[PATCH 4.18 55/88] Revert "uapi/linux/keyctl.h: dont use C++ reserved keyword as a struct member name"

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Lubomir Rintel commit 8c0f9f5b309d627182d5da72a69246f58bde1026 upstream. This changes UAPI, breaking iwd and libell: ell/key.c: In function 'kernel_dh_compute': ell/key.c:205:38: error: '

[PATCH 4.18 53/88] Revert "rpmsg: core: add support to power domains for devices"

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Greg Kroah-Hartman This reverts commit e5d9ae0077a5cf336d298002959dc0c8dcfe7b89 which is commit fe782affd0f440a4e60e2cc81b8f2eccb2923113 upstream Rafael reports that this patch causes problems

[PATCH 4.18 56/88] scsi: target: iscsi: Use hex2bin instead of a re-implementation

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Vincent Pelletier commit 1816494330a83f2a064499d8ed2797045641f92c upstream. This change has the following effects, in order of descreasing importance: 1) Prevent a stack buffer overflow 2) D

[PATCH 4.18 52/88] mm: shmem.c: Correctly annotate new inodes for lockdep

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Joel Fernandes (Google) commit b45d71fb89ab8adfe727b9d0ee188ed58582a647 upstream. Directories and inodes don't necessarily need to be in the same lockdep class. For ex, hugetlbfs splits them

[PATCH 4.18 54/88] bpf/verifier: disallow pointer subtraction

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Alexei Starovoitov commit dd066823db2ac4e22f721ec85190817b58059a54 upstream. Subtraction of pointers was accidentally allowed for unpriv programs by commit 82abbf8d2fc4. Revert that part of co

[PATCH 4.18 60/88] ocfs2: fix ocfs2 read block panic

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Junxiao Bi commit 234b69e3e089d850a98e7b3145bd00e9b52b upstream. While reading block, it is possible that io error return due to underlying storage issue, in this case, BH_NeedsValidate wa

[PATCH 4.18 59/88] libata: mask swap internal and hardware tag

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Jens Axboe commit 7ce5c8cd753f9afa8e79e9ec40351998e354f239 upstream. hen we're comparing the hardware completion mask passed in from the driver with the internal tag pending mask, we need to a

[PATCH 4.18 61/88] drm/i915/bdw: Increase IPS disable timeout to 100ms

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Imre Deak commit 92a6803149465e2339f8f7f8f6415d75be80073d upstream. During IPS disabling the current 42ms timeout value leads to occasional timeouts, increase it to 100ms which seems to get ri

[PATCH 4.18 57/88] scsi: target: iscsi: Use bin2hex instead of a re-implementation

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Vincent Pelletier commit 8c39e2699f8acb2e29782a834e56306da24937fe upstream. Signed-off-by: Vincent Pelletier Reviewed-by: Mike Christie Signed-off-by: Martin K. Petersen Signed-off-by: Greg

[PATCH 4.18 58/88] Revert "ubifs: xattr: Dont operate on deleted inodes"

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Richard Weinberger commit f061c1cc404a618858a77aea233fde0aeaad2f2d upstream. This reverts commit 11a6fc3dc743e22fb50f2196ec55bee5140d3c52. UBIFS wants to assert that xattr operations are only

[PATCH 4.18 39/88] ALSA: oxfw: fix memory leak of private data

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit 498fe23aad8e3b5a9554f55719c537603b4476ea upstream. Although private data of sound card instance is usually allocated in the tail of the instance, drivers in ALSA firewi

[PATCH 4.18 44/88] xen/netfront: dont bug in case of too many frags

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Juergen Gross commit ad4f15dc2c70b1de5e0a64d27335962fbc9cf71c upstream. Commit 57f230ab04d291 ("xen/netfront: raise max number of slots in xennet_get_responses()") raised the max number of all

[PATCH 4.18 40/88] mtd: devices: m25p80: Make sure the buffer passed in op is DMA-able

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Boris Brezillon commit 4a3e85f2674cbfb81052059107d0165269778e2f upstream. As documented in spi-mem.h, spi_mem_op->data.buf.{in,out} must be DMA-able, and commit 4120f8d158ef ("mtd: spi-nor: Us

[PATCH 4.18 43/88] platform/x86: alienware-wmi: Correct a memory leak

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Mario Limonciello commit ff0e9f26288d2daee4950f42b37a3d3d30d36ec1 upstream. An ACPI buffer that was allocated was not being freed after use. Signed-off-by: Mario Limonciello Cc: sta...@vger.

[PATCH 4.18 42/88] platform/x86: dell-smbios-wmi: Correct a memory leak

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Mario Limonciello commit affab51082174f60ef71ced8ab5fbe71f00e9ae3 upstream. ACPI buffers were being allocated but never freed. Reported-by: Pinzhen Xu Signed-off-by: Mario Limonciello Cc: s

[PATCH 4.18 45/88] xen/x86/vpmu: Zero struct pt_regs before calling into sample handling code

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Boris Ostrovsky commit 70513d58751d7c6c1a0133557b13089b9f2e3e66 upstream. Otherwise we may leak kernel stack for events that sample user registers. Reported-by: Mark Rutland Reviewed-by: Jue

Re: [PATCH v4 2/2] mtd: rawnand: meson: add support for Amlogic NAND flash controller

Hello Liang, On Thu, Sep 27, 2018 at 10:19 AM Liang Yang wrote: > > Hello Martin, > > On 9/22/2018 11:32 PM, Martin Blumenstingl wrote: > > Hello, > > > > On Thu, Sep 20, 2018 at 10:51 AM Jianxin Pan > > wrote: > > [snip] > >> +static int meson_nfc_clk_init(struct meson_nfc *nfc) > >> +{ > >> +

[PATCH 4.18 72/88] drm: udl: Destroy framebuffer only if it was initialized

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Emil Lundmark commit fcb74da1eb8edd3a4ef9b9724f88ed709d684227 upstream. This fixes a NULL pointer dereference that can happen if the UDL driver is unloaded before the framebuffer is initialize

[PATCH 4.18 36/88] ALSA: fireworks: fix memory leak of response buffer at error path

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit c3b55e2ec9c76e7a0de2a0b1dc851fdc9440385b upstream. After allocating memory object for response buffer, ALSA fireworks driver has leak of the memory object at error path

[PATCH 4.18 41/88] mtd: rawnand: denali: fix a race condition when DMA is kicked

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Masahiro Yamada commit cf51e4b9c34407bf0c3d9b582b7837e047e1df47 upstream. I thought the read-back of the DMA_ENABLE register was unnecessary (at least it is working on my boards), then deleted

[PATCH 4.18 63/88] drm/nouveau: Only write DP_MSTM_CTRL when needed

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Lyude Paul commit b26b4590dd53e012526342e749c423e6c0e73437 upstream. Currently, nouveau will re-write the DP_MSTM_CTRL register for an MST hub every time it receives a long HPD pulse on DP. Th

[PATCH 4.18 74/88] drm/atomic: Use drm_drv_uses_atomic_modeset() for debugfs creation

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Lyude Paul commit 3c499ea0c662e2f38aafbd4f516b08aab8cfa0e5 upstream. As pointed out by Daniel Vetter, we should be usinng drm_drv_uses_atomic_modeset() for determining whether or not we want t

Re: [PATCH 2/5] usb: host: Add OHCI driver for Broadcom STB SoCs

On Thu, Sep 27, 2018 at 12:20 AM Al Cooper wrote: > > This driver enables USB OHCI on Broadcom ARM and MIPS STB SoCs. > The drivers depend on a matching "brcm,brcmstb-usb-phy" > Broadcom STB USB Phy driver. > > The standard platform driver can't be used because of differences > in PHY and Clock ha

[PATCH 4.18 75/88] tty: vt_ioctl: fix potential Spectre v1

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit e97267cb4d1ee01ca0929638ec0fcbb0904f903d upstream. vsa.console is indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre varia

[PATCH 4.18 76/88] ext4: check to make sure the rename(2)s destination is not freed

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit b50282f3241acee880514212d88b6049fb5039c8 upstream. If the destination of the rename(2) system call exists, the inode's link count (i_nlinks) must be non-zero. If it is, t

[PATCH 4.18 73/88] drm/amdgpu: add new polaris pci id

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 30f3984ede683b98a4e8096e200df78bf0609b4f upstream. Add new pci id. Reviewed-by: Rex Zhu Signed-off-by: Alex Deucher Cc: sta...@vger.kernel.org Signed-off-by: Greg Kroah-

[PATCH 4.18 80/88] ext4: fix online resizes handling of a too-small final block group

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit f0a459dec5495a3580f8d784555e6f8f3bf7f263 upstream. Avoid growing the file system to an extent so that the last block group is too small to hold all of the metadata that mu

[PATCH 4.18 79/88] ext4: recalucate superblock checksum after updating free blocks/inodes

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit 4274f516d4bc50648a4d97e4f67ecbd7b65cde4a upstream. When mounting the superblock, ext4_fill_super() calculates the free blocks and free inodes and stores them in the superb

[PATCH 4.18 77/88] ext4: avoid divide by zero fault when deleting corrupted inline directories

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit 4d982e25d0bdc83d8c64e66fdeca0b89240b3b85 upstream. A specially crafted file system can trick empty_inline_dir() into reading past the last valid entry in a inline director

[PATCH 4.18 78/88] ext4: avoid arithemetic overflow that can trigger a BUG

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit bcd8e91f98c156f4b1ebcfacae675f9cfd962441 upstream. A maliciously crafted file system can cause an overflow when the results of a 64-bit calculation is stored into a 32-bit

[PATCH 4.18 81/88] ext4: fix online resizing for bigalloc file systems with a 1k block size

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit 5f8c10936fab2b69a487400f2872902e597dd320 upstream. An online resize of a file system with the bigalloc feature enabled and a 1k block size would be refused since ext4_resi

[PATCH 4.18 84/88] ext4, dax: add ext4_bmap to ext4_dax_aops

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Toshi Kani commit 94dbb63117e82253c9592816aa4465f0a9c94850 upstream. Ext4 mount path calls .bmap to the journal inode. This currently works for the DAX mount case because ext4_iget() always se

[PATCH 4.18 82/88] ext4: dont mark mmp buffer head dirty

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Li Dongyang commit fe18d649891d813964d3aaeebad873f281627fbc upstream. Marking mmp bh dirty before writing it will make writeback pick up mmp block later and submit a write, we don't want the d

[PATCH] dts: sun8i-h3: add sy8106a to orange pi plus

From: Jorik Jonker The Orange Pi Plus board lacks voltage scaling capabilities in its current form. This results in random freezes during boot when cpufreq is enabled, probably due to wrong voltages. This patch (a copy/paste of 06139c) does the following things on this board: - enable r_i2c - ad

[PATCH 4.18 83/88] ext4: show test_dummy_encryption mount option in /proc/mounts

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Eric Biggers commit 338affb548c243d2af25b1ca628e67819350de6b upstream. When in effect, add "test_dummy_encryption" to _ext4_show_options() so that it is shown in /proc/mounts and other relevan

[PATCH 4.18 64/88] drm/nouveau: Remove duplicate poll_enable() in pmops_runtime_suspend()

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Lyude Paul commit 611ce855420a6e8b9ff47af5f47431d52c7709f8 upstream. Since actual hotplug notifications don't get disabled until nouveau_display_fini() is called, all this will do is cause any

[PATCH 4.18 85/88] ext4, dax: set ext4_dax_aops for dax files

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Toshi Kani commit cce6c9f7e6029caee45c459db5b3e78fec6973cb upstream. Sync syscall to DAX file needs to flush processor cache, but it currently does not flush to existing DAX files. This is be

[PATCH 4.18 87/88] vmw_balloon: include asm/io.h

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Nadav Amit commit a3b92ee6fc171d7c9d9b6b829b7fef169210440c upstream. Fix a build error due to missing virt_to_phys() Reported-by: kbuild test robot Fixes: f0a1bf29d821b ("vmw_balloon: fix in

[PATCH 4.18 86/88] sched/fair: Fix vruntime_normalized() for remote non-migration wakeup

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Steve Muckle commit d0cdb3ce8834332d918fc9c8ff74f8a169ec9abe upstream. When a task which previously ran on a given CPU is remotely queued to wake up on that same CPU, there is a period where t

[PATCH] pinctrl: sprd: Move DT parsing before registering pinctrl device

It will be failed to select default or sleep state for pins hogged by the pin controller device, since we hadn't parsed pins configuration in device tree before registering the pin controller device. Thus we should move the device tree parsing function before registering the pin controller device.

[PATCH 4.18 66/88] drm/nouveau/drm/nouveau: Dont forget to cancel hpd_work on suspend/unload

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Lyude Paul commit 2f7ca781fd382cf8dde73ed36dfdd93fd05b3332 upstream. Currently, there's nothing in nouveau that actually cancels this work struct. So, cancel it on suspend/unload. Otherwise, i

[PATCH 4.18 67/88] drm/nouveau/drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Lyude Paul commit d77ef138ff572409ab93d492e5e6c826ee6fb21d upstream. Turns out this part is my fault for not noticing when reviewing 9a2eba337cace ("drm/nouveau: Fix drm poll_helper handling")

[PATCH 4.18 68/88] drm/nouveau/drm/nouveau: Fix deadlock with fb_helper with async RPM requests

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Lyude Paul commit 7fec8f5379fb6eddabc0aaef6d2304c366808f97 upstream. Currently, nouveau uses the generic drm_fb_helper_output_poll_changed() function provided by DRM as it's output_poll_change

[PATCH 4.18 65/88] drm/nouveau: Fix deadlocks in nouveau_connector_detect()

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Lyude Paul commit 3e1a12754d4df5804bfca5dedf09d2ba291bdc2a upstream. When we disable hotplugging on the GPU, we need to be able to synchronize with each connector's hotplug interrupt handler b

[PATCH 4.18 62/88] drm/nouveau: Reset MST branching unit before enabling

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Lyude Paul commit fa3cdf8d0b092c4561f9f017dfac409eb7644737 upstream. When probing a new MST device, it's not safe to make any assumptions about it's current state. While most well mannered MST

[PATCH 4.18 69/88] drm/nouveau/drm/nouveau: Use pm_runtime_get_noresume() in connector_detect()

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Lyude Paul commit 6833fb1ec120bf078e1a527c573a09d4de286224 upstream. It's true we can't resume the device from poll workers in nouveau_connector_detect(). We can however, prevent the autosuspe

[PATCH 4.18 70/88] drm/nouveau/drm/nouveau: Prevent handling ACPI HPD events too early

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Lyude Paul commit 79e765ad665da4b8aa7e9c878bd2fef837f6fea5 upstream. On most systems with ACPI hotplugging support, it seems that we always receive a hotplug event once we re-enable EC interru

[PATCH 4.14 01/64] gso_segment: Reset skb->mac_len after modifying network header

4.14-stable review patch. If anyone has any objections, please let me know. -- From: "Toke H�iland-J�rgensen" [ Upstream commit c56cae23c6b167acc68043c683c4573b80cbcc2c ] When splitting a GSO segment that consists of encapsulated packets, the skb->mac_len of the segments can e

[PATCH 4.18 71/88] drm/vc4: Fix the "no scaling" case on multi-planar YUV formats

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Boris Brezillon commit 658d8cbd07dae22ccecf49399e18c609c4e85c53 upstream. When there's no scaling requested ->is_unity should be true no matter the format. Also, when no scaling is requested

[PATCH 4.18 88/88] iw_cxgb4: only allow 1 flush on user qps

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Steve Wise commit 308aa2b8f7b7db3332a7d41099fd37851fb793b2 upstream. Once the qp has been flushed, it cannot be flushed again. The user qp flush logic wasn't enforcing it however. The bug ca

[PATCH 4.14 11/64] tls: dont copy the key out of tls12_crypto_info_aes_gcm_128

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Sabrina Dubroca [ Upstream commit 7cba09c6d5bc73ebbd25a353742d9ddb7a713b95 ] There's no need to copy the key to an on-stack buffer before calling crypto_aead_setkey(). Fixes: 3c4d7559159b ("t

[PATCH 4.14 10/64] net/sched: act_sample: fix NULL dereference in the data path

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Davide Caratti [ Upstream commit 34043d250f51368f214aed7f54c2dc29c819a8c7 ] Matteo reported the following splat, testing the datapath of TC 'sample': BUG: KASAN: null-ptr-deref in tcf_sample

[PATCH 4.14 18/64] ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix I/O at error path

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit b1fbebd4164b3d170ad916dcd692cf843c9c065d upstream. After allocating model-dependent data for M-Audio FW1814 and ProjectMix I/O, ALSA bebob driver has memory leak at err

[PATCH 4.14 17/64] ASoC: rsnd: fixup not to call clk_get/set under non-atomic

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Jiada Wang commit 4d230d12710646788af581ba0155d83ab48b955c upstream. Clocking operations clk_get/set_rate, are non-atomic, they shouldn't be called in soc_pcm_trigger() which is atomic. Follo

[PATCH 4.14 16/64] ASoC: cs4265: fix MMTLR Data switch control

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Sébastien Szymanski commit 90a3b7f8aba3011badacd6d8121e03aa24ac79d1 upstream. The MMTLR bit is in the CS4265_SPDIF_CTL2 register at address 0x12 bit 0 and not at address 0x0 bit 1. Fix this.

[PATCH 4.14 19/64] ALSA: bebob: use address returned by kmalloc() instead of kernel stack for streaming DMA mapping

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit 493626f2d87a74e6dbea1686499ed6e7e600484e upstream. When executing 'fw_run_transaction()' with 'TCODE_WRITE_BLOCK_REQUEST', an address of 'payload' argument is used for

[PATCH 4.14 14/64] NFC: Fix possible memory corruption when handling SHDLC I-Frame commands

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Suren Baghdasaryan commit 674d9de02aa7d521ebdf66c3958758bdd9c64e11 upstream. When handling SHDLC I-Frame commands "pipe" field used for indexing into an array should be checked before usage. I

[PATCH 4.14 15/64] NFC: Fix the number of pipes

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Suren Baghdasaryan commit e285d5bfb7e9785d289663baef252dd315e171f8 upstream. According to ETSI TS 102 622 specification chapter 4.4 pipe identifier is 7 bits long which allows for 128 unique p

[PATCH 4.14 12/64] tls: zero the crypto information from tls_context before freeing

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Sabrina Dubroca [ Upstream commit 86029d10af18381814881d6cce2dd6872163b59f ] This contains key material in crypto_send_aes_gcm_128 and crypto_recv_aes_gcm_128. Introduce union tls_crypto_cont

[PATCH 4.14 13/64] tls: clear key material from kernel memory when do_tls_setsockopt_conf fails

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Sabrina Dubroca [ Upstream commit c844eb46b7d43c2cf760169df5ae1d5b033af338 ] Fixes: 3c4d7559159b ("tls: kernel TLS support") Signed-off-by: Sabrina Dubroca Signed-off-by: Sabrina Dubroca Sig

[PATCH 4.14 20/64] ALSA: emu10k1: fix possible info leak to userspace on SNDRV_EMU10K1_IOCTL_INFO

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Willy Tarreau commit 49434c6c575d2008c0abbc93e615019f39e01252 upstream. snd_emu10k1_fx8010_ioctl(SNDRV_EMU10K1_IOCTL_INFO) allocates memory using kmalloc() and partially fills it by calling sn

[PATCH 4.14 21/64] ALSA: fireface: fix memory leak in ff400_switch_fetching_mode()

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit 36f3a6e02c143a7e9e4e143e416371f67bc1fae6 upstream. An allocated memory forgets to be released. Fixes: 76fdb3a9e13 ('ALSA: fireface: add support for Fireface 400') Cc:

Re: [PATCH] ASoC: wm9712: fix unused variable warning

On Wed, Sep 26, 2018 at 09:37:40PM +0200, Arnd Bergmann wrote: > The 'ret' variable is now only used in an #ifdef, and causes a > warning if it is declared outside of that block: > > sound/soc/codecs/wm9712.c: In function 'wm9712_soc_probe': > sound/soc/codecs/wm9712.c:641:6: error: unused variabl

[PATCH 4.14 02/64] ipv6: fix possible use-after-free in ip6_xmit()

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit bbd6528d28c1b8e80832b3b018ec402b6f5c3215 ] In the unlikely case ip6_xmit() has to call skb_realloc_headroom(), we need to call skb_set_owner_w() before consuming

[PATCH 4.14 22/64] ALSA: firewire-digi00x: fix memory leak of private data

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit a49a83ab05e34edd6c71a4fbd062c9a7ba6d18aa upstream. Although private data of sound card instance is usually allocated in the tail of the instance, drivers in ALSA firewi

[PATCH 4.14 23/64] ALSA: firewire-tascam: fix memory leak of private data

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit 8d28277c065a974873c6781d44b7bcdcd8fb4e8a upstream. Although private data of sound card instance is usually allocated in the tail of the instance, drivers in ALSA firewi

Re: [PATCH v6 4/7] KVM: x86: hyperv: keep track of mismatched VP indexes

Roman Kagan writes: > On Wed, Sep 26, 2018 at 07:02:56PM +0200, Vitaly Kuznetsov wrote: >> In most common cases VP index of a vcpu matches its vcpu index. Userspace >> is, however, free to set any mapping it wishes and we need to account for >> that when we need to find a vCPU with a particular V

[PATCH 4.14 24/64] ALSA: fireworks: fix memory leak of response buffer at error path

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit c3b55e2ec9c76e7a0de2a0b1dc851fdc9440385b upstream. After allocating memory object for response buffer, ALSA fireworks driver has leak of the memory object at error path

[PATCH 4.14 25/64] ALSA: oxfw: fix memory leak for model-dependent data at error path

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit ce925f088b979537f22f9e05eb923ef9822ca139 upstream. After allocating model-dependent data, ALSA OXFW driver has memory leak of the data at error path. This commit relea

[PATCH 4.14 03/64] net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Willy Tarreau [ Upstream commit 9824dfae5741275473a23a7ed5756c7b6efacc9d ] Fields ->dev and ->next of struct ipddp_route may be copied to userspace on the SIOCFINDIPDDPRT ioctl. This is only a

CAN YOU HELP ME FIND A HOME I CAN BUY??

I am Mrs.Suzanne Mubarak.Please can you help me look for house I can buy?I will send you money to pay if you can help me get the house.My price range is between $500,000 to $4,500,000.Pls reply to my alternative email: mubaraksuzanne1...@gmail.com

[PATCH 4.14 06/64] qmi_wwan: set DTR for modems in forced USB2 mode

4.14-stable review patch. If anyone has any objections, please let me know. -- From: "Bj�rn Mork" [ Upstream commit 922005c7f50e7f4b2a6dbc182e9c575b4f92396b ] Recent firmware revisions have added the ability to force these modems to USB2 mode, hiding their SuperSpeed capabilit

[PATCH 4.14 04/64] net: hp100: fix always-true check for link up state

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Colin Ian King [ Upstream commit a7f38002fb69b44f8fc622ecb838665d0b8666af ] The operation ~(p100_inb(VG_LAN_CFG_1) & HP100_LINK_UP) returns a value that is always non-zero and hence the wait f

[PATCH 4.14 27/64] ALSA: oxfw: fix memory leak of private data

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit 498fe23aad8e3b5a9554f55719c537603b4476ea upstream. Although private data of sound card instance is usually allocated in the tail of the instance, drivers in ALSA firewi

[PATCH 4.14 07/64] udp4: fix IP_CMSG_CHECKSUM for connected sockets

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Paolo Abeni [ Upstream commit 2b5a921740a55c00223a797d075b9c77c42cb171 ] commit 2abb7cdc0dc8 ("udp: Add support for doing checksum unnecessary conversion") left out the early demux path for co

[PATCH 4.14 08/64] neighbour: confirm neigh entries when ARP packet is received

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Vasily Khoruzhick [ Upstream commit f0e0d04413fcce9bc76388839099aee93cd0d33b ] Update 'confirmed' timestamp when ARP packet is received. It shouldn't affect locktime logic and anyway entry can

[PATCH 4.14 05/64] pppoe: fix reception of frames with no mac header

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Guillaume Nault [ Upstream commit 8540827ebac6b654ab2f69c8fbce9e4fbd6304a0 ] pppoe_rcv() needs to look back at the Ethernet header in order to lookup the PPPoE session. Therefore we need to en

[PATCH 4.14 00/64] 4.14.73-stable review

This is the start of the stable review cycle for the 4.14.73 release. There are 64 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat Sep 29 09:02:21 UTC 2018. Anything receiv

[PATCH 4.14 09/64] udp6: add missing checks on edumux packet processing

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Paolo Abeni [ Upstream commit eb63f2964dbe36f26deac77d3016791675821ded ] Currently the UDPv6 early demux rx code path lacks some mandatory checks, already implemented into the normal RX code p

[PATCH 4.14 37/64] scsi: target: iscsi: Use hex2bin instead of a re-implementation

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Vincent Pelletier commit 1816494330a83f2a064499d8ed2797045641f92c upstream. This change has the following effects, in order of descreasing importance: 1) Prevent a stack buffer overflow 2) D

Re: [PATCH v2 04/11] arm64: dts: sc9836/sc9860: Update coresight bindings for hardware ports

Hi Suzuki, On 27 September 2018 at 16:51, Suzuki K Poulose wrote: > +To: Chunyan Zhang > > Chunyan Zhang, > > On 09/12/2018 02:53 PM, Suzuki K Poulose wrote: >> >> Switch to the new coresight bindings for hw ports >> > > How can we push this patch ? Do you generally send the spreadtrum > specific

[PATCH 4.14 36/64] Revert "uapi/linux/keyctl.h: dont use C++ reserved keyword as a struct member name"

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Lubomir Rintel commit 8c0f9f5b309d627182d5da72a69246f58bde1026 upstream. This changes UAPI, breaking iwd and libell: ell/key.c: In function 'kernel_dh_compute': ell/key.c:205:38: error: '

[PATCH 4.14 38/64] scsi: target: iscsi: Use bin2hex instead of a re-implementation

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Vincent Pelletier commit 8c39e2699f8acb2e29782a834e56306da24937fe upstream. Signed-off-by: Vincent Pelletier Reviewed-by: Mike Christie Signed-off-by: Martin K. Petersen Signed-off-by: Greg

[PATCH 4.14 40/64] ocfs2: fix ocfs2 read block panic

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Junxiao Bi commit 234b69e3e089d850a98e7b3145bd00e9b52b upstream. While reading block, it is possible that io error return due to underlying storage issue, in this case, BH_NeedsValidate wa

[PATCH 4.14 39/64] Revert "ubifs: xattr: Dont operate on deleted inodes"

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Richard Weinberger commit f061c1cc404a618858a77aea233fde0aeaad2f2d upstream. This reverts commit 11a6fc3dc743e22fb50f2196ec55bee5140d3c52. UBIFS wants to assert that xattr operations are only

[PATCH 4.14 44/64] drm/nouveau/drm/nouveau: Use pm_runtime_get_noresume() in connector_detect()

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Lyude Paul commit 6833fb1ec120bf078e1a527c573a09d4de286224 upstream. It's true we can't resume the device from poll workers in nouveau_connector_detect(). We can however, prevent the autosuspe

[PATCH 4.14 43/64] drm/nouveau/drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Lyude Paul commit d77ef138ff572409ab93d492e5e6c826ee6fb21d upstream. Turns out this part is my fault for not noticing when reviewing 9a2eba337cace ("drm/nouveau: Fix drm poll_helper handling")

[PATCH 4.14 41/64] drm/nouveau: Fix deadlocks in nouveau_connector_detect()

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Lyude Paul commit 3e1a12754d4df5804bfca5dedf09d2ba291bdc2a upstream. When we disable hotplugging on the GPU, we need to be able to synchronize with each connector's hotplug interrupt handler b

[PATCH 4.14 42/64] drm/nouveau/drm/nouveau: Dont forget to cancel hpd_work on suspend/unload

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Lyude Paul commit 2f7ca781fd382cf8dde73ed36dfdd93fd05b3332 upstream. Currently, there's nothing in nouveau that actually cancels this work struct. So, cancel it on suspend/unload. Otherwise, i

[PATCH 4.14 45/64] drm/nouveau/drm/nouveau: Prevent handling ACPI HPD events too early

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Lyude Paul commit 79e765ad665da4b8aa7e9c878bd2fef837f6fea5 upstream. On most systems with ACPI hotplugging support, it seems that we always receive a hotplug event once we re-enable EC interru

[PATCH 4.14 49/64] drm/atomic: Use drm_drv_uses_atomic_modeset() for debugfs creation

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Lyude Paul commit 3c499ea0c662e2f38aafbd4f516b08aab8cfa0e5 upstream. As pointed out by Daniel Vetter, we should be usinng drm_drv_uses_atomic_modeset() for determining whether or not we want t

[PATCH 4.14 28/64] platform/x86: alienware-wmi: Correct a memory leak

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Mario Limonciello commit ff0e9f26288d2daee4950f42b37a3d3d30d36ec1 upstream. An ACPI buffer that was allocated was not being freed after use. Signed-off-by: Mario Limonciello Cc: sta...@vger.

[PATCH 4.14 50/64] tty: vt_ioctl: fix potential Spectre v1

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit e97267cb4d1ee01ca0929638ec0fcbb0904f903d upstream. vsa.console is indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre varia

[PATCH 4.14 29/64] xen/netfront: dont bug in case of too many frags

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Juergen Gross commit ad4f15dc2c70b1de5e0a64d27335962fbc9cf71c upstream. Commit 57f230ab04d291 ("xen/netfront: raise max number of slots in xennet_get_responses()") raised the max number of all

[PATCH 4.14 48/64] drm/amdgpu: add new polaris pci id

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 30f3984ede683b98a4e8096e200df78bf0609b4f upstream. Add new pci id. Reviewed-by: Rex Zhu Signed-off-by: Alex Deucher Cc: sta...@vger.kernel.org Signed-off-by: Greg Kroah-

[PATCH 4.14 46/64] drm/vc4: Fix the "no scaling" case on multi-planar YUV formats

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Boris Brezillon commit 658d8cbd07dae22ccecf49399e18c609c4e85c53 upstream. When there's no scaling requested ->is_unity should be true no matter the format. Also, when no scaling is requested

[PATCH 4.14 47/64] drm: udl: Destroy framebuffer only if it was initialized

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Emil Lundmark commit fcb74da1eb8edd3a4ef9b9724f88ed709d684227 upstream. This fixes a NULL pointer dereference that can happen if the UDL driver is unloaded before the framebuffer is initialize

[PATCH 4.14 33/64] ring-buffer: Allow for rescheduling when removing pages

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Vaibhav Nagarnaik commit 83f365554e47997ec68dc4eca3f5dce525cd15c3 upstream. When reducing ring buffer size, pages are removed by scheduling a work item on each CPU for the corresponding CPU ri

[PATCH 4.14 31/64] spi: fix IDR collision on systems with both fixed and dynamic SPI bus numbers

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Kirill Kapranov commit 1a4327fbf4554d5b78d75b19a13d40d6de220159 upstream. On systems where some controllers get a dynamic ID assigned and some have a fixed number (e.g. from ACPI tables), the

[PATCH 4.14 32/64] Revert "PCI: Add ACS quirk for Intel 300 series"

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Mika Westerberg commit 50ca031b51106b1b46162d4e9ecccb7edc95682f upstream. This reverts f154a718e6cc ("PCI: Add ACS quirk for Intel 300 series"). It turns out that erratum "PCH PCIe* Controlle

<    1   2   3   4   5   6   7   8   9   10   >