Hello community,
here is the log from the commit of package kernel-source for openSUSE:Factory
checked in at 2017-10-18 12:35:51
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/kernel-source (Old)
and /work/SRC/openSUSE:Factory/.kernel-source.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kernel-source"
Wed Oct 18 12:35:51 2017 rev:383 rq:533869 version:4.13.6
Changes:
--------
--- /work/SRC/openSUSE:Factory/kernel-source/dtb-aarch64.changes
2017-10-08 20:05:42.297115257 +0200
+++ /work/SRC/openSUSE:Factory/.kernel-source.new/dtb-aarch64.changes
2017-10-18 12:35:55.292133324 +0200
@@ -1,0 +2,308 @@
+Fri Oct 13 11:38:39 CEST 2017 - jsl...@suse.cz
+
+- waitid(): Add missing access_ok() checks (bnc#1062473
+ CVE-2017-5123).
+- commit a8d2202
+
+-------------------------------------------------------------------
+Thu Oct 12 20:24:34 CEST 2017 - jsl...@suse.cz
+
+- Linux 4.13.6 (bnc#1012628).
+- imx-media-of: avoid uninitialized variable warning
+ (bnc#1012628).
+- usb: dwc3: ep0: fix DMA starvation by assigning req->trb on ep0
+ (bnc#1012628).
+- mlxsw: spectrum: Fix EEPROM access in case of SFP/SFP+
+ (bnc#1012628).
+- net: bonding: Fix transmit load balancing in balance-alb mode
+ if specified by sysfs (bnc#1012628).
+- openvswitch: Fix an error handling path in
+ 'ovs_nla_init_match_and_action()' (bnc#1012628).
+- mlxsw: spectrum: Prevent mirred-related crash on removal
+ (bnc#1012628).
+- net: bonding: fix tlb_dynamic_lb default value (bnc#1012628).
+- net_sched: gen_estimator: fix scaling error in bytes/packets
+ samples (bnc#1012628).
+- net: sched: fix use-after-free in tcf_action_destroy and
+ tcf_del_walker (bnc#1012628).
+- sctp: potential read out of bounds in
+ sctp_ulpevent_type_enabled() (bnc#1012628).
+- tcp: update skb->skb_mstamp more carefully (bnc#1012628).
+- bpf/verifier: reject BPF_ALU64|BPF_END (bnc#1012628).
+- tcp: fix data delivery rate (bnc#1012628).
+- udpv6: Fix the checksum computation when HW checksum does not
+ apply (bnc#1012628).
+- ip6_gre: skb_push ipv6hdr before packing the header in
+ ip6gre_header (bnc#1012628).
+- net: phy: Fix mask value write on gmii2rgmii converter speed
+ register (bnc#1012628).
+- ip6_tunnel: do not allow loading ip6_tunnel if ipv6 is disabled
+ in cmdline (bnc#1012628).
+- net/sched: cls_matchall: fix crash when used with classful qdisc
+ (bnc#1012628).
+- bpf: do not disable/enable BH in bpf_map_free_id()
+ (bnc#1012628).
+- tcp: fastopen: fix on syn-data transmit failure (bnc#1012628).
+- net: emac: Fix napi poll list corruption (bnc#1012628).
+- net: ipv6: fix regression of no RTM_DELADDR sent after DAD
+ failure (bnc#1012628).
+- packet: hold bind lock when rebinding to fanout hook
+ (bnc#1012628).
+- bpf: one perf event close won't free bpf program attached by
+ another perf event (bnc#1012628).
+- net: change skb->mac_header when Generic XDP calls adjust_head
+ (bnc#1012628).
+- isdn/i4l: fetch the ppp_write buffer in one shot (bnc#1012628).
+- net_sched: always reset qdisc backlog in qdisc_reset()
+ (bnc#1012628).
+- net: stmmac: Cocci spatch "of_table" (bnc#1012628).
+- net: qcom/emac: specify the correct size when mapping a DMA
+ buffer (bnc#1012628).
+- vti: fix use after free in vti_tunnel_xmit/vti6_tnl_xmit
+ (bnc#1012628).
+- l2tp: fix race condition in l2tp_tunnel_delete (bnc#1012628).
+- tun: bail out from tun_get_user() if the skb is empty
+ (bnc#1012628).
+- net: dsa: mv88e6xxx: Allow dsa and cpu ports in multiple vlans
+ (bnc#1012628).
+- net: dsa: Fix network device registration order (bnc#1012628).
+- packet: in packet_do_bind, test fanout with bind_lock held
+ (bnc#1012628).
+- packet: only test po->has_vnet_hdr once in packet_snd
+ (bnc#1012628).
+- net: dsa: mv88e6xxx: lock mutex when freeing IRQs (bnc#1012628).
+- net: Set sk_prot_creator when cloning sockets to the right proto
+ (bnc#1012628).
+- net/mlx5e: IPoIB, Fix access to invalid memory address
+ (bnc#1012628).
+- netlink: do not proceed if dump's start() errs (bnc#1012628).
+- ip6_gre: ip6gre_tap device should keep dst (bnc#1012628).
+- ip6_tunnel: update mtu properly for ARPHRD_ETHER tunnel device
+ in tx path (bnc#1012628).
+- IPv4: early demux can return an error code (bnc#1012628).
+- tipc: use only positive error codes in messages (bnc#1012628).
+- l2tp: fix l2tp_eth module loading (bnc#1012628).
+- socket, bpf: fix possible use after free (bnc#1012628).
+- net: rtnetlink: fix info leak in RTM_GETSTATS call
+ (bnc#1012628).
+- bpf: fix bpf_tail_call() x64 JIT (bnc#1012628).
+- usb: gadget: core: fix ->udc_set_speed() logic (bnc#1012628).
+- USB: gadgetfs: Fix crash caused by inadequate synchronization
+ (bnc#1012628).
+- USB: gadgetfs: fix copy_to_user while holding spinlock
+ (bnc#1012628).
+- usb: gadget: udc: atmel: set vbus irqflags explicitly
+ (bnc#1012628).
+- usb: gadget: udc: renesas_usb3: fix for no-data control transfer
+ (bnc#1012628).
+- usb: gadget: udc: renesas_usb3: fix Pn_RAMMAP.Pn_MPKT value
+ (bnc#1012628).
+- usb: gadget: udc: renesas_usb3: Fix return value of
+ usb3_write_pipe() (bnc#1012628).
+- usb-storage: unusual_devs entry to fix write-access regression
+ for Seagate external drives (bnc#1012628).
+- usb-storage: fix bogus hardware error messages for ATA pass-thru
+ devices (bnc#1012628).
+- usb: renesas_usbhs: fix the BCLR setting condition for non-DCP
+ pipe (bnc#1012628).
+- usb: renesas_usbhs: fix usbhsf_fifo_clear() for RX direction
+ (bnc#1012628).
+- ALSA: usb-audio: Check out-of-bounds access by corrupted buffer
+ descriptor (bnc#1012628).
+- usb: pci-quirks.c: Corrected timeout values used in handshake
+ (bnc#1012628).
+- USB: cdc-wdm: ignore -EPIPE from GetEncapsulatedResponse
+ (bnc#1012628).
+- USB: dummy-hcd: fix connection failures (wrong speed)
+ (bnc#1012628).
+- USB: dummy-hcd: fix infinite-loop resubmission bug
+ (bnc#1012628).
+- USB: dummy-hcd: Fix erroneous synchronization change
+ (bnc#1012628).
+- USB: devio: Prevent integer overflow in proc_do_submiturb()
+ (bnc#1012628).
+- USB: devio: Don't corrupt user memory (bnc#1012628).
+- USB: g_mass_storage: Fix deadlock when driver is unbound
+ (bnc#1012628).
+- USB: uas: fix bug in handling of alternate settings
+ (bnc#1012628).
+- USB: core: harden cdc_parse_cdc_header (bnc#1012628).
+- usb: Increase quirk delay for USB devices (bnc#1012628).
+- USB: fix out-of-bounds in usb_set_configuration (bnc#1012628).
+- usb: xhci: Free the right ring in xhci_add_endpoint()
+ (bnc#1012628).
+- xhci: fix finding correct bus_state structure for USB 3.1 hosts
+ (bnc#1012628).
+- xhci: fix wrong endpoint ESIT value shown in tracing
+ (bnc#1012628).
+- usb: host: xhci-plat: allow sysdev to inherit from ACPI
+ (bnc#1012628).
+- xhci: Fix sleeping with spin_lock_irq() held in ASmedia 1042A
+ workaround (bnc#1012628).
+- xhci: set missing SuperSpeedPlus Link Protocol bit in roothub
+ descriptor (bnc#1012628).
+- Revert "xhci: Limit USB2 port wake support for AMD Promontory
+ hosts" (bnc#1012628).
+- iio: adc: twl4030: Fix an error handling path in
+ 'twl4030_madc_probe()' (bnc#1012628).
+- iio: adc: twl4030: Disable the vusb3v1 rugulator in the error
+ handling path of 'twl4030_madc_probe()' (bnc#1012628).
+- iio: ad_sigma_delta: Implement a dedicated reset function
+ (bnc#1012628).
+- staging: iio: ad7192: Fix - use the dedicated reset function
+ avoiding dma from stack (bnc#1012628).
+- iio: core: Return error for failed read_reg (bnc#1012628).
+- IIO: BME280: Updates to Humidity readings need ctrl_reg
+ write! (bnc#1012628).
+- iio: trigger: stm32-timer: preset shouldn't be buffered
+ (bnc#1012628).
+- iio: trigger: stm32-timer: fix a corner case to write preset
+ (bnc#1012628).
+- iio: ad7793: Fix the serial interface reset (bnc#1012628).
+- iio: adc: stm32: fix bad error check on max_channels
+ (bnc#1012628).
+- iio: adc: mcp320x: Fix readout of negative voltages
+ (bnc#1012628).
+- iio: adc: mcp320x: Fix oops on module unload (bnc#1012628).
+- uwb: properly check kthread_run return value (bnc#1012628).
+- uwb: ensure that endpoint is interrupt (bnc#1012628).
+- staging: vchiq_2835_arm: Fix NULL ptr dereference in
+ free_pagelist (bnc#1012628).
+- ksm: fix unlocked iteration over vmas in cmp_and_merge_page()
+ (bnc#1012628).
+- mm, hugetlb, soft_offline: save compound page order before
+ page migration (bnc#1012628).
+- mm, oom_reaper: skip mm structs with mmu notifiers
+ (bnc#1012628).
+- mm: fix RODATA_TEST failure "rodata_test: test data was not
+ read only" (bnc#1012628).
+- mm: avoid marking swap cached page as lazyfree (bnc#1012628).
+- mm: fix data corruption caused by lazyfree page (bnc#1012628).
+- userfaultfd: non-cooperative: fix fork use after free
+ (bnc#1012628).
+- lib/ratelimit.c: use deferred printk() version (bnc#1012628).
+- lsm: fix smack_inode_removexattr and xattr_getsecurity memleak
+ (bnc#1012628).
+- ALSA: compress: Remove unused variable (bnc#1012628).
+- Revert "ALSA: echoaudio: purge contradictions between dimension
+ matrix members and total number of members" (bnc#1012628).
+- ALSA: usx2y: Suppress kernel warning at page allocation failures
+ (bnc#1012628).
+- powerpc/powernv: Increase memory block size to 1GB on radix
+ (bnc#1012628).
+- powerpc: Fix action argument for cpufeatures-based TLB flush
+ (bnc#1012628).
+- powerpc/64s: Use emergency stack for kernel TM Bad Thing
+ program checks (bnc#1012628).
+- powerpc/tm: Fix illegal TM state in signal handler
++++ 146 more lines (skipped)
++++ between /work/SRC/openSUSE:Factory/kernel-source/dtb-aarch64.changes
++++ and /work/SRC/openSUSE:Factory/.kernel-source.new/dtb-aarch64.changes
dtb-armv6l.changes: same change
dtb-armv7l.changes: same change
kernel-64kb.changes: same change
kernel-debug.changes: same change
kernel-default.changes: same change
kernel-docs.changes: same change
kernel-lpae.changes: same change
kernel-obs-build.changes: same change
kernel-obs-qa.changes: same change
kernel-pae.changes: same change
kernel-source.changes: same change
kernel-syms.changes: same change
kernel-syzkaller.changes: same change
kernel-vanilla.changes: same change
kernel-zfcpdump.changes: same change
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ dtb-aarch64.spec ++++++
--- /var/tmp/diff_new_pack.OmIGzL/_old 2017-10-18 12:36:03.287758906 +0200
+++ /var/tmp/diff_new_pack.OmIGzL/_new 2017-10-18 12:36:03.287758906 +0200
@@ -17,7 +17,7 @@
%define srcversion 4.13
-%define patchversion 4.13.5
+%define patchversion 4.13.6
%define variant %{nil}
%include %_sourcedir/kernel-spec-macros
@@ -29,9 +29,9 @@
%(chmod +x
%_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,log.sh,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb})
Name: dtb-aarch64
-Version: 4.13.5
+Version: 4.13.6
%if 0%{?is_kotd}
-Release: <RELEASE>.g3fd9659
+Release: <RELEASE>.ga8d2202
%else
Release: 0
%endif
dtb-armv6l.spec: same change
dtb-armv7l.spec: same change
++++++ kernel-64kb.spec ++++++
--- /var/tmp/diff_new_pack.OmIGzL/_old 2017-10-18 12:36:03.359755535 +0200
+++ /var/tmp/diff_new_pack.OmIGzL/_new 2017-10-18 12:36:03.363755348 +0200
@@ -18,7 +18,7 @@
%define srcversion 4.13
-%define patchversion 4.13.5
+%define patchversion 4.13.6
%define variant %{nil}
%define vanilla_only 0
@@ -58,9 +58,9 @@
Summary: Kernel with 64kb PAGE_SIZE
License: GPL-2.0
Group: System/Kernel
-Version: 4.13.5
+Version: 4.13.6
%if 0%{?is_kotd}
-Release: <RELEASE>.g3fd9659
+Release: <RELEASE>.ga8d2202
%else
Release: 0
%endif
kernel-debug.spec: same change
kernel-default.spec: same change
++++++ kernel-docs.spec ++++++
--- /var/tmp/diff_new_pack.OmIGzL/_old 2017-10-18 12:36:03.419752726 +0200
+++ /var/tmp/diff_new_pack.OmIGzL/_new 2017-10-18 12:36:03.419752726 +0200
@@ -17,7 +17,7 @@
%define srcversion 4.13
-%define patchversion 4.13.5
+%define patchversion 4.13.6
%define variant %{nil}
%include %_sourcedir/kernel-spec-macros
@@ -31,9 +31,9 @@
Summary: Kernel Documentation
License: GPL-2.0
Group: Documentation/Man
-Version: 4.13.5
+Version: 4.13.6
%if 0%{?is_kotd}
-Release: <RELEASE>.g3fd9659
+Release: <RELEASE>.ga8d2202
%else
Release: 0
%endif
++++++ kernel-lpae.spec ++++++
--- /var/tmp/diff_new_pack.OmIGzL/_old 2017-10-18 12:36:03.439751789 +0200
+++ /var/tmp/diff_new_pack.OmIGzL/_new 2017-10-18 12:36:03.439751789 +0200
@@ -18,7 +18,7 @@
%define srcversion 4.13
-%define patchversion 4.13.5
+%define patchversion 4.13.6
%define variant %{nil}
%define vanilla_only 0
@@ -58,9 +58,9 @@
Summary: Kernel for LPAE enabled systems
License: GPL-2.0
Group: System/Kernel
-Version: 4.13.5
+Version: 4.13.6
%if 0%{?is_kotd}
-Release: <RELEASE>.g3fd9659
+Release: <RELEASE>.ga8d2202
%else
Release: 0
%endif
++++++ kernel-obs-build.spec ++++++
--- /var/tmp/diff_new_pack.OmIGzL/_old 2017-10-18 12:36:03.459750853 +0200
+++ /var/tmp/diff_new_pack.OmIGzL/_new 2017-10-18 12:36:03.459750853 +0200
@@ -19,7 +19,7 @@
#!BuildIgnore: post-build-checks
-%define patchversion 4.13.5
+%define patchversion 4.13.6
%define variant %{nil}
%define vanilla_only 0
@@ -57,9 +57,9 @@
Summary: package kernel and initrd for OBS VM builds
License: GPL-2.0
Group: SLES
-Version: 4.13.5
+Version: 4.13.6
%if 0%{?is_kotd}
-Release: <RELEASE>.g3fd9659
+Release: <RELEASE>.ga8d2202
%else
Release: 0
%endif
++++++ kernel-obs-qa.spec ++++++
--- /var/tmp/diff_new_pack.OmIGzL/_old 2017-10-18 12:36:03.479749916 +0200
+++ /var/tmp/diff_new_pack.OmIGzL/_new 2017-10-18 12:36:03.479749916 +0200
@@ -17,7 +17,7 @@
# needsrootforbuild
-%define patchversion 4.13.5
+%define patchversion 4.13.6
%define variant %{nil}
%include %_sourcedir/kernel-spec-macros
@@ -36,9 +36,9 @@
Summary: Basic QA tests for the kernel
License: GPL-2.0
Group: SLES
-Version: 4.13.5
+Version: 4.13.6
%if 0%{?is_kotd}
-Release: <RELEASE>.g3fd9659
+Release: <RELEASE>.ga8d2202
%else
Release: 0
%endif
++++++ kernel-pae.spec ++++++
--- /var/tmp/diff_new_pack.OmIGzL/_old 2017-10-18 12:36:03.499748980 +0200
+++ /var/tmp/diff_new_pack.OmIGzL/_new 2017-10-18 12:36:03.503748792 +0200
@@ -18,7 +18,7 @@
%define srcversion 4.13
-%define patchversion 4.13.5
+%define patchversion 4.13.6
%define variant %{nil}
%define vanilla_only 0
@@ -58,9 +58,9 @@
Summary: Kernel with PAE Support
License: GPL-2.0
Group: System/Kernel
-Version: 4.13.5
+Version: 4.13.6
%if 0%{?is_kotd}
-Release: <RELEASE>.g3fd9659
+Release: <RELEASE>.ga8d2202
%else
Release: 0
%endif
++++++ kernel-source.spec ++++++
--- /var/tmp/diff_new_pack.OmIGzL/_old 2017-10-18 12:36:03.527747668 +0200
+++ /var/tmp/diff_new_pack.OmIGzL/_new 2017-10-18 12:36:03.531747481 +0200
@@ -18,7 +18,7 @@
%define srcversion 4.13
-%define patchversion 4.13.5
+%define patchversion 4.13.6
%define variant %{nil}
%define vanilla_only 0
@@ -30,9 +30,9 @@
Summary: The Linux Kernel Sources
License: GPL-2.0
Group: Development/Sources
-Version: 4.13.5
+Version: 4.13.6
%if 0%{?is_kotd}
-Release: <RELEASE>.g3fd9659
+Release: <RELEASE>.ga8d2202
%else
Release: 0
%endif
++++++ kernel-syms.spec ++++++
--- /var/tmp/diff_new_pack.OmIGzL/_old 2017-10-18 12:36:03.551746544 +0200
+++ /var/tmp/diff_new_pack.OmIGzL/_new 2017-10-18 12:36:03.555746357 +0200
@@ -24,10 +24,10 @@
Summary: Kernel Symbol Versions (modversions)
License: GPL-2.0
Group: Development/Sources
-Version: 4.13.5
+Version: 4.13.6
%if %using_buildservice
%if 0%{?is_kotd}
-Release: <RELEASE>.g3fd9659
+Release: <RELEASE>.ga8d2202
%else
Release: 0
%endif
++++++ kernel-syzkaller.spec ++++++
--- /var/tmp/diff_new_pack.OmIGzL/_old 2017-10-18 12:36:03.583745047 +0200
+++ /var/tmp/diff_new_pack.OmIGzL/_new 2017-10-18 12:36:03.587744859 +0200
@@ -18,7 +18,7 @@
%define srcversion 4.13
-%define patchversion 4.13.5
+%define patchversion 4.13.6
%define variant %{nil}
%define vanilla_only 0
@@ -58,9 +58,9 @@
Summary: Kernel used for fuzzing by syzkaller
License: GPL-2.0
Group: System/Kernel
-Version: 4.13.5
+Version: 4.13.6
%if 0%{?is_kotd}
-Release: <RELEASE>.g3fd9659
+Release: <RELEASE>.ga8d2202
%else
Release: 0
%endif
kernel-vanilla.spec: same change
kernel-zfcpdump.spec: same change
++++++ patches.arch.tar.bz2 ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/patches.arch/2-2-arm64-Ensure-fpsimd-support-is-ready-before-userspace-is-active.patch
new/patches.arch/2-2-arm64-Ensure-fpsimd-support-is-ready-before-userspace-is-active.patch
---
old/patches.arch/2-2-arm64-Ensure-fpsimd-support-is-ready-before-userspace-is-active.patch
1970-01-01 01:00:00.000000000 +0100
+++
new/patches.arch/2-2-arm64-Ensure-fpsimd-support-is-ready-before-userspace-is-active.patch
2017-10-12 20:24:34.000000000 +0200
@@ -0,0 +1,45 @@
+From patchwork Fri Oct 6 13:16:53 2017
+Content-Type: text/plain; charset="utf-8"
+MIME-Version: 1.0
+Content-Transfer-Encoding: 7bit
+Subject: [2/2] arm64: Ensure fpsimd support is ready before userspace is active
+From: "Suzuki K. Poulose" <suzuki.poul...@arm.com>
+X-Patchwork-Id: 9989273
+Message-Id: <20171006131653.15876-2-suzuki.poul...@arm.com>
+To: linux-arm-ker...@lists.infradead.org
+Cc: Mark Rutland <mark.rutl...@arm.com>,
+ Suzuki K Poulose <suzuki.poul...@arm.com>,
+ Catalin Marinas <catalin.mari...@arm.com>,
+ Will Deacon <will.dea...@arm.com>,
+ linux-ker...@vger.kernel.org, matwey.korni...@gmail.com,
+ Dave Martin <dave.mar...@arm.com>
+Date: Fri, 6 Oct 2017 14:16:53 +0100
+Patch-mainline: Submitted, https://patchwork.kernel.org/patch/9989273
+References: bsc#1061188
+
+We register the pm/hotplug callbacks for FPSIMD as late_initcall,
+which happens after the userspace is active (from initramfs via
+populate_rootfs, a rootfs_initcall). Make sure we are ready even
+before the userspace could potentially use it, by promoting to
+a core_initcall.
+
+Cc: Catalin Marinas <catalin.mari...@arm.com>
+Cc: Will Deacon <will.dea...@arm.com>
+Cc: Mark Rutland <mark.rutl...@arm.com>
+Cc: Dave Martin <dave.mar...@arm.com>
+Signed-off-by: Suzuki K Poulose <suzuki.poul...@arm.com>
+Signed-off-by: Matthias Brugger <mbrug...@suse.com>
+---
+ arch/arm64/kernel/fpsimd.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/arch/arm64/kernel/fpsimd.c b/arch/arm64/kernel/fpsimd.c
+index f444f374bd7b..5d547deb6996 100644
+--- a/arch/arm64/kernel/fpsimd.c
++++ b/arch/arm64/kernel/fpsimd.c
+@@ -444,4 +444,4 @@ static int __init fpsimd_init(void)
+
+ return 0;
+ }
+-late_initcall(fpsimd_init);
++core_initcall(fpsimd_init);
++++++ patches.drivers.tar.bz2 ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/patches.drivers/qxl-fix-pinning.patch
new/patches.drivers/qxl-fix-pinning.patch
--- old/patches.drivers/qxl-fix-pinning.patch 2017-10-05 20:28:26.000000000
+0200
+++ new/patches.drivers/qxl-fix-pinning.patch 2017-10-07 18:13:32.000000000
+0200
@@ -2,7 +2,8 @@
From: Gerd Hoffmann <kra...@redhat.com>
Date: Fri, 15 Sep 2017 12:46:15 +0200
Subject: [testing] qxl: fix pinning
-Patch-mainline: No, testing
+Patch-mainline: 4.14-rc3
+Git-commit: 5f3d862a736398e7068fa67142133f1713fdee8c
References: bsc#1057241,bsc#1057123
cleanup_fb() unpins the just activated framebuffer instead of the
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/patches.drivers/qxl-fix-primary-surface-handling.patch
new/patches.drivers/qxl-fix-primary-surface-handling.patch
--- old/patches.drivers/qxl-fix-primary-surface-handling.patch 2017-10-05
20:28:26.000000000 +0200
+++ new/patches.drivers/qxl-fix-primary-surface-handling.patch 2017-10-07
18:13:32.000000000 +0200
@@ -2,7 +2,8 @@
From: Gerd Hoffmann <kra...@redhat.com>
Date: Wed, 6 Sep 2017 11:31:51 +0200
Subject: qxl: fix primary surface handling
-Patch-mainline: No, testing
+Patch-mainline: 4.14-rc3
+Git-commit: b0e07da3f5c8d069d186a7983ff64eaebf2ea230
References: bsc#1057241,bsc#1057123
The atomic conversion of the qxl driver didn't got the primary surface
++++++ patches.fixes.tar.bz2 ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/patches.fixes/8139too-revisit-napi_complete_done-usage.patch
new/patches.fixes/8139too-revisit-napi_complete_done-usage.patch
--- old/patches.fixes/8139too-revisit-napi_complete_done-usage.patch
2017-10-05 20:28:26.000000000 +0200
+++ new/patches.fixes/8139too-revisit-napi_complete_done-usage.patch
1970-01-01 01:00:00.000000000 +0100
@@ -1,50 +0,0 @@
-From: Eric Dumazet <eduma...@google.com>
-Date: Mon, 18 Sep 2017 13:03:43 -0700
-Subject: 8139too: revisit napi_complete_done() usage
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-Patch-mainline: v4.14-rc2
-Git-commit: 129c6cda2de2a8ac44fab096152469999b727faf
-References: bsc#1042208
-
-It seems we have to be more careful in napi_complete_done()
-use. This patch is not a revert, as it seems we can
-avoid bug that Ville reported by moving the napi_complete_done()
-test in the spinlock section.
-
-Many thanks to Ville for detective work and all tests.
-
-Fixes: 617f01211baf ("8139too: use napi_complete_done()")
-Reported-by: Ville Syrjälä <ville.syrj...@linux.intel.com>
-Tested-by: Ville Syrjälä <ville.syrj...@linux.intel.com>
-
-Signed-off-by: David S. Miller <da...@davemloft.net>
-Acked-by: Michal Kubecek <mkube...@suse.cz>
-
----
- drivers/net/ethernet/realtek/8139too.c | 5 +++--
- 1 file changed, 3 insertions(+), 2 deletions(-)
-
-diff --git a/drivers/net/ethernet/realtek/8139too.c
b/drivers/net/ethernet/realtek/8139too.c
-index ca22f2898664..d24b47b8e0b2 100644
---- a/drivers/net/ethernet/realtek/8139too.c
-+++ b/drivers/net/ethernet/realtek/8139too.c
-@@ -2135,11 +2135,12 @@ static int rtl8139_poll(struct napi_struct *napi, int
budget)
- if (likely(RTL_R16(IntrStatus) & RxAckBits))
- work_done += rtl8139_rx(dev, tp, budget);
-
-- if (work_done < budget && napi_complete_done(napi, work_done)) {
-+ if (work_done < budget) {
- unsigned long flags;
-
- spin_lock_irqsave(&tp->lock, flags);
-- RTL_W16_F(IntrMask, rtl8139_intr_mask);
-+ if (napi_complete_done(napi, work_done))
-+ RTL_W16_F(IntrMask, rtl8139_intr_mask);
- spin_unlock_irqrestore(&tp->lock, flags);
- }
- spin_unlock(&tp->rx_lock);
---
-2.14.1
-
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/patches.fixes/ALSA-seq-Fix-use-after-free-at-creating-a-port
new/patches.fixes/ALSA-seq-Fix-use-after-free-at-creating-a-port
--- old/patches.fixes/ALSA-seq-Fix-use-after-free-at-creating-a-port
1970-01-01 01:00:00.000000000 +0100
+++ new/patches.fixes/ALSA-seq-Fix-use-after-free-at-creating-a-port
2017-10-13 11:38:39.000000000 +0200
@@ -0,0 +1,138 @@
+From 71105998845fb012937332fe2e806d443c09e026 Mon Sep 17 00:00:00 2001
+From: Takashi Iwai <ti...@suse.de>
+Date: Mon, 9 Oct 2017 11:09:20 +0200
+Subject: [PATCH] ALSA: seq: Fix use-after-free at creating a port
+Patch-mainline: Queued in subsystem maintainer repository
+Git-commit: 71105998845fb012937332fe2e806d443c09e026
+Git-repo: git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound.git
+References: CVE-2017-15265, bsc#1062520
+
+There is a potential race window opened at creating and deleting a
+port via ioctl, as spotted by fuzzing. snd_seq_create_port() creates
+a port object and returns its pointer, but it doesn't take the
+refcount, thus it can be deleted immediately by another thread.
+Meanwhile, snd_seq_ioctl_create_port() still calls the function
+snd_seq_system_client_ev_port_start() with the created port object
+that is being deleted, and this triggers use-after-free like:
+
+ BUG: KASAN: use-after-free in snd_seq_ioctl_create_port+0x504/0x630 [snd_seq]
at addr ffff8801f2241cb1
+ =============================================================================
+ BUG kmalloc-512 (Tainted: G B ): kasan: bad access detected
+ -----------------------------------------------------------------------------
+ INFO: Allocated in snd_seq_create_port+0x94/0x9b0 [snd_seq] age=1 cpu=3
pid=4511
+ ___slab_alloc+0x425/0x460
+ __slab_alloc+0x20/0x40
+ kmem_cache_alloc_trace+0x150/0x190
+ snd_seq_create_port+0x94/0x9b0 [snd_seq]
+ snd_seq_ioctl_create_port+0xd1/0x630 [snd_seq]
+ snd_seq_do_ioctl+0x11c/0x190 [snd_seq]
+ snd_seq_ioctl+0x40/0x80 [snd_seq]
+ do_vfs_ioctl+0x54b/0xda0
+ SyS_ioctl+0x79/0x90
+ entry_SYSCALL_64_fastpath+0x16/0x75
+ INFO: Freed in port_delete+0x136/0x1a0 [snd_seq] age=1 cpu=2 pid=4717
+ __slab_free+0x204/0x310
+ kfree+0x15f/0x180
+ port_delete+0x136/0x1a0 [snd_seq]
+ snd_seq_delete_port+0x235/0x350 [snd_seq]
+ snd_seq_ioctl_delete_port+0xc8/0x180 [snd_seq]
+ snd_seq_do_ioctl+0x11c/0x190 [snd_seq]
+ snd_seq_ioctl+0x40/0x80 [snd_seq]
+ do_vfs_ioctl+0x54b/0xda0
+ SyS_ioctl+0x79/0x90
+ entry_SYSCALL_64_fastpath+0x16/0x75
+ Call Trace:
+ [<ffffffff81b03781>] dump_stack+0x63/0x82
+ [<ffffffff81531b3b>] print_trailer+0xfb/0x160
+ [<ffffffff81536db4>] object_err+0x34/0x40
+ [<ffffffff815392d3>] kasan_report.part.2+0x223/0x520
+ [<ffffffffa07aadf4>] ? snd_seq_ioctl_create_port+0x504/0x630 [snd_seq]
+ [<ffffffff815395fe>] __asan_report_load1_noabort+0x2e/0x30
+ [<ffffffffa07aadf4>] snd_seq_ioctl_create_port+0x504/0x630 [snd_seq]
+ [<ffffffffa07aa8f0>] ? snd_seq_ioctl_delete_port+0x180/0x180 [snd_seq]
+ [<ffffffff8136be50>] ? taskstats_exit+0xbc0/0xbc0
+ [<ffffffffa07abc5c>] snd_seq_do_ioctl+0x11c/0x190 [snd_seq]
+ [<ffffffffa07abd10>] snd_seq_ioctl+0x40/0x80 [snd_seq]
+ [<ffffffff8136d433>] ? acct_account_cputime+0x63/0x80
+ [<ffffffff815b515b>] do_vfs_ioctl+0x54b/0xda0
+ .....
+
+We may fix this in a few different ways, and in this patch, it's fixed
+simply by taking the refcount properly at snd_seq_create_port() and
+letting the caller unref the object after use. Also, there is another
+potential use-after-free by sprintf() call in snd_seq_create_port(),
+and this is moved inside the lock.
+
+This fix covers CVE-2017-15265.
+
+Reported-and-tested-by: Michael23 Yu <ycq...@gmail.com>
+Suggested-by: Linus Torvalds <torva...@linux-foundation.org>
+Cc: <sta...@vger.kernel.org>
+Signed-off-by: Takashi Iwai <ti...@suse.de>
+
+---
+ sound/core/seq/seq_clientmgr.c | 6 +++++-
+ sound/core/seq/seq_ports.c | 7 +++++--
+ 2 files changed, 10 insertions(+), 3 deletions(-)
+
+--- a/sound/core/seq/seq_clientmgr.c
++++ b/sound/core/seq/seq_clientmgr.c
+@@ -1259,6 +1259,7 @@ static int snd_seq_ioctl_create_port(str
+ struct snd_seq_port_info *info = arg;
+ struct snd_seq_client_port *port;
+ struct snd_seq_port_callback *callback;
++ int port_idx;
+
+ /* it is not allowed to create the port for an another client */
+ if (info->addr.client != client->number)
+@@ -1269,7 +1270,9 @@ static int snd_seq_ioctl_create_port(str
+ return -ENOMEM;
+
+ if (client->type == USER_CLIENT && info->kernel) {
+- snd_seq_delete_port(client, port->addr.port);
++ port_idx = port->addr.port;
++ snd_seq_port_unlock(port);
++ snd_seq_delete_port(client, port_idx);
+ return -EINVAL;
+ }
+ if (client->type == KERNEL_CLIENT) {
+@@ -1290,6 +1293,7 @@ static int snd_seq_ioctl_create_port(str
+
+ snd_seq_set_port_info(port, info);
+ snd_seq_system_client_ev_port_start(port->addr.client, port->addr.port);
++ snd_seq_port_unlock(port);
+
+ return 0;
+ }
+--- a/sound/core/seq/seq_ports.c
++++ b/sound/core/seq/seq_ports.c
+@@ -122,7 +122,9 @@ static void port_subs_info_init(struct s
+ }
+
+
+-/* create a port, port number is returned (-1 on failure) */
++/* create a port, port number is returned (-1 on failure);
++ * the caller needs to unref the port via snd_seq_port_unlock() appropriately
++ */
+ struct snd_seq_client_port *snd_seq_create_port(struct snd_seq_client *client,
+ int port)
+ {
+@@ -151,6 +153,7 @@ struct snd_seq_client_port *snd_seq_crea
+ snd_use_lock_init(&new_port->use_lock);
+ port_subs_info_init(&new_port->c_src);
+ port_subs_info_init(&new_port->c_dest);
++ snd_use_lock_use(&new_port->use_lock);
+
+ num = port >= 0 ? port : 0;
+ mutex_lock(&client->ports_mutex);
+@@ -165,9 +168,9 @@ struct snd_seq_client_port *snd_seq_crea
+ list_add_tail(&new_port->list, &p->list);
+ client->num_ports++;
+ new_port->addr.port = num; /* store the port number in the port */
++ sprintf(new_port->name, "port-%d", num);
+ write_unlock_irqrestore(&client->ports_lock, flags);
+ mutex_unlock(&client->ports_mutex);
+- sprintf(new_port->name, "port-%d", num);
+
+ return new_port;
+ }
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/patches.fixes/platform-x86-peaq-wmi-Add-DMI-check-before-binding
new/patches.fixes/platform-x86-peaq-wmi-Add-DMI-check-before-binding
--- old/patches.fixes/platform-x86-peaq-wmi-Add-DMI-check-before-binding
1970-01-01 01:00:00.000000000 +0100
+++ new/patches.fixes/platform-x86-peaq-wmi-Add-DMI-check-before-binding
2017-10-13 11:38:39.000000000 +0200
@@ -0,0 +1,71 @@
+From 0e9df6a74f9573409e5a2fbe29c1389188280bfc Mon Sep 17 00:00:00 2001
+From: Hans de Goede <hdego...@redhat.com>
+Date: Thu, 5 Oct 2017 16:02:33 +0200
+Subject: [PATCH] platform/x86: peaq-wmi: Add DMI check before binding to the
+ WMI interface
+Message-Id: <20171005142021.4899-1-hdego...@redhat.com>
+Patch-mainline: Submitted, LKML Thu, 5 Oct 2017 16:20:21 +0200
+References: bsc#1059807
+
+It seems that the WMI GUID used by the PEAQ 2-in-1 WMI hotkeys is not
+as unique as a GUID should be and is used on some other devices too.
+
+This is causing spurious key-press reports on these other devices.
+
+This commits adds a DMI check to the PEAQ 2-in-1 WMI hotkeys driver to
+ensure that it is actually running on a PEAQ 2-in-1, fixing the
+spurious key-presses on these other devices.
+
+Buglink: https://bugzilla.redhat.com/show_bug.cgi?id=1497861
+Buglink: https://bugzilla.suse.com/attachment.cgi?id=743182
+Cc: sta...@vger.kernel.org
+Signed-off-by: Hans de Goede <hdego...@redhat.com>
+Acked-by: Takashi Iwai <ti...@suse.de>
+
+---
+ drivers/platform/x86/peaq-wmi.c | 18 ++++++++++++++++++
+ 1 file changed, 18 insertions(+)
+
+--- a/drivers/platform/x86/peaq-wmi.c
++++ b/drivers/platform/x86/peaq-wmi.c
+@@ -8,6 +8,7 @@
+ */
+
+ #include <linux/acpi.h>
++#include <linux/dmi.h>
+ #include <linux/input-polldev.h>
+ #include <linux/kernel.h>
+ #include <linux/module.h>
+@@ -64,8 +65,22 @@ static void peaq_wmi_poll(struct input_p
+ }
+ }
+
++/* Some other devices (Shuttle XS35) use the same WMI GUID for other purposes
*/
++static const struct dmi_system_id peaq_dmi_table[] = {
++ {
++ .matches = {
++ DMI_MATCH(DMI_SYS_VENDOR, "PEAQ"),
++ DMI_MATCH(DMI_PRODUCT_NAME, "PEAQ PMM C1010 MD99187"),
++ },
++ },
++};
++
+ static int __init peaq_wmi_init(void)
+ {
++ /* WMI GUID is not unique, also check for a DMI match */
++ if (!dmi_check_system(peaq_dmi_table))
++ return -ENODEV;
++
+ if (!wmi_has_guid(PEAQ_DOLBY_BUTTON_GUID))
+ return -ENODEV;
+
+@@ -86,6 +101,9 @@ static int __init peaq_wmi_init(void)
+
+ static void __exit peaq_wmi_exit(void)
+ {
++ if (!dmi_check_system(peaq_dmi_table))
++ return;
++
+ if (!wmi_has_guid(PEAQ_DOLBY_BUTTON_GUID))
+ return;
+
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/patches.fixes/waitid-Add-missing-access_ok-checks.patch
new/patches.fixes/waitid-Add-missing-access_ok-checks.patch
--- old/patches.fixes/waitid-Add-missing-access_ok-checks.patch 1970-01-01
01:00:00.000000000 +0100
+++ new/patches.fixes/waitid-Add-missing-access_ok-checks.patch 2017-10-13
11:38:39.000000000 +0200
@@ -0,0 +1,44 @@
+From: Kees Cook <keesc...@chromium.org>
+Date: Mon, 9 Oct 2017 11:36:52 -0700
+Subject: waitid(): Add missing access_ok() checks
+Git-commit: 96ca579a1ecc943b75beba58bebb0356f6cc4b51
+Patch-mainline: 4.14-rc5
+References: bnc#1062473 CVE-2017-5123
+
+Adds missing access_ok() checks.
+
+CVE-2017-5123
+
+Reported-by: Chris Salls <chrissal...@gmail.com>
+Signed-off-by: Kees Cook <keesc...@chromium.org>
+Acked-by: Al Viro <v...@zeniv.linux.org.uk>
+Fixes: 4c48abe91be0 ("waitid(): switch copyout of siginfo to
unsafe_put_user()")
+Cc: sta...@kernel.org # 4.13
+Signed-off-by: Linus Torvalds <torva...@linux-foundation.org>
+Signed-off-by: Jiri Slaby <jsl...@suse.cz>
+---
+ kernel/exit.c | 6 ++++++
+ 1 file changed, 6 insertions(+)
+
+--- a/kernel/exit.c
++++ b/kernel/exit.c
+@@ -1611,6 +1611,9 @@ SYSCALL_DEFINE5(waitid, int, which, pid_
+ if (!infop)
+ return err;
+
++ if (!access_ok(VERIFY_WRITE, infop, sizeof(*infop)))
++ goto Efault;
++
+ user_access_begin();
+ unsafe_put_user(signo, &infop->si_signo, Efault);
+ unsafe_put_user(0, &infop->si_errno, Efault);
+@@ -1736,6 +1739,9 @@ COMPAT_SYSCALL_DEFINE5(waitid,
+ if (!infop)
+ return err;
+
++ if (!access_ok(VERIFY_WRITE, infop, sizeof(*infop)))
++ goto Efault;
++
+ user_access_begin();
+ unsafe_put_user(signo, &infop->si_signo, Efault);
+ unsafe_put_user(0, &infop->si_errno, Efault);
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/patches.fixes/watchdog-revert-itco_wdt-all-versions-count-down-twice
new/patches.fixes/watchdog-revert-itco_wdt-all-versions-count-down-twice
--- old/patches.fixes/watchdog-revert-itco_wdt-all-versions-count-down-twice
1970-01-01 01:00:00.000000000 +0100
+++ new/patches.fixes/watchdog-revert-itco_wdt-all-versions-count-down-twice
2017-10-13 11:38:39.000000000 +0200
@@ -0,0 +1,81 @@
+From: Wim Van Sebroeck <w...@iguana.be>
+Date: Sat, 9 Sep 2017 17:41:24 +0200
+Subject: watchdog: Revert "iTCO_wdt: all versions count down twice"
+Git-commit: fc61e83a29308601e6e8a0759e24fc8fe2122692
+Patch-mainline: v4.14-rc1
+References: bsc#1061556
+
+This reverts commit 1fccb73011ea8a5fa0c6d357c33fa29c695139ea.
+Reported as Bug 196509 - iTCO_wdt regression reboot before timeout expire
+
+Signed-off-by: Wim Van Sebroeck <w...@iguana.be>
+Acked-by: Martin Wilck <mwi...@suse.com>
+---
+ Documentation/watchdog/watchdog-parameters.txt | 2 +-
+ drivers/watchdog/iTCO_wdt.c | 22 ++++++++++++----------
+ 2 files changed, 13 insertions(+), 11 deletions(-)
+
+diff --git a/Documentation/watchdog/watchdog-parameters.txt
b/Documentation/watchdog/watchdog-parameters.txt
+index b3526365ea8e..6f9d7b418917 100644
+--- a/Documentation/watchdog/watchdog-parameters.txt
++++ b/Documentation/watchdog/watchdog-parameters.txt
+@@ -117,7 +117,7 @@ nowayout: Watchdog cannot be stopped once started
+ -------------------------------------------------
+ iTCO_wdt:
+ heartbeat: Watchdog heartbeat in seconds.
+- (5<=heartbeat<=74 (TCO v1) or 1226 (TCO v2), default=30)
++ (2<heartbeat<39 (TCO v1) or 613 (TCO v2), default=30)
+ nowayout: Watchdog cannot be stopped once started
+ (default=kernel config parameter)
+ -------------------------------------------------
+diff --git a/drivers/watchdog/iTCO_wdt.c b/drivers/watchdog/iTCO_wdt.c
+index c4f65873bfa4..347f0389b089 100644
+--- a/drivers/watchdog/iTCO_wdt.c
++++ b/drivers/watchdog/iTCO_wdt.c
+@@ -306,15 +306,16 @@ static int iTCO_wdt_ping(struct watchdog_device *wd_dev)
+
+ iTCO_vendor_pre_keepalive(p->smi_res, wd_dev->timeout);
+
+- /* Reset the timeout status bit so that the timer
+- * needs to count down twice again before rebooting */
+- outw(0x0008, TCO1_STS(p)); /* write 1 to clear bit */
+-
+ /* Reload the timer by writing to the TCO Timer Counter register */
+- if (p->iTCO_version >= 2)
++ if (p->iTCO_version >= 2) {
+ outw(0x01, TCO_RLD(p));
+- else if (p->iTCO_version == 1)
++ } else if (p->iTCO_version == 1) {
++ /* Reset the timeout status bit so that the timer
++ * needs to count down twice again before rebooting */
++ outw(0x0008, TCO1_STS(p)); /* write 1 to clear bit */
++
+ outb(0x01, TCO_RLD(p));
++ }
+
+ spin_unlock(&p->io_lock);
+ return 0;
+@@ -327,8 +328,11 @@ static int iTCO_wdt_set_timeout(struct watchdog_device
*wd_dev, unsigned int t)
+ unsigned char val8;
+ unsigned int tmrval;
+
+- /* The timer counts down twice before rebooting */
+- tmrval = seconds_to_ticks(p, t) / 2;
++ tmrval = seconds_to_ticks(p, t);
++
++ /* For TCO v1 the timer counts down twice before rebooting */
++ if (p->iTCO_version == 1)
++ tmrval /= 2;
+
+ /* from the specs: */
+ /* "Values of 0h-3h are ignored and should not be attempted" */
+@@ -381,8 +385,6 @@ static unsigned int iTCO_wdt_get_timeleft(struct
watchdog_device *wd_dev)
+ spin_lock(&p->io_lock);
+ val16 = inw(TCO_RLD(p));
+ val16 &= 0x3ff;
+- if (!(inw(TCO1_STS(p)) & 0x0008))
+- val16 += (inw(TCOv2_TMR(p)) & 0x3ff);
+ spin_unlock(&p->io_lock);
+
+ time_left = ticks_to_seconds(p, val16);
+
++++++ patches.kernel.org.tar.bz2 ++++++
++++ 12820 lines of diff (skipped)
++++++ series.conf ++++++
--- /var/tmp/diff_new_pack.OmIGzL/_old 2017-10-18 12:36:04.863685109 +0200
+++ /var/tmp/diff_new_pack.OmIGzL/_new 2017-10-18 12:36:04.863685109 +0200
@@ -372,6 +372,167 @@
patches.kernel.org/4.13.5-109-KVM-VMX-use-cmpxchg64.patch
patches.kernel.org/4.13.5-110-video-fbdev-aty-do-not-leak-uninitialized-padd.patch
patches.kernel.org/4.13.5-111-Linux-4.13.5.patch
+
patches.kernel.org/4.13.6-001-imx-media-of-avoid-uninitialized-variable-warn.patch
+
patches.kernel.org/4.13.6-002-usb-dwc3-ep0-fix-DMA-starvation-by-assigning-r.patch
+
patches.kernel.org/4.13.6-003-mlxsw-spectrum-Fix-EEPROM-access-in-case-of-SF.patch
+
patches.kernel.org/4.13.6-004-net-bonding-Fix-transmit-load-balancing-in-bal.patch
+
patches.kernel.org/4.13.6-005-openvswitch-Fix-an-error-handling-path-in-ovs_.patch
+
patches.kernel.org/4.13.6-006-mlxsw-spectrum-Prevent-mirred-related-crash-on.patch
+
patches.kernel.org/4.13.6-007-net-bonding-fix-tlb_dynamic_lb-default-value.patch
+
patches.kernel.org/4.13.6-008-net_sched-gen_estimator-fix-scaling-error-in-b.patch
+
patches.kernel.org/4.13.6-009-net-sched-fix-use-after-free-in-tcf_action_des.patch
+
patches.kernel.org/4.13.6-010-sctp-potential-read-out-of-bounds-in-sctp_ulpe.patch
+
patches.kernel.org/4.13.6-011-tcp-update-skb-skb_mstamp-more-carefully.patch
+
patches.kernel.org/4.13.6-012-bpf-verifier-reject-BPF_ALU64-BPF_END.patch
+ patches.kernel.org/4.13.6-013-tcp-fix-data-delivery-rate.patch
+
patches.kernel.org/4.13.6-014-udpv6-Fix-the-checksum-computation-when-HW-che.patch
+
patches.kernel.org/4.13.6-015-ip6_gre-skb_push-ipv6hdr-before-packing-the-he.patch
+
patches.kernel.org/4.13.6-016-net-phy-Fix-mask-value-write-on-gmii2rgmii-con.patch
+
patches.kernel.org/4.13.6-017-ip6_tunnel-do-not-allow-loading-ip6_tunnel-if-.patch
+
patches.kernel.org/4.13.6-018-net-sched-cls_matchall-fix-crash-when-used-wit.patch
+
patches.kernel.org/4.13.6-019-8139too-revisit-napi_complete_done-usage.patch
+
patches.kernel.org/4.13.6-020-bpf-do-not-disable-enable-BH-in-bpf_map_free_i.patch
+
patches.kernel.org/4.13.6-021-tcp-fastopen-fix-on-syn-data-transmit-failure.patch
+
patches.kernel.org/4.13.6-022-net-emac-Fix-napi-poll-list-corruption.patch
+
patches.kernel.org/4.13.6-023-net-ipv6-fix-regression-of-no-RTM_DELADDR-sent.patch
+
patches.kernel.org/4.13.6-024-packet-hold-bind-lock-when-rebinding-to-fanout.patch
+
patches.kernel.org/4.13.6-025-bpf-one-perf-event-close-won-t-free-bpf-progra.patch
+
patches.kernel.org/4.13.6-026-net-change-skb-mac_header-when-Generic-XDP-cal.patch
+
patches.kernel.org/4.13.6-027-isdn-i4l-fetch-the-ppp_write-buffer-in-one-sho.patch
+
patches.kernel.org/4.13.6-028-net_sched-always-reset-qdisc-backlog-in-qdisc_.patch
+ patches.kernel.org/4.13.6-029-net-stmmac-Cocci-spatch-of_table.patch
+
patches.kernel.org/4.13.6-030-net-qcom-emac-specify-the-correct-size-when-ma.patch
+
patches.kernel.org/4.13.6-031-vti-fix-use-after-free-in-vti_tunnel_xmit-vti6.patch
+
patches.kernel.org/4.13.6-032-l2tp-fix-race-condition-in-l2tp_tunnel_delete.patch
+
patches.kernel.org/4.13.6-033-tun-bail-out-from-tun_get_user-if-the-skb-is-e.patch
+
patches.kernel.org/4.13.6-034-net-dsa-mv88e6xxx-Allow-dsa-and-cpu-ports-in-m.patch
+
patches.kernel.org/4.13.6-035-net-dsa-Fix-network-device-registration-order.patch
+
patches.kernel.org/4.13.6-036-packet-in-packet_do_bind-test-fanout-with-bind.patch
+
patches.kernel.org/4.13.6-037-packet-only-test-po-has_vnet_hdr-once-in-packe.patch
+
patches.kernel.org/4.13.6-038-net-dsa-mv88e6xxx-lock-mutex-when-freeing-IRQs.patch
+
patches.kernel.org/4.13.6-039-net-Set-sk_prot_creator-when-cloning-sockets-t.patch
+
patches.kernel.org/4.13.6-040-net-mlx5e-IPoIB-Fix-access-to-invalid-memory-a.patch
+
patches.kernel.org/4.13.6-041-netlink-do-not-proceed-if-dump-s-start-errs.patch
+
patches.kernel.org/4.13.6-042-ip6_gre-ip6gre_tap-device-should-keep-dst.patch
+
patches.kernel.org/4.13.6-043-ip6_tunnel-update-mtu-properly-for-ARPHRD_ETHE.patch
+
patches.kernel.org/4.13.6-044-IPv4-early-demux-can-return-an-error-code.patch
+
patches.kernel.org/4.13.6-045-tipc-use-only-positive-error-codes-in-messages.patch
+ patches.kernel.org/4.13.6-046-l2tp-fix-l2tp_eth-module-loading.patch
+
patches.kernel.org/4.13.6-047-socket-bpf-fix-possible-use-after-free.patch
+
patches.kernel.org/4.13.6-048-net-rtnetlink-fix-info-leak-in-RTM_GETSTATS-ca.patch
+ patches.kernel.org/4.13.6-049-bpf-fix-bpf_tail_call-x64-JIT.patch
+
patches.kernel.org/4.13.6-050-usb-gadget-core-fix-udc_set_speed-logic.patch
+
patches.kernel.org/4.13.6-051-USB-gadgetfs-Fix-crash-caused-by-inadequate-sy.patch
+
patches.kernel.org/4.13.6-052-USB-gadgetfs-fix-copy_to_user-while-holding-sp.patch
+
patches.kernel.org/4.13.6-053-usb-gadget-udc-atmel-set-vbus-irqflags-explici.patch
+
patches.kernel.org/4.13.6-054-usb-gadget-udc-renesas_usb3-fix-for-no-data-co.patch
+
patches.kernel.org/4.13.6-055-usb-gadget-udc-renesas_usb3-fix-Pn_RAMMAP.Pn_M.patch
+
patches.kernel.org/4.13.6-056-usb-gadget-udc-renesas_usb3-Fix-return-value-o.patch
+
patches.kernel.org/4.13.6-057-usb-storage-unusual_devs-entry-to-fix-write-ac.patch
+
patches.kernel.org/4.13.6-058-usb-storage-fix-bogus-hardware-error-messages-.patch
+
patches.kernel.org/4.13.6-059-usb-renesas_usbhs-fix-the-BCLR-setting-conditi.patch
+
patches.kernel.org/4.13.6-060-usb-renesas_usbhs-fix-usbhsf_fifo_clear-for-RX.patch
+
patches.kernel.org/4.13.6-061-ALSA-usb-audio-Check-out-of-bounds-access-by-c.patch
+
patches.kernel.org/4.13.6-062-usb-pci-quirks.c-Corrected-timeout-values-used.patch
+
patches.kernel.org/4.13.6-063-USB-cdc-wdm-ignore-EPIPE-from-GetEncapsulatedR.patch
+
patches.kernel.org/4.13.6-064-USB-dummy-hcd-fix-connection-failures-wrong-sp.patch
+
patches.kernel.org/4.13.6-065-USB-dummy-hcd-fix-infinite-loop-resubmission-b.patch
+
patches.kernel.org/4.13.6-066-USB-dummy-hcd-Fix-erroneous-synchronization-ch.patch
+
patches.kernel.org/4.13.6-067-USB-devio-Prevent-integer-overflow-in-proc_do_.patch
+ patches.kernel.org/4.13.6-068-USB-devio-Don-t-corrupt-user-memory.patch
+
patches.kernel.org/4.13.6-069-USB-g_mass_storage-Fix-deadlock-when-driver-is.patch
+
patches.kernel.org/4.13.6-070-USB-uas-fix-bug-in-handling-of-alternate-setti.patch
+ patches.kernel.org/4.13.6-071-USB-core-harden-cdc_parse_cdc_header.patch
+
patches.kernel.org/4.13.6-072-usb-Increase-quirk-delay-for-USB-devices.patch
+
patches.kernel.org/4.13.6-073-USB-fix-out-of-bounds-in-usb_set_configuration.patch
+
patches.kernel.org/4.13.6-074-usb-xhci-Free-the-right-ring-in-xhci_add_endpo.patch
+
patches.kernel.org/4.13.6-075-xhci-fix-finding-correct-bus_state-structure-f.patch
+
patches.kernel.org/4.13.6-076-xhci-fix-wrong-endpoint-ESIT-value-shown-in-tr.patch
+
patches.kernel.org/4.13.6-077-usb-host-xhci-plat-allow-sysdev-to-inherit-fro.patch
+
patches.kernel.org/4.13.6-078-xhci-Fix-sleeping-with-spin_lock_irq-held-in-A.patch
+
patches.kernel.org/4.13.6-079-xhci-set-missing-SuperSpeedPlus-Link-Protocol-.patch
+
patches.kernel.org/4.13.6-080-Revert-xhci-Limit-USB2-port-wake-support-for-A.patch
+
patches.kernel.org/4.13.6-081-iio-adc-twl4030-Fix-an-error-handling-path-in-.patch
+
patches.kernel.org/4.13.6-082-iio-adc-twl4030-Disable-the-vusb3v1-rugulator-.patch
+
patches.kernel.org/4.13.6-083-iio-ad_sigma_delta-Implement-a-dedicated-reset.patch
+
patches.kernel.org/4.13.6-084-staging-iio-ad7192-Fix-use-the-dedicated-reset.patch
+
patches.kernel.org/4.13.6-085-iio-core-Return-error-for-failed-read_reg.patch
+
patches.kernel.org/4.13.6-086-IIO-BME280-Updates-to-Humidity-readings-need-c.patch
+
patches.kernel.org/4.13.6-087-iio-trigger-stm32-timer-preset-shouldn-t-be-bu.patch
+
patches.kernel.org/4.13.6-088-iio-trigger-stm32-timer-fix-a-corner-case-to-w.patch
+
patches.kernel.org/4.13.6-089-iio-ad7793-Fix-the-serial-interface-reset.patch
+
patches.kernel.org/4.13.6-090-iio-adc-stm32-fix-bad-error-check-on-max_chann.patch
+
patches.kernel.org/4.13.6-091-iio-adc-mcp320x-Fix-readout-of-negative-voltag.patch
+
patches.kernel.org/4.13.6-092-iio-adc-mcp320x-Fix-oops-on-module-unload.patch
+
patches.kernel.org/4.13.6-093-uwb-properly-check-kthread_run-return-value.patch
+
patches.kernel.org/4.13.6-094-uwb-ensure-that-endpoint-is-interrupt.patch
+
patches.kernel.org/4.13.6-095-staging-vchiq_2835_arm-Fix-NULL-ptr-dereferenc.patch
+
patches.kernel.org/4.13.6-096-ksm-fix-unlocked-iteration-over-vmas-in-cmp_an.patch
+
patches.kernel.org/4.13.6-097-mm-hugetlb-soft_offline-save-compound-page-ord.patch
+
patches.kernel.org/4.13.6-098-mm-oom_reaper-skip-mm-structs-with-mmu-notifie.patch
+
patches.kernel.org/4.13.6-099-mm-fix-RODATA_TEST-failure-rodata_test-test-da.patch
+
patches.kernel.org/4.13.6-100-mm-avoid-marking-swap-cached-page-as-lazyfree.patch
+
patches.kernel.org/4.13.6-101-mm-fix-data-corruption-caused-by-lazyfree-page.patch
+
patches.kernel.org/4.13.6-102-userfaultfd-non-cooperative-fix-fork-use-after.patch
+
patches.kernel.org/4.13.6-103-lib-ratelimit.c-use-deferred-printk-version.patch
+
patches.kernel.org/4.13.6-104-lsm-fix-smack_inode_removexattr-and-xattr_gets.patch
+ patches.kernel.org/4.13.6-105-ALSA-compress-Remove-unused-variable.patch
+
patches.kernel.org/4.13.6-106-Revert-ALSA-echoaudio-purge-contradictions-bet.patch
+
patches.kernel.org/4.13.6-107-ALSA-usx2y-Suppress-kernel-warning-at-page-all.patch
+
patches.kernel.org/4.13.6-108-powerpc-powernv-Increase-memory-block-size-to-.patch
+
patches.kernel.org/4.13.6-109-powerpc-Fix-action-argument-for-cpufeatures-ba.patch
+
patches.kernel.org/4.13.6-110-powerpc-64s-Use-emergency-stack-for-kernel-TM-.patch
+
patches.kernel.org/4.13.6-111-powerpc-tm-Fix-illegal-TM-state-in-signal-hand.patch
+
patches.kernel.org/4.13.6-112-percpu-make-this_cpu_generic_read-atomic-w.r.t.patch
+
patches.kernel.org/4.13.6-113-intel_th-pci-Add-Lewisburg-PCH-support.patch
+
patches.kernel.org/4.13.6-114-driver-core-platform-Don-t-read-past-the-end-o.patch
+
patches.kernel.org/4.13.6-115-cgroup-Reinit-cgroup_taskset-structure-before-.patch
+
patches.kernel.org/4.13.6-116-Drivers-hv-fcopy-restore-correct-transfer-leng.patch
+
patches.kernel.org/4.13.6-117-vmbus-don-t-acquire-the-mutex-in-vmbus_hvsock_.patch
+ patches.kernel.org/4.13.6-118-stm-class-Fix-a-use-after-free.patch
+
patches.kernel.org/4.13.6-119-auxdisplay-charlcd-properly-restore-atomic-cou.patch
+
patches.kernel.org/4.13.6-120-ftrace-Fix-kmemleak-in-unregister_ftrace_graph.patch
+
patches.kernel.org/4.13.6-121-ovl-fix-error-value-printed-in-ovl_lookup_inde.patch
+
patches.kernel.org/4.13.6-122-ovl-fix-dput-of-ERR_PTR-in-ovl_cleanup_index.patch
+
patches.kernel.org/4.13.6-123-ovl-fix-dentry-leak-in-ovl_indexdir_cleanup.patch
+
patches.kernel.org/4.13.6-124-ovl-fix-missing-unlock_rename-in-ovl_do_copy_u.patch
+
patches.kernel.org/4.13.6-125-ovl-fix-regression-caused-by-exclusive-upper-w.patch
+
patches.kernel.org/4.13.6-126-arm64-dt-marvell-Fix-AP806-system-controller-s.patch
+
patches.kernel.org/4.13.6-127-arm64-Ensure-the-instruction-emulation-is-read.patch
+
patches.kernel.org/4.13.6-128-HID-rmi-Make-sure-the-HID-device-is-opened-on-.patch
+
patches.kernel.org/4.13.6-129-HID-i2c-hid-allocate-hid-buffers-for-real-wors.patch
+
patches.kernel.org/4.13.6-130-HID-wacom-leds-Don-t-try-to-control-the-EKR-s-.patch
+
patches.kernel.org/4.13.6-131-HID-wacom-Properly-report-negative-values-from.patch
+
patches.kernel.org/4.13.6-132-HID-wacom-Correct-coordinate-system-of-touchri.patch
+
patches.kernel.org/4.13.6-133-HID-wacom-generic-Send-MSC_SERIAL-and-ABS_MISC.patch
+
patches.kernel.org/4.13.6-134-HID-wacom-generic-Clear-ABS_MISC-when-tool-lea.patch
+
patches.kernel.org/4.13.6-135-HID-wacom-Always-increment-hdev-refcount-withi.patch
+
patches.kernel.org/4.13.6-136-HID-wacom-bits-shifted-too-much-for-9th-and-10.patch
+
patches.kernel.org/4.13.6-137-btrfs-avoid-overflow-when-sector_t-is-32-bit.patch
+
patches.kernel.org/4.13.6-138-Btrfs-fix-overlap-of-fs_info-flags-values.patch
+
patches.kernel.org/4.13.6-139-rocker-fix-rocker_tlv_put_-functions-for-KASAN.patch
+
patches.kernel.org/4.13.6-140-netlink-fix-nla_put_-u8-u16-u32-for-KASAN.patch
+
patches.kernel.org/4.13.6-141-dm-crypt-reject-sector_size-feature-if-device-.patch
+
patches.kernel.org/4.13.6-142-dm-ioctl-fix-alignment-of-event-number-in-the-.patch
+
patches.kernel.org/4.13.6-143-dm-crypt-fix-memory-leak-in-crypt_ctr_cipher_o.patch
+
patches.kernel.org/4.13.6-144-KVM-PPC-Book3S-Fix-server-always-zero-from-kvm.patch
+
patches.kernel.org/4.13.6-145-kvm-x86-Avoid-async-PF-preempting-the-kernel-i.patch
+
patches.kernel.org/4.13.6-146-iwlwifi-mvm-use-IWL_HCMD_NOCOPY-for-MCAST_FILT.patch
+
patches.kernel.org/4.13.6-147-scsi-sd-Implement-blacklist-option-for-WRITE-S.patch
+
patches.kernel.org/4.13.6-148-scsi-sd-Do-not-override-max_sectors_kb-sysfs-s.patch
+
patches.kernel.org/4.13.6-149-brcmfmac-add-length-check-in-brcmf_cfg80211_es.patch
+
patches.kernel.org/4.13.6-150-brcmfmac-setup-passive-scan-if-requested-by-us.patch
+
patches.kernel.org/4.13.6-151-drm-i915-always-update-ELD-connector-type-afte.patch
+ patches.kernel.org/4.13.6-152-drm-i915-bios-ignore-HDMI-on-port-A.patch
+
patches.kernel.org/4.13.6-153-bsg-lib-fix-use-after-free-under-memory-pressu.patch
+
patches.kernel.org/4.13.6-154-nvme-pci-Use-PCI-bus-address-for-data-queues-i.patch
+
patches.kernel.org/4.13.6-155-mmc-core-add-driver-strength-selection-when-se.patch
+
patches.kernel.org/4.13.6-156-nl80211-Define-policy-for-packet-pattern-attri.patch
+
patches.kernel.org/4.13.6-157-clk-samsung-exynos4-Enable-VPLL-and-EPLL-clock.patch
+
patches.kernel.org/4.13.6-158-udp-perform-source-validation-for-mcast-early-.patch
+ patches.kernel.org/4.13.6-159-udp-fix-bcast-packet-reception.patch
+
patches.kernel.org/4.13.6-160-base-arch_topology-fix-section-mismatch-build-.patch
+ patches.kernel.org/4.13.6-161-Linux-4.13.6.patch
########################################################
# Build fixes that apply to the vanilla kernel too.
@@ -420,13 +581,14 @@
# Scheduler / Core
########################################################
patches.suse/setuid-dumpable-wrongdir
+ patches.fixes/waitid-Add-missing-access_ok-checks.patch
########################################################
# Architecture-specific patches. These used to be all
# at the end of series.conf, but since we don't do
# conditional builds anymore, there's no point.
########################################################
-
+
patches.arch/2-2-arm64-Ensure-fpsimd-support-is-ready-before-userspace-is-active.patch
########################################################
# i386
@@ -667,7 +829,6 @@
########################################################
# Network
########################################################
- patches.fixes/8139too-revisit-napi_complete_done-usage.patch
########################################################
# Wireless Networking
@@ -711,6 +872,7 @@
##########################################################
patches.drivers/ALSA-hda-Implement-mic-mute-LED-mode-enum
patches.drivers/ALSA-ice1712-Add-support-for-STAudio-ADCIII
+ patches.fixes/ALSA-seq-Fix-use-after-free-at-creating-a-port
########################################################
# Char / serial
@@ -723,6 +885,8 @@
# Needs updating WRT d27769ec (block: add GENHD_FL_NO_PART_SCAN)
+hare patches.suse/no-partition-scan
+ patches.fixes/platform-x86-peaq-wmi-Add-DMI-check-before-binding
+ patches.fixes/watchdog-revert-itco_wdt-all-versions-count-down-twice
########################################################
# Other drivers we have added to the tree
++++++ source-timestamp ++++++
--- /var/tmp/diff_new_pack.OmIGzL/_old 2017-10-18 12:36:04.895683611 +0200
+++ /var/tmp/diff_new_pack.OmIGzL/_new 2017-10-18 12:36:04.895683611 +0200
@@ -1,3 +1,3 @@
-2017-10-05 20:28:26 +0200
-GIT Revision: 3fd9659847967583eb0bfef40e4517cb064d6989
+2017-10-13 11:38:39 +0200
+GIT Revision: a8d2202cb84d0e74744da2c060b9c94ae8d4e713
GIT Branch: stable
