[PATCH 3.16 72/86] x86/speculation/mds: Add mitigation mode VMWERV

Petkov Reviewed-by: Jon Masters Tested-by: Jon Masters Signed-off-by: Ben Hutchings --- --- a/Documentation/x86/mds.rst +++ b/Documentation/x86/mds.rst @@ -93,11 +93,38 @@ The kernel provides a function to invoke The mitigation is invoked on kernel/userspace, hypervisor/guest and C-state (idle

[PATCH 3.16 56/86] x86/speculation: Add prctl() control for indirect branch speculation

/linux/prctl.h - Adjust filename, context] Signed-off-by: Ben Hutchings --- --- a/Documentation/spec_ctrl.rst +++ b/Documentation/spec_ctrl.rst @@ -92,3 +92,12 @@ Speculation misfeature controls * prctl(PR_SET_SPECULATION_CTRL, PR_SPEC_STORE_BYPASS, PR_SPEC_ENABLE, 0, 0); * prctl

[PATCH 3.16 69/86] x86/speculation/mds: Add mitigation control for MDS

. Signed-off-by: Thomas Gleixner Reviewed-by: Borislav Petkov Reviewed-by: Jon Masters Tested-by: Jon Masters [bwh: Backported to 3.16: - Drop " __ro_after_init" - Adjust filename, context] Signed-off-by: Ben Hutchings --- --- a/Documentation/kernel-parameters.txt +++ b/Documentat

[PATCH 3.16 24/86] x86/cpufeature: Carve out X86_FEATURE_*

- Also change and lib/retpoline.S to use - Also include in , as the vdso fails to build without that - Adjust context] Signed-off-by: Ben Hutchings --- --- a/Documentation/kernel-parameters.txt +++ b/Documentation/kernel-parameters.txt @@ -629,7 +629,7 @@ bytes respectively. Such letter su

[PATCH 3.16 84/86] x86/speculation/mds: Fix documentation typo

an Signed-off-by: Josh Poimboeuf Signed-off-by: Thomas Gleixner Signed-off-by: Ben Hutchings --- Documentation/x86/mds.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/Documentation/x86/mds.rst +++ b/Documentation/x86/mds.rst @@ -116,7 +116,7 @@ Kernel internal mitigation mode

[PATCH 3.16 73/86] Documentation: Move L1TF to separate directory

vulnerabilites have their own top level entry. Should have done that right away. Signed-off-by: Thomas Gleixner Reviewed-by: Greg Kroah-Hartman Reviewed-by: Jon Masters [bwh: Backported to 3.16: we never added the documentation, so just update the log message] Signed-off-by: Ben Hutchings --- --- a/arch

[PATCH 3.16 76/86] x86/speculation/mds: Add SMT warning message

-by: Josh Poimboeuf Signed-off-by: Thomas Gleixner Reviewed-by: Tyler Hicks Acked-by: Jiri Kosina Signed-off-by: Ben Hutchings --- arch/x86/kernel/cpu/bugs.c | 8 1 file changed, 8 insertions(+) --- a/arch/x86/kernel/cpu/bugs.c +++ b/arch/x86/kernel/cpu/bugs.c @@ -712,6 +712,9 @@ static

[PATCH 3.16 67/86] x86/speculation/mds: Clear CPU buffers on exit to user

Lutomirski Cc: x...@kernel.org Signed-off-by: Ben Hutchings --- --- a/Documentation/x86/mds.rst +++ b/Documentation/x86/mds.rst @@ -97,3 +97,55 @@ According to current knowledge additiona itself are not required because the necessary gadgets to expose the leaked data cannot be controlled in a way

[PATCH 3.16 78/86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off

vulnerable Signed-off-by: Konrad Rzeszutek Wilk Signed-off-by: Thomas Gleixner Reviewed-by: Tyler Hicks Reviewed-by: Josh Poimboeuf Link: https://lkml.kernel.org/r/20190412215118.294906495@localhost.localdomain Signed-off-by: Ben Hutchings --- arch/x86/kernel/cpu/bugs.c | 3 ++- 1 file changed, 2

[PATCH 3.16 05/86] MIPS: jump_label.c: Handle the microMIPS J instruction encoding

32-bit NOP in the microMIPS mode as by default the 16-bit short encoding is assumed Signed-off-by: Maciej W. Rozycki Cc: linux-m...@linux-mips.org Patchwork: https://patchwork.linux-mips.org/patch/8516/ Signed-off-by: Ralf Baechle Signed-off-by: Ben Hutchings --- arch/mips/include/asm/jump_la

[PATCH 3.16 85/86] x86/cpu/bugs: Use __initconst for 'const' init data

. Fixes: fa1202ef2243 ("x86/speculation: Add command line control") Signed-off-by: Andi Kleen Signed-off-by: Thomas Gleixner Link: https://lkml.kernel.org/r/20190330004743.29541-9-a...@firstfloor.org Signed-off-by: Ben Hutchings --- arch/x86/kernel/cpu/bugs.c | 6 +++--- 1 file

[PATCH 3.16 75/86] x86/speculation: Move arch_smt_update() call to after mitigation decisions

the mitigation decisions have been made. Signed-off-by: Josh Poimboeuf Signed-off-by: Thomas Gleixner Reviewed-by: Tyler Hicks Acked-by: Jiri Kosina Signed-off-by: Ben Hutchings --- arch/x86/kernel/cpu/bugs.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) --- a/arch/x86/kernel/cpu

[PATCH 3.16 60/86] kvm: x86: Report STIBP on GET_SUPPORTED_CPUID

context] Signed-off-by: Ben Hutchings --- --- a/arch/x86/kvm/cpuid.c +++ b/arch/x86/kvm/cpuid.c @@ -303,7 +303,7 @@ static inline int __do_cpuid_ent(struct /* cpuid 0x8008.ebx */ const u32 kvm_cpuid_8000_0008_ebx_x86_features = F(AMD_IBPB) | F(AMD_IBRS) | F(AMD

[PATCH 3.16 54/86] x86/speculation: Prepare arch_smt_update() for PRCTL mode

...@linutronix.de Signed-off-by: Ben Hutchings --- arch/x86/kernel/cpu/bugs.c | 46 +- 1 file changed, 25 insertions(+), 21 deletions(-) --- a/arch/x86/kernel/cpu/bugs.c +++ b/arch/x86/kernel/cpu/bugs.c @@ -588,40 +588,44 @@ specv2_set_mode: arch_smt_update

[PATCH 3.16 07/86] s390/jump label: use different nop instruction

mcount/hotpatch call site detection. The initial jump label code instruction replacement will exchange these instructions with either a branch or a brcl 0,0 instruction. Signed-off-by: Heiko Carstens Signed-off-by: Martin Schwidefsky Signed-off-by: Ben Hutchings --- arch/s390/include/asm

[PATCH 3.16 00/86] 3.16.68-rc1 review

[c0ccf6f99e3a43b87980c9df7da48427885206d0] Ben Hutchings (3): sched: Add sched_smt_active() [1b568f0aabf280555125bc7cefc08321ff0ebaba] x86/bugs: Change L1TF mitigation string to match upstream [72c6d2db64fa18c996ece8f06e499509e6c9a37e] x86/speculation/l1tf: Document l1tf

[PATCH 3.16 43/86] x86/speculation: Rework SMT state change

context] Signed-off-by: Ben Hutchings --- arch/x86/kernel/cpu/bugs.c | 11 +-- include/linux/sched/smt.h | 2 ++ kernel/cpu.c | 15 +-- 3 files changed, 16 insertions(+), 12 deletions(-) --- a/arch/x86/kernel/cpu/bugs.c +++ b/arch/x86/kernel/cpu/bugs.c @@ -13,6

[PATCH 3.16 55/86] x86/speculation: Prevent stale SPEC_CTRL msr content

ook Link: https://lkml.kernel.org/r/alpine.deb.2.21.1811272247140.1...@nanos.tec.linutronix.de [bwh: Backported to 3.16: - Assign the first available thread_info flag - Exclude _TIF_SPEC_FORCE_UPDATE from _TIF_WORK_MASK and _TIF_ALLWORK_MASK] Signed-off-by: Ben Hutchings --- arch/x86/include/

[PATCH 3.16 40/86] x86/speculation: Reorganize speculation control MSRs update

Kleen Cc: Dave Hansen Cc: Casey Schaufler Cc: Asit Mallick Cc: Arjan van de Ven Cc: Jon Masters Cc: Waiman Long Cc: Greg KH Cc: Dave Stewart Cc: Kees Cook Link: https://lkml.kernel.org/r/20181125185004.151077...@linutronix.de Signed-off-by: Ben Hutchings --- arch/x86/kernel/process.c | 46

[PATCH 3.16 44/86] x86/speculation: Reorder the spec_v2 code

Long Cc: Greg KH Cc: Dave Stewart Cc: Kees Cook Link: https://lkml.kernel.org/r/20181125185004.707122...@linutronix.de [bwh: Backported to 3.16: - We still have the minimal mitigation modes - Adjust context] Signed-off-by: Ben Hutchings --- --- a/arch/x86/kernel/cpu/bugs.c +++ b/arch/x86

[PATCH 3.16 79/86] cpu/speculation: Add 'mitigations=' cmdline option

6: - Drop the auto,nosmt option which we can't support - Adjust filename] Signed-off-by: Ben Hutchings --- --- a/Documentation/kernel-parameters.txt +++ b/Documentation/kernel-parameters.txt @@ -1906,6 +1906,25 @@ bytes respectively. Such letter suffixes in the "bleeding

[PATCH 3.16 80/86] x86/speculation: Support 'mitigations=' cmdline option

t.com [bwh: Backported to 3.16: - Drop the auto,nosmt option and the l1tf mitigation selection, which we can't support - Adjust filenames, context] Signed-off-by: Ben Hutchings --- --- a/Documentation/kernel-parameters.txt +++ b/Documentation/kernel-parameters.txt @@ -1907,15 +1907,19 @@ bytes re

[PATCH 3.16 68/86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry

in _mwaitx() - Adjust context] Signed-off-by: Ben Hutchings --- --- a/Documentation/x86/mds.rst +++ b/Documentation/x86/mds.rst @@ -149,3 +149,45 @@ Mitigation points This takes the paranoid exit path only when the INT1 breakpoint is in kernel space. #DB on a user space address takes

[PATCH 3.16 47/86] x86/speculation: Unify conditional spectre v2 print functions

Masters Cc: Waiman Long Cc: Greg KH Cc: Dave Stewart Cc: Kees Cook Link: https://lkml.kernel.org/r/20181125185004.986890...@linutronix.de Signed-off-by: Ben Hutchings --- arch/x86/kernel/cpu/bugs.c | 17 - 1 file changed, 4 insertions(+), 13 deletions(-) --- a/arch/x86/kernel/cpu

[PATCH 3.16 48/86] x86/speculation: Add command line control for indirect branch speculation

__ro_after_init or cpu_smt_control - Adjust filename] Signed-off-by: Ben Hutchings --- --- a/Documentation/kernel-parameters.txt +++ b/Documentation/kernel-parameters.txt @@ -3176,9 +3176,13 @@ bytes respectively. Such letter suffixes spectre_v2= [X86] Control mitigation of Spectre

[PATCH 3.16 77/86] x86/speculation/mds: Fix comment

Reviewed-by: Tyler Hicks Reviewed-by: Josh Poimboeuf [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- arch/x86/kernel/cpu/bugs.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/arch/x86/kernel/cpu/bugs.c +++ b/arch/x86/kernel/cpu/bugs.c @@ -276,7 +276,7

[PATCH 3.16 50/86] x86/process: Consolidate and simplify switch_to_xtra() code

don't delete it - Adjust context] Signed-off-by: Ben Hutchings --- --- a/arch/x86/include/asm/switch_to.h +++ b/arch/x86/include/asm/switch_to.h @@ -6,9 +6,6 @@ struct task_struct; /* one of the stranger aspects of C forward declarations */ __visible struct task_struct *__switch_to(struct

[PATCH 3.16 74/86] Documentation: Add MDS vulnerability documentation

: Backported to 3.16: - Drop the index updates - Adjust filename] Signed-off-by: Ben Hutchings --- --- /dev/null +++ b/Documentation/hw-vuln/mds.rst @@ -0,0 +1,307 @@ +MDS - Microarchitectural Data Sampling +== + +Microarchitectural Data Sampling is a hardware

[PATCH 3.16 28/86] x86/speculation: Simplify the CPU bug detection logic

: konrad.w...@oracle.com Link: https://lkml.kernel.org/r/20180522090539.ga24...@light.dominikbrodowski.net Signed-off-by: Thomas Gleixner Signed-off-by: Ben Hutchings --- arch/x86/kernel/cpu/common.c | 22 +++--- 1 file changed, 7 insertions(+), 15 deletions(-) --- a/arch/x86

[PATCH 3.16 04/86] MIPS: jump_label.c: Correct the span of the J instruction

ux-m...@linux-mips.org Patchwork: https://patchwork.linux-mips.org/patch/8515/ Signed-off-by: Ralf Baechle Signed-off-by: Ben Hutchings --- arch/mips/kernel/jump_label.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --- a/arch/mips/kernel/jump_label.c +++ b/arch/mips/kernel/jump_label.c @

[PATCH 3.16 34/86] x86/speculation: Update the TIF_SSBD comment

Cc: Dave Hansen Cc: Casey Schaufler Cc: Asit Mallick Cc: Arjan van de Ven Cc: Jon Masters Cc: Waiman Long Cc: Greg KH Cc: Dave Stewart Cc: Kees Cook Link: https://lkml.kernel.org/r/20181125185003.593893...@linutronix.de [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings -

[PATCH 3.16 63/86] x86/speculation/mds: Add basic bug infrastructure for MDS

Reviewed-by: Greg Kroah-Hartman Reviewed-by: Frederic Weisbecker Reviewed-by: Jon Masters Tested-by: Jon Masters [bwh: Backported to 3.16: - Use CPU feature word 10 and next available bug flag - Adjust filename, context, indentation] Signed-off-by: Ben Hutchings --- arch/x86/include/asm

[PATCH 3.16 64/86] x86/speculation/mds: Add BUG_MSBDS_ONLY

as they do not support SMT, but mark them for completeness sake. Signed-off-by: Thomas Gleixner Reviewed-by: Frederic Weisbecker Reviewed-by: Jon Masters Tested-by: Jon Masters [bwh: Backported to 3.16: - Assign the next available bug flag - Adjust context, indentation] Signed-off-by: Ben

[PATCH 3.16 20/86] jump_label: make static_key_enabled() work on static_key_true/false types too

. The function is useful for debugging and management of static keys. Update it so that it can be used for the wrapper types too. Signed-off-by: Tejun Heo Acked-by: Peter Zijlstra (Intel) Cc: Andrew Morton Signed-off-by: Ben Hutchings --- include/linux/jump_label.h | 18 +++--- 1

[PATCH 3.16 12/86] jump_label, locking/static_keys: Rename JUMP_LABEL_TYPE_* and related helpers to the static_key* pattern

-by: Peter Zijlstra (Intel) Cc: Andrew Morton Cc: Linus Torvalds Cc: Paul E. McKenney Cc: Peter Zijlstra Cc: Thomas Gleixner Cc: linux-kernel@vger.kernel.org Signed-off-by: Ingo Molnar Signed-off-by: Ben Hutchings --- include/linux/jump_label.h | 25 + kernel/ju

[PATCH 3.16 01/86] x86/cpufeature: Add bug flags to /proc/cpuinfo

context] Signed-off-by: Ben Hutchings --- arch/x86/include/asm/cpufeature.h | 10 -- arch/x86/kernel/cpu/mkcapflags.sh | 51 ++- arch/x86/kernel/cpu/proc.c| 8 + 3 files changed, 53 insertions(+), 16 deletions(-) --- a/arch/x86/include/asm/cpufeature.h +++ b

Linux 3.16.67

++ net/ipv6/ip6_output.c | 3 +++ 12 files changed, 48 insertions(+), 28 deletions(-) Amit Klein (1): inet: update the IP ID generation algorithm to higher standards. Arend Van Spriel (1): brcmfmac: add length checks in scheduled scan result handler Ben

Re: [PATCH 3.16 00/10] 3.16.67-rc1 review

On Thu, 2019-05-09 at 10:38 -0700, Guenter Roeck wrote: > On Thu, May 09, 2019 at 03:08:16PM +0100, Ben Hutchings wrote: > > This is the start of the stable review cycle for the 3.16.67 release. > > There are 10 patches in this series, which will be posted as responses > > to

[PATCH 3.16 05/10] vxlan: Fix big-endian declaration of VNI

3.16.67-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings In this version of the driver, VNIs are consistently kept in host order. However vxlan_fdb_create() erroneously declares its vni parameter as __be32, which sparse warns about

[PATCH 3.16 04/10] spi: omap-100k: Remove unused definitions

: Nick Krause Acked-by: Geert Uytterhoeven Signed-off-by: Mark Brown Signed-off-by: Ben Hutchings --- drivers/spi/spi-omap-100k.c | 4 1 file changed, 4 deletions(-) --- a/drivers/spi/spi-omap-100k.c +++ b/drivers/spi/spi-omap-100k.c @@ -70,10 +70,6 @@ #define SPI_STATUS_WE

[PATCH 3.16 07/10] KVM: VMX: Fix x2apic check in vmx_msr_bitmap_mode()

the guest crashes observed with stable kernels starting with v4.4.168 through v4.4.175. Signed-off-by: Joerg Roedel Signed-off-by: Ben Hutchings --- arch/x86/kvm/vmx.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) --- a/arch/x86/kvm/vmx.c +++ b/arch/x86/kvm/vmx.c @@ -4224,7 +4224,9

[PATCH 3.16 09/10] timer/debug: Change /proc/timer_stats from 0644 to 0600

3.16.67-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings The timer_stats facility should filter and translate PIDs if opened from a non-initial PID namespace, to avoid leaking information about the wider system. It should also

[PATCH 3.16 03/10] inet: update the IP ID generation algorithm to higher standards.

addresses the issue by explicitly extending the key to 64 bits for kernels older than 4.1. Signed-off-by: Amit Klein Signed-off-by: Ben Hutchings --- net/ipv4/route.c | 4 +++- net/ipv6/ip6_output.c | 3 +++ 2 files changed, 6 insertions(+), 1 deletion(-) --- a/net/ipv4/route.c +++ b/net/ip

[PATCH 3.16 08/10] fork: record start_time late

-by: David Herrmann Signed-off-by: Linus Torvalds [bwh: Backported to 3.16: start_time initialisation code is different] Signed-off-by: Ben Hutchings --- kernel/fork.c | 13 +++-- 1 file changed, 11 insertions(+), 2 deletions(-) --- a/kernel/fork.c +++ b/kernel/fork.c @@ -1265,9 +1265,6

[PATCH 3.16 01/10] Revert "brcmfmac: assure SSID length from firmware is limited"

3.16.67-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings This reverts commit 9657f3abd17772d3290a3545dfb4811d945e84e1, which was similar to commit 1b5e2423164b3670e8bc9174e4762d297990deff upstream. The function fixed upstream doesn't

[PATCH 3.16 10/10] percpu: stop printing kernel addresses

irtual memory layout"). Signed-off-by: Matteo Croce Signed-off-by: Dennis Zhou Signed-off-by: Greg Kroah-Hartman [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- mm/percpu.c | 8 1 file changed, 4 insertions(+), 4 deletions(-) --- a/mm/percpu.c +++

[PATCH 3.16 00/10] 3.16.67-rc1 review

generation algorithm to higher standards. [355b98553789b646ed97ad801a619ff898471b92] Arend Van Spriel (1): brcmfmac: add length checks in scheduled scan result handler [4835f37e3bafc138f8bfa3cbed2920dd56fed283] Ben Hutchings (3): Revert "brcmfmac: assure SSID l

[PATCH 3.16 02/10] brcmfmac: add length checks in scheduled scan result handler

assignment to "netinfo_start" that depends on it - Adjust filename, context, indentation] Signed-off-by: Ben Hutchings --- drivers/net/wireless/brcm80211/brcmfmac/wl_cfg80211.c | 13 +++-- 1 file changed, 11 insertions(+), 2 deletions(-) --- a/drivers/net/wireless/brcm80211/brcmfmac/wl_cfg8

[PATCH 3.16 06/10] ipv4: fix a race in update_or_create_fnhe()

->nh_exceptions(), we need a proper memory barrier. Signed-off-by: Eric Dumazet Fixes: 4895c771c7f00 ("ipv4: Add FIB nexthop exceptions.") Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- include/net/ip_fib.h | 2 +- net/ipv4/fib_semantics.c | 8 +--- net/ipv4/route.

Re: [PATCH 3.16 23/99] tty/ldsem: Wake up readers after timed out down_write()

On Tue, 2019-04-02 at 15:39 +0100, Dmitry Safonov wrote: > On 4/2/19 3:32 PM, Ben Hutchings wrote: > > On Tue, 2019-04-02 at 15:22 +0100, Dmitry Safonov wrote: [...] > > > - "tty: Hold tty_ldisc_lock() during tty_reopen()" commit 83d817f41070 > > > with f

Re: [PATCH 3.16 000/202] 3.16.66-rc1 review

On Sat, 2019-04-27 at 11:41 -0700, Guenter Roeck wrote: > On 4/27/19 8:13 AM, Ben Hutchings wrote: > > This is the start of the stable review cycle for the 3.16.66 release. > > There are 202 patches in this series, which will be posted as responses > > to this one. If

[PATCH 3.16 002/202] batman-adv: Force mac header to start of data on xmit

com Signed-off-by: Sven Eckelmann Signed-off-by: Simon Wunderlich Signed-off-by: Ben Hutchings --- net/batman-adv/soft-interface.c | 2 ++ 1 file changed, 2 insertions(+) --- a/net/batman-adv/soft-interface.c +++ b/net/batman-adv/soft-interface.c @@ -180,6 +180,8 @@ static int batadv_interface

[PATCH 3.16 010/202] usb: cdc-acm: send ZLP for Telit 3G Intel based modems

. Signed-off-by: Daniele Palmas Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/usb/class/cdc-acm.c | 7 +++ 1 file changed, 7 insertions(+) --- a/drivers/usb/class/cdc-acm.c +++ b/drivers/usb/class/cdc-acm.c @@ -1903,6 +1903,13 @@ static const struct usb_device_id

[PATCH 3.16 017/202] packet: validate address length

length. Reported-by: syzbot Signed-off-by: Willem de Bruijn Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/packet/af_packet.c | 4 1 file changed, 4 insertions(+) --- a/net/packet/af_packet.c +++ b/net/packet/af_packet.c @@ -2301,6 +2301,8 @@ static int tpacket_snd(struct

[PATCH 3.16 000/202] 3.16.66-rc1 review

] Ben Hutchings (1): binfmt_elf: Fix missing SIGKILL for empty PIE [not upstream; fixes bad backport] Bin Liu (1): usb: phy: am335x: fix race condition in _probe [a53469a68eb886e84dd8b69a1458a623d3591793] Borislav Petkov (1): x86/a.out: Clear the dump structure

[PATCH 3.16 013/202] USB: Add USB_QUIRK_DELAY_CTRL_MSG quirk for Corsair K70 RGB

evious K70 RGB patch to add delay-init quirk: 7a1646d92257 ("Add delay-init quirk for Corsair K70 RGB keyboards") Signed-off-by: Jack Stocker Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/usb/core/quirks.c | 3 ++- 1 file changed, 2 insertions(+), 1 deleti

[PATCH 3.16 012/202] USB: storage: add quirk for SMI SM3350

read/write when requested long sense. Add a bad sense quirk for it. Signed-off-by: Icenowy Zheng Acked-by: Alan Stern Signed-off-by: Greg Kroah-Hartman [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- drivers/usb/storage/unusual_devs.h | 12 1 file

[PATCH 3.16 011/202] USB: storage: don't insert sane sense for SPC3+ when bad sense specified

+ devices. Signed-off-by: Icenowy Zheng Acked-by: Alan Stern Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/usb/storage/scsiglue.c | 8 ++-- 1 file changed, 6 insertions(+), 2 deletions(-) --- a/drivers/usb/storage/scsiglue.c +++ b/drivers/usb/storage/scsiglue.c

[PATCH 3.16 015/202] ASoC: atom: fix a missing check of snd_pcm_lib_malloc_pages

Lu Acked-by: Pierre-Louis Bossart Signed-off-by: Mark Brown [bwh: Backported to 3.16: adjust filename] Signed-off-by: Ben Hutchings --- sound/soc/intel/sst-mfld-platform-pcm.c | 8 +++- 1 file changed, 7 insertions(+), 1 deletion(-) --- a/sound/soc/intel/sst-mfld-platform-pcm.c +++ b

[PATCH 3.16 009/202] USB: serial: simple: add Motorola Tetra TPG2200 device id

ver=usb_serial_simple I: If#= 1 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=00 Prot=00 Driver=usb_serial_simple Signed-off-by: Max Schulze Signed-off-by: Johan Hovold Signed-off-by: Ben Hutchings --- drivers/usb/serial/usb-serial-simple.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) --- a/drivers/

[PATCH 3.16 018/202] packet: validate address length if non-zero

. Fixes: 99137b7888f4 ("packet: validate address length") Reported-by: Ido Schimmel Signed-off-by: Willem de Bruijn Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/packet/af_packet.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --- a/net/packet/af_pack

[PATCH 3.16 003/202] ACPI: power: Skip duplicate power resource references in _PRx

for duplicates and simply skip them when found. Signed-off-by: Hans de Goede [ rjw: Subject & changelog, comments ] Signed-off-by: Rafael J. Wysocki Signed-off-by: Ben Hutchings --- drivers/acpi/power.c | 22 ++ 1 file changed, 22 insertions(+) --- a/drivers/acpi/pow

[PATCH 3.16 020/202] sd: Clear PS bit before Mode Select.

in the buffer returned by Mode Select, right before it is used in the Mode Select command. Signed-off-by: Gabriel Krisman Bertazi Signed-off-by: Martin K. Petersen Signed-off-by: Ben Hutchings --- drivers/scsi/sd.c | 1 + 1 file changed, 1 insertion(+) --- a/drivers/scsi/sd.c +++ b/drivers/scsi/sd.c

[PATCH 3.16 023/202] Drivers: hv: vmbus: Check for ring when getting debug info

dendency. Fixes: fc96df16a1ce ("Drivers: hv: vmbus: Return -EINVAL for the sys files for unopened channels") Cc: K. Y. Srinivasan Cc: Haiyang Zhang Signed-off-by: Stephen Hemminger Signed-off-by: Dexuan Cui Signed-off-by: Sasha Levin [bwh: Backported to 3.16: adjust filename, context] Si

[PATCH 3.16 021/202] scsi: sd: Fix cache_type_store()

byte are also reserved and shall be set to zero. [mkp: shuffled commentary to commit description] Signed-off-by: Ivan Mironov Signed-off-by: Martin K. Petersen Signed-off-by: Ben Hutchings --- drivers/scsi/sd.c | 6 ++ 1 file changed, 6 insertions(+) --- a/drivers/scsi/sd.c +++ b/driv

[PATCH 3.16 029/202] Disable MSI also when pcie-octeon.pcie_disable on

with this option is on in order to avoid inadvertently accessing PCIe registers. Signed-off-by: YunQiang Su Signed-off-by: Paul Burton Cc: pbur...@wavecomp.com Cc: linux-m...@vger.kernel.org Cc: aaro.koski...@iki.fi Signed-off-by: Ben Hutchings --- arch/mips/pci/msi-octeon.c | 4 +++- 1 file changed, 3

[PATCH 3.16 033/202] omap2fb: Fix stack memory disclosure

Reviewed-by: Kees Cook Fixes: b39a982ddecf ("OMAP: DSS2: omapfb driver") Cc: secur...@kernel.org [b.zolnierkie: prefix patch subject with "omap2fb: "] Signed-off-by: Bartlomiej Zolnierkiewicz Signed-off-by: Ben Hutchings --- drivers/video/fbdev/omap2/omapfb/omapfb-io

[PATCH 3.16 028/202] crypto: authenc - fix parsing key with misaligned rta_len

enckeylen into key itself") Signed-off-by: Eric Biggers Signed-off-by: Herbert Xu Signed-off-by: Ben Hutchings --- crypto/authenc.c | 14 +++--- 1 file changed, 11 insertions(+), 3 deletions(-) --- a/crypto/authenc.c +++ b/crypto/authenc.c @@ -62,14 +62,22 @@ int crypto_authenc_e

[PATCH 3.16 022/202] scsi: isci: initialize shost fully before calling scsi_add_host()

deltatee.com Signed-off-by: Logan Gunthorpe Cc: Intel SCU Linux support Cc: Artur Paszkiewicz Cc: "James E.J. Bottomley" Cc: "Martin K. Petersen" Cc: Christoph Hellwig Cc: Jens Axboe Cc: Jeff Moyer Reviewed-by: Jeff Moyer Reviewed-by: Jens Axboe Signed-off-by: Marti

[PATCH 3.16 014/202] ASoC: tlv320aic32x4: Kernel OOPS while entering DAPM standby mode

Brown [bwh: Backported to 3.16: - Open-code snd_soc_component_get_bias_level() - Adjust context] Signed-off-by: Ben Hutchings --- sound/soc/codecs/tlv320aic32x4.c | 4 1 file changed, 4 insertions(+) --- a/sound/soc/codecs/tlv320aic32x4.c +++ b/sound/soc/codecs/tlv320aic32x4.c @@ -534,6

[PATCH 3.16 007/202] ALSA: usb-audio: Always check descriptor sizes in parser code

, indentation] Signed-off-by: Ben Hutchings --- --- a/sound/usb/card.c +++ b/sound/usb/card.c @@ -258,6 +258,11 @@ static int snd_usb_create_streams(struct return -EINVAL; } + if (h1->bLength < sizeof(*h1)) { + dev_er

[PATCH 3.16 008/202] ALSA: usb-audio: Fix an out-of-bound read in create_composite_quirks

t in out-of-bound read. This Patch fix the bug by adding an ending quirk object. Fixes: 240a8af929c7 ("ALSA: usb-audio: Add a quirck for B PX headphones") Signed-off-by: Hui Peng Signed-off-by: Takashi Iwai Signed-off-by: Ben Hutchings --- sound/usb/quirks-table.h | 6 ++ 1 file changed,

[PATCH 3.16 082/202] skge: potential memory corruption in skge_get_regs()

s in the 1-0x4000 range. The bug here is that "regs->len - B3_RI_WTO_R1" can be a negative value which would lead to memory corruption and an abrupt crash. Fixes: c3f8be961808 ("[PATCH] skge: expand ethtool debug register dump") Signed-off-by: Dan Carpenter Signed-off-by:

[PATCH 3.16 139/202] sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach()

Signed-off-by: David S. Miller [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- net/ipv6/sit.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) --- a/net/ipv6/sit.c +++ b/net/ipv6/sit.c @@ -576,7 +576,8 @@ static int ipip6_err(struct sk_buff *skb

[PATCH 3.16 006/202] ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit()

-of-bound access when a malformed descriptor is given. Fix it by assignment after the bLength check. Signed-off-by: Takashi Iwai Signed-off-by: Ben Hutchings --- sound/usb/mixer.c | 10 -- 1 file changed, 8 insertions(+), 2 deletions(-) --- a/sound/usb/mixer.c +++ b/sound/usb/mixer.c

[PATCH 3.16 097/202] s390/qeth: cancel close_dev work before removing a card

is still active, this causes a use-after-free. So make sure that the work is completed before freeing the card. Fixes: 0f54761d167f ("qeth: Support VEPA mode") Signed-off-by: Julian Wiedmann Signed-off-by: David S. Miller [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben

[PATCH 3.16 096/202] s390/qeth: fix use-after-free in error path

locks") Signed-off-by: Julian Wiedmann Reviewed-by: Alexandra Winter Signed-off-by: David S. Miller [bwh: Backported to 3.16: - Add the qeth_free_output_queue() function, which didn't exist here - Keep using kfree() to free to free the qeth_qdio_out_q structure] Signed-off-by: Ben

[PATCH 3.16 026/202] rbd: don't return 0 on unmap if RBD_DEV_FLAG_REMOVING is set

0:28:05.463509 write(4, "0", 1)= 0 10:28:05.463720 write(4, "0", 1)= 0 10:28:05.463942 write(4, "0", 1)= 0 10:28:05.464155 write(4, "0", 1)= 0 Signed-off-by: Ilya Dryomov Tested-by: Dongsheng Yang [bwh: Backported to

[PATCH 3.16 027/202] ARM: dts: kirkwood: Fix polarity of GPIO fan lines

mie Lentin Reported-by: Julien D'Ascenzio Tested-by: Julien D'Ascenzio Signed-off-by: Linus Walleij Signed-off-by: Gregory CLEMENT Signed-off-by: Ben Hutchings --- arch/arm/boot/dts/kirkwood-dnskw.dtsi | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --- a/arch/arm/boot/dts/kirkwood-

[PATCH 3.16 083/202] mm, oom: fix use-after-free in oom_kill_process

pendency on tasklist_lock") Signed-off-by: Shakeel Butt Reviewed-by: Roman Gushchin Acked-by: Michal Hocko Cc: David Rientjes Cc: Johannes Weiner Cc: Tetsuo Handa Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds Signed-off-by: Ben Hutchings --- mm/oom_kill.c | 8 1 fi

[PATCH 3.16 081/202] mac80211: ensure that mgmt tx skbs have tailroom for encryption

management packets, even if crypto_tx_tailroom_needed_cnt is 0. Signed-off-by: Felix Fietkau Signed-off-by: Johannes Berg [bwh: Backported to 3.16: we always expand cloned skbs here; don't change that] Signed-off-by: Ben Hutchings --- --- a/net/mac80211/tx.c +++ b/net/mac80211/tx.c @@ -1465,9 +1465,16

[PATCH 3.16 165/202] ceph: avoid repeatedly adding inode to mdsc->snap_flush_list

lya Dryomov Signed-off-by: Ilya Dryomov Signed-off-by: Ben Hutchings --- fs/ceph/snap.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) --- a/fs/ceph/snap.c +++ b/fs/ceph/snap.c @@ -579,7 +579,8 @@ int __ceph_finish_cap_snap(struct ceph_i capsnap->size);

[PATCH 3.16 098/202] s390/qeth: conclude all event processing before offlining a card

ridgeport support - basic control") Signed-off-by: Julian Wiedmann Signed-off-by: David S. Miller [bwh: Backported to 3.16: - Add gdev parameter to qeth_alloc_card(), as done upstream by commit 121ca39aa558 "s390/qeth: uninstall IRQ handler on device removal" - Adjust con

[PATCH 3.16 101/202] drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user

jects") Signed-off-by: Thomas Hellstrom Reviewed-by: Deepak Rawat Signed-off-by: Ben Hutchings --- drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c +++ b/drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c @@ -2326

[PATCH 3.16 168/202] ARC: U-boot: check arguments paranoidly

code. Tested-by: Corentin LABBE Signed-off-by: Eugeniy Paltsev Signed-off-by: Vineet Gupta [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- arch/arc/kernel/head.S | 4 +- arch/arc/kernel/setup.c | 87 + 2 files changed, 64

[PATCH 3.16 087/202] dmaengine: bcm2835: add additional defines for DMA-registers

. Signed-off-by: Martin Sperl Reviewed-by: Eric Anholt Signed-off-by: Eric Anholt Signed-off-by: Vinod Koul [bwh: Backported to 3.16 as dependency of commit 9e528c799d17 "dmaengine: bcm2835: Fix abort of transactions"] Signed-off-by: Ben Hutchings --- drivers/dma/bcm2835-

[PATCH 3.16 138/202] signal: Better detection of synchronous signals

incorrect behavior. Fixes: a27341cd5fcb ("Prioritize synchronous signals over 'normal' signals") Tested-by: Dmitry Vyukov Reported-by: Dmitry Vyukov Signed-off-by: "Eric W. Biederman" [bwh: Backported to 3.16: s/kernel_siginfo_t/siginfo_t/] Signed-off-by: Ben Hutchi

[PATCH 3.16 141/202] Input: elantech - force needed quirks on Fujitsu H760

, the touchpad is useless out-of-the-box as the mouse pointer won't move. This patch makes the driver aware of both the crc_enabled=1 requirement and the middle button, making the touchpad fully functional out-of-the-box. Signed-off-by: Matti Kurkela Signed-off-by: Dmitry Torokhov Signed-off-by: Ben

[PATCH 3.16 143/202] vsock: cope with memory allocation failure at socket creation time

by: Jorgen Hansen Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/vmw_vsock/vmci_transport.c | 4 1 file changed, 4 insertions(+) --- a/net/vmw_vsock/vmci_transport.c +++ b/net/vmw_vsock/vmci_transport.c @@ -1658,6 +1658,10 @@ static void vmci_transport_cleanup(struc s

[PATCH 3.16 102/202] drm/vmwgfx: Fix setting of dma masks

are initially set to 64 bits. Fixes: 0d00c488f3de: ("drm/vmwgfx: Fix the driver for large dma addresses") Signed-off-by: Thomas Hellstrom Reviewed-by: Deepak Rawat Signed-off-by: Ben Hutchings --- drivers/gpu/drm/vmwgfx/vmwgfx_drv.c | 9 ++--- 1 file changed, 6 insertions(+), 3

[PATCH 3.16 100/202] net: dsa: slave: Don't propagate flag changes on down slave interfaces

and was fixed, and changes here follows that fix. Fixes: 91da11f870f0 ("net: Distributed Switch Architecture protocol support") Signed-off-by: Rundong Ge Signed-off-by: David S. Miller [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- net/dsa/slave.c | 13 ---

[PATCH 3.16 167/202] tmpfs: fix link accounting when a tmpfile is linked in

: f4e0c30c191 ("allow the temp files created by open() to be linked to") Signed-off-by: Darrick J. Wong Signed-off-by: Hugh Dickins Reported-by: Matej Kupljen Acked-by: Al Viro Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds Signed-off-by: Ben Hutchings --- mm/shmem.c | 10

[PATCH 3.16 173/202] net/x25: fix a race in x25_bind()

4+0x103/0x610 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457e29 Fixes: 90c27297a9bf ("X.25 remove bkl in bind") Signed-off-by: Eric Dumazet Cc: andrew hendry Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/x25/af_x25.c

[PATCH 3.16 162/202] KEYS: allow reaching the keys quotas exactly

Signed-off-by: Ben Hutchings --- security/keys/key.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --- a/security/keys/key.c +++ b/security/keys/key.c @@ -260,8 +260,8 @@ struct key *key_alloc(struct key_type *t spin_lock(>lock);

[PATCH 3.16 174/202] mmc: spi: Fix card detection during probe

ter the card-detect GPIO/IRQ is registered. Signed-off-by: Jonathan Neuschäfer Reviewed-by: Linus Walleij Signed-off-by: Ulf Hansson Signed-off-by: Ben Hutchings --- drivers/mmc/host/mmc_spi.c | 1 + 1 file changed, 1 insertion(+) --- a/drivers/mmc/host/mmc_spi.c +++ b/drivers/mmc/host/mmc_

[PATCH 3.16 171/202] KEYS: always initialize keyring_index_key::desc_len

key("user", "desc", "", id); } Reported-by: syzbot+ec24e95ea483de0a2...@syzkaller.appspotmail.com Fixes: b2a4df200d57 ("KEYS: Expand the capacity of a keyring") Signed-off-by: Eric Biggers Signed-off-by: David Howells Signed-off-by: James Morris Signe

[PATCH 3.16 172/202] mdio_bus: Fix use-after-free on device_register fails

b fb fb fb fb fb fb fb fb fb fb fb fb fb 8881dc824e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb Fixes: 0c692d07842a ("drivers/net/phy/mdio_bus.c: call put_device on device_register() failure") Signed-off-by: YueHaibing Reviewed-by: Andrew Lunn Signed-off-by: David

[PATCH 3.16 160/202] i2c: cadence: Fix the hold bit setting

lfram Sang Signed-off-by: Ben Hutchings --- drivers/i2c/busses/i2c-cadence.c | 9 +++-- 1 file changed, 7 insertions(+), 2 deletions(-) --- a/drivers/i2c/busses/i2c-cadence.c +++ b/drivers/i2c/busses/i2c-cadence.c @@ -320,8 +320,10 @@ static void cdns_i2c_mrecv(struct cdns_i * Check for t

[PATCH 3.16 161/202] netfilter: nf_tables: fix flush after rule deletion in the same batch

ctive_next() - Adjust context] Signed-off-by: Ben Hutchings --- net/netfilter/nf_tables_api.c | 3 +++ 1 file changed, 3 insertions(+) --- a/net/netfilter/nf_tables_api.c +++ b/net/netfilter/nf_tables_api.c @@ -1897,6 +1897,9 @@ static int nf_table_delrule_by_chain(str

[PATCH 3.16 200/202] binfmt_elf: switch to new creds when switching to new mm

-off-by: Ben Hutchings --- fs/binfmt_elf.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/fs/binfmt_elf.c +++ b/fs/binfmt_elf.c @@ -736,6 +736,7 @@ static int load_elf_binary(struct linux_ current->flags |= PF_RANDOMIZE; setup_new_exec(b

<    4   5   6   7   8   9   10   11   12   13   >