175 Commits

Author	SHA1	Message	Date
Michael Bestas	43cdebbc57	Merge remote-tracking branch 'common/android-4.9-q' into android-msm-pixel-4.9 ... * common/android-4.9-q: Linux 4.9.312 block/compat_ioctl: fix range check in BLKGETSIZE ext4: force overhead calculation if the s_overhead_cluster makes no sense ext4: fix overhead calculation to account for the reserved gdt blocks ext4: limit length to bitmap_maxbytes - blocksize in punch_hole ARC: entry: fix syscall_trace_exit argument e1000e: Fix possible overflow in LTR decoding ASoC: soc-dapm: fix two incorrect uses of list iterator openvswitch: fix OOB access in reserve_sfa_size() dma: at_xdmac: fix a missing check on list iterator ata: pata_marvell: Check the 'bmdma_addr' beforing reading drm/msm/mdp5: check the return of kzalloc() brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant cifs: Check the IOCB_DIRECT flag, not O_DIRECT vxlan: fix error return code in vxlan_fdb_append ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative ARM: vexpress/spc: Avoid negative array index when !SMP netlink: reset network and mac headers in netlink_dump() net/packet: fix packet_sock xmit return value checking dmaengine: imx-sdma: Fix error checking in sdma_event_remap ALSA: usb-audio: Clear MIDI port active flag after draining gfs2: assign rgrp glock before compute_bitstructs mm: page_alloc: fix building error on -Werror=array-compare etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead Linux 4.9.311 gcc-plugins: latent_entropy: use /dev/urandom i2c: pasemi: Wait for write xfers to finish smp: Fix offline cpu check in flush_smp_call_function_queue() ARM: davinci: da850-evm: Avoid NULL pointer dereference ALSA: pcm: Test for "silence" field in struct "pcm_format_data" mm: kmemleak: take a full lowmem check in kmemleak_*_phys() mm, page_alloc: fix build_zonerefs_node() drivers: net: slip: fix NPD bug in sl_tx_timeout() scsi: mvsas: Add PCI ID of RocketRaid 2640 gpu: ipu-v3: Fix dev_dbg frequency output net: micrel: fix KS8851_MLL Kconfig scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 drm/amdkfd: Check for potential null return of kmalloc_array() cifs: potential buffer overflow in handling symlinks nfc: nci: add flush_workqueue to prevent uaf net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link veth: Ensure eth header is in skb's linear part xfrm: policy: match with both mark and mask on user interfaces arm64: module: remove (NOLOAD) from linker script mm: don't skip swap entry even if zap_details specified dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts arm64: patch_text: Fixup last cpu should be master x86/speculation: Restore speculation related MSRs during S3 resume x86/pm: Save the MSR validity status at context setup mm/mempolicy: fix mpol_new leak in shared_policy_replace mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) drbd: Fix five use after free bugs in get_initial_state drm/imx: Fix memory leak in imx_pd_connector_get_modes net: stmmac: Fix unset max_speed difference between DT and non-DT platforms scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() mm: fix race between MADV_FREE reclaim and blkdev direct IO read jfs: prevent NULL deref in diFree virtio_console: eliminate anonymous module_init & module_exit serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() SUNRPC/call_alloc: async tasks mustn't block waiting for memory w1: w1_therm: fixes w1_seq for ds28ea00 sensors init/main.c: return 1 from handled __setup() functions Bluetooth: Fix use after free in hci_send_acl xtensa: fix DTC warning unit_address_format usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm scsi: libfc: Fix use after free in fc_exch_abts_resp() MIPS: fix fortify panic when copying asm exception handlers bnxt_en: Eliminate unintended link toggle during FW reset scsi: aha152x: Fix aha152x_setup() __setup handler return value scsi: pm8001: Fix pm8001_mpi_task_abort_resp() dm ioctl: prevent potential spectre v1 gadget iommu/arm-smmu-v3: fix event handling soft lockup scsi: bfa: Replace snprintf() with sysfs_emit() scsi: mvsas: Replace snprintf() with sysfs_emit() powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 ptp: replace snprintf with sysfs_emit ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs ARM: 9187/1: JIVE: fix return value of __setup handler rtc: wm8350: Handle error for wm8350_register_irq KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated openvswitch: Fixed nd target mask field in the flow dump. ARM: dts: spear13xx: Update SPI dma properties ARM: dts: spear1340: Update serial node properties ASoC: topology: Allow TLV control to be either read or write ubi: fastmap: Return error code if memory allocation fails in add_aeb() mm/memcontrol: return 1 from cgroup.memory __setup() handler mm/mmap: return 1 from stack_guard_gap __setup() handler ACPI: CPPC: Avoid out of bounds access when parsing _CPC data pinctrl: pinconf-generic: Print arguments for bias-pull-* gfs2: Make sure FITRIM minlen is rounded up to fs block size ubifs: setflags: Make dirtied_ino_d 8 bytes aligned ubifs: Add missing iput if do_tmpfile() failed in rename whiteout KVM: Prevent module exit until all VMs are freed scsi: qla2xxx: Fix incorrect reporting of task management failure mmc: host: Return an error when ->enable_sdio_irq() ops is missing media: hdpvr: initialize dev->worker at hdpvr_register_videodev video: fbdev: sm712fb: Fix crash in smtcfb_write() ARM: mmp: Fix failure to remove sram device ARM: tegra: tamonten: Fix I2C3 pad setting media: cx88-mpeg: clear interrupt status register before streaming video ASoC: soc-core: skip zero num_dai component in searching dai name video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() ARM: dts: bcm2837: Add the missing L1/L2 cache information ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit video: fbdev: cirrusfb: check pixclock to avoid divide by zero video: fbdev: w100fb: Reset global state video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow ntfs: add sanity check on allocation size ext4: don't BUG if someone dirty pages without asking ext4 first spi: tegra20: Use of_device_get_match_data() PM: core: keep irq flags in device_pm_check_callbacks() ACPI/APEI: Limit printable size of BERT table data ACPICA: Avoid walking the ACPI Namespace if it is not there irqchip/nvic: Release nvic_base upon failure Fix incorrect type in assignment of ipv6 port for audit loop: use sysfs_emit() in the sysfs xxx show() selinux: use correct type for context length net/x25: Fix null-ptr-deref caused by x25_disconnect qlcnic: dcb: default to returning -EOPNOTSUPP net: phy: broadcom: Fix brcm_fet_config_init() netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options jfs: fix divide error in dbNextAG kgdbts: fix return value of __setup handler kgdboc: fix return value of __setup handler tty: hvc: fix return value of __setup handler pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init NFS: remove unneeded check in decode_devicenotify_args() clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver clk: clps711x: Terminate clk_div_table with sentinel element clk: loongson1: Terminate clk_div_table with sentinel element remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region clk: qcom: clk-rcg2: Update the frac table for pixel clock iio: adc: Add check for devm_request_threaded_irq pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() mxser: fix xmit_buf leak in activate when LSR == 0xff mfd: asic3: Add missing iounmap() on error asic3_mfd_probe i2c: mux: demux-pinctrl: do not deactivate a master that is not active af_netlink: Fix shift out of bounds in group mask calculation USB: storage: ums-realtek: fix error code in rts51x_read_mem() MIPS: RB532: fix return value of __setup handler mfd: mc13xxx: Add check for mc13xxx_irq_request powerpc/sysdev: fix incorrect use to determine if list is empty power: supply: wm8350-power: Add missing free in free_charger_irq power: supply: wm8350-power: Handle error for wm8350_register_irq i2c: xiic: Make bus names unique KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() KVM: x86: Fix emulation in writing cr8 drm/tegra: Fix reference leak in tegra_dsi_ganged_probe ext2: correct max file size computing TOMOYO: fix __setup handlers return values scsi: pm8001: Fix abort all task initialization scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() scsi: pm8001: Fix command initialization in pm80XX_send_read_log() iwlwifi: Fix -EIO error code that is never returned HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init ray_cs: Check ioremap return value ath9k_htc: fix uninit value bugs drm/edid: Don't clear formats if using deep color mtd: onenand: Check for error irq ASoC: imx-es8328: Fix error return code in imx_es8328_probe() ASoC: mxs: Fix error handling in mxs_sgtl5000_probe ASoC: dmaengine: do not use a NULL prepare_slave_config() callback video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of ASoC: fsi: Add check for clk_enable ASoC: wm8350: Handle error for wm8350_register_irq ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction memory: emif: check the pointer temp in get_device_details() memory: emif: Add check for setup_interrupts ASoC: atmel_ssc_dai: Handle errors for clk_enable ASoC: mxs-saif: Handle errors for clk_enable printk: fix return value of printk.devkmsg __setup handler arm64: dts: broadcom: Fix sata nodename arm64: dts: ns2: Fix spi-cpol and spi-cpha property ALSA: spi: Add check for clk_enable() ASoC: ti: davinci-i2s: Add check for clk_enable() media: usb: go7007: s2250-board: fix leak in probe() soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe ARM: dts: qcom: ipq4019: fix sleep clock video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() perf/x86/intel/pt: Fix address filter config for 32-bit kernel perf/core: Fix address filter parser for multiple filters sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa clocksource: acpi_pm: fix return value of __setup handler hwmon: (pmbus) Add Vin unit off handling crypto: ccp - ccp_dmaengine_unregister release dma channels crypto: vmx - add missing dependencies PM: suspend: fix return value of __setup handler PM: hibernate: fix __setup handler error handling hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING hwmon: (pmbus) Add mutex to regulator ops selftests/x86: Add validity check and allow field splitting spi: tegra114: Add missing IRQ check in tegra_spi_probe crypto: mxs-dcp - Fix scatterlist processing crypto: authenc - Fix sleep in atomic context in decrypt_tail PCI: pciehp: Clear cmd_busy bit in polling mode brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio brcmfmac: firmware: Allocate space for default boardrev in nvram media: davinci: vpif: fix unbalanced runtime PM get DEC: Limit PMAX memory probing to R3k systems lib/raid6/test: fix multiple definition linking error thermal: int340x: Increase bitmap size carl9170: fix missing bit-wise or operator for tx_params ARM: dts: exynos: add missing HDMI supplies on SMDK5420 ARM: dts: exynos: add missing HDMI supplies on SMDK5250 ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 video: fbdev: atari: Atari 2 bpp (STe) palette bugfix video: fbdev: sm712fb: Fix crash in smtcfb_read() drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() ALSA: cs4236: fix an incorrect NULL check on list iterator Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands mempolicy: mbind_range() set_policy() after vma_merge() mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node jffs2: fix memory leak in jffs2_scan_medium jffs2: fix memory leak in jffs2_do_mount_fs jffs2: fix use-after-free in jffs2_clear_xattr_subsystem can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path NFSD: prevent underflow in nfssvc_decode_writeargs() SUNRPC: avoid race between mod_timer() and del_timer_sync() ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE clk: uniphier: Fix fixed-rate initialization iio: inkern: make a best effort on offset calculation iio: inkern: apply consumer scale on IIO_VAL_INT cases coresight: Fix TRCCONFIGR.QE sysfs interface USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c virtio-blk: Use blk_validate_block_size() to validate block size block: Add a helper to validate the block size af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register ethernet: sun: Free the coherent when failing in probing virtio_console: break out of buf poll on remove netdevice: add the case if dev is NULL USB: serial: simple: add Nokia phone driver USB: serial: pl2303: add IBM device IDs Linux 4.9.310 arm64: Use the clearbhb instruction in mitigations arm64: add ID_AA64ISAR2_EL1 sys register KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated arm64: Mitigate spectre style branch history side channels KVM: arm64: Add templates for BHB mitigation sequences arm64: Add percpu vectors for EL1 arm64: entry: Add macro for reading symbol addresses from the trampoline arm64: entry: Add vectors that have the bhb mitigation sequences arm64: Move arm64_update_smccc_conduit() out of SSBD ifdef arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations arm64: entry: Allow the trampoline text to occupy multiple pages arm64: entry: Make the kpti trampoline's kpti sequence optional arm64: entry: Move trampoline macros out of ifdef'd section arm64: entry: Don't assume tramp_vectors is the start of the vectors arm64: entry: Allow tramp_alias to access symbols after the 4K boundary arm64: entry: Move the trampoline data page before the text page arm64: entry: Free up another register on kpti's tramp_exit path arm64: entry: Make the trampoline cleanup optional arm64: entry.S: Add ventry overflow sanity checks arm64: Add helper to decode register from instruction arm64: Add Cortex-X2 CPU part definition arm64: Add Neoverse-N2, Cortex-A710 CPU part definition arm64: Add part number for Arm Cortex-A77 arm64: Add part number for Neoverse N1 arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT arm64: Add silicon-errata.txt entry for ARM erratum 1188873 arm64: arch_timer: avoid unused function warning arm64: arch_timer: Add workaround for ARM erratum 1188873 arm64: arch_timer: Add erratum handler for CPU-specific capability arm64: arch_timer: Add infrastructure for multiple erratum detection methods clocksource/drivers/arm_arch_timer: Introduce generic errata handling infrastructure clocksource/drivers/arm_arch_timer: Remove fsl-a008585 parameter arm64: capabilities: Add support for checks based on a list of MIDRs arm64: Add helpers for checking CPU MIDR against a range arm64: capabilities: Clean up midr range helpers arm64: capabilities: Add flags to handle the conflicts on late CPU arm64: capabilities: Prepare for fine grained capabilities arm64: capabilities: Move errata processing code arm64: capabilities: Move errata work around check on boot CPU arm64: capabilities: Update prototype for enable call back arm64: Add MIDR encoding for Arm Cortex-A55 and Cortex-A35 arm64: Remove useless UAO IPI and describe how this gets enabled arm64: errata: Provide macro for major and minor cpu revisions Linux 4.9.309 llc: only change llc->dev when bind() succeeds mac80211: fix potential double free on mesh join crypto: qat - disable registration of algorithms ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board netfilter: nf_tables: initialize registers in nft_do_chain() ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec ALSA: cmipci: Restore aux vol on suspend/resume ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB ALSA: pcm: Add stream lock during PCM reset ioctl operations llc: fix netdevice reference leaks in llc_ui_bind() staging: fbtft: fb_st7789v: reset display before initialization net: ipv6: fix skb_over_panic in __ip6_append_data nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION Linux 4.9.308 Input: aiptek - properly check endpoint type usb: gadget: Fix use-after-free bug by not setting udc->dev.driver usb: gadget: rndis: prevent integer overflow in rndis_set_response() atm: eni: Add check for dma_map_single net/packet: fix slab-out-of-bounds access in packet_recvmsg() fs: sysfs_emit: Remove PAGE_SIZE alignment check kselftest/vm: fix tests build with old libc sfc: extend the locking on mcdi->seqno tcp: make tcp_read_sock() more robust nl80211: Update bss channel on channel switch for P2P_CLIENT atm: firestream: check the return value of ioremap() in fs_init() can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE MIPS: smp: fill in sibling and core maps earlier ARM: dts: rockchip: fix a typo on rk3288 crypto-controller xfrm: Fix xfrm migrate issues when address family changes Linux 4.9.307 btrfs: unlock newly allocated extent buffer after error ARM: fix Thumb2 regression with Spectre BHB batman-adv: Don't expect inter-netns unique iflink indices batman-adv: Request iflink once in batadv-on-batadv check staging: gdm724x: fix use after free in gdm_lte_rx() ARM: Spectre-BHB: provide empty stub for non-config selftests/memfd: clean up mapping in mfd_fail_write tracing: Ensure trace buffer is at least 4096 bytes large Revert "xen-netback: Check for hotplug-status existence before watching" net-sysfs: add check for netdevice being present to speed_show sctp: fix kernel-infoleak for SCTP sockets gpio: ts4900: Do not set DAT and OE together NFC: port100: fix use-after-free in port100_send_complete net/mlx5: Fix size field in bufferx_reg struct ax25: Fix NULL pointer dereference in ax25_kill_by_device net: ethernet: lpc_eth: Handle error for clk_enable ethernet: Fix error handling in xemaclite_of_probe qed: return status of qed_iov_get_link net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() Linux 4.9.306 xen/netfront: react properly to failing gnttab_end_foreign_access_ref() xen/gnttab: fix gnttab_end_foreign_access() without page specified xen: remove gnttab_query_foreign_access() xen/gntalloc: don't use gnttab_query_foreign_access() xen/scsifront: don't use gnttab_query_foreign_access() for mapped status xen/netfront: don't use gnttab_query_foreign_access() for mapped status xen/blkfront: don't use gnttab_query_foreign_access() for mapped status xen/grant-table: add gnttab_try_end_foreign_access() xen/xenbus: don't let xenbus_grant_ring() remove grants in error case ARM: fix build warning in proc-v7-bugs.c x86, modpost: Replace last remnants of RETPOLINE with CONFIG_RETPOLINE x86/build: Fix compiler support check for CONFIG_RETPOLINE ARM: Do not use NOCROSSREFS directive with ld.lld ARM: fix co-processor register typo ARM: fix build error when BPF_SYSCALL is disabled ARM: include unprivileged BPF status in Spectre V2 reporting ARM: Spectre-BHB workaround ARM: use LOADADDR() to get load address of sections ARM: early traps initialisation ARM: report Spectre v2 status through sysfs arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit() arm/arm64: Provide a wrapper for SMCCC 1.1 calls x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT x86/speculation: Warn about Spectre v2 LFENCE mitigation x86/speculation: Update link to AMD speculation whitepaper x86/speculation: Use generic retpoline by default on AMD x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting Documentation/hw-vuln: Update spectre doc x86/speculation: Add eIBRS + Retpoline options x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE x86,bugs: Unconditionally allow spectre_v2=retpoline,amd x86/speculation: Merge one test in spectre_v2_user_select_mitigation() Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization Documentation: Add swapgs description to the Spectre v1 documentation Documentation: Add section about CPU vulnerabilities for Spectre x86/retpoline: Remove minimal retpoline support x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support x86/speculation: Add RETPOLINE_AMD support to the inline asm CALL_NOSPEC variant Linux 4.9.305 hamradio: fix macro redefine warning net: dcb: disable softirqs in dcbnl_flush_dev() memfd: fix F_SEAL_WRITE after shmem huge page allocated HID: add mapping for KEY_ALL_APPLICATIONS Input: elan_i2c - fix regulator enable count imbalance after suspend/resume Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() net: chelsio: cxgb3: check the return value of pci_find_capability() soc: fsl: qe: Check of ioremap return value ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions can: gs_usb: change active_channels's type from atomic_t to u8 efivars: Respect "block" flag in efivar_entry_set_safe() net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() net: sxgbe: fix return value of __setup handler net: stmmac: fix return value of __setup handler mac80211: fix forwarded mesh frames AC & queue selection firmware: qemu_fw_cfg: fix kobject leak in probe error path firmware: Fix a reference count leak. net: dcb: flush lingering app table entries for unregistered devices netfilter: nf_queue: fix possible use-after-free netfilter: nf_queue: don't assume sk is full socket xfrm: fix MTU regression ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min ata: pata_hpt37x: fix PCI clock detection usb: gadget: clear related members when goto fail usb: gadget: don't release an existing dev->buf net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 i2c: qup: allow COMPILE_TEST dmaengine: shdma: Fix runtime PM imbalance on error cifs: fix double free race when mount fails in cifs_get_root() Input: clear BTN_RIGHT/MIDDLE on buttonpads i2c: bcm2835: Avoid clock stretching timeouts mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work mac80211_hwsim: report NOACK frames in tx_status Linux 4.9.304 fget: clarify and improve __fget_files() implementation memblock: use kfree() to release kmalloced memblock regions tty: n_gsm: fix proper link termination after failed open tty: n_gsm: fix encoding of control signal octet bit DV xhci: Prevent futile URB re-submissions due to incorrect return value. usb: dwc3: gadget: Let the interrupt handler disable bottom halves. USB: serial: option: add Telit LE910R1 compositions USB: serial: option: add support for DW5829e tracefs: Set the group ownership in apply_options() not parse_options() USB: gadget: validate endpoint index for xilinx udc usb: gadget: rndis: add spinlock for rndis response list Revert "USB: serial: ch341: add new Product ID for CH341A" ata: pata_hpt37x: disable primary channel on HPT371 iio: adc: men_z188_adc: Fix a resource leak in an error handling path RDMA/ib_srp: Fix a deadlock configfs: fix a race in configfs_{,un}register_subsystem() net/mlx5e: Fix wrong return value on ioctl EEPROM query failure drm/edid: Always set RGB444 openvswitch: Fix setting ipv6 fields causing hw csum failure gso: do not skip outer ip header in case of ipip and net_failover net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends serial: 8250: of: Fix mapped region size when using reg-offset property serial: 8250: fix error handling in of_platform_serial_probe() USB: zaurus: support another broken Zaurus sr9700: sanity check for packet length parisc/unaligned: Fix ldw() and stw() unalignment handlers parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel vhost/vsock: don't check owner in vhost_vsock_stop() while releasing mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status Linux 4.9.303 net: usb: qmi_wwan: Add support for Dell DW5829e tracing: Fix tp_printk option related with tp_printk_stop_on_boot ata: libata-core: Disable TRIM on M88V29 NFS: Do not report writeback errors in nfs_getattr() KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW lib/iov_iter: initialize "flags" in new pipe_buffer i2c: brcmstb: fix support for DSL and CM variants EDAC: Fix calculation of returned address and next offset in edac_align_ptr() NFS: LOOKUP_DIRECTORY is also ok with symlinks ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range() ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw() ALSA: hda: Fix missing codec probe on Shenker Dock 15 ALSA: hda: Fix regression on forced probe mask option libsubcmd: Fix use-after-free for realloc(..., 0) drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit iwlwifi: pcie: fix locking when "HW not ready" vsock: remove vsock from connected table when connect is interrupted by a signal vsock: correct removal of socket from the list taskstats: Cleanup the use of task->exit_code xfrm: Don't accidentally set RTO_ONLINK in decode_session4() drm/radeon: Fix backlight control on iMac 12,1 quota: make dquot_quota_sync return errors from ->sync_fs vfs: make freeze_super abort when sync_filesystem returns error ax25: improve the incomplete fix to avoid UAF and NPD bugs selftests/zram: Adapt the situation that /dev/zram0 is being used selftests/zram01.sh: Fix compression ratio calculation selftests/zram: Skip max_comp_streams interface on newer kernel net: ieee802154: at86rf230: Stop leaking skb's btrfs: send: in case of IO error log it parisc: Fix sglist access in ccio-dma.c parisc: Fix data TLB miss in sba_unmap_sg serial: parisc: GSC: fix build when IOSAPIC is not set net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup Makefile.extrawarn: Move -Wunaligned-access to W=1 UPSTREAM: net: fix skb_panic to output real address UPSTREAM: xfrm: Make function xfrmi_get_link_net() static UPSTREAM: xfrm: fix gro_cells leak when remove virtual xfrm interfaces UPSTREAM: xfrm interface: fix memory leak on creation UPSTREAM: xfrm: clone XFRMA_SET_MARK in xfrm_do_migrate UPSTREAM: xfrm/compat: Translate by copying XFRMA_UNSPEC attribute UPSTREAM: xfrm/compat: memset(0) 64-bit padding at right place UPSTREAM: xfrm/compat: Don't allocate memory with __GFP_ZERO UPSTREAM: xfrm/compat: Cleanup WARN()s that can be user-triggered UPSTREAM: net: xfrm: fix memory leak in xfrm_user_rcv_msg UPSTREAM: arm64/vdso: don't leak kernel addresses UPSTREAM: tracing: make PREEMPTIRQ_EVENTS depend on TRACING UPSTREAM: trace_uprobe: Use %lx to display offset UPSTREAM: kprobes: Fix random address output of blacklist file UPSTREAM: mm/huge_memory.c: __split_huge_page() use atomic ClearPageDirty() UPSTREAM: x86/realmode: Don't leak the trampoline kernel address UPSTREAM: bpf: bpf_prog_array_alloc() should return a generic non-rcu pointer UPSTREAM: bpf: fix rcu annotations in compute_effective_progs() UPSTREAM: optee: add writeback to valid memory type UPSTREAM: lib/test_printf.c: accept "ptrval" as valid result for plain 'p' tests UPSTREAM: kdb: use correct pointer when 'btc' calls 'btt' UPSTREAM: kdb: print real address of pointers instead of hashed addresses UPSTREAM: powerpc/traps: Fix the message printed when stack overflows UPSTREAM: f2fs: should use GFP_NOFS for directory inodes UPSTREAM: zram: off by one in read_block_state() UPSTREAM: tee: fix put order in teedev_close_context() UPSTREAM: vsprintf: Replace memory barrier with static_key for random_ptr_key update UPSTREAM: ARM: 8896/1: VDSO: Don't leak kernel addresses UPSTREAM: parisc: Show unhashed hardware inventory UPSTREAM: parisc: Show initial kernel memory layout unhashed UPSTREAM: parisc: Show unhashed HPA of Dino chip UPSTREAM: parisc: Show unhashed EISA EEPROM address UPSTREAM: HID: input: throttle battery uevents UPSTREAM: HID: steam: select CONFIG_POWER_SUPPLY UPSTREAM: HID: sony: Fix for broken buttons on DS3 USB dongles UPSTREAM: HID: input: do not report stylus battery state as "full" Linux 4.9.302 HID: wacom: add USB_HID dependency hwmon: (dell-smm) Speed up setting of fan speed USB: serial: cp210x: add CPI Bulk Coin Recycler id USB: serial: cp210x: add NCR Retail IO box id USB: serial: ch341: add support for GW Instek USB2.0-Serial devices USB: serial: option: add ZTE MF286D modem USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320 usb: gadget: rndis: check size of RNDIS_MSG_SET command USB: gadget: validate interface OS descriptor requests usb: dwc3: gadget: Prevent core from processing stale TRBs n_tty: wake up poll(POLLRDNORM) on receiving data bpf: Add kconfig knob for disabling unpriv bpf by default vt_ioctl: add array_index_nospec to VT_ACTIVATE vt_ioctl: fix array_index_nospec in vt_setactivate tipc: rate limit warning for received illegal binding update net: fix a memleak when uncloning an skb dst and its metadata net: do not keep the dst cache when uncloning an skb dst and its metadata ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path bonding: pair enable_port with slave_arr_updates ARM: dts: imx6qdl-udoo: Properly describe the SD card detect staging: fbtft: Fix error path in fbtft_driver_module_init() ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend scsi: target: iscsi: Make sure the np under each tpg is unique NFSv4 remove zero number of fs_locations entries error check nfs: nfs4clinet: check the return value of kstrdup() NFSv4 only print the label when its queried Revert "net: axienet: Wait for PhyRstCmplt after core reset" ALSA: line6: Fix misplaced backport of "Fix wrong altsetting for LINE6_PODHD500_1" serial: sh-sci: Fix misplaced backport of "Fix late enablement of AUTORTS" Input: i8042 - Fix misplaced backport of "add ASUS Zenbook Flip to noselftest list" NFSD: Clamp WRITE offsets NFS: Fix initialisation of nfs_client cl_flags field ima: Remove ima_policy file before directory integrity: check the return value of audit_log_start() Revert "tracefs: Have tracefs directories not set OTH permission bits by default" Linux 4.9.301 tipc: improve size validations for received domain records moxart: fix potential use-after-free on remove path cgroup-v1: Require capabilities to set release_agent Linux 4.9.300 ext4: fix error handling in ext4_restore_inline_data() EDAC/xgene: Fix deferred probing EDAC/altera: Fix deferred probing rtc: cmos: Evaluate century appropriate nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client. scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe ASoC: fsl: Add missing error handling in pcm030_fabric_probe net: macsec: Verify that send_sci is on when setting Tx sci explicitly net: ieee802154: Return meaningful error codes from the netlink helpers spi: mediatek: Avoid NULL pointer crash in interrupt spi: bcm-qspi: check for valid cs before applying chip select iommu/amd: Fix loop timeout issue in iommu_ga_log_enable() drm/nouveau: fix off by one in BIOS boundary checking ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() af_packet: fix data-race in packet_setsockopt / packet_setsockopt rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() net: amd-xgbe: Fix skb data length underflow net: amd-xgbe: ensure to reset the tx_timer_active flag ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback netfilter: nat: limit port clash resolution attempts netfilter: nat: remove l4 protocol port rovers ipv4: tcp: send zero IPID in SYNACK messages ipv4: raw: lock the socket in raw_bind() hwmon: (lm90) Reduce maximum conversion rate for G781 drm/msm: Fix wrong size calculation net-procfs: show net devices bound packet types NFSv4: nfs_atomic_open() can race when looking up a non-regular file NFSv4: Handle case where the lookup of a directory fails ipv4: avoid using shared IP generator for connected sockets net: fix information leakage in /proc/net/ptype ipv6_tunnel: Rate limit warning messages scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() powerpc/32: Fix boot failure with GCC latent entropy plugin USB: core: Fix hang in usb_kill_urb by adding memory barriers usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge tty: Add support for Brainboxes UC cards. tty: n_gsm: fix SW flow control encoding/handling serial: stm32: fix software flow control transfer PM: wakeup: simplify the output logic of pm_show_wakelocks() udf: Fix NULL ptr deref when converting from inline format udf: Restore i_lenAlloc when inode expansion fails scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices s390/hypfs: include z/VM guests with access control group set Bluetooth: refactor malicious adv data check can: bcm: fix UAF of bcm op BACKPORT: ipv6: Implement draft-ietf-6man-rfc4941bis Linux 4.9.299 ion: Do not 'put' ION handle until after its final use ion: Protect kref from userspace manipulation ion: Fix use after free during ION_IOC_ALLOC ARM: 8800/1: use choice for kernel unwinders KVM: X86: MMU: Use the correct inherited permissions to get shadow page KVM: nVMX: fix EPT permissions as reported in exit qualification NFSv4: Initialise connection to the server in nfs4_alloc_client() media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() drm/i915: Flush TLBs before releasing backing store Linux 4.9.298 KVM: do not allow mapping valid but non-reference-counted pages KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped() KVM: do not assume PTE is writable after follow_pfn mm: add follow_pte_pmd() lib/timerqueue: Rely on rbtree semantics for next timer rbtree: cache leftmost node internally cipso,calipso: resolve a number of problems with the DOI refcounts gianfar: fix jumbo packets+napi+rx overrun crash gianfar: simplify FCS handling and fix memory leak drm/ttm/nouveau: don't call tt destroy callback on alloc failure. gup: document and work around "COW can break either way" issue Revert "gup: document and work around "COW can break either way" issue" lib82596: Fix IRQ check in sni_82596_probe scripts/dtc: dtx_diff: remove broken example from help text bcmgenet: add WOL IRQ check net_sched: restore "mpu xxx" handling dmaengine: at_xdmac: Fix at_xdmac_lld struct definition dmaengine: at_xdmac: Fix lld view setting dmaengine: at_xdmac: Print debug message after realeasing the lock dmaengine: at_xdmac: Don't start transactions at tx_submit level libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route() netns: add schedule point in ops_exit_list() net: axienet: fix number of TX ring slots for available check net: axienet: Wait for PhyRstCmplt after core reset af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses RDMA/rxe: Fix a typo in opcode name RDMA/hns: Modify the mapping attribute of doorbell to device drm/radeon: fix error handling in radeon_driver_open_kms fuse: fix live lock in fuse_iget() fuse: fix bad inode ext4: don't use the orphan list when migrating an inode ext4: Fix BUG_ON in ext4_bread when write quota data ext4: set csum seed in tmp inode while migrating to extents iwlwifi: mvm: Increase the scan timeout guard to 30 seconds ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers power: bq25890: Enable continuous conversion for ADC at charging ASoC: mediatek: mt8173: fix device_node leak scsi: sr: Don't use GFP_DMA MIPS: Octeon: Fix build errors using clang i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters ALSA: seq: Set upper limit of processed events w1: Misuse of get_user()/put_user() reported by sparse i2c: mpc: Correct I2C reset procedure powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING i2c: i801: Don't silently correct invalid transfer size powerpc/btext: add missing of_node_put powerpc/cell: add missing of_node_put powerpc/powernv: add missing of_node_put powerpc/6xx: add missing of_node_put parisc: Avoid calling faulthandler_disabled() twice serial: core: Keep mctrl register state and cached copy in sync serial: pl010: Drop CR register reset on set_termios dm space map common: add bounds check to sm_ll_lookup_bitmap() dm btree: add a defensive bounds check to insert_at() net: mdio: Demote probed message to debug print btrfs: remove BUG_ON(!eie) in find_parent_nodes btrfs: remove BUG_ON() in find_parent_nodes() ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() ACPICA: Utilities: Avoid deleting the same object twice in a row jffs2: GC deadlock reading a page that is used in jffs2_write_begin() um: registers: Rename function names to avoid conflicts and build problems ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0 media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() media: igorplugusb: receiver overflow should be reported net: bonding: debug: avoid printing debug logs when bond is not notifying peers ath10k: Fix tx hanging iwlwifi: mvm: synchronize with FW after multicast commands media: m920x: don't use stack on USB reads media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach() floppy: Add max size check for user space request mwifiex: Fix skb_over_panic in mwifiex_usb_recv() HSI: core: Fix return freed object in hsi_new_client gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use media: b2c2: Add missing check in flexcop_pci_isr: HID: apple: Do not reset quirks when the Fn key is not found usb: gadget: f_fs: Use stream_open() for endpoint files ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply fs: dlm: filter user dlm messages for kernel locks Bluetooth: Fix debugfs entry leak in hci_register_dev() RDMA/cxgb4: Set queue pair state when being queried mips: bcm63xx: add support for clk_set_parent() mips: lantiq: add support for clk_set_parent() misc: lattice-ecp3-config: Fix task hung when firmware load failed ASoC: samsung: idma: Check of ioremap return value dmaengine: pxa/mmp: stop referencing config->slave_id RDMA/core: Let ib_find_gid() continue search even after empty entry scsi: ufs: Fix race conditions related to driver data char/mwave: Adjust io port register size ALSA: oss: fix compile error when OSS_DEBUG is enabled powerpc/prom_init: Fix improper check of prom_getprop() RDMA/hns: Validate the pkey index ALSA: hda: Add missing rwsem around snd_ctl_remove() calls ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls ALSA: jack: Add missing rwsem around snd_ctl_remove() calls ext4: avoid trim error on fs with small groups net: mcs7830: handle usb read errors properly pcmcia: fix setting of kthread task states can: xilinx_can: xcan_probe(): check for error irq can: softing: softing_startstop(): fix set but not used variable warning spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe fsl/fman: Check for null pointer after calling devm_ioremap ppp: ensure minimum packet size in ppp_write() pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region() pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region() usb: ftdi-elan: fix memory leak on device disconnect media: msi001: fix possible null-ptr-deref in msi001_probe() media: si2157: Fix "warm" tuner state detection media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach() media: dib8000: Fix a memleak in dib8000_init() floppy: Fix hang in watchdog when disk is ejected serial: amba-pl011: do not request memory region twice drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() arm64: dts: qcom: msm8916: fix MMC controller aliases netfilter: bridge: add support for pppoe filtering tty: serial: atmel: Call dma_async_issue_pending() tty: serial: atmel: Check return code of dmaengine_submit() crypto: qce - fix uaf on qce_ahash_register_one media: dmxdev: fix UAF when dvb_register_device() fails Bluetooth: stop proccessing malicious adv data wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller can: softing_cs: softingcs_probe(): fix memleak on registration failure media: stk1160: fix control-message timeouts media: pvrusb2: fix control-message timeouts media: redrat3: fix control-message timeouts media: dib0700: fix undefined behavior in tuner shutdown media: s2255: fix control-message timeouts media: cpia2: fix control-message timeouts media: em28xx: fix control-message timeouts media: mceusb: fix control-message timeouts media: flexcop-usb: fix control-message timeouts rtc: cmos: take rtc_lock while reading from CMOS nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind() HID: wacom: Avoid using stale array indicies to read contact count HID: uhid: Fix worker destroying device without any protection rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled media: uvcvideo: fix division by zero at stream start drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk() staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn() random: fix data race on crng init time random: fix data race on crng_node_pool can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved} can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe() USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status USB: core: Fix bug in resuming hub's handling of wakeup requests Bluetooth: bfusb: fix division by zero in send path Linux 4.9.297 power: reset: ltc2952: Fix use of floating point literals mISDN: change function names to avoid conflicts net: udp: fix alignment problem in udp4_seq_show() ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown() phonet: refcount leak in pep_sock_accep arm64: sysreg: Move to use definitions for all the SCTLR bits arm64: move !VHE work to end of el2_setup arm64: reduce el2_setup branching arm64: Remove a redundancy in sysreg.h bug: split BUILD_BUG stuff out into <linux/build_bug.h> rndis_host: support Hytera digital radios xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc i40e: Fix incorrect netdev's real number of RX/TX queues mac80211: initialize variable have_higher_than_11mbit ieee802154: atusb: fix uninit value in atusb_set_extended_addr virtio_pci: Support surprise removal of virtio pci device tracing: Tag trace_percpu_buffer as a percpu pointer tracing: Fix check for trace_percpu_buffer validity in get_trace_buf() Bluetooth: btusb: Apply QCA Rome patches for some ATH3012 models Linux 4.9.296 net: fix use-after-free in tw_timer_handler Input: spaceball - fix parsing of movement data packets Input: appletouch - initialize work before device registration scsi: vmw_pvscsi: Set residual data length conditionally usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set. uapi: fix linux/nfc.h userspace compilation errors nfc: uapi: use kernel size_t to fix user-space builds fsl/fman: Fix missing put_device() call in fman_port_probe selinux: initialize proto variable in selinux_ip_postroute_compat() recordmcount.pl: fix typo in s390 mcount regex platform/x86: apple-gmux: use resource_size() with res HID: asus: Add depends on USB_HID to HID_ASUS Kconfig option Linux 4.9.295 phonet/pep: refuse to enable an unbound pipe hamradio: improve the incomplete fix to avoid NPD hamradio: defer ax25 kfree after unregister_netdev ax25: NPD bug when detaching AX25 device hwmon: (lm90) Do not report 'busy' status bit as alarm ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling x86/pkey: Fix undefined behaviour with PKRU_WD_BIT ALSA: drivers: opl3: Fix incorrect use of vp->state ALSA: jack: Check the return value of kstrdup() hwmon: (lm90) Fix usage of CONFIG2 register in detect function drivers: net: smc911x: Check for error irq fjes: Check for error irq bonding: fix ad_actor_system option setting to default qlcnic: potential dereference null pointer of rx_queue->page_ring IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() HID: holtek: fix mouse probing can: kvaser_usb: get CAN clock frequency from device net: usb: lan78xx: add Allied Telesis AT29M2-AF Linux 4.9.294 xen/netback: don't queue unlimited number of packages xen/netback: fix rx queue stall detection xen/console: harden hvc_xen against event channel storms xen/netfront: harden netfront against event channel storms xen/blkfront: harden blkfront against event channel storms Input: touchscreen - avoid bitwise vs logical OR warning mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO ARM: 8805/2: remove unneeded naked function usage net: lan78xx: Avoid unnecessary self assignment scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() fuse: annotate lock in fuse_reverse_inval_entry() firmware: arm_scpi: Fix string overflow in SCPI genpd driver net: systemport: Add global locking for descriptor lifecycle timekeeping: Really make sure wall_to_monotonic isn't positive USB: serial: option: add Telit FN990 compositions PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error USB: gadget: bRequestType is a bitfield, not a enum ixgbe: set X550 MDIO speed before talking to PHY igbvf: fix double free in `igbvf_probe` soc/tegra: fuse: Fix bitwise vs. logical OR warning nfsd: fix use-after-free due to delegation race dm btree remove: fix use after free in rebalance_children() recordmcount.pl: look for jgnop instruction as well as bcrl on s390 mac80211: send ADDBA requests using the tid/queue of the aggregation session hwmon: (dell-smm) Fix warning on /proc/i8k creation error tracing: Fix a kmemleak false positive in tracing_map net: netlink: af_netlink: Prevent empty skb by adding a check on len. i2c: rk3x: Handle a spurious start completion interrupt flag parisc/agp: Annotate parisc agp init functions with __init net/mlx4_en: Update reported link modes for 1/10G nfc: fix segfault in nfc_genl_dump_devices_done FROMGIT: USB: gadget: bRequestType is a bitfield, not a enum Linux 4.9.293 irqchip: nvic: Fix offset for Interrupt Priority Offsets irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL irqchip/armada-370-xp: Fix support for Multi-MSI interrupts irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc() iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove iio: itg3200: Call iio_trigger_notify_done() on error iio: kxsd9: Don't return error code in trigger handler iio: ltr501: Don't return error code in trigger handler iio: mma8452: Fix trigger reference couting iio: stk3310: Don't return error code in interrupt handler usb: core: config: using bit mask instead of individual bits usb: core: config: fix validation of wMaxPacketValue entries USB: gadget: zero allocate endpoint 0 buffers USB: gadget: detect too-big endpoint 0 requests net/qla3xxx: fix an error code in ql_adapter_up() net, neigh: clear whole pneigh_entry at alloc time net: fec: only clear interrupt of handling queue in fec_enet_rx_queue() net: altera: set a couple error code in probe() net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) tracefs: Set all files to the same group ownership as the mount option signalfd: use wake_up_pollfree() binder: use wake_up_pollfree() wait: add wake_up_pollfree() libata: add horkage for ASMedia 1092 can: pch_can: pch_can_rx_normal: fix use after free tracefs: Have new files inherit the ownership of their parent ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*() ALSA: pcm: oss: Limit the period size to 16MB ALSA: pcm: oss: Fix negative period/buffer sizes ALSA: ctl: Fix copy of updated id with element read/write mm: bdi: initialize bdi_min_ratio when bdi is unregistered IB/hfi1: Correct guard on eager buffer deallocation nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done can: sja1000: fix use after free in ems_pcmcia_add_card() HID: check for valid USB device for many HID drivers HID: wacom: fix problems when device is not a valid USB device HID: add USB_HID dependancy on some USB HID drivers HID: add USB_HID dependancy to hid-chicony HID: add USB_HID dependancy to hid-prodikeys HID: add hid_is_usb() function to make it simpler for USB detection HID: introduce hid_is_using_ll_driver UPSTREAM: USB: gadget: zero allocate endpoint 0 buffers UPSTREAM: USB: gadget: detect too-big endpoint 0 requests Conflicts: arch/arm64/include/asm/cputype.h arch/arm64/kernel/bpi.S arch/arm64/kernel/cpu_errata.c arch/arm64/kernel/vdso.c drivers/clk/qcom/clk-rcg2.c drivers/media/dvb-core/dmxdev.c drivers/mmc/core/host.c drivers/net/usb/lan78xx.c drivers/staging/android/ion/ion-ioctl.c drivers/staging/android/ion/ion.c drivers/staging/android/ion/ion_priv.h drivers/usb/gadget/composite.c drivers/usb/gadget/function/rndis.c drivers/usb/gadget/function/rndis.h lib/vsprintf.c mm/memory.c net/ipv6/ip6_output.c Change-Id: Ie8bf6aa5dac3ae822cef90decbba577cefedcb31	2022-05-09 16:57:36 +03:00
Greg Kroah-Hartman	bf0024db2f	Merge 4.9.306 into android-4.9-q ... Changes in 4.9.306 x86/speculation: Add RETPOLINE_AMD support to the inline asm CALL_NOSPEC variant x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support x86/retpoline: Remove minimal retpoline support Documentation: Add section about CPU vulnerabilities for Spectre Documentation: Add swapgs description to the Spectre v1 documentation Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization x86/speculation: Merge one test in spectre_v2_user_select_mitigation() x86,bugs: Unconditionally allow spectre_v2=retpoline,amd x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE x86/speculation: Add eIBRS + Retpoline options Documentation/hw-vuln: Update spectre doc x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting x86/speculation: Use generic retpoline by default on AMD x86/speculation: Update link to AMD speculation whitepaper x86/speculation: Warn about Spectre v2 LFENCE mitigation x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT arm/arm64: Provide a wrapper for SMCCC 1.1 calls arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit() ARM: report Spectre v2 status through sysfs ARM: early traps initialisation ARM: use LOADADDR() to get load address of sections ARM: Spectre-BHB workaround ARM: include unprivileged BPF status in Spectre V2 reporting ARM: fix build error when BPF_SYSCALL is disabled ARM: fix co-processor register typo ARM: Do not use NOCROSSREFS directive with ld.lld x86/build: Fix compiler support check for CONFIG_RETPOLINE x86, modpost: Replace last remnants of RETPOLINE with CONFIG_RETPOLINE ARM: fix build warning in proc-v7-bugs.c xen/xenbus: don't let xenbus_grant_ring() remove grants in error case xen/grant-table: add gnttab_try_end_foreign_access() xen/blkfront: don't use gnttab_query_foreign_access() for mapped status xen/netfront: don't use gnttab_query_foreign_access() for mapped status xen/scsifront: don't use gnttab_query_foreign_access() for mapped status xen/gntalloc: don't use gnttab_query_foreign_access() xen: remove gnttab_query_foreign_access() xen/gnttab: fix gnttab_end_foreign_access() without page specified xen/netfront: react properly to failing gnttab_end_foreign_access_ref() Linux 4.9.306 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I8083a622bda3bf4418f266a34c96d8175bc5e933	2022-03-11 11:10:37 +01:00
WANG Chao	31fb07f2a9	x86, modpost: Replace last remnants of RETPOLINE with CONFIG_RETPOLINE ... commit e4f358916d528d479c3c12bd2fd03f2d5a576380 upstream. Commit 4cd24de3a098 ("x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support") replaced the RETPOLINE define with CONFIG_RETPOLINE checks. Remove the remaining pieces. [ bp: Massage commit message. ] Fixes: 4cd24de3a098 ("x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support") Signed-off-by: WANG Chao <chao.wang@ucloud.cn> Signed-off-by: Borislav Petkov <bp@suse.de> Reviewed-by: Zhenzhong Duan <zhenzhong.duan@oracle.com> Reviewed-by: Masahiro Yamada <yamada.masahiro@socionext.com> Cc: "H. Peter Anvin" <hpa@zytor.com> Cc: Andi Kleen <ak@linux.intel.com> Cc: Andrew Morton <akpm@linux-foundation.org> Cc: Andy Lutomirski <luto@kernel.org> Cc: Arnd Bergmann <arnd@arndb.de> Cc: Daniel Borkmann <daniel@iogearbox.net> Cc: David Woodhouse <dwmw@amazon.co.uk> Cc: Geert Uytterhoeven <geert@linux-m68k.org> Cc: Jessica Yu <jeyu@kernel.org> Cc: Jiri Kosina <jkosina@suse.cz> Cc: Kees Cook <keescook@chromium.org> Cc: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> Cc: Luc Van Oostenryck <luc.vanoostenryck@gmail.com> Cc: Michal Marek <michal.lkml@markovi.net> Cc: Miguel Ojeda <miguel.ojeda.sandonis@gmail.com> Cc: Peter Zijlstra <peterz@infradead.org> Cc: Tim Chen <tim.c.chen@linux.intel.com> Cc: Vasily Gorbik <gor@linux.ibm.com> Cc: linux-kbuild@vger.kernel.org Cc: srinivas.eeda@oracle.com Cc: stable <stable@vger.kernel.org> Cc: x86-ml <x86@kernel.org> Link: https://lkml.kernel.org/r/20181210163725.95977-1-chao.wang@ucloud.cn [bwh: Backported to 4.9: adjust context] Signed-off-by: Ben Hutchings <ben@decadent.org.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-03-11 10:03:32 +01:00
Robin Peng	d5bdee4cf1	Merge android-4.9-q (4.9.192) into android-msm-pixel-4.9-lts ... Merge 4.9.192 into android-4.9-q Linux 4.9.192 * mld: fix memory leak in mld_del_delrec() net/ipv6/mcast.c * tcp: inherit timestamp on mtu probe net/ipv4/tcp_output.c net: stmmac: dwmac-rk: Don't fail if phy regulator is absent net: fix skb use after free in netpoll Revert "x86/apic: Include the LDR when clearing out APIC registers" spi: bcm2835aux: fix corruptions for longer spi transfers spi: bcm2835aux: remove dangerous uncontrolled read of fifo spi: bcm2835aux: unifying code between polling and interrupt driven code spi: bcm2835aux: ensure interrupts are enabled for shared handler libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer KVM: arm/arm64: Only skip MMIO insn once ceph: fix buffer free while holding i_ceph_lock in fill_inode() ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr() IB/mlx4: Fix memory leaks Tools: hv: kvp: eliminate 'may be used uninitialized' warning ravb: Fix use-after-free ravb_tstamp_skb wimax/i2400m: fix a memory leak bug net: kalmia: fix memory leaks cx82310_eth: fix a memory leak bug net: myri10ge: fix memory leaks cxgb4: fix a memory leak bug * gpio: Fix build error of function redefinition include/linux/gpio.h ibmveth: Convert multicast list size for little-endian system Bluetooth: btqca: Add a short delay before downloading the NVM net: tc35815: Explicitly check NET_IP_ALIGN is not zero in tc35815_rx net: tundra: tsi108: use spin_lock_irqsave instead of spin_lock_irq in IRQ context Merge 4.9.191 into android-4.9-q Linux 4.9.191 * mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n mm/zsmalloc.c x86/ptrace: fix up botched merge of spectrev1 fix i2c: piix4: Fix port selection for AMD Family 16h Model 30h KVM: arm/arm64: vgic-v2: Handle SGI bits in GICD_I{S,C}PENDR0 as WI KVM: arm/arm64: vgic: Fix potential deadlock when ap_list is long mac80211: fix possible sta leak * Revert "cfg80211: fix processing world regdomain when non modular" net/wireless/reg.c VMCI: Release resource if the work is already queued stm class: Fix a double free of stm_source_device * mmc: core: Fix init of SD cards reporting an invalid VDD range drivers/mmc/core/sd.c mmc: sdhci-of-at91: add quirk for broken HS200 uprobes/x86: Fix detection of 32-bit user mode ptrace,x86: Make user_64bit_mode() available to 32-bit builds USB: storage: ums-realtek: Whitelist auto-delink support USB: storage: ums-realtek: Update module parameter description for auto_delink_en usb: host: xhci: rcar: Fix typo in compatible string matching usb: host: ohci: fix a race condition between shutdown and irq usb: chipidea: udc: don't do hardware access if gadget has stopped USB: cdc-wdm: fix race between write and disconnect due to flag abuse * usb-storage: Add new JMS567 revision to unusual_devs drivers/usb/storage/unusual_devs.h * mm/zsmalloc.c: fix race condition in zs_destroy_pool mm/zsmalloc.c x86/apic: Include the LDR when clearing out APIC registers x86/apic: Do not initialize LDR and DFR for bigsmp KVM: x86: Don't update RIP or do single-step on faulting emulation ALSA: seq: Fix potential concurrent access to the deleted pool ALSA: line6: Fix memory leak at line6_init_pcm() error path * tcp: make sure EPOLLOUT wont be missed net/core/stream.c * ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit sound/usb/mixer.c * ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term sound/usb/mixer.c * tcp: fix tcp_rtx_queue_tail in case of empty retransmit queue include/net/tcp.h * scsi: ufs: Fix RX_TERMINATION_FORCE_ENABLE define value drivers/scsi/ufs/unipro.h watchdog: bcm2835_wdt: Fix module autoload tools: hv: fix KVP and VSS daemons exit code usb: host: fotg2: restart hcd after port reset i2c: emev2: avoid race when unregistering slave client xen/blkback: fix memory leaks * usb: gadget: composite: Clear "suspended" on reset/disconnect drivers/usb/gadget/composite.c * iommu/dma: Handle SG length overflow better drivers/iommu/dma-iommu.c dmaengine: ste_dma40: fix unneeded variable warning x86/CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h Revert "perf test 6: Fix missing kvm module load for s390" xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT * mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely mm/zsmalloc.c mm, page_owner: handle THP splits correctly * genirq: Properly pair kobject_del() with kobject_add() kernel/irq/irqdesc.c * dm table: fix invalid memory accesses with too high sector number drivers/md/dm-table.c dm space map metadata: fix missing store of apply_bops() return value dm btree: fix order of block initialization in btree_split_beneath x86/boot: Fix boot regression caused by bootparam sanitizing x86/boot: Save fields explicitly, zero out everything else x86/apic: Handle missing global clockevent gracefully x86/retpoline: Don't clobber RFLAGS during CALL_NOSPEC on i386 userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx * gpiolib: never report open-drain/source lines as 'input' to user-space drivers/gpio/gpiolib.c * Revert "dm bufio: fix deadlock with loop device" drivers/md/dm-bufio.c HID: wacom: Correct distance scale for 2nd-gen Intuos devices HID: wacom: correct misreported EKR ring values selftests: kvm: Adding config fragments perf pmu-events: Fix missing "cpu_clk_unhalted.core" event drm/vmwgfx: fix memory leak when too many retries have occurred x86/lib/cpu: Address missing prototypes warning libata: add SG safety checks in SFF pio transfers net: hisilicon: Fix dma_map_single failed on arm64 net: hisilicon: fix hip04-xmit never return TX_BUSY net: hisilicon: make hip04_tx_reclaim non-reentrant net: cxgb3_main: Fix a resource leak in a error path in 'init_one()' HID: input: fix a4tech horizontal wheel custom usage NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim() can: peak_usb: force the string buffer NULL-terminated can: sja1000: force the string buffer NULL-terminated perf bench numa: Fix cpu0 binding isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in start_isoc_chain() net: usb: qmi_wwan: Add the BroadMobi BM818 card ASoC: ti: davinci-mcasp: Correct slot_width posed constraint st_nci_hci_connectivity_event_received: null check the allocation st21nfca_connectivity_event_received: null check the allocation can: dev: call netif_carrier_off() in register_candev() * bonding: Force slave speed check after link state recovery for 802.3ad drivers/net/bonding/bond_main.c * ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks sound/soc/soc-dapm.c * netfilter: ebtables: fix a memory leak bug in compat net/bridge/netfilter/ebtables.c MIPS: kernel: only use i8253 clocksource with periodic clockevent HID: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT * BACKPORT: arch: add pidfd and io_uring syscalls everywhere arch/arm64/include/asm/unistd32.h * UPSTREAM: pidfd: fix a poll race when setting exit_state kernel/exit.c * BACKPORT: arch: wire-up pidfd_open() arch/arm64/include/asm/unistd.h arch/arm64/include/asm/unistd32.h arch/x86/entry/syscalls/syscall_32.tbl include/uapi/asm-generic/unistd.h * BACKPORT: pid: add pidfd_open() include/linux/syscalls.h kernel/pid.c * UPSTREAM: pidfd: add polling support include/linux/pid.h kernel/fork.c kernel/pid.c kernel/signal.c * UPSTREAM: signal: improve comments kernel/signal.c * BACKPORT: fork: do not release lock that wasn't taken kernel/fork.c * BACKPORT: signal: support CLONE_PIDFD with pidfd_send_signal kernel/signal.c kernel/sys_ni.c * BACKPORT: clone: add CLONE_PIDFD include/linux/pid.h include/uapi/linux/sched.h kernel/fork.c * UPSTREAM: Make anon_inodes unconditional arch/arm64/kvm/Kconfig drivers/base/Kconfig drivers/char/tpm/Kconfig drivers/dma-buf/Kconfig drivers/gpio/Kconfig drivers/iio/Kconfig drivers/infiniband/Kconfig drivers/vfio/Kconfig fs/Makefile fs/notify/fanotify/Kconfig fs/notify/inotify/Kconfig init/Kconfig * UPSTREAM: signal: use fdget() since we don't allow O_PATH kernel/signal.c * UPSTREAM: signal: don't silently convert SI_USER signals to non-current pidfd kernel/signal.c * BACKPORT: signal: add pidfd_send_signal() syscall arch/x86/entry/syscalls/syscall_32.tbl fs/proc/base.c include/linux/proc_fs.h include/linux/syscalls.h include/uapi/asm-generic/unistd.h kernel/signal.c kernel/sys_ni.c * ANDROID: sched: Disallow WALT with CFS bandwidth control init/Kconfig * ANDROID: fiq_debugger: remove drivers/staging/android/Kconfig drivers/staging/android/Makefile Merge 4.9.190 into android-4.9-q Linux 4.9.190 * bonding: Add vlan tx offload to hw_enc_features drivers/net/bonding/bond_main.c team: Add vlan tx offload to hw_enc_features net/mlx5e: Use flow keys dissector to parse packets for ARFS net/mlx5e: Only support tx/rx pause setting for port owner xen/netback: Reset nr_frags before freeing skb sctp: fix the transport error_count check * net/packet: fix race in tpacket_snd() net/packet/af_packet.c bnx2x: Fix VF's VLAN reconfiguration in reload. iommu/amd: Move iommu_init_pci() to .init section Input: psmouse - fix build error of multiple definition * netfilter: conntrack: Use consistent ct id hash calculation net/netfilter/nf_conntrack_core.c * arm64: compat: Allow single-byte watchpoints on all addresses arch/arm64/kernel/hw_breakpoint.c * bpf: fix bpf_jit_limit knob for PAGE_SIZE >= 64K include/linux/filter.h kernel/bpf/core.c net/core/sysctl_net_core.c * asm-generic: fix -Wtype-limits compiler warnings include/asm-generic/getorder.h USB: serial: option: Add Motorola modem UARTs USB: serial: option: add the BroadMobi BM818 card USB: serial: option: Add support for ZTE MF871A USB: serial: option: add D-Link DWM-222 device ID * USB: CDC: fix sanity checks in CDC union parser drivers/usb/core/message.c usb: cdc-acm: make sure a refcount is taken early enough * USB: core: Fix races in character device registration and deregistraion drivers/usb/core/file.c staging: comedi: dt3000: Fix rounding up of timer divisor staging: comedi: dt3000: Fix signed integer overflow 'divider * base' ocfs2: remove set but not used variable 'last_hash' IB/mad: Fix use-after-free in ib mad completion handling IB/core: Add mitigation for Spectre V1 * arm64/mm: fix variable 'pud' set but not used arch/arm64/include/asm/pgtable.h * arm64/efi: fix variable 'si' set but not used arch/arm64/include/asm/efi.h * kbuild: modpost: handle KBUILD_EXTRA_SYMBOLS only for external modules scripts/Makefile.modpost ata: libahci: do not complain in case of deferred probe scsi: hpsa: correct scsi command status issue after reset libata: zpodd: Fix small read overflow in zpodd_get_mech_type() perf header: Fix use of unitialized value warning perf header: Fix divide by zero error if f_header.attr_size==0 irqchip/irq-imx-gpcv2: Forward irq type to parent xen/pciback: remove set but not used variable 'old_state' net: usb: pegasus: fix improper read if get_registers() fail Input: iforce - add sanity checks Input: kbtab - sanity check for endpoint type * HID: hiddev: do cleanup in failure of opening a device drivers/hid/usbhid/hiddev.c * HID: hiddev: avoid opening a disconnected device drivers/hid/usbhid/hiddev.c HID: holtek: test for sanity of intfdata ALSA: hda - Let all conexant codec enter D3 when rebooting ALSA: hda - Add a generic reboot_notify ALSA: hda - Fix a memory leak bug xtensa: add missing isync to the cpu_reset TLB code * netfilter: ctnetlink: don't use conntrack/expect object addresses as id include/net/netfilter/nf_conntrack.h net/netfilter/nf_conntrack_core.c net/netfilter/nf_conntrack_netlink.c * inet: switch IP ID generator to siphash include/linux/siphash.h include/net/netns/ipv4.h net/ipv4/route.c net/ipv6/output_core.c * siphash: implement HalfSipHash1-3 for hash tables include/linux/siphash.h lib/siphash.c * siphash: add cryptographically secure PRF include/linux/siphash.h lib/Kconfig.debug lib/Makefile lib/siphash.c vhost: scsi: add weight support vhost_net: fix possible infinite loop vhost: introduce vhost_exceeds_weight() vhost_net: introduce vhost_exceeds_weight() vhost_net: use packet weight for rx handler, too vhost-net: set packet weight of tx polling to 2 * vq size * bpf: add bpf_jit_limit knob to restrict unpriv allocations include/linux/filter.h kernel/bpf/core.c net/core/sysctl_net_core.c * bpf: restrict access to core bpf sysctls net/core/sysctl_net_core.c * bpf: get rid of pure_initcall dependency to enable jits kernel/bpf/core.c net/core/sysctl_net_core.c net/socket.c * mm/memcontrol.c: fix use after free in mem_cgroup_iter() mm/memcontrol.c * mm/usercopy: use memory range to be accessed for wraparound check mm/usercopy.c sh: kernel: hw_breakpoint: Fix missing break in switch statement scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA iwlwifi: don't unmap as page memory that was mapped as single mwifiex: fix 802.11n/WPA detection smb3: send CAP_DFS capability during session setup SMB3: Fix deadlock in validate negotiate hits reconnect mac80211: don't WARN on short WMM parameters from AP ALSA: hda - Don't override global PCM hw info flag ALSA: firewire: fix a memory leak bug hwmon: (nct7802) Fix wrong detection of in4 presence can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices * perf/core: Fix creating kernel counters for PMUs that override event->cpu kernel/events/core.c * tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop drivers/tty/tty_ldsem.c scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG scsi: ibmvfc: fix WARN_ON during event pool release scsi: megaraid_sas: fix panic on loading firmware crashdump ARM: davinci: fix sleep.S build error on ARMv4 ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id() drbd: dynamically allocate shash descriptor perf probe: Avoid calling freeing routine multiple times for same pointer * ALSA: compress: Be more restrictive about when a drain is allowed sound/core/compress_offload.c * ALSA: compress: Don't allow paritial drain operations on capture streams sound/core/compress_offload.c * ALSA: compress: Prevent bypasses of set_params sound/core/compress_offload.c * ALSA: compress: Fix regression on compressed capture streams include/sound/compress_driver.h sound/core/compress_offload.c s390/qdio: add sanity checks to the fast-requeue path cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init() hwmon: (nct6775) Fix register address and added missed tolerance for nct6106 mac80211: don't warn about CW params when not using them * iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND drivers/firmware/Kconfig * netfilter: nfnetlink: avoid deadlock due to synchronous request_module net/netfilter/nfnetlink.c can: peak_usb: fix potential double kfree_skb() usb: yurex: Fix use-after-free in yurex_delete perf record: Fix module size on s390 perf db-export: Fix thread__exec_comm() perf record: Fix wrong size in perf_record_mmap for last kernel module * mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy() mm/vmalloc.c x86/mm: Sync also unmappings in vmalloc_sync_all() x86/mm: Check for pfn instead of page in vmalloc_sync_one() * sound: fix a memory leak bug sound/sound_core.c usb: iowarrior: fix deadlock on disconnect * usb: usbfs: fix double-free of usb memory upon submiturb error drivers/usb/core/devio.c ANDROID: fix kernelci build-break in lowmemorykiller ANDROID: Fixes to locking around handle_lmk_event * UPSTREAM: net/ipv6: allow sysctl to change link-local address generation mode include/linux/ipv6.h include/net/if_inet6.h net/ipv6/addrconf.c * ANDROID: fix binder change in merge of 4.9.188 drivers/android/binder_alloc.c Merge 4.9.189 into android-4.9-q Linux 4.9.189 x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS x86/entry/64: Use JMP instead of JMPQ x86/speculation: Enable Spectre v1 swapgs mitigations x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations x86: cpufeatures: Sort feature word 7 spi: bcm2835: Fix 3-wire mode if DMA is enabled * block: blk_init_allocated_queue() set q->fq as NULL in the fail case block/blk-core.c bnx2x: Disable multi-cos feature. ife: error out when nla attributes are empty * ip6_tunnel: fix possible use-after-free on xmit net/ipv6/ip6_tunnel.c * compat_ioctl: pppoe: fix PPPOEIOCSFWD handling drivers/net/ppp/pppoe.c drivers/net/ppp/pppox.c fs/compat_ioctl.c include/linux/if_pppox.h net/l2tp/l2tp_ppp.c tipc: compat: allow tipc commands without arguments net: sched: Fix a possible null-pointer dereference in dequeue_func() net/mlx5: Use reversed order when unregister devices * net: fix ifindex collision during namespace removal net/core/dev.c * net: bridge: mcast: don't delete permanent entries when fast leave is enabled net/bridge/br_multicast.c net: bridge: delete local fdb on device init failure atm: iphase: Fix Spectre v1 vulnerability libceph: use kbasename() and kill ceph_file_part() objtool: Add rewind_stack_do_exit() to the noreturn list objtool: Add machine_real_restart() to the noreturn list IB: directly cast the sockaddr union to aockaddr RDMA: Directly cast the sockaddr union to sockaddr * HID: Add quirk for HP X1200 PIXART OEM mouse drivers/hid/hid-ids.h drivers/hid/usbhid/hid-quirks.c HID: wacom: fix bit shift for Cintiq Companion 2 * tcp: be more careful in tcp_fragment() include/net/tcp.h net/ipv4/tcp_output.c * arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} arch/arm64/include/asm/cpufeature.h arch/arm64/kernel/cpufeature.c * arm64: cpufeature: Fix CTR_EL0 field definitions arch/arm64/kernel/cpufeature.c ARM: dts: logicpd-som-lv: Fix Audio Mute ARM: dts: Add pinmuxing for i2c2 and i2c3 for LogicPD torpedo ARM: dts: Add pinmuxing for i2c2 and i2c3 for LogicPD SOM-LV scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure * fs/crypto: Fix 4.9.186 missmerge fs/crypto/policy.c Merge 4.9.188 into android-4.9-q Linux 4.9.188 x86, mm, gup: prevent get_page() race with munmap in paravirt guest objtool: Support GCC 9 cold subfunction naming scheme * include/linux/module.h: copy __init/__exit attrs to init/cleanup_module include/linux/module.h * Backport minimal compiler_attributes.h to support GCC 9 include/linux/compiler.h eeprom: at24: make spd world-readable again * coredump: fix race condition between collapse_huge_page() and core dumping include/linux/mm.h infiniband: fix race condition between infiniband mlx4, mlx5 driver and core dumping * coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping drivers/android/binder.c fs/proc/task_mmu.c include/linux/mm.h mm/mmap.c IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification xen/swiotlb: fix condition for calling xen_destroy_contiguous_region() * drivers/perf: arm_pmu: Fix failure path in PM notifier drivers/perf/arm_pmu.c s390/dasd: fix endless loop after read unit address configuration * selinux: fix memory leak in policydb_init() security/selinux/ss/policydb.c * gpiolib: fix incorrect IRQ requesting of an active-low lineevent drivers/gpio/gpiolib.c mmc: dw_mmc: Fix occasional hang after tuning on eMMC Btrfs: fix incremental send failure after deduplication * kbuild: initialize CLANG_FLAGS correctly in the top Makefile Makefile x86, boot: Remove multiple copy of static function sanitize_boot_params() x86/kvm: Don't call kvm_spurious_fault() from .fixup ipc/mqueue.c: only perform resource calculation if user valid drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side headers coda: fix build using bare-metal toolchain coda: add error handling for fget * mm/cma.c: fail if fixed declaration can't be honored mm/cma.c x86: math-emu: Hide clang warnings for 16-bit overflow x86/apic: Silence -Wtype-limits compiler warnings be2net: Signal that the device cannot transmit during reconfiguration * ACPI: fix false-positive -Wuninitialized warning include/linux/acpi.h scsi: zfcp: fix GCC compiler warning emitted with -Wmaybe-uninitialized ceph: return -ERANGE if virtual xattr value didn't fit in buffer ceph: fix improper use of smp_mb__before_atomic() btrfs: fix minimum number of chunk errors for DUP fs/adfs: super: fix use-after-free bug dmaengine: rcar-dmac: Reject zero-length slave DMA requests MIPS: lantiq: Fix bitfield masking * kernel/module.c: Only return -EEXIST for modules that have finished loading kernel/module.c ftrace: Enable trampoline when rec count returns back to one ARM: dts: rockchip: Mark that the rk3288 timer might stop in suspend ARM: dts: rockchip: Make rk3288-veyron-mickey's emmc work again ARM: dts: rockchip: Make rk3288-veyron-minnie run at hs200 ARM: riscpc: fix DMA * UPSTREAM: net-ipv6-ndisc: add support for RFC7710 RA Captive Portal Identifier include/net/ndisc.h net/ipv6/ndisc.c ANDROID: fix up 9p filesystem due to CFI non-upstream patches Merge 4.9.187 into android-4.9-q Linux 4.9.187 ceph: hold i_ceph_lock when removing caps for freeing inode drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl * sched/fair: Don't free p->numa_faults with concurrent readers fs/exec.c include/linux/sched.h kernel/fork.c kernel/sched/fair.c Bluetooth: hci_uart: check for missing tty operations media: radio-raremono: change devm_k*alloc to k*alloc media: cpia2_usb: first wake up, then free in disconnect media: au0828: fix null dereference in error path ISDN: hfcsusb: checking idx of ep configuration * arm64: compat: Provide definition for COMPAT_SIGMINSTKSZ arch/arm64/include/asm/compat.h i2c: qup: fixed releasing dma without flush operation completion arm64: dts: marvell: Fix A37xx UART0 register size * tcp: reset sk_send_head in tcp_write_queue_purge include/net/tcp.h ipv6: check sk sk_type and protocol early in ip_mroute_set/getsockopt * access: avoid the RCU grace period for the temporary subjective credentials fs/open.c include/linux/cred.h kernel/cred.c powerpc/tm: Fix oops on sigreturn on systems without TM ALSA: hda - Add a conexant codec entry to let mute led work ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1 hpet: Fix division by zero in hpet_time_div() x86/speculation/mds: Apply more accurate check on hypervisor platform x86/sysfb_efi: Add quirks for some devices with swapped width and height * usb: pci-quirks: Correct AMD PLL quirk detection drivers/usb/host/pci-quirks.c usb: wusbcore: fix unbalanced get/put cluster_id locking/lockdep: Hide unused 'class' variable locking/lockdep: Fix lock used or unused stats error mm/mmu_notifier: use hlist_add_head_rcu() 9p: pass the correct prototype to read_cache_page mm/kmemleak.c: fix check for softirq context sh: prevent warnings when using iounmap powerpc/eeh: Handle hugepages in ioremap space * mailbox: handle failed named mailbox channel request drivers/mailbox/mailbox.c * f2fs: avoid out-of-range memory access fs/f2fs/segment.c powerpc/boot: add {get, put}_unaligned_be32 to xz_config.h RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM perf test mmap-thread-lookup: Initialize variable to suppress memory sanitizer warning * kallsyms: exclude kasan local symbols on s390 scripts/kallsyms.c serial: sh-sci: Fix TX DMA buffer flushing and workqueue races serial: sh-sci: Terminate TX DMA during buffer flushing RDMA/i40iw: Set queue pair state when being queried powerpc/4xx/uic: clear pending interrupt after irq type/pol change um: Silence lockdep complaint about mmap_sem mfd: hi655x-pmic: Fix missing return value check for devm_regmap_init_mmio_clk mfd: arizona: Fix undefined behavior * mfd: core: Set fwnode for created devices drivers/mfd/mfd-core.c recordmcount: Fix spurious mcount entries on powerpc iio: iio-utils: Fix possible incorrect mask calculation PCI: xilinx-nwl: Fix Multi MSI data programming * kbuild: Add -Werror=unknown-warning-option to CLANG_FLAGS Makefile * PCI: sysfs: Ignore lockdep for remove attribute drivers/pci/pci-sysfs.c powerpc/pci/of: Fix OF flags parsing for 64bit BARs * usb: gadget: Zero ffs_io_data drivers/usb/gadget/function/f_fs.c * tty: serial_core: Set port active bit in uart_port_activate drivers/tty/serial/serial_core.c drm/rockchip: Properly adjust to a true clock in adjusted_mode phy: renesas: rcar-gen2: Fix memory leak at error paths drm/virtio: Add memory barriers for capset cache. serial: 8250: Fix TX interrupt handling condition tty: serial: msm_serial: avoid system lockup condition tty/serial: digicolor: Fix digicolor-usart already registered warning memstick: Fix error cleanup path of memstick_init drm/bridge: sii902x: pixel clock unit is 10kHz instead of 1kHz drm/bridge: tc358767: read display_props in get_modes() tty: serial: cpm_uart - fix init when SMC is relocated pinctrl: rockchip: fix leaked of_node references tty: max310x: Fix invalid baudrate divisors calculator * usb: core: hub: Disable hub-initiated U1/U2 drivers/usb/core/hub.c drm/panel: simple: Fix panel_simple_dsi_probe nfsd: Fix overflow causing non-working mounts on 1 TB machines nfsd: fix performance-limiting session calculation nfsd: give out fewer session slots as limit approaches nfsd: increase DRC cache limit NFSv4: Fix open create exclusive when the server reboots perf/events/amd/uncore: Fix amd_uncore_llc ID to use pre-defined cpu_llc_id perf/x86/amd/uncore: Get correct number of cores sharing last level cache perf/x86/amd/uncore: Rename 'L2' to 'LLC' * net: bridge: stp: don't cache eth dest pointer before skb pull net/bridge/br_stp_bpdu.c * net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query net/bridge/br_multicast.c * net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling net/bridge/br_multicast.c * tcp: Reset bytes_acked and bytes_received when disconnecting net/ipv4/tcp.c * bonding: validate ip header before check IPPROTO_IGMP drivers/net/bonding/bond_main.c netrom: hold sock when setting skb->destructor netrom: fix a memory leak in nr_rx_frame() macsec: fix checksumming after decryption macsec: fix use-after-free of skb during RX vrf: make sure skb->data contains ip header to make routing sky2: Disable MSI on ASUS P6T rxrpc: Fix send on a connected, but unbound socket nfc: fix potential illegal memory access net: openvswitch: fix csum updates for MPLS actions * net: neigh: fix multiple neigh timer scheduling net/core/neighbour.c net: dsa: mv88e6xxx: wait after reset deactivation net: bcmgenet: use promisc for unsupported filters * ipv4: don't set IPv6 only flags to IPv4 addresses net/ipv4/devinet.c * igmp: fix memory leak in igmpv3_del_delrec() net/ipv4/igmp.c caif-hsi: fix possible deadlock in cfhsi_exit_module() bnx2x: Prevent ptp_task to be rescheduled indefinitely bnx2x: Prevent load reordering in tx completion processing * ext4: allow directory holes fs/ext4/dir.c fs/ext4/namei.c * lib/strscpy: Shut up KASAN false-positives in strscpy() lib/string.c * compiler.h: Add read_word_at_a_time() function. include/linux/compiler.h * compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() include/linux/compiler.h * dm bufio: fix deadlock with loop device drivers/md/dm-bufio.c * usb: Handle USB3 remote wakeup for LPM enabled devices correctly drivers/usb/core/hub.c * Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug net/bluetooth/smp.c intel_th: msu: Fix single mode with disabled IOMMU * eCryptfs: fix a couple type promotion bugs fs/ecryptfs/crypto.c powerpc/watchpoint: Restore NV GPRs while returning from exception powerpc/32s: fix suspend/resume when IBATs 4-7 are used parisc: Fix kernel panic due invalid values in IAOQ0 or IAOQ1 parisc: Ensure userspace privilege for ptraced processes in regset functions um: Fix FP register size for XSTATE/XSAVE um: Allow building and running on older hosts crypto: caam - limit output IV to CBC to work around CTR mode DMA issue PCI: hv: Fix a use-after-free bug in hv_eject_device_work() PCI: hv: Delete the device earlier from hbus->children for hot-remove crypto: ccp - Validate the the error value used to index error messages gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM coda: pass the host file in vma->vm_file on mmap floppy: fix out-of-bounds read in copy_buffer floppy: fix invalid pointer dereference in drive_name floppy: fix out-of-bounds read in next_valid_format floppy: fix div-by-zero in setup_format_params * take floppy compat ioctls to sodding floppy.c block/compat_ioctl.c libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields Btrfs: add missing inode version, ctime and mtime updates when punching hole * PCI: Do not poll for PME if the device is in D3cold drivers/pci/pci.c 9p/virtio: Add cleanup path in p9_virtio_init padata: use smp_mb in padata_reorder to avoid orphaned padata jobs drm/nouveau/i2c: Enable i2c pads & busses during preinit * fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys inodes. fs/proc/proc_sysctl.c arm64: tegra: Fix AGIC register range KVM: x86/vPMU: refine kvm_pmu err msg when event creation failed media: coda: Remove unbalanced and unneeded mutex unlock * media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom() drivers/media/v4l2-core/v4l2-ctrls.c ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine ALSA: seq: Break too long mutex context in the write loop * lib/scatterlist: Fix mapping iterator when sg->offset is greater than PAGE_SIZE lib/scatterlist.c NFSv4: Handle the special Linux file open access mode * tracing/snapshot: Resize spare buffer if size changed kernel/trace/trace.c iwlwifi: pcie: don't service an interrupt that was masked arm64: tegra: Update Jetson TX1 GPU regulator timings regulator: s2mps11: Fix buck7 and buck8 wrong voltages Input: gtco - bounds check collection indent level crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe crypto: chacha20poly1305 - fix atomic sleep when using async algorithm * crypto: arm64/sha2-ce - correct digest for empty data in finup arch/arm64/crypto/sha2-ce-glue.c * crypto: arm64/sha1-ce - correct digest for empty data in finup arch/arm64/crypto/sha1-ce-glue.c * crypto: ghash - fix unaligned memory access in ghash_setkey() crypto/ghash-generic.c scsi: mac_scsi: Increase PIO/PDMA transfer length threshold scsi: NCR5380: Always re-enable reselection interrupt scsi: NCR5380: Reduce goto statements in NCR5380_select() xen: let alloc_xenballooned_pages() fail if not enough memory free gtp: fix use-after-free in gtp_newlink() gtp: fix Illegal context switch in RCU read-side critical section. * Bluetooth: validate BLE connection interval updates net/bluetooth/hci_event.c net/bluetooth/l2cap_core.c * Bluetooth: Check state in l2cap_disconnect_rsp net/bluetooth/l2cap_core.c Bluetooth: 6lowpan: search for destination address in all peers Bluetooth: hci_bcsp: Fix memory leak in rx_skb * gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants drivers/gpio/gpiolib.c * net: usb: asix: init MAC address buffers drivers/net/usb/asix_devices.c iwlwifi: mvm: Drop large non sta frames bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush() * EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec drivers/edac/edac_mc_sysfs.c drivers/edac/edac_module.h * crypto: asymmetric_keys - select CRYPTO_HASH where needed crypto/asymmetric_keys/Kconfig ixgbe: Check DDM existence in transceiver before access * rslib: Fix handling of of caller provided syndrome lib/reed_solomon/decode_rs.c * rslib: Fix decoding of shortened codes lib/reed_solomon/decode_rs.c * clocksource/drivers/exynos_mct: Increase priority over ARM arch timer include/linux/cpuhotplug.h libata: don't request sense data on !ZAC ATA devices perf tools: Increase MAX_NR_CPUS and MAX_CACHES ath10k: fix PCIE device wake up failed mt7601u: fix possible memory leak when the device is disconnected x86/build: Add 'set -e' to mkcapflags.sh to delete broken capflags.c mt7601u: do not schedule rx_tasklet when the device has been disconnected media: coda: increment sequence offset for the last returned frame media: coda: fix mpeg2 sequence number handling acpi/arm64: ignore 5.1 FADTs that are reported as 5.0 * timer_list: Guard procfs specific code kernel/time/timer_list.c * ntp: Limit TAI-UTC offset kernel/time/ntp.c * media: i2c: fix warning same module names drivers/media/i2c/Makefile * ipsec: select crypto ciphers for xfrm_algo net/xfrm/Kconfig * EDAC/sysfs: Fix memory leak when creating a csrow object drivers/edac/edac_mc_sysfs.c ipoib: correcly show a VF hardware address vhost_net: disable zerocopy by default perf evsel: Make perf_evsel__name() accept a NULL argument * xfrm: fix sa selector validation net/xfrm/xfrm_user.c * blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership arbitration fs/fs-writeback.c * rcu: Force inlining of rcu_read_lock() include/linux/rcupdate.h * bpf: silence warning messages in core kernel/bpf/Makefile * regmap: fix bulk writes on paged registers drivers/base/regmap/regmap.c gpio: omap: ensure irq is enabled before wakeup gpio: omap: fix lack of irqstatus_raw0 for OMAP4 perf test 6: Fix missing kvm module load for s390 perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode s390/qdio: handle PENDING state for QEBSM devices net: axienet: Fix race condition causing TX hang net: fec: Do not use netdev messages too early cpupower : frequency-set -r option misses the last cpu in related cpu list media: wl128x: Fix some error handling in fm_v4l2_init_video_device() locking/lockdep: Fix merging of hlocks with non-zero references tua6100: Avoid build warnings. crypto: talitos - Align SEC1 accesses to 32 bits boundaries. crypto: talitos - properly handle split ICV. * net: phy: Check against net_device being NULL drivers/net/phy/phy_device.c media: staging: media: davinci_vpfe: - Fix for memory leak if decoder initialization fails. * media: mc-device.c: don't memset __user pointer contents drivers/media/media-device.c * xfrm: Fix xfrm sel prefix length validation net/xfrm/xfrm_user.c * af_key: fix leaks in key_pol_get_resp and dump_sp. net/key/af_key.c signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig net: stmmac: dwmac4/5: Clear unused address entries net: stmmac: dwmac1000: Clear unused address entries * media: media_device_enum_links32: clean a reserved field drivers/media/media-device.c media: vpss: fix a potential NULL pointer dereference media: marvell-ccic: fix DMA s/g desc number calculation crypto: talitos - fix skcipher failure due to wrong output IV media: dvb: usb: fix use after free in dvb_usb_device_exit batman-adv: fix for leaked TVLV handler. ath: DFS JP domain W56 fixed pulse type 3 RADAR detection ath6kl: add some bounds checking ath9k: Check for errors when reading SREV register ath10k: Do not send probe response template for mesh dmaengine: imx-sdma: fix use-after-free on probe error path * arm64/efi: Mark __efistub_stext_offset as an absolute symbol explicitly arch/arm64/kernel/image.h MIPS: fix build on non-linux hosts MIPS: ath79: fix ar933x uart parity mode ANDROID: enable CONFIG_RTC_DRV_TEST on cuttlefish * ANDROID: xfrm: remove in_compat_syscall() checks net/xfrm/xfrm_state.c net/xfrm/xfrm_user.c * UPSTREAM: binder: Set end of SG buffer area properly. drivers/android/binder.c Merge 4.9.186 into android-4.9-q Linux 4.9.186 s390/qdio: don't touch the dsci in tiqdio_add_input_queues() s390/qdio: (re-)initialize tiqdio list entries s390: fix stfle zero padding ARC: hide unused function unw_hdr_alloc * dm verity: use message limit for data block corruption message drivers/md/dm-verity-target.c ARM: dts: imx6ul: fix PWM[1-4] interrupts sis900: fix TX completion * ppp: mppe: Add softdep to arc4 drivers/net/ppp/ppp_mppe.c be2net: fix link failure after ethtool offline test ARM: omap2: remove incorrect __init annotation * perf/core: Fix perf_sample_regs_user() mm check kernel/events/core.c arm64: crypto: remove accidentally backported files nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header e1000e: start network tx queue only when link is up Revert "e1000e: fix cyclic resets at link up with active tx" MIPS: Remove superfluous check for __linux__ VMCI: Fix integer overflow in VMCI handle arrays carl9170: fix misuse of device driver API staging: comedi: amplc_pci230: fix null pointer deref on interrupt staging: comedi: dt282x: fix a null pointer deref on interrupt usb: renesas_usbhs: add a workaround for a race condition of workqueue * usb: gadget: ether: Fix race between gether_disconnect and rx_submit drivers/usb/gadget/function/u_ether.c p54usb: Fix race between disconnect and firmware loading Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled" USB: serial: option: add support for GosunCn ME3630 RNDIS mode USB: serial: ftdi_sio: add ID for isodebug v1 mwifiex: Don't abort on small, spec-compliant vendor IEs * fscrypt: don't set policy for a dead directory fs/crypto/policy.c mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() mwifiex: Abort at too short BSS descriptor element x86/tls: Fix possible spectre-v1 in do_get_thread_area() x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg() udf: Fix incorrect final NOT_ALLOCATED (hole) extent length net :sunrpc :clnt :Fix xps refcount imbalance on the error path * ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL include/net/ip6_tunnel.h bnx2x: Check if transceiver implements DDM before access md: fix for divide error in status_resync mac80211: only warn once on chanctx_conf being NULL ARM: davinci: da8xx: specify dma_coherent_mask for lcdc ARM: davinci: da850-evm: call regulator_has_full_constraints() mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy Input: imx_keypad - make sure keyboard can always wake up system * can: mcp251x: add support for mcp25625 drivers/net/can/spi/Kconfig dt-bindings: can: mcp251x: add mcp25625 support * netfilter: ipv6: nf_defrag: accept duplicate fragments again net/ipv6/netfilter/nf_conntrack_reasm.c * netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments net/ipv6/netfilter/nf_conntrack_reasm.c mwifiex: Fix possible buffer overflows at parsing bss descriptor mac80211: free peer keys before vif down in mesh mac80211: mesh: fix RCU warning staging:iio:ad7150: fix threshold mode config bit samples, bpf: fix to change the buffer size for read() Input: elantech - enable middle button support on 2 ThinkPads crypto: talitos - rename alternative AEAD algos. Change-Id: Ic17f4ff767e98db1ddee5f127d7de4a4c314e026 Signed-off-by: Robin Peng <robinpeng@google.com>	2019-10-01 15:25:52 +08:00
Greg Kroah-Hartman	4ebd29edaf	Merge 4.9.188 into android-4.9-q ... Changes in 4.9.188 ARM: riscpc: fix DMA ARM: dts: rockchip: Make rk3288-veyron-minnie run at hs200 ARM: dts: rockchip: Make rk3288-veyron-mickey's emmc work again ARM: dts: rockchip: Mark that the rk3288 timer might stop in suspend ftrace: Enable trampoline when rec count returns back to one kernel/module.c: Only return -EEXIST for modules that have finished loading MIPS: lantiq: Fix bitfield masking dmaengine: rcar-dmac: Reject zero-length slave DMA requests fs/adfs: super: fix use-after-free bug btrfs: fix minimum number of chunk errors for DUP ceph: fix improper use of smp_mb__before_atomic() ceph: return -ERANGE if virtual xattr value didn't fit in buffer scsi: zfcp: fix GCC compiler warning emitted with -Wmaybe-uninitialized ACPI: fix false-positive -Wuninitialized warning be2net: Signal that the device cannot transmit during reconfiguration x86/apic: Silence -Wtype-limits compiler warnings x86: math-emu: Hide clang warnings for 16-bit overflow mm/cma.c: fail if fixed declaration can't be honored coda: add error handling for fget coda: fix build using bare-metal toolchain uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side headers drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings ipc/mqueue.c: only perform resource calculation if user valid x86/kvm: Don't call kvm_spurious_fault() from .fixup x86, boot: Remove multiple copy of static function sanitize_boot_params() kbuild: initialize CLANG_FLAGS correctly in the top Makefile Btrfs: fix incremental send failure after deduplication mmc: dw_mmc: Fix occasional hang after tuning on eMMC gpiolib: fix incorrect IRQ requesting of an active-low lineevent selinux: fix memory leak in policydb_init() s390/dasd: fix endless loop after read unit address configuration drivers/perf: arm_pmu: Fix failure path in PM notifier xen/swiotlb: fix condition for calling xen_destroy_contiguous_region() IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping infiniband: fix race condition between infiniband mlx4, mlx5 driver and core dumping coredump: fix race condition between collapse_huge_page() and core dumping eeprom: at24: make spd world-readable again Backport minimal compiler_attributes.h to support GCC 9 include/linux/module.h: copy __init/__exit attrs to init/cleanup_module objtool: Support GCC 9 cold subfunction naming scheme x86, mm, gup: prevent get_page() race with munmap in paravirt guest Linux 4.9.188 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2019-08-06 18:45:16 +02:00
Miguel Ojeda	2c34c215c1	include/linux/module.h: copy __init/__exit attrs to init/cleanup_module ... commit a6e60d84989fa0e91db7f236eda40453b0e44afa upstream. The upcoming GCC 9 release extends the -Wmissing-attributes warnings (enabled by -Wall) to C and aliases: it warns when particular function attributes are missing in the aliases but not in their target. In particular, it triggers for all the init/cleanup_module aliases in the kernel (defined by the module_init/exit macros), ending up being very noisy. These aliases point to the __init/__exit functions of a module, which are defined as __cold (among other attributes). However, the aliases themselves do not have the __cold attribute. Since the compiler behaves differently when compiling a __cold function as well as when compiling paths leading to calls to __cold functions, the warning is trying to point out the possibly-forgotten attribute in the alias. In order to keep the warning enabled, we decided to silence this case. Ideally, we would mark the aliases directly as __init/__exit. However, there are currently around 132 modules in the kernel which are missing __init/__exit in their init/cleanup functions (either because they are missing, or for other reasons, e.g. the functions being called from somewhere else); and a section mismatch is a hard error. A conservative alternative was to mark the aliases as __cold only. However, since we would like to eventually enforce __init/__exit to be always marked, we chose to use the new __copy function attribute (introduced by GCC 9 as well to deal with this). With it, we copy the attributes used by the target functions into the aliases. This way, functions that were not marked as __init/__exit won't have their aliases marked either, and therefore there won't be a section mismatch. Note that the warning would go away marking either the extern declaration, the definition, or both. However, we only mark the definition of the alias, since we do not want callers (which only see the declaration) to be compiled as if the function was __cold (and therefore the paths leading to those calls would be assumed to be unlikely). Link: https://lore.kernel.org/lkml/259986242.BvXPX32bHu@devpool35/ Cc: <stable@vger.kernel.org> Link: https://lore.kernel.org/lkml/20190123173707.GA16603@gmail.com/ Link: https://lore.kernel.org/lkml/20190206175627.GA20399@gmail.com/ Suggested-by: Martin Sebor <msebor@gcc.gnu.org> Acked-by: Jessica Yu <jeyu@kernel.org> Signed-off-by: Miguel Ojeda <miguel.ojeda.sandonis@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-08-06 18:29:42 +02:00
Robin Peng	3352ba1a12	Merge android-4.9 (4.9.185) into android-msm-pixel-4.9-lts ... Merge 4.9.185 into android-4.9 Linux 4.9.185 * arm64: kaslr: keep modules inside module region when KASAN is enabled arch/arm64/kernel/module.c dmaengine: imx-sdma: remove BD_INTR for channel0 MIPS: Add missing EHB in mtc0 -> mfc0 sequence. IB/hfi1: Close PSM sdma_progress sleep window KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC * arm64, vdso: Define vdso_{start,end} as array arch/arm64/kernel/vdso.c tty: rocket: fix incorrect forward declaration of 'rp_init()' btrfs: Ensure replaced device doesn't have pending chunk allocation drm/imx: only send event on crtc disable if kept disabled drm/imx: notify drm core before sending event during crtc disable * lib/mpi: Fix karactx leak in mpi_powm lib/mpi/mpi-pow.c * ALSA: usb-audio: fix sign unintended sign extension on left shifts sound/usb/mixer_quirks.c ALSA: line6: Fix write on zero-sized buffer ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages ALSA: seq: fix incorrect order of dest_client/dest_ports arguments crypto: user - prevent operating on larval algorithms * ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME kernel/ptrace.c MIPS: Workaround GCC __builtin_unreachable reordering bug drm/i915/dmc: protect against reading random memory KVM: x86: degrade WARN to pr_warn_ratelimited clk: sunxi: fix uninitialized access ARC: handle gcc generated __builtin_trap for older compiler * bug.h: work around GCC PR82365 in BUG() include/asm-generic/bug.h include/linux/compiler-gcc.h include/linux/compiler.h ARC: fix allnoconfig build warning mfd: omap-usb-tll: Fix register offsets MIPS: netlogic: xlr: Remove erroneous check in nlm_fmn_send() MIPS: math-emu: do not use bools for arithmetic * mm/mlock.c: change count_mm_mlocked_page_nr return type mm/mlock.c scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE scsi: hpsa: correct ioaccel2 chaining usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC usb: gadget: fusb300_udc: Fix memory leak of fusb300->ep[i] ASoC: max98090: remove 24-bit format support if RJ is 0 drm/mediatek: fix unbind functions spi: bitbang: Fix NULL pointer dereference in spi_unregister_master * ASoC: soc-pcm: BE dai needs prepare when pause release after resume sound/soc/soc-pcm.c ASoC : cs4265 : readable register too low * Bluetooth: Fix faulty expression for minimum encryption key size check net/bluetooth/l2cap_core.c tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb * bpf: udp: ipv6: Avoid running reuseport's bpf_prog from __udp6_lib_err net/ipv6/udp.c * bpf: udp: Avoid calling reuseport's bpf_prog from udp_gro net/ipv4/udp.c net/ipv6/udp.c * net: check before dereferencing netdev_ops during busy poll net/core/dev.c * ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop net/ipv4/raw.c * bonding: Always enable vlan tx offload drivers/net/bonding/bond_main.c team: Always enable vlan tx offload * tun: wake up waitqueues after IFF_UP is set drivers/net/tun.c tipc: check msg->req data len in tipc_nl_compat_bearer_disable tipc: change to use register_pernet_device sctp: change to hold sk after auth shkey is created successfully net: stmmac: fixed new system time seconds value calculation * af_packet: Block execution of tasks waiting for transmit to complete in AF_PACKET net/packet/af_packet.c net/packet/internal.h * cpu/speculation: Warn on unsupported mitigations= parameter kernel/cpu.c NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O x86/speculation: Allow guests to use SSBD even if host does not scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() * mm/page_idle.c: fix oops because end_pfn is larger than max_pfn mm/page_idle.c fs/binfmt_flat.c: make load_flat_shared_library() work * fs/proc/array.c: allow reporting eip/esp for all coredumping threads fs/proc/array.c net/9p: include trans_common.h to fix missing prototype warning. 9p: p9dirent_read: check network-provided name length 9p/rdma: remove useless check in cm_event_handler 9p: acl: fix uninitialized iattr access 9p/rdma: do not disconnect on down_interruptible EAGAIN perf header: Fix unchecked usage of strncpy() perf help: Remove needless use of strncpy() perf ui helpline: Use strlcpy() as a shorter form of strncpy() + explicit set nul IB/hfi1: Avoid hardlockup with flushlist_lock mac80211: Do not use stack memory with scatterlist for GMAC mac80211: drop robust management frames from unknown TA * cfg80211: fix memory leak of wiphy device name net/wireless/core.c * Bluetooth: Fix regression with minimum encryption key size alignment net/bluetooth/hci_conn.c net/bluetooth/l2cap_core.c * Bluetooth: Align minimum encryption key size for LE and BR/EDR connections include/net/bluetooth/hci_core.h net/bluetooth/hci_conn.c ARM: imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX powerpc/bpf: use unsigned division instruction for 64-bit operations can: purge socket error queue on sock destruct can: flexcan: fix timeout when set small bitrate btrfs: start readahead also in seed devices nvme: Fix u32 overflow in the number of namespace list calculation hwmon: (pmbus/core) Treat parameters as paged if on multiple pages s390/qeth: fix VLAN attribute in bridge_hostnotify udev event * scsi: ufs: Check that space was properly alloced in copy_query_response drivers/scsi/ufs/ufshcd.c scripts/checkstack.pl: Fix arm64 wrong or unknown architecture drm/arm/hdlcd: Allow a bit of clock tolerance net: ethernet: mediatek: Use NET_IP_ALIGN to judge if HW RX_2BYTE_OFFSET is enabled net: ethernet: mediatek: Use hw_feature to judge if HWLRO is supported sparc: perf: fix updated event period in response to PERF_EVENT_IOC_PERIOD net: hns: Fix loopback test failed at copper ports net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0 MIPS: uprobes: remove set but not used variable 'epc' IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value IB/hfi1: Insure freeze_work work_struct is canceled on shutdown IB/rdmavt: Fix alloc_qpn() WARN_ON() parisc: Fix compiler warnings in float emulation code parport: Fix mem leak in parport_register_dev_model ARC: fix build warnings with !CONFIG_KPROBES apparmor: enforce nullbyte at end of tag string * Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD drivers/input/misc/uinput.c IB/hfi1: Silence txreq allocation warnings usb: chipidea: udc: workaround for endpoint conflict issue * scsi: ufs: Avoid runtime suspend possibly being blocked forever drivers/scsi/ufs/ufshcd-pltfrm.c * gcc-9: silence 'address-of-packed-member' warning Makefile * tracing: Silence GCC 9 array bounds warning kernel/trace/trace.c kernel/trace/trace.h BACKPORT: kheaders: Do not regenerate archive if config is not changed * BACKPORT: kheaders: Move from proc to sysfs init/Kconfig kernel/Makefile * BACKPORT: Provide in-kernel headers to make extending kernel easier init/Kconfig kernel/Makefile Merge 4.9.184 into android-4.9 Linux 4.9.184 * tcp: refine memory limit test in tcp_fragment() net/ipv4/tcp_output.c Merge 4.9.183 into android-4.9 Linux 4.9.183 * Abort file_remove_privs() for non-reg. files fs/inode.c mlxsw: spectrum: Prevent force of 56G scsi: libsas: delete sas port if expander discover failed scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route() net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs KVM: PPC: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list ia64: fix build errors by exporting paddr_to_nid() perf record: Fix s390 missing module symbol and warning for non-root users perf data: Fix 'strncat may truncate' build failure with recent gcc * configfs: Fix use-after-free when accessing sd->s_dentry fs/configfs/dir.c * i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr drivers/i2c/i2c-dev.c net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() * gpio: fix gpio-adp5588 build errors drivers/gpio/Kconfig * perf/ring_buffer: Add ordering to rb->nest increment kernel/events/ring_buffer.c * perf/ring_buffer: Fix exposing a temporarily decreased data_head kernel/events/ring_buffer.c x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor mISDN: make sure device name is NUL terminated selftests: netfilter: missing error check when setting up veth interface perf/x86/intel/ds: Fix EVENT vs. UEVENT PEBS constraints Revert "staging: vc04_services: prevent integer overflow in create_pagelist()" sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg * neigh: fix use-after-free read in pneigh_get_next net/core/neighbour.c lapb: fixed leak of control-blocks. * ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero net/ipv6/ip6_flowlabel.c be2net: Fix number of Rx queues used for flow hashing ax25: fix inconsistent lock state in ax25_destroy_timer rtc: pcf8523: don't return invalid date when battery is low USB: serial: option: add Telit 0x1260 and 0x1261 compositions USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode USB: serial: pl2303: add Allied Telesis VT-Kit3 * USB: usb-storage: Add new ID to ums-realtek drivers/usb/storage/unusual_realtek.h * USB: Fix chipmunk-like voice when using Logitech C270 for recording audio. drivers/usb/core/quirks.c usb: dwc2: Fix DMA cache alignment issues drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION KVM: x86/pmu: do not mask the value that is written to fixed PMUs usbnet: ipheth: fix racing condition selftests/timers: Add missing fflush(stdout) calls scsi: bnx2fc: fix incorrect cast to u64 on shift operation * arm64/mm: Inhibit huge-vmap with ptdump arch/arm64/mm/mmu.c scsi: lpfc: add check for loss of ndlp when sending RRQ Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex" ALSA: seq: Fix race of get-subscription call vs port-delete ioctls ALSA: seq: Protect in-kernel ioctl calls with mutex * x86/uaccess, kcov: Disable stack protector kernel/Makefile ASoC: fsl_asrc: Fix the issue about unsupported rate ASoC: cs42xx8: Add regcache mask dirty * cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() include/linux/cgroup.h bcache: fix stack corruption by PRECEDING_KEY() i2c: acorn: fix i2c warning * media: v4l2-ioctl: clear fields in s_parm drivers/media/v4l2-core/v4l2-ioctl.c * ptrace: restore smp_rmb() in __ptrace_may_access() kernel/cred.c kernel/ptrace.c * signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO kernel/ptrace.c fs/ocfs2: fix race in ocfs2_dentry_attach_lock() * mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node mm/list_lru.c libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk ALSA: oxfw: allow PCM capture for Stanton SCS.1m ALSA: seq: Cover unsubscribe_port() in list_mutex * Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR connections" include/net/bluetooth/hci_core.h net/bluetooth/hci_conn.c ARM: exynos: Fix undefined instruction during Exynos5422 resume * pwm: Fix deadlock warning when removing PWM device drivers/pwm/core.c drivers/pwm/sysfs.c include/linux/pwm.h ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa pwm: tiehrpwm: Update shadow register for disabling PWMs dmaengine: idma64: Use actual device for DMA transfers gpio: gpio-omap: add check for off wake capable gpios PCI: xilinx: Check for __get_free_pages() failure video: imsttfb: fix potential NULL pointer dereferences video: hgafb: fix potential NULL pointer dereference PCI: rcar: Fix 64bit MSI message address handling PCI: rcar: Fix a potential NULL pointer dereference platform/x86: intel_pmc_ipc: adding error handling PCI: rpadlpar: Fix leaked device_node references in add/remove paths ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA ARM: dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA ARM: dts: imx7d: Specify IMX7D_CLK_IPG as "ipg" clock to SDMA ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288 soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher platform/chrome: cros_ec_proto: check for NULL transfer function x86/PCI: Fix PCI IRQ routing table memory leak nfsd: allow fh_want_write to be called twice * fuse: retrieve: cap requested size to negotiated max_write fs/fuse/dev.c * nvmem: core: fix read buffer in place drivers/nvmem/core.c ALSA: hda - Register irq handler after the chip initialization iommu/vt-d: Set intel_iommu_gfx_mapped correctly * watchdog: fix compile time error of pretimeout governors drivers/watchdog/Kconfig watchdog: imx2_wdt: Fix set_timeout for big timeout values uml: fix a boot splat wrt use of cpu_all_mask * configfs: fix possible use-after-free in configfs_register_group fs/configfs/dir.c * f2fs: fix to do sanity check on valid block count of segment fs/f2fs/segment.h * f2fs: fix to clear dirty inode in error path of f2fs_iget() fs/f2fs/inode.c * f2fs: fix to avoid panic in do_recover_data() fs/f2fs/recovery.c * ntp: Allow TAI-UTC offset to be set to zero kernel/time/ntp.c pwm: meson: Use the spin-lock only to protect register modifications objtool: Don't use ignore flag for fake jumps drm/bridge: adv7511: Fix low refresh rate selection perf/x86/intel: Allow PEBS multi-entry in watermark mode mfd: twl6040: Fix device init errors for ACCCTL register mfd: intel-lpss: Set the device in reset state when init mfd: tps65912-spi: Add missing of table registration drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER * kernel/sys.c: prctl: fix false positive in validate_prctl_map() kernel/sys.c mm/slab.c: fix an infinite loop in leaks_show() mm/cma_debug.c: fix the break condition in cma_maxchunk_get() * mm/cma.c: fix crash on CMA allocation if bitmap allocation fails mm/cma.c * mem-hotplug: fix node spanned pages when we have a node with only ZONE_MOVABLE mm/page_alloc.c hugetlbfs: on restore reserve error path retain subpool reservation ARM: prevent tracing IPI_CPU_BACKTRACE ipc: prevent lockup on alloc_msg and free_msg * sysctl: return -EINVAL if val violates minmax kernel/sysctl.c * fs/fat/file.c: issue flush after the writeback of FAT fs/fat/file.c rapidio: fix a NULL pointer dereference when create_workqueue() fails * ANDROID: kernel: cgroup: cpuset: Clear cpus_requested for empty buf kernel/cpuset.c * ANDROID: kernel: cgroup: cpuset: Add missing allocation of cpus_requested in alloc_trial_cpuset kernel/cpuset.c * mm: memcontrol: fix NULL pointer crash in test_clear_page_writeback() include/linux/memcontrol.h mm/memcontrol.c mm/page-writeback.c Merge 4.9.182 into android-4.9 Linux 4.9.182 * tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() net/ipv4/tcp_timer.c * tcp: add tcp_min_snd_mss sysctl include/net/netns/ipv4.h net/ipv4/sysctl_net_ipv4.c net/ipv4/tcp_ipv4.c net/ipv4/tcp_output.c * tcp: tcp_fragment() should apply sane memory limits include/uapi/linux/snmp.h net/ipv4/proc.c net/ipv4/tcp_output.c * tcp: limit payload size of sacked skbs include/linux/tcp.h include/net/tcp.h net/ipv4/tcp.c net/ipv4/tcp_input.c net/ipv4/tcp_output.c * tcp: reduce tcp_fastretrans_alert() verbosity net/ipv4/tcp_input.c efi/libstub: remove duplicate nokaslr * BACKPORT: Add support for BPF_FUNC_probe_read_str kernel/trace/bpf_trace.c * UPSTREAM: binder: check for overflow when alloc for security context drivers/android/binder.c * BACKPORT: binder: fix race between munmap() and direct reclaim drivers/android/binder_alloc.c Merge 4.9.181 into android-4.9 Linux 4.9.181 * ethtool: check the return value of get_regs_len net/core/ethtool.c * ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled include/net/arp.h * fuse: Add FOPEN_STREAM to use stream_open() fs/fuse/file.c include/uapi/linux/fuse.h * fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock fs/open.c fs/read_write.c include/linux/fs.h * TTY: serial_core, add ->install drivers/tty/serial/serial_core.c drm/i915: Fix I915_EXEC_RING_MASK drm/radeon: prefer lower reference dividers drm/gma500/cdv: Check vbt config bits when detecting lvds panels genwqe: Prevent an integer overflow in the ioctl Revert "MIPS: perf: ath79: Fix perfcount IRQ assignment" MIPS: pistachio: Build uImage.gz by default * x86/power: Fix 'nosmt' vs hibernation triple fault during resume include/linux/cpu.h kernel/cpu.c * fuse: fallocate: fix return with locked inode fs/fuse/file.c parisc: Use implicit space register selection for loading the coherence index of I/O pdirs * rcu: locking and unlocking need to always be at least barriers include/linux/rcupdate.h * Revert "fib_rules: return 0 directly if an exactly same rule exists when NLM_F_EXCL not supplied" net/core/fib_rules.c * Revert "fib_rules: fix error in backport of e9919a24d302 ("fib_rules: return 0...")" net/core/fib_rules.c * ipv6: use READ_ONCE() for inet->hdrincl as in ipv4 net/ipv6/raw.c * ipv6: fix EFAULT on sendto with icmpv6 and hdrincl net/ipv6/raw.c pktgen: do not sleep with the thread lock held. net: rds: fix memory leak in rds_ib_flush_mr_pool net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query * neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit net/core/neighbour.c * ethtool: fix potential userspace buffer overflow net/core/ethtool.c media: uvcvideo: Fix uvc_alloc_entity() allocation alignment * efi/libstub: Unify command line param parsing include/linux/efi.h Revert "x86/build: Move _etext to actual end of .text" * mm: make page ref count overflow check tighter and more explicit include/linux/mm.h * mm: prevent get_user_pages() from overflowing page refcount mm/gup.c * mm, gup: ensure real head page is ref-counted when using hugepages mm/gup.c * mm, gup: remove broken VM_BUG_ON_PAGE compound check for hugepages mm/gup.c * fs: prevent page refcount overflow in pipe_buf_get fs/fuse/dev.c fs/pipe.c fs/splice.c include/linux/pipe_fs_i.h kernel/trace/trace.c * binder: replace "%p" with "%pK" drivers/android/binder.c * binder: Replace "%p" with "%pK" for stable drivers/android/binder.c brcmfmac: add subtype check for event handling in data path brcmfmac: assure SSID length from firmware is limited brcmfmac: add length checks in scheduled scan result handler drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set gcc-plugins: Fix build failures under Darwin host CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM staging: vc04_services: prevent integer overflow in create_pagelist() docs: Fix conf.py for Sphinx 2.0 * kernel/signal.c: trace_signal_deliver when signal_group_exit kernel/signal.c * memcg: make it work on sparse non-0-node systems include/linux/list_lru.h mm/list_lru.c tty: max310x: Fix external crystal register setup tty: serial: msm_serial: Fix XON/XOFF drm/nouveau/i2c: Disable i2c bus access after ->fini() ALSA: hda/realtek - Set default power save node to 0 powerpc/perf: Fix MMCRA corruption by bhrb_filter Btrfs: fix race updating log root item during fsync scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove media: smsusb: better handle optional alignment media: usb: siano: Fix false-positive "uninitialized variable" warning media: usb: siano: Fix general protection fault in smsusb USB: rio500: fix memory leak in close after disconnect USB: rio500: refuse more than one device at a time * USB: Add LPM quirk for Surface Dock GigE adapter drivers/usb/core/quirks.c USB: sisusbvga: fix oops in error path of sisusb_probe * USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor drivers/usb/core/config.c usbip: usbip_host: fix stub_dev lock context imbalance regression usbip: usbip_host: fix BUG: sleeping function called from invalid context * usb: xhci: avoid null pointer deref when bos field is NULL drivers/usb/host/xhci.c * xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() drivers/usb/host/xhci.c * xhci: Use %zu for printing size_t type drivers/usb/host/xhci-ring.c * xhci: update bounce buffer with correct sg num drivers/usb/host/xhci-ring.c * include/linux/bitops.h: sanitize rotate primitives include/linux/bitops.h sparc64: Fix regression in non-hypervisor TLB flush xcall tipc: fix modprobe tipc failed after switch order of device registration Revert "tipc: fix modprobe tipc failed after switch order of device registration" xen/pciback: Don't disable PCI_COMMAND on PCI device reset. crypto: vmx - ghash: do nosimd fallback manually net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value net: mvneta: Fix err code path of probe net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT * ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST net/ipv4/igmp.c * ipv4/igmp: fix another memory leak in igmpv3_del_delrec() net/ipv4/igmp.c bnxt_en: Fix aggregation buffer leak under OOM condition. tipc: Avoid copying bytes beyond the supplied data * usbnet: fix kernel crash after disconnect drivers/net/usb/usbnet.c net: stmmac: fix reset gpio free missing * net-gro: fix use-after-free read in napi_gro_frags() net/core/dev.c net: fec: fix the clk mismatch in failed_reset path * llc: fix skb leak in llc_build_and_send_ui_pkt() net/llc/llc_output.c * ipv6: Consider sk_bound_dev_if when binding a raw socket to an address net/ipv6/raw.c * Revert "fib_rules: return 0 directly if an exactly same rule exists when NLM_F_EXCL not supplied" net/core/fib_rules.c * Revert "fib_rules: fix error in backport of e9919a24d302 ("fib_rules: return 0...")" net/core/fib_rules.c Revert "x86/build: Move _etext to actual end of .text" Merge 4.9.180 into android-4.9 Linux 4.9.180 * drm: Wake up next in drm_read() chain if we are forced to putback the event drivers/gpu/drm/drm_fops.c ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM * spi: Fix zero length xfer bug drivers/spi/spi.c spi: rspi: Fix sequencer reset during initialization spi : spi-topcliff-pch: Fix to handle empty DMA buffers scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices media: saa7146: avoid high stack usage with clang scsi: lpfc: Fix FDMI manufacturer attribute value media: go7007: avoid clang frame overflow warning with KASAN media: m88ds3103: serialize reset messages in m88ds3103_set_frontend dmaengine: tegra210-adma: use devm_clk_*() helpers scsi: qla4xxx: avoid freeing unallocated dma memory * usb: core: Add PM runtime calls to usb_hcd_platform_shutdown drivers/usb/core/hcd.c rcuperf: Fix cleanup path for invalid perf_type strings rcutorture: Fix cleanup path for invalid torture_type strings x86/mce: Fix machine_check_poll() tests for error types tty: ipwireless: fix missing checks for ioremap virtio_console: initialize vtermno value for ports media: wl128x: prevent two potential buffer overflows spi: tegra114: reset controller on probe cxgb3/l2t: Fix undefined behaviour ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put * HID: core: move Usage Page concatenation to Main item drivers/hid/hid-core.c include/linux/hid.h * chardev: add additional check for minor range overlap fs/char_dev.c x86/ia32: Fix ia32_restore_sigcontext() AC leak x86/uaccess, signal: Fix AC=1 bloat * arm64: cpu_ops: fix a leaked reference by adding missing of_node_put arch/arm64/kernel/cpu_ops.c * scsi: ufs: Avoid configuring regulator with undefined voltage range drivers/scsi/ufs/ufshcd.c * scsi: ufs: Fix regulator load and icc-level configuration drivers/scsi/ufs/ufshcd.c brcmfmac: fix Oops when bringing up interface during USB disconnect brcmfmac: fix race during disconnect when USB completion is in progress brcmfmac: convert dev_init_lock mutex to completion b43: shut up clang -Wuninitialized variable warning brcmfmac: fix missing checks for kmemdup mwifiex: Fix mem leak in mwifiex_tm_cmd rtlwifi: fix a potential NULL pointer dereference iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data iio: hmc5843: fix potential NULL pointer dereferences iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion x86/build: Keep local relocations with ld.lld cpufreq: pmac32: fix possible object reference leak cpufreq/pasemi: fix possible object reference leak cpufreq: ppc_cbe: fix possible object reference leak s390: cio: fix cio_irb declaration extcon: arizona: Disable mic detect if running when driver is removed * PM / core: Propagate dev->power.wakeup_path when no callbacks drivers/base/power/main.c mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support mmc: sdhci-of-esdhc: add erratum eSDHC5 support mmc_spi: add a status check for spi_sync_locked * mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers drivers/mmc/core/pwrseq_emmc.c scsi: libsas: Do discovery on empty PHY to update PHY info hwmon: (f71805f) Use request_muxed_region for Super-IO accesses hwmon: (pc87427) Use request_muxed_region for Super-IO accesses hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses hwmon: (vt1211) Use request_muxed_region for Super-IO accesses RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure * arm64: vdso: Fix clock_getres() for CLOCK_REALTIME arch/arm64/include/asm/vdso_datapage.h arch/arm64/kernel/asm-offsets.c arch/arm64/kernel/vdso.c i40e: don't allow changes to HW VLAN stripping on active port VLANs x86/irq/64: Limit IST stack overflow check to #DB stack * USB: core: Don't unbind interfaces following device reset failure drivers/usb/core/hub.c * sched/core: Handle overflow in cpu_shares_write_u64 kernel/sched/core.c * sched/core: Check quota and period overflow at usec to nsec conversion kernel/sched/core.c powerpc/numa: improve control of topology updates media: pvrusb2: Prevent a buffer overflow media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() * audit: fix a memory leak bug kernel/auditfilter.c media: ov2659: make S_FMT succeed even if requested format doesn't match media: au0828: stop video streaming only when last user stops media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper media: coda: clear error return value before picture run dmaengine: at_xdmac: remove BUG_ON macro in tasklet pinctrl: pistachio: fix leaked of_node references HID: logitech-hidpp: use RAP instead of FAP to get the protocol version * mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions lib/strncpy_from_user.c lib/strnlen_user.c x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() * smpboot: Place the __percpu annotation correctly include/linux/smpboot.h x86/build: Move _etext to actual end of .text bcache: avoid clang -Wunintialized warning bcache: add failure check to run_cache_set() for journal replay bcache: fix failure in journal relplay bcache: return error immediately in bch_journal_replay() crypto: sun4i-ss - Fix invalid calculation of hash end net: cw1200: fix a NULL pointer dereference mwifiex: prevent an array overflow ASoC: fsl_sai: Update is_slave_mode with correct value * mac80211/cfg80211: update bss channel on channel switch net/wireless/nl80211.c dmaengine: pl330: _stop: clear interrupt status w1: fix the resume command API rtc: 88pm860x: prevent use-after-free on device remove iwlwifi: pcie: don't crash on invalid RX interrupt scsi: qla2xxx: Fix a qla24xx_enable_msix() error path * sched/cpufreq: Fix kobject memleak drivers/cpufreq/cpufreq.c * arm64: Fix compiler warning from pte_unmap() with -Wunused-but-set-variable arch/arm64/include/asm/pgtable.h ARM: vdso: Remove dependency with the arch_timer driver internals brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() spi: pxa2xx: fix SCR (divisor) calculation * ASoC: imx: fix fiq dependencies sound/soc/fsl/Kconfig powerpc/boot: Fix missing check of lseek() return value * ASoC: hdmi-codec: unlock the device on startup errors sound/soc/codecs/hdmi-codec.c net: ena: gcc 8: fix compilation warning dmaengine: tegra210-dma: free dma controller in remove() * mmc: core: Verify SD bus width drivers/mmc/core/sd.c cxgb4: Fix error path in cxgb4_init_module gfs2: Fix lru_count going negative Revert "btrfs: Honour FITRIM range constraints during free space trim" tools include: Adopt linux/bits.h perf tools: No need to include bitops.h in util.h at76c50x-usb: Don't register led_trigger if usb_register_driver failed ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit media: vivid: use vfree() instead of kfree() for dev->bitmap_cap media: cpia2: Fix use-after-free in cpia2_exit * fbdev: fix WARNING in __alloc_pages_nodemask bug drivers/video/fbdev/core/fbcmap.c * hugetlb: use same fault hash key for shared and private mappings include/linux/hugetlb.h * fbdev: fix divide error in fb_var_to_videomode drivers/video/fbdev/core/modedb.c btrfs: sysfs: don't leak memory when failing add fsid Btrfs: fix race between ranged fsync and writeback of adjacent ranges Btrfs: do not abort transaction at btrfs_update_root() after failure to COW path gfs2: Fix sign extension bug in gfs2_update_stats * arm64: Save and restore OSDLR_EL1 across suspend/resume arch/arm64/mm/proc.S libnvdimm/namespace: Fix label tracking error kvm: svm/avic: fix off-by-one in checking host APIC ID crypto: vmx - CTR: always increment IV as quadword * Revert "scsi: sd: Keep disk read-only when re-reading partition" drivers/scsi/sd.c * bio: fix improper use of smp_mb__before_atomic() include/linux/bio.h KVM: x86: fix return value for reserved EFER * ext4: do not delete unlinked inode from orphan list on failed truncate fs/ext4/inode.c Merge remote-tracking branch 'origin/upstream-f2fs-stable-linux-4.9.y' into android-4.9 Merge 4.9.179 into android-4.9 Linux 4.9.179 fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough btrfs: Honour FITRIM range constraints during free space trim md/raid: raid5 preserve the writeback action after the parity check Revert "Don't jump to compute_result state from check_result state" perf bench numa: Add define for RUSAGE_THREAD if not present ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour * power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG drivers/power/supply/power_supply_sysfs.c KVM: arm/arm64: Ensure vcpu target is unset on reset failure mac80211: Fix kernel panic due to use of txq after free * xfrm4: Fix uninitialized memory read in _decode_session4 net/ipv4/xfrm4_policy.c * vti4: ipip tunnel deregistration fixes. net/ipv4/ip_vti.c * xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module net/ipv6/xfrm6_tunnel.c * xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink net/xfrm/xfrm_user.c dm delay: fix a crash when invalid device is specified * PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum drivers/pci/quirks.c include/linux/pci.h PCI: Factor out pcie_retrain_link() function * PCI: Mark Atheros AR9462 to avoid bus reset drivers/pci/quirks.c fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display fbdev: sm712fb: fix support for 1024x768-16 mode fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75 fbdev: sm712fb: fix brightness control on reboot, don't set SR30 objtool: Allow AR to be overridden with HOSTAR perf intel-pt: Fix sample timestamp wrt non-taken branches perf intel-pt: Fix improved sample timestamp perf intel-pt: Fix instructions sampling rate memory: tegra: Fix integer overflow on tick value calculation * tracing: Fix partial reading of trace event's id file kernel/trace/trace_events.c ceph: flush dirty inodes before proceeding with remount iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114 * fuse: honor RLIMIT_FSIZE in fuse_file_fallocate fs/fuse/file.c * fuse: fix writepages on 32bit fs/fuse/file.c clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider NFS4: Fix v4.0 client state corruption when mount media: ov6650: Fix sensor possibly not detected on probe cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() * of: fix clang -Wunsequenced for be32_to_cpu() include/linux/of.h p54: drop device reference count if fails to enable device intel_th: msu: Fix single mode with IOMMU md: add mddev->pers to avoid potential NULL pointer dereference stm class: Fix channel free in stm output free path parisc: Rename LEVEL to PA_ASM_LEVEL to avoid name clash with DRBD code parisc: Skip registering LED when running in QEMU parisc: Export running_on_qemu symbol for modules vsock/virtio: Initialize core virtio vsock before registering the driver tipc: fix modprobe tipc failed after switch order of device registration vsock/virtio: free packets during the socket release tipc: switch order of device registration to fix a crash * ppp: deflate: Fix possible crash in deflate_init drivers/net/ppp/ppp_deflate.c net/mlx4_core: Change the error print to info print * net: avoid weird emergency message net/core/dev.c * f2fs: link f2fs quota ops for sysfile fs/f2fs/checkpoint.c fs/f2fs/super.c * BACKPORT: gcov: clang support kernel/gcov/Kconfig UPSTREAM: gcov: docs: add a note on GCC vs Clang differences UPSTREAM: gcov: clang: move common GCC code into gcc_base.c * UPSTREAM: module: add stubs for within_module functions include/linux/module.h * UPSTREAM: gcov: remove CONFIG_GCOV_FORMAT_AUTODETECT kernel/gcov/Kconfig * BACKPORT: kbuild: gcov: enable -fno-tree-loop-im if supported Makefile Merge remote-tracking branch 'origin/upstream-f2fs-stable-linux-4.9.y' into android-4.9 * ext4: fix build warning fs/ext4/file.c Change-Id: I8e7abd3cefdf0f9d9c1fa5b63a0abf243fe7c7d1 Signed-off-by: Robin Peng <robinpeng@google.com>	2019-07-26 21:29:11 +08:00
Tri Vo	f0fee0a761	UPSTREAM: module: add stubs for within_module functions ... Provide stubs for within_module_core(), within_module_init(), and within_module() to prevent build errors when !CONFIG_MODULES. Suggested-by: Matthew Wilcox <willy@infradead.org> Reported-by: Randy Dunlap <rdunlap@infradead.org> Reported-by: kbuild test robot <lkp@intel.com> Link: https://marc.info/?l=linux-mm&m=155384681109231&w=2 Signed-off-by: Tri Vo <trong@android.com> Signed-off-by: Jessica Yu <jeyu@kernel.org> (cherry picked from commit dadec066d8fa7da227f623f632ea114690fecaf8) Bug: 132997968 Test: defconfig + CONFIG_GCOV_KERNEL records coverage Change-Id: I69448d0721a5174d4f39fff0774a86361f37b8ef	2019-05-23 16:51:33 -07:00
Arnd Bergmann	e21538812d	modules: mark __inittest/__exittest as __maybe_unused ... commit 1f318a8bafcfba9f0d623f4870c4e890fd22e659 upstream. clang warns about unused inline functions by default: arch/arm/crypto/aes-cipher-glue.c:68:1: warning: unused function '__inittest' [-Wunused-function] arch/arm/crypto/aes-cipher-glue.c:69:1: warning: unused function '__exittest' [-Wunused-function] As these appear in every single module, let's just disable the warnings by marking the two functions as __maybe_unused. Signed-off-by: Arnd Bergmann <arnd@arndb.de> Reviewed-by: Miroslav Benes <mbenes@suse.cz> Acked-by: Rusty Russell <rusty@rustcorp.com.au> Signed-off-by: Jessica Yu <jeyu@redhat.com> Signed-off-by: Nick Desaulniers <ndesaulniers@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2018-11-23 08:20:35 +01:00
Daniel Mentz	9c715ce859	Merge LA.UM.7.3.9.08.00.00.385.245 via branch qcom-msm-4.9 into android-msm-bluecross-4.9 ... Merge Qualcomm's LA.UM.7.3.9.08.00.00.385.245 Conflicts: Makefile arch/arm64/Makefile arch/arm64/boot/dts/qcom/pfk_ecryptfs.h arch/arm64/include/asm/signal32.h arch/arm64/kernel/vdso/gettimeofday.S block/bio.c block/blk-core.c block/blk-merge.c drivers/crypto/msm/ice.c drivers/input/touchscreen/Makefile drivers/media/platform/msm/camera/cam_isp/cam_isp_context.c drivers/media/platform/msm/camera/cam_isp/cam_isp_context.h drivers/media/platform/msm/camera/cam_isp/isp_hw_mgr/cam_ife_hw_mgr.c drivers/media/platform/msm/camera/cam_isp/isp_hw_mgr/isp_hw/ife_csid_hw/cam_ife_csid_core.c drivers/power/supply/power_supply_sysfs.c drivers/power/supply/qcom/Makefile drivers/scsi/ufs/ufs-qcom-ice.c drivers/scsi/ufs/ufshcd.c drivers/video/console/dummycon.c fs/crypto/Kconfig fs/crypto/Makefile fs/crypto/fscrypt_private.h fs/crypto/keyinfo.c fs/direct-io.c fs/ext4/inode.c fs/ext4/page-io.c fs/f2fs/data.c fs/f2fs/f2fs.h fs/f2fs/file.c fs/f2fs/node.c fs/f2fs/super.c include/linux/blkdev.h include/linux/f2fs_fs.h include/linux/fscrypt.h include/linux/fscrypt_notsupp.h include/linux/fscrypt_supp.h include/linux/pfk.h include/linux/power_supply.h include/linux/security.h include/linux/tcp.h include/uapi/linux/fs.h kernel/sched/cpufreq_schedutil.c kernel/sched/fair.c net/ipv4/tcp.c scripts/Kbuild.include security/Kconfig security/pfe/Kconfig security/pfe/Makefile security/pfe/pfk.c security/pfe/pfk_internal.h security/pfe/pfk_kc.c security/pfe/pfk_kc.h security/security.c security/selinux/include/objsec.h Change-Id: I7601101b4be54a5f662908bc51d1f60793346885	2018-04-19 17:20:26 -07:00
Daniel Mentz	2502678cbf	Merge branch 'qcom-msm-4.9' into android-msm-bluecross-4.9 ... Merge Qualcomm's LA.UM.7.3.9.08.00.00.385.165 Conflicts: drivers/gpu/drm/msm/dsi-staging/dsi_panel.c drivers/media/platform/msm/camera/cam_fd/cam_fd_dev.c drivers/power/supply/power_supply_sysfs.c drivers/thermal/Makefile include/linux/init.h include/linux/power_supply.h Change-Id: I1b5421163a17278dc391d8d16db78bc4b347640c	2018-03-06 17:00:49 -08:00
Sami Tolvanen	00a195e7c0	add support for clang Control Flow Integrity (CFI) ... This change adds the CONFIG_CFI_CLANG option, CFI error handling, and a faster look-up table for cross module CFI checks. Bug: 67506682 Change-Id: Ic009f0a629b552a0eb16e6d89808c7029e91447d Signed-off-by: Sami Tolvanen <samitolvanen@google.com>	2018-02-28 15:09:58 -08:00
Greg Kroah-Hartman	f8bbe517d0	Merge 4.9.81 into android-4.9 ... Changes in 4.9.81 powerpc/pseries: Add H_GET_CPU_CHARACTERISTICS flags & wrapper powerpc/64: Add macros for annotating the destination of rfid/hrfid powerpc/64: Convert fast_exception_return to use RFI_TO_USER/KERNEL powerpc/64: Convert the syscall exit path to use RFI_TO_USER/KERNEL powerpc/64s: Convert slb_miss_common to use RFI_TO_USER/KERNEL powerpc/64s: Add support for RFI flush of L1-D cache powerpc/64s: Support disabling RFI flush with no_rfi_flush and nopti powerpc/pseries: Query hypervisor for RFI flush settings powerpc/powernv: Check device-tree for RFI flush settings powerpc/64s: Wire up cpu_show_meltdown() powerpc/64s: Allow control of RFI flush via debugfs auxdisplay: img-ascii-lcd: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE pinctrl: pxa: pxa2xx: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE ASoC: pcm512x: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE kaiser: fix intel_bts perf crashes x86/pti: Make unpoison of pgd for trusted boot work for real kaiser: allocate pgd with order 0 when pti=off serial: core: mark port as initialized after successful IRQ change ip6mr: fix stale iterator net: igmp: add a missing rcu locking section qlcnic: fix deadlock bug qmi_wwan: Add support for Quectel EP06 r8169: fix RTL8168EP take too long to complete driver initialization. tcp: release sk_frag.page in tcp_disconnect vhost_net: stop device during reset owner tcp_bbr: fix pacing_gain to always be unity when using lt_bw cls_u32: add missing RCU annotation. ipv6: Fix SO_REUSEPORT UDP socket with implicit sk_ipv6only soreuseport: fix mem leak in reuseport_add_sock() x86/asm: Fix inline asm call constraints for GCC 4.4 x86/microcode/AMD: Do not load when running on a hypervisor media: soc_camera: soc_scale_crop: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE b43: Add missing MODULE_FIRMWARE() KEYS: encrypted: fix buffer overread in valid_master_desc() x86/retpoline: Remove the esp/rsp thunk KVM: x86: Make indirect calls in emulator speculation safe KVM: VMX: Make indirect call speculation safe module/retpoline: Warn about missing retpoline in module x86/cpufeatures: Add CPUID_7_EDX CPUID leaf x86/cpufeatures: Add Intel feature bits for Speculation Control x86/cpufeatures: Add AMD feature bits for Speculation Control x86/msr: Add definitions for new speculation control MSRs x86/pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown x86/cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes x86/speculation: Add basic IBPB (Indirect Branch Prediction Barrier) support x86/nospec: Fix header guards names x86/bugs: Drop one "mitigation" from dmesg x86/cpu/bugs: Make retpoline module warning conditional x86/cpufeatures: Clean up Spectre v2 related CPUID flags x86/retpoline: Simplify vmexit_fill_RSB() x86/spectre: Check CONFIG_RETPOLINE in command line parser x86/entry/64: Remove the SYSCALL64 fast path x86/entry/64: Push extra regs right away x86/asm: Move 'status' from thread_struct to thread_info Documentation: Document array_index_nospec array_index_nospec: Sanitize speculative array de-references x86: Implement array_index_mask_nospec x86: Introduce barrier_nospec x86: Introduce __uaccess_begin_nospec() and uaccess_try_nospec x86/usercopy: Replace open coded stac/clac with __uaccess_{begin, end} x86/uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec x86/get_user: Use pointer masking to limit speculation x86/syscall: Sanitize syscall table de-references under speculation vfs, fdtable: Prevent bounds-check bypass via speculative execution nl80211: Sanitize array index in parse_txq_params x86/spectre: Report get_user mitigation for spectre_v1 x86/spectre: Fix spelling mistake: "vunerable"-> "vulnerable" x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel x86/paravirt: Remove 'noreplace-paravirt' cmdline option x86/kvm: Update spectre-v1 mitigation x86/retpoline: Avoid retpolines for built-in __init functions x86/spectre: Simplify spectre_v2 command line parsing x86/pti: Mark constant arrays as __initconst x86/speculation: Fix typo IBRS_ATT, which should be IBRS_ALL KVM: nVMX: kmap() can't fail KVM: nVMX: vmx_complete_nested_posted_interrupt() can't fail KVM: nVMX: mark vmcs12 pages dirty on L2 exit KVM: nVMX: Eliminate vmcs02 pool KVM: VMX: introduce alloc_loaded_vmcs KVM: VMX: make MSR bitmaps per-VCPU KVM/x86: Add IBPB support KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL crypto: tcrypt - fix S/G table for test_aead_speed() ASoC: simple-card: Fix misleading error message ASoC: rsnd: don't call free_irq() on Parent SSI ASoC: rsnd: avoid duplicate free_irq() drm: rcar-du: Use the VBK interrupt for vblank events drm: rcar-du: Fix race condition when disabling planes at CRTC stop x86/microcode: Do the family check first Linux 4.9.81 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2018-02-13 12:57:29 +01:00
Andi Kleen	a1745ad92f	module/retpoline: Warn about missing retpoline in module ... (cherry picked from commit caf7501a1b4ec964190f31f9c3f163de252273b8) There's a risk that a kernel which has full retpoline mitigations becomes vulnerable when a module gets loaded that hasn't been compiled with the right compiler or the right option. To enable detection of that mismatch at module load time, add a module info string "retpoline" at build time when the module was compiled with retpoline support. This only covers compiled C source, but assembler source or prebuilt object files are not checked. If a retpoline enabled kernel detects a non retpoline protected module at load time, print a warning and report it in the sysfs vulnerability file. [ tglx: Massaged changelog ] Signed-off-by: Andi Kleen <ak@linux.intel.com> Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Cc: David Woodhouse <dwmw2@infradead.org> Cc: gregkh@linuxfoundation.org Cc: torvalds@linux-foundation.org Cc: jeyu@kernel.org Cc: arjan@linux.intel.com Link: https://lkml.kernel.org/r/20180125235028.31211-1-andi@firstfloor.org Signed-off-by: David Woodhouse <dwmw@amazon.co.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2018-02-13 12:35:58 +01:00
Sami Tolvanen	4ca69fba29	add support for clang Control Flow Integrity (CFI) ... This change adds the CONFIG_CFI_CLANG option, CFI error handling, and a faster look-up table for cross module CFI checks. Bug: 67506682 Change-Id: Ic009f0a629b552a0eb16e6d89808c7029e91447d Signed-off-by: Sami Tolvanen <samitolvanen@google.com>	2018-01-24 08:09:47 -08:00
Matthias Kaehlcke	806ea2329a	[UPSTREAM]module: Remove const attribute from alias for MODULE_DEVICE_TABLE ... MODULE_DEVICE_TABLE(type, name) creates an alias of type 'extern const typeof(name)'. If 'name' is already constant the 'const' attribute is specified twice, which is not allowed in C89 (see discussion at https://lkml.org/lkml/2017/5/23/1440). Since the kernel is built with -std=gnu89 clang generates warnings like this: drivers/thermal/x86_pkg_temp_thermal.c:509:1: warning: duplicate 'const' declaration specifier [-Wduplicate-decl-specifier] MODULE_DEVICE_TABLE(x86cpu, pkg_temp_thermal_ids); ^ ./include/linux/module.h:212:8: note: expanded from macro 'MODULE_DEVICE_TABLE' extern const typeof(name) __mod_##type##__##name##_device_table Remove the const attribute from the alias to avoid the duplicate specifier. After all it is only an alias and the attribute shouldn't have any effect. (cfries@google.com: Take for clang compilation) Change-Id: Id33b725109e9edcb24d41db5dda65e70d6b49f23 Signed-off-by: Matthias Kaehlcke <mka@chromium.org> Signed-off-by: Jessica Yu <jeyu@kernel.org>	2017-11-09 23:45:34 -06:00
Arnd Bergmann	2fe1b761fa	UPSTREAM: modules: mark __inittest/__exittest as __maybe_unused ... clang warns about unused inline functions by default: arch/arm/crypto/aes-cipher-glue.c:68:1: warning: unused function '__inittest' [-Wunused-function] arch/arm/crypto/aes-cipher-glue.c:69:1: warning: unused function '__exittest' [-Wunused-function] As these appear in every single module, let's just disable the warnings by marking the two functions as __maybe_unused. Signed-off-by: Arnd Bergmann <arnd@arndb.de> Reviewed-by: Miroslav Benes <mbenes@suse.cz> Acked-by: Rusty Russell <rusty@rustcorp.com.au> Signed-off-by: Jessica Yu <jeyu@redhat.com> (cherry picked from commit 1f318a8bafcfba9f0d623f4870c4e890fd22e659)	2017-10-16 15:30:37 -07:00
Jessica Yu	444d13ff10	modules: add ro_after_init support ... Add ro_after_init support for modules by adding a new page-aligned section in the module layout (after rodata) for ro_after_init data and enabling RO protection for that section after module init runs. Signed-off-by: Jessica Yu <jeyu@redhat.com> Acked-by: Kees Cook <keescook@chromium.org> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>	2016-08-04 10:16:55 +09:30
Paul Gortmaker	0ef7653797	exceptions: fork exception table content from module.h into extable.h ... For historical reasons (i.e. pre-git) the exception table stuff was buried in the middle of the module.h file. I noticed this while doing an audit for needless includes of module.h and found core kernel files (both arch specific and arch independent) were just including module.h for this. The converse is also true, in that conventional drivers, be they for filesystems or actual hardware peripherals or similar, do not normally care about the exception tables. Here we fork the exception table content out of module.h into a new file called extable.h -- and temporarily include it into the module.h itself. Then we will work our way across the arch independent and arch specific files needing just exception table content, and move them off module.h and onto extable.h Once that is done, we can remove the extable.h from module.h and in doing it like this, we avoid introducing build failures into the git history. The gain here is that module.h gets a bit smaller, across all modular drivers that we build for allmodconfig. Also the core files that only need exception table stuff don't have an include of module.h that brings in lots of extra stuff and just looks generally out of place. Cc: Andrew Morton <akpm@linux-foundation.org> Cc: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>	2016-08-04 10:16:54 +09:30
Jiri Kosina	bf262dcec6	module: fix noreturn attribute for __module_put_and_exit() ... __module_put_and_exit() is makred noreturn in module.h declaration, but is lacking the attribute in the definition, which makes some tools (such as sparse) unhappy. Amend the definition with the attribute as well (and reformat the declaration so that it uses more common format). Signed-off-by: Jiri Kosina <jkosina@suse.cz> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>	2016-07-27 12:38:00 +09:30
Jessica Yu	1ce15ef4f6	module: preserve Elf information for livepatch modules ... For livepatch modules, copy Elf section, symbol, and string information from the load_info struct in the module loader. Persist copies of the original symbol table and string table. Livepatch manages its own relocation sections in order to reuse module loader code to write relocations. Livepatch modules must preserve Elf information such as section indices in order to apply livepatch relocation sections using the module loader's apply_relocate_add() function. In order to apply livepatch relocation sections, livepatch modules must keep a complete copy of their original symbol table in memory. Normally, a stripped down copy of a module's symbol table (containing only "core" symbols) is made available through module->core_symtab. But for livepatch modules, the symbol table copied into memory on module load must be exactly the same as the symbol table produced when the patch module was compiled. This is because the relocations in each livepatch relocation section refer to their respective symbols with their symbol indices, and the original symbol indices (and thus the symtab ordering) must be preserved in order for apply_relocate_add() to find the right symbol. Signed-off-by: Jessica Yu <jeyu@redhat.com> Reviewed-by: Miroslav Benes <mbenes@suse.cz> Acked-by: Josh Poimboeuf <jpoimboe@redhat.com> Acked-by: Rusty Russell <rusty@rustcorp.com.au> Reviewed-by: Rusty Russell <rusty@rustcorp.com.au> Signed-off-by: Jiri Kosina <jkosina@suse.cz>	2016-04-01 15:00:10 +02:00
Rusty Russell	8244062ef1	modules: fix longstanding /proc/kallsyms vs module insertion race. ... For CONFIG_KALLSYMS, we keep two symbol tables and two string tables. There's one full copy, marked SHF_ALLOC and laid out at the end of the module's init section. There's also a cut-down version that only contains core symbols and strings, and lives in the module's core section. After module init (and before we free the module memory), we switch the mod->symtab, mod->num_symtab and mod->strtab to point to the core versions. We do this under the module_mutex. However, kallsyms doesn't take the module_mutex: it uses preempt_disable() and rcu tricks to walk through the modules, because it's used in the oops path. It's also used in /proc/kallsyms. There's nothing atomic about the change of these variables, so we can get the old (larger!) num_symtab and the new symtab pointer; in fact this is what I saw when trying to reproduce. By grouping these variables together, we can use a carefully-dereferenced pointer to ensure we always get one or the other (the free of the module init section is already done in an RCU callback, so that's safe). We allocate the init one at the end of the module init section, and keep the core one inside the struct module itself (it could also have been allocated at the end of the module core, but that's probably overkill). Reported-by: Weilong Chen <chenweilong@huawei.com> Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=111541 Cc: stable@kernel.org Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>	2016-02-03 16:58:15 +10:30
Rusty Russell	85c898db63	module: clean up RO/NX handling. ... Modules have three sections: text, rodata and writable data. The code handled the case where these overlapped, however they never can: debug_align() ensures they are always page-aligned. This is why we got away with manually traversing the pages in set_all_modules_text_rw() without rounding. We create three helper functions: frob_text(), frob_rodata() and frob_writable_data(). We then call these explicitly at every point, so it's clear what we're doing. We also expose module_enable_ro() and module_disable_ro() for livepatch to use. Reviewed-by: Josh Poimboeuf <jpoimboe@redhat.com> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au> Signed-off-by: Jiri Kosina <jkosina@suse.cz>	2015-12-04 22:46:26 +01:00
Rusty Russell	7523e4dc50	module: use a structure to encapsulate layout. ... Makes it easier to handle init vs core cleanly, though the change is fairly invasive across random architectures. It simplifies the rbtree code immediately, however, while keeping the core data together in the same cachline (now iff the rbtree code is enabled). Acked-by: Peter Zijlstra <peterz@infradead.org> Reviewed-by: Josh Poimboeuf <jpoimboe@redhat.com> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au> Signed-off-by: Jiri Kosina <jkosina@suse.cz>	2015-12-04 22:46:25 +01:00
Paul Gortmaker	0fd972a7d9	module: relocate module_init from init.h to module.h ... Modular users will always be users of init functionality, but users of init functionality are not necessarily always modules. Hence any functionality like module_init and module_exit would be more at home in the module.h file. And module.h should explicitly include init.h to make the dependency clear. We've already done all the legwork needed to ensure that this move does not cause any build regressions due to implicit header file include assumptions about where module_init lives. Cc: Rusty Russell <rusty@rustcorp.com.au> Acked-by: Rusty Russell <rusty@rustcorp.com.au> Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com>	2015-07-05 23:59:14 -04:00
Linus Torvalds	02201e3f1b	Merge tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux ... Pull module updates from Rusty Russell: "Main excitement here is Peter Zijlstra's lockless rbtree optimization to speed module address lookup. He found some abusers of the module lock doing that too. A little bit of parameter work here too; including Dan Streetman's breaking up the big param mutex so writing a parameter can load another module (yeah, really). Unfortunately that broke the usual suspects, !CONFIG_MODULES and !CONFIG_SYSFS, so those fixes were appended too" * tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux: (26 commits) modules: only use mod->param_lock if CONFIG_MODULES param: fix module param locks when !CONFIG_SYSFS. rcu: merge fix for Convert ACCESS_ONCE() to READ_ONCE() and WRITE_ONCE() module: add per-module param_lock module: make perm const params: suppress unused variable error, warn once just in case code changes. modules: clarify CONFIG_MODULE_COMPRESS help, suggest 'N'. kernel/module.c: avoid ifdefs for sig_enforce declaration kernel/workqueue.c: remove ifdefs over wq_power_efficient kernel/params.c: export param_ops_bool_enable_only kernel/params.c: generalize bool_enable_only kernel/module.c: use generic module param operaters for sig_enforce kernel/params: constify struct kernel_param_ops uses sysfs: tightened sysfs permission checks module: Rework module_addr_{min,max} module: Use __module_address() for module_address_lookup() module: Make the mod_tree stuff conditional on PERF_EVENTS || TRACING module: Optimize __module_address() using a latched RB-tree rbtree: Implement generic latch_tree seqlock: Introduce raw_read_seqcount_latch() ...	2015-07-01 10:49:25 -07:00
Rusty Russell	cf2fde7b39	param: fix module param locks when !CONFIG_SYSFS. ... As Dan Streetman points out, the entire point of locking for is to stop sysfs accesses, so they're elided entirely in the !SYSFS case. Reported-by: Stephen Rothwell <sfr@canb.auug.org.au> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>	2015-06-28 14:46:14 +09:30
Linus Torvalds	8d7804a2f0	Merge tag 'driver-core-4.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core ... Pull driver core updates from Greg KH: "Here is the driver core / firmware changes for 4.2-rc1. A number of small changes all over the place in the driver core, and in the firmware subsystem. Nothing really major, full details in the shortlog. Some of it is a bit of churn, given that the platform driver probing changes was found to not work well, so they were reverted. All of these have been in linux-next for a while with no reported issues" * tag 'driver-core-4.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core: (31 commits) Revert "base/platform: Only insert MEM and IO resources" Revert "base/platform: Continue on insert_resource() error" Revert "of/platform: Use platform_device interface" Revert "base/platform: Remove code duplication" firmware: add missing kfree for work on async call fs: sysfs: don't pass count == 0 to bin file readers base:dd - Fix for typo in comment to function driver_deferred_probe_trigger(). base/platform: Remove code duplication of/platform: Use platform_device interface base/platform: Continue on insert_resource() error base/platform: Only insert MEM and IO resources firmware: use const for remaining firmware names firmware: fix possible use after free on name on asynchronous request firmware: check for file truncation on direct firmware loading firmware: fix __getname() missing failure check drivers: of/base: move of_init to driver_init drivers/base: cacheinfo: fix annoying typo when DT nodes are absent sysfs: disambiguate between "error code" and "failure" in comments driver-core: fix build for !CONFIG_MODULES driver-core: make __device_attach() static ...	2015-06-26 15:07:37 -07:00
Linus Torvalds	e382608254	Merge tag 'trace-v4.2' of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace ... Pull tracing updates from Steven Rostedt: "This patch series contains several clean ups and even a new trace clock "monitonic raw". Also some enhancements to make the ring buffer even faster. But the biggest and most noticeable change is the renaming of the ftrace* files, structures and variables that have to deal with trace events. Over the years I've had several developers tell me about their confusion with what ftrace is compared to events. Technically, "ftrace" is the infrastructure to do the function hooks, which include tracing and also helps with live kernel patching. But the trace events are a separate entity altogether, and the files that affect the trace events should not be named "ftrace". These include: include/trace/ftrace.h -> include/trace/trace_events.h include/linux/ftrace_event.h -> include/linux/trace_events.h Also, functions that are specific for trace events have also been renamed: ftrace_print_*() -> trace_print_*() (un)register_ftrace_event() -> (un)register_trace_event() ftrace_event_name() -> trace_event_name() ftrace_trigger_soft_disabled() -> trace_trigger_soft_disabled() ftrace_define_fields_##call() -> trace_define_fields_##call() ftrace_get_offsets_##call() -> trace_get_offsets_##call() Structures have been renamed: ftrace_event_file -> trace_event_file ftrace_event_{call,class} -> trace_event_{call,class} ftrace_event_buffer -> trace_event_buffer ftrace_subsystem_dir -> trace_subsystem_dir ftrace_event_raw_##call -> trace_event_raw_##call ftrace_event_data_offset_##call-> trace_event_data_offset_##call ftrace_event_type_funcs_##call -> trace_event_type_funcs_##call And a few various variables and flags have also been updated. This has been sitting in linux-next for some time, and I have not heard a single complaint about this rename breaking anything. Mostly because these functions, variables and structures are mostly internal to the tracing system and are seldom (if ever) used by anything external to that" * tag 'trace-v4.2' of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace: (33 commits) ring_buffer: Allow to exit the ring buffer benchmark immediately ring-buffer-benchmark: Fix the wrong type ring-buffer-benchmark: Fix the wrong param in module_param ring-buffer: Add enum names for the context levels ring-buffer: Remove useless unused tracing_off_permanent() ring-buffer: Give NMIs a chance to lock the reader_lock ring-buffer: Add trace_recursive checks to ring_buffer_write() ring-buffer: Allways do the trace_recursive checks ring-buffer: Move recursive check to per_cpu descriptor ring-buffer: Add unlikelys to make fast path the default tracing: Rename ftrace_get_offsets_##call() to trace_event_get_offsets_##call() tracing: Rename ftrace_define_fields_##call() to trace_event_define_fields_##call() tracing: Rename ftrace_event_type_funcs_##call to trace_event_type_funcs_##call tracing: Rename ftrace_data_offset_##call to trace_event_data_offset_##call tracing: Rename ftrace_raw_##call event structures to trace_event_raw_##call tracing: Rename ftrace_trigger_soft_disabled() to trace_trigger_soft_disabled() tracing: Rename FTRACE_EVENT_FL_* flags to EVENT_FILE_FL_* tracing: Rename struct ftrace_subsystem_dir to trace_subsystem_dir tracing: Rename ftrace_event_name() to trace_event_name() tracing: Rename FTRACE_MAX_EVENT to TRACE_EVENT_TYPE_MAX ...	2015-06-26 14:02:43 -07:00
Dan Streetman	b51d23e4e9	module: add per-module param_lock ... Add a "param_lock" mutex to each module, and update params.c to use the correct built-in or module mutex while locking kernel params. Remove the kparam_block_sysfs_r/w() macros, replace them with direct calls to kernel_param_[un]lock(module). The kernel param code currently uses a single mutex to protect modification of any and all kernel params. While this generally works, there is one specific problem with it; a module callback function cannot safely load another module, i.e. with request_module() or even with indirect calls such as crypto_has_alg(). If the module to be loaded has any of its params configured (e.g. with a /etc/modprobe.d/* config file), then the attempt will result in a deadlock between the first module param callback waiting for modprobe, and modprobe trying to lock the single kernel param mutex to set the new module's param. This fixes that by using per-module mutexes, so that each individual module is protected against concurrent changes in its own kernel params, but is not blocked by changes to other module params. All built-in modules continue to use the built-in mutex, since they will always be loaded at runtime and references (e.g. request_module(), crypto_has_alg()) to them will never cause load-time param changing. This also simplifies the interface used by modules to block sysfs access to their params; while there are currently functions to block and unblock sysfs param access which are split up by read and write and expect a single kernel param to be passed, their actual operation is identical and applies to all params, not just the one passed to them; they simply lock and unlock the global param mutex. They are replaced with direct calls to kernel_param_[un]lock(THIS_MODULE), which locks THIS_MODULE's param_lock, or if the module is built-in, it locks the built-in mutex. Suggested-by: Rusty Russell <rusty@rustcorp.com.au> Signed-off-by: Dan Streetman <ddstreet@ieee.org> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>	2015-06-23 15:27:38 +09:30
Peter Zijlstra	6c9692e2d6	module: Make the mod_tree stuff conditional on PERF_EVENTS || TRACING ... Andrew worried about the overhead on small systems; only use the fancy code when either perf or tracing is enabled. Cc: Rusty Russell <rusty@rustcorp.com.au> Cc: Steven Rostedt <rostedt@goodmis.org> Requested-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>	2015-05-28 11:32:07 +09:30
Peter Zijlstra	93c2e105f6	module: Optimize __module_address() using a latched RB-tree ... Currently __module_address() is using a linear search through all modules in order to find the module corresponding to the provided address. With a lot of modules this can take a lot of time. One of the users of this is kernel_text_address() which is employed in many stack unwinders; which in turn are used by perf-callchain and ftrace (possibly from NMI context). So by optimizing __module_address() we optimize many stack unwinders which are used by both perf and tracing in performance sensitive code. Cc: Rusty Russell <rusty@rustcorp.com.au> Cc: Steven Rostedt <rostedt@goodmis.org> Cc: Mathieu Desnoyers <mathieu.desnoyers@efficios.com> Cc: Oleg Nesterov <oleg@redhat.com> Cc: "Paul E. McKenney" <paulmck@linux.vnet.ibm.com> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>	2015-05-28 11:32:07 +09:30
Peter Zijlstra	0be964be0d	module: Sanitize RCU usage and locking ... Currently the RCU usage in module is an inconsistent mess of RCU and RCU-sched, this is broken for CONFIG_PREEMPT where synchronize_rcu() does not imply synchronize_sched(). Most usage sites use preempt_{dis,en}able() which is RCU-sched, but (most of) the modification sites use synchronize_rcu(). With the exception of the module bug list, which actually uses RCU. Convert everything over to RCU-sched. Furthermore add lockdep asserts to all sites, because it's not at all clear to me the required locking is observed, esp. on exported functions. Cc: Rusty Russell <rusty@rustcorp.com.au> Acked-by: "Paul E. McKenney" <paulmck@linux.vnet.ibm.com> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>	2015-05-28 11:31:52 +09:30
Dmitry Torokhov	80c6e14659	driver-core: fix build for !CONFIG_MODULES ... Commit f2411da746 ("driver-core: add driver module asynchronous probe support") broke build in case modules are disabled, because in this case "struct module" is not defined and we can't dereference it. Let's define module_requested_async_probing() helper and stub it out if modules are disabled. Reported-by: kbuild test robot <fengguang.wu@intel.com> Reported-by: Stephen Rothwell <sfr@canb.auug.org.au> Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2015-05-24 12:28:30 -07:00
Luis R. Rodriguez	f2411da746	driver-core: add driver module asynchronous probe support ... Some init systems may wish to express the desire to have device drivers run their probe() code asynchronously. This implements support for this and allows userspace to request async probe as a preference through a generic shared device driver module parameter, async_probe. Implementation for async probe is supported through a module parameter given that since synchronous probe has been prevalent for years some userspace might exist which relies on the fact that the device driver will probe synchronously and the assumption that devices it provides will be immediately available after this. Signed-off-by: Luis R. Rodriguez <mcgrof@suse.com> Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2015-05-20 00:25:24 -07:00
Steven Rostedt (Red Hat)	2425bcb924	tracing: Rename ftrace_event_{call,class} to trace_event_{call,class} ... The name "ftrace" really refers to the function hook infrastructure. It is not about the trace_events. The structures ftrace_event_call and ftrace_event_class have nothing to do with the function hooks, and are really trace_event structures. Rename ftrace_event_* to trace_event_*. Signed-off-by: Steven Rostedt <rostedt@goodmis.org>	2015-05-13 14:06:10 -04:00
Herbert Xu	59afdc7b32	crypto: api - Move module sig ifdef into accessor function ... Currently we're hiding mod->sig_ok under an ifdef in open code. This patch adds a module_sig_ok accessor function and removes that ifdef. Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Acked-by: Rusty Russell <rusty@rustcorp.com.au>	2015-04-23 14:18:07 +08:00
Linus Torvalds	eeee78cf77	Merge tag 'trace-v4.1' of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace ... Pull tracing updates from Steven Rostedt: "Some clean ups and small fixes, but the biggest change is the addition of the TRACE_DEFINE_ENUM() macro that can be used by tracepoints. Tracepoints have helper functions for the TP_printk() called __print_symbolic() and __print_flags() that lets a numeric number be displayed as a a human comprehensible text. What is placed in the TP_printk() is also shown in the tracepoint format file such that user space tools like perf and trace-cmd can parse the binary data and express the values too. Unfortunately, the way the TRACE_EVENT() macro works, anything placed in the TP_printk() will be shown pretty much exactly as is. The problem arises when enums are used. That's because unlike macros, enums will not be changed into their values by the C pre-processor. Thus, the enum string is exported to the format file, and this makes it useless for user space tools. The TRACE_DEFINE_ENUM() solves this by converting the enum strings in the TP_printk() format into their number, and that is what is shown to user space. For example, the tracepoint tlb_flush currently has this in its format file: __print_symbolic(REC->reason, { TLB_FLUSH_ON_TASK_SWITCH, "flush on task switch" }, { TLB_REMOTE_SHOOTDOWN, "remote shootdown" }, { TLB_LOCAL_SHOOTDOWN, "local shootdown" }, { TLB_LOCAL_MM_SHOOTDOWN, "local mm shootdown" }) After adding: TRACE_DEFINE_ENUM(TLB_FLUSH_ON_TASK_SWITCH); TRACE_DEFINE_ENUM(TLB_REMOTE_SHOOTDOWN); TRACE_DEFINE_ENUM(TLB_LOCAL_SHOOTDOWN); TRACE_DEFINE_ENUM(TLB_LOCAL_MM_SHOOTDOWN); Its format file will contain this: __print_symbolic(REC->reason, { 0, "flush on task switch" }, { 1, "remote shootdown" }, { 2, "local shootdown" }, { 3, "local mm shootdown" })" * tag 'trace-v4.1' of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace: (27 commits) tracing: Add enum_map file to show enums that have been mapped writeback: Export enums used by tracepoint to user space v4l: Export enums used by tracepoints to user space SUNRPC: Export enums in tracepoints to user space mm: tracing: Export enums in tracepoints to user space irq/tracing: Export enums in tracepoints to user space f2fs: Export the enums in the tracepoints to userspace net/9p/tracing: Export enums in tracepoints to userspace x86/tlb/trace: Export enums in used by tlb_flush tracepoint tracing/samples: Update the trace-event-sample.h with TRACE_DEFINE_ENUM() tracing: Allow for modules to convert their enums to values tracing: Add TRACE_DEFINE_ENUM() macro to map enums to their values tracing: Update trace-event-sample with TRACE_SYSTEM_VAR documentation tracing: Give system name a pointer brcmsmac: Move each system tracepoints to their own header iwlwifi: Move each system tracepoints to their own header mac80211: Move message tracepoints to their own header tracing: Add TRACE_SYSTEM_VAR to xhci-hcd tracing: Add TRACE_SYSTEM_VAR to kvm-s390 tracing: Add TRACE_SYSTEM_VAR to intel-sst ...	2015-04-14 10:49:03 -07:00
Steven Rostedt (Red Hat)	3673b8e4ce	tracing: Allow for modules to convert their enums to values ... Update the infrastructure such that modules that declare TRACE_DEFINE_ENUM() will have those enums converted into their values in the tracepoint print fmt strings. Link: http://lkml.kernel.org/r/87vbhjp74q.fsf@rustcorp.com.au Acked-by: Rusty Russell <rusty@rustcorp.com.au> Reviewed-by: Masami Hiramatsu <masami.hiramatsu.pt@hitachi.com> Tested-by: Masami Hiramatsu <masami.hiramatsu.pt@hitachi.com> Signed-off-by: Steven Rostedt <rostedt@goodmis.org>	2015-04-08 09:39:57 -04:00
Linus Torvalds	da11508eb0	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/livepatching ... Pull livepatching fix from Jiri Kosina: - fix for potential race with module loading, from Petr Mladek. The race is very unlikely to be seen in real world and has been found by code inspection, but should be fixed for 4.0 anyway. * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/livepatching: livepatch: Fix subtle race with coming and going modules	2015-03-18 10:46:39 -07:00
Petr Mladek	8cb2c2dc47	livepatch: Fix subtle race with coming and going modules ... There is a notifier that handles live patches for coming and going modules. It takes klp_mutex lock to avoid races with coming and going patches but it does not keep the lock all the time. Therefore the following races are possible: 1. The notifier is called sometime in STATE_MODULE_COMING. The module is visible by find_module() in this state all the time. It means that new patch can be registered and enabled even before the notifier is called. It might create wrong order of stacked patches, see below for an example. 2. New patch could still see the module in the GOING state even after the notifier has been called. It will try to initialize the related object structures but the module could disappear at any time. There will stay mess in the structures. It might even cause an invalid memory access. This patch solves the problem by adding a boolean variable into struct module. The value is true after the coming and before the going handler is called. New patches need to be applied when the value is true and they need to ignore the module when the value is false. Note that we need to know state of all modules on the system. The races are related to new patches. Therefore we do not know what modules will get patched. Also note that we could not simply ignore going modules. The code from the module could be called even in the GOING state until mod->exit() finishes. If we start supporting patches with semantic changes between function calls, we need to apply new patches to any still usable code. See below for an example. Finally note that the patch solves only the situation when a new patch is registered. There are no such problems when the patch is being removed. It does not matter who disable the patch first, whether the normal disable_patch() or the module notifier. There is nothing to do once the patch is disabled. Alternative solutions: ====================== + reject new patches when a patched module is coming or going; this is ugly + wait with adding new patch until the module leaves the COMING and GOING states; this might be dangerous and complicated; we would need to release kgr_lock in the middle of the patch registration to avoid a deadlock with the coming and going handlers; also we might need a waitqueue for each module which seems to be even bigger overhead than the boolean + stop modules from entering COMING and GOING states; wait until modules leave these states when they are already there; looks complicated; we would need to ignore the module that asked to stop the others to avoid a deadlock; also it is unclear what to do when two modules asked to stop others and both are in COMING state (situation when two new patches are applied) + always register/enable new patches and fix up the potential mess (registered patches order) in klp_module_init(); this is nasty and prone to regressions in the future development + add another MODULE_STATE where the kallsyms are visible but the module is not used yet; this looks too complex; the module states are checked on "many" locations Example of patch stacking breakage: =================================== The notifier could _not_ _simply_ ignore already initialized module objects. For example, let's have three patches (P1, P2, P3) for functions a() and b() where a() is from vmcore and b() is from a module M. Something like: a() b() P1 a1() b1() P2 a2() b2() P3 a3() b3(3) If you load the module M after all patches are registered and enabled. The ftrace ops for function a() and b() has listed the functions in this order: ops_a->func_stack -> list(a3,a2,a1) ops_b->func_stack -> list(b3,b2,b1) , so the pointer to b3() is the first and will be used. Then you might have the following scenario. Let's start with state when patches P1 and P2 are registered and enabled but the module M is not loaded. Then ftrace ops for b() does not exist. Then we get into the following race: CPU0 CPU1 load_module(M) complete_formation() mod->state = MODULE_STATE_COMING; mutex_unlock(&module_mutex); klp_register_patch(P3); klp_enable_patch(P3); # STATE 1 klp_module_notify(M) klp_module_notify_coming(P1); klp_module_notify_coming(P2); klp_module_notify_coming(P3); # STATE 2 The ftrace ops for a() and b() then looks: STATE1: ops_a->func_stack -> list(a3,a2,a1); ops_b->func_stack -> list(b3); STATE2: ops_a->func_stack -> list(a3,a2,a1); ops_b->func_stack -> list(b2,b1,b3); therefore, b2() is used for the module but a3() is used for vmcore because they were the last added. Example of the race with going modules: ======================================= CPU0 CPU1 delete_module() #SYSCALL try_stop_module() mod->state = MODULE_STATE_GOING; mutex_unlock(&module_mutex); klp_register_patch() klp_enable_patch() #save place to switch universe b() # from module that is going a() # from core (patched) mod->exit(); Note that the function b() can be called until we call mod->exit(). If we do not apply patch against b() because it is in MODULE_STATE_GOING, it will call patched a() with modified semantic and things might get wrong. [jpoimboe@redhat.com: use one boolean instead of two] Signed-off-by: Petr Mladek <pmladek@suse.cz> Acked-by: Josh Poimboeuf <jpoimboe@redhat.com> Acked-by: Rusty Russell <rusty@rustcorp.com.au> Signed-off-by: Jiri Kosina <jkosina@suse.cz>	2015-03-17 10:31:54 +01:00
Andrey Ryabinin	6301939d97	module: fix types of device tables aliases ... MODULE_DEVICE_TABLE() macro used to create aliases to device tables. Normally alias should have the same type as aliased symbol. Device tables are arrays, so they have 'struct type##_device_id[x]' types. Alias created by MODULE_DEVICE_TABLE() will have non-array type - 'struct type##_device_id'. This inconsistency confuses compiler, it could make a wrong assumption about variable's size which leads KASan to produce a false positive report about out of bounds access. For every global variable compiler calls __asan_register_globals() passing information about global variable (address, size, size with redzone, name ...) __asan_register_globals() poison symbols redzone to detect possible out of bounds accesses. When symbol has an alias __asan_register_globals() will be called as for symbol so for alias. Compiler determines size of variable by size of variable's type. Alias and symbol have the same address, so if alias have the wrong size part of memory that actually belongs to the symbol could be poisoned as redzone of alias symbol. By fixing type of alias symbol we will fix size of it, so __asan_register_globals() will not poison valid memory. Signed-off-by: Andrey Ryabinin <a.ryabinin@samsung.com> Cc: Dmitry Vyukov <dvyukov@google.com> Cc: Konstantin Serebryany <kcc@google.com> Cc: Dmitry Chernenkov <dmitryc@google.com> Signed-off-by: Andrey Konovalov <adech.fo@gmail.com> Cc: Yuri Gribov <tetra2005@gmail.com> Cc: Konstantin Khlebnikov <koct9i@gmail.com> Cc: Sasha Levin <sasha.levin@oracle.com> Cc: Christoph Lameter <cl@linux.com> Cc: Joonsoo Kim <iamjoonsoo.kim@lge.com> Cc: Dave Hansen <dave.hansen@intel.com> Cc: Andi Kleen <andi@firstfloor.org> Cc: Ingo Molnar <mingo@elte.hu> Cc: Thomas Gleixner <tglx@linutronix.de> Cc: "H. Peter Anvin" <hpa@zytor.com> Cc: Christoph Lameter <cl@linux.com> Cc: Pekka Enberg <penberg@kernel.org> Cc: David Rientjes <rientjes@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>	2015-02-13 21:21:42 -08:00
Rusty Russell	d5db139ab3	module: make module_refcount() a signed integer. ... James Bottomley points out that it will be -1 during unload. It's only used for diagnostics, so let's not hide that as it could be a clue as to what's gone wrong. Cc: Jason Wessel <jason.wessel@windriver.com> Acked-and-documention-added-by: James Bottomley <James.Bottomley@HansenPartnership.com> Reviewed-by: Masami Hiramatsu <maasami.hiramatsu.pt@hitachi.com> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>	2015-01-22 11:15:54 +10:30
Masami Hiramatsu	2f35c41f58	module: Replace module_ref with atomic_t refcnt ... Replace module_ref per-cpu complex reference counter with an atomic_t simple refcnt. This is for code simplification. Signed-off-by: Masami Hiramatsu <masami.hiramatsu.pt@hitachi.com> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>	2014-11-11 17:07:46 +10:30
Petr Mladek	76681c8faa	module: return bool from within_module*() ... The within_module*() functions return only true or false. Let's use bool as the return type. Note that it should not change kABI because these are inline functions. Signed-off-by: Petr Mladek <pmladek@suse.cz> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>	2014-07-27 20:52:44 +09:30
Petr Mladek	9b20a352d7	module: add within_module() function ... It is just a small optimization that allows to replace few occurrences of within_module_init() || within_module_core() with a single call. Signed-off-by: Petr Mladek <pmladek@suse.cz> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>	2014-07-27 20:52:43 +09:30
Linus Torvalds	6f4c98e1c2	Merge tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux ... Pull module updates from Rusty Russell: "Nothing major: the stricter permissions checking for sysfs broke a staging driver; fix included. Greg KH said he'd take the patch but hadn't as the merge window opened, so it's included here to avoid breaking build" * tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux: staging: fix up speakup kobject mode Use 'E' instead of 'X' for unsigned module taint flag. VERIFY_OCTAL_PERMISSIONS: stricter checking for sysfs perms. kallsyms: fix percpu vars on x86-64 with relocation. kallsyms: generalize address range checking module: LLVMLinux: Remove unused function warning from __param_check macro Fix: module signature vs tracepoints: add new TAINT_UNSIGNED_MODULE module: remove MODULE_GENERIC_TABLE module: allow multiple calls to MODULE_DEVICE_TABLE() per module module: use pr_cont	2014-04-06 09:38:07 -07:00
Rusty Russell	cff26a51da	module: remove MODULE_GENERIC_TABLE ... MODULE_DEVICE_TABLE() calles MODULE_GENERIC_TABLE(); make it do the work directly. This also removes a wart introduced in the last patch, where the alias is defined to be an unknown struct type "struct type##__##name##_device_id" instead of "struct type##_device_id" (it's an extern so GCC doesn't care, but it's wrong). The other user of MODULE_GENERIC_TABLE (ISAPNP_CARD_TABLE) is unused, so delete it. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>	2014-03-13 12:11:00 +10:30
Tom Gundersen	21bdd17b21	module: allow multiple calls to MODULE_DEVICE_TABLE() per module ... Commit 78551277e4: "Input: i8042 - add PNP modaliases" had a bug, where the second call to MODULE_DEVICE_TABLE() overrode the first resulting in not all the modaliases being exposed. This fixes the problem by including the name of the device_id table in the __mod_*_device_table alias, allowing us to export several device_id tables per module. Suggested-by: Kay Sievers <kay@vrfy.org> Acked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Cc: Dmitry Torokhov <dmitry.torokhov@gmail.com> Signed-off-by: Tom Gundersen <teg@jklm.no> Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>	2014-03-13 12:11:00 +10:30
Steven Rostedt (Red Hat)	b2e285fcb4	tracing/module: Replace include of tracepoint.h with jump_label.h in module.h ... There's nothing in the module.h header that requires tracepoint.h to be included, and there may be cases that tracepoint.h may need to include module.h, which will cause recursive header issues. But module.h requires seeing HAVE_JUMP_LABEL which is set in jump_label.h which it just coincidentally gets from tracepoint.h. Link: http://lkml.kernel.org/r/20140307084712.5c68641a@gandalf.local.home Acked-by: Rusty Russell <rusty@rustcorp.com.au> Signed-off-by: Steven Rostedt <rostedt@goodmis.org>	2014-03-07 10:06:09 -05:00