[PATCH 3.10 134/139] team: fix memory leaks

bugs. Fixes: 9b00cf2d1024 ("team: implement multipart netlink messages for options transfers") Signed-off-by: Pan Bian Acked-by: Jiri Pirko Signed-off-by: David S. Miller Signed-off-by: Willy Tarreau --- drivers/net/team/team.c | 8 ++-- 1 file changed, 6 insertions(+), 2

[PATCH 3.10 083/139] tcp: when rearming RTO, if RTO time is in past then fire RTO ASAP

ed-off-by: Eric Dumazet Signed-off-by: David S. Miller [wt: no need for usec_to_jiffies conversion in 3.10] Signed-off-by: Willy Tarreau --- net/ipv4/tcp_input.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/net/ipv4/tcp_input.c b/net/ipv4/tcp_input.c index 828835c..85d

[PATCH 3.10 132/139] btrfs: prevent to set invalid default subvolid

lid` mount options. Fixes: 6ef5ed0d386b ("Btrfs: add ioctl and incompat flag to set the default mount subvol") Cc: Signed-off-by: Satoru Takeuchi Reviewed-by: Qu Wenruo Reviewed-by: David Sterba Signed-off-by: David Sterba Signed-off-by: Willy Tarreau --- fs/btrfs/ioctl.c | 4 +++

[PATCH 3.10 062/139] md/bitmap: disable bitmap_resize for file-backed bitmaps.

resizing.") Cc: sta...@vger.kernel.org (v3.5+). Signed-off-by: NeilBrown Signed-off-by: Shaohua Li Signed-off-by: Willy Tarreau --- drivers/md/bitmap.c | 5 + 1 file changed, 5 insertions(+) diff --git a/drivers/md/bitmap.c b/drivers/md/bitmap.c index 37470ee..4d87442 100644 -

[PATCH 3.10 123/139] ACPI / APEI: Add missing synchronize_rcu() on NOTIFY_SCI removal

after it has been freed. Signed-off-by: James Morse Reviewed-by: "Huang, Ying" Fixes: 81e88fdc432a (ACPI, APEI, Generic Hardware Error Source POLL/IRQ/NMI notification type support) Signed-off-by: Rafael J. Wysocki Signed-off-by: Willy Tarreau --- drivers/acpi/apei/ghes.c | 1 + 1 fi

[PATCH 3.10 131/139] tracing: Erase irqsoff trace with empty write

o Yan Signed-off-by: Steven Rostedt (VMware) Signed-off-by: Willy Tarreau --- kernel/trace/trace.c | 10 -- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/kernel/trace/trace.c b/kernel/trace/trace.c index df820d9..359fbd3 100644 --- a/kernel/trace/trace.c +++ b/kernel/trace/

[PATCH 3.10 139/139] can: esd_usb2: Fix can_dlc value for received RTR, frames

received value. Fixes: 96d8e90382dc ("can: Add driver for esd CAN-USB/2 device") Signed-off-by: Stefan Mätje Cc: linux-stable Signed-off-by: Marc Kleine-Budde Signed-off-by: Willy Tarreau --- drivers/net/can/usb/esd_usb2.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git

[PATCH 3.10 049/139] scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace records

250a1352b95e ("[SCSI] zfcp: Redesign of the debug tracing for SCSI records.") Cc: Reviewed-by: Benjamin Block Signed-off-by: Benjamin Block Signed-off-by: Martin K. Petersen Signed-off-by: Willy Tarreau --- drivers/s390/scsi/zfcp_dbf.c | 21 + 1 file changed, 17 in

[PATCH 3.10 084/139] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0

issue. So this patch initializes rcv_mss to TCP_MIN_MSS instead of 0. Reported-by: Andrey Konovalov Signed-off-by: Wei Wang Signed-off-by: Eric Dumazet Signed-off-by: Neal Cardwell Signed-off-by: Yuchung Cheng Signed-off-by: David S. Miller Signed-off-by: Willy Tarreau --- net/ipv4/tcp.c |

[PATCH 3.10 133/139] IB/ipoib: rtnl_unlock can not come after free_netdev

eras Daoud Signed-off-by: Erez Shitrit Reviewed-by: Yuval Shaia Signed-off-by: Leon Romanovsky Signed-off-by: Doug Ledford Signed-off-by: Willy Tarreau --- drivers/infiniband/ulp/ipoib/ipoib_vlan.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/infiniband

[PATCH 3.10 106/139] cpufreq: s3c2416: double free on driver init error path

Reviewed-by: Krzysztof Kozlowski Acked-by: Viresh Kumar Signed-off-by: Rafael J. Wysocki Signed-off-by: Willy Tarreau --- drivers/cpufreq/s3c2416-cpufreq.c | 1 - 1 file changed, 1 deletion(-) diff --git a/drivers/cpufreq/s3c2416-cpufreq.c b/drivers/cpufreq/s3c2416-cpufreq.c index 4f1881e..6da4fbd

[PATCH 3.10 076/139] sctp: fix the check for _sctp_walk_params and _sctp_walk_errors

tp: don't dereference ptr before leaving _sctp_walk_{params, errors}()") Signed-off-by: Xin Long Acked-by: Neil Horman Signed-off-by: David S. Miller Signed-off-by: Greg Kroah-Hartman Signed-off-by: Willy Tarreau --- include/net/sctp/sctp.h | 4 ++-- 1 file changed, 2 insertions(+), 2

[PATCH 3.10 107/139] KVM: x86: zero base3 of unusable segments

("KVM: x86 emulator: consolidate segment accessors") Reviewed-by: Paolo Bonzini Reviewed-by: David Hildenbrand Signed-off-by: Radim Krčmář Signed-off-by: Willy Tarreau --- arch/x86/kvm/x86.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/arch/x86/kvm/x86.c b/arch/x86/kvm/x

[PATCH 3.10 108/139] KEYS: Fix an error code in request_master_key()

-keys/encrypted.c:709 encrypted_key_decrypt() error: uninitialized symbol 'master_key'. Fixes: 7e70cb497850 ("keys: add new key-type encrypted") Signed-off-by: Dan Carpenter Acked-by: Mimi Zohar Signed-off-by: James Morris Signed-off-by: Willy Tarreau --- security

[PATCH 3.10 056/139] KEYS: don't let add_key() update an uninstantiated key

1f 00 45 31 c0 31 c9 48 8d 55 c8 48 89 df 48 8d 75 d0 e8 ff f9 ff ff 85 c0 41 89 c4 0f 88 84 00 00 00 4c 8b 7d c8 <49> 8b 75 18 4c 89 ff e8 24 f8 ff ff 85 c0 41 89 c4 78 6d 49 8b RIP: encrypted_update+0xb0/0x170 RSP: b15c40773de8 CR2: 0018 Cc: Reported-by: Eri

[PATCH 3.10 075/139] sctp: don't dereference ptr before leaving _sctp_walk_{params, errors}()

ed-off-by: Greg Kroah-Hartman Signed-off-by: Willy Tarreau --- include/net/sctp/sctp.h | 4 1 file changed, 4 insertions(+) diff --git a/include/net/sctp/sctp.h b/include/net/sctp/sctp.h index 845ab6d..b72cba7 100644 --- a/include/net/sctp/sctp.h +++ b/include/net/sctp/sctp.h @@ -555,6 +55

[PATCH 3.10 097/139] mfd: omap-usb-tll: Fix inverted bit use for USB TLL mode

b-tll: HOST TLL platform driver") Signed-off-by: Tony Lindgren Acked-by: Roger Quadros Signed-off-by: Lee Jones Signed-off-by: Willy Tarreau --- drivers/mfd/omap-usb-tll.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/mfd/omap-usb-tll.c b/drivers/mfd/omap-usb

[PATCH 3.10 064/139] netfilter: invoke synchronize_rcu after set the _hook_ to NULL

ff-by: Liping Zhang Signed-off-by: Pablo Neira Ayuso Signed-off-by: Willy Tarreau --- net/ipv4/netfilter/nf_nat_snmp_basic.c | 1 + net/netfilter/nf_conntrack_ecache.c| 2 ++ net/netfilter/nf_conntrack_netlink.c | 1 + net/netfilter/nf_nat_core.c| 2 ++ net/netf

[PATCH 3.10 096/139] x86/mm/32: Set the '__vmalloc_start_set' flag in initmem_init()

omas Gleixner Fixes: dc16ecf7fd1f ("x86-32: use specific __vmalloc_start_set flag in __virt_addr_valid") Link: http://lkml.kernel.org/r/1494278596-30373-1-git-send-email-labb...@redhat.com Signed-off-by: Ingo Molnar Signed-off-by: Willy Tarreau --- arch/x86/mm/numa_32.c | 1 + 1 file changed

[PATCH 3.10 116/139] perf annotate: Fix broken arrow at row 0 connecting jmp instruction to its target

Liang Cc: Peter Zijlstra Cc: sta...@vger.kernel.org Fixes: 944e1abed9e1 ("perf ui browser: Add method to draw up/down arrow line") Link: http://lkml.kernel.org/r/1496901704-30275-1-git-send-email-yao@linux.intel.com Signed-off-by: Arnaldo Carvalho de Melo Signed-off-by: Willy Tarreau

[PATCH 3.10 103/139] net: korina: Fix NAPI versus resources freeing

ted-by: Alexandros C. Couloumbis Signed-off-by: Florian Fainelli Signed-off-by: David S. Miller Signed-off-by: Willy Tarreau --- drivers/net/ethernet/korina.c | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/drivers/net/ethernet/korina.c b/drivers/net/ethernet/ko

[PATCH 3.10 114/139] [media] ir-core: fix gcc-7 warning on bool arithmetic

VB: ir-core: add imon driver") Signed-off-by: Arnd Bergmann Signed-off-by: Mauro Carvalho Chehab Signed-off-by: Willy Tarreau --- drivers/media/rc/imon.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/media/rc/imon.c b/drivers/media/rc/imon.c index 72e3fa6..

[PATCH 3.10 111/139] cfg80211: Check if PMKID attribute is of expected size

: 67fbb16be69d ("nl80211: PMKSA caching support") Cc: sta...@vger.kernel.org Signed-off-by: Srinivas Dasari Signed-off-by: Jouni Malinen Signed-off-by: Johannes Berg Signed-off-by: Willy Tarreau --- net/wireless/nl80211.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff -

[PATCH 3.10 102/139] net: phy: fix marvell phy status reading

;s unmodified advertisment. This allows ethtool to report the correct link partner auto-negotiation status. Fixes: be937f1f89ca ("Marvell PHY m88e driver fix") Signed-off-by: Russell King Reviewed-by: Andrew Lunn Reviewed-by: Florian Fainelli Signed-off-by: David S. Miller Signe

[PATCH 3.10 104/139] xfrm: NULL dereference on allocation failure

oc() fails. The caller is expecting error pointers so it leads to a NULL dereference. Fixes: df71837d5024 ("[LSM-IPSec]: Security association restriction.") Signed-off-by: Dan Carpenter Signed-off-by: Steffen Klassert Signed-off-by: Willy Tarreau --- net/key/af_key.c | 1 + 1 file

[PATCH 3.10 052/139] usb: renesas_usbhs: fix usbhsf_fifo_clear() for RX direction

t;usb: renesas_usbhs: fifo became independent from pipe.") Cc: Signed-off-by: Yoshihiro Shimoda Signed-off-by: Felipe Balbi Signed-off-by: Willy Tarreau --- drivers/usb/renesas_usbhs/fifo.c | 13 +++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/drivers/usb/ren

[PATCH 3.10 048/139] scsi: zfcp: fix missing trace records for early returns in TMF eh handlers

ndlers in zfcp") Cc: Reviewed-by: Benjamin Block Signed-off-by: Benjamin Block Signed-off-by: Martin K. Petersen Signed-off-by: Willy Tarreau --- drivers/s390/scsi/zfcp_scsi.c | 8 ++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/drivers/s390/scsi/zfcp_scsi.c b/dri

[PATCH 3.10 089/139] x86/io: Add "memory" clobber to insb/insw/insl/outsb/outsw/outsl

d-by: Linus Torvalds Signed-off-by: Arnd Bergmann Acked-by: Linus Torvalds Cc: Borislav Petkov Cc: Peter Zijlstra Cc: Thomas Gleixner Cc: Tom Lendacky Link: http://lkml.kernel.org/r/20170719125310.2487451-5-a...@arndb.de Link: https://lkml.org/lkml/2017/7/12/605 Signed-off-by: Ingo Molnar Sign

[PATCH 3.10 120/139] packet: fix tp_reserve race in packet_set_ring

: 8913336a7e8d ("packet: add PACKET_RESERVE sockopt") Reported-by: Andrey Konovalov Signed-off-by: Willem de Bruijn Signed-off-by: David S. Miller Signed-off-by: Willy Tarreau --- net/packet/af_packet.c | 13 + 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/

[PATCH 3.10 112/139] mm: fix overflow check in expand_upwards()

esterov Cc: Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds Signed-off-by: Willy Tarreau --- mm/mmap.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mm/mmap.c b/mm/mmap.c index 3c4e4d7..d042e25 100644 --- a/mm/mmap.c +++ b/mm/mmap.c @@ -2132,7 +2132,7 @@ int e

[PATCH 3.10 058/139] ext4: keep existing extra fields when inode expands

igned-off-by: Willy Tarreau --- fs/ext4/inode.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/fs/ext4/inode.c b/fs/ext4/inode.c index 1095d77..1094017 100644 --- a/fs/ext4/inode.c +++ b/fs/ext4/inode.c @@ -5045,8 +5045,9 @@ static int ext4_expand_extra_isize(struct

[PATCH 3.10 127/139] ip6_gre: fix endianness errors in ip6gre_err

IPv6") Signed-off-by: Sabrina Dubroca Acked-by: Eric Dumazet Signed-off-by: David S. Miller Signed-off-by: Willy Tarreau --- net/ipv6/ip6_gre.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/net/ipv6/ip6_gre.c b/net/ipv6/ip6_gre.c index ae88e17..529348e 100644 ---

[PATCH 3.10 055/139] USB: serial: console: fix use-after-free after failed setup

: 73e487fdb75f ("[PATCH] USB console: fix disconnection issues") Cc: stable Acked-by: Greg Kroah-Hartman Signed-off-by: Johan Hovold Signed-off-by: Willy Tarreau --- drivers/usb/serial/console.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/usb/serial/console.c b/drivers/

[PATCH 3.10 046/139] scsi: zfcp: fix queuecommand for scsi_eh commands when DIX enabled

IX") Cc: Reviewed-by: Benjamin Block Signed-off-by: Benjamin Block Signed-off-by: Martin K. Petersen Signed-off-by: Willy Tarreau --- drivers/s390/scsi/zfcp_fsf.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/drivers/s390/scsi/zfcp_fsf.c b/drivers/s390/scsi/zfc

[PATCH 3.10 016/139] fs/exec.c: account for argv/envp pointers

rew Morton Signed-off-by: Linus Torvalds Signed-off-by: Willy Tarreau --- fs/exec.c | 28 1 file changed, 24 insertions(+), 4 deletions(-) diff --git a/fs/exec.c b/fs/exec.c index c945a55..e3abc8e 100644 --- a/fs/exec.c +++ b/fs/exec.c @@ -196,8 +196,26 @@ static s

[PATCH 3.10 045/139] fuse: initialize the flock flag in fuse_file on allocation

") Cc: Signed-off-by: Miklos Szeredi Signed-off-by: Willy Tarreau --- fs/fuse/file.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fs/fuse/file.c b/fs/fuse/file.c index 1dce930..ee5c3e9 100644 --- a/fs/fuse/file.c +++ b/fs/fuse/file.c @@ -54,7 +54,7 @@ struct

[PATCH 3.10 038/139] MIPS: math-emu: Prevent wrong ISA mode instruction emulation

oint support.") Signed-off-by: Maciej W. Rozycki Cc: James Hogan Cc: linux-m...@linux-mips.org Cc: sta...@vger.kernel.org Patchwork: https://patchwork.linux-mips.org/patch/16393/ Signed-off-by: Ralf Baechle Signed-off-by: Willy Tarreau --- arch/mips/math-emu/cp1emu.c | 38 +

[PATCH 3.10 043/139] media: platform: davinci: return -EINVAL for VPFE_CMD_S_CCDC_RAW_PARAMS ioctl

Signed-off-by: Hans Verkuil Signed-off-by: Mauro Carvalho Chehab Signed-off-by: Willy Tarreau --- drivers/media/platform/davinci/vpfe_capture.c | 22 ++ 1 file changed, 2 insertions(+), 20 deletions(-) diff --git a/drivers/media/platform/davinci/vpfe_capture.c b/

[PATCH 3.10 044/139] target: Avoid mappedlun symlink creation during lun shutdown

ails during se_lun shutdown. Reported-by: James Shen Cc: James Shen Tested-by: James Shen Cc: sta...@vger.kernel.org Signed-off-by: Nicholas Bellinger Signed-off-by: Willy Tarreau --- drivers/target/target_core_fabric_configfs.c | 5 + drivers/target/target_core_tpg.c | 3 +

[PATCH 3.10 033/139] powerpc: Fix emulation of mfocrf in emulate_step()

tly puts the entire CR into the destination GPR. Fix it. Fixes: 6888199f7fe5 ("[POWERPC] Emulate more instructions in software") Cc: sta...@vger.kernel.org Signed-off-by: Anton Blanchard Acked-by: Naveen N. Rao Signed-off-by: Michael Ellerman Signed-off-by: Willy Tarreau --- arc

[PATCH 3.10 023/139] KEYS: fix dereferencing NULL payload with nonzero length

ther than when '_payload' is non-NULL, causing the syscall to fail with EFAULT as expected when an invalid buffer is specified. Cc: sta...@vger.kernel.org Signed-off-by: Eric Biggers Signed-off-by: David Howells Signed-off-by: James Morris Signed-off-by: Willy Tarreau --- secur

[PATCH 3.10 008/139] tcp: introduce tcp_rto_delta_us() helper for xmit timer fix

based on top of v3.10.107.] Change-Id: I1ccfba0b00465454bf5ce22e6fef5f7b5dd94d15 Fixes: 6ba8a3b19e76 ("tcp: Tail loss probe (TLP)") Signed-off-by: Neal Cardwell Signed-off-by: Yuchung Cheng Signed-off-by: Nandita Dukkipati Acked-by: Eric Dumazet Signed-off-by: Willy Tarreau --- include

[PATCH 3.10 010/139] tcp: fix xmit timer to only be reset if data ACKed/SACKed

loss probe (TLP)") Reported-by: Klavs Klavsen Reported-by: Mao Wenan Signed-off-by: Neal Cardwell Signed-off-by: Yuchung Cheng Signed-off-by: Nandita Dukkipati Acked-by: Eric Dumazet Signed-off-by: Willy Tarreau --- net/ipv4/tcp_input.c | 25 +++-- net/ipv4/t

[PATCH 3.10 037/139] MIPS: Fix unaligned PC interpretation in `compute_return_epc'

fb6883e5809c ("MIPS: microMIPS: Support handling of delay slots.") Signed-off-by: Maciej W. Rozycki Cc: James Hogan Cc: linux-m...@linux-mips.org Cc: sta...@vger.kernel.org Patchwork: https://patchwork.linux-mips.org/patch/16395/ Signed-off-by: Ralf Baechle Signed-off-by: Willy Tarreau

[PATCH 3.10 002/139] net: reduce skb_warn_bad_offload() noise

: Willy Tarreau --- net/core/dev.c | 12 +--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/net/core/dev.c b/net/core/dev.c index 682bf5a..c637a2d 100644 --- a/net/core/dev.c +++ b/net/core/dev.c @@ -2361,11 +2361,12 @@ static inline bool skb_needs_check(struct sk_buff *skb

[PATCH 3.10 003/139] net: skb_needs_check() accepts CHECKSUM_NONE for tx

xes: b2504a5dbef3 ("net: reduce skb_warn_bad_offload() noise") Signed-off-by: Eric Dumazet Cc: Willem de Bruijn Signed-off-by: David S. Miller Signed-off-by: Willy Tarreau --- net/core/dev.c | 7 --- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/net/core/dev.c b/n

[PATCH 3.10 018/139] xfrm: policy: check policy direction value

This fixes CVE-2017-11600. References: https://bugzilla.redhat.com/show_bug.cgi?id=1474928 Fixes: 80c9abaabf42 ("[XFRM]: Extension for dynamic update of endpoint address(es)") Cc: Reported-by: "bo Zhang" Signed-off-by: Vladis Dronov Signed-off-by: Steffen Klassert Sig

[PATCH 3.10 011/139] mm/page_alloc: Remove kernel address exposure in free_reserved_area()

Petkov Cc: Brian Gerst Cc: Denys Vlasenko Cc: H. Peter Anvin Cc: Peter Zijlstra Cc: Thomas Gleixner Cc: linux...@kvack.org Link: http://lkml.kernel.org/r/6836ff90c45b71d38e5d4405aec56fa9e5d1d4b2.1477405374.git.jpoim...@redhat.com Signed-off-by: Ingo Molnar Signed-off-by: Willy Tarreau --

[PATCH 3.10 035/139] usb: renesas_usbhs: fix usbhsc_resume() for !USBHSF_RUNTIME_PWCTRL

resume. And then, the driver cannot detect the VBUS. Fixes: ca8a282a5373 ("usb: gadget: renesas_usbhs: add suspend/resume support") Cc: Signed-off-by: Yoshihiro Shimoda Signed-off-by: Felipe Balbi Signed-off-by: Willy Tarreau --- drivers/usb/renesas_usbhs/common.c | 4 +++- 1 file

[PATCH 3.10 041/139] ext4: fix SEEK_HOLE/SEEK_DATA for blocksize < pagesize

eglecting buffers in a page before starting offset. Reported-by: Andreas Gruenbacher Signed-off-by: Theodore Ts'o Signed-off-by: Jan Kara CC: sta...@vger.kernel.org # 3.8+ Signed-off-by: Willy Tarreau --- fs/ext4/file.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/fs/ext4/file.c b/fs

[PATCH 3.10 039/139] libata: array underflow in ata_find_dev()

gned-off-by: Dan Carpenter Signed-off-by: Tejun Heo Cc: sta...@vger.kernel.org Signed-off-by: Willy Tarreau --- drivers/ata/libata-scsi.c | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/drivers/ata/libata-scsi.c b/drivers/ata/libata-scsi.c index f3f0801..aa4e36b 100644 ---

[PATCH 3.10 042/139] ext4: fix overflow caused by missing cast in ext4_resize_fs()

: 1c6bd7173d66 Signed-off-by: Jerry Lee Signed-off-by: Theodore Ts'o Cc: sta...@vger.kernel.org Signed-off-by: Willy Tarreau --- fs/ext4/resize.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/fs/ext4/resize.c b/fs/ext4/resize.c index cf0a704..f6190fd 100644 --- a/fs/ext4/res

[PATCH 3.10 001/139] ipvs: SNAT packet replies only for NATed connections

er sends the reply traffic via the director. So, better to be more precise for the reply traffic. As replies are not expected for DR/TUN connections, better to not touch them. Reported-by: Nick Moriarty Signed-off-by: Julian Anastasov Signed-off-by: Willy Tarreau --- net/netfilter/ipvs/ip_vs

[PATCH 3.10 007/139] Bluetooth: cmtp: cmtp_add_connection() should verify that it's dealing with l2cap socket

Signed-off-by: Al Viro Signed-off-by: Marcel Holtmann Signed-off-by: Willy Tarreau --- net/bluetooth/cmtp/core.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/net/bluetooth/cmtp/core.c b/net/bluetooth/cmtp/core.c index e0a6ebf..84460f6 100644 --- a/net/bluetooth/cmtp/core.c +++ b/net/blu

[PATCH 3.10 005/139] udp: consistently apply ufo or fragmentation

, hopefully they are correct...] [wt: s/skb_is_gso/skb_has_frags for 3.10] Fixes: e89e9cf539a2 ("[IPv4/IPv6]: UFO Scatter-gather approach") Reported-by: Andrey Konovalov Signed-off-by: Willem de Bruijn Signed-off-by: David S. Miller Signed-off-by: Greg Kroah-Hartman Signed-off-by: Wil

[PATCH 3.10 009/139] tcp: enable xmit timer fix by having TLP use time when RTO should fire

on of the commit was compiled and briefly tested based on top of v3.10.107.] Change-Id: I597ad6446edde15bf2cea8e56d603a2c52f8221b Fixes: 6ba8a3b19e76 ("tcp: Tail loss probe (TLP)") Signed-off-by: Neal Cardwell Signed-off-by: Yuchung Cheng Signed-off-by: Nandita Dukkipati Acked-by: Eric

[PATCH 3.10 017/139] rxrpc: Fix several cases where a padded len isn't checked in ticket decode

he various variable-length data checks use the padded length. Reported-by: 石磊 Signed-off-by: David Howells Reviewed-by: Marc Dionne Reviewed-by: Dan Carpenter Signed-off-by: David S. Miller Signed-off-by: Greg Kroah-Hartman Signed-off-by: Willy Tarreau --- net/rxrpc/ar-

[PATCH 3.10 020/139] ALSA: seq: Fix use-after-free at creating a port

fix covers CVE-2017-15265. Reported-and-tested-by: Michael23 Yu Suggested-by: Linus Torvalds Cc: Signed-off-by: Takashi Iwai Signed-off-by: Willy Tarreau --- sound/core/seq/seq_clientmgr.c | 6 +- sound/core/seq/seq_ports.c | 7 +-- 2 files changed, 10 insertions(+), 3 deletions(-)

[PATCH 3.10 027/139] staging: comedi: fix clean-up of comedi_class in comedi_init()

d-off-by: Ian Abbott Cc: Signed-off-by: Greg Kroah-Hartman Signed-off-by: Willy Tarreau --- drivers/staging/comedi/comedi_fops.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/staging/comedi/comedi_fops.c b/drivers/staging/comedi/comedi_fops.c index 5745701..2aba2f7 100644 --- a/dr

[PATCH 3.10 012/139] leak in O_DIRECT readv past the EOF

buggers off early without returning non-zero will not skip dio_cleanup(). The fix applies to all versions from 2.5.62 to 3.15. Reported-and-tested-by: Venki Pallipadi Signed-off-by: Al Viro Signed-off-by: Willy Tarreau --- fs/direct-io.c | 1 + 1 file changed, 1 insertion(+) diff --git a/fs/dire

Re: [PATCH] net: recvmsg: Unconditionally zero struct sockaddr_storage

On Tue, Oct 31, 2017 at 09:14:45AM -0700, Kees Cook wrote: > diff --git a/net/socket.c b/net/socket.c > index c729625eb5d3..34183f4fbdf8 100644 > --- a/net/socket.c > +++ b/net/socket.c > @@ -2188,6 +2188,7 @@ static int ___sys_recvmsg(struct socket *sock, struct > user_msghdr __user *msg, >

Re: [PATCH] xen: fix booting ballooned down hvm guest

On Tue, Oct 24, 2017 at 02:59:00PM +, HW42 wrote: > I think you really should allow pseudonymous contributions. But in my > case my nickname is anyway linked to my legal name so fell free to use: > Simon Gaiser I personally always have difficulties with pseudos in emails, I think it's just a

Re: Changing the ARM variant reported by 'uname -m'

Hi Tuomas, On Wed, Oct 18, 2017 at 06:07:22PM +0300, Tuomas Tynkkynen wrote: > Hi, > > For our distro (NixOS), I've experimented with building packages for ARMv6 > on ARMv7 hardware. This has generally worked fine, except that some build > scripts (in coreutils, for example) notice that `uname -m

Re: [PATCH 4.9 00/14] 4.9.50-stable review

On Wed, Sep 13, 2017 at 02:30:46PM -0700, Greg Kroah-Hartman wrote: > > Yes. I don't recall if it is a direct --force or if you would have to > > remove the original tag first (with git push :refs/tags/). > > Ah, but then if someone had pulled the old tag, they would have to > delete it locally b

auxdisplay: charlcd: properly restore atomic counter on error path

modulo the renamed atomic counter) but I can provide a tested backport if desired. ] Fixes: f4757af85 # 3.19-rc1 Cc: sta...@vger.kernel.org Cc: Mariusz Gorski Cc: Geert Uytterhoeven Cc: Miguel Ojeda Sandonis Signed-off-by: Willy Tarreau --- drivers/auxdisplay/charlcd.c | 11 +-- drivers/

Re: [PATCH v3] leds/trigger/activity: add a system activity LED trigger

Hi Jacek, On Tue, Aug 29, 2017 at 10:44:03PM +0200, Jacek Anaszewski wrote: > Applied to the for-4.15 branch of linux-leds.git. Great, thanks! Willy

Re: [PATCH] leds/trigger/activity: add a system activity LED trigger

ers/leds/trigger/ledtrig-activity.c > > @@ -0,0 +1,297 @@ > > +/* > > + * Activity LED trigger > > + * > > + * Copyright (C) 2017 Willy Tarreau > > + * Partially based on Atsushi Nemoto's ledtrig-heartbeat.c. > > + * > > + * This program is free software; you

Re: [PATCH] leds/trigger/activity: add a system activity LED trigger

than I hoped to get back to this, but here's a new version which works on 4.13-rc6 by not relying on jiffies anymore. Thanks! Willy >From 655256adb790590bbc0c35a9e34bf0a22ea95b5d Mon Sep 17 00:00:00 2001 From: Willy Tarreau Date: Fri, 10 Feb 2017 19:45:07 +0100 Subject: leds/trigger/activity

Re: early x86 unseeded randomness

On Tue, Aug 15, 2017 at 08:09:50AM -0400, Theodore Ts'o wrote: > On Tue, Aug 15, 2017 at 10:05:46AM +0200, Ingo Molnar wrote: > > > > * Willy Tarreau wrote: > > > > > > > > > > Nowadays we could use similar methods using RDTSC providing more &

Re: early x86 unseeded randomness

On Tue, Aug 15, 2017 at 09:42:54AM +0200, Ingo Molnar wrote: > > * Willy Tarreau wrote: > > > Nowadays we could use similar methods using RDTSC providing more accurate > > counting. This doesn't provide a lot of entropy of course, given that a > > 2 GHz machine

Re: early x86 unseeded randomness

Hi Ted, On Mon, Aug 14, 2017 at 09:31:24PM -0400, Theodore Ts'o wrote: > The real fix is to do what OpenBSD does, which is to teach the > bootloader (e.g., grub) to read from some file such as > /var/lib/urandom/random-seed, and then to have the init scripts > overwrite it with a new set of entrop

Re: INITRAMFS_SOURCE broken by 6e19eded3684dc184181093af3bff2ff440f5b53?

On Tue, Aug 08, 2017 at 05:12:03PM -0500, Rob Landley wrote: > If your rootfs has a size= in /proc/mounts it's tmpfs, ala: > > rootfs / rootfs rw,size=126564k,nr_inodes=31641 0 0 You're right, I have it and thought about it. Anyway the point is that it works transparently for me. Apparently for

Re: INITRAMFS_SOURCE broken by 6e19eded3684dc184181093af3bff2ff440f5b53?

On Tue, Aug 08, 2017 at 03:18:19PM +0200, Thomas Meyer wrote: > On Tue, Aug 08, 2017 at 02:04:42PM +0200, Willy Tarreau wrote: > > Hi Thomas, > > > > On Tue, Aug 08, 2017 at 01:46:25PM +0200, Thomas Meyer wrote: > > > Hi, > > > > > > did the commi

Re: INITRAMFS_SOURCE broken by 6e19eded3684dc184181093af3bff2ff440f5b53?

Hi Thomas, On Tue, Aug 08, 2017 at 01:46:25PM +0200, Thomas Meyer wrote: > Hi, > > did the commit 6e19eded3684dc184181093af3bff2ff440f5b53 break a linux kernel > build with an included ramdisk? > > As fas as I understand you must expliclity add rootfstype=ramfs to the kernel > command line to bo

Re: [PATCH 3.18 00/50] 3.18.64-stable review

On Sat, Aug 05, 2017 at 07:55:11AM +0200, Willy Tarreau wrote: > On Fri, Aug 04, 2017 at 07:51:07PM -0700, Greg Kroah-Hartman wrote: > > On Fri, Aug 04, 2017 at 07:46:57PM -0700, Greg Kroah-Hartman wrote: > > > On Fri, Aug 04, 2017 at 06:43:50PM -0700, Guenter Roeck wrote: > &

Re: [PATCH 3.18 00/50] 3.18.64-stable review

On Fri, Aug 04, 2017 at 07:51:07PM -0700, Greg Kroah-Hartman wrote: > On Fri, Aug 04, 2017 at 07:46:57PM -0700, Greg Kroah-Hartman wrote: > > On Fri, Aug 04, 2017 at 06:43:50PM -0700, Guenter Roeck wrote: > > > On 08/04/2017 04:15 PM, Greg Kroah-Hartman wrote: > > > > This is the start of the stabl

Re: [PATCH 3.10] pstore: Make spinlock per zone instead of global

Hi Leo, On Sun, Jul 30, 2017 at 11:48:39PM +0800, Leo Yan wrote: > > Given that 3.10 only has a few months left, if 3.10 isn't available on > > this hardware, do you really think we need to fix something in it that > > apparently nobody will be in situation to experience, at the risk of > > possib

Re: [PATCH 3.10] pstore: Make spinlock per zone instead of global

On Fri, Jul 28, 2017 at 02:52:15PM +0800, Leo Yan wrote: > On Fri, Jul 28, 2017 at 06:25:55AM +0200, Willy Tarreau wrote: > > Hi Leo, > > > > There was no upstream commit ID here but I found it in mainline here : > > > > commit 109704492ef637956265ec2eb7

Re: [PATCH 3.10] pstore: Make spinlock per zone instead of global

Hi Leo, There was no upstream commit ID here but I found it in mainline here : commit 109704492ef637956265ec2eb72ae7b3b39eb6f4 Author: Joel Fernandes Date: Thu Oct 20 00:34:00 2016 -0700 pstore: Make spinlock per zone instead of global What worries me is that some later fixes w

Re: [RFC][PATCH] exec: Use init rlimits for setuid exec

On Mon, Jul 10, 2017 at 09:18:09AM -0700, Linus Torvalds wrote: > On Mon, Jul 10, 2017 at 9:12 AM, Kees Cook wrote: > > > > Sounds good to me, but won't large-memory users in 32-bit get annoyed? > > We'll see. > > I suspect that all large-memory users have long since upgraded to > x86-64 (rule o

Re: [PATCH] mm: larger stack guard gap, between vmas

On Thu, Jul 06, 2017 at 10:24:06AM +0200, Willy Tarreau wrote: > On Wed, Jul 05, 2017 at 04:51:06PM -0700, Linus Torvalds wrote: > > On Wed, Jul 5, 2017 at 4:35 PM, Ben Hutchings wrote: > > >> > > >> And I think your second patch breaks that "use a re

Re: [PATCH] mm: larger stack guard gap, between vmas

On Wed, Jul 05, 2017 at 04:51:06PM -0700, Linus Torvalds wrote: > On Wed, Jul 5, 2017 at 4:35 PM, Ben Hutchings wrote: > >> > >> And I think your second patch breaks that "use a really large value to > >> approximate infinity" case that definitely has existed as a pattern. > > > > Right. Well tha

Re: [RFC][PATCH] exec: Use init rlimits for setuid exec

On Wed, Jul 05, 2017 at 09:32:35PM -0700, Kees Cook wrote: > In an attempt to provide sensible rlimit defaults for setuid execs, this > inherits the namespace's init rlimits: > > $ ulimit -s > 8192 > $ ulimit -s unlimited > $ /bin/sh -c 'ulimit -s' > unlimited > $ sudo /bin/sh -c 'ulimit -s' > 819

Re: [PATCH] mm: larger stack guard gap, between vmas

On Wed, Jul 05, 2017 at 05:19:47PM -0700, Andy Lutomirski wrote: > I think it's ridiculous that you can change rlimits and then > exec a setuid thing. It's not so easy to fix, though. Maybe track, > per-task, inherited by clone and exec, what the rlimits were the last > time the process had privi

Re: [PATCH] mm: larger stack guard gap, between vmas

On Wed, Jul 05, 2017 at 08:32:43PM +0100, Ben Hutchings wrote: > >  - As a hardening feature, if the stack would expand within 64k or > > whatever of a non-MAP_FIXED mapping, refuse to expand it.  (This might > > have to be a non-hinted mapping, not just a non-MAP_FIXED mapping.) > > The idea being

Re: [PATCH] mm: larger stack guard gap, between vmas

On Wed, Jul 05, 2017 at 12:17:20PM -0700, Linus Torvalds wrote: > On Wed, Jul 5, 2017 at 11:59 AM, Willy Tarreau wrote: > > > > Don't you think that the option of having a sysctl to relax the check > > per task wouldn't be easier for distros and safer overall ? I

Re: [PATCH] mm: mm, mmap: do not blow on PROT_NONE MAP_FIXED holes in the stack

On Wed, Jul 05, 2017 at 12:15:05PM -0700, Linus Torvalds wrote: > On Wed, Jul 5, 2017 at 11:53 AM, Michal Hocko wrote: > > > > That would lead to conflicts when backporting to stable trees though > > which is quite annoying as well and arguably slightly more annoying than > > resolving this in mmo

Re: [PATCH] mm: larger stack guard gap, between vmas

On Wed, Jul 05, 2017 at 09:17:59AM -0700, Linus Torvalds wrote: (...) > The good news is that this is probably specialized enough that we can > just keep the defaults as "will break this one case, but we give > people the tools to work around it". > > I hate doing that, but distros that still supp

Re: [PATCH] mm: larger stack guard gap, between vmas

On Wed, Jul 05, 2017 at 01:21:54PM +0100, Ben Hutchings wrote: > On Wed, 2017-07-05 at 10:14 +0200, Willy Tarreau wrote: > > On Wed, Jul 05, 2017 at 08:36:46AM +0200, Michal Hocko wrote: > > > PROT_NONE would explicitly fault but we would simply > > > run over this mappi

Re: [PATCH] mm: larger stack guard gap, between vmas

On Wed, Jul 05, 2017 at 10:24:41AM +0200, Michal Hocko wrote: > > Thus maybe if that helps we could even relax some of the stack guard > > checks as soon as we meet a PROT_NONE area, allowing VMAs to be tightly > > packed if the application knows what it's doing. > > Yes, this is what my patch doe

Re: [PATCH] mm: larger stack guard gap, between vmas

On Wed, Jul 05, 2017 at 08:36:46AM +0200, Michal Hocko wrote: > PROT_NONE would explicitly fault but we would simply > run over this mapping too easily and who knows what might end up below > it. So to me the guard gap does its job here. I tend to think that applications that implement their own s

Re: [PATCH] mm: larger stack guard gap, between vmas

On Tue, Jul 04, 2017 at 11:47:37AM -0700, Linus Torvalds wrote: > Let's > say that you are using lots of threads, so that you know your stack > space is limited. What you do is to use MAP_FIXED a lot, and you lay > out your stacks fairly densely (with each other, but also possibly > with other mapp

Re: [PATCH] mm: larger stack guard gap, between vmas

On Tue, Jul 04, 2017 at 11:37:15AM -0700, Linus Torvalds wrote: > On Tue, Jul 4, 2017 at 10:22 AM, Michal Hocko wrote: > > > > Well, I've been thinking about this some more and the more I think about > > it the less I am convinced we should try to be clever here. Why? Because > > as soon as somebo

Re: [PATCH] mm: larger stack guard gap, between vmas

On Tue, Jul 04, 2017 at 12:36:11PM +0100, Ben Hutchings wrote: > @@ -2323,11 +2330,17 @@ int expand_downwards(struct vm_area_struct *vma, > if (error) > return error; > > - /* Enforce stack_guard_gap */ > + /* > + * Enforce stack_guard_gap, but allow VM_NONE mappi

Re: [PATCH] mm: larger stack guard gap, between vmas

On Tue, Jul 04, 2017 at 05:27:55PM +0100, John Haxby wrote: > Alas, the people who could confirm this for me are getting ready to > watch fireworks and generally have a good time. Let's hope the fireworks is controlled by Java with on up-to-date kernel so that they can quickly get back to work :-)

Re: [PATCH] mm: larger stack guard gap, between vmas

On Tue, Jul 04, 2017 at 12:36:11PM +0100, Ben Hutchings wrote: > > If anywhing this would require to have a loop over all PROT_NONE > > mappings to not hit into other weird usecases. > > That's what I was thinking of. Tried the following patch: (...) > - next = vma->vm_next; > + /* > +

Re: [PATCH] mm: larger stack guard gap, between vmas

On Tue, Jul 04, 2017 at 11:35:38AM +0200, Michal Hocko wrote: > On Tue 04-07-17 10:41:22, Michal Hocko wrote: > > On Mon 03-07-17 17:05:27, Linus Torvalds wrote: > > > On Mon, Jul 3, 2017 at 4:55 PM, Ben Hutchings > > > wrote: > > > > > > > > Firstly, some Rust programs are crashing on ppc64el wi

Linux 3.10.107

ad from a WriteMostly disk scsi: avoid a permanent stop of the scsi device's request queue Weston Andros Adamson (1): NFSv4: fix getacl ERANGE for some ACL buffer sizes Willem de Bruijn (3): macvtap: read vnet_hdr_size once packet: round up linear to header len tun:

Re: [vs-plain] Re: [PATCH] mm: larger stack guard gap, between vmas

On Thu, Jun 22, 2017 at 03:14:00PM +0100, Ben Hutchings wrote: > On Thu, 2017-06-22 at 15:59 +0200, Willy Tarreau wrote: > > but I think Ben is currently looking > > for feedback on the validity of his backport which was a difficult > > task. > > Right. Ben, barring

Re: [vs-plain] Re: [PATCH] mm: larger stack guard gap, between vmas

Hi, On Thu, Jun 22, 2017 at 03:15:51PM +0200, Levente Polyak wrote: > Just a side note, but i think its worth mentioning to also have look at > these fixup patches: > > > -- mm: fix new crash in unmapped_area_topdown() > https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?

<    1   2   3   4   5   6   7   8   9   10   >