[PATCH 4.4 50/58] drm/virtio: fix framebuffer sparse warning

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Gerd Hoffmann [ Upstream commit 71d3f6ef7f5af38dea2975ec5715c88bae92e92d ] virtio uses normal ram as backing storage for the framebuffer, so we should assign the address to new screen_buffer (

[PATCH 4.4 55/58] signal: protect SIGNAL_UNKILLABLE from unintentional clearing.

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Jamie Iles [ Upstream commit 2d39b3cd34e6d323720d4c61bd714f5ae202c022 ] Since commit 00cd5c37afd5 ("ptrace: permit ptracing of /sbin/init") we can now trace init processes. init is initially

[PATCH 4.4 54/58] lib/Kconfig.debug: fix frv build failure

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Sudip Mukherjee [ Upstream commit da0510c47519fe0999cffe316e1d370e29f952be ] The build of frv allmodconfig was failing with the errors like: /tmp/cc0JSPc3.s: Assembler messages: /tmp/cc0J

[PATCH 4.4 53/58] mm, slab: make sure that KMALLOC_MAX_SIZE will fit into MAX_ORDER

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Michal Hocko [ Upstream commit bb1107f7c6052c863692a41f78c000db792334bf ] Andrey Konovalov has reported the following warning triggered by the syzkaller fuzzer. WARNING: CPU: 1 PID: 9935 at

[PATCH 4.4 52/58] ARM: 8632/1: ftrace: fix syscall name matching

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Rabin Vincent [ Upstream commit 270c8cf1cacc69cb8d99dea812f06067a45e4609 ] ARM has a few system calls (most notably mmap) for which the names of the functions which are referenced in the sysca

[PATCH 4.4 51/58] virtio_blk: fix panic in initialization error path

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Omar Sandoval [ Upstream commit 6bf6b0aa3da84a3d9126919a94c49c0fb7ee2fb3 ] If blk_mq_init_queue() returns an error, it gets assigned to vblk->disk->queue. Then, when we call put_disk(), we end

[PATCH 4.4 46/58] tg3: Fix race condition in tg3_get_stats64().

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Michael Chan [ Upstream commit f5992b72ebe0dde488fa8f706b887194020c66fc ] The driver's ndo_get_stats64() method is not always called under RTNL. So it can race with driver close or ethtool rec

[PATCH 4.4 48/58] phy state machine: failsafe leave invalid RUNNING state

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Zefir Kurtisi [ Upstream commit 811a919135b980bac8009d042acdccf10dc1ef5e ] While in RUNNING state, phy_state_machine() checks for link changes by comparing phydev->link before and after callin

[PATCH 4.4 08/58] ext4: fix SEEK_HOLE/SEEK_DATA for blocksize < pagesize

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Jan Kara commit fcf5ea10992fbac3c7473a1db33d56a139333cd1 upstream. ext4_find_unwritten_pgoff() does not properly handle a situation when starting index is in the middle of a page and blocksize

[PATCH 4.4 45/58] net: phy: dp83867: fix irq generation

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Grygorii Strashko [ Upstream commit 5ca7d1ca77dc23934504b95a96d2660d345f83c2 ] For proper IRQ generation by DP83867 phy the INT/PWDN pin has to be programmed as an interrupt output instead of

[PATCH 4.4 47/58] x86/boot: Add missing declaration of string functions

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Nicholas Mc Guire [ Upstream commit fac69d0efad08fc15e4dbfc116830782acc0dc9a ] Add the missing declarations of basic string functions to string.h to allow a clean build. Fixes: 5be865661516 (

[PATCH 4.4 43/58] wext: handle NULL extra data in iwe_stream_add_point better

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 93be2b74279c15c2844684b1a027fdc71dd5d9bf upstream. gcc-7 complains that wl3501_cs passes NULL into a function that then uses the argument as the input for memcpy: drivers/

[PATCH 4.4 44/58] sh_eth: R8A7740 supports packet shecksumming

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Sergei Shtylyov [ Upstream commit 0f1f9cbc04dbb3cc310f70a11cba0cf1f2109d9c ] The R8A7740 GEther controller supports the packet checksum offloading but the 'hw_crc' (bad name, I'll fix it) flag

[PATCH 4.4 41/58] sparc64: Measure receiver forward progress to avoid send mondo timeout

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Jane Chu [ Upstream commit 9d53caec84c7c5700e7c1ed744ea584fff55f9ac ] A large sun4v SPARC system may have moments of intensive xcall activities, usually caused by unmapping many pages on many

[PATCH 4.4 40/58] xen-netback: correctly schedule rate-limited queues

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Wei Liu [ Upstream commit dfa523ae9f2542bee4cddaea37b3be3e157f6e6b ] Add a flag to indicate if a queue is rate-limited. Test the flag in NAPI poll handler and avoid rescheduling the queue if t

[PATCH 4.4 42/58] sparc64: Prevent perf from running during super critical sections

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Rob Gardner [ Upstream commit fc290a114fc6034b0f6a5a46e2fb7d54976cf87a ] This fixes another cause of random segfaults and bus errors that may occur while running perf with the callgraph option

[PATCH 4.4 07/58] mm/page_alloc: Remove kernel address exposure in free_reserved_area()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Josh Poimboeuf commit adb1fe9ae2ee6ef6bc10f3d5a588020e7664dfa7 upstream. Linus suggested we try to remove some of the low-hanging fruit related to kernel address exposure in dmesg. The only le

[PATCH 4.4 39/58] net: phy: Correctly process PHY_HALTED in phy_stop_machine()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Florian Fainelli [ Upstream commit 7ad813f208533cebfcc32d3d7474dc1677d1b09a ] Marc reported that he was not getting the PHY library adjust_link() callback function to run when calling phy_stop

[PATCH 4.4 33/58] dccp: fix a memleak that dccp_ipv6 doesnt put reqsk properly

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Xin Long [ Upstream commit 0c2232b0a71db0ac1d22f751aa1ac0cadb950fd2 ] In dccp_v6_conn_request, after reqsk gets alloced and hashed into ehash table, reqsk's refcnt is set 3. one is for req->rs

[PATCH 4.4 04/58] ALSA: hda - Fix speaker output from VAIO VPCL14M1R

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Sergei A. Trusov commit 3f3c371421e601fa93b6cb7fb52da9ad59ec90b4 upstream. Sony VAIO VPCL14M1R needs the quirk to make the speaker working properly. Tested-by: Dmitriy Signed-off-by: Sergei A

[PATCH 4.4 30/58] packet: fix use-after-free in prb_retire_rx_blk_timer_expired()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: WANG Cong [ Upstream commit c800aaf8d869f2b9b47b10c5c312fe19f0a94042 ] There are multiple reports showing we have a use-after-free in the timer prb_retire_rx_blk_timer_expired(), where we use

[PATCH 4.4 29/58] openvswitch: fix potential out of bound access in parse_ct

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Liping Zhang [ Upstream commit 69ec932e364b1ba9c3a2085fe96b76c8a3f71e7c ] Before the 'type' is validated, we shouldn't use it to fetch the ovs_ct_attr_lens's minlen and maxlen, else, out of bo

[PATCH 4.4 38/58] net/mlx5: Fix command bad flow on command entry allocation failure

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Moshe Shemesh [ Upstream commit 219c81f7d1d5a89656cb3b53d3b4e11e93608d80 ] When driver fail to allocate an entry to send command to FW, it must notify the calling function and release the memo

[PATCH 4.4 35/58] dccp: fix a memleak for dccp_feat_init err process

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Xin Long [ Upstream commit e90ce2fc27cad7e7b1e72b9e66201a7a4c124c2b ] In dccp_feat_init, when ccid_get_builtin_ccids failsto alloc memory for rx.val, it should free tx.val before returning an

[PATCH 4.4 21/58] drm: rcar-du: fix backport bug

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Greg Kroah-Hartman In the backport of commit 4f7b0d263833 ("drm: rcar-du: Simplify and fix probe error handling"), which is commit 8255d26322a3 in this tree, the error handling path was incorrec

[PATCH 4.4 22/58] [media] saa7164: fix double fetch PCIe access condition

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Steven Toth commit 6fb05e0dd32e566facb96ea61a48c7488daa5ac3 upstream. Avoid a double fetch by reusing the values from the prior transfer. Originally reported via https://bugzilla.kernel.org/sh

[PATCH 4.4 34/58] dccp: fix a memleak that dccp_ipv4 doesnt put reqsk properly

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Xin Long [ Upstream commit b7953d3c0e30a5fc944f6b7bd0bcceb0794bcd85 ] The patch "dccp: fix a memleak that dccp_ipv6 doesn't put reqsk properly" fixed reqsk refcnt leak for dccp_ipv6. The same

[PATCH 4.4 31/58] ipv6: Dont increase IPSTATS_MIB_FRAGFAILS twice in ip6_fragment()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Stefano Brivio [ Upstream commit afce615aaabfbaad02550e75c0bec106dafa1adf ] RFC 2465 defines ipv6IfStatsOutFragFails as: "The number of IPv6 datagrams that have been discarded

[PATCH 4.4 09/58] ext4: fix overflow caused by missing cast in ext4_resize_fs()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Jerry Lee commit aec51758ce10a9c847a62a48a168f8c804c6e053 upstream. On a 32-bit platform, the value of n_blcoks_count may be wrong during the file system is resized to size larger than 2^32 blo

[PATCH 4.4 26/58] ipv4: initialize fib_trie prior to register_netdev_notifier call.

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Mahesh Bandewar [ Upstream commit 8799a221f5944a7d74516ecf46d58c28ec1d1f75 ] Net stack initialization currently initializes fib-trie after the first call to netdevice_notifier() call. In fact

[PATCH 4.4 25/58] ipv6: avoid overflow of offset in ip6_find_1stfragopt

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Sabrina Dubroca [ Upstream commit 6399f1fae4ec29fab5ec7607043e256ca3a6 ] In some cases, offset can overflow and can cause an infinite loop in ip6_find_1stfragopt(). Make it unsigned int to

[PATCH 4.4 27/58] rtnetlink: allocate more memory for dev_set_mac_address()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: WANG Cong [ Upstream commit 153711f9421be5dbc973dc57a4109dc9d54c89b1 ] virtnet_set_mac_address() interprets mac address as struct sockaddr, but upper layer only allocates dev->addr_len which i

[PATCH 4.4 18/58] mm, mprotect: flush TLB if potentially racing with a parallel reclaim leaving stale TLB entries

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Mel Gorman commit 3ea277194daaeaa84ce75180ec7c7a2075027a68 upstream. Stable note for 4.4: The upstream patch patches madvise(MADV_FREE) but 4.4 does not have support for that feature. T

[PATCH 4.4 05/58] ASoC: do not close shared backend dailink

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Banajit Goswami commit b1cd2e34c69a2f3988786af451b6e17967c293a0 upstream. Multiple frontend dailinks may be connected to a backend dailink at the same time. When one of frontend dailinks is clo

[PATCH 4.4 20/58] f2fs: sanity check checkpoint segno and blkoff

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Jin Qian commit 15d3042a937c13f5d9244241c7a9c8416ff6e82a upstream. Make sure segno and blkoff read from raw image are valid. Cc: sta...@vger.kernel.org Signed-off-by: Jin Qian [Jaegeuk Kim: a

[PATCH 4.4 24/58] net: Zero terminate ifr_name in dev_ifname().

4.4-stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" [ Upstream commit 63679112c536289826fec61c917621de95ba2ade ] The ifr.ifr_name is passed around and assumed to be NULL terminated. Signed-off-by: David S. Miller Signed-off-

[PATCH 4.4 17/58] iser-target: Avoid isert_conn->cm_id dereference in isert_login_recv_done

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Nicholas Bellinger commit fce50a2fa4e9c6e103915c351b6d4a98661341d6 upstream. This patch fixes a NULL pointer dereference in isert_login_recv_done() of isert_conn->cm_id due to isert_cma_handler

[PATCH 4.4 14/58] iscsi-target: Fix early sk_data_ready LOGIN_FLAGS_READY race

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Nicholas Bellinger commit 8f0dfb3d8b1120c61f6e2cc3729290db10772b2d upstream. There is a iscsi-target/tcp login race in LOGIN_FLAGS_READY state assignment that can result in frequent errors duri

[PATCH 4.4 00/58] 4.4.81-stable review

This is the start of the stable review cycle for the 4.4.81 release. There are 58 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri Aug 11 19:41:25 UTC 2017. Anything receive

[PATCH 4.4 10/58] ARM: dts: armada-38x: Fix irq type for pca955

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Gregory CLEMENT commit 8d4514173211586c6238629b1ef1e071927735f5 upstream. As written in the datasheet the PCA955 can only handle low level irq and not edge irq. Without this fix the interrupt

Re: [PATCH 3/3] drm/rockchip: Add support for Rockchip Soc LVDS

On Wed, Aug 09, 2017 at 06:00:59PM +0800, Sandy Huang wrote: > This adds support for Rockchip soc lvds found on rk3288 > Based on the patches from Mark yao and Heiko Stuebner > > Signed-off-by: Sandy Huang > Signed-off-by: Mark yao > Signed-off-by: Heiko Stuebner > --- > drivers/gpu/drm/rockch

[PATCH v5 10/10] lkdtm: Add test for XPFO

From: Juerg Haefliger This test simply reads from userspace memory via the kernel's linear map. hugepages is only supported on x86 right now, hence the ifdef. Signed-off-by: Juerg Haefliger Signed-off-by: Tycho Andersen Tested-by: Marco Benatto --- drivers/misc/Makefile | 1 + drivers/

[PATCH v5 08/10] arm64/mm: Add support for XPFO to swiotlb

From: Juerg Haefliger Pages that are unmapped by XPFO need to be mapped before and unmapped again after (to restore the original state) the __dma_{map,unmap}_area() operations to prevent fatal page faults. Signed-off-by: Juerg Haefliger Signed-off-by: Tycho Andersen --- arch/arm64/include/asm

[PATCH v5 09/10] mm: add a user_virt_to_phys symbol

We need someting like this for testing XPFO. Since it's architecture specific, putting it in the test code is slightly awkward, so let's make it an arch-specific symbol and export it for use in LKDTM. Signed-off-by: Tycho Andersen Tested-by: Marco Benatto --- arch/arm64/mm/xpfo.c | 51 +

[PATCH v5 00/10] Add support for eXclusive Page Frame Ownership

Hi all, Here's a v5 of the XPFO set. Changes from v4 are: * huge pages support actually works now on x86 * arm64 support, which boots on several different arm64 boards * tests for hugepages support as well via LKDTM (thanks Kees for suggesting how to make this work) Patch 2 contains some poten

[PATCH v5 07/10] arm64/mm: Don't flush the data cache if the page is unmapped by XPFO

From: Juerg Haefliger If the page is unmapped by XPFO, a data cache flush results in a fatal page fault. So don't flush in that case. Signed-off-by: Juerg Haefliger Tested-by: Tycho Andersen --- arch/arm64/mm/flush.c | 5 - 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/arch

[PATCH v5 06/10] arm64/mm: Disable section mappings if XPFO is enabled

From: Juerg Haefliger XPFO (eXclusive Page Frame Ownership) doesn't support section mappings yet, so disable it if XPFO is turned on. Signed-off-by: Juerg Haefliger Tested-by: Tycho Andersen --- arch/arm64/mm/mmu.c | 14 +- 1 file changed, 13 insertions(+), 1 deletion(-) diff --g

[PATCH v5 02/10] mm, x86: Add support for eXclusive Page Frame Ownership (XPFO)

From: Juerg Haefliger This patch adds support for XPFO which protects against 'ret2dir' kernel attacks. The basic idea is to enforce exclusive ownership of page frames by either the kernel or userspace, unless explicitly requested by the kernel. Whenever a page destined for userspace is allocated

[PATCH v5 03/10] swiotlb: Map the buffer if it was unmapped by XPFO

From: Juerg Haefliger Signed-off-by: Juerg Haefliger Tested-by: Tycho Andersen --- include/linux/xpfo.h | 4 lib/swiotlb.c| 3 ++- mm/xpfo.c| 9 + 3 files changed, 15 insertions(+), 1 deletion(-) diff --git a/include/linux/xpfo.h b/include/linux/xpfo.h index 1

[PATCH v3 0/3] QCOM SCM Download mode support

This enables kernel developers to enable "download mode", a mechanism for entering a debug state to "download" memory content following a unexpected warm-restart; e.g. security violation by accessing a protected register. Bjorn Andersson (3): firmware: qcom: scm: Expose secure IO service firmw

[PATCH v3 3/3] arm64: dts: qcom: Specify dload address for msm8916 and msm8996

On msm8916 and msm8996 boards a secure io-write is used to write the magic for selecting "download mode", specify this address in the DeviceTree. Note that qcom_scm.download_mode=1 must be specified on the kernel command line for the kernel to attempt selecting download mode. Signed-off-by: Bjorn

[PATCH v3 2/3] firmware: qcom: scm: Expose download-mode control

In order to aid post-mortem debugging the Qualcomm platforms provides a "memory download mode", where the boot loader will provide an interface for custom tools to "download" the content of RAM to a host machine. The mode is triggered by writing a magic value somehwere in RAM, that is read in the

[PATCH v5 04/10] arm64: Add __flush_tlb_one()

From: Juerg Haefliger Add a hook for flushing a single TLB entry on arm64. Signed-off-by: Juerg Haefliger Tested-by: Tycho Andersen --- arch/arm64/include/asm/tlbflush.h | 8 1 file changed, 8 insertions(+) diff --git a/arch/arm64/include/asm/tlbflush.h b/arch/arm64/include/asm/tlb

Re: [PATCH v9 1/4] PCI: Add new PCIe Fabric End Node flag, PCI_DEV_FLAGS_NO_RELAXED_ORDERING

| From: Raj, Ashok | Sent: Wednesday, August 9, 2017 11:00 AM | | On Wed, Aug 09, 2017 at 04:46:07PM +, Casey Leedom wrote: | > | From: Raj, Ashok | > | Sent: Wednesday, August 9, 2017 8:58 AM | > | ... | > | As Casey pointed out in an earlier thread, we choose the heavy hammer | > | approach

[PATCH v3 1/3] firmware: qcom: scm: Expose secure IO service

The secure IO service provides operations for reading and writing secure memory from non-secure mode, expose this API through SCM. Reviewed-by: Stephen Boyd Signed-off-by: Bjorn Andersson --- Changes since v2: - Picked up Stephen's r-b Changes since v1: - Correct scm-call return value handling

[PATCH v5 05/10] arm64/mm: Add support for XPFO

From: Juerg Haefliger Enable support for eXclusive Page Frame Ownership (XPFO) for arm64 and provide a hook for updating a single kernel page table entry (which is required by the generic XPFO code). At the moment, only 64k page sizes are supported. Signed-off-by: Juerg Haefliger Tested-by: Ty

[PATCH v5 01/10] mm: add MAP_HUGETLB support to vm_mmap

vm_mmap is exported, which means kernel modules can use it. In particular, for testing XPFO support, we want to use it with the MAP_HUGETLB flag, so let's support it via vm_mmap. Signed-off-by: Tycho Andersen Tested-by: Marco Benatto --- include/linux/mm.h | 2 ++ mm/mmap.c | 19 +

Re: [PATCH v4 1/2] x86/unwind: add ORC unwinder

On Wed, Aug 09, 2017 at 11:55:35AM +0200, Juergen Gross wrote: > On 09/08/17 11:35, Peter Zijlstra wrote: > > On Wed, Aug 09, 2017 at 11:24:07AM +0200, Juergen Gross wrote: > >> On 09/08/17 11:16, Peter Zijlstra wrote: > >>> On Wed, Aug 09, 2017 at 10:49:43AM +0200, Juergen Gross wrote: > > ALT

Re: [PATCH] mm/rmap: try_to_unmap_one() do not call mmu_notifier under ptl

On Wed, 9 Aug 2017 12:52:46 -0400 (EDT) Jerome Glisse wrote: > > On Wed, Aug 09, 2017 at 12:17:09PM -0400, jgli...@redhat.com wrote: > > > From: J__r__me Glisse > > > > > > MMU notifiers can sleep, but in try_to_unmap_one() we call > > > mmu_notifier_invalidate_page() under page table lock. >

Re: [PATCH v3 0/4] seccomp: Add SECCOMP_FILTER_FLAG_KILL_PROCESS

On Wed, Aug 09, 2017 at 12:01:53PM -0700, Kees Cook wrote: > This series is the result of Fabricio and I going around a few times > on possible solutions for finding a way to enhance RET_KILL to kill > the process group. There's a lot of ways this could be done, but I > wanted something that felt c

Re: [tpmdd-devel] [PATCH] tpm: improve tpm_tis send() performance by ignoring burstcount

On 8/8/2017 3:11 PM, Jarkko Sakkinen wrote: On Mon, Aug 07, 2017 at 01:52:34PM +0200, Peter Huewe wrote: Imho: NACK from my side. After these viewpoints definitive NACK from my side too... I responded to the thread comments separately. However, assuming NACK is the final response, I have a

Re: kvm: WARNING in kvm_arch_vcpu_ioctl_run

On 09.08.2017 19:07, Dmitry Vyukov wrote: > Hello, > > syzkaller fuzzer has hit the following WARNING in kvm_arch_vcpu_ioctl_run. > This is easily reproducible and reproducer is attached at the bottom. > The report is on upstream commit > 26c5cebfdb6ca799186f1e56be7d6f2480c5012c. This requires set

Re: [tpmdd-devel] [PATCH] tpm: improve tpm_tis send() performance by ignoring burstcount

On 8/8/2017 3:11 PM, Jarkko Sakkinen wrote: > On Mon, Aug 07, 2017 at 01:52:34PM +0200, Peter Huewe wrote: >> Are you sure this is a good idea? >> On lpc systems this more or less stalls the bus, including keyboard/mouse (if connected via superio lpc). >> >> On which systems have you tested thi

Re: [PATCH 2/2] lib: add test for bitmap_parselist()

t; https://github.com/0day-ci/linux/commits/Yury-Norov/lib-make-bitmap_parselist-thread-safe-and-much-faster/20170809-105307 > config: xtensa-allmodconfig (attached as .config) > compiler: xtensa-linux-gcc (GCC) 4.9.0 > reproduce: > wget > https://raw.githubusercontent.com/01

Re: new ELF marking

> > > > I believe this would only be an output bit, but I'm not sure how it > > would be wired into binutils. Kostya, do you know any details about > > how AddressSanitizer might be able to create this ELF note? I don't, hopefully H.J's suggestion works. Will it be backward compatible? (i.e. will

Re: [PATCH 2/2] lib: add test for bitmap_parselist()

t; https://github.com/0day-ci/linux/commits/Yury-Norov/lib-make-bitmap_parselist-thread-safe-and-much-faster/20170809-105307 > config: i386-randconfig-x000-201732 (attached as .config) > compiler: gcc-6 (Debian 6.2.0-3) 6.2.0 20160901 > reproduce: > # save the attached .config t

Re: [PATCH v3 0/4] seccomp: Add SECCOMP_FILTER_FLAG_KILL_PROCESS

Hey Tycho! On 08/09/2017 03:22 PM, Tycho Andersen wrote: > On Wed, Aug 09, 2017 at 12:01:53PM -0700, Kees Cook wrote: >> This series is the result of Fabricio and I going around a few times >> on possible solutions for finding a way to enhance RET_KILL to kill >> the process group. There's a lot o

Re: [RFC PATCH 2/2] bpf: Initialise mod[] in bpf_trace_printk

On 08/09/2017 09:39 AM, James Hogan wrote: [...] time (but please consider looking at the other patch which is certainly a more real issue). Sorry for the delay, started looking into that and whether we have some other options, I'll get back to you on this. Thanks, Daniel

Re: [Linux-ima-devel] [PATCH 11/12] ima: don't report measurements if digests are included in the loaded lists

On 7/25/2017 11:44 AM, Roberto Sassu wrote: Don't report measurements if the file digest has been included in an uploaded digest list. The advantage of this solution is that the boot time overhead, when a TPM is available, is very small because a PCR is extended only for unknown files. The disad

Re: kvm: WARNING in kvm_arch_vcpu_ioctl_run

On Wed, Aug 9, 2017 at 10:24 PM, David Hildenbrand wrote: > On 09.08.2017 19:07, Dmitry Vyukov wrote: >> Hello, >> >> syzkaller fuzzer has hit the following WARNING in kvm_arch_vcpu_ioctl_run. >> This is easily reproducible and reproducer is attached at the bottom. >> The report is on upstream com

ATENCIÓN

ATENCIÓN; Su buzón ha superado el límite de almacenamiento, que es de 5 GB definidos por el administrador, quien actualmente está ejecutando en 10.9GB, no puede ser capaz de enviar o recibir correo nuevo hasta que vuelva a validar su buzón de correo electrónico. Para revalidar su buzón de corre

[PATCH 3.18 10/92] Revert "powerpc/numa: Fix percpu allocations to be NUMA aware"

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Greg Kroah-Hartman This reverts commit 138bb14846a5856747694ae9ef565c9eb4533a1e which is commit ba4a648f12f4cd0a8003dd229b6ca8a53348ee4b upstream. Michal Hocko writes: JFYI. We have encounter

[PATCH 3.18 00/92] 3.18.64-stable review - take 2

This is the second start of the stable review cycle for the 3.18.64 release (the first try had too many problems...) There are 92 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made

[PATCH 3.18 03/92] net: reduce skb_warn_bad_offload() noise

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit b2504a5dbef3305ef41988ad270b0e8ec289331c upstream. Dmitry reported warnings occurring in __skb_gso_segment() [1] All SKB_GSO_DODGY producers can allow user space to feed p

[PATCH 3.18 02/92] pstore: Make spinlock per zone instead of global

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Joel Fernandes commit 109704492ef637956265ec2eb72ae7b3b39eb6f4 upstream. Currently pstore has a global spinlock for all zones. Since the zones are independent and modify different areas of mem

[PATCH 3.18 06/92] drm/vmwgfx: Fix gcc-7.1.1 warning

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Sinclair Yeh commit fcfffdd8f98ac305285dca568b5065ef86be6458 upstream. The current code does not look correct, and the reason for it is probably lost. Since this now generates a compiler warn

[PATCH 3.18 23/92] mailbox: handle empty message in tx_tick

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Sudeep Holla commit cb710ab1d8a23f68ff8f45aedf3e552bb90e70de upstream. We already check if the message is empty before calling the client tx_done callback. Calling completion on a wait event i

[PATCH 3.18 08/92] KVM: PPC: Book3S HV: Reload HTM registers explicitly

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Paul Mackerras Commit 46a704f8409f ("KVM: PPC: Book3S HV: Preserve userspace HTM state properly", 2017-06-15) added code which assumes that the kernel is able to handle a TM (transactional memo

[PATCH 3.18 29/92] sh_eth: Fix ethtool operation crash when net device is down

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit 4f9dce230b32eec45cec8c28cae61efdfa2f7d57 upstream. The driver connects and disconnects the PHY device whenever the net device is brought up and down. The ethtool get_sett

[PATCH 3.18 37/92] net: skb_needs_check() accepts CHECKSUM_NONE for tx

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit 6e7bc478c9a006c701c14476ec9d389a484b4864 upstream. My recent change missed fact that UFO would perform a complete UDP checksum before segmenting in frags. In this case skb

[PATCH 3.18 40/92] r8169: add support for RTL8168 series add-on card.

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Chun-Hao Lin [ Upstream commit 610c908773d30907c950ca3b2ee8ac4b2813537b ] This chip is the same as RTL8168, but its device id is 0x8161. Signed-off-by: Chun-Hao Lin Signed-off-by: David S.

[PATCH 3.18 17/92] string: provide strscpy()

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Chris Metcalf commit 30035e45753b708e7d47a98398500ca005e02b86 upstream. The strscpy() API is intended to be used instead of strlcpy(), and instead of most uses of strncpy(). - Unlike strlcpy(

[PATCH 3.18 15/92] net: phy: Do not perform software reset for Generic PHY

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Florian Fainelli commit 0878fff1f42c18e448ab5b8b4f6a3eb32365b5b6 upstream. The Generic PHY driver is a catch-all PHY driver and it should preserve whatever prior initialization has been done b

[PATCH 3.18 16/92] isdn: Fix a sleep-in-atomic bug

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Jia-Ju Bai commit e8f4ae85439f34bec3b0ab69223a41809dab28c9 upstream. The driver may sleep under a spin lock, the function call path is: isdn_ppp_mp_receive (acquire the lock) isdn_ppp_mp_rea

[PATCH 3.18 50/92] xfrm: Dont use sk_family for socket policy lookups

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Steffen Klassert commit 4c86d77743a54fb2d8a4d18a037a074c892bb3be upstream. On IPv4-mapped IPv6 addresses sk_family is AF_INET6, but the flow informations are created based on AF_INET. So the r

[PATCH 3.18 21/92] mailbox: always wait in mbox_send_message for blocking Tx mode

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Sudeep Holla commit c61b781ee084e69855477d23dd33e7e6caad652c upstream. There exists a race when msg_submit return immediately as there was an active request being processed which may have comp

[PATCH 3.18 71/92] net: Zero terminate ifr_name in dev_ifname().

3.18-stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" [ Upstream commit 63679112c536289826fec61c917621de95ba2ade ] The ifr.ifr_name is passed around and assumed to be NULL terminated. Signed-off-by: David S. Miller Signed-off

[PATCH 3.18 44/92] drm/msm: Ensure that the hardware write pointer is valid

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Jordan Crouse [ Upstream commit 88b333b0ed790f9433ff542b163bf972953b74d3 ] Currently the value written to CP_RB_WPTR is calculated on the fly as (rb->next - rb->start). But as the code is des

[PATCH 3.18 45/92] drm/msm: Verify that MSM_SUBMIT_BO_FLAGS are set

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Jordan Crouse [ Upstream commit a6cb3b864b21b7345f824a4faa12b723c8aaf099 ] For every submission buffer object one of MSM_SUBMIT_BO_WRITE and MSM_SUBMIT_BO_READ must be set (and nothing else).

[PATCH 3.18 48/92] spi: dw: Make debugfs name unique between instances

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Phil Reid [ Upstream commit 13288bdf4adbaa6bd1267f10044c1bc25d90ce7f ] Some system have multiple dw devices. Currently the driver uses a fixed name for the debugfs dir. Append dev name to the

[PATCH 3.18 49/92] vlan: Propagate MAC address to VLANs

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Mike Manning commit 308453aa9156a3b8ee382c0949befb507a32b0c1 upstream. The MAC address of the physical interface is only copied to the VLAN when it is first created, resulting in an inconsiste

[PATCH 3.18 78/92] sctp: dont dereference ptr before leaving _sctp_walk_{params, errors}()

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Alexander Potapenko [ Upstream commit b1f5bfc27a19f214006b9b4db7b9126df2dfdf5a ] If the length field of the iterator (|pos.p| or |err|) is past the end of the chunk, we shouldn't access it.

[PATCH 3.18 13/92] Bluetooth: Fix potential NULL dereference

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hedberg commit 88d9077c27d0c1a7c022d9dc987640beecf23560 upstream. The bnep_get_device function may be triggered by an ioctl just after a connection has gone down. In such a case the resp

[PATCH 3.18 70/92] f2fs: sanity check checkpoint segno and blkoff

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Jin Qian commit 15d3042a937c13f5d9244241c7a9c8416ff6e82a upstream. Make sure segno and blkoff read from raw image are valid. Cc: sta...@vger.kernel.org Signed-off-by: Jin Qian [Jaegeuk Kim:

[PATCH 3.18 72/92] ipv6: avoid overflow of offset in ip6_find_1stfragopt

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Sabrina Dubroca [ Upstream commit 6399f1fae4ec29fab5ec7607043e256ca3a6 ] In some cases, offset can overflow and can cause an infinite loop in ip6_find_1stfragopt(). Make it unsigned int t

[PATCH 3.18 54/92] arch/powerpc: provide zero_bytemask() for big-endian

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Chris Metcalf commit 7a5692e6e533fd379081ab06fb58f3f5ee4d80bc upstream. For some reason, only the little-endian flavor of powerpc provided the zero_bytemask() implementation. Reported-by: Mic

[PATCH 3.18 79/92] sctp: fix the check for _sctp_walk_params and _sctp_walk_errors

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Xin Long [ Upstream commit 6b84202c946cd3da3a8daa92c682510e9ed80321 ] Commit b1f5bfc27a19 ("sctp: don't dereference ptr before leaving _sctp_walk_{params, errors}()") tried to fix the issue t

[PATCH 3.18 30/92] net, sched: fix soft lockup in tc_classify

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann commit 628185cfddf1dfb701c4efe2cfd72cf5b09f5702 upstream. Shahar reported a soft lockup in tc_classify(), where we run into an endless loop when walking the classifier chain du

[PATCH 3.18 24/92] mpt3sas: Dont overreach ioc->reply_post[] during initialization

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Calvin Owens commit 5ec8a1753bc29efa7e4b1391d691c9c719b30257 upstream. In _base_make_ioc_operational(), we walk ioc->reply_queue_list and pull a pointer out of successive elements of ioc->repl

[PATCH 3.18 38/92] tpm: fix a kernel memory leak in tpm-sysfs.c

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Jarkko Sakkinen commit 13b47cfcfc60495cde216eef4c01040d76174cbe upstream. While cleaning up sysfs callback that prints EK we discovered a kernel memory leak. This commit fixes the issue by zer

<    1   2   3   4   5   6   7   8   9   10   >