[PATCH 3.4 12/26] clockevents: Sanitize ticks to nsec conversion

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Thomas Gleixner commit 97b9410643475d6557d2517c2aff9fd2221141a9 upstream. Marc Kleine-Budde pointed out, that commit 77cc982 "clocksource: use clockevents_config_and_register() where possible"

[PATCH 3.4 00/26] 3.4.69-stable review

This is the start of the stable review cycle for the 3.4.69 release. There are 26 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Mon Nov 11 06:50:22 UTC 2013. Anything

[PATCH 3.4 14/26] ALSA: hda - Add a fixup for ASUS N76VZ

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 6fc16e58adf50c0f1e4478538983fb5ff6f453d4 upstream. ASUS N76VZ needs the same fixup as N56VZ for supporting the boost speaker. Bugzilla:

[PATCH 3.4 13/26] parisc: Do not crash 64bit SMP kernels on machines with >= 4GB RAM

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Helge Deller commit 54e181e073fc1415e41917d725ebdbd7de956455 upstream. Since the beginning of the parisc-linux port, sometimes 64bit SMP kernels were not able to bring up other CPUs than the

[PATCH 3.4 11/26] md: Fix skipping recovery for read-only arrays.

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Lukasz Dorau commit 61e4947c99c4494336254ec540c50186d186150b upstream. Since: commit 7ceb17e87bde79d285a8b988cfed9eaeebe60b86 md: Allow devices to be re-added to a read-only

[PATCH 3.4 19/26] Staging: bcm: info leak in ioctl

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 8d1e72250c847fa96498ec029891de4dc638a5ba upstream. The DevInfo.u32Reserved[] array isn't initialized so it leaks kernel information to user space. Reported-by: Nico Golde

[PATCH 3.4 15/26] ALSA: fix oops in snd_pcm_info() caused by ASoC DPCM

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Russell King commit a4461f41b94cb52e0141af717dcf4ef6558c8e2e upstream. Unable to handle kernel NULL pointer dereference at virtual address 0008 pgd = d530 [0008] *pgd=0d265831,

[PATCH 3.4 20/26] uml: check length in exitcode_proc_write()

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 201f99f170df14ba52ea4c52847779042b7a623b upstream. We don't cap the size of buffer from the user so we could write past the end of the array here. Only root can write to

[PATCH 3.4 16/26] ASoC: wm_hubs: Add missing break in hp_supply_event()

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 268ff14525edba31da29a12a9dd693cdd6a7872e upstream. Spotted by coverity CID 115170. Signed-off-by: Takashi Iwai Signed-off-by: Mark Brown Signed-off-by: Greg

[PATCH 3.4 24/26] mm: fix aio performance regression for database caused by THP

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Khalid Aziz commit 7cb2ef56e6a8b7b368b2e883a0a47d02fed66911 upstream. I am working with a tool that simulates oracle database I/O workload. This tool (orion to be specific -

[PATCH 3.4 22/26] lib/scatterlist.c: dont flush_kernel_dcache_page on slab page

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Ming Lei commit 3d77b50c5874b7e923be946ba793644f82336b75 upstream. Commit b1adaf65ba03 ("[SCSI] block: add sg buffer copy helper functions") introduces two sg buffer copy helpers, and calls

[PATCH 3.4 23/26] aacraid: missing capable() check in compat ioctl

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit f856567b930dfcdbc3323261bf77240ccdde01f5 upstream. In commit d496f94d22d1 ('[SCSI] aacraid: fix security weakness') we added a check on CAP_SYS_RAWIO to the ioctl. The

[PATCH 3.4 26/26] drm/radeon/atom: workaround vbios bug in transmitter table on rs780

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit c23632d4e57c0dd20bf50eca08fa0eb8ad3ff680 upstream. Some rs780 asics seem to be affected as well. See:

[PATCH 3.4 02/26] USB: quirks.c: add one device that cannot deal with suspension

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Neukum commit 4294bca7b423d1a5aa24307e3d112a04075e3763 upstream. The device is not responsive when resumed, unless it is reset. Signed-off-by: Oliver Neukum Signed-off-by: Greg

[PATCH 3.4 18/26] staging: ozwpan: prevent overflow in oz_cdev_write()

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit c2c65cd2e14ada6de44cb527e7f1990bede24e15 upstream. We need to check "count" so we don't overflow the ei->data buffer. Reported-by: Nico Golde Reported-by: Fabian

[PATCH 3.4 17/26] ASoC: dapm: Fix source list debugfs outputs

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit ff18620c2157671a8ee21ebb8e6a3520ea209b1f upstream. ... due to a copy & paste error. Spotted by coverity CID 710923. Signed-off-by: Takashi Iwai Signed-off-by: Mark Brown

[PATCH 3.4 21/26] xtensa: dont use alternate signal stack on threads

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Baruch Siach commit cba9a90053e3b7973eff4f1946f33032e98eeed5 upstream. According to create_thread(3): "The new thread does not inherit the creating thread's alternate signal stack". Since

[PATCH 3.4 07/26] rtlwifi: rtl8192cu: Fix error in pointer arithmetic

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Mark Cave-Ayland commit 9473ca6e920a3b9ca902753ce52833657f9221cc upstream. An error in calculating the offset in an skb causes the driver to read essential device info from the wrong

[PATCH 3.4 05/26] mac80211: correctly close cancelled scans

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Emmanuel Grumbach commit a754055a1296fcbe6f32de3a5eaca6efb2fd1865 upstream. __ieee80211_scan_completed is called from a worker. This means that the following flow is possible. * driver calls

[PATCH 3.4 04/26] USB: serial: ftdi_sio: add id for Z3X Box device

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Алексей Крамаренко commit e1466ad5b1aeda303f9282463d55798d2eda218c upstream. Custom VID/PID for Z3X Box device, popular tool for cellphone flashing. Signed-off-by: Alexey E. Kramarenko

[PATCH 3.4 09/26] can: flexcan: flexcan_chip_start: fix regression, mark one MB for TX and abort pending TX

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Marc Kleine-Budde commit d5a7b406c529e4595ce03dc8f6dcf7fa36f106fa upstream. In patch 0d1862e can: flexcan: fix flexcan_chip_start() on imx6 the loop in flexcan_chip_start() that iterates

[PATCH 3.4 03/26] USB: quirks: add touchscreen that is dazzeled by remote wakeup

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Neukum commit 614ced91fc6fbb5a1cdd12f0f1b6c9197d9f1350 upstream. The device descriptors are messed up after remote wakeup Signed-off-by: Oliver Neukum Signed-off-by: Greg

[PATCH 3.4 08/26] jfs: fix error path in ialloc

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Dave Kleikamp commit 8660998608cfa1077e560034db81885af8e1e885 upstream. If insert_inode_locked() fails, we shouldn't be calling unlock_new_inode(). Signed-off-by: Dave Kleikamp Tested-by:

[PATCH 3.4 06/26] mac80211: update sta->last_rx on acked tx frames

3.4-stable review patch. If anyone has any objections, please let me know. -- From: Felix Fietkau commit 0c5b93290b2f3c7a376567c03ae8d385b0e99851 upstream. When clients are idle for too long, hostapd sends nullfunc frames for probing. When those are acked by the client, the

[PATCH 3.10 12/74] mac80211: use sta_info_get_bss() for nl80211 tx and client probing

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Felix Fietkau commit 03bb7f42765ce596604f03d179f3137d7df05bba upstream. This allows calls for clients in AP_VLANs (e.g. for 4-addr) to succeed Signed-off-by: Felix Fietkau Signed-off-by:

[PATCH 3.10 13/74] mac80211: update sta->last_rx on acked tx frames

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Felix Fietkau commit 0c5b93290b2f3c7a376567c03ae8d385b0e99851 upstream. When clients are idle for too long, hostapd sends nullfunc frames for probing. When those are acked by the client, the

[PATCH 3.10 14/74] mac80211: fix crash if bitrate calculation goes wrong

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Johannes Berg commit d86aa4f8ca58898ec6a94c0635da20b948171ed7 upstream. If a frame's timestamp is calculated, and the bitrate calculation goes wrong and returns zero, the system will attempt

[PATCH 3.10 16/74] cfg80211: fix warning when using WEXT for IBSS

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Bruno Randolf commit f478f33a93f9353dcd1fe55445343d76b1c3f84a upstream. Fix kernel warning when using WEXT for configuring ad-hoc mode, e.g. "iwconfig wlan0 essid test channel 1" WARNING:

[PATCH 3.10 17/74] mwifiex: fix SDIO interrupt lost issue

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Amitkumar Karwar commit 453b0c3f6910672f79da354077af728d92f95c5b upstream. 601216e "mwifiex: process RX packets in SDIO IRQ thread directly" introduced a command timeout issue which can be

[PATCH 3.10 15/74] ath9k: fix tx queue scheduling after channel changes

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Felix Fietkau commit ec30326ea773900da210c495e14cfeb532550ba2 upstream. Otherwise, if queues are full during a scan, tx scheduling does not resume after switching back to the home channel.

[PATCH 3.10 18/74] rtlwifi: rtl8192cu: Fix error in pointer arithmetic

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Mark Cave-Ayland commit 9473ca6e920a3b9ca902753ce52833657f9221cc upstream. An error in calculating the offset in an skb causes the driver to read essential device info from the wrong

[PATCH 3.10 22/74] can: flexcan: fix mx28 detection by rearanging OF match table

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Marc Kleine-Budde commit e358784297992b012e8071764d996191dd2b1a54 upstream. The current implemetation of of_match_device() relies that the of_device_id table in the driver is sorted from most

[PATCH 3.10 19/74] iwlwifi: pcie: add SKUs for 6000, 6005 and 6235 series

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Emmanuel Grumbach commit 08a5dd3842f2ac61c6d69661d2d96022df8ae359 upstream. Add some new PCI IDs to the table for 6000, 6005 and 6235 series. Signed-off-by: Emmanuel Grumbach Signed-off-by:

[PATCH 3.10 23/74] can: flexcan: flexcan_chip_start: fix regression, mark one MB for TX and abort pending TX

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Marc Kleine-Budde commit d5a7b406c529e4595ce03dc8f6dcf7fa36f106fa upstream. In patch 0d1862e can: flexcan: fix flexcan_chip_start() on imx6 the loop in flexcan_chip_start() that

[PATCH 3.10 24/74] SCSI: sd: call blk_pm_runtime_init before add_disk

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Aaron Lu commit 10c580e4239df5c3344ca00322eca86ab2de880b upstream. Sujit has found a race condition that would make q->nr_pending unbalanced, it occurs as Sujit explained: " sd_probe_async()

[PATCH 3.10 21/74] can: at91-can: fix device to driver data mapping for platform devices

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Marc Kleine-Budde commit 5abbeea553c8260ed4e2ac4aae962aff800b6c6d upstream. In commit: 3078cde7 can: at91_can: add dt support device tree support was added to the at91_can driver. In

[PATCH 3.10 01/74] usb-storage: add quirk for mandatory READ_CAPACITY_16

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Neukum commit 32c37fc30c52508711ea6a108cfd5855b8a07176 upstream. Some USB drive enclosures do not correctly report an overflow condition if they hold a drive with a capacity over 2TB

[PATCH 3.10 20/74] jfs: fix error path in ialloc

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Dave Kleikamp commit 8660998608cfa1077e560034db81885af8e1e885 upstream. If insert_inode_locked() fails, we shouldn't be calling unlock_new_inode(). Signed-off-by: Dave Kleikamp Tested-by:

[PATCH 3.10 29/74] md: avoid deadlock when md_set_badblocks.

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Bian Yu commit 905b0297a9533d7a6ee00a01a990456636877dd6 upstream. When operate harddisk and hit errors, md_set_badblocks is called after scsi_restart_operations which already disabled the

[PATCH 3.10 26/74] raid5: set bio bi_vcnt 0 for discard request

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Shaohua Li commit 37c61ff31e9b5e3fcf3cc6579f5c68f6ad40c4b1 upstream. SCSI layer will add new payload for discard request. If two bios are merged to one, the second bio has bi_vcnt 1 which is

[PATCH 3.10 25/74] ecryptfs: Fix memory leakage in keystore.c

3.10-stable review patch. If anyone has any objections, please let me know. -- From: "Geyslan G. Bem" commit 3edc8376c06133e3386265a824869cad03a4efd4 upstream. In 'decrypt_pki_encrypted_session_key' function: Initializes 'payload' pointer and releases it on exit.

[PATCH 3.10 32/74] vhost/scsi: Fix incorrect usage of get_user_pages_fast write parameter

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Nicholas Bellinger commit 60a01f558af9c48b0bb31f303c479e32721add3f upstream. This patch addresses a long-standing bug where the get_user_pages_fast() write parameter used for setting the

[PATCH 3.10 30/74] md: Fix skipping recovery for read-only arrays.

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Lukasz Dorau commit 61e4947c99c4494336254ec540c50186d186150b upstream. Since: commit 7ceb17e87bde79d285a8b988cfed9eaeebe60b86 md: Allow devices to be re-added to a read-only

[PATCH 3.10 27/74] raid5: avoid finding "discard" stripe

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Shaohua Li commit d47648fcf0611812286f68131b40251c6fa54f5e upstream. SCSI discard will damage discard stripe bio setting, eg, some fields are changed. If the stripe is reused very soon, we

[PATCH 3.10 31/74] target/pscsi: fix return value check

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Wei Yongjun commit 58932e96e438cd78f75e765d7b87ef39d3533d15 upstream. In case of error, the function scsi_host_lookup() returns NULL pointer not ERR_PTR(). The IS_ERR() test in the return

[PATCH 3.10 02/74] USB: support new huawei devices in option.c

3.10-stable review patch. If anyone has any objections, please let me know. -- From: "Fangxiaozhi (Franko)" commit d544db293a44a2a3b09feab7dbd59668b692de71 upstream. Add new supporting declarations to option.c, to support Huawei new devices with new bInterfaceSubClass value.

[PATCH 3.10 35/74] scripts/kallsyms: filter symbols not in kernel address space

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Ming Lei commit f6537f2f0eba4eba3354e48dbe3047db6d8b6254 upstream. This patch uses CONFIG_PAGE_OFFSET to filter symbols which are not in kernel address space because these symbols are

[PATCH 3.10 39/74] ALSA: hda - Add a fixup for ASUS N76VZ

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 6fc16e58adf50c0f1e4478538983fb5ff6f453d4 upstream. ASUS N76VZ needs the same fixup as N56VZ for supporting the boost speaker. Bugzilla:

[PATCH 3.10 33/74] clockevents: Sanitize ticks to nsec conversion

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Thomas Gleixner commit 97b9410643475d6557d2517c2aff9fd2221141a9 upstream. Marc Kleine-Budde pointed out, that commit 77cc982 "clocksource: use clockevents_config_and_register() where

[PATCH 3.10 28/74] libata: make ata_eh_qc_retry() bump scmd->allowed on bogus failures

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Gwendal Grignou commit f13e220161e738c2710b9904dcb3cf8bb0bcce61 upstream. libata EH decrements scmd->retries when the command failed for reasons unrelated to the command itself so that, for

[PATCH 3.10 36/74] ARC: Incorrect mm reference used in vmalloc fault handler

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Vineet Gupta commit 9c41f4eeb9d51f3ece20428d35a3ea32cf3b5622 upstream. A vmalloc fault needs to sync up PGD/PTE entry from init_mm to current task's "active_mm". ARC vmalloc fault handler

[PATCH 3.10 34/74] parisc: Do not crash 64bit SMP kernels on machines with >= 4GB RAM

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Helge Deller commit 54e181e073fc1415e41917d725ebdbd7de956455 upstream. Since the beginning of the parisc-linux port, sometimes 64bit SMP kernels were not able to bring up other CPUs than the

[PATCH 3.10 37/74] ALSA: hda - Add missing initial vmaster hook at build_controls callback

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit b63eae0a6c84839275a4638a7baa391be965cd0e upstream. The generic parser has a support of vmaster hook, but this is initialized only in the init callback with the check of

[PATCH 3.10 07/74] cpufreq / intel_pstate: Fix max_perf_pct on resume

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Dirk Brandewie commit 52e0a509e5d6f902ec26bc2a8bb02b137dc453be upstream. If the system is suspended while max_perf_pct is less than 100 percent or no_turbo set policy->{min,max} will be set

[PATCH 3.10 03/74] USB: quirks.c: add one device that cannot deal with suspension

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Neukum commit 4294bca7b423d1a5aa24307e3d112a04075e3763 upstream. The device is not responsive when resumed, unless it is reset. Signed-off-by: Oliver Neukum Signed-off-by: Greg

[PATCH 3.10 05/74] USB: serial: ftdi_sio: add id for Z3X Box device

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Алексей Крамаренко commit e1466ad5b1aeda303f9282463d55798d2eda218c upstream. Custom VID/PID for Z3X Box device, popular tool for cellphone flashing. Signed-off-by: Alexey E. Kramarenko

[PATCH 3.10 08/74] bcache: Fixed incorrect order of arguments to bio_alloc_bioset()

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Kent Overstreet commit d4eddd42f592a0cf06818fae694a3d271f842e4d upstream. Signed-off-by: Kent Overstreet Signed-off-by: Linus Torvalds Signed-off-by: Greg Kroah-Hartman ---

[PATCH 3.10 09/74] cgroup: fix to break the while loop in cgroup_attach_task() correctly

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Anjana V Kumar commit ea84753c98a7ac6b74e530b64c444a912b3835ca upstream. Both Anjana and Eunki reported a stall in the while_each_thread loop in cgroup_attach_task(). It's because, when we

[PATCH 3.10 38/74] ALSA: hda - Fix unbalanced runtime PM refcount after S3/S4

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit e6bbe73ab044a3d39ddb74e4d9a401cf1d6f upstream. When a machine goes to S3/S4 after power-save is enabled, the runtime PM refcount might be incorrectly decreased because

[PATCH 3.10 40/74] ALSA: fix oops in snd_pcm_info() caused by ASoC DPCM

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Russell King commit a4461f41b94cb52e0141af717dcf4ef6558c8e2e upstream. Unable to handle kernel NULL pointer dereference at virtual address 0008 pgd = d530 [0008] *pgd=0d265831,

[PATCH 3.10 04/74] USB: quirks: add touchscreen that is dazzeled by remote wakeup

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Neukum commit 614ced91fc6fbb5a1cdd12f0f1b6c9197d9f1350 upstream. The device descriptors are messed up after remote wakeup Signed-off-by: Oliver Neukum Signed-off-by: Greg

[PATCH 3.10 06/74] x86: Update UV3 hub revision ID

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Russ Anderson commit dd3c9c4b603c664fedc12facf180db0f1794aafe upstream. The UV3 hub revision ID is different than expected. The first revision was supposed to start at 1 but instead will

[PATCH 3.10 61/74] mm: Close races between THP migration and PMD numa clearing

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Mel Gorman commit 3f926ab945b60a5824369d21add7710622a2eac0 upstream. THP migration uses the page lock to guard against parallel allocations but there are cases like this still open Task A

[PATCH 3.10 60/74] mm: numa: Sanitize task_numa_fault() callsites

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Mel Gorman commit c61109e34f60f6e85bb43c5a1cd51c0e3db40847 upstream. There are three callers of task_numa_fault(): - do_huge_pmd_numa_page(): Accounts against the current node, not the

[PATCH 3.10 56/74] clk: fixup argument order when setting VCO parameters

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Jonathan Austin commit 2f9f64bc5aa31836810cd25301aa4772ad73ebab upstream. The order of arguments in the call to vco_set() for the ICST clocks appears to have been switched in error, which

[PATCH 3.10 62/74] mm: Account for a THP NUMA hinting update as one PTE update

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Mel Gorman commit 0255d491848032f6c601b6410c3b8ebded3a37b1 upstream. A THP PMD update is accounted for as 512 pages updated in vmstat. This is large difference when estimating the cost of

[PATCH 3.10 55/74] aacraid: missing capable() check in compat ioctl

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit f856567b930dfcdbc3323261bf77240ccdde01f5 upstream. In commit d496f94d22d1 ('[SCSI] aacraid: fix security weakness') we added a check on CAP_SYS_RAWIO to the ioctl. The

[PATCH 3.10 42/74] ASoC: dapm: Fix source list debugfs outputs

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit ff18620c2157671a8ee21ebb8e6a3520ea209b1f upstream. ... due to a copy & paste error. Spotted by coverity CID 710923. Signed-off-by: Takashi Iwai Signed-off-by: Mark

[PATCH 3.10 57/74] mm: numa: Do not account for a hinting fault if we raced

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Mel Gorman commit 1dd49bfa3465756b3ce72214b58a33e4afb67aa3 upstream. If another task handled a hinting fault in parallel then do not double account for it. Signed-off-by: Mel Gorman

[PATCH 3.10 58/74] mm: Wait for THP migrations to complete during NUMA hinting faults

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Mel Gorman commit 42836f5f8baa33085f547098b74aa98991ee9216 upstream. The locking for migrating THP is unusual. While normal page migration prevents parallel accesses using a migration PTE,

[PATCH 3.10 59/74] mm: Prevent parallel splits during THP migration

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Mel Gorman commit 587fe586f44a48f9691001ba6c45b86c8e4ba21f upstream. THP migrations are serialised by the page lock but on its own that does not prevent THP splits. If the page is split

[PATCH 3.10 00/74] 3.10.19-stable review

This is the start of the stable review cycle for the 3.10.19 release. There are 74 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Mon Nov 11 06:50:58 UTC 2013. Anything

[PATCH 3.10 51/74] au1100fb: VM_IO is set by io_remap_pfn_range()

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Al Viro commit c607f450f6e49f5794f27617bedc638b51044d2e upstream. Signed-off-by: Al Viro Signed-off-by: Greg Kroah-Hartman --- drivers/video/au1100fb.c |2 -- 1 file changed, 2

[PATCH 3.10 45/74] Staging: sb105x: info leak in mp_get_count()

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit a8b33654b1e3b0c74d4a1fed041c9aae50b3c427 upstream. The icount.reserved[] array isn't initialized so it leaks stack information to userspace. Reported-by: Nico Golde

[PATCH 3.10 47/74] uml: check length in exitcode_proc_write()

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 201f99f170df14ba52ea4c52847779042b7a623b upstream. We don't cap the size of buffer from the user so we could write past the end of the array here. Only root can write to

[PATCH 3.10 48/74] xtensa: dont use alternate signal stack on threads

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Baruch Siach commit cba9a90053e3b7973eff4f1946f33032e98eeed5 upstream. According to create_thread(3): "The new thread does not inherit the creating thread's alternate signal stack". Since

[PATCH 3.10 73/74] NTB: Correct USD/DSD Identification

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Jon Mason commit b6750cfe0710a14fd147ba27fddbecae8ba88c77 upstream. Due to ambiguous documentation, the USD/DSD identification is backward when compared to the setting in BIOS. Correct the

[PATCH 3.10 65/74] drm/vmwgfx: Dont put resources with invalid ids on lru list

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Thomas Hellstrom commit 26682480c202e7360cbcdc3bc9e962bf749c6b8d upstream. The evict code may try to swap them out causing a BUG in the destroy function. Signed-off-by: Thomas Hellstrom

[PATCH 3.10 63/74] mm/pagewalk.c: fix walk_page_range() access of wrong PTEs

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Chen LinX commit 3017f079efd6af199b0852b5c425364513db460e upstream. When walk_page_range walk a memory map's page tables, it'll skip VM_PFNMAP area, then variable 'next' will to assign to

[PATCH 3.10 64/74] mm/vmalloc.c: fix an overflow bug in alloc_vmap_area()

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Zhang Yanfei commit bcb615a81b1765864c71c50afb56631e7a1e5283 upstream. When searching a vmap area in the vmalloc space, we use (addr + size - 1) to check if the value is less than addr, which

[PATCH 3.10 74/74] NTB: Correct debugfs to work with more than 1 NTB Device

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Jon Mason commit 1517a3f21a1dd321f16bcf44204bddff9d21abd0 upstream. Debugfs was setup in NTB to only have a single debugfs directory. This resulted in the leaking of debugfs directories and

[PATCH 3.10 46/74] staging: wlags49_h2: buffer overflow setting station name

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit b5e2f339865fb443107e5b10603e53bbc92dc054 upstream. We need to check the length parameter before doing the memcpy(). I've actually changed it to strlcpy() as well so that

[PATCH 3.10 67/74] drm: Prevent overwriting from userspace underallocating core ioctl structs

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Chris Wilson commit b062672e305ce071f21eb9e18b102c2a430e0999 upstream. Apply the protections from commit 1b2f1489633888d4a06028315dc19d65768a1c05 Author: Dave Airlie Date: Sat Aug 14

[PATCH 3.10 52/74] au1200fb: io_remap_pfn_range() sets VM_IO

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Al Viro commit 1fca06fafb235a88c4fa91294aa1726c0e22855b upstream. ... and single return is quite sufficient to get out of function, TYVM Signed-off-by: Al Viro Signed-off-by: Greg

[PATCH 3.10 71/74] NTB: Add Error Handling in ntb_device_setup

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Jon Mason commit 3b12a0d15bd1559e72ad21d9d807fd2a6706f0ab upstream. If an error is encountered in ntb_device_setup, it is possible that the spci_cmd isn't populated. Writes to the offset can

[PATCH 3.10 68/74] drm: Pad drm_mode_get_connector to 64-bit boundary

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Chris Wilson commit bc5bd37ce48c66e9192ad2e7231e9678880f6f8e upstream. Pavel Roskin reported that DRM_IOCTL_MODE_GETCONNECTOR was overwritting the 4 bytes beyond the end of its structure with

[PATCH 3.10 66/74] drm/vmwgfx: Dont kill clients on VT switch

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Thomas Hellstrom commit c4249855ac5b2a383704d31e040d3831d6a25c6f upstream. DRI clients that tried to grab the TTM lock when the master (X server) was switched away during a VT switch were

[PATCH 3.10 44/74] Staging: bcm: info leak in ioctl

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 8d1e72250c847fa96498ec029891de4dc638a5ba upstream. The DevInfo.u32Reserved[] array isn't initialized so it leaks kernel information to user space. Reported-by: Nico

[PATCH 3.10 72/74] NTB: Correct Number of Scratch Pad Registers

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Jon Mason commit 87034511519815259e37336f52edf06d114d43b6 upstream. The NTB Xeon hardware has 16 scratch pad registers and 16 back-to-back scratch pad registers. Correct the #define to

[PATCH 3.10 54/74] lib/scatterlist.c: dont flush_kernel_dcache_page on slab page

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Ming Lei commit 3d77b50c5874b7e923be946ba793644f82336b75 upstream. Commit b1adaf65ba03 ("[SCSI] block: add sg buffer copy helper functions") introduces two sg buffer copy helpers, and calls

[PATCH 3.11 10/94] cpufreq: s3c64xx: Rename index to driver_data

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Charles Keepax commit 0e8244322b7fc45fd11a1c45f70b6bacddf4986f upstream. The index field of cpufreq_frequency_table has been renamed to driver_data by commit 5070158 (cpufreq: rename index as

[PATCH] ext4: explain encoding of 34-bit a,c,mtime values

On Fri, 2013-11-08 at 14:37 -0700, Andreas Dilger wrote: > On Nov 7, 2013, at 4:26 PM, David Turner wrote: > > On Fri, 2013-11-08 at 00:14 +0100, Jan Kara wrote: > >> Still unnecessary type cast here (but that's a cosmetic issue). > > ... > >> Otherwise the patch looks good. You can add: > >>

[PATCH 3.10 41/74] ASoC: wm_hubs: Add missing break in hp_supply_event()

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 268ff14525edba31da29a12a9dd693cdd6a7872e upstream. Spotted by coverity CID 115170. Signed-off-by: Takashi Iwai Signed-off-by: Mark Brown Signed-off-by: Greg

[PATCH 3.10 49/74] mm: make generic_access_phys available for modules

3.10-stable review patch. If anyone has any objections, please let me know. -- From: Uwe Kleine-König commit 5a73633ef01cd8772defa6a3c34a588376a1df4c upstream. In the next commit this function will be used in the uio subsystem Signed-off-by: Uwe Kleine-König Signed-off-by:

[PATCH 3.11 00/94] 3.11.8-stable review

This is the start of the stable review cycle for the 3.11.8 release. There are 94 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Mon Nov 11 06:51:44 UTC 2013. Anything

[PATCH 3.11 04/94] USB: quirks.c: add one device that cannot deal with suspension

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Neukum commit 4294bca7b423d1a5aa24307e3d112a04075e3763 upstream. The device is not responsive when resumed, unless it is reset. Signed-off-by: Oliver Neukum Signed-off-by: Greg

[PATCH 3.11 24/94] rtlwifi: rtl8192cu: Fix error in pointer arithmetic

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Mark Cave-Ayland commit 9473ca6e920a3b9ca902753ce52833657f9221cc upstream. An error in calculating the offset in an skb causes the driver to read essential device info from the wrong

[PATCH 3.11 22/94] cfg80211: fix warning when using WEXT for IBSS

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Bruno Randolf commit f478f33a93f9353dcd1fe55445343d76b1c3f84a upstream. Fix kernel warning when using WEXT for configuring ad-hoc mode, e.g. "iwconfig wlan0 essid test channel 1" WARNING:

[PATCH 3.11 21/94] cfg80211: use the correct macro to check for active monitor support

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Luciano Coelho commit 180032973ee97daddf5c9d733e5b425b108f8679 upstream. Use MONITOR_FLAG_ACTIVE, which is a flag mask, instead of NL80211_MNTR_FLAG_ACTIVE, which is a flag index, when

[PATCH 3.11 12/94] bcache: Fixed incorrect order of arguments to bio_alloc_bioset()

3.11-stable review patch. If anyone has any objections, please let me know. -- From: Kent Overstreet commit d4eddd42f592a0cf06818fae694a3d271f842e4d upstream. Signed-off-by: Kent Overstreet Signed-off-by: Linus Torvalds Signed-off-by: Greg Kroah-Hartman ---

  1   2   3   4   5   6   7   8   9   10   >