Update

2013-12-05 Thread Update Unit
This is an automatic message by the system to let you know that you have to confirm your account information. An Attempt has been made to login from a new computer. For the security of your account. Your Email account will be frozen temporary after 48 hours in order to protect it. The account

RE: [PATCH] crash_dump: fix compilation error (on MIPS at least)

2013-12-05 Thread Qais Yousef
-Original Message- From: Vivek Goyal [mailto:vgo...@redhat.com] Sent: 04 December 2013 21:30 To: Qais Yousef Cc: linux-ker...@vger.kernel.org; Andrew Morton; Michael Holzheu; linux- m...@linux-mips.org; stable@vger.kernel.org Subject: Re: [PATCH] crash_dump: fix compilation error

[PATCH 3.10] aio: restore locking of ioctx list on removal

2013-12-05 Thread Mateusz Guzik
Commit 36f5588905c10a8c4568a210d601fe8c3c27e0f0 aio: refcounting cleanup resulted in ioctx_lock not being held during ctx removal, leaving the list susceptible to corruptions. In mainline kernel the issue went away as a side effect of db446a08c23d5475e6b08c87acca79ebb20f283c aio: convert the

Re: [PATCH] crash_dump: fix compilation error (on MIPS at least)

2013-12-05 Thread Vivek Goyal
On Wed, Dec 04, 2013 at 03:58:22PM +, Qais Yousef wrote: In file included from kernel/crash_dump.c:2:0: include/linux/crash_dump.h:22:27: error: unknown type name ‘pgprot_t’ when CONFIG_CRASH_DUMP=y The error was traced back to this commit: 9cb218131de1 vmcore: introduce

[PATCH] ASoC: samsung: Ensure DMA data is initialised for secondary DAI

2013-12-05 Thread Mark Brown
From: Mark Brown broo...@linaro.org While testing the upcoming dmaengine conversion for the driver Padma noticed that the DMA data for the secondard DAI is not being correctly initialised and provided a fix on top of the conversion. Also do this fix for mainline. Reported-by: Padmavathi Venna

[PATCH] drm/i915: Fix use-after-free in do_switch

2013-12-05 Thread Daniel Vetter
So apparently under ridiculous amounts of memory pressure we can get into trouble in do_switch when we try to move the old hw context backing storage object onto the active lists. With list debugging enabled that usually results in us chasing a poisoned pointer - which means we've hit upon a vma

[PATCH] powerpc: Fix PTE page address mismatch in pgtable ctor/dtor

2013-12-05 Thread Hong H. Pham
In pte_alloc_one(), pgtable_page_ctor() is passed an address that has not been converted by page_address() to the newly allocated PTE page. When the PTE is freed, __pte_free_tlb() calls pgtable_page_dtor() with an address to the PTE page that has been converted by page_address(). The mismatch in

Re: [PATCH] drm/i915: Fix erroneous dereference of batch_obj inside reset_status

2013-12-05 Thread Mika Kuoppala
Chris Wilson ch...@chris-wilson.co.uk writes: As the rings may be processed and their requests deallocated in a different order to the natural retirement during a reset, /* Whilst this request exists, batch_obj will be on the * active_list, and so will hold the active reference. Only when

Re: [PATCH] drm/i915: Fix erroneous dereference of batch_obj inside reset_status

2013-12-05 Thread Chris Wilson
On Thu, Dec 05, 2013 at 06:07:27PM +0200, Mika Kuoppala wrote: Chris Wilson ch...@chris-wilson.co.uk writes: As the rings may be processed and their requests deallocated in a different order to the natural retirement during a reset, /* Whilst this request exists, batch_obj will be on

RE: [Intel-gfx] [PATCH] drm/i915: Fix use-after-free in do_switch

2013-12-05 Thread Barbalho, Rafael
-Original Message- From: intel-gfx-boun...@lists.freedesktop.org [mailto:intel-gfx- boun...@lists.freedesktop.org] On Behalf Of Daniel Vetter Sent: Thursday, December 05, 2013 2:43 PM To: Intel Graphics Development Cc: Lister, Ian; Daniel Vetter; stable@vger.kernel.org; Widawsky,

[PATCH 3.10] mmc: block: fix a bug of error handling in MMC driver

2013-12-05 Thread Yoshitake Kobayashi
From: KOBAYASHI Yoshitake yoshitake.kobaya...@toshiba.co.jp commit c8760069627ad3b0dbbea170f0c4c58b16e18d3d upstream. Current MMC driver doesn't handle generic error (bit19 of device status) in write sequence. As a result, write data gets lost when generic error occurs. For example, a generic

[PATCH 3.4] mmc: block: fix a bug of error handling in MMC driver

2013-12-05 Thread Yoshitake Kobayashi
From: KOBAYASHI Yoshitake yoshitake.kobaya...@toshiba.co.jp commit c8760069627ad3b0dbbea170f0c4c58b16e18d3d upstream. Current MMC driver doesn't handle generic error (bit19 of device status) in write sequence. As a result, write data gets lost when generic error occurs. For example, a generic

[3.5.y.z extended stable] Linux 3.5.7.27 stable review

2013-12-05 Thread Luis Henriques
This is the start of the review cycle for the Linux 3.5.7.27 stable kernel. This version contains 90 new patches, summarized below. The new patches are posted as replies to this message and also available in this git branch:

[PATCH 3.5 03/90] ACPICA: Return error if DerefOf resolves to a null package element.

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Bob Moore robert.mo...@intel.com commit a50abf4842dd7d603a2ad6dcc7f1467fd2a66f03 upstream. Disallow the dereference of a reference (via index) to an uninitialized package element.

[PATCH 3.5 21/90] block: fix a probe argument to blk_register_region

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka mpato...@redhat.com commit a207f5937630dd35bd2550620bef416937a1365e upstream. The probe function is supposed to return NULL on failure (as we can see in kobj_lookup: kobj

[PATCH 3.5 88/90] ftrace: Fix function graph with loading of modules

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Steven Rostedt (Red Hat) rost...@goodmis.org commit 8a56d7761d2d041ae5e8215d20b4167d8aa93f51 upstream. Commit 8c4f3c3fa9681 ftrace: Check module functions being traced on reload fixed

[PATCH 3.5 86/90] exec/ptrace: fix get_dumpable() incorrect tests

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Kees Cook keesc...@chromium.org commit d049f74f2dbe71354d43d393ac3a188947811348 upstream. The get_dumpable() return value is not boolean. Most users of the function actually want to be

[PATCH 3.5 87/90] SUNRPC: don't map EKEYEXPIRED to EACCES in call_refreshresult

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Andy Adamson and...@netapp.com commit f1ff0c27fd9987c59d707cd1a6b6c1fc3ae0a250 upstream. The NFS layer needs to know when a key has expired. This change also returns -EKEYEXPIRED to the

[PATCH 3.5 90/90] misc: atmel_pwm: add deferred-probing support

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold jhov...@gmail.com commit 5c6d6fd1564138ad048564e48639f842714a90c6 upstream. Two drivers (atmel-pwm-bl and leds-atmel-pwm) currently depend on the atmel_pwm driver to have

[PATCH 3.5 70/90] configfs: fix race between dentry put and lookup

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Junxiao Bi junxiao...@oracle.com commit 76ae281f6307331aa063288edb6422ae99f435f0 upstream. A race window in configfs, it starts from one dentry is UNHASHED and end before configfs_d_iput

[PATCH 3.5 89/90] Input: i8042 - add PNP modaliases

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Tom Gundersen t...@jklm.no commit 78551277e4df57864b0b0e7f85c23ede2be2edb8 upstream. This allows the module to be autoloaded in the common case. In order to work on non-PnP systems the

[PATCH 3.5 85/90] staging: vt6656: [BUG] Fix for TX USB resets from vendors driver.

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Malcolm Priestley tvbox...@gmail.com commit 9df682927c2e3a92f43803d6b52095992e3b2ab8 upstream. This fixes resets on heavy TX data traffic. Vendor driver

[PATCH 3.5 84/90] cpuset: Fix memory allocator deadlock

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra pet...@infradead.org commit 0fc0287c9ed1ffd3706f8b4d9b314aa102ef1245 upstream. Juri hit the below lockdep report: [4.303391]

[PATCH 3.5 80/90] ALSA: hda/realtek - Add support of ALC231 codec

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Kailang Yang kail...@realtek.com commit ba4c4d0a9021ab034554d532a98133d668b87599 upstream. It's compatible with ALC269. Signed-off-by: Kailang Yang kail...@realtek.com Signed-off-by:

[PATCH 3.5 74/90] crypto: s390 - Fix aes-cbc IV corruption

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Herbert Xu herb...@gondor.apana.org.au commit f262f0f5cad0c9eca61d1d383e3b67b57dcbe5ea upstream. The cbc-aes-s390 algorithm incorrectly places the IV in the tfm data structure. As the

[PATCH 3.5 78/90] powerpc/signals: Improved mark VSX not saved with small contexts fix

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Michael Neuling mi...@neuling.org commit ec67ad82814bee92251fd963bf01c7a173856555 upstream. In a recent patch: commit c13f20ac48328b05cd3b8c19e31ed6c132b44b42 Author: Michael Neuling

[PATCH 3.5 79/90] staging: zsmalloc: Ensure handle is never 0 on success

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Olav Haugan ohau...@codeaurora.org commit 67296874eb1cc80317bf2a8fba22b494e21eb29b upstream. zsmalloc encodes a handle using the pfn and an object index. On hardware platforms with

[PATCH 3.5 82/90] tracing: Allow events to have NULL strings

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Steven Rostedt (Red Hat) rost...@goodmis.org commit 4e58e54754dc1fec21c3a9e824bc108b05fdf46e upstream. If an TRACE_EVENT() uses __assign_str() or __get_str on a NULL pointer then the

[PATCH 3.5 81/90] ALSA: hda/realtek - Set pcbeep amp for ALC668

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Kailang Yang kail...@realtek.com commit 9ad54547cf6f4410eba83bb95dfd2a0966718d6d upstream. Set the missing pcbeep default amp for ALC668. Signed-off-by: Kailang Yang kail...@realtek.com

[PATCH 3.5 76/90] PCI: Define macro for Marvell vendor ID

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Xiangliang Yu yuxia...@marvell.com commit 8e7ee6f5dfb56a32da760d990be908ed35b1c5bf upstream. Define PCI_VENDOR_ID_MARVELL_EXT macro for 0x1b4b vendor ID Signed-off-by: Xiangliang Yu

[PATCH 3.5 67/90] powerpc/signals: Mark VSX not saved with small contexts

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Michael Neuling mi...@neuling.org commit c13f20ac48328b05cd3b8c19e31ed6c132b44b42 upstream. The VSX MSR bit in the user context indicates if the context contains VSX state. Currently we

[PATCH 3.5 75/90] iio:accel:kxsd9 fix missing mutex unlock

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Frank Zago fr...@zago.net commit 0ee005c7dc2803125275e24598f0fb37775a6af3 upstream. This will leave a lock held after reading from the device, preventing any further reads.

[PATCH 3.5 66/90] powerpc/pseries: Duplicate dtl entries sometimes sent to userspace

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Anton Blanchard an...@samba.org commit 84b073868b9d9e754ae48b828337633d1b386482 upstream. When reading from the dispatch trace log (dtl) userspace interface, I sometimes see duplicate

[PATCH 3.5 69/90] iscsi-target: chap auth shouldn't match username with trailing garbage

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Eric Seppanen e...@purestorage.com commit 86784c6bdeeef78eed94d298be7a8879f6a97ee2 upstream. In iSCSI negotiations with initiator CHAP enabled, usernames with trailing garbage are

[PATCH 3.5 71/90] KVM: perform an invalid memslot step for gpa base change

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Marcelo Tosatti mtosa...@redhat.com commit 12d6e7538e2d418c08f082b1b44ffa5fb7270ed8 upstream. PPC must flush all translations before the new memory slot is visible. Signed-off-by:

[PATCH 3.5 72/90] KVM: Fix iommu map/unmap to handle memory slot moves

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Williamson alex.william...@redhat.com commit e40f193f5bb022e927a57a4f5d5194e4f12ddb74 upstream. The iommu integration into memory slots expects memory slots to be added or removed

[PATCH 3.5 73/90] ARM: i.MX6q: fix the wrong parent of can_root clock

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Jiada Wang jiada_w...@mentor.com commit 9b3d423707c3b1f6633be1be7e959623e10c596b upstream. instead of pll3_usb_otg the parent of can_root clock should be pll3_60m. Signed-off-by: Jiada

[PATCH 3.5 77/90] ahci: add Marvell 9230 to the AHCI PCI device list

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Samir Benmendil samir.benmen...@gmail.com commit 6d5278a68a75891db1df5ae1ecf83d288fc58c65 upstream. Tested with a DAWICONTROL DC-624e on 3.10.10 Signed-off-by: Samir Benmendil

[PATCH 3.5 68/90] iscsi-target: fix extract_param to handle buffer length corner case

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Eric Seppanen e...@purestorage.com commit 369653e4fb511928511b0ce81f41c812ff1f28b6 upstream. extract_param() is called with max_length set to the total size of the output buffer. It's

[PATCH 3.5 65/90] PCI: Remove duplicate pci_disable_device() from pcie_portdrv_remove()

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Yinghai Lu ying...@kernel.org commit e7cc5cf74544d97d7b69e2701595037474db1f96 upstream. The pcie_portdrv .probe() method calls pci_enable_device() once, in pcie_port_device_register(),

[PATCH 3.5 62/90] nfsd4: fix xdr decoding of large non-write compounds

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: J. Bruce Fields bfie...@redhat.com commit 365da4adebb1c012febf81019ad3dc5bb52e2a13 upstream. This fixes a regression from 247500820ebd02ad87525db5d9b199e5b66f6636 nfsd4: fix decoding of

[PATCH 3.5 63/90] avr32: setup crt for early panic()

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: =?UTF-8?q?Andreas=20Bie=C3=9Fmann?= andr...@biessmann.de commit 7a2a74f4b856993218aa7cdeeb6c3103101340db upstream. Before the CRT was (fully) set up in kernel_entry (bss cleared before

[PATCH 3.5 60/90] nfsd: split up nfsd_setattr

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Christoph Hellwig h...@infradead.org commit 818e5a22e907fbae75e9c1fd78233baec9fa64b6 upstream. Split out two helpers to make the code more readable and easier to verify for correctness.

[PATCH 3.5 61/90] nfsd: make sure to balance get/put_write_access

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Christoph Hellwig h...@infradead.org commit 987da4791052fa298b7cfcde4dea9f6f2bbc786b upstream. Use a straight goto error label style in nfsd_setattr to make sure we always do the

[PATCH 3.5 64/90] avr32: fix out-of-range jump in large kernels

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: =?UTF-8?q?Andreas=20Bie=C3=9Fmann?= andr...@biessmann.de commit d617b338bbfdd77e9cbd8e7dc949cee3dd73d575 upstream. This patch fixes following error (for big kernels): ---8---

[PATCH 3.5 52/90] audit: fix info leak in AUDIT_GET requests

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Mathias Krause mini...@googlemail.com commit 64fbff9ae0a0a843365d922e0057fc785f23f0e3 upstream. We leak 4 bytes of kernel stack in response to an AUDIT_GET request as we miss to

[PATCH 3.5 58/90] radeon: workaround pinning failure on low ram gpu

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Jerome Glisse jgli...@redhat.com commit 97b6ff6be9da7675aab339334fda996d6c5077d9 upstream. GPU with low amount of ram can fails at pinning new framebuffer before unpinning old one. On

[PATCH 3.5 59/90] drm/radeon: add semaphore trace point

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: =?UTF-8?q?Christian=20K=C3=B6nig?= christian.koe...@amd.com commit bd80c8ba995c1dbdddee14acc55c541c499e0442 upstream. Signed-off-by: Christian König christian.koe...@amd.com

[PATCH 3.5 57/90] rtlwifi: rtl8192cu: Fix more pointer arithmetic errors

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Larry Finger larry.fin...@lwfinger.net commit eafbdde9c5629bea58df07275c5917eb42afbbe7 upstream. This driver uses a number of macros to get and set various fields in the RX and TX

[PATCH 3.5 53/90] audit: use nlmsg_len() to get message payload length

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Mathias Krause mini...@googlemail.com commit 4d8fe7376a12bf4524783dd95cbc00f1fece6232 upstream. Using the nlmsg_len member of the netlink header to test if the message is valid is wrong

[PATCH 3.5 54/90] target: Fix delayed Task Aborted Status (TAS) handling bug

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Nicholas Bellinger n...@linux-iscsi.org commit 29f4c090079f442ea2723d292e4e64f0b6ac1f27 upstream. This patch fixes a bug in delayed Task Aborted Status (TAS) handling, where

[PATCH 3.5 56/90] drm/i915: flush cursors harder

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Daniel Vetter daniel.vet...@ffwll.ch commit b2ea8ef559b4d94190009f3651b5b3ab7c05afd3 upstream. Apparently they need the same treatment as primary planes. This fixes modesetting failures

[PATCH 3.5 83/90] Staging: tidspbridge: disable driver

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Greg Kroah-Hartman gre...@linuxfoundation.org commit 930ba4a374b96560ef9fde2145cdc454a164ddcc upstream. There seems to be no active maintainer for the driver, and there is an unfixed

[PATCH 3.5 51/90] audit: printk USER_AVC messages when audit isn't enabled

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Tyler Hicks tyhi...@canonical.com commit 0868a5e150bc4c47e7a003367cd755811eb41e0b upstream. When the audit=1 kernel parameter is absent and auditd is not running, AUDIT_USER_AVC messages

[PATCH 3.5 47/90] mwifiex: correct packet length for packets from SDIO interface

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Avinash Patil pat...@marvell.com commit d03b4aa77e1187b77dfe37d14a923547f00baa66 upstream. While receiving a packet on SDIO interface, we allocate skb with size multiple of SDIO block

[PATCH 3.5 50/90] Revert ima: policy for RAMFS

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Mimi Zohar zo...@linux.vnet.ibm.com commit 08de59eb144d7c41351a467442f898d720f0f15f upstream. This reverts commit 4c2c392763a682354fac65b6a569adec4e4b5387. Everything in the initramfs

[PATCH 3.5 48/90] prism54: set netdev type to wlan

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Dan Williams d...@redhat.com commit 8e3ffa471091c560deb6738ed9ab7445b7a5fd04 upstream. Userspace uses the netdev devtype for stuff like device naming and type detection. Be nice and set

[PATCH 3.5 55/90] md: fix calculation of stacking limits on level change.

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: NeilBrown ne...@suse.de commit 02e5f5c0a0f726e66e3d8506ea1691e344277969 upstream. The various -run routines of md personalities assume that the 'queue' has been initialised by the

[PATCH 3.5 43/90] rtlwifi: Fix endian error in extracting packet type

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Mark Cave-Ayland mark.cave-ayl...@ilande.co.uk commit 0c5d63f0ab6728f05ddefa25aff55e31297f95e6 upstream. All of the rtlwifi drivers have an error in the routine that tests if the data is

[PATCH 3.5 41/90] IB/ipath: Convert ipath_user_sdma_pin_pages() to use get_user_pages_fast()

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Jan Kara j...@suse.cz commit 4adcf7fb6783e354aab38824d803fa8c4f8e8a27 upstream. ipath_user_sdma_queue_pkts() gets called with mmap_sem held for writing. Except for get_user_pages() deep

[PATCH 3.5 42/90] rtlwifi: rtl8192se: Fix wrong assignment

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Felipe Pena felipe...@gmail.com commit 3aef7dde8dcf09e0124f0a2665845a507331972b upstream. There is a typo in the struct member name on assignment when checking rtlphy-current_chan_bw ==

[PATCH 3.5 49/90] selinux: correct locking in selinux_netlbl_socket_connect)

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Paul Moore pmo...@redhat.com commit 42d64e1add3a1ce8a787116036163b8724362145 upstream. The SELinux/NetLabel glue code has a locking bug that affects systems with NetLabel enabled, see

[PATCH 3.5 46/90] rtlwifi: rtl8192de: Fix incorrect signal strength for unassociated AP

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Larry Finger larry.fin...@lwfinger.net commit 3545f3d5f4af715c914394123ce7725a9cf0a1c4 upstream. The routine that processes received frames was returning the RSSI value for the signal

[PATCH 3.5 44/90] rtlwifi: rtl8192se: Fix incorrect signal strength for unassociated AP

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Larry Finger larry.fin...@lwfinger.net commit b4ade797668e33b4e8353c2701ce01d7084dfafa upstream. The routine that processes received frames was returning the RSSI value for the signal

patch mei: add 9 series PCH mei device ids added to char-misc tree

2013-12-05 Thread gregkh
This is a note to let you know that I've just added the patch titled mei: add 9 series PCH mei device ids to my char-misc git tree which can be found at git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc.git in the char-misc-linus branch. The patch will show up in the next

[PATCH 3.5 39/90] ARM: OMAP2+: omap_device: maintain sane runtime pm status around suspend/resume

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Nishanth Menon n...@ti.com commit 3522bf7bfa248b99eafa2f4872190699a808c7d9 upstream. OMAP device hooks around suspend|resume_noirq ensures that hwmod devices are forced to idle using

[PATCH 3.5 35/90] ASoC: wm8962: Turn on regcache_cache_only before disabling regulator

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Nicolin Chen b42...@freescale.com commit 50bfcf2df2fadf77e143d6099150e6fa7ef4d78c upstream. It's safer to turn on regcache_cache_only before disabling regulator since the driver will

[PATCH 3.5 38/90] ASoC: cs42l52: Correct MIC CTL mask

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Brian Austin brian.aus...@cirrus.com commit 3d800c6d75b8c92fa928a0bcaf95cd7ac5fd1ce5 upstream. The mask for CS42L52_MIC_CTL_TYPE_MASK was wrong keeping the mic config from being set

[PATCH 3.5 37/90] hwmon: (lm90) Fix max6696 alarm handling

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Guenter Roeck li...@roeck-us.net commit e41fae2b1ed8c78283d73651cd65be0228c0dd1c upstream. Bit 2 of status register 2 on MAX6696 (external diode 2 open) sets ALERT; the bit thus has to

[PATCH 3.5 40/90] setfacl removes part of ACL when setting POSIX ACLs to Samba

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Steve French smfre...@gmail.com commit b1d93356427be6f050dc55c86eb019d173700af6 upstream. setfacl over cifs mounts can remove the default ACL when setting the (non-default part of) the

[PATCH 3.5 36/90] ARM: integrator_cp: Set LCD{0,1} enable lines when turning on CLCD

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Jonathan Austin jonathan.aus...@arm.com commit 30aeadd44deea3f3b0df45b9a70ee0fd5f8d6dc2 upstream. This turns on the internal integrator LCD display(s). It seems that the code to do this

[PATCH 3.5 32/90] drm/nouveau: when bailing out of a pushbuf ioctl, do not remove previous fence

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Ben Skeggs bske...@redhat.com commit 9360bd1112d8874d21942e2ae74f5416b00a8db6 upstream. Signed-off-by: Ben Skeggs bske...@redhat.com Signed-off-by: Luis Henriques

[PATCH 3.5 29/90] SUNRPC: Avoid deep recursion in rpc_release_client

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust trond.mykleb...@netapp.com commit d07ba8422f1e58be94cc98a1f475946dc1b89f1b upstream. In cases where an rpc client has a parent hierarchy, then rpc_free_client may end up

[PATCH 3.5 25/90] SUNRPC: Fix a data corruption issue when retransmitting RPC calls

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust trond.mykleb...@netapp.com commit a6b31d18b02ff9d7915c5898c9b5ca41a798cd73 upstream. The following scenario can cause silent data corruption when doing NFS writes. It has

[PATCH 3.5 34/90] ALSA: pcsp: Fix the order of input device unregistration

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai ti...@suse.de commit 6408eac2665955343cd0e4bcd7d6237ce39611ed upstream. The current code may access to the already freed object. The input device must be accessed and

[PATCH 3.5 28/90] x86/microcode/amd: Tone down printk(), don't treat a missing firmware file as an error

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Thomas Renninger tr...@suse.de commit 11f918d3e2d3861b6931e97b3aa778e4984935aa upstream. Do it the same way as done in microcode_intel.c: use pr_debug() for missing firmware files.

[PATCH 3.5 33/90] ASoC: fsl: imx-pcm-fiq: omit fiq counter to avoid harm in unbalanced situations

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Oskar Schirmer os...@scara.com commit fc7dc61d9a87011aaf8a6eb3144ebf9552adf5d2 upstream. Unbalanced calls to snd_imx_pcm_trigger() may result in endless FIQ activity and thus provoke

[PATCH 3.5 30/90] ALSA: hda - Don't clear the power state at snd_hda_codec_reset()

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai ti...@suse.de commit d183b4fc463489b6bbe05c99afa0257a6fe578eb upstream. snd_hda_codec_reset() is called either in resetting the whole setup at error paths or hwdep

[PATCH 3.5 31/90] ASoC: blackfin: Fix missing break

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai ti...@suse.de commit afed4dbe3a043dbd833a53b6b4951e155708afd2 upstream. Fixes: 4b2ffc205cb9 ('ASoC: Blackfin I2S: add 8-bit sample support') Reported-by: David Binderman

[PATCH 3.5 26/90] mtd: gpmi: fix kernel BUG due to racing DMA operations

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Huang Shijie b32...@freescale.com commit 7b3d2fb92067bcb29f0f085a9fa9fa64920a6646 upstream. [1] The gpmi uses the nand_command_lp to issue the commands to NAND chips. The gpmi issues

[PATCH 3.5 23/90] xen/blkback: fix reference counting

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Vegard Nossum vegard.nos...@oracle.com commit ea5ec76d76da9279d12027c1828544c5ccbe7932 upstream. If the permission check fails, we drop a reference to the blkif without having taken it

[PATCH 3.5 20/90] loop: fix crash if blk_alloc_queue fails

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka mpato...@redhat.com commit 3ec981e30fae1f3c8728a05c730acaa1f627bcfb upstream. loop: fix crash if blk_alloc_queue fails If blk_alloc_queue fails, loop_add cleans up, but

[PATCH 3.5 18/90] block: fix race between request completion and timeout handling

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Jeff Moyer jmo...@redhat.com commit 4912aa6c11e6a5d910264deedbec2075c6f1bb73 upstream. crocode i2c_i801 i2c_core iTCO_wdt iTCO_vendor_support shpchp ioatdma dca be2net sg ses enclosure

[PATCH 3.5 22/90] block: properly stack underlying max_segment_size to DM device

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Mike Snitzer snit...@redhat.com commit d82ae52e68892338068e7559a0c0657193341ce4 upstream. Without this patch all DM devices will default to BLK_MAX_SEGMENT_SIZE (65536) even if the

[PATCH 3.5 24/90] loop: fix crash when using unassigned loop device

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka mpato...@redhat.com commit ef7e7c82e02b602f29c2b87f42dcd6143a6777da upstream. When the loop module is loaded, it creates 8 loop devices /dev/loop[0-7]. The devices have

[PATCH 3.5 27/90] ALSA: msnd: Avoid duplicated driver name

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai ti...@suse.de commit 092f9cd16aac7d054af1755c945f37c1b33399e6 upstream. msnd_pinnacle.c is used for both snd-msnd-pinnacle and snd-msnd-classic drivers, and both should have

[PATCH 3.5 45/90] rtlwifi: rtl8192cu: Fix incorrect signal strength for unassociated AP

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Larry Finger larry.fin...@lwfinger.net commit 78dbfecb95be4635b995af3bd29fa10013409fcd upstream. The routine that processes received frames was returning the RSSI value for the signal

[PATCH 3.5 16/90] mtd: map: fixed bug in 64-bit systems

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Wang Haitao wang.hait...@zte.com.cn commit a4d62babf988fe5dfde24437fa135ef147bc7aa0 upstream. Hardware: CPU: XLP832,the 64-bit OS NOR Flash:S29GL128S 128M Software:

[PATCH 3.5 17/90] mtd: m25p80: fix allocation size

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Brian Norris computersforpe...@gmail.com commit 778d226a1462572b51d6777cdb1d611543410cb4 upstream. This patch fixes two memory errors: 1. During a probe failure (in

[PATCH 3.5 13/90] drm/ttm: Fix memory type compatibility check

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Thomas Hellstrom thellst...@vmware.com commit 59c8e66378fb78adbcd05f0d09783dde6fef282b upstream. Also check the busy placements before deciding to move a buffer object. Failing to do

[PATCH 3.5 19/90] blk-core: Fix memory corruption if blkcg_init_queue fails

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka mpato...@redhat.com commit fff4996b7db7955414ac74386efa5e07fd766b50 upstream. If blkcg_init_queue fails, blk_alloc_queue_node doesn't call bdi_destroy to clean up

[PATCH 3.5 07/90] ARM: sa11x0/assabet: ensure CS2 is configured appropriately

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Russell King rmk+ker...@arm.linux.org.uk commit f3964fe1c9d9a887d65faf594669852e4dec46e0 upstream. The CS2 region contains the Assabet board configuration and status registers, which are

[PATCH 3.5 12/90] drm/ttm: Fix ttm_bo_move_memcpy

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Thomas Hellstrom thellst...@vmware.com commit da95c788ef0c645378ffccb7060a0df1a33aee38 upstream. All error paths will want to keep the mm node, so handle this at the function exit. This

[PATCH 3.5 11/90] drm/ttm: Handle in-memory region copies

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Jakob Bornecrantz ja...@vmware.com commit 9a0599ddeae012a771bba5e23393fc52d8a59d89 upstream. Fix the case where the ttm pointer may be NULL causing a NULL pointer dereference.

[PATCH 3.5 09/90] ext4: avoid bh leak in retry path of ext4_expand_extra_isize_ea()

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o ty...@mit.edu commit dcb9917ba041866686fe152850364826c4622a36 upstream. Reported-by: Dave Jones da...@redhat.com Signed-off-by: Theodore Ts'o ty...@mit.edu Signed-off-by:

[PATCH 3.5 10/90] drm/radeon/si: fix define for MC_SEQ_TRAIN_WAKEUP_CNTL

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher alexander.deuc...@amd.com commit d5693761b2b4ff530c8af8af9ec55b6eae76e617 upstream. Typo in the register offset. Noticed-by: Sylvain BERTRAND sylw...@legeek.net

[PATCH 3.5 14/90] PM / hibernate: Avoid overflow in hibernate_preallocate_memory()

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Aaron Lu aaron...@intel.com commit fd432b9f8c7c88428a4635b9f5a9c6e174df6e36 upstream. When system has a lot of highmem (e.g. 16GiB using a 32 bits kernel), the code to calculate how much

[PATCH 3.5 05/90] aacraid: prevent invalid pointer dereference

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Mahesh Rajashekhara mahesh.rajashekh...@pmcs.com commit b4789b8e6be3151a955ade74872822f30e8cd914 upstream. It appears that driver runs into a problem here if fibsize is too small because

[PATCH 3.5 06/90] libertas: potential oops in debugfs

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter dan.carpen...@oracle.com commit a497e47d4aec37aaf8f13509f3ef3d1f6a717d88 upstream. If we do a zero size allocation then it will oops. Also we can't be sure the user passes

[PATCH 3.5 08/90] dm: allocate buffer for messages with small number of arguments using GFP_NOIO

2013-12-05 Thread Luis Henriques
3.5.7.27 -stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka mpato...@redhat.com commit f36afb3957353d2529cb2b00f78fdccd14fc5e9c upstream. dm-mpath and dm-thin must process messages even if some device is suspended, so we allocate

  1   2   3   >