Re: [PATCH 1/2] sysfs: fix race between readdir and lseek

2013-03-26 Thread Li Zefan
On 2013/3/22 17:31, Ming Lei wrote: > On Fri, Mar 22, 2013 at 1:48 PM, Li Zefan wrote: >> On 2013/3/21 12:48, Ming Lei wrote: >> >> Yes, it can...As I said, it's irrelevant, because it's vfs that changes >> file->f_pos. >> >> SYSCALL_DEFINE3(read, unsigned int, fd, char __user *, buf, size_t, coun

Re: efi: be more paranoid about available space when creating variables

2013-03-26 Thread Lingzhu Xiang
On 03/26/2013 11:56 AM, Matthew Garrett wrote: diff --git a/drivers/firmware/efivars.c b/drivers/firmware/efivars.c index 7acafb8..731ac7b 100644 --- a/drivers/firmware/efivars.c +++ b/drivers/firmware/efivars.c @@ -436,9 +436,12 @@ static efi_status_t check_var_size_locked(struct efivars *efiv

Re: [PATCH 1/2] sysfs: fix race between readdir and lseek

2013-03-26 Thread Ming Lei
On Tue, Mar 26, 2013 at 3:30 PM, Li Zefan wrote: >> Considered that vfs_read()/vfs_write on sysfs dir is almost doing nothing, >> the >> above problem may only exist in theory. > > The read() vs readdir() race in sysfs directory doesn't exist in theory only. Could you let me know if you have app

Re: [PATCH] USB: serial: fix hang when opening port

2013-03-26 Thread Johan Hovold
On Tue, Mar 26, 2013 at 10:49:55AM +0800, Ming Lei wrote: > Johan's 'fix use-after-free in TIOCMIWAIT' patchset[1] introduces > one bug which can cause kernel hang when opening port. > > This patch initialized the 'port->delta_msr_wait' waitqueue head > to fix the bug which is introduced in 3.9-rc

Re: efi: be more paranoid about available space when creating variables

2013-03-26 Thread Matt Fleming
On 26/03/13 03:56, Matthew Garrett wrote: > Ok, so having thought some more about the actual problem (ie, Samsungs > go wrong if there's too much used space marked as being active, not > merely too much used space) I think we really want to be looking for the > amount of active space rather than

[PATCH] drm/i915: Always call fence-lost prior to removing the fence

2013-03-26 Thread Chris Wilson
There is a minute window for a race between put-fence removing the fence and for a new transaction by an external party on the GTT mmap. That is we must zap the mmap prior to removing the fence and not afterwards. Fixes regression from commit 61050808bb019ebea966b7b5bfd357aaf219fb51 Author: Chris

[PATCH] ARM: imx: fix sync issue between imx_cpu_die and imx_cpu_kill

2013-03-26 Thread Shawn Guo
There is a sync issue with hotplug operation. It's possible that when imx_cpu_kill gets running on primary core, the imx_cpu_die execution on the core which is to be killed hasn't been finished yet. The problem will very likely be hit when running suspend without no_console_suspend setting on ker

Re: [ 000/104] 3.2.42-stable review

2013-03-26 Thread Satoru Takeuchi
At Mon, 25 Mar 2013 00:34:24 +, Ben Hutchings wrote: > > This is the start of the stable review cycle for the 3.2.42 release. > There are 104 patches in this series, which will be posted as responses > to this one. If anyone has any issues with these being applied, please > let me know. > >

Re: [PATCH 1/2] sysfs: fix race between readdir and lseek

2013-03-26 Thread Ming Lei
Hi Zefan, On Tue, Mar 26, 2013 at 4:45 PM, Ming Lei wrote: > On Tue, Mar 26, 2013 at 3:30 PM, Li Zefan wrote: >>> Considered that vfs_read()/vfs_write on sysfs dir is almost doing nothing, >>> the >>> above problem may only exist in theory. >> >> The read() vs readdir() race in sysfs directory

Re: signal: Define __ARCH_HAS_SA_RESTORER so we know whether to clear sa_restorer

2013-03-26 Thread Luis Henriques
On Tue, Mar 26, 2013 at 04:45:42AM +, Ben Hutchings wrote: > On Thu, 2013-03-21 at 01:41 +, Ben Hutchings wrote: > > On Wed, 2013-03-20 at 21:43 +0100, Sebastian Gottschall (DD-WRT) wrote: > > > Am 20.03.2013 20:02, schrieb Sebastian Gottschall (DD-WRT): > > > > Hello > > > > > > > > The pa

Re: [Intel-gfx] [PATCH] drm/i915: Always call fence-lost prior to removing the fence

2013-03-26 Thread Imre Deak
On Tue, 2013-03-26 at 11:29 +, Chris Wilson wrote: > There is a minute window for a race between put-fence removing the fence > and for a new transaction by an external party on the GTT mmap. That is > we must zap the mmap prior to removing the fence and not afterwards. > > Fixes regression fr

[ 3.5.y.z extended stable ] Linux 3.5.7.9 stable review

2013-03-26 Thread Luis Henriques
I am announcing the review cycle for the 3.5.7.9 stable release. This new release contains 150 patches, which are posted as a response to this message. They are also available at the following repository: git://kernel.ubuntu.com/ubuntu/linux.git linux-3.5.y-review If there are any problems, or if

[PATCH 001/150] USB: option: add Huawei E5331

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: =?UTF-8?q?Bj=C3=B8rn=20Mork?= commit daec90e7382cbd0e73eb6861109b3da91e5ab1f3 upstream. Another device using CDC ACM with vendor specific protocol to mark serial functions. Signed-off-by:

[PATCH 018/150] hwmon: (pmbus/ltc2978) Fix temperature reporting

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Guenter Roeck commit 8c958c703ef8804093437959221951eaf0e1e664 upstream. On LTC2978, only READ_TEMPERATURE is supported. It reports the internal junction temperature. This register is unpag

[PATCH 020/150] hwmon: (sht15) Fix memory leak if regulator_enable() fails

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings Commit 3e78080f8148 ('hwmon: (sht15) Check return value of regulator_enable()') depends on the use of devm_kmalloc() for automatic resource cleanup in the failure cases, which

[PATCH 026/150] loopdev: remove an user triggerable oops

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Guo Chao commit b1a6650406875b9097a032eed89af50682fe1160 upstream. When loopdev is built as module and we pass an invalid parameter, loop_init() will return directly without deregister mis

[PATCH 064/150] ext4: fix the wrong number of the allocated blocks in ext4_split_extent()

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Zheng Liu commit 3a2256702e47f68f921dfad41b1764d05c572329 upstream. This commit fixes a wrong return value of the number of the allocated blocks in ext4_split_extent. When the length of b

[PATCH 072/150] tracing: Keep overwrite in sync between regular and snapshot buffers

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: "Steven Rostedt (Red Hat)" commit 80902822658aab18330569587cdb69ac1dfdcea8 upstream. Changing the overwrite mode for the ring buffer via the trace option only sets the normal buffer. But t

[PATCH 097/150] USB: serial: fix interface refcounting

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit d7971051e4df825e0bc11b995e87bfe86355b8e5 upstream. Make sure the interface is not released before our serial device. Note that drivers are still not allowed to access

[PATCH 115/150] i2c: tegra: check the clk_prepare_enable() return value

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Laxman Dewangan commit 132c803f7b70b17322579f6f4f3f65cf68e55135 upstream. NVIDIA's Tegra SoC allows read/write of controller register only if controller clock is enabled. System hangs if r

[PATCH 141/150] net/ipv4: Ensure that location of timestamp option is stored

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: David Ward commit 4660c7f498c07c43173142ea95145e9dac5a6d14 upstream. This is needed in order to detect if the timestamp option appears more than once in a packet, to remove the option if t

[PATCH 150/150] kernel/signal.c: use __ARCH_HAS_SA_RESTORER instead of SA_RESTORER

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Andrew Morton commit 522cff142d7d2f9230839c9e1f21a4d8bcc22a4a upstream. __ARCH_HAS_SA_RESTORER is the preferred conditional for use in 3.9 and later kernels, per Kees. Cc: Emese Revfy Cc

[PATCH 149/150] signal: Define __ARCH_HAS_SA_RESTORER so we know whether to clear sa_restorer

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings flush_signal_handlers() needs to know whether sigaction::sa_restorer is defined, not whether SA_RESTORER is defined. Define the __ARCH_HAS_SA_RESTORER macro to indicate this.

[PATCH 148/150] bnx2x: fix occasional statistics off-by-4GB error

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: =?UTF-8?q?Maciej=20=C5=BBenczykowski?= commit b009aac12cd0fe34293c68af8ac48b85be3bd858 upstream. The UPDATE_QSTAT function introduced on February 15, 2012 in commit 1355b704b9ba "bnx2x: co

[PATCH 147/150] inet: limit length of fragment queue hash table bucket lists

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Hannes Frederic Sowa commit 5a3da1fe9561828d0ca7eca664b16ec2b9bf0055 upstream. This patch introduces a constant limit of the fragment queue hash table bucket list lengths. Currently the li

[PATCH 146/150] tcp: fix skb_availroom()

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit 16fad69cfe4adbbfa813de516757b87bcae36d93 upstream. Chrome OS team reported a crash on a Pixel ChromeBook in TCP stack : https://code.google.com/p/chromium/issues/detai

[PATCH 144/150] ipv4: fix definition of FIB_TABLE_HASHSZ

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: "Denis V. Lunev" commit 5b9e12dbf92b441b37136ea71dac59f05f2673a9 upstream. a long time ago by the commit commit 93456b6d7753def8760b423ac6b986eb9d5a4a95 Author: Denis V. Lunev Date

[PATCH 145/150] rtnetlink: Mask the rta_type when range checking

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Vlad Yasevich commit a5b8db91442fce9c9713fcd656c3698f1adde1d6 upstream. Range/validity checks on rta_type in rtnetlink_rcv_msg() do not account for flags that may be set. This causes the

[PATCH 143/150] sctp: Use correct sideffect command in duplicate cookie handling

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Vlad Yasevich commit f2815633504b442ca0b0605c16bf3d88a3a0fcea upstream. When SCTP is done processing a duplicate cookie chunk, it tries to delete a newly created association. For that, it

[PATCH 140/150] netconsole: don't call __netpoll_cleanup() while atomic

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Veaceslav Falico commit 3f315bef23075ea8a98a6fe4221a83b83456d970 upstream. __netpoll_cleanup() is called in netconsole_netdev_event() while holding a spinlock. Release/acquire the spinlock

[PATCH 139/150] sctp: don't break the loop while meeting the active_path so as to find the matched transport

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Xufeng Zhang commit 2317f449af30073cfa6ec8352e4a65a89e357bdd upstream. sctp_assoc_lookup_tsn() function searchs which transport a certain TSN was sent on, if not found in the active_path t

[PATCH 126/150] sfc: Add parentheses around use of bitfield macro arguments

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit 9724a8504c875145f5a513bb8eca50671cee23b4 upstream. Signed-off-by: Ben Hutchings Signed-off-by: Luis Henriques --- drivers/net/ethernet/sfc/bitfield.h | 22 +

[PATCH 127/150] sfc: Fix MCDI structure field lookup

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit 0a6e5008a9df678b48f8d4e57601aa4270df6c14 upstream. The least significant bit number (LBN) of a field within an MCDI structure is counted from the start of the structur

[PATCH 131/150] sfc: Correctly initialise reset_method in siena_test_chip()

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit ef492f11efed9a6a1686bf914fb74468df59385c upstream. Signed-off-by: Ben Hutchings Signed-off-by: Luis Henriques --- drivers/net/ethernet/sfc/siena.c | 2 +- 1 file ch

[PATCH 136/150] sfc: Detach net device when stopping queues for reconfiguration

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit 29c69a4882641285a854d6d03ca5adbba68c0034 upstream. We must only ever stop TX queues when they are full or the net device is not 'ready' so far as the net core, and spe

[PATCH 142/150] bonding: don't call update_speed_duplex() under spinlocks

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Veaceslav Falico commit 876254ae2758d50dcb08c7bd00caf6a806571178 upstream. bond_update_speed_duplex() might sleep while calling underlying slave's routines. Move it out of atomic context i

[PATCH 138/150] sfc: Disable soft interrupt handling during efx_device_detach_sync()

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit 35205b211c8d17a8a0b5e8926cb7c73e9a7ef1ad upstream. efx_device_detach_sync() locks all TX queues before marking the device detached and thus disabling further TX schedu

[PATCH 137/150] sfc: Only use TX push if a single descriptor is to be written

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit fae8563b25f73dc584a07bcda7a82750ff4f7672 upstream. Using TX push when notifying the NIC of multiple new descriptors in the ring will very occasionally cause the TX DMA

[PATCH 134/150] sfc: Fix efx_rx_buf_offset() in the presence of swiotlb

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit b590ace09d51cd39744e0f7662c5e4a0d1b5d952 upstream. We assume that the mapping between DMA and virtual addresses is done on whole pages, so we can find the page offset

[PATCH 135/150] sfc: Correct efx_rx_buffer::page_offset when EFX_PAGE_IP_ALIGN != 0

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit c73e787a8db9117d59b5180baf83203a42ecadca upstream. RX DMA buffers start at an offset of EFX_PAGE_IP_ALIGN bytes from the start of a cache line. This offset obviously

[PATCH 133/150] sfc: Properly sync RX DMA buffer when it is not the last in the page

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit 3a68f19d7afb80f548d016effbc6ed52643a8085 upstream. We may currently allocate two RX DMA buffers to a page, and only unmap the page when the second is completed. We do

[PATCH 132/150] sfc: Fix timekeeping in efx_mcdi_poll()

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit ebf98e797b4e26ad52ace1511a0b503ee60a6cd4 upstream. efx_mcdi_poll() uses get_seconds() to read the current time and to implement a polling timeout. The use of this fun

[PATCH 130/150] sfc: lock TX queues when calling netif_device_detach()

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Daniel Pieczko commit c2f3b8e3a44b6fe9e36704e30157ebe1a88c08b1 upstream. The assertion of netif_device_present() at the top of efx_hard_start_xmit() may fail if we don't do this. Signed-o

Re: [PATCH 098/150] USB: serial: add modem-status-change wait queue

2013-03-26 Thread Johan Hovold
On Tue, Mar 26, 2013 at 03:19:57PM +, Luis Henriques wrote: > 3.5.7.9 -stable review patch. If anyone has any objections, please let me > know. This patch is incorrect as the wait-queue initialisation is missing. A fix has been posted to linux-usb: http://marc.info/?l=linux-usb&m=13

[PATCH 128/150] sfc: Avoid generating over-length MC_CMD_FLUSH_RX_QUEUES request

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit 450783747f42dfa3883920acfad4acdd93ce69af upstream. MCDI supports requests up to 252 bytes long, which is only enough to pass 63 RX queue IDs to MC_CMD_FLUSH_RX_QUEUES.

[PATCH 129/150] sfc: Work-around flush timeout when flushes have completed

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Daniel Pieczko commit 525d9e824018cd7cc8d8d44832ddcd363abfe6e1 upstream. We sometimes hit a "failed to flush" timeout on some TX queues, but the flushes have completed and the flush comple

[PATCH 125/150] sfc: Convert firmware subtypes to native byte order in efx_mcdi_get_board_cfg()

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit bfeed902946a31692e7a24ed355b6d13ac37d014 upstream. On big-endian systems the MTD partition names currently have mangled subtype numbers and are not recognised by the f

[PATCH 124/150] sfc: Really disable flow control while flushing

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit d5e8cc6c946e0857826dcfbb3585068858445bfe upstream. Receiving pause frames can block TX queue flushes. Earlier changes work around this by reconfiguring the MAC during

[PATCH 123/150] sfc: Disable VF queues during register self-test

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit d4f2cecce138c34960c467d0ae38a6d4bcd6af7b upstream. Currently VF queues and drivers may remain active during this test. This could cause memory corruption or spurious t

[PATCH 122/150] sunsu: Fix panic in case of nonexistent port at "console=ttySY" cmdline option

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Tkhai Kirill commit cb29529ea0030e60ef1bbbf8399a43d397a51526 upstream. If a machine has X (X < 4) sunsu ports and cmdline option "console=ttySY" is passed, where X < Y <= 4, than the follo

[PATCH 121/150] tg3: 5715 does not link up when autoneg off

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Nithin Sujir commit 7c6cdead7cc9a99650d15497aae47d7472217eb1 upstream. Commit d13ba512cbba7de5d55d7a3b2aae7d83c8921457 ("tg3: Remove SPEED_UNKNOWN checks") cleaned up the autoneg advertise

[PATCH 117/150] mm/hugetlb: fix total hugetlbfs pages count when using memory overcommit accouting

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Wanpeng Li commit d00285884c0892bb1310df96bce6056e9ce9b9d9 upstream. hugetlb_total_pages is used for overcommit calculations but the current implementation considers only the default huget

[PATCH 120/150] KMS: fix EDID detailed timing frame rate

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Torsten Duwe commit c19b3b0f6eed552952845e4ad908dba2113d67b4 upstream. When KMS has parsed an EDID "detailed timing", it leaves the frame rate zeroed. Consecutive (debug-) output of that

[PATCH 118/150] drivers/rtc/rtc-at91rm9200.c: use a variable for storing IMR

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Nicolas Ferre commit 0ef1594c017521ea89278e80fe3f80dafb17abde upstream. On some revisions of AT91 SoCs, the RTC IMR register is not working. Instead of elaborating a workaround for that sp

[PATCH 119/150] KMS: fix EDID detailed timing vsync parsing

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Torsten Duwe commit 16dad1d743d31a104a849c8944e6b9eb479f6cd7 upstream. EDID spreads some values across multiple bytes; bit-fiddling is needed to retrieve these. The current code to parse

[PATCH 116/150] vfs,proc: guarantee unique inodes in /proc

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit 51f0885e5415b4cc6535e9cdcc5145bfbc134353 upstream. Dave Jones found another /proc issue with his Trinity tool: thanks to the namespace model, we can have multiple /pr

Re: [ 084/104] USB: serial: add modem-status-change wait queue

2013-03-26 Thread Johan Hovold
On Mon, Mar 25, 2013 at 2:06 AM, Ben Hutchings wrote: > 3.2-stable review patch. If anyone has any objections, please let me know. This patch is incorrect as the wait-queue initialisation is missing. A fix has been posted to linux-usb: http://marc.info/?l=linux-usb&m=136428758202815&w=2

[PATCH 113/150] USB: ssu100: fix use-after-free in TIOCMIWAIT

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 43a66b4c417ad15f6d2f632ce67ad195bdf999e8 upstream. Use the port wait queue and make sure to check the serial disconnected flag before accessing private port data after

[PATCH 114/150] USB: ti_usb_3410_5052: fix use-after-free in TIOCMIWAIT

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit fc98ab873aa3dbe783ce56a2ffdbbe7c7609521a upstream. Use the port wait queue and make sure to check the serial disconnected flag before accessing private port data after

[PATCH 091/150] dm verity: avoid deadlock

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka commit 3b6b7813b198b578aa7e04e4047ddb8225c37b7f upstream. A deadlock was found in the prefetch code in the dm verity map function. This patch fixes this by transferring th

[PATCH 096/150] USB: io_ti: fix get_icount for two port adapters

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 5492bf3d5655b4954164f69c02955a7fca267611 upstream. Add missing get_icount field to two-port driver. The two-port driver was not updated when switching to the new icoun

[PATCH 099/150] USB: ark3116: fix use-after-free in TIOCMIWAIT

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 5018860321dc7a9e50a75d5f319bc981298fb5b7 upstream. Use the port wait queue and make sure to check the serial disconnected flag before accessing private port data after

[PATCH 107/150] USB: mos7840: fix broken TIOCMIWAIT

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit e670c6af12517d08a403487b1122eecf506021cf upstream. Make sure waiting processes are woken on modem-status changes. Currently processes are only woken on termios changes

[PATCH 108/150] USB: mos7840: fix use-after-free in TIOCMIWAIT

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit a14430db686b8e459e1cf070a6ecf391515c9ab9 upstream. Use the port wait queue and make sure to check the serial disconnected flag before accessing private port data after

[PATCH 111/150] USB: quatech2: fix use-after-free in TIOCMIWAIT

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 69f87f40d2b98e8b4ab82a121fd2bd584690b887 upstream. Use the port wait queue and make sure to check the serial disconnected flag before accessing private port data after

[PATCH 112/150] USB: spcp8x5: fix use-after-free in TIOCMIWAIT

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit dbcea7615d8d7d58f6ff49d2c5568113f70effe9 upstream. Use the port wait queue and make sure to check the serial disconnected flag before accessing private port data after

[PATCH 110/150] USB: pl2303: fix use-after-free in TIOCMIWAIT

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 40509ca982c00c4b70fc00be887509feca0bff15 upstream. Use the port wait queue and make sure to check the serial disconnected flag before accessing private port data after

[PATCH 109/150] USB: oti6858: fix use-after-free in TIOCMIWAIT

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 8edfdab37157d2683e51b8be5d3d5697f66a9f7b upstream. Use the port wait queue and make sure to check the serial disconnected flag before accessing private port data after

[PATCH 106/150] USB: mct_u232: fix use-after-free in TIOCMIWAIT

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit cf1d24443677a0758cfa88ca40f24858b89261c0 upstream. Use the port wait queue and make sure to check the serial disconnected flag before accessing private port data after

[PATCH 105/150] USB: io_ti: fix use-after-free in TIOCMIWAIT

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 7b2459690584f239650a365f3411ba2ec1c6d1e0 upstream. Use the port wait queue and make sure to check the serial disconnected flag before accessing private port data after

[PATCH 104/150] USB: io_edgeport: fix use-after-free in TIOCMIWAIT

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 333576255d4cfc53efd056aad438568184b36af6 upstream. Use the port wait queue and make sure to check the serial disconnected flag before accessing private port data after

[PATCH 103/150] USB: ftdi_sio: fix use-after-free in TIOCMIWAIT

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 71ccb9b01981fabae27d3c98260ea4613207618e upstream. Use the port wait queue and make sure to check the serial disconnected flag before accessing private port data after

[PATCH 101/150] USB: cypress_m8: fix use-after-free in TIOCMIWAIT

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 356050d8b1e526db093e9d2c78daf49d6bf418e3 upstream. Use the port wait queue and make sure to check the serial disconnected flag before accessing private port data after

[PATCH 102/150] USB: f81232: fix use-after-free in TIOCMIWAIT

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 508f940f1407656076a2e7d8f7fa059b567ecac2 upstream. Use the port wait queue and make sure to check the serial disconnected flag before accessing private port data after

[PATCH 100/150] USB: ch341: fix use-after-free in TIOCMIWAIT

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit fa1e11d5231c001c80a479160b5832933c5d35fb upstream. Use the port wait queue and make sure to check the serial disconnected flag before accessing private port data after

[PATCH 098/150] USB: serial: add modem-status-change wait queue

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit e5b33dc9d16053c2ae4c2c669cf008829530364b upstream. Add modem-status-change wait queue to struct usb_serial_port that subdrivers can use to implement TIOCMIWAIT. Curren

[PATCH 094/150] USB: cdc-acm: fix device unregistration

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit cb25505fc604292c70fc02143fc102f54c8595f0 upstream. Unregister tty device in disconnect as is required by the USB stack. By deferring unregistration to when the last tt

[PATCH 095/150] USB: garmin_gps: fix memory leak on disconnect

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 618aa1068df29c37a58045fe940f9106664153fd upstream. Remove bogus disconnect test introduced by 95bef012e ("USB: more serial drivers writing after disconnect") which prev

[PATCH 093/150] cifs: ignore everything in SPNEGO blob after mechTypes

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Jeff Layton commit f853c616883a8de966873a1dab283f1369e275a1 upstream. We've had several reports of people attempting to mount Windows 8 shares and getting failures with a return code of -E

[PATCH 092/150] drm/mgag200: Bug fix: Modified pll algorithm for EH project

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Julia Lemire commit 260b3f1291a75a580d22ce8bfb1499c617272716 upstream. While testing the mgag200 kms driver on the HP ProLiant Gen8, a bug was seen. Once the bootloader would load the sel

[PATCH 089/150] usb: gadget: ffs: fix enable multiple instances

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Andrzej Pietrasiewicz commit 3416905ba058e43112ad7b1b4859797f027f5a07 upstream. This patch fixes an "off-by-one" bug found in 581791f (FunctionFS: enable multiple functions). During gfs_b

Re: efi: be more paranoid about available space when creating variables

2013-03-26 Thread Matthew Garrett
On Tue, Mar 26, 2013 at 10:37:13AM +, Matt Fleming wrote: > Hmm... I'm not convinced this will provide a long-term solution. Is there > anything that mandates that the size of all variables has to correlate > sensibly > with the results from QueryVariableInfo()? Even if there is in theory, I >

[PATCH 090/150] dm thin: fix discard corruption

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Joe Thornber commit f046f89a99ccfd9408b94c653374ff3065c7edb3 upstream. Fix a bug in dm_btree_remove that could leave leaf values with incorrect reference counts. The effect of this was th

[PATCH 088/150] usb: gadget: udc-core: fix a regression during gadget driver unbinding

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Alan Stern commit 511f3c5326eabe1ece35202a404c24c0aeacc246 upstream. This patch (as1666) fixes a regression in the UDC core. The core takes care of unbinding gadget drivers, and it does t

[PATCH 054/150] HID: clean up quirk for Sony RF receivers

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: =?UTF-8?q?Fernando=20Luis=20V=C3=A1zquez=20Cao?= commit 99d249021abd4341771523ed8dd7946276103432 upstream. Document what the fix-up is does and make it more robust by ensuring that it is on

[PATCH 053/150] HID: add support for Sony RF receiver with USB product id 0x0374

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: =?UTF-8?q?Fernando=20Luis=20V=C3=A1zquez=20Cao?= commit a464918419f94a0043d2f549d6defb4c3f69f68a upstream. Some Vaio desktop computers, among them the VGC-LN51JGB multimedia PC, have a RF r

[PATCH 061/150] udf: avoid info leak on export

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Mathias Krause commit 0143fc5e9f6f5aad4764801015bc8d4b4a278200 upstream. For type 0x51 the udf.parent_partref member in struct fid gets copied uninitialized to userland. Fix this by initia

[PATCH 069/150] drm/i915: restrict kernel address leak in debugfs

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Kees Cook commit 2563a4524febe8f4a98e717e02436d1aaf672aa2 upstream. Masks kernel address info-leak in object dumps with the %pK suffix, so they cannot be used to target kernel memory corru

[PATCH 074/150] usb-storage: add unusual_devs entry for Samsung YP-Z3 mp3 player

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Artamonow commit 29f86e66428ee083aec106cca1748dc63d98ce23 upstream. Device stucks on filesystem writes, unless following quirk is passed: echo 04e8:5136:m > /sys/module/usb_storag

[PATCH 080/150] USB: xhci - fix bit definitions for IMAN register

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Torokhov commit f8264340e694604863255cc0276491d17c402390 upstream. According to XHCI specification (5.5.2.1) the IP is bit 0 and IE is bit 1 of IMAN register. Previously their defin

[PATCH 081/150] x86-64: Fix the failure case in copy_user_handle_tail()

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: CQ Tang commit 66db3feb486c01349f767b98ebb10b0c3d2d021b upstream. The increment of "to" in copy_user_handle_tail() will have incremented before a failure has been noted. This causes us to

[PATCH 079/150] ALSA: hda/cirrus - Fix the digital beep registration

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit a86b1a2cd2f81f74e815e07f756edd7bc5b6f034 upstream. The argument passed to snd_hda_attach_beep_device() is a widget NID while spec->beep_amp holds the composed value for

[PATCH 087/150] ALSA: hda - Fix typo in checking IEC958 emphasis bit

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit a686fd141e20244ad75f80ad54706da07d7bb90a upstream. There is a typo in convert_to_spdif_status() about checking the emphasis IEC958 status bit. It should check the give

[PATCH 086/150] ext4: fix data=journal fast mount/umount hang

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit 2b405bfa84063bfa35621d2d6879f52693c614b0 upstream. In data=journal mode, if we unmount the file system before a transaction has a chance to complete, when the journal

[PATCH 085/150] ALSA: snd-usb: mixer: ignore -EINVAL in snd_usb_mixer_controls()

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Daniel Mack commit 83ea5d18d74f032a760fecde78c0210f66f7f70c upstream. Creation of individual mixer controls may fail, but that shouldn't cause the entire mixer creation to fail. Even worse

[PATCH 084/150] ALSA: snd-usb: mixer: propagate errors up the call chain

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Daniel Mack commit 4d7b86c98e445b075c2c4c3757eb6d3d6efbe72e upstream. In check_input_term() and parse_audio_feature_unit(), propagate the error value that has been returned by a failing fu

[PATCH 082/150] target/iscsi: Fix mutual CHAP auth on big-endian arches

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Andy Grover commit 7ac9ad11b2a5cf77a92b58ee6b672ad2fa155eb1 upstream. See https://bugzilla.redhat.com/show_bug.cgi?id=916290 Used a temp var since we take its address in sg_init_one. Sig

[PATCH 083/150] target/file: Bump FD_MAX_SECTORS to 2048 to handle 1M sized I/Os

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Nicholas Bellinger commit f002a24388cc460c8a9be7d446a9871f7c9d52b6 upstream. This patch bumps the default FILEIO backend FD_MAX_SECTORS value from 1024 -> 2048 in order to allow block_size

[PATCH 073/150] USB: xhci: correctly enable interrupts

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Hannes Reinecke commit 00eed9c814cb8f281be6f0f5d8f45025dc0a97eb upstream. xhci has its own interrupt enabling routine, which will try to use MSI-X/MSI if present. So the usb core shouldn't

[PATCH 078/150] drm/radeon: add Richland pci ids

2013-03-26 Thread Luis Henriques
3.5.7.9 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit b75bbaa038ffc426e88ea3df6c4ae11834fc3e4f upstream. Reviewed-by: Jerome Glisse Signed-off-by: Alex Deucher Signed-off-by: Luis Henriques --- include/drm/drm_pciids.h

  1   2   3   4   5   6   7   >