Hello community, here is the log from the commit of package kernel-source for openSUSE:Factory checked in at 2017-09-07 22:07:06 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kernel-source (Old) and /work/SRC/openSUSE:Factory/.kernel-source.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kernel-source" Thu Sep 7 22:07:06 2017 rev:377 rq:521906 version:4.12.11 Changes: -------- --- /work/SRC/openSUSE:Factory/kernel-source/dtb-aarch64.changes 2017-08-29 11:37:52.732718670 +0200 +++ /work/SRC/openSUSE:Factory/.kernel-source.new/dtb-aarch64.changes 2017-09-07 22:07:10.630029551 +0200 @@ -1,0 +2,48 @@ +Thu Sep 7 09:47:10 CEST 2017 - [email protected] + +- Linux 4.12.11 (bnc#1012628). +- commit bf7fb08 + +------------------------------------------------------------------- +Thu Aug 31 17:43:44 CEST 2017 - [email protected] + +- rt2800: fix TX_PIN_CFG setting for non MT7620 chips + (bsc#1055826). +- commit d79ffeb + +------------------------------------------------------------------- +Thu Aug 31 15:35:10 CEST 2017 - [email protected] + +- scsi: qla2xxx: Fix an integer overflow in sysfs code + (bsc#1056588, CVE-2017-14051). +- commit 4fafb75 + +------------------------------------------------------------------- +Wed Aug 30 22:10:03 CEST 2017 - [email protected] + +- Linux 4.12.10 (bnc#1012628 bnc#1014351 bnc#1048935 bsc#1020657 + bsc#1050582). +- Delete + patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa. +- Delete + patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch. +- Delete + patches.fixes/Input-ALPS-Fix-Alps-Touchpad-two-finger-scroll-does-. +- Delete + patches.fixes/netfilter-expect-fix-crash-when-putting-uninited-exp.patch. +- commit 030062c + +------------------------------------------------------------------- +Tue Aug 29 16:03:12 CEST 2017 - [email protected] + +- Refresh patches.suse/iwlwifi-expose-default-fallback-ucode-api. + The latest firmware matches for iwl7xxx/3168 series, so dropped the changes. +- commit 1447668 + +------------------------------------------------------------------- +Mon Aug 28 10:58:58 CEST 2017 - [email protected] + +- Refresh patch tags of patches.fixes/Input-ALPS-Fix-Alps-Touchpad-two-finger-scroll-does- +- commit df5244b + +------------------------------------------------------------------- dtb-armv6l.changes: same change dtb-armv7l.changes: same change kernel-64kb.changes: same change kernel-debug.changes: same change kernel-default.changes: same change kernel-docs.changes: same change kernel-lpae.changes: same change kernel-obs-build.changes: same change kernel-obs-qa.changes: same change kernel-pae.changes: same change kernel-source.changes: same change kernel-syms.changes: same change kernel-syzkaller.changes: same change kernel-vanilla.changes: same change kernel-zfcpdump.changes: same change ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dtb-aarch64.spec ++++++ --- /var/tmp/diff_new_pack.m4rtIh/_old 2017-09-07 22:07:55.995634720 +0200 +++ /var/tmp/diff_new_pack.m4rtIh/_new 2017-09-07 22:07:56.003633593 +0200 @@ -17,7 +17,7 @@ %define srcversion 4.12 -%define patchversion 4.12.9 +%define patchversion 4.12.11 %define variant %{nil} %include %_sourcedir/kernel-spec-macros @@ -29,9 +29,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,log.sh,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb}) Name: dtb-aarch64 -Version: 4.12.9 +Version: 4.12.11 %if 0%{?is_kotd} -Release: <RELEASE>.gf2ab6ba +Release: <RELEASE>.gbf7fb08 %else Release: 0 %endif dtb-armv6l.spec: same change dtb-armv7l.spec: same change ++++++ kernel-64kb.spec ++++++ --- /var/tmp/diff_new_pack.m4rtIh/_old 2017-09-07 22:07:56.087621754 +0200 +++ /var/tmp/diff_new_pack.m4rtIh/_new 2017-09-07 22:07:56.091621190 +0200 @@ -18,7 +18,7 @@ %define srcversion 4.12 -%define patchversion 4.12.9 +%define patchversion 4.12.11 %define variant %{nil} %define vanilla_only 0 @@ -58,9 +58,9 @@ Summary: Kernel with 64kb PAGE_SIZE License: GPL-2.0 Group: System/Kernel -Version: 4.12.9 +Version: 4.12.11 %if 0%{?is_kotd} -Release: <RELEASE>.gf2ab6ba +Release: <RELEASE>.gbf7fb08 %else Release: 0 %endif kernel-debug.spec: same change kernel-default.spec: same change ++++++ kernel-docs.spec ++++++ --- /var/tmp/diff_new_pack.m4rtIh/_old 2017-09-07 22:07:56.163611042 +0200 +++ /var/tmp/diff_new_pack.m4rtIh/_new 2017-09-07 22:07:56.167610478 +0200 @@ -16,7 +16,7 @@ # -%define patchversion 4.12.9 +%define patchversion 4.12.11 %define variant %{nil} %include %_sourcedir/kernel-spec-macros @@ -37,9 +37,9 @@ Summary: Kernel Documentation (man pages) License: GPL-2.0 Group: Documentation/Man -Version: 4.12.9 +Version: 4.12.11 %if 0%{?is_kotd} -Release: <RELEASE>.gf2ab6ba +Release: <RELEASE>.gbf7fb08 %else Release: 0 %endif ++++++ kernel-lpae.spec ++++++ --- /var/tmp/diff_new_pack.m4rtIh/_old 2017-09-07 22:07:56.191607096 +0200 +++ /var/tmp/diff_new_pack.m4rtIh/_new 2017-09-07 22:07:56.195606532 +0200 @@ -18,7 +18,7 @@ %define srcversion 4.12 -%define patchversion 4.12.9 +%define patchversion 4.12.11 %define variant %{nil} %define vanilla_only 0 @@ -58,9 +58,9 @@ Summary: Kernel for LPAE enabled systems License: GPL-2.0 Group: System/Kernel -Version: 4.12.9 +Version: 4.12.11 %if 0%{?is_kotd} -Release: <RELEASE>.gf2ab6ba +Release: <RELEASE>.gbf7fb08 %else Release: 0 %endif ++++++ kernel-obs-build.spec ++++++ --- /var/tmp/diff_new_pack.m4rtIh/_old 2017-09-07 22:07:56.219603149 +0200 +++ /var/tmp/diff_new_pack.m4rtIh/_new 2017-09-07 22:07:56.219603149 +0200 @@ -19,7 +19,7 @@ #!BuildIgnore: post-build-checks -%define patchversion 4.12.9 +%define patchversion 4.12.11 %define variant %{nil} %define vanilla_only 0 @@ -57,9 +57,9 @@ Summary: package kernel and initrd for OBS VM builds License: GPL-2.0 Group: SLES -Version: 4.12.9 +Version: 4.12.11 %if 0%{?is_kotd} -Release: <RELEASE>.gf2ab6ba +Release: <RELEASE>.gbf7fb08 %else Release: 0 %endif ++++++ kernel-obs-qa.spec ++++++ --- /var/tmp/diff_new_pack.m4rtIh/_old 2017-09-07 22:07:56.247599203 +0200 +++ /var/tmp/diff_new_pack.m4rtIh/_new 2017-09-07 22:07:56.251598640 +0200 @@ -17,7 +17,7 @@ # needsrootforbuild -%define patchversion 4.12.9 +%define patchversion 4.12.11 %define variant %{nil} %include %_sourcedir/kernel-spec-macros @@ -36,9 +36,9 @@ Summary: Basic QA tests for the kernel License: GPL-2.0 Group: SLES -Version: 4.12.9 +Version: 4.12.11 %if 0%{?is_kotd} -Release: <RELEASE>.gf2ab6ba +Release: <RELEASE>.gbf7fb08 %else Release: 0 %endif ++++++ kernel-pae.spec ++++++ --- /var/tmp/diff_new_pack.m4rtIh/_old 2017-09-07 22:07:56.279594693 +0200 +++ /var/tmp/diff_new_pack.m4rtIh/_new 2017-09-07 22:07:56.283594129 +0200 @@ -18,7 +18,7 @@ %define srcversion 4.12 -%define patchversion 4.12.9 +%define patchversion 4.12.11 %define variant %{nil} %define vanilla_only 0 @@ -58,9 +58,9 @@ Summary: Kernel with PAE Support License: GPL-2.0 Group: System/Kernel -Version: 4.12.9 +Version: 4.12.11 %if 0%{?is_kotd} -Release: <RELEASE>.gf2ab6ba +Release: <RELEASE>.gbf7fb08 %else Release: 0 %endif ++++++ kernel-source.spec ++++++ --- /var/tmp/diff_new_pack.m4rtIh/_old 2017-09-07 22:07:56.307590747 +0200 +++ /var/tmp/diff_new_pack.m4rtIh/_new 2017-09-07 22:07:56.311590183 +0200 @@ -18,7 +18,7 @@ %define srcversion 4.12 -%define patchversion 4.12.9 +%define patchversion 4.12.11 %define variant %{nil} %define vanilla_only 0 @@ -30,9 +30,9 @@ Summary: The Linux Kernel Sources License: GPL-2.0 Group: Development/Sources -Version: 4.12.9 +Version: 4.12.11 %if 0%{?is_kotd} -Release: <RELEASE>.gf2ab6ba +Release: <RELEASE>.gbf7fb08 %else Release: 0 %endif ++++++ kernel-syms.spec ++++++ --- /var/tmp/diff_new_pack.m4rtIh/_old 2017-09-07 22:07:56.343585673 +0200 +++ /var/tmp/diff_new_pack.m4rtIh/_new 2017-09-07 22:07:56.347585109 +0200 @@ -24,10 +24,10 @@ Summary: Kernel Symbol Versions (modversions) License: GPL-2.0 Group: Development/Sources -Version: 4.12.9 +Version: 4.12.11 %if %using_buildservice %if 0%{?is_kotd} -Release: <RELEASE>.gf2ab6ba +Release: <RELEASE>.gbf7fb08 %else Release: 0 %endif ++++++ kernel-syzkaller.spec ++++++ --- /var/tmp/diff_new_pack.m4rtIh/_old 2017-09-07 22:07:56.371581727 +0200 +++ /var/tmp/diff_new_pack.m4rtIh/_new 2017-09-07 22:07:56.371581727 +0200 @@ -18,7 +18,7 @@ %define srcversion 4.12 -%define patchversion 4.12.9 +%define patchversion 4.12.11 %define variant %{nil} %define vanilla_only 0 @@ -58,9 +58,9 @@ Summary: Kernel used for fuzzing by syzkaller License: GPL-2.0 Group: System/Kernel -Version: 4.12.9 +Version: 4.12.11 %if 0%{?is_kotd} -Release: <RELEASE>.gf2ab6ba +Release: <RELEASE>.gbf7fb08 %else Release: 0 %endif kernel-vanilla.spec: same change kernel-zfcpdump.spec: same change ++++++ patches.drivers.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa new/patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa --- old/patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa 2017-08-25 09:08:45.000000000 +0200 +++ new/patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa 1970-01-01 01:00:00.000000000 +0100 @@ -1,32 +0,0 @@ -From bbba6f9d3da357bbabc6fda81e99ff5584500e76 Mon Sep 17 00:00:00 2001 -From: Takashi Iwai <[email protected]> -Date: Wed, 23 Aug 2017 09:30:17 +0200 -Subject: [PATCH] ALSA: hda - Add stereo mic quirk for Lenovo G50-70 - (17aa:3978) -References: bsc#1020657 -Git-commit: bbba6f9d3da357bbabc6fda81e99ff5584500e76 -Git-repo: git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound.git -Patch-mainline: Queued in subsystem maintainer repository - -Lenovo G50-70 (17aa:3978) with Conexant codec chip requires the -similar workaround for the inverted stereo dmic like other Lenovo -models. - -Bugzilla: https://bugzilla.suse.com/show_bug.cgi?id=1020657 -Cc: <[email protected]> -Signed-off-by: Takashi Iwai <[email protected]> - ---- - sound/pci/hda/patch_conexant.c | 1 + - 1 file changed, 1 insertion(+) - ---- a/sound/pci/hda/patch_conexant.c -+++ b/sound/pci/hda/patch_conexant.c -@@ -947,6 +947,7 @@ static const struct snd_pci_quirk cxt506 - SND_PCI_QUIRK(0x17aa, 0x390b, "Lenovo G50-80", CXT_FIXUP_STEREO_DMIC), - SND_PCI_QUIRK(0x17aa, 0x3975, "Lenovo U300s", CXT_FIXUP_STEREO_DMIC), - SND_PCI_QUIRK(0x17aa, 0x3977, "Lenovo IdeaPad U310", CXT_FIXUP_STEREO_DMIC), -+ SND_PCI_QUIRK(0x17aa, 0x3978, "Lenovo G50-70", CXT_FIXUP_STEREO_DMIC), - SND_PCI_QUIRK(0x17aa, 0x397b, "Lenovo S205", CXT_FIXUP_STEREO_DMIC), - SND_PCI_QUIRK_VENDOR(0x17aa, "Thinkpad", CXT_FIXUP_THINKPAD_ACPI), - SND_PCI_QUIRK(0x1c06, 0x2011, "Lemote A1004", CXT_PINCFG_LEMOTE_A1004), diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/patches.drivers/rt2800-fix-TX_PIN_CFG-setting-for-non-MT7620-chips new/patches.drivers/rt2800-fix-TX_PIN_CFG-setting-for-non-MT7620-chips --- old/patches.drivers/rt2800-fix-TX_PIN_CFG-setting-for-non-MT7620-chips 1970-01-01 01:00:00.000000000 +0100 +++ new/patches.drivers/rt2800-fix-TX_PIN_CFG-setting-for-non-MT7620-chips 2017-08-31 22:40:15.000000000 +0200 @@ -0,0 +1,40 @@ +From: Stanislaw Gruszka <[email protected]> +Date: Fri, 25 Aug 2017 17:04:15 +0200 +Subject: [PATCH] rt2800: fix TX_PIN_CFG setting for non MT7620 chips +Git-repo: git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next.git +Patch-mainline: Queued in subsystem maintainer repository +Git-commit: 83ec489193894e52bd395eec470f4f7c4286d4a5 +References: bsc#1055826 + +Since commit 41977e86c984 ("rt2x00: add support for MT7620") we do not +initialize TX_PIN_CFG setting. This cause breakage at least on some +RT3573 devices. To fix the problem patch restores previous behaviour +for non MT7620 chips. + +Fixes: 41977e86c984 ("rt2x00: add support for MT7620") +Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1480829 +Reported-and-tested-by: Jussi Eloranta <[email protected]> +Cc: Daniel Golle <[email protected]> +Signed-off-by: Stanislaw Gruszka <[email protected]> +Acked-by: Daniel Golle <[email protected]> +Signed-off-by: Kalle Valo <[email protected]> +Signed-off-by: Takashi Iwai <[email protected]> + +--- + drivers/net/wireless/ralink/rt2x00/rt2800lib.c | 5 ++++- + 1 file changed, 4 insertions(+), 1 deletion(-) + +--- a/drivers/net/wireless/ralink/rt2x00/rt2800lib.c ++++ b/drivers/net/wireless/ralink/rt2x00/rt2800lib.c +@@ -3699,7 +3699,10 @@ static void rt2800_config_channel(struct + if (rt2x00_rt(rt2x00dev, RT3572)) + rt2800_rfcsr_write(rt2x00dev, 8, 0); + +- rt2800_register_read(rt2x00dev, TX_PIN_CFG, &tx_pin); ++ if (rt2x00_rt(rt2x00dev, RT6352)) ++ rt2800_register_read(rt2x00dev, TX_PIN_CFG, &tx_pin); ++ else ++ tx_pin = 0; + + switch (rt2x00dev->default_ant.tx_chain_num) { + case 3: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/patches.drivers/scsi-qla2xxx-Fix-an-integer-overflow-in-sysfs-code.patch new/patches.drivers/scsi-qla2xxx-Fix-an-integer-overflow-in-sysfs-code.patch --- old/patches.drivers/scsi-qla2xxx-Fix-an-integer-overflow-in-sysfs-code.patch 1970-01-01 01:00:00.000000000 +0100 +++ new/patches.drivers/scsi-qla2xxx-Fix-an-integer-overflow-in-sysfs-code.patch 2017-08-31 22:40:15.000000000 +0200 @@ -0,0 +1,66 @@ +From: Dan Carpenter <[email protected]> +Date: Wed, 30 Aug 2017 16:30:35 +0300 +Subject: scsi: qla2xxx: Fix an integer overflow in sysfs code +Patch-mainline: Queued in subsystem maintainer repository +Git-repo: git://git.kernel.org/pub/scm/linux/kernel/git/mkp/scsi.git +Git-commit: e6f77540c067b48dee10f1e33678415bfcc89017 +References: bsc#1056588, CVE-2017-14051 + +The value of "size" comes from the user. When we add "start + size" it +could lead to an integer overflow bug. + +It means we vmalloc() a lot more memory than we had intended. I believe +that on 64 bit systems vmalloc() can succeed even if we ask it to +allocate huge 4GB buffers. So we would get memory corruption and likely +a crash when we call ha->isp_ops->write_optrom() and ->read_optrom(). + +Only root can trigger this bug. + +Link: https://bugzilla.kernel.org/show_bug.cgi?id=194061 + +Cc: <[email protected]> +Fixes: b7cc176c9eb3 ("[SCSI] qla2xxx: Allow region-based flash-part accesses.") +Reported-by: shqking <[email protected]> +Signed-off-by: Dan Carpenter <[email protected]> +Signed-off-by: Martin K. Petersen <[email protected]> +Acked-by: Johannes Thumshirn <[email protected]> +--- + drivers/scsi/qla2xxx/qla_attr.c | 8 ++++---- + 1 file changed, 4 insertions(+), 4 deletions(-) + +diff --git a/drivers/scsi/qla2xxx/qla_attr.c b/drivers/scsi/qla2xxx/qla_attr.c +index 08a1feb3a195..8c6ff1682fb1 100644 +--- a/drivers/scsi/qla2xxx/qla_attr.c ++++ b/drivers/scsi/qla2xxx/qla_attr.c +@@ -318,6 +318,8 @@ qla2x00_sysfs_write_optrom_ctl(struct file *filp, struct kobject *kobj, + return -EINVAL; + if (start > ha->optrom_size) + return -EINVAL; ++ if (size > ha->optrom_size - start) ++ size = ha->optrom_size - start; + + mutex_lock(&ha->optrom_mutex); + switch (val) { +@@ -343,8 +345,7 @@ qla2x00_sysfs_write_optrom_ctl(struct file *filp, struct kobject *kobj, + } + + ha->optrom_region_start = start; +- ha->optrom_region_size = start + size > ha->optrom_size ? +- ha->optrom_size - start : size; ++ ha->optrom_region_size = start + size; + + ha->optrom_state = QLA_SREADING; + ha->optrom_buffer = vmalloc(ha->optrom_region_size); +@@ -417,8 +418,7 @@ qla2x00_sysfs_write_optrom_ctl(struct file *filp, struct kobject *kobj, + } + + ha->optrom_region_start = start; +- ha->optrom_region_size = start + size > ha->optrom_size ? +- ha->optrom_size - start : size; ++ ha->optrom_region_size = start + size; + + ha->optrom_state = QLA_SWRITING; + ha->optrom_buffer = vmalloc(ha->optrom_region_size); +-- +2.12.3 + ++++++ patches.fixes.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch new/patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch --- old/patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch 2017-08-25 09:08:45.000000000 +0200 +++ new/patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch 1970-01-01 01:00:00.000000000 +0100 @@ -1,129 +0,0 @@ -From: Jeffy Chen <[email protected]> -Date: Tue, 27 Jun 2017 17:34:44 +0800 -Subject: Bluetooth: hidp: fix possible might sleep error in - hidp_session_thread -Git-commit: 5da8e47d849d3d37b14129f038782a095b9ad049 -Patch-mainline: v4.13-rc1 -References: bnc#1014351 - -It looks like hidp_session_thread has same pattern as the issue reported in -old rfcomm: - - while (1) { - set_current_state(TASK_INTERRUPTIBLE); - if (condition) - break; - // may call might_sleep here - schedule(); - } - __set_current_state(TASK_RUNNING); - -Which fixed at: - dfb2fae Bluetooth: Fix nested sleeps - -So let's fix it at the same way, also follow the suggestion of: -https://lwn.net/Articles/628628/ - -Signed-off-by: Jeffy Chen <[email protected]> -Tested-by: AL Yu-Chen Cho <[email protected]> -Tested-by: Rohit Vaswani <[email protected]> -Signed-off-by: Marcel Holtmann <[email protected]> -Signed-off-by: Jiri Slaby <[email protected]> ---- - net/bluetooth/hidp/core.c | 33 ++++++++++++++++++++++----------- - 1 file changed, 22 insertions(+), 11 deletions(-) - ---- a/net/bluetooth/hidp/core.c -+++ b/net/bluetooth/hidp/core.c -@@ -36,6 +36,7 @@ - #define VERSION "1.2" - - static DECLARE_RWSEM(hidp_session_sem); -+static DECLARE_WAIT_QUEUE_HEAD(hidp_session_wq); - static LIST_HEAD(hidp_session_list); - - static unsigned char hidp_keycode[256] = { -@@ -1068,12 +1069,12 @@ static int hidp_session_start_sync(struc - * Wake up session thread and notify it to stop. This is asynchronous and - * returns immediately. Call this whenever a runtime error occurs and you want - * the session to stop. -- * Note: wake_up_process() performs any necessary memory-barriers for us. -+ * Note: wake_up_interruptible() performs any necessary memory-barriers for us. - */ - static void hidp_session_terminate(struct hidp_session *session) - { - atomic_inc(&session->terminate); -- wake_up_process(session->task); -+ wake_up_interruptible(&hidp_session_wq); - } - - /* -@@ -1180,7 +1181,9 @@ static void hidp_session_run(struct hidp - struct sock *ctrl_sk = session->ctrl_sock->sk; - struct sock *intr_sk = session->intr_sock->sk; - struct sk_buff *skb; -+ DEFINE_WAIT_FUNC(wait, woken_wake_function); - -+ add_wait_queue(&hidp_session_wq, &wait); - for (;;) { - /* - * This thread can be woken up two ways: -@@ -1188,12 +1191,10 @@ static void hidp_session_run(struct hidp - * session->terminate flag and wakes this thread up. - * - Via modifying the socket state of ctrl/intr_sock. This - * thread is woken up by ->sk_state_changed(). -- * -- * Note: set_current_state() performs any necessary -- * memory-barriers for us. - */ -- set_current_state(TASK_INTERRUPTIBLE); - -+ /* Ensure session->terminate is updated */ -+ smp_mb__before_atomic(); - if (atomic_read(&session->terminate)) - break; - -@@ -1227,11 +1228,22 @@ static void hidp_session_run(struct hidp - hidp_process_transmit(session, &session->ctrl_transmit, - session->ctrl_sock); - -- schedule(); -+ wait_woken(&wait, TASK_INTERRUPTIBLE, MAX_SCHEDULE_TIMEOUT); - } -+ remove_wait_queue(&hidp_session_wq, &wait); - - atomic_inc(&session->terminate); -- set_current_state(TASK_RUNNING); -+ -+ /* Ensure session->terminate is updated */ -+ smp_mb__after_atomic(); -+} -+ -+static int hidp_session_wake_function(wait_queue_t *wait, -+ unsigned int mode, -+ int sync, void *key) -+{ -+ wake_up_interruptible(&hidp_session_wq); -+ return false; - } - - /* -@@ -1244,7 +1256,8 @@ static void hidp_session_run(struct hidp - static int hidp_session_thread(void *arg) - { - struct hidp_session *session = arg; -- wait_queue_t ctrl_wait, intr_wait; -+ DEFINE_WAIT_FUNC(ctrl_wait, hidp_session_wake_function); -+ DEFINE_WAIT_FUNC(intr_wait, hidp_session_wake_function); - - BT_DBG("session %p", session); - -@@ -1254,8 +1267,6 @@ static int hidp_session_thread(void *arg - set_user_nice(current, -15); - hidp_set_timer(session); - -- init_waitqueue_entry(&ctrl_wait, current); -- init_waitqueue_entry(&intr_wait, current); - add_wait_queue(sk_sleep(session->ctrl_sock->sk), &ctrl_wait); - add_wait_queue(sk_sleep(session->intr_sock->sk), &intr_wait); - /* This memory barrier is paired with wq_has_sleeper(). See diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/patches.fixes/Input-ALPS-Fix-Alps-Touchpad-two-finger-scroll-does- new/patches.fixes/Input-ALPS-Fix-Alps-Touchpad-two-finger-scroll-does- --- old/patches.fixes/Input-ALPS-Fix-Alps-Touchpad-two-finger-scroll-does- 2017-08-25 09:08:45.000000000 +0200 +++ new/patches.fixes/Input-ALPS-Fix-Alps-Touchpad-two-finger-scroll-does- 1970-01-01 01:00:00.000000000 +0100 @@ -1,132 +0,0 @@ -From: Masaki Ota <[email protected]> -Date: Fri, 21 Jul 2017 09:27:30 +0900 -Message-Id: <[email protected]> -Subject: [PATCH] Input: ALPS - Fix Alps Touchpad two finger scroll does not - work on right side -References: bsc#1050582 -Patch-mainline: Submitted, linux-input ML - -Fixed the issue that two finger scroll does not work correctly -on V8 protocol. The cause is that V8 protocol X-coordinate decode -is wrong at SS4 PLUS device. I added SS4 PLUS X decode definition. - -[Mote to note: the problem itself was introduced even before the commit - mentioned below. But the two-finger scroll worked casually although - it reported wrong values by some reason. It got broken by the commit - above because it changed x_max value, and this made libinput - correctly ignoring the MT events at right-half of touchpad (the X - coord is reported as doubled). - - Also, one finger event is decoded differently, thus it didn't suffer - from this problem. - --tiwai] - -Fixes: e7348396c6d5 ("Input: ALPS - fix V8+ protocol handling (73 03 28)") -Signed-off-by: Masaki Ota <[email protected]> -Tested-by: Takashi Iwai <[email protected]> -Tested-by: Paul Donohue <[email protected]> -Signed-off-by: Takashi Iwai <[email protected]> - ---- - drivers/input/mouse/alps.c | 41 +++++++++++++++++++++++++++++++---------- - drivers/input/mouse/alps.h | 8 ++++++++ - 2 files changed, 39 insertions(+), 10 deletions(-) - ---- a/drivers/input/mouse/alps.c -+++ b/drivers/input/mouse/alps.c -@@ -1215,14 +1215,24 @@ static int alps_decode_ss4_v2(struct alp - - case SS4_PACKET_ID_TWO: - if (priv->flags & ALPS_BUTTONPAD) { -- f->mt[0].x = SS4_BTL_MF_X_V2(p, 0); -+ if (IS_SS4PLUS_DEV(priv->dev_id)) { -+ f->mt[0].x = SS4_PLUS_BTL_MF_X_V2(p, 0); -+ f->mt[1].x = SS4_PLUS_BTL_MF_X_V2(p, 1); -+ } else { -+ f->mt[0].x = SS4_BTL_MF_X_V2(p, 0); -+ f->mt[1].x = SS4_BTL_MF_X_V2(p, 1); -+ } - f->mt[0].y = SS4_BTL_MF_Y_V2(p, 0); -- f->mt[1].x = SS4_BTL_MF_X_V2(p, 1); - f->mt[1].y = SS4_BTL_MF_Y_V2(p, 1); - } else { -- f->mt[0].x = SS4_STD_MF_X_V2(p, 0); -+ if (IS_SS4PLUS_DEV(priv->dev_id)) { -+ f->mt[0].x = SS4_PLUS_STD_MF_X_V2(p, 0); -+ f->mt[1].x = SS4_PLUS_STD_MF_X_V2(p, 1); -+ } else { -+ f->mt[0].x = SS4_STD_MF_X_V2(p, 0); -+ f->mt[1].x = SS4_STD_MF_X_V2(p, 1); -+ } - f->mt[0].y = SS4_STD_MF_Y_V2(p, 0); -- f->mt[1].x = SS4_STD_MF_X_V2(p, 1); - f->mt[1].y = SS4_STD_MF_Y_V2(p, 1); - } - f->pressure = SS4_MF_Z_V2(p, 0) ? 0x30 : 0; -@@ -1239,16 +1249,27 @@ static int alps_decode_ss4_v2(struct alp - - case SS4_PACKET_ID_MULTI: - if (priv->flags & ALPS_BUTTONPAD) { -- f->mt[2].x = SS4_BTL_MF_X_V2(p, 0); -+ if (IS_SS4PLUS_DEV(priv->dev_id)) { -+ f->mt[0].x = SS4_PLUS_BTL_MF_X_V2(p, 0); -+ f->mt[1].x = SS4_PLUS_BTL_MF_X_V2(p, 1); -+ } else { -+ f->mt[2].x = SS4_BTL_MF_X_V2(p, 0); -+ f->mt[3].x = SS4_BTL_MF_X_V2(p, 1); -+ } -+ - f->mt[2].y = SS4_BTL_MF_Y_V2(p, 0); -- f->mt[3].x = SS4_BTL_MF_X_V2(p, 1); - f->mt[3].y = SS4_BTL_MF_Y_V2(p, 1); - no_data_x = SS4_MFPACKET_NO_AX_BL; - no_data_y = SS4_MFPACKET_NO_AY_BL; - } else { -- f->mt[2].x = SS4_STD_MF_X_V2(p, 0); -+ if (IS_SS4PLUS_DEV(priv->dev_id)) { -+ f->mt[0].x = SS4_PLUS_STD_MF_X_V2(p, 0); -+ f->mt[1].x = SS4_PLUS_STD_MF_X_V2(p, 1); -+ } else { -+ f->mt[0].x = SS4_STD_MF_X_V2(p, 0); -+ f->mt[1].x = SS4_STD_MF_X_V2(p, 1); -+ } - f->mt[2].y = SS4_STD_MF_Y_V2(p, 0); -- f->mt[3].x = SS4_STD_MF_X_V2(p, 1); - f->mt[3].y = SS4_STD_MF_Y_V2(p, 1); - no_data_x = SS4_MFPACKET_NO_AX; - no_data_y = SS4_MFPACKET_NO_AY; -@@ -2541,8 +2562,8 @@ static int alps_set_defaults_ss4_v2(stru - - memset(otp, 0, sizeof(otp)); - -- if (alps_get_otp_values_ss4_v2(psmouse, 0, &otp[0][0]) || -- alps_get_otp_values_ss4_v2(psmouse, 1, &otp[1][0])) -+ if (alps_get_otp_values_ss4_v2(psmouse, 1, &otp[1][0]) || -+ alps_get_otp_values_ss4_v2(psmouse, 0, &otp[0][0])) - return -1; - - alps_update_device_area_ss4_v2(otp, priv); ---- a/drivers/input/mouse/alps.h -+++ b/drivers/input/mouse/alps.h -@@ -100,6 +100,10 @@ enum SS4_PACKET_ID { - ((_b[1 + _i * 3] << 5) & 0x1F00) \ - ) - -+#define SS4_PLUS_STD_MF_X_V2(_b, _i) (((_b[0 + (_i) * 3] << 4) & 0x0070) | \ -+ ((_b[1 + (_i) * 3] << 4) & 0x0F80) \ -+ ) -+ - #define SS4_STD_MF_Y_V2(_b, _i) (((_b[1 + (_i) * 3] << 3) & 0x0010) | \ - ((_b[2 + (_i) * 3] << 5) & 0x01E0) | \ - ((_b[2 + (_i) * 3] << 4) & 0x0E00) \ -@@ -109,6 +113,10 @@ enum SS4_PACKET_ID { - ((_b[0 + (_i) * 3] >> 3) & 0x0010) \ - ) - -+#define SS4_PLUS_BTL_MF_X_V2(_b, _i) (SS4_PLUS_STD_MF_X_V2(_b, _i) | \ -+ ((_b[0 + (_i) * 3] >> 4) & 0x0008) \ -+ ) -+ - #define SS4_BTL_MF_Y_V2(_b, _i) (SS4_STD_MF_Y_V2(_b, _i) | \ - ((_b[0 + (_i) * 3] >> 3) & 0x0008) \ - ) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/patches.fixes/netfilter-expect-fix-crash-when-putting-uninited-exp.patch new/patches.fixes/netfilter-expect-fix-crash-when-putting-uninited-exp.patch --- old/patches.fixes/netfilter-expect-fix-crash-when-putting-uninited-exp.patch 2017-08-25 09:08:45.000000000 +0200 +++ new/patches.fixes/netfilter-expect-fix-crash-when-putting-uninited-exp.patch 1970-01-01 01:00:00.000000000 +0100 @@ -1,33 +0,0 @@ -From: Florian Westphal <[email protected]> -Date: Mon, 10 Jul 2017 13:53:53 +0200 -Subject: netfilter: expect: fix crash when putting uninited expectation -Patch-mainline: 4.13-rc2 -Git-commit: 36ac344e16e04e3e55e8fed7446095a6458c64e6 -References: bnc#1048935 - -We crash in __nf_ct_expect_check, it calls nf_ct_remove_expect on the -uninitialised expectation instead of existing one, so del_timer chokes -on random memory address. - -Fixes: ec0e3f01114ad32711243 ("netfilter: nf_ct_expect: Add nf_ct_remove_expect()") -Reported-by: Sergey Kvachonok <[email protected]> -Tested-by: Sergey Kvachonok <[email protected]> -Cc: Gao Feng <[email protected]> -Signed-off-by: Florian Westphal <[email protected]> -Signed-off-by: Pablo Neira Ayuso <[email protected]> -Signed-off-by: Jiri Slaby <[email protected]> ---- - net/netfilter/nf_conntrack_expect.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - ---- a/net/netfilter/nf_conntrack_expect.c -+++ b/net/netfilter/nf_conntrack_expect.c -@@ -422,7 +422,7 @@ static inline int __nf_ct_expect_check(s - h = nf_ct_expect_dst_hash(net, &expect->tuple); - hlist_for_each_entry_safe(i, next, &nf_ct_expect_hash[h], hnode) { - if (expect_matches(i, expect)) { -- if (nf_ct_remove_expect(expect)) -+ if (nf_ct_remove_expect(i)) - break; - } else if (expect_clash(i, expect)) { - ret = -EBUSY; ++++++ patches.kernel.org.tar.bz2 ++++++ ++++ 4734 lines of diff (skipped) ++++++ patches.suse.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/patches.suse/iwlwifi-expose-default-fallback-ucode-api new/patches.suse/iwlwifi-expose-default-fallback-ucode-api --- old/patches.suse/iwlwifi-expose-default-fallback-ucode-api 2017-08-07 08:29:23.000000000 +0200 +++ new/patches.suse/iwlwifi-expose-default-fallback-ucode-api 2017-08-29 16:03:44.000000000 +0200 @@ -13,35 +13,9 @@ Signed-off-by: Takashi Iwai <[email protected]> --- - drivers/net/wireless/intel/iwlwifi/iwl-7000.c | 9 +++++++++ drivers/net/wireless/intel/iwlwifi/iwl-8000.c | 4 ++++ - 2 files changed, 13 insertions(+) + 1 file changed, 4 insertions(+) ---- a/drivers/net/wireless/intel/iwlwifi/iwl-7000.c -+++ b/drivers/net/wireless/intel/iwlwifi/iwl-7000.c -@@ -72,9 +72,13 @@ - - /* Highest firmware API version supported */ - #define IWL7260_UCODE_API_MAX 17 -+#define IWL7260_UCODE_API_DEFAULT_FALLBACK 17 - #define IWL7265_UCODE_API_MAX 17 -+#define IWL7265_UCODE_API_DEFAULT_FALLBACK 17 - #define IWL7265D_UCODE_API_MAX 29 -+#define IWL7265D_UCODE_API_DEFAULT_FALLBACK 27 - #define IWL3168_UCODE_API_MAX 29 -+#define IWL3168_UCODE_API_DEFAULT_FALLBACK 27 - - /* Lowest firmware API version supported */ - #define IWL7260_UCODE_API_MIN 17 -@@ -382,3 +386,8 @@ MODULE_FIRMWARE(IWL3160_MODULE_FIRMWARE( - MODULE_FIRMWARE(IWL3168_MODULE_FIRMWARE(IWL3168_UCODE_API_MAX)); - MODULE_FIRMWARE(IWL7265_MODULE_FIRMWARE(IWL7265_UCODE_API_MAX)); - MODULE_FIRMWARE(IWL7265D_MODULE_FIRMWARE(IWL7265D_UCODE_API_MAX)); -+MODULE_FIRMWARE(IWL7260_MODULE_FIRMWARE(IWL7260_UCODE_API_DEFAULT_FALLBACK)); -+MODULE_FIRMWARE(IWL3160_MODULE_FIRMWARE(IWL7260_UCODE_API_DEFAULT_FALLBACK)); -+MODULE_FIRMWARE(IWL3168_MODULE_FIRMWARE(IWL3168_UCODE_API_DEFAULT_FALLBACK)); -+MODULE_FIRMWARE(IWL7265_MODULE_FIRMWARE(IWL7265_UCODE_API_DEFAULT_FALLBACK)); -+MODULE_FIRMWARE(IWL7265D_MODULE_FIRMWARE(IWL7265D_UCODE_API_DEFAULT_FALLBACK)); --- a/drivers/net/wireless/intel/iwlwifi/iwl-8000.c +++ b/drivers/net/wireless/intel/iwlwifi/iwl-8000.c @@ -71,7 +71,9 @@ ++++++ series.conf ++++++ --- /var/tmp/diff_new_pack.m4rtIh/_old 2017-09-07 22:07:57.671398505 +0200 +++ /var/tmp/diff_new_pack.m4rtIh/_new 2017-09-07 22:07:57.671398505 +0200 @@ -36,6 +36,8 @@ patches.kernel.org/patch-4.12.6-7 patches.kernel.org/patch-4.12.7-8 patches.kernel.org/patch-4.12.8-9 + patches.kernel.org/patch-4.12.9-10 + patches.kernel.org/patch-4.12.10-11 ######################################################## # Build fixes that apply to the vanilla kernel too. @@ -222,13 +224,11 @@ ######################################################## # Networking Core ######################################################## - patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch ######################################################## # Netfilter ######################################################## patches.suse/netfilter-ip_conntrack_slp.patch - patches.fixes/netfilter-expect-fix-crash-when-putting-uninited-exp.patch ######################################################## # NFS @@ -335,6 +335,9 @@ patches.fixes/scsi-ibmvscsi-module_alias.patch + # CVE-2017-14051 + patches.drivers/scsi-qla2xxx-Fix-an-integer-overflow-in-sysfs-code.patch + ######################################################## # DRM/Video ######################################################## @@ -352,6 +355,7 @@ ######################################################## # Wireless Networking ######################################################## + patches.drivers/rt2800-fix-TX_PIN_CFG-setting-for-non-MT7620-chips patches.suse/b43-missing-firmware-info.patch patches.suse/iwlwifi-expose-default-fallback-ucode-api @@ -386,14 +390,12 @@ ######################################################## # patches.suse/SUSE-bootsplash # patches.suse/SUSE-bootsplash-mgadrmfb-workaround - patches.fixes/Input-ALPS-Fix-Alps-Touchpad-two-finger-scroll-does- ########################################################## # Sound ########################################################## patches.drivers/ALSA-hda-Implement-mic-mute-LED-mode-enum patches.drivers/ALSA-ice1712-Add-support-for-STAudio-ADCIII - patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa ######################################################## # Char / serial ++++++ source-timestamp ++++++ --- /var/tmp/diff_new_pack.m4rtIh/_old 2017-09-07 22:07:57.703393995 +0200 +++ /var/tmp/diff_new_pack.m4rtIh/_new 2017-09-07 22:07:57.707393431 +0200 @@ -1,3 +1,3 @@ -2017-08-25 09:08:45 +0200 -GIT Revision: f2ab6bac1f2487d0cd66b24bdf61355a63c85142 +2017-09-07 09:47:10 +0200 +GIT Revision: bf7fb0889a05718e645dfc1b09e40a7641a7ade9 GIT Branch: stable
