| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-Id: <1486322063-7558-1-git-send-email-w@1wt.eu>
Date: Sun, 5 Feb 2017 20:09:04 +0100
From: Willy Tarreau <w@....eu>
To: linux-kernel@...r.kernel.org, stable@...r.kernel.org,
linux@...ck-us.net
Cc: Willy Tarreau <w@....eu>
Subject: [PATCH 3.10 000/319] 3.10.105-stable review
This is the start of the stable review cycle for the 3.10.105 release.
NOTE! This series is quite large as I've caught up with many pending fixes
that were submitted for -stable long ago and that I had been holding on
since 3.10.103 due to limited time. Most fixes address stability issues
in crypto, net, usb, scsi, kvm, random info leaks, and risks of oopses
in various subsystems. My pending queue is now empty.
It builds fine here on i586 and x86_64 for allmodconfig and on armv7 with
mvebu_defconfig.
All patches will be posted as a response to this one. If anyone has any
issue with these being applied, please let me know. If anyone thinks some
important patches are missing and should be added prior to the release,
please report them quickly with their respective mainline commit IDs.
Responses should be made by Fri Feb 10 10:00:00 CET 2017.
Anything received after that time might be too late. If someone
wants a bit more time for a deeper review, please let me know.
The whole patch series can be found in one patch at :
https://kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.10.105-rc1.gz
The shortlog and diffstat are appended below.
Thanks,
Willy
===============
Al Viro (28):
avr32: fix copy_from_user()
microblaze: fix __get_user()
microblaze: fix copy_from_user()
mn10300: failing __get_user() and get_user() should zero
m32r: fix __get_user()
sh64: failing __get_user() should zero
score: fix __get_user/get_user
s390: get_user() should zero on failure
asm-generic: make get_user() clear the destination on errors
frv: fix clear_user()
cris: buggered copy_from_user/copy_to_user/clear_user
blackfin: fix copy_from_user()
score: fix copy_from_user() and friends
sh: fix copy_from_user()
hexagon: fix strncpy_from_user() error return
mips: copy_from_user() must zero the destination on access_ok()
failure
asm-generic: make copy_from_user() zero the destination properly
alpha: fix copy_from_user()
metag: copy_from_user() should zero the destination on access_ok()
failure
parisc: fix copy_from_user()
openrisc: fix copy_from_user()
mn10300: copy_from_user() should zero on access_ok() failure...
sparc32: fix copy_from_user()
ppc32: fix copy_from_user()
ia64: copy_from_user() should zero the destination on access_ok()
failure
fix fault_in_multipages_...() on architectures with no-op access_ok()
fix memory leaks in tracing_buffers_splice_read()
arc: don't leak bits of kernel stack into coredump
Alan Stern (3):
USB: validate wMaxPacketValue entries in endpoint descriptors
USB: fix typo in wMaxPacketSize validation
USB: change bInterval default to 10 ms
Alex Vesker (2):
IB/ipoib: Don't allow MC joins during light MC flush
IB/mlx4: Fix incorrect MC join state bit-masking on SR-IOV
Alexander Usyskin (1):
mei: bus: fix received data size check in NFC fixup
Alexey Khoroshilov (2):
USB: serial: mos7720: fix non-atomic allocation in write path
USB: serial: mos7840: fix non-atomic allocation in write path
Alexey Klimov (1):
USB: serial: fix memleak in driver-registration error path
Andrew Bresticker (1):
pstore/ram: Use memcpy_fromio() to save old buffer
Andrey Grodzovsky (2):
scsi: mpt3sas: Fix secure erase premature termination
mpt2sas: Fix secure erase premature termination
Andrey Ryabinin (2):
coredump: fix unfreezable coredumping task
mpi: Fix NULL ptr dereference in mpi_powm() [ver #3]
Andy Lutomirski (1):
x86/traps: Ignore high word of regs->cs in early_idt_handler_common
Anoob Soman (1):
packet: call fanout_release, while UNREGISTERING a netdev
Anton Blanchard (1):
powerpc/vdso64: Use double word compare on pointers
Ard Biesheuvel (1):
crypto: cryptd - initialize child shash_desc on import
Arend Van Spriel (1):
brcmfmac: avoid potential stack overflow in brcmf_cfg80211_start_ap()
Arnaldo Carvalho de Melo (1):
perf symbols: Fixup symbol sizes before picking best ones
Arnd Bergmann (1):
staging: iio: ad5933: avoid uninitialized variable in error case
Ashish Samant (1):
ocfs2: fix start offset to ocfs2_zero_range_for_truncate()
Balbir Singh (1):
sched/core: Fix a race between try_to_wake_up() and a woken up task
Baoquan He (1):
iommu/amd: Free domain id when free a domain of struct dma_ops_domain
Bart Van Assche (2):
IB/srpt: Simplify srpt_handle_tsk_mgmt()
dm: mark request_queue dead before destroying the DM device
Ben Hutchings (1):
xen-pciback: Add name prefix to global 'permissive' variable
Boris Brezillon (1):
UBI: fastmap: scrub PEB when bitflips are detected in a free PEB EC
header
Brian King (1):
scsi: ibmvfc: Fix I/O hang when port is not mapped
Brian Norris (2):
mtd: blkdevs: fix potential deadlock + lockdep warnings
mwifiex: printk() overflow with 32-byte SSIDs
Ching Huang (1):
scsi: arcmsr: Send SYNCHRONIZE_CACHE command to firmware
Chris Metcalf (1):
tile: avoid using clocksource_cyc2ns with absolute cycle count
Christian Borntraeger (2):
kernel: Provide READ_ONCE and ASSIGN_ONCE
kernel: Change ASSIGN_ONCE(val, x) to WRITE_ONCE(x, val)
Christian König (1):
drm/radeon: fix radeon_move_blit on 32bit systems
Chuck Lever (2):
NFS: Don't drop CB requests with invalid principals
svc: Avoid garbage replies when pc_func() returns rpc_drop_reply
Cyrille Pitchen (1):
i2c: at91: fix write transfers by clearing pending interrupt first
Daeho Jeong (2):
ext4: avoid modifying checksum fields directly during checksum
verification
ext4: reinforce check of i_dtime when clearing high fields of uid and
gid
Dan Carpenter (10):
avr32: off by one in at32_init_pio()
usb: gadget: fsl_qe_udc: signedness bug in qe_get_frame()
scsi: zfcp: spin_lock_irqsave() is not nestable
scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer()
hostfs: Freeing an ERR_PTR in hostfs_fill_sb_common()
qxl: check for kmap failures
em28xx-i2c: rt_mutex_trylock() returns zero on failure
mtd: pmcmsp-flash: Allocating too much in init_msp_flash()
tools/vm/slabinfo: fix an unintentional printf
mfd: 88pm80x: Double shifting bug in suspend/resume
Daniel Glöckner (1):
mmc: block: don't use CMD23 with very old MMC cards
Daniel Mentz (1):
lib/genalloc.c: start search from start of chunk
Daniel Vetter (1):
drm: Reject page_flip for !DRIVER_MODESET
Darrick J. Wong (1):
libxfs: clean up _calc_dquots_per_chunk
Dave Chinner (1):
xfs: fix superblock inprogress check
Dave Gerlach (1):
hwrng: omap - Only fail if pm_runtime_get_sync returns < 0
David Howells (1):
KEYS: Fix short sprintf buffer in /proc/keys show function
David Vrabel (3):
xen: Add RING_COPY_REQUEST()
xen-netback: don't use last request to determine minimum Tx credit
xen-netback: use RING_COPY_REQUEST() throughout
Denys Vlasenko (1):
include/stddef.h: Move offsetofend() from vfio.h to a generic kernel
header
Ding Tianhong (1):
rcu: Fix soft lockup for rcu_nocb_kthread
Dmitry Torokhov (3):
Input: i8042 - break load dependency between atkbd/psmouse and i8042
Input: i8042 - set up shared ps2_cmd_mutex for AUX ports
Input: ili210x - fix permissions on "calibrate" attribute
Dmitry Vyukov (1):
tty: limit terminal size to 4M chars
Douglas Caetano dos Santos (1):
tcp: fix wrong checksum calculation on MTU probing
Eli Cooper (2):
ip6_tunnel: Clear IP6CB in ip6tunnel_xmit()
ipv4: Set skb->protocol properly for local output
Emmanouil Maroudas (1):
EDAC: Increment correct counter in edac_inc_ue_error()
Emrah Demir (1):
mISDN: Fixing missing validation in base_sock_bind()
Erez Shitrit (2):
IB/ipoib: Fix memory corruption in ipoib cm mode connect flow
IB/core: Fix use after free in send_leave function
Eric Dumazet (12):
ipv6: dccp: fix out of bound access in dccp_v6_err()
ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped
tcp: fix use after free in tcp_xmit_retransmit_queue()
tcp: properly scale window in tcp_v[46]_reqsk_send_ack()
tcp: fix overflow in __tcp_retransmit_skb()
tcp: take care of truncations done by sk_filter()
net: fix sk_mem_reclaim_partial()
net: avoid sk_forward_alloc overflows
net: clear sk_err_soft in sk_clone_lock()
net: mangle zero checksum in skb_checksum_help()
dccp: do not send reset to already closed sockets
dccp: fix out of bound access in dccp_v4_err()
Ewan D. Milne (1):
scsi: scsi_debug: Fix memory leak if LBP enabled and module is
unloaded
Fabio Estevam (1):
mmc: mxs: Initialize the spinlock prior to using it
Felipe Balbi (3):
usb: dwc3: gadget: increment request->actual once
usb: gadget: function: u_ether: don't starve tx request queue
usb: gadget: u_ether: remove interrupt throttling
Felix Fietkau (1):
mac80211: fix purging multicast PS buffer queue
Florian Fainelli (2):
brcmsmac: Free packet if dma_mapping_error() fails in dma_rxfill
brcmsmac: Initialize power in brcms_c_stf_ss_algo_channel_get()
Furquan Shaikh (1):
pstore/ram: Use memcpy_toio instead of memcpy
Gavin Li (1):
cdc-acm: fix wrong pipe type on rx interrupt xfers
Gavin Shan (2):
powerpc/powernv: Use CPU-endian PEST in pnv_pci_dump_p7ioc_diag_data()
drivers/vfio: Rework offsetofend()
Glauber Costa (1):
cfq: fix starvation of asynchronous writes
Greg Kroah-Hartman (1):
usb: misc: legousbtower: Fix NULL pointer deference
Guenter Roeck (3):
avr32: fix 'undefined reference to `___copy_from_user'
openrisc: fix the fix of copy_from_user()
metag: Only define atomic_dec_if_positive conditionally
H.J. Lu (1):
x86/build: Build compressed x86 kernels as PIE
Hannes Frederic Sowa (2):
ipv6: split duplicate address detection and router solicitation timer
ipv6: move DAD and addrconf_verify processing to workqueue
Herbert Xu (17):
crypto: algif_skcipher - Require setkey before accept(2)
crypto: af_alg - Disallow bind/setkey/... after accept(2)
crypto: af_alg - Add nokey compatibility path
crypto: algif_skcipher - Add nokey compatibility path
crypto: hash - Add crypto_ahash_has_setkey
crypto: shash - Fix has_key setting
crypto: algif_hash - Require setkey before accept(2)
crypto: skcipher - Add crypto_skcipher_has_setkey
crypto: algif_skcipher - Add key check exception for cipher_null
crypto: af_alg - Allow af_af_alg_release_parent to be called on nokey
path
crypto: algif_hash - Remove custom release parent function
crypto: algif_skcipher - Remove custom release parent function
crypto: af_alg - Forbid bind(2) when nokey child sockets are present
crypto: algif_hash - Fix race condition in hash_check_key
crypto: algif_skcipher - Fix race condition in skcipher_check_key
crypto: algif_skcipher - Load TX SG list after waiting
crypto: skcipher - Fix blkcipher walk OOM crash
Ido Yariv (1):
KVM: x86: fix wbinvd_dirty_mask use-after-free
Ignacio Alvarado (1):
KVM: Disable irq while unregistering user notifier
Jack Morgenstein (1):
net/mlx4_core: Allow resetting VF admin mac to zero
Jaewon Kim (1):
ratelimit: fix bug in time interval by resetting right begin time
James Hogan (4):
KVM: MIPS: Precalculate MMIO load resume PC
KVM: MIPS: Drop other CPU ASIDs on guest MMU changes
KVM: MIPS: Make ERET handle ERL before EXL
arm64: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO
Jan Beulich (1):
x86/mm/xen: Suppress hugetlbfs in PV guests
Jan Kara (1):
isofs: Do not return EACCES for unknown filesystems
Jan Remmet (1):
regulator: tps65910: Work around silicon erratum SWCZ010
Jan Viktorin (1):
uio: fix dmem_region_start computation
Jann Horn (2):
swapfile: fix memory corruption via malformed swapfile
netfilter: fix namespace handling in nf_log_proc_dostring
Jeff Mahoney (2):
reiserfs: fix "new_insert_key may be used uninitialized ..."
btrfs: ensure that file descriptor used with subvol ioctls is a dir
Jeremy Linton (1):
net: sky2: Fix shutdown crash
Jim Lin (1):
usb: xhci: Fix panic if disconnect
Jiri Kosina (1):
x86/mm/pat, /dev/mem: Remove superfluous error message
Jiri Slaby (2):
tty: vt, fix bogus division in csi_J
net: sctp, forbid negative length
Joe Perches (2):
stddef.h: move offsetofend inside #ifndef/#endif guard, neaten
ipc: remove use of seq_printf return value
Joerg Roedel (1):
iommu/amd: Update Alias-DTE in update_device_table()
Johan Hovold (4):
USB: kobil_sct: fix non-atomic allocation in write path
USB: serial: cp210x: fix tiocmget error handling
mfd: core: Fix device reference leak in mfd_clone_cell
PM / sleep: fix device reference leak in test_suspend
Johannes Berg (2):
mac80211: discard multicast and 4-addr A-MSDUs
cfg80211: limit scan results cache size
John David Anglin (1):
parisc: Ensure consistent state when switching to kernel stack at
syscall entry
Joseph Qi (1):
ocfs2/dlm: fix race between convert and migration
Juergen Gross (1):
x86/xen: fix upper bound of pmd loop in xen_cleanhighmap()
Karl Beldan (1):
mtd: nand: davinci: Reinitialize the HW ECC engine in 4bit hwctl
Kashyap Desai (1):
scsi: megaraid_sas: Fix data integrity failure for JBOD (passthrough)
devices
Kinglong Mee (1):
NFSD: Using free_conn free connection
Konrad Rzeszutek Wilk (6):
xen/pciback: Save xen_pci_op commands before processing it
xen/pciback: Return error on XEN_PCI_OP_enable_msi when device has MSI
or MSI-X enabled
xen/pciback: Return error on XEN_PCI_OP_enable_msix when device has
MSI or MSI-X enabled
xen/pciback: Do not install an IRQ handler for MSI interrupts.
xen/pciback: For XEN_PCI_OP_disable_msi[|x] only disable if device has
MSI(X) enabled.
xen/pciback: Don't allow MSI-X ops if PCI_COMMAND_MEMORY is not set.
Konstantin Khlebnikov (2):
ext4: use __GFP_NOFAIL in ext4_free_blocks()
net: ratelimit warnings about dst entry refcount underflow or overflow
Konstantin Shkolnyy (1):
USB: serial: cp210x: fix hardware flow-control disable
Krzysztof Kozlowski (2):
hwrng: exynos - Disable runtime PM on probe failure
thermal: hwmon: Properly report critical temperature in sysfs
Lance Richardson (1):
ip6_gre: fix flowi6_proto value in ip6gre_xmit_other()
Linus Torvalds (2):
Fix potential infoleak in older kernels
kernel: make READ_ONCE() valid on const arguments
Linus Walleij (2):
iio: accel: kxsd9: Fix raw read return
iio: accel: kxsd9: Fix scaling bug
Liu Gang (1):
gpio: mpc8xxx: Correct irq handler function
Liu ShuoX (1):
pstore: Fix buffer overflow while write offset equal to buffer size
Long Li (1):
hv: do not lose pending heartbeat vmbus packets
Maciej S. Szmigiero (1):
mISDN: Support DR6 indication in mISDNipac driver
Mahesh Bandewar (1):
bonding: Fix bonding crash
Manfred Spraul (1):
ipc/sem.c: fix complex_count vs. simple op race
Marcelo Ricardo Leitner (2):
sctp: validate chunk len before actually using it
sctp: assign assoc_id earlier in __sctp_connect
Marcin Nowakowski (1):
MIPS: ptrace: Fix regs_return_value for kernel context
Mark Bloch (1):
IB/cm: Mark stale CM id's whenever the mad agent was unregistered
Mark Rutland (1):
arm64: avoid returning from bad_mode
Markus Elfring (1):
driver core: Delete an unnecessary check before the function call
"put_device"
Matan Barak (1):
IB/mlx4: Fix create CQ error flow
Mauro Carvalho Chehab (4):
mb86a20s: fix the locking logic
mb86a20s: fix demod settings
cx231xx: don't return error on success
cx231xx: fix GPIOs for Pixelview SBTVD hybrid
Max Staudt (1):
fbdev/efifb: Fix 16 color palette entry calculation
Michael S. Tsirkin (1):
x86/um: reuse asm-generic/barrier.h
Michael Walle (1):
hwmon: (adt7411) set bit 3 in CFG1 register
Michal Hocko (1):
kernel/fork: fix CLONE_CHILD_CLEARTID regression in nscd
Michal Kubecek (2):
net: disable fragment reassembly if high_thresh is set to zero
ipvs: count pre-established TCP states as active
Michal KubeÄek (1):
ipv6: don't call fib6_run_gc() until routing is ready
Michel Dänzer (1):
drm/radeon: Ensure vblank interrupt is enabled on DPMS transition to
on
Mike Galbraith (1):
reiserfs: Unlock superblock before calling reiserfs_quota_on_mount()
Mike Snitzer (1):
dm flakey: fix reads to be issued if drop_writes configured
Ming Lei (2):
scsi: Fix use-after-free
driver core: fix race between creating/querying glue dir and its
cleanup
Myron Stowe (1):
PCI: Handle read-only BARs on AMD CS553x devices
Nicholas Mc Guire (1):
MIPS: KVM: Fix unused variable build warning
Nicolas Dichtel (1):
ipv6: correctly add local routes when lo goes up
Nikolay Aleksandrov (1):
ipmr, ip6mr: fix scheduling while atomic and a deadlock with
ipmr_get_route
Nishanth Menon (1):
hwrng: omap - Fix assumption that runtime_get_sync will always succeed
Oleg Nesterov (1):
fs/super.c: fix race between freeze_super() and thaw_super()
Oliver Hartkopp (1):
can: bcm: fix warning in bcm_connect/proc_register
Oliver Neukum (1):
kaweth: fix firmware download
Ondrej MosnáÄek (1):
crypto: gcm - Fix IV buffer size in crypto_gcm_setkey
Pan Xinhui (1):
powerpc/nvram: Fix an incorrect partition merge
Paolo Abeni (1):
ip6_tunnel: disable caching when the traffic class is inherited
Paolo Bonzini (1):
KVM: x86: fix missed SRCU usage in kvm_lapic_set_vapic_addr
Paul Burton (1):
MIPS: Malta: Fix IOCU disable switch read for MIPS64
Paul E. McKenney (1):
compiler: Allow 1- and 2-byte smp_load_acquire() and
smp_store_release()
Paul Mackerras (2):
powerpc/mm: Don't alias user region to other regions below PAGE_OFFSET
powerpc/64: Fix incorrect return value from __copy_tofrom_user
Peter Chen (1):
usb: chipidea: move the lock initialization to core file
Peter Hurley (1):
tty: Prevent ldisc drivers from re-using stale tty fields
Peter Ujfalusi (1):
ASoC: omap-mcpdm: Fix irq resource handling
Peter Zijlstra (4):
sched/core: Fix an SMP ordering race in try_to_wake_up() vs.
schedule()
perf: Tighten (and fix) the grouping condition
arch: Introduce smp_load_acquire(), smp_store_release()
locking: Remove atomicy checks from {READ,WRITE}_ONCE
Petr Vandrovec (1):
Fix USB CB/CBI storage devices with CONFIG_VMAP_STACK=y
Punit Agrawal (1):
ACPI / APEI: Fix incorrect return value of ghes_proc()
Radim KrÄmář (1):
KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write
Richard Weinberger (5):
ubifs: Fix xattr_names length in exit paths
UBIFS: Fix possible memory leak in ubifs_readdir()
ubifs: Abort readdir upon error
ubifs: Fix regression in ubifs_readdir()
drbd: Fix kernel_sendmsg() usage - potential NULL deref
Robin Murphy (1):
ARM: 8616/1: dt: Respect property size when parsing CPUs
Roger Pau Monné (1):
xen-blkback: only read request operation from shared ring once
Ross Zwisler (1):
ext4: allow DAX writeback for hole punch
Russell King (2):
ARM: sa1100: clear reset status prior to reboot
ARM: sa1111: fix pcmcia suspend/resume
Sabrina Dubroca (1):
ipv6: fix rtnl locking in setsockopt for anycast and multicast
Sara Sharon (1):
iwlwifi: pcie: fix access to scratch buffer
Scot Doyle (1):
vt: clear selection before resizing
Sebastian Andrzej Siewior (2):
x86/mm: Disable preemption during CR3 read+write
pstore/core: drop cmpxchg based updates
Sergei Miroshnichenko (1):
can: dev: fix deadlock reported after bus-off
Srinivas Ramana (1):
ARM: 8618/1: decompressor: reset ttbcr fields to use TTBR0 on ARMv7
Stefan Haberland (1):
s390/dasd: fix hanging device after clear subchannel
Stefan Richter (2):
firewire: net: guard against rx buffer overflows
firewire: net: fix fragmented datagram_size off-by-one
Steffen Maier (10):
zfcp: fix fc_host port_type with NPIV
zfcp: fix ELS/GS request&response length for hardware data router
zfcp: close window with unblocked rport during rport gone
zfcp: retain trace level for SCSI and HBA FSF response records
zfcp: restore: Dont use 0 to indicate invalid LUN in rec trace
zfcp: trace on request for open and close of WKA port
zfcp: restore tracing of handle for port and LUN with HBA records
zfcp: fix D_ID field with actual value on tracing SAN responses
zfcp: fix payload trace length for SAN request&response
zfcp: trace full payload of all SAN records (req,resp,iels)
Stephen Suryaputra Lin (1):
ipv4: use new_gw for redirect neigh lookup
Steven Rostedt (1):
x86/paravirt: Do not trace _paravirt_ident_*() functions
Steven Rostedt (Red Hat) (1):
tracing: Move mutex to protect against resetting of seq data
Sumit Saxena (1):
scsi: megaraid_sas: fix macro MEGASAS_IS_LOGICAL to avoid regression
Takashi Iwai (3):
ALSA: rawmidi: Fix possible deadlock with virmidi registration
ALSA: ali5451: Fix out-of-bound position reporting
ALSA: pcm : Call kill_fasync() in stream lock
Tariq Toukan (1):
IB/uverbs: Fix leak of XRC target QPs
Tejun Heo (1):
timers: Use proper base migration in add_timer_on()
Theodore Ts'o (2):
ext4: validate that metadata blocks do not overlap superblock
ext4: sanity check the block and cluster size at mount time
Trond Myklebust (2):
NFSv4.x: Fix a refcount leak in nfs_callback_up_net
NFSv4: Open state recovery must account for file permission changes
Vegard Nossum (5):
ALSA: timer: fix NULL pointer dereference in read()/ioctl() race
ALSA: timer: fix division by zero after SNDRV_TIMER_IOCTL_CONTINUE
ALSA: timer: fix NULL pointer dereference on memory allocation failure
fs/seq_file: fix out-of-bounds read
net/irda: handle iriap_register_lsap() allocation failure
Vincent Stehlé (1):
ubifs: Fix assertion in layout_in_gaps()
Vineet Gupta (1):
ARC: uaccess: get_user to zero out dest in cause of fault
Vladimir Zapolskiy (1):
i2c: core: fix NULL pointer dereference under race condition
WANG Cong (2):
ppp: defer netns reference release for ppp channel
neigh: check error pointer instead of NULL for ipv4_neigh_lookup()
Wanpeng Li (1):
x86/apic: Do not init irq remapping if ioapic is disabled
Wei Yongjun (1):
ipv6: addrconf: fix dev refcont leak when DAD failed
Will Deacon (2):
arm64: spinlocks: implement smp_mb__before_spinlock() as smp_mb()
arm64: debug: avoid resetting stepping state machine when
TIF_SINGLESTEP
Xiaolong Ye (1):
PM / devfreq: Fix incorrect type issue.
Yadi.hu (1):
i2c-eg20t: fix race between i2c init and interrupt enable
Yoshihiro Shimoda (1):
usb: renesas_usbhs: fix clearing the {BRDY,BEMP}STS condition
zhong jiang (1):
mm,ksm: fix endless looping in allocating memory when ksm enable
arch/alpha/include/asm/uaccess.h | 19 +-
arch/arc/include/asm/uaccess.h | 11 +-
arch/arc/kernel/signal.c | 11 +-
arch/arm/boot/compressed/head.S | 2 +-
arch/arm/common/sa1111.c | 22 +-
arch/arm/include/asm/barrier.h | 15 ++
arch/arm/kernel/devtree.c | 14 +-
arch/arm/mach-sa1100/generic.c | 2 +
arch/arm64/include/asm/barrier.h | 50 ++++
arch/arm64/include/asm/elf.h | 1 +
arch/arm64/include/asm/spinlock.h | 10 +
arch/arm64/include/uapi/asm/auxvec.h | 2 +
arch/arm64/kernel/debug-monitors.c | 6 +-
arch/arm64/kernel/entry.S | 2 +-
arch/arm64/kernel/traps.c | 25 +-
arch/avr32/include/asm/uaccess.h | 11 +-
arch/avr32/kernel/avr32_ksyms.c | 2 +-
arch/avr32/lib/copy_user.S | 8 +-
arch/avr32/mach-at32ap/pio.c | 2 +-
arch/blackfin/include/asm/uaccess.h | 9 +-
arch/cris/include/asm/uaccess.h | 71 +++---
arch/frv/include/asm/uaccess.h | 12 +-
arch/hexagon/include/asm/uaccess.h | 3 +-
arch/ia64/include/asm/barrier.h | 23 ++
arch/ia64/include/asm/uaccess.h | 20 +-
arch/m32r/include/asm/uaccess.h | 2 +-
arch/metag/include/asm/atomic.h | 3 +-
arch/metag/include/asm/barrier.h | 15 ++
arch/metag/include/asm/uaccess.h | 3 +-
arch/microblaze/include/asm/uaccess.h | 11 +-
arch/mips/include/asm/barrier.h | 15 ++
arch/mips/include/asm/kvm_host.h | 7 +-
arch/mips/include/asm/ptrace.h | 2 +-
arch/mips/include/asm/uaccess.h | 3 +
arch/mips/kvm/kvm_mips_emul.c | 100 ++++++--
arch/mips/mti-malta/malta-setup.c | 8 +-
arch/mn10300/include/asm/uaccess.h | 1 +
arch/mn10300/lib/usercopy.c | 4 +-
arch/openrisc/include/asm/uaccess.h | 35 +--
arch/parisc/include/asm/uaccess.h | 7 +-
arch/parisc/kernel/syscall.S | 11 +-
arch/powerpc/include/asm/barrier.h | 21 +-
arch/powerpc/include/asm/uaccess.h | 21 +-
arch/powerpc/kernel/nvram_64.c | 6 +-
arch/powerpc/kernel/vdso64/datapage.S | 2 +-
arch/powerpc/kernel/vdso64/gettimeofday.S | 2 +-
arch/powerpc/lib/copyuser_64.S | 2 +-
arch/powerpc/mm/slb_low.S | 7 +-
arch/powerpc/platforms/powernv/pci.c | 4 +-
arch/s390/include/asm/barrier.h | 15 ++
arch/s390/include/asm/uaccess.h | 8 +-
arch/score/include/asm/uaccess.h | 46 ++--
arch/sh/include/asm/uaccess.h | 5 +-
arch/sh/include/asm/uaccess_64.h | 1 +
arch/sparc/include/asm/barrier_64.h | 15 ++
arch/sparc/include/asm/uaccess_32.h | 4 +-
arch/tile/kernel/time.c | 4 +-
arch/x86/boot/compressed/Makefile | 14 +-
arch/x86/boot/compressed/head_32.S | 28 ++
arch/x86/boot/compressed/head_64.S | 8 +
arch/x86/include/asm/barrier.h | 43 +++-
arch/x86/include/asm/hugetlb.h | 1 +
arch/x86/include/asm/tlbflush.h | 7 +
arch/x86/include/asm/uaccess.h | 2 +-
arch/x86/kernel/apic/apic.c | 3 +
arch/x86/kernel/head_32.S | 2 +-
arch/x86/kernel/paravirt.c | 4 +-
arch/x86/kvm/vmx.c | 13 +
arch/x86/kvm/x86.c | 20 +-
arch/x86/mm/pat.c | 5 +-
arch/x86/um/asm/barrier.h | 6 +-
arch/x86/xen/mmu.c | 2 +-
block/cfq-iosched.c | 13 +-
crypto/ablkcipher.c | 2 +
crypto/af_alg.c | 51 +++-
crypto/ahash.c | 5 +-
crypto/algif_hash.c | 165 +++++++++++-
crypto/algif_skcipher.c | 172 +++++++++++--
crypto/blkcipher.c | 4 +-
crypto/cryptd.c | 9 +-
crypto/gcm.c | 2 +-
crypto/shash.c | 5 +-
drivers/acpi/apei/ghes.c | 2 +-
drivers/base/core.c | 42 ++-
drivers/block/drbd/drbd_main.c | 2 +-
drivers/block/xen-blkback/common.h | 8 +-
drivers/char/hw_random/exynos-rng.c | 9 +-
drivers/char/hw_random/omap-rng.c | 16 +-
drivers/char/mem.c | 6 +-
drivers/devfreq/devfreq.c | 2 +-
drivers/edac/edac_mc.c | 2 +-
drivers/firewire/net.c | 59 +++--
drivers/gpio/gpio-mpc8xxx.c | 2 +-
drivers/gpu/drm/drm_crtc.c | 3 +
drivers/gpu/drm/qxl/qxl_draw.c | 2 +
drivers/gpu/drm/radeon/atombios_crtc.c | 2 +
drivers/gpu/drm/radeon/radeon_legacy_crtc.c | 2 +
drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
drivers/hv/hv_util.c | 10 +-
drivers/hwmon/adt7411.c | 5 +-
drivers/i2c/busses/i2c-at91.c | 58 ++++-
drivers/i2c/busses/i2c-eg20t.c | 18 +-
drivers/i2c/i2c-core.c | 2 +-
drivers/iio/accel/kxsd9.c | 2 +
drivers/infiniband/core/cm.c | 127 +++++++--
drivers/infiniband/core/multicast.c | 13 +-
drivers/infiniband/core/uverbs_main.c | 7 +-
drivers/infiniband/hw/mlx4/cq.c | 5 +-
drivers/infiniband/hw/mlx4/mcg.c | 14 +-
drivers/infiniband/ulp/ipoib/ipoib.h | 1 +
drivers/infiniband/ulp/ipoib/ipoib_cm.c | 16 ++
drivers/infiniband/ulp/ipoib/ipoib_ib.c | 9 +
drivers/infiniband/ulp/ipoib/ipoib_main.c | 2 +-
drivers/infiniband/ulp/srpt/ib_srpt.c | 59 +----
drivers/input/serio/i8042.c | 17 +-
drivers/input/serio/libps2.c | 10 +-
drivers/input/touchscreen/ili210x.c | 2 +-
drivers/iommu/amd_iommu.c | 13 +-
drivers/isdn/hardware/mISDN/ipac.h | 1 +
drivers/isdn/hardware/mISDN/mISDNipac.c | 2 +
drivers/isdn/mISDN/socket.c | 3 +
drivers/md/dm-flakey.c | 27 +-
drivers/md/dm.c | 5 +
drivers/media/dvb-frontends/mb86a20s.c | 104 ++++----
drivers/media/usb/cx231xx/cx231xx-avcore.c | 5 +-
drivers/media/usb/cx231xx/cx231xx-cards.c | 2 +-
drivers/media/usb/cx231xx/cx231xx-core.c | 3 +-
drivers/media/usb/em28xx/em28xx-i2c.c | 5 +-
drivers/mfd/mfd-core.c | 2 +
drivers/misc/mei/nfc.c | 2 +-
drivers/mmc/card/block.c | 3 +-
drivers/mmc/host/mxs-mmc.c | 4 +-
drivers/mtd/maps/pmcmsp-flash.c | 6 +-
drivers/mtd/mtd_blkdevs.c | 10 +-
drivers/mtd/nand/davinci_nand.c | 3 +
drivers/mtd/ubi/fastmap.c | 7 +-
drivers/net/bonding/bond_main.c | 7 +-
drivers/net/can/dev.c | 27 +-
drivers/net/ethernet/marvell/sky2.c | 13 +
drivers/net/ethernet/mellanox/mlx4/en_netdev.c | 2 +-
drivers/net/ppp/ppp_generic.c | 5 +-
drivers/net/usb/kaweth.c | 3 +-
.../net/wireless/brcm80211/brcmfmac/wl_cfg80211.c | 2 +-
drivers/net/wireless/brcm80211/brcmsmac/dma.c | 4 +-
drivers/net/wireless/brcm80211/brcmsmac/stf.c | 2 +-
drivers/net/wireless/iwlwifi/pcie/tx.c | 4 +-
drivers/net/wireless/mwifiex/cfg80211.c | 13 +-
drivers/net/xen-netback/netback.c | 34 ++-
drivers/pci/quirks.c | 41 ++-
drivers/regulator/tps65910-regulator.c | 6 +
drivers/s390/block/dasd.c | 10 +-
drivers/s390/scsi/zfcp_dbf.c | 162 ++++++++++--
drivers/s390/scsi/zfcp_dbf.h | 14 +-
drivers/s390/scsi/zfcp_erp.c | 12 +-
drivers/s390/scsi/zfcp_ext.h | 8 +-
drivers/s390/scsi/zfcp_fsf.c | 22 +-
drivers/s390/scsi/zfcp_fsf.h | 4 +-
drivers/s390/scsi/zfcp_scsi.c | 8 +-
drivers/scsi/arcmsr/arcmsr_hba.c | 17 +-
drivers/scsi/ibmvscsi/ibmvfc.c | 1 -
drivers/scsi/megaraid/megaraid_sas.h | 2 +-
drivers/scsi/megaraid/megaraid_sas_base.c | 13 +-
drivers/scsi/mpt2sas/mpt2sas_scsih.c | 15 ++
drivers/scsi/mpt3sas/mpt3sas_scsih.c | 14 +
drivers/scsi/scsi_debug.c | 1 +
drivers/scsi/scsi_scan.c | 2 +-
drivers/staging/iio/impedance-analyzer/ad5933.c | 17 +-
drivers/thermal/thermal_core.c | 2 +-
drivers/tty/tty_ldisc.c | 7 +
drivers/tty/vt/vt.c | 7 +-
drivers/uio/uio_dmem_genirq.c | 2 +-
drivers/usb/chipidea/core.c | 1 +
drivers/usb/chipidea/udc.c | 2 -
drivers/usb/class/cdc-acm.c | 5 +-
drivers/usb/class/cdc-acm.h | 1 -
drivers/usb/core/config.c | 93 ++++++-
drivers/usb/dwc3/gadget.c | 19 +-
drivers/usb/gadget/fsl_qe_udc.c | 7 +-
drivers/usb/gadget/u_ether.c | 7 -
drivers/usb/host/xhci-hub.c | 3 +
drivers/usb/misc/legousbtower.c | 35 ++-
drivers/usb/renesas_usbhs/mod.c | 11 +-
drivers/usb/serial/cp210x.c | 6 +-
drivers/usb/serial/kobil_sct.c | 5 +-
drivers/usb/serial/mos7720.c | 2 +-
drivers/usb/serial/mos7840.c | 4 +-
drivers/usb/serial/usb-serial.c | 4 +-
drivers/usb/storage/transport.c | 7 +-
drivers/video/efifb.c | 6 +-
drivers/xen/xen-pciback/conf_space.c | 6 +-
drivers/xen/xen-pciback/conf_space.h | 2 +-
drivers/xen/xen-pciback/conf_space_header.c | 2 +-
drivers/xen/xen-pciback/pciback.h | 1 +
drivers/xen/xen-pciback/pciback_ops.c | 75 ++++--
fs/btrfs/ioctl.c | 12 +
fs/coredump.c | 3 +
fs/ext4/ext4.h | 1 +
fs/ext4/inode.c | 50 ++--
fs/ext4/mballoc.c | 47 ++--
fs/ext4/namei.c | 9 +-
fs/ext4/super.c | 53 +++-
fs/ext4/xattr.c | 13 +-
fs/hostfs/hostfs_kern.c | 7 +-
fs/isofs/inode.c | 8 +-
fs/nfs/callback.c | 1 +
fs/nfs/callback_xdr.c | 6 +-
fs/nfs/nfs4state.c | 3 +
fs/nfsd/nfs4state.c | 3 +-
fs/ocfs2/dlm/dlmconvert.c | 12 +-
fs/ocfs2/file.c | 34 ++-
fs/pstore/ram_core.c | 51 +---
fs/reiserfs/ibalance.c | 3 +-
fs/reiserfs/super.c | 12 +-
fs/seq_file.c | 4 +-
fs/super.c | 6 +-
fs/ubifs/dir.c | 22 +-
fs/ubifs/tnc_commit.c | 2 +-
fs/ubifs/xattr.c | 2 +
fs/xfs/xfs_dquot.c | 3 +-
fs/xfs/xfs_mount.c | 3 +-
include/asm-generic/barrier.h | 15 ++
include/asm-generic/uaccess.h | 20 +-
include/crypto/hash.h | 6 +
include/crypto/if_alg.h | 11 +-
include/linux/can/dev.h | 3 +-
include/linux/compiler.h | 67 +++++
include/linux/crypto.h | 8 +
include/linux/filter.h | 6 +-
include/linux/i8042.h | 6 -
include/linux/mfd/88pm80x.h | 4 +-
include/linux/mroute.h | 2 +-
include/linux/mroute6.h | 2 +-
include/linux/netdevice.h | 1 +
include/linux/pagemap.h | 38 +--
include/linux/perf_event.h | 6 -
include/linux/sem.h | 1 +
include/linux/serio.h | 24 +-
include/linux/stddef.h | 15 +-
include/linux/vfio.h | 14 -
include/net/if_inet6.h | 10 +-
include/net/ip6_tunnel.h | 1 +
include/net/ndisc.h | 2 +
include/net/sock.h | 16 +-
include/net/tcp.h | 3 +
include/xen/interface/io/ring.h | 14 +
ipc/msg.c | 34 +--
ipc/sem.c | 155 ++++++-----
ipc/shm.c | 42 +--
ipc/util.c | 6 +-
kernel/events/core.c | 15 +-
kernel/fork.c | 10 +-
kernel/power/suspend_test.c | 4 +-
kernel/rcutree_plugin.h | 1 +
kernel/sched/core.c | 41 +++
kernel/timer.c | 19 +-
kernel/trace/trace.c | 32 +--
lib/genalloc.c | 3 +-
lib/mpi/mpi-pow.c | 7 +-
lib/ratelimit.c | 2 +-
mm/ksm.c | 3 +-
mm/swapfile.c | 2 +
net/can/bcm.c | 32 ++-
net/core/dev.c | 18 +-
net/core/dst.c | 4 +-
net/core/filter.c | 10 +-
net/core/sock.c | 10 +-
net/dccp/ipv4.c | 14 +-
net/dccp/ipv6.c | 16 +-
net/dccp/proto.c | 4 +
net/ipv4/ip_fragment.c | 4 +
net/ipv4/ip_output.c | 3 +
net/ipv4/ipmr.c | 3 +-
net/ipv4/route.c | 9 +-
net/ipv4/tcp_ipv4.c | 22 +-
net/ipv4/tcp_output.c | 15 +-
net/ipv6/addrconf.c | 283 ++++++++++++++-------
net/ipv6/af_inet6.c | 6 +
net/ipv6/anycast.c | 12 +
net/ipv6/ip6_gre.c | 1 -
net/ipv6/ip6_tunnel.c | 13 +-
net/ipv6/ip6mr.c | 5 +-
net/ipv6/mcast.c | 14 +
net/ipv6/ndisc.c | 18 +-
net/ipv6/netfilter/nf_conntrack_reasm.c | 3 +
net/ipv6/reassembly.c | 4 +
net/ipv6/route.c | 4 +-
net/ipv6/tcp_ipv6.c | 14 +-
net/irda/iriap.c | 8 +-
net/mac80211/cfg.c | 2 +-
net/mac80211/rx.c | 24 +-
net/mac80211/tx.c | 6 +-
net/netfilter/ipvs/ip_vs_proto_tcp.c | 25 +-
net/netfilter/nf_log.c | 6 +-
net/packet/af_packet.c | 1 +
net/sctp/sm_statefuns.c | 12 +-
net/sctp/socket.c | 12 +-
net/sunrpc/svc.c | 8 +-
net/wireless/core.h | 1 +
net/wireless/scan.c | 69 +++++
security/keys/proc.c | 2 +-
sound/core/pcm_lib.c | 2 +-
sound/core/rawmidi.c | 4 +-
sound/core/timer.c | 20 +-
sound/pci/ali5451/ali5451.c | 2 +
sound/soc/omap/omap-mcpdm.c | 5 +-
tools/perf/util/symbol-elf.c | 2 +-
tools/perf/util/symbol.c | 2 +-
tools/vm/slabinfo.c | 3 +-
308 files changed, 3354 insertions(+), 1327 deletions(-)
--
2.8.0.rc2.1.gbe9624a
Powered by blists - more mailing lists