[PATCH V3 5/6] Update the Kconfig to support carrying forward the IMA Measurement log and and update the setup_dtb call to add the linux,ima-kexec-buffer property to the DTB.

2020-07-20 Thread Prakhar Srivastava
Signed-off-by: Prakhar Srivastava --- arch/arm64/Kconfig | 1 + arch/arm64/kernel/machine_kexec_file.c | 11 +++ 2 files changed, 12 insertions(+) diff --git a/arch/arm64/Kconfig b/arch/arm64/Kconfig index 66dc41fd49f2..ece34b8ca648 100644 --- a/arch/arm64/Kconfig ++

[PATCH V3 6/6] Add the property used for carrying forward the IMA measurement logs and update the code to use the defined property string.

2020-07-20 Thread Prakhar Srivastava
Signed-off-by: Prakhar Srivastava --- arch/arm64/kernel/machine_kexec_file.c | 19 ++- arch/powerpc/kexec/ima.c | 8 +--- 2 files changed, 15 insertions(+), 12 deletions(-) diff --git a/arch/arm64/kernel/machine_kexec_file.c b/arch/arm64/kernel/machine_kexec_f

Re: [PATCH 0/2] task_put batching

2020-07-20 Thread Pavel Begunkov
On 18/07/2020 17:37, Jens Axboe wrote: > On 7/18/20 2:32 AM, Pavel Begunkov wrote: >> For my a bit exaggerated test case perf continues to show high CPU >> cosumption by io_dismantle(), and so calling it io_iopoll_complete(). >> Even though the patch doesn't yield throughput increase for my setup,

Re: [PATCH 1/2 v2] net: hsr: fix incorrect lsdu size in the tag of HSR frames for small frames

2020-07-20 Thread Murali Karicheri
Hi Grygoii, On 7/20/20 10:08 AM, Murali Karicheri wrote: Grygorii, On 7/17/20 1:39 PM, Grygorii Strashko wrote: On 17/07/2020 17:55, Murali Karicheri wrote: For small Ethernet frames with size less than minimum size 66 for HSR vs 60 for regular Ethernet frames, hsr driver currently doesn't

Re: [PATCH][next] i2c: busses: Use fallthrough pseudo-keyword

2020-07-20 Thread Gustavo A. R. Silva
Hi, On 7/20/20 09:59, Jean Delvare wrote: > Hi Gustavo, > > On Thu, 16 Jul 2020 17:03:07 -0500, Gustavo A. R. Silva wrote: >> Replace the existing /* fall through */ comments and its variants with >> the new pseudo-keyword macro fallthrough[1]. >> >> [1] >> https://www.kernel.org/doc/html/latest

Re: [PATCH 1/6] syscalls: use uaccess_kernel in addr_limit_user_check

2020-07-20 Thread Peter Maydell
On Mon, 20 Jul 2020 at 15:55, Guenter Roeck wrote: > Ah, sorry, you can't use the upstream version of qemu to test mps2-an385 > Linux images. You'll have to use a version from > https://github.com/groeck/qemu. > I'd recommend to use the v5.0.0-local branch. > > I had to make some changes to qemu

Re: [PATCH v2] drm/virtio: Fix memory leak in virtio_gpu_execbuffer_ioctl()

2020-07-20 Thread Markus Elfring
> … To balance the reference > count initialized when allocating fence, dma_fence_put() > should not be deleted. * Would an imperative wording be more appropriate for the change description? * Is the information “hexin” sufficient for a real name? Regards, Markus

Re: [PATCH v4 70/75] x86/head/64: Don't call verify_cpu() on starting APs

2020-07-20 Thread Joerg Roedel
On Wed, Jul 15, 2020 at 12:49:23PM -0700, Kees Cook wrote: > Aaah. I see. Thanks for the details there. So ... can you add a bunch > more comments about why/when the new entry path is being used? I really > don't want to accidentally discover some unrelated refactoring down > the road (in months, y

Re: [PATCH v2 net-next 01/14] qed: convert link mode from u32 to bitmap

2020-07-20 Thread Alexander Lobakin
Hi Joe, From: Joe Perches Date: Mon, 20 Jul 2020 08:19:52 -0700 > On Mon, 2020-07-20 at 12:23 +0300, Alexander Lobakin wrote: >> Date: Sun, 19 Jul 2020 23:21:00 +0200 From: Andrew Lunn >>> On Sun, Jul 19, 2020 at 11:14:40PM +0300, Alexander Lobakin wrote: Currently qed driver already ran o

Re: [PATCH v6] xfs: Fix false positive lockdep warning with sb_internal & fs_reclaim

2020-07-20 Thread Waiman Long
- Original Message - From: "Darrick J. Wong" To: "Waiman Long" Cc: linux-...@vger.kernel.org, linux-kernel@vger.kernel.org, "Dave Chinner" , "Qian Cai" , "Eric Sandeen" Sent: Monday, July 13, 2020 12:41:12 PM Subject: Re: [PATCH v6] xfs: Fix false positive lockdep warning with sb_i

Cisco ASA firewall appliances use open source software

2020-07-20 Thread Turritopsis Dohrnii Teo En Ming
Subject: Cisco ASA firewall appliances use open source software Cisco Adaptive Security Appliance Software, version 9.8 Copyright (c) 1996-2019 by Cisco Systems, Inc. For licenses and notices for open source software used in this product, please visit http://www.cisco.com/go/asa-opensource Mr.

Re: [PATCH V3 2/6] Update remove_ima_buffer code to use functions from libfdt reducing wrappers functions.

2020-07-20 Thread Greg KH
On Mon, Jul 20, 2020 at 08:23:38AM -0700, Prakhar Srivastava wrote: > Signed-off-by: Prakhar Srivastava I know I refuse patches without any changelog texts, perhaps other maintainers are more lax... ALso, your subject lines are really odd, look at how almost all other patches do it, we have hund

Re: [PATCH V3 5/6] Update the Kconfig to support carrying forward the IMA Measurement log and and update the setup_dtb call to add the linux,ima-kexec-buffer property to the DTB.

2020-07-20 Thread Greg KH
On Mon, Jul 20, 2020 at 08:23:41AM -0700, Prakhar Srivastava wrote: > Signed-off-by: Prakhar Srivastava Your subject line is whack.

Re: [PATCH V3 6/6] Add the property used for carrying forward the IMA measurement logs and update the code to use the defined property string.

2020-07-20 Thread Greg KH
On Mon, Jul 20, 2020 at 08:23:42AM -0700, Prakhar Srivastava wrote: > Signed-off-by: Prakhar Srivastava Again, subject line, no changelog :( > --- > arch/arm64/kernel/machine_kexec_file.c | 19 ++- > arch/powerpc/kexec/ima.c | 8 +--- > 2 files changed, 15 ins

RE: [PATCH v3 net-next] net: hyperv: Add attributes to show TX indirection table

2020-07-20 Thread Haiyang Zhang
> -Original Message- > From: Chi Song > Sent: Monday, July 20, 2020 3:17 AM > To: KY Srinivasan ; Haiyang Zhang > ; Stephen Hemminger ; > Wei Liu ; David S. Miller ; Jakub > Kicinski > Cc: linux-hyp...@vger.kernel.org; net...@vger.kernel.org; linux- > ker...@vger.kernel.org > Subject:

Re: [RFC PATCH v2] fs/namespace: use percpu_rw_semaphore for writer holding

2020-07-20 Thread John Ogness
On 2020-07-19, Al Viro wrote: >> The MNT_WRITE_HOLD flag is used to manually implement a rwsem. > > Could you show me where does it currently sleep? Your version does, > unless I'm misreading it... You are reading it correctly. This patch introduces new possible sleeping for__mnt_want_write() wh

Re: 5.8-rc*: kernel BUG at kernel/signal.c:1917

2020-07-20 Thread Oleg Nesterov
On 07/20, Oleg Nesterov wrote: > > On 07/20, Peter Zijlstra wrote: > > > > --- a/kernel/sched/core.c > > +++ b/kernel/sched/core.c > > @@ -4193,9 +4193,6 @@ static void __sched notrace __schedule(bool preempt) > > local_irq_disable(); > > rcu_note_context_switch(preempt); > > > > - /* See

[PATCH 4.4 00/58] 4.4.231-rc1 review

2020-07-20 Thread Greg Kroah-Hartman
This is the start of the stable review cycle for the 4.4.231 release. There are 58 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 22 Jul 2020 15:27:31 +. Anything rec

[PATCH 4.4 03/58] spi: spidev: fix a potential use-after-free in spidev_release()

2020-07-20 Thread Greg Kroah-Hartman
From: Zhenzhong Duan [ Upstream commit 06096cc6c5a84ced929634b0d79376b94c65a4bd ] If an spi device is unbounded from the driver before the release process, there will be an NULL pointer reference when it's referenced in spi_slave_abort(). Fix it by checking it's already freed before reference.

[PATCH 4.4 05/58] net: cxgb4: fix return error value in t4_prep_fw

2020-07-20 Thread Greg Kroah-Hartman
From: Li Heng [ Upstream commit 8a259e6b73ad8181b0b2ef338b35043433db1075 ] t4_prep_fw goto bye tag with positive return value when something bad happened and which can not free resource in adap_init0. so fix it to return negative value. Fixes: 16e47624e76b ("cxgb4: Add new scheme to update T4/T

[PATCH 4.4 19/58] bnxt_en: fix NULL dereference in case SR-IOV configuration fails

2020-07-20 Thread Greg Kroah-Hartman
From: Davide Caratti commit c8b1d7436045d3599bae56aef1682813ecccaad7 upstream. we need to set 'active_vfs' back to 0, if something goes wrong during the allocation of SR-IOV resources: otherwise, further VF configurations will wrongly assume that bp->pf.vf[x] are valid memory locations, and comm

[PATCH 4.4 02/58] spi: spidev: fix a race between spidev_release and spidev_remove

2020-07-20 Thread Greg Kroah-Hartman
From: Zhenzhong Duan [ Upstream commit abd42781c3d2155868821f1b947ae45bbc0d ] Imagine below scene, spidev is referenced after it's freed. spidev_release()spidev_remove() ... spin_lock_irq(&spidev->spi_lock);

[PATCH 4.4 20/58] ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg

2020-07-20 Thread Greg Kroah-Hartman
From: Sabrina Dubroca [ Upstream commit 5eff06902394425c722f0a44d9545909a8800f79 ] IPv4 ping sockets don't set fl4.fl4_icmp_{type,code}, which leads to incomplete IPsec ACQUIRE messages being sent to userspace. Currently, both raw sockets and IPv6 ping sockets set those fields. Expected output

[PATCH 4.4 01/58] KVM: s390: reduce number of IO pins to 1

2020-07-20 Thread Greg Kroah-Hartman
From: Christian Borntraeger [ Upstream commit 774911290c589e98e3638e73b24b0a4d4530e97c ] The current number of KVM_IRQCHIP_NUM_PINS results in an order 3 allocation (32kb) for each guest start/restart. This can result in OOM killer activity even with free swap when the memory is fragmented enoug

[PATCH 4.4 14/58] Revert "ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb"

2020-07-20 Thread Greg Kroah-Hartman
From: Greg Kroah-Hartman This reverts commit 90ecba9f1041f436ed2b35ba7a970c7cc5d0df23 which is commit 2bbcaaee1fcbd83272e29f31e2bb7e70d8c49e05 upstream. It is being reverted upstream, just hasn't made it there yet and is causing lots of problems. Reported-by: Hans de Goede Cc: Qiujun Huang Cc

[PATCH 4.4 17/58] ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE

2020-07-20 Thread Greg Kroah-Hartman
From: Vineet Gupta commit 00fdec98d9881bf5173af09aebd353ab3b9ac729 upstream. Trap handler for syscall tracing reads EFA (Exception Fault Address), in case strace wants PC of trap instruction (EFA is not part of pt_regs as of current code). However this EFA read is racy as it happens after dropp

[PATCH 4.4 18/58] ARC: elf: use right ELF_ARCH

2020-07-20 Thread Greg Kroah-Hartman
From: Vineet Gupta commit b7faf971081a4e56147f082234bfff55135305cb upstream. Cc: Signed-off-by: Vineet Gupta Signed-off-by: Greg Kroah-Hartman --- arch/arc/include/asm/elf.h |2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/arch/arc/include/asm/elf.h +++ b/arch/arc/include/asm

[PATCH 4.4 21/58] l2tp: remove skb_dst_set() from l2tp_xmit_skb()

2020-07-20 Thread Greg Kroah-Hartman
From: Xin Long [ Upstream commit 27d53323664c549b5bb2dfaaf6f7ad6e0376a64e ] In the tx path of l2tp, l2tp_xmit_skb() calls skb_dst_set() to set skb's dst. However, it will eventually call inet6_csk_xmit() or ip_queue_xmit() where skb's dst will be overwritten by: skb_dst_set_noref(skb, dst);

[PATCH 4.4 24/58] genetlink: remove genl_bind

2020-07-20 Thread Greg Kroah-Hartman
From: Sean Tranchetti [ Upstream commit 1e82a62fec613844da9e558f3493540a5b7a7b67 ] A potential deadlock can occur during registering or unregistering a new generic netlink family between the main nl_table_lock and the cb_lock where each thread wants the lock held by the other, as demonstrated be

[PATCH 4.4 30/58] Revert "usb/ehci-platform: Set PM runtime as active on resume"

2020-07-20 Thread Greg Kroah-Hartman
This reverts commit 13af14dfadcb95030dc8e2e0cacbffc1990a9772. Eugeniu Rosca writes: On Thu, Jul 09, 2020 at 09:00:23AM +0200, Eugeniu Rosca wrote: >After integrating v4.14.186 commit 5410d158ca2a50 ("usb/ehci-platform: >Set PM runtime as active on resume") into downstream v4.14.x, we started >to

[PATCH 4.4 06/58] smsc95xx: check return value of smsc95xx_reset

2020-07-20 Thread Greg Kroah-Hartman
From: Andre Edich [ Upstream commit 7c8b1e855f94f88a0c569be6309fc8d5c8844cd1 ] The return value of the function smsc95xx_reset() must be checked to avoid returning false success from the function smsc95xx_bind(). Fixes: 2f7ca802bdae2 ("net: Add SMSC LAN9500 USB2.0 10/100 ethernet adapter drive

[PATCH 4.4 35/58] perf stat: Zero all the ena and run array slot stats for interval mode

2020-07-20 Thread Greg Kroah-Hartman
From: Jin Yao commit 0e0bf1ea1147fcf74eab19c2d3c853cc3740a72f upstream. As the code comments in perf_stat_process_counter() say, we calculate counter's data every interval, and the display code shows ps->res_stats avg value. We need to zero the stats for interval mode. But the current code only

[PATCH 4.4 33/58] usb: gadget: udc: atmel: fix uninitialized read in debug printk

2020-07-20 Thread Greg Kroah-Hartman
From: Michał Mirosław [ Upstream commit 30517ffeb3bff842e1355cbc32f1959d9dbb5414 ] Fixed commit moved the assignment of 'req', but did not update a reference in the DBG() call. Use the argument as it was renamed. Fixes: 5fb694f96e7c ("usb: gadget: udc: atmel: fix possible oops when unloading m

[PATCH 4.4 32/58] Revert "usb/ohci-platform: Fix a warning when hibernating"

2020-07-20 Thread Greg Kroah-Hartman
This reverts commit 652def4c63b99029fe8b898740f97329c26a2fd3. Eugeniu Rosca writes: On Thu, Jul 09, 2020 at 09:00:23AM +0200, Eugeniu Rosca wrote: >After integrating v4.14.186 commit 5410d158ca2a50 ("usb/ehci-platform: >Set PM runtime as active on resume") into downstream v4.14.x, we started >to

[PATCH 4.4 13/58] KVM: x86: bit 8 of non-leaf PDPEs is not reserved

2020-07-20 Thread Greg Kroah-Hartman
From: Paolo Bonzini commit 5ecad245de2ae23dc4e2dbece92f8ccfbaed2fa7 upstream. Bit 8 would be the "global" bit, which does not quite make sense for non-leaf page table entries. Intel ignores it; AMD ignores it in PDEs and PDPEs, but reserves it in PML4Es. Probably, earlier versions of the AMD m

[PATCH 4.4 11/58] ALSA: hda - let hs_mic be picked ahead of hp_mic

2020-07-20 Thread Greg Kroah-Hartman
From: Hui Wang commit 6a6ca7881b1ab1c13fe0d70bae29211a65dd90de upstream. We have a Dell AIO, there is neither internal speaker nor internal mic, only a multi-function audio jack on it. Users reported that after freshly installing the OS and plug a headset to the audio jack, the headset can't ou

[PATCH 4.4 26/58] tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key()

2020-07-20 Thread Greg Kroah-Hartman
From: Eric Dumazet [ Upstream commit 6a2febec338df7e7699a52d00b2e1207dcf65b28 ] MD5 keys are read with RCU protection, and tcp_md5_do_add() might update in-place a prior key. Normally, typical RCU updates would allocate a new piece of memory. In this case only key->key and key->keylen might be

[PATCH 4.4 08/58] ALSA: compress: fix partial_drain completion state

2020-07-20 Thread Greg Kroah-Hartman
From: Vinod Koul [ Upstream commit f79a732a8325dfbd570d87f1435019d7e5501c6d ] On partial_drain completion we should be in SNDRV_PCM_STATE_RUNNING state, so set that for partially draining streams in snd_compr_drain_notify() and use a flag for partially draining streams While at it, add locks fo

[PATCH 4.4 07/58] smsc95xx: avoid memory leak in smsc95xx_bind

2020-07-20 Thread Greg Kroah-Hartman
From: Andre Edich [ Upstream commit 3ed58f96a70b85ef646d5427258f677f1395b62f ] In a case where the ID_REV register read is failed, the memory for a private data structure has to be freed before returning error from the function smsc95xx_bind. Fixes: bbd9f9ee69242 ("smsc95xx: add wol support for

[PATCH 4.4 34/58] staging: comedi: verify array index is correct before using it

2020-07-20 Thread Greg Kroah-Hartman
From: Dan Carpenter [ Upstream commit ef75e14a6c935eec82abac07ab68e388514e39bc ] This code reads from the array before verifying that "trig" is a valid index. If the index is wildly out of bounds then reading from an invalid address could lead to an Oops. Fixes: a8c66b684efa ("staging: comedi:

[PATCH 4.4 25/58] tcp: make sure listeners dont initialize congestion-control state

2020-07-20 Thread Greg Kroah-Hartman
From: Christoph Paasch [ Upstream commit ce69e563b325f620863830c246a8698ccea52048 ] syzkaller found its way into setsockopt with TCP_CONGESTION "cdg". tcp_cdg_init() does a kcalloc to store the gradients. As sk_clone_lock just copies all the memory, the allocated pointer will be copied as well,

[PATCH 4.4 10/58] ALSA: opl3: fix infoleak in opl3

2020-07-20 Thread Greg Kroah-Hartman
From: xidongwang commit ad155712bb1ea2151944cf06a0e08c315c70c1e3 upstream. The stack object “info” in snd_opl3_ioctl() has a leaking problem. It has 2 padding bytes which are not initialized and leaked via “copy_to_user”. Signed-off-by: xidongwang Cc: Link: https://lore.kernel.org/r/15940060

[PATCH 4.4 28/58] tcp: md5: allow changing MD5 keys in all socket states

2020-07-20 Thread Greg Kroah-Hartman
From: Eric Dumazet [ Upstream commit 1ca0fafd73c5268e8fc4b997094b8bb2bfe8deea ] This essentially reverts commit 721230326891 ("tcp: md5: reject TCP_MD5SIG or TCP_MD5SIG_EXT on established sockets") Mathieu reported that many vendors BGP implementations can actually switch TCP MD5 on established

[PATCH 4.4 38/58] usb: core: Add a helper function to check the validity of EP type in URB

2020-07-20 Thread Greg Kroah-Hartman
From: Takashi Iwai commit e901b9873876ca30a09253731bd3a6b00c44b5b0 upstream. This patch adds a new helper function to perform a sanity check of the given URB to see whether it contains a valid endpoint. It's a light- weight version of what usb_submit_urb() does, but without the kernel warning f

[PATCH 4.4 51/58] mei: bus: dont clean driver pointer

2020-07-20 Thread Greg Kroah-Hartman
From: Alexander Usyskin commit e852c2c251ed9c23ae6e3efebc5ec49adb504207 upstream. It's not needed to set driver to NULL in mei_cl_device_remove() which is bus_type remove() handler as this is done anyway in __device_release_driver(). Actually this is causing an endless loop in driver_detach() o

[PATCH 4.4 12/58] ALSA: usb-audio: add quirk for MacroSilicon MS2109

2020-07-20 Thread Greg Kroah-Hartman
From: Hector Martin commit e337bf19f6af38d5c3fa6d06cd594e0f890ca1ac upstream. These devices claim to be 96kHz mono, but actually are 48kHz stereo with swapped channels and unaligned transfers. Cc: sta...@vger.kernel.org Signed-off-by: Hector Martin Link: https://lore.kernel.org/r/2020070207143

[PATCH 4.4 04/58] scsi: mptscsih: Fix read sense data size

2020-07-20 Thread Greg Kroah-Hartman
From: Tomas Henzl [ Upstream commit afe89f115e84edbc76d316759e206580a06c6973 ] The sense data buffer in sense_buf_pool is allocated with size of MPT_SENSE_BUFFER_ALLOC(64) (multiplied by req_depth) while SNS_LEN(sc)(96) is used when reading the data. That may lead to a read from unallocated are

[PATCH 4.4 52/58] Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list

2020-07-20 Thread Greg Kroah-Hartman
From: David Pedersen commit 17d51429da722cd8fc77a365a112f008abf4f8b3 upstream. This fixes two finger trackpad scroll on the Lenovo XiaoXin Air 12. Without nomux, the trackpad behaves as if only one finger is present and moves the cursor when trying to scroll. Signed-off-by: David Pedersen Cc:

[PATCH 4.4 49/58] virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial

2020-07-20 Thread Greg Kroah-Hartman
From: Alexander Lobakin commit 897c44f0bae574c5fb318c759b060bebf9dd6013 upstream. rproc_serial_id_table lacks an exposure to module devicetable, so when remoteproc firmware requests VIRTIO_ID_RPROC_SERIAL, no uevent is generated and no module autoloading occurs. Add missing MODULE_DEVICE_TABLE()

[PATCH 4.4 48/58] USB: serial: option: add Quectel EG95 LTE modem

2020-07-20 Thread Greg Kroah-Hartman
From: AceLan Kao commit da6902e5b6dbca9081e3d377f9802d4fd0c5ea59 upstream. Add support for Quectel Wireless Solutions Co., Ltd. EG95 LTE modem T: Bus=01 Lev=01 Prnt=01 Port=02 Cnt=02 Dev#= 5 Spd=480 MxCh= 0 D: Ver= 2.00 Cls=ef(misc ) Sub=02 Prot=01 MxPS=64 #Cfgs= 1 P: Vendor=2c7c ProdID=01

[PATCH 4.4 56/58] dmaengine: fsl-edma: Fix NULL pointer exception in fsl_edma_tx_handler

2020-07-20 Thread Greg Kroah-Hartman
From: Krzysztof Kozlowski commit f5e5677c420346b4e9788051c2e4d750996c428c upstream. NULL pointer exception happens occasionally on serial output initiated by login timeout. This was reproduced only if kernel was built with significant debugging options and EDMA driver is used with serial consol

[PATCH 4.4 43/58] usb: gadget: function: fix missing spinlock in f_uac1_legacy

2020-07-20 Thread Greg Kroah-Hartman
From: Zhang Qiang commit 8778eb0927ddcd3f431805c37b78fa56481aeed9 upstream. Add a missing spinlock protection for play_queue, because the play_queue may be destroyed when the "playback_work" work func and "f_audio_out_ep_complete" callback func operate this paly_queue at the same time. Fixes: c

[PATCH 4.4 42/58] usb: chipidea: core: add wakeup support for extcon

2020-07-20 Thread Greg Kroah-Hartman
From: Peter Chen commit 876d4e1e8298ad1f94d9e9392fc90486755437b4 upstream. If wakeup event occurred by extcon event, it needs to call ci_irq again since the first ci_irq calling at extcon notifier only wakes up controller, but do noop for event handling, it causes the extcon use case can't work

[PATCH 4.4 44/58] USB: serial: iuu_phoenix: fix memory corruption

2020-07-20 Thread Greg Kroah-Hartman
From: Johan Hovold commit e7b931bee739e8a77ae216e613d3b99342b6dec0 upstream. The driver would happily overwrite its write buffer with user data in 256 byte increments due to a removed buffer-space sanity check. Fixes: 5fcf62b0f1f2 ("tty: iuu_phoenix: fix locking.") Cc: stable # 2.6.31 Sign

[PATCH 4.4 58/58] sched/fair: handle case of task_h_load() returning 0

2020-07-20 Thread Greg Kroah-Hartman
From: Vincent Guittot commit 01cfcde9c26d8555f0e6e9aea9d6049f87683998 upstream. task_h_load() can return 0 in some situations like running stress-ng mmapfork, which forks thousands of threads, in a sched group on a 224 cores system. The load balance doesn't handle this correctly because env->imb

[PATCH 4.4 46/58] USB: serial: ch341: add new Product ID for CH340

2020-07-20 Thread Greg Kroah-Hartman
From: Igor Moura commit 5d0136f8e79f8287e6a36780601f0ce797cf11c2 upstream. Add PID for CH340 that's found on some ESP8266 dev boards made by LilyGO. The specific device that contains such serial converter can be seen here: https://github.com/LilyGO/LILYGO-T-OI. Apparently, it's a regular CH340,

[PATCH 4.4 39/58] ALSA: line6: Perform sanity check for each URB creation

2020-07-20 Thread Greg Kroah-Hartman
From: Takashi Iwai commit 6e8a914ad619042c5f25a4feb663357c4170fd8d upstream. LINE6 drivers create stream URBs with a fixed pipe without checking its validity, and this may lead to a kernel WARNING at the submission when a malformed USB descriptor is passed. For avoiding the kernel warning, perf

[PATCH 4.4 57/58] misc: atmel-ssc: lock with mutex instead of spinlock

2020-07-20 Thread Greg Kroah-Hartman
From: Michał Mirosław commit b037d60a3b1d1227609fd858fa34321f41829911 upstream. Uninterruptible context is not needed in the driver and causes lockdep warning because of mutex taken in of_alias_get_id(). Convert the lock to mutex to avoid the issue. Cc: sta...@vger.kernel.org Fixes: 099343c64e1

Re: [PATCH v2] vt: Reject zero-sized screen buffer size.

2020-07-20 Thread Brooke Basile
On 7/10/20 10:34 AM, Tetsuo Handa wrote: syzbot is reporting general protection fault in do_con_write() [1] caused by vc->vc_screenbuf == ZERO_SIZE_PTR caused by vc->vc_screenbuf_size == 0 caused by vc->vc_cols == vc->vc_rows == vc->vc_size_row == 0 being passed to ioctl(FBIOPUT_VSCREENINFO) requ

[PATCH 4.9 13/86] arm64: kgdb: Fix single-step exception handling oops

2020-07-20 Thread Greg Kroah-Hartman
From: Wei Li [ Upstream commit 8523c006264df65aac7d77284cc69aac46a6f842 ] After entering kdb due to breakpoint, when we execute 'ss' or 'go' (will delay installing breakpoints, do single-step first), it won't work correctly, and it will enter kdb due to oops. It's because the reason gotten in k

[PATCH 4.9 10/86] smsc95xx: check return value of smsc95xx_reset

2020-07-20 Thread Greg Kroah-Hartman
From: Andre Edich [ Upstream commit 7c8b1e855f94f88a0c569be6309fc8d5c8844cd1 ] The return value of the function smsc95xx_reset() must be checked to avoid returning false success from the function smsc95xx_bind(). Fixes: 2f7ca802bdae2 ("net: Add SMSC LAN9500 USB2.0 10/100 ethernet adapter drive

[PATCH 4.9 19/86] KVM: arm64: Fix definition of PAGE_HYP_DEVICE

2020-07-20 Thread Greg Kroah-Hartman
From: Will Deacon commit 68cf617309b5f6f3a651165f49f20af1494753ae upstream. PAGE_HYP_DEVICE is intended to encode attribute bits for an EL2 stage-1 pte mapping a device. Unfortunately, it includes PROT_DEVICE_nGnRE which encodes attributes for EL1 stage-1 mappings such as UXN and nG, which are R

[PATCH 4.9 29/86] llc: make sure applications use ARPHRD_ETHER

2020-07-20 Thread Greg Kroah-Hartman
From: Eric Dumazet [ Upstream commit a9b1110162357689a34992d5c925852948e5b9fd ] syzbot was to trigger a bug by tricking AF_LLC with non sensible addr->sllc_arphrd It seems clear LLC requires an Ethernet device. Back in commit abf9d537fea2 ("llc: add support for SO_BINDTODEVICE") Octavian Purdi

[PATCH 4.9 26/86] s390/mm: fix huge pte soft dirty copying

2020-07-20 Thread Greg Kroah-Hartman
From: Janosch Frank commit 528a9539348a0234375dfaa1ca5dbbb2f8f8e8d2 upstream. If the pmd is soft dirty we must mark the pte as soft dirty (and not dirty). This fixes some cases for guest migration with huge page backings. Cc: # 4.8 Fixes: bc29b7ac1d9f ("s390/mm: clean up pte/pmd encoding") Rev

[PATCH 4.9 20/86] KVM: x86: bit 8 of non-leaf PDPEs is not reserved

2020-07-20 Thread Greg Kroah-Hartman
From: Paolo Bonzini commit 5ecad245de2ae23dc4e2dbece92f8ccfbaed2fa7 upstream. Bit 8 would be the "global" bit, which does not quite make sense for non-leaf page table entries. Intel ignores it; AMD ignores it in PDEs and PDPEs, but reserves it in PML4Es. Probably, earlier versions of the AMD m

[PATCH 4.9 22/86] btrfs: fix fatal extent_buffer readahead vs releasepage race

2020-07-20 Thread Greg Kroah-Hartman
From: Boris Burkov commit 6bf9cd2eed9aee6d742bb9296c994a91f5316949 upstream. Under somewhat convoluted conditions, it is possible to attempt to release an extent_buffer that is under io, which triggers a BUG_ON in btrfs_release_extent_buffer_pages. This relies on a few different factors. First,

[PATCH 4.9 14/86] bnxt_en: fix NULL dereference in case SR-IOV configuration fails

2020-07-20 Thread Greg Kroah-Hartman
From: Davide Caratti [ Upstream commit c8b1d7436045d3599bae56aef1682813ecccaad7 ] we need to set 'active_vfs' back to 0, if something goes wrong during the allocation of SR-IOV resources: otherwise, further VF configurations will wrongly assume that bp->pf.vf[x] are valid memory locations, and c

[PATCH 4.9 15/86] net: macb: mark device wake capable when "magic-packet" property present

2020-07-20 Thread Greg Kroah-Hartman
From: Nicolas Ferre [ Upstream commit ced4799d06375929e013eea04ba6908207afabbe ] Change the way the "magic-packet" DT property is handled in the macb_probe() function, matching DT binding documentation. Now we mark the device as "wakeup capable" instead of calling the device_init_wakeup() functi

[PATCH 4.9 27/86] ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg

2020-07-20 Thread Greg Kroah-Hartman
From: Sabrina Dubroca [ Upstream commit 5eff06902394425c722f0a44d9545909a8800f79 ] IPv4 ping sockets don't set fl4.fl4_icmp_{type,code}, which leads to incomplete IPsec ACQUIRE messages being sent to userspace. Currently, both raw sockets and IPv6 ping sockets set those fields. Expected output

[PATCH 4.9 12/86] ALSA: compress: fix partial_drain completion state

2020-07-20 Thread Greg Kroah-Hartman
From: Vinod Koul [ Upstream commit f79a732a8325dfbd570d87f1435019d7e5501c6d ] On partial_drain completion we should be in SNDRV_PCM_STATE_RUNNING state, so set that for partially draining streams in snd_compr_drain_notify() and use a flag for partially draining streams While at it, add locks fo

[PATCH 4.9 28/86] l2tp: remove skb_dst_set() from l2tp_xmit_skb()

2020-07-20 Thread Greg Kroah-Hartman
From: Xin Long [ Upstream commit 27d53323664c549b5bb2dfaaf6f7ad6e0376a64e ] In the tx path of l2tp, l2tp_xmit_skb() calls skb_dst_set() to set skb's dst. However, it will eventually call inet6_csk_xmit() or ip_queue_xmit() where skb's dst will be overwritten by: skb_dst_set_noref(skb, dst);

[PATCH 4.9 18/86] ALSA: usb-audio: add quirk for MacroSilicon MS2109

2020-07-20 Thread Greg Kroah-Hartman
From: Hector Martin commit e337bf19f6af38d5c3fa6d06cd594e0f890ca1ac upstream. These devices claim to be 96kHz mono, but actually are 48kHz stereo with swapped channels and unaligned transfers. Cc: sta...@vger.kernel.org Signed-off-by: Hector Martin Link: https://lore.kernel.org/r/2020070207143

[PATCH 4.9 01/86] KVM: s390: reduce number of IO pins to 1

2020-07-20 Thread Greg Kroah-Hartman
From: Christian Borntraeger [ Upstream commit 774911290c589e98e3638e73b24b0a4d4530e97c ] The current number of KVM_IRQCHIP_NUM_PINS results in an order 3 allocation (32kb) for each guest start/restart. This can result in OOM killer activity even with free swap when the memory is fragmented enoug

[PATCH 4.9 24/86] ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE

2020-07-20 Thread Greg Kroah-Hartman
From: Vineet Gupta commit 00fdec98d9881bf5173af09aebd353ab3b9ac729 upstream. Trap handler for syscall tracing reads EFA (Exception Fault Address), in case strace wants PC of trap instruction (EFA is not part of pt_regs as of current code). However this EFA read is racy as it happens after dropp

[PATCH 4.9 03/86] spi: spidev: fix a race between spidev_release and spidev_remove

2020-07-20 Thread Greg Kroah-Hartman
From: Zhenzhong Duan [ Upstream commit abd42781c3d2155868821f1b947ae45bbc0d ] Imagine below scene, spidev is referenced after it's freed. spidev_release()spidev_remove() ... spin_lock_irq(&spidev->spi_lock);

[PATCH v10 02/13] iommu/arm-smmu: Add support for split pagetables

2020-07-20 Thread Jordan Crouse
Enable TTBR1 for a context bank if IO_PGTABLE_QUIRK_ARM_TTBR1 is selected by the io-pgtable configuration. Signed-off-by: Jordan Crouse --- drivers/iommu/arm-smmu.c | 21 - drivers/iommu/arm-smmu.h | 25 +++-- 2 files changed, 35 insertions(+), 11 deletio

[PATCH 4.9 04/86] spi: spidev: fix a potential use-after-free in spidev_release()

2020-07-20 Thread Greg Kroah-Hartman
From: Zhenzhong Duan [ Upstream commit 06096cc6c5a84ced929634b0d79376b94c65a4bd ] If an spi device is unbounded from the driver before the release process, there will be an NULL pointer reference when it's referenced in spi_slave_abort(). Fix it by checking it's already freed before reference.

[PATCH 4.9 05/86] s390/kasan: fix early pgm check handler execution

2020-07-20 Thread Greg Kroah-Hartman
From: Vasily Gorbik [ Upstream commit 998f5bbe3dbdab81c1cfb1aef7c3892f5d24f6c7 ] Currently if early_pgm_check_handler is called it ends up in pgm check loop. The problem is that early_pgm_check_handler is instrumented by KASAN but executed without DAT flag enabled which leads to addressing excep

[PATCH 4.9 06/86] cifs: update ctime and mtime during truncate

2020-07-20 Thread Greg Kroah-Hartman
From: Zhang Xiaoxu [ Upstream commit 5618303d8516f8ac5ecfe53ee8e8bc9a40eaf066 ] As the man description of the truncate, if the size changed, then the st_ctime and st_mtime fields should be updated. But in cifs, we doesn't do it. It lead the xfstests generic/313 failed. So, add the ATTR_MTIME|A

[PATCH 4.9 49/86] Revert "usb/ehci-platform: Set PM runtime as active on resume"

2020-07-20 Thread Greg Kroah-Hartman
This reverts commit 5365fc3132a36a027fd7c2bb461e651b37f1e4d1. Eugeniu Rosca writes: On Thu, Jul 09, 2020 at 09:00:23AM +0200, Eugeniu Rosca wrote: >After integrating v4.14.186 commit 5410d158ca2a50 ("usb/ehci-platform: >Set PM runtime as active on resume") into downstream v4.14.x, we started >to

[PATCH v10 07/13] dt-bindings: arm-smmu: Add compatible string for Adreno GPU SMMU

2020-07-20 Thread Jordan Crouse
Every Qcom Adreno GPU has an embedded SMMU for its own use. These devices depend on unique features such as split pagetables, different stall/halt requirements and other settings. Identify them with a compatible string so that they can be identified in the arm-smmu implementation specific code. Si

[PATCH v10 05/13] iommu: Add a domain attribute to get/set a pagetable configuration

2020-07-20 Thread Jordan Crouse
Add domain attribute DOMAIN_ATTR_PGTABLE_CFG. This will be used by arm-smmu to share the current pagetable configuration with the leaf driver and to allow the leaf driver to set up a new pagetable configuration under certain circumstances. Signed-off-by: Jordan Crouse --- include/linux/iommu.h

[PATCH 4.9 48/86] net: dsa: bcm_sf2: Fix node reference count

2020-07-20 Thread Greg Kroah-Hartman
From: Florian Fainelli [ Upstream commit 8dbe4c5d5e40fe140221024f7b16bec9f310bf70 ] of_find_node_by_name() will do an of_node_put() on the "from" argument. With CONFIG_OF_DYNAMIC enabled which checks for device_node reference counts, we would be getting a warning like this: [6.347230] refco

[PATCH 4.9 46/86] iio:health:afe4403 Fix timestamp alignment and prevent data leak.

2020-07-20 Thread Greg Kroah-Hartman
From: Jonathan Cameron commit 3f9c6d38797e9903937b007a341dad0c251765d6 upstream. One of a class of bugs pointed out by Lars in a recent review. iio_push_to_buffers_with_timestamp assumes the buffer used is aligned to the size of the timestamp (8 bytes). This is not guaranteed in this driver whi

[PATCH 4.9 07/86] ARM: imx6: add missing put_device() call in imx6q_suspend_init()

2020-07-20 Thread Greg Kroah-Hartman
From: yu kuai [ Upstream commit 4845446036fc9c13f43b54a65c9b757c14f5141b ] if of_find_device_by_node() succeed, imx6q_suspend_init() doesn't have a corresponding put_device(). Thus add a jump target to fix the exception handling for this function implementation. Signed-off-by: yu kuai Signed-o

[PATCH 4.9 45/86] iio:pressure:ms5611 Fix buffer element alignment

2020-07-20 Thread Greg Kroah-Hartman
From: Jonathan Cameron commit 8db4afe163bbdd93dca6fcefbb831ef12ecc6b4d upstream. One of a class of bugs pointed out by Lars in a recent review. iio_push_to_buffers_with_timestamp assumes the buffer used is aligned to the size of the timestamp (8 bytes). This is not guaranteed in this driver whi

[PATCH 4.9 51/86] Revert "usb/ohci-platform: Fix a warning when hibernating"

2020-07-20 Thread Greg Kroah-Hartman
This reverts commit 104592a5233d77322c3e527e3925dc7c5a30a6af. Eugeniu Rosca writes: On Thu, Jul 09, 2020 at 09:00:23AM +0200, Eugeniu Rosca wrote: >After integrating v4.14.186 commit 5410d158ca2a50 ("usb/ehci-platform: >Set PM runtime as active on resume") into downstream v4.14.x, we started >to

[PATCH v10 11/13] drm/msm: Add support for private address space instances

2020-07-20 Thread Jordan Crouse
Add support for allocating private address space instances. Targets that support per-context pagetables should implement their own function to allocate private address spaces. The default will return a pointer to the global address space. Signed-off-by: Jordan Crouse --- drivers/gpu/drm/msm/ms

Re: [PATCH v6] xfs: Fix false positive lockdep warning with sb_internal & fs_reclaim

2020-07-20 Thread Darrick J. Wong
On Mon, Jul 20, 2020 at 11:32:03AM -0400, Waiman Long wrote: > > > - Original Message - > From: "Darrick J. Wong" > To: "Waiman Long" > Cc: linux-...@vger.kernel.org, linux-kernel@vger.kernel.org, "Dave Chinner" > , "Qian Cai" , "Eric Sandeen" > > Sent: Monday, July 13, 2020 12:41:12

[PATCH 4.9 08/86] scsi: mptscsih: Fix read sense data size

2020-07-20 Thread Greg Kroah-Hartman
From: Tomas Henzl [ Upstream commit afe89f115e84edbc76d316759e206580a06c6973 ] The sense data buffer in sense_buf_pool is allocated with size of MPT_SENSE_BUFFER_ALLOC(64) (multiplied by req_depth) while SNS_LEN(sc)(96) is used when reading the data. That may lead to a read from unallocated are

[PATCH 4.9 60/86] HID: magicmouse: do not set up autorepeat

2020-07-20 Thread Greg Kroah-Hartman
From: Dmitry Torokhov commit 6363d2065cd399cf9d6dc9d08c437f8658831100 upstream. Neither the trackpad, nor the mouse want input core to generate autorepeat events for their buttons, so let's reset the bit (as hid-input sets it for these devices based on the usage vendor code). Cc: sta...@vger.ke

[PATCH 4.9 57/86] ARM: dts: socfpga: Align L2 cache-controller nodename with dtschema

2020-07-20 Thread Greg Kroah-Hartman
From: Krzysztof Kozlowski [ Upstream commit d7adfe5ffed9faa05f8926223086b101e14f700d ] Fix dtschema validator warnings like: l2-cache@f000: $nodename:0: 'l2-cache@f000' does not match '^(cache-controller|cpu)(@[0-9a-f,]+)*$' Fixes: 475dc86d08de ("arm: dts: socfpga: Add a ba

[PATCH 4.9 30/86] net: Added pointer check for dst->ops->neigh_lookup in dst_neigh_lookup_skb

2020-07-20 Thread Greg Kroah-Hartman
From: Martin Varghese [ Upstream commit 394de110a73395de2ca4516b0de435e91b11b604 ] The packets from tunnel devices (eg bareudp) may have only metadata in the dst pointer of skb. Hence a pointer check of neigh_lookup is needed in dst_neigh_lookup_skb Kernel crashes when packets from bareudp devi

[PATCH 4.9 39/86] cgroup: Fix sock_cgroup_data on big-endian.

2020-07-20 Thread Greg Kroah-Hartman
From: Cong Wang [ Upstream commit 14b032b8f8fce03a546dcf365454bec8c4a58d7d ] In order for no_refcnt and is_data to be the lowest order two bits in the 'val' we have to pad out the bitfield of the u8. Fixes: ad0f75e5f57c ("cgroup: fix cgroup_sk_alloc() for sk_clone_lock()") Reported-by: Guenter

[PATCH v10 10/13] drm/msm: Add support to create a local pagetable

2020-07-20 Thread Jordan Crouse
Add support to create a io-pgtable for use by targets that support per-instance pagetables. In order to support per-instance pagetables the GPU SMMU device needs to have the qcom,adreno-smmu compatible string and split pagetables enabled. Signed-off-by: Jordan Crouse --- drivers/gpu/drm/msm/msm

[PATCH 4.9 34/86] genetlink: remove genl_bind

2020-07-20 Thread Greg Kroah-Hartman
From: Sean Tranchetti [ Upstream commit 1e82a62fec613844da9e558f3493540a5b7a7b67 ] A potential deadlock can occur during registering or unregistering a new generic netlink family between the main nl_table_lock and the cb_lock where each thread wants the lock held by the other, as demonstrated be

[PATCH v10 03/13] iommu/arm-smmu: Add implementation hooks to configure contexts

2020-07-20 Thread Jordan Crouse
Add a new hook to allow implementations to implement their own context bank allocation scheme and update the existing init_context function to take the device pointer. These modifications will be used by the upcoming Adreno SMMU implementation to identify the GPU device and properly configure it f

[PATCH 4.9 38/86] cgroup: fix cgroup_sk_alloc() for sk_clone_lock()

2020-07-20 Thread Greg Kroah-Hartman
From: Cong Wang [ Upstream commit ad0f75e5f57ccbceec13274e1e242f2b5a6397ed ] When we clone a socket in sk_clone_lock(), its sk_cgrp_data is copied, so the cgroup refcnt must be taken too. And, unlike the sk_alloc() path, sock_update_netprioidx() is not called here. Therefore, it is safe and nece

[PATCH 4.9 37/86] tcp: md5: allow changing MD5 keys in all socket states

2020-07-20 Thread Greg Kroah-Hartman
From: Eric Dumazet [ Upstream commit 1ca0fafd73c5268e8fc4b997094b8bb2bfe8deea ] This essentially reverts commit 721230326891 ("tcp: md5: reject TCP_MD5SIG or TCP_MD5SIG_EXT on established sockets") Mathieu reported that many vendors BGP implementations can actually switch TCP MD5 on established

[PATCH 4.9 64/86] USB: c67x00: fix use after free in c67x00_giveback_urb

2020-07-20 Thread Greg Kroah-Hartman
From: Tom Rix commit 211f08347355cba1f769bbf3355816a12b3ddd55 upstream. clang static analysis flags this error c67x00-sched.c:489:55: warning: Use of memory after it is freed [unix.Malloc] usb_hcd_giveback_urb(c67x00_hcd_to_hcd(c67x00), urb, urbp->status);

  1   2   3   4   5   6   7   8   9   10   >