)]}' { "log": [ { "commit": "cbff2b6d371dbbae19de1dcfd09051683eca02ca", "tree": "376fa238a64110fd66e969ce6723fc9dcb9adb0f", "parents": [ "10a00e38f3478eb899916f9a15d97e1b565106c3" ], "author": { "name": "Johan Hovold", "email": "jhovold@gmail.com", "time": "Tue Mar 19 09:21:09 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:27 2013 -0700" }, "message": "USB: serial: fix interface refcounting\n\ncommit d7971051e4df825e0bc11b995e87bfe86355b8e5 upstream.\n\nMake sure the interface is not released before our serial device.\n\nNote that drivers are still not allowed to access the interface in\nany way that may interfere with another driver that may have gotten\nbound to the same interface after disconnect returns.\n\nSigned-off-by: Johan Hovold \u003cjhovold@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "10a00e38f3478eb899916f9a15d97e1b565106c3", "tree": "324d36afa24d272cfb6f934c11fbfe5afdad81f0", "parents": [ "d581bb3819c5cda33531a0a67c02dbdb7d61f307" ], "author": { "name": "Johan Hovold", "email": "jhovold@gmail.com", "time": "Tue Mar 19 09:21:06 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:26 2013 -0700" }, "message": "USB: cdc-acm: fix device unregistration\n\ncommit cb25505fc604292c70fc02143fc102f54c8595f0 upstream.\n\nUnregister tty device in disconnect as is required by the USB stack.\n\nBy deferring unregistration to when the last tty reference is dropped,\nthe parent interface device can get unregistered before the child\nresulting in broken hotplug events being generated when the tty is\nfinally closed:\n\nKERNEL[2290.798128] remove /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:3.1 (usb)\nKERNEL[2290.804589] remove /devices/pci0000:00/0000:00:1d.7/usb2/2-1 (usb)\nKERNEL[2294.554799] remove /2-1:3.1/tty/ttyACM0 (tty)\n\nThe driver must deal with tty callbacks after disconnect by checking the\ndisconnected flag. Specifically, further opens must be prevented and\nthis is already implemented.\n\nAcked-by: Oliver Neukum \u003coneukum@suse.de\u003e\nCc: Oliver Neukum \u003coneukum@suse.de\u003e\nSigned-off-by: Johan Hovold \u003cjhovold@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "d581bb3819c5cda33531a0a67c02dbdb7d61f307", "tree": "ecbf9704196e0a453526b23697f4ede1b4a7379c", "parents": [ "31e8d29ccf1844a84b7c07d511e6a92d9f99cc11" ], "author": { "name": "Hannes Reinecke", "email": "hare@suse.de", "time": "Mon Mar 04 17:14:43 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:26 2013 -0700" }, "message": "USB: xhci: correctly enable interrupts\n\ncommit 00eed9c814cb8f281be6f0f5d8f45025dc0a97eb upstream.\n\nxhci has its own interrupt enabling routine, which will try to\nuse MSI-X/MSI if present. So the usb core shouldn\u0027t try to enable\nlegacy interrupts; on some machines the xhci legacy IRQ setting\nis invalid.\n\nv3: Be careful to not break XHCI_BROKEN_MSI workaround (by trenn)\n\nCc: Bjorn Helgaas \u003cbhelgaas@google.com\u003e\nCc: Oliver Neukum \u003coneukum@suse.de\u003e\nCc: Thomas Renninger \u003ctrenn@suse.de\u003e\nCc: Yinghai Lu \u003cyinghai@kernel.org\u003e\nCc: Frederik Himpe \u003cfhimpe@vub.ac.be\u003e\nCc: David Haerdeman \u003cdavid@hardeman.nu\u003e\nCc: Alan Stern \u003cstern@rowland.harvard.edu\u003e\nAcked-by: Sarah Sharp \u003csarah.a.sharp@linux.intel.com\u003e\nReviewed-by: Thomas Renninger \u003ctrenn@suse.de\u003e\nSigned-off-by: Hannes Reinecke \u003chare@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "31e8d29ccf1844a84b7c07d511e6a92d9f99cc11", "tree": "512ab2a07fda6dcab2357bb2cd0aafc20a709c72", "parents": [ "56d833d3ed356e861ede0dd1c530ed5185d1215e" ], "author": { "name": "Dmitry Torokhov", "email": "dtor@vmware.com", "time": "Mon Feb 25 10:56:01 2013 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:26 2013 -0700" }, "message": "USB: xhci - fix bit definitions for IMAN register\n\ncommit f8264340e694604863255cc0276491d17c402390 upstream.\n\nAccording to XHCI specification (5.5.2.1) the IP is bit 0 and IE is bit 1\nof IMAN register. Previously their definitions were reversed.\n\nEven though there are no ill effects being observed from the swapped\ndefinitions (because IMAN_IP is RW1C and in legacy PCI case we come in\nwith it already set to 1 so it was clearing itself even though we were\nsetting IMAN_IE instead of IMAN_IP), we should still correct the values.\n\nThis patch should be backported to kernels as old as 2.6.36, that\ncontain the commit 4e833c0b87a30798e67f06120cecebef6ee9644c \"xhci: don\u0027t\nre-enable IE constantly\".\n\nSigned-off-by: Dmitry Torokhov \u003cdtor@vmware.com\u003e\nSigned-off-by: Sarah Sharp \u003csarah.a.sharp@linux.intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "56d833d3ed356e861ede0dd1c530ed5185d1215e", "tree": "4326ea27fad104c1f2283cba42f9527c448a02cd", "parents": [ "8d96fcec68c30196fca01a75a911835c7b89a50d" ], "author": { "name": "CQ Tang", "email": "cq.tang@intel.com", "time": "Mon Mar 18 11:02:21 2013 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:26 2013 -0700" }, "message": "x86-64: Fix the failure case in copy_user_handle_tail()\n\ncommit 66db3feb486c01349f767b98ebb10b0c3d2d021b upstream.\n\nThe increment of \"to\" in copy_user_handle_tail() will have incremented\nbefore a failure has been noted. This causes us to skip a byte in the\nfailure case.\n\nOnly do the increment when assured there is no failure.\n\nSigned-off-by: CQ Tang \u003ccq.tang@intel.com\u003e\nLink: http://lkml.kernel.org/r/20130318150221.8439.993.stgit@phlsvslse11.ph.intel.com\nSigned-off-by: Mike Marciniszyn \u003cmike.marciniszyn@intel.com\u003e\nSigned-off-by: H. Peter Anvin \u003chpa@linux.intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "8d96fcec68c30196fca01a75a911835c7b89a50d", "tree": "1a5524de1f2dda9b4426e941f7955eb854d8bc22", "parents": [ "3d2e7424b3e18dc851a4b0efdc6676c09573f55f" ], "author": { "name": "Mark Rutland", "email": "mark.rutland@arm.com", "time": "Thu Mar 07 15:09:24 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:26 2013 -0700" }, "message": "clockevents: Don\u0027t allow dummy broadcast timers\n\ncommit a7dc19b8652c862d5b7c4d2339bd3c428bd29c4a upstream.\n\nCurrently tick_check_broadcast_device doesn\u0027t reject clock_event_devices\nwith CLOCK_EVT_FEAT_DUMMY, and may select them in preference to real\nhardware if they have a higher rating value. In this situation, the\ndummy timer is responsible for broadcasting to itself, and the core\nclockevents code may attempt to call non-existent callbacks for\nprogramming the dummy, eventually leading to a panic.\n\nThis patch makes tick_check_broadcast_device always reject dummy timers,\npreventing this problem.\n\nSigned-off-by: Mark Rutland \u003cmark.rutland@arm.com\u003e\nCc: linux-arm-kernel@lists.infradead.org\nCc: Jon Medhurst (Tixy) \u003ctixy@linaro.org\u003e\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "3d2e7424b3e18dc851a4b0efdc6676c09573f55f", "tree": "9c0dd1a30c9bf41f9e8a87541cc94ea967843af3", "parents": [ "2bb5c2c93a427a90c06b1c6b050642774912e7c8" ], "author": { "name": "Mike Marciniszyn", "email": "mike.marciniszyn@intel.com", "time": "Tue Feb 26 15:46:27 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:25 2013 -0700" }, "message": "IPoIB: Fix send lockup due to missed TX completion\n\ncommit 1ee9e2aa7b31427303466776f455d43e5e3c9275 upstream.\n\nCommit f0dc117abdfa (\"IPoIB: Fix TX queue lockup with mixed UD/CM\ntraffic\") attempts to solve an issue where unprocessed UD send\ncompletions can deadlock the netdev.\n\nThe patch doesn\u0027t fully resolve the issue because if more than half\nthe tx_outstanding\u0027s were UD and all of the destinations are RC\nreachable, arming the CQ doesn\u0027t solve the issue.\n\nThis patch uses the IB_CQ_REPORT_MISSED_EVENTS on the\nib_req_notify_cq(). If the rc is above 0, the UD send cq completion\ncallback is called directly to re-arm the send completion timer.\n\nThis issue is seen in very large parallel filesystem deployments\nand the patch has been shown to correct the issue.\n\nReviewed-by: Dean Luick \u003cdean.luick@intel.com\u003e\nSigned-off-by: Mike Marciniszyn \u003cmike.marciniszyn@intel.com\u003e\nSigned-off-by: Roland Dreier \u003croland@purestorage.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "2bb5c2c93a427a90c06b1c6b050642774912e7c8", "tree": "6af2c488a661e553f245539060bf357899f23863", "parents": [ "120c3558614078cbde7fb0d40a3e7db2d63b660b" ], "author": { "name": "Theodore Ts\u0027o", "email": "tytso@mit.edu", "time": "Wed Mar 20 09:42:11 2013 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:25 2013 -0700" }, "message": "ext4: fix data\u003djournal fast mount/umount hang\n\ncommit 2b405bfa84063bfa35621d2d6879f52693c614b0 upstream.\n\nIn data\u003djournal mode, if we unmount the file system before a\ntransaction has a chance to complete, when the journal inode is being\nevicted, we can end up calling into jbd2_log_wait_commit() for the\nlast transaction, after the journalling machinery has been shut down.\n\nArguably we should adjust ext4_should_journal_data() to return FALSE\nfor the journal inode, but the only place it matters is\next4_evict_inode(), and so to save a bit of CPU time, and to make the\npatch much more obviously correct by inspection(tm), we\u0027ll fix it by\nexplicitly not trying to waiting for a journal commit when we are\nevicting the journal inode, since it\u0027s guaranteed to never succeed in\nthis case.\n\nThis can be easily replicated via:\n\n mount -t ext4 -o data\u003djournal /dev/vdb /vdb ; umount /vdb\n\n------------[ cut here ]------------\nWARNING: at /usr/projects/linux/ext4/fs/jbd2/journal.c:542 __jbd2_log_start_commit+0xba/0xcd()\nHardware name: Bochs\nJBD2: bad log_start_commit: 3005630206 3005630206 0 0\nModules linked in:\nPid: 2909, comm: umount Not tainted 3.8.0-rc3 #1020\nCall Trace:\n [\u003cc015c0ef\u003e] warn_slowpath_common+0x68/0x7d\n [\u003cc02b7e7d\u003e] ? __jbd2_log_start_commit+0xba/0xcd\n [\u003cc015c177\u003e] warn_slowpath_fmt+0x2b/0x2f\n [\u003cc02b7e7d\u003e] __jbd2_log_start_commit+0xba/0xcd\n [\u003cc02b8075\u003e] jbd2_log_start_commit+0x24/0x34\n [\u003cc0279ed5\u003e] ext4_evict_inode+0x71/0x2e3\n [\u003cc021f0ec\u003e] evict+0x94/0x135\n [\u003cc021f9aa\u003e] iput+0x10a/0x110\n [\u003cc02b7836\u003e] jbd2_journal_destroy+0x190/0x1ce\n [\u003cc0175284\u003e] ? bit_waitqueue+0x50/0x50\n [\u003cc028d23f\u003e] ext4_put_super+0x52/0x294\n [\u003cc020efe3\u003e] generic_shutdown_super+0x48/0xb4\n [\u003cc020f071\u003e] kill_block_super+0x22/0x60\n [\u003cc020f3e0\u003e] deactivate_locked_super+0x22/0x49\n [\u003cc020f5d6\u003e] deactivate_super+0x30/0x33\n [\u003cc0222795\u003e] mntput_no_expire+0x107/0x10c\n [\u003cc02233a7\u003e] sys_umount+0x2cf/0x2e0\n [\u003cc02233ca\u003e] sys_oldumount+0x12/0x14\n [\u003cc08096b8\u003e] syscall_call+0x7/0xb\n---[ end trace 6a954cc790501c1f ]---\njbd2_log_wait_commit: error: j_commit_request\u003d-1289337090, tid\u003d0\n\nSigned-off-by: \"Theodore Ts\u0027o\" \u003ctytso@mit.edu\u003e\nReviewed-by: Jan Kara \u003cjack@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "120c3558614078cbde7fb0d40a3e7db2d63b660b", "tree": "0469a09d7e4e3bf763b4070950f4469889d01f6a", "parents": [ "d24f1399d1a527ba8c08df5f5ac96b9bd3c0e1d1" ], "author": { "name": "Dmitry Artamonow", "email": "mad_soft@inbox.ru", "time": "Sat Mar 09 20:30:58 2013 +0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:25 2013 -0700" }, "message": "usb-storage: add unusual_devs entry for Samsung YP-Z3 mp3 player\n\ncommit 29f86e66428ee083aec106cca1748dc63d98ce23 upstream.\n\nDevice stucks on filesystem writes, unless following quirk is passed:\n echo 04e8:5136:m \u003e /sys/module/usb_storage/parameters/quirks\n\nAdd corresponding entry to unusual_devs.h\n\nSigned-off-by: Dmitry Artamonow \u003cmad_soft@inbox.ru\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "d24f1399d1a527ba8c08df5f5ac96b9bd3c0e1d1", "tree": "de24ce49f49d251852ae7deeeaa02090bc97a89f", "parents": [ "ac4f52e0fff3a2b5523655250cc2e7d77ba8c09b" ], "author": { "name": "Zheng Liu", "email": "wenqing.lz@taobao.com", "time": "Sun Mar 10 21:20:23 2013 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:18 2013 -0700" }, "message": "ext4: fix the wrong number of the allocated blocks in ext4_split_extent()\n\ncommit 3a2256702e47f68f921dfad41b1764d05c572329 upstream.\n\nThis commit fixes a wrong return value of the number of the allocated\nblocks in ext4_split_extent. When the length of blocks we want to\nallocate is greater than the length of the current extent, we return a\nwrong number. Let\u0027s see what happens in the following case when we\ncall ext4_split_extent().\n\n map: [48, 72]\n ex: [32, 64, u]\n\n\u0027ex\u0027 will be split into two parts:\n ex1: [32, 47, u]\n ex2: [48, 64, w]\n\n\u0027map-\u003em_len\u0027 is returned from this function, and the value is 24. But\nthe real length is 16. So it should be fixed.\n\nMeanwhile in this commit we use right length of the allocated blocks\nwhen get_reserved_cluster_alloc in ext4_ext_handle_uninitialized_extents\nis called.\n\nSigned-off-by: Zheng Liu \u003cwenqing.lz@taobao.com\u003e\nSigned-off-by: \"Theodore Ts\u0027o\" \u003ctytso@mit.edu\u003e\nCc: Dmitry Monakhov \u003cdmonakhov@openvz.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "ac4f52e0fff3a2b5523655250cc2e7d77ba8c09b", "tree": "94f566e310b0f8eefdbf2237b414b0f03f243760", "parents": [ "056f8c8c85d53311530fd1940a68a390cc615bde" ], "author": { "name": "Jan Kara", "email": "jack@suse.cz", "time": "Mon Mar 11 13:24:56 2013 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:15 2013 -0700" }, "message": "jbd2: fix use after free in jbd2_journal_dirty_metadata()\n\ncommit ad56edad089b56300fd13bb9eeb7d0424d978239 upstream.\n\njbd2_journal_dirty_metadata() didn\u0027t get a reference to journal_head it\nwas working with. This is OK in most of the cases since the journal head\nshould be attached to a transaction but in rare occasions when we are\njournalling data, __ext4_journalled_writepage() can race with\njbd2_journal_invalidatepage() stripping buffers from a page and thus\njournal head can be freed under hands of jbd2_journal_dirty_metadata().\n\nFix the problem by getting own journal head reference in\njbd2_journal_dirty_metadata() (and also in jbd2_journal_set_triggers()\nwhich can possibly have the same issue).\n\nReported-by: Zheng Liu \u003cgnehzuil.liu@gmail.com\u003e\nSigned-off-by: Jan Kara \u003cjack@suse.cz\u003e\nSigned-off-by: \"Theodore Ts\u0027o\" \u003ctytso@mit.edu\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "056f8c8c85d53311530fd1940a68a390cc615bde", "tree": "1bcfcef391c667e43f7153fd23521014f61454d4", "parents": [ "f16d21e7f065a30b48c1149c888a3d75da40061a" ], "author": { "name": "Jeff Layton", "email": "jlayton@redhat.com", "time": "Mon Mar 11 09:52:19 2013 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:15 2013 -0700" }, "message": "cifs: ignore everything in SPNEGO blob after mechTypes\n\ncommit f853c616883a8de966873a1dab283f1369e275a1 upstream.\n\nWe\u0027ve had several reports of people attempting to mount Windows 8 shares\nand getting failures with a return code of -EINVAL. The default sec\u003d\nmode changed recently to sec\u003dntlmssp. With that, we expect and parse a\nSPNEGO blob from the server in the NEGOTIATE reply.\n\nThe current decode_negTokenInit function first parses all of the\nmechTypes and then tries to parse the rest of the negTokenInit reply.\nThe parser however currently expects a mechListMIC or nothing to follow the\nmechTypes, but Windows 8 puts a mechToken field there instead to carry\nsome info for the new NegoEx stuff.\n\nIn practice, we don\u0027t do anything with the fields after the mechTypes\nanyway so I don\u0027t see any real benefit in continuing to parse them.\nThis patch just has the kernel ignore the fields after the mechTypes.\nWe\u0027ll probably need to reinstate some of this if we ever want to support\nNegoEx.\n\nReported-by: Jason Burgess \u003cjason@jacknife2.dns2go.com\u003e\nReported-by: Yan Li \u003celliot.li.tech@gmail.com\u003e\nSigned-off-by: Jeff Layton \u003cjlayton@redhat.com\u003e\nSigned-off-by: Steve French \u003csfrench@us.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "f16d21e7f065a30b48c1149c888a3d75da40061a", "tree": "bc5d7d4c427b33d47b5b229fe5eb1de87ddd155d", "parents": [ "ae7952e88f6cd5e0605501b1662283a6adb6501a" ], "author": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Mar 12 12:53:13 2013 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:14 2013 -0700" }, "message": "drm/radeon/benchmark: make sure bo blit copy exists before using it\n\ncommit fa8d387dc3f62062a6b4afbbb2a3438094fd8584 upstream.\n\nFixes a segfault on asics without a blit callback.\n\nFixes:\nhttps://bugs.freedesktop.org/show_bug.cgi?id\u003d62239\n\nReviewed-by: Michel Dänzer \u003cmichel.daenzer@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "ae7952e88f6cd5e0605501b1662283a6adb6501a", "tree": "8de9a240d869dd8cea816fa410948b40d616bf78", "parents": [ "2cf470d198f3bf272910dff8f039ee77fc61db0c" ], "author": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Fri Mar 08 13:44:15 2013 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:14 2013 -0700" }, "message": "drm/radeon: add support for Richland APUs\n\ncommit e4d170633fde379f39a90f8a5e7eb619b5d1144d upstream.\n\nRichland APUs are a new version of the Trinity APUs\nwith performance and power management improvements.\n\nReviewed-by: Jerome Glisse \u003cjglisse@redhat.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "2cf470d198f3bf272910dff8f039ee77fc61db0c", "tree": "a066dce503e92cda81afdea687cd2e29e0a19a87", "parents": [ "6e8d94de159e7520e6ff1ecaf8419844b93631e7" ], "author": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Fri Mar 08 13:36:54 2013 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:13 2013 -0700" }, "message": "drm/radeon: add Richland pci ids\n\ncommit b75bbaa038ffc426e88ea3df6c4ae11834fc3e4f upstream.\n\nReviewed-by: Jerome Glisse \u003cjglisse@redhat.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "6e8d94de159e7520e6ff1ecaf8419844b93631e7", "tree": "8f6a2bfb1a240d3822937f181a86bce30e2d8e73", "parents": [ "bea7cce4319edd8c15d78833f9b5bb752f997662" ], "author": { "name": "Andy Grover", "email": "agrover@redhat.com", "time": "Mon Mar 04 13:52:09 2013 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:13 2013 -0700" }, "message": "target/iscsi: Fix mutual CHAP auth on big-endian arches\n\ncommit 7ac9ad11b2a5cf77a92b58ee6b672ad2fa155eb1 upstream.\n\nSee https://bugzilla.redhat.com/show_bug.cgi?id\u003d916290\n\nUsed a temp var since we take its address in sg_init_one.\n\nSigned-off-by: Andy Grover \u003cagrover@redhat.com\u003e\nSigned-off-by: Nicholas Bellinger \u003cnab@linux-iscsi.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "bea7cce4319edd8c15d78833f9b5bb752f997662", "tree": "96c435437d49f4448158a1ffb5a5e0dff0523bde", "parents": [ "612dadee15aa0a474309a93f53172920fe93d609" ], "author": { "name": "Wanpeng Li", "email": "liwanp@linux.vnet.ibm.com", "time": "Fri Mar 22 15:04:40 2013 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:12 2013 -0700" }, "message": "mm/hugetlb: fix total hugetlbfs pages count when using memory overcommit accouting\n\ncommit d00285884c0892bb1310df96bce6056e9ce9b9d9 upstream.\n\nhugetlb_total_pages is used for overcommit calculations but the current\nimplementation considers only the default hugetlb page size (which is\neither the first defined hugepage size or the one specified by\ndefault_hugepagesz kernel boot parameter).\n\nIf the system is configured for more than one hugepage size, which is\npossible since commit a137e1cc6d6e (\"hugetlbfs: per mount huge page\nsizes\") then the overcommit estimation done by __vm_enough_memory()\n(resp. shown by meminfo_proc_show) is not precise - there is an\nimpression of more available/allowed memory. This can lead to an\nunexpected ENOMEM/EFAULT resp. SIGSEGV when memory is accounted.\n\nTestcase:\n boot: hugepagesz\u003d1G hugepages\u003d1\n the default overcommit ratio is 50\n before patch:\n\n egrep \u0027CommitLimit\u0027 /proc/meminfo\n CommitLimit: 55434168 kB\n\n after patch:\n\n egrep \u0027CommitLimit\u0027 /proc/meminfo\n CommitLimit: 54909880 kB\n\n[akpm@linux-foundation.org: coding-style tweak]\nSigned-off-by: Wanpeng Li \u003cliwanp@linux.vnet.ibm.com\u003e\nAcked-by: Michal Hocko \u003cmhocko@suse.cz\u003e\nCc: \"Aneesh Kumar K.V\" \u003caneesh.kumar@linux.vnet.ibm.com\u003e\nCc: Hillf Danton \u003cdhillf@gmail.com\u003e\nCc: KAMEZAWA Hiroyuki \u003ckamezawa.hiroyu@jp.fujitsu.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "612dadee15aa0a474309a93f53172920fe93d609", "tree": "96a01369eab66cd5eb8bbe50aeb649d07e108171", "parents": [ "2c5d8164483160f6f280da92e358af16aa966cf1" ], "author": { "name": "Torsten Duwe", "email": "torsten@lst.de", "time": "Sat Mar 23 15:39:34 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:11 2013 -0700" }, "message": "KMS: fix EDID detailed timing frame rate\n\ncommit c19b3b0f6eed552952845e4ad908dba2113d67b4 upstream.\n\nWhen KMS has parsed an EDID \"detailed timing\", it leaves the frame rate\nzeroed. Consecutive (debug-) output of that mode thus yields 0 for\nvsync. This simple fix also speeds up future invocations of\ndrm_mode_vrefresh().\n\nWhile it is debatable whether this qualifies as a -stable fix I\u0027d apply\nit for consistency\u0027s sake; drm_helper_probe_single_connector_modes()\ndoes the same thing already for all probed modes.\n\nSigned-off-by: Torsten Duwe \u003cduwe@lst.de\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "2c5d8164483160f6f280da92e358af16aa966cf1", "tree": "98d4c2c6b7fa428545a4e430aeb88b7f4e5c2b02", "parents": [ "e03f8b87d6b11e8c2f9d31b221d8c536091485af" ], "author": { "name": "Torsten Duwe", "email": "torsten@lst.de", "time": "Sat Mar 23 15:38:22 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:11 2013 -0700" }, "message": "KMS: fix EDID detailed timing vsync parsing\n\ncommit 16dad1d743d31a104a849c8944e6b9eb479f6cd7 upstream.\n\nEDID spreads some values across multiple bytes; bit-fiddling is needed\nto retrieve these. The current code to parse \"detailed timings\" has a\ncut\u0026paste error that results in a vsync offset of at most 15 lines\ninstead of 63.\n\nSee\n\n http://en.wikipedia.org/wiki/EDID\n\nand in the \"EDID Detailed Timing Descriptor\" see bytes 10+11 show why\nthat needs to be a left shift.\n\nSigned-off-by: Torsten Duwe \u003cduwe@lst.de\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "e03f8b87d6b11e8c2f9d31b221d8c536091485af", "tree": "999c254b541d2ed7249c09b8434dfb89ea86116c", "parents": [ "5cec2bb0c7b4d16bb176b6299d4b6dd098c9db24" ], "author": { "name": "Kees Cook", "email": "keescook@chromium.org", "time": "Mon Mar 11 17:31:45 2013 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:10 2013 -0700" }, "message": "drm/i915: bounds check execbuffer relocation count\n\ncommit 3118a4f652c7b12c752f3222af0447008f9b2368 upstream.\n\nIt is possible to wrap the counter used to allocate the buffer for\nrelocation copies. This could lead to heap writing overflows.\n\nCVE-2013-0913\n\nv3: collapse test, improve comment\nv2: move check into validate_exec_list\n\nSigned-off-by: Kees Cook \u003ckeescook@chromium.org\u003e\nReported-by: Pinkie Pie\nReviewed-by: Chris Wilson \u003cchris@chris-wilson.co.uk\u003e\nSigned-off-by: Daniel Vetter \u003cdaniel.vetter@ffwll.ch\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "5cec2bb0c7b4d16bb176b6299d4b6dd098c9db24", "tree": "ff1ef98282ebbd5959338b71a3bc5fbd83e84e67", "parents": [ "5a468a7612955576708aa3890a9e549e6090d35f" ], "author": { "name": "Bing Zhao", "email": "bzhao@marvell.com", "time": "Thu Mar 07 20:00:16 2013 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:08 2013 -0700" }, "message": "mwifiex: fix potential out-of-boundary access to ibss rate table\n\ncommit 5f0fabf84d7b52f979dcbafa3d3c530c60d9a92c upstream.\n\nsmatch found this error:\n\nCHECK drivers/net/wireless/mwifiex/join.c\n drivers/net/wireless/mwifiex/join.c:1121\n mwifiex_cmd_802_11_ad_hoc_join()\n error: testing array offset \u0027i\u0027 after use.\n\nSigned-off-by: Bing Zhao \u003cbzhao@marvell.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "5a468a7612955576708aa3890a9e549e6090d35f", "tree": "d182ba982f7e1ae1e06cda81ea828a1b5c02a419", "parents": [ "b903216e8149bc3a226c2c997f803edcb3d0ff7c" ], "author": { "name": "Larry Finger", "email": "Larry.Finger@lwfinger.net", "time": "Wed Mar 13 10:28:13 2013 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:07 2013 -0700" }, "message": "rtlwifi: rtl8192cu: Fix problem that prevents reassociation\n\ncommit 9437a248e7cac427c898bdb11bd1ac6844a1ead4 upstream.\n\nThe driver was failing to clear the BSSID when a disconnect happened. That\nprevented a reconnection. This problem is reported at\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d789605,\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d866786,\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d906734, and\nhttps://bugzilla.kernel.org/show_bug.cgi?id\u003d46171.\n\nThanks to Jussi Kivilinna for making the critical observation\nthat led to the solution.\n\nReported-by: Jussi Kivilinna \u003cjussi.kivilinna@iki.fi\u003e\nTested-by: Jussi Kivilinna \u003cjussi.kivilinna@iki.fi\u003e\nTested-by: Alessandro Lannocca \u003calessandro.lannocca@gmail.com\u003e\nSigned-off-by: Larry Finger \u003cLarry.Finger@lwfinger.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "b903216e8149bc3a226c2c997f803edcb3d0ff7c", "tree": "7032306a839ec035eda35e0c37454a16b7bb65e3", "parents": [ "52cecaa20589203f08a965af4604acec8a946825" ], "author": { "name": "Larry Finger", "email": "Larry.Finger@lwfinger.net", "time": "Wed Feb 27 14:10:30 2013 -0600" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:07 2013 -0700" }, "message": "rtlwifi: rtl8192cu: Fix schedule while atomic bug splat\n\ncommit 664899786cb49cb52f620e06ac19c0be524a7cfa upstream.\n\nWhen run at debug 3 or higher, rtl8192cu reports a BUG as follows:\n\nBUG: scheduling while atomic: kworker/u:0/5281/0x00000002\nINFO: lockdep is turned off.\nModules linked in: rtl8192cu rtl8192c_common rtlwifi fuse af_packet bnep bluetooth b43 mac80211 cfg80211 ipv6 snd_hda_codec_conexant kvm_amd k\nvm snd_hda_intel snd_hda_codec bcma rng_core snd_pcm ssb mmc_core snd_seq snd_timer snd_seq_device snd i2c_nforce2 sr_mod pcmcia forcedeth i2c_core soundcore\n cdrom sg serio_raw k8temp hwmon joydev ac battery pcmcia_core snd_page_alloc video button wmi autofs4 ext4 mbcache jbd2 crc16 thermal processor scsi_dh_alua\n scsi_dh_hp_sw scsi_dh_rdac scsi_dh_emc scsi_dh ata_generic pata_acpi pata_amd [last unloaded: rtlwifi]\nPid: 5281, comm: kworker/u:0 Tainted: G W 3.8.0-wl+ #119\nCall Trace:\n [\u003cffffffff814531e7\u003e] __schedule_bug+0x62/0x70\n [\u003cffffffff81459af0\u003e] __schedule+0x730/0xa30\n [\u003cffffffff81326e49\u003e] ? usb_hcd_link_urb_to_ep+0x19/0xa0\n [\u003cffffffff8145a0d4\u003e] schedule+0x24/0x70\n [\u003cffffffff814575ec\u003e] schedule_timeout+0x18c/0x2f0\n [\u003cffffffff81459ec0\u003e] ? wait_for_common+0x40/0x180\n [\u003cffffffff8133f461\u003e] ? ehci_urb_enqueue+0xf1/0xee0\n [\u003cffffffff810a579d\u003e] ? trace_hardirqs_on+0xd/0x10\n [\u003cffffffff81459f65\u003e] wait_for_common+0xe5/0x180\n [\u003cffffffff8107d1c0\u003e] ? try_to_wake_up+0x2d0/0x2d0\n [\u003cffffffff8145a08e\u003e] wait_for_completion_timeout+0xe/0x10\n [\u003cffffffff8132ab1c\u003e] usb_start_wait_urb+0x8c/0x100\n [\u003cffffffff8132adf9\u003e] usb_control_msg+0xd9/0x130\n [\u003cffffffffa057dd8d\u003e] _usb_read_sync+0xcd/0x140 [rtlwifi]\n [\u003cffffffffa057de0e\u003e] _usb_read32_sync+0xe/0x10 [rtlwifi]\n [\u003cffffffffa04b0555\u003e] rtl92cu_update_hal_rate_table+0x1a5/0x1f0 [rtl8192cu]\n\nThe cause is a synchronous read from routine rtl92cu_update_hal_rate_table().\nThe resulting output is not critical, thus the debug statement is\ndeleted.\n\nReported-by: Jussi Kivilinna \u003cjussi.kivilinna@mbnet.fi\u003e\nSigned-off-by: Larry Finger \u003cLarry.Finger@lwfinger.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "52cecaa20589203f08a965af4604acec8a946825", "tree": "0e48ffe412192e158f736d6a7ae3b1d896901b52", "parents": [ "1e3b58b64c6574c9c8e299c68c8c4716f8dd3c21" ], "author": { "name": "Steven Rostedt (Red Hat)", "email": "rostedt@goodmis.org", "time": "Wed Mar 13 11:15:19 2013 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:06 2013 -0700" }, "message": "tracing: Fix free of probe entry by calling call_rcu_sched()\n\ncommit 740466bc89ad8bd5afcc8de220f715f62b21e365 upstream.\n\nBecause function tracing is very invasive, and can even trace\ncalls to rcu_read_lock(), RCU access in function tracing is done\nwith preempt_disable_notrace(). This requires a synchronize_sched()\nfor updates and not a synchronize_rcu().\n\nFunction probes (traceon, traceoff, etc) must be freed after\na synchronize_sched() after its entry has been removed from the\nhash. But call_rcu() is used. Fix this by using call_rcu_sched().\n\nAlso fix the usage to use hlist_del_rcu() instead of hlist_del().\n\nSigned-off-by: Steven Rostedt \u003crostedt@goodmis.org\u003e\nCc: Paul McKenney \u003cpaulmck@linux.vnet.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "1e3b58b64c6574c9c8e299c68c8c4716f8dd3c21", "tree": "84e8d63958b4c88068b5f0011160d39f5e305d8e", "parents": [ "74a523fb1759bd3afabf586740041e6d09d731c2" ], "author": { "name": "Steven Rostedt (Red Hat)", "email": "rostedt@goodmis.org", "time": "Tue Mar 12 11:32:32 2013 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:06 2013 -0700" }, "message": "tracing: Fix race in snapshot swapping\n\ncommit 2721e72dd10f71a3ba90f59781becf02638aa0d9 upstream.\n\nAlthough the swap is wrapped with a spin_lock, the assignment\nof the temp buffer used to swap is not within that lock.\nIt needs to be moved into that lock, otherwise two swaps\nhappening on two different CPUs, can end up using the wrong\ntemp buffer to assign in the swap.\n\nLuckily, all current callers of the swap function appear to have\ntheir own locks. But in case something is added that allows two\ndifferent callers to call the swap, then there\u0027s a chance that\nthis race can trigger and corrupt the buffers.\n\nNew code is coming soon that will allow for this race to trigger.\n\nI\u0027ve Cc\u0027d stable, so this bug will not show up if someone backports\none of the changes that can trigger this bug.\n\nSigned-off-by: Steven Rostedt \u003crostedt@goodmis.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "74a523fb1759bd3afabf586740041e6d09d731c2", "tree": "ada097002b7e7d5c9449744a010ddd8758bc05be", "parents": [ "cb8a0948b8cc114aa7d4ff5e787f20d3a77ade0e" ], "author": { "name": "Kees Cook", "email": "keescook@chromium.org", "time": "Mon Mar 11 12:25:19 2013 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:05 2013 -0700" }, "message": "drm/i915: restrict kernel address leak in debugfs\n\ncommit 2563a4524febe8f4a98e717e02436d1aaf672aa2 upstream.\n\nMasks kernel address info-leak in object dumps with the %pK suffix,\nso they cannot be used to target kernel memory corruption attacks if\nthe kptr_restrict sysctl is set.\n\nSigned-off-by: Kees Cook \u003ckeescook@chromium.org\u003e\nSigned-off-by: Daniel Vetter \u003cdaniel.vetter@ffwll.ch\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "cb8a0948b8cc114aa7d4ff5e787f20d3a77ade0e", "tree": "2bdfb39527c8e81e69fa9135f9d783df39075f96", "parents": [ "184f526252cb2a6fd74c96f0d73271992cc04ee6" ], "author": { "name": "Daniel Mack", "email": "zonque@gmail.com", "time": "Tue Mar 19 21:09:25 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:05 2013 -0700" }, "message": "ALSA: snd-usb: mixer: ignore -EINVAL in snd_usb_mixer_controls()\n\ncommit 83ea5d18d74f032a760fecde78c0210f66f7f70c upstream.\n\nCreation of individual mixer controls may fail, but that shouldn\u0027t cause\nthe entire mixer creation to fail. Even worse, if the mixer creation\nfails, that will error out the entire device probing.\n\nAll the functions called by parse_audio_unit() should return -EINVAL if\nthey find descriptors that are unsupported or believed to be malformed,\nso we can safely handle this error code as a non-fatal condition in\nsnd_usb_mixer_controls().\n\nThat fixes a long standing bug which is commonly worked around by\nadding quirks which make the driver ignore entire interfaces. Some of\nthem might now be unnecessary.\n\nSigned-off-by: Daniel Mack \u003czonque@gmail.com\u003e\nReported-and-tested-by: Rodolfo Thomazelli \u003cpe.soberbo@gmail.com\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "184f526252cb2a6fd74c96f0d73271992cc04ee6", "tree": "0cfbe1029efb459aa7278225d18939f297a6c892", "parents": [ "e97814511e1e878eea551d17068a0595b6afba8b" ], "author": { "name": "Daniel Mack", "email": "zonque@gmail.com", "time": "Tue Mar 19 21:09:24 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:05 2013 -0700" }, "message": "ALSA: snd-usb: mixer: propagate errors up the call chain\n\ncommit 4d7b86c98e445b075c2c4c3757eb6d3d6efbe72e upstream.\n\nIn check_input_term() and parse_audio_feature_unit(), propagate the\nerror value that has been returned by a failing function instead of\n-EINVAL. That helps cleaning up the error pathes in the mixer.\n\nSigned-off-by: Daniel Mack \u003czonque@gmail.com\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "e97814511e1e878eea551d17068a0595b6afba8b", "tree": "b00b58084b3c54bfd90210b37bf89e868c30d48a", "parents": [ "184e91c6933115a6a65566561ecc921b9af5f902" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Wed Mar 20 15:42:00 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:04 2013 -0700" }, "message": "ALSA: hda - Fix typo in checking IEC958 emphasis bit\n\ncommit a686fd141e20244ad75f80ad54706da07d7bb90a upstream.\n\nThere is a typo in convert_to_spdif_status() about checking the\nemphasis IEC958 status bit. It should check the given value instead\nof the resultant value.\n\nReported-by: Martin Weishart \u003cmartin.weishart@telosalliance.com\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "184e91c6933115a6a65566561ecc921b9af5f902", "tree": "c6eead197fe0cb2679565ca961b25bfa444a85fc", "parents": [ "46a84dbc74f10d2f855758d809a0b21592bd2b8e" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Mon Mar 18 11:00:44 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:04 2013 -0700" }, "message": "ALSA: hda/cirrus - Fix the digital beep registration\n\ncommit a86b1a2cd2f81f74e815e07f756edd7bc5b6f034 upstream.\n\nThe argument passed to snd_hda_attach_beep_device() is a widget NID\nwhile spec-\u003ebeep_amp holds the composed value for amp controls.\n\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "46a84dbc74f10d2f855758d809a0b21592bd2b8e", "tree": "ea81fff5f3a2fcfc24f3ef4bb73d40b901238d2a", "parents": [ "70a3336df60074b29ac3b546d8fccfbcf7831e95" ], "author": { "name": "Ben Hutchings", "email": "bhutchings@solarflare.com", "time": "Wed Feb 27 16:50:38 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:04 2013 -0700" }, "message": "sfc: Only use TX push if a single descriptor is to be written\n\n[ Upstream commit fae8563b25f73dc584a07bcda7a82750ff4f7672 ]\n\nUsing TX push when notifying the NIC of multiple new descriptors in\nthe ring will very occasionally cause the TX DMA engine to re-use an\nold descriptor. This can result in a duplicated or partly duplicated\npacket (new headers with old data), or an IOMMU page fault. This does\nnot happen when the pushed descriptor is the only one written.\n\nTX push also provides little latency benefit when a packet requires\nmore than one descriptor.\n\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "70a3336df60074b29ac3b546d8fccfbcf7831e95", "tree": "36244b80305c3e89cd34f56e1b09b9e70158eaeb", "parents": [ "bea3099eb4f3f73cc2c311d39ef374eb6aa06f88" ], "author": { "name": "Ben Hutchings", "email": "bhutchings@solarflare.com", "time": "Tue Mar 05 01:03:47 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:12:01 2013 -0700" }, "message": "sfc: Disable soft interrupt handling during efx_device_detach_sync()\n\n[ Upstream commit 35205b211c8d17a8a0b5e8926cb7c73e9a7ef1ad ]\n\nefx_device_detach_sync() locks all TX queues before marking the device\ndetached and thus disabling further TX scheduling. But it can still\nbe interrupted by TX completions which then result in TX scheduling in\nsoft interrupt context. This will deadlock when it tries to acquire\na TX queue lock that efx_device_detach_sync() already acquired.\n\nTo avoid deadlock, we must use netif_tx_{,un}lock_bh().\n\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "bea3099eb4f3f73cc2c311d39ef374eb6aa06f88", "tree": "dbb773c2bdb86cb7a0f842840e879f63dc6f7083", "parents": [ "4b8fd2aa494aff51404a4afa0fe36475fd419b76" ], "author": { "name": "Ben Hutchings", "email": "bhutchings@solarflare.com", "time": "Mon Jan 28 19:01:06 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:56 2013 -0700" }, "message": "sfc: Detach net device when stopping queues for reconfiguration\n\n[ Upstream commit 29c69a4882641285a854d6d03ca5adbba68c0034 ]\n\nWe must only ever stop TX queues when they are full or the net device\nis not \u0027ready\u0027 so far as the net core, and specifically the watchdog,\nis concerned. Otherwise, the watchdog may fire *immediately* if no\npackets have been added to the queue in the last 5 seconds.\n\nThe device is ready if all the following are true:\n\n(a) It has a qdisc\n(b) It is marked present\n(c) It is running\n(d) The link is reported up\n\n(a) and (c) are normally true, and must not be changed by a driver.\n(d) is under our control, but fake link changes may disturb userland.\nThis leaves (b). We already mark the device absent during reset\nand self-test, but we need to do the same during MTU changes and ring\nreallocation. We don\u0027t need to do this when the device is brought\ndown because then (c) is already false.\n\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "4b8fd2aa494aff51404a4afa0fe36475fd419b76", "tree": "7c75b8f2c75aafd361a4bd28b1908efedda7ff63", "parents": [ "56bed2f8e6061b65ce3f9f27df92ac2e1cc2e7e0" ], "author": { "name": "Ben Hutchings", "email": "bhutchings@solarflare.com", "time": "Thu Jan 10 23:51:54 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:56 2013 -0700" }, "message": "sfc: Fix efx_rx_buf_offset() in the presence of swiotlb\n\n[ Upstream commits b590ace09d51cd39744e0f7662c5e4a0d1b5d952 and\n c73e787a8db9117d59b5180baf83203a42ecadca ]\n\nWe assume that the mapping between DMA and virtual addresses is done\non whole pages, so we can find the page offset of an RX buffer using\nthe lower bits of the DMA address. However, swiotlb maps in units of\n2K, breaking this assumption.\n\nAdd an explicit page_offset field to struct efx_rx_buffer.\n\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "56bed2f8e6061b65ce3f9f27df92ac2e1cc2e7e0", "tree": "26d2908359f31e8d1422e49a44702e9838d913d0", "parents": [ "41ade8ee0d52f9e02d05cb1b1c376445d5ec3689" ], "author": { "name": "Ben Hutchings", "email": "bhutchings@solarflare.com", "time": "Thu Dec 20 18:48:20 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:56 2013 -0700" }, "message": "sfc: Properly sync RX DMA buffer when it is not the last in the page\n\n[ Upstream commit 3a68f19d7afb80f548d016effbc6ed52643a8085 ]\n\nWe may currently allocate two RX DMA buffers to a page, and only unmap\nthe page when the second is completed. We do not sync the first RX\nbuffer to be completed; this can result in packet loss or corruption\nif the last RX buffer completed in a NAPI poll is the first in a page\nand is not DMA-coherent. (In the middle of a NAPI poll, we will\nhandle the following RX completion and unmap the page *before* looking\nat the content of the first buffer.)\n\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\n[bwh: Backported to 3.4: adjust context]\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "41ade8ee0d52f9e02d05cb1b1c376445d5ec3689", "tree": "08a2dc840f4dad15b0f618bb097a8ec893caec05", "parents": [ "2672f1c1e7d1e5132fc102fdcb98e44320c1e65b" ], "author": { "name": "Ben Hutchings", "email": "bhutchings@solarflare.com", "time": "Sat Dec 01 01:55:27 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:56 2013 -0700" }, "message": "sfc: Correctly initialise reset_method in siena_test_chip()\n\n[ Upstream commit ef492f11efed9a6a1686bf914fb74468df59385c ]\n\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "2672f1c1e7d1e5132fc102fdcb98e44320c1e65b", "tree": "a00af1e90113ff4e0285454db3201e94dd002046", "parents": [ "ab2c550664153268b7500355dfeab7d7f9c2de98" ], "author": { "name": "Ben Hutchings", "email": "bhutchings@solarflare.com", "time": "Wed Sep 19 02:53:34 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:55 2013 -0700" }, "message": "sfc: Avoid generating over-length MC_CMD_FLUSH_RX_QUEUES request\n\n[ Upstream commit 450783747f42dfa3883920acfad4acdd93ce69af ]\n\nMCDI supports requests up to 252 bytes long, which is only enough to\npass 63 RX queue IDs to MC_CMD_FLUSH_RX_QUEUES. However a VF may have\nup to 64 RX queues, and if we try to flush them all we will generate\nan over-length request and BUG() in efx_mcdi_copyin(). Currently\nall VF drivers limit themselves to 32 RX queues, so reducing the\nlimit to 63 does no harm.\n\nAlso add a BUILD_BUG_ON in efx_mcdi_flush_rxqs() so we remember to\ndeal with the same problem there if EFX_MAX_CHANNELS is increased.\n\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "ab2c550664153268b7500355dfeab7d7f9c2de98", "tree": "4e1ce0e8acbaa67c0308db351aa03b72f6d683c9", "parents": [ "3ad735c406aa1b411dd55b354410f8751a9e16e5" ], "author": { "name": "Ben Hutchings", "email": "bhutchings@solarflare.com", "time": "Wed Jul 04 03:58:33 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:55 2013 -0700" }, "message": "sfc: Disable VF queues during register self-test\n\n[ Upstream commit d4f2cecce138c34960c467d0ae38a6d4bcd6af7b ]\n\nCurrently VF queues and drivers may remain active during this test.\nThis could cause memory corruption or spurious test failures.\nTherefore we reset the port/function before running these tests on\nSiena.\n\nOn Falcon this doesn\u0027t work: we have to do some additional\ninitialisation before some blocks will work again. So refactor the\nreset/register-test sequence into an efx_nic_type method so\nefx_selftest() doesn\u0027t have to consider such quirks.\n\nIn the process, fix another minor bug: Siena does not have an\n\u0027invisible\u0027 reset and the self-test currently fails to push the PHY\nconfiguration after resetting. Passing RESET_TYPE_ALL to\nefx_reset_{down,up}() fixes this.\n\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "3ad735c406aa1b411dd55b354410f8751a9e16e5", "tree": "71626c37080a7ae6aa612542abf69b0c1a8fa533", "parents": [ "54ad9a8b55456fc16e326f79f9038a213a2df4c4" ], "author": { "name": "Ben Hutchings", "email": "bhutchings@solarflare.com", "time": "Sat Dec 01 02:21:17 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:55 2013 -0700" }, "message": "sfc: Fix timekeeping in efx_mcdi_poll()\n\n[ Upstream commit ebf98e797b4e26ad52ace1511a0b503ee60a6cd4 ]\n\nefx_mcdi_poll() uses get_seconds() to read the current time and to\nimplement a polling timeout. The use of this function was chosen\npartly because it could easily be replaced in a co-sim environment\nwith a macro that read the simulated time.\n\nUnfortunately the real get_seconds() returns the system time (real\ntime) which is subject to adjustment by e.g. ntpd. If the system time\nis adjusted forward during a polled MCDI operation, the effective\ntimeout can be shorter than the intended 10 seconds, resulting in a\nspurious failure. It is also possible for a backward adjustment to\ndelay detection of a areal failure.\n\nUse jiffies instead, and change MCDI_RPC_TIMEOUT to be denominated in\njiffies. Also correct rounding of the timeout: check time \u003e finish\n(or rather time_after(time, finish)) and not time \u003e\u003d finish.\n\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "54ad9a8b55456fc16e326f79f9038a213a2df4c4", "tree": "409d00b4ace296d5b1a759304b4031a1b8216681", "parents": [ "e0992b773dfaea1798272b1c4f6d4c4e90e9da84" ], "author": { "name": "Daniel Pieczko", "email": "dpieczko@solarflare.com", "time": "Wed Oct 17 13:21:23 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:55 2013 -0700" }, "message": "sfc: lock TX queues when calling netif_device_detach()\n\n[ Upstream commit c2f3b8e3a44b6fe9e36704e30157ebe1a88c08b1 ]\n\nThe assertion of netif_device_present() at the top of\nefx_hard_start_xmit() may fail if we don\u0027t do this.\n\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\n[bwh: Backported to 3.4: adjust context]\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "e0992b773dfaea1798272b1c4f6d4c4e90e9da84", "tree": "a221aee8df9c65a8a5959409b83faa5b90e5b9bf", "parents": [ "6099070d08794324beda3cf25651401fd8261dd1" ], "author": { "name": "Daniel Pieczko", "email": "dpieczko@solarflare.com", "time": "Tue Oct 02 13:36:18 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:55 2013 -0700" }, "message": "sfc: Work-around flush timeout when flushes have completed\n\n[ Upstream commit 525d9e824018cd7cc8d8d44832ddcd363abfe6e1 ]\n\nWe sometimes hit a \"failed to flush\" timeout on some TX queues, but the\nflushes have completed and the flush completion events seem to go missing.\nIn this case, we can check the TX_DESC_PTR_TBL register and drain the\nqueues if the flushes had finished.\n\n[bwh: Minor fixes to coding style]\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "6099070d08794324beda3cf25651401fd8261dd1", "tree": "459e1e843b0f46dbcd36dd7f310c70cc919a3eb1", "parents": [ "4d64cdba19f7c0d4c7fa15671b2817cfc5ebc643" ], "author": { "name": "Ben Hutchings", "email": "bhutchings@solarflare.com", "time": "Thu Sep 06 16:52:31 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:55 2013 -0700" }, "message": "sfc: Really disable flow control while flushing\n\n[ Upstream commit d5e8cc6c946e0857826dcfbb3585068858445bfe ]\n\nReceiving pause frames can block TX queue flushes. Earlier changes\nwork around this by reconfiguring the MAC during flushes for VFs, but\nduring flushes for the PF we would only change the fc_disable counter.\nUnless the MAC is reconfigured for some other reason during the flush\n(which I would not expect to happen) this had no effect at all.\n\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "4d64cdba19f7c0d4c7fa15671b2817cfc5ebc643", "tree": "710d63c4996e9df3fd95f95544ce90b3707e697b", "parents": [ "9a17de12d2b4c4c9cb5b1414fade61f8e9561625" ], "author": { "name": "Ben Hutchings", "email": "bhutchings@solarflare.com", "time": "Tue Sep 11 21:46:41 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:54 2013 -0700" }, "message": "sfc: Fix MCDI structure field lookup\n\n[ Upstream commit 0a6e5008a9df678b48f8d4e57601aa4270df6c14 ]\n\nThe least significant bit number (LBN) of a field within an MCDI\nstructure is counted from the start of the structure, not the\ncontaining dword. In MCDI_ARRAY_FIELD() we need to mask it rather\nthan using the usual EFX_DWORD_FIELD() macro.\n\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "9a17de12d2b4c4c9cb5b1414fade61f8e9561625", "tree": "259fde9d1d8d1bf2f98c6c24227e69dfae32ef5b", "parents": [ "0f1ac29892c257ef9d13e317163d6761fe24a389" ], "author": { "name": "Ben Hutchings", "email": "bhutchings@solarflare.com", "time": "Tue Sep 11 21:37:36 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:54 2013 -0700" }, "message": "sfc: Add parentheses around use of bitfield macro arguments\n\n[ Upstream commit 9724a8504c875145f5a513bb8eca50671cee23b4 ]\n\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "0f1ac29892c257ef9d13e317163d6761fe24a389", "tree": "a9497df451254ea34b95a48af2d8d31b2f98340a", "parents": [ "be29fc5aa4a60b212066a28c0137236711486ec1" ], "author": { "name": "Ben Hutchings", "email": "bhutchings@solarflare.com", "time": "Fri Sep 07 00:58:10 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:54 2013 -0700" }, "message": "sfc: Convert firmware subtypes to native byte order in efx_mcdi_get_board_cfg()\n\n[ Upstream commit bfeed902946a31692e7a24ed355b6d13ac37d014 ]\n\nOn big-endian systems the MTD partition names currently have mangled\nsubtype numbers and are not recognised by the firmware update tool\n(sfupdate).\n\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "be29fc5aa4a60b212066a28c0137236711486ec1", "tree": "8d7c27afbd9a38cb427ec8c51c2bb21dbec1f1b5", "parents": [ "1280938465132080915aef414a1f40f62831bab9" ], "author": { "name": "Stuart Hodgson", "email": "smhodgson@solarflare.com", "time": "Fri Mar 30 13:04:51 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:54 2013 -0700" }, "message": "sfc: Do not attempt to flush queues if DMA is disabled\n\n[ Upstream commit 3dca9d2dc285faf1910d405b65df845cab061356 ]\n\nefx_nic_fatal_interrupt() disables DMA before scheduling a reset.\nAfter this, we need not and *cannot* flush queues.\n\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "1280938465132080915aef414a1f40f62831bab9", "tree": "a2055fce3874fea9ddec94d17658e7d3ec18dc66", "parents": [ "05bec9da3978124bde3b40bfa0404760f45aa399" ], "author": { "name": "Hannes Frederic Sowa", "email": "hannes@stressinduktion.org", "time": "Fri Mar 15 11:32:30 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:54 2013 -0700" }, "message": "inet: limit length of fragment queue hash table bucket lists\n\n[ Upstream commit 5a3da1fe9561828d0ca7eca664b16ec2b9bf0055 ]\n\nThis patch introduces a constant limit of the fragment queue hash\ntable bucket list lengths. Currently the limit 128 is choosen somewhat\narbitrary and just ensures that we can fill up the fragment cache with\nempty packets up to the default ip_frag_high_thresh limits. It should\njust protect from list iteration eating considerable amounts of cpu.\n\nIf we reach the maximum length in one hash bucket a warning is printed.\nThis is implemented on the caller side of inet_frag_find to distinguish\nbetween the different users of inet_fragment.c.\n\nI dropped the out of memory warning in the ipv4 fragment lookup path,\nbecause we already get a warning by the slab allocator.\n\nCc: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nCc: Jesper Dangaard Brouer \u003cjbrouer@redhat.com\u003e\nSigned-off-by: Hannes Frederic Sowa \u003channes@stressinduktion.org\u003e\nAcked-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "05bec9da3978124bde3b40bfa0404760f45aa399", "tree": "0fd1cf90efad6fd3ca2f00862eaae47a1bfce229", "parents": [ "c2abe8ada7b63b6ede9c80e615fdbc97dde2e2e2" ], "author": { "name": "Maciej Żenczykowski", "email": "maze@google.com", "time": "Fri Mar 15 11:56:17 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:54 2013 -0700" }, "message": "bnx2x: fix occasional statistics off-by-4GB error\n\n[ Upstream commit b009aac12cd0fe34293c68af8ac48b85be3bd858 ]\n\nThe UPDATE_QSTAT function introduced on February 15, 2012\nin commit 1355b704b9ba \"bnx2x: consistent statistics after\ninternal driver reload\" incorrectly fails to handle overflow\nduring addition of the lower 32-bit field of a stat.\n\nThis bug is present since 3.4-rc1 and should thus be considered\na candidate for stable 3.4+ releases.\n\nGoogle-Bug-Id: 8374428\nSigned-off-by: Maciej Żenczykowski \u003cmaze@google.com\u003e\nCc: Mintz Yuval \u003cyuvalmin@broadcom.com\u003e\nAcked-by: Eilon Greenstein \u003ceilong@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "c2abe8ada7b63b6ede9c80e615fdbc97dde2e2e2", "tree": "9002f32dd5e99c50d8176ea88d0bfe271eba1162", "parents": [ "08ebc8f4c0acb1e9a104e66fdc2bb5b4e29171f5" ], "author": { "name": "Michael S. Tsirkin", "email": "mst@redhat.com", "time": "Sun Mar 17 02:46:09 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:54 2013 -0700" }, "message": "vhost/net: fix heads usage of ubuf_info\n\n[ Upstream commit 46aa92d1ba162b4b3d6b7102440e459d4e4ee255 ]\n\nubuf info allocator uses guest controlled head as an index,\nso a malicious guest could put the same head entry in the ring twice,\nand we will get two callbacks on the same value.\nTo fix use upend_idx which is guaranteed to be unique.\n\nReported-by: Rusty Russell \u003crusty@rustcorp.com.au\u003e\nSigned-off-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nCc: stable@kernel.org\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "08ebc8f4c0acb1e9a104e66fdc2bb5b4e29171f5", "tree": "faa7ef1cf3416911fee70d3f7c8a328fd166ad41", "parents": [ "b6da578e2a610a64e89f2a983f7675eb301c5d35" ], "author": { "name": "Vlad Yasevich", "email": "vyasevic@redhat.com", "time": "Wed Mar 13 04:18:58 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:53 2013 -0700" }, "message": "rtnetlink: Mask the rta_type when range checking\n\n[ Upstream commit a5b8db91442fce9c9713fcd656c3698f1adde1d6 ]\n\nRange/validity checks on rta_type in rtnetlink_rcv_msg() do\nnot account for flags that may be set. This causes the function\nto return -EINVAL when flags are set on the type (for example\nNLA_F_NESTED).\n\nSigned-off-by: Vlad Yasevich \u003cvyasevic@redhat.com\u003e\nAcked-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "b6da578e2a610a64e89f2a983f7675eb301c5d35", "tree": "e9a01ac902578dcb3c0cca6b9126e294d02942a7", "parents": [ "6a2d122cdd939e33279baf351c7cbf12c50eaeb5" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Thu Mar 14 05:40:32 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:53 2013 -0700" }, "message": "tcp: fix skb_availroom()\n\n[ Upstream commit 16fad69cfe4adbbfa813de516757b87bcae36d93 ]\n\nChrome OS team reported a crash on a Pixel ChromeBook in TCP stack :\n\nhttps://code.google.com/p/chromium/issues/detail?id\u003d182056\n\ncommit a21d45726acac (tcp: avoid order-1 allocations on wifi and tx\npath) did a poor choice adding an \u0027avail_size\u0027 field to skb, while\nwhat we really needed was a \u0027reserved_tailroom\u0027 one.\n\nIt would have avoided commit 22b4a4f22da (tcp: fix retransmit of\npartially acked frames) and this commit.\n\nCrash occurs because skb_split() is not aware of the \u0027avail_size\u0027\nmanagement (and should not be aware)\n\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nReported-by: Mukesh Agrawal \u003cquiche@chromium.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "6a2d122cdd939e33279baf351c7cbf12c50eaeb5", "tree": "d33d3ae99144bd170bd0453016fa85b2eae75ad6", "parents": [ "ca42fad953eab535f12b04cea9622b253faebb0b" ], "author": { "name": "Denis V. Lunev", "email": "den@openvz.org", "time": "Wed Mar 13 00:24:15 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:53 2013 -0700" }, "message": "ipv4: fix definition of FIB_TABLE_HASHSZ\n\n[ Upstream commit 5b9e12dbf92b441b37136ea71dac59f05f2673a9 ]\n\na long time ago by the commit\n\n commit 93456b6d7753def8760b423ac6b986eb9d5a4a95\n Author: Denis V. Lunev \u003cden@openvz.org\u003e\n Date: Thu Jan 10 03:23:38 2008 -0800\n\n [IPV4]: Unify access to the routing tables.\n\nthe defenition of FIB_HASH_TABLE size has obtained wrong dependency:\nit should depend upon CONFIG_IP_MULTIPLE_TABLES (as was in the original\ncode) but it was depended from CONFIG_IP_ROUTE_MULTIPATH\n\nThis patch returns the situation to the original state.\n\nThe problem was spotted by Tingwei Liu.\n\nSigned-off-by: Denis V. Lunev \u003cden@openvz.org\u003e\nCC: Tingwei Liu \u003ctingw.liu@gmail.com\u003e\nCC: Alexey Kuznetsov \u003ckuznet@ms2.inr.ac.ru\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "ca42fad953eab535f12b04cea9622b253faebb0b", "tree": "99575f5db9dd65133d270207f58aaa55859f6e5f", "parents": [ "0aa8bf90399754022f547b69e1812abe8bba4c0b" ], "author": { "name": "Xufeng Zhang", "email": "xufeng.zhang@windriver.com", "time": "Thu Mar 07 21:39:37 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:53 2013 -0700" }, "message": "sctp: don\u0027t break the loop while meeting the active_path so as to find the matched transport\n\n[ Upstream commit 2317f449af30073cfa6ec8352e4a65a89e357bdd ]\n\nsctp_assoc_lookup_tsn() function searchs which transport a certain TSN\nwas sent on, if not found in the active_path transport, then go search\nall the other transports in the peer\u0027s transport_addr_list, however, we\nshould continue to the next entry rather than break the loop when meet\nthe active_path transport.\n\nSigned-off-by: Xufeng Zhang \u003cxufeng.zhang@windriver.com\u003e\nAcked-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nAcked-by: Vlad Yasevich \u003cvyasevich@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "0aa8bf90399754022f547b69e1812abe8bba4c0b", "tree": "1a8adaa01451430320715b5b6a1cfc9a5596f511", "parents": [ "147289d28fb7b7c10a9f8a2cd9e274a41fc3f1f6" ], "author": { "name": "Vlad Yasevich", "email": "vyasevich@gmail.com", "time": "Tue Mar 12 15:53:23 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:53 2013 -0700" }, "message": "sctp: Use correct sideffect command in duplicate cookie handling\n\n[ Upstream commit f2815633504b442ca0b0605c16bf3d88a3a0fcea ]\n\nWhen SCTP is done processing a duplicate cookie chunk, it tries\nto delete a newly created association. For that, it has to set\nthe right association for the side-effect processing to work.\nHowever, when it uses the SCTP_CMD_NEW_ASOC command, that performs\nmore work then really needed (like hashing the associationa and\nassigning it an id) and there is no point to do that only to\ndelete the association as a next step. In fact, it also creates\nan impossible condition where an association may be found by\nthe getsockopt() call, and that association is empty. This\ncauses a crash in some sctp getsockopts.\n\nThe solution is rather simple. We simply use SCTP_CMD_SET_ASOC\ncommand that doesn\u0027t have all the overhead and does exactly\nwhat we need.\n\nReported-by: Karl Heiss \u003ckheiss@gmail.com\u003e\nTested-by: Karl Heiss \u003ckheiss@gmail.com\u003e\nCC: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nSigned-off-by: Vlad Yasevich \u003cvyasevich@gmail.com\u003e\nAcked-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "147289d28fb7b7c10a9f8a2cd9e274a41fc3f1f6", "tree": "599c043054fafc533c5ac2e3d4609c56292da52e", "parents": [ "e7778a61fff957a36c0e53fc565df17d68dcbee6" ], "author": { "name": "Nithin Sujir", "email": "nsujir@broadcom.com", "time": "Tue Mar 12 15:32:48 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:53 2013 -0700" }, "message": "tg3: 5715 does not link up when autoneg off\n\n[ Upstream commit 7c6cdead7cc9a99650d15497aae47d7472217eb1 ]\n\nCommit d13ba512cbba7de5d55d7a3b2aae7d83c8921457 (\"tg3: Remove\nSPEED_UNKNOWN checks\") cleaned up the autoneg advertisement by\nremoving some dead code. One effect of this change was that the\nadvertisement register would not be updated if autoneg is turned off.\n\nThis exposed a bug on the 5715 device w.r.t linking. The 5715 defaults\nto advertise only 10Mb Full duplex. But with autoneg disabled, it needs\nthe configured speed enabled in the advertisement register to link up.\n\nThis patch adds the work around to advertise all speeds on the 5715 when\nautoneg is disabled.\n\nReported-by: Marcin Miotk \u003cmarcinmiotk81@gmail.com\u003e\nReviewed-by: Benjamin Li \u003cbenli@broadcom.com\u003e\nSigned-off-by: Nithin Nayak Sujir \u003cnsujir@broadcom.com\u003e\nSigned-off-by: Michael Chan \u003cmchan@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "e7778a61fff957a36c0e53fc565df17d68dcbee6", "tree": "c9a766abdae5ac9803ddc6fe37b5050d600c17d5", "parents": [ "b52f06719c794cc8df5ea871a4fd498ff252210a" ], "author": { "name": "Veaceslav Falico", "email": "vfalico@redhat.com", "time": "Tue Mar 12 06:31:32 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:52 2013 -0700" }, "message": "bonding: don\u0027t call update_speed_duplex() under spinlocks\n\n[ Upstream commit 876254ae2758d50dcb08c7bd00caf6a806571178 ]\n\nbond_update_speed_duplex() might sleep while calling underlying slave\u0027s\nroutines. Move it out of atomic context in bond_enslave() and remove it\nfrom bond_miimon_commit() - it was introduced by commit 546add79, however\nwhen the slave interfaces go up/change state it\u0027s their responsibility to\nfire NETDEV_UP/NETDEV_CHANGE events so that bonding can properly update\ntheir speed.\n\nI\u0027ve tested it on all combinations of ifup/ifdown, autoneg/speed/duplex\nchanges, remote-controlled and local, on (not) MII-based cards. All changes\nare visible.\n\nSigned-off-by: Veaceslav Falico \u003cvfalico@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "b52f06719c794cc8df5ea871a4fd498ff252210a", "tree": "b11aa21e96450bafdd90bfa0fcddb28de5911e87", "parents": [ "7436bcf6158d70346928b9b26568f5bb3213a36f" ], "author": { "name": "Veaceslav Falico", "email": "vfalico@redhat.com", "time": "Mon Mar 11 00:21:48 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:52 2013 -0700" }, "message": "netconsole: don\u0027t call __netpoll_cleanup() while atomic\n\n[ Upstream commit 3f315bef23075ea8a98a6fe4221a83b83456d970 ]\n\n__netpoll_cleanup() is called in netconsole_netdev_event() while holding a\nspinlock. Release/acquire the spinlock before/after it and restart the\nloop. Also, disable the netconsole completely, because we won\u0027t have chance\nafter the restart of the loop, and might end up in a situation where\nnt-\u003eenabled \u003d\u003d 1 and nt-\u003enp.dev \u003d\u003d NULL.\n\nSigned-off-by: Veaceslav Falico \u003cvfalico@redhat.com\u003e\nAcked-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "7436bcf6158d70346928b9b26568f5bb3213a36f", "tree": "a092676a959c4df2bcdd230d0421e3a03f28ffec", "parents": [ "1c93c2e727a02efe7e143c6d6798facbab31d9e1" ], "author": { "name": "David Ward", "email": "david.ward@ll.mit.edu", "time": "Mon Mar 11 10:43:39 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:52 2013 -0700" }, "message": "net/ipv4: Ensure that location of timestamp option is stored\n\n[ Upstream commit 4660c7f498c07c43173142ea95145e9dac5a6d14 ]\n\nThis is needed in order to detect if the timestamp option appears\nmore than once in a packet, to remove the option if the packet is\nfragmented, etc. My previous change neglected to store the option\nlocation when the router addresses were prespecified and Pointer \u003e\nLength. But now the option location is also stored when Flag is an\nunrecognized value, to ensure these option handling behaviors are\nstill performed.\n\nSigned-off-by: David Ward \u003cdavid.ward@ll.mit.edu\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "1c93c2e727a02efe7e143c6d6798facbab31d9e1", "tree": "591d9810e3e174a88446eb11ce43e3815f672830", "parents": [ "3ff89240cd6922f9da638e2cc3012b5f8f01f943" ], "author": { "name": "Tkhai Kirill", "email": "tkhai@yandex.ru", "time": "Sat Feb 23 23:01:15 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:52 2013 -0700" }, "message": "sunsu: Fix panic in case of nonexistent port at \"console\u003dttySY\" cmdline option\n\n[ Upstream commit cb29529ea0030e60ef1bbbf8399a43d397a51526 ]\n\nIf a machine has X (X \u003c 4) sunsu ports and cmdline\noption \"console\u003dttySY\" is passed, where X \u003c Y \u003c\u003d 4,\nthan the following panic happens:\n\nUnable to handle kernel NULL pointer dereference\nTPC: \u003csunsu_console_setup+0x78/0xe0\u003e\nRPC: \u003csunsu_console_setup+0x74/0xe0\u003e\nI7: \u003cregister_console+0x378/0x3e0\u003e\nCall Trace:\n [0000000000453a38] register_console+0x378/0x3e0\n [0000000000576fa0] uart_add_one_port+0x2e0/0x340\n [000000000057af40] su_probe+0x160/0x2e0\n [00000000005b8a4c] platform_drv_probe+0xc/0x20\n [00000000005b6c2c] driver_probe_device+0x12c/0x220\n [00000000005b6da8] __driver_attach+0x88/0xa0\n [00000000005b4df4] bus_for_each_dev+0x54/0xa0\n [00000000005b5a54] bus_add_driver+0x154/0x260\n [00000000005b7190] driver_register+0x50/0x180\n [00000000006d250c] sunsu_init+0x18c/0x1e0\n [00000000006c2668] do_one_initcall+0xe8/0x160\n [00000000006c282c] kernel_init_freeable+0x12c/0x1e0\n [0000000000603764] kernel_init+0x4/0x100\n [0000000000405f64] ret_from_syscall+0x1c/0x2c\n [0000000000000000] (null)\n\n1)Fix the panic;\n2)Increment registered port number every successful\nprobe.\n\nSigned-off-by: Kirill Tkhai \u003ctkhai@yandex.ru\u003e\nCC: David Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "3ff89240cd6922f9da638e2cc3012b5f8f01f943", "tree": "2476e7d3138b5f7b96c313400249df2187833c65", "parents": [ "dbfe0858b24ca63522a8aac435fbca03d358a900" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 14:16:12 2013 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Mar 28 12:11:52 2013 -0700" }, "message": "Revert \"USB: EHCI: don\u0027t check DMA values in QH overlays\"\n\nThis reverts commit 0319f9909ce68a7516dfc8d53400e07168d281a8, which is commit\nfeca7746d5d9e84b105a613b7f3b6ad00d327372 upstream.\n\nIt shouldn\u0027t have gone into this stable release.\n\nCc: Alan Stern \u003cstern@rowland.harvard.edu\u003e\nCc: Joseph Salisbury \u003cjoseph.salisbury@canonical.com\u003e\nCc: Stephen Thirlwall \u003csdt@dr.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "dbfe0858b24ca63522a8aac435fbca03d358a900", "tree": "7f2e8e601ee8752eff5a8f2d9a130cd33adcc945", "parents": [ "7cba6aeae533a95c6f49752c859adadf8439f42b" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:12 2013 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:12 2013 -0700" }, "message": "Linux 3.4.37\n" }, { "commit": "7cba6aeae533a95c6f49752c859adadf8439f42b", "tree": "6e8525229ed45d19aa62a9f323fa724f367ef80d", "parents": [ "32ceecc2587ac7e079f17dbc9d5158928667baad" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Sat Mar 09 09:11:57 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:02 2013 -0700" }, "message": "6lowpan: Fix endianness issue in is_addr_link_local().\n\n[ Upstream commit 9026c4927254f5bea695cc3ef2e255280e6a3011 ]\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "32ceecc2587ac7e079f17dbc9d5158928667baad", "tree": "b2c94f11009103aa536863f880cad60ca8aa653c", "parents": [ "78d3a467490d72c699393947f1e566fa28672947" ], "author": { "name": "Mathias Krause", "email": "minipli@googlemail.com", "time": "Sat Mar 09 05:52:21 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:02 2013 -0700" }, "message": "dcbnl: fix various netlink info leaks\n\n[ Upstream commit 29cd8ae0e1a39e239a3a7b67da1986add1199fc0 ]\n\nThe dcb netlink interface leaks stack memory in various places:\n* perm_addr[] buffer is only filled at max with 12 of the 32 bytes but\n copied completely,\n* no in-kernel driver fills all fields of an IEEE 802.1Qaz subcommand,\n so we\u0027re leaking up to 58 bytes for ieee_ets structs, up to 136 bytes\n for ieee_pfc structs, etc.,\n* the same is true for CEE -- no in-kernel driver fills the whole\n struct,\n\nPrevent all of the above stack info leaks by properly initializing the\nbuffers/structures involved.\n\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "78d3a467490d72c699393947f1e566fa28672947", "tree": "cee705e2e0e50ff854f4e6932d969379776999e2", "parents": [ "47d7ed18c33cc4e9cba603c7ca776c40037ae842" ], "author": { "name": "Mathias Krause", "email": "minipli@googlemail.com", "time": "Sat Mar 09 05:52:20 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:02 2013 -0700" }, "message": "rtnl: fix info leak on RTM_GETLINK request for VF devices\n\n[ Upstream commit 84d73cd3fb142bf1298a8c13fd4ca50fd2432372 ]\n\nInitialize the mac address buffer with 0 as the driver specific function\nwill probably not fill the whole buffer. In fact, all in-kernel drivers\nfill only ETH_ALEN of the MAX_ADDR_LEN bytes, i.e. 6 of the 32 possible\nbytes. Therefore we currently leak 26 bytes of stack memory to userland\nvia the netlink interface.\n\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "47d7ed18c33cc4e9cba603c7ca776c40037ae842", "tree": "9e4ffec7197c072c6d371e28f9b5138de627fd01", "parents": [ "c7a226b6464bfdc67433adcfe9e17b816157af98" ], "author": { "name": "Hannes Frederic Sowa", "email": "hannes@stressinduktion.org", "time": "Fri Mar 08 02:07:23 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:02 2013 -0700" }, "message": "ipv6: stop multicast forwarding to process interface scoped addresses\n\n[ Upstream commit ddf64354af4a702ee0b85d0a285ba74c7278a460 ]\n\nv2:\na) used struct ipv6_addr_props\n\nv3:\na) reverted changes for ipv6_addr_props\n\nv4:\na) do not use __ipv6_addr_needs_scope_id\n\nCc: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: Hannes Frederic Sowa \u003channes@stressinduktion.org\u003e\nAcked-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "c7a226b6464bfdc67433adcfe9e17b816157af98", "tree": "40d3476093756d2d9883f6aac2cc5a93b7eab742", "parents": [ "8c6292ad910d6070a38fda048df788e02b8abe84" ], "author": { "name": "Cristian Bercaru", "email": "B43982@freescale.com", "time": "Fri Mar 08 07:03:38 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:02 2013 -0700" }, "message": "bridging: fix rx_handlers return code\n\n[ Upstream commit 3bc1b1add7a8484cc4a261c3e128dbe1528ce01f ]\n\nThe frames for which rx_handlers return RX_HANDLER_CONSUMED are no longer\ncounted as dropped. They are counted as successfully received by\n\u0027netif_receive_skb\u0027.\n\nThis allows network interface drivers to correctly update their RX-OK and\nRX-DRP counters based on the result of \u0027netif_receive_skb\u0027.\n\nSigned-off-by: Cristian Bercaru \u003cB43982@freescale.com\u003e\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "8c6292ad910d6070a38fda048df788e02b8abe84", "tree": "2df9752c4dc0014a3fd791af6f84d3e4f995c7d4", "parents": [ "e86429f5b4367734a4df8ffa46212d64934c310c" ], "author": { "name": "Paul Moore", "email": "pmoore@redhat.com", "time": "Wed Mar 06 11:45:24 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:01 2013 -0700" }, "message": "netlabel: correctly list all the static label mappings\n\n[ Upstream commits 0c1233aba1e948c37f6dc7620cb7c253fcd71ce9 and\n a6a8fe950e1b8596bb06f2c89c3a1a4bf2011ba9 ]\n\nWhen we have a large number of static label mappings that spill across\nthe netlink message boundary we fail to properly save our state in the\nnetlink_callback struct which causes us to repeat the same listings.\nThis patch fixes this problem by saving the state correctly between\ncalls to the NetLabel static label netlink \"dumpit\" routines.\n\nSigned-off-by: Paul Moore \u003cpmoore@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "e86429f5b4367734a4df8ffa46212d64934c310c", "tree": "33673c48300fb22b64b13f7ac21d6b829b1df85a", "parents": [ "094b503a07c1b2f2c61505c548c4d55c0c297d02" ], "author": { "name": "Vlad Yasevich", "email": "vyasevic@redhat.com", "time": "Thu Mar 07 10:21:48 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:01 2013 -0700" }, "message": "macvlan: Set IFF_UNICAST_FLT flag to prevent unnecessary promisc mode.\n\n[ Upstream commit 87ab7f6f2874f1115817e394a7ed2dea1c72549e ]\n\nMacvlan already supports hw address filters. Set the IFF_UNICAST_FLT\nso that it doesn\u0027t needlesly enter PROMISC mode when macvlans are\nstacked.\n\nSigned-of-by: Vlad Yasevich \u003cvyasevic@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "094b503a07c1b2f2c61505c548c4d55c0c297d02", "tree": "9a3581ddfc1a85105ce6198fc6871bbf9c3d1a90", "parents": [ "8bd2b8faec4d80e2c77645dcfd838d5f79e9e15b" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Wed Mar 06 11:02:37 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:01 2013 -0700" }, "message": "tun: add a missing nf_reset() in tun_net_xmit()\n\n[ Upstream commit f8af75f3517a24838a36eb5797a1a3e60bf9e276 ]\n\nDave reported following crash :\n\ngeneral protection fault: 0000 [#1] SMP\nCPU 2\nPid: 25407, comm: qemu-kvm Not tainted 3.7.9-205.fc18.x86_64 #1 Hewlett-Packard HP Z400 Workstation/0B4Ch\nRIP: 0010:[\u003cffffffffa0399bd5\u003e] [\u003cffffffffa0399bd5\u003e] destroy_conntrack+0x35/0x120 [nf_conntrack]\nRSP: 0018:ffff880276913d78 EFLAGS: 00010206\nRAX: 50626b6b7876376c RBX: ffff88026e530d68 RCX: ffff88028d158e00\nRDX: ffff88026d0d5470 RSI: 0000000000000011 RDI: 0000000000000002\nRBP: ffff880276913d88 R08: 0000000000000000 R09: ffff880295002900\nR10: 0000000000000000 R11: 0000000000000003 R12: ffffffff81ca3b40\nR13: ffffffff8151a8e0 R14: ffff880270875000 R15: 0000000000000002\nFS: 00007ff3bce38a00(0000) GS:ffff88029fc40000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b\nCR2: 00007fd1430bd000 CR3: 000000027042b000 CR4: 00000000000027e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400\nProcess qemu-kvm (pid: 25407, threadinfo ffff880276912000, task ffff88028c369720)\nStack:\n ffff880156f59100 ffff880156f59100 ffff880276913d98 ffffffff815534f7\n ffff880276913db8 ffffffff8151a74b ffff880270875000 ffff880156f59100\n ffff880276913dd8 ffffffff8151a5a6 ffff880276913dd8 ffff88026d0d5470\nCall Trace:\n [\u003cffffffff815534f7\u003e] nf_conntrack_destroy+0x17/0x20\n [\u003cffffffff8151a74b\u003e] skb_release_head_state+0x7b/0x100\n [\u003cffffffff8151a5a6\u003e] __kfree_skb+0x16/0xa0\n [\u003cffffffff8151a666\u003e] kfree_skb+0x36/0xa0\n [\u003cffffffff8151a8e0\u003e] skb_queue_purge+0x20/0x40\n [\u003cffffffffa02205f7\u003e] __tun_detach+0x117/0x140 [tun]\n [\u003cffffffffa022184c\u003e] tun_chr_close+0x3c/0xd0 [tun]\n [\u003cffffffff8119669c\u003e] __fput+0xec/0x240\n [\u003cffffffff811967fe\u003e] ____fput+0xe/0x10\n [\u003cffffffff8107eb27\u003e] task_work_run+0xa7/0xe0\n [\u003cffffffff810149e1\u003e] do_notify_resume+0x71/0xb0\n [\u003cffffffff81640152\u003e] int_signal+0x12/0x17\nCode: 00 00 04 48 89 e5 41 54 53 48 89 fb 4c 8b a7 e8 00 00 00 0f 85 de 00 00 00 0f b6 73 3e 0f b7 7b 2a e8 10 40 00 00 48 85 c0 74 0e \u003c48\u003e 8b 40 28 48 85 c0 74 05 48 89 df ff d0 48 c7 c7 08 6a 3a a0\nRIP [\u003cffffffffa0399bd5\u003e] destroy_conntrack+0x35/0x120 [nf_conntrack]\n RSP \u003cffff880276913d78\u003e\n\nThis is because tun_net_xmit() needs to call nf_reset()\nbefore queuing skb into receive_queue\n\nReported-by: Dave Jones \u003cdavej@redhat.com\u003e\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "8bd2b8faec4d80e2c77645dcfd838d5f79e9e15b", "tree": "9b64b622e7d4f1616e69ee4e6e048ae49d35e406", "parents": [ "6202fe4eec7b98b7391865c8aebe513bc1f14009" ], "author": { "name": "Neal Cardwell", "email": "ncardwell@google.com", "time": "Mon Mar 04 06:23:05 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:01 2013 -0700" }, "message": "tcp: fix double-counted receiver RTT when leaving receiver fast path\n\n[ Upstream commit aab2b4bf224ef8358d262f95b568b8ad0cecf0a0 ]\n\nWe should not update ts_recent and call tcp_rcv_rtt_measure_ts() both\nbefore and after going to step5. That wastes CPU and double-counts the\nreceiver-side RTT sample.\n\nSigned-off-by: Neal Cardwell \u003cncardwell@google.com\u003e\nAcked-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "6202fe4eec7b98b7391865c8aebe513bc1f14009", "tree": "d22e072024d814324cde88bc96d03e2274bf33b1", "parents": [ "2b2066c41aba3032831ff5402bbd3b68ff5b9d47" ], "author": { "name": "Lorenzo Colitti", "email": "lorenzo@google.com", "time": "Sun Mar 03 20:46:46 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:01 2013 -0700" }, "message": "net: ipv6: Don\u0027t purge default router if accept_ra\u003d2\n\n[ Upstream commit 3e8b0ac3e41e3c882222a5522d5df7212438ab51 ]\n\nSetting net.ipv6.conf.\u003cinterface\u003e.accept_ra\u003d2 causes the kernel\nto accept RAs even when forwarding is enabled. However, enabling\nforwarding purges all default routes on the system, breaking\nconnectivity until the next RA is received. Fix this by not\npurging default routes on interfaces that have accept_ra\u003d2.\n\nSigned-off-by: Lorenzo Colitti \u003clorenzo@google.com\u003e\nAcked-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nAcked-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "2b2066c41aba3032831ff5402bbd3b68ff5b9d47", "tree": "900a0dbb2feae815df7e3c1fbad05f56a5c871d8", "parents": [ "136d76de5b72b4a45eec80e4e5ee14f397aa1fed" ], "author": { "name": "Cong Wang", "email": "amwang@redhat.com", "time": "Sun Mar 03 16:18:11 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:01 2013 -0700" }, "message": "rds: limit the size allocated by rds_message_alloc()\n\n[ Upstream commit ece6b0a2b25652d684a7ced4ae680a863af041e0 ]\n\nDave Jones reported the following bug:\n\n\"When fed mangled socket data, rds will trust what userspace gives it,\nand tries to allocate enormous amounts of memory larger than what\nkmalloc can satisfy.\"\n\nWARNING: at mm/page_alloc.c:2393 __alloc_pages_nodemask+0xa0d/0xbe0()\nHardware name: GA-MA78GM-S2H\nModules linked in: vmw_vsock_vmci_transport vmw_vmci vsock fuse bnep dlci bridge 8021q garp stp mrp binfmt_misc l2tp_ppp l2tp_core rfcomm s\nPid: 24652, comm: trinity-child2 Not tainted 3.8.0+ #65\nCall Trace:\n [\u003cffffffff81044155\u003e] warn_slowpath_common+0x75/0xa0\n [\u003cffffffff8104419a\u003e] warn_slowpath_null+0x1a/0x20\n [\u003cffffffff811444ad\u003e] __alloc_pages_nodemask+0xa0d/0xbe0\n [\u003cffffffff8100a196\u003e] ? native_sched_clock+0x26/0x90\n [\u003cffffffff810b2128\u003e] ? trace_hardirqs_off_caller+0x28/0xc0\n [\u003cffffffff810b21cd\u003e] ? trace_hardirqs_off+0xd/0x10\n [\u003cffffffff811861f8\u003e] alloc_pages_current+0xb8/0x180\n [\u003cffffffff8113eaaa\u003e] __get_free_pages+0x2a/0x80\n [\u003cffffffff811934fe\u003e] kmalloc_order_trace+0x3e/0x1a0\n [\u003cffffffff81193955\u003e] __kmalloc+0x2f5/0x3a0\n [\u003cffffffff8104df0c\u003e] ? local_bh_enable_ip+0x7c/0xf0\n [\u003cffffffffa0401ab3\u003e] rds_message_alloc+0x23/0xb0 [rds]\n [\u003cffffffffa04043a1\u003e] rds_sendmsg+0x2b1/0x990 [rds]\n [\u003cffffffff810b21cd\u003e] ? trace_hardirqs_off+0xd/0x10\n [\u003cffffffff81564620\u003e] sock_sendmsg+0xb0/0xe0\n [\u003cffffffff810b2052\u003e] ? get_lock_stats+0x22/0x70\n [\u003cffffffff810b24be\u003e] ? put_lock_stats.isra.23+0xe/0x40\n [\u003cffffffff81567f30\u003e] sys_sendto+0x130/0x180\n [\u003cffffffff810b872d\u003e] ? trace_hardirqs_on+0xd/0x10\n [\u003cffffffff816c547b\u003e] ? _raw_spin_unlock_irq+0x3b/0x60\n [\u003cffffffff816cd767\u003e] ? sysret_check+0x1b/0x56\n [\u003cffffffff810b8695\u003e] ? trace_hardirqs_on_caller+0x115/0x1a0\n [\u003cffffffff81341d8e\u003e] ? trace_hardirqs_on_thunk+0x3a/0x3f\n [\u003cffffffff816cd742\u003e] system_call_fastpath+0x16/0x1b\n---[ end trace eed6ae990d018c8b ]---\n\nReported-by: Dave Jones \u003cdavej@redhat.com\u003e\nCc: Dave Jones \u003cdavej@redhat.com\u003e\nCc: David S. Miller \u003cdavem@davemloft.net\u003e\nCc: Venkat Venkatsubra \u003cvenkat.x.venkatsubra@oracle.com\u003e\nSigned-off-by: Cong Wang \u003camwang@redhat.com\u003e\nAcked-by: Venkat Venkatsubra \u003cvenkat.x.venkatsubra@oracle.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "136d76de5b72b4a45eec80e4e5ee14f397aa1fed", "tree": "80fb7a9d156401590fa78da5bc35d9ea80b8713c", "parents": [ "0530082c3595511fa2bfc1434a5ad809e5ec90a3" ], "author": { "name": "Guillaume Nault", "email": "g.nault@alphalink.fr", "time": "Fri Mar 01 05:02:02 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:01 2013 -0700" }, "message": "l2tp: Restore socket refcount when sendmsg succeeds\n\n[ Upstream commit 8b82547e33e85fc24d4d172a93c796de1fefa81a ]\n\nThe sendmsg() syscall handler for PPPoL2TP doesn\u0027t decrease the socket\nreference counter after successful transmissions. Any successful\nsendmsg() call from userspace will then increase the reference counter\nforever, thus preventing the kernel\u0027s session and tunnel data from\nbeing freed later on.\n\nThe problem only happens when writing directly on L2TP sockets.\nPPP sockets attached to L2TP are unaffected as the PPP subsystem\nuses pppol2tp_xmit() which symmetrically increase/decrease reference\ncounters.\n\nThis patch adds the missing call to sock_put() before returning from\npppol2tp_sendmsg().\n\nSigned-off-by: Guillaume Nault \u003cg.nault@alphalink.fr\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "0530082c3595511fa2bfc1434a5ad809e5ec90a3", "tree": "8ff0366e6bfc136bd5e4f65bce642e22bb4599e5", "parents": [ "51dfcbf53c4cc6b1a65a99f27cec3311531b982b" ], "author": { "name": "Stéphane Marchesin", "email": "marcheu@chromium.org", "time": "Tue Jan 29 19:41:59 2013 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:01 2013 -0700" }, "message": "drm/i915: Increase the RC6p threshold.\n\ncommit 0920a48719f1ceefc909387a64f97563848c7854 upstream.\n\nThis increases GEN6_RC6p_THRESHOLD from 100000 to 150000. For some\nreason this avoids the gen6_gt_check_fifodbg.isra warnings and\nassociated GPU lockups, which makes my ivy bridge machine stable.\n\nSigned-off-by: Stéphane Marchesin \u003cmarcheu@chromium.org\u003e\nAcked-by: Jesse Barnes \u003cjbarnes@virtuousgeek.org\u003e\nSigned-off-by: Daniel Vetter \u003cdaniel.vetter@ffwll.ch\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "51dfcbf53c4cc6b1a65a99f27cec3311531b982b", "tree": "88d86a8dac37766b3e3ab394d8505a869e70733a", "parents": [ "187c2bd82defa4d64910eed4d8c39ac93a984306" ], "author": { "name": "Guo Chao", "email": "yan@linux.vnet.ibm.com", "time": "Thu Feb 21 15:16:49 2013 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:01 2013 -0700" }, "message": "loopdev: remove an user triggerable oops\n\ncommit b1a6650406875b9097a032eed89af50682fe1160 upstream.\n\nWhen loopdev is built as module and we pass an invalid parameter,\nloop_init() will return directly without deregister misc device, which\nwill cause an oops when insert loop module next time because we left some\ngarbage in the misc device list.\n\nTest case:\nsudo modprobe loop max_part\u003d1024\n(failed due to invalid parameter)\nsudo modprobe loop\n(oops)\n\nClean up nicely to avoid such oops.\n\nSigned-off-by: Guo Chao \u003cyan@linux.vnet.ibm.com\u003e\nCc: Alexander Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Guo Chao \u003cyan@linux.vnet.ibm.com\u003e\nCc: M. Hindess \u003chindessm@uk.ibm.com\u003e\nCc: Nikanth Karthikesan \u003cknikanth@suse.de\u003e\nCc: Jens Axboe \u003caxboe@kernel.dk\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\nAcked-by: Jeff Mahoney \u003cjeffm@suse.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "187c2bd82defa4d64910eed4d8c39ac93a984306", "tree": "01c7ae69a8d93c59f5702762afa0acf778b3d3b2", "parents": [ "d72b4f90a2b042136f74a3de50b29d6ce76b5f12" ], "author": { "name": "Guo Chao", "email": "yan@linux.vnet.ibm.com", "time": "Thu Feb 21 15:16:45 2013 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:01 2013 -0700" }, "message": "loopdev: fix a deadlock\n\ncommit 5370019dc2d2c2ff90e95d181468071362934f3a upstream.\n\nbd_mutex and lo_ctl_mutex can be held in different order.\n\nPath #1:\n\nblkdev_open\n blkdev_get\n __blkdev_get (hold bd_mutex)\n lo_open (hold lo_ctl_mutex)\n\nPath #2:\n\nblkdev_ioctl\n lo_ioctl (hold lo_ctl_mutex)\n lo_set_capacity (hold bd_mutex)\n\nLockdep does not report it, because path #2 actually holds a subclass of\nlo_ctl_mutex. This subclass seems creep into the code by mistake. The\npatch author actually just mentioned it in the changelog, see commit\nf028f3b2 (\"loop: fix circular locking in loop_clr_fd()\"), also see:\n\n\thttp://marc.info/?l\u003dlinux-kernel\u0026m\u003d123806169129727\u0026w\u003d2\n\nPath #2 hold bd_mutex to call bd_set_size(), I\u0027ve protected it\nwith i_mutex in a previous patch, so drop bd_mutex at this site.\n\nSigned-off-by: Guo Chao \u003cyan@linux.vnet.ibm.com\u003e\nCc: Alexander Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Guo Chao \u003cyan@linux.vnet.ibm.com\u003e\nCc: M. Hindess \u003chindessm@uk.ibm.com\u003e\nCc: Nikanth Karthikesan \u003cknikanth@suse.de\u003e\nCc: Jens Axboe \u003caxboe@kernel.dk\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\nAcked-by: Jeff Mahoney \u003cjeffm@suse.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "d72b4f90a2b042136f74a3de50b29d6ce76b5f12", "tree": "61006b7819cf5bf3eebe63702f0aa6a8eb095c15", "parents": [ "969ff7dc5423e50938e7b42b59fe1163aced714c" ], "author": { "name": "Guo Chao", "email": "yan@linux.vnet.ibm.com", "time": "Thu Feb 21 15:16:42 2013 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:00 2013 -0700" }, "message": "block: use i_size_write() in bd_set_size()\n\ncommit d646a02a9d44d1421f273ae3923d97b47b918176 upstream.\n\nblkdev_ioctl(GETBLKSIZE) uses i_size_read() to read size of block device.\nIf we update block size directly, reader may see intermediate result in\nsome machines and configurations. Use i_size_write() instead.\n\nSigned-off-by: Guo Chao \u003cyan@linux.vnet.ibm.com\u003e\nCc: Alexander Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Guo Chao \u003cyan@linux.vnet.ibm.com\u003e\nCc: M. Hindess \u003chindessm@uk.ibm.com\u003e\nCc: Nikanth Karthikesan \u003cknikanth@suse.de\u003e\nCc: Jens Axboe \u003caxboe@kernel.dk\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\nAcked-by: Jeff Mahoney \u003cjeffm@suse.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "969ff7dc5423e50938e7b42b59fe1163aced714c", "tree": "ce4ad064d2103322f8b11964f1e089909982a5fc", "parents": [ "81da76ae314c66e32b8c06b0ce155a5b61670dd7" ], "author": { "name": "Ben Hutchings", "email": "ben@decadent.org.uk", "time": "Sat Mar 16 06:32:16 2013 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:00 2013 -0700" }, "message": "hwmon: (sht15) Fix memory leak if regulator_enable() fails\n\nCommit 3e78080f8148 (\u0027hwmon: (sht15) Check return value of\nregulator_enable()\u0027) depends on the use of devm_kmalloc() for automatic\nresource cleanup in the failure cases, which was introduced in 3.7. In\nolder stable branches, explicit cleanup is needed.\n\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nSigned-off-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "81da76ae314c66e32b8c06b0ce155a5b61670dd7", "tree": "360ac46ec63c1a9fed6e2b255a895643b8dab47b", "parents": [ "cb505e2eb68fe9e22afa220bf172f6aa090b7dca" ], "author": { "name": "Dmitry Rogozhkin", "email": "dmitry.v.rogozhkin@intel.com", "time": "Wed Oct 03 17:15:26 2012 +0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:00 2013 -0700" }, "message": "drm/i915: EBUSY status handling added to i915_gem_fault().\n\ncommit e79e0fe380847493266fba557217e2773c61bd1b upstream.\n\nSubsequent threads returning EBUSY from vm_insert_pfn() was not handled\ncorrectly. As a result concurrent access from new threads to\nmmapped data caused SIGBUS.\n\nNote that this fixes i-g-t/tests/gem_threaded_tiled_access.\n\nTested-by: Mika Kuoppala \u003cmika.kuoppala@intel.com\u003e\nSigned-off-by: Dmitry Rogozhkin \u003cdmitry.v.rogozhkin@intel.com\u003e\nReviewed-by: Chris Wilson \u003cchris@chris-wilson.co.uk\u003e\nSigned-off-by: Daniel Vetter \u003cdaniel.vetter@ffwll.ch\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "cb505e2eb68fe9e22afa220bf172f6aa090b7dca", "tree": "d1b25dcc977afffedbca41ee63b331c6f49f1f00", "parents": [ "a40a945f829a2b95d5460491d81061166817e3cb" ], "author": { "name": "Johan Hovold", "email": "jhovold@gmail.com", "time": "Tue Feb 05 14:35:11 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:00 2013 -0700" }, "message": "atmel_lcdfb: fix 16-bpp modes on older SOCs\n\ncommit a79eac7165ed62114e6ca197195aa5060a54f137 upstream.\n\nFix regression introduced by commit 787f9fd23283 (\"atmel_lcdfb: support\n16bit BGR:565 mode, remove unsupported 15bit modes\") which broke 16-bpp\nmodes for older SOCs which use IBGR:555 (msb is intensity) rather\nthan BGR:565.\n\nUse SOC-type to determine the pixel layout.\n\nTested on at91sam9263 and at91sam9g45.\n\nAcked-by: Peter Korsgaard \u003cjacmet@sunsite.dk\u003e\nSigned-off-by: Johan Hovold \u003cjhovold@gmail.com\u003e\nSigned-off-by: Nicolas Ferre \u003cnicolas.ferre@atmel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "a40a945f829a2b95d5460491d81061166817e3cb", "tree": "829e7fb09e5576636361e52b8a54c8c0fbb122be", "parents": [ "59c0110f7ee64a9b5389b8b4fd2ec5feab9c6dc8" ], "author": { "name": "Eric Sandeen", "email": "sandeen@redhat.com", "time": "Sat Mar 09 15:18:39 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:00 2013 -0700" }, "message": "btrfs: use rcu_barrier() to wait for bdev puts at unmount\n\ncommit bc178622d40d87e75abc131007342429c9b03351 upstream.\n\nDoing this would reliably fail with -EBUSY for me:\n\n# mount /dev/sdb2 /mnt/scratch; umount /mnt/scratch; mkfs.btrfs -f /dev/sdb2\n...\nunable to open /dev/sdb2: Device or resource busy\n\nbecause mkfs.btrfs tries to open the device O_EXCL, and somebody still has it.\n\nUsing systemtap to track bdev gets \u0026 puts shows a kworker thread doing a\nblkdev put after mkfs attempts a get; this is left over from the unmount\npath:\n\nbtrfs_close_devices\n\t__btrfs_close_devices\n\t\tcall_rcu(\u0026device-\u003ercu, free_device);\n\t\t\tfree_device\n\t\t\t\tINIT_WORK(\u0026device-\u003ercu_work, __free_device);\n\t\t\t\tschedule_work(\u0026device-\u003ercu_work);\n\nso unmount might complete before __free_device fires \u0026 does its blkdev_put.\n\nAdding an rcu_barrier() to btrfs_close_devices() causes unmount to wait\nuntil all blkdev_put()s are done, and the device is truly free once\nunmount completes.\n\nSigned-off-by: Eric Sandeen \u003csandeen@redhat.com\u003e\nSigned-off-by: Josef Bacik \u003cjbacik@fusionio.com\u003e\nSigned-off-by: Chris Mason \u003cchris.mason@fusionio.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "59c0110f7ee64a9b5389b8b4fd2ec5feab9c6dc8", "tree": "78f1f0031158bd52e529d72e6280c238a7d6b3e2", "parents": [ "8a52ddf504acc488696bdbe7bc4cef7a30a40091" ], "author": { "name": "Heiko Carstens", "email": "heiko.carstens@de.ibm.com", "time": "Mon Mar 04 14:14:11 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:00 2013 -0700" }, "message": "s390/mm: fix flush_tlb_kernel_range()\n\ncommit f6a70a07079518280022286a1dceb797d12e1edf upstream.\n\nOur flush_tlb_kernel_range() implementation calls __tlb_flush_mm() with\n\u0026init_mm as argument. __tlb_flush_mm() however will only flush tlbs\nfor the passed in mm if its mm_cpumask is not empty.\n\nFor the init_mm however its mm_cpumask has never any bits set. Which in\nturn means that our flush_tlb_kernel_range() implementation doesn\u0027t\nwork at all.\n\nThis can be easily verified with a vmalloc/vfree loop which allocates\na page, writes to it and then frees the page again. A crash will follow\nalmost instantly.\n\nTo fix this remove the cpumask_empty() check in __tlb_flush_mm() since\nthere shouldn\u0027t be too many mms with a zero mm_cpumask, besides the\ninit_mm of course.\n\nSigned-off-by: Heiko Carstens \u003cheiko.carstens@de.ibm.com\u003e\nSigned-off-by: Martin Schwidefsky \u003cschwidefsky@de.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "8a52ddf504acc488696bdbe7bc4cef7a30a40091", "tree": "ef37d60b72766c144f0fe15d7189d15ac771e03e", "parents": [ "6bf083ffc825244992274a23017655caee8e4c58" ], "author": { "name": "Martin Schwidefsky", "email": "schwidefsky@de.ibm.com", "time": "Thu Feb 28 16:28:41 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:00 2013 -0700" }, "message": "s390: critical section cleanup vs. machine checks\n\ncommit 6551fbdfd8b85d1ab5822ac98abb4fb449bcfae0 upstream.\n\nThe current machine check code uses the registers stored by the machine\nin the lowcore at __LC_GPREGS_SAVE_AREA as the registers of the interrupted\ncontext. The registers 0-7 of a user process can get clobbered if a machine\nchecks interrupts the execution of a critical section in entry[64].S.\n\nThe reason is that the critical section cleanup code may need to modify\nthe PSW and the registers for the previous context to get to the end of a\ncritical section. If registers 0-7 have to be replaced the relevant copy\nwill be in the registers, which invalidates the copy in the lowcore. The\nmachine check handler needs to explicitly store registers 0-7 to the stack.\n\nSigned-off-by: Martin Schwidefsky \u003cschwidefsky@de.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "6bf083ffc825244992274a23017655caee8e4c58", "tree": "e74f39428f6ed033b83b5e1e227d9883669fee7c", "parents": [ "d7805638b85ce978f7c0cf1ac49204d4288084f6" ], "author": { "name": "David Rientjes", "email": "rientjes@google.com", "time": "Sun Mar 17 15:49:10 2013 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:00 2013 -0700" }, "message": "perf,x86: fix link failure for non-Intel configs\n\ncommit 6c4d3bc99b3341067775efd4d9d13cc8e655fd7c upstream.\n\nCommit 1d9d8639c063 (\"perf,x86: fix kernel crash with PEBS/BTS after\nsuspend/resume\") introduces a link failure since\nperf_restore_debug_store() is only defined for CONFIG_CPU_SUP_INTEL:\n\n\tarch/x86/power/built-in.o: In function `restore_processor_state\u0027:\n\t(.text+0x45c): undefined reference to `perf_restore_debug_store\u0027\n\nFix it by defining the dummy function appropriately.\n\nSigned-off-by: David Rientjes \u003crientjes@google.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "d7805638b85ce978f7c0cf1ac49204d4288084f6", "tree": "07e7e08575d7ab4e3af38f0bac9e1835973491e8", "parents": [ "8c97feb5edd118fe633ed29773c599536d562d43" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 17 15:44:43 2013 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:00 2013 -0700" }, "message": "perf,x86: fix wrmsr_on_cpu() warning on suspend/resume\n\ncommit 2a6e06b2aed6995af401dcd4feb5e79a0c7ea554 upstream.\n\nCommit 1d9d8639c063 (\"perf,x86: fix kernel crash with PEBS/BTS after\nsuspend/resume\") fixed a crash when doing PEBS performance profiling\nafter resuming, but in using init_debug_store_on_cpu() to restore the\nDS_AREA mtrr it also resulted in a new WARN_ON() triggering.\n\ninit_debug_store_on_cpu() uses \"wrmsr_on_cpu()\", which in turn uses CPU\ncross-calls to do the MSR update. Which is not really valid at the\nearly resume stage, and the warning is quite reasonable. Now, it all\nhappens to _work_, for the simple reason that smp_call_function_single()\nends up just doing the call directly on the CPU when the CPU number\nmatches, but we really should just do the wrmsr() directly instead.\n\nThis duplicates the wrmsr() logic, but hopefully we can just remove the\nwrmsr_on_cpu() version eventually.\n\nReported-and-tested-by: Parag Warudkar \u003cparag.lkml@gmail.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "8c97feb5edd118fe633ed29773c599536d562d43", "tree": "95bae3db178398cd3d451efed85c9ee2b69dd1f0", "parents": [ "e55005034b11c0dd52ac08b7f769ec410b6bfa1f" ], "author": { "name": "Dan Carpenter", "email": "dan.carpenter@oracle.com", "time": "Sat Mar 16 12:48:11 2013 +0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:05:00 2013 -0700" }, "message": "selinux: use GFP_ATOMIC under spin_lock\n\ncommit 4502403dcf8f5c76abd4dbab8726c8e4ecb5cd34 upstream.\n\nThe call tree here is:\n\nsk_clone_lock() \u003c- takes bh_lock_sock(newsk);\nxfrm_sk_clone_policy()\n__xfrm_sk_clone_policy()\nclone_policy() \u003c- uses GFP_ATOMIC for allocations\nsecurity_xfrm_policy_clone()\nsecurity_ops-\u003exfrm_policy_clone_security()\nselinux_xfrm_policy_clone()\n\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nSigned-off-by: James Morris \u003cjames.l.morris@oracle.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "e55005034b11c0dd52ac08b7f769ec410b6bfa1f", "tree": "ecb7ca5c21191bb2248c5989f72c5034e28a5dc3", "parents": [ "9d4a6f2cee36dab61a3bd58d1f197f733738995f" ], "author": { "name": "Benjamin Herrenschmidt", "email": "benh@kernel.crashing.org", "time": "Wed Mar 13 09:55:02 2013 +1100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:04:59 2013 -0700" }, "message": "powerpc: Fix cputable entry for 970MP rev 1.0\n\ncommit d63ac5f6cf31c8a83170a9509b350c1489a7262b upstream.\n\nCommit 44ae3ab3358e962039c36ad4ae461ae9fb29596c forgot to update\nthe entry for the 970MP rev 1.0 processor when moving some CPU\nfeatures bits to the MMU feature bit mask. This breaks booting\non some rare G5 models using that chip revision.\n\nReported-by: Phileas Fogg \u003cphileas-fogg@mail.ru\u003e\nSigned-off-by: Benjamin Herrenschmidt \u003cbenh@kernel.crashing.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "9d4a6f2cee36dab61a3bd58d1f197f733738995f", "tree": "75835b0c3a149ef4a17066ce36fe7e6a2f0bdb97", "parents": [ "32f81345140d7f237afba1a26d42a11117a0304e" ], "author": { "name": "Benjamin Herrenschmidt", "email": "benh@kernel.crashing.org", "time": "Wed Mar 13 09:49:06 2013 +1100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:04:59 2013 -0700" }, "message": "powerpc: Fix STAB initialization\n\ncommit 13938117a57f88a22f0df9722a5db7271fda85cd upstream.\n\nCommit f5339277eb8d3aed37f12a27988366f68ab68930 accidentally removed\nmore than just iSeries bits and took out the call to stab_initialize()\nthus breaking support for POWER3 processors.\n\nPut it back. (Yes, nobody noticed until now ...)\n\nSigned-off-by: Benjamin Herrenschmidt \u003cbenh@kernel.crashing.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "32f81345140d7f237afba1a26d42a11117a0304e", "tree": "9a2b49bb4b5a7dbecf92bcd8263cd5857492028d", "parents": [ "dce5c33d7abb21e165722b32c43899457c73106f" ], "author": { "name": "Marcin Jurkowski", "email": "marcin1j@gmail.com", "time": "Sat Mar 02 14:50:15 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:04:59 2013 -0700" }, "message": "w1: fix oops when w1_search is called from netlink connector\n\ncommit 9d1817cab2f030f6af360e961cc69bb1da8ad765 upstream.\n\nOn Sat, Mar 02, 2013 at 10:45:10AM +0100, Sven Geggus wrote:\n\u003e This is the bad commit I found doing git bisect:\n\u003e 04f482faf50535229a5a5c8d629cf963899f857c is the first bad commit\n\u003e commit 04f482faf50535229a5a5c8d629cf963899f857c\n\u003e Author: Patrick McHardy \u003ckaber@trash.net\u003e\n\u003e Date: Mon Mar 28 08:39:36 2011 +0000\n\nGood job. I was too lazy to bisect for bad commit;)\n\nReading the code I found problematic kthread_should_stop call from netlink\nconnector which causes the oops. After applying a patch, I\u0027ve been testing\nowfs+w1 setup for nearly two days and it seems to work very reliable (no\nhangs, no memleaks etc).\nMore detailed description and possible fix is given below:\n\nFunction w1_search can be called from either kthread or netlink callback.\nWhile the former works fine, the latter causes oops due to kthread_should_stop\ninvocation.\n\nThis patch adds a check if w1_search is serving netlink command, skipping\nkthread_should_stop invocation if so.\n\nSigned-off-by: Marcin Jurkowski \u003cmarcin1j@gmail.com\u003e\nAcked-by: Evgeniy Polyakov \u003czbr@ioremap.net\u003e\nCc: Josh Boyer \u003cjwboyer@gmail.com\u003e\nTested-by: Sven Geggus \u003clists@fuchsschwanzdomain.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "dce5c33d7abb21e165722b32c43899457c73106f", "tree": "c6dd866ca0eea137fd1d35a48d434a28d329c18a", "parents": [ "fa5553789ef0bb74434ffedad2fd9e2d994ba92f" ], "author": { "name": "Axel Lin", "email": "axel.lin@ingics.com", "time": "Thu Mar 14 16:27:18 2013 +0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:04:59 2013 -0700" }, "message": "hwmon: (lineage-pem) Add missing terminating entry for pem_[input|fan]_attributes\n\ncommit df069079c153d22adf6c28dcc0b1cf62bba75167 upstream.\n\nSigned-off-by: Axel Lin \u003caxel.lin@ingics.com\u003e\nAcked-by: Jean Delvare \u003ckhali@linux-fr.org\u003e\nSigned-off-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "fa5553789ef0bb74434ffedad2fd9e2d994ba92f", "tree": "42ff70e044b30525c1b358d35b6a394995890ab0", "parents": [ "fe88b8bc2e9e9f97428337582919b41bd7d3d22a" ], "author": { "name": "Guenter Roeck", "email": "linux@roeck-us.net", "time": "Thu Feb 21 10:27:54 2013 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:04:59 2013 -0700" }, "message": "hwmon: (pmbus/ltc2978) Fix temperature reporting\n\ncommit 8c958c703ef8804093437959221951eaf0e1e664 upstream.\n\nOn LTC2978, only READ_TEMPERATURE is supported. It reports\nthe internal junction temperature. This register is unpaged.\n\nOn LTC3880, READ_TEMPERATURE and READ_TEMPERATURE2 are supported.\nREAD_TEMPERATURE is paged and reports external temperatures.\nREAD_TEMPERATURE2 is unpaged and reports the internal junction\ntemperature.\n\nSigned-off-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nAcked-by: Jean Delvare \u003ckhali@linux-fr.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "fe88b8bc2e9e9f97428337582919b41bd7d3d22a", "tree": "7afb49d8f7026eb71976ff75168b7be18f381367", "parents": [ "9a9b01c04ef4b844f64bbf36987f918e64e304a2" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Fri Mar 08 18:11:17 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:04:59 2013 -0700" }, "message": "ALSA: seq: Fix missing error handling in snd_seq_timer_open()\n\ncommit 66efdc71d95887b652a742a5dae51fa834d71465 upstream.\n\nsnd_seq_timer_open() didn\u0027t catch the whole error path but let through\nif the timer id is a slave. This may lead to Oops by accessing the\nuninitialized pointer.\n\n BUG: unable to handle kernel NULL pointer dereference at 00000000000002ae\n IP: [\u003cffffffff819b3477\u003e] snd_seq_timer_open+0xe7/0x130\n PGD 785cd067 PUD 76964067 PMD 0\n Oops: 0002 [#4] SMP\n CPU 0\n Pid: 4288, comm: trinity-child7 Tainted: G D W 3.9.0-rc1+ #100 Bochs Bochs\n RIP: 0010:[\u003cffffffff819b3477\u003e] [\u003cffffffff819b3477\u003e] snd_seq_timer_open+0xe7/0x130\n RSP: 0018:ffff88006ece7d38 EFLAGS: 00010246\n RAX: 0000000000000286 RBX: ffff88007851b400 RCX: 0000000000000000\n RDX: 000000000000ffff RSI: ffff88006ece7d58 RDI: ffff88006ece7d38\n RBP: ffff88006ece7d98 R08: 000000000000000a R09: 000000000000fffe\n R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000\n R13: ffff8800792c5400 R14: 0000000000e8f000 R15: 0000000000000007\n FS: 00007f7aaa650700(0000) GS:ffff88007f800000(0000) GS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00000000000002ae CR3: 000000006efec000 CR4: 00000000000006f0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400\n Process trinity-child7 (pid: 4288, threadinfo ffff88006ece6000, task ffff880076a8a290)\n Stack:\n 0000000000000286 ffffffff828f2be0 ffff88006ece7d58 ffffffff810f354d\n 65636e6575716573 2065756575712072 ffff8800792c0030 0000000000000000\n ffff88006ece7d98 ffff8800792c5400 ffff88007851b400 ffff8800792c5520\n Call Trace:\n [\u003cffffffff810f354d\u003e] ? trace_hardirqs_on+0xd/0x10\n [\u003cffffffff819b17e9\u003e] snd_seq_queue_timer_open+0x29/0x70\n [\u003cffffffff819ae01a\u003e] snd_seq_ioctl_set_queue_timer+0xda/0x120\n [\u003cffffffff819acb9b\u003e] snd_seq_do_ioctl+0x9b/0xd0\n [\u003cffffffff819acbe0\u003e] snd_seq_ioctl+0x10/0x20\n [\u003cffffffff811b9542\u003e] do_vfs_ioctl+0x522/0x570\n [\u003cffffffff8130a4b3\u003e] ? file_has_perm+0x83/0xa0\n [\u003cffffffff810f354d\u003e] ? trace_hardirqs_on+0xd/0x10\n [\u003cffffffff811b95ed\u003e] sys_ioctl+0x5d/0xa0\n [\u003cffffffff813663fe\u003e] ? trace_hardirqs_on_thunk+0x3a/0x3f\n [\u003cffffffff81faed69\u003e] system_call_fastpath+0x16/0x1b\n\nReported-and-tested-by: Tommi Rantala \u003ctt.rantala@gmail.com\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "9a9b01c04ef4b844f64bbf36987f918e64e304a2", "tree": "12cd294a8b45e518c2083f399ef67b22348039df", "parents": [ "75750fc43320a6b2ef9852b3437fa25104add6f6" ], "author": { "name": "Stephane Eranian", "email": "eranian@google.com", "time": "Fri Mar 15 14:26:07 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:04:59 2013 -0700" }, "message": "perf,x86: fix kernel crash with PEBS/BTS after suspend/resume\n\ncommit 1d9d8639c063caf6efc2447f5f26aa637f844ff6 upstream.\n\nThis patch fixes a kernel crash when using precise sampling (PEBS)\nafter a suspend/resume. Turns out the CPU notifier code is not invoked\non CPU0 (BP). Therefore, the DS_AREA (used by PEBS) is not restored properly\nby the kernel and keeps it power-on/resume value of 0 causing any PEBS\nmeasurement to crash when running on CPU0.\n\nThe workaround is to add a hook in the actual resume code to restore\nthe DS Area MSR value. It is invoked for all CPUS. So for all but CPU0,\nthe DS_AREA will be restored twice but this is harmless.\n\nReported-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Stephane Eranian \u003ceranian@google.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "75750fc43320a6b2ef9852b3437fa25104add6f6", "tree": "d4a051b23235706a0abd627799fc15d192017e1c", "parents": [ "3b11e57876950e7530fc9f6122179525000fda20" ], "author": { "name": "Jiri Slaby", "email": "jslaby@suse.cz", "time": "Tue Jan 15 23:26:22 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:04:59 2013 -0700" }, "message": "TTY: do not reset master\u0027s packet mode\n\ncommit b81273a132177edd806476b953f6afeb17b786d5 upstream.\n\nNow that login from util-linux is forced to drop all references to a\nTTY which it wants to hangup (to reach reference count 1) we are\nseeing issues with telnet. When login closes its last reference to the\nslave PTY, it also resets packet mode on the *master* side. And we\nhave a race here.\n\nWhat telnet does is fork+exec of `login\u0027. Then there are two\nscenarios:\n* `login\u0027 closes the slave TTY and resets thus master\u0027s packet mode,\n but even now telnet properly sets the mode, or\n* `telnetd\u0027 sets packet mode on the master, `login\u0027 closes the slave\n TTY and resets master\u0027s packet mode.\n\nThe former case is OK. However the latter happens in much more cases,\nby the order of magnitude to be precise. So when one tries to login to\nsuch a messed telnet setup, they see the following:\ninux login:\n ogin incorrect\n\nNote the missing first letters -- telnet thinks it is still in the\npacket mode, so when it receives \"linux login\" from `login\u0027, it\nconsiders \"l\" as the type of the packet and strips it.\n\nSuS does not mention how the implementation should behave. Both BSDs I\nchecked (Free and Net) do not reset the flag upon the last close.\n\nBy this I am resurrecting an old bug, see References. We are hitting\nit regularly now, i.e. with updated util-linux, ergo login.\n\nHere, I am changing a behavior introduced back in 2.1 times. It would\nbetter have a long time testing before goes upstream.\n\nSigned-off-by: Jiri Slaby \u003cjslaby@suse.cz\u003e\nCc: Mauro Carvalho Chehab \u003cmchehab@redhat.com\u003e\nCc: Bryan Mason \u003cbmason@redhat.com\u003e\nReferences: https://lkml.org/lkml/2009/11/11/223\nReferences: https://bugzilla.redhat.com/show_bug.cgi?id\u003d504703\nReferences: https://bugzilla.novell.com/show_bug.cgi?id\u003d797042\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "3b11e57876950e7530fc9f6122179525000fda20", "tree": "555033dad6b74594078125723909032269c364ad", "parents": [ "d91371bb47c16271e8dcb0da255ab1e0b5d15733" ], "author": { "name": "Paul Bolle", "email": "pebolle@tiscali.nl", "time": "Sat Mar 09 23:16:44 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:04:59 2013 -0700" }, "message": "tty: serial: fix typo \"ARCH_S5P6450\"\n\ncommit 827aa0d36d486f359808c8fb931cf7a71011a09d upstream.\n\nThis could have been either ARCH_S5P64X0 or CPU_S5P6450. Looking at\ncommit 2555e663b367b8d555e76023f4de3f6338c28d6c (\"ARM: S5P64X0: Add UART\nserial support for S5P6450\") - which added this typo - makes clear this\nshould be CPU_S5P6450.\n\nSigned-off-by: Paul Bolle \u003cpebolle@tiscali.nl\u003e\nAcked-by: Kukjin Kim \u003ckgene.kim@samsung.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "d91371bb47c16271e8dcb0da255ab1e0b5d15733", "tree": "4b239aaeadac642d3d1232ee933a2eb910d2f4c5", "parents": [ "e3c51d6b8b4cc278196897e624bc2bdeae8f7798" ], "author": { "name": "Wang YanQing", "email": "udknight@gmail.com", "time": "Fri Mar 01 11:47:20 2013 +0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:04:58 2013 -0700" }, "message": "serial: 8250_pci: add support for another kind of NetMos Technology PCI 9835 Multi-I/O Controller\n\ncommit 8d2f8cd424ca0b99001f3ff4f5db87c4e525f366 upstream.\n\n01:08.0 Communication controller: NetMos Technology PCI 9835 Multi-I/O Controller (rev 01)\n\tSubsystem: Device [1000:0012]\n\tControl: I/O+ Mem+ BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-\n\tStatus: Cap- 66MHz- UDF- FastB2B+ ParErr- DEVSEL\u003dmedium \u003eTAbort- \u003cTAbort- \u003cMAbort- \u003eSERR- \u003cPERR- INTx-\n\tInterrupt: pin A routed to IRQ 20\n\tRegion 0: I/O ports at e050 [size\u003d8]\n\tRegion 1: I/O ports at e040 [size\u003d8]\n\tRegion 2: I/O ports at e030 [size\u003d8]\n\tRegion 3: I/O ports at e020 [size\u003d8]\n\tRegion 4: I/O ports at e010 [size\u003d8]\n\tRegion 5: I/O ports at e000 [size\u003d16]\n\nSigned-off-by: Wang YanQing \u003cudknight@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "e3c51d6b8b4cc278196897e624bc2bdeae8f7798", "tree": "ee6be9f35cdf1cc3ba023b20da1ed9d925850996", "parents": [ "44ddae422775744b49248dff8818a141d3a03820" ], "author": { "name": "Lars-Peter Clausen", "email": "lars@metafoo.de", "time": "Sat Mar 09 15:28:44 2013 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:04:58 2013 -0700" }, "message": "ext3: Fix format string issues\n\ncommit 8d0c2d10dd72c5292eda7a06231056a4c972e4cc upstream.\n\next3_msg() takes the printk prefix as the second parameter and the\nformat string as the third parameter. Two callers of ext3_msg omit the\nprefix and pass the format string as the second parameter and the first\nparameter to the format string as the third parameter. In both cases\nthis string comes from an arbitrary source. Which means the string may\ncontain format string characters, which will\nlead to undefined and potentially harmful behavior.\n\nThe issue was introduced in commit 4cf46b67eb(\"ext3: Unify log messages\nin ext3\") and is fixed by this patch.\n\nSigned-off-by: Lars-Peter Clausen \u003clars@metafoo.de\u003e\nSigned-off-by: Jan Kara \u003cjack@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "44ddae422775744b49248dff8818a141d3a03820", "tree": "22f91f1b83b72fa8cf4c652b70a30ce0ba7f99a9", "parents": [ "a4371b6605f7b6930ba95df316948be6b306be73" ], "author": { "name": "Kees Cook", "email": "keescook@chromium.org", "time": "Wed Mar 13 14:59:33 2013 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:04:58 2013 -0700" }, "message": "signal: always clear sa_restorer on execve\n\ncommit 2ca39528c01a933f6689cd6505ce65bd6d68a530 upstream.\n\nWhen the new signal handlers are set up, the location of sa_restorer is\nnot cleared, leaking a parent process\u0027s address space location to\nchildren. This allows for a potential bypass of the parent\u0027s ASLR by\nexamining the sa_restorer value returned when calling sigaction().\n\nBased on what should be considered \"secret\" about addresses, it only\nmatters across the exec not the fork (since the VMAs haven\u0027t changed\nuntil the exec). But since exec sets SIG_DFL and keeps sa_restorer,\nthis is where it should be fixed.\n\nGiven the few uses of sa_restorer, a \"set\" function was not written\nsince this would be the only use. Instead, we use\n__ARCH_HAS_SA_RESTORER, as already done in other places.\n\nExample of the leak before applying this patch:\n\n $ cat /proc/$$/maps\n ...\n 7fb9f3083000-7fb9f3238000 r-xp 00000000 fd:01 404469 .../libc-2.15.so\n ...\n $ ./leak\n ...\n 7f278bc74000-7f278be29000 r-xp 00000000 fd:01 404469 .../libc-2.15.so\n ...\n 1 0 (nil) 0x7fb9f30b94a0\n 2 4000000 (nil) 0x7f278bcaa4a0\n 3 4000000 (nil) 0x7f278bcaa4a0\n 4 0 (nil) 0x7fb9f30b94a0\n ...\n\n[akpm@linux-foundation.org: use SA_RESTORER for backportability]\nSigned-off-by: Kees Cook \u003ckeescook@chromium.org\u003e\nReported-by: Emese Revfy \u003cre.emese@gmail.com\u003e\nCc: Emese Revfy \u003cre.emese@gmail.com\u003e\nCc: PaX Team \u003cpageexec@freemail.hu\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Oleg Nesterov \u003coleg@redhat.com\u003e\nCc: \"Eric W. Biederman\" \u003cebiederm@xmission.com\u003e\nCc: Serge Hallyn \u003cserge.hallyn@canonical.com\u003e\nCc: Julien Tinnes \u003cjln@google.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "a4371b6605f7b6930ba95df316948be6b306be73", "tree": "4ce486c02b0df229d6bffa31ccd2059e92a2ab6a", "parents": [ "0319f9909ce68a7516dfc8d53400e07168d281a8" ], "author": { "name": "Malcolm Priestley", "email": "tvboxspy@gmail.com", "time": "Mon Feb 18 19:54:18 2013 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:04:58 2013 -0700" }, "message": "staging: vt6656: Fix oops on resume from suspend.\n\ncommit 6987a6dabfc40222ef767f67b57212fe3a0225fb upstream.\n\nRemove usb_put_dev from vt6656_suspend and usb_get_dev\nfrom vt6566_resume.\n\nThese are not normally in suspend/resume functions.\n\nSigned-off-by: Malcolm Priestley \u003ctvboxspy@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "0319f9909ce68a7516dfc8d53400e07168d281a8", "tree": "adafa4d021035c055a5d1e417760db27eb62b9c1", "parents": [ "0b520a5db298be1d1e74b8e51a02d73e1dbf6045" ], "author": { "name": "Alan Stern", "email": "stern@rowland.harvard.edu", "time": "Fri Mar 01 10:51:15 2013 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Mar 20 13:04:58 2013 -0700" }, "message": "USB: EHCI: don\u0027t check DMA values in QH overlays\n\ncommit feca7746d5d9e84b105a613b7f3b6ad00d327372 upstream.\n\nThis patch (as1661) fixes a rather obscure bug in ehci-hcd. In a\ncouple of places, the driver compares the DMA address stored in a QH\u0027s\noverlay region with the address of a particular qTD, in order to see\nwhether that qTD is the one currently being processed by the hardware.\n(If it is then the status in the QH\u0027s overlay region is more\nup-to-date than the status in the qTD, and if it isn\u0027t then the\noverlay\u0027s value needs to be adjusted when the QH is added back to the\nactive schedule.)\n\nHowever, DMA address in the overlay region isn\u0027t always valid. It\nsometimes will contain a stale value, which may happen by coincidence\nto be equal to a qTD\u0027s DMA address. Instead of checking the DMA\naddress, we should check whether the overlay region is active and\nvalid. The patch tests the ACTIVE bit in the overlay, and clears this\nbit when the overlay becomes invalid (which happens when the\ncurrently-executing URB is unlinked).\n\nThis is the second part of a fix for the regression reported at:\n\n\thttps://bugs.launchpad.net/bugs/1088733\n\nSigned-off-by: Alan Stern \u003cstern@rowland.harvard.edu\u003e\nReported-by: Joseph Salisbury \u003cjoseph.salisbury@canonical.com\u003e\nReported-and-tested-by: Stephen Thirlwall \u003csdt@dr.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" } ], "next": "0b520a5db298be1d1e74b8e51a02d73e1dbf6045" }