[042/121] ixgbe: Fix Tx Hang issue with lldpad on 82598EB

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Jacob Keller commit 1eb9ac14c34a948bf1538bfb9034e8ab29099a64 upstream. This patch fixes an issue with the 82598EB device, where lldpad is causing Tx Hangs on the card as soon as it attempts to

[009/121] sysctl net: Keep tcp_syn_retries inside the boundary

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Michal Tesar [ Upstream commit 651e92716aaae60fc41b9652f54cb6803896e0da ] Limit the min/max value passed to the /proc/sys/net/ipv4/tcp_syn_retries. Signed-off-by: Michal Tesar Signed-off-by:

[048/121] rt2x00: fix stop queue

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Stanislaw Gruszka commit e2288b66fe7ff0288382b2af671b4da558b44472 upstream. Since we clear QUEUE_STARTED in rt2x00queue_stop_queue(), following call to rt2x00queue_pause_queue() reduce to

[076/121] USB: mos7720: fix broken control requests

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit ef6c8c1d733e244f0499035be0dabe1f4ed98c6f upstream. The parallel-port code of the drivers used a stack allocated control-request buffer for asynchronous (and possibly

[075/121] usb: add two quirky touchscreen

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Oliver Neukum commit 304ab4ab079a8ed03ce39f1d274964a532db036b upstream. These devices tend to become unresponsive after S3 Signed-off-by: Oliver Neukum Signed-off-by: Greg Kroah-Hartman

[079/121] libata: apply behavioral quirks to sil3826 PMP

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Terry Suereth commit 894d20b7eb446e848e0046107d51b17a20a8 upstream. Fixing support for the Silicon Image 3826 port multiplier, by applying to it the same quirks applied to the Silicon

[055/121] iwl4965: reset firmware after rfkill off

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Stanislaw Gruszka commit 788f7a56fce1bcb2067b62b851a086fca48a0056 upstream. Using rfkill switch can make firmware unstable, what cause various Microcode errors and kernel warnings. Reseting

[020/121] ALSA: ak4xx-adda: info leak in ak4xxx_capture_source_info()

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit bd5fe738e388ceaa32e5171481e0d3ec59f0ccfe upstream. "idx" is controled by the user and can be a negative offset into the input_names[] array. Signed-off-by: Dan Carpenter

[016/121] drm/i915/lvds: ditch ->prepare special case

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Daniel Vetter commit 520c41cf2fa029d1e8b923ac2026f96664f17c4b upstream. LVDS is the first output where dpms on/off and prepare/commit don't perfectly match. Now the idea behind this special

[025/121] nl80211: fix mgmt tx status and testmode reporting for netns

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Michal Kazior commit a0ec570f4f69c4cb700d743a915096c2c8f56a99 upstream. These two events were sent to the default network namespace. This caused AP mode in a non-default netns to not work

[012/121] usbnet: do not pretend to support SG/TSO

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 20f0170377264e8449b6987041f0bcc4d746d3ed ] usbnet doesn't support yet SG, so drivers should not advertise SG or TSO capabilities, as they allow TCP stack to

[011/121] ipv6: take rtnl_lock and mark mrt6 table as freed on namespace cleanup

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Hannes Frederic Sowa [ Upstream commit 905a6f96a1b18e490a75f810d733ced93c39b0e5 ] Otherwise we end up dereferencing the already freed net->ipv6.mrt pointer which leads to a panic (from

[054/121] iwl4965: set power mode early

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Stanislaw Gruszka commit eca396d7a5bdcc1fd67b1b12f737c213ac78a6f4 upstream. If device was put into a sleep and system was restarted or module reloaded, we have to wake device up before sending

[038/121] mwifiex: Add missing endian conversion.

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Tomasz Moń commit 83e612f632c3897be29ef02e0472f6d63e258378 upstream. Both type and pkt_len variables are in host endian and these should be in Little Endian in the payload. Signed-off-by:

[108/121] drm/i915: ivb: fix edp voltage swing reg val

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Imre Deak commit 77fa4cbd5fa389e28419bbe8ac491b5fdd54840d upstream. Fix the typo introduced in commit 1a2eb4604b85c5efb343da8a4dcf41288fcfca85 Author: Keith Packard Date: Wed Nov 16

[063/121] zd1201: do not use stack as URB transfer_buffer

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Jussi Kivilinna commit 1206ff4ff9d2ef7468a355328bc58ac6ebf5be44 upstream. Patch fixes zd1201 not to use stack as URB transfer_buffer. URB buffers need to be DMA-able, which stack is not.

[047/121] virtio: console: return -ENODEV on all read operations after unplug

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Amit Shah commit 96f97a83910cdb9d89d127c5ee523f8fc040a804 upstream. If a port gets unplugged while a user is blocked on read(), -ENODEV is returned. However, subsequent read()s returned 0,

[043/121] virtio: console: fix race with port unplug and open/close

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Amit Shah commit 057b82be3ca3d066478e43b162fc082930a746c9 upstream. There's a window between find_port_by_devt() returning a port and us taking a kref on the port, where the port could get

[062/121] ext4: fix mount/remount error messages for incompatible mount options

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Piotr Sarna commit 6ae6514b33f941d3386da0dfbe2942766eab1577 upstream. Commit 5688978 ("ext4: improve handling of conflicting mount options") introduced incorrect messages shown while choosing

[027/121] iwlwifi: dvm: don't send BT_CONFIG on devices w/o Bluetooth

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Johannes Berg commit 707aee401d2467baa785a697f40a6e2d9ee79ad5 upstream. The BT_CONFIG command that is sent to the device during startup will enable BT coex unless the module parameter turns it

[089/121] Revert "PM / Domains: Fix handling of wakeup devices during system resume"

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings This reverts commit 5c6156fac087f551cbd57499f4bed2fc614d70cd, which was commit cc85b20780562d404e18a47b9b55b4a5102ae53e upstream. It broke ARM && PM configurations by adding a

[111/121] pci: frv architecture needs generic setup-bus infrastructure

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Paul Gortmaker commit cd0a2bfb77a3edeecd652081e0b1a163d3b0696b upstream. Otherwise we get this link failure for frv's defconfig: LD .tmp_vmlinux1 drivers/built-in.o: In function

[050/121] ACPI / battery: Fix parsing _BIX return value

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Lan Tianyu commit 016d5baad04269e8559332df05f89bd95b52d6ad upstream. The _BIX method returns extended battery info as a package. According the ACPI spec (ACPI 5, Section 10.2.2.2), the first

[051/121] drm/radeon/atom: initialize more atom interpretor elements to 0

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 42a21826dc54583cdb79cc8477732e911ac9c376 upstream. The ProcessAuxChannel table on some rv635 boards assumes the divmul members are initialized to 0 otherwise we get an

[098/121] Hexagon: misc compile warning/error cleanup due to missing headers

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Richard Kuo commit 6bbbc30ce6b0ae428575c8af7c2a6c342c534e19 upstream. Fixed warnings/errors for EXPORT_SYMBOL, linux_binprm, elf related defines Signed-off-by: Richard Kuo Signed-off-by: Ben

[099/121] iwl4965: fix rfkill set state regression

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Stanislaw Gruszka commit b2fcc0aee58a3435566dd6d8501a0b32f28b upstream. My current 3.11 fix: commit 788f7a56fce1bcb2067b62b851a086fca48a0056 Author: Stanislaw Gruszka Date: Thu Aug 1

[023/121] jfs: fix readdir cookie incompatibility with NFSv4

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Dave Kleikamp commit 44512449c0ab368889dd13ae0031fba74ee7e1d2 upstream. NFSv4 reserves readdir cookie values 0-2 for special entries (. and ..), but jfs allows a value of 2 for a non-special

[088/121] nilfs2: fix issue with counting number of bio requests for BIO_EOPNOTSUPP error detection

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Vyacheslav Dubeyko commit 4bf93b50fd04118ac7f33a3c2b8a0a1f9fa80bc9 upstream. Fix the issue with improper counting number of flying bio requests for BIO_EOPNOTSUPP error detection case. The

[097/121] sparc32: support atomic64_t

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Sam Ravnborg commit aea1181b0bd0a09c54546399768f359d1e198e45 upstream. There is no-one that really require atomic64_t support on sparc32. But several drivers fails to build without proper

[035/121] Bluetooth: Add support for Atheros [0cf3:e003]

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: AceLan Kao commit 1d5b569ef85d013a775560a90050dc630614c045 upstream. Add support for the AR9462 chip T: Bus=02 Lev=02 Prnt=02 Port=04 Cnt=01 Dev#= 4 Spd=12 MxCh= 0 D: Ver= 1.10

Re: race condition in crypto larval handling

2013-09-07 Thread Kees Cook
On Sat, Sep 7, 2013 at 6:32 PM, Herbert Xu wrote: > On Fri, Sep 06, 2013 at 04:20:50PM -0700, Kees Cook wrote: >> >> In the two-thread situation, the first thread gets a larval with >> refcnt 2 via crypto_larval_add. (Why 2?) The next thread finds the >> larval via crypto_larval_add's call to

[087/121] nilfs2: remove double bio_put() in nilfs_end_bio_write() for BIO_EOPNOTSUPP error

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Vyacheslav Dubeyko commit 2df37a19c686c2d7c4e9b4ce1505b5141e3e5552 upstream. Remove double call of bio_put() in nilfs_end_bio_write() for the case of BIO_EOPNOTSUPP error detection. The issue

[029/121] ath9k_htc: do some initial hardware configuration

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Oleksij Rempel commit dc2a87f519a4d8cb376ab54f22b6b98a943b51ce upstream. Currently we configure harwdare and clock, only after interface start. In this case, if we reload module or reboot PC

[117/121] sparc32: Add ucmpdi2.o to obj-y instead of lib-y.

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" commit 74c7b28953d4eaa6a479c187aeafcfc0280da5e8 upstream. Otherwise if no references exist in the static kernel image, we won't export the symbol properly to modules.

Re: [PATCH] h8300: remove deprecated IRQF_DISABLED

2013-09-07 Thread Michael Opdenacker
Hi Richard, On 09/07/2013 11:21 AM, richard -rw- weinberger wrote: > On Sat, Sep 7, 2013 at 11:15 AM, Michael Opdenacker > wrote: >> This patch proposes to remove the IRQF_DISABLED flag from h8300 architecture >> code. It's a NOOP since 2.6.35 and it will be removed one day. >> >> Signed-off-by:

[059/121] cifs: don't instantiate new dentries in readdir for inodes that need to be revalidated immediately

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Jeff Layton commit 757c4f6260febff982276818bb946df89c1105aa upstream. David reported that commit c2b93e06 (cifs: only set ops for inodes in I_NEW state) caused a regression with mfsymlinks.

[018/121] ALSA: usb-audio: skip UAC2 EFFECT_UNIT

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Eldad Zack commit 5dae5fd24071319bb67d3375217d5b0b6d16cb0b upstream. Current code mishandles the case where the device is a UAC2 and the bDescriptorSubtype is a UAC2 Effect Unit (0x07). It

[040/121] serial/mxs-auart: fix race condition in interrupt handler

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Uwe Kleine-König commit d970d7fe65adff5efe75b4a73c4ffc9be57089f7 upstream. The handler needs to ack the pending events before actually handling them. Otherwise a new event might come in after

[072/121] fs/proc/task_mmu.c: fix buffer overflow in add_page_map()

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: yonghua zheng commit 8c8296223f3abb142be8fc31711b18a704c0e7d8 upstream. Recently we met quite a lot of random kernel panic issues after enabling CONFIG_PROC_PAGE_MONITOR. After debuggind we

[052/121] cifs: extend the buffer length enought for sprintf() using

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Chen Gang commit 057d6332b24a4497c55a761c83c823eed9e3f23b upstream. For cifs_set_cifscreds() in "fs/cifs/connect.c", 'desc' buffer length is 'CIFSCREDS_DESC_SIZE' (56 is less than 256), and

[022/121] NFSv4.1: integer overflow in decode_cb_sequence_args()

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 0439f31c35d1da0b28988b308ea455e38e6a350d upstream. This seems like it could overflow on 32 bits. Use kmalloc_array() which has overflow protection built in.

[077/121] USB: keyspan: fix null-deref at disconnect and release

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit ff8a43c10f1440f07a5faca0c1556921259f7f76 upstream. Make sure to fail properly if the device is not accepted during attach in order to avoid null-pointer derefs (of missing

[032/121] Bluetooth: ath3k: Add support for Fujitsu Lifebook UH5x2 [04c5:1330]

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Thomas Loo commit 84eb2ae1807dd1467bf6f500fc69ae61f1907b75 upstream. The Fujitsu Lifebook UH552/UH572 ships with a Qualcomm AR9462/AR3012 WLAN/BT-Combo card. Add device ID to the ath3k driver

[049/121] USB: serial: ftdi_sio: add more RT Systems ftdi devices

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: "Rick Farina (Zero_Chaos)" commit fed1f1ed90bce42ea010e2904cbc04e7b8304940 upstream. RT Systems makes many usb serial cables based on the ftdi_sio driver for programming various amateur

[000/121] 3.2.51-rc1 review

2013-09-07 Thread Ben Hutchings
This is the start of the stable review cycle for the 3.2.51 release. There are 121 patches in this series, which will be posted as responses to this one. If anyone has any issues with these being applied, please let me know. Thanks to Guenter Roeck, I've been able to build-test this on a large

[017/121] af_key: initialize satype in key_notify_policy_flush()

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Nicolas Dichtel commit 85dfb745ee40232876663ae206cba35f24ab2a40 upstream. This field was left uninitialized. Some user daemons perform check against this field. Signed-off-by: Nicolas Dichtel

[107/121] workqueue: cond_resched() after processing each work item

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Tejun Heo commit b22ce2785d97423846206cceec4efee0c4afd980 upstream. If !PREEMPT, a kworker running work items back to back can hog CPU. This becomes dangerous when a self-requeueing work item

[105/121] SUNRPC: Fix memory corruption issue on 32-bit highmem systems

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust commit 347e2233b7667e336d9f671f1a52dfa3f0416e2c upstream. Some architectures, such as ARM-32 do not return the same base address when you call kmap_atomic() twice on the same

[039/121] USB: mos7840: fix race in register handling

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit d8a083cc746664916d9d36ed9e4d08a29525f245 upstream. Fix race in mos7840_get_reg which unconditionally manipulated the control urb (which may already be in use) by adding a

[026/121] mac80211: fix duplicate retransmission detection

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Johannes Berg commit 6b0f32745dcfba01d7be33acd1b40306c7a914c6 upstream. The duplicate retransmission detection code in mac80211 erroneously attempts to do the check for every frame, even

[046/121] virtio: console: fix raising SIGIO after port unplug

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Amit Shah commit 92d3453815fbe74d539c86b60dab39ecdf01bb99 upstream. SIGIO should be sent when a port gets unplugged. It should only be sent to prcesses that have the port opened, and have

[010/121] sctp: fully initialize sctp_outq in sctp_outq_init

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Neil Horman [ Upstream commit c5c7774d7eb4397891edca9ebdf750ba90977a69 ] In commit 2f94aabd9f6c925d77aecb3ff020f1cc12ed8f86 (refactor sctp_outq_teardown to insure proper re-initalization) we

[066/121] ALSA: 6fire: make buffers DMA-able (midi)

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Torsten Schenk commit 4c2aee0032b70083dafebd733ed9c774633b2fa3 upstream. Patch makes midi output buffer DMA-able by allocating it separately. Signed-off-by: Torsten Schenk Signed-off-by:

[031/121] Bluetooth: Add support for Mediatek Bluetooth device [0e8d:763f]

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: "Cho, Yu-Chen" commit 178c059e7640aa8e50213400c6f3dde00189d979 upstream. This patch adds support for Mediatek Bluetooth device T: Bus=02 Lev=01 Prnt=01 Port=03 Cnt=01 Dev#= 2 Spd=480 MxCh=

[083/121] [SCSI] sg: Fix user memory corruption when SG_IO is interrupted by a signal

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Roland Dreier commit 35dc248383bbab0a7203fca4d722875bc81ef091 upstream. There is a nasty bug in the SCSI SG_IO ioctl that in some circumstances leads to one process writing data into the

[067/121] jbd2: Fix use after free after error in jbd2_journal_dirty_metadata()

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Jan Kara commit 91aa11fae1cf8c2fd67be0609692ea9741cdcc43 upstream. When jbd2_journal_dirty_metadata() returns error, __ext4_handle_dirty_metadata() stops the handle. However callers of this

[069/121] USB: ti_usb_3410_5052: fix big-endian firmware handling

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit e877dd2f2581628b7119df707d4cf03d940cff49 upstream. Fix endianess bugs in firmware handling introduced by commits cb7a7c6a ("ti_usb_3410_5052: add Multi-Tech modem support")

[106/121] drivers/base/memory.c: fix show_mem_removable() to handle missing sections

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Russ Anderson commit 21ea9f5ace3a7317cc3ba1fbc749758021a83136 upstream. "cat /sys/devices/system/memory/memory*/removable" crashed the system. The problem is that show_mem_removable() is

[119/121] target: Fix trailing ASCII space usage in INQUIRY vendor+model

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Nicholas Bellinger commit ee60bddba5a5f23e39598195d944aa0eb2d455e5 upstream. This patch fixes spc_emulate_inquiry_std() to add trailing ASCII spaces for INQUIRY vendor + model fields following

[014/121] af_key: more info leaks in pfkey messages

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter [ Upstream commit ff862a4668dd6dba962b1d2d8bd344afa6375683 ] This is inspired by a5cc68f3d6 "af_key: fix info leaks in notify messages". There are some struct members which

[104/121] sunrpc: remove the second argument of k[un]map_atomic()

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Cong Wang commit b85417860172ff693dc115d7999805fc240cec1c upstream. Signed-off-by: Cong Wang [bwh: Cherry-picked for 3.2 to let the next fix apply cleanly] Signed-off-by: Ben Hutchings ---

[082/121] block: Add bio_for_each_segment_all()

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Kent Overstreet commit d74c6d514fe314b8bdab58b487b25992291577ec upstream. __bio_for_each_segment() iterates bvecs from the specified index instead of bio->bv_idx. Currently, the only usage is

[116/121] sparc32: add ucmpdi2

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Sam Ravnborg commit de36e66d5fa52bc6e2dacd95c701a1762b5308a7 upstream. Based on copy from microblaze add ucmpdi2 implementation. This fixes build of niu driver which failed with:

[006/121] perf: Fix event group context move

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Jiri Olsa commit 0231bb5336758426b44ccd798ccd3c5419c95d58 upstream. When we have group with mixed events (hw/sw) we want to end up with group leader being in hw context. So if group leader is

[065/121] ALSA: 6fire: make buffers DMA-able (pcm)

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Torsten Schenk commit 5ece263f1d93fba8d992e67e3ab8a71acf674db9 upstream. Patch makes pcm buffers DMA-able by allocating each one separately. Signed-off-by: Torsten Schenk Signed-off-by:

[101/121] powerpc: Don't Oops when accessing /proc/powerpc/lparcfg without hypervisor

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Benjamin Herrenschmidt commit f5f6cbb61610b7bf9d9d96db9c3979d62a424bab upstream. /proc/powerpc/lparcfg is an ancient facility (though still actively used) which allows access to some

[008/121] arcnet: cleanup sizeof parameter

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter [ Upstream commit 087d273caf4f7d3f2159256f255f1f432bc84a5b ] This patch doesn't change the compiled code because ARC_HDR_SIZE is 4 and sizeof(int) is 4, but the intent was to use

[114/121] m32r: make memset() global for CONFIG_KERNEL_BZIP2=y

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Geert Uytterhoeven commit 9a75c6e5240f7edc5955e8da5b94bde6f96070b3 upstream. Fix the m32r compile error: arch/m32r/boot/compressed/misc.c:31:14: error: static declaration of 'memset'

[058/121] ALSA: 6fire: fix DMA issues with URB transfer_buffer usage

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Jussi Kivilinna commit ddb6b5a964371e8e52e696b2b258bda144c8bd3f upstream. Patch fixes 6fire not to use stack as URB transfer_buffer. URB buffers need to be DMA-able, which stack is not.

[064/121] Hostap: copying wrong data prism2_ioctl_giwaplist()

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 909bd5926d474e275599094acad986af79671ac9 upstream. We want the data stored in "addr" and "qual", but the extra ampersands mean we are copying stack data instead.

[086/121] [SCSI] zfcp: fix schedule-inside-lock in scsi_device list loops

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Martin Peschke commit 924dd584b198a58aa7cb3efefd8a03326550ce8f upstream. BUG: sleeping function called from invalid context at kernel/workqueue.c:2752 in_atomic(): 1, irqs_disabled(): 1, pid:

[081/121] xen/events: mask events when changing their VCPU binding

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: David Vrabel commit 4704fe4f03a5ab27e3c36184af85d5000e0f8a48 upstream. When a event is being bound to a VCPU there is a window between the EVTCHNOP_bind_vpcu call and the adjustment of the

[085/121] [SCSI] zfcp: fix lock imbalance by reworking request queue locking

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Martin Peschke commit d79ff142624e1be080ad8d09101f7004d79c36e1 upstream. This patch adds wait_event_interruptible_lock_irq_timeout(), which is a straight-forward descendant of

[084/121] of: fdt: fix memory initialization for expanded DT

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Wladislav Wiebe commit 9e40127526e857fa3f29d51e83277204fbdfc6ba upstream. Already existing property flags are filled wrong for properties created from initial FDT. This could cause problems if

[112/121] m32r: consistently use "suffix-$(...)"

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Geert Uytterhoeven commit df12aef6a19bb2d69859a94936bda0e6ccaf3327 upstream. Commit a556bec9955c ("m32r: fix arch/m32r/boot/compressed/Makefile") changed "$(suffix_y)" to "$(suffix-y)", but

[024/121] vm: add no-mmu vm_iomap_memory() stub

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit 3c0b9de6d37a481673e81001c57ca0e410c72346 upstream. I think we could just move the full vm_iomap_memory() function into util.h or similar, but I didn't get any reply from

[078/121] drm/i915: Invalidate TLBs for the rings after a reset

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Chris Wilson commit 884020bf3d2a3787a1cc6df902e98e0eec60330b upstream. After any "soft gfx reset" we must manually invalidate the TLBs associated with each ring. Empirically, it seems that a

[015/121] net_sched: info leak in atm_tc_dump_class()

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter [ Upstream commit 8cb3b9c3642c0263d48f31d525bcee7170eedc20 ] The "pvc" struct has a hole after pvc.sap_family which is not cleared. Signed-off-by: Dan Carpenter Reviewed-by:

[091/121] microblaze: Update microblaze defconfigs

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Michal Simek commit d0e045401f268a8de6f87d65678214748b772680 upstream. The main reason is 0-day testing system which can directly use these defconfigs for testing. Enable support for all

[092/121] sound: Fix make allmodconfig on MIPS

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit d4702b189c6b951c1cb3260036ff998f719bfb62 upstream. The compile of soundcard.c is broken on MIPS when allmodconfig is used because of the missing MAX_DMA_CHANNELS

[002/121] mm/memory-hotplug: fix lowmem count overflow when offline pages

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Wanpeng Li commit cea27eb2a202959783f81254c48c250ddd80e129 upstream. The logic for the memory-remove code fails to correctly account the Total High Memory when a memory block which contains

[033/121] Bluetooth: ath3k: Add support for ID 0x13d3/0x3402

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Sujith Manoharan commit 5b77a1f3d7b7360dc2b7c6d2188d39b9f8432907 upstream. T: Bus=01 Lev=02 Prnt=02 Port=00 Cnt=01 Dev#= 5 Spd=12 MxCh= 0 D: Ver= 1.10 Cls=e0(wlcon) Sub=01 Prot=01 MxPS=64

[001/121] ifb: Include

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit b51c3427e95b ('ifb: fix rcu_sched self-detected stalls', commit 440d57bc5ff5 upstream) added a call to cond_resched(), which is declared in '#include '. In Linux 3.2.y

[074/121] m68k: Truncate base in do_div()

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Andreas Schwab commit ea077b1b96e073eac5c3c5590529e964767fc5f7 upstream. Explicitly truncate the second operand of do_div() to 32 bits to guard against bogus code calling it with a 64-bit

[121/121] x86/xen: do not identity map UNUSABLE regions in the machine E820

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: David Vrabel commit 3bc38cbceb85881a8eb789ee1aa56678038b1909 upstream. If there are UNUSABLE regions in the machine memory map, dom0 will attempt to map them 1:1 which is not permitted by Xen

[080/121] xen/events: initialize local per-cpu mask for all possible events

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: David Vrabel commit 84ca7a8e45dafb49cd5ca90a343ba033e2885c17 upstream. The sizeof() argument in init_evtchn_cpu_bindings() is incorrect resulting in only the first 64 (or 32 in 32-bit guests)

[096/121] [PARISC] include in drivers/parisc/iommu-helpers.h

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Cong Wang commit 650275dbfb2f4c12bc91420ad5a99f955eabec98 upstream. drivers/parisc/iommu-helpers.h:62: error: implicit declaration of function 'prefetchw' make[3]: ***

[036/121] ARM: 7791/1: a.out: remove partial a.out support

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Will Deacon commit acfdd4b1f7590d02e9bae3b73bdbbc4a31b05d38 upstream. a.out support on ARM requires that argc, argv and envp are passed in r0-r2 respectively, which requires hacking

[090/121] SCSI: nsp32: use mdelay instead of large udelay constants

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit b497ceb964a80ebada3b9b3cea4261409039e25a upstream. ARM cannot handle udelay for more than 2 miliseconds, so we should use mdelay instead for those. Signed-off-by: Arnd

[037/121] x86, fpu: correct the asm constraints for fxsave, unbreak mxcsr.daz

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: "H.J. Lu" commit eaa5a990191d204ba0f9d35dbe5505ec2cdd1460 upstream. GCC will optimize mxcsr_feature_mask_init in arch/x86/kernel/i387.c: memset(_scratch, 0, sizeof(struct

[003/121] libata: make it clear that sata_inic162x is experimental

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Tejun Heo commit bb9696192826a7d9279caf872e95b41bc26c7eff upstream. sata_inic162x never reached a state where it's reliable enough for production use and data corruption is a relatively common

[045/121] virtio: console: clean up port data immediately at time of unplug

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Amit Shah commit ea3768b4386a8d1790f4cc9a35de4f55b92d6442 upstream. We used to keep the port's char device structs and the /sys entries around till the last reference to the port was dropped.

[109/121] drm/vmwgfx: Split GMR2_REMAP commands if they are to large

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Jakob Bornecrantz commit 6e4dcff3adbf25acb87e74500a58e3c07bdec40f upstream. This fixes the piglit test texturing/max-texture-size causing the VM to die due to a too large SVGA command.

[021/121] slab: introduce kmalloc_array()

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Xi Wang commit a8203725dfded5c1f79dca3368a4a273e24b59bb upstream. Introduce a kmalloc_array() wrapper that performs integer overflow checking without zeroing the memory. Suggested-by: Andrew

[057/121] tracing: Fix fields of struct trace_iterator that are zeroed by mistake

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Andrew Vagin commit ed5467da0e369e65b247b99eb6403cb79172bcda upstream. tracing_read_pipe zeros all fields bellow "seq". The declaration contains a comment about that, but it doesn't help. The

[073/121] m68k/atari: ARAnyM - Fix NatFeat module support

2013-09-07 Thread Ben Hutchings
3.2.51-rc1 review patch. If anyone has any objections, please let me know. -- From: Geert Uytterhoeven commit e8184e10f89736a23ea6eea8e24cd524c5c513d2 upstream. As pointed out by Andreas Schwab, pointers passed to ARAnyM NatFeat calls should be physical addresses, not virtual

Re: [PATCH v3 1/1] dcache: Translating dentry into pathname without taking rename_lock

2013-09-07 Thread Ian Kent
On Sat, 2013-09-07 at 18:32 +0100, Al Viro wrote: > On Sat, Sep 07, 2013 at 04:01:10AM +0100, Al Viro wrote: > > * plain seqretry loop (d_lookup(), is_subdir(), autofs4_getpath(), > > ceph_misc_build_path(), [cifs] build_path_from_dentry(), nfs_path(), > _mds_, actually - sorry. > >

Re: [3.11-rc1] CONFIG_DEBUG_MUTEXES=y using gcc 3.x makes unbootable kernel.

2013-09-07 Thread Tetsuo Handa
Hello. I found what is wrong. -- bad patch start -- >From 3c56dfbd32a9b67ba824ce96128bb513eb65de4b Mon Sep 17 00:00:00 2001 From: Tetsuo Handa Date: Sun, 8 Sep 2013 12:44:20 +0900 Subject: [PATCH] mutex: Avoid gcc version dependent __builtin_constant_p() usage. Commit 040a0a37

Re: race condition in crypto larval handling

2013-09-07 Thread Herbert Xu
On Sat, Sep 07, 2013 at 08:34:15PM -0700, Kees Cook wrote: > > However, I noticed on the "good" path (even without the above patch), > I sometimes see a double-kfree triggered by the modprobe process. I > can't, however, see how that's happening, since larval_destroy should > only be called when

Re: race condition in crypto larval handling

2013-09-07 Thread Herbert Xu
On Sun, Sep 08, 2013 at 02:37:03PM +1000, Herbert Xu wrote: > On Sat, Sep 07, 2013 at 08:34:15PM -0700, Kees Cook wrote: > > > > However, I noticed on the "good" path (even without the above patch), > > I sometimes see a double-kfree triggered by the modprobe process. I > > can't, however, see how

<    1   2   3   4   5   6   >