMAT_MOD_LINEAR #define

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: "Kristian H. Kristensen" [ Upstream commit af913418261d6d3e7a29f06cf35f04610ead667c ] We need to define DRM_FORMAT_MOD_VENDOR_NONE for the fourcc_mod_code() macro to work correctly. Signed-off-by: Kristian H. Kristensen Signed-off-by: Daniel Vetter Link: http://patchwork.freedesktop.or

[PATCH review for 4.4 25/47] partitions/efi: Fix integer overflow in GPT size calculation

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Alden Tondettar [ Upstream commit c5082b70adfe8e1ea1cf4a8eff92c9f260e364d2 ] If a GUID Partition Table claims to have more than 2**25 entries, the calculation of the partition table size in alloc_read_gpt_entries() will overflow a 32-bit integer and not enough space will be allocated for t

[PATCH review for 4.4 14/47] iio: adc: axp288: Drop bogus AXP288_ADC_TS_PIN_CTRL register modifications

2017-09-19 Thread Levin, Alexander (Sasha Levin)
From: Hans de Goede [ Upstream commit fa2849e9649b5180ffc4cb3c3b005261c403093a ] For some reason the axp288_adc driver was modifying the AXP288_ADC_TS_PIN_CTRL register, changing bits 0-1 depending on whether the GP_ADC channel or another channel was written. These bits control when a bias curr

Re: [RFC] sched/fair: Use wake_q length as a hint for wake_wide

2017-09-19 Thread Joel Fernandes
> On Tue, Sep 19, 2017 at 3:05 AM, Brendan Jackman > wrote: >> On Mon, Sep 18 2017 at 22:15, Joel Fernandes wrote: [..] IIUC, if wake_affine() behaves correctly this trick wouldn't be necessary on SMP systems, so it might be best guarded by the presence >>> >>> Actually wake_affine doesn

<    4   5   6   7   8   9   10   >