Re: [PATCH 4.2.y-ckt 009/211] xhci: don't finish a TD if we get a short transfer event mid TD

On Wed, 2016-01-06 at 11:55 -0800, Kamal Mostafa wrote: > On Wed, 2016-01-06 at 17:05 +0000, Ben Hutchings wrote: > > On Tue, 2016-01-05 at 11:41 -0800, Kamal Mostafa wrote: > > > 4.2.8-ckt1 -stable review patch.  If anyone has any objections, please

[stable 3.2-4.1] drm/radeon: fix hotplug race at startup

at startup v3.18.22: e21fe65717ca drm/radeon: fix hotplug race at startup v3.16.7-ckt17: 87fdee8a92b0 drm/radeon: fix hotplug race at startup Ben. -- Ben Hutchings Life would be so much easier if we could look at the source code. signature.asc Description: This is a digitally signed message

Re: [PATCH 4.2.y-ckt 009/211] xhci: don't finish a TD if we get a short transfer event mid TD

his causes regressions (see https://bugs.debian.org/808602 and https://bugs.debian.org/808953 ) so please hold off until there's a complete fix upstream. Ben. -- Ben Hutchings It is easier to write an incorrect program than to understand a correct one. signature.asc Description: This is a digitally signed message part

Re: [PATCH stable-3.2 stable-3.12] net: fix checksum check in skb_copy_and_csum_datagram_iovec()

.2.y: commit 127500d724f8 > >   stable-3.12.y: commit 3e1ac3aafbd0 > > Applied this fix to 3.12. Thanks! [...] You don't want this, you want Eric's fix (commit 197c949e7, "udp: properly support MSG_PEEK with truncated buffers") although that's not upstream

[stable 3.18+] block/sd: Fix device-imposed transfer length limits

and then backported to those stable branches. Ben. -- Ben Hutchings All the simple programs have been written, and all the good names taken. signature.asc Description: This is a digitally signed message part

[stable 4.3] drm/nouveau/pmu: do not assume a PMU is present

cases by checking whether the pointer given to nvkm_pmu_pgob() is valid. Signed-off-by: Alexandre Courbot Signed-off-by: Ben Skeggs Ben -- Ben Hutchings All the simple programs have been written, and all the good names taken. signature.asc Description: This is a digitally signed

Linux 3.2.75

dd support for Novatel MiFi USB620L Alexey Khoroshilov (1): USB: whci-hcd: add check for dma mapping error Andrew Lunn (1): ipv4: igmp: Allow removing groups from a removed interface Ben Hutchings (7): USB: ti_usb_3410_502: Fix ID table size xhci: Add XHCI_INTEL_HOST quirk

[PATCH 3.16] drm/i915: Disable PSMI sleep messages on all rings around context switches

).  I gave up trying to backport to 3.14. Ben. -- Ben Hutchings This sentence contradicts itself - no actually it doesn't. From d2317cde33256e6e0f302af8ed8a888e35921255 Mon Sep 17 00:00:00 2001 From: Chris Wilson Date: Tue, 16 Dec 2014 10:02:27 + Subject: [PATCH] drm/i915: Disable PSMI

Security fixes for 2.6.32-stable

ereference in ext4_fill_super() (CVE-2015-8324) Ben. -- Ben Hutchings Power corrupts. Absolute power is kind of neat. - John Lehman, Secretary of the US Navy 1981-1987 security-2.6.32.mbox Description: application/mbox signature.asc Description: This is a digita

Re: [PATCH 3.2 46/77] drm: Fix an unwanted master inheritance v2

On Fri, 2015-12-25 at 15:13 +0100, Thomas Hellstrom wrote: > On 12/24/2015 04:37 PM, Ben Hutchings wrote: > > 3.2.75-rc1 review patch.  If anyone has any objections, please let me know. > > > > -- > > > > From:

Re: [PATCH 3.2 00/77] 3.2.75-rc1 review

On Thu, 2015-12-24 at 14:20 -0800, Guenter Roeck wrote: > On 12/24/2015 07:37 AM, Ben Hutchings wrote: > > This is the start of the stable review cycle for the 3.2.75 > > release. > > There are 77 patches in this series, which will be posted as > > responses > >

Re: [PATCH 3.2 00/77] 3.2.75-rc1 review

This is the combined diff for 3.2.75-rc1 relative to 3.2.74. Ben. -- Ben Hutchings If the facts do not conform to your theory, they must be disposed of. diff --git a/Makefile b/Makefile index 89a7d05..d7073cb 100644 --- a/Makefile +++ b/Makefile @@ -1,7 +1,7 @@ VERSION = 3 PATCHLEVEL = 2

[PATCH 3.2 58/77] sh64: fix __NR_fgetxattr

[bwh: Backported to 3.2: adjust filename] Signed-off-by: Ben Hutchings --- arch/sh/include/asm/unistd_64.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/arch/sh/include/asm/unistd_64.h +++ b/arch/sh/include/asm/unistd_64.h @@ -279,7 +279,7 @@ #define __NR_fsetxattr 256 #

[PATCH 3.2 74/77] af_unix: Revert 'lock_interruptible' in stream receive code

ge it back to using mutex_lock. Signed-off-by: Rainer Weikusat Acked-by: Hannes Frederic Sowa Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/unix/af_unix.c | 13 +++-- 1 file changed, 3 insertions(+), 10 deletions(-) --- a/net/unix/af_unix.c +++ b/net/unix/af_unix.c

[PATCH 3.2 51/77] 9p: ->evict_inode() should kick out ->i_data, not ->i_mapping

ing from &inode->i_data instead, as 9p one should. Reported-by: "Suzuki K. Poulose" Tested-by: "Suzuki K. Poulose" Signed-off-by: Al Viro [bwh: Backported to 3.2: adjust context] Signed-off-by: Ben Hutchings --- fs/9p/vfs_inode.c | 4 ++-- 1 file changed, 2 insertions

[PATCH 3.2 40/77] wan/x25: Fix use-after-free in x25_asy_open_tty()

ath (arch/x86/entry/entry_64.S:188) Reported-and-tested-by: Sasha Levin Signed-off-by: Peter Hurley Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- drivers/net/wan/x25_asy.c | 6 +- 1 file changed, 1 insertion(+), 5 deletions(-) --- a/drivers/net/wan/x25_asy.c +++ b/dr

[PATCH 3.2 49/77] usb: xhci: fix config fail of FS hub behind a HS hub with MTT

cause configure endpoint command fail, so in the case, we should clear MTT to 0 for full speed hub according to section 6.2.2 Signed-off-by: Chunfeng Yun Signed-off-by: Mathias Nyman Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/usb/host/xhci.c | 8 1

[PATCH 3.2 24/77] USB: cp210x: Remove CP2110 ID from compatibility list

0x devices. Signed-off-by: Konstantin Shkolnyy Signed-off-by: Johan Hovold Signed-off-by: Ben Hutchings --- drivers/usb/serial/cp210x.c | 1 - 1 file changed, 1 deletion(-) --- a/drivers/usb/serial/cp210x.c +++ b/drivers/usb/serial/cp210x.c @@ -138,7 +138,6 @@ static const struct usb_device

[PATCH 3.2 36/77] nfs: if we have no valid attrs, then don't declare the attribute cache valid

then clears the NFS_INO_INVALID_ATTR flag, which indicates that the attributes are up to date. Don't clear the flag if the fattr struct has no valid attrs to apply. Reviewed-by: Steve French Signed-off-by: Jeff Layton Signed-off-by: Trond Myklebust Signed-off-by: Ben Hutchings --- f

[PATCH 3.2 37/77] drm/ttm: Fixed a read/write lock imbalance

vmwgfx hang on F23 start up. syeh: Extracted this from one of Thomas' internal patches. Signed-off-by: Thomas Hellstrom Reviewed-by: Sinclair Yeh Signed-off-by: Ben Hutchings --- drivers/gpu/drm/ttm/ttm_lock.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/gpu/dr

[PATCH 3.2 45/77] locking: Add WARN_ON_ONCE lock assertion

lockdep_assert_held() which only WARNs once. Signed-off-by: Peter Hurley Acked-by: Ingo Molnar Signed-off-by: Greg Kroah-Hartman [bwh: Backported to 3.2: adjust context] Signed-off-by: Ben Hutchings --- include/linux/lockdep.h | 5 + 1 file changed, 5 insertions(+) --- a/include/linux

[PATCH 3.2 39/77] sata_sil: disable trim

00 00 00 00 21 95 88 00 20 00 00 00 00 blk_update_request: I/O error, dev sdb, sector 2200968 Signed-off-by: Mikulas Patocka Signed-off-by: Tejun Heo Signed-off-by: Ben Hutchings --- drivers/ata/sata_sil.c | 3 +++ 1 file changed, 3 insertions(+) --- a/drivers/ata/sata_sil.c +++ b/driver

[PATCH 3.2 25/77] USB: cdc-acm - Add IGNORE_DEVICE quirk

3.2.75-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings Extracted from commit 16142655269a ("USB: cdc-acm - blacklist IMS PCU device"). Signed-off-by: Ben Hutchings --- --- a/drivers/usb/class/cdc-acm.c +++ b/drivers/usb

[PATCH 3.2 47/77] sched/core: Remove false-positive warning from wake_up_process()

o wakeup a TASK_STOPPED/TRACED task") Link: http://lkml.kernel.org/r/1448933660-23082-1-git-send-email-sasha.le...@oracle.com Signed-off-by: Ingo Molnar [bwh: Backported to 3.2: adjust filename] Signed-off-by: Ben Hutchings --- kernel/sched.c | 1 - 1 file changed, 1 deletion(-) --- a/kerne

[PATCH 3.2 75/77] af_unix: fix a fatal race with bit fields

the spinlock, as it is set only with this spinlock held. [1] bug fixed in gcc-4.8.0 : http://gcc.gnu.org/bugzilla/show_bug.cgi?id=52080 Reported-by: Ambrose Feinstein Signed-off-by: Eric Dumazet Cc: Benjamin Herrenschmidt Cc: Paul Mackerras Signed-off-by: David S. Miller Signed-off-by: Ben Hutchi

[PATCH 3.2 38/77] AHCI: Fix softreset failed issue of Port Multiplier

disabling FBS and has better performance. Signed-off-by: Xiangliang Yu Signed-off-by: Tejun Heo Signed-off-by: Ben Hutchings --- drivers/ata/libahci.c | 9 + 1 file changed, 9 insertions(+) --- a/drivers/ata/libahci.c +++ b/drivers/ata/libahci.c @@ -1226,6 +1226,15 @@

[PATCH 3.2 55/77] parisc iommu: fix panic due to trying to allocate too large region

h makes this change (it precalculates max_seg_boundary at the beginning of the function iommu_coalesce_chunks). I also added a check that the mapping length doesn't exceed dma_get_seg_boundary(dev) (it is not needed for Promise TX2+ SATA, but it may be needed for other devices that have

[PATCH 3.2 59/77] snmp: Remove duplicate OUTMCAST stat increment

output path. Remove the mcast bump, as its not needed Validated by the reporter, with good results Signed-off-by: Neil Horman Reported-by: Claus Jensen CC: Claus Jensen CC: David Miller Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/ipv6/mcast.c | 2 -- 1 file changed, 2

[PATCH 3.2 43/77] dm btree: fix leak of bufio-backed block in btree_split_sibling error path

releasing the previously allocated bufio block using unlock_block(). Reported-by: Mikulas Patocka Signed-off-by: Mike Snitzer Signed-off-by: Ben Hutchings --- drivers/md/persistent-data/dm-btree.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) --- a/drivers/md/persistent-data/dm-btree.c

[PATCH 3.2 42/77] usb: Use the USB_SS_MULT() macro to decode burst multiplier for log message

3.2.75-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit 5377adb092664d336ac212499961cac5e8728794 upstream. usb_parse_ss_endpoint_companion() now decodes the burst multiplier correctly in order to check that it's <= 3, b

[PATCH 3.2 14/77] mac80211: mesh: fix call_rcu() usage

yte stream. Fixes: eb2b9311fd00 ("mac80211: mesh path table implementation") Reported-by: Jouni Malinen Signed-off-by: Johannes Berg Signed-off-by: Ben Hutchings --- net/mac80211/mesh_pathtbl.c | 8 1 file changed, 4 insertions(+), 4 deletions(-) --- a/net/mac80211/mesh_pathtbl.

[PATCH 3.2 17/77] xhci: Workaround to get Intel xHCI reset working more reliably

was not possible without this patch), without any xHCI reset hang. Signed-off-by: Rajmohan Mani Tested-by: Joe Lawrence Signed-off-by: Mathias Nyman Signed-off-by: Greg Kroah-Hartman [bwh: Backported to 3.2: adjust context] Signed-off-by: Ben Hutchings --- drivers/usb/host/xhci.c | 10

[PATCH 3.2 08/77] USB: ti_usb_3410_502: Fix ID table size

3.2.75-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings Commit 35a2fbc941ac ("USB: serial: ti_usb_3410_5052: new device id for Abbot strip port cable") failed to update the size of the ti_id_table_3410 array. This doesn&#x

[PATCH 3.2 71/77] sh_eth: fix kernel oops in skb_put()

d-off-by: Sergei Shtylyov Signed-off-by: David S. Miller [bwh: Backported to 3.2: adjust context] Signed-off-by: Ben Hutchings --- drivers/net/ethernet/renesas/sh_eth.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --- a/drivers/net/ethernet/renesas/sh_eth.c +++ b/drivers/net/

[PATCH 3.2 30/77] vfs: Avoid softlockups with sendfile(2)

rom_pipe() to fix the problem. CC: Dmitry Vyukov Signed-off-by: Jan Kara Signed-off-by: Al Viro Signed-off-by: Ben Hutchings --- fs/splice.c | 1 + 1 file changed, 1 insertion(+) --- a/fs/splice.c +++ b/fs/splice.c @@ -957,6 +957,7 @@ ssize_t __splice_from_pipe(struct pipe_i spli

[PATCH 3.2 67/77] atl1c: Improve driver not to do order 4 GFP_ATOMIC allocation

to GFP_KERNEL. Still not ideal, but should be significantly better. atl1c_setup_ring_resources() is called from .open() function, and already uses GFP_KERNEL, so this change is safe. Signed-off-by: Pavel Machek Acked-by: Michal Hocko Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings

[PATCH 3.2 46/77] drm: Fix an unwanted master inheritance v2

Dave Airlie [bwh: Backported to 3.2: - s/master_mutex/struct_mutex/ - drm_new_set_master() must drop struct_mutex while calling drm_driver::master_create - Adjust filename, context, indentation] Signed-off-by: Ben Hutchings --- --- a/drivers/gpu/drm/drm_stub.c +++ b/drivers/gpu/drm/drm_s

[PATCH 3.2 65/77] ipv6: add complete rcu protection around np->opt

dditional use of np->opt in tcp_v6_send_synack() - Fold in commit 43264e0bd963 ("ipv6: remove unnecessary codes in tcp_ipv6.c") - Adjust context] Signed-off-by: Ben Hutchings --- --- a/include/linux/ipv6.h +++ b/include/linux/ipv6.h @@ -369,7 +369,7 @@ struct ipv6_pinfo { s

[PATCH 3.2 52/77] ipmi: move timer init to before irq is setup

es the problem. To: openipmi-develo...@lists.sourceforge.net To: Corey Minyard CC: linux-ker...@vger.kernel.org Signed-off-by: Jan Stancek Signed-off-by: Tony Camuso Signed-off-by: Corey Minyard [bwh: Backported to 3.2: adjust context] Signed-off-by: Ben Hutchings --- drivers/char/ipmi

[PATCH 3.2 73/77] bluetooth: Validate socket address length in sco_sock_bind().

3.2.75-rc1 review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" [ Upstream commit 5233252fce714053f0151680933571a2da9cbfb4 ] Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/bluetooth/sco.c | 3 +++ 1 file

[PATCH 3.2 19/77] usblp: do not set TASK_INTERRUPTIBLE before lock

te Zaitcev Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/usb/class/usblp.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/usb/class/usblp.c +++ b/drivers/usb/class/usblp.c @@ -861,11 +861,11 @@ static int usblp_wwait(struct

[PATCH 3.2 63/77] ipv6: distinguish frag queues by device for multicast and link-local packets

Signed-off-by: Michal Kubecek Signed-off-by: David S. Miller [bwh: Backported to 3.2: adjust context] Signed-off-by: Ben Hutchings --- --- a/include/net/ipv6.h +++ b/include/net/ipv6.h @@ -382,6 +382,7 @@ struct ip6_create_arg { u32 user; const struct in6_addr *src; co

[PATCH 3.2 26/77] USB: cdc_acm: Ignore Infineon Flash Loader utility

-by: Johan Hovold Signed-off-by: Ben Hutchings --- drivers/usb/class/cdc-acm.c | 5 + 1 file changed, 5 insertions(+) --- a/drivers/usb/class/cdc-acm.c +++ b/drivers/usb/class/cdc-acm.c @@ -1666,6 +1666,11 @@ static const struct usb_device_id acm_id .driver

[PATCH 3.2 62/77] net: ipmr: fix static mfc/dev leaks on table destruction

ller [bwh: Backported to 3.2: adjust context] Signed-off-by: Ben Hutchings --- net/ipv4/ipmr.c | 15 --- 1 file changed, 8 insertions(+), 7 deletions(-) --- a/net/ipv4/ipmr.c +++ b/net/ipv4/ipmr.c @@ -134,7 +134,7 @@ static int ipmr_cache_report(struct mr_t

[PATCH 3.2 09/77] USB: ti_usb_3410_5052: Add Honeywell HGI80 ID

. Signed-off-by: David Woodhouse Signed-off-by: Johan Hovold [bwh: Backported to 3.2: adjust context; update array sizes] Signed-off-by: Ben Hutchings --- --- a/drivers/usb/serial/ti_usb_3410_5052.c +++ b/drivers/usb/serial/ti_usb_3410_5052.c @@ -164,7 +164,7 @@ static unsigned int

[PATCH 3.2 32/77] ring-buffer: Update read stamp with first real commit on page

that point, check if the page being returned has events and has not been read yet. Then at that point update the read_stamp to match the time stamp of the reader page. Signed-off-by: Steven Rostedt Signed-off-by: Ben Hutchings --- kernel/trace/ring_buffer.c | 12 +--- 1 file changed, 5 insert

[PATCH 3.2 48/77] sched/core: Clear the root_domain cpumasks in init_rootdomain()

lo_mask to initialise - Adjust filename] Signed-off-by: Ben Hutchings --- kernel/sched.c | 8 1 file changed, 4 insertions(+), 4 deletions(-) --- a/kernel/sched.c +++ b/kernel/sched.c @@ -7170,11 +7170,11 @@ static int init_rootdomain(struct root_d { memset(rd, 0, sizeof(*rd));

[PATCH 3.2 64/77] dccp: remove unnecessary codes in ipv6.c

and then try to free opt. Signed-off-by: RongQing.Li Acked-by: Eric Dumazet Signed-off-by: David S. Miller [bwh: Backported to 3.2: adjust context] Signed-off-by: Ben Hutchings --- net/dccp/ipv6.c | 21 + 1 file changed, 5 insertions(+), 16 deletions(-) --- a/net/dccp/

[PATCH 3.2 15/77] macvlan: fix leak in macvlan_handle_frame

oduce rx_handler results and logic around that") Signed-off-by: Sabrina Dubroca Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- drivers/net/macvlan.c | 2 ++ 1 file changed, 2 insertions(+) --- a/drivers/net/macvlan.c +++ b/drivers/net/macvlan.c @@ -172,6 +172,7

[PATCH 3.2 50/77] ALSA: rme96: Fix unexpected volume reset after rate changes

re at the end after the spinlock. Reported-and-tested-by: Sylvain LABOISNE Signed-off-by: Takashi Iwai Signed-off-by: Ben Hutchings --- sound/pci/rme96.c | 41 ++--- 1 file changed, 26 insertions(+), 15 deletions(-) --- a/sound/pci/rme96.c +++ b/sound/pci/rm

[PATCH 3.2 66/77] ipv6: sctp: implement sctp_v6_destroy_sock()

release inet6 specific fields. Reported-by: Dmitry Vyukov Signed-off-by: Eric Dumazet Acked-by: Daniel Borkmann Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/sctp/socket.c | 9 - 1 file changed, 8 insertions(+), 1 deletion(-) --- a/net/sctp/socket.c +++ b/net/sctp

[PATCH 3.2 22/77] net: ip6mr: fix static mfc/dev leaks on table destruction

leksandrov Reviewed-by: Cong Wang Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/ipv6/ip6mr.c | 15 --- 1 file changed, 8 insertions(+), 7 deletions(-) --- a/net/ipv6/ip6mr.c +++ b/net/ipv6/ip6mr.c @@ -118,7 +118,7 @@ static int __ip6mr_fill_mroute

[PATCH 3.2 04/77] ALSA: usb-audio: prevent CH345 multiport output SysEx corruption

utput port. Signed-off-by: Clemens Ladisch Signed-off-by: Takashi Iwai Signed-off-by: Ben Hutchings --- sound/usb/midi.c | 3 +++ sound/usb/quirks-table.h | 11 +++ sound/usb/quirks.c | 1 + sound/usb/usbaudio.h | 1 + 4 files changed, 16 insertions(+) --- a/soun

[PATCH 3.2 10/77] usb: musb: core: fix order of arguments to ulpi write callback

Kleine-König Signed-off-by: Felipe Balbi [bwh: Backported to 3.2: adjust context] Signed-off-by: Ben Hutchings --- --- a/drivers/usb/musb/musb_core.c +++ b/drivers/usb/musb/musb_core.c @@ -131,7 +131,7 @@ static inline s

[PATCH 3.2 28/77] fix sysvfs symlinks

testing sysvfs gets ;-/ Signed-off-by: Al Viro [bwh: Backported to 3.2: - Adjust context - Also delete unused sysv_fast_symlink_inode_operations] Signed-off-by: Ben Hutchings --- fs/sysv/inode.c | 11 ++- 1 file changed, 2 insertions(+), 9 deletions(-) --- a/fs/sysv/inode.c +++ b/fs

[PATCH 3.2 06/77] USB: serial: option: add support for Novatel MiFi USB620L

configuration: $ sudo usb_modeswitch –v 0x1410 –p 0x9020 –u 4 This configuration provides a ECM interface as well as TTYs ('Enterprise Mode' according to the U620 Linux integration guide). Signed-off-by: Aleksander Morgado Signed-off-by: Johan Hovold Signed-off-by: Ben Hutchings --- d

[PATCH 3.2 16/77] xhci: Add XHCI_INTEL_HOST quirk

3.2.75-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings Extracted from commit e3567d2c15a7 ("xhci: Add Intel U1/U2 timeout policy.") Signed-off-by: Ben Hutchings --- --- a/drivers/usb/host/xhci-pci.c +++ b/drivers/usb/host/

[PATCH 3.2 56/77] mm, vmstat: allow WQ concurrency to discover memory reclaim doesn't make any progress

Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds [bwh: Backported to 3.2: adjust context] Signed-off-by: Ben Hutchings --- mm/backing-dev.c | 19 --- mm/vmstat.c | 6 -- 2 files changed, 20 insertions(+), 5 deletions(-) --- a/mm/backing-dev.c +++ b/mm/backing-

[PATCH 3.2 05/77] ALSA: usb-audio: work around CH345 input SysEx corruption

-by: Takashi Iwai Signed-off-by: Ben Hutchings --- sound/usb/midi.c | 42 ++ 1 file changed, 42 insertions(+) --- a/sound/usb/midi.c +++ b/sound/usb/midi.c @@ -174,6 +174,8 @@ struct snd_usb_midi_in_endpoint { u8 running_status_len

[PATCH 3.2 12/77] net: fix __netdev_update_features return on ndo_set_features failure

CC: Michał Mirosław Signed-off-by: Nikolay Aleksandrov Signed-off-by: David S. Miller [bwh: Backported to 3.2: adjust context] Signed-off-by: Ben Hutchings --- net/core/dev.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/net/core/dev.c +++ b/net/core/dev.c @@ -5446,7 +544

[PATCH 3.2 01/77] fuse: break infinite loop in fuse_fill_write_pages()

ndrew Morton Cc: Maxim Patlasov Cc: Konstantin Khlebnikov Signed-off-by: Roman Gushchin Signed-off-by: Miklos Szeredi Fixes: ea9b9907b82a ("fuse: implement perform_write") Signed-off-by: Ben Hutchings --- fs/fuse/file.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/fs

[PATCH 3.2 76/77] isdn_ppp: Add checks for allocation failure in isdn_ppp_open()

3.2.75-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit 0baa57d8dc32db78369d8b5176ef56c5e2e18ab3 upstream. Compile-tested only. Signed-off-by: Ben Hutchings Signed-off-by: David S. Miller --- drivers/isdn/i4l/isdn_ppp.c | 6

[PATCH 3.2 60/77] tcp: initialize tp->copied_seq in case of cross SYN connection

ed_seq initialization. Thanks again Dmitry for your report and testings. Signed-off-by: Eric Dumazet Reported-by: Dmitry Vyukov Tested-by: Dmitry Vyukov Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/ipv4/tcp_input.c | 1 + 1 file changed, 1 insertion(+) --- a/net/ipv4/tcp_i

[PATCH 3.2 72/77] pptp: verify sockaddr_len in pptp_bind() and pptp_connect()

3.2.75-rc1 review patch. If anyone has any objections, please let me know. -- From: WANG Cong [ Upstream commit 09ccfd238e5a0e670d8178cf50180ea81ae09ae1 ] Reported-by: Dmitry Vyukov Signed-off-by: Cong Wang Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings

[PATCH 3.2 27/77] unix: avoid use-after-free in ep_remove_wait_queue

orever. Signed-off-by: Rainer Weikusat Fixes: ec0d215f9420 ("af_unix: fix 'poll for write'/connected DGRAM sockets") Reviewed-by: Jason Baron Signed-off-by: David S. Miller [bwh: Backported to 3.2: adjust context] Signed-off-by: Ben Hutchings --- include/net/af_unix.h |

[PATCH 3.2 23/77] can: sja1000: clear interrupts on start

arc Kleine-Budde [bwh: Backported to 3.2: s/SJA1000_IR/REG_IR/] Signed-off-by: Ben Hutchings --- drivers/net/can/sja1000/sja1000.c | 3 +++ 1 file changed, 3 insertions(+) --- a/drivers/net/can/sja1000/sja1000.c +++ b/drivers/net/can/sja1000/sja1000.c @@ -177,6 +177,9 @@ static void sja1000_start(str

[PATCH 3.2 20/77] mac: validate mac_partition is within sector

/ 512). However the partition structure would be located past the end of the buffer (secsize % 512). Signed-off-by: Kees Cook Signed-off-by: Jens Axboe [bwh: Backported to 3.2: adjust filename] Signed-off-by: Ben Hutchings --- fs/partitions/mac.c | 10 +++--- 1 file changed, 7 insertions

[PATCH 3.2 07/77] USB: serial: ti_usb_3410_5052: add Abbott strip port ID to combined table as well.

driver. Signed-off-by: Diego Elio Pettenò Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/usb/serial/ti_usb_3410_5052.c | 1 + 1 file changed, 1 insertion(+) --- a/drivers/usb/serial/ti_usb_3410_5052.c +++ b/drivers/usb/serial/ti_usb_3410_5052.c @@ -209,6 +209,7

[PATCH 3.2 61/77] net, scm: fix PaX detected msg_controllen overflow in scm_detach_fds

iggered in the wild (reported several times during boot by David and HacKurx). No Fixes tag this time as pre 2002 (that is, pre history tree). Reported-by: David Sterba Reported-by: HacKurx Cc: PaX Team Cc: Emese Revfy Cc: Brad Spengler Cc: Wei Yongjun Cc: Eric Dumazet Reviewed-by: Ha

[PATCH 3.2 33/77] ext4: Fix handling of extended tv_sec

will have fixed up the bad data. Also add a comment explaining the encoding of ext4's extra {a,c,m}time bits. Signed-off-by: David Turner Signed-off-by: Theodore Ts'o Reported-by: Mark Harris Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=23732 Signed-off-by: Ben Hutchings --

[PATCH 3.2 57/77] mm: hugetlb: call huge_pte_alloc() only if ptep is null

alds [bwh: Backported to 3.2: adjust context] Signed-off-by: Ben Hutchings --- mm/hugetlb.c | 8 1 file changed, 4 insertions(+), 4 deletions(-) --- a/mm/hugetlb.c +++ b/mm/hugetlb.c @@ -2818,12 +2818,12 @@ int hugetlb_fault(struct mm_struct *mm, } else if (unlikely(is

[PATCH 3.2 21/77] ip6mr: call del_timer_sync() in ip6mr_free_table()

Signed-off-by: Cong Wang Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/ipv6/ip6mr.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/net/ipv6/ip6mr.c +++ b/net/ipv6/ip6mr.c @@ -334,7 +334,7 @@ static struct mr6_table *ip6mr_new_table static void ip6mr_free_table

[PATCH 3.2 29/77] vfs: Make sendfile(2) killable even better

ckup issues with sendfile of the do-ton-of-tiny-writes nature. Reported-by: Dmitry Vyukov Signed-off-by: Jan Kara Signed-off-by: Al Viro Signed-off-by: Ben Hutchings --- fs/splice.c | 7 +++ 1 file changed, 7 insertions(+) --- a/fs/splice.c +++ b/fs/splice.c @@ -872,6 +872,13

[PATCH 3.2 11/77] ASoC: wm8962: correct addresses for HPF_C_0/1

Signed-off-by: Sachin Pandhare Acked-by: Charles Keepax Signed-off-by: Mark Brown [bwh: Backported to 3.2: wm8962_reg is a sparse array, not an array of { offset, value } pairs] Signed-off-by: Ben Hutchings --- sound/soc/codecs/wm8962.c | 4 ++-- 1 file changed, 2 insertions(+), 2 del

[PATCH 3.2 13/77] FS-Cache: Add missing initialization of ret in cachefiles_write_page()

ned-off-by: Geert Uytterhoeven Signed-off-by: David Howells Signed-off-by: Al Viro Signed-off-by: Ben Hutchings --- fs/cachefiles/rdwr.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/fs/cachefiles/rdwr.c +++ b/fs/cachefiles/rdwr.c @@ -894,7 +894,7 @@ int cachefiles_write_page(struct f

[PATCH 3.2 00/77] 3.2.75-rc1 review

interface [4eba7bb1d72d9bde67d810d09bf62dc207b63c5c] Ben Hutchings (6): USB: cdc-acm - Add IGNORE_DEVICE quirk [16142655269aaf580488e074eabfdcf0fb4e3687] USB: ti_usb_3410_502: Fix ID table size [not upstream; only needed before 3.12] isdn_ppp: Add checks for allocatio

[PATCH 3.2 34/77] jbd2: Fix unreclaimed pages after truncate in data=journal mode

eckpoint lists when journal_unmap_buffer() finds out they don't have to be there anymore. Reported-and-tested-by: Namjae Jeon Fixes: de1b794130b130e77ffa975bb58cb843744f9ae5 Signed-off-by: Jan Kara Signed-off-by: Theodore Ts'o Signed-off-by: Ben Hutchings --- fs/jbd2/transaction.c | 2 ++

[PATCH 3.2 69/77] ipv6: sctp: clone options to avoid use after free

in SCTP. We might later factorize this code in a common helper to avoid future mistakes. Reported-by: Dmitry Vyukov Signed-off-by: Eric Dumazet Acked-by: Vlad Yasevich Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/sctp/ipv6.c | 8 1 file changed, 8 inserti

[PATCH 3.2 54/77] vgaarb: fix signal handling in vga_get()

Signed-off-by: Ben Hutchings --- drivers/gpu/vga/vgaarb.c | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) --- a/drivers/gpu/vga/vgaarb.c +++ b/drivers/gpu/vga/vgaarb.c @@ -381,8 +381,10 @@ int vga_get(struct pci_dev *pdev, unsign set_current_stat

[PATCH 3.2 77/77] ppp, slip: Validate VJ compression slot parameters completely

3.2.75-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit 4ab42d78e37a294ac7bc56901d563c642e03c4ae upstream. Currently slhc_init() treats out-of-range values of rslots and tslots as equivalent to 0, except that if tslots is too

[PATCH 3.2 41/77] USB: whci-hcd: add check for dma mapping error

(linuxtesting.org). Signed-off-by: Alexey Khoroshilov Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/usb/host/whci/qset.c | 4 1 file changed, 4 insertions(+) --- a/drivers/usb/host/whci/qset.c +++ b/drivers/usb/host/whci/qset.c @@ -377,6 +377,10 @@ static int

[PATCH 3.2 53/77] dm btree: fix bufio buffer leaks in dm_btree_del() error path

rnber Signed-off-by: Mike Snitzer Signed-off-by: Ben Hutchings --- drivers/md/persistent-data/dm-btree.c | 16 +++- 1 file changed, 15 insertions(+), 1 deletion(-) --- a/drivers/md/persistent-data/dm-btree.c +++ b/drivers/md/persistent-data/dm-btree.c @@ -231,6 +231,16 @@ static

[PATCH 3.2 03/77] ALSA: usb-audio: add packet size quirk for the Medeli DD305

3.2.75-rc1 review patch. If anyone has any objections, please let me know. -- From: Clemens Ladisch commit 98d362becb6621bebdda7ed0eac7ad7ec6c37898 upstream. Signed-off-by: Clemens Ladisch Signed-off-by: Takashi Iwai Signed-off-by: Ben Hutchings --- sound/usb/midi.c | 1

[PATCH 3.2 35/77] RDS: fix race condition when sending a message on unbound socket

vas Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/rds/connection.c | 6 -- net/rds/send.c | 4 +++- 2 files changed, 3 insertions(+), 7 deletions(-) --- a/net/rds/connection.c +++ b/net/rds/connection.c @@ -178,12 +178,6 @@ stati

[PATCH 3.2 68/77] sctp: update the netstamp_needed counter when copying sockets

copy a sock with that flag on, like tcp does. Reported-by: Dmitry Vyukov Signed-off-by: Marcelo Ricardo Leitner Acked-by: Vlad Yasevich Signed-off-by: David S. Miller [bwh: Backported to 3.2: SK_FLAGS_TIMESTAMP is newly defined] Signed-off-by: Ben Hutchings --- --- a/include/net/sock.h +++ b

[PATCH 3.2 18/77] USB: option: add XS Stick W100-2 from 4G Systems

ørn Mork Signed-off-by: Greg Kroah-Hartman [bwh: Backported to 3.2: adjust context] Signed-off-by: Ben Hutchings --- drivers/usb/serial/option.c | 9 + 1 file changed, 9 insertions(+) --- a/drivers/usb/serial/option.c +++ b/drivers/usb/serial/option.c @@ -356,6 +356,7 @@ static void o

[PATCH 3.2 31/77] broadcom: fix PHY_ID_BCM5481 entry in the id table

but incorrectly replaced 0x0143bca0 with PHY_ID_BCM5482 (making a duplicate entry, and completely omitting the original). Fix that. Fixes: fcb26ec5b18d ("broadcom: move all PHY_ID's to header") Signed-off-by: Aaro Koskinen Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings -

[PATCH 3.2 70/77] net: add validation for the socket syscall protocol argument

10 kernel: [] tracesys_phase2+0x84/0x89 I found no particular commit which introduced this problem. CVE: CVE-2015-8543 Cc: Cong Wang Reported-by: 郭永刚 Signed-off-by: Hannes Frederic Sowa Signed-off-by: David S. Miller [bwh: Backported to 3.2: open-code U8_MAX] Signed-off-by: Ben Hutchings --- in

[PATCH 3.2 44/77] ipv4: igmp: Allow removing groups from a removed interface

ndrew Lunn Fixes: 52ad353a5344f "(igmp: fix the problem when mc leave group") Signed-off-by: David S. Miller [bwh: Backported to 3.2: adjust context] Signed-off-by: Ben Hutchings --- net/ipv4/igmp.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) --- a/net/ipv4/igmp.c +

[PATCH 3.2 02/77] sctp: translate host order to network order when setting a hmacid

f-by: David S. Miller Signed-off-by: Ben Hutchings --- net/sctp/auth.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --- a/net/sctp/auth.c +++ b/net/sctp/auth.c @@ -804,8 +804,8 @@ int sctp_auth_ep_set_hmacs(struct sctp_e if (!has_sha1) return -EINVAL; -

Re: [bug report]Please include the commit 60bc851 in your stable tree if possible

to 3.8. > If this patch was not included, in powerpc/sparc, kernel will report  > soft lockup when doing > unix socket recv/sendmsg in some cases. Queued up for 3.2, thanks. Ben. -- Ben Hutchings If the facts do not conform to your theory, they must be disposed of. signature.asc Description: This is a digitally signed message part

Re: usb: gadget: composite: enable BESL support

; Author: Felipe Balbi > Date:   Tue Sep 30 16:08:03 2014 -0500 > > usb: gadget: composite: enable BESL support BESL support was introduced in 3.4 so I have *not* added this to the 3.2 queue. Ben. -- Ben Hutchings If the facts do not conform to your theory, they must be disposed of

[stable] ip6mr: call del_timer_sync() in ip6mr_free_table()

It looks like this commit should be cherry-picked for stable branches older than 4.0: commit 7ba0c47c34a1ea5bc7a24ca67309996cce0569b5 Author: WANG Cong Date:   Tue Mar 31 11:01:47 2015 -0700 ip6mr: call del_timer_sync() in ip6mr_free_table() Ben. -- Ben Hutchings For every action, there

[PATCH v2 3.2-3.10] USB: ti_usb_3410_502: Fix ID table size

ule parameters") but should be fixed in stable branches older than 3.12. Backports of commit c9d09dc7ad10 ("USB: serial: ti_usb_3410_5052: add Abbott strip port ID to combined table as well.") similarly failed to update the size of the ti_id_table_combined array. Signed

[PATCH 3.2-3.10] USB: ti_usb_3410_502: Fix ID table size

ule parameters") but should be fixed in stable branches older than 3.12. Signed-off-by: Ben Hutchings --- --- a/drivers/usb/serial/ti_usb_3410_5052.c +++ b/drivers/usb/serial/ti_usb_3410_5052.c @@ -164,7 +164,7 @@ static unsigned int product_5052_count; /* the array dimension is the numbe

[PATCH 4.3] tipc: Fix kfree_skb() of uninitialised pointer

Commit 7098356baca7 ("tipc: fix error handling of expanding buffer headroom") added a "goto tx_error". This is fine upstream, but when backported to 4.3 it results in attempting to free the clone before it has been allocated. In this early error case, no cleanup is needed.

Re: [PATCH 4.3 2/2] vrf: fix double free and memory corruption on register_netdevice failure

48 8b 3d 61 e9 8f 00 e8 2c fa fc ff 5b 5d eb > e9 > [   28.796016] RIP  [] putname+0x43/0x60 > [   28.796016]  RSP > > Fixes: 193125dbd8eb ("net: Introduce VRF device driver") > Signed-off-by: Nikolay Aleksandrov > Acked-by: David Ahern > Signed-off-by: Da

[PATCH 4.3 1/2] Revert "vrf: fix double free and memory corruption on register_netdevice failure"

This reverts commit b3abad339f8e268bb261e5844ab68b18a7797c29, which was an attempt to backport commit 7f109f7cc37108cba7243bc832988525b0d85909 upstream. The backport introduced a deadlock and other bugs. Signed-off-by: Ben Hutchings --- drivers/net/vrf.c | 15 +-- 1 file changed

Re: [PATCH 4.3] vrf: Fix memory leak on registration failure in vrf_newlink()

On Tue, 2015-12-15 at 08:15 -0700, David Ahern wrote: > On 12/15/15 8:12 AM, Ben Hutchings wrote: > > @@ -598,7 +599,10 @@ static int vrf_newlink(struct net *src_net, struct > > net_device *dev, > > > >    rcu_assign_pointer(dev->vrf_ptr, vrf_ptr); > >

[PATCH 4.3] vrf: Fix memory leak on registration failure in vrf_newlink()

The backported version of commit 7f109f7cc371 ("vrf: fix double free and memory corruption on register_netdevice failure") incorrectly removed a kfree() from the failure path as well as the free_netdev(). Add that back. Signed-off-by: Ben Hutchings --- drivers/net/vrf.c | 6

  1   2   3   4   5   6   7   8   9   10   >