)]}'
{
  "log": [
    {
      "commit": "9dbdf25ec58ee67beee56e9bcc2f193ee29cc7b3",
      "tree": "b28d3468991709c77eea213b95d8e1e1fe4a4816",
      "parents": [
        "786f95ca604ce585d6feee71ab653b04d4bb9a50"
      ],
      "author": {
        "name": "Grant Likely",
        "email": "grant.likely@linaro.org",
        "time": "Tue Apr 29 12:05:22 2014 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:02:01 2014 -0700"
      },
      "message": "drivercore: deferral race condition fix\n\ncommit 58b116bce13612e5aa6fcd49ecbd4cf8bb59e835 upstream.\n\nWhen the kernel is built with CONFIG_PREEMPT it is possible to reach a state\nwhen all modules loaded but some driver still stuck in the deferred list\nand there is a need for external event to kick the deferred queue to probe\nthese drivers.\n\nThe issue has been observed on embedded systems with CONFIG_PREEMPT enabled,\naudio support built as modules and using nfsroot for root filesystem.\n\nThe following log fragment shows such sequence when all audio modules\nwere loaded but the sound card is not present since the machine driver has\nfailed to probe due to missing dependency during it\u0027s probe.\nThe board is am335x-evmsk (McASP\u003c-\u003etlv320aic3106 codec) with davinci-evm\nmachine driver:\n\n...\n[   12.615118] davinci-mcasp 4803c000.mcasp: davinci_mcasp_probe: ENTER\n[   12.719969] davinci_evm sound.3: davinci_evm_probe: ENTER\n[   12.725753] davinci_evm sound.3: davinci_evm_probe: snd_soc_register_card\n[   12.753846] davinci-mcasp 4803c000.mcasp: davinci_mcasp_probe: snd_soc_register_component\n[   12.922051] davinci-mcasp 4803c000.mcasp: davinci_mcasp_probe: snd_soc_register_component DONE\n[   12.950839] davinci_evm sound.3: ASoC: platform (null) not registered\n[   12.957898] davinci_evm sound.3: davinci_evm_probe: snd_soc_register_card DONE (-517)\n[   13.099026] davinci-mcasp 4803c000.mcasp: Kicking the deferred list\n[   13.177838] davinci-mcasp 4803c000.mcasp: really_probe: probe_count \u003d 2\n[   13.194130] davinci_evm sound.3: snd_soc_register_card failed (-517)\n[   13.346755] davinci_mcasp_driver_init: LEAVE\n[   13.377446] platform sound.3: Driver davinci_evm requests probe deferral\n[   13.592527] platform sound.3: really_probe: probe_count \u003d 0\n\nIn the log the machine driver enters it\u0027s probe at 12.719969 (this point it\nhas been removed from the deferred lists). McASP driver already executing\nit\u0027s probing (since 12.615118).\nThe machine driver tries to construct the sound card (12.950839) but did\nnot found one of the components so it fails. After this McASP driver\nregisters all the ASoC components (the machine driver still in it\u0027s probe\nfunction after it failed to construct the card) and the deferred work is\nprepared at 13.099026 (note that this time the machine driver is not in the\nlists so it is not going to be handled when the work is executing).\nLastly the machine driver exit from it\u0027s probe and the core places it to\nthe deferred list but there will be no other driver going to load and the\ndeferred queue is not going to be kicked again - till we have external event\nlike connecting USB stick, etc.\n\nThe proposed solution is to try the deferred queue once more when the last\ndriver is asking for deferring and we had drivers loaded while this last\ndriver was probing.\n\nThis way we can avoid drivers stuck in the deferred queue.\n\nSigned-off-by: Grant Likely \u003cgrant.likely@linaro.org\u003e\nReviewed-by: Peter Ujfalusi \u003cpeter.ujfalusi@ti.com\u003e\nTested-by: Peter Ujfalusi \u003cpeter.ujfalusi@ti.com\u003e\nAcked-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nCc: Mark Brown \u003cbroonie@kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "786f95ca604ce585d6feee71ab653b04d4bb9a50",
      "tree": "5d671ffaea7a7dccb8363f52d3823da91cbba09a",
      "parents": [
        "73cff75c551fb35bc952e96583a83b47ec33ee89"
      ],
      "author": {
        "name": "Josef Gajdusek",
        "email": "atx@atx.name",
        "time": "Mon May 12 13:48:26 2014 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:02:01 2014 -0700"
      },
      "message": "hwmon: (emc1403) Support full range of known chip revision numbers\n\ncommit 3a18e1398fc2dc9c32bbdc50664da3a77959a8d1 upstream.\n\nThe datasheet for EMC1413/EMC1414, which is fully compatible to\nEMC1403/1404 and uses the same chip identification, references revision\nnumbers 0x01, 0x03, and 0x04. Accept the full range of revision numbers\nfrom 0x01 to 0x04 to make sure none are missed.\n\nSigned-off-by: Josef Gajdusek \u003catx@atx.name\u003e\n[Guenter Roeck: Updated headline and description]\nSigned-off-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "73cff75c551fb35bc952e96583a83b47ec33ee89",
      "tree": "8a549b51bccc38baf8b085e5d67fa54d5f61b6ba",
      "parents": [
        "1ebe3d11087a74fea05620b13e33b0a30f6af2d0"
      ],
      "author": {
        "name": "Josef Gajdusek",
        "email": "atx@atx.name",
        "time": "Sun May 11 14:40:44 2014 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:02:01 2014 -0700"
      },
      "message": "hwmon: (emc1403) fix inverted store_hyst()\n\ncommit 17c048fc4bd95efea208a1920f169547d8588f1f upstream.\n\nAttempts to set the hysteresis value to a temperature below the target\nlimit fails with \"write error: Numerical result out of range\" due to\nan inverted comparison.\n\nSigned-off-by: Josef Gajdusek \u003catx@atx.name\u003e\nReviewed-by: Jean Delvare \u003cjdelvare@suse.de\u003e\n[Guenter Roeck: Updated headline and description]\nSigned-off-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "c16d9a8078cd2599228cb274027ce8b255ae76b5",
      "tree": "ab05ad89224b984a6342c93bd8b634c3534d8426",
      "parents": [
        "21eaf4442aee2b5e25e698c7431b67c5961bce05"
      ],
      "author": {
        "name": "Corey Minyard",
        "email": "cminyard@mvista.com",
        "time": "Mon Apr 14 09:46:52 2014 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:02:00 2014 -0700"
      },
      "message": "ipmi: Reset the KCS timeout when starting error recovery\n\ncommit eb6d78ec213e6938559b801421d64714dafcf4b2 upstream.\n\nThe OBF timer in KCS was not reset in one situation when error recovery\nwas started, resulting in an immediate timeout.\n\nReported-by: Bodo Stroesser \u003cbstroesser@ts.fujitsu.com\u003e\nSigned-off-by: Corey Minyard \u003ccminyard@mvista.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "21eaf4442aee2b5e25e698c7431b67c5961bce05",
      "tree": "93e2d4952dc4ed5b7a98890f56f5d54e85d9409f",
      "parents": [
        "11e69564f65b6c7a1089c5d45929714e3ed6a921"
      ],
      "author": {
        "name": "Bodo Stroesser",
        "email": "bstroesser@ts.fujitsu.com",
        "time": "Mon Apr 14 09:46:51 2014 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:02:00 2014 -0700"
      },
      "message": "ipmi: Fix a race restarting the timer\n\ncommit 48e8ac2979920ffa39117e2d725afa3a749bfe8d upstream.\n\nWith recent changes it is possible for the timer handler to detect an\nidle interface and not start the timer, but the thread to start an\noperation at the same time.  The thread will not start the timer in that\ninstance, resulting in the timer not running.\n\nInstead, move all timer operations under the lock and start the timer in\nthe thread if it detect non-idle and the timer is not already running.\nMoving under locks allows the last timeout to be set in both the thread\nand the timer.  \u0027Timer is not running\u0027 means that the timer is not\npending and smi_timeout() is not running.  So we need a flag to detect\nthis correctly.\n\nAlso fix a few other timeout bugs: setting the last timeout when the\ninterrupt has to be disabled and the timer started, and setting the last\ntimeout in check_start_timer_thread possibly racing with the timer\n\nSigned-off-by: Corey Minyard \u003ccminyard@mvista.com\u003e\nSigned-off-by: Bodo Stroesser \u003cbstroesser@ts.fujitsu.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "72c2f03ad9cb37d1673c0c986bdb341c1ae8052a",
      "tree": "81f7dbb968b5f0eaa94e27623b55c3ee27a9a43c",
      "parents": [
        "8f4c0e8b5438725d66c6c27f11cb2a1c61c6d6c5"
      ],
      "author": {
        "name": "Bartlomiej Zolnierkiewicz",
        "email": "b.zolnierkie@samsung.com",
        "time": "Mon Mar 31 19:51:14 2014 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:02:00 2014 -0700"
      },
      "message": "pata_at91: fix ata_host_activate() failure handling\n\ncommit 27aa64b9d1bd0d23fd692c91763a48309b694311 upstream.\n\nAdd missing clk_put() call to ata_host_activate() failure path.\n\nSergei says,\n\n  \"Hm, I have once fixed that (see that *if* (!ret)) but looks like a\n   later commit 477c87e90853d136b188c50c0e4a93d01cad872e (ARM:\n   at91/pata: use gpio_is_valid to check the gpio) broke it again. :-(\n   Would be good if the changelog did mention that...\"\n\nCc: Andrew Victor \u003clinux@maxim.org.za\u003e\nCc: Nicolas Ferre \u003cnicolas.ferre@atmel.com\u003e\nCc: Jean-Christophe Plagniol-Villard \u003cplagnioj@jcrosoft.com\u003e\nCc: Sergei Shtylyov \u003csergei.shtylyov@cogentembedded.com\u003e\nSigned-off-by: Bartlomiej Zolnierkiewicz \u003cb.zolnierkie@samsung.com\u003e\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "1102122b2bdf4307cae269c725fab4c9c6141f5b",
      "tree": "7e0f789b3587400fd8369a0266c5e7013696ab10",
      "parents": [
        "62e1a647e74f708eeabf1c79f3d40833d8ce45eb"
      ],
      "author": {
        "name": "Alexander Duyck",
        "email": "alexander.h.duyck@intel.com",
        "time": "Fri May 04 14:26:56 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:02:00 2014 -0700"
      },
      "message": "skb: Add inline helper for getting the skb end offset from head\n\n[ Upstream commit ec47ea82477404631d49b8e568c71826c9b663ac ]\n\nWith the recent changes for how we compute the skb truesize it occurs to me\nwe are probably going to have a lot of calls to skb_end_pointer -\nskb-\u003ehead.  Instead of running all over the place doing that it would make\nmore sense to just make it a separate inline skb_end_offset(skb) that way\nwe can return the correct value without having gcc having to do all the\noptimization to cancel out skb-\u003ehead - skb-\u003ehead.\n\nSigned-off-by: Alexander Duyck \u003calexander.h.duyck@intel.com\u003e\nAcked-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "2c11ea07f5818be0043b59aa85e7a3ceb927af5e",
      "tree": "b23a4949e3121b06801b3df65f845935f64f561e",
      "parents": [
        "3a17d3e6da875f6cccb3233af73272d7ac38389f"
      ],
      "author": {
        "name": "Vlad Yasevich",
        "email": "vyasevic@redhat.com",
        "time": "Tue Apr 29 10:09:51 2014 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:01:59 2014 -0700"
      },
      "message": "Revert \"macvlan : fix checksums error when we are in bridge mode\"\n\n[ Upstream commit f114890cdf84d753f6b41cd0cc44ba51d16313da ]\n\nThis reverts commit 12a2856b604476c27d85a5f9a57ae1661fc46019.\nThe commit above doesn\u0027t appear to be necessary any more as the\nchecksums appear to be correctly computed/validated.\n\nAdditionally the above commit breaks kvm configurations where\none VM is using a device that support checksum offload (virtio) and\nthe other VM does not.\nIn this case, packets leaving virtio device will have CHECKSUM_PARTIAL\nset.  The packets is forwarded to a macvtap that has offload features\nturned off.  Since we use CHECKSUM_UNNECESSARY, the host does does not\nupdate the checksum and thus a bad checksum is passed up to\nthe guest.\n\nCC: Daniel Lezcano \u003cdaniel.lezcano@free.fr\u003e\nCC: Patrick McHardy \u003ckaber@trash.net\u003e\nCC: Andrian Nord \u003cnightnord@gmail.com\u003e\nCC: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nCC: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nCC: Jason Wang \u003cjasowang@redhat.com\u003e\nSigned-off-by: Vlad Yasevich \u003cvyasevic@redhat.com\u003e\nAcked-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nAcked-by: Jason Wang \u003cjasowang@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "c7dedf9d07e1471acec49947f3aacd77ea379bdf",
      "tree": "d7ebae4e8c2c93070d1d27d25d9bb08cdc21ca68",
      "parents": [
        "7dca1b9e80e5742b8edfd747dbee9fee5995c3cf"
      ],
      "author": {
        "name": "Ivan Vecera",
        "email": "ivecera@redhat.com",
        "time": "Thu Apr 17 14:51:08 2014 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:01:59 2014 -0700"
      },
      "message": "tg3: update rx_jumbo_pending ring param only when jumbo frames are enabled\n\nThe patch fixes a problem with dropped jumbo frames after usage of\n\u0027ethtool -G ... rx\u0027.\n\nScenario:\n1. ip link set eth0 up\n2. ethtool -G eth0 rx N # \u003c- This zeroes rx-jumbo\n3. ip link set mtu 9000 dev eth0\n\nThe ethtool command set rx_jumbo_pending to zero so any received jumbo\npackets are dropped and you need to use \u0027ethtool -G eth0 rx-jumbo N\u0027\nto workaround the issue.\nThe patch changes the logic so rx_jumbo_pending value is changed only if\njumbo frames are enabled (MTU \u003e 1500).\n\nSigned-off-by: Ivan Vecera \u003civecera@redhat.com\u003e\nAcked-by: Michael Chan \u003cmchan@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "cedc89a20df8cb06e3fee2f3f7b9d90430142e22",
      "tree": "3ecdf19b6ee6d5249054064a31cc9ce0a8775f4e",
      "parents": [
        "20874f008f43d98548af632bbbfb54336183a98a"
      ],
      "author": {
        "name": "Thomas Richter",
        "email": "tmricht@linux.vnet.ibm.com",
        "time": "Wed Apr 09 12:52:59 2014 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:01:59 2014 -0700"
      },
      "message": "bonding: Remove debug_fs files when module init fails\n\n[ Upstream commit db29868653394937037d71dc3545768302dda643 ]\n\nRemove the bonding debug_fs entries when the\nmodule initialization fails. The debug_fs\nentries should be removed together with all other\nalready allocated resources.\n\nSigned-off-by: Thomas Richter \u003ctmricht@linux.vnet.ibm.com\u003e\nSigned-off-by: Jay Vosburgh \u003cj.vosburgh@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "fce85b081c08c1326d9bcab0ff9ea1c85b7e9858",
      "tree": "b8dca480b76cecd52287d243766c84d52ade153e",
      "parents": [
        "ced68efe273377c2f525418da0b75f8d2d6d2402"
      ],
      "author": {
        "name": "Oleg Nesterov",
        "email": "oleg@redhat.com",
        "time": "Tue Nov 12 15:10:01 2013 -0800"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:01:58 2014 -0700"
      },
      "message": "list: introduce list_next_entry() and list_prev_entry()\n\n[ Upstream commit 008208c6b26f21c2648c250a09c55e737c02c5f8 ]\n\nAdd two trivial helpers list_next_entry() and list_prev_entry(), they\ncan have a lot of users including list.h itself.  In fact the 1st one is\nalready defined in events/core.c and bnx2x_sp.c, so the patch simply\nmoves the definition to list.h.\n\nSigned-off-by: Oleg Nesterov \u003coleg@redhat.com\u003e\nCc: Eilon Greenstein \u003ceilong@broadcom.com\u003e\nCc: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nCc: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "ced68efe273377c2f525418da0b75f8d2d6d2402",
      "tree": "f1699a80164a4757c79cc061b30903f49793cae5",
      "parents": [
        "b8a0ddefa0086479a20270c43fb00f71cb5ce573"
      ],
      "author": {
        "name": "Alex Deucher",
        "email": "alexdeucher@gmail.com",
        "time": "Mon Mar 31 11:19:46 2014 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:01:58 2014 -0700"
      },
      "message": "drm/radeon: call drm_edid_to_eld when we update the edid\n\ncommit 16086279353cbfecbb3ead474072dced17b97ddc upstream.\n\nThis needs to be done to update some of the fields in\nthe connector structure used by the audio code.\n\nNoticed by several users on irc.\n\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Christian König \u003cchristian.koenig@amd.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b8a0ddefa0086479a20270c43fb00f71cb5ce573",
      "tree": "f3268d6a74d51c01cb5f3159f0c293c6cb6e25de",
      "parents": [
        "2b8b56486c1cb6bb0ea3a5eafc5f54748fd05c7a"
      ],
      "author": {
        "name": "Christopher Friedt",
        "email": "chrisfriedt@gmail.com",
        "time": "Sat Feb 01 10:01:15 2014 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:01:58 2014 -0700"
      },
      "message": "drm/vmwgfx: correct fb_fix_screeninfo.line_length\n\ncommit aa6de142c901cd2d90ef08db30ae87da214bedcc upstream.\n\nPreviously, the vmwgfx_fb driver would allow users to call FBIOSET_VINFO, but it would not adjust\nthe FINFO properly, resulting in distorted screen rendering. The patch corrects that behaviour.\n\nSee https://bugs.gentoo.org/show_bug.cgi?id\u003d494794 for examples.\n\nSigned-off-by: Christopher Friedt \u003cchrisfriedt@gmail.com\u003e\nReviewed-by: Thomas Hellstrom \u003cthellstrom@vmware.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "2b8b56486c1cb6bb0ea3a5eafc5f54748fd05c7a",
      "tree": "8c88d73435203dbf2852a8d4af45256166dff810",
      "parents": [
        "3794e546cf34fa6da751518a9e3aeac62cc82202"
      ],
      "author": {
        "name": "Bjørn Mork",
        "email": "bjorn@mork.no",
        "time": "Fri Apr 25 18:49:20 2014 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:01:58 2014 -0700"
      },
      "message": "usb: option: add and update a number of CMOTech devices\n\ncommit 34f972d6156fe9eea2ab7bb418c71f9d1d5c8e7b upstream.\n\nA number of older CMOTech modems are based on Qualcomm\nchips.  The blacklisted interfaces are QMI/wwan.\n\nReported-by: Lars Melin \u003clarsm17@gmail.com\u003e\nSigned-off-by: Bjørn Mork \u003cbjorn@mork.no\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "3794e546cf34fa6da751518a9e3aeac62cc82202",
      "tree": "23691e24b267eb1feed4dde6904247c7372ba381",
      "parents": [
        "08e1505871a4bde2e454591a8c3d2fb522fecd69"
      ],
      "author": {
        "name": "Bjørn Mork",
        "email": "bjorn@mork.no",
        "time": "Fri Apr 25 18:49:19 2014 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:01:58 2014 -0700"
      },
      "message": "usb: option: add Alcatel L800MA\n\ncommit dd6b48ecec2ea7d15f28d5e5474388681899a5e1 upstream.\n\nDevice interface layout:\n0: ff/ff/ff - serial\n1: ff/00/00 - serial AT+PPP\n2: ff/ff/ff - QMI/wwan\n3: 08/06/50 - storage\n\nSigned-off-by: Bjørn Mork \u003cbjorn@mork.no\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "08e1505871a4bde2e454591a8c3d2fb522fecd69",
      "tree": "ef2442cb4888485cda61b87c187682c97d7ee42f",
      "parents": [
        "818346b5be68137e39adf5895fe0172a9c84b949"
      ],
      "author": {
        "name": "Bjørn Mork",
        "email": "bjorn@mork.no",
        "time": "Fri Apr 25 18:49:18 2014 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:01:58 2014 -0700"
      },
      "message": "usb: option: add Olivetti Olicard 500\n\ncommit 533b3994610f316e5cd61b56d0c4daa15c830f89 upstream.\n\nDevice interface layout:\n0: ff/ff/ff - serial\n1: ff/ff/ff - serial AT+PPP\n2: 08/06/50 - storage\n3: ff/ff/ff - serial\n4: ff/ff/ff - QMI/wwan\n\nReported-by: Julio Araujo \u003cjulio.araujo@wllctel.com.br\u003e\nSigned-off-by: Bjørn Mork \u003cbjorn@mork.no\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "818346b5be68137e39adf5895fe0172a9c84b949",
      "tree": "47d8ff90ddc1b3e2aa97be8d5246da3df6d8d26e",
      "parents": [
        "d3972467efba36977afd3810c23617ecf5853656"
      ],
      "author": {
        "name": "Johan Hovold",
        "email": "jhovold@gmail.com",
        "time": "Fri Apr 25 15:23:03 2014 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:01:58 2014 -0700"
      },
      "message": "USB: io_ti: fix firmware download on big-endian machines\n\ncommit 5509076d1b4485ce9fb07705fcbcd2695907ab5b upstream.\n\nDuring firmware download the device expects memory addresses in\nbig-endian byte order. As the wIndex parameter which hold the address is\nsent in little-endian byte order regardless of host byte order, we need\nto use swab16 rather than cpu_to_be16.\n\nAlso make sure to handle the struct ti_i2c_desc size parameter which is\nreturned in little-endian byte order.\n\nReported-by: Ludovic Drolez \u003cldrolez@debian.org\u003e\nTested-by: Ludovic Drolez \u003cldrolez@debian.org\u003e\nSigned-off-by: Johan Hovold \u003cjhovold@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "d3972467efba36977afd3810c23617ecf5853656",
      "tree": "8b9ba90d61b6d23ee308b6945a95ab2403fd6973",
      "parents": [
        "a1611e6cc002b38a449e61dc69e8f24b2a627854"
      ],
      "author": {
        "name": "Johan Hovold",
        "email": "jhovold@gmail.com",
        "time": "Fri Mar 28 18:05:10 2014 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:01:58 2014 -0700"
      },
      "message": "Revert \"USB: serial: add usbid for dell wwan card to sierra.c\"\n\ncommit 2e01280d2801c72878cf3a7119eac30077b463d5 upstream.\n\nThis reverts commit 1ebca9dad5abe8b2ed4dbd186cd657fb47c1f321.\n\nThis device was erroneously added to the sierra driver even though it\u0027s\nnot a Sierra device and was already handled by the option driver.\n\nCc: Richard Farina \u003csidhayn@gmail.com\u003e\nSigned-off-by: Johan Hovold \u003cjhovold@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a1611e6cc002b38a449e61dc69e8f24b2a627854",
      "tree": "14804c36fef98e4ff3e677a44e21bddc5978a1a3",
      "parents": [
        "7f72c55d0b8869aa40181b1e8b5456a800c4c154"
      ],
      "author": {
        "name": "Daniele Palmas",
        "email": "dnlplm@gmail.com",
        "time": "Wed Apr 02 11:19:48 2014 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:01:57 2014 -0700"
      },
      "message": "usb: option driver, add support for Telit UE910v2\n\ncommit d6de486bc22255779bd54b0fceb4c240962bf146 upstream.\n\noption driver, added VID/PID for Telit UE910v2 modem\n\nSigned-off-by: Daniele Palmas \u003cdnlplm@gmail.com\u003e\nSigned-off-by: Johan Hovold \u003cjhovold@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7f72c55d0b8869aa40181b1e8b5456a800c4c154",
      "tree": "afad6c47b21fdaf83a164650030cc37c247de085",
      "parents": [
        "971779e857794be65387204ceee8fd4e9afddb72"
      ],
      "author": {
        "name": "Michele Baldessari",
        "email": "michele@acksyn.org",
        "time": "Mon Mar 31 10:51:00 2014 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:01:57 2014 -0700"
      },
      "message": "USB: serial: ftdi_sio: add id for Brainboxes serial cards\n\ncommit efe26e16b1d93ac0085e69178cc18811629e8fc5 upstream.\n\nCustom VID/PIDs for Brainboxes cards as reported in\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d1071914\n\nSigned-off-by: Michele Baldessari \u003cmichele@acksyn.org\u003e\nSigned-off-by: Johan Hovold \u003cjhovold@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "971779e857794be65387204ceee8fd4e9afddb72",
      "tree": "5e8a0b7d914248ec7f4773985abc2f4d4785e88d",
      "parents": [
        "b08f08b56fdbff8617e4d85182500684f754890e"
      ],
      "author": {
        "name": "Tristan Bruns",
        "email": "tristan@tristanbruns.de",
        "time": "Sun Apr 13 23:57:16 2014 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:01:57 2014 -0700"
      },
      "message": "USB: cp210x: Add 8281 (Nanotec Plug \u0026 Drive)\n\ncommit 72b3007951010ce1bbf950e23b19d9839fa905a5 upstream.\n\nSigned-off-by: Tristan Bruns \u003ctristan@tristanbruns.de\u003e\nSigned-off-by: Johan Hovold \u003cjhovold@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b08f08b56fdbff8617e4d85182500684f754890e",
      "tree": "0f42e5c887da00df44a6088bddeceb0b3472475d",
      "parents": [
        "e4e351a30ae3928b889cf23e5153075591938926"
      ],
      "author": {
        "name": "Michael Ulbricht",
        "email": "michael.ulbricht@systec-electronic.com",
        "time": "Tue Mar 25 10:34:18 2014 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Jun 07 16:01:57 2014 -0700"
      },
      "message": "USB: cdc-acm: Remove Motorola/Telit H24 serial interfaces from ACM driver\n\ncommit 895d240d1db0b2736d779200788e4c4aea28a0c6 upstream.\n\nBy specifying NO_UNION_NORMAL the ACM driver does only use the first two\nUSB interfaces (modem data \u0026 control). The AT Port, Diagnostic and NMEA\ninterfaces are left to the USB serial driver.\n\nSigned-off-by: Michael Ulbricht \u003cmichael.ulbricht@systec-electronic.com\u003e\nSigned-off-by: Alexander Stein \u003calexander.stein@systec-electronic.com\u003e\nSigned-off-by: Oliver Neukum \u003coliver@neukum.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "3ddd37aaf5db2fbcd0f8a485a9a3390d22574371",
      "tree": "2845e7186dfe49d35ecacccef4ab4dcb0b7abcaa",
      "parents": [
        "7dff32efd24849aca3ab1eabe8b867025f34a3f8"
      ],
      "author": {
        "name": "Mikulas Patocka",
        "email": "mpatocka@redhat.com",
        "time": "Thu Jan 23 14:42:43 2014 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun May 18 05:25:57 2014 -0700"
      },
      "message": "tgafb: fix mode setting with fbset\n\ncommit 624966589041deb32a2626ee2e176e8274581101 upstream.\n\nMode setting in the TGA driver is broken for these reasons:\n\n- info-\u003efix.line_length is set just once in tgafb_init_fix function. If\n  we change videomode, info-\u003efix.line_length is not recalculated - so\n  the video mode is changed but the screen is corrupted because of wrong\n  info-\u003efix.line_length.\n\n- info-\u003efix.smem_len is set in tgafb_init_fix to the size of the default\n  video mode (640x480). If we set a higher resolution,\n  info-\u003efix.smem_len is smaller than the current screen size, preventing\n  the userspace program from mapping the framebuffer.\n\nThis patch fixes it:\n\n- info-\u003efix.line_length initialization is moved to tgafb_set_par so that\n  it is recalculated with each mode change.\n\n- info-\u003efix.smem_len is set to a fixed value representing the real\n  amount of video ram (the values are taken from xfree86 driver).\n\n- add a check to tgafb_check_var to prevent us from setting a videomode\n  that doesn\u0027t fit into videoram.\n\n- in tgafb_register, tgafb_init_fix is moved upwards, to be called\n  before fb_find_mode (because fb_find_mode already needs the videoram\n  size set in tgafb_init_fix).\n\nSigned-off-by: Mikulas Patocka \u003cmpatocka@redhat.com\u003e\nSigned-off-by: Tomi Valkeinen \u003ctomi.valkeinen@ti.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n\n"
    },
    {
      "commit": "664c0fc651b6ca2ab43ddbb73bbda2acdb2c9915",
      "tree": "7e2ce98cb950909f3857130410a6ce60d4612b76",
      "parents": [
        "3307c63bcea0f3a2d912bec9f460335fe051aaa8"
      ],
      "author": {
        "name": "Peter Hurley",
        "email": "peter@hurleysoftware.com",
        "time": "Sat May 03 14:04:59 2014 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun May 18 05:25:55 2014 -0700"
      },
      "message": "n_tty: Fix n_tty_write crash when echoing in raw mode\n\ncommit 4291086b1f081b869c6d79e5b7441633dc3ace00 upstream.\n\nThe tty atomic_write_lock does not provide an exclusion guarantee for\nthe tty driver if the termios settings are LECHO \u0026 !OPOST.  And since\nit is unexpected and not allowed to call TTY buffer helpers like\ntty_insert_flip_string concurrently, this may lead to crashes when\nconcurrect writers call pty_write. In that case the following two\nwriters:\n* the ECHOing from a workqueue and\n* pty_write from the process\nrace and can overflow the corresponding TTY buffer like follows.\n\nIf we look into tty_insert_flip_string_fixed_flag, there is:\n  int space \u003d __tty_buffer_request_room(port, goal, flags);\n  struct tty_buffer *tb \u003d port-\u003ebuf.tail;\n  ...\n  memcpy(char_buf_ptr(tb, tb-\u003eused), chars, space);\n  ...\n  tb-\u003eused +\u003d space;\n\nso the race of the two can result in something like this:\n              A                                B\n__tty_buffer_request_room\n                                  __tty_buffer_request_room\nmemcpy(buf(tb-\u003eused), ...)\ntb-\u003eused +\u003d space;\n                                  memcpy(buf(tb-\u003eused), ...) -\u003eBOOM\n\nB\u0027s memcpy is past the tty_buffer due to the previous A\u0027s tb-\u003eused\nincrement.\n\nSince the N_TTY line discipline input processing can output\nconcurrently with a tty write, obtain the N_TTY ldisc output_lock to\nserialize echo output with normal tty writes.  This ensures the tty\nbuffer helper tty_insert_flip_string is not called concurrently and\neverything is fine.\n\nNote that this is nicely reproducible by an ordinary user using\nforkpty and some setup around that (raw termios + ECHO). And it is\npresent in kernels at least after commit\nd945cb9cce20ac7143c2de8d88b187f62db99bdc (pty: Rework the pty layer to\nuse the normal buffering logic) in 2.6.31-rc3.\n\njs: add more info to the commit log\njs: switch to bool\njs: lock unconditionally\njs: lock only the tty-\u003eops-\u003ewrite call\n\nReferences: CVE-2014-0196\nReported-and-tested-by: Jiri Slaby \u003cjslaby@suse.cz\u003e\nSigned-off-by: Peter Hurley \u003cpeter@hurleysoftware.com\u003e\nSigned-off-by: Jiri Slaby \u003cjslaby@suse.cz\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Alan Cox \u003calan@lxorguk.ukuu.org.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n[bwh: Backported to 3.2: output_lock is a member of struct tty_struct]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\n"
    },
    {
      "commit": "3307c63bcea0f3a2d912bec9f460335fe051aaa8",
      "tree": "712fa1adcc3db146d536d0f890681bb81a427e61",
      "parents": [
        "f39c8bf9da4f90904787f63abfa138ceae0f5db9"
      ],
      "author": {
        "name": "Dan Carpenter",
        "email": "dan.carpenter@oracle.com",
        "time": "Wed Oct 30 20:13:51 2013 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun May 18 05:25:54 2014 -0700"
      },
      "message": "SCSI: megaraid: missing bounds check in mimd_to_kioc()\n\ncommit 3de2260140417759c669d391613d583baf03b0cf upstream.\n\npthru32-\u003edataxferlen comes from the user so we need to check that it\u0027s\nnot too large so we don\u0027t overflow the buffer.\n\nReported-by: Nico Golde \u003cnico@ngolde.de\u003e\nReported-by: Fabian Yamaguchi \u003cfabs@goesec.de\u003e\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nAcked-by: Sumit Saxena \u003csumit.saxena@lsi.com\u003e\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "53b67ae8d3d01efbdfd7ae431d8d46cba70084b9",
      "tree": "ba99052e5ad2a0d44b2b2dda74d715be3ce5793e",
      "parents": [
        "b4e472edda0a5993ede690aca9a3fa3d8750c5f2"
      ],
      "author": {
        "name": "Mike Snitzer",
        "email": "snitzer@redhat.com",
        "time": "Fri Mar 28 02:15:02 2014 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:32 2014 +0200"
      },
      "message": "dm thin: fix dangling bio in process_deferred_bios error path\n\ncommit fe76cd88e654124d1431bb662a0fc6e99ca811a5 upstream.\n\nIf unable to ensure_next_mapping() we must add the current bio, which\nwas removed from the @bios list via bio_list_pop, back to the\ndeferred_bios list before all the remaining @bios.\n\nSigned-off-by: Mike Snitzer \u003csnitzer@redhat.com\u003e\nAcked-by: Joe Thornber \u003cejt@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b4e472edda0a5993ede690aca9a3fa3d8750c5f2",
      "tree": "f2b6d1a4ce95334e6aa0a918439295480c64d4c4",
      "parents": [
        "9a9269138723e71e87f4adb00c0c2bbdc7bdcd0b"
      ],
      "author": {
        "name": "Giacomo Comes",
        "email": "comes@naic.edu",
        "time": "Thu Apr 03 14:13:55 2014 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:32 2014 +0200"
      },
      "message": "Skip intel_crt_init for Dell XPS 8700\n\ncommit 10b6ee4a87811a110cb01eaca01eb04da6801baf upstream.\n\nThe Dell XPS 8700 has a onboard Display port and HDMI port and no VGA port.\nThe call intel_crt_init freeze the machine, so skip such call.\n\nBugzilla: https://bugs.freedesktop.org/show_bug.cgi?id\u003d73559\nSigned-off-by: Giacomo Comes \u003ccomes at naic.edu\u003e\nSigned-off-by: Daniel Vetter \u003cdaniel.vetter@ffwll.ch\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "9a9269138723e71e87f4adb00c0c2bbdc7bdcd0b",
      "tree": "0319b0e0bd2bfa6f0fa4750f627195acadb54f86",
      "parents": [
        "c3a47361053bdd9059eec78510de21684f4112c5"
      ],
      "author": {
        "name": "Dan Carpenter",
        "email": "dan.carpenter@oracle.com",
        "time": "Thu Dec 05 17:53:50 2013 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:32 2014 +0200"
      },
      "message": "mtd: sm_ftl: heap corruption in sm_create_sysfs_attributes()\n\ncommit b4c233057771581698a13694ab6f33b48ce837dc upstream.\n\nWe always put a NUL terminator one space past the end of the \"vendor\"\nbuffer.  Walter Harms also pointed out that this should just use\nkstrndup().\n\nFixes: 7d17c02a01a1 (\u0027mtd: Add new SmartMedia/xD FTL\u0027)\n\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nSigned-off-by: Brian Norris \u003ccomputersforpeace@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "c3a47361053bdd9059eec78510de21684f4112c5",
      "tree": "8506be3a2c4021a75507e0460b8cef4d85fb8a9c",
      "parents": [
        "fd9a5e6cd4d5f923eff026dd288764cf65c001a7"
      ],
      "author": {
        "name": "Dan Carpenter",
        "email": "dan.carpenter@oracle.com",
        "time": "Mon Feb 17 23:03:08 2014 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:31 2014 +0200"
      },
      "message": "mtd: nuc900_nand: NULL dereference in nuc900_nand_enable()\n\ncommit c69dbbf3335a21aae74376d7e5db50a486d52439 upstream.\n\nInstead of writing to \"nand-\u003ereg + REG_FMICSR\" we write to \"REG_FMICSR\"\nwhich is NULL and not a valid register.\n\nFixes: 8bff82cbc308 (\u0027mtd: add nand support for w90p910 (v2)\u0027)\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nSigned-off-by: Brian Norris \u003ccomputersforpeace@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "fd9a5e6cd4d5f923eff026dd288764cf65c001a7",
      "tree": "582fbb165db4a107cde9cb0b6dd249259781891d",
      "parents": [
        "0e0dc73524d0e17a6dce2d3cd7ec3d6a785eb6df"
      ],
      "author": {
        "name": "Mikulas Patocka",
        "email": "mpatocka@redhat.com",
        "time": "Thu Jan 23 14:43:10 2014 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:31 2014 +0200"
      },
      "message": "tgafb: fix data copying\n\ncommit 6b0df6827bb6fcacb158dff29ad0a62d6418b534 upstream.\n\nThe functions for data copying copyarea_foreward_8bpp and\ncopyarea_backward_8bpp are buggy, they produce screen corruption.\n\nThis patch fixes the functions and moves the logic to one function\n\"copyarea_8bpp\". For simplicity, the function only handles copying that\nis aligned on 8 pixes. If we copy an unaligned area, generic function\ncfb_copyarea is used.\n\nSigned-off-by: Mikulas Patocka \u003cmpatocka@redhat.com\u003e\nSigned-off-by: Tomi Valkeinen \u003ctomi.valkeinen@ti.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "0e0dc73524d0e17a6dce2d3cd7ec3d6a785eb6df",
      "tree": "5be5264e47b9ba75e8ff530d3777ba4af8499d6b",
      "parents": [
        "f8f3dc1af7bfe87bafce271fd3f7b65078cd8778"
      ],
      "author": {
        "name": "Marek Vasut",
        "email": "marex@denx.de",
        "time": "Mon Mar 24 03:38:10 2014 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:31 2014 +0200"
      },
      "message": "gpio: mxs: Allow for recursive enable_irq_wake() call\n\ncommit a585f87c863e4e1d496459d382b802bf5ebe3717 upstream.\n\nThe scenario here is that someone calls enable_irq_wake() from somewhere\nin the code. This will result in the lockdep producing a backtrace as can\nbe seen below. In my case, this problem is triggered when using the wl1271\n(TI WlCore) driver found in drivers/net/wireless/ti/ .\n\nThe problem cause is rather obvious from the backtrace, but let\u0027s outline\nthe dependency. enable_irq_wake() grabs the IRQ buslock in irq_set_irq_wake(),\nwhich in turns calls mxs_gpio_set_wake_irq() . But mxs_gpio_set_wake_irq()\ncalls enable_irq_wake() again on the one-level-higher IRQ , thus it tries to\ngrab the IRQ buslock again in irq_set_irq_wake() . Because the spinlock in\nirq_set_irq_wake()-\u003eirq_get_desc_buslock()-\u003e__irq_get_desc_lock() is not\nmarked as recursive, lockdep will spew the stuff below.\n\nWe know we can safely re-enter the lock, so use IRQ_GC_INIT_NESTED_LOCK to\nfix the spew.\n\n \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n [ INFO: possible recursive locking detected ]\n 3.10.33-00012-gf06b763-dirty #61 Not tainted\n ---------------------------------------------\n kworker/0:1/18 is trying to acquire lock:\n  (\u0026irq_desc_lock_class){-.-...}, at: [\u003cc00685f0\u003e] __irq_get_desc_lock+0x48/0x88\n\n but task is already holding lock:\n  (\u0026irq_desc_lock_class){-.-...}, at: [\u003cc00685f0\u003e] __irq_get_desc_lock+0x48/0x88\n\n other info that might help us debug this:\n  Possible unsafe locking scenario:\n\n        CPU0\n        ----\n   lock(\u0026irq_desc_lock_class);\n   lock(\u0026irq_desc_lock_class);\n\n  *** DEADLOCK ***\n\n  May be due to missing lock nesting notation\n\n 3 locks held by kworker/0:1/18:\n  #0:  (events){.+.+.+}, at: [\u003cc0036308\u003e] process_one_work+0x134/0x4a4\n  #1:  ((\u0026fw_work-\u003ework)){+.+.+.}, at: [\u003cc0036308\u003e] process_one_work+0x134/0x4a4\n  #2:  (\u0026irq_desc_lock_class){-.-...}, at: [\u003cc00685f0\u003e] __irq_get_desc_lock+0x48/0x88\n\n stack backtrace:\n CPU: 0 PID: 18 Comm: kworker/0:1 Not tainted 3.10.33-00012-gf06b763-dirty #61\n Workqueue: events request_firmware_work_func\n [\u003cc0013eb4\u003e] (unwind_backtrace+0x0/0xf0) from [\u003cc0011c74\u003e] (show_stack+0x10/0x14)\n [\u003cc0011c74\u003e] (show_stack+0x10/0x14) from [\u003cc005bb08\u003e] (__lock_acquire+0x140c/0x1a64)\n [\u003cc005bb08\u003e] (__lock_acquire+0x140c/0x1a64) from [\u003cc005c6a8\u003e] (lock_acquire+0x9c/0x104)\n [\u003cc005c6a8\u003e] (lock_acquire+0x9c/0x104) from [\u003cc051d5a4\u003e] (_raw_spin_lock_irqsave+0x44/0x58)\n [\u003cc051d5a4\u003e] (_raw_spin_lock_irqsave+0x44/0x58) from [\u003cc00685f0\u003e] (__irq_get_desc_lock+0x48/0x88)\n [\u003cc00685f0\u003e] (__irq_get_desc_lock+0x48/0x88) from [\u003cc0068e78\u003e] (irq_set_irq_wake+0x20/0xf4)\n [\u003cc0068e78\u003e] (irq_set_irq_wake+0x20/0xf4) from [\u003cc027260c\u003e] (mxs_gpio_set_wake_irq+0x1c/0x24)\n [\u003cc027260c\u003e] (mxs_gpio_set_wake_irq+0x1c/0x24) from [\u003cc0068cf4\u003e] (set_irq_wake_real+0x30/0x44)\n [\u003cc0068cf4\u003e] (set_irq_wake_real+0x30/0x44) from [\u003cc0068ee4\u003e] (irq_set_irq_wake+0x8c/0xf4)\n [\u003cc0068ee4\u003e] (irq_set_irq_wake+0x8c/0xf4) from [\u003cc0310748\u003e] (wlcore_nvs_cb+0x10c/0x97c)\n [\u003cc0310748\u003e] (wlcore_nvs_cb+0x10c/0x97c) from [\u003cc02be5e8\u003e] (request_firmware_work_func+0x38/0x58)\n [\u003cc02be5e8\u003e] (request_firmware_work_func+0x38/0x58) from [\u003cc0036394\u003e] (process_one_work+0x1c0/0x4a4)\n [\u003cc0036394\u003e] (process_one_work+0x1c0/0x4a4) from [\u003cc0036a4c\u003e] (worker_thread+0x138/0x394)\n [\u003cc0036a4c\u003e] (worker_thread+0x138/0x394) from [\u003cc003cb74\u003e] (kthread+0xa4/0xb0)\n [\u003cc003cb74\u003e] (kthread+0xa4/0xb0) from [\u003cc000ee00\u003e] (ret_from_fork+0x14/0x34)\n wlcore: loaded\n\nSigned-off-by: Marek Vasut \u003cmarex@denx.de\u003e\nAcked-by: Shawn Guo \u003cshawn.guo@linaro.org\u003e\nSigned-off-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "f8f3dc1af7bfe87bafce271fd3f7b65078cd8778",
      "tree": "c31452acd3f0751af22826e45afc6ea2a2914c4a",
      "parents": [
        "04dbe2b495485ba9172da476beedbba76bca2bc8"
      ],
      "author": {
        "name": "Larry Finger",
        "email": "Larry.Finger@lwfinger.net",
        "time": "Tue Mar 04 16:53:51 2014 -0600"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:31 2014 +0200"
      },
      "message": "rtlwifi: rtl8192se: Fix too long disable of IRQs\n\ncommit 2610decdd0b3808ba20471a999835cfee5275f98 upstream.\n\nIn commit f78bccd79ba3cd9d9664981b501d57bdb81ab8a4 entitled \"rtlwifi:\nrtl8192ce: Fix too long disable of IRQs\", Olivier Langlois\n\u003colivier@trillion01.com\u003e fixed a problem caused by an extra long disabling\nof interrupts. This patch makes the same fix for rtl8192se.\n\nSigned-off-by: Larry Finger \u003cLarry.Finger@lwfinger.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "04dbe2b495485ba9172da476beedbba76bca2bc8",
      "tree": "32f1dfc6724aef21b15730e96e5d376e74964746",
      "parents": [
        "08f36d9d2cbe95df935378c220215791fc1dd111"
      ],
      "author": {
        "name": "Larry Finger",
        "email": "Larry.Finger@lwfinger.net",
        "time": "Tue Mar 04 16:53:50 2014 -0600"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:31 2014 +0200"
      },
      "message": "rtlwifi: rtl8192cu: Fix too long disable of IRQs\n\ncommit a53268be0cb9763f11da4f6fe3fb924cbe3a7d4a upstream.\n\nIn commit f78bccd79ba3cd9d9664981b501d57bdb81ab8a4 entitled \"rtlwifi:\nrtl8192ce: Fix too long disable of IRQs\", Olivier Langlois\n\u003colivier@trillion01.com\u003e fixed a problem caused by an extra long disabling\nof interrupts. This patch makes the same fix for rtl8192cu.\n\nSigned-off-by: Larry Finger \u003cLarry.Finger@lwfinger.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "e45d91ae6e931aec803c5cbbe36b53e64c3e3077",
      "tree": "307555a3258c9bb4a3164844cdb5f52807e9a4a2",
      "parents": [
        "b9fbc5762da741f3fa89246193acdce428ce6816"
      ],
      "author": {
        "name": "Dan Williams",
        "email": "dan.j.williams@intel.com",
        "time": "Thu Apr 17 11:48:21 2014 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:31 2014 +0200"
      },
      "message": "libata/ahci: accommodate tag ordered controllers\n\ncommit 8a4aeec8d2d6a3edeffbdfae451cdf05cbf0fefd upstream.\n\nThe AHCI spec allows implementations to issue commands in tag order\nrather than FIFO order:\n\n\t5.3.2.12 P:SelectCmd\n\tHBA sets pSlotLoc \u003d (pSlotLoc + 1) mod (CAP.NCS + 1)\n\tor HBA selects the command to issue that has had the\n\tPxCI bit set to \u00271\u0027 longer than any other command\n\tpending to be issued.\n\nThe result is that commands posted sequentially (time-wise) may play out\nof sequence when issued by hardware.\n\nThis behavior has likely been hidden by drives that arrange for commands\nto complete in issue order.  However, it appears recent drives (two from\ndifferent vendors that we have found so far) inflict out-of-order\ncompletions as a matter of course.  So, we need to take care to maintain\nordered submission, otherwise we risk triggering a drive to fall out of\nsequential-io automation and back to random-io processing, which incurs\nlarge latency and degrades throughput.\n\nThis issue was found in simple benchmarks where QD\u003d2 seq-write\nperformance was 30-50% *greater* than QD\u003d32 seq-write performance.\n\nTagging for -stable and making the change globally since it has a low\nrisk-to-reward ratio.  Also, word is that recent versions of an unnamed\nOS also does it this way now.  So, drives in the field are already\nexperienced with this tag ordering scheme.\n\nCc: Dave Jiang \u003cdave.jiang@intel.com\u003e\nCc: Ed Ciechanowski \u003ced.ciechanowski@intel.com\u003e\nReviewed-by: Matthew Wilcox \u003cmatthew.r.wilcox@intel.com\u003e\nSigned-off-by: Dan Williams \u003cdan.j.williams@intel.com\u003e\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b9fbc5762da741f3fa89246193acdce428ce6816",
      "tree": "7adc92f2a706da48587ac7a3b85913afd15a28f8",
      "parents": [
        "34dc182bf300e62e830c19ad174dfcb6ea973e6a"
      ],
      "author": {
        "name": "Rafał Miłecki",
        "email": "zajec5@gmail.com",
        "time": "Sat Apr 05 18:08:25 2014 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:31 2014 +0200"
      },
      "message": "b43: Fix machine check error due to improper access of B43_MMIO_PSM_PHY_HDR\n\ncommit 12cd43c6ed6da7bf7c5afbd74da6959cda6d056b upstream.\n\nRegister B43_MMIO_PSM_PHY_HDR is 16 bit one, so accessing it with 32b\nfunctions isn\u0027t safe. On my machine it causes delayed (!) CPU exception:\n\nDisabling lock debugging due to kernel taint\nmce: [Hardware Error]: CPU 0: Machine Check Exception: 4 Bank 4: b200000000070f0f\nmce: [Hardware Error]: TSC 164083803dc\nmce: [Hardware Error]: PROCESSOR 2:20fc2 TIME 1396650505 SOCKET 0 APIC 0 microcode 0\nmce: [Hardware Error]: Run the above through \u0027mcelog --ascii\u0027\nmce: [Hardware Error]: Machine check: Processor context corrupt\nKernel panic - not syncing: Fatal machine check on current CPU\nKernel Offset: 0x0 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffff9fffffff)\n\nSigned-off-by: Rafał Miłecki \u003czajec5@gmail.com\u003e\nAcked-by: Larry Finger \u003cLarry.Finger@lwfinger.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "34dc182bf300e62e830c19ad174dfcb6ea973e6a",
      "tree": "a8add999f603eef9148e83c6b76cce7ee24307da",
      "parents": [
        "caf6f52449661bfcc4c5d3f79d65c1cda23f4a89"
      ],
      "author": {
        "name": "Mikulas Patocka",
        "email": "mpatocka@redhat.com",
        "time": "Thu Jan 23 14:41:59 2014 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:30 2014 +0200"
      },
      "message": "mach64: fix cursor when character width is not a multiple of 8 pixels\n\ncommit 43751a1b8ee2e70ce392bf31ef3133da324e68b3 upstream.\n\nThis patch fixes the hardware cursor on mach64 when font width is not a\nmultiple of 8 pixels.\n\nIf you load such a font, the cursor is expanded to the next 8-byte\nboundary and a part of the next character after the cursor is not\nvisible.\nFor example, when you load a font with 12-pixel width, the cursor width\nis 16 pixels and when the cursor is displayed, 4 pixels of the next\ncharacter are not visible.\n\nThe reason is this: atyfb_cursor is called with proper parameters to\nload an image that is 12-pixel wide. However, the number is aligned on\nthe next 8-pixel boundary on the line\n\"unsigned int width \u003d (cursor-\u003eimage.width + 7) \u003e\u003e 3;\" and the whole\nfunction acts as it is was loading a 16-pixel image.\n\nThis patch fixes it so that the value written to the framebuffer is\npadded with 0xaaaa (the transparent pattern) when the image size it not\na multiple of 8 pixels. The transparent pattern causes that the cursor\nwill not interfere with the next character.\n\nSigned-off-by: Mikulas Patocka \u003cmpatocka@redhat.com\u003e\nSigned-off-by: Tomi Valkeinen \u003ctomi.valkeinen@ti.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "caf6f52449661bfcc4c5d3f79d65c1cda23f4a89",
      "tree": "44b4e88613dc613a4234421f2f1aa9345c3ca192",
      "parents": [
        "7ea30442913175c11e9e142c45c11bd88570bbad"
      ],
      "author": {
        "name": "Mikulas Patocka",
        "email": "mpatocka@redhat.com",
        "time": "Thu Jan 23 14:41:09 2014 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:30 2014 +0200"
      },
      "message": "mach64: use unaligned access\n\ncommit c29dd8696dc5dbd50b3ac441b8a26751277ba520 upstream.\n\nThis patch fixes mach64 to use unaligned access to the font bitmap.\n\nThis fixes unaligned access warning on sparc64 when 14x8 font is loaded.\n\nOn x86(64), unaligned access is handled in hardware, so both functions\nle32_to_cpup and get_unaligned_le32 perform the same operation.\n\nOn RISC machines, unaligned access is not handled in hardware, so we\nbetter use get_unaligned_le32 to avoid the unaligned trap and warning.\n\nSigned-off-by: Mikulas Patocka \u003cmpatocka@redhat.com\u003e\nSigned-off-by: Tomi Valkeinen \u003ctomi.valkeinen@ti.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7ea30442913175c11e9e142c45c11bd88570bbad",
      "tree": "e57f755c6df0da4e122ba98ad00dcf761e205931",
      "parents": [
        "8b26a7a7b4abd06f3eca2772317bc7840f6e834a"
      ],
      "author": {
        "name": "Mikulas Patocka",
        "email": "mpatocka@redhat.com",
        "time": "Thu Jan 23 14:39:04 2014 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:30 2014 +0200"
      },
      "message": "matroxfb: restore the registers M_ACCESS and M_PITCH\n\ncommit a772d4736641ec1b421ad965e13457c17379fc86 upstream.\n\nWhen X11 is running and the user switches back to console, the card\nmodifies the content of registers M_MACCESS and M_PITCH in periodic\nintervals.\n\nThis patch fixes it by restoring the content of these registers before\nissuing any accelerator command.\n\nSigned-off-by: Mikulas Patocka \u003cmpatocka@redhat.com\u003e\nSigned-off-by: Tomi Valkeinen \u003ctomi.valkeinen@ti.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "8b26a7a7b4abd06f3eca2772317bc7840f6e834a",
      "tree": "d8ab406166b5087f745900cdd15d028dc1cb8051",
      "parents": [
        "89a3abc1fd0dd979929362a2a355d899f4574dab"
      ],
      "author": {
        "name": "Mikulas Patocka",
        "email": "mpatocka@redhat.com",
        "time": "Thu Jan 23 14:39:29 2014 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:30 2014 +0200"
      },
      "message": "framebuffer: fix cfb_copyarea\n\ncommit 00a9d699bc85052d2d3ed56251cd928024ce06a3 upstream.\n\nThe function cfb_copyarea is buggy when the copy operation is not aligned on\nlong boundary (4 bytes on 32-bit machines, 8 bytes on 64-bit machines).\n\nHow to reproduce:\n- use x86-64 machine\n- use a framebuffer driver without acceleration (for example uvesafb)\n- set the framebuffer to 8-bit depth\n\t(for example fbset -a 1024x768-60 -depth 8)\n- load a font with character width that is not a multiple of 8 pixels\n\tnote: the console-tools package cannot load a font that has\n\twidth different from 8 pixels. You need to install the packages\n\t\"kbd\" and \"console-terminus\" and use the program \"setfont\" to\n\tset font width (for example: setfont Uni2-Terminus20x10)\n- move some text left and right on the bash command line and you get a\n\tscreen corruption\n\nTo expose more bugs, put this line to the end of uvesafb_init_info:\ninfo-\u003eflags |\u003d FBINFO_HWACCEL_COPYAREA | FBINFO_READS_FAST;\n- Now framebuffer console will use cfb_copyarea for console scrolling.\nYou get a screen corruption when console is scrolled.\n\nThis patch is a rewrite of cfb_copyarea. It fixes the bugs, with this\npatch, console scrolling in 8-bit depth with a font width that is not a\nmultiple of 8 pixels works fine.\n\nThe cfb_copyarea code was very buggy and it looks like it was written\nand never tried with non-8-pixel font.\n\nSigned-off-by: Mikulas Patocka \u003cmpatocka@redhat.com\u003e\nSigned-off-by: Tomi Valkeinen \u003ctomi.valkeinen@ti.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a2295c4263fe35f674f0061fe0419c73238d5b5b",
      "tree": "15b88f2cad71f1a4d95619176f6b245f48edf0c4",
      "parents": [
        "983327a48a263bd65fa869a0aad76baaf75fff86"
      ],
      "author": {
        "name": "Tyler Stachecki",
        "email": "tstache1@binghamton.edu",
        "time": "Fri Apr 25 16:41:04 2014 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:30 2014 +0200"
      },
      "message": "mpt2sas: Don\u0027t disable device twice at suspend.\n\ncommit af61e27c3f77c7623b5335590ae24b6a5c323e22 upstream.\n\nOn suspend, _scsih_suspend calls mpt2sas_base_free_resources, which\nin turn calls pci_disable_device if the device is enabled prior to\nsuspending. However, _scsih_suspend also calls pci_disable_device\nitself.\n\nThus, in the event that the device is enabled prior to suspending,\npci_disable_device will be called twice. This patch removes the\nduplicate call to pci_disable_device in _scsi_suspend as it is both\nunnecessary and results in a kernel oops.\n\nSigned-off-by: Tyler Stachecki \u003ctstache1@binghamton.edu\u003e\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "983327a48a263bd65fa869a0aad76baaf75fff86",
      "tree": "1d8dfd2284c812187522b45bbbcdbedef614ee15",
      "parents": [
        "ef9146785e023ef84cb777aac6deae53c53a2b84"
      ],
      "author": {
        "name": "Rusty Russell",
        "email": "rusty@rustcorp.com.au",
        "time": "Thu Mar 13 11:23:38 2014 +1030"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:30 2014 +0200"
      },
      "message": "virtio_balloon: don\u0027t softlockup on huge balloon changes.\n\ncommit 1f74ef0f2d7d692fcd615621e0e734c3e7771413 upstream.\n\nWhen adding or removing 100G from a balloon:\n\n    BUG: soft lockup - CPU#0 stuck for 22s! [vballoon:367]\n\nWe have a wait_event_interruptible(), but the condition is always true\n(more ballooning to do) so we don\u0027t ever sleep.  We also have a\nwait_event() for the host to ack, but that is also always true as QEMU\nis synchronous for balloon operations.\n\nReported-by: Gopesh Kumar Chaudhary \u003cgopchaud@in.ibm.com\u003e\nSigned-off-by: Rusty Russell \u003crusty@rustcorp.com.au\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "bfa779779247e9421b23155747e1779ce87aa040",
      "tree": "ba0e80345bca015d0381aaeb0cc447b1a5d5e452",
      "parents": [
        "a04d8ef979b661ce9051d0f22b0b2c25fc94b955"
      ],
      "author": {
        "name": "Matthew Daley",
        "email": "mattd@bugfuzz.com",
        "time": "Mon Apr 28 19:05:21 2014 +1200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:29 2014 +0200"
      },
      "message": "floppy: don\u0027t write kernel-only members to FDRAWCMD ioctl output\n\ncommit 2145e15e0557a01b9195d1c7199a1b92cb9be81f upstream.\n\nDo not leak kernel-only floppy_raw_cmd structure members to userspace.\nThis includes the linked-list pointer and the pointer to the allocated\nDMA space.\n\nSigned-off-by: Matthew Daley \u003cmattd@bugfuzz.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a04d8ef979b661ce9051d0f22b0b2c25fc94b955",
      "tree": "4affe04b7b7b698f317df00858f3d065caef521f",
      "parents": [
        "5c5aeb0ca78c6b9cdca6462bf54f50ac28756cbb"
      ],
      "author": {
        "name": "Matthew Daley",
        "email": "mattd@bugfuzz.com",
        "time": "Mon Apr 28 19:05:20 2014 +1200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:29 2014 +0200"
      },
      "message": "floppy: ignore kernel-only members in FDRAWCMD ioctl input\n\ncommit ef87dbe7614341c2e7bfe8d32fcb7028cc97442c upstream.\n\nAlways clear out these floppy_raw_cmd struct members after copying the\nentire structure from userspace so that the in-kernel version is always\nvalid and never left in an interdeterminate state.\n\nSigned-off-by: Matthew Daley \u003cmattd@bugfuzz.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "5c5aeb0ca78c6b9cdca6462bf54f50ac28756cbb",
      "tree": "be6157846a37ab8393947daeb1f1eb2ca0231e84",
      "parents": [
        "d89a13cf5f83e4f2b6fe98b52530bdab4b773c5c"
      ],
      "author": {
        "name": "Tomoki Sekiyama",
        "email": "tomoki.sekiyama@hds.com",
        "time": "Fri May 02 18:58:24 2014 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 13 14:11:29 2014 +0200"
      },
      "message": "drivers/tty/hvc: don\u0027t free hvc_console_setup after init\n\ncommit 501fed45b7e8836ee9373f4d31e2d85e3db6103a upstream.\n\nWhen \u0027console\u003dhvc0\u0027 is specified to the kernel parameter in x86 KVM guest,\nhvc console is setup within a kthread. However, that will cause SEGV\nand the boot will fail when the driver is builtin to the kernel,\nbecause currently hvc_console_setup() is annotated with \u0027__init\u0027. This\npatch removes \u0027__init\u0027 to boot the guest successfully with \u0027console\u003dhvc0\u0027.\n\nSigned-off-by: Tomoki Sekiyama \u003ctomoki.sekiyama@hds.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "1361b5386da290994fcbf5399d87e4417bec213d",
      "tree": "ad025d3623914c7cfe8429fd82de31458c58e66f",
      "parents": [
        "6b2b2314fe03f5dc66d4c9370dfa263e19fda392"
      ],
      "author": {
        "name": "Aaron Sanders",
        "email": "aaron.sanders@hp.com",
        "time": "Mon Mar 31 15:54:21 2014 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:46 2014 -0700"
      },
      "message": "USB: pl2303: add ids for Hewlett-Packard HP POS pole displays\n\ncommit b16c02fbfb963fa2941b7517ebf1f8a21946775e upstream.\n\nAdd device ids to pl2303 for the Hewlett-Packard HP POS pole displays:\n\nLD960: 03f0:0B39\nLCM220: 03f0:3139\nLCM960: 03f0:3239\n\n[ Johan: fix indentation and sort PIDs numerically ]\n\nSigned-off-by: Aaron Sanders \u003caaron.sanders@hp.com\u003e\nSigned-off-by: Johan Hovold \u003cjhovold@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "d6f6fc7a2bc99124058b7c4850a9997530589a33",
      "tree": "9bc2384599e2b0be35cf36266c24c8f12dfb735c",
      "parents": [
        "216583b5033215cd64468b865c0ee96d265cf546"
      ],
      "author": {
        "name": "Alan Stern",
        "email": "stern@rowland.harvard.edu",
        "time": "Wed Mar 12 11:30:38 2014 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:45 2014 -0700"
      },
      "message": "USB: unbind all interfaces before rebinding any\n\ncommit 6aec044cc2f5670cf3b143c151c8be846499bd15 upstream.\n\nWhen a driver doesn\u0027t have pre_reset, post_reset, or reset_resume\nmethods, the USB core unbinds that driver when its device undergoes a\nreset or a reset-resume, and then rebinds it afterward.\n\nThe existing straightforward implementation can lead to problems,\nbecause each interface gets unbound and rebound before the next\ninterface is handled.  If a driver claims additional interfaces, the\nclaim may fail because the old binding instance may still own the\nadditional interface when the new instance tries to claim it.\n\nThis patch fixes the problem by first unbinding all the interfaces\nthat are marked (i.e., their needs_binding flag is set) and then\nrebinding all of them.\n\nThe patch also makes the helper functions in driver.c a little more\nuniform and adjusts some out-of-date comments.\n\nSigned-off-by: Alan Stern \u003cstern@rowland.harvard.edu\u003e\nReported-and-tested-by: \"Poulain, Loic\" \u003cloic.poulain@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "216583b5033215cd64468b865c0ee96d265cf546",
      "tree": "85bede3a9de8e178aac7b362fea9f672682b0a68",
      "parents": [
        "f53fd451ade7c197376e9337c0ff4bbadf985dde"
      ],
      "author": {
        "name": "Paul Gortmaker",
        "email": "paul.gortmaker@windriver.com",
        "time": "Tue Jan 14 16:03:37 2014 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:45 2014 -0700"
      },
      "message": "hvc: ensure hvc_init is only ever called once in hvc_console.c\n\ncommit f76a1cbed18c86e2d192455f0daebb48458965f3 upstream.\n\nCommit 3e6c6f630a5282df8f3393a59f10eb9c56536d23 (\"Delay creation of\nkhcvd thread\") moved the call of hvc_init from being a device_initcall\ninto hvc_alloc, and used a non-null hvc_driver as indication of whether\nhvc_init had already been called.\n\nThe problem with this is that hvc_driver is only assigned a value\nat the bottom of hvc_init, and so there is a window where multiple\nhvc_alloc calls can be in progress at the same time and hence try\nand call hvc_init multiple times.  Previously the use of device_init\nguaranteed that hvc_init was only called once.\n\nThis manifests itself as sporadic instances of two hvc_init calls\nracing each other, and with the loser of the race getting -EBUSY\nfrom tty_register_driver() and hence that virtual console fails:\n\n    Couldn\u0027t register hvc console driver\n    virtio-ports vport0p1: error -16 allocating hvc for port\n\nHere we add an atomic_t to guarantee we\u0027ll never run hvc_init twice.\n\nCc: Rusty Russell \u003crusty@rustcorp.com.au\u003e\nCc: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nFixes: 3e6c6f630a52 (\"Delay creation of khcvd thread\")\nReported-by: Jim Somerville \u003cJim.Somerville@windriver.com\u003e\nTested-by: Jim Somerville \u003cJim.Somerville@windriver.com\u003e\nSigned-off-by: Paul Gortmaker \u003cpaul.gortmaker@windriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "f53fd451ade7c197376e9337c0ff4bbadf985dde",
      "tree": "e5a614a9b242e0b0c5a13d9d13d45534819f240d",
      "parents": [
        "f97f28f902804f7ccc209ff0e560c20dcb32c608"
      ],
      "author": {
        "name": "Huang Rui",
        "email": "ray.huang@amd.com",
        "time": "Tue Jan 07 17:45:50 2014 +0800"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:44 2014 -0700"
      },
      "message": "usb: dwc3: fix wrong bit mask in dwc3_event_devt\n\ncommit 06f9b6e59661cee510b04513b13ea7927727d758 upstream.\n\nAround DWC USB3 2.30a release another bit has been added to the\nDevice-Specific Event (DEVT) Event Information (EvtInfo) bitfield.\n\nBecause of that, what used to be 8 bits long, has become 9 bits long.\n\nPer dwc3 2.30a+ spec in the Device-Specific Event (DEVT), the field of\nEvent Information Bits(EvtInfo) uses [24:16] bits, and it has 9 bits\nnot 8 bits. And the following reserved field uses [31:25] bits not\n[31:24] bits, and it has 7 bits.\n\nSo in dwc3_event_devt, the bit mask should be:\nevent_info\t[24:16]\t\t9 bits\nreserved31_25\t[31:25]\t\t7 bits\n\nThis patch makes sure that newer core releases will work fine with\nLinux and that we will decode the event information properly on new\ncore releases.\n\n[ balbi@ti.com : improve commit log a bit ]\n\nSigned-off-by: Huang Rui \u003cray.huang@amd.com\u003e\nSigned-off-by: Felipe Balbi \u003cbalbi@ti.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "f97f28f902804f7ccc209ff0e560c20dcb32c608",
      "tree": "a2f149322def325ffad3ec9c8ae28bc817c37b24",
      "parents": [
        "8ccd1a5521d0e870ccc5fee1d4bf7ee7ddab66ff"
      ],
      "author": {
        "name": "David Cohen",
        "email": "david.a.cohen@linux.intel.com",
        "time": "Fri Apr 25 19:20:16 2014 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:44 2014 -0700"
      },
      "message": "usb/xhci: fix compilation warning when !CONFIG_PCI \u0026\u0026 !CONFIG_PM\n\ncommit 01bb59ebffdec314da8da66266edf29529372f9b upstream.\n\nWhen CONFIG_PCI and CONFIG_PM are not selected, xhci.c gets this\nwarning:\ndrivers/usb/host/xhci.c:409:13: warning: ‘xhci_msix_sync_irqs’ defined\nbut not used [-Wunused-function]\n\nInstead of creating nested #ifdefs, this patch fixes it by defining the\nxHCI PCI stubs as inline.\n\nThis warning has been in since 3.2 kernel and was\ncaused by commit 421aa841a134f6a743111cf44d0c6d3b45e3cf8c\n\"usb/xhci: hide MSI code behind PCI bars\", but wasn\u0027t noticed\nuntil 3.13 when a configuration with these options was tried\n\nSigned-off-by: David Cohen \u003cdavid.a.cohen@linux.intel.com\u003e\nSigned-off-by: Mathias Nyman \u003cmathias.nyman@linux.intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "8ccd1a5521d0e870ccc5fee1d4bf7ee7ddab66ff",
      "tree": "680e1732fcca6d43d535bb912d027041c185ed07",
      "parents": [
        "41b4a7dfd391b5826492a89c702420b97dc02334"
      ],
      "author": {
        "name": "Igor Gnatenko",
        "email": "i.gnatenko.brain@gmail.com",
        "time": "Fri Apr 25 19:20:15 2014 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:44 2014 -0700"
      },
      "message": "xhci: extend quirk for Renesas cards\n\ncommit 6db249ebefc6bf5c39f35dfaacc046d8ad3ffd70 upstream.\n\nAfter suspend another Renesas PCI-X USB 3.0 card doesn\u0027t work.\n[root@fedora-20 ~]# lspci -vmnnd 1912:\nDevice:\t03:00.0\nClass:\tUSB controller [0c03]\nVendor:\tRenesas Technology Corp. [1912]\nDevice:\tuPD720202 USB 3.0 Host Controller [0015]\nSVendor:\tRenesas Technology Corp. [1912]\nSDevice:\tuPD720202 USB 3.0 Host Controller [0015]\nRev:\t02\nProgIf:\t30\n\nThis patch should be applied to stable kernel 3.14 that contain\nthe commit 1aa9578c1a9450fb21501c4f549f5b1edb557e6d\n\"xhci: Fix resume issues on Renesas chips in Samsung laptops\"\n\nReported-and-tested-by: Anatoly Kharchenko \u003crfr-bugs@yandex.ru\u003e\nReference: http://redmine.russianfedora.pro/issues/1315\nSigned-off-by: Igor Gnatenko \u003ci.gnatenko.brain@gmail.com\u003e\nSigned-off-by: Mathias Nyman \u003cmathias.nyman@linux.intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "41b4a7dfd391b5826492a89c702420b97dc02334",
      "tree": "22b1c0dc0d1213b6a3e4712123b3546e5f82dafd",
      "parents": [
        "15e5f90c0f1d3f597981ffe18112aae9421f57c0"
      ],
      "author": {
        "name": "supriya karanth",
        "email": "supriya.karanth@stericsson.com",
        "time": "Thu Dec 06 11:12:48 2012 +0530"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:44 2014 -0700"
      },
      "message": "usb: musb: set TXMAXP and AUTOSET for full speed bulk in device mode\n\ncommit bb3a2ef2eb8cfaea335dcb3426350df7f3d48069 upstream.\n\nThe TXMAXP register is not set correctly for full speed bulk case\nwhen the can_bulk_split() is used. Without this PIO transfers will\nnot take place correctly\n\nThe \"mult\" factor needs to be updated correctly for the\ncan_bulk_split() case\n\nThe AUTOSET bit in the TXCSR is not being set if the \"mult\"\nfactor is greater than 0 for the High Bandwidth ISO case.\nBut the \"mult\" factor is also greater than 0 in case of Full speed\nbulk transfers with the packet splitting in TXMAXP register\n\nWithout the AUTOSET the DMA transfers will not progress in mode1\n\n[ balbi@ti.com : add braces to both branches ]\n\nSigned-off-by: supriya karanth \u003csupriya.karanth@stericsson.com\u003e\nSigned-off-by: Praveena NADAHALLY \u003cpraveen.nadahally@stericsson.com\u003e\nAcked-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\nSigned-off-by: Felipe Balbi \u003cbalbi@ti.com\u003e\nCc: ian coolidge \u003ciancoolidge@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "86455b800f7544e239b2fa5a16962ea780a1e9d8",
      "tree": "7119f6a2a710aa78fc46eeb2d9d3cf06da12389c",
      "parents": [
        "d72db3c871f7232448abab9e12fbbe9d80a6606c"
      ],
      "author": {
        "name": "Andy Grover",
        "email": "agrover@redhat.com",
        "time": "Fri Apr 04 16:44:37 2014 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:44 2014 -0700"
      },
      "message": "target/tcm_fc: Fix use-after-free of ft_tpg\n\ncommit 2c42be2dd4f6586728dba5c4e197afd5cfaded78 upstream.\n\nft_del_tpg checks tpg-\u003etport is set before unlinking the tpg from the\ntport when the tpg is being removed. Set this pointer in ft_tport_create,\nor the unlinking won\u0027t happen in ft_del_tpg and tport-\u003etpg will reference\na deleted object.\n\nThis patch sets tpg-\u003etport in ft_tport_create, because that\u0027s what\nft_del_tpg checks, and is the only way to get back to the tport to\nclear tport-\u003etpg.\n\nThe bug was occuring when:\n\n- lport created, tport (our per-lport, per-provider context) is\n  allocated.\n  tport-\u003etpg \u003d NULL\n- tpg created\n- a PRLI is received. ft_tport_create is called, tpg is found and\n  tport-\u003etpg is set\n- tpg removed. ft_tpg is freed in ft_del_tpg. Since tpg-\u003etport was not\n  set, tport-\u003etpg is not cleared and points at freed memory\n- Future calls to ft_tport_create return tport via first conditional,\n  instead of searching for new tpg by calling ft_lport_find_tpg.\n  tport-\u003etpg is still invalid, and will access freed memory.\n\nsee https://bugzilla.redhat.com/show_bug.cgi?id\u003d1071340\n\nSigned-off-by: Andy Grover \u003cagrover@redhat.com\u003e\nSigned-off-by: Nicholas Bellinger \u003cnab@linux-iscsi.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "d72db3c871f7232448abab9e12fbbe9d80a6606c",
      "tree": "57332345d7f1a1de27f9eaae4eda3b9709fc4d82",
      "parents": [
        "8ba4bc7680f75ac3294cb3222b21bc2912b24963"
      ],
      "author": {
        "name": "Nicholas Bellinger",
        "email": "nab@linux-iscsi.org",
        "time": "Wed Feb 19 23:32:14 2014 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:43 2014 -0700"
      },
      "message": "iscsi-target: Fix ERL\u003d2 ASYNC_EVENT connection pointer bug\n\ncommit d444edc679e7713412f243b792b1f964e5cff1e1 upstream.\n\nThis patch fixes a long-standing bug in iscsit_build_conn_drop_async_message()\nwhere during ERL\u003d2 connection recovery, a bogus conn_p pointer could\nend up being used to send the ISCSI_OP_ASYNC_EVENT + DROPPING_CONNECTION\nnotifying the initiator that cmd-\u003elogout_cid has failed.\n\nThe bug was manifesting itself as an OOPs in iscsit_allocate_cmd() with\na bogus conn_p pointer in iscsit_build_conn_drop_async_message().\n\nReported-by: Arshad Hussain \u003carshad.hussain@calsoftinc.com\u003e\nReported-by: santosh kulkarni \u003csantosh.kulkarni@calsoftinc.com\u003e\nSigned-off-by: Nicholas Bellinger \u003cnab@linux-iscsi.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "8ba4bc7680f75ac3294cb3222b21bc2912b24963",
      "tree": "6d2e583cf657638790e10dfbdab1e49a37f4fde6",
      "parents": [
        "41d5d291583dedd9fde7dbdad524a604166266c4"
      ],
      "author": {
        "name": "Dan Carpenter",
        "email": "dan.carpenter@oracle.com",
        "time": "Tue Feb 11 19:06:33 2014 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:43 2014 -0700"
      },
      "message": "SCSI: arcmsr: upper 32 of dma address lost\n\ncommit e2c70425f05219b142b3a8a9489a622c736db39d upstream.\n\nThe original code always set the upper 32 bits to zero because it was\ndoing a shift of the wrong variable.\n\nFixes: 1a4f550a09f8 (\u0027[SCSI] arcmsr: 1.20.00.15: add SATA RAID plus other fixes\u0027)\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "41d5d291583dedd9fde7dbdad524a604166266c4",
      "tree": "2f0731e52957f8a901510fd84cd7ffe94f1b59ea",
      "parents": [
        "794f9950ebd832b8712e32007e0359e5c6e60f55"
      ],
      "author": {
        "name": "Mike Marciniszyn",
        "email": "mike.marciniszyn@intel.com",
        "time": "Mon Apr 07 13:58:35 2014 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:43 2014 -0700"
      },
      "message": "ib_srpt: Use correct ib_sg_dma primitives\n\ncommit b076808051f2c80d38e03fb2f1294f525c7a446d upstream.\n\nThe code was incorrectly using sg_dma_address() and\nsg_dma_len() instead of ib_sg_dma_address() and\nib_sg_dma_len().\n\nThis prevents srpt from functioning with the\nIntel HCA and indeed will corrupt memory\nbadly.\n\nCc: Bart Van Assche \u003cbvanassche@acm.org\u003e\nReviewed-by: Dennis Dalessandro \u003cdennis.dalessandro@intel.com\u003e\nTested-by: Vinod Kumar \u003cvinod.kumar@intel.com\u003e\nSigned-off-by: Mike Marciniszyn \u003cmike.marciniszyn@intel.com\u003e\nSigned-off-by: Nicholas Bellinger \u003cnab@linux-iscsi.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "794f9950ebd832b8712e32007e0359e5c6e60f55",
      "tree": "0a07c710c6cf08308d96fd4b291981880c09b090",
      "parents": [
        "53b5bc1e97df8c617d6a9e15d0ce33981ee086c9"
      ],
      "author": {
        "name": "Yann Droneaud",
        "email": "ydroneaud@opteya.com",
        "time": "Mon Mar 10 23:06:25 2014 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:43 2014 -0700"
      },
      "message": "IB/ehca: Returns an error on ib_copy_to_udata() failure\n\ncommit 5bdb0f02add5994b0bc17494f4726925ca5d6ba1 upstream.\n\nIn case of error when writing to userspace, function ehca_create_cq()\ndoes not set an error code before following its error path.\n\nThis patch sets the error code to -EFAULT when ib_copy_to_udata()\nfails.\n\nThis was caught when using spatch (aka. coccinelle)\nto rewrite call to ib_copy_{from,to}_udata().\n\nLink: https://www.gitorious.org/opteya/coccib/source/75ebf2c1033c64c1d81df13e4ae44ee99c989eba:ib_copy_udata.cocci\nLink: http://marc.info/?i\u003dcover.1394485254.git.ydroneaud@opteya.com\nSigned-off-by: Yann Droneaud \u003cydroneaud@opteya.com\u003e\nSigned-off-by: Roland Dreier \u003croland@purestorage.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "53b5bc1e97df8c617d6a9e15d0ce33981ee086c9",
      "tree": "9d0be6df99b030d8b9b6af4af3e0fc52d17e4cd4",
      "parents": [
        "64900cd67cf96f8fc40d1db1f4058cbaa2dca7ff"
      ],
      "author": {
        "name": "Yann Droneaud",
        "email": "ydroneaud@opteya.com",
        "time": "Mon Mar 10 23:06:26 2014 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:43 2014 -0700"
      },
      "message": "IB/mthca: Return an error on ib_copy_to_udata() failure\n\ncommit 08e74c4b00c30c232d535ff368554959403d0432 upstream.\n\nIn case of error when writing to userspace, the function mthca_create_cq()\ndoes not set an error code before following its error path.\n\nThis patch sets the error code to -EFAULT when ib_copy_to_udata() fails.\n\nThis was caught when using spatch (aka. coccinelle)\nto rewrite call to ib_copy_{from,to}_udata().\n\nLink: https://www.gitorious.org/opteya/coccib/source/75ebf2c1033c64c1d81df13e4ae44ee99c989eba:ib_copy_udata.cocci\nLink: http://marc.info/?i\u003dcover.1394485254.git.ydroneaud@opteya.com\nSigned-off-by: Yann Droneaud \u003cydroneaud@opteya.com\u003e\nSigned-off-by: Roland Dreier \u003croland@purestorage.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "64900cd67cf96f8fc40d1db1f4058cbaa2dca7ff",
      "tree": "73cc9e6a5c00d76674790c77d579a37136b07a24",
      "parents": [
        "066c269f39f667f486d3cb709429dc73ff2f172d"
      ],
      "author": {
        "name": "Yann Droneaud",
        "email": "ydroneaud@opteya.com",
        "time": "Mon Mar 10 23:06:27 2014 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:43 2014 -0700"
      },
      "message": "IB/nes: Return an error on ib_copy_from_udata() failure instead of NULL\n\ncommit 9d194d1025f463392feafa26ff8c2d8247f71be1 upstream.\n\nIn case of error while accessing to userspace memory, function\nnes_create_qp() returns NULL instead of an error code wrapped through\nERR_PTR().  But NULL is not expected by ib_uverbs_create_qp(), as it\ncheck for error with IS_ERR().\n\nAs page 0 is likely not mapped, it is going to trigger an Oops when\nthe kernel will try to dereference NULL pointer to access to struct\nib_qp\u0027s fields.\n\nIn some rare cases, page 0 could be mapped by userspace, which could\nturn this bug to a vulnerability that could be exploited: the function\npointers in struct ib_device will be under userspace total control.\n\nThis was caught when using spatch (aka. coccinelle)\nto rewrite calls to ib_copy_{from,to}_udata().\n\nLink: https://www.gitorious.org/opteya/ib-hw-nes-create-qp-null\nLink: https://www.gitorious.org/opteya/coccib/source/75ebf2c1033c64c1d81df13e4ae44ee99c989eba:ib_copy_udata.cocci\nLink: http://marc.info/?i\u003dcover.1394485254.git.ydroneaud@opteya.com\nSigned-off-by: Yann Droneaud \u003cydroneaud@opteya.com\u003e\nSigned-off-by: Roland Dreier \u003croland@purestorage.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "066c269f39f667f486d3cb709429dc73ff2f172d",
      "tree": "056b30092367c8618500d3ca9d980defd5920f1e",
      "parents": [
        "d8992efff2b60c8b360ebef7daa03db6496cc131"
      ],
      "author": {
        "name": "Dennis Dalessandro",
        "email": "dennis.dalessandro@intel.com",
        "time": "Thu Feb 20 11:02:53 2014 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:43 2014 -0700"
      },
      "message": "IB/ipath: Fix potential buffer overrun in sending diag packet routine\n\ncommit a2cb0eb8a64adb29a99fd864013de957028f36ae upstream.\n\nGuard against a potential buffer overrun.  The size to read from the\nuser is passed in, and due to the padding that needs to be taken into\naccount, as well as the place holder for the ICRC it is possible to\noverflow the 32bit value which would cause more data to be copied from\nuser space than is allocated in the buffer.\n\nReported-by: Nico Golde \u003cnico@ngolde.de\u003e\nReported-by: Fabian Yamaguchi \u003cfabs@goesec.de\u003e\nReviewed-by: Mike Marciniszyn \u003cmike.marciniszyn@intel.com\u003e\nSigned-off-by: Dennis Dalessandro \u003cdennis.dalessandro@intel.com\u003e\nSigned-off-by: Roland Dreier \u003croland@purestorage.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "5d052fbbd7b0069df1fdeaa7dd5eb16e1345a458",
      "tree": "85d38d4c39d69a896dbbddc578485305c9e2d81f",
      "parents": [
        "632d996e9911371a3b48cec1e8451c7c2761fd69"
      ],
      "author": {
        "name": "Alan Stern",
        "email": "stern@rowland.harvard.edu",
        "time": "Mon Apr 14 13:48:47 2014 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:42 2014 -0700"
      },
      "message": "USB: fix crash during hotplug of PCI USB controller card\n\ncommit a2ff864b53eac9a0e9b05bfe9d1781ccd6c2af71 upstream.\n\nThe code in hcd-pci.c that matches up EHCI controllers with their\ncompanion UHCI or OHCI controllers assumes that the private drvdata\nfields don\u0027t get set too early.  However, it turns out that this field\ngets set by usb_create_hcd(), before hcd-pci expects it, and this can\nresult in a crash when two controllers are probed in parallel (as can\nhappen when a new controller card is hotplugged).\n\nThe companions_rwsem lock was supposed to prevent this sort of thing,\nbut usb_create_hcd() is called outside the scope of the rwsem.\n\nA simple solution is to check that the root-hub pointer has been\ninitialized as well as the drvdata field.  This doesn\u0027t happen until\nusb_add_hcd() is called; that call and the check are both protected by\nthe rwsem.\n\nThis patch should be applied to stable kernels from 3.10 onward.\n\nSigned-off-by: Alan Stern \u003cstern@rowland.harvard.edu\u003e\nReported-by: Stefani Seibold \u003cstefani@seibold.net\u003e\nTested-by: Stefani Seibold \u003cstefani@seibold.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "9d1a5959bc3be5b9aa5886e8736534b96098b215",
      "tree": "08279717977dcbeb73901895ae4992042e219c8c",
      "parents": [
        "725f2ba0cbb94c7e8f3499ef57dbd47d85521ef7"
      ],
      "author": {
        "name": "Larry Finger",
        "email": "Larry.Finger@lwfinger.net",
        "time": "Wed Apr 16 14:49:33 2014 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:41 2014 -0700"
      },
      "message": "staging: r8712u: Fix case where ethtype was never obtained and always be checked against 0\n\ncommit f764cd68d9036498f08fe8834deb6a367b5c2542 upstream.\n\nZero-initializing ether_type masked that the ether type would never be\nobtained for 8021x packets and the comparison against eapol_type\nwould always fail.\n\nReported-by: Jes Sorensen \u003cJes.Sorensen@redhat.com\u003e\nSigned-off-by: Larry Finger \u003cLarry.Finger@lwfinger.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "725f2ba0cbb94c7e8f3499ef57dbd47d85521ef7",
      "tree": "b8b6b089bdf8f2e5cf1e883b038b1eb52efe5b7e",
      "parents": [
        "6733ac581418cfd8d7bef57c22fc2e0d673c4272"
      ],
      "author": {
        "name": "Himangi Saraogi",
        "email": "himangi774@gmail.com",
        "time": "Wed Mar 05 04:59:57 2014 +0530"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:41 2014 -0700"
      },
      "message": "staging:serqt_usb2: Fix sparse warning restricted __le16 degrades to integer\n\ncommit abe5d64d1a74195a44cd14624f8178b9f48b7cc7 upstream.\n\nThis patch fixes the following sparse warning :\ndrivers/staging/serqt_usb2/serqt_usb2.c:727:40: warning: restricted __le16 degrades to integer\n\nSigned-off-by: Himangi Saraogi \u003chimangi774@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "6733ac581418cfd8d7bef57c22fc2e0d673c4272",
      "tree": "901d07fe2fe2e1af5f69ca18259fa1b0d78d967b",
      "parents": [
        "3b015ff0243274791bb5d9357f517e43babcf705"
      ],
      "author": {
        "name": "David Fries",
        "email": "David@Fries.net",
        "time": "Wed Jan 15 22:29:12 2014 -0600"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:41 2014 -0700"
      },
      "message": "w1: fix w1_send_slave dropping a slave id\n\ncommit 6b355b33a64fd6d8ead2b838ec16fb9b551f71e8 upstream.\n\nPrevious logic,\nif (avail \u003e 8) {\n\tstore slave;\n\treturn;\n}\nsend data; clear;\n\nThe logic error is, if there isn\u0027t space send the buffer and clear,\nbut the slave wasn\u0027t added to the now empty buffer loosing that slave\nid.  It also should have been \"if (avail \u003e\u003d 8)\" because when it is 8,\nthere is space.\n\nInstead, if there isn\u0027t space send and clear the buffer, then there is\nalways space for the slave id.\n\nSigned-off-by: David Fries \u003cDavid@Fries.net\u003e\nAcked-by: Evgeniy Polyakov \u003czbr@ioremap.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "3b015ff0243274791bb5d9357f517e43babcf705",
      "tree": "db0da7b5f71a821a514016a3fa61395dbc094d4c",
      "parents": [
        "4efaf4210b1a995cf39f29425259fbbd87194661"
      ],
      "author": {
        "name": "Krzysztof Kozlowski",
        "email": "k.kozlowski@samsung.com",
        "time": "Tue Feb 11 11:03:34 2014 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:41 2014 -0700"
      },
      "message": "mfd: max8997: Fix possible NULL pointer dereference on i2c_new_dummy error\n\ncommit 97dc4ed3fa377ec91bb60ba98b70d645c2099384 upstream.\n\nDuring probe the driver allocates dummy I2C devices for RTC, haptic and\nMUIC with i2c_new_dummy() but it does not check the return value of this\ncalls.\n\nIn case of error (i2c_new_device(): memory allocation failure or I2C\naddress cannot be used) this function returns NULL which is later used\nby i2c_unregister_device().\n\nIf i2c_new_dummy() fails for RTC, haptic or MUIC devices, fail also the\nprobe for main MFD driver.\n\nSigned-off-by: Krzysztof Kozlowski \u003ck.kozlowski@samsung.com\u003e\nSigned-off-by: Lee Jones \u003clee.jones@linaro.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "4efaf4210b1a995cf39f29425259fbbd87194661",
      "tree": "5d90e9031603ac8e7dd01455b886ce9edbd65f35",
      "parents": [
        "b9546b807f1a47ba98760246df1c3f1cb6d05306"
      ],
      "author": {
        "name": "Krzysztof Kozlowski",
        "email": "k.kozlowski@samsung.com",
        "time": "Tue Feb 11 11:03:35 2014 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:41 2014 -0700"
      },
      "message": "mfd: max8998: Fix possible NULL pointer dereference on i2c_new_dummy error\n\ncommit ed26f87b9f71693a1d1ee85f5e6209601505080f upstream.\n\nDuring probe the driver allocates dummy I2C device for RTC with i2c_new_dummy() but it does not check the return value of this call.\n\nIn case of error (i2c_new_device(): memory allocation failure or I2C\naddress cannot be used) this function returns NULL which is later used\nby i2c_unregister_device().\n\nIf i2c_new_dummy() fails for RTC device, fail also the probe for\nmain MFD driver.\n\nSigned-off-by: Krzysztof Kozlowski \u003ck.kozlowski@samsung.com\u003e\nSigned-off-by: Lee Jones \u003clee.jones@linaro.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b9546b807f1a47ba98760246df1c3f1cb6d05306",
      "tree": "06b05546ece80f06566574242eaa9d399e8950db",
      "parents": [
        "f4a8f6c0d3970daa2634475ce43d04310127272d"
      ],
      "author": {
        "name": "Krzysztof Kozlowski",
        "email": "k.kozlowski@samsung.com",
        "time": "Tue Feb 11 11:03:33 2014 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Tue May 06 07:51:41 2014 -0700"
      },
      "message": "mfd: max8925: Fix possible NULL pointer dereference on i2c_new_dummy error\n\ncommit 96cf3dedc491d2f1f66cc26217f2b06b0c7b6797 upstream.\n\nDuring probe the driver allocates dummy I2C devices for RTC and ADC\nwith i2c_new_dummy() but it does not check the return value of this\ncalls.\n\nIn case of error (i2c_new_device(): memory allocation failure or I2C\naddress cannot be used) this function returns NULL which is later used\nby i2c_unregister_device().\n\nIf i2c_new_dummy() fails for RTC or ADC devices, fail also the probe\nfor main MFD driver.\n\nSigned-off-by: Krzysztof Kozlowski \u003ck.kozlowski@samsung.com\u003e\nSigned-off-by: Lee Jones \u003clee.jones@linaro.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "eea7ead860ea8622d2d4b1cfbd63649beed91a9b",
      "tree": "ddaf413fc4f011d4535e1583d3588b48d817230e",
      "parents": [
        "036132b3be6073ecdeec7f1f3ad3606269ebf9c9"
      ],
      "author": {
        "name": "Jiri Slaby",
        "email": "jslaby@suse.cz",
        "time": "Mon Apr 14 09:46:50 2014 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Apr 26 17:13:19 2014 -0700"
      },
      "message": "Char: ipmi_bt_sm, fix infinite loop\n\ncommit a94cdd1f4d30f12904ab528152731fb13a812a16 upstream.\n\nIn read_all_bytes, we do\n\n  unsigned char i;\n  ...\n  bt-\u003eread_data[0] \u003d BMC2HOST;\n  bt-\u003eread_count \u003d bt-\u003eread_data[0];\n  ...\n  for (i \u003d 1; i \u003c\u003d bt-\u003eread_count; i++)\n    bt-\u003eread_data[i] \u003d BMC2HOST;\n\nIf bt-\u003eread_data[0] \u003d\u003d bt-\u003eread_count \u003d\u003d 255, we loop infinitely in the\n\u0027for\u0027 loop.  Make \u0027i\u0027 an \u0027int\u0027 instead of \u0027char\u0027 to get rid of the\noverflow and finish the loop after 255 iterations every time.\n\nSigned-off-by: Jiri Slaby \u003cjslaby@suse.cz\u003e\nReported-and-debugged-by: Rui Hui Dian \u003crhdian@novell.com\u003e\nCc: Tomas Cech \u003ctcech@suse.cz\u003e\nCc: Corey Minyard \u003cminyard@acm.org\u003e\nCc: \u003copenipmi-developer@lists.sourceforge.net\u003e\nSigned-off-by: Corey Minyard \u003ccminyard@mvista.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "8c3911a71ede8ec4c29329c7a5a80c37b3aeb83e",
      "tree": "bb341accabb7096331464364986bd105f0cbec14",
      "parents": [
        "495d659f2c1057de1529d98733c6f1e7de275107"
      ],
      "author": {
        "name": "Dan Carpenter",
        "email": "dan.carpenter@oracle.com",
        "time": "Tue Apr 08 12:23:09 2014 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Apr 26 17:13:18 2014 -0700"
      },
      "message": "isdnloop: several buffer overflows\n\n[ Upstream commit 7563487cbf865284dcd35e9ef5a95380da046737 ]\n\nThere are three buffer overflows addressed in this patch.\n\n1) In isdnloop_fake_err() we add an \u0027E\u0027 to a 60 character string and\nthen copy it into a 60 character buffer.  I have made the destination\nbuffer 64 characters and I\u0027m changed the sprintf() to a snprintf().\n\n2) In isdnloop_parse_cmd(), p points to a 6 characters into a 60\ncharacter buffer so we have 54 characters.  The -\u003eeazlist[] is 11\ncharacters long.  I have modified the code to return if the source\nbuffer is too long.\n\n3) In isdnloop_command() the cbuf[] array was 60 characters long but the\nmax length of the string then can be up to 79 characters.  I made the\ncbuf array 80 characters long and changed the sprintf() to snprintf().\nI also removed the temporary \"dial\" buffer and changed it to use \"p\"\ndirectly.\n\nUnfortunately, we pass the \"cbuf\" string from isdnloop_command() to\nisdnloop_writecmd() which truncates anything over 60 characters to make\nit fit in card-\u003eomsg[].  (It can accept values up to 255 characters so\nlong as there is a \u0027\\n\u0027 character every 60 characters).  For now I have\njust fixed the memory corruption bug and left the other problems in this\ndriver alone.\n\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "495d659f2c1057de1529d98733c6f1e7de275107",
      "tree": "810aba67b55e3f2e0013f1676a1c0ae045bc5137",
      "parents": [
        "99df85bdef3515827e40fa019e0ecdda74f817ab"
      ],
      "author": {
        "name": "YOSHIFUJI Hideaki",
        "email": "yoshfuji@linux-ipv6.org",
        "time": "Wed Apr 02 12:48:42 2014 +0900"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Apr 26 17:13:18 2014 -0700"
      },
      "message": "isdnloop: Validate NUL-terminated strings from user.\n\n[ Upstream commit 77bc6bed7121936bb2e019a8c336075f4c8eef62 ]\n\nReturn -EINVAL unless all of user-given strings are correctly\nNUL-terminated.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "fec7e11a8fe3a3bd13429916872b08cc58f215da",
      "tree": "540e83678277f908fb804a6627950fb22a13b77e",
      "parents": [
        "1bc0f3b76f86de85baa45a5e64cf5970095d2925"
      ],
      "author": {
        "name": "Paul Durrant",
        "email": "Paul.Durrant@citrix.com",
        "time": "Fri Mar 28 11:39:05 2014 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Apr 26 17:13:17 2014 -0700"
      },
      "message": "xen-netback: remove pointless clause from if statement\n\n[ Upstream commit 0576eddf24df716d8570ef8ca11452a9f98eaab2 ]\n\nThis patch removes a test in start_new_rx_buffer() that checks whether\na copy operation is less than MAX_BUFFER_OFFSET in length, since\nMAX_BUFFER_OFFSET is defined to be PAGE_SIZE and the only caller of\nstart_new_rx_buffer() already limits copy operations to PAGE_SIZE or less.\n\nSigned-off-by: Paul Durrant \u003cpaul.durrant@citrix.com\u003e\nCc: Ian Campbell \u003cian.campbell@citrix.com\u003e\nCc: Wei Liu \u003cwei.liu2@citrix.com\u003e\nCc: Sander Eikelenboom \u003clinux@eikelenboom.it\u003e\nReported-By: Sander Eikelenboom \u003clinux@eikelenboom.it\u003e\nTested-By: Sander Eikelenboom \u003clinux@eikelenboom.it\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "1bc0f3b76f86de85baa45a5e64cf5970095d2925",
      "tree": "aef0c4a5e425631bbd9db01439e5d11714a1577b",
      "parents": [
        "20a51abb07a34a3af96b4fffac08022763f74c93"
      ],
      "author": {
        "name": "Michael S. Tsirkin",
        "email": "mst@redhat.com",
        "time": "Thu Mar 27 12:53:37 2014 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Apr 26 17:13:17 2014 -0700"
      },
      "message": "vhost: validate vhost_get_vq_desc return value\n\n[ Upstream commit a39ee449f96a2cd44ce056d8a0a112211a9b1a1f ]\n\nvhost fails to validate negative error code\nfrom vhost_get_vq_desc causing\na crash: we are using -EFAULT which is 0xfffffff2\nas vector size, which exceeds the allocated size.\n\nThe code in question was introduced in commit\n8dd014adfea6f173c1ef6378f7e5e7924866c923\n    vhost-net: mergeable buffers support\n\nCVE-2014-0055\n\nSigned-off-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "20a51abb07a34a3af96b4fffac08022763f74c93",
      "tree": "b860b9cd77e981e3420e207d60f9f64ef862f93c",
      "parents": [
        "4b6da9193692acfe4889cb0a6050239cc613f756"
      ],
      "author": {
        "name": "Michael S. Tsirkin",
        "email": "mst@redhat.com",
        "time": "Thu Mar 27 12:00:26 2014 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sat Apr 26 17:13:17 2014 -0700"
      },
      "message": "vhost: fix total length when packets are too short\n\n[ Upstream commit d8316f3991d207fe32881a9ac20241be8fa2bad0 ]\n\nWhen mergeable buffers are disabled, and the\nincoming packet is too large for the rx buffer,\nget_rx_bufs returns success.\n\nThis was intentional in order for make recvmsg\ntruncate the packet and then handle_rx would\ndetect err !\u003d sock_len and drop it.\n\nUnfortunately we pass the original sock_len to\nrecvmsg - which means we use parts of iov not fully\nvalidated.\n\nFix this up by detecting this overrun and doing packet drop\nimmediately.\n\nCVE-2014-0077\n\nSigned-off-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "1436b3314b5582b5d370d276afacdfed9b8fbe99",
      "tree": "a1dd5caf836d469b7f45678e0f769d9ca49e37d2",
      "parents": [
        "1acb634a8af5443c41141a02d710baa91d8ec82d"
      ],
      "author": {
        "name": "Mikulas Patocka",
        "email": "mpatocka@redhat.com",
        "time": "Wed Dec 11 19:39:19 2013 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:34 2014 -0700"
      },
      "message": "powernow-k6: reorder frequencies\n\ncommit 22c73795b101597051924556dce019385a1e2fa0 upstream.\n\nThis patch reorders reported frequencies from the highest to the lowest,\njust like in other frequency drivers.\n\nSigned-off-by: Mikulas Patocka \u003cmpatocka@redhat.com\u003e\nAcked-by: Viresh Kumar \u003cviresh.kumar@linaro.org\u003e\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n\n"
    },
    {
      "commit": "1acb634a8af5443c41141a02d710baa91d8ec82d",
      "tree": "a57e8caa63ec80b07f279bf3c3ba6988c4548f01",
      "parents": [
        "cccd0fd759fa4e1306173f5740cc4ba8566e1d65"
      ],
      "author": {
        "name": "Mikulas Patocka",
        "email": "mpatocka@redhat.com",
        "time": "Wed Dec 11 19:38:53 2013 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:34 2014 -0700"
      },
      "message": "powernow-k6: correctly initialize default parameters\n\ncommit d82b922a4acc1781d368aceac2f9da43b038cab2 upstream.\n\nThe powernow-k6 driver used to read the initial multiplier from the\npowernow register. However, there is a problem with this:\n\n* If there was a frequency transition before, the multiplier read from the\n  register corresponds to the current multiplier.\n* If there was no frequency transition since reset, the field in the\n  register always reads as zero, regardless of the current multiplier that\n  is set using switches on the mainboard and that the CPU is running at.\n\nThe zero value corresponds to multiplier 4.5, so as a consequence, the\npowernow-k6 driver always assumes multiplier 4.5.\n\nFor example, if we have 550MHz CPU with bus frequency 100MHz and\nmultiplier 5.5, the powernow-k6 driver thinks that the multiplier is 4.5\nand bus frequency is 122MHz. The powernow-k6 driver then sets the\nmultiplier to 4.5, underclocking the CPU to 450MHz, but reports the\ncurrent frequency as 550MHz.\n\nThere is no reliable way how to read the initial multiplier. I modified\nthe driver so that it contains a table of known frequencies (based on\nparameters of existing CPUs and some common overclocking schemes) and sets\nthe multiplier according to the frequency. If the frequency is unknown\n(because of unusual overclocking or underclocking), the user must supply\nthe bus speed and maximum multiplier as module parameters.\n\nThis patch should be backported to all stable kernels. If it doesn\u0027t\napply cleanly, change it, or ask me to change it.\n\nSigned-off-by: Mikulas Patocka \u003cmpatocka@redhat.com\u003e\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n\n"
    },
    {
      "commit": "cccd0fd759fa4e1306173f5740cc4ba8566e1d65",
      "tree": "4457e3795500054b2666dc529099b2bd63b8eb78",
      "parents": [
        "c34cad873ff38096f8710ab318b486d4e40d4293"
      ],
      "author": {
        "name": "Mikulas Patocka",
        "email": "mpatocka@redhat.com",
        "time": "Wed Dec 11 19:38:32 2013 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:34 2014 -0700"
      },
      "message": "powernow-k6: disable cache when changing frequency\n\ncommit e20e1d0ac02308e2211306fc67abcd0b2668fb8b upstream.\n\nI found out that a system with k6-3+ processor is unstable during network\nserver load. The system locks up or the network card stops receiving. The\nreason for the instability is the CPU frequency scaling.\n\nDuring frequency transition the processor is in \"EPM Stop Grant\" state.\nThe documentation says that the processor doesn\u0027t respond to inquiry\nrequests in this state. Consequently, coherency of processor caches and\nbus master devices is not maintained, causing the system instability.\n\nThis patch flushes the cache during frequency transition. It fixes the\ninstability.\n\nOther minor changes:\n* u64 invalue changed to unsigned long because the variable is 32-bit\n* move the logic to set the multiplier to a separate function\n  powernow_k6_set_cpu_multiplier\n* preserve lower 5 bits of the powernow port instead of 4 (the voltage\n  field has 5 bits)\n* mask interrupts when reading the multiplier, so that the port is not\n  open during other activity (running other kernel code with the port open\n  shouldn\u0027t cause any misbehavior, but we should better be safe and keep\n  the port closed)\n\nThis patch should be backported to all stable kernels. If it doesn\u0027t\napply cleanly, change it, or ask me to change it.\n\nSigned-off-by: Mikulas Patocka \u003cmpatocka@redhat.com\u003e\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "c34cad873ff38096f8710ab318b486d4e40d4293",
      "tree": "163ec08bcc8587d55dcc7d7f74f745ec40644c4a",
      "parents": [
        "96ca9726343c0166dbdbe85c0d80a95c44a0c90a"
      ],
      "author": {
        "name": "Wei Yongjun",
        "email": "yongjun_wei@trendmicro.com.cn",
        "time": "Fri Oct 25 06:34:03 2013 -0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:33 2014 -0700"
      },
      "message": "media: saa7164: fix return value check in saa7164_initdev()\n\ncommit 89f4d45b2752df5d222b5f63919ce59e2d8afaf4 upstream.\n\nIn case of error, the function kthread_run() returns ERR_PTR()\nand never returns NULL. The NULL test in the return value check\nshould be replaced with IS_ERR().\n\nSigned-off-by: Wei Yongjun \u003cyongjun_wei@trendmicro.com.cn\u003e\nSigned-off-by: Hans Verkuil \u003chans.verkuil@cisco.com\u003e\nSigned-off-by: Mauro Carvalho Chehab \u003cm.chehab@samsung.com\u003e\n[bwh: Backported to 3.2: adjust filename]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Jianguo Wu \u003cwujianguo@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "96ca9726343c0166dbdbe85c0d80a95c44a0c90a",
      "tree": "47702801499ae014b4b750ca9c6ab097599d7533",
      "parents": [
        "092bc21ef043d7fb4515f54ccbd17d98a20e76fb"
      ],
      "author": {
        "name": "Alexey Khoroshilov",
        "email": "khoroshilov@ispras.ru",
        "time": "Wed Jul 03 16:17:34 2013 -0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:33 2014 -0700"
      },
      "message": "media: hdpvr: fix iteration over uninitialized lists in hdpvr_probe()\n\ncommit 2e923a0527ac439e135b9961e58d3acd876bba10 upstream.\n\nfree_buff_list and rec_buff_list are initialized in the middle of hdpvr_probe(),\nbut if something bad happens before that, error handling code calls hdpvr_delete(),\nwhich contains iteration over the lists (via hdpvr_free_buffers()).\nThe patch moves the lists initialization to the beginning and by the way fixes\ngoto label in error handling of registering videodev.\nFound by Linux Driver Verification project (linuxtesting.org).\n\nSigned-off-by: Alexey Khoroshilov \u003ckhoroshilov@ispras.ru\u003e\nSigned-off-by: Hans Verkuil \u003chans.verkuil@cisco.com\u003e\nSigned-off-by: Mauro Carvalho Chehab \u003cm.chehab@samsung.com\u003e\n[bwh: Backported to 3.2: adjust filename]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Jianguo Wu \u003cwujianguo@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "092bc21ef043d7fb4515f54ccbd17d98a20e76fb",
      "tree": "5e2745675082df259785a5e78e9b83997bc958ce",
      "parents": [
        "9ef2f22482a5a89c8ddac55c79d81b26292e59bf"
      ],
      "author": {
        "name": "Hans Verkuil",
        "email": "hans.verkuil@cisco.com",
        "time": "Tue Mar 19 09:34:58 2013 -0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:33 2014 -0700"
      },
      "message": "media: hdpvr: register the video node at the end of probe\n\ncommit 280847b532433ffe7a22795f926327805a127162 upstream.\n\nVideo nodes can be used at once after registration, so make sure the full\ninitialization is done before registering them.\n\nSigned-off-by: Hans Verkuil \u003chans.verkuil@cisco.com\u003e\nSigned-off-by: Mauro Carvalho Chehab \u003cmchehab@redhat.com\u003e\n[bwh: Backported to 3.2: adjust filename, context]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Jianguo Wu \u003cwujianguo@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "9ef2f22482a5a89c8ddac55c79d81b26292e59bf",
      "tree": "57be5cb5ee9a077ff0ac59c5ce9e23232a90187b",
      "parents": [
        "915b4b0510b5f483fd46db9154c8dc1ee9e38ddf"
      ],
      "author": {
        "name": "Soeren Moch",
        "email": "smoch@web.de",
        "time": "Wed Jun 05 21:26:23 2013 -0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:33 2014 -0700"
      },
      "message": "media: dmxdev: remove dvb_ringbuffer_flush() on writer side\n\ncommit 414abbd2cd4c2618895f02ed3a76ec6647281436 upstream.\n\nIn dvb_ringbuffer lock-less synchronizationof reader and writer threads is done\nwith separateread and write pointers. Sincedvb_ringbuffer_flush() modifies the\nread pointer, this function must not be called from the writer thread.\nThis patch removes the dvb_ringbuffer_flush() calls in the dmxdev ringbuffer\nwrite functions, this fixes Oopses \"Unable to handle kernel paging request\"\nI could observe for the call chaindvb_demux_read -\u003edvb_dmxdev_buffer_read -\u003e\ndvb_ringbuffer_read_user -\u003e __copy_to_user (the reader side of the ringbuffer).\nThe flush calls at the write side are not necessary anyway since ringbuffer_flush\nis also called in dvb_dmxdev_buffer_read() when an error condition is set in the\nringbuffer.\nThis patch should also be applied to stable kernels.\n\nSigned-off-by: Soeren Moch \u003csmoch@web.de\u003e\nReviewed-by: Sakari Ailus \u003csakari.ailus@iki.fi\u003e\nSigned-off-by: Mauro Carvalho Chehab \u003cmchehab@redhat.com\u003e\n[bwh: Backported to 3.2: adjust filename]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Jianguo Wu \u003cwujianguo@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "915b4b0510b5f483fd46db9154c8dc1ee9e38ddf",
      "tree": "ab25a83b7b491eb0809ec02762f3f7a503862af6",
      "parents": [
        "ac871a8a93556bb96e6d11931c4568f60546c50f"
      ],
      "author": {
        "name": "Al Viro",
        "email": "viro@ZenIV.linux.org.uk",
        "time": "Sun Dec 16 16:04:46 2012 -0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:33 2014 -0700"
      },
      "message": "media: omap_vout: find_vma() needs -\u003emmap_sem held\n\ncommit 55ee64b30a38d688232e5eb2860467dddc493573 upstream.\n\nWalking rbtree while it\u0027s modified is a Bad Idea(tm); besides,\nthe result of find_vma() can be freed just as it\u0027s getting returned\nto caller.  Fortunately, it\u0027s easy to fix - just take -\u003emmap_sem a bit\nearlier (and don\u0027t bother with find_vma() at all if virtp \u003e\u003d PAGE_OFFSET -\nin that case we don\u0027t even look at its result).\n\nWhile we are at it, what prevents VIDIOC_PREPARE_BUF calling\nv4l_prepare_buf() -\u003e (e.g) vb2_ioctl_prepare_buf() -\u003e vb2_prepare_buf() -\u003e\n__buf_prepare() -\u003e __qbuf_userptr() -\u003e vb2_vmalloc_get_userptr() -\u003e find_vma(),\nAFAICS without having taken -\u003emmap_sem anywhere in process?  The code flow\nis bloody convoluted and depends on a bunch of things done by initialization,\nso I certainly might\u0027ve missed something...\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Sakari Ailus \u003csakari.ailus@iki.fi\u003e\nCc: Laurent Pinchart \u003claurent.pinchart@ideasonboard.com\u003e\nCc: Archit Taneja \u003carchit@ti.com\u003e\nCc: Prabhakar Lad \u003cprabhakar.lad@ti.com\u003e\nSigned-off-by: Mauro Carvalho Chehab \u003cmchehab@redhat.com\u003e\n[bwh: Backported to 3.2: adjust filename]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Jianguo Wu \u003cwujianguo@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "ac871a8a93556bb96e6d11931c4568f60546c50f",
      "tree": "4c8d912bf7a2160be692577f749d20a7b4fdb9ad",
      "parents": [
        "1b8904da5aa472afbc86ba1a1c297c9bad21eb47"
      ],
      "author": {
        "name": "Laurent Pinchart",
        "email": "laurent.pinchart@ideasonboard.com",
        "time": "Sat Nov 24 21:35:48 2012 -0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:33 2014 -0700"
      },
      "message": "media: v4l: Reset subdev v4l2_dev field to NULL if registration fails\n\ncommit 317efce991620adc589b3005b9baed433dcb2a56 upstream.\n\nWhen subdev registration fails the subdev v4l2_dev field is left to a\nnon-NULL value. Later calls to v4l2_device_unregister_subdev() will\nconsider the subdev as registered and will module_put() the subdev\nmodule without any matching module_get().\nFix this by setting the subdev v4l2_dev field to NULL in\nv4l2_device_register_subdev() when the function fails.\n\nSigned-off-by: Laurent Pinchart \u003claurent.pinchart@ideasonboard.com\u003e\nAcked-by: Sylwester Nawrocki \u003cs.nawrocki@samsung.com\u003e\nSigned-off-by: Mauro Carvalho Chehab \u003cmchehab@redhat.com\u003e\n[bwh: Backported to 3.2: adjust context, filename]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Jianguo Wu \u003cwujianguo@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "1b8904da5aa472afbc86ba1a1c297c9bad21eb47",
      "tree": "29925e9739c04bf19f61bfa20cf75642fb1c3a26",
      "parents": [
        "8d4787e99c05d0084a3a7644d8e5c04711f28970"
      ],
      "author": {
        "name": "Jacob Schloss",
        "email": "jacob.schloss@unlimitedautomata.com",
        "time": "Sun Dec 09 20:18:25 2012 -0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:33 2014 -0700"
      },
      "message": "media: gspca_kinect: add Kinect for Windows USB id\n\ncommit 98fd485795db064d0885150e2c0c7f296d8fe06e upstream.\n\nAdd the USB ID for the Kinect for Windows RGB camera so it can be used\nwith the gspca_kinect driver.\n\nSigned-off-by: Jacob Schloss \u003cjacob.schloss@unlimitedautomata.com\u003e\nSigned-off-by: Antonio Ospite \u003cospite@studenti.unina.it\u003e\nSigned-off-by: Hans de Goede \u003chdegoede@redhat.com\u003e\nSigned-off-by: Mauro Carvalho Chehab \u003cmchehab@redhat.com\u003e\n[bwh: Backported to 3.2: adjust filename]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Jianguo Wu \u003cwujianguo@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "8d4787e99c05d0084a3a7644d8e5c04711f28970",
      "tree": "06a73ee899a113c85dc9451a4a2316f5795406c4",
      "parents": [
        "9e6f42f742cb5973960a89c4e94197c6f95a238b"
      ],
      "author": {
        "name": "Nithin Sujir",
        "email": "nsujir@broadcom.com",
        "time": "Mon Jun 03 09:19:34 2013 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:32 2014 -0700"
      },
      "message": "tg3: Add read dma workaround for 5720\n\ncommit 9bc297ea0622bb2a6b3abfa2fa84f0a3b86ef8c8 upstream.\n\nCommit 091f0ea30074bc43f9250961b3247af713024bc6 \"tg3: Add New 5719 Read\nDMA workaround\" added a workaround for TX DMA stall on the 5719. This\nworkaround needs to be applied to the 5720 as well.\n\nReported-by: Roland Dreier \u003croland@purestorage.com\u003e\nTested-by: Roland Dreier \u003croland@purestorage.com\u003e\nSigned-off-by: Nithin Nayak Sujir \u003cnsujir@broadcom.com\u003e\nSigned-off-by: Michael Chan \u003cmchan@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n[bwh: Backported to 3.2: use GET_ASIC_REV() instead of tg3_asic_rev()]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\n[hq: Backproted to 3.4: Adjust context]\nSigned-off-by: Qiang Huang \u003ch.huangqiang@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "9e6f42f742cb5973960a89c4e94197c6f95a238b",
      "tree": "a7bec5a8cb1fc2a4e7a75f35ab9fdf8f16ed1534",
      "parents": [
        "14a7213e5390cd3f2c0cc00bf4d8caf663479b8b"
      ],
      "author": {
        "name": "Nithin Sujir",
        "email": "nsujir@broadcom.com",
        "time": "Mon May 13 11:04:15 2013 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:32 2014 -0700"
      },
      "message": "tg3: Skip powering down function 0 on certain serdes devices\n\ncommit 44f3b503c16425c8e9db4bbaa2fc9cd0c9d0ba91 upstream.\n\nOn the 5718, 5719 and 5720 serdes devices, powering down function 0\nresults in all the other ports being powered down. Add code to skip\nfunction 0 power down.\n\nv2:\n - Modify tg3_phy_power_bug() function to use a switch instead of a\n   complicated if statement. Suggested by Joe Perches.\n\nSigned-off-by: Michael Chan \u003cmchan@broadcom.com\u003e\nSigned-off-by: Nithin Nayak Sujir \u003cnsujir@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n[bwh: Backported to 3.2:\n s/tg3_asic_rev\\(tp\\)/GET_ASIC_REV(tp-\u003epci_chip_rev_id)/]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\n[hq: Backported to 3.4: Adjust context]\nSigned-off-by: Qiang Huang \u003ch.huangqiang@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "14a7213e5390cd3f2c0cc00bf4d8caf663479b8b",
      "tree": "9ba01afe04693f19cd771d29a75c009f5d82b192",
      "parents": [
        "82d16b39266179ca80f6b81b4084631ade240219"
      ],
      "author": {
        "name": "Mauro Carvalho Chehab",
        "email": "mchehab@redhat.com",
        "time": "Thu Sep 20 12:09:30 2012 -0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:32 2014 -0700"
      },
      "message": "sb_edac: Avoid overflow errors at memory size calculation\n\ncommit deb09ddaff1435f72dd598d38f9b58354c68a5ec upstream.\n\nSandy bridge EDAC is calculating the memory size with overflow.\nBasically, the size field and the integer calculation is using 32 bits.\nMore bits are needed, when the DIMM memories have high density.\n\nThe net result is that memories are improperly reported there, when\nhigh-density DIMMs are used:\n\nEDAC DEBUG: in drivers/edac/sb_edac.c, line at 591: mc#0: channel 0, dimm 0, -16384 Mb (-4194304 pages) bank: 8, rank: 2, row: 0x10000, col: 0x800\nEDAC DEBUG: in drivers/edac/sb_edac.c, line at 591: mc#0: channel 1, dimm 0, -16384 Mb (-4194304 pages) bank: 8, rank: 2, row: 0x10000, col: 0x800\n\nAs the number of pages value is handled at the EDAC core as unsigned\nints, the driver shows the 16 GB memories at sysfs interface as 16760832\nMB! The fix is simple: calculate the number of pages as unsigned 64-bits\ninteger.\n\nAfter the patch, the memory size (16 GB) is properly detected:\n\nEDAC DEBUG: in drivers/edac/sb_edac.c, line at 592: mc#0: channel 0, dimm 0, 16384 Mb (4194304 pages) bank: 8, rank: 2, row: 0x10000, col: 0x800\nEDAC DEBUG: in drivers/edac/sb_edac.c, line at 592: mc#0: channel 1, dimm 0, 16384 Mb (4194304 pages) bank: 8, rank: 2, row: 0x10000, col: 0x800\n\nSigned-off-by: Mauro Carvalho Chehab \u003cmchehab@redhat.com\u003e\n[bwh: Backported to 3.2:\n - Adjust context\n - Debug log function is debugf0(), not edac_dbg()]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Qiang Huang \u003ch.huangqiang@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "82d16b39266179ca80f6b81b4084631ade240219",
      "tree": "6440323afd6857eb0565acaacf5b963d2b48af30",
      "parents": [
        "faf100389a5479de77294b8ebe98ec4e775d6927"
      ],
      "author": {
        "name": "Lauri Hintsala",
        "email": "lauri.hintsala@bluegiga.com",
        "time": "Tue Jul 17 17:16:10 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:32 2014 -0700"
      },
      "message": "mmc: mxs-mmc: fix deadlock caused by recursion loop\n\ncommit fc108d24d3a6da63576a460e122fa1df0cbdea20 upstream.\n\nRelease the lock before mmc_signal_sdio_irq is called by\nmxs_mmc_enable_sdio_irq.\n\nBacktrace:\n[   65.470000] \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n[   65.470000] [ INFO: possible recursive locking detected ]\n[   65.470000] 3.5.0-rc5 #2 Not tainted\n[   65.470000] ---------------------------------------------\n[   65.470000] ksdioirqd/mmc0/73 is trying to acquire lock:\n[   65.470000]  (\u0026(\u0026host-\u003elock)-\u003erlock#2){-.-...}, at: [\u003cbf054120\u003e] mxs_mmc_enable_sdio_irq+0x18/0xdc [mxs_mmc]\n[   65.470000]\n[   65.470000] but task is already holding lock:\n[   65.470000]  (\u0026(\u0026host-\u003elock)-\u003erlock#2){-.-...}, at: [\u003cbf054120\u003e] mxs_mmc_enable_sdio_irq+0x18/0xdc [mxs_mmc]\n[   65.470000]\n[   65.470000] other info that might help us debug this:\n[   65.470000]  Possible unsafe locking scenario:\n[   65.470000]\n[   65.470000]        CPU0\n[   65.470000]        ----\n[   65.470000]   lock(\u0026(\u0026host-\u003elock)-\u003erlock#2);\n[   65.470000]   lock(\u0026(\u0026host-\u003elock)-\u003erlock#2);\n[   65.470000]\n[   65.470000]  *** DEADLOCK ***\n[   65.470000]\n[   65.470000]  May be due to missing lock nesting notation\n[   65.470000]\n[   65.470000] 1 lock held by ksdioirqd/mmc0/73:\n[   65.470000]  #0:  (\u0026(\u0026host-\u003elock)-\u003erlock#2){-.-...}, at: [\u003cbf054120\u003e] mxs_mmc_enable_sdio_irq+0x18/0xdc [mxs_mmc]\n[   65.470000]\n[   65.470000] stack backtrace:\n[   65.470000] [\u003cc0014990\u003e] (unwind_backtrace+0x0/0xf4) from [\u003cc005ccb8\u003e] (__lock_acquire+0x14f8/0x1b98)\n[   65.470000] [\u003cc005ccb8\u003e] (__lock_acquire+0x14f8/0x1b98) from [\u003cc005d3f8\u003e] (lock_acquire+0xa0/0x108)\n[   65.470000] [\u003cc005d3f8\u003e] (lock_acquire+0xa0/0x108) from [\u003cc02f671c\u003e] (_raw_spin_lock_irqsave+0x48/0x5c)\n[   65.470000] [\u003cc02f671c\u003e] (_raw_spin_lock_irqsave+0x48/0x5c) from [\u003cbf054120\u003e] (mxs_mmc_enable_sdio_irq+0x18/0xdc [mxs_mmc])\n[   65.470000] [\u003cbf054120\u003e] (mxs_mmc_enable_sdio_irq+0x18/0xdc [mxs_mmc]) from [\u003cbf0541d0\u003e] (mxs_mmc_enable_sdio_irq+0xc8/0xdc [mxs_mmc])\n[   65.470000] [\u003cbf0541d0\u003e] (mxs_mmc_enable_sdio_irq+0xc8/0xdc [mxs_mmc]) from [\u003cc0219b38\u003e] (sdio_irq_thread+0x1bc/0x274)\n[   65.470000] [\u003cc0219b38\u003e] (sdio_irq_thread+0x1bc/0x274) from [\u003cc003c324\u003e] (kthread+0x8c/0x98)\n[   65.470000] [\u003cc003c324\u003e] (kthread+0x8c/0x98) from [\u003cc00101ac\u003e] (kernel_thread_exit+0x0/0x8)\n[   65.470000] BUG: spinlock lockup suspected on CPU#0, ksdioirqd/mmc0/73\n[   65.470000]  lock: 0xc3358724, .magic: dead4ead, .owner: ksdioirqd/mmc0/73, .owner_cpu: 0\n[   65.470000] [\u003cc0014990\u003e] (unwind_backtrace+0x0/0xf4) from [\u003cc01b46b0\u003e] (do_raw_spin_lock+0x100/0x144)\n[   65.470000] [\u003cc01b46b0\u003e] (do_raw_spin_lock+0x100/0x144) from [\u003cc02f6724\u003e] (_raw_spin_lock_irqsave+0x50/0x5c)\n[   65.470000] [\u003cc02f6724\u003e] (_raw_spin_lock_irqsave+0x50/0x5c) from [\u003cbf054120\u003e] (mxs_mmc_enable_sdio_irq+0x18/0xdc [mxs_mmc])\n[   65.470000] [\u003cbf054120\u003e] (mxs_mmc_enable_sdio_irq+0x18/0xdc [mxs_mmc]) from [\u003cbf0541d0\u003e] (mxs_mmc_enable_sdio_irq+0xc8/0xdc [mxs_mmc])\n[   65.470000] [\u003cbf0541d0\u003e] (mxs_mmc_enable_sdio_irq+0xc8/0xdc [mxs_mmc]) from [\u003cc0219b38\u003e] (sdio_irq_thread+0x1bc/0x274)\n[   65.470000] [\u003cc0219b38\u003e] (sdio_irq_thread+0x1bc/0x274) from [\u003cc003c324\u003e] (kthread+0x8c/0x98)\n[   65.470000] [\u003cc003c324\u003e] (kthread+0x8c/0x98) from [\u003cc00101ac\u003e] (kernel_thread_exit+0x0/0x8)\n\nReported-by: Attila Kinali \u003cattila@kinali.ch\u003e\nSigned-off-by: Lauri Hintsala \u003clauri.hintsala@bluegiga.com\u003e\nAcked-by: Shawn Guo \u003cshawn.guo@linaro.org\u003e\nSigned-off-by: Chris Ball \u003ccjb@laptop.org\u003e\n[bwh: Backported to 3.2:\n - Adjust context\n - HW_SSP_STATUS is a simple rather than function-like macro]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Qiang Huang \u003ch.huangqiang@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "faf100389a5479de77294b8ebe98ec4e775d6927",
      "tree": "d80b542b77a4c9027586efb157986125bc1ab894",
      "parents": [
        "c81c26ff163b5ea3b5f9bb7d6314b263f52fdcd0"
      ],
      "author": {
        "name": "Grazvydas Ignotas",
        "email": "notasas@gmail.com",
        "time": "Tue Aug 21 09:09:48 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:32 2014 -0700"
      },
      "message": "OMAPFB: fix framebuffer console colors\n\ncommit c1c52848cef52e157468b8879fc3cae23b6f3a99 upstream.\n\nomapfb does not currently set pseudo palette correctly for color depths\nabove 16bpp, making red text invisible, command like\n  echo -e \u0027\\e[0;31mRED\u0027 \u003e /dev/tty1\nwill display nothing on framebuffer console in 24bpp mode.\nThis is because temporary variable is declared incorrectly, fix it.\n\nSigned-off-by: Grazvydas Ignotas \u003cnotasas@gmail.com\u003e\nSigned-off-by: Tomi Valkeinen \u003ctomi.valkeinen@ti.com\u003e\nSigned-off-by: Florian Tobias Schandinat \u003cFlorianSchandinat@gmx.de\u003e\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Qiang Huang \u003ch.huangqiang@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "c81c26ff163b5ea3b5f9bb7d6314b263f52fdcd0",
      "tree": "4a859888b40a522d35b3a01fccd8fced5bc593ae",
      "parents": [
        "29632805c3970db57874ed668d95f7233add49ca"
      ],
      "author": {
        "name": "Nithin Sujir",
        "email": "nsujir@broadcom.com",
        "time": "Wed Jun 12 11:08:59 2013 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:32 2014 -0700"
      },
      "message": "tg3: Wait for boot code to finish after power on\n\ncommit df465abfe06f7dc4f33f4a96d17f096e9e8ac917 upstream.\n\nSome systems that don\u0027t need wake-on-lan may choose to power down the\nchip on system standby. Upon resume, the power on causes the boot code\nto startup and initialize the hardware. On one new platform, this is\ncausing the device to go into a bad state due to a race between the\ndriver and boot code, once every several hundred resumes. The same race\nexists on open since we come up from a power on.\n\nThis patch adds a wait for boot code signature at the beginning of\ntg3_init_hw() which is common to both cases. If there has not been a\npower-off or the boot code has already completed, the signature will be\npresent and poll_fw() returns immediately. Also return immediately if\nthe device does not have firmware.\n\nSigned-off-by: Nithin Nayak Sujir \u003cnsujir@broadcom.com\u003e\nSigned-off-by: Michael Chan \u003cmchan@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n[bwh: Backported to 3.2: adjust context]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Qiang Huang \u003ch.huangqiang@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "29632805c3970db57874ed668d95f7233add49ca",
      "tree": "c3498321205c852ab907819b8c34cc87849f05df",
      "parents": [
        "57591712825e050d0c70cd0526492de4d5ad2905"
      ],
      "author": {
        "name": "Michael Chan",
        "email": "mchan@broadcom.com",
        "time": "Sun Jul 29 19:15:43 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:32 2014 -0700"
      },
      "message": "tg3: Add New 5719 Read DMA workaround\n\ncommit 091f0ea30074bc43f9250961b3247af713024bc6 upstream.\n\nAfter Power-on-reset, the 5719\u0027s TX DMA length registers may contain\nuninitialized values and cause TX DMA to stall.  Check for invalid\nvalues and set a register bit to flush the TX channels.  The bit\nneeds to be turned off after the DMA channels have been flushed.\n\nSigned-off-by: Michael Chan \u003cmchan@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Qiang Huang \u003ch.huangqiang@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "57591712825e050d0c70cd0526492de4d5ad2905",
      "tree": "69f1f3c6ed47b6e97cb82aa29c4d9b9b3952bcc4",
      "parents": [
        "e4b2585a85e92c43e7eba3eef30bc59ccadfe158"
      ],
      "author": {
        "name": "Dan Carpenter",
        "email": "dan.carpenter@oracle.com",
        "time": "Thu Dec 12 08:05:33 2013 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:31 2014 -0700"
      },
      "message": "hwmon: Prevent some divide by zeros in FAN_TO_REG()\n\ncommit 3806b45ba4655147a011df03242cc197ab986c43 upstream.\n\nThe \"rpm * div\" operations can overflow here, so this patch adds an\nupper limit to rpm to prevent that.  Jean Delvare helped me with this\npatch.\n\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nAcked-by: Roger Lucas \u003cvt8231@hiddenengine.co.uk\u003e\nSigned-off-by: Jean Delvare \u003ckhali@linux-fr.org\u003e\n[bwh: Backported to 3.2: adjust context]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Qiang Huang \u003ch.huangqiang@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "e4b2585a85e92c43e7eba3eef30bc59ccadfe158",
      "tree": "a81ace887cf79ac76a9362ce4eff46c2d520e202",
      "parents": [
        "7aa8c170472be4ca4ac0ed65efb78fe758594cec"
      ],
      "author": {
        "name": "Henrik Rydberg",
        "email": "rydberg@euromail.se",
        "time": "Wed Oct 02 19:15:03 2013 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:31 2014 -0700"
      },
      "message": "hwmon: (applesmc) Always read until end of data\n\ncommit 25f2bd7f5add608c1d1405938f39c96927b275ca upstream.\n\nThe crash reported and investigated in commit 5f4513 turned out to be\ncaused by a change to the read interface on newer (2012) SMCs.\n\nTests by Chris show that simply reading the data valid line is enough\nfor the problem to go away. Additional tests show that the newer SMCs\nno longer wait for the number of requested bytes, but start sending\ndata right away.  Apparently the number of bytes to read is no longer\nspecified as before, but instead found out by reading until end of\ndata. Failure to read until end of data confuses the state machine,\nwhich eventually causes the crash.\n\nAs a remedy, assuming bit0 is the read valid line, make sure there is\nnothing more to read before leaving the read function.\n\nTested to resolve the original problem, and runtested on MBA3,1,\nMBP4,1, MBP8,2, MBP10,1, MBP10,2. The patch seems to have no effect on\nmachines before 2012.\n\nTested-by: Chris Murphy \u003cchris@cmurf.com\u003e\nSigned-off-by: Henrik Rydberg \u003crydberg@euromail.se\u003e\nSigned-off-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\n[bwh: Backported to 3.2: adjust context]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Qiang Huang \u003ch.huangqiang@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7aa8c170472be4ca4ac0ed65efb78fe758594cec",
      "tree": "02a9ae0063387488162a183816b627f5ef4fabac",
      "parents": [
        "b428b89b7efdda0d073e9aad7f685a126bb3472d"
      ],
      "author": {
        "name": "Guenter Roeck",
        "email": "linux@roeck-us.net",
        "time": "Tue Oct 09 13:23:57 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:31 2014 -0700"
      },
      "message": "hwmon: (coretemp) Add support for Atom CE4110/4150/4170\n\ncommit 1102dcab849313bd5a340b299b5cf61b518fbc0f upstream.\n\nTjMax for the CE4100 series of Atom CPUs was previously reported to be\n110 degrees C.\n\ncpuinfo logs on the web show existing CPU types CE4110, CE4150, and CE4170,\nreported as \"model name : Intel(R) Atom(TM) CPU CE41{1|5|7}0 @ 1.{2|6}0GHz\"\nwith model 28 (0x1c) and stepping 10 (0x0a). Add the three known variants\nto the tjmax table.\n\nSigned-off-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nAcked-by: Jean Delvare \u003ckhali@linux-fr.org\u003e\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Qiang Huang \u003ch.huangqiang@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b428b89b7efdda0d073e9aad7f685a126bb3472d",
      "tree": "6d3bf00ec684a20786c05bb901f7ec34d5155fc1",
      "parents": [
        "2a3c5038975c58343fd199d6795e462818726350"
      ],
      "author": {
        "name": "Guenter Roeck",
        "email": "linux@roeck-us.net",
        "time": "Sun Jun 17 18:05:05 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:31 2014 -0700"
      },
      "message": "hwmon: (coretemp) Improve support for TjMax detection on Atom CPUs\n\ncommit 41e58a1f2b90c88d94b4bd84beb9927a4c2704e9 upstream.\n\nAtom CPUs don\u0027t have a register to retrieve TjMax. Detection so far was\nincomplete. Use the X86 model ID to improve it.\n\nSigned-off-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nSigned-off-by: Jean Delvare \u003ckhali@linux-fr.org\u003e\nCc: Qiang Huang \u003ch.huangqiang@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "2a3c5038975c58343fd199d6795e462818726350",
      "tree": "6fe9f4639772410b511658aea7e9e2778e566b4e",
      "parents": [
        "b32e4b1ae1207eb590e9dec2ace693b2577a9c68"
      ],
      "author": {
        "name": "Guenter Roeck",
        "email": "linux@roeck-us.net",
        "time": "Sun Jun 17 18:05:05 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:31 2014 -0700"
      },
      "message": "hwmon: (coretemp) Add support for Atom D2000 and N2000 series CPU models\n\ncommit 5592906f8b01282ea3c2acaf641fd067ad4bb3dc upstream.\n\nDocument the Atom series D2000 and N2000 (Cedar Trail) as being supported.\nList and set TjMax for those series.\n\nCc: Fenghua Yu \u003cfenghua.yu@intel.com\u003e\nCc: \"R, Durgadoss\" \u003cdurgadoss.r@intel.com\u003e\nSigned-off-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nSigned-off-by: Jean Delvare \u003ckhali@linux-fr.org\u003e\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Qiang Huang \u003ch.huangqiang@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b32e4b1ae1207eb590e9dec2ace693b2577a9c68",
      "tree": "0eed0913e183b9f2ef5c57d8e9b1ebc198ec84b4",
      "parents": [
        "d454e9e10c6445c1b653309627260cbf7d8e86aa"
      ],
      "author": {
        "name": "Jean Delvare",
        "email": "khali@linux-fr.org",
        "time": "Sun Jun 17 18:05:05 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:31 2014 -0700"
      },
      "message": "hwmon: (coretemp) Improve support of recent Atom CPU models\n\ncommit fcc14ac1a86931f38da047cf8fb634c6db7b58bc upstream.\n\nDocument the new Atom series (Tunnel Creek and Medfield) as being\nsupported, and list TjMax for the Atom E600 series.\n\nAlso enable the Atom tjmax heuristic for these Atom CPU models.\n\nSigned-off-by: Jean Delvare \u003ckhali@linux-fr.org\u003e\nReviewed-by: Guenter Roeck \u003cguenter.roeck@ericsson.com\u003e\nCc: Alexander Stein \u003calexander.stein@systec-electronic.com\u003e\nCc: Fenghua Yu \u003cfenghua.yu@intel.com\u003e\nCc: \"R, Durgadoss\" \u003cdurgadoss.r@intel.com\u003e\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Qiang Huang \u003ch.huangqiang@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "ace626985cb753d998f92d872df4b6d8573ab368",
      "tree": "9c9640b8c170250f72b98aa4a9a08bb6203c3b04",
      "parents": [
        "630b5e0d7bb7f50234b82ab88f7a8427aae64bed"
      ],
      "author": {
        "name": "Takashi Iwai",
        "email": "tiwai@suse.de",
        "time": "Mon Dec 09 14:53:36 2013 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:29 2014 -0700"
      },
      "message": "xhci: Limit the spurious wakeup fix only to HP machines\n\ncommit 6962d914f317b119e0db7189199b21ec77a4b3e0 upstream.\n\nWe\u0027ve got regression reports that my previous fix for spurious wakeups\nafter S5 on HP Haswell machines leads to the automatic reboot at\nshutdown on some machines.  It turned out that the fix for one side\ntriggers another BIOS bug in other side.  So, it\u0027s exclusive.\n\nSince the original S5 wakeups have been confirmed only on HP machines,\nit\u0027d be safer to apply it only to limited machines.  As a wild guess,\nlimiting to machines with HP PCI SSID should suffice.\n\nThis patch should be backported to kernels as old as 3.12, that\ncontain the commit 638298dc66ea36623dbc2757a24fc2c4ab41b016 \"xhci: Fix\nspurious wakeups after S5 on Haswell\".\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d66171\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Sarah Sharp \u003csarah.a.sharp@linux.intel.com\u003e\nTested-by: \u003cdashing.meng@gmail.com\u003e\nReported-by: Niklas Schnelle \u003cniklas@komani.de\u003e\nReported-by: Giorgos \u003cganastasiouGR@gmail.com\u003e\nReported-by: \u003cart1@vhex.net\u003e\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Yang Yingliang \u003cyangyingliang@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "630b5e0d7bb7f50234b82ab88f7a8427aae64bed",
      "tree": "0593e17fd5e20d619fd785b63f3f2c8f7a4a891b",
      "parents": [
        "e4330c73f4e2cb8bf2755ea850f4a34569535a9a"
      ],
      "author": {
        "name": "Takashi Iwai",
        "email": "tiwai@suse.de",
        "time": "Thu Sep 12 08:11:06 2013 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:29 2014 -0700"
      },
      "message": "xhci: Fix spurious wakeups after S5 on Haswell\n\ncommit 638298dc66ea36623dbc2757a24fc2c4ab41b016 upstream.\n\nHaswell LynxPoint and LynxPoint-LP with the recent Intel BIOS show\nmysterious wakeups after shutdown occasionally.  After discussing with\nBIOS engineers, they explained that the new BIOS expects that the\nwakeup sources are cleared and set to D3 for all wakeup devices when\nthe system is going to sleep or power off, but the current xhci driver\ndoesn\u0027t do this properly (partly intentionally).\n\nThis patch introduces a new quirk, XHCI_SPURIOUS_WAKEUP, for\nfixing the spurious wakeups at S5 by calling xhci_reset() in the xhci\nshutdown ops as done in xhci_stop(), and setting the device to PCI D3\nat shutdown and remove ops.\n\nThe PCI D3 call is based on the initial fix patch by Oliver Neukum.\n\n[Note: Sarah changed the quirk name from XHCI_HSW_SPURIOUS_WAKEUP to\nXHCI_SPURIOUS_WAKEUP, since none of the other quirks have system names\nin them.  Sarah also fixed a collision with a quirk submitted around the\nsame time, by changing the xhci-\u003equirks bit from 17 to 18.]\n\nThis patch should be backported to kernels as old as 3.0, that\ncontain the commit 1c12443ab8eba71a658fae4572147e56d1f84f66 \"xhci: Add\nLynx Point to list of Intel switchable hosts.\"\n\nCc: Oliver Neukum \u003coneukum@suse.de\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Sarah Sharp \u003csarah.a.sharp@linux.intel.com\u003e\n[bwh: Backported to 3.2: adjust context]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Yang Yingliang \u003cyangyingliang@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "e4330c73f4e2cb8bf2755ea850f4a34569535a9a",
      "tree": "b71f80855a6258a8460cb4f1ef5f28b5be6338d1",
      "parents": [
        "da02a12066a280b546c71a492f47a7776e2b1d10"
      ],
      "author": {
        "name": "Oliver Neukum",
        "email": "oneukum@suse.de",
        "time": "Mon Sep 30 15:50:54 2013 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:29 2014 -0700"
      },
      "message": "xhci: quirk for extra long delay for S4\n\ncommit 455f58925247e8a1a1941e159f3636ad6ee4c90b upstream.\n\nIt has been reported that this chipset really cannot\nsleep without this extraordinary delay.\n\nThis patch should be backported, in order to ensure this host functions\nunder stable kernels.  The last quirk for Fresco Logic hosts (commit\nbba18e33f25072ebf70fd8f7f0cdbf8cdb59a746 \"xhci: Extend Fresco Logic MSI\nquirk.\") was backported to stable kernels as old as 2.6.36.\n\nSigned-off-by: Oliver Neukum \u003coneukum@suse.de\u003e\nSigned-off-by: Sarah Sharp \u003csarah.a.sharp@linux.intel.com\u003e\n[bwh: Backported to 3.2:\n - Adjust context\n - Use xhci_dbg() instead of xhci_dbg_trace()]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\n[yangyl: Backported to 3.4: Adjust context]\nSigned-off-by: Yang Yingliang \u003cyangyingliang@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "da02a12066a280b546c71a492f47a7776e2b1d10",
      "tree": "ab7b4e8bd1e51fec0134061ab8d20df3d85e04fa",
      "parents": [
        "8fd2b471b5f13822cfcd3138f292a23962418a87"
      ],
      "author": {
        "name": "Julius Werner",
        "email": "jwerner@chromium.org",
        "time": "Tue Oct 15 17:45:00 2013 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:29 2014 -0700"
      },
      "message": "usb: hub: Clear Port Reset Change during init/resume\n\ncommit e92aee330837e4911553761490a8fb843f2053a6 upstream.\n\nThis patch adds the Port Reset Change flag to the set of bits that are\npreemptively cleared on init/resume of a hub. In theory this bit should\nnever be set unexpectedly... in practice it can still happen if BIOS,\nSMM or ACPI code plays around with USB devices without cleaning up\ncorrectly. This is especially dangerous for XHCI root hubs, which don\u0027t\ngenerate any more Port Status Change Events until all change bits are\ncleared, so this is a good precaution to have (similar to how it\u0027s\nalready done for the Warm Port Reset Change flag).\n\nSigned-off-by: Julius Werner \u003cjwerner@chromium.org\u003e\nAcked-by: Alan Stern \u003cstern@rowland.harvard.edu\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n[bwh: Backported to 3.2:\n - Adjust context\n - s/usb_clear_port_feature/clear_port_feature/]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\n[yangyl: Backported to 3.4: Adjust context]\nSigned-off-by: Yang Yingliang \u003cyangyingliang@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "8fd2b471b5f13822cfcd3138f292a23962418a87",
      "tree": "fa7e97970da9a1f08159a45ac45e71d55fe3e932",
      "parents": [
        "4af001a0d18b0f336e1d16b1bdb2c3f46d3d124f"
      ],
      "author": {
        "name": "James Ralston",
        "email": "james.d.ralston@intel.com",
        "time": "Mon Nov 04 09:24:58 2013 -0800"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 14 06:44:29 2014 -0700"
      },
      "message": "ahci: Add Device IDs for Intel Wildcat Point-LP\n\ncommit 9f961a5f6efc87a79571d7166257b36af28ffcfe upstream.\n\nThis patch adds the AHCI-mode SATA Device IDs for the Intel Wildcat Point-LP PCH.\n\nSigned-off-by: James Ralston \u003cjames.d.ralston@intel.com\u003e\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: Yang Yingliang \u003cyangyingliang@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    }
  ],
  "next": "4af001a0d18b0f336e1d16b1bdb2c3f46d3d124f"
}