[PATCH 4.14 145/242] scsi: pm80xx: Fix error return in pm8001_pci_probe()

2020-12-28 Thread Greg Kroah-Hartman
From: Zhang Qilong [ Upstream commit 97031ccffa4f62728602bfea8439dd045cd3aeb2 ] The driver did not return an error in the case where pm8001_configure_phy_settings() failed. Use rc to store the return value of pm8001_configure_phy_settings(). Link: https://lore.kernel.org/r/20201205115551.20794

[PATCH 4.14 165/242] net: bcmgenet: Fix a resource leak in an error handling path in the probe functin

2020-12-28 Thread Greg Kroah-Hartman
From: Christophe JAILLET [ Upstream commit 4375ada01963d1ebf733d60d1bb6e5db401e1ac6 ] If the 'register_netdev()' call fails, we must undo a previous 'bcmgenet_mii_init()' call. Fixes: 1c1008c793fa ("net: bcmgenet: add main driver file") Signed-off-by: Christophe JAILLET Acked-by: Florian Faine

[PATCH 4.14 164/242] checkpatch: fix unescaped left brace

2020-12-28 Thread Greg Kroah-Hartman
From: Dwaipayan Ray [ Upstream commit 03f4935135b9efeb780b970ba023c201f81cf4e6 ] There is an unescaped left brace in a regex in OPEN_BRACE check. This throws a runtime error when checkpatch is run with --fix flag and the OPEN_BRACE check is executed. Fix it by escaping the left brace. Link: h

Re: [RFC] ravb: Add support for optional txc_refclk

2020-12-28 Thread Geert Uytterhoeven
Hi Adam, CC devicetree On Mon, Dec 28, 2020 at 2:49 PM Adam Ford wrote: > On Mon, Dec 14, 2020 at 4:05 AM Geert Uytterhoeven > wrote: > > On Sun, Dec 13, 2020 at 5:18 PM Adam Ford wrote: > > > The SoC expects the txv_refclk is provided, but if it is provided > > > by a programmable clock, the

[PATCH 4.14 155/242] x86/kprobes: Restore BTF if the single-stepping is cancelled

2020-12-28 Thread Greg Kroah-Hartman
From: Masami Hiramatsu [ Upstream commit 78ff2733ff352175eb7f4418a34654346e1b6cd2 ] Fix to restore BTF if single-stepping causes a page fault and it is cancelled. Usually the BTF flag was restored when the single stepping is done (in resume_execution()). However, if a page fault happens on the

[PATCH 4.14 147/242] scsi: fnic: Fix error return code in fnic_probe()

2020-12-28 Thread Greg Kroah-Hartman
From: Zhang Changzhong [ Upstream commit d4fc94fe65578738ded138e9fce043db6bfc3241 ] Return a negative error code from the error handling case instead of 0 as done elsewhere in this function. Link: https://lore.kernel.org/r/1607068060-31203-1-git-send-email-zhangchangzh...@huawei.com Fixes: 5df

[PATCH 4.14 138/242] clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI

2020-12-28 Thread Greg Kroah-Hartman
From: Keqian Zhu [ Upstream commit 8b7770b877d187bfdae1eaf587bd2b792479a31c ] ARM virtual counter supports event stream, it can only trigger an event when the trigger bit (the value of CNTKCTL_EL1.EVNTI) of CNTVCT_EL0 changes, so the actual period of event stream is 2^(cntkctl_evnti + 1). For ex

[PATCH 4.14 148/242] powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops

2020-12-28 Thread Greg Kroah-Hartman
From: Nathan Lynch [ Upstream commit 52719fce3f4c7a8ac9eaa191e8d75a697f9fbcbc ] There are three ways pseries_suspend_begin() can be reached: 1. When "mem" is written to /sys/power/state: kobj_attr_store() -> state_store() -> pm_suspend() -> suspend_devices_and_enter() -> pseries_su

[PATCH 4.14 157/242] extcon: max77693: Fix modalias string

2020-12-28 Thread Greg Kroah-Hartman
From: Marek Szyprowski [ Upstream commit e1efdb604f5c9903a5d92ef42244009d3c04880f ] The platform device driver name is "max77693-muic", so advertise it properly in the modalias string. This fixes automated module loading when this driver is compiled as a module. Fixes: db1b9037424b ("extcon: MA

[PATCH 4.14 161/242] um: chan_xterm: Fix fd leak

2020-12-28 Thread Greg Kroah-Hartman
From: Anton Ivanov [ Upstream commit 9431f7c199ab0d02da1482d62255e0b4621cb1b5 ] xterm serial channel was leaking a fd used in setting up the port helper This bug is prehistoric - it predates switching to git. The "fixes" header here is really just to mark all the versions we would like this to

[PATCH 4.14 153/242] nfsd: Fix message level for normal termination

2020-12-28 Thread Greg Kroah-Hartman
From: kazuo ito [ Upstream commit 4420440c57892779f265108f46f83832a88ca795 ] The warning message from nfsd terminating normally can confuse system adminstrators or monitoring software. Though it's not exactly fair to pin-point a commit where it originated, the current form in the current place

[PATCH 4.14 160/242] watchdog: sirfsoc: Add missing dependency on HAS_IOMEM

2020-12-28 Thread Greg Kroah-Hartman
From: Guenter Roeck [ Upstream commit 8ae252d2e18bc7d324b77f965d34083a25a2 ] If HAS_IOMEM is not defined and SIRFSOC_WATCHDOG is enabled, the build fails with the following error. drivers/watchdog/sirfsoc_wdt.o: in function `sirfsoc_wdt_probe': sirfsoc_wdt.c:(.text+0x112): undefined

Re: [PATCH 1/2] dt-bindings: arm: fsl: Add binding for Gateworks boards with IMX8MM

2020-12-28 Thread Tim Harvey
On Thu, Dec 24, 2020 at 3:23 AM Krzysztof Kozlowski wrote: > > On Wed, Dec 23, 2020 at 02:23:15PM -0800, Tim Harvey wrote: > > Add bindings for the Gateworks Venice Development kit boards with > > IMX8MM System on Module. > > > > Signed-off-by: Tim Harvey > > --- > > Documentation/devicetree/bin

[PATCH 4.14 150/242] usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe

2020-12-28 Thread Greg Kroah-Hartman
From: Zhang Qilong [ Upstream commit d6ff32478d7e95d6ca199b5c852710d6964d5811 ] The pm_runtime_enable will decrement the power disable depth. Imbalance depth will resulted in enabling runtime PM of device fails later. Thus a pairing decrement must be needed on the error handling path to keep it

[PATCH 4.14 137/242] dm ioctl: fix error return code in target_message

2020-12-28 Thread Greg Kroah-Hartman
From: Qinglang Miao [ Upstream commit 4d7659bfbe277a43399a4a2d90fca141e70f29e1 ] Fix to return a negative error code from the error handling case instead of 0, as done elsewhere in this function. Fixes: 2ca4c92f58f9 ("dm ioctl: prevent empty message") Reported-by: Hulk Robot Signed-off-by: Qin

[PATCH 4.14 108/242] ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host

2020-12-28 Thread Greg Kroah-Hartman
From: Cristian Birsan [ Upstream commit be4dd2d448816a27c1446f8f37fce375daf64148 ] The pincontrol node is needed for USB Host since Linux v5.7-rc1. Without it the driver probes but VBus is not powered because of wrong pincontrol configuration. Fixes: 38153a017896f ("ARM: at91/dt: sama5d4: add d

[PATCH 4.14 107/242] memstick: fix a double-free bug in memstick_check

2020-12-28 Thread Greg Kroah-Hartman
From: Qinglang Miao [ Upstream commit e3e9ced5c93803d5b2ea1942c4bf0192622531d6 ] kfree(host->card) has been called in put_device so that another kfree would raise cause a double-free bug. Fixes: 0193383a5833 ("memstick: core: fix device_register() error handling") Reported-by: Hulk Robot Signe

[PATCH 4.14 113/242] samples: bpf: Fix lwt_len_hist reusing previous BPF map

2020-12-28 Thread Greg Kroah-Hartman
From: Daniel T. Lee [ Upstream commit 0afe0a998c40085a6342e1aeb4c510cccba46caf ] Currently, lwt_len_hist's map lwt_len_hist_map is uses pinning, and the map isn't cleared on test end. This leds to reuse of that map for each test, which prevents the results of the test from being accurate. This

[PATCH 4.14 111/242] cw1200: fix missing destroy_workqueue() on error in cw1200_init_common

2020-12-28 Thread Greg Kroah-Hartman
From: Qinglang Miao [ Upstream commit 7ec8a926188eb8e7a3cbaca43ec44f2d7146d71b ] Add the missing destroy_workqueue() before return from cw1200_init_common in the error handling case. Fixes: a910e4a94f69 ("cw1200: add driver for the ST-E CW1100 & CW1200 WLAN chipsets") Reported-by: Hulk Robot

[PATCH 4.14 129/242] media: saa7146: fix array overflow in vidioc_s_audio()

2020-12-28 Thread Greg Kroah-Hartman
From: Dan Carpenter [ Upstream commit 8e4d86e241cf035d6d3467cd346e7ce490681937 ] The "a->index" value comes from the user via the ioctl. The problem is that the shift can wrap resulting in setting "mxb->cur_audinput" to an invalid value, which later results in an array overflow. Fixes: 6680427

[PATCH 4.14 106/242] RDMA/cxgb4: Validate the number of CQEs

2020-12-28 Thread Greg Kroah-Hartman
From: Kamal Heib [ Upstream commit 6d8285e604e0221b67bd5db736921b7ddce37d00 ] Before create CQ, make sure that the requested number of CQEs is in the supported range. Fixes: cfdda9d76436 ("RDMA/cxgb4: Add driver for Chelsio T4 RNIC") Link: https://lore.kernel.org/r/20201108132007.67537-1-kamalh

[PATCH 4.14 151/242] usb: oxu210hp-hcd: Fix memory leak in oxu_create

2020-12-28 Thread Greg Kroah-Hartman
From: Zhang Qilong [ Upstream commit e5548b05631ec3e6bfdaef1cad28c799545b791b ] usb_create_hcd will alloc memory for hcd, and we should call usb_put_hcd to free it when adding fails to prevent memory leak. Fixes: b92a78e582b1a ("usb host: Oxford OXU210HP HCD driver") Reported-by: Hulk Robot Si

[PATCH 4.14 076/242] spi: img-spfi: fix reference leak in img_spfi_resume

2020-12-28 Thread Greg Kroah-Hartman
From: Zhang Qilong [ Upstream commit ee5558a9084584015c8754ffd029ce14a5827fa8 ] pm_runtime_get_sync will increment pm usage counter even it failed. Forgetting to pm_runtime_put_noidle will result in reference leak in img_spfi_resume, so we should fix it. Fixes: deba25800a12b ("spi: Add driver f

[PATCH 4.14 077/242] ASoC: pcm: DRAIN support reactivation

2020-12-28 Thread Greg Kroah-Hartman
From: Cezary Rojewski [ Upstream commit 4c22b80f61540ea99d9b4af0127315338755f05b ] soc-pcm's dpcm_fe_dai_do_trigger() supported DRAIN commnad up to kernel v5.4 where explicit switch(cmd) has been introduced which takes into account all SNDRV_PCM_TRIGGER_xxx but SNDRV_PCM_TRIGGER_DRAIN. Update sw

[PATCH 4.14 081/242] spi: spi-ti-qspi: fix reference leak in ti_qspi_setup

2020-12-28 Thread Greg Kroah-Hartman
From: Zhang Qilong [ Upstream commit 45c0cba753641e5d7c3207f04241bd0e7a021698 ] pm_runtime_get_sync will increment pm usage counter even it failed. Forgetting to pm_runtime_put_noidle will result in reference leak in ti_qspi_setup, so we should fix it. Fixes: 505a14954e2d7 ("spi/qspi: Add qspi

[PATCH 4.14 126/242] lockd: dont use interval-based rebinding over TCP

2020-12-28 Thread Greg Kroah-Hartman
From: Calum Mackay [ Upstream commit 9b82d88d5976e5f2b8015d58913654856576ace5 ] NLM uses an interval-based rebinding, i.e. it clears the transport's binding under certain conditions if more than 60 seconds have elapsed since the connection was last bound. This rebinding is not necessary for an

[PATCH 4.14 125/242] SUNRPC: xprt_load_transport() needs to support the netid "rdma6"

2020-12-28 Thread Greg Kroah-Hartman
From: Trond Myklebust [ Upstream commit d5aa6b22e2258f05317313ecc02efbb988ed6d38 ] According to RFC5666, the correct netid for an IPv6 addressed RDMA transport is "rdma6", which we've supported as a mount option since Linux-4.7. The problem is when we try to load the module "xprtrdma6", that wil

[PATCH 4.14 103/242] soc: ti: Fix reference imbalance in knav_dma_probe

2020-12-28 Thread Greg Kroah-Hartman
From: Zhang Qilong [ Upstream commit b4fa73358c306d747a2200aec6f7acb97e5750e6 ] The patch fix two reference leak. 1) pm_runtime_get_sync will increment pm usage counter even it failed. Forgetting to call put operation will result in reference leak. 2) The pm_runtime_enable will i

[PATCH 4.14 105/242] Input: omap4-keypad - fix runtime PM error handling

2020-12-28 Thread Greg Kroah-Hartman
From: Zhang Qilong [ Upstream commit 59bbf83835f591b95c3bdd09d900f3584fa227af ] In omap4_keypad_probe, the patch fix several bugs. 1) pm_runtime_get_sync will increment pm usage counter even it failed. Forgetting to pm_runtime_put_noidle will result in reference leak. 2) In err_u

[PATCH 4.14 114/242] mips: cdmm: fix use-after-free in mips_cdmm_bus_discover

2020-12-28 Thread Greg Kroah-Hartman
From: Qinglang Miao [ Upstream commit f0e82242b16826077a2775eacfe201d803bb7a22 ] kfree(dev) has been called inside put_device so anther kfree would cause a use-after-free bug/ Fixes: 8286ae03308c ("MIPS: Add CDMM bus support") Reported-by: Hulk Robot Signed-off-by: Qinglang Miao Acked-by: Ser

[PATCH 4.14 094/242] scsi: core: Fix VPD LUN ID designator priorities

2020-12-28 Thread Greg Kroah-Hartman
From: Martin Wilck [ Upstream commit 2e4209b3806cda9b89c30fd5e7bfecb7044ec78b ] The current implementation of scsi_vpd_lun_id() uses the designator length as an implicit measure of priority. This works most of the time, but not always. For example, some Hitachi storage arrays return this in VPD

[PATCH 4.14 080/242] Bluetooth: Fix null pointer dereference in hci_event_packet()

2020-12-28 Thread Greg Kroah-Hartman
From: Anmol Karn [ Upstream commit 6dfccd13db2ff2b709ef60a50163925d477549aa ] AMP_MGR is getting derefernced in hci_phy_link_complete_evt(), when called from hci_event_packet() and there is a possibility, that hcon->amp_mgr may not be found when accessing after initialization of hcon. - net/blu

[PATCH 4.14 093/242] media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm()

2020-12-28 Thread Greg Kroah-Hartman
From: Yu Kuai [ Upstream commit 27c3943683f74e35e1d390ceb2e3639eff616ad6 ] mtk_vcodec_release_dec_pm() will be called in two places: a. mtk_vcodec_init_dec_pm() succeed while mtk_vcodec_probe() return error. b. mtk_vcodec_dec_remove(). In both cases put_device() call is needed, since of_find_d

[PATCH 4.14 092/242] staging: greybus: codecs: Fix reference counter leak in error handling

2020-12-28 Thread Greg Kroah-Hartman
From: Zhang Qilong [ Upstream commit 3952659a6108f77a0d062d8e8487bdbdaf52a66c ] gb_pm_runtime_get_sync has increased the usage counter of the device here. Forgetting to call gb_pm_runtime_put_noidle will result in usage counter leak in the error branch of (gbcodec_hw_params and gbcodec_prepare).

[PATCH 4.14 079/242] arm64: dts: exynos: Correct psci compatible used on Exynos7

2020-12-28 Thread Greg Kroah-Hartman
From: Paweł Chmiel [ Upstream commit e1e47fbca668507a81bb388fcae044b89d112ecc ] It's not possible to reboot or poweroff Exynos7420 using PSCI. Instead we need to use syscon reboot/poweroff drivers, like it's done for other Exynos SoCs. This was confirmed by checking vendor source and testing it

[PATCH 4.14 100/242] powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32

2020-12-28 Thread Greg Kroah-Hartman
From: Christophe Leroy [ Upstream commit 78665179e569c7e1fe102fb6c21d0f5b6951f084 ] On 8xx, we get the following features: [0.00] cpu_features = 0x0100 [0.00] possible= 0x0120 [0.00] always = 0x This is n

[PATCH 4.14 078/242] selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling

2020-12-28 Thread Greg Kroah-Hartman
From: Paul Moore [ Upstream commit 200ea5a2292dc444a818b096ae6a32ba3caa51b9 ] A previous fix, commit 83370b31a915 ("selinux: fix error initialization in inode_doinit_with_dentry()"), changed how failures were handled before a SELinux policy was loaded. Unfortunately that patch was potentially p

[PATCH 4.14 090/242] RDMa/mthca: Work around -Wenum-conversion warning

2020-12-28 Thread Greg Kroah-Hartman
From: Arnd Bergmann [ Upstream commit fbb7dc5db6dee553b5a07c27e86364a5223e244c ] gcc points out a suspicious mixing of enum types in a function that converts from MTHCA_OPCODE_* values to IB_WC_* values: drivers/infiniband/hw/mthca/mthca_cq.c: In function 'mthca_poll_one': drivers/infiniband/hw

[PATCH 4.14 097/242] Input: ads7846 - fix race that causes missing releases

2020-12-28 Thread Greg Kroah-Hartman
From: David Jander [ Upstream commit e52cd628a03f72a547dbf90ccb703ee64800504a ] If touchscreen is released while busy reading HWMON device, the release can be missed. The IRQ thread is not started because no touch is active and BTN_TOUCH release event is never sent. Fixes: f5a28a7d4858f94a ("In

[PATCH 4.14 096/242] drm/omap: dmm_tiler: fix return error code in omap_dmm_probe()

2020-12-28 Thread Greg Kroah-Hartman
From: Yang Yingliang [ Upstream commit 723ae803218da993143387bf966042eccefac077 ] Return -ENOMEM when allocating refill memory failed. Fixes: 71e8831f6407 ("drm/omap: DMM/TILER support for OMAP4+ platform") Reported-by: Hulk Robot Signed-off-by: Yang Yingliang Signed-off-by: Thomas Zimmermann

[PATCH 4.14 089/242] ASoC: arizona: Fix a wrong free in wm8997_probe

2020-12-28 Thread Greg Kroah-Hartman
From: Zhang Qilong [ Upstream commit 5e7aace13df24ff72511f29c14ebbfe638ef733c ] In the normal path, we should not free the arizona, we should return immediately. It will be free when call remove operation. Fixes: 31833ead95c2c ("ASoC: arizona: Move request of speaker IRQs into bus probe") Repo

[PATCH 4.14 101/242] crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe

2020-12-28 Thread Greg Kroah-Hartman
From: Zhang Qilong [ Upstream commit ff8107200367f4abe0e5bce66a245e8d0f2d229e ] The pm_runtime_enable will increase power disable depth. Thus a pairing decrement is needed on the error handling path to keep it balanced according to context. Fixes: f7b2b5dd6a62a ("crypto: omap-aes - add error ch

[PATCH 4.14 088/242] net: evaluate net.ipv4.conf.all.proxy_arp_pvlan

2020-12-28 Thread Greg Kroah-Hartman
From: Vincent Bernat [ Upstream commit 1af5318c00a8acc33a90537af49b3f23f72a2c4b ] Introduced in 65324144b50b, the "proxy_arp_vlan" sysctl is a per-interface sysctl to tune proxy ARP support for private VLANs. While the "all" variant is exposed, it was a noop and never evaluated. We use the usual

[PATCH 4.14 123/242] ath10k: Release some resources in an error handling path

2020-12-28 Thread Greg Kroah-Hartman
From: Christophe JAILLET [ Upstream commit 6364e693f4a7a89a2fb3dd2cbd6cc06d5fd6e26d ] Should an error occur after calling 'ath10k_usb_create()', it should be undone by a corresponding 'ath10k_usb_destroy()' call Fixes: 4db66499df91 ("ath10k: add initial USB support") Signed-off-by: Christophe J

[PATCH 4.14 060/242] quota: Sanity-check quota file headers on load

2020-12-28 Thread Greg Kroah-Hartman
From: Jan Kara commit 11c514a99bb960941535134f0587102855e8ddee upstream. Perform basic sanity checks of quota headers to avoid kernel crashes on corrupted quota files. CC: sta...@vger.kernel.org Reported-by: syzbot+f816042a7ae2225f2...@syzkaller.appspotmail.com Reviewed-by: Andreas Dilger Sign

[PATCH 4.14 121/242] ARM: dts: at91: at91sam9rl: fix ADC triggers

2020-12-28 Thread Greg Kroah-Hartman
From: Alexandre Belloni [ Upstream commit 851a95da583c26e2ddeb7281e9b61f0d76ea5aba ] The triggers for the ADC were taken from at91sam9260 dtsi but are not correct. Fixes: a4c1d6c75822 ("ARM: at91/dt: sam9rl: add lcd, adc, usb gadget and pwm support") Signed-off-by: Alexandre Belloni Link: ht

[PATCH 4.14 074/242] sched: Reenable interrupts in do_sched_yield()

2020-12-28 Thread Greg Kroah-Hartman
From: Thomas Gleixner [ Upstream commit 345a957fcc95630bf5535d7668a59ed983eb49a7 ] do_sched_yield() invokes schedule() with interrupts disabled which is not allowed. This goes back to the pre git era to commit a6efb709806c ("[PATCH] irqlock patch 2.5.27-H6") in the history tree. Reenable interr

[PATCH 4.14 047/242] dm table: Remove BUG_ON(in_interrupt())

2020-12-28 Thread Greg Kroah-Hartman
From: Thomas Gleixner [ Upstream commit e7b624183d921b49ef0a96329f21647d38865ee9 ] The BUG_ON(in_interrupt()) in dm_table_event() is a historic leftover from a rework of the dm table code which changed the calling context. Issuing a BUG for a wrong calling context is frowned upon and in_interru

[PATCH 4.14 099/242] Input: ads7846 - fix unaligned access on 7845

2020-12-28 Thread Greg Kroah-Hartman
From: Dmitry Torokhov [ Upstream commit 03e2c9c782f721b661a0e42b1b58f394b5298544 ] req->sample[1] is not naturally aligned at word boundary, and therefore we should use get_unaligned_be16() when accessing it. Fixes: 3eac5c7e44f3 ("Input: ads7846 - extend the driver for ads7845 controller suppo

[PATCH 4.14 071/242] x86/mm/ident_map: Check for errors from ident_pud_init()

2020-12-28 Thread Greg Kroah-Hartman
From: Arvind Sankar [ Upstream commit 1fcd009102ee02e217f2e7635ab65517d785da8e ] Commit ea3b5e60ce80 ("x86/mm/ident_map: Add 5-level paging support") added ident_p4d_init() to support 5-level paging, but this function doesn't check and return errors from ident_pud_init(). For example, the d

[PATCH 4.14 086/242] ASoC: wm8998: Fix PM disable depth imbalance on error

2020-12-28 Thread Greg Kroah-Hartman
From: Zhang Qilong [ Upstream commit 193aa0a043645220d2a2f783ba06ae13d4601078 ] The pm_runtime_enable will increase power disable depth. Thus a pairing decrement is needed on the error handling path to keep it balanced according to context. Fixes: 31833ead95c2c ("ASoC: arizona: Move request of

[PATCH 4.14 098/242] Input: ads7846 - fix integer overflow on Rt calculation

2020-12-28 Thread Greg Kroah-Hartman
From: Oleksij Rempel [ Upstream commit 820830ec918f6c3dcd77a54a1c6198ab57407916 ] In some rare cases the 32 bit Rt value will overflow if z2 and x is max, z1 is minimal value and x_plate_ohms is relatively high (for example 800 ohm). This would happen on some screen age with low pressure. There

[PATCH 4.14 084/242] spi: tegra114: fix reference leak in tegra spi ops

2020-12-28 Thread Greg Kroah-Hartman
From: Zhang Qilong [ Upstream commit a042184c7fb99961ea083d4ec192614bec671969 ] pm_runtime_get_sync will increment pm usage counter even it failed. Forgetting to pm_runtime_put_noidle will result in reference leak in two callers(tegra_spi_setup and tegra_spi_resume), so we should fix it. Fixes:

[PATCH 4.14 082/242] spi: tegra20-slink: fix reference leak in slink ops of tegra20

2020-12-28 Thread Greg Kroah-Hartman
From: Zhang Qilong [ Upstream commit 763eab7074f6e71babd85d796156f05a675f9510 ] pm_runtime_get_sync will increment pm usage counter even it failed. Forgetting to pm_runtime_put_noidle will result in reference leak in two callers(tegra_slink_setup and tegra_slink_resume), so we should fix it. Fi

[PATCH 4.14 091/242] MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA

2020-12-28 Thread Greg Kroah-Hartman
From: Necip Fazil Yildiran [ Upstream commit 3a5fe2fb9635c43359c9729352f45044f3c8df6b ] When BCM47XX_BCMA is enabled and BCMA_DRIVER_PCI is disabled, it results in the following Kbuild warning: WARNING: unmet direct dependencies detected for BCMA_DRIVER_PCI_HOSTMODE Depends on [n]: MIPS [=y]

[PATCH 4.14 067/242] soc: mediatek: Check if power domains can be powered on at boot time

2020-12-28 Thread Greg Kroah-Hartman
From: Nicolas Boichat [ Upstream commit 4007844b05815717f522c7ea9914e24ad0ff6c79 ] In the error case, where a power domain cannot be powered on successfully at boot time (in mtk_register_power_domains), pm_genpd_init would still be called with is_off=false, and the system would later try to disa

[PATCH 4.14 049/242] USB: serial: option: add interface-number sanity check to flag handling

2020-12-28 Thread Greg Kroah-Hartman
From: Johan Hovold commit a251963f76fa0226d0fdf0c4f989496f18d9ae7f upstream. Add an interface-number sanity check before testing the device flags to avoid relying on undefined behaviour when left shifting in case a device uses an interface number greater than or equal to BITS_PER_LONG (i.e. 64 o

[PATCH 4.14 064/242] Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt()

2020-12-28 Thread Greg Kroah-Hartman
From: Peilin Ye commit f7e0e8b2f1b0a09b527885babda3e912ba820798 upstream. `num_reports` is not being properly checked. A malformed event packet with a large `num_reports` number makes hci_le_direct_adv_report_evt() read out of bounds. Fix it. Cc: sta...@vger.kernel.org Fixes: 2f010b55884e ("Blu

[PATCH 4.14 066/242] soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains()

2020-12-28 Thread Greg Kroah-Hartman
From: Dan Carpenter [ Upstream commit cf25d802e029c31efac8bdc979236927f37183bd ] This code needs to call iounmap() on one error path. Fixes: 2173fc7cb681 ("ARM: shmobile: R-Mobile: Add DT support for PM domains") Signed-off-by: Dan Carpenter Link: https://lore.kernel.org/r/20200923113142.GC147

[PATCH 4.14 056/242] ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410

2020-12-28 Thread Greg Kroah-Hartman
From: Krzysztof Kozlowski commit 3d992fd8f4e0f09c980726308d2f2725587b32d6 upstream. The VBUS control (PWREN) and over-current pins of USB 3.0 DWC3 controllers are on Exynos5410 regular GPIOs. This is different than for example on Exynos5422 where these are special ETC pins with proper reset val

[PATCH 4.14 063/242] md: fix a warning caused by a race between concurrent md_ioctl()s

2020-12-28 Thread Greg Kroah-Hartman
From: Dae R. Jeong commit c731b84b51bf7fe83448bea8f56a6d55006b0615 upstream. Syzkaller reports a warning as belows. WARNING: CPU: 0 PID: 9647 at drivers/md/md.c:7169 ... Call Trace: ... RIP: 0010:md_ioctl+0x4017/0x5980 drivers/md/md.c:7169 RSP: 0018:888096027950 EFLAGS: 00010293 RAX: 888

[PATCH 4.14 041/242] RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait

2020-12-28 Thread Greg Kroah-Hartman
From: Leon Romanovsky [ Upstream commit 340b940ea0ed12d9adbb8f72dea17d516b2019e8 ] If cm_create_timewait_info() fails, the timewait_info pointer will contain an error value and will be used in cm_remove_remote() later. general protection fault, probably for non-canonical address 0xdc

[PATCH 4.14 015/242] x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP

2020-12-28 Thread Greg Kroah-Hartman
From: Arvind Sankar commit 29ac40cbed2bc06fa218ca25d7f5e280d3d08a25 upstream. The PAT bit is in different locations for 4k and 2M/1G page table entries. Add a definition for _PAGE_LARGE_CACHE_MASK to represent the three caching bits (PWT, PCD, PAT), similar to _PAGE_CACHE_MASK for 4k pages, and

[PATCH 4.14 012/242] pinctrl: amd: remove debounce filter setting in IRQ type setting

2020-12-28 Thread Greg Kroah-Hartman
From: Coiby Xu commit 47a0001436352c9853d72bf2071e85b316d688a2 upstream. Debounce filter setting should be independent from IRQ type setting because according to the ACPI specs, there are separate arguments for specifying debounce timeout and IRQ type in GpioIo() and GpioInt(). Together with co

[PATCH 4.14 035/242] pinctrl: merrifield: Set default bias in case no particular value given

2020-12-28 Thread Greg Kroah-Hartman
From: Andy Shevchenko [ Upstream commit 0fa86fc2e28227f1e64f13867e73cf864c6d25ad ] When GPIO library asks pin control to set the bias, it doesn't pass any value of it and argument is considered boolean (and this is true for ACPI GpioIo() / GpioInt() resources, by the way). Thus, individual drive

[PATCH 4.14 011/242] Input: i8042 - add Acer laptops to the i8042 reset list

2020-12-28 Thread Greg Kroah-Hartman
From: Chris Chiu commit ce6520b0eafad5962ffc21dc47cd7bd3250e9045 upstream. The touchpad operates in Basic Mode by default in the Acer BIOS setup, but some Aspire/TravelMate models require the i8042 to be reset in order to be correctly detected. Signed-off-by: Chris Chiu Link: https://lore.kern

[PATCH v2 1/2] platform/x86: dell-privacy: Add support for Dell hardware privacy

2020-12-28 Thread Perry Yuan
From: Perry Yuan add support for dell privacy driver for the dell units equipped hardware privacy design, which protect users privacy of audio and camera from hardware level. once the audio or camera privacy mode enabled, any applications will not get any audio or video stream. when user pressed

[PATCH 4.14 032/242] ALSA: pcm: oss: Fix potential out-of-bounds shift

2020-12-28 Thread Greg Kroah-Hartman
From: Takashi Iwai commit 175b8d89fe292796811fdee87fa39799a5b6b87a upstream. syzbot spotted a potential out-of-bounds shift in the PCM OSS layer where it calculates the buffer size with the arbitrary shift value given via an ioctl. Add a range check for avoiding the undefined behavior. As the v

[PATCH 4.14 038/242] gpio: mvebu: fix potential user-after-free on probe

2020-12-28 Thread Greg Kroah-Hartman
From: Baruch Siach [ Upstream commit 7ee1a01e47403f72b9f38839a737692f6991263e ] When mvebu_pwm_probe() fails IRQ domain is not released. Move pwm probe before IRQ domain allocation. Add pwm cleanup code to the failure path. Fixes: 757642f9a584 ("gpio: mvebu: Add limited PWM support") Reported-b

[PATCH 4.14 037/242] ARM: dts: sun8i: v3s: fix GIC node memory range

2020-12-28 Thread Greg Kroah-Hartman
From: Icenowy Zheng [ Upstream commit a98fd117a2553ab1a6d2fe3c7acae88c1eca4372 ] Currently the GIC node in V3s DTSI follows some old DT examples, and being broken. This leads a warning at boot. Fix this. Fixes: f989086ccbc6 ("ARM: dts: sunxi: add dtsi file for V3s SoC") Signed-off-by: Icenowy

[PATCH 4.14 034/242] drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi

2020-12-28 Thread Greg Kroah-Hartman
From: Xin Xiong commit a34a0a632dd991a371fec56431d73279f9c54029 upstream drm_dp_mst_allocate_vcpi() invokes drm_dp_mst_topology_get_port_validated(), which increases the refcount of the "port". These reference counting issues take place in two exception handling paths separately. Either when “s

[PATCH 4.14 024/242] mac80211: mesh: fix mesh_pathtbl_init() error path

2020-12-28 Thread Greg Kroah-Hartman
From: Eric Dumazet [ Upstream commit 905b2032fa424f253d9126271439cc1db2b01130 ] If tbl_mpp can not be allocated, we call mesh_table_free(tbl_path) while tbl_path rhashtable has not yet been initialized, which causes panics. Simply factorize the rhashtable_init() call into mesh_table_alloc() WA

[PATCH 4.14 025/242] USB: dummy-hcd: Fix uninitialized array use in init()

2020-12-28 Thread Greg Kroah-Hartman
From: Bui Quang Minh commit e90cfa813da7a527785033a0b247594c2de93dd8 upstream. This error path err_add_pdata: for (i = 0; i < mod_data.num; i++) kfree(dum[i]); can be triggered when not all dum's elements are initialized. Fix this by initializin

[PATCH 4.14 023/242] net: bridge: vlan: fix error return code in __vlan_add()

2020-12-28 Thread Greg Kroah-Hartman
From: Zhang Changzhong [ Upstream commit ee4f52a8de2c6f78b01f10b4c330867d88c1653a ] Fix to return a negative error code from the error handling case instead of 0, as done elsewhere in this function. Fixes: f8ed289fab84 ("bridge: vlan: use br_vlan_(get|put)_master to deal with refcounts") Repor

[PATCH 4.14 009/242] platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE

2020-12-28 Thread Greg Kroah-Hartman
From: Timo Witte [ Upstream commit 9e7a005ad56aa7d6ea5830c5ffcc60bf35de380b ] Got a dmesg message on my AMD Renoir based Acer laptop: "acer_wmi: Unknown key number - 0x84" when toggling keyboard background light Signed-off-by: Timo Witte Reviewed-by: "Lee, Chun-Yi" Link: https://lore.kernel.o

[PATCH 4.14 008/242] soc: fsl: dpio: Get the cpumask through cpumask_of(cpu)

2020-12-28 Thread Greg Kroah-Hartman
From: Hao Si [ Upstream commit 2663b3388551230cbc4606a40fabf3331ceb59e4 ] The local variable 'cpumask_t mask' is in the stack memory, and its address is assigned to 'desc->affinity' in 'irq_set_affinity_hint()'. But the memory area where this variable is located is at risk of being modified. Du

[PATCH 4.14 005/242] iwlwifi: mvm: fix kernel panic in case of assert during CSA

2020-12-28 Thread Greg Kroah-Hartman
From: Sara Sharon [ Upstream commit fe56d05ee6c87f6a1a8c7267affd92c9438249cc ] During CSA, we briefly nullify the phy context, in __iwl_mvm_unassign_vif_chanctx. In case we have a FW assert right after it, it remains NULL though. We end up running into endless loop due to mac80211 trying repeat

[PATCH 4.14 033/242] serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access

2020-12-28 Thread Greg Kroah-Hartman
From: Alexander Sverdlin commit d96f04d347e4011977abdbb4da5d8f303ebd26f8 upstream. It has been observed that once per 300-1300 port openings the first transmitted byte is being corrupted on AM3352 ("v" written to FIFO appeared as "e" on the wire). It only happened if single byte has been transmi

[PATCH 4.14 031/242] USB: sisusbvga: Make console support depend on BROKEN

2020-12-28 Thread Greg Kroah-Hartman
From: Thomas Gleixner commit 862ee699fefe1e6d6f2c1518395f0b999b8beb15 upstream. The console part of sisusbvga is broken vs. printk(). It uses in_atomic() to detect contexts in which it cannot sleep despite the big fat comment in preempt.h which says: Do not use in_atomic() in driver code. in_at

[PATCH 4.14 030/242] USB: UAS: introduce a quirk to set no_write_same

2020-12-28 Thread Greg Kroah-Hartman
From: Oliver Neukum commit 8010622c86ca5bb44bc98492f5968726fc7c7a21 upstream. UAS does not share the pessimistic assumption storage is making that devices cannot deal with WRITE_SAME. A few devices supported by UAS, are reported to not deal well with WRITE_SAME. Those need a quirk. Add it to t

[PATCH 4.14 028/242] ALSA: usb-audio: Fix control access overflow errors from chmap

2020-12-28 Thread Greg Kroah-Hartman
From: Takashi Iwai commit c6dde8ffd071aea9d1ce64279178e470977b235c upstream. The current channel-map control implementation in USB-audio driver may lead to an error message like "control 3:0:0:Playback Channel Map:0: access overflow" when CONFIG_SND_CTL_VALIDATION is set. It's because the chm

[PATCH 4.14 020/242] net/mlx4_en: Handle TX error CQE

2020-12-28 Thread Greg Kroah-Hartman
From: Moshe Shemesh [ Upstream commit ba603d9d7b1215c72513d7c7aa02b6775fd4891b ] In case error CQE was found while polling TX CQ, the QP is in error state and all posted WQEs will generate error CQEs without any data transmitted. Fix it by reopening the channels, via same method used for TX time

[PATCH 4.14 026/242] USB: add RESET_RESUME quirk for Snapscan 1212

2020-12-28 Thread Greg Kroah-Hartman
From: Oliver Neukum commit 08a02f954b0def3ada8ed6d4b2c7bcb67e885e9c upstream. I got reports that some models of this old scanner need this when using runtime PM. Signed-off-by: Oliver Neukum Cc: stable Link: https://lore.kernel.org/r/20201207130323.23857-1-oneu...@suse.com Signed-off-by: Greg

[PATCH 4.14 019/242] net/mlx4_en: Avoid scheduling restart task if it is already running

2020-12-28 Thread Greg Kroah-Hartman
From: Moshe Shemesh [ Upstream commit fed91613c9dd455dd154b22fa8e11b8526466082 ] Add restarting state flag to avoid scheduling another restart task while such task is already running. Change task name from watchdog_task to restart_task to better fit the task role. Fixes: 1e338db56e5a ("mlx4_en:

[PATCH 4.14 018/242] tcp: fix cwnd-limited bug for TSO deferral where we send nothing

2020-12-28 Thread Greg Kroah-Hartman
From: Neal Cardwell [ Upstream commit 299bcb55ecd1412f6df606e9dc0912d55610029e ] When cwnd is not a multiple of the TSO skb size of N*MSS, we can get into persistent scenarios where we have the following sequence: (1) ACK for full-sized skb of N*MSS arrives -> tcp_write_xmit() transmit full-s

[PATCH 4.9 159/175] jffs2: Fix GC exit abnormally

2020-12-28 Thread Greg Kroah-Hartman
From: Zhe Li commit 9afc9a8a4909fece0e911e72b1060614ba2f7969 upstream. The log of this problem is: jffs2: Error garbage collecting node at 0x***! jffs2: No space for garbage collection. Aborting GC thread This is because GC believe that it do nothing, so it abort. After going over the image of

[PATCH 4.14 016/242] PCI: qcom: Add missing reset for ipq806x

2020-12-28 Thread Greg Kroah-Hartman
From: Ansuel Smith commit ee367e2cdd2202b5714982739e684543cd2cee0e upstream Add missing ext reset used by ipq8064 SoC in PCIe qcom driver. Link: https://lore.kernel.org/r/20200615210608.21469-5-ansuels...@gmail.com Fixes: 82a823833f4e ("PCI: qcom: Add Qualcomm PCIe controller driver") Signed-of

[PATCH 4.14 003/242] iwlwifi: pcie: limit memory read spin time

2020-12-28 Thread Greg Kroah-Hartman
From: Johannes Berg [ Upstream commit 04516706bb99889986ddfa3a769ed50d2dc7ac13 ] When we read device memory, we lock a spinlock, write the address we want to read from the device and then spin in a loop reading the data in 32-bit quantities from another register. As the description makes clear,

[PATCH 4.9 174/175] xen-blkback: set ring->xenblkd to NULL after kthread_stop()

2020-12-28 Thread Greg Kroah-Hartman
From: Pawel Wieczorkiewicz commit 1c728719a4da6e654afb9cc047164755072ed7c9 upstream. When xen_blkif_disconnect() is called, the kernel thread behind the block interface is stopped by calling kthread_stop(ring->xenblkd). The ring->xenblkd thread pointer being non-NULL determines if the thread has

[PATCH 4.9 175/175] PCI: Fix pci_slot_release() NULL pointer dereference

2020-12-28 Thread Greg Kroah-Hartman
From: Jubin Zhong commit 4684709bf81a2d98152ed6b610e3d5c403f9bced upstream. If kobject_init_and_add() fails, pci_slot_release() is called to delete slot->list from parent->slots. But slot->list hasn't been initialized yet, so we dereference a NULL pointer: Unable to handle kernel NULL pointe

[PATCH 4.9 156/175] KVM: arm64: Introduce handling of AArch32 TTBCR2 traps

2020-12-28 Thread Greg Kroah-Hartman
From: Marc Zyngier commit ca4e514774930f30b66375a974b5edcbebaf0e7e upstream. ARMv8.2 introduced TTBCR2, which shares TCR_EL1 with TTBCR. Gracefully handle traps to this register when HCR_EL2.TVM is set. Cc: sta...@vger.kernel.org Reported-by: James Morse Signed-off-by: Marc Zyngier Signed-off

[PATCH 4.14 017/242] net: stmmac: free tx skb buffer in stmmac_resume()

2020-12-28 Thread Greg Kroah-Hartman
From: Fugang Duan [ Upstream commit 4ec236c7c51f89abb0224a4da4a6b77f9beb6600 ] When do suspend/resume test, there have WARN_ON() log dump from stmmac_xmit() funciton, the code logic: entry = tx_q->cur_tx; first_entry = entry; WARN_ON(tx_q->tx_skbuff[first_entry]); In nor

[PATCH 4.9 155/175] ext4: fix a memory leak of ext4_free_data

2020-12-28 Thread Greg Kroah-Hartman
From: Chunguang Xu commit cca415537244f6102cbb09b5b90db6ae2c953bdd upstream. When freeing metadata, we will create an ext4_free_data and insert it into the pending free list. After the current transaction is committed, the object will be freed. ext4_mb_free_metadata() will check whether the ar

[PATCH 4.14 001/242] spi: bcm2835aux: Fix use-after-free on unbind

2020-12-28 Thread Greg Kroah-Hartman
From: Lukas Wunner [ Upstream commit e13ee6cc4781edaf8c7321bee19217e3702ed481 ] bcm2835aux_spi_remove() accesses the driver's private data after calling spi_unregister_master() even though that function releases the last reference on the spi_master and thereby frees the private data. Fix by swi

[PATCH 4.9 151/175] btrfs: quota: Set rescan progress to (u64)-1 if we hit last leaf

2020-12-28 Thread Greg Kroah-Hartman
From: Qu Wenruo commoit 6f7de19ed3d4d3526ca5eca428009f97cf969c2f upstream Commit ff3d27a048d9 ("btrfs: qgroup: Finish rescan when hit the last leaf of extent tree") added a new exit for rescan finish. However after finishing quota rescan, we set fs_info->qgroup_rescan_progress to (u64)-1 before

[PATCH 4.14 002/242] spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe

2020-12-28 Thread Greg Kroah-Hartman
From: Nathan Chancellor [ Upstream commit d853b3406903a7dc5b14eb5bada3e8cd677f66a2 ] Clang warns: drivers/spi/spi-bcm2835aux.c:532:50: warning: variable 'err' is uninitialized when used here [-Wuninitialized] dev_err(&pdev->dev, "could not get clk: %d\n", err);

[PATCH 4.9 160/175] jfs: Fix array index bounds check in dbAdjTree

2020-12-28 Thread Greg Kroah-Hartman
From: Dave Kleikamp commit c61b3e4839007668360ed8b87d7da96d2e59fc6c upstream. Bounds checking tools can flag a bug in dbAdjTree() for an array index out of bounds in dmt_stree. Since dmt_stree can refer to the stree in both structures dmaptree and dmapctl, use the larger array to eliminate the f

[PATCH 4.9 122/175] net: korina: fix return value

2020-12-28 Thread Greg Kroah-Hartman
From: Vincent Stehlé [ Upstream commit 7eb000bdbe7c7da811ef51942b356f6e819b13ba ] The ndo_start_xmit() method must not attempt to free the skb to transmit when returning NETDEV_TX_BUSY. Therefore, make sure the korina_send_packet() function returns NETDEV_TX_OK when it frees a packet. Fixes: ef

Re: [PATCH 01/14] mfd: arizona: Add jack pointer to struct arizona

2020-12-28 Thread Mark Brown
On Mon, Dec 28, 2020 at 02:16:04PM +0100, Hans de Goede wrote: > And more in general AFAIK extcon is sort of deprecated and it is > not advised to use it for new code. I would esp. not expect it to > be used for new jack-detection code since we already have standard > uAPI support for that through

[PATCH 4.9 172/175] iio:pressure:mpl3115: Force alignment of buffer

2020-12-28 Thread Greg Kroah-Hartman
From: Jonathan Cameron commit 198cf32f0503d2ad60d320b95ef6fb8243db857f upstream. Whilst this is another case of the issue Lars reported with an array of elements of smaller than 8 bytes being passed to iio_push_to_buffers_with_timestamp(), the solution here is a bit different from the other case

<    2   3   4   5   6   7   8   9   10   11   >