Hello community,

here is the log from the commit of package kernel-source for openSUSE:Factory 
checked in at 2017-12-05 01:27:07
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/kernel-source (Old)
 and      /work/SRC/openSUSE:Factory/.kernel-source.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "kernel-source"

Tue Dec  5 01:27:07 2017 rev:392 rq:546625 version:4.14.3

Changes:
--------
--- /work/SRC/openSUSE:Factory/kernel-source/dtb-aarch64.changes        
2017-11-26 10:34:20.468212104 +0100
+++ /work/SRC/openSUSE:Factory/.kernel-source.new/dtb-aarch64.changes   
2017-12-05 01:27:10.415978436 +0100
@@ -1,0 +2,381 @@
+Thu Nov 30 10:05:48 CET 2017 - jsl...@suse.cz
+
+- Linux 4.14.3 (bnc#1012628).
+- s390: fix transactional execution control register handling
+  (bnc#1012628).
+- s390/noexec: execute kexec datamover without DAT (bnc#1012628).
+- s390/runtime instrumention: fix possible memory corruption
+  (bnc#1012628).
+- s390/guarded storage: fix possible memory corruption
+  (bnc#1012628).
+- s390/disassembler: add missing end marker for e7 table
+  (bnc#1012628).
+- s390/disassembler: increase show_code buffer size (bnc#1012628).
+- ACPI / PM: Fix acpi_pm_notifier_lock vs flush_workqueue()
+  deadlock (bnc#1012628).
+- ACPI / EC: Fix regression related to triggering source of EC
+  event handling (bnc#1012628).
+- cpufreq: schedutil: Reset cached_raw_freq when not in sync
+  with next_freq (bnc#1012628).
+- serdev: fix registration of second slave (bnc#1012628).
+- sched: Make resched_cpu() unconditional (bnc#1012628).
+- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012628).
+- x86/boot: Fix boot failure when SMP MP-table is based at 0
+  (bnc#1012628).
+- x86/decoder: Add new TEST instruction pattern (bnc#1012628).
+- x86/entry/64: Fix entry_SYSCALL_64_after_hwframe() IRQ tracing
+  (bnc#1012628).
+- x86/entry/64: Add missing irqflags tracing to
+  native_load_gs_index() (bnc#1012628).
+- perf/x86/intel: Hide TSX events when RTM is not supported
+  (bnc#1012628).
+- arm64: Implement arch-specific pte_access_permitted()
+  (bnc#1012628).
+- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
+  (bnc#1012628).
+- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
+  (bnc#1012628).
+- uapi: fix linux/tls.h userspace compilation error (bnc#1012628).
+- uapi: fix linux/rxrpc.h userspace compilation errors
+  (bnc#1012628).
+- MIPS: cmpxchg64() and HAVE_VIRT_CPU_ACCOUNTING_GEN don't work
+  for 32-bit SMP (bnc#1012628).
+- MIPS: ralink: Fix MT7628 pinmux (bnc#1012628).
+- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012628).
+- net: mvneta: fix handling of the Tx descriptor counter
+  (bnc#1012628).
+- nbd: wait uninterruptible for the dead timeout (bnc#1012628).
+- nbd: don't start req until after the dead connection logic
+  (bnc#1012628).
+- PM / OPP: Add missing of_node_put(np) (bnc#1012628).
+- PCI/ASPM: Account for downstream device's Port
+  Common_Mode_Restore_Time (bnc#1012628).
+- PCI/ASPM: Use correct capability pointer to program
+  LTR_L1.2_THRESHOLD (bnc#1012628).
+- PCI: hv: Use effective affinity mask (bnc#1012628).
+- PCI: Set Cavium ACS capability quirk flags to assert RR/CR/SV/UF
+  (bnc#1012628).
+- PCI: Apply Cavium ThunderX ACS quirk to more Root Ports
+  (bnc#1012628).
+- ALSA: hda: Add Raven PCI ID (bnc#1012628).
+- dm integrity: allow unaligned bv_offset (bnc#1012628).
+- dm cache: fix race condition in the writeback mode overwrite_bio
+  optimisation (bnc#1012628).
+- dm crypt: allow unaligned bv_offset (bnc#1012628).
+- dm zoned: ignore last smaller runt zone (bnc#1012628).
+- dm mpath: remove annoying message of 'blk_get_request()
+  returned -11' (bnc#1012628).
+- dm bufio: fix integer overflow when limiting maximum cache size
+  (bnc#1012628).
+- ovl: Put upperdentry if ovl_check_origin() fails (bnc#1012628).
+- dm: allocate struct mapped_device with kvzalloc (bnc#1012628).
+- sched/rt: Simplify the IPI based RT balancing logic
+  (bnc#1012628).
+- MIPS: pci: Remove KERN_WARN instance inside the mt7620 driver
+  (bnc#1012628).
+- dm: fix race between dm_get_from_kobject() and __dm_destroy()
+  (bnc#1012628).
+- dm: discard support requires all targets in a table support
+  discards (bnc#1012628).
+- MIPS: Fix odd fp register warnings with MIPS64r2 (bnc#1012628).
+- MIPS: Fix MIPS64 FP save/restore on 32-bit kernels
+  (bnc#1012628).
+- MIPS: dts: remove bogus bcm96358nb4ser.dtb from dtb-y entry
+  (bnc#1012628).
+- MIPS: Fix an n32 core file generation regset support regression
+  (bnc#1012628).
+- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012628).
+- MIPS: math-emu: Fix final emulation phase for certain
+  instructions (bnc#1012628).
+- rt2x00usb: mark device removed when get ENOENT usb error
+  (bnc#1012628).
+- mm/z3fold.c: use kref to prevent page free/compact race
+  (bnc#1012628).
+- autofs: don't fail mount for transient error (bnc#1012628).
+- nilfs2: fix race condition that causes file system corruption
+  (bnc#1012628).
+- fscrypt: lock mutex before checking for bounce page pool
+  (bnc#1012628).
+- eCryptfs: use after free in ecryptfs_release_messaging()
+  (bnc#1012628).
+- libceph: don't WARN() if user tries to add invalid key
+  (bnc#1012628).
+- bcache: check ca->alloc_thread initialized before wake up it
+  (bnc#1012628).
+- fs: guard_bio_eod() needs to consider partitions (bnc#1012628).
+- fanotify: fix fsnotify_prepare_user_wait() failure
+  (bnc#1012628).
+- isofs: fix timestamps beyond 2027 (bnc#1012628).
+- btrfs: change how we decide to commit transactions during
+  flushing (bnc#1012628).
+- f2fs: expose some sectors to user in inline data or dentry case
+  (bnc#1012628).
+- NFS: Fix typo in nomigration mount option (bnc#1012628).
+- NFS: Revert "NFS: Move the flock open mode check into
+  nfs_flock()" (bnc#1012628).
+- nfs: Fix ugly referral attributes (bnc#1012628).
+- NFS: Avoid RCU usage in tracepoints (bnc#1012628).
+- NFS: revalidate "." etc correctly on "open" (bnc#1012628).
+- nfsd: deal with revoked delegations appropriately (bnc#1012628).
+- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
+  (bnc#1012628).
+- rtlwifi: fix uninitialized rtlhal->last_suspend_sec time
+  (bnc#1012628).
+- iwlwifi: fix firmware names for 9000 and A000 series hw
+  (bnc#1012628).
+- md: fix deadlock error in recent patch (bnc#1012628).
+- md: don't check MD_SB_CHANGE_CLEAN in md_allow_write
+  (bnc#1012628).
+- Bluetooth: btqcomsmd: Add support for BD address setup
+  (bnc#1012628).
+- md/bitmap: revert a patch (bnc#1012628 bsc#1062597).
+- fsnotify: clean up fsnotify_prepare/finish_user_wait()
+  (bnc#1012628).
+- fsnotify: pin both inode and vfsmount mark (bnc#1012628).
+- fsnotify: fix pinning group in fsnotify_prepare_user_wait()
+  (bnc#1012628).
+- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
+  (bnc#1012628).
+- ext4: fix interaction between i_size, fallocate, and delalloc
+  after a crash (bnc#1012628).
+- ext4: prevent data corruption with inline data + DAX
+  (bnc#1012628).
+- ext4: prevent data corruption with journaling + DAX
+  (bnc#1012628).
+- ALSA: pcm: update tstamp only if audio_tstamp changed
+  (bnc#1012628).
+- ALSA: usb-audio: Add sanity checks to FE parser (bnc#1012628).
+- ALSA: usb-audio: Fix potential out-of-bound access at parsing SU
+  (bnc#1012628).
+- ALSA: usb-audio: Add sanity checks in v2 clock parsers
+  (bnc#1012628).
+- ALSA: timer: Remove kernel warning at compat ioctl error paths
+  (bnc#1012628).
+- ALSA: hda/realtek - Fix ALC275 no sound issue (bnc#1012628).
+- ALSA: hda: Fix too short HDMI/DP chmap reporting (bnc#1012628).
+- ALSA: hda - Fix yet remaining issue with vmaster 0dB
+  initialization (bnc#1012628).
+- ALSA: hda/realtek - Fix ALC700 family no sound issue
+  (bnc#1012628).
+- ASoC: sun8i-codec: Invert Master / Slave condition
+  (bnc#1012628).
+- ASoC: sun8i-codec: Fix left and right channels inversion
+  (bnc#1012628).
+- ASoC: sun8i-codec: Set the BCLK divider (bnc#1012628).
+- mfd: lpc_ich: Avoton/Rangeley uses SPI_BYT method (bnc#1012628).
+- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
+  (bnc#1012628).
+- 9p: Fix missing commas in mount options (bnc#1012628).
+- fs/9p: Compare qid.path in v9fs_test_inode (bnc#1012628).
+- net/9p: Switch to wait_event_killable() (bnc#1012628).
+- scsi: qla2xxx: Suppress a kernel complaint in
+  qla_init_base_qpair() (bnc#1012628).
+- scsi: sd_zbc: Fix sd_zbc_read_zoned_characteristics()
+  (bnc#1012628).
+- scsi: lpfc: fix pci hot plug crash in timer management routines
+  (bnc#1012628).
+- scsi: lpfc: fix pci hot plug crash in list_add call
+  (bnc#1012628).
+- scsi: lpfc: Fix crash receiving ELS while detaching driver
+  (bnc#1012628).
+- scsi: lpfc: Fix FCP hba_wqidx assignment (bnc#1012628).
+- scsi: lpfc: Fix oops if nvmet_fc_register_targetport fails
+  (bnc#1012628).
+- iscsi-target: Make TASK_REASSIGN use proper se_cmd->cmd_kref
+  (bnc#1012628).
+- iscsi-target: Fix non-immediate TMR reference leak
+  (bnc#1012628).
+- target: fix null pointer regression in core_tmr_drain_tmr_list
+  (bnc#1012628).
+- target: fix buffer offset in core_scsi3_pri_read_full_status
+  (bnc#1012628).
+- target: Fix QUEUE_FULL + SCSI task attribute handling
+  (bnc#1012628).
+- target: Fix caw_sem leak in transport_generic_request_failure
+  (bnc#1012628).
+- target: Fix quiese during transport_write_pending_qf endless
+  loop (bnc#1012628).
++++ 184 more lines (skipped)
++++ between /work/SRC/openSUSE:Factory/kernel-source/dtb-aarch64.changes
++++ and /work/SRC/openSUSE:Factory/.kernel-source.new/dtb-aarch64.changes
dtb-armv6l.changes: same change
dtb-armv7l.changes: same change
kernel-64kb.changes: same change
kernel-debug.changes: same change
kernel-default.changes: same change
kernel-docs.changes: same change
kernel-lpae.changes: same change
kernel-obs-build.changes: same change
kernel-obs-qa.changes: same change
kernel-pae.changes: same change
kernel-source.changes: same change
kernel-syms.changes: same change
kernel-syzkaller.changes: same change
kernel-vanilla.changes: same change
kernel-zfcpdump.changes: same change

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ dtb-aarch64.spec ++++++
--- /var/tmp/diff_new_pack.WG9k7P/_old  2017-12-05 01:27:21.723567634 +0100
+++ /var/tmp/diff_new_pack.WG9k7P/_new  2017-12-05 01:27:21.727567488 +0100
@@ -17,7 +17,7 @@
 
 
 %define srcversion 4.14
-%define patchversion 4.14.2
+%define patchversion 4.14.3
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -29,9 +29,9 @@
 %(chmod +x 
%_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,log.sh,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb})
 
 Name:           dtb-aarch64
-Version:        4.14.2
+Version:        4.14.3
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb0610fc
+Release:        <RELEASE>.ga731a45
 %else
 Release:        0
 %endif

dtb-armv6l.spec: same change
dtb-armv7l.spec: same change
++++++ kernel-64kb.spec ++++++
--- /var/tmp/diff_new_pack.WG9k7P/_old  2017-12-05 01:27:21.815564291 +0100
+++ /var/tmp/diff_new_pack.WG9k7P/_new  2017-12-05 01:27:21.819564147 +0100
@@ -18,7 +18,7 @@
 
 
 %define srcversion 4.14
-%define patchversion 4.14.2
+%define patchversion 4.14.3
 %define variant %{nil}
 %define vanilla_only 0
 
@@ -58,9 +58,9 @@
 Summary:        Kernel with 64kb PAGE_SIZE
 License:        GPL-2.0
 Group:          System/Kernel
-Version:        4.14.2
+Version:        4.14.3
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb0610fc
+Release:        <RELEASE>.ga731a45
 %else
 Release:        0
 %endif

kernel-debug.spec: same change
kernel-default.spec: same change
++++++ kernel-docs.spec ++++++
--- /var/tmp/diff_new_pack.WG9k7P/_old  2017-12-05 01:27:21.899561240 +0100
+++ /var/tmp/diff_new_pack.WG9k7P/_new  2017-12-05 01:27:21.903561094 +0100
@@ -17,7 +17,7 @@
 
 
 %define srcversion 4.14
-%define patchversion 4.14.2
+%define patchversion 4.14.3
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -31,9 +31,9 @@
 Summary:        Kernel Documentation
 License:        GPL-2.0
 Group:          Documentation/Man
-Version:        4.14.2
+Version:        4.14.3
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb0610fc
+Release:        <RELEASE>.ga731a45
 %else
 Release:        0
 %endif

++++++ kernel-lpae.spec ++++++
--- /var/tmp/diff_new_pack.WG9k7P/_old  2017-12-05 01:27:21.931560077 +0100
+++ /var/tmp/diff_new_pack.WG9k7P/_new  2017-12-05 01:27:21.935559932 +0100
@@ -18,7 +18,7 @@
 
 
 %define srcversion 4.14
-%define patchversion 4.14.2
+%define patchversion 4.14.3
 %define variant %{nil}
 %define vanilla_only 0
 
@@ -58,9 +58,9 @@
 Summary:        Kernel for LPAE enabled systems
 License:        GPL-2.0
 Group:          System/Kernel
-Version:        4.14.2
+Version:        4.14.3
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb0610fc
+Release:        <RELEASE>.ga731a45
 %else
 Release:        0
 %endif

++++++ kernel-obs-build.spec ++++++
--- /var/tmp/diff_new_pack.WG9k7P/_old  2017-12-05 01:27:21.963558915 +0100
+++ /var/tmp/diff_new_pack.WG9k7P/_new  2017-12-05 01:27:21.967558770 +0100
@@ -19,7 +19,7 @@
 
 #!BuildIgnore: post-build-checks
 
-%define patchversion 4.14.2
+%define patchversion 4.14.3
 %define variant %{nil}
 %define vanilla_only 0
 
@@ -57,9 +57,9 @@
 Summary:        package kernel and initrd for OBS VM builds
 License:        GPL-2.0
 Group:          SLES
-Version:        4.14.2
+Version:        4.14.3
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb0610fc
+Release:        <RELEASE>.ga731a45
 %else
 Release:        0
 %endif

++++++ kernel-obs-qa.spec ++++++
--- /var/tmp/diff_new_pack.WG9k7P/_old  2017-12-05 01:27:21.995557752 +0100
+++ /var/tmp/diff_new_pack.WG9k7P/_new  2017-12-05 01:27:21.995557752 +0100
@@ -17,7 +17,7 @@
 # needsrootforbuild
 
 
-%define patchversion 4.14.2
+%define patchversion 4.14.3
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -36,9 +36,9 @@
 Summary:        Basic QA tests for the kernel
 License:        GPL-2.0
 Group:          SLES
-Version:        4.14.2
+Version:        4.14.3
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb0610fc
+Release:        <RELEASE>.ga731a45
 %else
 Release:        0
 %endif

++++++ kernel-pae.spec ++++++
--- /var/tmp/diff_new_pack.WG9k7P/_old  2017-12-05 01:27:22.027556590 +0100
+++ /var/tmp/diff_new_pack.WG9k7P/_new  2017-12-05 01:27:22.031556444 +0100
@@ -18,7 +18,7 @@
 
 
 %define srcversion 4.14
-%define patchversion 4.14.2
+%define patchversion 4.14.3
 %define variant %{nil}
 %define vanilla_only 0
 
@@ -58,9 +58,9 @@
 Summary:        Kernel with PAE Support
 License:        GPL-2.0
 Group:          System/Kernel
-Version:        4.14.2
+Version:        4.14.3
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb0610fc
+Release:        <RELEASE>.ga731a45
 %else
 Release:        0
 %endif

++++++ kernel-source.spec ++++++
--- /var/tmp/diff_new_pack.WG9k7P/_old  2017-12-05 01:27:22.047555864 +0100
+++ /var/tmp/diff_new_pack.WG9k7P/_new  2017-12-05 01:27:22.051555718 +0100
@@ -18,7 +18,7 @@
 
 
 %define srcversion 4.14
-%define patchversion 4.14.2
+%define patchversion 4.14.3
 %define variant %{nil}
 %define vanilla_only 0
 
@@ -30,9 +30,9 @@
 Summary:        The Linux Kernel Sources
 License:        GPL-2.0
 Group:          Development/Sources
-Version:        4.14.2
+Version:        4.14.3
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb0610fc
+Release:        <RELEASE>.ga731a45
 %else
 Release:        0
 %endif

++++++ kernel-syms.spec ++++++
--- /var/tmp/diff_new_pack.WG9k7P/_old  2017-12-05 01:27:22.071554991 +0100
+++ /var/tmp/diff_new_pack.WG9k7P/_new  2017-12-05 01:27:22.075554847 +0100
@@ -24,10 +24,10 @@
 Summary:        Kernel Symbol Versions (modversions)
 License:        GPL-2.0
 Group:          Development/Sources
-Version:        4.14.2
+Version:        4.14.3
 %if %using_buildservice
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb0610fc
+Release:        <RELEASE>.ga731a45
 %else
 Release:        0
 %endif

++++++ kernel-syzkaller.spec ++++++
--- /var/tmp/diff_new_pack.WG9k7P/_old  2017-12-05 01:27:22.099553974 +0100
+++ /var/tmp/diff_new_pack.WG9k7P/_new  2017-12-05 01:27:22.099553974 +0100
@@ -18,7 +18,7 @@
 
 
 %define srcversion 4.14
-%define patchversion 4.14.2
+%define patchversion 4.14.3
 %define variant %{nil}
 %define vanilla_only 0
 
@@ -58,9 +58,9 @@
 Summary:        Kernel used for fuzzing by syzkaller
 License:        GPL-2.0
 Group:          System/Kernel
-Version:        4.14.2
+Version:        4.14.3
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gb0610fc
+Release:        <RELEASE>.ga731a45
 %else
 Release:        0
 %endif

kernel-vanilla.spec: same change
kernel-zfcpdump.spec: same change
++++++ config.tar.bz2 ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/config/armv6hl/default new/config/armv6hl/default
--- old/config/armv6hl/default  2017-11-21 19:23:59.000000000 +0100
+++ new/config/armv6hl/default  2017-11-26 19:18:41.000000000 +0100
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm 4.14.1 Kernel Configuration
+# Linux/arm 4.14.2 Kernel Configuration
 #
 CONFIG_ARM=y
 CONFIG_ARM_HAS_SG_CHAIN=y
@@ -2429,7 +2429,10 @@
 # CONFIG_B43LEGACY is not set
 CONFIG_BRCMUTIL=m
 CONFIG_BRCMSMAC=m
-# CONFIG_BRCMFMAC is not set
+CONFIG_BRCMFMAC=m
+CONFIG_BRCMFMAC_PROTO_BCDC=y
+CONFIG_BRCMFMAC_SDIO=y
+CONFIG_BRCMFMAC_USB=y
 # CONFIG_BRCM_TRACING is not set
 # CONFIG_BRCMDBG is not set
 CONFIG_WLAN_VENDOR_CISCO=y
@@ -2962,7 +2965,25 @@
 # Serial drivers
 #
 CONFIG_SERIAL_EARLYCON=y
-# CONFIG_SERIAL_8250 is not set
+CONFIG_SERIAL_8250=y
+# CONFIG_SERIAL_8250_DEPRECATED_OPTIONS is not set
+# CONFIG_SERIAL_8250_FINTEK is not set
+CONFIG_SERIAL_8250_CONSOLE=y
+CONFIG_SERIAL_8250_DMA=y
+CONFIG_SERIAL_8250_NR_UARTS=4
+CONFIG_SERIAL_8250_RUNTIME_UARTS=4
+CONFIG_SERIAL_8250_EXTENDED=y
+# CONFIG_SERIAL_8250_MANY_PORTS is not set
+# CONFIG_SERIAL_8250_ASPEED_VUART is not set
+CONFIG_SERIAL_8250_SHARE_IRQ=y
+# CONFIG_SERIAL_8250_DETECT_IRQ is not set
+# CONFIG_SERIAL_8250_RSA is not set
+CONFIG_SERIAL_8250_BCM2835AUX=y
+CONFIG_SERIAL_8250_FSL=y
+CONFIG_SERIAL_8250_DW=y
+# CONFIG_SERIAL_8250_EM is not set
+# CONFIG_SERIAL_8250_RT288X is not set
+CONFIG_SERIAL_OF_PLATFORM=y
 
 #
 # Non-8250 serial port support

++++++ patches.kernel.org.tar.bz2 ++++++
++++ 16177 lines of diff (skipped)

++++++ patches.suse.tar.bz2 ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/patches.suse/0002-md-bitmap-copy-correct-data-for-bitmap-super.patch 
new/patches.suse/0002-md-bitmap-copy-correct-data-for-bitmap-super.patch
--- old/patches.suse/0002-md-bitmap-copy-correct-data-for-bitmap-super.patch    
2017-11-24 09:20:07.000000000 +0100
+++ new/patches.suse/0002-md-bitmap-copy-correct-data-for-bitmap-super.patch    
1970-01-01 01:00:00.000000000 +0100
@@ -1,53 +0,0 @@
-From: NeilBrown <ne...@suse.com>
-Subject: REVERT:  md/bitmap: copy correct data for bitmap super
-Patch-mainline: not yet, under discussion.
-References: bsc#1062597
-
-The below patch fixes a problem with badly-configured RAID5
-and introduces a problem on arch with 64K PAGE_SIZE.
-So revert it.  A better fix is comming
-
-x-From: Shaohua Li <s...@fb.com>
-x-Date: Thu, 17 Aug 2017 10:35:11 -0700
-x-Subject: [PATCH] md/bitmap: copy correct data for bitmap super
-x-Git-commit: 8031c3ddc70ab93099e7d1814382dba39f57b43e
-x-Patch-mainline: md/4.14
-
-raid5 cache could write bitmap superblock before bitmap superblock is
-initialized. The bitmap superblock is less than 512B. The current code will
-only copy the superblock to a new page and write the whole 512B, which will
-zero the the data after the superblock. Unfortunately the data could include
-bitmap, which we should preserve. The patch will make superblock read do 4k
-chunk and we always copy the 4k data to new page, so the superblock write will
-old data to disk and we don't change the bitmap.
-
-Reported-by: Song Liu <songliubrav...@fb.com>
-Reviewed-by: Song Liu <songliubrav...@fb.com>
-Cc: sta...@vger.kernel.org (4.10+)
-Signed-off-by: Shaohua Li <s...@fb.com>
-Acked-by: NeilBrown <ne...@suse.com>
-
----
- drivers/md/bitmap.c |    4 ++--
- 1 file changed, 2 insertions(+), 2 deletions(-)
-
---- a/drivers/md/bitmap.c
-+++ b/drivers/md/bitmap.c
-@@ -625,7 +625,7 @@ re_read:
-               err = read_sb_page(bitmap->mddev,
-                                  offset,
-                                  sb_page,
--                                 0, PAGE_SIZE);
-+                                 0, sizeof(bitmap_super_t));
-       }
-       if (err)
-               return err;
-@@ -2123,7 +2123,7 @@ int bitmap_resize(struct bitmap *bitmap,
-       if (store.sb_page && bitmap->storage.sb_page)
-               memcpy(page_address(store.sb_page),
-                      page_address(bitmap->storage.sb_page),
--                     PAGE_SIZE);
-+                     sizeof(bitmap_super_t));
-       bitmap_file_unmap(&bitmap->storage);
-       bitmap->storage = store;
- 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/patches.suse/apparmor-fix-oops-in-audit_signal_cb-hook.patch 
new/patches.suse/apparmor-fix-oops-in-audit_signal_cb-hook.patch
--- old/patches.suse/apparmor-fix-oops-in-audit_signal_cb-hook.patch    
2017-11-24 09:20:07.000000000 +0100
+++ new/patches.suse/apparmor-fix-oops-in-audit_signal_cb-hook.patch    
2017-11-30 10:05:48.000000000 +0100
@@ -1,30 +1,27 @@
 From: John Johansen <john.johan...@canonical.com>
 Date: Wed, 22 Nov 2017 07:33:38 -0800
 Subject: apparmor: fix oops in audit_signal_cb hook
-Patch-mainline: submitted on 22/11/2017
+Git-repo: 
git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor.git#aa-for-up
+Git-commit: b12cbb21586277f72533769832c24cc6c1d60ab3
+Patch-mainline: Queued in subsystem maintainer repository
 References: bnc#1069562
 
 The apparmor_audit_data struct ordering got messed up during a merge
 conflict, resulting in the signal integer and peer pointer being in
-a union instead of a struct together.
+a union instead of a struct.
 
-For most of the 4.13 and 4.14 life cycle, this was hidden by commit
-651e28c5537abb39076d3949fb7618536f1d242e which fixed the
-apparmor_audit_data struct when its data was added. When that commit
-was reverted in -rc7 the signal audit bug was exposed, and
-unfortunately it never showed up in any of the testing until after
-4.14 was released, and Shaun Khan, Zephaniah E. Loss-Cutler-Hull filed
-nearly simultaneous bug reports (with different oopes, the smaller of
-which is included below).
+For most of the 4.13 and 4.14 life cycle, this was hidden by
+commit 651e28c5537a ("apparmor: add base infastructure for socket
+mediation") which fixed the apparmor_audit_data struct when its data
+was added. When that commit was reverted in -rc7 the signal audit bug
+was exposed, and unfortunately it never showed up in any of the
+testing until after 4.14 was released. Shaun Khan, Zephaniah
+E. Loss-Cutler-Hull filed nearly simultaneous bug reports (with
+different oopes, the smaller of which is included below).
 
 Full credit goes to Tetsuo Handa for jumping on this as well and
 noticing the audit data struct problem and reporting it.
 
-Alright, trying again, this time with my mail settings to actually send
-as plain text, and with some more detail.
-
-I am running Ubuntu 16.04, with a mainline 4.14 kernel.
-
 [   76.178568] BUG: unable to handle kernel paging request at
 ffffffff0eee3bc0
 [   76.178579] IP: audit_signal_cb+0x6c/0xe0
@@ -98,7 +95,12 @@
 Fixes: cd1dbf76b23d ("apparmor: add the ability to mediate signals")
 Reported-by: Zephaniah E. Loss-Cutler-Hull <warp-spam_ker...@aehallh.com>
 Reported-by: Shuah Khan <shua...@osg.samsung.com>
-Reported-by: Tetsuo Handa <penguin-ker...@i-love.sakura.ne.jp>
+Suggested-by: Tetsuo Handa <penguin-ker...@i-love.sakura.ne.jp>
+Tested-by: Ivan Kozik <i...@ludios.org>
+Tested-by: Zephaniah E. Loss-Cutler-Hull <warp-spam_ker...@aehallh.com>
+Tested-by: Christian Boltz <appar...@cboltz.de>
+Tested-by: Shuah Khan <shua...@osg.samsung.com>
+Cc: sta...@vger.kernel.org
 Signed-off-by: John Johansen <john.johan...@canonical.com>
 Signed-off-by: Jiri Slaby <jsl...@suse.cz>
 ---
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/patches.suse/dm-mpath-accept-failed-paths 
new/patches.suse/dm-mpath-accept-failed-paths
--- old/patches.suse/dm-mpath-accept-failed-paths       2017-11-24 
09:20:07.000000000 +0100
+++ new/patches.suse/dm-mpath-accept-failed-paths       2017-11-30 
10:05:48.000000000 +0100
@@ -13,16 +13,14 @@
 
 Signed-off-by: Hannes Reinecke <h...@suse.de>
 ---
- drivers/md/dm-mpath.c | 112 +++++++++++++++++++++++++++++++++++++-------------
- drivers/md/dm-mpath.h |   1 +
- drivers/md/dm-table.c |   3 ++
+ drivers/md/dm-mpath.c |  112 
+++++++++++++++++++++++++++++++++++++-------------
+ drivers/md/dm-mpath.h |    1 
+ drivers/md/dm-table.c |    3 +
  3 files changed, 88 insertions(+), 28 deletions(-)
 
-diff --git a/drivers/md/dm-mpath.c b/drivers/md/dm-mpath.c
-index 0e8ab5b..0d277f9 100644
 --- a/drivers/md/dm-mpath.c
 +++ b/drivers/md/dm-mpath.c
-@@ -166,7 +166,8 @@ static void free_pgpaths(struct list_head *pgpaths, struct 
dm_target *ti)
+@@ -166,7 +166,8 @@ static void free_pgpaths(struct list_hea
  
        list_for_each_entry_safe(pgpath, tmp, pgpaths, list) {
                list_del(&pgpath->list);
@@ -32,7 +30,7 @@
                free_pgpath(pgpath);
        }
  }
-@@ -366,6 +367,9 @@ static struct pgpath *choose_path_in_pg(struct multipath 
*m,
+@@ -366,6 +367,9 @@ static struct pgpath *choose_path_in_pg(
  
        pgpath = path_to_pgpath(path);
  
@@ -42,7 +40,7 @@
        if (unlikely(lockless_dereference(m->current_pg) != pg)) {
                /* Only update current_pgpath if pg changed */
                spin_lock_irqsave(&m->lock, flags);
-@@ -469,7 +473,7 @@ static int multipath_clone_and_map(struct dm_target *ti, 
struct request *rq,
+@@ -469,7 +473,7 @@ static int multipath_clone_and_map(struc
        struct pgpath *pgpath;
        struct block_device *bdev;
        struct dm_mpath_io *mpio = get_mpio(map_context);
@@ -51,7 +49,7 @@
        struct request *clone;
  
        /* Do we need to select a new pgpath? */
-@@ -493,12 +497,16 @@ static int multipath_clone_and_map(struct dm_target *ti, 
struct request *rq,
+@@ -493,12 +497,16 @@ static int multipath_clone_and_map(struc
        mpio->pgpath = pgpath;
        mpio->nr_bytes = nr_bytes;
  
@@ -69,10 +67,10 @@
                /* EBUSY, ENODEV or EWOULDBLOCK: requeue */
 -              bool queue_dying = blk_queue_dying(q);
 +              bool queue_dying = q ? blk_queue_dying(q) : false;
-               DMERR_LIMIT("blk_get_request() returned %ld%s - requeuing",
-                           PTR_ERR(clone), queue_dying ? " (path offline)" : 
"");
                if (queue_dying) {
-@@ -555,7 +563,7 @@ static int __multipath_map_bio(struct multipath *m, struct 
bio *bio, struct dm_m
+                       atomic_inc(&m->pg_init_in_progress);
+                       activate_or_offline_path(pgpath);
+@@ -552,7 +560,7 @@ static int __multipath_map_bio(struct mu
                return DM_MAPIO_SUBMITTED;
        }
  
@@ -81,7 +79,7 @@
                if (test_bit(MPATHF_QUEUE_IF_NO_PATH, &m->flags))
                        return DM_MAPIO_REQUEUE;
                dm_report_EIO(m);
-@@ -733,6 +741,7 @@ static struct pgpath *parse_path(struct dm_arg_set *as, 
struct path_selector *ps
+@@ -734,6 +742,7 @@ static struct pgpath *parse_path(struct
  {
        int r;
        struct pgpath *p;
@@ -89,7 +87,7 @@
        struct multipath *m = ti->private;
        struct request_queue *q = NULL;
        const char *attached_handler_name;
-@@ -747,17 +756,40 @@ static struct pgpath *parse_path(struct dm_arg_set *as, 
struct path_selector *ps
+@@ -748,17 +757,40 @@ static struct pgpath *parse_path(struct
        if (!p)
                return ERR_PTR(-ENOMEM);
  
@@ -135,7 +133,7 @@
  retain:
                attached_handler_name = scsi_dh_attached_handler_name(q, 
GFP_KERNEL);
                if (attached_handler_name) {
-@@ -781,7 +813,7 @@ static struct pgpath *parse_path(struct dm_arg_set *as, 
struct path_selector *ps
+@@ -782,7 +814,7 @@ retain:
                }
        }
  
@@ -144,7 +142,7 @@
                r = scsi_dh_attach(q, m->hw_handler_name);
                if (r == -EBUSY) {
                        char b[BDEVNAME_SIZE];
-@@ -809,10 +841,16 @@ static struct pgpath *parse_path(struct dm_arg_set *as, 
struct path_selector *ps
+@@ -810,10 +842,16 @@ retain:
  
        r = ps->type->add_path(ps, &p->path, as->argc, as->argv, &ti->error);
        if (r) {
@@ -162,7 +160,7 @@
        return p;
  
   bad:
-@@ -1157,10 +1195,10 @@ static int fail_path(struct pgpath *pgpath)
+@@ -1158,10 +1196,10 @@ static int fail_path(struct pgpath *pgpa
  
        spin_lock_irqsave(&m->lock, flags);
  
@@ -175,7 +173,7 @@
  
        pgpath->pg->ps.type->fail_path(&pgpath->pg->ps, &pgpath->path);
        pgpath->is_active = false;
-@@ -1172,7 +1210,7 @@ static int fail_path(struct pgpath *pgpath)
+@@ -1173,7 +1211,7 @@ static int fail_path(struct pgpath *pgpa
                m->current_pgpath = NULL;
  
        dm_path_uevent(DM_UEVENT_PATH_FAILED, m->ti,
@@ -184,7 +182,7 @@
  
        schedule_work(&m->trigger_event);
  
-@@ -1197,7 +1235,13 @@ static int reinstate_path(struct pgpath *pgpath)
+@@ -1198,7 +1236,13 @@ static int reinstate_path(struct pgpath
        if (pgpath->is_active)
                goto out;
  
@@ -199,7 +197,7 @@
  
        r = pgpath->pg->ps.type->reinstate_path(&pgpath->pg->ps, &pgpath->path);
        if (r)
-@@ -1215,7 +1259,7 @@ static int reinstate_path(struct pgpath *pgpath)
+@@ -1216,7 +1260,7 @@ static int reinstate_path(struct pgpath
        }
  
        dm_path_uevent(DM_UEVENT_PATH_REINSTATED, m->ti,
@@ -208,7 +206,7 @@
  
        schedule_work(&m->trigger_event);
  
-@@ -1239,6 +1283,9 @@ static int action_dev(struct multipath *m, struct dm_dev 
*dev,
+@@ -1240,6 +1284,9 @@ static int action_dev(struct multipath *
        struct pgpath *pgpath;
        struct priority_group *pg;
  
@@ -218,7 +216,7 @@
        list_for_each_entry(pg, &m->priority_groups, list) {
                list_for_each_entry(pgpath, &pg->pgpaths, list) {
                        if (pgpath->path.dev == dev)
-@@ -1434,12 +1481,15 @@ static void pg_init_done(void *data, int errors)
+@@ -1436,12 +1483,15 @@ out:
  
  static void activate_or_offline_path(struct pgpath *pgpath)
  {
@@ -239,7 +237,7 @@
  }
  
  static void activate_path_work(struct work_struct *work)
-@@ -1692,7 +1742,7 @@ static void multipath_status(struct dm_target *ti, 
status_type_t type,
+@@ -1693,7 +1743,7 @@ static void multipath_status(struct dm_t
                               pg->ps.type->info_args);
  
                        list_for_each_entry(p, &pg->pgpaths, list) {
@@ -248,7 +246,7 @@
                                       p->is_active ? "A" : "F",
                                       p->fail_count);
                                if (pg->ps.type->status)
-@@ -1718,7 +1768,7 @@ static void multipath_status(struct dm_target *ti, 
status_type_t type,
+@@ -1719,7 +1769,7 @@ static void multipath_status(struct dm_t
                               pg->ps.type->table_args);
  
                        list_for_each_entry(p, &pg->pgpaths, list) {
@@ -257,7 +255,7 @@
                                if (pg->ps.type->status)
                                        sz += pg->ps.type->status(&pg->ps,
                                              &p->path, type, result + sz,
-@@ -1805,7 +1855,7 @@ static int multipath_prepare_ioctl(struct dm_target *ti,
+@@ -1806,7 +1856,7 @@ static int multipath_prepare_ioctl(struc
        if (!current_pgpath)
                current_pgpath = choose_pgpath(m, 0);
  
@@ -266,7 +264,7 @@
                if (!test_bit(MPATHF_QUEUE_IO, &m->flags)) {
                        *bdev = current_pgpath->path.dev->bdev;
                        *mode = current_pgpath->path.dev->mode;
-@@ -1851,6 +1901,8 @@ static int multipath_iterate_devices(struct dm_target 
*ti,
+@@ -1852,6 +1902,8 @@ static int multipath_iterate_devices(str
  
        list_for_each_entry(pg, &m->priority_groups, list) {
                list_for_each_entry(p, &pg->pgpaths, list) {
@@ -275,7 +273,7 @@
                        ret = fn(ti, p->path.dev, ti->begin, ti->len, data);
                        if (ret)
                                goto out;
-@@ -1863,8 +1915,12 @@ static int multipath_iterate_devices(struct dm_target 
*ti,
+@@ -1864,8 +1916,12 @@ out:
  
  static int pgpath_busy(struct pgpath *pgpath)
  {
@@ -289,8 +287,6 @@
        return blk_lld_busy(q);
  }
  
-diff --git a/drivers/md/dm-mpath.h b/drivers/md/dm-mpath.h
-index e230f71..f97388d 100644
 --- a/drivers/md/dm-mpath.h
 +++ b/drivers/md/dm-mpath.h
 @@ -12,6 +12,7 @@
@@ -301,11 +297,9 @@
        struct dm_dev *dev;     /* Read-only */
        void *pscontext;        /* For path-selector use */
  };
-diff --git a/drivers/md/dm-table.c b/drivers/md/dm-table.c
-index 28a4071..a6190fb 100644
 --- a/drivers/md/dm-table.c
 +++ b/drivers/md/dm-table.c
-@@ -504,6 +504,9 @@ void dm_put_device(struct dm_target *ti, struct dm_dev *d)
+@@ -504,6 +504,9 @@ void dm_put_device(struct dm_target *ti,
        struct list_head *devices = &ti->table->devices;
        struct dm_dev_internal *dd;
  
@@ -315,6 +309,3 @@
        list_for_each_entry(dd, devices, list) {
                if (dd->dm_dev == d) {
                        found = 1;
--- 
-1.8.5.6
-
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/patches.suse/dvb_frontend-don-t-use-after-free-the-frontend-struct.patch 
new/patches.suse/dvb_frontend-don-t-use-after-free-the-frontend-struct.patch
--- 
old/patches.suse/dvb_frontend-don-t-use-after-free-the-frontend-struct.patch    
    1970-01-01 01:00:00.000000000 +0100
+++ 
new/patches.suse/dvb_frontend-don-t-use-after-free-the-frontend-struct.patch    
    2017-11-30 10:05:48.000000000 +0100
@@ -0,0 +1,186 @@
+From: Mauro Carvalho Chehab <mche...@s-opensource.com>
+Date: Tue, 7 Nov 2017 08:39:39 -0500
+Subject: dvb_frontend: don't use-after-free the frontend struct
+Git-commit: b1cb7372fa822af6c06c8045963571d13ad6348b
+Patch-mainline: v4.15-rc1
+References: bsc#1067087 CVE-2017-16648
+
+dvb_frontend_invoke_release() may free the frontend struct.
+So, the free logic can't update it anymore after calling it.
+
+That's OK, as __dvb_frontend_free() is called only when the
+krefs are zeroed, so nobody is using it anymore.
+
+That should fix the following KASAN error:
+
+The KASAN report looks like this (running on kernel 
3e0cc09a3a2c40ec1ffb6b4e12da86e98feccb11 (4.14-rc5+)):
+==================================================================
+BUG: KASAN: use-after-free in __dvb_frontend_free+0x113/0x120
+Write of size 8 at addr ffff880067d45a00 by task kworker/0:1/24
+
+CPU: 0 PID: 24 Comm: kworker/0:1 Not tainted 4.14.0-rc5-43687-g06ab8a23e0e6 
#545
+Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
+Workqueue: usb_hub_wq hub_event
+Call Trace:
+ __dump_stack lib/dump_stack.c:16
+ dump_stack+0x292/0x395 lib/dump_stack.c:52
+ print_address_description+0x78/0x280 mm/kasan/report.c:252
+ kasan_report_error mm/kasan/report.c:351
+ kasan_report+0x23d/0x350 mm/kasan/report.c:409
+ __asan_report_store8_noabort+0x1c/0x20 mm/kasan/report.c:435
+ __dvb_frontend_free+0x113/0x120 drivers/media/dvb-core/dvb_frontend.c:156
+ dvb_frontend_put+0x59/0x70 drivers/media/dvb-core/dvb_frontend.c:176
+ dvb_frontend_detach+0x120/0x150 drivers/media/dvb-core/dvb_frontend.c:2803
+ dvb_usb_adapter_frontend_exit+0xd6/0x160 
drivers/media/usb/dvb-usb/dvb-usb-dvb.c:340
+ dvb_usb_adapter_exit drivers/media/usb/dvb-usb/dvb-usb-init.c:116
+ dvb_usb_exit+0x9b/0x200 drivers/media/usb/dvb-usb/dvb-usb-init.c:132
+ dvb_usb_device_exit+0xa5/0xf0 drivers/media/usb/dvb-usb/dvb-usb-init.c:295
+ usb_unbind_interface+0x21c/0xa90 drivers/usb/core/driver.c:423
+ __device_release_driver drivers/base/dd.c:861
+ device_release_driver_internal+0x4f1/0x5c0 drivers/base/dd.c:893
+ device_release_driver+0x1e/0x30 drivers/base/dd.c:918
+ bus_remove_device+0x2f4/0x4b0 drivers/base/bus.c:565
+ device_del+0x5c4/0xab0 drivers/base/core.c:1985
+ usb_disable_device+0x1e9/0x680 drivers/usb/core/message.c:1170
+ usb_disconnect+0x260/0x7a0 drivers/usb/core/hub.c:2124
+ hub_port_connect drivers/usb/core/hub.c:4754
+ hub_port_connect_change drivers/usb/core/hub.c:5009
+ port_event drivers/usb/core/hub.c:5115
+ hub_event+0x1318/0x3740 drivers/usb/core/hub.c:5195
+ process_one_work+0xc73/0x1d90 kernel/workqueue.c:2119
+ worker_thread+0x221/0x1850 kernel/workqueue.c:2253
+ kthread+0x363/0x440 kernel/kthread.c:231
+ ret_from_fork+0x2a/0x40 arch/x86/entry/entry_64.S:431
+
+Allocated by task 24:
+ save_stack_trace+0x1b/0x20 arch/x86/kernel/stacktrace.c:59
+ save_stack+0x43/0xd0 mm/kasan/kasan.c:447
+ set_track mm/kasan/kasan.c:459
+ kasan_kmalloc+0xad/0xe0 mm/kasan/kasan.c:551
+ kmem_cache_alloc_trace+0x11e/0x2d0 mm/slub.c:2772
+ kmalloc ./include/linux/slab.h:493
+ kzalloc ./include/linux/slab.h:666
+ dtt200u_fe_attach+0x4c/0x110 drivers/media/usb/dvb-usb/dtt200u-fe.c:212
+ dtt200u_frontend_attach+0x35/0x80 drivers/media/usb/dvb-usb/dtt200u.c:136
+ dvb_usb_adapter_frontend_init+0x32b/0x660 
drivers/media/usb/dvb-usb/dvb-usb-dvb.c:286
+ dvb_usb_adapter_init drivers/media/usb/dvb-usb/dvb-usb-init.c:86
+ dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:162
+ dvb_usb_device_init+0xf73/0x17f0 drivers/media/usb/dvb-usb/dvb-usb-init.c:277
+ dtt200u_usb_probe+0xa1/0xe0 drivers/media/usb/dvb-usb/dtt200u.c:155
+ usb_probe_interface+0x35d/0x8e0 drivers/usb/core/driver.c:361
+ really_probe drivers/base/dd.c:413
+ driver_probe_device+0x610/0xa00 drivers/base/dd.c:557
+ __device_attach_driver+0x230/0x290 drivers/base/dd.c:653
+ bus_for_each_drv+0x161/0x210 drivers/base/bus.c:463
+ __device_attach+0x26b/0x3c0 drivers/base/dd.c:710
+ device_initial_probe+0x1f/0x30 drivers/base/dd.c:757
+ bus_probe_device+0x1eb/0x290 drivers/base/bus.c:523
+ device_add+0xd0b/0x1660 drivers/base/core.c:1835
+ usb_set_configuration+0x104e/0x1870 drivers/usb/core/message.c:1932
+ generic_probe+0x73/0xe0 drivers/usb/core/generic.c:174
+ usb_probe_device+0xaf/0xe0 drivers/usb/core/driver.c:266
+ really_probe drivers/base/dd.c:413
+ driver_probe_device+0x610/0xa00 drivers/base/dd.c:557
+ __device_attach_driver+0x230/0x290 drivers/base/dd.c:653
+ bus_for_each_drv+0x161/0x210 drivers/base/bus.c:463
+ __device_attach+0x26b/0x3c0 drivers/base/dd.c:710
+ device_initial_probe+0x1f/0x30 drivers/base/dd.c:757
+ bus_probe_device+0x1eb/0x290 drivers/base/bus.c:523
+ device_add+0xd0b/0x1660 drivers/base/core.c:1835
+ usb_new_device+0x7b8/0x1020 drivers/usb/core/hub.c:2457
+ hub_port_connect drivers/usb/core/hub.c:4903
+ hub_port_connect_change drivers/usb/core/hub.c:5009
+ port_event drivers/usb/core/hub.c:5115
+ hub_event+0x194d/0x3740 drivers/usb/core/hub.c:5195
+ process_one_work+0xc73/0x1d90 kernel/workqueue.c:2119
+ worker_thread+0x221/0x1850 kernel/workqueue.c:2253
+ kthread+0x363/0x440 kernel/kthread.c:231
+ ret_from_fork+0x2a/0x40 arch/x86/entry/entry_64.S:431
+
+Freed by task 24:
+ save_stack_trace+0x1b/0x20 arch/x86/kernel/stacktrace.c:59
+ save_stack+0x43/0xd0 mm/kasan/kasan.c:447
+ set_track mm/kasan/kasan.c:459
+ kasan_slab_free+0x72/0xc0 mm/kasan/kasan.c:524
+ slab_free_hook mm/slub.c:1390
+ slab_free_freelist_hook mm/slub.c:1412
+ slab_free mm/slub.c:2988
+ kfree+0xf6/0x2f0 mm/slub.c:3919
+ dtt200u_fe_release+0x3c/0x50 drivers/media/usb/dvb-usb/dtt200u-fe.c:202
+ dvb_frontend_invoke_release.part.13+0x1c/0x30 
drivers/media/dvb-core/dvb_frontend.c:2790
+ dvb_frontend_invoke_release drivers/media/dvb-core/dvb_frontend.c:2789
+ __dvb_frontend_free+0xad/0x120 drivers/media/dvb-core/dvb_frontend.c:153
+ dvb_frontend_put+0x59/0x70 drivers/media/dvb-core/dvb_frontend.c:176
+ dvb_frontend_detach+0x120/0x150 drivers/media/dvb-core/dvb_frontend.c:2803
+ dvb_usb_adapter_frontend_exit+0xd6/0x160 
drivers/media/usb/dvb-usb/dvb-usb-dvb.c:340
+ dvb_usb_adapter_exit drivers/media/usb/dvb-usb/dvb-usb-init.c:116
+ dvb_usb_exit+0x9b/0x200 drivers/media/usb/dvb-usb/dvb-usb-init.c:132
+ dvb_usb_device_exit+0xa5/0xf0 drivers/media/usb/dvb-usb/dvb-usb-init.c:295
+ usb_unbind_interface+0x21c/0xa90 drivers/usb/core/driver.c:423
+ __device_release_driver drivers/base/dd.c:861
+ device_release_driver_internal+0x4f1/0x5c0 drivers/base/dd.c:893
+ device_release_driver+0x1e/0x30 drivers/base/dd.c:918
+ bus_remove_device+0x2f4/0x4b0 drivers/base/bus.c:565
+ device_del+0x5c4/0xab0 drivers/base/core.c:1985
+ usb_disable_device+0x1e9/0x680 drivers/usb/core/message.c:1170
+ usb_disconnect+0x260/0x7a0 drivers/usb/core/hub.c:2124
+ hub_port_connect drivers/usb/core/hub.c:4754
+ hub_port_connect_change drivers/usb/core/hub.c:5009
+ port_event drivers/usb/core/hub.c:5115
+ hub_event+0x1318/0x3740 drivers/usb/core/hub.c:5195
+ process_one_work+0xc73/0x1d90 kernel/workqueue.c:2119
+ worker_thread+0x221/0x1850 kernel/workqueue.c:2253
+ kthread+0x363/0x440 kernel/kthread.c:231
+ ret_from_fork+0x2a/0x40 arch/x86/entry/entry_64.S:431
+
+The buggy address belongs to the object at ffff880067d45500
+ which belongs to the cache kmalloc-2048 of size 2048
+The buggy address is located 1280 bytes inside of
+ 2048-byte region [ffff880067d45500, ffff880067d45d00)
+The buggy address belongs to the page:
+page:ffffea00019f5000 count:1 mapcount:0 mapping:          (null)
+index:0x0 compound_mapcount: 0
+flags: 0x100000000008100(slab|head)
+raw: 0100000000008100 0000000000000000 0000000000000000 00000001000f000f
+raw: dead000000000100 dead000000000200 ffff88006c002d80 0000000000000000
+page dumped because: kasan: bad access detected
+
+Memory state around the buggy address:
+ ffff880067d45900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
+ ffff880067d45980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
+ ffff880067d45a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
+                   ^
+ ffff880067d45a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
+ ffff880067d45b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
+==================================================================
+
+Fixes: ead666000a5f ("media: dvb_frontend: only use kref after initialized")
+
+Reported-by: Andrey Konovalov <andreyk...@google.com>
+Suggested-by: Matthias Schwarzott <z...@gentoo.org>
+Tested-by: Andrey Konovalov <andreyk...@google.com>
+Signed-off-by: Mauro Carvalho Chehab <mche...@s-opensource.com>
+Acked-by: Borislav Petkov <b...@suse.de>
+---
+ drivers/media/dvb-core/dvb_frontend.c | 7 ++-----
+ 1 file changed, 2 insertions(+), 5 deletions(-)
+
+diff --git a/drivers/media/dvb-core/dvb_frontend.c 
b/drivers/media/dvb-core/dvb_frontend.c
+index d485d5f6cc88..3ad83359098b 100644
+--- a/drivers/media/dvb-core/dvb_frontend.c
++++ b/drivers/media/dvb-core/dvb_frontend.c
+@@ -150,11 +150,8 @@ static void __dvb_frontend_free(struct dvb_frontend *fe)
+ 
+       dvb_frontend_invoke_release(fe, fe->ops.release);
+ 
+-      if (!fepriv)
+-              return;
+-
+-      kfree(fepriv);
+-      fe->frontend_priv = NULL;
++      if (fepriv)
++              kfree(fepriv);
+ }
+ 
+ static void dvb_frontend_free(struct kref *ref)
+
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/patches.suse/iwlwifi-mvm-support-version-7-of-the-SCAN_REQ_UMAC-F.patch 
new/patches.suse/iwlwifi-mvm-support-version-7-of-the-SCAN_REQ_UMAC-F.patch
--- old/patches.suse/iwlwifi-mvm-support-version-7-of-the-SCAN_REQ_UMAC-F.patch 
2017-11-24 09:20:07.000000000 +0100
+++ new/patches.suse/iwlwifi-mvm-support-version-7-of-the-SCAN_REQ_UMAC-F.patch 
1970-01-01 01:00:00.000000000 +0100
@@ -1,316 +0,0 @@
-From: Luca Coelho <luciano.coe...@intel.com>
-Date: Fri, 10 Nov 2017 14:03:36 +0200
-Subject: iwlwifi: mvm: support version 7 of the SCAN_REQ_UMAC FW command
-Patch-mainline: Queued in subsystem maintainer repo
-Git-repo: 
git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-fixes.git
-Git-commit: dac4df1c5f2c34903f61b1bc4fc722e31b4199e7
-References: bnc#1068838
-
-Newer firmware versions (such as iwlwifi-8000C-34.ucode) have
-introduced an API change in the SCAN_REQ_UMAC command that is not
-backwards compatible.  The driver needs to detect and use the new API
-format when the firmware reports it, otherwise the scan command will
-not work properly, causing a command timeout.
-
-Fix this by adding a TLV that tells the driver that the new API is in
-use and use the correct structures for it.
-
-This fixes https://bugzilla.kernel.org/show_bug.cgi?id=197591
-
-Fixes: d7a5b3e9e42e ("iwlwifi: mvm: bump API to 34 for 8000 and up")
-Signed-off-by: Luca Coelho <luciano.coe...@intel.com>
-Signed-off-by: Jiri Slaby <jsl...@suse.cz>
----
- drivers/net/wireless/intel/iwlwifi/fw/api/scan.h |   59 ++++++++++++---
- drivers/net/wireless/intel/iwlwifi/fw/file.h     |    1 
- drivers/net/wireless/intel/iwlwifi/mvm/mvm.h     |    6 +
- drivers/net/wireless/intel/iwlwifi/mvm/scan.c    |   86 
+++++++++++++++++------
- 4 files changed, 118 insertions(+), 34 deletions(-)
-
---- a/drivers/net/wireless/intel/iwlwifi/fw/api/scan.h
-+++ b/drivers/net/wireless/intel/iwlwifi/fw/api/scan.h
-@@ -531,6 +531,8 @@ struct iwl_scan_config_v1 {
- } __packed; /* SCAN_CONFIG_DB_CMD_API_S */
- 
- #define SCAN_TWO_LMACS 2
-+#define SCAN_LB_LMAC_IDX 0
-+#define SCAN_HB_LMAC_IDX 1
- 
- struct iwl_scan_config {
-       __le32 flags;
-@@ -578,6 +580,7 @@ enum iwl_umac_scan_general_flags {
-       IWL_UMAC_SCAN_GEN_FLAGS_MATCH                   = BIT(9),
-       IWL_UMAC_SCAN_GEN_FLAGS_EXTENDED_DWELL          = BIT(10),
-       IWL_UMAC_SCAN_GEN_FLAGS_LMAC2_FRAGMENTED        = BIT(11),
-+      IWL_UMAC_SCAN_GEN_FLAGS_ADAPTIVE_DWELL          = BIT(13),
- };
- 
- /**
-@@ -631,12 +634,17 @@ struct iwl_scan_req_umac_tail {
-  * @uid: scan id, &enum iwl_umac_scan_uid_offsets
-  * @ooc_priority: out of channel priority - &enum iwl_scan_priority
-  * @general_flags: &enum iwl_umac_scan_general_flags
-- * @reserved2: for future use and alignment
-  * @scan_start_mac_id: report the scan start TSF time according to this mac 
TSF
-  * @extended_dwell: dwell time for channels 1, 6 and 11
-  * @active_dwell: dwell time for active scan
-  * @passive_dwell: dwell time for passive scan
-  * @fragmented_dwell: dwell time for fragmented passive scan
-+ * @adwell_default_n_aps: for adaptive dwell the default number of APs
-+ *    per channel
-+ * @adwell_default_n_aps_social: for adaptive dwell the default
-+ *    number of APs per social (1,6,11) channel
-+ * @adwell_max_budget: for adaptive dwell the maximal budget of TU to be added
-+ *    to total scan time
-  * @max_out_time: max out of serving channel time, per LMAC - for CDB there
-  *    are 2 LMACs
-  * @suspend_time: max suspend time, per LMAC - for CDB there are 2 LMACs
-@@ -644,6 +652,8 @@ struct iwl_scan_req_umac_tail {
-  * @channel_flags: &enum iwl_scan_channel_flags
-  * @n_channels: num of channels in scan request
-  * @reserved: for future use and alignment
-+ * @reserved2: for future use and alignment
-+ * @reserved3: for future use and alignment
-  * @data: &struct iwl_scan_channel_cfg_umac and
-  *    &struct iwl_scan_req_umac_tail
-  */
-@@ -651,41 +661,64 @@ struct iwl_scan_req_umac {
-       __le32 flags;
-       __le32 uid;
-       __le32 ooc_priority;
--      /* SCAN_GENERAL_PARAMS_API_S_VER_4 */
-       __le16 general_flags;
--      u8 reserved2;
-+      u8 reserved;
-       u8 scan_start_mac_id;
--      u8 extended_dwell;
--      u8 active_dwell;
--      u8 passive_dwell;
--      u8 fragmented_dwell;
-       union {
-               struct {
-+                      u8 extended_dwell;
-+                      u8 active_dwell;
-+                      u8 passive_dwell;
-+                      u8 fragmented_dwell;
-                       __le32 max_out_time;
-                       __le32 suspend_time;
-                       __le32 scan_priority;
--                      /* SCAN_CHANNEL_PARAMS_API_S_VER_4 */
-+                      /* SCAN_CHANNEL_PARAMS_API_S_VER_1 */
-                       u8 channel_flags;
-                       u8 n_channels;
--                      __le16 reserved;
-+                      __le16 reserved2;
-                       u8 data[];
-               } v1; /* SCAN_REQUEST_CMD_UMAC_API_S_VER_1 */
-               struct {
-+                      u8 extended_dwell;
-+                      u8 active_dwell;
-+                      u8 passive_dwell;
-+                      u8 fragmented_dwell;
-                       __le32 max_out_time[SCAN_TWO_LMACS];
-                       __le32 suspend_time[SCAN_TWO_LMACS];
-                       __le32 scan_priority;
--                      /* SCAN_CHANNEL_PARAMS_API_S_VER_4 */
-+                      /* SCAN_CHANNEL_PARAMS_API_S_VER_1 */
-                       u8 channel_flags;
-                       u8 n_channels;
--                      __le16 reserved;
-+                      __le16 reserved2;
-                       u8 data[];
-               } v6; /* SCAN_REQUEST_CMD_UMAC_API_S_VER_6 */
-+              struct {
-+                      u8 active_dwell;
-+                      u8 passive_dwell;
-+                      u8 fragmented_dwell;
-+                      u8 adwell_default_n_aps;
-+                      u8 adwell_default_n_aps_social;
-+                      u8 reserved3;
-+                      __le16 adwell_max_budget;
-+                      __le32 max_out_time[SCAN_TWO_LMACS];
-+                      __le32 suspend_time[SCAN_TWO_LMACS];
-+                      __le32 scan_priority;
-+                      /* SCAN_CHANNEL_PARAMS_API_S_VER_1 */
-+                      u8 channel_flags;
-+                      u8 n_channels;
-+                      __le16 reserved2;
-+                      u8 data[];
-+              } v7; /* SCAN_REQUEST_CMD_UMAC_API_S_VER_7 */
-       };
- } __packed;
- 
--#define IWL_SCAN_REQ_UMAC_SIZE sizeof(struct iwl_scan_req_umac)
-+#define IWL_SCAN_REQ_UMAC_SIZE_V7 sizeof(struct iwl_scan_req_umac)
-+#define IWL_SCAN_REQ_UMAC_SIZE_V6 (sizeof(struct iwl_scan_req_umac) - \
-+                                 2 * sizeof(u8) - sizeof(__le16))
- #define IWL_SCAN_REQ_UMAC_SIZE_V1 (sizeof(struct iwl_scan_req_umac) - \
--                                 2 * sizeof(__le32))
-+                                 2 * sizeof(__le32) - 2 * sizeof(u8) - \
-+                                 sizeof(__le16))
- 
- /**
-  * struct iwl_umac_scan_abort
---- a/drivers/net/wireless/intel/iwlwifi/fw/file.h
-+++ b/drivers/net/wireless/intel/iwlwifi/fw/file.h
-@@ -262,6 +262,7 @@ enum iwl_ucode_tlv_api {
-       IWL_UCODE_TLV_API_STA_TYPE              = (__force 
iwl_ucode_tlv_api_t)30,
-       IWL_UCODE_TLV_API_NAN2_VER2             = (__force 
iwl_ucode_tlv_api_t)31,
-       /* API Set 1 */
-+      IWL_UCODE_TLV_API_ADAPTIVE_DWELL        = (__force 
iwl_ucode_tlv_api_t)32,
-       IWL_UCODE_TLV_API_NEW_BEACON_TEMPLATE   = (__force 
iwl_ucode_tlv_api_t)34,
-       IWL_UCODE_TLV_API_NEW_RX_STATS          = (__force 
iwl_ucode_tlv_api_t)35,
-       IWL_UCODE_TLV_API_COEX_ATS_EXTERNAL     = (__force 
iwl_ucode_tlv_api_t)37,
---- a/drivers/net/wireless/intel/iwlwifi/mvm/mvm.h
-+++ b/drivers/net/wireless/intel/iwlwifi/mvm/mvm.h
-@@ -1124,6 +1124,12 @@ static inline bool iwl_mvm_is_d0i3_suppo
-                           IWL_UCODE_TLV_CAPA_D0I3_SUPPORT);
- }
- 
-+static inline bool iwl_mvm_is_adaptive_dwell_supported(struct iwl_mvm *mvm)
-+{
-+      return fw_has_api(&mvm->fw->ucode_capa,
-+                        IWL_UCODE_TLV_API_ADAPTIVE_DWELL);
-+}
-+
- static inline bool iwl_mvm_enter_d0i3_on_suspend(struct iwl_mvm *mvm)
- {
-       /* For now we only use this mode to differentiate between
---- a/drivers/net/wireless/intel/iwlwifi/mvm/scan.c
-+++ b/drivers/net/wireless/intel/iwlwifi/mvm/scan.c
-@@ -130,6 +130,19 @@ struct iwl_mvm_scan_params {
-       u32 measurement_dwell;
- };
- 
-+static inline void *iwl_mvm_get_scan_req_umac_data(struct iwl_mvm *mvm)
-+{
-+      struct iwl_scan_req_umac *cmd = mvm->scan_cmd;
-+
-+      if (iwl_mvm_is_adaptive_dwell_supported(mvm))
-+              return (void *)&cmd->v7.data;
-+
-+      if (iwl_mvm_has_new_tx_api(mvm))
-+              return (void *)&cmd->v6.data;
-+
-+      return (void *)&cmd->v1.data;
-+}
-+
- static u8 iwl_mvm_scan_rx_ant(struct iwl_mvm *mvm)
- {
-       if (mvm->scan_rx_ant != ANT_NONE)
-@@ -1075,25 +1088,57 @@ static void iwl_mvm_scan_umac_dwell(stru
- {
-       struct iwl_mvm_scan_timing_params *timing = &scan_timing[params->type];
- 
-+      if (iwl_mvm_is_regular_scan(params))
-+              cmd->ooc_priority = cpu_to_le32(IWL_SCAN_PRIORITY_EXT_6);
-+      else
-+              cmd->ooc_priority = cpu_to_le32(IWL_SCAN_PRIORITY_EXT_2);
-+
-+      if (iwl_mvm_is_adaptive_dwell_supported(mvm)) {
-+              if (params->measurement_dwell) {
-+                      cmd->v7.active_dwell = params->measurement_dwell;
-+                      cmd->v7.passive_dwell = params->measurement_dwell;
-+              } else {
-+                      cmd->v7.active_dwell = IWL_SCAN_DWELL_ACTIVE;
-+                      cmd->v7.passive_dwell = IWL_SCAN_DWELL_PASSIVE;
-+              }
-+              cmd->v7.fragmented_dwell = IWL_SCAN_DWELL_FRAGMENTED;
-+
-+              cmd->v7.scan_priority = cpu_to_le32(IWL_SCAN_PRIORITY_EXT_6);
-+              cmd->v7.max_out_time[SCAN_LB_LMAC_IDX] =
-+                      cpu_to_le32(timing->max_out_time);
-+              cmd->v7.suspend_time[SCAN_LB_LMAC_IDX] =
-+                      cpu_to_le32(timing->suspend_time);
-+              if (iwl_mvm_is_cdb_supported(mvm)) {
-+                      cmd->v7.max_out_time[SCAN_HB_LMAC_IDX] =
-+                              cpu_to_le32(timing->max_out_time);
-+                      cmd->v7.suspend_time[SCAN_HB_LMAC_IDX] =
-+                              cpu_to_le32(timing->suspend_time);
-+              }
-+
-+              return;
-+      }
-+
-       if (params->measurement_dwell) {
--              cmd->active_dwell = params->measurement_dwell;
--              cmd->passive_dwell = params->measurement_dwell;
--              cmd->extended_dwell = params->measurement_dwell;
-+              cmd->v1.active_dwell = params->measurement_dwell;
-+              cmd->v1.passive_dwell = params->measurement_dwell;
-+              cmd->v1.extended_dwell = params->measurement_dwell;
-       } else {
--              cmd->active_dwell = IWL_SCAN_DWELL_ACTIVE;
--              cmd->passive_dwell = IWL_SCAN_DWELL_PASSIVE;
--              cmd->extended_dwell = IWL_SCAN_DWELL_EXTENDED;
-+              cmd->v1.active_dwell = IWL_SCAN_DWELL_ACTIVE;
-+              cmd->v1.passive_dwell = IWL_SCAN_DWELL_PASSIVE;
-+              cmd->v1.extended_dwell = IWL_SCAN_DWELL_EXTENDED;
-       }
--      cmd->fragmented_dwell = IWL_SCAN_DWELL_FRAGMENTED;
-+      cmd->v1.fragmented_dwell = IWL_SCAN_DWELL_FRAGMENTED;
- 
-       if (iwl_mvm_has_new_tx_api(mvm)) {
-               cmd->v6.scan_priority = cpu_to_le32(IWL_SCAN_PRIORITY_EXT_6);
--              cmd->v6.max_out_time[0] = cpu_to_le32(timing->max_out_time);
--              cmd->v6.suspend_time[0] = cpu_to_le32(timing->suspend_time);
-+              cmd->v6.max_out_time[SCAN_LB_LMAC_IDX] =
-+                      cpu_to_le32(timing->max_out_time);
-+              cmd->v6.suspend_time[SCAN_LB_LMAC_IDX] =
-+                      cpu_to_le32(timing->suspend_time);
-               if (iwl_mvm_is_cdb_supported(mvm)) {
--                      cmd->v6.max_out_time[1] =
-+                      cmd->v6.max_out_time[SCAN_HB_LMAC_IDX] =
-                               cpu_to_le32(timing->max_out_time);
--                      cmd->v6.suspend_time[1] =
-+                      cmd->v6.suspend_time[SCAN_HB_LMAC_IDX] =
-                               cpu_to_le32(timing->suspend_time);
-               }
-       } else {
-@@ -1102,11 +1147,6 @@ static void iwl_mvm_scan_umac_dwell(stru
-               cmd->v1.scan_priority =
-                       cpu_to_le32(IWL_SCAN_PRIORITY_EXT_6);
-       }
--
--      if (iwl_mvm_is_regular_scan(params))
--              cmd->ooc_priority = cpu_to_le32(IWL_SCAN_PRIORITY_EXT_6);
--      else
--              cmd->ooc_priority = cpu_to_le32(IWL_SCAN_PRIORITY_EXT_2);
- }
- 
- static void
-@@ -1178,8 +1218,7 @@ static int iwl_mvm_scan_umac(struct iwl_
-                            int type)
- {
-       struct iwl_scan_req_umac *cmd = mvm->scan_cmd;
--      void *cmd_data = iwl_mvm_has_new_tx_api(mvm) ?
--                       (void *)&cmd->v6.data : (void *)&cmd->v1.data;
-+      void *cmd_data = iwl_mvm_get_scan_req_umac_data(mvm);
-       struct iwl_scan_req_umac_tail *sec_part = cmd_data +
-               sizeof(struct iwl_scan_channel_cfg_umac) *
-                       mvm->fw->ucode_capa.n_scan_channels;
-@@ -1216,7 +1255,10 @@ static int iwl_mvm_scan_umac(struct iwl_
-                               IWL_SCAN_CHANNEL_FLAG_EBS_ACCURATE |
-                               IWL_SCAN_CHANNEL_FLAG_CACHE_ADD;
- 
--      if (iwl_mvm_has_new_tx_api(mvm)) {
-+      if (iwl_mvm_is_adaptive_dwell_supported(mvm)) {
-+              cmd->v7.channel_flags = channel_flags;
-+              cmd->v7.n_channels = params->n_channels;
-+      } else if (iwl_mvm_has_new_tx_api(mvm)) {
-               cmd->v6.channel_flags = channel_flags;
-               cmd->v6.n_channels = params->n_channels;
-       } else {
-@@ -1661,8 +1703,10 @@ int iwl_mvm_scan_size(struct iwl_mvm *mv
- {
-       int base_size = IWL_SCAN_REQ_UMAC_SIZE_V1;
- 
--      if (iwl_mvm_has_new_tx_api(mvm))
--              base_size = IWL_SCAN_REQ_UMAC_SIZE;
-+      if (iwl_mvm_is_adaptive_dwell_supported(mvm))
-+              base_size = IWL_SCAN_REQ_UMAC_SIZE_V7;
-+      else if (iwl_mvm_has_new_tx_api(mvm))
-+              base_size = IWL_SCAN_REQ_UMAC_SIZE_V6;
- 
-       if (fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_UMAC_SCAN))
-               return base_size +
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/patches.suse/media-cx231xx-cards-fix-NULL-deref-on-missing-associ 
new/patches.suse/media-cx231xx-cards-fix-NULL-deref-on-missing-associ
--- old/patches.suse/media-cx231xx-cards-fix-NULL-deref-on-missing-associ       
2017-11-24 09:20:07.000000000 +0100
+++ new/patches.suse/media-cx231xx-cards-fix-NULL-deref-on-missing-associ       
1970-01-01 01:00:00.000000000 +0100
@@ -1,38 +0,0 @@
-From 6c3b047fa2d2286d5e438bcb470c7b1a49f415f6 Mon Sep 17 00:00:00 2001
-From: Johan Hovold <jo...@kernel.org>
-Date: Thu, 21 Sep 2017 05:40:18 -0300
-Subject: [PATCH] [media] cx231xx-cards: fix NULL-deref on missing association 
descriptor
-Git-commit: 6c3b047fa2d2286d5e438bcb470c7b1a49f415f6
-Git-repo: git://linuxtv.org/mchehab/media-next.git
-Patch-mainline: Queued in subsystem maintainer repo
-References: CVE-2017-16536 bsc#1066606
-
-Make sure to check that we actually have an Interface Association
-Descriptor before dereferencing it during probe to avoid dereferencing a
-NULL-pointer.
-
-Fixes: e0d3bafd0258 ("V4L/DVB (10954): Add cx231xx USB driver")
-
-Cc: stable <sta...@vger.kernel.org>     # 2.6.30
-Reported-by: Andrey Konovalov <andreyk...@google.com>
-Signed-off-by: Johan Hovold <jo...@kernel.org>
-Tested-by: Andrey Konovalov <andreyk...@google.com>
-Signed-off-by: Hans Verkuil <hans.verk...@cisco.com>
-Signed-off-by: Mauro Carvalho Chehab <mche...@osg.samsung.com>
-Acked-by: Takashi Iwai <ti...@suse.de>
-
----
- drivers/media/usb/cx231xx/cx231xx-cards.c |    2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
---- a/drivers/media/usb/cx231xx/cx231xx-cards.c
-+++ b/drivers/media/usb/cx231xx/cx231xx-cards.c
-@@ -1684,7 +1684,7 @@ static int cx231xx_usb_probe(struct usb_
-       nr = dev->devno;
- 
-       assoc_desc = udev->actconfig->intf_assoc[0];
--      if (assoc_desc->bFirstInterface != ifnum) {
-+      if (!assoc_desc || assoc_desc->bFirstInterface != ifnum) {
-               dev_err(d, "Not found matching IAD interface\n");
-               retval = -ENODEV;
-               goto err_if;
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/patches.suse/media-dvb-core-always-call-invoke_release-in-fe_free.patch 
new/patches.suse/media-dvb-core-always-call-invoke_release-in-fe_free.patch
--- old/patches.suse/media-dvb-core-always-call-invoke_release-in-fe_free.patch 
1970-01-01 01:00:00.000000000 +0100
+++ new/patches.suse/media-dvb-core-always-call-invoke_release-in-fe_free.patch 
2017-11-30 10:05:48.000000000 +0100
@@ -0,0 +1,51 @@
+From: Daniel Scheller <d.schel...@gmx.net>
+Date: Sun, 29 Oct 2017 11:43:22 -0400
+Subject: media: dvb-core: always call invoke_release() in fe_free()
+Git-commit: 62229de19ff2b7f3e0ebf4d48ad99061127d0281
+Patch-mainline: v4.15-rc1
+References: bsc#1067087
+
+Follow-up to: ead666000a5f ("media: dvb_frontend: only use kref after 
initialized")
+
+The aforementioned commit fixed refcount OOPSes when demod driver attaching
+succeeded but tuner driver didn't. However, the use count of the attached
+demod drivers don't go back to zero and thus couldn't be cleanly unloaded.
+Improve on this by calling dvb_frontend_invoke_release() in
+__dvb_frontend_free() regardless of fepriv being NULL, instead of returning
+when fepriv is NULL. This is safe to do since _invoke_release() will check
+for passed pointers being valid before calling the .release() function.
+
+[mche...@s-opensource.com: changed the logic a little bit to reduce
+ conflicts with another bug fix patch under review]
+Fixes: ead666000a5f ("media: dvb_frontend: only use kref after initialized")
+Signed-off-by: Daniel Scheller <d.schel...@gmx.net>
+Signed-off-by: Mauro Carvalho Chehab <mche...@s-opensource.com>
+Acked-by: Borislav Petkov <b...@suse.de>
+---
+ drivers/media/dvb-core/dvb_frontend.c | 9 +++++----
+ 1 file changed, 5 insertions(+), 4 deletions(-)
+
+diff --git a/drivers/media/dvb-core/dvb_frontend.c 
b/drivers/media/dvb-core/dvb_frontend.c
+index daaf969719e4..d485d5f6cc88 100644
+--- a/drivers/media/dvb-core/dvb_frontend.c
++++ b/drivers/media/dvb-core/dvb_frontend.c
+@@ -145,13 +145,14 @@ static void __dvb_frontend_free(struct dvb_frontend *fe)
+ {
+       struct dvb_frontend_private *fepriv = fe->frontend_priv;
+ 
+-      if (!fepriv)
+-              return;
+-
+-      dvb_free_device(fepriv->dvbdev);
++      if (fepriv)
++              dvb_free_device(fepriv->dvbdev);
+ 
+       dvb_frontend_invoke_release(fe, fe->ops.release);
+ 
++      if (!fepriv)
++              return;
++
+       kfree(fepriv);
+       fe->frontend_priv = NULL;
+ }
+
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/patches.suse/mmc-sdhci-Avoid-swiotlb-buffer-being-full.patch 
new/patches.suse/mmc-sdhci-Avoid-swiotlb-buffer-being-full.patch
--- old/patches.suse/mmc-sdhci-Avoid-swiotlb-buffer-being-full.patch    
1970-01-01 01:00:00.000000000 +0100
+++ new/patches.suse/mmc-sdhci-Avoid-swiotlb-buffer-being-full.patch    
2017-11-30 10:05:48.000000000 +0100
@@ -0,0 +1,77 @@
+From: Ulf Hansson <ulf.hans...@linaro.org>
+Date: Mon, 27 Nov 2017 11:28:50 +0100
+Subject: mmc: sdhci: Avoid swiotlb buffer being full
+Git-commit: 250dcd11466e06df64b92520e2c56bdae453581b
+Git-repo: git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/mmc.git#fixes
+Patch-mainline: Queued in subsystem maintainer repository
+References: bnc#1068877
+
+The commit de3ee99b097d ("mmc: Delete bounce buffer handling") deletes the
+bounce buffer handling, but also causes the max_req_size for sdhci to be
+increased, in case when max_segs == 1. This causes errors for sdhci-pci
+Ricoh variant, about the swiotlb buffer to become full.
+
+Fix the issue, by taking IO_TLB_SEGSIZE and IO_TLB_SHIFT into account when
+deciding the max_req_size for sdhci.
+
+Reported-by: Jiri Slaby <jsl...@suse.cz>
+Fixes: de3ee99b097d ("mmc: Delete bounce buffer handling")
+Cc: <sta...@vger.kernel.org> # v4.14+
+Signed-off-by: Ulf Hansson <ulf.hans...@linaro.org>
+Tested-by: Jiri Slaby <jsl...@suse.cz>
+Acked-by: Adrian Hunter <adrian.hun...@intel.com>
+Signed-off-by: Jiri Slaby <jsl...@suse.cz>
+---
+ drivers/mmc/host/sdhci.c |   28 ++++++++++++++++++----------
+ 1 file changed, 18 insertions(+), 10 deletions(-)
+
+--- a/drivers/mmc/host/sdhci.c
++++ b/drivers/mmc/host/sdhci.c
+@@ -21,6 +21,7 @@
+ #include <linux/dma-mapping.h>
+ #include <linux/slab.h>
+ #include <linux/scatterlist.h>
++#include <linux/swiotlb.h>
+ #include <linux/regulator/consumer.h>
+ #include <linux/pm_runtime.h>
+ #include <linux/of.h>
+@@ -3651,22 +3652,29 @@ int sdhci_setup_host(struct sdhci_host *
+       spin_lock_init(&host->lock);
+ 
+       /*
++       * Maximum number of sectors in one transfer. Limited by SDMA boundary
++       * size (512KiB). Note some tuning modes impose a 4MiB limit, but this
++       * is less anyway.
++       */
++      mmc->max_req_size = 524288;
++
++      /*
+        * Maximum number of segments. Depends on if the hardware
+        * can do scatter/gather or not.
+        */
+-      if (host->flags & SDHCI_USE_ADMA)
++      if (host->flags & SDHCI_USE_ADMA) {
+               mmc->max_segs = SDHCI_MAX_SEGS;
+-      else if (host->flags & SDHCI_USE_SDMA)
++      } else if (host->flags & SDHCI_USE_SDMA) {
+               mmc->max_segs = 1;
+-      else /* PIO */
++              if (swiotlb_max_segment()) {
++                      unsigned int max_req_size = (1 << IO_TLB_SHIFT) *
++                                              IO_TLB_SEGSIZE;
++                      mmc->max_req_size = min(mmc->max_req_size,
++                                              max_req_size);
++              }
++      } else { /* PIO */
+               mmc->max_segs = SDHCI_MAX_SEGS;
+-
+-      /*
+-       * Maximum number of sectors in one transfer. Limited by SDMA boundary
+-       * size (512KiB). Note some tuning modes impose a 4MiB limit, but this
+-       * is less anyway.
+-       */
+-      mmc->max_req_size = 524288;
++      }
+ 
+       /*
+        * Maximum segment size. Could be one segment with the maximum number
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/patches.suse/revert-mmc-Delete-bounce-buffer-handling.patch 
new/patches.suse/revert-mmc-Delete-bounce-buffer-handling.patch
--- old/patches.suse/revert-mmc-Delete-bounce-buffer-handling.patch     
2017-11-24 09:20:07.000000000 +0100
+++ new/patches.suse/revert-mmc-Delete-bounce-buffer-handling.patch     
1970-01-01 01:00:00.000000000 +0100
@@ -1,297 +0,0 @@
-From: Jiri Slaby <jsl...@suse.cz>
-Date: Mon, 20 Nov 2017 13:33:48 +0100
-Subject: Revert "mmc: Delete bounce buffer handling"
-Patch-mainline: not yet, going to discuss
-References: bnc#1068877
-
-This reverts commit de3ee99b097dd51938276e3af388cd4ad0f2750a as it
-breaks sd card reader on my laptop:
-sdhci-pci 0000:02:00.0: swiotlb buffer is full (sz: 311296 bytes)
-sdhci-pci 0000:02:00.0: DMA: Out of SW-IOMMU space for 311296 bytes
-sdhci-pci 0000:02:00.0: swiotlb buffer is full (sz: 311296 bytes)
-sdhci-pci 0000:02:00.0: DMA: Out of SW-IOMMU space for 311296 bytes
-------------[ cut here ]------------
-WARNING: CPU: 0 PID: 10410 at ../drivers/mmc/host/sdhci.c:848 
sdhci_send_command+0x674/0xa10 [sdhci]
-...
-
-Signed-off-by: Jiri Slaby <jsl...@suse.cz>
----
- drivers/mmc/core/block.c  |   3 ++
- drivers/mmc/core/queue.c  | 125 ++++++++++++++++++++++++++++++++++++++++++----
- drivers/mmc/core/queue.h  |   6 +++
- drivers/mmc/host/cavium.c |   2 +-
- drivers/mmc/host/pxamci.c |   6 ++-
- include/linux/mmc/host.h  |   2 +-
- 6 files changed, 132 insertions(+), 12 deletions(-)
-
-diff --git a/drivers/mmc/core/block.c b/drivers/mmc/core/block.c
-index 2ad7b5c691..29fc1e6628 100644
---- a/drivers/mmc/core/block.c
-+++ b/drivers/mmc/core/block.c
-@@ -1634,6 +1634,8 @@ static void mmc_blk_data_prep(struct mmc_queue *mq, 
struct mmc_queue_req *mqrq,
-       }
- 
-       mqrq->areq.mrq = &brq->mrq;
-+
-+      mmc_queue_bounce_pre(mqrq);
- }
- 
- static void mmc_blk_rw_rq_prep(struct mmc_queue_req *mqrq,
-@@ -1827,6 +1829,7 @@ static void mmc_blk_issue_rw_rq(struct mmc_queue *mq, 
struct request *new_req)
-               brq = &mq_rq->brq;
-               old_req = mmc_queue_req_to_req(mq_rq);
-               type = rq_data_dir(old_req) == READ ? MMC_BLK_READ : 
MMC_BLK_WRITE;
-+              mmc_queue_bounce_post(mq_rq);
- 
-               switch (status) {
-               case MMC_BLK_SUCCESS:
-diff --git a/drivers/mmc/core/queue.c b/drivers/mmc/core/queue.c
-index 0a4e77a5ba..74c663b1c0 100644
---- a/drivers/mmc/core/queue.c
-+++ b/drivers/mmc/core/queue.c
-@@ -23,6 +23,8 @@
- #include "core.h"
- #include "card.h"
- 
-+#define MMC_QUEUE_BOUNCESZ    65536
-+
- /*
-  * Prepare a MMC request. This just filters out odd stuff.
-  */
-@@ -148,6 +150,26 @@ static void mmc_queue_setup_discard(struct request_queue 
*q,
-               queue_flag_set_unlocked(QUEUE_FLAG_SECERASE, q);
- }
- 
-+static unsigned int mmc_queue_calc_bouncesz(struct mmc_host *host)
-+{
-+      unsigned int bouncesz = MMC_QUEUE_BOUNCESZ;
-+
-+      if (host->max_segs != 1 || (host->caps & MMC_CAP_NO_BOUNCE_BUFF))
-+              return 0;
-+
-+      if (bouncesz > host->max_req_size)
-+              bouncesz = host->max_req_size;
-+      if (bouncesz > host->max_seg_size)
-+              bouncesz = host->max_seg_size;
-+      if (bouncesz > host->max_blk_count * 512)
-+              bouncesz = host->max_blk_count * 512;
-+
-+      if (bouncesz <= 512)
-+              return 0;
-+
-+      return bouncesz;
-+}
-+
- /**
-  * mmc_init_request() - initialize the MMC-specific per-request data
-  * @q: the request queue
-@@ -162,9 +184,26 @@ static int mmc_init_request(struct request_queue *q, 
struct request *req,
-       struct mmc_card *card = mq->card;
-       struct mmc_host *host = card->host;
- 
--      mq_rq->sg = mmc_alloc_sg(host->max_segs, gfp);
--      if (!mq_rq->sg)
--              return -ENOMEM;
-+      if (card->bouncesz) {
-+              mq_rq->bounce_buf = kmalloc(card->bouncesz, gfp);
-+              if (!mq_rq->bounce_buf)
-+                      return -ENOMEM;
-+              if (card->bouncesz > 512) {
-+                      mq_rq->sg = mmc_alloc_sg(1, gfp);
-+                      if (!mq_rq->sg)
-+                              return -ENOMEM;
-+                      mq_rq->bounce_sg = mmc_alloc_sg(card->bouncesz / 512,
-+                                                      gfp);
-+                      if (!mq_rq->bounce_sg)
-+                              return -ENOMEM;
-+              }
-+      } else {
-+              mq_rq->bounce_buf = NULL;
-+              mq_rq->bounce_sg = NULL;
-+              mq_rq->sg = mmc_alloc_sg(host->max_segs, gfp);
-+              if (!mq_rq->sg)
-+                      return -ENOMEM;
-+      }
- 
-       return 0;
- }
-@@ -173,6 +212,13 @@ static void mmc_exit_request(struct request_queue *q, 
struct request *req)
- {
-       struct mmc_queue_req *mq_rq = req_to_mmc_queue_req(req);
- 
-+      /* It is OK to kfree(NULL) so this will be smooth */
-+      kfree(mq_rq->bounce_sg);
-+      mq_rq->bounce_sg = NULL;
-+
-+      kfree(mq_rq->bounce_buf);
-+      mq_rq->bounce_buf = NULL;
-+
-       kfree(mq_rq->sg);
-       mq_rq->sg = NULL;
- }
-@@ -196,6 +242,12 @@ int mmc_init_queue(struct mmc_queue *mq, struct mmc_card 
*card,
-       if (mmc_dev(host)->dma_mask && *mmc_dev(host)->dma_mask)
-               limit = (u64)dma_max_pfn(mmc_dev(host)) << PAGE_SHIFT;
- 
-+      /*
-+       * mmc_init_request() depends on card->bouncesz so it must be calculated
-+       * before blk_init_allocated_queue() starts allocating requests.
-+       */
-+      card->bouncesz = mmc_queue_calc_bouncesz(host);
-+
-       mq->card = card;
-       mq->queue = blk_alloc_queue(GFP_KERNEL);
-       if (!mq->queue)
-@@ -219,11 +271,17 @@ int mmc_init_queue(struct mmc_queue *mq, struct mmc_card 
*card,
-       if (mmc_can_erase(card))
-               mmc_queue_setup_discard(mq->queue, card);
- 
--      blk_queue_bounce_limit(mq->queue, limit);
--      blk_queue_max_hw_sectors(mq->queue,
--              min(host->max_blk_count, host->max_req_size / 512));
--      blk_queue_max_segments(mq->queue, host->max_segs);
--      blk_queue_max_segment_size(mq->queue, host->max_seg_size);
-+      if (card->bouncesz) {
-+              blk_queue_max_hw_sectors(mq->queue, card->bouncesz / 512);
-+              blk_queue_max_segments(mq->queue, card->bouncesz / 512);
-+              blk_queue_max_segment_size(mq->queue, card->bouncesz);
-+      } else {
-+              blk_queue_bounce_limit(mq->queue, limit);
-+              blk_queue_max_hw_sectors(mq->queue,
-+                      min(host->max_blk_count, host->max_req_size / 512));
-+              blk_queue_max_segments(mq->queue, host->max_segs);
-+              blk_queue_max_segment_size(mq->queue, host->max_seg_size);
-+      }
- 
-       sema_init(&mq->thread_sem, 1);
- 
-@@ -312,7 +370,56 @@ void mmc_queue_resume(struct mmc_queue *mq)
-  */
- unsigned int mmc_queue_map_sg(struct mmc_queue *mq, struct mmc_queue_req 
*mqrq)
- {
-+      unsigned int sg_len;
-+      size_t buflen;
-+      struct scatterlist *sg;
-       struct request *req = mmc_queue_req_to_req(mqrq);
-+      int i;
-+
-+      if (!mqrq->bounce_buf)
-+              return blk_rq_map_sg(mq->queue, req, mqrq->sg);
-+
-+      sg_len = blk_rq_map_sg(mq->queue, req, mqrq->bounce_sg);
-+
-+      mqrq->bounce_sg_len = sg_len;
-+
-+      buflen = 0;
-+      for_each_sg(mqrq->bounce_sg, sg, sg_len, i)
-+              buflen += sg->length;
-+
-+      sg_init_one(mqrq->sg, mqrq->bounce_buf, buflen);
-+
-+      return 1;
-+}
-+
-+/*
-+ * If writing, bounce the data to the buffer before the request
-+ * is sent to the host driver
-+ */
-+void mmc_queue_bounce_pre(struct mmc_queue_req *mqrq)
-+{
-+      if (!mqrq->bounce_buf)
-+              return;
-+
-+      if (rq_data_dir(mmc_queue_req_to_req(mqrq)) != WRITE)
-+              return;
-+
-+      sg_copy_to_buffer(mqrq->bounce_sg, mqrq->bounce_sg_len,
-+              mqrq->bounce_buf, mqrq->sg[0].length);
-+}
-+
-+/*
-+ * If reading, bounce the data from the buffer after the request
-+ * has been handled by the host driver
-+ */
-+void mmc_queue_bounce_post(struct mmc_queue_req *mqrq)
-+{
-+      if (!mqrq->bounce_buf)
-+              return;
-+
-+      if (rq_data_dir(mmc_queue_req_to_req(mqrq)) != READ)
-+              return;
- 
--      return blk_rq_map_sg(mq->queue, req, mqrq->sg);
-+      sg_copy_from_buffer(mqrq->bounce_sg, mqrq->bounce_sg_len,
-+              mqrq->bounce_buf, mqrq->sg[0].length);
- }
-diff --git a/drivers/mmc/core/queue.h b/drivers/mmc/core/queue.h
-index 6bfba32ffa..9f18b6b596 100644
---- a/drivers/mmc/core/queue.h
-+++ b/drivers/mmc/core/queue.h
-@@ -50,6 +50,9 @@ enum mmc_drv_op {
- struct mmc_queue_req {
-       struct mmc_blk_request  brq;
-       struct scatterlist      *sg;
-+      char                    *bounce_buf;
-+      struct scatterlist      *bounce_sg;
-+      unsigned int            bounce_sg_len;
-       struct mmc_async_req    areq;
-       enum mmc_drv_op         drv_op;
-       int                     drv_op_result;
-@@ -79,8 +82,11 @@ extern int mmc_init_queue(struct mmc_queue *, struct 
mmc_card *, spinlock_t *,
- extern void mmc_cleanup_queue(struct mmc_queue *);
- extern void mmc_queue_suspend(struct mmc_queue *);
- extern void mmc_queue_resume(struct mmc_queue *);
-+
- extern unsigned int mmc_queue_map_sg(struct mmc_queue *,
-                                    struct mmc_queue_req *);
-+extern void mmc_queue_bounce_pre(struct mmc_queue_req *);
-+extern void mmc_queue_bounce_post(struct mmc_queue_req *);
- 
- extern int mmc_access_rpmb(struct mmc_queue *);
- 
-diff --git a/drivers/mmc/host/cavium.c b/drivers/mmc/host/cavium.c
-index fbd29f00fc..27fb625cbc 100644
---- a/drivers/mmc/host/cavium.c
-+++ b/drivers/mmc/host/cavium.c
-@@ -1038,7 +1038,7 @@ int cvm_mmc_of_slot_probe(struct device *dev, struct 
cvm_mmc_host *host)
-        */
-       mmc->caps |= MMC_CAP_MMC_HIGHSPEED | MMC_CAP_SD_HIGHSPEED |
-                    MMC_CAP_ERASE | MMC_CAP_CMD23 | MMC_CAP_POWER_OFF_CARD |
--                   MMC_CAP_3_3V_DDR;
-+                   MMC_CAP_3_3V_DDR | MMC_CAP_NO_BOUNCE_BUFF;
- 
-       if (host->use_sg)
-               mmc->max_segs = 16;
-diff --git a/drivers/mmc/host/pxamci.c b/drivers/mmc/host/pxamci.c
-index c763b40451..59ab194cb0 100644
---- a/drivers/mmc/host/pxamci.c
-+++ b/drivers/mmc/host/pxamci.c
-@@ -702,7 +702,11 @@ static int pxamci_probe(struct platform_device *pdev)
- 
-       pxamci_init_ocr(host);
- 
--      mmc->caps = 0;
-+      /*
-+       * This architecture used to disable bounce buffers through its
-+       * defconfig, now it is done at runtime as a host property.
-+       */
-+      mmc->caps = MMC_CAP_NO_BOUNCE_BUFF;
-       host->cmdat = 0;
-       if (!cpu_is_pxa25x()) {
-               mmc->caps |= MMC_CAP_4_BIT_DATA | MMC_CAP_SDIO_IRQ;
-diff --git a/include/linux/mmc/host.h b/include/linux/mmc/host.h
-index 9a43763a68..f3f2d07feb 100644
---- a/include/linux/mmc/host.h
-+++ b/include/linux/mmc/host.h
-@@ -316,7 +316,7 @@ struct mmc_host {
- #define MMC_CAP_UHS_SDR50     (1 << 18)       /* Host supports UHS SDR50 mode 
*/
- #define MMC_CAP_UHS_SDR104    (1 << 19)       /* Host supports UHS SDR104 
mode */
- #define MMC_CAP_UHS_DDR50     (1 << 20)       /* Host supports UHS DDR50 mode 
*/
--/* (1 << 21) is free for reuse */
-+#define MMC_CAP_NO_BOUNCE_BUFF        (1 << 21)       /* Disable bounce 
buffers on host */
- #define MMC_CAP_DRIVER_TYPE_A (1 << 23)       /* Host supports Driver Type A 
*/
- #define MMC_CAP_DRIVER_TYPE_C (1 << 24)       /* Host supports Driver Type C 
*/
- #define MMC_CAP_DRIVER_TYPE_D (1 << 25)       /* Host supports Driver Type D 
*/
--- 
-2.14.2
-
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/patches.suse/scsi-libfc-fix-ELS-request-handling.patch 
new/patches.suse/scsi-libfc-fix-ELS-request-handling.patch
--- old/patches.suse/scsi-libfc-fix-ELS-request-handling.patch  1970-01-01 
01:00:00.000000000 +0100
+++ new/patches.suse/scsi-libfc-fix-ELS-request-handling.patch  2017-11-30 
10:05:48.000000000 +0100
@@ -0,0 +1,40 @@
+From b998b7a35e03adad919b42c729e54e40aa7d1556 Mon Sep 17 00:00:00 2001
+From: Martin Wilck <mwi...@suse.com>
+Date: Sat, 25 Nov 2017 19:21:56 +0100
+Subject: [PATCH] scsi: libfc: fix ELS request handling
+Patch-Mainline: Not yet, submitted to linux-scsi ML on 2017-11-25
+References: bsc#1069801
+
+The modification of fc_lport_recv_els_req() in commit fcabb09e59a7
+(merged in 4.12-rc1) caused certain requests not to be handled at all.
+Fix that.
+
+Fixes: fcabb09e59a7 "scsi: libfc: directly call ELS request handlers"
+Signed-off-by: Martin Wilck <mwi...@suse.com>
+Reviewed-by: Johannes Thumshirn <jthumsh...@suse.de>
+---
+ drivers/scsi/libfc/fc_lport.c | 4 ++++
+ 1 file changed, 4 insertions(+)
+
+diff --git a/drivers/scsi/libfc/fc_lport.c b/drivers/scsi/libfc/fc_lport.c
+index 2fd0ec651170..787e82435241 100644
+--- a/drivers/scsi/libfc/fc_lport.c
++++ b/drivers/scsi/libfc/fc_lport.c
+@@ -904,10 +904,14 @@ static void fc_lport_recv_els_req(struct fc_lport *lport,
+               case ELS_FLOGI:
+                       if (!lport->point_to_multipoint)
+                               fc_lport_recv_flogi_req(lport, fp);
++                      else
++                              fc_rport_recv_req(lport, fp);
+                       break;
+               case ELS_LOGO:
+                       if (fc_frame_sid(fp) == FC_FID_FLOGI)
+                               fc_lport_recv_logo_req(lport, fp);
++                      else
++                              fc_rport_recv_req(lport, fp);
+                       break;
+               case ELS_RSCN:
+                       lport->tt.disc_recv_req(lport, fp);
+-- 
+2.15.0
+

++++++ series.conf ++++++
--- /var/tmp/diff_new_pack.WG9k7P/_old  2017-12-05 01:27:23.551501226 +0100
+++ /var/tmp/diff_new_pack.WG9k7P/_new  2017-12-05 01:27:23.551501226 +0100
@@ -82,6 +82,200 @@
        
patches.kernel.org/4.14.2-018-coda-fix-kernel-memory-exposure-attempt-in-fsy.patch
        
patches.kernel.org/4.14.2-019-ipmi-Prefer-ACPI-system-interfaces-over-SMBIOS.patch
        patches.kernel.org/4.14.2-020-Linux-4.14.2.patch
+       
patches.kernel.org/4.14.3-001-s390-fix-transactional-execution-control-regis.patch
+       
patches.kernel.org/4.14.3-002-s390-noexec-execute-kexec-datamover-without-DA.patch
+       
patches.kernel.org/4.14.3-003-s390-runtime-instrumention-fix-possible-memory.patch
+       
patches.kernel.org/4.14.3-004-s390-guarded-storage-fix-possible-memory-corru.patch
+       
patches.kernel.org/4.14.3-005-s390-disassembler-add-missing-end-marker-for-e.patch
+       
patches.kernel.org/4.14.3-006-s390-disassembler-increase-show_code-buffer-si.patch
+       
patches.kernel.org/4.14.3-007-ACPI-PM-Fix-acpi_pm_notifier_lock-vs-flush_wor.patch
+       
patches.kernel.org/4.14.3-008-ACPI-EC-Fix-regression-related-to-triggering-s.patch
+       
patches.kernel.org/4.14.3-009-cpufreq-schedutil-Reset-cached_raw_freq-when-n.patch
+       
patches.kernel.org/4.14.3-010-serdev-fix-registration-of-second-slave.patch
+       patches.kernel.org/4.14.3-011-sched-Make-resched_cpu-unconditional.patch
+       
patches.kernel.org/4.14.3-012-lib-mpi-call-cond_resched-from-mpi_powm-loop.patch
+       
patches.kernel.org/4.14.3-013-x86-boot-Fix-boot-failure-when-SMP-MP-table-is.patch
+       
patches.kernel.org/4.14.3-014-x86-decoder-Add-new-TEST-instruction-pattern.patch
+       
patches.kernel.org/4.14.3-015-x86-entry-64-Fix-entry_SYSCALL_64_after_hwfram.patch
+       
patches.kernel.org/4.14.3-016-x86-entry-64-Add-missing-irqflags-tracing-to-n.patch
+       
patches.kernel.org/4.14.3-017-perf-x86-intel-Hide-TSX-events-when-RTM-is-not.patch
+       
patches.kernel.org/4.14.3-018-arm64-Implement-arch-specific-pte_access_permi.patch
+       
patches.kernel.org/4.14.3-019-ARM-8722-1-mm-make-STRICT_KERNEL_RWX-effective.patch
+       
patches.kernel.org/4.14.3-020-ARM-8721-1-mm-dump-check-hardware-RO-bit-for-L.patch
+       
patches.kernel.org/4.14.3-021-uapi-fix-linux-tls.h-userspace-compilation-err.patch
+       
patches.kernel.org/4.14.3-022-uapi-fix-linux-rxrpc.h-userspace-compilation-e.patch
+       
patches.kernel.org/4.14.3-023-MIPS-cmpxchg64-and-HAVE_VIRT_CPU_ACCOUNTING_GE.patch
+       patches.kernel.org/4.14.3-024-MIPS-ralink-Fix-MT7628-pinmux.patch
+       
patches.kernel.org/4.14.3-025-MIPS-ralink-Fix-typo-in-mt7628-pinmux-function.patch
+       
patches.kernel.org/4.14.3-026-net-mvneta-fix-handling-of-the-Tx-descriptor-c.patch
+       
patches.kernel.org/4.14.3-027-nbd-wait-uninterruptible-for-the-dead-timeout.patch
+       
patches.kernel.org/4.14.3-028-nbd-don-t-start-req-until-after-the-dead-conne.patch
+       patches.kernel.org/4.14.3-029-PM-OPP-Add-missing-of_node_put-np.patch
+       
patches.kernel.org/4.14.3-030-PCI-ASPM-Account-for-downstream-device-s-Port-.patch
+       
patches.kernel.org/4.14.3-031-PCI-ASPM-Use-correct-capability-pointer-to-pro.patch
+       patches.kernel.org/4.14.3-032-PCI-hv-Use-effective-affinity-mask.patch
+       
patches.kernel.org/4.14.3-033-PCI-Set-Cavium-ACS-capability-quirk-flags-to-a.patch
+       
patches.kernel.org/4.14.3-034-PCI-Apply-Cavium-ThunderX-ACS-quirk-to-more-Ro.patch
+       patches.kernel.org/4.14.3-035-ALSA-hda-Add-Raven-PCI-ID.patch
+       
patches.kernel.org/4.14.3-036-dm-integrity-allow-unaligned-bv_offset.patch
+       
patches.kernel.org/4.14.3-037-dm-cache-fix-race-condition-in-the-writeback-m.patch
+       patches.kernel.org/4.14.3-038-dm-crypt-allow-unaligned-bv_offset.patch
+       
patches.kernel.org/4.14.3-039-dm-zoned-ignore-last-smaller-runt-zone.patch
+       
patches.kernel.org/4.14.3-040-dm-mpath-remove-annoying-message-of-blk_get_re.patch
+       
patches.kernel.org/4.14.3-041-dm-bufio-fix-integer-overflow-when-limiting-ma.patch
+       
patches.kernel.org/4.14.3-042-ovl-Put-upperdentry-if-ovl_check_origin-fails.patch
+       
patches.kernel.org/4.14.3-043-dm-allocate-struct-mapped_device-with-kvzalloc.patch
+       
patches.kernel.org/4.14.3-044-sched-rt-Simplify-the-IPI-based-RT-balancing-l.patch
+       
patches.kernel.org/4.14.3-045-MIPS-pci-Remove-KERN_WARN-instance-inside-the-.patch
+       
patches.kernel.org/4.14.3-046-dm-fix-race-between-dm_get_from_kobject-and-__.patch
+       
patches.kernel.org/4.14.3-047-dm-discard-support-requires-all-targets-in-a-t.patch
+       
patches.kernel.org/4.14.3-048-MIPS-Fix-odd-fp-register-warnings-with-MIPS64r.patch
+       
patches.kernel.org/4.14.3-049-MIPS-Fix-MIPS64-FP-save-restore-on-32-bit-kern.patch
+       
patches.kernel.org/4.14.3-050-MIPS-dts-remove-bogus-bcm96358nb4ser.dtb-from-.patch
+       
patches.kernel.org/4.14.3-051-MIPS-Fix-an-n32-core-file-generation-regset-su.patch
+       
patches.kernel.org/4.14.3-052-MIPS-BCM47XX-Fix-LED-inversion-for-WRT54GSv1.patch
+       
patches.kernel.org/4.14.3-053-MIPS-math-emu-Fix-final-emulation-phase-for-ce.patch
+       
patches.kernel.org/4.14.3-054-rt2x00usb-mark-device-removed-when-get-ENOENT-.patch
+       
patches.kernel.org/4.14.3-055-mm-z3fold.c-use-kref-to-prevent-page-free-comp.patch
+       
patches.kernel.org/4.14.3-056-autofs-don-t-fail-mount-for-transient-error.patch
+       
patches.kernel.org/4.14.3-057-nilfs2-fix-race-condition-that-causes-file-sys.patch
+       
patches.kernel.org/4.14.3-058-fscrypt-lock-mutex-before-checking-for-bounce-.patch
+       
patches.kernel.org/4.14.3-059-eCryptfs-use-after-free-in-ecryptfs_release_me.patch
+       
patches.kernel.org/4.14.3-060-libceph-don-t-WARN-if-user-tries-to-add-invali.patch
+       
patches.kernel.org/4.14.3-061-bcache-check-ca-alloc_thread-initialized-befor.patch
+       
patches.kernel.org/4.14.3-062-fs-guard_bio_eod-needs-to-consider-partitions.patch
+       
patches.kernel.org/4.14.3-063-fanotify-fix-fsnotify_prepare_user_wait-failur.patch
+       patches.kernel.org/4.14.3-064-isofs-fix-timestamps-beyond-2027.patch
+       
patches.kernel.org/4.14.3-065-btrfs-change-how-we-decide-to-commit-transacti.patch
+       
patches.kernel.org/4.14.3-066-f2fs-expose-some-sectors-to-user-in-inline-dat.patch
+       
patches.kernel.org/4.14.3-067-NFS-Fix-typo-in-nomigration-mount-option.patch
+       
patches.kernel.org/4.14.3-068-NFS-Revert-NFS-Move-the-flock-open-mode-check-.patch
+       patches.kernel.org/4.14.3-069-nfs-Fix-ugly-referral-attributes.patch
+       patches.kernel.org/4.14.3-070-NFS-Avoid-RCU-usage-in-tracepoints.patch
+       
patches.kernel.org/4.14.3-071-NFS-revalidate-.-etc-correctly-on-open.patch
+       
patches.kernel.org/4.14.3-072-nfsd-deal-with-revoked-delegations-appropriate.patch
+       
patches.kernel.org/4.14.3-073-rtlwifi-rtl8192ee-Fix-memory-leak-when-loading.patch
+       
patches.kernel.org/4.14.3-074-rtlwifi-fix-uninitialized-rtlhal-last_suspend_.patch
+       
patches.kernel.org/4.14.3-075-iwlwifi-fix-firmware-names-for-9000-and-A000-s.patch
+       
patches.kernel.org/4.14.3-076-md-fix-deadlock-error-in-recent-patch.patch
+       
patches.kernel.org/4.14.3-077-md-don-t-check-MD_SB_CHANGE_CLEAN-in-md_allow_.patch
+       
patches.kernel.org/4.14.3-078-Bluetooth-btqcomsmd-Add-support-for-BD-address.patch
+       patches.kernel.org/4.14.3-079-md-bitmap-revert-a-patch.patch
+       
patches.kernel.org/4.14.3-080-fsnotify-clean-up-fsnotify_prepare-finish_user.patch
+       
patches.kernel.org/4.14.3-081-fsnotify-pin-both-inode-and-vfsmount-mark.patch
+       
patches.kernel.org/4.14.3-082-fsnotify-fix-pinning-group-in-fsnotify_prepare.patch
+       
patches.kernel.org/4.14.3-083-ata-fixes-kernel-crash-while-tracing-ata_eh_li.patch
+       
patches.kernel.org/4.14.3-084-ext4-fix-interaction-between-i_size-fallocate-.patch
+       
patches.kernel.org/4.14.3-085-ext4-prevent-data-corruption-with-inline-data-.patch
+       
patches.kernel.org/4.14.3-086-ext4-prevent-data-corruption-with-journaling-D.patch
+       
patches.kernel.org/4.14.3-087-ALSA-pcm-update-tstamp-only-if-audio_tstamp-ch.patch
+       
patches.kernel.org/4.14.3-088-ALSA-usb-audio-Add-sanity-checks-to-FE-parser.patch
+       
patches.kernel.org/4.14.3-089-ALSA-usb-audio-Fix-potential-out-of-bound-acce.patch
+       
patches.kernel.org/4.14.3-090-ALSA-usb-audio-Add-sanity-checks-in-v2-clock-p.patch
+       
patches.kernel.org/4.14.3-091-ALSA-timer-Remove-kernel-warning-at-compat-ioc.patch
+       
patches.kernel.org/4.14.3-092-ALSA-hda-realtek-Fix-ALC275-no-sound-issue.patch
+       
patches.kernel.org/4.14.3-093-ALSA-hda-Fix-too-short-HDMI-DP-chmap-reporting.patch
+       
patches.kernel.org/4.14.3-094-ALSA-hda-Fix-yet-remaining-issue-with-vmaster-.patch
+       
patches.kernel.org/4.14.3-095-ALSA-hda-realtek-Fix-ALC700-family-no-sound-is.patch
+       
patches.kernel.org/4.14.3-096-ASoC-sun8i-codec-Invert-Master-Slave-condition.patch
+       
patches.kernel.org/4.14.3-097-ASoC-sun8i-codec-Fix-left-and-right-channels-i.patch
+       
patches.kernel.org/4.14.3-098-ASoC-sun8i-codec-Set-the-BCLK-divider.patch
+       
patches.kernel.org/4.14.3-099-mfd-lpc_ich-Avoton-Rangeley-uses-SPI_BYT-metho.patch
+       
patches.kernel.org/4.14.3-100-fix-a-page-leak-in-vhost_scsi_iov_to_sgl-error.patch
+       
patches.kernel.org/4.14.3-101-9p-Fix-missing-commas-in-mount-options.patch
+       
patches.kernel.org/4.14.3-102-fs-9p-Compare-qid.path-in-v9fs_test_inode.patch
+       patches.kernel.org/4.14.3-103-net-9p-Switch-to-wait_event_killable.patch
+       
patches.kernel.org/4.14.3-104-scsi-qla2xxx-Suppress-a-kernel-complaint-in-ql.patch
+       
patches.kernel.org/4.14.3-105-scsi-sd_zbc-Fix-sd_zbc_read_zoned_characterist.patch
+       
patches.kernel.org/4.14.3-106-scsi-lpfc-fix-pci-hot-plug-crash-in-timer-mana.patch
+       
patches.kernel.org/4.14.3-107-scsi-lpfc-fix-pci-hot-plug-crash-in-list_add-c.patch
+       
patches.kernel.org/4.14.3-108-scsi-lpfc-Fix-crash-receiving-ELS-while-detach.patch
+       
patches.kernel.org/4.14.3-109-scsi-lpfc-Fix-FCP-hba_wqidx-assignment.patch
+       
patches.kernel.org/4.14.3-110-scsi-lpfc-Fix-oops-if-nvmet_fc_register_target.patch
+       
patches.kernel.org/4.14.3-111-iscsi-target-Make-TASK_REASSIGN-use-proper-se_.patch
+       
patches.kernel.org/4.14.3-112-iscsi-target-Fix-non-immediate-TMR-reference-l.patch
+       
patches.kernel.org/4.14.3-113-target-fix-null-pointer-regression-in-core_tmr.patch
+       
patches.kernel.org/4.14.3-114-target-fix-buffer-offset-in-core_scsi3_pri_rea.patch
+       
patches.kernel.org/4.14.3-115-target-Fix-QUEUE_FULL-SCSI-task-attribute-hand.patch
+       
patches.kernel.org/4.14.3-116-target-Fix-caw_sem-leak-in-transport_generic_r.patch
+       
patches.kernel.org/4.14.3-117-target-Fix-quiese-during-transport_write_pendi.patch
+       
patches.kernel.org/4.14.3-118-target-Avoid-early-CMD_T_PRE_EXECUTE-failures-.patch
+       
patches.kernel.org/4.14.3-119-mtd-Avoid-probe-failures-when-mtd-dbg.dfs_dir-.patch
+       patches.kernel.org/4.14.3-120-mtd-nand-Export-nand_reset-symbol.patch
+       
patches.kernel.org/4.14.3-121-mtd-nand-atmel-Actually-use-the-PM-ops.patch
+       patches.kernel.org/4.14.3-122-mtd-nand-omap2-Fix-subpage-write.patch
+       
patches.kernel.org/4.14.3-123-mtd-nand-Fix-writing-mtdoops-to-nand-flash.patch
+       
patches.kernel.org/4.14.3-124-mtd-nand-mtk-fix-infinite-ECC-decode-IRQ-issue.patch
+       
patches.kernel.org/4.14.3-125-mailbox-bcm-flexrm-mailbox-Fix-FlexRM-ring-flu.patch
+       
patches.kernel.org/4.14.3-126-p54-don-t-unregister-leds-when-they-are-not-in.patch
+       
patches.kernel.org/4.14.3-127-block-Fix-a-race-between-blk_cleanup_queue-and.patch
+       
patches.kernel.org/4.14.3-128-raid1-prevent-freeze_array-wait_all_barriers-d.patch
+       
patches.kernel.org/4.14.3-129-genirq-Track-whether-the-trigger-type-has-been.patch
+       
patches.kernel.org/4.14.3-130-irqchip-gic-v3-Fix-ppi-partitions-lookup.patch
+       
patches.kernel.org/4.14.3-131-lockd-double-unregister-of-inetaddr-notifiers.patch
+       
patches.kernel.org/4.14.3-132-KVM-PPC-Book3S-HV-Don-t-call-real-mode-XICS-hy.patch
+       
patches.kernel.org/4.14.3-133-KVM-nVMX-set-IDTR-and-GDTR-limits-when-loading.patch
+       patches.kernel.org/4.14.3-134-KVM-SVM-obey-guest-PAT.patch
+       
patches.kernel.org/4.14.3-135-kvm-vmx-Reinstate-support-for-CPUs-without-vir.patch
+       
patches.kernel.org/4.14.3-136-dax-fix-PMD-faults-on-zero-length-files.patch
+       
patches.kernel.org/4.14.3-137-dax-fix-general-protection-fault-in-dax_alloc_.patch
+       
patches.kernel.org/4.14.3-138-SUNRPC-Fix-tracepoint-storage-issues-with-svc_.patch
+       
patches.kernel.org/4.14.3-139-clk-ti-dra7-atl-clock-fix-child-node-lookups.patch
+       
patches.kernel.org/4.14.3-140-libnvdimm-dimm-clear-locked-status-on-successf.patch
+       
patches.kernel.org/4.14.3-141-libnvdimm-pfn-make-resource-attribute-only-rea.patch
+       
patches.kernel.org/4.14.3-142-libnvdimm-namespace-fix-label-initialization-t.patch
+       
patches.kernel.org/4.14.3-143-libnvdimm-region-make-resource-attribute-only-.patch
+       
patches.kernel.org/4.14.3-144-libnvdimm-namespace-make-resource-attribute-on.patch
+       
patches.kernel.org/4.14.3-145-svcrdma-Preserve-CB-send-buffer-across-retrans.patch
+       
patches.kernel.org/4.14.3-146-IB-srpt-Do-not-accept-invalid-initiator-port-n.patch
+       
patches.kernel.org/4.14.3-147-IB-cm-Fix-memory-corruption-in-handling-CM-req.patch
+       
patches.kernel.org/4.14.3-148-IB-hfi1-Fix-incorrect-available-receive-user-c.patch
+       
patches.kernel.org/4.14.3-149-IB-srp-Avoid-that-a-cable-pull-can-trigger-a-k.patch
+       
patches.kernel.org/4.14.3-150-IB-core-Avoid-crash-on-pkey-enforcement-failed.patch
+       
patches.kernel.org/4.14.3-151-IB-core-Only-maintain-real-QPs-in-the-security.patch
+       
patches.kernel.org/4.14.3-152-NFC-fix-device-allocation-error-return.patch
+       
patches.kernel.org/4.14.3-153-spi-nor-intel-spi-Fix-broken-software-sequenci.patch
+       
patches.kernel.org/4.14.3-154-i40e-Use-smp_rmb-rather-than-read_barrier_depe.patch
+       
patches.kernel.org/4.14.3-155-igb-Use-smp_rmb-rather-than-read_barrier_depen.patch
+       
patches.kernel.org/4.14.3-156-igbvf-Use-smp_rmb-rather-than-read_barrier_dep.patch
+       
patches.kernel.org/4.14.3-157-ixgbevf-Use-smp_rmb-rather-than-read_barrier_d.patch
+       
patches.kernel.org/4.14.3-158-i40evf-Use-smp_rmb-rather-than-read_barrier_de.patch
+       
patches.kernel.org/4.14.3-159-fm10k-Use-smp_rmb-rather-than-read_barrier_dep.patch
+       
patches.kernel.org/4.14.3-160-ixgbe-Fix-skb-list-corruption-on-Power-systems.patch
+       
patches.kernel.org/4.14.3-161-parisc-Fix-validity-check-of-pointer-size-argu.patch
+       
patches.kernel.org/4.14.3-162-powerpc-Fix-boot-on-BOOK3S_32-with-CONFIG_STRI.patch
+       
patches.kernel.org/4.14.3-163-powerpc-mm-radix-Fix-crashes-on-Power9-DD1-wit.patch
+       
patches.kernel.org/4.14.3-164-powerpc-perf-imc-Use-cpu_to_node-not-topology_.patch
+       
patches.kernel.org/4.14.3-165-powerpc-signal-Properly-handle-return-value-fr.patch
+       
patches.kernel.org/4.14.3-166-powerpc-64s-Fix-masking-of-SRR1-bits-on-instru.patch
+       
patches.kernel.org/4.14.3-167-powerpc-64s-radix-Fix-128TB-512TB-virtual-addr.patch
+       
patches.kernel.org/4.14.3-168-powerpc-64s-hash-Fix-512T-hint-detection-to-us.patch
+       
patches.kernel.org/4.14.3-169-powerpc-64s-hash-Fix-128TB-512TB-virtual-addre.patch
+       
patches.kernel.org/4.14.3-170-powerpc-64s-hash-Fix-fork-with-512TB-process-a.patch
+       
patches.kernel.org/4.14.3-171-powerpc-64s-hash-Allow-MAP_FIXED-allocations-t.patch
+       
patches.kernel.org/4.14.3-172-media-Don-t-do-DMA-on-stack-for-firmware-uploa.patch
+       patches.kernel.org/4.14.3-173-media-rc-check-for-integer-overflow.patch
+       
patches.kernel.org/4.14.3-174-media-rc-nec-decoder-should-not-send-both-repe.patch
+       
patches.kernel.org/4.14.3-175-cx231xx-cards-fix-NULL-deref-on-missing-associ.patch
+       
patches.kernel.org/4.14.3-176-media-v4l2-ctrl-Fix-flags-field-on-Control-eve.patch
+       
patches.kernel.org/4.14.3-177-media-venus-fix-wrong-size-on-dma_free.patch
+       
patches.kernel.org/4.14.3-178-media-venus-venc-fix-bytesused-v4l2_plane-fiel.patch
+       
patches.kernel.org/4.14.3-179-media-venus-reimplement-decoder-stop-command.patch
+       
patches.kernel.org/4.14.3-180-ARM64-dts-meson-gxl-Add-alternate-ARM-Trusted-.patch
+       
patches.kernel.org/4.14.3-181-iwlwifi-fix-wrong-struct-for-a000-device.patch
+       patches.kernel.org/4.14.3-182-iwlwifi-add-a-new-a000-device.patch
+       
patches.kernel.org/4.14.3-183-iwlwifi-pcie-sort-IDs-for-the-9000-series-for-.patch
+       
patches.kernel.org/4.14.3-184-iwlwifi-add-new-cards-for-a000-series.patch
+       
patches.kernel.org/4.14.3-185-iwlwifi-add-new-cards-for-8265-series.patch
+       
patches.kernel.org/4.14.3-186-iwlwifi-add-new-cards-for-8260-series.patch
+       
patches.kernel.org/4.14.3-187-iwlwifi-fix-PCI-IDs-and-configuration-mapping-.patch
+       
patches.kernel.org/4.14.3-188-iwlwifi-mvm-support-version-7-of-the-SCAN_REQ_.patch
+       
patches.kernel.org/4.14.3-189-e1000e-Fix-error-path-in-link-detection.patch
+       patches.kernel.org/4.14.3-190-e1000e-Fix-return-value-test.patch
+       
patches.kernel.org/4.14.3-191-e1000e-Separate-signaling-for-link-check-link-.patch
+       
patches.kernel.org/4.14.3-192-e1000e-Avoid-receiver-overrun-interrupt-bursts.patch
+       
patches.kernel.org/4.14.3-193-e1000e-fix-buffer-overrun-while-the-I219-is-pr.patch
+       patches.kernel.org/4.14.3-194-Linux-4.14.3.patch
 
        ########################################################
        # Build fixes that apply to the vanilla kernel too.
@@ -338,7 +532,9 @@
        patches.suse/scsi-scan-blist-update
 
        # revert
-       patches.suse/0002-md-bitmap-copy-correct-data-for-bitmap-super.patch
+
+       # bsc1069891
+       patches.suse/scsi-libfc-fix-ELS-request-handling.patch
 
        ########################################################
        # DRM/Video
@@ -348,7 +544,10 @@
        ########################################################
        # video4linux
        ########################################################
-       patches.suse/media-cx231xx-cards-fix-NULL-deref-on-missing-associ
+
+       # bsc#1067087 CVE-2017-16648
+       patches.suse/media-dvb-core-always-call-invoke_release-in-fe_free.patch
+       patches.suse/dvb_frontend-don-t-use-after-free-the-frontend-struct.patch
 
        ########################################################
        # Network
@@ -359,7 +558,6 @@
        ########################################################
        patches.suse/b43-missing-firmware-info.patch
        patches.suse/iwlwifi-expose-default-fallback-ucode-api
-       patches.suse/iwlwifi-mvm-support-version-7-of-the-SCAN_REQ_UMAC-F.patch
 
        ########################################################
        # ISDN
@@ -402,8 +600,8 @@
        ########################################################
        # Other driver fixes
        ########################################################
+       patches.suse/mmc-sdhci-Avoid-swiotlb-buffer-being-full.patch
 
-       patches.suse/revert-mmc-Delete-bounce-buffer-handling.patch
 
        ########################################################
        # Other drivers we have added to the tree

++++++ source-timestamp ++++++
--- /var/tmp/diff_new_pack.WG9k7P/_old  2017-12-05 01:27:23.587499918 +0100
+++ /var/tmp/diff_new_pack.WG9k7P/_new  2017-12-05 01:27:23.587499918 +0100
@@ -1,3 +1,3 @@
-2017-11-24 09:20:07 +0100
-GIT Revision: b0610fc12a3de5d90a17bfb04d0f1c82df57c4ea
+2017-11-30 10:05:48 +0100
+GIT Revision: a731a45e974e6a7b494bbd7eafc6f850dd4daeb6
 GIT Branch: stable

++++++ supported.conf ++++++
--- /var/tmp/diff_new_pack.WG9k7P/_old  2017-12-05 01:27:23.631498319 +0100
+++ /var/tmp/diff_new_pack.WG9k7P/_new  2017-12-05 01:27:23.635498174 +0100
@@ -356,7 +356,6 @@
                drivers/char/tpm/tpm_infineon
                drivers/char/tpm/tpm_nsc
                drivers/char/tpm/tpm_tis
-               drivers/char/tpm/tpm_xenu
 +external      drivers/char/viotape                            # IBM legacy 
iSeries virtual tape
                drivers/char/virtio_console
                drivers/clocksource/scx200_hrt
@@ -1865,27 +1864,6 @@
 +isa           drivers/watchdog/wdt
                drivers/watchdog/wdt_pci                        # Driver for 
the ICS PCI-WDT500/501 watchdog cards
                drivers/watchdog/xen_wdt                                # Xen 
pv watchdog driver
-               drivers/xen/blkback/blkbk                       # Xen block 
device backend
-               drivers/xen/blkback/blkback-pagemap
-+base          drivers/xen/blkfront/xenblk                     # Xen block 
device frontend
--              drivers/xen/blktap/blktap
-               drivers/xen/blktap2/blktap2
-               drivers/xen/blktap2-new/xen-blktap
-               drivers/xen/core/domctl
-               drivers/xen/evtchn
-               drivers/xen/gntdev/gntdev
-               drivers/xen/netback/netbk                       # Xen network 
device backend
--              drivers/xen/netback/netloop                     # Xen network 
loopback device
-+base          drivers/xen/netfront/xennet                     # Xen network 
device frontend
-               drivers/xen/pciback/pciback                     # Xen PCI 
device backend
-               drivers/xen/scsiback/xen-scsibk
-               drivers/xen/scsifront/xenscsi
-+external      drivers/xen/sfc_netback/sfc_netback
-+external      drivers/xen/sfc_netback/sfc_netfront
-+external      drivers/xen/sfc_netutil/sfc_netutil
-               drivers/xen/tpmback/tpmbk                       # Xen TPM 
device backend
-               drivers/xen/usbback/usbbk
-               drivers/xen/usbfront/xen-hcd
                drivers/xen/xen-acpi-processor
                drivers/xen/xen-evtchn
                drivers/xen/xen-gntalloc


Reply via email to