[PATCH 3.16 100/157] USB: core: Fix bug caused by duplicate interface PM usage counter

removed upstream] Signed-off-by: Ben Hutchings --- --- a/Documentation/usb/power-management.txt +++ b/Documentation/usb/power-management.txt @@ -345,11 +345,15 @@ autosuspend the interface's device. Whe then the interface is considered to be idle, and the kernel may autosuspend the device

[PATCH 3.16 105/157] cifs: do not attempt cifs operation on smb2+ rename error

on an smb2+ mount, which causes the server to force a session close. If the mount is smb2+, skip the fallback. Signed-off-by: Frank Sorenson Signed-off-by: Steve French Reviewed-by: Ronnie Sahlberg Signed-off-by: Ben Hutchings --- fs/cifs/inode.c | 4 1 file changed, 4 insertions(+) --- a/fs

[PATCH 3.16 152/157] ipv4: ip_tunnel: use net namespace from rtable not socket

net_device pointer in dst_entry is more reliable. Fixes: b6a7719aedd7e5c ("ipv4: hash net ptr into fragmentation bucket selection") Reported-by: Rick Jones Cc: Rick Jones Cc: David S. Miller Signed-off-by: Hannes Frederic Sowa Signed-off-by: David S. Miller Signed-off-by: Ben

[PATCH 3.16 153/157] ipv6: hash net ptr into fragmentation bucket selection

to the hash to select the ip fragmentation counter bucket. Cc: Eric Dumazet Cc: Flavio Leitner Signed-off-by: Hannes Frederic Sowa Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- include/net/ipv6.h | 5 +++-- net/ipv6/ip6_output.c | 6 +++--- net/ipv6/output_core.c | 14

[PATCH 3.16 148/157] ipv6: Fix fragment id assignment on LE arches.

-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/ipv6/output_core.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/net/ipv6/output_core.c +++ b/net/ipv6/output_core.c @@ -54,7 +54,7 @@ void ipv6_proxy_select_ident(struct sk_b id = __ipv6_select_ident

[PATCH 3.16 146/157] ipv6: Select fragment id during UFO segmentation if not set.

. Miller Signed-off-by: Ben Hutchings --- include/net/ipv6.h | 3 +++ net/ipv6/ip6_output.c | 14 -- net/ipv6/output_core.c | 41 +++-- net/ipv6/udp_offload.c | 10 +- 4 files changed, 47 insertions(+), 21 deletions(-) --- a/include/net

[PATCH 3.16 144/157] xen: let alloc_xenballooned_pages() fail if not enough memory free

, indentation] Signed-off-by: Ben Hutchings --- drivers/xen/balloon.c | 16 +--- 1 file changed, 13 insertions(+), 3 deletions(-) --- a/drivers/xen/balloon.c +++ b/drivers/xen/balloon.c @@ -502,8 +502,15 @@ static void balloon_process(struct work_ state

[PATCH 3.16 154/157] siphash: add cryptographically secure PRF

atch-up. Signed-off-by: Jason A. Donenfeld Reviewed-by: Jean-Philippe Aumasson Cc: Linus Torvalds Cc: Eric Biggers Cc: David Laight Cc: Eric Dumazet Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- Documentation/siphash.txt | 100 MAINTAINERS |

[PATCH 3.16 141/157] floppy: fix out-of-bounds read in copy_buffer

-by: Denis Efremov Tested-by: Willy Tarreau Signed-off-by: Linus Torvalds Signed-off-by: Ben Hutchings --- drivers/block/floppy.c | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) --- a/drivers/block/floppy.c +++ b/drivers/block/floppy.c @@ -3236,8 +3236,10 @@ static int set_geometry

[PATCH 3.16 156/157] netfilter: ctnetlink: don't use conntrack/expect object addresses as id

85f914721f ("[NETFILTER]: nf_conntrack: kill unique ID") Signed-off-by: Florian Westphal Signed-off-by: Pablo Neira Ayuso [bwh: Backported to 3.16: - Include in nf_conntrack_core.c - Adjust context] Signed-off-by: Ben Hutchings --- --- a/include/net/netfilter/nf_conntrack.h +++ b/i

[PATCH 3.16 157/157] scsi: libsas: fix a race condition when smp task timeout

Garry CC: Johannes Thumshirn CC: Ewan Milne CC: Christoph Hellwig CC: Tomas Henzl CC: Dan Williams CC: Hannes Reinecke Reviewed-by: Hannes Reinecke Reviewed-by: John Garry Reviewed-by: Johannes Thumshirn Signed-off-by: Martin K. Petersen Signed-off-by: Ben Hutchings --- drivers/scsi/

[PATCH 3.16 155/157] inet: switch IP ID generator to siphash

to 3.16: adjust context] Signed-off-by: Ben Hutchings --- --- a/include/linux/siphash.h +++ b/include/linux/siphash.h @@ -19,6 +19,11 @@ typedef struct { u64 key[2]; } siphash_key_t; +static inline bool siphash_key_is_zero(const siphash_key_t *key) +{ + return !(key->key[0] |

[PATCH 3.16 137/157] powerpc/tm: Fix oops on sigreturn on systems without TM

al context") Reported-by: Praveen Pandey Signed-off-by: Michael Neuling Signed-off-by: Michael Ellerman Link: https://lore.kernel.org/r/20190719050502.405-1-mi...@neuling.org Signed-off-by: Ben Hutchings --- arch/powerpc/kernel/signal_32.c | 3 +++ arch/powerpc/kernel/signal_64.c | 5 + 2

[PATCH 3.16 150/157] ipv6: call ipv6_proxy_select_ident instead of ipv6_select_ident in udp6_ufo_fragment

Reported-by: Matt Grant Tested-by: Matt Grant Signed-off-by: Sabrina Dubroca Acked-by: Vladislav Yasevich Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/ipv6/udp_offload.c | 8 +++- 1 file changed, 3 insertions(+), 5 deletions(-) --- a/net/ipv6/udp_offload.c +++

[PATCH 3.16 138/157] floppy: fix div-by-zero in setup_format_params

the formatting operation in case of zero. The bug was found by syzkaller. Signed-off-by: Denis Efremov Tested-by: Willy Tarreau Signed-off-by: Linus Torvalds Signed-off-by: Ben Hutchings --- drivers/block/floppy.c | 5 + 1 file changed, 5 insertions(+) --- a/drivers/block/floppy.c +++ b

[PATCH 3.16 128/157] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS

Hicks Reviewed-by: Josh Poimboeuf [bwh: Backported to 3.16: - There's no whitelist entry (or any support) for Hygon CPUs - Use the next available X86_BUG number - Adjust context, indentation] Signed-off-by: Ben Hutchings --- arch/x86/include/asm/cpufeatures.h | 1 + arch/x86/kernel/cpu

[PATCH 3.16 134/157] vhost: scsi: add weight support

S. Tsirkin Reviewed-by: Stefan Hajnoczi [bwh: Backported to 3.16: - Drop changes in vhost_scsi_ctl_handle_vq() - Adjust context] Signed-off-by: Ben Hutchings --- drivers/vhost/scsi.c | 12 ++-- 1 file changed, 6 insertions(+), 6 deletions(-) --- a/drivers/vhost/scsi.c +++ b/drivers/vh

[PATCH 3.16 143/157] mm/page_alloc.c: calculate 'available' memory in a separate function

-by: Denis V. Lunev Reviewed-by: Roman Kagan Cc: Michael S. Tsirkin Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds [bwh: Backported to 3.16 as dependency of commit a1078e821b60 "xen: let alloc_xenballooned_pages() fail if not enough memory free"] Signed-off-by: Ben Hutching

[PATCH 3.16 135/157] Bluetooth: hci_uart: check for missing tty operations

h: Backported to 3.16: - Only hci_ath is affected - There is no serdev support] Signed-off-by: Ben Hutchings --- --- a/drivers/bluetooth/hci_ath.c +++ b/drivers/bluetooth/hci_ath.c @@ -112,6 +112,9 @@ static int ath_open(struct hci_uart *hu) BT_DBG("hu %p", hu); +

[PATCH 3.16 142/157] proc: meminfo: estimate available memory more conservatively

Signed-off-by: Ben Hutchings --- fs/proc/meminfo.c | 5 + 1 file changed, 1 insertion(+), 4 deletions(-) --- a/fs/proc/meminfo.c +++ b/fs/proc/meminfo.c @@ -57,11 +57,8 @@ static int meminfo_proc_show(struct seq_ /* * Estimate the amount of memory available for userspace

[PATCH 3.16 132/157] vhost: introduce vhost_exceeds_weight()

Reviewed-by: Stefan Hajnoczi Signed-off-by: Michael S. Tsirkin [bwh: Backported to 3.16: - Drop changes to vhost_vsock - In vhost_net, both Tx modes are handled in one loop in handle_tx() - Adjust context] Signed-off-by: Ben Hutchings --- --- a/drivers/vhost/net.c +++ b/drivers/vhost/net.c

[PATCH 3.16 123/157] x86/entry/64: Really create an error-entry-from-usermode code path

context] Signed-off-by: Ben Hutchings --- arch/x86/kernel/entry_64.S | 28 1 file changed, 16 insertions(+), 12 deletions(-) --- a/arch/x86/kernel/entry_64.S +++ b/arch/x86/kernel/entry_64.S @@ -1445,12 +1445,17 @@ ENTRY(error_entry) */ SWITCH_KERNEL_

[PATCH 3.16 021/157] ARM: imx6q: cpuidle: fix bug that CPU might not wake up at expected time

roacast timer) So, this fix changes CPU to return to 'WAIT_CLOCKED'. Signed-off-by: Kohji Okuno Fixes: e5f9dec8ff5f ("ARM: imx6q: support WAIT mode using cpuidle") Signed-off-by: Shawn Guo [bwh: Backported to 3.16: use imx6q_set_lpm() instead of imx6_set_lpm()] Signed-off-by

[PATCH 3.16 133/157] vhost_net: fix possible infinite loop

in one loop in handle_tx() - Adjust context] Signed-off-by: Ben Hutchings --- drivers/vhost/net.c | 29 + 1 file changed, 13 insertions(+), 16 deletions(-) --- a/drivers/vhost/net.c +++ b/drivers/vhost/net.c @@ -369,7 +369,7 @@ static void handle_tx(struct vhost_net *

[PATCH 3.16 127/157] x86/entry/64: Use JMP instead of JMPQ

ed. Fixes: 18ec54fdd6d1 ("x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations") Signed-off-by: Josh Poimboeuf Signed-off-by: Thomas Gleixner [bwh: Backported to 3.16: adjust filename, context] Signed-off-by: Ben Hutchings --- arch/x86/kernel/entry_64.S | 2 +- 1 file change

[PATCH 3.16 124/157] x86/entry/64: Fix context tracking state warning when load_gs_index fails

://lkml.kernel.org/r/1475197266-3440-1-git-send-email-wanpeng...@hotmail.com Signed-off-by: Ingo Molnar [bwh: Backported to 3.16 as dependency of commit 18ec54fdd6d1 "x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations": - Adjust filename] Signed-off-by: Ben Hutchings ---

[PATCH 3.16 131/157] vhost_net: introduce vhost_exceeds_weight()

3.16.72-rc1 review patch. If anyone has any objections, please let me know. -- From: Jason Wang commit 272f35cba53d088085e5952fd81d7a133ab90789 upstream. Signed-off-by: Jason Wang Signed-off-by: David S. Miller [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben

[PATCH 3.16 130/157] vhost_net: use packet weight for rx handler, too

ller [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- drivers/vhost/net.c | 12 1 file changed, 8 insertions(+), 4 deletions(-) --- a/drivers/vhost/net.c +++ b/drivers/vhost/net.c @@ -40,8 +40,10 @@ MODULE_PARM_DESC(experimental_zcopytx, " #define VHOST_NET

[PATCH 3.16 098/157] x86/kprobes: Avoid kretprobe recursion bug

probe: kretprobe-booster") Link: http://lkml.kernel.org/r/155094064889.6137.972160690963039.stgit@devbox Signed-off-by: Ingo Molnar [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- arch/x86/kernel/kprobes/core.c | 22 -- 1 file changed, 20 insert

[PATCH 3.16 092/157] CIFS: keep FileInfo handle live during oplock break

to address the various reports of oops in smb2_push_mandatory_locks Signed-off-by: Aurelien Aptel Signed-off-by: Steve French Reviewed-by: Pavel Shilovsky Signed-off-by: Ben Hutchings --- fs/cifs/cifsglob.h | 2 ++ fs/cifs/file.c | 30 +- fs/cifs/misc.c | 25

[PATCH 3.16 116/157] ipv6/flowlabel: wait rcu grace period before put_pid()

lowlabel: Make owner a union of struct pid * and kuid_t") Signed-off-by: Eric Dumazet Cc: Eric W. Biederman Reported-by: syzbot Signed-off-by: David S. Miller [bwh: Backported to 3.16: Move the release_net() call too, not that it does anything.] Signed-off-by: Ben Hutchings --- --- a/net/ipv6/

[PATCH 3.16 088/157] staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf

lying on `vmk80xx_detach()` to free the memory. Signed-off-by: Ian Abbott Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/staging/comedi/drivers/vmk80xx.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) --- a/drivers/staging/comedi/drivers/vmk80xx.c +++ b/driver

[PATCH 3.16 094/157] ALSA: core: Fix card races between register and disconnect

are merely either from the global proc files like /proc/asound/cards or from the card registration / disconnection, so it should be fine to shift at the very end. Reported-by: syzbot+48df349490c36f9f5...@syzkaller.appspotmail.com Signed-off-by: Takashi Iwai Signed-off-by: Ben Hutchings

[PATCH 3.16 118/157] packet: in recvmsg msg_name return at least sizeof sockaddr_ll

;v2: do not overwrite zeroed padding again. use copy_len. Fixes: 0fb375fb9b93 ("[AF_PACKET]: Allow for > 8 byte hardware addresses.") Suggested-by: David Laight Signed-off-by: Willem de Bruijn Signed-off-by: David S. Miller [bwh: Backported to 3.16: adjust context] Signed-off-b

[PATCH 3.16 121/157] x86: cpufeatures: Renumber feature word 7

3.16.72-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings Use the same bit numbers for all features that are also present in 4.4.y and 4.9.y, to make further backports slightly easier. Signed-off-by: Ben Hutchings --- --- a/arch/x86

[PATCH 3.16 115/157] ipv6: invert flowlabel sharing check in process and user mode

ller Signed-off-by: Ben Hutchings --- net/ipv6/ip6_flowlabel.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --- a/net/ipv6/ip6_flowlabel.c +++ b/net/ipv6/ip6_flowlabel.c @@ -630,9 +630,9 @@ recheck: if (fl1->shar

[PATCH 3.16 093/157] sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup

...@redhat.com Signed-off-by: Ingo Molnar [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- kernel/sched/fair.c | 25 + 1 file changed, 25 insertions(+) --- a/kernel/sched/fair.c +++ b/kernel/sched/fair.c @@ -3704,6 +3704,8 @@ static enum

[PATCH 3.16 091/157] cifs: fix handle leak in smb2_query_symlink()

never end up closing this handle and would thus leak a handle on the server. Fix this by immediately calling SMB2_close() on successfull open. Signed-off-by: Ronnie Sahlberg Signed-off-by: Steve French Reviewed-by: Pavel Shilovsky [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben

[PATCH 3.16 122/157] x86/asm/entry/64: Disentangle error_entry/exit gsbase/ebx/usermode code

tions": - We do not use %ebx as a flag since we already have a backport of commit b3681dd548d0 "x86/entry/64: Remove %ebx handling from error_entry/exit", so don't add the comments about that - Adjust filename, context] Signed-off-by: Ben Hutchings --- --- a/arch/x86/kernel/entry

[PATCH 3.16 086/157] USB: core: Fix unterminated string returned by usb_string()

a USB string index is a single-byte value, indexes >= 256 are just as invalid as values of 0 or below. Signed-off-by: Alan Stern Reported-by: syzbot+b75b85111c10b8d68...@syzkaller.appspotmail.com Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/usb/core/message.c

[PATCH 3.16 117/157] l2ip: fix possible use-after-free

umazet Reported-by: syzbot Cc: Guillaume Nault Signed-off-by: David S. Miller [bwh: Backported to 3.16: use atomic not refcount API] Signed-off-by: Ben Hutchings --- net/l2tp/l2tp_core.c | 8 1 file changed, 4 insertions(+), 4 deletions(-) --- a/net/l2tp/l2tp_core.c +++ b/net/l2tp/l2tp_

[PATCH 3.16 129/157] vhost-net: set packet weight of tx polling to 2 * vq size

/ 0%/ 0% 4096/ 8/ +9%/-2% 4096/ 8/ -5%/-1% Acked-by: Michael S. Tsirkin Signed-off-by: Haibin Zhang Signed-off-by: Yunfang Tai Signed-off-by: Lidong Chen Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- drivers/vhost/net.c | 8

[PATCH 3.16 082/157] vxge: fix return of a free'd memblock on a failed dma mapping

(that indicates an error). Fix this by ensuring NULL is returned on this error case. Addresses-Coverity: ("Use after free") Fixes: 528f727279ae ("vxge: code cleanup and reorganization") Signed-off-by: Colin Ian King Signed-off-by: David S. Miller [bwh: Backported to 3.16: adjust context

[PATCH 3.16 083/157] locking/lockdep: Add IRQs disabled/enabled assertion APIs: lockdep_assert_irqs_enabled()/disabled()

-off-by: Ingo Molnar Signed-off-by: Ben Hutchings --- include/linux/lockdep.h | 15 +++ 1 file changed, 15 insertions(+) --- a/include/linux/lockdep.h +++ b/include/linux/lockdep.h @@ -525,9 +525,24 @@ do

[PATCH 3.16 072/157] PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller

reveals that it suffers from the same requester ID mixup problems as the other Marvell chips listed already. Add the PCI vendor/device ID to the list of chips which need the workaround. Signed-off-by: Andre Przywara Signed-off-by: Bjorn Helgaas Signed-off-by: Ben Hutchings --- drivers/pci

[PATCH 3.16 084/157] x86/speculation: Prevent deadlock on ssb_state::lock

dle HT correctly on AMD") Reported-by: Mikhail Gavrilov Signed-off-by: Thomas Gleixner Tested-by: Mikhail Gavrilov Cc: Thomas Lendacky Link: https://lkml.kernel.org/r/alpine.deb.2.21.1904141948200.4...@nanos.tec.linutronix.de Signed-off-by: Ben Hutchings --- arch/x86/kernel/process

[PATCH 3.16 089/157] kvm: mmu: Fix overflow on kvm mmu page limit calculation

at once, prompting spurious faults. Tested: Ran all kvm-unit-tests on an Intel Haswell machine. This patch introduced no new failures. Signed-off-by: Ben Gardon Signed-off-by: Paolo Bonzini [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- arch/x86/include/asm

[PATCH 3.16 079/157] net: bridge: multicast: use rcu to access port list from br_multicast_start_querier

held which doesn't protect the port list, so use RCU to walk over it. Fixes: c83b8fab06fc ("bridge: Restart queries when last querier expires") Signed-off-by: Nikolay Aleksandrov Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/bridge/br_multicast.c | 4 +++- 1 fi

[PATCH 3.16 077/157] ACPICA: Namespace: remove address node from global list after method termination

: https://bugzilla.kernel.org/show_bug.cgi?id=202475 Fixes: 4abb951b73ff ("ACPICA: AML interpreter: add region addresses in global list during initialization") Reported-by: Michael J Gruber Signed-off-by: Erik Schmauss Signed-off-by: Bob Moore Signed-off-by: Rafael J. Wysocki Signed-o

[PATCH 3.16 078/157] block: do not leak memory in bio_copy_user_iov()

it. Cc: linux-bl...@vger.kernel.org Cc: Linus Torvalds Reviewed-by: Chaitanya Kulkarni Signed-off-by: Jérôme Glisse Signed-off-by: Jens Axboe Signed-off-by: Ben Hutchings --- block/bio.c | 5 - 1 file changed, 4 insertions(+), 1 deletion(-) --- a/block/bio.c +++ b/block/bio.c @@ -1216,8

[PATCH 3.16 063/157] xfrm4: Fix uninitialized memory read in _decode_session4

Signed-off-by: Ben Hutchings --- net/ipv4/xfrm4_policy.c | 24 +--- 1 file changed, 13 insertions(+), 11 deletions(-) --- a/net/ipv4/xfrm4_policy.c +++ b/net/ipv4/xfrm4_policy.c @@ -103,7 +103,8 @@ static void _decode_session4(struct sk_buff *skb, struct flowi *fl, i

[PATCH 3.16 066/157] btrfs: correctly validate compression type

- Adjust context] Signed-off-by: Ben Hutchings --- --- a/fs/btrfs/compression.c +++ b/fs/btrfs/compression.c @@ -42,6 +42,8 @@ #include "extent_io.h" #include "extent_map.h" +static const char* const btrfs_compress_types[] = { "", "zlib", "lzo" }; +

[PATCH 3.16 081/157] rt2x00: do not increment sequence number while re-transmitting

code, change comments and changelog] Signed-off-by: Stanislaw Gruszka Signed-off-by: Kalle Valo [bwh: Backported to 3.16: adjust filenames, context] Signed-off-by: Ben Hutchings --- drivers/net/wireless/rt2x00/rt2x00.h | 1 - drivers/net/wireless/rt2x00/rt2x00mac.c | 10 -- drivers

[PATCH 3.16 070/157] xen: Prevent buffer overflow in privcmd ioctl

just context] Signed-off-by: Ben Hutchings --- arch/x86/include/asm/xen/hypercall.h | 3 +++ 1 file changed, 3 insertions(+) --- a/arch/x86/include/asm/xen/hypercall.h +++ b/arch/x86/include/asm/xen/hypercall.h @@ -215,6 +215,9 @@ privcmd_call(unsigned call, __HYPERCALL_DECLS; __H

[PATCH 3.16 073/157] sunrpc: don't mark uninitialised items as VALID.

eed and use them. Now cache_fresh_locked() is certain to be called only on a valid item. Fixes: 4ecd55ea0742 ("sunrpc: fix cache_head leak due to queued request") Signed-off-by: NeilBrown Signed-off-by: J. Bruce Fields [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchi

[PATCH 3.16 064/157] sched/fair: Do not re-read ->h_load_next during hierarchical load calculation

Cc: Peter Zijlstra Cc: Thomas Gleixner Fixes: 685207963be9 ("sched: Move h_load calculation to task_h_load()") Link: https://lkml.kernel.org/r/20190319123610.nsivgf3mjbjje...@techsingularity.net Signed-off-by: Ingo Molnar [bwh: Backported to 3.16: use ACCESS_ONCE()] Signed-of

[PATCH 3.16 080/157] iommu/amd: Set exclusion range correctly

-off-by: Ben Hutchings --- drivers/iommu/amd_iommu_init.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/iommu/amd_iommu_init.c +++ b/drivers/iommu/amd_iommu_init.c @@ -293,7 +293,7 @@ static void iommu_write_l2(struct amd_io static void iommu_set_exclusion_range(struct

[PATCH 3.16 068/157] dm: disable DISCARD if the underlying storage no longer supports it

same source file] Signed-off-by: Ben Hutchings --- --- a/drivers/md/dm.c +++ b/drivers/md/dm.c @@ -756,6 +756,15 @@ static void dec_pending(struct dm_io *io } } +static void disable_discard(struct mapped_device *md) +{ + struct queue_limits *limits = dm_get_queue_limits(md); + +

[PATCH 3.16 075/157] xsysace: Fix error handling in ace_setup

h interface") Acked-by: Michal Simek Signed-off-by: Guenter Roeck Signed-off-by: Jens Axboe Signed-off-by: Ben Hutchings --- drivers/block/xsysace.c | 2 ++ 1 file changed, 2 insertions(+) --- a/drivers/block/xsysace.c +++ b/drivers/block/xsysace.c @@ -1062,6 +1062,8 @@ static int

[PATCH 3.16 067/157] xtensa: fix return_address

level 0 corresponds to its caller's return address. Use requested level as the number of stack frames to skip. This fixes the address reported by might_sleep and friends. Signed-off-by: Max Filippov Signed-off-by: Ben Hutchings --- arch/xtensa/kernel/stacktrace.c | 6 +- 1 file changed, 5

[PATCH 3.16 061/157] xfrm4: Fix header checks in _decode_session4.

Klassert Signed-off-by: Ben Hutchings --- net/ipv4/xfrm4_policy.c | 15 ++- 1 file changed, 10 insertions(+), 5 deletions(-) --- a/net/ipv4/xfrm4_policy.c +++ b/net/ipv4/xfrm4_policy.c @@ -131,7 +131,8 @@ _decode_session4(struct sk_buff *skb, st break

[PATCH 3.16 069/157] mtd: cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer

y: Richard Weinberger Signed-off-by: Ben Hutchings --- drivers/mtd/chips/cfi_cmdset_0002.c | 6 +- 1 file changed, 5 insertions(+), 1 deletion(-) --- a/drivers/mtd/chips/cfi_cmdset_0002.c +++ b/drivers/mtd/chips/cfi_cmdset_0002.c @@ -1538,7 +1538,11 @@ static int __xipram do_write_b

[PATCH 3.16 071/157] ALSA: seq: Fix OOB-reads from strlcpy

by changing to use strscpy instead. Signed-off-by: Zubin Mithra Reviewed-by: Guenter Roeck Signed-off-by: Takashi Iwai [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- sound/core/seq/seq_clientmgr.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions

[PATCH 3.16 085/157] MIPS: scall64-o32: Fix indirect syscall number load

-kernel@vger.kernel.org Signed-off-by: Ben Hutchings --- arch/mips/kernel/scall64-o32.S | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/arch/mips/kernel/scall64-o32.S +++ b/arch/mips/kernel/scall64-o32.S @@ -124,7 +124,7 @@ trace_a_syscall: subut1, v0, __NR_O32_Linux

[PATCH 3.16 062/157] xfrm4: Reload skb header pointers after calling pskb_may_pull.

-by: Steffen Klassert Signed-off-by: Ben Hutchings --- net/ipv4/xfrm4_policy.c | 33 ++--- 1 file changed, 26 insertions(+), 7 deletions(-) --- a/net/ipv4/xfrm4_policy.c +++ b/net/ipv4/xfrm4_policy.c @@ -123,7 +123,10 @@ _decode_session4(struct sk_buff *skb, st

[PATCH 3.16 076/157] powerpc/vdso32: fix CLOCK_MONOTONIC on PPC64

he Leroy Signed-off-by: Michael Ellerman Signed-off-by: Ben Hutchings --- arch/powerpc/kernel/vdso32/gettimeofday.S | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/arch/powerpc/kernel/vdso32/gettimeofday.S +++ b/arch/powerpc/kernel/vdso32/gettimeofday.S @@ -98,7 +98,7 @@ V_FUNCTION_BEGIN(__

[PATCH 3.16 058/157] iio: core: fix a possible circular locking dependency

f's probably valid that far back. Signed-off-by: Fabrice Gasnier Fixes: ac917a81117c ("staging:iio:core set the iio_dev.info pointer to null on unregister") Signed-off-by: Jonathan Cameron [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- drivers/iio/industrialio-co

[PATCH 3.16 059/157] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors

: request_queue::backing_dev_info is a struct not a pointer] Signed-off-by: Ben Hutchings --- drivers/md/dm-table.c | 39 +++ 1 file changed, 39 insertions(+) --- a/drivers/md/dm-table.c +++ b/drivers/md/dm-table.c @@ -1432,6 +1432,36 @@ static bool

[PATCH 3.16 060/157] dccp: Fix memleak in __feat_register_sp

-by: Hulk Robot Fixes: e8ef967a54f4 ("dccp: Registration routines for changing feature values") Reviewed-by: Mukesh Ojha Signed-off-by: YueHaibing Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/dccp/feat.c | 7 ++- 1 file changed, 6 insertions(+), 1 deletion(-)

[PATCH 3.16 120/157] ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour

to 0x. Mainline checks the old *UID* field instead - cut'n'paste from the corresponding code in ufs_get_inode_uid(). Fixes: 252e211e90ce Signed-off-by: Al Viro Signed-off-by: Ben Hutchings --- fs/ufs/util.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/fs/ufs/util.h +++ b/fs/ufs

[PATCH 3.16 101/157] team: fix possible recursive locking when add slaves

ntroduce ethernet teaming device") Acked-by: Jiri Pirko Signed-off-by: Hangbin Liu Signed-off-by: David S. Miller [bwh: Backported to 3.16: netlink doesn't support extack] Signed-off-by: Ben Hutchings --- --- a/drivers/net/team/team.c +++ b/drivers/net/team/team.c @@ -1116,6 +1116,12

[PATCH 3.16 057/157] fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links

ned-off-by: Linus Torvalds Signed-off-by: Ben Hutchings --- fs/proc/proc_sysctl.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) --- a/fs/proc/proc_sysctl.c +++ b/fs/proc/proc_sysctl.c @@ -1550,7 +1550,8 @@ static void drop_sysctl_table(struct ctl if (--header->nreg)

[PATCH 3.16 095/157] tipc: set sysctl_tipc_rmem and named_timeout right range

y: Jie Liu Reported-by: Qiang Ning Reviewed-by: Zhiqiang Liu Reviewed-by: Miaohe Lin Signed-off-by: David S. Miller [bwh: Backported to 3.16: only the tipc_rmem sysctl exists here] Signed-off-by: Ben Hutchings --- --- a/net/tipc/sysctl.c +++ b/net/tipc/sysctl.c @@ -37,6 +37,7 @@ #include +static

[PATCH 3.16 140/157] floppy: fix invalid pointer dereference in drive_name

ndices. The bug was found by syzkaller. Signed-off-by: Denis Efremov Tested-by: Willy Tarreau Signed-off-by: Linus Torvalds [bwh: Backported to 3.16: Drop changes in compat_setdrvprm(), as compat ioctls go via fd_ioctl_locked() after translation in compat_ioctl.c.] Signed-off-by: Ben Hut

[PATCH 3.16 096/157] x86/kprobes: Verify stack frame on kretprobe

-by: Andrea Righi Signed-off-by: Masami Hiramatsu Acked-by: Steven Rostedt Cc: Linus Torvalds Cc: Mathieu Desnoyers Cc: Peter Zijlstra Cc: Thomas Gleixner Link: http://lkml.kernel.org/r/155094059185.6137.15527904013362842072.stgit@devbox Signed-off-by: Ingo Molnar Signed-off-by: Ben Hutchings

[PATCH 3.16 090/157] tools lib traceevent: Fix missing equality check for strcmp

r") when the function was introduced, i.e., it has always behaved the wrong way. Detected by cppcheck. Signed-off-by: Rikard Falkeborn Reviewed-by: Steven Rostedt (VMware) Cc: Tzvetomir Stoyanov Fixes: f7d82350e597 ("tools/events: Add files to create libtraceevent.a") Link: http:/

[PATCH 3.16 125/157] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations

it f10750536fa7 "x86/entry/64: Fix irqflag tracing wrt context tracking" - Include in calling.h - Adjust filenames, context] Signed-off-by: Ben Hutchings --- --- a/arch/x86/include/asm/calling.h +++ b/arch/x86/include/asm/calling.h @@ -47,6 +47,7 @@ For 32-bit we have the fol

[PATCH 3.16 108/157] USB: w1 ds2490: Fix bug caused by improper use of altsetting array

-existent intf->altsetting[alt] entry with the guaranteed-to-exist intf->cur_altsetting entry. Signed-off-by: Alan Stern Reported-and-tested-by: syzbot+d65f673b847a1a96c...@syzkaller.appspotmail.com Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/w1/masters/ds2490

[PATCH 3.16 109/157] usb: usbip: fix isoc packet num validation in get_pipe

he snd-usb-audio driver. Fixes: c6688ef9f297 ("usbip: fix stub_rx: harden CMD_SUBMIT path to handle malicious input") Signed-off-by: Malte Leip Acked-by: Shuah Khan Signed-off-by: Greg Kroah-Hartman [bwh: Backported to 3.16: adjust filenames] Signed-off-by: Ben Hutchings --- drive

[PATCH 3.16 147/157] Revert "drivers/net, ipv6: Select IPv6 fragment idents for virtio UFO packets"

Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- drivers/net/macvtap.c | 3 --- drivers/net/tun.c | 6 +- 2 files changed, 1 insertion(+), 8 deletions(-) --- a/drivers/net/macvtap.c +++ b/drivers/net/macvtap.c @@ -16,7 +16,6 @@ #include #include -#include #include

[PATCH 3.16 119/157] packet: validate msg_namelen in send directly

ff-by: Willem de Bruijn Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/packet/af_packet.c | 24 ++-- 1 file changed, 14 insertions(+), 10 deletions(-) --- a/net/packet/af_packet.c +++ b/net/packet/af_packet.c @@ -2278,8 +2278,8 @@ static int tpacket_snd(s

[PATCH 3.16 087/157] staging: comedi: vmk80xx: Fix use of uninitialized semaphore

.S:352 Reported-by: syzbot+54c2f58f15fe6876b...@syzkaller.appspotmail.com Signed-off-by: Ian Abbott Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/staging/comedi/drivers/vmk80xx.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --- a/drivers/staging/comedi/d

[PATCH 3.16 126/157] x86/speculation: Enable Spectre v1 swapgs mitigations

tigations= parameter is x86-only here - powerpc doesn't have Spectre mitigations - Don't use __ro_after_init - Adjust filename, context] Signed-off-by: Ben Hutchings --- --- a/Documentation/kernel-parameters.txt +++ b/Documentation/kernel-parameters.txt @@ -1917,6 +1917,7 @@ bytes respectively.

[PATCH 3.16 074/157] lib/string.c: implement a basic bcmp

-by: Linus Torvalds Signed-off-by: Ben Hutchings --- include/linux/string.h | 3 +++ lib/string.c | 20 2 files changed, 23 insertions(+) --- a/include/linux/string.h +++ b/include/linux/string.h @@ -113,6 +113,9 @@ extern void * memscan(void *,int,__kerne #ifndef

[PATCH 3.16 136/157] Input: gtco - bounds check collection indent level

CONFIG_DYNAMIC_DEBUG enabled, this code will not be optimized out. This was discovered during code review after a previous syzkaller bug was found in this driver. Signed-off-by: Grant Hernandez Signed-off-by: Dmitry Torokhov Signed-off-by: Ben Hutchings --- drivers/input/tablet/gtco.c | 20

[PATCH 3.16 065/157] btrfs: prop: fix vanished compression property after failed set

y: David Sterba Signed-off-by: David Sterba [bwh: Backported to 3.16: "zstd" is not supported] Signed-off-by: Ben Hutchings --- --- a/fs/btrfs/props.c +++ b/fs/btrfs/props.c @@ -378,9 +378,9 @@ int btrfs_subvol_inherit_props(struct bt static int prop_compression_valid

[PATCH 3.16 110/157] sched/numa: Fix a possible divide-by-zero

ngj...@huawei.com Link: http://lkml.kernel.org/r/20190425080016.gx11...@hirez.programming.kicks-ass.net Signed-off-by: Ingo Molnar Signed-off-by: Ben Hutchings --- kernel/sched/fair.c | 4 1 file changed, 4 insertions(+) --- a/kernel/sched/fair.c +++ b/kernel/sched/fair.c @@ -1503,6 +1503

[PATCH 3.16 112/157] trace: Fix preempt_enable_no_resched() abuse

en Rostedt (VMware) Signed-off-by: Ben Hutchings --- kernel/trace/ring_buffer.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/kernel/trace/ring_buffer.c +++ b/kernel/trace/ring_buffer.c @@ -729,7 +729,7 @@ u64 ring_buffer_time_stamp(struct ring_b preempt_disable_notrace();

[PATCH 3.16 043/157] ext4: brelse all indirect buffer in ext4_ind_remove_space()

stem or ext4 file system without extent and quota features. This patch fix this problem by releasing the missing indirect buffers, in ext4_ind_remove_space(). Reported-by: Hulk Robot Signed-off-by: zhangyi (F) Signed-off-by: Theodore Ts'o Reviewed-by: Jan Kara Signed-off-by: Ben Hutchi

[PATCH 3.16 049/157] net: phy: don't clear BMCR in genphy_soft_reset

3.16: open-code phy_set_bits()] Signed-off-by: Ben Hutchings --- --- a/drivers/net/phy/phy_device.c +++ b/drivers/net/phy/phy_device.c @@ -1072,7 +1072,10 @@ int genphy_soft_reset(struct phy_device { int ret; - ret = phy_write(phydev, MII_BMCR, BMCR_RESET); + ret = phy_r

[PATCH 3.16 113/157] fs/proc/proc_sysctl.c: Fix a NULL pointer dereference

is Chamberlain Cc: Alexey Dobriyan Cc: Al Viro Cc: "Eric W. Biederman" Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds Signed-off-by: Ben Hutchings --- fs/proc/proc_sysctl.c | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) --- a/fs/proc/proc_sysctl.c +++

Re: [Y2038] [PATCH 04/20] mount: Add mount warning for impending timestamp expiry

Another thing - perhaps this warning should be suppressed for read-only mounts? Ben. -- Ben Hutchings, Software Developer Codethink Ltd https://www.codethink.co.uk/ Dale House, 35 Dale Street Manchester, M1 2HF, United Kingdom

Re: [Y2038] [PATCH 04/20] mount: Add mount warning for impending timestamp expiry

This doesn't seem like a helpful way to log the time. Maybe use time64_to_tm() to convert to "broken down" time and then print it with "%ptR"... but that wants struct rtc_time. If you apply the attached patch, however, you should then be able to pr

Re: [Y2038] [PATCH 05/20] utimes: Clamp the timestamps before update

a_atime.tv_sec != times[0].tv_sec) ... if (newattrs.ia_mtime.tv_sec != times[1].tv_sec) ... Ben. > + newattrs.ia_mtime.tv_nsec = 0; > + else > + newa

Re: [cip-dev] phy-rcar-gen3-usb2: wrong parsing of role in role_store?

_________ > cip-dev mailing list > cip-...@lists.cip-project.org > https://lists.cip-project.org/mailman/listinfo/cip-dev -- Ben Hutchings, Software Developer Codethink Ltd https://www.codethink.co.uk/ Dale House, 35 Dale Street Manchester, M1 2HF, United Kingdom

Linux 3.16.71

browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git The diff from 3.16.70 is attached to this message. Ben. Makefile| 2 +- kernel/ptrace.c | 4 +--- 2 files changed, 2 insertions(+), 4 deletions(-) Ben Hutchings (1): Linux 3.16.71 Jann

Re: [PATCH 3.16 000/129] 3.16.70-rc1 review

On Tue, 2019-07-09 at 11:07 -0700, Guenter Roeck wrote: > On Sun, Jul 07, 2019 at 05:54:16PM +0100, Ben Hutchings wrote: > > This is the start of the stable review cycle for the 3.16.70 release. > > There are 129 patches in this series, which will be posted as responses > > to

Re: [PATCH 3.16 000/129] 3.16.70-rc1 review

On Mon, 2019-07-08 at 04:05 -0700, Guenter Roeck wrote: > On 7/7/19 9:54 AM, Ben Hutchings wrote: > > This is the start of the stable review cycle for the 3.16.70 release. > > There are 129 patches in this series, which will be posted as responses > > to this one. If

Re: [PATCH 3.16 000/129] 3.16.70-rc1 review

patch and declared in . fs/fuse/file.c always includes that (via fs/fuse/fuse_i.h), so I don't see how this error can happen. Ben. -- Ben Hutchings Time is nature's way of making sure that everything doesn't happen at once. signature.asc Description: This is a digitally signed message part

[PATCH 3.16 010/129] clk: armada-370: fix refcount leak in a370_clk_init()

of the of_node_put() when done. Add the missing of_node_put() to release the refcount. Signed-off-by: Yangtao Li Reviewed-by: Gregory CLEMENT Fixes: 07ad6836fa21 ("clk: mvebu: armada-370: maintain clock init order") Signed-off-by: Stephen Boyd Signed-off-by: Ben Hutchings --- drivers/clk/mvebu/ar

<    1   2   3   4   5   6   7   8   9   10   >