[PATCH 4.4 01/43] f2fs: do more integrity verification for superblock

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Chao Yu commit 9a59b62fd88196844cee5fff851bee2cfd7afb6e upstream. Do more sanity check for superblock during ->mount. Signed-off-by: Chao Yu

[PATCH 4.4 00/43] 4.4.66-stable review

This is the start of the stable review cycle for the 4.4.66 release. There are 43 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed May 3 21:25:49 UTC 2017. Anything

[PATCH 4.4 22/43] net/packet: fix overflow in check for tp_reserve

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Andrey Konovalov [ Upstream commit bcc5364bdcfe131e6379363f089e7b4108d35b70 ] When calculating po->tp_hdrlen + po->tp_reserve the result can overflow. Fix by checking

[PATCH 4.4 42/43] ARCv2: save r30 on kernel entry as gcc uses it for code-gen

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Vineet Gupta commit ecd43afdbe72017aefe48080631eb625e177ef4d upstream. This is not exposed to userspace debugers yet, which can be done independently as a seperate patch !

[PATCH 4.4 34/43] ipv6: check raw payload size correctly in ioctl

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Jamie Bainbridge [ Upstream commit 105f5528b9bbaa08b526d3405a5bcd2ff0c953c8 ] In situations where an skb is paged, the transport header pointer and tail pointer can be

[PATCH 4.4 31/43] ip6mr: fix notification device destruction

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Nikolay Aleksandrov [ Upstream commit 723b929ca0f79c0796f160c2eeda4597ee98d2b8 ] Andrey Konovalov reported a BUG caused by the ip6mr code which is caused because

[PATCH 4.4 29/43] net: ipv6: RTF_PCPU should not be settable from userspace

4.4-stable review patch. If anyone has any objections, please let me know. -- From: David Ahern [ Upstream commit 557c44be917c322860665be3d28376afa84aa936 ] Andrey reported a fault in the IPv6 route code: kasan: GPF could be caused by NULL-ptr

[PATCH 4.4 33/43] ipv6: check skb->protocol before lookup for nexthop

4.4-stable review patch. If anyone has any objections, please let me know. -- From: WANG Cong [ Upstream commit 199ab00f3cdb6f154ea93fa76fd80192861a821d ] Andrey reported a out-of-bound access in ip6_tnl_xmit(), this is because we use an ipv4 dst in

[PATCH 4.4 30/43] netpoll: Check for skb->queue_mapping

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Tushar Dave [ Upstream commit c70b17b775edb21280e9de7531acf6db3b365274 ] Reducing real_num_tx_queues needs to be in sync with skb queue_mapping otherwise skbs with

[PATCH 4.4 32/43] macvlan: Fix device ref leak when purging bc_queue

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Herbert Xu [ Upstream commit f6478218e6edc2a587b8f132f66373baa7b2497c ] When a parent macvlan device is destroyed we end up purging its broadcast queue without

[PATCH 4.4 25/43] net: ipv4: fix multipath RTM_GETROUTE behavior when iif is given

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Florian Larysch [ Upstream commit a8801799c6975601fd58ae62f48964caec2eb83f ] inet_rtm_getroute synthesizes a skeletal ICMP skb, which is passed to ip_route_input when iif is

[PATCH v3 03/11] dt-bindings: soc/fsl: Update reserved memory binding for QBMan

Updates the QMan and BMan device tree bindings for reserved memory nodes. This makes the reserved memory allocation compatiable with the shared-dma-pool usage. Signed-off-by: Roy Pledge --- Documentation/devicetree/bindings/soc/fsl/bman.txt | 12 +-

[PATCH v3 00/11] soc/fsl/qbman: Enable QBMan on ARM Platforms

This patch series enables DPAA1 QBMan devices for ARM and ARM64 architectures. This allows the LS1043A and LS1046A to use QBMan functionality. Changes since v2: Fixed some misspellings Added 'no-map' constraint to device tree bindings Described ordering contraint on regions in the device tree

[PATCH v3 04/11] soc/fsl/qbman: Drop set/clear_bits usage

From: Madalin Bucur Replace PPC specific set/clear_bits API with standard bit twiddling so driver is portalable outside PPC. Signed-off-by: Madalin Bucur Signed-off-by: Claudiu Manoil Signed-off-by: Roy Pledge

[PATCH v3 08/11] soc/fsl/qbman: add QMAN_REV32

From: Madalin Bucur Add revision 3.2 of the QBMan block. This is the version for LS1043A and LS1046A SoCs. Signed-off-by: Madalin Bucur Signed-off-by: Roy Pledge --- drivers/soc/fsl/qbman/qman_ccsr.c | 2 ++

[PATCH v3 09/11] soc/fsl/qbman: different register offsets on ARM

From: Madalin Bucur Signed-off-by: Madalin Bucur Signed-off-by: Claudiu Manoil Signed-off-by: Roy Pledge --- drivers/soc/fsl/qbman/bman.c | 22 ++ drivers/soc/fsl/qbman/qman.c | 38

[PATCH 4.4 37/43] MIPS: KGDB: Use kernel context for sleeping threads

4.4-stable review patch. If anyone has any objections, please let me know. -- From: James Hogan commit 162b270c664dca2e0944308e92f9fcc887151a72 upstream. KGDB is a kernel debug stub and it can't be used to debug userland as it can only safely access

[PATCH 4.9 27/54] ip6mr: fix notification device destruction

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Nikolay Aleksandrov [ Upstream commit 723b929ca0f79c0796f160c2eeda4597ee98d2b8 ] Andrey Konovalov reported a BUG caused by the ip6mr code which is caused because

[PATCH 4.9 15/54] l2tp: fix PPP pseudo-wire auto-loading

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Guillaume Nault [ Upstream commit 249ee819e24c180909f43c1173c8ef6724d21faf ] PPP pseudo-wire type is 7 (11 is L2TP_PWTYPE_IP). Fixes: f1f39f911027 ("l2tp: auto load

[PATCH v3 11/11] fsl/soc/qbman: Enable FSL_LAYERSCAPE config on ARM

From: Madalin Bucur Signed-off-by: Madalin Bucur Signed-off-by: Claudiu Manoil [Stuart: changed to use ARCH_LAYERSCAPE] Signed-off-by: Stuart Yoder Signed-off-by: Roy Pledge ---

Re: [PATCH] staging/ks7010: Fix type assignment for struct hostif_hdr

On Mon, May 01, 2017 at 04:11:30PM +0200, gapalinux wrote: > On Mon, 1 May 2017 19:59:44 +1000 > "Tobin C. Harding" wrote: > > > On Sat, Apr 29, 2017 at 07:54:30PM +0200, Cezary Gapinski wrote: > > > Sparse spits out a warnings about __le16 and unsigned short > > > assignment.

[PATCH v3 07/11] soc/fsl/qbman: Rework ioremap() calls for ARM/PPC

Rework ioremap() for PPC and ARM. The PPC devices require a non-coherent mapping while ARM will work with a non-cachable/write combine mapping. Signed-off-by: Roy Pledge --- drivers/soc/fsl/qbman/bman_portal.c | 12 +--- drivers/soc/fsl/qbman/qman_portal.c | 12

[PATCH v3 10/11] soc/fsl/qbman: Add missing headers on ARM

From: Claudiu Manoil Unlike PPC builds, ARM builds need following headers explicitly: +#include for ioread32be() +#includefor udelay() Signed-off-by: Claudiu Manoil Signed-off-by: Roy Pledge ---

[PATCH 4.9 01/54] [PATCH] Revert "mmc: sdhci-msm: Enable few quirks"

4.9-stable review patch. If anyone has any objections, please let me know. -- This reverts commit d84be51d1c1d3fa148a3abdeeb1455690df59e63 which is commit a0e3142869d29688de6f77be31aa7a401a4a88f1 upstream. It causes problems and would need other patches backported to resolve

[PATCH 4.9 42/54] MIPS: cevt-r4k: Fix out-of-bounds array access

4.9-stable review patch. If anyone has any objections, please let me know. -- From: James Hogan commit 9d7f29cdb4ca53506115cf1d7a02ce6013894df0 upstream. calculate_min_delta() may incorrectly access a 4th element of buf2[] which only has 3 elements.

[PATCH 4.9 37/54] ALSA: oxfw: fix regression to handle Stanton SCS.1m/1d

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit 3d016d57fdc5e6caa4cd67896f4b081bccad6e2c upstream. At a commit 6c29230e2a5f ("ALSA: oxfw: delayed registration of sound card"), ALSA oxfw

[PATCH 4.9 38/54] ALSA: firewire-lib: fix inappropriate assignment between signed/unsigned type

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit dfb00a56935186171abb5280b3407c3f910011f1 upstream. An abstraction of asynchronous transaction for transmission of MIDI messages was introduced

[PATCH 4.9 40/54] ARC: [plat-eznps] Fix build error

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Noam Camus commit 6492f09e864417d382e22b922ae30693a7ce2982 upstream. Make ATOMIC_INIT available for all ARC platforms (including plat-eznps) Signed-off-by: Noam Camus

[PATCH 4.9 50/54] ceph: fix recursion between ceph_set_acl() and __ceph_setattr()

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Yan, Zheng commit 8179a101eb5f4ef0ac9a915fcea9a9d3109efa90 upstream. ceph_set_acl() calls __ceph_setattr() if the setacl operation needs to modify inode's i_mode.

[PATCH 4.9 05/54] net: neigh: guard against NULL solicit() method

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 48481c8fa16410ffa45939b13b6c53c2ca609e5f ] Dmitry posted a nice reproducer of a bug triggering in neigh_probe() when dereferencing a NULL

[PATCH 4.9 45/54] ASoC: intel: Fix PM and non-atomic crash in bytcr drivers

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 6e4cac23c5a648d50b107d1b53e9c4e1120c7943 upstream. The FE setups of Intel SST bytcr_rt5640 and bytcr_rt5651 drivers carry the ignore_suspend flag, and this

[PATCH 4.9 39/54] ALSA: seq: Dont break snd_use_lock_sync() loop by timeout

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 4e7655fd4f47c23e5249ea260dc802f909a64611 upstream. The snd_use_lock_sync() (thus its implementation snd_use_lock_sync_helper()) has the 5 seconds timeout to

[PATCH 4.9 43/54] MIPS: Avoid BUG warning in arch_check_elf

4.9-stable review patch. If anyone has any objections, please let me know. -- From: James Cowgill commit c46f59e90226fa5bfcc83650edebe84ae47d454b upstream. arch_check_elf contains a usage of current_cpu_data that will call smp_processor_id() with

[PATCH 4.9 44/54] p9_client_readdir() fix

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Al Viro commit 71d6ad08379304128e4bdfaf0b4185d54375423e upstream. Don't assume that server is sane and won't return more data than asked for. Signed-off-by: Al Viro

[PATCH 4.9 48/54] nfsd4: minor NFSv2/v3 write decoding cleanup

4.9-stable review patch. If anyone has any objections, please let me know. -- From: J. Bruce Fields commit db44bac41bbfc0c0d9dd943092d8bded3c9db19b upstream. Use a couple shortcuts that will simplify a following bugfix. Signed-off-by: J. Bruce Fields

Re: [PATCH 1/1] staging: rtl8192u: Convert u4bAcParam back to little-endian after construction

On Mon, May 01, 2017 at 06:11:58PM +0100, Tuomo Rinne wrote: > > The commit 9304b5b0d4fe ("staging: rtl8192u: Fix sparse warnings in > r8192U_dm.c") > adds casting of le16 from cpu endianness. > This patch converts the u4bAcParam parameter back to little-endian after > it has been constructed. >

[patch v2] mm, vmscan: avoid thrashing anon lru when free + file is low

The purpose of the code that commit 623762517e23 ("revert 'mm: vmscan: do not swap anon pages just because free+file is low'") reintroduces is to prefer swapping anonymous memory rather than trashing the file lru. If the anonymous inactive lru for the set of eligible zones is considered low,

[PATCH 4.10 24/62] ipv6: sr: fix out-of-bounds access in SRH validation

4.10-stable review patch. If anyone has any objections, please let me know. -- From: David Lebrun [ Upstream commit 2f3bb64247b5b083d05ccecad9c2e139bbfdc294 ] This patch fixes an out-of-bounds access in seg6_validate_srh() when the trailing data is

[PATCH 4.10 18/62] sctp: listen on the sock only when its state is listening or closed

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Xin Long [ Upstream commit 34b2789f1d9bf8dcca9b5cb553d076ca2cd898ee ] Now sctp doesn't check sock's state before listening on it. It could even cause changing a sock

[PATCH 4.9 41/54] MIPS: KGDB: Use kernel context for sleeping threads

4.9-stable review patch. If anyone has any objections, please let me know. -- From: James Hogan commit 162b270c664dca2e0944308e92f9fcc887151a72 upstream. KGDB is a kernel debug stub and it can't be used to debug userland as it can only safely access

[PATCH 4.10 60/62] net: can: usb: gs_usb: Fix buffer on stack

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Maksim Salau commit b05c73bd1e3ec60357580eb042ee932a5ed754d5 upstream. Allocate buffers on HEAP instead of STACK for local structures that are to be sent using

[PATCH 4.10 53/62] ASoC: intel: Fix PM and non-atomic crash in bytcr drivers

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 6e4cac23c5a648d50b107d1b53e9c4e1120c7943 upstream. The FE setups of Intel SST bytcr_rt5640 and bytcr_rt5651 drivers carry the ignore_suspend flag, and this

[PATCH 4.10 39/62] net: ipv6: regenerate host route if moved to gc list

4.10-stable review patch. If anyone has any objections, please let me know. -- From: David Ahern [ Upstream commit 8048ced9beb21a52e3305f3332ae82020619f24e ] Taking down the loopback device wreaks havoc on IPv6 routing. By extension, taking down a

[PATCH 4.10 56/62] nfsd4: minor NFSv2/v3 write decoding cleanup

4.10-stable review patch. If anyone has any objections, please let me know. -- From: J. Bruce Fields commit db44bac41bbfc0c0d9dd943092d8bded3c9db19b upstream. Use a couple shortcuts that will simplify a following bugfix. Signed-off-by: J. Bruce Fields

[PATCH 4.10 40/62] net: phy: fix auto-negotiation stall due to unavailable interrupt

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Alexander Kochetkov [ Upstream commit f555f34fdc586a56204cd16d9a7c104ec6cb6650 ] The Ethernet link on an interrupt driven PHY was not coming up if the Ethernet cable was

[PATCH 4.10 58/62] ceph: fix recursion between ceph_set_acl() and __ceph_setattr()

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Yan, Zheng commit 8179a101eb5f4ef0ac9a915fcea9a9d3109efa90 upstream. ceph_set_acl() calls __ceph_setattr() if the setacl operation needs to modify inode's i_mode.

[PATCH 4.10 59/62] macsec: avoid heap overflow in skb_to_sgvec

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Jason A. Donenfeld commit 4d6fa57b4dab0d77f4d8e9d9c73d1e63f6fe8fee upstream. While this may appear as a humdrum one line change, it's actually quite important. An sk_buff

Re: [PATCH 2/3] x86/numa_emulation: assign physnode_mask directly from numa_nodes_parsed

On Tue, 11 Apr 2017, Wei Yang wrote: > On Mon, Apr 10, 2017 at 05:26:03PM -0700, David Rientjes wrote: > >On Tue, 11 Apr 2017, Wei Yang wrote: > > > >> According to current code path, numa_nodes_parsed is already setup when > >> numa_emucation() is called. > >> > >> x86_numa_init() > >>

[PATCH 4.10 50/62] MIPS: cevt-r4k: Fix out-of-bounds array access

4.10-stable review patch. If anyone has any objections, please let me know. -- From: James Hogan commit 9d7f29cdb4ca53506115cf1d7a02ce6013894df0 upstream. calculate_min_delta() may incorrectly access a 4th element of buf2[] which only has 3 elements.

[PATCH 4.10 48/62] ARC: [plat-eznps] Fix build error

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Noam Camus commit 6492f09e864417d382e22b922ae30693a7ce2982 upstream. Make ATOMIC_INIT available for all ARC platforms (including plat-eznps) Signed-off-by: Noam Camus

[PATCH 4.10 62/62] ftrace/x86: Fix triple fault with graph tracing and suspend-to-ram

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Josh Poimboeuf commit 34a477e5297cbaa6ecc6e17c042a866e1cbe80d6 upstream. On x86-32, with CONFIG_FIRMWARE and multiple CPUs, if you enable function graph tracing and then

[PATCH 4.10 43/62] ipv6: check raw payload size correctly in ioctl

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Jamie Bainbridge [ Upstream commit 105f5528b9bbaa08b526d3405a5bcd2ff0c953c8 ] In situations where an skb is paged, the transport header pointer and tail pointer can be

[PATCH 4.10 61/62] cpu/hotplug: Serialize callback invocations proper

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Sebastian Andrzej Siewior commit dc434e056fe1dada20df7ba07f32739d3a701adf upstream. The setup/remove_state/instance() functions in the hotplug core code are serialized

[PATCH 4.10 52/62] p9_client_readdir() fix

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Al Viro commit 71d6ad08379304128e4bdfaf0b4185d54375423e upstream. Don't assume that server is sane and won't return more data than asked for. Signed-off-by: Al Viro

[PATCH 4.4 19/43] net: phy: handle state correctly in phy_stop_machine

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Nathan Sullivan [ Upstream commit 49d52e8108a21749dc2114b924c907db43358984 ] If the PHY is halted on stop, then do not set the state to PHY_UP. This ensures the phy

[PATCH 4.10 42/62] tcp: memset ca_priv data to 0 properly

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Wei Wang [ Upstream commit c1201444075009507a6818de6518e2822b9a87c8 ] Always zero out ca_priv data in tcp_assign_congestion_control() so that ca_priv data is cleared out

[PATCH 4.10 32/62] net/mlx5: Fix driver load bad flow when having fw initializing timeout

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Mohamad Haj Yahia [ Upstream commit 55378a238e04b39cc82957d91d16499704ea719b ] If FW is stuck in initializing state we will skip the driver load, but current error

[PATCH 4.10 30/62] netpoll: Check for skb->queue_mapping

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Tushar Dave [ Upstream commit c70b17b775edb21280e9de7531acf6db3b365274 ] Reducing real_num_tx_queues needs to be in sync with skb queue_mapping otherwise skbs with

[PATCH 4.10 36/62] tcp: fix SCM_TIMESTAMPING_OPT_STATS for normal skbs

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Soheil Hassas Yeganeh [ Upstream commit 8605330aac5a5785630aec8f64378a54891937cc ] __sock_recv_timestamp can be called for both normal skbs (for receive timestamps) and

[PATCH 4.10 49/62] MIPS: KGDB: Use kernel context for sleeping threads

4.10-stable review patch. If anyone has any objections, please let me know. -- From: James Hogan commit 162b270c664dca2e0944308e92f9fcc887151a72 upstream. KGDB is a kernel debug stub and it can't be used to debug userland as it can only safely access

[PATCH 4.10 47/62] scsi: return correct blkprep status code in case scsi_init_io() fails.

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Johannes Thumshirn commit e7661a8e5ce10b5321882d0bbaf3f81070903319 upstream. When instrumenting the SCSI layer to run into the !blk_rq_nr_phys_segments(rq) case the

[PATCH 4.10 51/62] MIPS: Avoid BUG warning in arch_check_elf

4.10-stable review patch. If anyone has any objections, please let me know. -- From: James Cowgill commit c46f59e90226fa5bfcc83650edebe84ae47d454b upstream. arch_check_elf contains a usage of current_cpu_data that will call smp_processor_id() with

[PATCH 4.10 31/62] ip6mr: fix notification device destruction

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Nikolay Aleksandrov [ Upstream commit 723b929ca0f79c0796f160c2eeda4597ee98d2b8 ] Andrey Konovalov reported a BUG caused by the ip6mr code which is caused because

[PATCH 4.10 46/62] ALSA: seq: Dont break snd_use_lock_sync() loop by timeout

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 4e7655fd4f47c23e5249ea260dc802f909a64611 upstream. The snd_use_lock_sync() (thus its implementation snd_use_lock_sync_helper()) has the 5 seconds timeout to

[PATCH 4.10 44/62] ALSA: oxfw: fix regression to handle Stanton SCS.1m/1d

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit 3d016d57fdc5e6caa4cd67896f4b081bccad6e2c upstream. At a commit 6c29230e2a5f ("ALSA: oxfw: delayed registration of sound card"), ALSA oxfw

[PATCH 4.10 33/62] net/mlx5: E-Switch, Correctly deal with inline mode on ConnectX-5

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Or Gerlitz [ Upstream commit c415f704c8276bc686abcb0497bf2606038ca73c ] On ConnectX5 the wqe inline mode is "none" and hence the FW reports

[PATCH 4.10 34/62] net/mlx5e: Fix small packet threshold

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Eugenia Emantayev [ Upstream commit cbad8cddb6ed7ef3a5f0a9a70f1711d4d7fb9a8f ] RX packet headers are meant to be contained in SKB linear part, and chose a threshold of

[PATCH 4.10 37/62] tcp: mark skbs with SCM_TIMESTAMPING_OPT_STATS

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Soheil Hassas Yeganeh [ Upstream commit 4ef1b2869447411ad3ef91ad7d4891a83c1a509a ] SOF_TIMESTAMPING_OPT_STATS can be enabled and disabled while packets are collected on

[PATCH 4.10 45/62] ALSA: firewire-lib: fix inappropriate assignment between signed/unsigned type

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto commit dfb00a56935186171abb5280b3407c3f910011f1 upstream. An abstraction of asynchronous transaction for transmission of MIDI messages was introduced

[PATCH 4.10 27/62] ipv6: fix source routing

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Sabrina Dubroca [ Upstream commit ec9c4215fef37da6668c4105f5ad3891aaa6527a ] Commit a149e7c7ce81 ("ipv6: sr: add support for SRH injection through setsockopt")

[PATCH 4.10 28/62] gso: Validate assumption of frag_list segementation

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Ilan Tayari [ Upstream commit 43170c4e0ba709c79130c3fe5a41e66279950cd0 ] Commit 07b26c9454a2 ("gso: Support partial splitting at the frag_list pointer") assumes that all

[PATCH 4.10 02/62] sparc64: kern_addr_valid regression

4.10-stable review patch. If anyone has any objections, please let me know. -- From: bob picco [ Upstream commit adfae8a5d833fa2b46577a8081f350e408851f5b ] I encountered this bug when using /proc/kcore to examine the kernel. Plus a coworker inquired

[PATCH 4.10 29/62] net: ipv6: RTF_PCPU should not be settable from userspace

4.10-stable review patch. If anyone has any objections, please let me know. -- From: David Ahern [ Upstream commit 557c44be917c322860665be3d28376afa84aa936 ] Andrey reported a fault in the IPv6 route code: kasan: GPF could be caused by NULL-ptr

[PATCH 4.10 07/62] secure_seq: downgrade to per-host timestamp offsets

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Florian Westphal [ Upstream commit 28ee1b746f493b7c62347d714f58fbf4f70df4f0 ] Unfortunately too many devices (not under our control) use tcp_tw_recycle=1, which depends on

[PATCH 4.10 41/62] ipv6: check skb->protocol before lookup for nexthop

4.10-stable review patch. If anyone has any objections, please let me know. -- From: WANG Cong [ Upstream commit 199ab00f3cdb6f154ea93fa76fd80192861a821d ] Andrey reported a out-of-bound access in ip6_tnl_xmit(), this is because we use an ipv4 dst

[PATCH 4.10 12/62] net/packet: fix overflow in check for tp_frame_nr

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Andrey Konovalov [ Upstream commit 8f8d28e4d6d815a391285e121c3a53a0b6cb9e7b ] When calculating rb->frames_per_block * req->tp_block_nr the result can overflow. Add a

[PATCH 4.10 38/62] macvlan: Fix device ref leak when purging bc_queue

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Herbert Xu [ Upstream commit f6478218e6edc2a587b8f132f66373baa7b2497c ] When a parent macvlan device is destroyed we end up purging its broadcast queue without

[PATCH 4.10 26/62] ipv6: sr: fix double free of skb after handling invalid SRH

4.10-stable review patch. If anyone has any objections, please let me know. -- From: David Lebrun [ Upstream commit 95b9b88d2da5e43e025400afcb492643933bf858 ] The icmpv6_param_prob() function already does a kfree_skb(), this patch removes the

[PATCH 4.10 35/62] net/mlx5e: Fix ETHTOOL_GRXCLSRLALL handling

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Ilan Tayari [ Upstream commit 5e82c9e4ed60beba83f46a1a5a8307b99a23e982 ] Handler for ETHTOOL_GRXCLSRLALL must set info->data to the size of the table, regardless of the

[PATCH 4.10 08/62] bpf: improve verifier packet range checks

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Alexei Starovoitov [ Upstream commit b1977682a3858b5584ffea7cfb7bd863f68db18d ] llvm can optimize the 'if (ptr > data_end)' checks to be in the order slightly different than the

[PATCH 4.10 17/62] net: ipv4: fix multipath RTM_GETROUTE behavior when iif is given

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Florian Larysch [ Upstream commit a8801799c6975601fd58ae62f48964caec2eb83f ] inet_rtm_getroute synthesizes a skeletal ICMP skb, which is passed to ip_route_input when iif is

[PATCH 4.10 09/62] net/mlx5: Avoid dereferencing uninitialized pointer

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Talat Batheesh [ Upstream commit e497ec680c4cd51e76bfcdd49363d9ab8d32a757 ] In NETDEV_CHANGEUPPER event the upper_info field is valid only when linking is true.

[PATCH 4.10 16/62] l2tp: fix PPP pseudo-wire auto-loading

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Guillaume Nault [ Upstream commit 249ee819e24c180909f43c1173c8ef6724d21faf ] PPP pseudo-wire type is 7 (11 is L2TP_PWTYPE_IP). Fixes: f1f39f911027 ("l2tp: auto load

Re: [PATCH] mtd: nand: gpio: make nCE GPIO optional

On Fri, Feb 10, 2017 at 03:01:10PM +0100, Christophe Leroy wrote: > On some hardware, the nCE signal is wired to the ChipSelect associated > to bus address of the NAND, so it is automatically driven during the > memory access and it is not managed by a GPIO. > > Signed-off-by: Christophe Leroy

[PATCH 4.10 11/62] l2tp: purge socket queues in the .destruct() callback

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Guillaume Nault [ Upstream commit e91793bb615cf6cdd59c0b6749fe173687bb0947 ] The Rx path may grab the socket right before pppol2tp_release(), but nothing guarantees

[PATCH 4.10 22/62] net: vrf: Fix setting NLM_F_EXCL flag when adding l3mdev rule

4.10-stable review patch. If anyone has any objections, please let me know. -- From: David Ahern [ Upstream commit 426c87caa2b4578b43cd3f689f02c65b743b2559 ] Only need 1 l3mdev FIB rule. Fix setting NLM_F_EXCL in the nlmsghdr. Fixes: 1aa6c4f6b8cd8

[PATCH 4.10 21/62] net-timestamp: avoid use-after-free in ip_recv_error

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Willem de Bruijn [ Upstream commit 1862d6208db0aeca9c8ace44915b08d5ab2cd667 ] Syzkaller reported a use-after-free in ip_recv_error at line info->ipi_ifindex =

[PATCH 4.10 06/62] kcm: return immediately after copy_from_user() failure

4.10-stable review patch. If anyone has any objections, please let me know. -- From: WANG Cong [ Upstream commit a80db69e47d764bbcaf2fec54b1f308925e7c490 ] There is no reason to continue after a copy_from_user() failure. Fixes: ab7ac4eb9832 ("kcm:

[PATCH 4.10 13/62] net/packet: fix overflow in check for tp_reserve

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Andrey Konovalov [ Upstream commit bcc5364bdcfe131e6379363f089e7b4108d35b70 ] When calculating po->tp_hdrlen + po->tp_reserve the result can overflow. Fix by checking

[PATCH 4.10 05/62] net: phy: handle state correctly in phy_stop_machine

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Nathan Sullivan [ Upstream commit 49d52e8108a21749dc2114b924c907db43358984 ] If the PHY is halted on stop, then do not set the state to PHY_UP. This ensures the phy

[PATCH 4.10 19/62] tcp: clear saved_syn in tcp_disconnect()

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 17c3060b1701fc69daedb4c90be6325d3d9fca8e ] In the (very unlikely) case a passive socket becomes a listener, we do not want to duplicate

[PATCH 4.10 03/62] sparc64: Fix kernel panic due to erroneous #ifdef surrounding pmd_write()

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Tom Hromatka [ Upstream commit 9ae34dbd8afd790cb5f52467e4f816434379eafa ] This commit moves sparc64's prototype of pmd_write() outside of the

[PATCH 4.10 14/62] openvswitch: Fix ovs_flow_key_update()

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Yi-Hung Wei [ Upstream commit 6f56f6186c18e3fd54122b73da68e870687b8c59 ] ovs_flow_key_update() is called when the flow key is invalid, and it is used to update and

[PATCH 4.10 23/62] sh_eth: unmap DMA buffers when freeing rings

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Sergei Shtylyov [ Upstream commit 1debdc8f9ebd07daf140e417b3841596911e0066 ] The DMA API debugging (when enabled) causes: WARNING: CPU: 0 PID: 1445 at

[PATCH 4.10 04/62] net: neigh: guard against NULL solicit() method

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 48481c8fa16410ffa45939b13b6c53c2ca609e5f ] Dmitry posted a nice reproducer of a bug triggering in neigh_probe() when dereferencing a NULL

[PATCH 4.10 15/62] l2tp: take reference on sessions being dumped

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Guillaume Nault [ Upstream commit e08293a4ccbcc993ded0fdc46f1e57926b833d63 ] Take a reference on the sessions returned by l2tp_session_find_nth() (and rename it

[PATCH 4.10 00/62] 4.10.14-stable review

This is the start of the stable review cycle for the 4.10.14 release. There are 62 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed May 3 21:27:17 UTC 2017. Anything

[PATCH 4.10 01/62] ping: implement proper locking

4.10-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit 43a6684519ab0a6c52024b5e25322476cabad893 upstream. We got a report of yet another bug in ping http://www.openwall.com/lists/oss-security/2017/03/24/6

[PATCH 4.9 53/54] ARCv2: save r30 on kernel entry as gcc uses it for code-gen

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Vineet Gupta commit ecd43afdbe72017aefe48080631eb625e177ef4d upstream. This is not exposed to userspace debugers yet, which can be done independently as a seperate patch !

[PATCH 4.9 54/54] ftrace/x86: Fix triple fault with graph tracing and suspend-to-ram

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Josh Poimboeuf commit 34a477e5297cbaa6ecc6e17c042a866e1cbe80d6 upstream. On x86-32, with CONFIG_FIRMWARE and multiple CPUs, if you enable function graph tracing and then

  1   2   3   4   5   6   7   8   9   10   >