)]}' { "log": [ { "commit": "ee8a99bdb47f32327bdfaffe35b900ca7161ba4e", "tree": "b5f9789be3fbbe01ffde0b9118a5da1b2f98031a", "parents": [ "07555ac144bbf45b1751340c6ee75da1f4e5756d" ], "author": { "name": "Richard Laager", "email": "rlaager@wiktel.com", "time": "Thu Aug 22 16:35:47 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 23 09:51:22 2013 -0700" }, "message": "lib/lz4: correct the LZ4 license\n\nThe LZ4 code is listed as using the \"BSD 2-Clause License\".\n\nSigned-off-by: Richard Laager \u003crlaager@wiktel.com\u003e\nAcked-by: Kyungsik Lee \u003ckyungsik.lee@lge.com\u003e\nCc: Chanho Min \u003cchanho.min@lge.com\u003e\nCc: Richard Yao \u003cryao@gentoo.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n[ The 2-clause BSD can be just converted into GPL, but that\u0027s rude and\n pointless, so don\u0027t do it - Linus ]\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "07555ac144bbf45b1751340c6ee75da1f4e5756d", "tree": "a2e1ef0f4ab35a078c1dfb604cccba30ddf7dfc0", "parents": [ "4bf93b50fd04118ac7f33a3c2b8a0a1f9fa80bc9" ], "author": { "name": "Michal Hocko", "email": "mhocko@suse.cz", "time": "Thu Aug 22 16:35:46 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 23 09:51:22 2013 -0700" }, "message": "memcg: get rid of swapaccount leftovers\n\nThe swapaccount kernel parameter without any values has been removed by\ncommit a2c8990aed5a (\"memsw: remove noswapaccount kernel parameter\") but\nit seems that we didn\u0027t get rid of all the left overs.\n\nMake sure that menuconfig help text and kernel-parameters.txt are clear\nabout value for the paramter and remove the stalled comment which is not\nvery much useful on its own.\n\nSigned-off-by: Michal Hocko \u003cmhocko@suse.cz\u003e\nReported-by: Gergely Risko \u003cgergely@risko.hu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "4bf93b50fd04118ac7f33a3c2b8a0a1f9fa80bc9", "tree": "46da4b4982c9b6cca343b25c3869bf93a23cbed7", "parents": [ "2df37a19c686c2d7c4e9b4ce1505b5141e3e5552" ], "author": { "name": "Vyacheslav Dubeyko", "email": "slava@dubeyko.com", "time": "Thu Aug 22 16:35:45 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 23 09:51:22 2013 -0700" }, "message": "nilfs2: fix issue with counting number of bio requests for BIO_EOPNOTSUPP error detection\n\nFix the issue with improper counting number of flying bio requests for\nBIO_EOPNOTSUPP error detection case.\n\nThe sb_nbio must be incremented exactly the same number of times as\ncomplete() function was called (or will be called) because\nnilfs_segbuf_wait() will call wail_for_completion() for the number of\ntimes set to sb_nbio:\n\n do {\n wait_for_completion(\u0026segbuf-\u003esb_bio_event);\n } while (--segbuf-\u003esb_nbio \u003e 0);\n\nTwo functions complete() and wait_for_completion() must be called the\nsame number of times for the same sb_bio_event. Otherwise,\nwait_for_completion() will hang or leak.\n\nSigned-off-by: Vyacheslav Dubeyko \u003cslava@dubeyko.com\u003e\nCc: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nAcked-by: Ryusuke Konishi \u003ckonishi.ryusuke@lab.ntt.co.jp\u003e\nTested-by: Ryusuke Konishi \u003ckonishi.ryusuke@lab.ntt.co.jp\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "2df37a19c686c2d7c4e9b4ce1505b5141e3e5552", "tree": "a0e9431c9854053d1d18efa46a042a79f59d948c", "parents": [ "93dbc1b3b506e16c1f6d5b5dcfe756a85cb1dc58" ], "author": { "name": "Vyacheslav Dubeyko", "email": "slava@dubeyko.com", "time": "Thu Aug 22 16:35:44 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 23 09:51:22 2013 -0700" }, "message": "nilfs2: remove double bio_put() in nilfs_end_bio_write() for BIO_EOPNOTSUPP error\n\nRemove double call of bio_put() in nilfs_end_bio_write() for the case of\nBIO_EOPNOTSUPP error detection. The issue was found by Dan Carpenter\nand he suggests first version of the fix too.\n\nSigned-off-by: Vyacheslav Dubeyko \u003cslava@dubeyko.com\u003e\nReported-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nAcked-by: Ryusuke Konishi \u003ckonishi.ryusuke@lab.ntt.co.jp\u003e\nTested-by: Ryusuke Konishi \u003ckonishi.ryusuke@lab.ntt.co.jp\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "93dbc1b3b506e16c1f6d5b5dcfe756a85cb1dc58", "tree": "70278a6e98eb83f88abbc042136278c9e9879705", "parents": [ "fd3930f70c8d14008f3377d51ce039806dfc542e" ], "author": { "name": "Daniel Drake", "email": "dsd@laptop.org", "time": "Thu Aug 22 16:35:43 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 23 09:51:22 2013 -0700" }, "message": "drivers/platform/olpc/olpc-ec.c: initialise earlier\n\nBeing a low-level component, various drivers (e.g. olpc-battery) assume\nthat it is ok to communicate with the OLPC Embedded Controller during\nprobe. Therefore the OLPC EC driver must be initialised before other\ndrivers try to use it. This was the case until it was recently moved\nout of arch/x86 and restructured around commits ac2504151f5a (\"Platform:\nOLPC: turn EC driver into a platform_driver\") and 85f90cf6ca56 (\"x86:\nOLPC: switch over to using new EC driver on x86\").\n\nUse arch_initcall so that olpc-ec is readied earlier, matching the\nprevious behaviour.\n\nFixes a regression introduced in Linux-3.6 where various drivers such as\nolpc-battery and olpc-xo1-sci failed to load due to an inability to\ncommunicate with the EC. The user-visible effect was a lack of battery\nmonitoring, missing ebook/lid switch input devices, etc.\n\nSigned-off-by: Daniel Drake \u003cdsd@laptop.org\u003e\nCc: Andres Salomon \u003cdilinger@queued.net\u003e\nCc: Paul Fox \u003cpgf@laptop.org\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "fd3930f70c8d14008f3377d51ce039806dfc542e", "tree": "ce3473fe0fecb5fc3415a445a5935e042fa648a0", "parents": [ "94fc5d9de5bd757ad46f0d94bc4ebf617c4487f6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Aug 19 16:26:12 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Aug 19 16:26:12 2013 -0700" }, "message": "proc: more readdir conversion bug-fixes\n\nIn the previous commit, Richard Genoud fixed proc_root_readdir(), which\nhad lost the check for whether all of the non-process /proc entries had\nbeen returned or not.\n\nBut that in turn exposed _another_ bug, namely that the original readdir\nconversion patch had yet another problem: it had lost the return value\nof proc_readdir_de(), so now checking whether it had completed\nsuccessfully or not didn\u0027t actually work right anyway.\n\nThis reinstates the non-zero return for the \"end of base entries\" that\nhad also gotten lost in commit f0c3b5093add (\"[readdir] convert\nprocfs\"). So now you get all the base entries *and* you get all the\nprocess entries, regardless of getdents buffer size.\n\n(Side note: the Linux \"getdents\" manual page actually has a nice example\napplication for testing getdents, which can be easily modified to use\ndifferent buffers. Who knew? Man-pages can be useful)\n\nReported-by: Emmanuel Benisty \u003cbenisty.e@gmail.com\u003e\nReported-by: Marc Dionne \u003cmarc.c.dionne@gmail.com\u003e\nCc: Richard Genoud \u003crichard.genoud@gmail.com\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "94fc5d9de5bd757ad46f0d94bc4ebf617c4487f6", "tree": "84cc97ed83166e4d9f074dc3d47ba301579f34bf", "parents": [ "d6a5e06cd17a3f901231e345e4acc1c3dab9fbb8" ], "author": { "name": "Richard Genoud", "email": "richard.genoud@gmail.com", "time": "Mon Aug 19 18:30:31 2013 +0200" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Aug 19 09:47:27 2013 -0700" }, "message": "proc: return on proc_readdir error\n\nCommit f0c3b5093add (\"[readdir] convert procfs\") introduced a bug on the\nlisting of the proc file-system. The return value of proc_readdir()\nisn\u0027t tested anymore in the proc_root_readdir function.\n\nThis lead to an \"interesting\" behaviour when we are using the getdents()\nsystem call with a buffer too small: instead of failing, it returns the\nfirst entries of /proc (enough to fill the given buffer), plus the PID\ndirectories.\n\nThis is not triggered on glibc (as getdents is called with a 32KB\nbuffer), but on uclibc, the buffer size is only 1KB, thus some proc\nentries are missing.\n\nSee https://lkml.org/lkml/2013/8/12/288 for more background.\n\nSigned-off-by: Richard Genoud \u003crichard.genoud@gmail.com\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "d6a5e06cd17a3f901231e345e4acc1c3dab9fbb8", "tree": "4181f24300881fb9de4846ce2bb0edfda2a3b60d", "parents": [ "7067552dfb382cef040326ab6dd0b8d642af3e64", "7bd9ee58a4fe026514266757e812cb89c3c945eb" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Aug 19 09:30:12 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Aug 19 09:30:12 2013 -0700" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/steve/gfs2-3.0-fixes\n\nPull gfs2 fixes from Steven Whitehouse:\n \"Out of these five patches, the one for ensuring that the number of\n revokes is not exceeded, and the one for checking the glock is not\n already held in gfs2_getxattr are the two most important. The latter\n can be triggered by selinux.\n\n The other three patches are very small and fix mostly fairly trivial\n issues\"\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/steve/gfs2-3.0-fixes:\n GFS2: Check for glock already held in gfs2_getxattr\n GFS2: alloc_workqueue() doesn\u0027t return an ERR_PTR\n GFS2: don\u0027t overrun reserved revokes\n GFS2: WQ_NON_REENTRANT is meaningless and going away\n GFS2: Fix typo in gfs2_create_inode()\n" }, { "commit": "7067552dfb382cef040326ab6dd0b8d642af3e64", "tree": "f09ff2a949007da4a976e37cbad43490a0904f81", "parents": [ "e91dade52b590d821e83bb494df20c93e5384790", "ccb1f55e710b78e1ea1de769bcab2d1e1abe8457" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Aug 19 09:18:29 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Aug 19 09:18:29 2013 -0700" }, "message": "Merge branch \u0027x86-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull x86 fixes from Ingo Molnar:\n \"Two AMD microcode loader fixes and an OLPC firmware support fix\"\n\n* \u0027x86-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n x86, microcode, AMD: Fix early microcode loading\n x86, microcode, AMD: Make cpu_has_amd_erratum() use the correct struct cpuinfo_x86\n x86: Don\u0027t clear olpc_ofw_header when sentinel is detected\n" }, { "commit": "e91dade52b590d821e83bb494df20c93e5384790", "tree": "256ed456cb1d21776624020485ce1a79814db29d", "parents": [ "fbf21849edaf0cd2a9b33307ab965757a93b8d75", "ae920eb24277e4a174a3ca575ce42b98b18a6748" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Aug 19 09:17:35 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Aug 19 09:17:35 2013 -0700" }, "message": "Merge branch \u0027timers-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull timer fixes from Ingo Molnar:\n \"Three small fixlets\"\n\n* \u0027timers-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n nohz: fix compile warning in tick_nohz_init()\n nohz: Do not warn about unstable tsc unless user uses nohz_full\n sched_clock: Fix integer overflow\n" }, { "commit": "fbf21849edaf0cd2a9b33307ab965757a93b8d75", "tree": "3fb2bfef9f04c2643feef507359cd5ca6d58d039", "parents": [ "2203547f82b7727e2cd3fee3e56fceae2b2b691c", "3387ed83943daf6cb1bb4195ae369067b9cd80ce" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Aug 19 09:09:11 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Aug 19 09:09:11 2013 -0700" }, "message": "Merge branch \u0027drm-fixes\u0027 of git://people.freedesktop.org/~airlied/linux\n\nPull drm fixes from Dave Airlie:\n \"Bit late with these, was under the weather for a a few days, nothing\n too crazy:\n\n Some radeon regression fixes, one intel regression fix, and one fix to\n avoid a warn with i915 when used with dma-buf\"\n\n* \u0027drm-fixes\u0027 of git://people.freedesktop.org/~airlied/linux:\n drm/i915: unpin backing storage in dmabuf_unmap\n drm/radeon: fix WREG32_OR macro setting bits in a register\n drm/radeon/r7xx: fix copy paste typo in golden register setup\n drm/i915: Don\u0027t deref pipe-\u003ecpu_transcoder in the hangcheck code\n drm/radeon: fix UVD message buffer validation\n" }, { "commit": "2203547f82b7727e2cd3fee3e56fceae2b2b691c", "tree": "9bf1b84e663c01b39e9a9d098d498d424d1818ad", "parents": [ "b36f4be3de1b123d8601de062e7dbfc904f305fb" ], "author": { "name": "Randy Dunlap", "email": "rdunlap@infradead.org", "time": "Sun Aug 18 20:08:07 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Aug 19 09:08:54 2013 -0700" }, "message": "kernel: fix new kernel-doc warning in wait.c\n\nFix new kernel-doc warnings in kernel/wait.c:\n\n Warning(kernel/wait.c:374): No description found for parameter \u0027p\u0027\n Warning(kernel/wait.c:374): Excess function parameter \u0027word\u0027 description in \u0027wake_up_atomic_t\u0027\n Warning(kernel/wait.c:374): Excess function parameter \u0027bit\u0027 description in \u0027wake_up_atomic_t\u0027\n\nSigned-off-by: Randy Dunlap \u003crdunlap@infradead.org\u003e\nCc: David Howells \u003cdhowells@redhat.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "7bd9ee58a4fe026514266757e812cb89c3c945eb", "tree": "88c4560fa6bd0fdbb50a0313462fd01e209a3182", "parents": [ "dfc4616ddeb133290599d4d13936e208f6ba8142" ], "author": { "name": "Steven Whitehouse", "email": "swhiteho@redhat.com", "time": "Fri Aug 16 21:10:28 2013 +0100" }, "committer": { "name": "Steven Whitehouse", "email": "swhiteho@redhat.com", "time": "Mon Aug 19 09:33:57 2013 +0100" }, "message": "GFS2: Check for glock already held in gfs2_getxattr\n\nSince the introduction of atomic_open, gfs2_getxattr can be\ncalled with the glock already held, so we need to allow for\nthis.\n\nSigned-off-by: Steven Whitehouse \u003cswhiteho@redhat.com\u003e\nReported-by: David Teigland \u003cteigland@redhat.com\u003e\nTested-by: David Teigland \u003cteigland@redhat.com\u003e\n" }, { "commit": "dfc4616ddeb133290599d4d13936e208f6ba8142", "tree": "7d71eff4c73f0439e96b114a229c7dc6e0ff941a", "parents": [ "1bc333f4cf601f77ba0f5046ff226fe654e83bee" ], "author": { "name": "Dan Carpenter", "email": "dan.carpenter@oracle.com", "time": "Thu Aug 15 10:54:43 2013 +0300" }, "committer": { "name": "Steven Whitehouse", "email": "swhiteho@redhat.com", "time": "Mon Aug 19 09:33:43 2013 +0100" }, "message": "GFS2: alloc_workqueue() doesn\u0027t return an ERR_PTR\n\nalloc_workqueue() returns a NULL on error, it doesn\u0027t return an ERR_PTR.\n\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nSigned-off-by: Steven Whitehouse \u003cswhiteho@redhat.com\u003e\n" }, { "commit": "1bc333f4cf601f77ba0f5046ff226fe654e83bee", "tree": "f9afd95be5ff9cfeb41050b078cb0bc78aec425d", "parents": [ "d08fa65a81625765ff4733b4a6556b7156954073" ], "author": { "name": "Benjamin Marzinski", "email": "bmarzins@redhat.com", "time": "Fri Jul 26 17:09:33 2013 -0500" }, "committer": { "name": "Steven Whitehouse", "email": "swhiteho@redhat.com", "time": "Mon Aug 19 09:33:16 2013 +0100" }, "message": "GFS2: don\u0027t overrun reserved revokes\n\nWhen run during fsync, a gfs2_log_flush could happen between the\ntime when gfs2_ail_flush checked the number of blocks to revoke,\nand when it actually started the transaction to do those revokes.\nThis occassionally caused it to need more revokes than it reserved,\ncausing gfs2 to crash.\n\nInstead of just reserving enough revokes to handle the blocks that\ncurrently need them, this patch makes gfs2_ail_flush reserve the\nmaximum number of revokes it can, without increasing the total number\nof reserved log blocks. This patch also passes the number of reserved\nrevokes to __gfs2_ail_flush() so that it doesn\u0027t go over its limit\nand cause a crash like we\u0027re seeing. Non-fsync calls to __gfs2_ail_flush\nwill still cause a BUG() necessary revokes are skipped.\n\nSigned-off-by: Benjamin Marzinski \u003cbmarzins@redhat.com\u003e\nSigned-off-by: Steven Whitehouse \u003cswhiteho@redhat.com\u003e\n" }, { "commit": "d08fa65a81625765ff4733b4a6556b7156954073", "tree": "b265564a9b6d3af22cb6f76e29d655fe32960ad1", "parents": [ "2523d47a798b5d985ba404d0d793270494ccf6e9" ], "author": { "name": "Tejun Heo", "email": "tj@kernel.org", "time": "Tue Jul 30 08:40:25 2013 -0400" }, "committer": { "name": "Steven Whitehouse", "email": "swhiteho@redhat.com", "time": "Mon Aug 19 09:33:01 2013 +0100" }, "message": "GFS2: WQ_NON_REENTRANT is meaningless and going away\n\ndbf2576e37 (\"workqueue: make all workqueues non-reentrant\") made\nWQ_NON_REENTRANT no-op and the flag is going away. Remove its usages.\n\nThis patch doesn\u0027t introduce any behavior changes.\n\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\nSigned-off-by: Steven Whitehouse \u003cswhiteho@redhat.com\u003e\nCc: cluster-devel@redhat.com\n" }, { "commit": "2523d47a798b5d985ba404d0d793270494ccf6e9", "tree": "835c13ddc897c044a632045bbee4f286f1c893fb", "parents": [ "47188d39b5deeebf41f87a02af1b3935866364cf" ], "author": { "name": "Steven Whitehouse", "email": "swhiteho@redhat.com", "time": "Wed Jul 17 08:11:32 2013 +0100" }, "committer": { "name": "Steven Whitehouse", "email": "swhiteho@redhat.com", "time": "Mon Aug 19 09:32:29 2013 +0100" }, "message": "GFS2: Fix typo in gfs2_create_inode()\n\nPTR_RET should be PTR_ERR\n\nReported-by: Sachin Kamat \u003csachin.kamat@linaro.org\u003e\nCc: Rusty Russell \u003crusty@rustcorp.com.au\u003e\nSigned-off-by: Steven Whitehouse \u003cswhiteho@redhat.com\u003e\n" }, { "commit": "3387ed83943daf6cb1bb4195ae369067b9cd80ce", "tree": "e9fc247ed3a26f5369a7ec1b1bd0ef66bda7b4dd", "parents": [ "eb91626ac4b9af3d5602a7db888b8bc4cb23eb3b", "63b66e5ba54b15a6592be00555d762db6db739ce" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Mon Aug 19 13:49:20 2013 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Mon Aug 19 13:49:20 2013 +1000" }, "message": "Merge tag \u0027drm-intel-fixes-2013-08-15\u0027 of git://people.freedesktop.org/~danvet/drm-intel\n\n* tag \u0027drm-intel-fixes-2013-08-15\u0027 of git://people.freedesktop.org/~danvet/drm-intel: (153 commits)\n drm/i915: Don\u0027t deref pipe-\u003ecpu_transcoder in the hangcheck code\n" }, { "commit": "eb91626ac4b9af3d5602a7db888b8bc4cb23eb3b", "tree": "b7edc496796b7789b912944ef3f766a20f1a6e4a", "parents": [ "d2b2c08456d12a9914c87cef479b2ec2ab30337f" ], "author": { "name": "Daniel Vetter", "email": "daniel.vetter@ffwll.ch", "time": "Thu Aug 08 09:10:37 2013 +0200" }, "committer": { "name": "Dave Airlie", "email": "airlied@gmail.com", "time": "Mon Aug 19 13:24:54 2013 +1000" }, "message": "drm/i915: unpin backing storage in dmabuf_unmap\n\nThis fixes a WARN in i915_gem_free_object when the\nobj-\u003epages_pin_count isn\u0027t 0.\n\nv2: Add locking to unmap, noticed by Chris Wilson. Note that even\nthough we call unmap with our own dev-\u003estruct_mutex held that won\u0027t\nresult in an immediate deadlock since we never go through the dma_buf\ninterfaces for our own, reimported buffers. But it\u0027s still easy to\nblow up and anger lockdep, but that\u0027s already the case with our -\u003emap\nimplementation. Fixing this for real will involve per dma-buf ww mutex\nlocking by the callers. And lots of fun. So go with the duct-tape\napproach for now.\n\nCc: Chris Wilson \u003cchris@chris-wilson.co.uk\u003e\nReported-by: Maarten Lankhorst \u003cmaarten.lankhorst@canonical.com\u003e\nCc: Maarten Lankhorst \u003cmaarten.lankhorst@canonical.com\u003e\nTested-by: Armin K. \u003ckrejzi@email.com\u003e (v1)\nTested-by: Dave Airlie \u003cairlied@redhat.com\u003e\nAcked-by: Maarten Lankhorst \u003cmaarten.lankhorst@canonical.com\u003e\nSigned-off-by: Daniel Vetter \u003cdaniel.vetter@ffwll.ch\u003e\nSigned-off-by: Dave Airlie \u003cairlied@gmail.com\u003e\n" }, { "commit": "d2b2c08456d12a9914c87cef479b2ec2ab30337f", "tree": "dd64a4de083572ab300e149d58d3e0ec8f7da158", "parents": [ "e42f5814212079aecd5826dba10588a896ac0862", "d43a93c8d9bc4e0dc0293b6458c077c3c797594f" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Mon Aug 19 12:55:50 2013 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Mon Aug 19 12:55:50 2013 +1000" }, "message": "Merge branch \u0027drm-fixes-3.11\u0027 of git://people.freedesktop.org/~agd5f/linux\n\nJust two small fixes for radeon. One fixes an array overrun\nthat can cause garbage to get written to registers on some r7xx boards,\nthe other is a small UVD fix.\nAlso one audio regresion\n\n* \u0027drm-fixes-3.11\u0027 of git://people.freedesktop.org/~agd5f/linux:\n drm/radeon: fix WREG32_OR macro setting bits in a register\n drm/radeon/r7xx: fix copy paste typo in golden register setup\n drm/radeon: fix UVD message buffer validation\n" }, { "commit": "b36f4be3de1b123d8601de062e7dbfc904f305fb", "tree": "1ab8ca760688a42d7c25cd38d5fc2dec35059a7c", "parents": [ "50e37ccea06ca8846ceb60dbfbe056012c60d71b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 14:36:53 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 14:36:53 2013 -0700" }, "message": "Linux 3.11-rc6\n" }, { "commit": "50e37ccea06ca8846ceb60dbfbe056012c60d71b", "tree": "b64788e97e2bfbaaf8c274ca4cd9da95314f275a", "parents": [ "a08797e853e27fedb2468d4fd45459fd62902143", "a903f0865a190f8778c73df1a810ea6e25e5d7cf" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 08:51:28 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 08:51:28 2013 -0700" }, "message": "Merge branch \u0027for-3.11-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup\n\nPull cgroup fix from Tejun Heo:\n \"This contains one patch to fix the return value of cpuset\u0027s cgroups\n interface function, which used to always return -ENODEV for the writes\n on the \u0027memory_pressure_enabled\u0027 file\"\n\n* \u0027for-3.11-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup:\n cpuset: fix the return value of cpuset_write_u64()\n" }, { "commit": "a08797e853e27fedb2468d4fd45459fd62902143", "tree": "d6b2aa197ded9d9c4e81ef115540f5c76f1feb25", "parents": [ "215b28a5308f3d332df2ee09ef11fda45d7e4a92", "a361293f5fedea0016a10599f409631a15d47ee7" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 10:43:19 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 10:43:19 2013 -0700" }, "message": "Merge tag \u0027ext4_for_linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4\n\nPull jbd2 bug fixes from Ted Ts\u0027o:\n \"Two jbd2 bug fixes, one of which is a regression fix\"\n\n* tag \u0027ext4_for_linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4:\n jbd2: Fix oops in jbd2_journal_file_inode()\n jbd2: Fix use after free after error in jbd2_journal_dirty_metadata()\n" }, { "commit": "215b28a5308f3d332df2ee09ef11fda45d7e4a92", "tree": "ca85b9df41bbb20c029eb9d6adea164b27e7f80c", "parents": [ "e180383f569e9d9247af45403d352b06444c34ca" ], "author": { "name": "Guenter Roeck", "email": "linux@roeck-us.net", "time": "Fri Aug 16 20:50:55 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 21:16:37 2013 -0700" }, "message": "s390: Fix broken build\n\nFix this build error:\n\n In file included from fs/exec.c:61:0:\n arch/s390/include/asm/tlb.h:35:23: error: expected identifier or \u0027(\u0027 before \u0027unsigned\u0027\n arch/s390/include/asm/tlb.h:36:1: warning: no semicolon at end of struct or union [enabled by default]\n arch/s390/include/asm/tlb.h: In function \u0027tlb_gather_mmu\u0027:\n arch/s390/include/asm/tlb.h:57:5: error: \u0027struct mmu_gather\u0027 has no member named \u0027end\u0027\n\nBroken due to commit 2b047252d0 (\"Fix TLB gather virtual address range\ninvalidation corner cases\").\n\nCc: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\n[ Oh well. We had build testing for ppc amd um, but no s390 - Linus ]\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "e180383f569e9d9247af45403d352b06444c34ca", "tree": "bf9474420df41e1142c1addad4e0006718017239", "parents": [ "2620bf06f168527e8d5159d6c21ea80e60b663fd" ], "author": { "name": "Robin Holt", "email": "holt@sgi.com", "time": "Fri Aug 16 18:01:42 2013 -0500" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 20:45:07 2013 -0700" }, "message": "MAINTAINERS: Change ownership for SGI specific modules.\n\nI have taken a different job. I am removing myself as maintainer of\nGRU. Dimitri will continue to maintain the SGI GRU driver, changing the\nXP/XPC/XPNET maintainer to Cliff Whickman, but leaving behind my\npersonal email address to answer any questions about the design or\noperation of the XP family of drivers.\n\nSigned-off-by: Robin Holt \u003cholt@sgi.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "a361293f5fedea0016a10599f409631a15d47ee7", "tree": "63f69548f7479039312c6f61dcadeec9068c80d0", "parents": [ "91aa11fae1cf8c2fd67be0609692ea9741cdcc43" ], "author": { "name": "Jan Kara", "email": "jack@suse.cz", "time": "Fri Aug 16 21:19:41 2013 -0400" }, "committer": { "name": "Theodore Ts\u0027o", "email": "tytso@mit.edu", "time": "Fri Aug 16 21:19:41 2013 -0400" }, "message": "jbd2: Fix oops in jbd2_journal_file_inode()\n\nCommit 0713ed0cde76438d05849f1537d3aab46e099475 added\njbd2_journal_file_inode() call into ext4_block_zero_page_range().\nHowever that function gets called from truncate path and thus inode\nneedn\u0027t have jinode attached - that happens in ext4_file_open() but\nthe file needn\u0027t be ever open since mount. Calling\njbd2_journal_file_inode() without jinode attached results in the oops.\n\nWe fix the problem by attaching jinode to inode also in ext4_truncate()\nand ext4_punch_hole() when we are going to zero out partial blocks.\n\nReported-by: majianpeng \u003cmajianpeng@gmail.com\u003e\nSigned-off-by: Jan Kara \u003cjack@suse.cz\u003e\nSigned-off-by: \"Theodore Ts\u0027o\" \u003ctytso@mit.edu\u003e\n" }, { "commit": "2620bf06f168527e8d5159d6c21ea80e60b663fd", "tree": "0ce69c6150ac8e5fd929cfc6cd34d2b4ad1cabc1", "parents": [ "359d16ca1bd6adcd9f031da35d807f9c37ec6a6e", "2a2822475d0e734adffab72644329d9c042ce2e1" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 16:52:29 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 16:52:29 2013 -0700" }, "message": "Merge branch \u0027fixes\u0027 of git://git.linaro.org/people/rmk/linux-arm\n\nPull ARM fixes from Russell King:\n \"The usual collection of random fixes. Also some further fixes to the\n last set of security fixes, and some more from Will (which you may\n already have in a slightly different form)\"\n\n* \u0027fixes\u0027 of git://git.linaro.org/people/rmk/linux-arm:\n ARM: 7807/1: kexec: validate CPU hotplug support\n ARM: 7812/1: rwlocks: retry trylock operation if strex fails on free lock\n ARM: 7811/1: locks: use early clobber in arch_spin_trylock\n ARM: 7810/1: perf: Fix array out of bounds access in armpmu_map_hw_event()\n ARM: 7809/1: perf: fix event validation for software group leaders\n ARM: Fix FIQ code on VIVT CPUs\n ARM: Fix !kuser helpers case\n ARM: Fix the world famous typo with is_gate_vma()\n" }, { "commit": "359d16ca1bd6adcd9f031da35d807f9c37ec6a6e", "tree": "beaba817bad04e853a1319132892762be3803c02", "parents": [ "0f7dd1aa8f959216f1faa71513b9d3c1a9065e5a", "ea077b1b96e073eac5c3c5590529e964767fc5f7" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 16:49:06 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 16:49:06 2013 -0700" }, "message": "Merge branch \u0027for-3.11\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/geert/linux-m68k\n\nPull m68k fixes from Geert Uytterhoeven:\n \"These are two critical fixes, needed by distro kernels, and thus also\n destined for stable:\n\n - The do_div() commit fixes a crash in mounting btrfs volumes, which\n was a regression from 3.2,\n\n - The ARAnyM fix allows to have NatFeat drivers as loadable modules,\n which is needed for initrds\"\n\n* \u0027for-3.11\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/geert/linux-m68k:\n m68k: Truncate base in do_div()\n m68k/atari: ARAnyM - Fix NatFeat module support\n" }, { "commit": "0f7dd1aa8f959216f1faa71513b9d3c1a9065e5a", "tree": "cdef5ea90c240a79b45cbbc8645bd5a635f95463", "parents": [ "2d2843e614f6f7aced9dd351a056ac1150d3f82f", "a701fe3851d9c7f6bd27bc0b92ca1668a42c8406" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 10:00:18 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 10:00:18 2013 -0700" }, "message": "Merge tag \u0027clk-fixes-for-linus\u0027 of git://git.linaro.org/people/mturquette/linux\n\nPull clock controller fixes from Michael Turquette:\n \"Two small fixes for the Zynq clock controller introduced in 3.11-rc1\n and another Exynos clock patch which fixes a regression that prevents\n the video pipeline from functioning on that platform\"\n\n* tag \u0027clk-fixes-for-linus\u0027 of git://git.linaro.org/people/mturquette/linux:\n clk: exynos4: Add CLK_GET_RATE_NOCACHE flag for the Exynos4x12 ISP clocks\n clk/zynq/clkc: Add CLK_SET_RATE_PARENT flag to ethernet muxes\n clk/zynq/clkc: Add dedicated spinlock for the SWDT\n" }, { "commit": "2d2843e614f6f7aced9dd351a056ac1150d3f82f", "tree": "2930c51e63e9f8a69593e4e08023b4bdcfa8df91", "parents": [ "f43c60648f2b093983fe8f6145acef12c48751cb", "40fea92ffb5fa0ef26d10ae0fe5688bc8e61c791" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 09:59:00 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 09:59:00 2013 -0700" }, "message": "Merge tag \u0027pm-3.11-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull power management fix from Rafael Wysocki:\n \"The removal of delayed_work_pending() checks from kernel/power/qos.c\n done in 3.9 introduced a deadlock in pm_qos_work_fn().\n\n Fix from Stephen Boyd\"\n\n* tag \u0027pm-3.11-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n PM / QoS: Fix workqueue deadlock when using pm_qos_update_request_timeout()\n" }, { "commit": "f43c60648f2b093983fe8f6145acef12c48751cb", "tree": "249701a25ce04f80b357a972dd3bff2729e4bcee", "parents": [ "89cb9ae2382b59585381c3ae619840e64df8df97", "1801928e0f99d94c55e33c584c5eb2ff5e246ee6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 09:58:21 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 09:58:21 2013 -0700" }, "message": "Merge tag \u0027sound-3.11\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound\n\nPull sound fixes from Takashi Iwai:\n \"This batch contains a few USB audio fixes, a couple of HD-audio\n quirks, various small ASoC driver fixes in addition to an ASoC core\n fix that may lead to memory corruption.\n\n Unfortunately slightly more volume than the previous pull request, but\n all are reasonable regression fixes\"\n\n* tag \u0027sound-3.11\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound:\n ALSA: hda - Add a fixup for Gateway LT27\n ASoC: tegra: fix Tegra30 I2S capture parameter setup\n ALSA: usb-audio: Fix invalid volume resolution for Logitech HD Webcam C525\n ALSA: hda - Fix missing mute controls for CX5051\n ALSA: usb-audio: fix automatic Roland/Yamaha MIDI detection\n ALSA: 6fire: make buffers DMA-able (midi)\n ALSA: 6fire: make buffers DMA-able (pcm)\n ALSA: hda - Add pinfix for LG LW25 laptop\n ASoC: cs42l52: Add new TLV for Beep Volume\n ASoC: cs42l52: Reorder Min/Max and update to SX_TLV for Beep Volume\n ASoC: dapm: Fix empty list check in dapm_new_mux()\n ASoC: sgtl5000: fix buggy \u0027Capture Attenuate Switch\u0027 control\n ASoC: sgtl5000: prevent playback to be muted when terminating concurrent capture\n" }, { "commit": "89cb9ae2382b59585381c3ae619840e64df8df97", "tree": "8e97576b8ddfdd88c59a27acdf55526101e69b67", "parents": [ "ddea368c78ff9acf45261a7c82635b98e9c1fcd6", "ff8a43c10f1440f07a5faca0c1556921259f7f76" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 09:57:38 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 09:57:38 2013 -0700" }, "message": "Merge tag \u0027usb-3.11-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb\n\nPull USB fixes from Greg KH:\n \"Here are some small USB fixes for 3.11-rc6 that have accumulated.\n\n Nothing huge, a EHCI fix that solves a much-reported audio USB\n problem, some usb-serial driver endian fixes and other minor fixes, a\n wireless USB oops fix, and two new quirks\"\n\n* tag \u0027usb-3.11-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb:\n USB: keyspan: fix null-deref at disconnect and release\n USB: mos7720: fix broken control requests\n usb: add two quirky touchscreen\n USB: ti_usb_3410_5052: fix big-endian firmware handling\n USB: adutux: fix big-endian device-type reporting\n USB: usbtmc: fix big-endian probe of Rigol devices\n USB: mos7840: fix big-endian probe\n USB-Serial: Fix error handling of usb_wwan\n wusbcore: fix kernel panic when disconnecting a wireless USB-\u003eserial device\n USB: EHCI: accept very late isochronous URBs\n" }, { "commit": "ddea368c78ff9acf45261a7c82635b98e9c1fcd6", "tree": "a2cf7b0882c266b1d91d4786234243e02199c9ab", "parents": [ "2b047252d087be7f2ba088b4933cd904f92e6fce", "0a324f3189ed9c78b1aaf48d88e93cb18643c655" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 09:35:29 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 09:35:29 2013 -0700" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net\n\nPull networking fixes from David Miller:\n\n 1) Fix SKB leak in 8139cp, from Dave Jones.\n\n 2) Fix use of *_PAGES interfaces with mlx5 firmware, from Moshe Lazar.\n\n 3) RCU conversion of macvtap introduced two races, fixes by Eric\n Dumazet\n\n 4) Synchronize statistic flows in bnx2x driver to prevent corruption,\n from Dmitry Kravkov\n\n 5) Undo optimization in IP tunneling, we were using the inner IP header\n in some cases to inherit the IP ID, but that isn\u0027t correct in some\n circumstances. From Pravin B Shelar\n\n 6) Use correct struct size when parsing netlink attributes in\n rtnl_bridge_getlink(). From Asbjoern Sloth Toennesen\n\n 7) Length verifications in tun_get_user() are bogus, from Weiping Pan\n and Dan Carpenter\n\n 8) Fix bad merge resolution during 3.11 networking development in\n openvswitch, albeit a harmless one which added some unreachable\n code. From Jesse Gross\n\n 9) Wrong size used in flexible array allocation in openvswitch, from\n Pravin B Shelar\n\n10) Clear out firmware capability flags the be2net driver isn\u0027t ready to\n handle yet, from Sarveshwar Bandi\n\n11) Revert DMA mapping error checking addition to cxgb3 driver, it\u0027s\n buggy. From Alexey Kardashevskiy\n\n12) Fix regression in packet scheduler rate limiting when working with a\n link layer of ATM. From Jesper Dangaard Brouer\n\n13) Fix several errors in TCP Cubic congestion control, in particular\n overflow errors in timestamp calculations. From Eric Dumazet and\n Van Jacobson\n\n14) In ipv6 routing lookups, we need to backtrack if subtree traversal\n don\u0027t result in a match. From Hannes Frederic Sowa\n\n15) ipgre_header() returns incorrect packet offset. Fix from Timo Teräs\n\n16) Get \"low latency\" out of the new MIB counter names. From Eliezer\n Tamir\n\n17) State check in ndo_dflt_fdb_del() is inverted, from Sridhar\n Samudrala\n\n18) Handle TCP Fast Open properly in netfilter conntrack, from Yuchung\n Cheng\n\n19) Wrong memcpy length in pcan_usb driver, from Stephane Grosjean\n\n20) Fix dealock in TIPC, from Wang Weidong and Ding Tianhong\n\n21) call_rcu() call to destroy SCTP transport is done too early and\n might result in an oops. From Daniel Borkmann\n\n22) Fix races in genetlink family dumps, from Johannes Berg\n\n23) Flags passed into macvlan by the user need to be validated properly,\n from Michael S Tsirkin\n\n24) Fix skge build on 32-bit, from Stephen Hemminger\n\n25) Handle malformed TCP headers properly in xt_TCPMSS, from Pablo Neira\n Ayuso\n\n26) Fix handling of stacked vlans in vlan_dev_real_dev(), from Nikolay\n Aleksandrov\n\n27) Eliminate MTU calculation overflows in esp{4,6}, from Daniel\n Borkmann\n\n28) neigh_parms need to be setup before calling the -\u003endo_neigh_setup()\n method. From Veaceslav Falico\n\n29) Kill out-of-bounds prefetch in fib_trie, from Eric Dumazet\n\n30) Don\u0027t dereference MLD query message if the length isn\u0027t value in the\n bridge multicast code, from Linus Lüssing\n\n31) Fix VXLAN IGMP join regression due to an inverted check, from Cong\n Wang\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (70 commits)\n net/mlx5_core: Support MANAGE_PAGES and QUERY_PAGES firmware command changes\n tun: signedness bug in tun_get_user()\n qlcnic: Fix diagnostic interrupt test for 83xx adapters\n qlcnic: Fix beacon state return status handling\n qlcnic: Fix set driver version command\n net: tg3: fix NULL pointer dereference in tg3_io_error_detected and tg3_io_slot_reset\n net_sched: restore \"linklayer atm\" handling\n drivers/net/ethernet/via/via-velocity.c: update napi implementation\n Revert \"cxgb3: Check and handle the dma mapping errors\"\n be2net: Clear any capability flags that driver is not interested in.\n openvswitch: Reset tunnel key between input and output.\n openvswitch: Use correct type while allocating flex array.\n openvswitch: Fix bad merge resolution.\n tun: compare with 0 instead of total_len\n rtnetlink: rtnl_bridge_getlink: Call nlmsg_find_attr() with ifinfomsg header\n ethernet/arc/arc_emac - fix NAPI \"work \u003e weight\" warning\n ip_tunnel: Do not use inner ip-header-id for tunnel ip-header-id.\n bnx2x: prevent crash in shutdown flow with CNIC\n bnx2x: fix PTE write access error\n bnx2x: fix memory leak in VF\n ...\n" }, { "commit": "2b047252d087be7f2ba088b4933cd904f92e6fce", "tree": "b240af27ca0530f7b26f1314968f01140a72a5f8", "parents": [ "f1d6e17f540af37bb1891480143669ba7636c4cf" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 11:42:25 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 08:52:46 2013 -0700" }, "message": "Fix TLB gather virtual address range invalidation corner cases\n\nBen Tebulin reported:\n\n \"Since v3.7.2 on two independent machines a very specific Git\n repository fails in 9/10 cases on git-fsck due to an SHA1/memory\n failures. This only occurs on a very specific repository and can be\n reproduced stably on two independent laptops. Git mailing list ran\n out of ideas and for me this looks like some very exotic kernel issue\"\n\nand bisected the failure to the backport of commit 53a59fc67f97 (\"mm:\nlimit mmu_gather batching to fix soft lockups on !CONFIG_PREEMPT\").\n\nThat commit itself is not actually buggy, but what it does is to make it\nmuch more likely to hit the partial TLB invalidation case, since it\nintroduces a new case in tlb_next_batch() that previously only ever\nhappened when running out of memory.\n\nThe real bug is that the TLB gather virtual memory range setup is subtly\nbuggered. It was introduced in commit 597e1c3580b7 (\"mm/mmu_gather:\nenable tlb flush range in generic mmu_gather\"), and the range handling\nwas already fixed at least once in commit e6c495a96ce0 (\"mm: fix the TLB\nrange flushed when __tlb_remove_page() runs out of slots\"), but that fix\nwas not complete.\n\nThe problem with the TLB gather virtual address range is that it isn\u0027t\nset up by the initial tlb_gather_mmu() initialization (which didn\u0027t get\nthe TLB range information), but it is set up ad-hoc later by the\nfunctions that actually flush the TLB. And so any such case that forgot\nto update the TLB range entries would potentially miss TLB invalidates.\n\nRather than try to figure out exactly which particular ad-hoc range\nsetup was missing (I personally suspect it\u0027s the hugetlb case in\nzap_huge_pmd(), which didn\u0027t have the same logic as zap_pte_range()\ndid), this patch just gets rid of the problem at the source: make the\nTLB range information available to tlb_gather_mmu(), and initialize it\nwhen initializing all the other tlb gather fields.\n\nThis makes the patch larger, but conceptually much simpler. And the end\nresult is much more understandable; even if you want to play games with\npartial ranges when invalidating the TLB contents in chunks, now the\nrange information is always there, and anybody who doesn\u0027t want to\nbother with it won\u0027t introduce subtle bugs.\n\nBen verified that this fixes his problem.\n\nReported-bisected-and-tested-by: Ben Tebulin \u003ctebulin@googlemail.com\u003e\nBuild-testing-by: Stephen Rothwell \u003csfr@canb.auug.org.au\u003e\nBuild-testing-by: Richard Weinberger \u003crichard.weinberger@gmail.com\u003e\nReviewed-by: Michal Hocko \u003cmhocko@suse.cz\u003e\nAcked-by: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "1801928e0f99d94c55e33c584c5eb2ff5e246ee6", "tree": "75ebcf4dc45ab7da14f064026b5786cca97ed227", "parents": [ "f85a6597a6ce33fe4f390744b2764b30aa7bfda8" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Fri Aug 16 08:17:05 2013 +0200" }, "committer": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Fri Aug 16 08:17:05 2013 +0200" }, "message": "ALSA: hda - Add a fixup for Gateway LT27\n\nGateway LT27 needs a fixup for the inverted digital mic.\n\nReported-by: \"Nathanael D. Noblet\" \u003cnathanael@gnat.ca\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\n" }, { "commit": "0a324f3189ed9c78b1aaf48d88e93cb18643c655", "tree": "74ce14e88537117866a5327e7afb2d4ba3617990", "parents": [ "15718ea0d844e4816dbd95d57a8a0e3e264ba90e" ], "author": { "name": "Moshe Lazer", "email": "moshel@mellanox.com", "time": "Wed Aug 14 17:46:48 2013 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Aug 15 15:42:57 2013 -0700" }, "message": "net/mlx5_core: Support MANAGE_PAGES and QUERY_PAGES firmware command changes\n\nIn the previous QUERY_PAGES command version we used one command to get the\nrequired amount of boot, init and post init pages. The new version uses the\nop_mod field to specify whether the query is for the required amount of boot,\ninit or post init pages. In addition the output field size for the required\namount of pages increased from 16 to 32 bits.\n\nIn MANAGE_PAGES command the input_num_entries and output_num_entries fields\nsizes changed from 16 to 32 bits and the PAS tables offset changed to 0x10.\n\nIn the pages request event the num_pages field also changed to 32 bits.\n\nIn the HCA-capabilities-layout the size and location of max_qp_mcg field has\nbeen changed to support 24 bits.\n\nThis patch isn\u0027t compatible with firmware versions \u003c 5; however, it turns out that the\nfirst GA firmware we will publish will not support previous versions so this should be OK.\n\nSigned-off-by: Moshe Lazer \u003cmoshel@mellanox.com\u003e\nSigned-off-by: Eli Cohen \u003celi@mellanox.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "15718ea0d844e4816dbd95d57a8a0e3e264ba90e", "tree": "1cd9c06a746d5e7173bfbe07ed84058c47ec4736", "parents": [ "d1fcc172570fa4de69c60bdabe1e1ccfcfe80c26" ], "author": { "name": "Dan Carpenter", "email": "dan.carpenter@oracle.com", "time": "Thu Aug 15 15:52:57 2013 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Aug 15 14:51:23 2013 -0700" }, "message": "tun: signedness bug in tun_get_user()\n\nThe recent fix d9bf5f1309 \"tun: compare with 0 instead of total_len\" is\nnot totally correct. Because \"len\" and \"sizeof()\" are size_t type, that\nmeans they are never less than zero.\n\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nAcked-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nAcked-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d1fcc172570fa4de69c60bdabe1e1ccfcfe80c26", "tree": "0a0d990c153d27186470a762dac17b1fe0a699b5", "parents": [ "482b3c3634f73f32bf1059b4470e1c5709c05ddf" ], "author": { "name": "Manish Chopra", "email": "manish.chopra@qlogic.com", "time": "Thu Aug 15 08:29:29 2013 -0400" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Aug 15 14:35:01 2013 -0700" }, "message": "qlcnic: Fix diagnostic interrupt test for 83xx adapters\n\no Do not allow interrupt test when adapter is resetting.\n\nSigned-off-by: Manish Chopra \u003cmanish.chopra@qlogic.com\u003e\nSigned-off-by: Sucheta Chakraborty \u003csucheta.chakraborty@qlogic.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "482b3c3634f73f32bf1059b4470e1c5709c05ddf", "tree": "2da06ad7fc5a4c9c515e76f98c76e3b216721b8c", "parents": [ "24866d15fa07cc8f0a1a8c48846f64af4af5d72a" ], "author": { "name": "Sucheta Chakraborty", "email": "sucheta.chakraborty@qlogic.com", "time": "Thu Aug 15 08:29:28 2013 -0400" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Aug 15 14:35:00 2013 -0700" }, "message": "qlcnic: Fix beacon state return status handling\n\no Driver was misinterpreting the return status for beacon\n state query leading to incorrect interpretation of beacon\n state and logging an error message for successful status.\n Fixed the driver to properly interpret the return status.\n\nSigned-off-by: Sucheta Chakraborty \u003csucheta.chakraborty@qlogic.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "24866d15fa07cc8f0a1a8c48846f64af4af5d72a", "tree": "f184768db373c024963375d009dcef2110639521", "parents": [ "6829309926b90c4c32d1f4cafeb600cd34a721e3" ], "author": { "name": "Himanshu Madhani", "email": "himanshu.madhani@qlogic.com", "time": "Thu Aug 15 08:29:27 2013 -0400" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Aug 15 14:35:00 2013 -0700" }, "message": "qlcnic: Fix set driver version command\n\nDriver was issuing set driver version command through all\nfunctions in the adapter. Fix the driver to issue set driver\nversion once per adapter, through function 0.\n\nSigned-off-by: Himanshu Madhani \u003chimanshu.madhani@qlogic.com\u003e\nSigned-off-by: Sucheta Chakraborty \u003csucheta.chakraborty@qlogic.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "6829309926b90c4c32d1f4cafeb600cd34a721e3", "tree": "3098cd027df9c533003000ccfdae9f570691e049", "parents": [ "8a8e3d84b1719a56f9151909e80ea6ebc5b8e318" ], "author": { "name": "Daniel Borkmann", "email": "dborkman@redhat.com", "time": "Tue Aug 13 11:45:13 2013 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Aug 15 13:41:20 2013 -0700" }, "message": "net: tg3: fix NULL pointer dereference in tg3_io_error_detected and tg3_io_slot_reset\n\nCommit d8af4dfd8 (\"net/tg3: Fix kernel crash\") introduced a possible\nNULL pointer dereference in tg3 driver when !netdev || !netif_running(netdev)\ncondition is met and netdev is NULL. Then, the jump to the \u0027done\u0027 label\ncalls dev_close() with a netdevice that is NULL. Therefore, only call\ndev_close() when we have a netdevice, but one that is not running.\n\n[ Add the same checks in tg3_io_slot_reset() per Gavin Shan - by Nithin\nNayak Sujir ]\n\nReported-by: Dave Jones \u003cdavej@redhat.com\u003e\nSigned-off-by: Daniel Borkmann \u003cdborkman@redhat.com\u003e\nCc: Gavin Shan \u003cshangw@linux.vnet.ibm.com\u003e\nCc: Michael Chan \u003cmchan@broadcom.com\u003e\nSigned-off-by: Nithin Nayak Sujir \u003cnsujir@broadcom.com\u003e\nSigned-off-by: Nithin Nayak Sujir \u003cnsujir@broadcom.com\u003e\nSigned-off-by: Michael Chan \u003cmchan@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f85a6597a6ce33fe4f390744b2764b30aa7bfda8", "tree": "9b923afc20e7d3a7e78f98d600fd7e6633b4265b", "parents": [ "140d37de62ffe8405282a1d6498f3b4099006384", "44ffb69ec617f64cd83182e8b64d93b84758d636" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Thu Aug 15 20:43:46 2013 +0200" }, "committer": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Thu Aug 15 20:43:46 2013 +0200" }, "message": "Merge tag \u0027asoc-v3.11-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus\n\nASoC: Fixes for v3.11\n\nA few driver specific fixes here plus one core fix for a memory\ncorruption issue in DAPM initialisation which could lead to crashes.\n" }, { "commit": "d43a93c8d9bc4e0dc0293b6458c077c3c797594f", "tree": "dd64a4de083572ab300e149d58d3e0ec8f7da158", "parents": [ "022374c02e357ac82e98dd2689fb2efe05723d69" ], "author": { "name": "Rafał Miłecki", "email": "zajec5@gmail.com", "time": "Thu Aug 15 18:55:22 2013 +0200" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Thu Aug 15 12:59:45 2013 -0400" }, "message": "drm/radeon: fix WREG32_OR macro setting bits in a register\n\nThis bug (introduced in 3.10) in WREG32_OR made\ncommit d3418eacad403033e95e49dc14afa37c2112c134\n\"drm/radeon/evergreen: setup HDMI before enabling it\"\ncause a regression. Sometimes audio over HDMI wasn\u0027t working, sometimes\ndisplay was corrupted.\n\nThis fixes:\nhttps://bugzilla.kernel.org/show_bug.cgi?id\u003d60687\nhttps://bugzilla.kernel.org/show_bug.cgi?id\u003d60709\nhttps://bugs.freedesktop.org/show_bug.cgi?id\u003d67767\n\nSigned-off-by: Rafał Miłecki \u003czajec5@gmail.com\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n" }, { "commit": "44ffb69ec617f64cd83182e8b64d93b84758d636", "tree": "773ce11fb8f659a05831ee233ffc1723a611c86c", "parents": [ "f6938bb360777a31fbb32ee0f7fa6a7f415d5a53", "c90c0d7a96e634a73ef1580f1d20993606545647" ], "author": { "name": "Mark Brown", "email": "broonie@linaro.org", "time": "Thu Aug 15 11:37:54 2013 +0100" }, "committer": { "name": "Mark Brown", "email": "broonie@linaro.org", "time": "Thu Aug 15 11:37:54 2013 +0100" }, "message": "Merge remote-tracking branch \u0027asoc/fix/tegra\u0027 into asoc-linus\n" }, { "commit": "f6938bb360777a31fbb32ee0f7fa6a7f415d5a53", "tree": "8ac80085e837a2585d3f002a55a162c480cba683", "parents": [ "14388a69348d14fb8fb02a2cbd0512af8902e912", "65f2b226763bc348a9b9145aa5e17e7e3f6d8c35" ], "author": { "name": "Mark Brown", "email": "broonie@linaro.org", "time": "Thu Aug 15 11:37:53 2013 +0100" }, "committer": { "name": "Mark Brown", "email": "broonie@linaro.org", "time": "Thu Aug 15 11:37:53 2013 +0100" }, "message": "Merge remote-tracking branch \u0027asoc/fix/sgtl5000\u0027 into asoc-linus\n" }, { "commit": "14388a69348d14fb8fb02a2cbd0512af8902e912", "tree": "ebce31fb5aebf7373f47725f8a8ae00de8fef0ff", "parents": [ "c200d8881634a390bcb6ef4e23aa5d9a08d41efa", "fe581391147cb3d738d961d0f1233d91a9e1113c" ], "author": { "name": "Mark Brown", "email": "broonie@linaro.org", "time": "Thu Aug 15 11:37:53 2013 +0100" }, "committer": { "name": "Mark Brown", "email": "broonie@linaro.org", "time": "Thu Aug 15 11:37:53 2013 +0100" }, "message": "Merge remote-tracking branch \u0027asoc/fix/dapm\u0027 into asoc-linus\n" }, { "commit": "c200d8881634a390bcb6ef4e23aa5d9a08d41efa", "tree": "1ed0409747fe2d3968fc813cfcc809ba53498ee5", "parents": [ "d4e4ab86bcba5a72779c43dc1459f71fea3d89c8", "8806d96db7b04fffba4cfc9ceac31d24c8517fe9" ], "author": { "name": "Mark Brown", "email": "broonie@linaro.org", "time": "Thu Aug 15 11:37:52 2013 +0100" }, "committer": { "name": "Mark Brown", "email": "broonie@linaro.org", "time": "Thu Aug 15 11:37:52 2013 +0100" }, "message": "Merge remote-tracking branch \u0027asoc/fix/cs42l52\u0027 into asoc-linus\n" }, { "commit": "c90c0d7a96e634a73ef1580f1d20993606545647", "tree": "de70856609478555ff8ff19e6076d23ae22080dc", "parents": [ "d4e4ab86bcba5a72779c43dc1459f71fea3d89c8" ], "author": { "name": "Stephen Warren", "email": "swarren@nvidia.com", "time": "Wed Aug 14 14:24:16 2013 -0600" }, "committer": { "name": "Mark Brown", "email": "broonie@linaro.org", "time": "Thu Aug 15 11:07:53 2013 +0100" }, "message": "ASoC: tegra: fix Tegra30 I2S capture parameter setup\n\nThe Tegra30 I2S driver was writing the AHUB interface parameters to the\nplayback path register rather than the capture path register. This\ncaused the capture parameters not to be configured at all, so if\ncapturing using non-HW-default parameters (e.g. 16-bit stereo rather\nthan 8-bit mono) the audio would be corrupted.\n\nWith this fixed, audio capture from an analog microphone works correctly\non the Cardhu board.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Stephen Warren \u003cswarren@nvidia.com\u003e\nSigned-off-by: Mark Brown \u003cbroonie@linaro.org\u003e\n" }, { "commit": "8a8e3d84b1719a56f9151909e80ea6ebc5b8e318", "tree": "be050c259ea5bfc41731ac0581df4f57034cb7a3", "parents": [ "09a8f03197d4799bc9969b35240e5606c026ded6" ], "author": { "name": "Jesper Dangaard Brouer", "email": "brouer@redhat.com", "time": "Wed Aug 14 23:47:11 2013 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Aug 15 01:43:08 2013 -0700" }, "message": "net_sched: restore \"linklayer atm\" handling\n\ncommit 56b765b79 (\"htb: improved accuracy at high rates\")\nbroke the \"linklayer atm\" handling.\n\n tc class add ... htb rate X ceil Y linklayer atm\n\nThe linklayer setting is implemented by modifying the rate table\nwhich is send to the kernel. No direct parameter were\ntransferred to the kernel indicating the linklayer setting.\n\nThe commit 56b765b79 (\"htb: improved accuracy at high rates\")\nremoved the use of the rate table system.\n\nTo keep compatible with older iproute2 utils, this patch detects\nthe linklayer by parsing the rate table. It also supports future\nversions of iproute2 to send this linklayer parameter to the\nkernel directly. This is done by using the __reserved field in\nstruct tc_ratespec, to convey the choosen linklayer option, but\nonly using the lower 4 bits of this field.\n\nLinklayer detection is limited to speeds below 100Mbit/s, because\nat high rates the rtab is gets too inaccurate, so bad that\nseveral fields contain the same values, this resembling the ATM\ndetect. Fields even start to contain \"0\" time to send, e.g. at\n1000Mbit/s sending a 96 bytes packet cost \"0\", thus the rtab have\nbeen more broken than we first realized.\n\nSigned-off-by: Jesper Dangaard Brouer \u003cbrouer@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "09a8f03197d4799bc9969b35240e5606c026ded6", "tree": "cdd3f2d2a3eb8c22c57b9e6a5384df824e52417f", "parents": [ "2fdac010bdcf10a30711b6924612dfc40daf19b8", "36bf5cc66d60868bcc10aff209defed5a7b71c1d" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Aug 15 01:41:10 2013 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Aug 15 01:41:10 2013 -0700" }, "message": "Merge branch \u0027fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jesse/openvswitch\n\nJesse Gross says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nThree bug fixes that are fairly small either way but resolve obviously\nincorrect code. For net/3.11.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2fdac010bdcf10a30711b6924612dfc40daf19b8", "tree": "2b00818ed922c660f78e9805bda3226dcf237798", "parents": [ "728e2ccaa3c4d20cf4d54b73a47956bf4d334a9f" ], "author": { "name": "Julia Lawall", "email": "Julia.Lawall@lip6.fr", "time": "Wed Aug 14 16:26:53 2013 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Aug 15 01:38:34 2013 -0700" }, "message": "drivers/net/ethernet/via/via-velocity.c: update napi implementation\n\nDrivers supporting NAPI should use a NAPI-specific function for receiving\npackets. Hence netif_rx is changed to netif_receive_skb.\n\nFurthermore netif_napi_del should be used in the probe and remove function\nto clean up the NAPI resource information.\n\nThanks to Francois Romieu, David Shwatrz and Rami Rosen for their help on\nthis patch.\n\nSigned-off-by: Julia Lawall \u003cJulia.Lawall@lip6.fr\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "728e2ccaa3c4d20cf4d54b73a47956bf4d334a9f", "tree": "e3e6143d6a22605873988d533c50ceb909bd6e8b", "parents": [ "3da988c91d9c167994703a9d6f9e645df22c3c95" ], "author": { "name": "Alexey Kardashevskiy", "email": "aik@ozlabs.ru", "time": "Wed Aug 14 19:19:01 2013 +1000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Aug 15 01:23:32 2013 -0700" }, "message": "Revert \"cxgb3: Check and handle the dma mapping errors\"\n\nThis reverts commit f83331bab149e29fa2c49cf102c0cd8c3f1ce9f9.\n\nAs the tests PPC64 (powernv platform) show, IOMMU pages are leaking\nwhen transferring big amount of small packets (\u003c\u003d64 bytes),\n\"ping -f\" and waiting for 15 seconds is the simplest way to confirm the bug.\n\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Santosh Rastapur \u003csantosh@chelsio.com\u003e\nCc: Jay Fenlason \u003cfenlason@redhat.com\u003e\nCc: David S. Miller \u003cdavem@davemloft.net\u003e\nCc: Divy Le ray \u003cdivy@chelsio.com\u003e\nSigned-off-by: Alexey Kardashevskiy \u003caik@ozlabs.ru\u003e\nAcked-by: Divy Le Ray \u003cdivy@chelsio.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3da988c91d9c167994703a9d6f9e645df22c3c95", "tree": "9d527b8684ce4176f6f2eecbbb882c39fbf24763", "parents": [ "d9bf5f130946695063469749bfd190087b7fad39" ], "author": { "name": "Sarveshwar Bandi", "email": "sarveshwar.bandi@emulex.com", "time": "Wed Aug 14 13:21:47 2013 +0530" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Aug 15 01:22:12 2013 -0700" }, "message": "be2net: Clear any capability flags that driver is not interested in.\n\nIt is possible for some versions of firmware to advertise capabilities that driver\nis not ready to handle. This may lead to controller stall. Since the driver is\ninterested only in subset of flags, clearing the rest.\n\nSigned-off-by: Sarveshwar Bandi \u003csarveshwar.bandi@emulex.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "36bf5cc66d60868bcc10aff209defed5a7b71c1d", "tree": "1754ed6ef77bf8cb67f653339ca8a7705307b760", "parents": [ "42415c90ceaf50c792e29823e359463bc6d4ee05" ], "author": { "name": "Jesse Gross", "email": "jesse@nicira.com", "time": "Wed Aug 14 15:50:36 2013 -0700" }, "committer": { "name": "Jesse Gross", "email": "jesse@nicira.com", "time": "Wed Aug 14 15:50:36 2013 -0700" }, "message": "openvswitch: Reset tunnel key between input and output.\n\nIt doesn\u0027t make sense to output a tunnel packet using the same\nparameters that it was received with since that will generally\njust result in the packet going back to us. As a result, userspace\nassumes that the tunnel key is cleared when transitioning through\nthe switch. In the majority of cases this doesn\u0027t matter since a\npacket is either going to a tunnel port (in which the key is\noverwritten with new values) or to a non-tunnel port (in which\ncase the key is ignored). However, it\u0027s theoreticaly possible that\nuserspace could rely on the documented behavior, so this corrects\nit.\n\nSigned-off-by: Jesse Gross \u003cjesse@nicira.com\u003e\n" }, { "commit": "42415c90ceaf50c792e29823e359463bc6d4ee05", "tree": "0857d63fdc8424b3ba8cbf688a4320674a29549e", "parents": [ "30444e981ba28e892c439017fbc011d867f02a7d" ], "author": { "name": "Pravin B Shelar", "email": "pshelar@nicira.com", "time": "Tue Jul 30 15:44:14 2013 -0700" }, "committer": { "name": "Jesse Gross", "email": "jesse@nicira.com", "time": "Wed Aug 14 15:48:17 2013 -0700" }, "message": "openvswitch: Use correct type while allocating flex array.\n\nFlex array is used to allocate hash buckets which is type struct\nhlist_head, but we use `struct hlist_head *` to calculate\narray size. Since hlist_head is of size pointer it works fine.\n\nFollowing patch use correct type.\n\nSigned-off-by: Pravin B Shelar \u003cpshelar@nicira.com\u003e\nSigned-off-by: Jesse Gross \u003cjesse@nicira.com\u003e\n" }, { "commit": "30444e981ba28e892c439017fbc011d867f02a7d", "tree": "3f26f5da57a38f9365b03696c7cb733f86b67554", "parents": [ "ad81f0545ef01ea651886dddac4bef6cec930092" ], "author": { "name": "Jesse Gross", "email": "jesse@nicira.com", "time": "Mon May 13 08:41:06 2013 -0700" }, "committer": { "name": "Jesse Gross", "email": "jesse@nicira.com", "time": "Wed Aug 14 15:48:02 2013 -0700" }, "message": "openvswitch: Fix bad merge resolution.\n\ngit silently included an extra hunk in vport_cmd_set() during\nautomatic merging. This code is unreachable so it does not actually\nintroduce a problem but it is clearly incorrect.\n\nSigned-off-by: Jesse Gross \u003cjesse@nicira.com\u003e\n" }, { "commit": "022374c02e357ac82e98dd2689fb2efe05723d69", "tree": "166c8f88b03be842176bcc3c4983362470d053c1", "parents": [ "112a6d0c071808f6d48354fc8834a574e5dcefc0" ], "author": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Aug 13 15:57:32 2013 -0400" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Wed Aug 14 18:03:40 2013 -0400" }, "message": "drm/radeon/r7xx: fix copy paste typo in golden register setup\n\nUses the wrong array size for some asics which can lead\nto garbage getting written to registers.\n\nFixes:\nhttps://bugzilla.kernel.org/show_bug.cgi?id\u003d60674\n\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nCc: stable@vger.kernel.org\n" }, { "commit": "ff8a43c10f1440f07a5faca0c1556921259f7f76", "tree": "80402017bf94acfa9418892f64483e5c9bf0590a", "parents": [ "ef6c8c1d733e244f0499035be0dabe1f4ed98c6f" ], "author": { "name": "Johan Hovold", "email": "jhovold@gmail.com", "time": "Tue Aug 13 13:27:35 2013 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Aug 14 12:49:27 2013 -0700" }, "message": "USB: keyspan: fix null-deref at disconnect and release\n\nMake sure to fail properly if the device is not accepted during attach\nin order to avoid null-pointer derefs (of missing interface private\ndata) at disconnect or release.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Johan Hovold \u003cjhovold@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "ef6c8c1d733e244f0499035be0dabe1f4ed98c6f", "tree": "613007be3fb6a2d3690defa6d6a5730ea562c24a", "parents": [ "304ab4ab079a8ed03ce39f1d274964a532db036b" ], "author": { "name": "Johan Hovold", "email": "jhovold@gmail.com", "time": "Tue Aug 13 13:27:34 2013 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Aug 14 12:49:27 2013 -0700" }, "message": "USB: mos7720: fix broken control requests\n\nThe parallel-port code of the drivers used a stack allocated\ncontrol-request buffer for asynchronous (and possibly deferred) control\nrequests. This not only violates the no-DMA-from-stack requirement but\ncould also lead to corrupt control requests being submitted.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Johan Hovold \u003cjhovold@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "304ab4ab079a8ed03ce39f1d274964a532db036b", "tree": "580a946d8e4c63925f2203e1749d901ef3f1b170", "parents": [ "e877dd2f2581628b7119df707d4cf03d940cff49" ], "author": { "name": "Oliver Neukum", "email": "oneukum@suse.de", "time": "Wed Aug 14 11:01:46 2013 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Aug 14 12:49:27 2013 -0700" }, "message": "usb: add two quirky touchscreen\n\nThese devices tend to become unresponsive after S3\n\nSigned-off-by: Oliver Neukum \u003coneukum@suse.de\u003e\nCC: stable@vger.kernel.org\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "63b66e5ba54b15a6592be00555d762db6db739ce", "tree": "875b59d385d784bb2b1af2c65fec0656c27ccc60", "parents": [ "d4e4ab86bcba5a72779c43dc1459f71fea3d89c8" ], "author": { "name": "Chris Wilson", "email": "chris@chris-wilson.co.uk", "time": "Thu Aug 08 15:12:06 2013 +0200" }, "committer": { "name": "Daniel Vetter", "email": "daniel.vetter@ffwll.ch", "time": "Wed Aug 14 20:26:49 2013 +0200" }, "message": "drm/i915: Don\u0027t deref pipe-\u003ecpu_transcoder in the hangcheck code\n\nIf we get an error event really early in the driver setup sequence,\nwhich gen3 is especially prone to with various display GTT faults we\nOops. So try to avoid this.\n\nAdditionally with Haswell the transcoders are a separate bank of\nregisters from the pipes (4 transcoders, 3 pipes). In event of an\nerror, we want to be sure we have a complete and accurate picture of\nthe machine state, so record all the transcoders in addition to all\nthe active pipes.\n\nThis regression has been introduced in\n\ncommit 702e7a56af3780d8b3a717f698209bef44187bb0\nAuthor: Paulo Zanoni \u003cpaulo.r.zanoni@intel.com\u003e\nDate: Tue Oct 23 18:29:59 2012 -0200\n\n drm/i915: convert PIPECONF to use transcoder instead of pipe\n\nBased on the patch \"drm/i915: Dump all transcoder registers on error\"\nfrom Chris Wilson:\n\nv2: Rebase so that we don\u0027t try to be clever and try to figure out the\ncpu transcoder from hw state. That exercise should be done when we\nanalyze the error state offline.\n\nThe actual bugfix is to not call intel_pipe_to_cpu_transcoder in the\nerror state capture code in case the pipes aren\u0027t fully set up yet.\n\nv3: Simplifiy the err-\u003enum_transcoders computation a bit. While at it\nmake the error capture stuff save on systems without a display block.\n\nv4: Fix fail, spotted by Jani.\n\nv5: Completely new commit message, cc: stable.\n\nCc: Paulo Zanoni \u003cpaulo.r.zanoni@intel.com\u003e\nCc: Damien Lespiau \u003cdamien.lespiau@intel.com\u003e\nCc: Jani Nikula \u003cjani.nikula@intel.com\u003e\nCc: Chris Wilson \u003cchris@chris-wilson.co.uk\u003e\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d60021\nCc: stable@vger.kernel.org\nTested-by: Dustin King \u003cdaking@rescomp.stanford.edu\u003e\nReviewed-by: Jani Nikula \u003cjani.nikula@intel.com\u003e\nReviewed-by: Chris Wilson \u003cchris@chris-wilson.co.uk\u003e\nSigned-off-by: Daniel Vetter \u003cdaniel.vetter@ffwll.ch\u003e\n" }, { "commit": "f1d6e17f540af37bb1891480143669ba7636c4cf", "tree": "962d95f43fe425c9a7d4c7f1316c76000bcec370", "parents": [ "28fbc8b6a29c849a3f03a6b05010d4b584055665", "8c8296223f3abb142be8fc31711b18a704c0e7d8" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Aug 14 10:04:43 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Aug 14 10:04:43 2013 -0700" }, "message": "Merge branch \u0027akpm\u0027 (patches from Andrew Morton)\n\nMerge a bunch of fixes from Andrew Morton.\n\n* emailed patches from Andrew Morton \u003cakpm@linux-foundation.org\u003e:\n fs/proc/task_mmu.c: fix buffer overflow in add_page_map()\n arch: *: Kconfig: add \"kernel/Kconfig.freezer\" to \"arch/*/Kconfig\"\n ocfs2: fix null pointer dereference in ocfs2_dir_foreach_blk_id()\n x86 get_unmapped_area(): use proper mmap base for bottom-up direction\n ocfs2: fix NULL pointer dereference in ocfs2_duplicate_clusters_by_page\n ocfs2: Revert 40bd62e to avoid regression in extended allocation\n drivers/rtc/rtc-stmp3xxx.c: provide timeout for potentially endless loop polling a HW bit\n hugetlb: fix lockdep splat caused by pmd sharing\n aoe: adjust ref of head for compound page tails\n microblaze: fix clone syscall\n mm: save soft-dirty bits on file pages\n mm: save soft-dirty bits on swapped pages\n memcg: don\u0027t initialize kmem-cache destroying work for root caches\n" }, { "commit": "ccb1f55e710b78e1ea1de769bcab2d1e1abe8457", "tree": "97d953b4c2afbb895a3d0bab2fadfb9a8acf61cc", "parents": [ "d55e37bb0f51316e552376ddc0a3fff34ca7108b", "84516098b58e05821780dc0b89abcee434b4dca5" ], "author": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Wed Aug 14 12:16:28 2013 +0200" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Wed Aug 14 12:16:28 2013 +0200" }, "message": "Merge tag \u0027amd_ucode_fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/bp/bp into x86/urgent\n\nPull AMD microcode fixes from Borislav Petkov:\n\n \" Those are basically two fixes which correct the AMD early ucode loader\n from accessing cpu_data too early, i.e. before smp_store_cpu_info()\n has copied the boot_cpu_data ontop and overwritten an already empty\n structure (which we shouldn\u0027t access that early in the first place\n anyway).\n\n The second patch is kinda largish for that late in the game but it\n shouldn\u0027t be problematic because we\u0027re simply switching from using\n cpu_data to use the CPU family number directly and thus again, not use\n uninitialized cpu_data structure. \"\n\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\n" }, { "commit": "ea077b1b96e073eac5c3c5590529e964767fc5f7", "tree": "7a1fdaa1251a752421f881d96dc4bf1a59bc091a", "parents": [ "e8184e10f89736a23ea6eea8e24cd524c5c513d2" ], "author": { "name": "Andreas Schwab", "email": "schwab@linux-m68k.org", "time": "Fri Aug 09 15:14:08 2013 +0200" }, "committer": { "name": "Geert Uytterhoeven", "email": "geert@linux-m68k.org", "time": "Wed Aug 14 11:46:30 2013 +0200" }, "message": "m68k: Truncate base in do_div()\n\nExplicitly truncate the second operand of do_div() to 32 bits to guard\nagainst bogus code calling it with a 64-bit divisor.\n\n[Thorsten]\n\nAfter upgrading from 3.2 to 3.10, mounting a btrfs volume fails with:\n\nbtrfs: setting nodatacow, compression disabled\nbtrfs: enabling auto recovery\nbtrfs: disk space caching is enabled\n*** ZERO DIVIDE *** FORMAT\u003d2\nCurrent process id is 722\nBAD KERNEL TRAP: 00000000\nModules linked in: evdev mac_hid ext4 crc16 jbd2 mbcache btrfs xor lzo_compress zlib_deflate raid6_pq crc32c libcrc32c\nPC: [\u003c319535b2\u003e] __btrfs_map_block+0x11c/0x119a [btrfs]\nSR: 2000 SP: 30c1fab4 a2: 30f0faf0\nd0: 00000000 d1: 00001000 d2: 00000000 d3: 00000000\nd4: 00010000 d5: 00000000 a0: 3085c72c a1: 3085c72c\nProcess mount (pid: 722, task\u003d30f0faf0)\nFrame format\u003d2 instr addr\u003d319535ae\nStack from 30c1faec:\n 00000000 00000020 00000000 00001000 00000000 01401000 30253928 300ffc00\n 00a843ac 3026f640 00000000 00010000 0009e250 00d106c0 00011220 00000000\n 00001000 301c6830 0009e32a 000000ff 00000009 3085c72c 00000000 00000000\n 30c1fd14 00000000 00000020 00000000 30c1fd14 0009e26c 00000020 00000003\n 00000000 0009dd8a 300b0b6c 30253928 00a843ac 00001000 00000000 00000000\n 0000a008 3194e76a 30253928 00a843ac 00001000 00000000 00000000 00000002\nCall Trace: [\u003c00001000\u003e] kernel_pg_dir+0x0/0x1000\n\n [...]\n\nCode: 222e ff74 2a2e ff5c 2c2e ff60 4c45 1402 \u003c2d40\u003e ff64 2d41 ff68 2205 4c2e 1800 ff68 4c04 0800 2041 d1c0 2206 4c2e 1400 ff68\n\n[Geert]\n\nAs diagnosed by Andreas, fs/btrfs/volumes.c:__btrfs_map_block()\ncalls\n\n do_div(stripe_nr, stripe_len);\n\nwith stripe_len u64, while do_div() assumes the divisor is a 32-bit number.\n\nDue to the lack of truncation in the m68k-specific implementation of\ndo_div(), the division is performed using the upper 32-bit word of\nstripe_len, which is zero.\n\nThis was introduced by commit 53b381b3abeb86f12787a6c40fee9b2f71edc23b\n(\"Btrfs: RAID5 and RAID6\"), which changed the divisor from\nmap-\u003estripe_len (struct map_lookup.stripe_len is int) to a 64-bit temporary.\n\nReported-by: Thorsten Glaser \u003ctg@debian.org\u003e\nSigned-off-by: Andreas Schwab \u003cschwab@linux-m68k.org\u003e\nTested-by: Thorsten Glaser \u003ctg@debian.org\u003e\nSigned-off-by: Geert Uytterhoeven \u003cgeert@linux-m68k.org\u003e\nCc: stable@vger.kernel.org\n" }, { "commit": "e8184e10f89736a23ea6eea8e24cd524c5c513d2", "tree": "ebad6db137be91c88259ca21de265fd520126256", "parents": [ "d4e4ab86bcba5a72779c43dc1459f71fea3d89c8" ], "author": { "name": "Geert Uytterhoeven", "email": "geert@linux-m68k.org", "time": "Fri Jul 26 00:08:25 2013 +0200" }, "committer": { "name": "Geert Uytterhoeven", "email": "geert@linux-m68k.org", "time": "Wed Aug 14 11:46:30 2013 +0200" }, "message": "m68k/atari: ARAnyM - Fix NatFeat module support\n\nAs pointed out by Andreas Schwab, pointers passed to ARAnyM NatFeat calls\nshould be physical addresses, not virtual addresses.\n\nFortunately on Atari, physical and virtual kernel addresses are the same,\nas long as normal kernel memory is concerned, so this usually worked fine\nwithout conversion.\n\nBut for modules, pointers to literal strings are located in vmalloc()ed\nmemory. Depending on the version of ARAnyM, this causes the nf_get_id()\ncall to just fail, or worse, crash ARAnyM itself with e.g.\n\n Gotcha! Illegal memory access. Atari PC \u003d $968c\n\nThis is a big issue for distro kernels, who want to have all drivers as\nloadable modules in an initrd.\n\nAdd a wrapper for nf_get_id() that copies the literal to the stack to\nwork around this issue.\n\nReported-by: Thorsten Glaser \u003ctg@debian.org\u003e\nSigned-off-by: Geert Uytterhoeven \u003cgeert@linux-m68k.org\u003e\nCc: stable@vger.kernel.org\n" }, { "commit": "d9bf5f130946695063469749bfd190087b7fad39", "tree": "a503bf3a2373153d49d4b6fb0d0d3798a237dcb1", "parents": [ "3e805ad288c524bb65aad3f1e004402223d3d504" ], "author": { "name": "Weiping Pan", "email": "wpan@redhat.com", "time": "Tue Aug 13 21:46:56 2013 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Aug 13 19:29:08 2013 -0700" }, "message": "tun: compare with 0 instead of total_len\n\nSince we set \"len \u003d total_len\" in the beginning of tun_get_user(),\nso we should compare the new len with 0, instead of total_len,\nor the if statement always returns false.\n\nSigned-off-by: Weiping Pan \u003cwpan@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3e805ad288c524bb65aad3f1e004402223d3d504", "tree": "7c3114b60b231ab2ac9b5141763cd7d03c4fe6e5", "parents": [ "9cff866e37eb47780bf34842fcf371e41c5a0639" ], "author": { "name": "Asbjoern Sloth Toennesen", "email": "ast@fiberby.net", "time": "Mon Aug 12 16:30:09 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Aug 13 19:09:29 2013 -0700" }, "message": "rtnetlink: rtnl_bridge_getlink: Call nlmsg_find_attr() with ifinfomsg header\n\nFix the iproute2 command `bridge vlan show`, after switching from\nrtgenmsg to ifinfomsg.\n\nLet\u0027s start with a little history:\n\nFeb 20: Vlad Yasevich got his VLAN-aware bridge patchset included in\n the 3.9 merge window.\n In the kernel commit 6cbdceeb, he added attribute support to\n bridge GETLINK requests sent with rtgenmsg.\n\nMar 6th: Vlad got this iproute2 reference implementation of the bridge\n vlan netlink interface accepted (iproute2 9eff0e5c)\n\nApr 25th: iproute2 switched from using rtgenmsg to ifinfomsg (63338dca)\n http://patchwork.ozlabs.org/patch/239602/\n http://marc.info/?t\u003d136680900700007\n\nApr 28th: Linus released 3.9\n\nApr 30th: Stephen released iproute2 3.9.0\n\nThe `bridge vlan show` command haven\u0027t been working since the switch to\nifinfomsg, or in a released version of iproute2. Since the kernel side\nonly supports rtgenmsg, which iproute2 switched away from just prior to\nthe iproute2 3.9.0 release.\n\nI haven\u0027t been able to find any documentation, about neither rtgenmsg\nnor ifinfomsg, and in which situation to use which, but kernel commit\n88c5b5ce seams to suggest that ifinfomsg should be used.\n\nFixing this in kernel will break compatibility, but I doubt that anybody\nhave been using it due to this bug in the user space reference\nimplementation, at least not without noticing this bug. That said the\nfunctionality is still fully functional in 3.9, when reversing iproute2\ncommit 63338dca.\n\nThis could also be fixed in iproute2, but thats an ugly patch that would\nreintroduce rtgenmsg in iproute2, and from searching in netdev it seams\nlike rtgenmsg usage is discouraged. I\u0027m assuming that the only reason\nthat Vlad implemented the kernel side to use rtgenmsg, was because\niproute2 was using it at the time.\n\nSigned-off-by: Asbjoern Sloth Toennesen \u003cast@fiberby.net\u003e\nReviewed-by: Vlad Yasevich \u003cvyasevich@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8c8296223f3abb142be8fc31711b18a704c0e7d8", "tree": "1de036ad6669fc8c4b9ce45eea00d514e4261944", "parents": [ "57a1a1976318beb8de0e544039072a4fe1afa37c" ], "author": { "name": "yonghua zheng", "email": "younghua.zheng@gmail.com", "time": "Tue Aug 13 16:01:03 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 17:57:50 2013 -0700" }, "message": "fs/proc/task_mmu.c: fix buffer overflow in add_page_map()\n\nRecently we met quite a lot of random kernel panic issues after enabling\nCONFIG_PROC_PAGE_MONITOR. After debuggind we found this has something\nto do with following bug in pagemap:\n\nIn struct pagemapread:\n\n struct pagemapread {\n int pos, len;\n pagemap_entry_t *buffer;\n bool v2;\n };\n\npos is number of PM_ENTRY_BYTES in buffer, but len is the size of\nbuffer, it is a mistake to compare pos and len in add_page_map() for\nchecking buffer is full or not, and this can lead to buffer overflow and\nrandom kernel panic issue.\n\nCorrect len to be total number of PM_ENTRY_BYTES in buffer.\n\n[akpm@linux-foundation.org: document pagemapread.pos and .len units, fix PM_ENTRY_BYTES definition]\nSigned-off-by: Yonghua Zheng \u003cyounghua.zheng@gmail.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "57a1a1976318beb8de0e544039072a4fe1afa37c", "tree": "5747c6649de1a98a40e5a95251cb3d80676d84fd", "parents": [ "d6394b5900298385fd6fab299c445fb1b0b7a182" ], "author": { "name": "Chen Gang", "email": "gang.chen@asianux.com", "time": "Tue Aug 13 16:01:02 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 17:57:49 2013 -0700" }, "message": "arch: *: Kconfig: add \"kernel/Kconfig.freezer\" to \"arch/*/Kconfig\"\n\nAll architectures include \"kernel/Kconfig.freezer\" except three left, so\nlet them include it too, or \u0027allmodconfig\u0027 will report error.\n\nThe related errors: (with allmodconfig for openrisc):\n\n CC kernel/cgroup_freezer.o\n kernel/cgroup_freezer.c: In function \u0027freezer_css_online\u0027:\n kernel/cgroup_freezer.c:133:15: error: \u0027system_freezing_cnt\u0027 undeclared (first use in this function)\n kernel/cgroup_freezer.c:133:15: note: each undeclared identifier is reported only once for each function it appears in\n kernel/cgroup_freezer.c: In function \u0027freezer_css_offline\u0027:\n kernel/cgroup_freezer.c:157:15: error: \u0027system_freezing_cnt\u0027 undeclared (first use in this function)\n kernel/cgroup_freezer.c: In function \u0027freezer_attach\u0027:\n kernel/cgroup_freezer.c:200:4: error: implicit declaration of function \u0027freeze_task\u0027\n kernel/cgroup_freezer.c: In function \u0027freezer_apply_state\u0027:\n kernel/cgroup_freezer.c:371:16: error: \u0027system_freezing_cnt\u0027 undeclared (first use in this function)\n\nSigned-off-by: Chen Gang \u003cgang.chen@asianux.com\u003e\nCc: Richard Kuo \u003crkuo@codeaurora.org\u003e\nCc: Jonas Bonn \u003cjonas@southpole.se\u003e\nCc: Chen Liqin \u003cliqin.chen@sunplusct.com\u003e\nCc: Lennox Wu \u003clennox.wu@gmail.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "d6394b5900298385fd6fab299c445fb1b0b7a182", "tree": "52c7cd17bc86308fa8c5bfb51d378da62193927c", "parents": [ "df54d6fa54275ce59660453e29d1228c2b45a826" ], "author": { "name": "Jeff Liu", "email": "jeff.liu@oracle.com", "time": "Tue Aug 13 16:01:01 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 17:57:49 2013 -0700" }, "message": "ocfs2: fix null pointer dereference in ocfs2_dir_foreach_blk_id()\n\nFix a NULL pointer deference while removing an empty directory, which\nwas introduced by commit 3704412bdbf3 (\"[readdir] convert ocfs2\").\n\n BUG: unable to handle kernel NULL pointer dereference at (null)\n IP: [\u003c(null)\u003e] (null)\n PGD 6da85067 PUD 6da89067 PMD 0\n Oops: 0010 [#1] SMP\n CPU: 0 PID: 6564 Comm: rmdir Tainted: G O 3.11.0-rc1 #4\n RIP: 0010:[\u003c0000000000000000\u003e] [\u003c (null)\u003e] (null)\n Call Trace:\n ocfs2_dir_foreach+0x49/0x50 [ocfs2]\n ocfs2_empty_dir+0x12c/0x3e0 [ocfs2]\n ocfs2_unlink+0x56e/0xc10 [ocfs2]\n vfs_rmdir+0xd5/0x140\n do_rmdir+0x1cb/0x1e0\n SyS_rmdir+0x16/0x20\n system_call_fastpath+0x16/0x1b\n Code: Bad RIP value.\n RIP [\u003c (null)\u003e] (null)\n RSP \u003cffff88006daddc10\u003e\n CR2: 0000000000000000\n\n[dan.carpenter@oracle.com: fix pointer math]\nSigned-off-by: Jie Liu \u003cjeff.liu@oracle.com\u003e\nReported-by: David Weber \u003cwb@munzinger.de\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Joel Becker \u003cjlbec@evilplan.org\u003e\nCc: Mark Fasheh \u003cmfasheh@suse.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "df54d6fa54275ce59660453e29d1228c2b45a826", "tree": "8e8c54da4a1cd7f9caca46b2b39d673c3bf7f793", "parents": [ "c7dd3392ad469e6ba125170ad29f881bed85b678" ], "author": { "name": "Radu Caragea", "email": "sinaelgl@gmail.com", "time": "Tue Aug 13 16:00:59 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 17:57:49 2013 -0700" }, "message": "x86 get_unmapped_area(): use proper mmap base for bottom-up direction\n\nWhen the stack is set to unlimited, the bottomup direction is used for\nmmap-ings but the mmap_base is not used and thus effectively renders\nASLR for mmapings along with PIE useless.\n\nCc: Michel Lespinasse \u003cwalken@google.com\u003e\nCc: Oleg Nesterov \u003coleg@redhat.com\u003e\nReviewed-by: Rik van Riel \u003criel@redhat.com\u003e\nAcked-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nCc: Adrian Sendroiu \u003cmolecula2788@gmail.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "c7dd3392ad469e6ba125170ad29f881bed85b678", "tree": "bdb444e27e72975da0a3ebad279392fb8b81929d", "parents": [ "6115ea288424c1ead077843b6cd22369dd2e08f9" ], "author": { "name": "Tiger Yang", "email": "tiger.yang@oracle.com", "time": "Tue Aug 13 16:00:58 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 17:57:49 2013 -0700" }, "message": "ocfs2: fix NULL pointer dereference in ocfs2_duplicate_clusters_by_page\n\nSince ocfs2_cow_file_pos will invoke ocfs2_refcount_icow with a NULL as\nthe struct file pointer, it finally result in a null pointer dereference\nin ocfs2_duplicate_clusters_by_page.\n\nThis patch replace file pointer with inode pointer in\ncow_duplicate_clusters to fix this issue.\n\n[jeff.liu@oracle.com: rebased patch against linux-next tree]\nSigned-off-by: Tiger Yang \u003ctiger.yang@oracle.com\u003e\nSigned-off-by: Jie Liu \u003cjeff.liu@oracle.com\u003e\nCc: Joel Becker \u003cjlbec@evilplan.org\u003e\nCc: Mark Fasheh \u003cmfasheh@suse.com\u003e\nAcked-by: Tao Ma \u003ctm@tao.ma\u003e\nTested-by: David Weber \u003cwb@munzinger.de\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "6115ea288424c1ead077843b6cd22369dd2e08f9", "tree": "c65d7bfdb16ba8e588cea865acc68be91a7aad87", "parents": [ "28a0c88312973792f439493d801ceac61baae9b3" ], "author": { "name": "Jie Liu", "email": "jeff.liu@oracle.com", "time": "Tue Aug 13 16:00:57 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 17:57:49 2013 -0700" }, "message": "ocfs2: Revert 40bd62e to avoid regression in extended allocation\n\nRevert commit 40bd62eb7fb8 (\"fs/ocfs2/journal.h: add bits_wanted while\ncalculating credits in ocfs2_calc_extend_credits\").\n\nUnfortunately this change broke fallocate even if there is insufficient\ndisk space for the preallocation, which is a serious problem.\n\n # df -h\n /dev/sda8 22G 1.2G 21G 6% /ocfs2\n # fallocate -o 0 -l 200M /ocfs2/testfile\n fallocate: /ocfs2/test: fallocate failed: No space left on device\n\nand a kernel warning:\n\n CPU: 3 PID: 3656 Comm: fallocate Tainted: G W O 3.11.0-rc3 #2\n Call Trace:\n dump_stack+0x77/0x9e\n warn_slowpath_common+0xc4/0x110\n warn_slowpath_null+0x2a/0x40\n start_this_handle+0x6c/0x640 [jbd2]\n jbd2__journal_start+0x138/0x300 [jbd2]\n jbd2_journal_start+0x23/0x30 [jbd2]\n ocfs2_start_trans+0x166/0x300 [ocfs2]\n __ocfs2_extend_allocation+0x38f/0xdb0 [ocfs2]\n ocfs2_allocate_unwritten_extents+0x3c9/0x520\n __ocfs2_change_file_space+0x5e0/0xa60 [ocfs2]\n ocfs2_fallocate+0xb1/0xe0 [ocfs2]\n do_fallocate+0x1cb/0x220\n SyS_fallocate+0x6f/0xb0\n system_call_fastpath+0x16/0x1b\n JBD2: fallocate wants too many credits (51216 \u003e 4381)\n\nSigned-off-by: Jie Liu \u003cjeff.liu@oracle.com\u003e\nCc: Goldwyn Rodrigues \u003crgoldwyn@suse.com\u003e\nCc: Joel Becker \u003cjlbec@evilplan.org\u003e\nCc: Mark Fasheh \u003cmfasheh@suse.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "28a0c88312973792f439493d801ceac61baae9b3", "tree": "64cf598f048c5db0c9cfc9d6c453946fee19cd0b", "parents": [ "b610ded71918654748b6b49f1e2636dc6bbfc96e" ], "author": { "name": "Lothar Waßmann", "email": "LW@KARO-electronics.de", "time": "Tue Aug 13 16:00:56 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 17:57:48 2013 -0700" }, "message": "drivers/rtc/rtc-stmp3xxx.c: provide timeout for potentially endless loop polling a HW bit\n\nIt\u0027s always a bad idea to poll on HW bits without a timeout.\n\nThe i.MX28 RTC can be easily brought into a state in which the RTC is\nnot running (until after a power-on-reset) and thus the status bits\nwhich are polled in the driver won\u0027t ever change.\n\nThis patch prevents the kernel from getting stuck in this case.\n\nSigned-off-by: Lothar Waßmann \u003cLW@KARO-electronics.de\u003e\nAcked-by: Wolfram Sang \u003cwsa@the-dreams.de\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "b610ded71918654748b6b49f1e2636dc6bbfc96e", "tree": "ff490465bacea9448e3d69e0535c6bdce1136ac9", "parents": [ "fb32975d1ba6dc2aaa3c2e876e7220c8ec260397" ], "author": { "name": "Michal Hocko", "email": "mhocko@suse.cz", "time": "Tue Aug 13 16:00:55 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 17:57:48 2013 -0700" }, "message": "hugetlb: fix lockdep splat caused by pmd sharing\n\nDave has reported the following lockdep splat:\n\n \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n [ INFO: inconsistent lock state ]\n 3.11.0-rc1+ #9 Not tainted\n ---------------------------------\n inconsistent {RECLAIM_FS-ON-W} -\u003e {IN-RECLAIM_FS-W} usage.\n kswapd0/49 [HC0[0]:SC0[0]:HE1:SE1] takes:\n (\u0026mapping-\u003ei_mmap_mutex){+.+.?.}, at: [\u003cc114971b\u003e] page_referenced+0x87/0x5e3\n {RECLAIM_FS-ON-W} state was registered at:\n mark_held_locks+0x81/0xe7\n lockdep_trace_alloc+0x5e/0xbc\n __alloc_pages_nodemask+0x8b/0x9b6\n __get_free_pages+0x20/0x31\n get_zeroed_page+0x12/0x14\n __pmd_alloc+0x1c/0x6b\n huge_pmd_share+0x265/0x283\n huge_pte_alloc+0x5d/0x71\n hugetlb_fault+0x7c/0x64a\n handle_mm_fault+0x255/0x299\n __do_page_fault+0x142/0x55c\n do_page_fault+0xd/0x16\n error_code+0x6c/0x74\n irq event stamp: 3136917\n hardirqs last enabled at (3136917): _raw_spin_unlock_irq+0x27/0x50\n hardirqs last disabled at (3136916): _raw_spin_lock_irq+0x15/0x78\n softirqs last enabled at (3136180): __do_softirq+0x137/0x30f\n softirqs last disabled at (3136175): irq_exit+0xa8/0xaa\n other info that might help us debug this:\n Possible unsafe locking scenario:\n CPU0\n ----\n lock(\u0026mapping-\u003ei_mmap_mutex);\n \u003cInterrupt\u003e\n lock(\u0026mapping-\u003ei_mmap_mutex);\n\n *** DEADLOCK ***\n no locks held by kswapd0/49.\n\n stack backtrace:\n CPU: 1 PID: 49 Comm: kswapd0 Not tainted 3.11.0-rc1+ #9\n Hardware name: Dell Inc. Precision WorkStation 490 /0DT031, BIOS A08 04/25/2008\n Call Trace:\n dump_stack+0x4b/0x79\n print_usage_bug+0x1d9/0x1e3\n mark_lock+0x1e0/0x261\n __lock_acquire+0x623/0x17f2\n lock_acquire+0x7d/0x195\n mutex_lock_nested+0x6c/0x3a7\n page_referenced+0x87/0x5e3\n shrink_page_list+0x3d9/0x947\n shrink_inactive_list+0x155/0x4cb\n shrink_lruvec+0x300/0x5ce\n shrink_zone+0x53/0x14e\n kswapd+0x517/0xa75\n kthread+0xa8/0xaa\n ret_from_kernel_thread+0x1b/0x28\n\nwhich is a false positive caused by hugetlb pmd sharing code which\nallocates a new pmd from withing mapping-\u003ei_mmap_mutex. If this\nallocation causes reclaim then the lockdep detector complains that we\nmight self-deadlock.\n\nThis is not correct though, because hugetlb pages are not reclaimable so\ntheir mapping will be never touched from the reclaim path.\n\nThe patch tells lockup detector that hugetlb i_mmap_mutex is special by\nassigning it a separate lockdep class so it won\u0027t report possible\ndeadlocks on unrelated mappings.\n\n[peterz@infradead.org: comment for annotation]\nReported-by: Dave Jones \u003cdavej@redhat.com\u003e\nSigned-off-by: Michal Hocko \u003cmhocko@suse.cz\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nReviewed-by: Minchan Kim \u003cminchan@kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "fb32975d1ba6dc2aaa3c2e876e7220c8ec260397", "tree": "e002b46571316bf15b157af103a0ef577842a2c5", "parents": [ "dfa9771a7c4784bafd0673bc7abcee3813088b77" ], "author": { "name": "Ed Cashin", "email": "ecashin@coraid.com", "time": "Tue Aug 13 16:00:53 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 17:57:48 2013 -0700" }, "message": "aoe: adjust ref of head for compound page tails\n\nFix a BUG which can trigger when direct-IO is used with AOE.\n\nAs discussed previously, the fact that some users of the block layer\nprovide bios that point to pages with a zero _count means that it is not\nOK for the network layer to do a put_page on the skb frags during an\nskb_linearize, so the aoe driver gets a reference to pages in bios and\nputs the reference before ending the bio. And because it cannot use\nget_page on a page with a zero _count, it manipulates the value\ndirectly.\n\nIt is not OK to increment the _count of a compound page tail, though,\nsince the VM layer will VM_BUG_ON a non-zero _count. Block users that\ndo direct I/O can result in the aoe driver seeing compound page tails in\nbios. In that case, the same logic works as long as the head of the\ncompound page is used instead of the tails. This patch handles compound\npages and does not BUG.\n\nIt relies on the block layer user leaving the relationship between the\npage tail and its head alone for the duration between the submission of\nthe bio and its completion, whether successful or not.\n\nSigned-off-by: Ed Cashin \u003cecashin@coraid.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "dfa9771a7c4784bafd0673bc7abcee3813088b77", "tree": "130ab88dc03c5bc007949e6f98fe39edfccb81f7", "parents": [ "41bb3476b361ef38576cf9d539b19bae2ac93167" ], "author": { "name": "Michal Simek", "email": "michal.simek@xilinx.com", "time": "Tue Aug 13 16:00:53 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 17:57:48 2013 -0700" }, "message": "microblaze: fix clone syscall\n\nFix inadvertent breakage in the clone syscall ABI for Microblaze that\nwas introduced in commit f3268edbe6fe (\"microblaze: switch to generic\nfork/vfork/clone\").\n\nThe Microblaze syscall ABI for clone takes the parent tid address in the\n4th argument; the third argument slot is used for the stack size. The\nincorrectly-used CLONE_BACKWARDS type assigned parent tid to the 3rd\nslot.\n\nThis commit restores the original ABI so that existing userspace libc\ncode will work correctly.\n\nAll kernel versions from v3.8-rc1 were affected.\n\nSigned-off-by: Michal Simek \u003cmichal.simek@xilinx.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "41bb3476b361ef38576cf9d539b19bae2ac93167", "tree": "907f72f0cc27762a9cb9c2857fe6c360524112f9", "parents": [ "179ef71cbc085252e3fe6b8159263a7ed1d88ea4" ], "author": { "name": "Cyrill Gorcunov", "email": "gorcunov@gmail.com", "time": "Tue Aug 13 16:00:51 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 17:57:48 2013 -0700" }, "message": "mm: save soft-dirty bits on file pages\n\nAndy reported that if file page get reclaimed we lose the soft-dirty bit\nif it was there, so save _PAGE_BIT_SOFT_DIRTY bit when page address get\nencoded into pte entry. Thus when #pf happens on such non-present pte\nwe can restore it back.\n\nReported-by: Andy Lutomirski \u003cluto@amacapital.net\u003e\nSigned-off-by: Cyrill Gorcunov \u003cgorcunov@openvz.org\u003e\nAcked-by: Pavel Emelyanov \u003cxemul@parallels.com\u003e\nCc: Matt Mackall \u003cmpm@selenic.com\u003e\nCc: Xiao Guangrong \u003cxiaoguangrong@linux.vnet.ibm.com\u003e\nCc: Marcelo Tosatti \u003cmtosatti@redhat.com\u003e\nCc: KOSAKI Motohiro \u003ckosaki.motohiro@gmail.com\u003e\nCc: Stephen Rothwell \u003csfr@canb.auug.org.au\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: \"Aneesh Kumar K.V\" \u003caneesh.kumar@linux.vnet.ibm.com\u003e\nCc: Minchan Kim \u003cminchan@kernel.org\u003e\nCc: Wanpeng Li \u003cliwanp@linux.vnet.ibm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "179ef71cbc085252e3fe6b8159263a7ed1d88ea4", "tree": "423b58912b0bf0dc9697fff3d2205b8ca653968e", "parents": [ "3e6b11df245180949938734bc192eaf32f3a06b3" ], "author": { "name": "Cyrill Gorcunov", "email": "gorcunov@gmail.com", "time": "Tue Aug 13 16:00:49 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 17:57:47 2013 -0700" }, "message": "mm: save soft-dirty bits on swapped pages\n\nAndy Lutomirski reported that if a page with _PAGE_SOFT_DIRTY bit set\nget swapped out, the bit is getting lost and no longer available when\npte read back.\n\nTo resolve this we introduce _PTE_SWP_SOFT_DIRTY bit which is saved in\npte entry for the page being swapped out. When such page is to be read\nback from a swap cache we check for bit presence and if it\u0027s there we\nclear it and restore the former _PAGE_SOFT_DIRTY bit back.\n\nOne of the problem was to find a place in pte entry where we can save\nthe _PTE_SWP_SOFT_DIRTY bit while page is in swap. The _PAGE_PSE was\nchosen for that, it doesn\u0027t intersect with swap entry format stored in\npte.\n\nReported-by: Andy Lutomirski \u003cluto@amacapital.net\u003e\nSigned-off-by: Cyrill Gorcunov \u003cgorcunov@openvz.org\u003e\nAcked-by: Pavel Emelyanov \u003cxemul@parallels.com\u003e\nCc: Matt Mackall \u003cmpm@selenic.com\u003e\nCc: Xiao Guangrong \u003cxiaoguangrong@linux.vnet.ibm.com\u003e\nCc: Marcelo Tosatti \u003cmtosatti@redhat.com\u003e\nCc: KOSAKI Motohiro \u003ckosaki.motohiro@gmail.com\u003e\nCc: Stephen Rothwell \u003csfr@canb.auug.org.au\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: \"Aneesh Kumar K.V\" \u003caneesh.kumar@linux.vnet.ibm.com\u003e\nReviewed-by: Minchan Kim \u003cminchan@kernel.org\u003e\nReviewed-by: Wanpeng Li \u003cliwanp@linux.vnet.ibm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "3e6b11df245180949938734bc192eaf32f3a06b3", "tree": "db13eaaf91039956b19abe65ef53cfb04066274d", "parents": [ "584d88b2cd3b60507e708d2452651e4d3caa1b81" ], "author": { "name": "Andrey Vagin", "email": "avagin@openvz.org", "time": "Tue Aug 13 16:00:47 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 17:57:47 2013 -0700" }, "message": "memcg: don\u0027t initialize kmem-cache destroying work for root caches\n\nstruct memcg_cache_params has a union. Different parts of this union\nare used for root and non-root caches. A part with destroying work is\nused only for non-root caches.\n\nI fixed the same problem in another place v3.9-rc1-16204-gf101a94, but\ndidn\u0027t notice this one.\n\nThis patch fixes the kernel panic:\n\n[ 46.848187] BUG: unable to handle kernel paging request at 000000fffffffeb8\n[ 46.849026] IP: [\u003cffffffff811a484c\u003e] kmem_cache_destroy_memcg_children+0x6c/0xc0\n[ 46.849092] PGD 0\n[ 46.849092] Oops: 0000 [#1] SMP\n...\n\nSigned-off-by: Andrey Vagin \u003cavagin@openvz.org\u003e\nCc: Glauber Costa \u003cglommer@openvz.org\u003e\nCc: Johannes Weiner \u003channes@cmpxchg.org\u003e\nAcked-by: Michal Hocko \u003cmhocko@suse.cz\u003e\nCc: Balbir Singh \u003cbsingharora@gmail.com\u003e\nCc: KAMEZAWA Hiroyuki \u003ckamezawa.hiroyu@jp.fujitsu.com\u003e\nCc: Konstantin Khlebnikov \u003ckhlebnikov@openvz.org\u003e\nCc: \u003cstable@vger.kernel.org\u003e [3.9.x]\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "9cff866e37eb47780bf34842fcf371e41c5a0639", "tree": "d4ebd719a73a9616c557d0395ceb9a48aee3aa2b", "parents": [ "4221f40513233fa8edeef7fc82e44163fde03b9b" ], "author": { "name": "Alexey Brodkin", "email": "Alexey.Brodkin@synopsys.com", "time": "Tue Aug 13 17:04:36 2013 +0400" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Aug 13 17:00:45 2013 -0700" }, "message": "ethernet/arc/arc_emac - fix NAPI \"work \u003e weight\" warning\n\nInitially I improperly set a boundary for maximum number of input\npackets to process on NAPI poll (\"work\") so it might be more than\nexpected amount (\"weight\").\n\nThis was really harmless but seeing WARN_ON_ONCE on every device boot is\nnot nice. So trivial fix (\"\u003c\" instead of \"\u003c\u003d\") is here.\n\nSigned-off-by: Alexey Brodkin \u003cabrodkin@synopsys.com\u003e\n\nCc: Vineet Gupta \u003cvgupta@synopsys.com\u003e\nCc: Mischa Jonker \u003cmjonker@synopsys.com\u003e\nCc: Arnd Bergmann \u003carnd@arndb.de\u003e\nCc: Grant Likely \u003cgrant.likely@linaro.org\u003e\nCc: Rob Herring \u003crob.herring@calxeda.com\u003e\nCc: Paul Gortmaker \u003cpaul.gortmaker@windriver.com\u003e\nCc: \"David S. Miller\" \u003cdavem@davemloft.net\u003e\nCc: linux-kernel@vger.kernel.org\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "28fbc8b6a29c849a3f03a6b05010d4b584055665", "tree": "822f3ccd4b8b69a219a0593736860f88ad5a3337", "parents": [ "bfd36050874d69db0548800a756456d180687f7b", "bf0bd948d1682e3996adc093b43021ed391983e6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:58:17 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:58:17 2013 -0700" }, "message": "Merge branch \u0027sched-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull scheduler fixes from Ingo Molnar:\n \"Docbook fixes that make 99% of the diffstat, plus a oneliner fix\"\n\n* \u0027sched-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n sched: Ensure update_cfs_shares() is called for parents of continuously-running tasks\n sched: Fix some kernel-doc warnings\n" }, { "commit": "bfd36050874d69db0548800a756456d180687f7b", "tree": "5b01e0bb83f1855e1642776778408431f41b1d6a", "parents": [ "b88a2595b6d8aedbd275c07dfa784657b4f757eb", "0499bd867bd17c0a88963551a1583b8efc7b03d7" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:57:40 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:57:40 2013 -0700" }, "message": "Merge branch \u0027perf-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull perf fixes from Ingo Molnar:\n \"Two small fixlets\"\n\n* \u0027perf-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n perf/x86: Add Haswell ULT model number used in Macbook Air and other systems\n perf/x86: Fix intel QPI uncore event definitions\n" }, { "commit": "b88a2595b6d8aedbd275c07dfa784657b4f757eb", "tree": "20d598a31e66d3a1e2fa0c49970c11f55a67f4e2", "parents": [ "e0acd0a68ec7dbf6b7a81a87a867ebd7ac9b76c4" ], "author": { "name": "Stephen Boyd", "email": "sboyd@codeaurora.org", "time": "Wed Aug 07 16:18:08 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:57:24 2013 -0700" }, "message": "perf/arm: Fix armpmu_map_hw_event()\n\nFix constraint check in armpmu_map_hw_event().\n\nReported-and-tested-by: Vince Weaver \u003cvincent.weaver@maine.edu\u003e\nCc: \u003cstable@kernel.org\u003e\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "4221f40513233fa8edeef7fc82e44163fde03b9b", "tree": "b7213a4e780c4c5b61ef4f103bcd5346c960a365", "parents": [ "50f850fdf91a9ed21bfca982932520ee21a4ccb9" ], "author": { "name": "Pravin B Shelar", "email": "pshelar@nicira.com", "time": "Tue Aug 13 01:41:06 2013 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Aug 13 16:52:50 2013 -0700" }, "message": "ip_tunnel: Do not use inner ip-header-id for tunnel ip-header-id.\n\nUsing inner-id for tunnel id is not safe in some rare cases.\nE.g. packets coming from multiple sources entering same tunnel\ncan have same id. Therefore on tunnel packet receive we\ncould have packets from two different stream but with same\nsource and dst IP with same ip-id which could confuse ip packet\nreassembly.\n\nFollowing patch reverts optimization from commit\n490ab08127 (IP_GRE: Fix IP-Identification.)\n\nCC: Jarno Rajahalme \u003cjrajahalme@nicira.com\u003e\nCC: Ansis Atteka \u003caatteka@nicira.com\u003e\nSigned-off-by: Pravin B Shelar \u003cpshelar@nicira.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "50f850fdf91a9ed21bfca982932520ee21a4ccb9", "tree": "f7d0be5404d61d13f26d76556e99b1e4fe0db538", "parents": [ "205057aeb3c488fbd4a9c3a0542e05dcf4fda149", "6ef5a92cdf5ee65578a287b9a030964b03a538ed" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Aug 13 16:04:38 2013 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Aug 13 16:04:38 2013 -0700" }, "message": "Merge branch \u0027bnx2x\u0027\n\nDmitry Kravkov says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nPlease consider applying the series of bnx2x fixes to net:\n\t* statistics may cause FW assert\n\t* missing fairness configuration in DCB flow\n\t* memory leak in sriov related part\n\t* Illegal PTE access\n\t* Pagefault crash in shutdown flow with cnic\nv1-\u003ev2\n\t* fixed sparse error pointed by Joe Perches\n\t* added missing signed-off from Sergei Shtylyov\nv2-\u003ev3\n\t* added missing signed-off from Sergei Shtylyov\n\t* fixed formatting from Sergei Shtylyov\nv3-\u003ev4\n\t* patch 1/6: fixed declaration order\n\t* patch 2/6 replaced with: protect flows using set_bit constraints\nv4-\u003ev5\n\t* patch 2/6: replace proprietary locking with semaphore\n\t* droped 1/6: since adds redundant code from Benjamin Poirier\nThe following patchset contains four netfilter fixes, they are:\n\n* Fix possible invalid access and mangling of the TCPMSS option in\n xt_TCPMSS. This was spotted by Julian Anastasov.\n\n* Fix possible off by one access and mangling of the TCP packet in\n xt_TCPOPTSTRIP, also spotted by Julian Anastasov.\n\n* Fix possible information leak due to missing initialization of one\n padding field of several structures that are included in nfqueue and\n nflog netlink messages, from Dan Carpenter.\n\n* Fix TCP window tracking with Fast Open, from Yuchung Cheng.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "6ef5a92cdf5ee65578a287b9a030964b03a538ed", "tree": "f7d0be5404d61d13f26d76556e99b1e4fe0db538", "parents": [ "a6d3a5ba3e0c4ed127976c52229d7a277da4d82c" ], "author": { "name": "Yuval Mintz", "email": "yuvalmin@broadcom.com", "time": "Tue Aug 13 02:25:03 2013 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Aug 13 16:04:28 2013 -0700" }, "message": "bnx2x: prevent crash in shutdown flow with CNIC\n\nThere might be a crash as during shutdown flow CNIC might try\nto access resources already freed by bnx2x.\nChange bnx2x_close() into dev_close() in __bnx2x_remove (shutdown flow)\nto guarantee CNIC is notified of the device\u0027s change of status.\n\nSigned-off-by: Yuval Mintz \u003cyuvalmin@broadcom.com\u003e\nSigned-off-by: Dmitry Kravkov \u003cdmitry@broadcom.com\u003e\nSigned-off-by: Ariel Elior \u003cariele@broadcom.com\u003e\nSigned-off-by: Eilon Greenstein \u003ceilong@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a6d3a5ba3e0c4ed127976c52229d7a277da4d82c", "tree": "59a5cf623f14a82d1601b60e7e26267bcce5a955", "parents": [ "8ece51651883f99efdcadda4c17df53c4333bea8" ], "author": { "name": "Barak Witkowsky", "email": "barak@broadcom.com", "time": "Tue Aug 13 02:25:02 2013 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Aug 13 16:04:28 2013 -0700" }, "message": "bnx2x: fix PTE write access error\n\nPTE write access error might occur in MF_ALLOWED mode when IOMMU\nis active. The patch adds rmmod HSI indicating to MFW to stop\nrunning queries which might trigger this failure.\n\nSigned-off-by: Barak Witkowsky \u003cbarak@broadcom.com\u003e\nSigned-off-by: Dmitry Kravkov \u003cdmitry@broadcom.com\u003e\nSigned-off-by: Ariel Elior \u003cariele@broadcom.com\u003e\nSigned-off-by: Eilon Greenstein \u003ceilong@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8ece51651883f99efdcadda4c17df53c4333bea8", "tree": "874206322724743fb471b3d63c3d549a81ffabe4", "parents": [ "568e24260fdc33d8a172a4d8da799cace4111b6e" ], "author": { "name": "Ariel Elior", "email": "ariele@broadcom.com", "time": "Tue Aug 13 02:25:01 2013 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Aug 13 16:04:28 2013 -0700" }, "message": "bnx2x: fix memory leak in VF\n\nSigned-off-by: Ariel Elior \u003cariele@broadcom.com\u003e\nSigned-off-by: Dmitry Kravkov \u003cdmitry@broadcom.com\u003e\nSigned-off-by: Eilon Greenstein \u003ceilong@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "568e24260fdc33d8a172a4d8da799cace4111b6e", "tree": "03ae6aa8bd2a9b9d71673966d357bd00a0c2e5a7", "parents": [ "507393eb2909ddf39edf3f8f4cd0fd914b720006" ], "author": { "name": "Dmitry Kravkov", "email": "dmitry@broadcom.com", "time": "Tue Aug 13 02:25:00 2013 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Aug 13 16:04:28 2013 -0700" }, "message": "bnx2x: update fairness parameters following DCB negotiation\n\nETS can be enabled as a result of DCB negotiation, then\nfairness must be recalculated after each negotiation.\n\nSigned-off-by: Dmitry Kravkov \u003cdmitry@broadcom.com\u003e\nSigned-off-by: Ariel Elior \u003cariele@broadcom.com\u003e\nSigned-off-by: Eilon Greenstein \u003ceilong@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "507393eb2909ddf39edf3f8f4cd0fd914b720006", "tree": "b6698cefef1be7ac49d3c1db4ec5a6dd56a90a6b", "parents": [ "205057aeb3c488fbd4a9c3a0542e05dcf4fda149" ], "author": { "name": "Dmitry Kravkov", "email": "dmitry@broadcom.com", "time": "Tue Aug 13 02:24:59 2013 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Aug 13 16:04:28 2013 -0700" }, "message": "bnx2x: protect different statistics flows\n\nAdd locking to protect different statistics flows from\nrunning simultaneously.\nThis in order to serialize statistics requests sent to FW,\notherwise two outstanding queries may cause FW assert.\n\nSigned-off-by: Dmitry Kravkov \u003cdmitry@broadcom.com\u003e\nSigned-off-by: Ariel Elior \u003cariele@broadcom.com\u003e\nSigned-off-by: Eilon Greenstein \u003ceilong@broadcom.com\u003e\nAcked-by: Neal Cardwell \u003cncardwell@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "40fea92ffb5fa0ef26d10ae0fe5688bc8e61c791", "tree": "dc3d38be74a14dc868a6ee9d420451afd435f6f1", "parents": [ "d4e4ab86bcba5a72779c43dc1459f71fea3d89c8" ], "author": { "name": "Stephen Boyd", "email": "sboyd@codeaurora.org", "time": "Tue Aug 13 14:12:40 2013 -0700" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Wed Aug 14 00:42:05 2013 +0200" }, "message": "PM / QoS: Fix workqueue deadlock when using pm_qos_update_request_timeout()\n\npm_qos_update_request_timeout() updates a qos and then schedules\na delayed work item to bring the qos back down to the default\nafter the timeout. When the work item runs, pm_qos_work_fn() will\ncall pm_qos_update_request() and deadlock because it tries to\ncancel itself via cancel_delayed_work_sync(). Future callers of\nthat qos will also hang waiting to cancel the work that is\ncanceling itself. Let\u0027s extract the little bit of code that does\nthe real work of pm_qos_update_request() and call it from the\nwork function so that we don\u0027t deadlock.\n\nBefore ed1ac6e (PM: don\u0027t use [delayed_]work_pending()) this didn\u0027t\nhappen because the work function wouldn\u0027t try to cancel itself.\n\nSigned-off-by: Stephen Boyd \u003csboyd@codeaurora.org\u003e\nReviewed-by: Tejun Heo \u003ctj@kernel.org\u003e\nCc: 3.9+ \u003cstable@vger.kernel.org\u003e # 3.9+\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\n" }, { "commit": "205057aeb3c488fbd4a9c3a0542e05dcf4fda149", "tree": "5c203d91aa4bf508a6fbf621a47d8325ccca41f5", "parents": [ "e47851f13d3300f67ca8c7c73780d029ccaa5d74" ], "author": { "name": "Hyong-Youb Kim", "email": "hykim@myri.com", "time": "Mon Aug 12 02:20:02 2013 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Aug 13 15:25:25 2013 -0700" }, "message": "myri10ge: Update MAINTAINERS\n\nRemove Andrew Gallatin, as he is no longer with Myricom. Add\nHyong-Youb Kim as the new maintainer. Update the website URL.\n\nSigned-off-by: Hyong-Youb Kim \u003chykim@myri.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e47851f13d3300f67ca8c7c73780d029ccaa5d74", "tree": "5fdfb54c162089957fa53f4b1411d1c39ac512d1", "parents": [ "58ad436fcf49810aa006016107f494c9ac9013db" ], "author": { "name": "stephen hemminger", "email": "stephen@networkplumber.org", "time": "Sat Aug 10 15:02:07 2013 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Aug 13 15:09:06 2013 -0700" }, "message": "skge: dma_sync the whole receive buffer\n\nThe DMA sync should sync the whole receive buffer, not just\npart of it. Fixes log messages dma_sync_check.\n\nSigned-off-by: Stephen Hemminger \u003cstephen@networkplumber.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2a2822475d0e734adffab72644329d9c042ce2e1", "tree": "f9c024e6e10807a2c0a372a4705cf7881a1ca919", "parents": [ "2103f6cba61a8b8bea3fc1b63661d830a2125e76", "d9f966357b14e356dbd83b8f4a197a287ab4ff83" ], "author": { "name": "Russell King", "email": "rmk+kernel@arm.linux.org.uk", "time": "Tue Aug 13 20:23:28 2013 +0100" }, "committer": { "name": "Russell King", "email": "rmk+kernel@arm.linux.org.uk", "time": "Tue Aug 13 20:23:28 2013 +0100" }, "message": "Merge branch \u0027security-fixes\u0027 into fixes\n" }, { "commit": "2103f6cba61a8b8bea3fc1b63661d830a2125e76", "tree": "ecc5f6e4df5631932b38e9eb1d8dd7cd8251ed2b", "parents": [ "00efaa0250939dc148e2d3104fb3c18395d24a2d" ], "author": { "name": "Stephen Warren", "email": "swarren@nvidia.com", "time": "Fri Aug 02 20:52:49 2013 +0100" }, "committer": { "name": "Russell King", "email": "rmk+kernel@arm.linux.org.uk", "time": "Tue Aug 13 20:23:18 2013 +0100" }, "message": "ARM: 7807/1: kexec: validate CPU hotplug support\n\nArchitectures should fully validate whether kexec is possible as part of\nmachine_kexec_prepare(), so that user-space\u0027s kexec_load() operation can\nreport any problems. Performing validation in machine_kexec() itself is\ntoo late, since it is not allowed to return.\n\nPrior to this patch, ARM\u0027s machine_kexec() was testing after-the-fact\nwhether machine_kexec_prepare() was able to disable all but one CPU.\nInstead, modify machine_kexec_prepare() to validate all conditions\nnecessary for machine_kexec_prepare()\u0027s to succeed. BUG if the validation\nsucceeded, yet disabling the CPUs didn\u0027t actually work.\n\nSigned-off-by: Stephen Warren \u003cswarren@nvidia.com\u003e\nAcked-by: \"Eric W. Biederman\" \u003cebiederm@xmission.com\u003e\nSigned-off-by: Russell King \u003crmk+kernel@arm.linux.org.uk\u003e\n" }, { "commit": "00efaa0250939dc148e2d3104fb3c18395d24a2d", "tree": "2d3f9322f15171499a6b579a1a06d6497dc5ba08", "parents": [ "afa31d8eb86fc2f25083e675d57ac8173a98f999" ], "author": { "name": "Will Deacon", "email": "will.deacon@arm.com", "time": "Mon Aug 12 18:04:05 2013 +0100" }, "committer": { "name": "Russell King", "email": "rmk+kernel@arm.linux.org.uk", "time": "Tue Aug 13 20:22:44 2013 +0100" }, "message": "ARM: 7812/1: rwlocks: retry trylock operation if strex fails on free lock\n\nCommit 15e7e5c1ebf5 (\"ARM: 7749/1: spinlock: retry trylock operation if\nstrex fails on free lock\") modifying our arch_spin_trylock to retry the\nacquisition if the lock appeared uncontended, but the strex failed.\n\nThis patch does the same for rwlocks, which were missed by the original\npatch.\n\nSigned-off-by: Will Deacon \u003cwill.deacon@arm.com\u003e\nSigned-off-by: Russell King \u003crmk+kernel@arm.linux.org.uk\u003e\n" }, { "commit": "afa31d8eb86fc2f25083e675d57ac8173a98f999", "tree": "b266adc9aebcda0a7eccd7adbd07a4a5aab3ceee", "parents": [ "e35ac62d2202e31307c0f9b278a61e484c4727f2" ], "author": { "name": "Will Deacon", "email": "will.deacon@arm.com", "time": "Mon Aug 12 18:03:26 2013 +0100" }, "committer": { "name": "Russell King", "email": "rmk+kernel@arm.linux.org.uk", "time": "Tue Aug 13 20:22:43 2013 +0100" }, "message": "ARM: 7811/1: locks: use early clobber in arch_spin_trylock\n\nThe res variable is written before we\u0027ve finished with the input\noperands (namely the lock address), so ensure that we mark it as `early\nclobber\u0027 to avoid unintended register sharing.\n\nSigned-off-by: Will Deacon \u003cwill.deacon@arm.com\u003e\nSigned-off-by: Russell King \u003crmk+kernel@arm.linux.org.uk\u003e\n" }, { "commit": "d9f966357b14e356dbd83b8f4a197a287ab4ff83", "tree": "e99891f5616cc8e33d592ab15822e0fc7bba7ca1", "parents": [ "c95eb3184ea1a3a2551df57190c81da695e2144b" ], "author": { "name": "Stephen Boyd", "email": "sboyd@codeaurora.org", "time": "Thu Aug 08 18:41:59 2013 +0100" }, "committer": { "name": "Russell King", "email": "rmk+kernel@arm.linux.org.uk", "time": "Tue Aug 13 20:21:44 2013 +0100" }, "message": "ARM: 7810/1: perf: Fix array out of bounds access in armpmu_map_hw_event()\n\nVince Weaver reports an oops in the ARM perf event code while\nrunning his perf_fuzzer tool on a pandaboard running v3.11-rc4.\n\nUnable to handle kernel paging request at virtual address 73fd14cc\npgd \u003d eca6c000\n[73fd14cc] *pgd\u003d00000000\nInternal error: Oops: 5 [#1] SMP ARM\nModules linked in: snd_soc_omap_hdmi omapdss snd_soc_omap_abe_twl6040 snd_soc_twl6040 snd_soc_omap snd_soc_omap_hdmi_card snd_soc_omap_mcpdm snd_soc_omap_mcbsp snd_soc_core snd_compress regmap_spi snd_pcm snd_page_alloc snd_timer snd soundcore\nCPU: 1 PID: 2790 Comm: perf_fuzzer Not tainted 3.11.0-rc4 #6\ntask: eddcab80 ti: ed892000 task.ti: ed892000\nPC is at armpmu_map_event+0x20/0x88\nLR is at armpmu_event_init+0x38/0x280\npc : [\u003cc001c3e4\u003e] lr : [\u003cc001c17c\u003e] psr: 60000013\nsp : ed893e40 ip : ecececec fp : edfaec00\nr10: 00000000 r9 : 00000000 r8 : ed8c3ac0\nr7 : ed8c3b5c r6 : edfaec00 r5 : 00000000 r4 : 00000000\nr3 : 000000ff r2 : c0496144 r1 : c049611c r0 : edfaec00\nFlags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user\nControl: 10c5387d Table: aca6c04a DAC: 00000015\nProcess perf_fuzzer (pid: 2790, stack limit \u003d 0xed892240)\nStack: (0xed893e40 to 0xed894000)\n3e40: 00000800 c001c17c 00000002 c008a748 00000001 00000000 00000000 c00bf078\n3e60: 00000000 edfaee50 00000000 00000000 00000000 edfaec00 ed8c3ac0 edfaec00\n3e80: 00000000 c073ffac ed893f20 c00bf180 00000001 00000000 c00bf078 ed893f20\n3ea0: 00000000 ed8c3ac0 00000000 00000000 00000000 c0cb0818 eddcab80 c00bf440\n3ec0: ed893f20 00000000 eddcab80 eca76800 00000000 eca76800 00000000 00000000\n3ee0: 00000000 ec984c80 eddcab80 c00bfe68 00000000 00000000 00000000 00000080\n3f00: 00000000 ed892000 00000000 ed892030 00000004 ecc7e3c8 ecc7e3c8 00000000\n3f20: 00000000 00000048 ecececec 00000000 00000000 00000000 00000000 00000000\n3f40: 00000000 00000000 00297810 00000000 00000000 00000000 00000000 00000000\n3f60: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000\n3f80: 00000002 00000002 000103a4 00000002 0000016c c00128e8 ed892000 00000000\n3fa0: 00090998 c0012700 00000002 000103a4 00090ab8 00000000 00000000 0000000f\n3fc0: 00000002 000103a4 00000002 0000016c 00090ab0 00090ab8 000107a0 00090998\n3fe0: bed92be0 bed92bd0 0000b785 b6e8f6d0 40000010 00090ab8 00000000 00000000\n[\u003cc001c3e4\u003e] (armpmu_map_event+0x20/0x88) from [\u003cc001c17c\u003e] (armpmu_event_init+0x38/0x280)\n[\u003cc001c17c\u003e] (armpmu_event_init+0x38/0x280) from [\u003cc00bf180\u003e] (perf_init_event+0x108/0x180)\n[\u003cc00bf180\u003e] (perf_init_event+0x108/0x180) from [\u003cc00bf440\u003e] (perf_event_alloc+0x248/0x40c)\n[\u003cc00bf440\u003e] (perf_event_alloc+0x248/0x40c) from [\u003cc00bfe68\u003e] (SyS_perf_event_open+0x4f4/0x8fc)\n[\u003cc00bfe68\u003e] (SyS_perf_event_open+0x4f4/0x8fc) from [\u003cc0012700\u003e] (ret_fast_syscall+0x0/0x48)\nCode: 0a000005 e3540004 0a000016 e3540000 (0791010c)\n\nThis is because event-\u003eattr.config in armpmu_event_init()\ncontains a very large number copied directly from userspace and\nis never checked against the size of the array indexed in\narmpmu_map_hw_event(). Fix the problem by checking the value of\nconfig before indexing the array and rejecting invalid config\nvalues.\n\nReported-by: Vince Weaver \u003cvincent.weaver@maine.edu\u003e\nTested-by: Vince Weaver \u003cvincent.weaver@maine.edu\u003e\nAcked-by: Will Deacon \u003cwill.deacon@arm.com\u003e\nSigned-off-by: Stephen Boyd \u003csboyd@codeaurora.org\u003e\nSigned-off-by: Russell King \u003crmk+kernel@arm.linux.org.uk\u003e\n" }, { "commit": "c95eb3184ea1a3a2551df57190c81da695e2144b", "tree": "7cf42626f642a42d72cce07fe98bdc2afd227d2f", "parents": [ "2ba85e7af4c639d933c9a87a6d7363f2983d5ada" ], "author": { "name": "Will Deacon", "email": "will.deacon@arm.com", "time": "Wed Aug 07 23:39:41 2013 +0100" }, "committer": { "name": "Russell King", "email": "rmk+kernel@arm.linux.org.uk", "time": "Tue Aug 13 20:21:43 2013 +0100" }, "message": "ARM: 7809/1: perf: fix event validation for software group leaders\n\nIt is possible to construct an event group with a software event as a\ngroup leader and then subsequently add a hardware event to the group.\nThis results in the event group being validated by adding all members\nof the group to a fake PMU and attempting to allocate each event on\ntheir respective PMU.\n\nUnfortunately, for software events wthout a corresponding arm_pmu, this\nresults in a kernel crash attempting to dereference the -\u003eget_event_idx\nfunction pointer.\n\nThis patch fixes the problem by checking explicitly for software events\nand ignoring those in event validation (since they can always be\nscheduled). We will probably want to revisit this for 3.12, since the\nvalidation checks don\u0027t appear to work correctly when dealing with\nmultiple hardware PMUs anyway.\n\nCc: \u003cstable@vger.kernel.org\u003e\nReported-by: Vince Weaver \u003cvincent.weaver@maine.edu\u003e\nTested-by: Vince Weaver \u003cvincent.weaver@maine.edu\u003e\nTested-by: Mark Rutland \u003cmark.rutland@arm.com\u003e\nSigned-off-by: Will Deacon \u003cwill.deacon@arm.com\u003e\nSigned-off-by: Russell King \u003crmk+kernel@arm.linux.org.uk\u003e\n" } ], "next": "a701fe3851d9c7f6bd27bc0b92ca1668a42c8406" }