[PATCH 3.16 089/132] netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule

Signed-off-by: Florian Westphal Signed-off-by: Pablo Neira Ayuso Signed-off-by: Ben Hutchings --- net/bridge/netfilter/ebtables.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) --- a/net/bridge/netfilter/ebtables.c +++ b/net/bridge/netfilter/ebtables.c @@ -2139,7 +2139,9 @@

[PATCH 3.16 115/132] media: radio-raremono: change devm_k*alloc to k*alloc

: prefix subject with driver name] Signed-off-by: Mauro Carvalho Chehab [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- drivers/media/radio/radio-raremono.c | 30 +--- 1 file changed, 23 insertions(+), 7 deletions(-) --- a/drivers/media/radio

[PATCH 3.16 091/132] NFS4: Fix v4.0 client state corruption when mount

discover server trunking, the client will renew the lease, but check the client state, it lead the client state corruption. So, we need to call state manager to recover it when detect server ip trunking. Signed-off-by: ZhangXiaoxu Signed-off-by: Anna Schumaker Signed-off-by: Ben Hutchings --- fs

[PATCH 3.16 104/132] net: arc_emac: fix koops caused by sk_buff free

4010 (e59030a4) [ 34.632572] ---[ end trace cca5a3d86a82249a ]--- Signed-off-by: Alexander Kochetkov Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- drivers/net/ethernet/arc/emac_main.c | 9 +++-- 1 file changed, 7 insertions(+), 2 deletions(-) --- a/drivers/net/ethernet/arc/

[PATCH 3.16 010/132] ARM: OMAP2+: Fix potentially uninitialized return value for _setup_reset()

urn value can be uninitialized for cases where oh->rst_lines_cnt is set and HWMOD_INIT_NO_RESET is not set. Fixes: 747834ab8347 ("ARM: OMAP2+: hwmod: revise hardreset behavior") Cc: Paul Walmsley Cc: Tero Kristo Signed-off-by: Tony Lindgren Signed-off-by: Ben Hutchings --- arch/arm/mach-om

[PATCH 3.16 107/132] mac80211: add API to request TDLS operation from userspace

that can be used here. Signed-off-by: Arik Nemtsov Signed-off-by: Johannes Berg Signed-off-by: Ben Hutchings --- include/linux/ieee80211.h | 3 +++ include/net/mac80211.h| 13 + net/mac80211/tdls.c | 17 + 3 files changed, 33 insertions(+) --- a/include/linux

[PATCH 3.16 050/132] bcache: fix a race between cache register and cacheset unregister

3a/0xf0 [ +0.000692] entry_SYSCALL_64_after_hwframe+0x44/0xa9 Signed-off-by: Liang Chen Signed-off-by: Coly Li Signed-off-by: Jens Axboe Signed-off-by: Ben Hutchings --- drivers/md/bcache/super.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/md/bcache/super.c +++ b/drivers/md/bcach

[PATCH 3.16 113/132] ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit

-by: Mathias Payer Signed-off-by: Hui Peng Signed-off-by: Takashi Iwai Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- sound/usb/mixer.c | 1 + 1 file changed, 1 insertion(+) --- a/sound/usb/mixer.c +++ b/sound/usb/mixer.c @@ -1594,6 +1594,7 @@ static int parse_audio_mixer_unit

[PATCH 3.16 064/132] ALSA: hda/realtek - Fix overridden device-specific initialization

tek - EAPD turn on later") Signed-off-by: Takashi Iwai Signed-off-by: Ben Hutchings --- sound/pci/hda/hda_generic.c | 3 ++- sound/pci/hda/hda_generic.h | 1 + sound/pci/hda/patch_realtek.c | 2 ++ 3 files changed, 5 insertions(+), 1 deletion(-) --- a/sound/pci/hda/hda_generic.c

[PATCH 3.16 034/132] RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure

d-by: Potnuri Bharat Teja Signed-off-by: Jason Gunthorpe Signed-off-by: Ben Hutchings --- drivers/infiniband/hw/cxgb4/cm.c | 2 ++ 1 file changed, 2 insertions(+) --- a/drivers/infiniband/hw/cxgb4/cm.c +++ b/drivers/infiniband/hw/cxgb4/cm.c @@ -346,6 +346,8 @@ static struct sk_buf

[PATCH 3.16 017/132] scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines

by: Himanshu Madhani Signed-off-by: Martin K. Petersen Signed-off-by: Ben Hutchings --- drivers/scsi/qla2xxx/qla_attr.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --- a/drivers/scsi/qla2xxx/qla_attr.c +++ b/drivers/scsi/qla2xxx/qla_attr.c @@ -423,7 +423,7 @@ qla2x00_sysfs_write_

[PATCH 3.16 027/132] ARM: pxa: ssp: Fix "WARNING: invalid free of devm_ allocated data"

ed anymore in remove path. Fixes: 1c459de1e645 ("ARM: pxa: ssp: use devm_ functions") Signed-off-by: YueHaibing [ commit message spelling fix ] Signed-off-by: Robert Jarzmik Signed-off-by: Ben Hutchings --- arch/arm/plat-pxa/ssp.c | 6 -- 1 file changed, 6 deletions(-) --- a/arch/arm/

[PATCH 3.16 045/132] ALSA: usb-audio: Handle the error from snd_usb_mixer_apply_create_quirk()

the probing even after the error. Let's take it more serious. Fixes: 7b1eda223deb ("ALSA: usb-mixer: factor out quirks") Signed-off-by: Takashi Iwai Signed-off-by: Ben Hutchings --- sound/usb/mixer.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) --- a/sound/usb/mixer.c +

[PATCH 3.16 014/132] kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice.

itry Torokhov Fixes: 0f4dafc0563c6c49 ("Kobject: auto-cleanup on final unref") Cc: Kay Sievers Signed-off-by: Tetsuo Handa Signed-off-by: Greg Kroah-Hartman [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- --- a/lib/kobject_uevent.c +++ b/lib/kobject_uev

[PATCH 3.16 008/132] pwm: tiehrpwm: Update shadow register for disabling PWMs

m: Improve commit message] Signed-off-by: Vignesh Raghavendra Signed-off-by: Thierry Reding Signed-off-by: Ben Hutchings --- drivers/pwm/pwm-tiehrpwm.c | 2 ++ 1 file changed, 2 insertions(+) --- a/drivers/pwm/pwm-tiehrpwm.c +++ b/drivers/pwm/pwm-tiehrpwm.c @@ -379,6 +379,8 @@ s

[PATCH 3.16 005/132] ARM: dts: exynos: Fix interrupt for shared EINTs on Exynos5260

d dts files for exynos5260 SoC") Signed-off-by: Stuart Menefy Signed-off-by: Krzysztof Kozlowski [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- arch/arm/boot/dts/exynos5260.dtsi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/arch/arm/boot/dts/exyno

[PATCH 3.16 002/132] spi: rspi: Fix sequencer reset during initialization

erhoeven Signed-off-by: Mark Brown Signed-off-by: Ben Hutchings --- drivers/spi/spi-rspi.c | 9 ++--- 1 file changed, 6 insertions(+), 3 deletions(-) --- a/drivers/spi/spi-rspi.c +++ b/drivers/spi/spi-rspi.c @@ -277,7 +277,8 @@ static int rspi_set_config_register(stru /* Sets pa

Re: [PATCH STABLE 4.9] x86, mm, gup: prevent get_page() race with munmap in paravirt guest

s: > https://lore.kernel.org/lkml/6650323f-dbc9-f069-000b-f6b0f941a...@suse.cz/ [...] I suppose that still needs to be addressed for 4.9, right? Ben. -- Ben Hutchings Quantity is no substitute for quality, but it's the only one we've got. signature.asc Description: This is a digitally signed message part

Re: [PATCH 4.9 033/223] perf test 6: Fix missing kvm module load for s390

c; > +} > +#endif > + > static int test__checkevent_tracepoint(struct perf_evlist *evlist) > { > struct perf_evsel *evsel = perf_evlist__first(evlist); > @@ -1593,6 +1619,7 @@ static struct evlist_test test__events[] = { > { > .name = "kvm-s390:kvm_s390_create_vm", &

[RFC PATCH] tools/perf: pmu-events: Fix reproducibility

.diffoscope.txt.gz Signed-off-by: Ben Hutchings --- --- a/tools/perf/pmu-events/jevents.c +++ b/tools/perf/pmu-events/jevents.c @@ -50,6 +50,12 @@ #include "json.h" #include "jevents.h" +struct found_file { + const char *fpath; + int typeflag

Linux 3.16.73

| 57 +++- include/net/tcp.h | 3 + lib/siphash.c | 321 +- lib/test_siphash.c| 98 +- 7 files changed, 572 insertions(+), 27 deletions(-) Ben Hutchings (2): tcp: Clear sk_send_head after purging

Re: [PATCH AUTOSEL 4.4 01/14] xtensa: fix build for cores with coprocessors

o undefined macros > abi_entry and abi_ret on cores that define XTENSA_HAVE_COPROCESSORS. > Fix that by including asm/asmmacro.h from the coprocessor.S. [...] This seems to be fixing commit d6d5f19e21d9 "xtensa: abstract 'entry' and 'retw' in assembly code" so it wouldn't be needed for a

Re: [PATCH 3.16 0/4] 3.16.73-rc1 review

On Sat, 2019-08-17 at 04:19 -0700, Guenter Roeck wrote: > On 8/17/19 3:35 AM, Ben Hutchings wrote: > > This is the start of the stable review cycle for the 3.16.73 release. > > There are 4 patches in this series, which will be posted as responses > > to this one. If

[PATCH 3.16 2/4] ext4: brelse all indirect buffer in ext4_ind_remove_space()

stem or ext4 file system without extent and quota features. This patch fix this problem by releasing the missing indirect buffers, in ext4_ind_remove_space(). Reported-by: Hulk Robot Signed-off-by: zhangyi (F) Signed-off-by: Theodore Ts'o Reviewed-by: Jan Kara Signed-off-by: Ben Hutchi

[PATCH 3.16 1/4] tcp: Clear sk_send_head after purging the write queue

3.16.73-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings Denis Andzakovic discovered a potential use-after-free in older kernel versions, using syzkaller. tcp_write_queue_purge() frees all skbs in the TCP write queue and can leave sk

[PATCH 3.16 4/4] siphash: implement HalfSipHash1-3 for hash tables

enfeld Reviewed-by: Jean-Philippe Aumasson Signed-off-by: David S. Miller [bwh: Backported to 3.16 to avoid a build regression for WireGuard with only part of the siphash API available] Signed-off-by: Ben Hutchings --- Documentation/siphash.txt | 75 + include/linux/siphash.h |

[PATCH 3.16 0/4] 3.16.73-rc1 review

received after that time might be too late. All the patches have also been committed to the linux-3.16.y-rc branch of https://git.kernel.org/pub/scm/linux/kernel/git/bwh/linux-stable-rc.git . A shortlog and diffstat can be found below. Ben. - Ben Hutchings (1): tcp: Clear

[PATCH 3.16 3/4] ext4: cleanup bh release code in ext4_ind_remove_space()

: Theodore Ts'o Reviewed-by: Jan Kara Signed-off-by: Ben Hutchings --- fs/ext4/indirect.c | 47 ++ 1 file changed, 22 insertions(+), 25 deletions(-) --- a/fs/ext4/indirect.c +++ b/fs/ext4/indirect.c @@ -1313,6 +1313,7 @@ int ext4_ind_remove_space(hand

Re: [PATCH 3.16 043/157] ext4: brelse all indirect buffer inext4_ind_remove_space()

On Tue, 2019-08-13 at 07:06 +0300, Jari Ruusu wrote: > Ben Hutchings wrote: > > From: "zhangyi (F)" > > > > commit 674a2b27234d1b7afcb0a9162e81b2e53aeef217 upstream. > > [snip] > > > --- a/fs/ext4/indirect.c > > +++ b/fs/e

Re: [Y2038] [PATCH 04/20] mount: Add mount warning for impending timestamp expiry

On Mon, 2019-08-12 at 09:15 -0700, Deepa Dinamani wrote: > On Mon, Aug 12, 2019 at 9:09 AM Deepa Dinamani wrote: > > On Mon, Aug 12, 2019 at 7:11 AM Arnd Bergmann wrote: > > > On Mon, Aug 12, 2019 at 3:25 PM Ben Hutchings > > > wrote: > > > > On Sat, 20

Re: [Y2038] [PATCH 04/20] mount: Add mount warning for impending timestamp expiry

On Sat, 2019-08-10 at 13:44 -0700, Deepa Dinamani wrote: > On Mon, Aug 5, 2019 at 7:14 AM Ben Hutchings > wrote: > > On Mon, 2019-07-29 at 18:49 -0700, Deepa Dinamani wrote: > > > The warning reuses the uptime max of 30 years used by the > > > setitimeofday(). >

Re: [PATCH 3.16 000/157] 3.16.72-rc1 review

On Sun, 2019-08-11 at 07:05 -0700, Guenter Roeck wrote: > On 8/10/19 1:40 PM, Ben Hutchings wrote: > > This is the start of the stable review cycle for the 3.16.72 release. > > There are 157 patches in this series, which will be posted as responses > > to this one. If

Re: [PATCH 3.16 004/157] iio: Use kmalloc_array() in iio_scan_mask_set()

On Sat, 2019-08-10 at 14:02 -0700, Joe Perches wrote: > On Sat, 2019-08-10 at 21:40 +0100, Ben Hutchings wrote: > > 3.16.72-rc1 review patch. If anyone has any objections, please let > > me know. > > Unless to enable applying further patches, > I doubt there is

[PATCH 3.16 002/157] xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink

k Robot Fixes: e682adf021be ("xfrm: Try to honor policy index if it's supplied by user") Signed-off-by: YueHaibing Acked-by: Herbert Xu Signed-off-by: Steffen Klassert Signed-off-by: Ben Hutchings --- net/xfrm/xfrm_user.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) ---

[PATCH 3.16 010/157] xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module

the xfrm6_tunnel_spi, so need to wait it. Fixes: 91cc3bb0b04ff("xfrm6_tunnel: RCU conversion") Signed-off-by: Su Yanjun Acked-by: Herbert Xu Signed-off-by: Steffen Klassert Signed-off-by: Ben Hutchings --- net/ipv6/xfrm6_tunnel.c | 4 1 file changed, 4 insertions(+) ---

[PATCH 3.16 019/157] sctp: get sctphdr by offset in sctp_compute_cksum

t;) Reported-by: Li Shuang Signed-off-by: Xin Long Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- include/net/sctp/checksum.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/include/net/sctp/checksum.h +++ b/include/net/sctp/checksum.h @@ -61,7 +61,7 @@ s

[PATCH 3.16 013/157] staging: speakup_soft: Fix alternate speech with other synths

-Hartman [bwh: Backported to 3.16: - There's no Unicode support - Adjust context] Signed-off-by: Ben Hutchings --- --- a/drivers/staging/speakup/speakup_soft.c +++ b/drivers/staging/speakup/speakup_soft.c @@ -213,10 +213,13 @@ static ssize_t softsynth_read(struct fil DEFINE_WAIT(wait

[PATCH 3.16 032/157] 3c515: fix integer overflow warning

the variable unsigned to avoid the overflow. Fixes: Linux-2.1.128pre1 Signed-off-by: Arnd Bergmann Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- drivers/net/ethernet/3com/3c515.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/net/ethernet/3com/3c515.c +++ b

[PATCH 3.16 008/157] ext4: fix data corruption caused by unaligned direct AIO

31 31 31 31 * b200 Reported-by: Frank Sorenson Signed-off-by: Lukas Czerner Signed-off-by: Theodore Ts'o Fixes: e9e3bcecf44c ("ext4: serialize unaligned asynchronous DIO") Signed-off-by: Ben Hutchings --- fs/ext4/file.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) ---

[PATCH 3.16 031/157] dccp: do not use ipv6 header for ipv4 flow

. Fixes: 3df80d9320bc ("[DCCP]: Introduce DCCPv6") Signed-off-by: Eric Dumazet Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/dccp/ipv6.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --- a/net/dccp/ipv6.c +++ b/net/dccp/ipv6.c @@ -491,8 +491,8 @@ sta

[PATCH 3.16 029/157] net-sysfs: call dev_hold if kobject_init_and_add success

t;) Signed-off-by: YueHaibing Signed-off-by: David S. Miller [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- net/core/net-sysfs.c | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) --- a/net/core/net-sysfs.c +++ b/net/core/net-sysfs.c @@ -788,6 +788,8 @@

[PATCH 3.16 022/157] USB: serial: ftdi_sio: add additional NovaTech products

McCollister Signed-off-by: Johan Hovold Signed-off-by: Ben Hutchings --- drivers/usb/serial/ftdi_sio.c | 2 ++ drivers/usb/serial/ftdi_sio_ids.h | 4 +++- 2 files changed, 5 insertions(+), 1 deletion(-) --- a/drivers/usb/serial/ftdi_sio.c +++ b/drivers/usb/serial/ftdi_sio.c @@ -617,6 +617,8

[PATCH 3.16 009/157] ext4: add missing brelse() in add_new_gdb_meta_bg()

t;) Signed-off-by: Lukas Czerner Signed-off-by: Theodore Ts'o [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- fs/ext4/resize.c | 11 +-- 1 file changed, 9 insertions(+), 2 deletions(-) --- a/fs/ext4/resize.c +++ b/fs/ext4/resize.c @@ -908,11 +908,18 @@

[PATCH 3.16 000/157] 3.16.72-rc1 review

[c5bc6e526d3f217ed2cc3681d256dc4a2af4cc2b] Ben Gardon (1): kvm: mmu: Fix overflow on kvm mmu page limit calculation [bc8a3d8925a8fa09fa550e0da115d95851ce33c6] Ben Hutchings (2): Revert "inet: update the IP ID generation algorithm to higher standards." [not upstream; reverted commit was no

[PATCH 3.16 017/157] net: mac8390: Use standard memcpy_{from,to}io()

, but different function signatures. Remove the custom definitions of memcpy_fromio() and memcpy_toio(), and adjust all callers to the standard signatures. Signed-off-by: Geert Uytterhoeven Acked-by: David S. Miller Acked-by: Greg Ungerer Signed-off-by: Ben Hutchings --- drivers/net/ethernet

[PATCH 3.16 006/157] iio: adc: at91: disable adc channel interrupt in timeout case

Desroches Signed-off-by: Jonathan Cameron Signed-off-by: Ben Hutchings --- drivers/iio/adc/at91_adc.c | 28 +--- 1 file changed, 17 insertions(+), 11 deletions(-) --- a/drivers/iio/adc/at91_adc.c +++ b/drivers/iio/adc/at91_adc.c @@ -702,23 +702,29 @@ static int

[PATCH 3.16 037/157] ALSA: seq: oss: Fix Spectre v1 vulnerability

that speculation windows are large, the policy is to kill the speculation on the first load and not worry if it can be completed with a dependent load/store [1]. [1] https://lore.kernel.org/lkml/20180423164740.gy17...@dhcp22.suse.cz/ Signed-off-by: Gustavo A. R. Silva Signed-off-by: Takashi Iwai Si

[PATCH 3.16 004/157] iio: Use kmalloc_array() in iio_scan_mask_set()

be processed. Thus use the corresponding function "kmalloc_array". This issue was detected by using the Coccinelle software. Signed-off-by: Markus Elfring Signed-off-by: Jonathan Cameron Signed-off-by: Ben Hutchings --- drivers/iio/industrialio-buffer.c | 7 +++ 1 file changed, 3

[PATCH 3.16 023/157] serial: max310x: Fix to avoid potential NULL pointer dereference

pointer derefernce. Signed-off-by: Aditya Pakki Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/tty/serial/max310x.c | 2 ++ 1 file changed, 2 insertions(+) --- a/drivers/tty/serial/max310x.c +++ b/drivers/tty/serial/max310x.c @@ -1324,6 +1324,8 @@ static int

[PATCH 3.16 016/157] udf: Fix crash on IO error during truncate

/udf/truncate.c:249! ... Fix the problem by bailing out cleanly in case of IO error. Reported-by: jean-luc malet Signed-off-by: Jan Kara Signed-off-by: Ben Hutchings --- fs/udf/truncate.c | 3 +++ 1 file changed, 3 insertions(+) --- a/fs/udf/truncate.c +++ b/fs/udf/truncate.c @@ -261,6 +261,9

[PATCH 3.16 003/157] Staging: iio: meter: fixed typo

. Signed-off-by: Leonard Pollak Acked-by: Michael Hennerich Signed-off-by: Jonathan Cameron [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- drivers/staging/iio/meter/ade7854.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/staging/iio/meter

[PATCH 3.16 018/157] mac8390: Fix mmio access size probe

pdate") Signed-off-by: Finn Thain Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- drivers/net/ethernet/8390/mac8390.c | 19 --- 1 file changed, 12 insertions(+), 7 deletions(-) --- a/drivers/net/ethernet/8390/mac8390.c +++ b/drivers/net/ethernet/8390/mac8390.c

[PATCH 3.16 011/157] iio: dac: mcp4725: add missing powerdown bits in store eeprom

eron [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- drivers/iio/dac/mcp4725.c | 1 + 1 file changed, 1 insertion(+) --- a/drivers/iio/dac/mcp4725.c +++ b/drivers/iio/dac/mcp4725.c @@ -86,6 +86,7 @@ static ssize_t mcp4725_store_eeprom(stru return 0

[PATCH 3.16 014/157] powerpc/vdso64: Fix CLOCK_MONOTONIC inconsistencies across Y2038

akub Drnec Signed-off-by: Michael Ellerman [bwh: Backported to 3.16: CLOCK_MONOTONIC_COARSE is not handled by this vDSO] Signed-off-by: Ben Hutchings --- arch/powerpc/include/asm/vdso_datapage.h | 8 arch/powerpc/kernel/vdso64/gettimeofday.S | 4 ++-- 2 files changed, 6 insertions(+

[PATCH 3.16 024/157] tty: atmel_serial: fix a potential NULL pointer dereference

-off-by: Kangjie Lu Fixes: 34df42f59a60 ("serial: at91: add rx dma support") Acked-by: Richard Genoud Signed-off-by: Greg Kroah-Hartman [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- drivers/tty/serial/atmel_serial.c | 4 1 file changed, 4

[PATCH 3.16 025/157] tty: mxs-auart: fix a potential NULL pointer dereference

. Signed-off-by: Kangjie Lu Signed-off-by: Greg Kroah-Hartman [bwh: Backported to 3.16: There is no out_disable_clks label, so goto out_free_clk on error] Signed-off-by: Ben Hutchings --- drivers/tty/serial/mxs-auart.c | 4 1 file changed, 4 insertions(+) --- a/drivers/tty/serial/mxs-auart.c

[PATCH 3.16 035/157] staging: rtl8712: uninitialized memory in read_bbreg_hdl()

taging: r8712u: Add the new driver to the mainline kernel") Reported-by: Colin Ian King Signed-off-by: Dan Carpenter Signed-off-by: Greg Kroah-Hartman [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- drivers/staging/rtl8712/rtl8712_cmd.c | 10 +- drivers/s

[PATCH 3.16 015/157] netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING

fix and consolidate SCTP checksumming code") Reported-by: Li Shuang Suggested-by: Pablo Neira Ayuso Signed-off-by: Xin Long Acked-by: Neil Horman Acked-by: Florian Westphal Signed-off-by: Pablo Neira Ayuso [bwh: Backported to 3.16: adjust filenames, context] Signed-off-by: Ben Hu

[PATCH 3.16 053/157] afs: Fix StoreData op marshalling

} Fixes: 31143d5d515e ("AFS: implement basic file write support") Reported-by: Jonathan Billings Tested-by: Jonathan Billings Signed-off-by: David Howells Signed-off-by: Linus Torvalds [bwh: Backported to 3.16: drop change in yfsclient.c] Signed-off-by: Ben Hutchings --- fs/a

[PATCH 3.16 038/157] iommu/vt-d: Check capability before disabling protected memory

not supporting protected memory regions (PLMR and PHMR fields reported as Clear in the Capability register). Cc: Jacob Pan Cc: mark gross Suggested-by: Ashok Raj Fixes: f8bab73515ca5 ("intel-iommu: PMEN support") Signed-off-by: Lu Baolu Signed-off-by: Joerg Roedel Signed-off-by: Ben

[PATCH 3.16 041/157] gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input

-EPERM if read value does not match written bit, just like it done for adnp_gpio_direction_output(). Fixes: 5e969a401a01 ("gpio: Add Avionic Design N-bit GPIO expander support") Signed-off-by: Axel Lin Reviewed-by: Thierry Reding Signed-off-by: Bartosz Golaszewski Signed-off-by: Ben

[PATCH 3.16 026/157] serial: sh-sci: Fix setting SCSCR_TIE while transferring data

in the step above. Signed-off-by: Hoan Nguyen An Signed-off-by: Greg Kroah-Hartman [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- drivers/tty/serial/sh-sci.c | 12 +--- 1 file changed, 1 insertion(+), 11 deletions(-) --- a/drivers/tty/serial/sh-sci.c +++ b

[PATCH 3.16 030/157] tcp: do not use ipv6 header for ipv4 flow

ported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- net/ipv6/tcp_ipv6.c | 8 1 file changed, 4 insertions(+), 4 deletions(-) --- a/net/ipv6/tcp_ipv6.c +++ b/net/ipv6/tcp_ipv6.c @@ -1183,11 +1183,11 @@ static struct sock *tcp_v6_syn_recv_sock

[PATCH 3.16 012/157] IB/mlx4: Fix race condition between catas error reset and aliasguid flows

-by: Jason Gunthorpe Signed-off-by: Ben Hutchings --- drivers/infiniband/hw/mlx4/alias_GUID.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/infiniband/hw/mlx4/alias_GUID.c +++ b/drivers/infiniband/hw/mlx4/alias_GUID.c @@ -579,8 +579,8 @@ void mlx4_ib_destroy_alias_gu

[PATCH 3.16 034/157] USB: serial: mos7720: fix mos_parport refcount imbalance on error path

("USB: usbserial: mos7720: add support for parallel port on moschip 7715") Signed-off-by: Johan Hovold Signed-off-by: Ben Hutchings --- drivers/usb/serial/mos7720.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --- a/drivers/usb/serial/mos7720.c +++ b/drivers/usb/serial

[PATCH 3.16 042/157] xhci: Don't let USB3 ports stuck in polling state prevent suspend

: Greg Kroah-Hartman [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- drivers/usb/host/xhci-hub.c | 19 --- drivers/usb/host/xhci.h | 8 2 files changed, 20 insertions(+), 7 deletions(-) --- a/drivers/usb/host/xhci-hub.c +++ b/drivers

[PATCH 3.16 001/157] ipv6: check sk sk_type and protocol early in ip_mroute_set/getsockopt

n raw_sk(sk) when accessing other type's socket by ip_mroute_setsockopt(). Signed-off-by: Xin Long Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/ipv6/ip6mr.c | 11 --- 1 file changed, 8 insertions(+), 3 deletions(-) --- a/net/ipv6/ip6mr.c +++ b/net/ipv6/ip6mr.c @@ -1662,

[PATCH 3.16 027/157] device_cgroup: fix RCU imbalance in error case

unexpected unlock Fixes: d591fb56618f ("device_cgroup: simplify cgroup tree walk in propagate_exception()") Signed-off-by: Jann Horn Acked-by: Michal Hocko Signed-off-by: Tejun Heo Signed-off-by: Ben Hutchings --- security/device_cgroup.c | 2 +- 1 file changed, 1 inse

[PATCH 3.16 040/157] ALSA: pcm: Fix possible OOB access in PCM oss plugins

uffer size. The fix is simply to move the plugin allocation code after the final hw_params call. Reported-by: syzbot+d4503ae45b65c5bc1...@syzkaller.appspotmail.com Signed-off-by: Takashi Iwai [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- sound/cor

[PATCH 3.16 046/157] batman-adv: Reduce tt_local hash refcnt only for removed entry

helpers reported this problem as: refcount_t: underflow; use-after-free. Fixes: ef72706a0543 ("batman-adv: protect tt_local_entry from concurrent delete events") Signed-off-by: Sven Eckelmann Signed-off-by: Simon Wunderlich [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben

[PATCH 3.16 020/157] NFS: fix mount/umount race in nlmclnt.

ed to 3.16: use atomic instead of refcount API] Signed-off-by: Ben Hutchings --- fs/lockd/host.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) --- a/fs/lockd/host.c +++ b/fs/lockd/host.c @@ -288,12 +288,11 @@ void nlmclnt_release_host(struct nlm_hos WARN_ON_ONCE(host

[PATCH 3.16 056/157] KVM: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts

ed to 3.16: - Keep using guest_cpuid_has_arch_capabilities() to check the CPUID - Keep using rdmsrl() to get the initial value of IA32_ARCH_CAPABILITIES - Adjust filenames, context] Signed-off-by: Ben Hutchings --- arch/x86/include/asm/kvm_host.h | 1 + arch/x86/kvm/vmx.c | 13 -

[PATCH 3.16 045/157] batman-adv: Reduce claim hash refcnt only for removed entry

helpers reported this problem as: refcount_t: underflow; use-after-free. Fixes: 23721387c409 ("batman-adv: add basic bridge loop avoidance code") Signed-off-by: Sven Eckelmann Signed-off-by: Simon Wunderlich [bwh: Backported to 3.16: keep using batadv_claim_free_ref()] Signed-off-by: Ben

[PATCH 3.16 054/157] KVM: Reject device ioctls from processes other than the VM's creator

. Fixes: 852b6d57dc7f ("kvm: add device control API") Signed-off-by: Sean Christopherson Signed-off-by: Paolo Bonzini Signed-off-by: Ben Hutchings --- Documentation/virtual/kvm/api.txt | 16 +++- virt/kvm/kvm_main.c | 3 +++ 2 files changed, 14 insertions(+), 5

[PATCH 3.16 048/157] ALSA: pcm: Don't suspend stream in unrecoverable PCM state

the runtime PM issue was already "fixed", the same problem is still present for the system PM, hence this patch is still needed. And for stable trees, this patch alone should suffice for fixing the runtime PM problem, too. Reported-and-tested-by: Jon Hunter Signed-off-by: Takashi Iwai

[PATCH 3.16 050/157] scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host

: 0x00 NOT followed by a trace record with tag "scpaddy" for WWPN 0x50050763031bd327. Signed-off-by: Steffen Maier Fixes: 6f2ce1c6af37 ("scsi: zfcp: fix rport unblock race with LUN recovery") Reviewed-by: Jens Remus Reviewed-by: Benjamin Block Signed-off-by: Martin K. Petersen

[PATCH 3.16 051/157] scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP devices

meouts due to earlier bit errors. Signed-off-by: Steffen Maier Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2") Reviewed-by: Jens Remus Reviewed-by: Benjamin Block Signed-off-by: Martin K. Petersen Signed-off-by: Ben Hutchings --- drivers/s390/scsi/zfcp_erp.c | 14 ++ drivers/

[PATCH 3.16 052/157] USB: serial: cp210x: add new device id

. The device id was provided by Silicon-Labs for the devices from this vendor. Reported-by: Uli Signed-off-by: Greg Kroah-Hartman Signed-off-by: Johan Hovold Signed-off-by: Ben Hutchings --- drivers/usb/serial/cp210x.c | 1 + 1 file changed, 1 insertion(+) --- a/drivers/usb/serial/cp210x.c +++ b

[PATCH 3.16 033/157] ARM: dts: pfla02: increase phy reset duration

Signed-off-by: Marco Felsch Fixes: 3180f956668e ("ARM: dts: Phytec imx6q pfla02 and pbab01 support") Signed-off-by: Shawn Guo Signed-off-by: Ben Hutchings --- arch/arm/boot/dts/imx6qdl-phytec-pfla02.dtsi | 1 + 1 file changed, 1 insertion(+) --- a/arch/arm/boot/dts/imx6qdl-phytec-pfla02.dtsi

[PATCH 3.16 047/157] batman-adv: Reduce tt_global hash refcnt only for removed entry

lich [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- net/batman-adv/translation-table.c | 18 +++--- 1 file changed, 15 insertions(+), 3 deletions(-) --- a/net/batman-adv/translation-table.c +++ b/net/batman-adv/translation-table.c @@ -483,14 +483,26 @@ s

[PATCH 3.16 044/157] iio: ad_sigma_delta: select channel when reading register

. The `ad_sd_write_reg()` already does this, but for the `ad_sd_read_reg_raw()` this was omitted. Fixes: af3008485ea03 ("iio:adc: Add common code for ADI Sigma Delta devices") Signed-off-by: Dragos Bogdan Signed-off-by: Alexandru Ardelean Signed-off-by: Jonathan Cameron Signed-off-by: Ben

[PATCH 3.16 039/157] futex: Ensure that futex address is aligned in handle_futex_death()

com Signed-off-by: Ben Hutchings --- kernel/futex.c | 4 1 file changed, 4 insertions(+) --- a/kernel/futex.c +++ b/kernel/futex.c @@ -2909,6 +2909,10 @@ int handle_futex_death(u32 __user *uaddr { u32 uval, uninitialized_var(nval), mval; + /* Futex address must be 32b

[PATCH 3.16 028/157] perf tests: Fix a memory leak in test__perf_evsel__tp_sched_test()

: Peter Zijlstra Cc: Steven Rostedt (VMware) Fixes: 6a6cd11d4e57 ("perf test: Add test for the sched tracepoint format fields") Link: http://lkml.kernel.org/r/20190316080556.3075-17-changbin...@gmail.com Signed-off-by: Arnaldo Carvalho de Melo Signed-off-by: Ben Hutchings --- tools/perf/t

[PATCH 3.16 055/157] kvm: x86: IA32_ARCH_CAPABILITIES is always supported

n hardware support for this feature. Signed-off-by: Jim Mattson Reviewed-by: Konrad Rzeszutek Wilk Fixes: 28c1c9fabf48 ("KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES") Signed-off-by: Radim Krčmář [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- arch/x86/kvm/

[PATCH 3.16 103/157] mac80211: don't attempt to rename ERR_PTR() debugfs dirs

-off-by: Ben Hutchings --- net/mac80211/debugfs_netdev.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/net/mac80211/debugfs_netdev.c +++ b/net/mac80211/debugfs_netdev.c @@ -735,7 +735,7 @@ void ieee80211_debugfs_rename_netdev(str dir = sdata->vif.debugfs_

[PATCH 3.16 102/157] netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON

the beginning of the next rule. Fixes: 81e675c227ec ("netfilter: ebtables: add CONFIG_COMPAT support") Reported-by: syzbot+659574e7bcc7f7eb4...@syzkaller.appspotmail.com Signed-off-by: Florian Westphal Signed-off-by: Pablo Neira Ayuso Signed-off-by: Ben Hutchings --- net/bridge/netfilter/ebta

[PATCH 3.16 005/157] iio: Fix scan mask selection

backport due to move from kmalloc to kmalloc_array. Signed-off-by: Lars-Peter Clausen Signed-off-by: Alexandru Ardelean Fixes commit 057ac1acdfc4 ("iio: Use kmalloc_array() in iio_scan_mask_set()"). Signed-off-by: Jonathan Cameron Signed-off-by: Ben Hutchings --- drivers/iio/in

[PATCH 3.16 114/157] slip: make slhc_free() silently accept an error pointer

VJ compression slot parameters completely") Acked-by: Ben Hutchings Cc: David Miller Signed-off-by: Linus Torvalds Signed-off-by: Ben Hutchings --- drivers/net/slip/slhc.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/net/slip/slhc.c +++ b/drivers/net/slip/slh

[PATCH 3.16 099/157] mm/vmstat.c: fix /proc/vmstat format for CONFIG_DEBUG_TLBFLUSH=y CONFIG_SMP=n

: Vlastimil Babka Cc: Roman Gushchin Cc: Jann Horn Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds Signed-off-by: Ben Hutchings --- mm/vmstat.c | 5 - 1 file changed, 5 deletions(-) --- a/mm/vmstat.c +++ b/mm/vmstat.c @@ -861,13 +861,8 @@ const char * const vmstat_text

[PATCH 3.16 036/157] ALSA: rawmidi: Fix potential Spectre v1 vulnerability

by: Takashi Iwai [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- sound/core/rawmidi.c | 2 ++ 1 file changed, 2 insertions(+) --- a/sound/core/rawmidi.c +++ b/sound/core/rawmidi.c @@ -29,6 +29,7 @@ #include #include #include +#include #include #include #inc

[PATCH 3.16 145/157] Revert "inet: update the IP ID generation algorithm to higher standards."

3.16.72-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings This reverts commit 8b197d3ce585d6777197e0633d71e5af7d98cb35, which was a stable-specific improvement to IP ID selection. I will apply the upstream changes instead. Signed-off

[PATCH 3.16 111/157] l2tp: use rcu_dereference_sk_user_data() in l2tp_udp_encap_recv()

rcu_dereference_sk_user_data(), otherwise compiler might read it multiple times. Fixes: d00fa9adc528 ("il2tp: fix races with tunnel socket close") Signed-off-by: Eric Dumazet Cc: James Chapman Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/l2tp/l2tp_core.c | 2

[PATCH 3.16 104/157] ceph: ensure d_name stability in ceph_dentry_hash()

t; Signed-off-by: Ilya Dryomov Signed-off-by: Ben Hutchings --- fs/ceph/dir.c | 6 +- 1 file changed, 5 insertions(+), 1 deletion(-) --- a/fs/ceph/dir.c +++ b/fs/ceph/dir.c @@ -1327,6 +1327,7 @@ void ceph_dentry_lru_del(struct dentry * unsigned ceph_dentry_hash(struct inode *dir, struct

[PATCH 3.16 149/157] ipv6: Make __ipv6_select_ident static

during UFO segmentation if not set.) Signed-off-by: Vladislav Yasevich Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- include/net/ipv6.h | 2 -- net/ipv6/output_core.c | 3 ++- 2 files changed, 2 insertions(+), 3 deletions(-) --- a/include/net/ipv6.h +++ b/include/net/ipv6.h

[PATCH 3.16 139/157] floppy: fix out-of-bounds read in next_valid_format

by: Denis Efremov Tested-by: Willy Tarreau Signed-off-by: Linus Torvalds [bwh: Backported to 3.16: Drop changes in compat_setdrvprm(), as compat ioctls go via fd_ioctl_locked() after translation in compat_ioctl.c.] Signed-off-by: Ben Hutchings --- --- a/drivers/block/floppy.c +++ b/drivers/block

[PATCH 3.16 097/157] kprobes: Mark ftrace mcount handler functions nokprobe

://lkml.kernel.org/r/155094062044.6137.6419622920568680640.stgit@devbox Signed-off-by: Ingo Molnar [bwh: Backported to 3.16: there is no ftrace_ops_assist_func()] Signed-off-by: Ben Hutchings --- --- a/kernel/trace/ftrace.c +++ b/kernel/trace/ftrace.c @@ -32,6 +32,7 @@ #include #include #include

[PATCH 3.16 107/157] USB: yurex: Fix protection fault after device removal

...@syzkaller.appspotmail.com Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/usb/misc/yurex.c | 1 + 1 file changed, 1 insertion(+) --- a/drivers/usb/misc/yurex.c +++ b/drivers/usb/misc/yurex.c @@ -332,6 +332,7 @@ static void yurex_disconnect(struct usb_ usb_deregister_dev

[PATCH 3.16 151/157] ipv4: hash net ptr into fragmentation bucket selection

to the hash to select the ip fragmentation counter bucket. Cc: Eric Dumazet Cc: Flavio Leitner Signed-off-by: Hannes Frederic Sowa Signed-off-by: David S. Miller [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- drivers/net/ppp/pptp.c | 2 +- include/net/ip.h

[PATCH 3.16 106/157] net/rose: fix unbound loop in rose_loopback_timer()

ne upstream in commit 4966babd904d "net/rose: Convert timers to use timer_setup()".] Signed-off-by: Ben Hutchings --- net/rose/rose_loopback.c | 27 --- 1 file changed, 16 insertions(+), 11 deletions(-) --- a/net/rose/rose_loopback.c +++ b/net/rose/rose_loopback

[PATCH 3.16 007/157] perf/core: Restore mmap record type correctly

map2 attribute to an event") Link: http://lkml.kernel.org/r/20190307185233.225521-1-eran...@google.com Signed-off-by: Arnaldo Carvalho de Melo Signed-off-by: Ben Hutchings --- kernel/events/core.c | 2 ++ 1 file changed, 2 insertions(+) --- a/kernel/events/core.c +++ b/kernel/events/core.c @@ -5445,

<    1   2   3   4   5   6   7   8   9   10   >