667 Commits

Author	SHA1	Message	Date
Michael Bestas	87cf1c2fc1	Merge remote-tracking branch 'common/android-4.9-q' into android-msm-pixel-4.9 ... * common/android-4.9-q: Linux 4.9.321 swiotlb: skip swiotlb_bounce when orig_addr is zero kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add] fdt: Update CRC check for rng-seed xen: unexport __init-annotated xen_xlate_map_ballooned_pages() drm: remove drm_fb_helper_modinit powerpc/pseries: wire up rng during setup_arch() modpost: fix section mismatch check for exported init/exit sections ARM: cns3xxx: Fix refcount leak in cns3xxx_init ARM: Fix refcount leak in axxia_boot_secondary ARM: exynos: Fix refcount leak in exynos_map_pmu ARM: dts: imx6qdl: correct PU regulator ramp delay powerpc: Enable execve syscall exit tracepoint xtensa: Fix refcount leak bug in time.c xtensa: xtfpga: Fix refcount leak bug in setup iio: trigger: sysfs: fix use-after-free on remove iio: accel: mma8452: ignore the return value of reset operation iio:accel:bma180: rearrange iio trigger get and register usb: chipidea: udc: check request status before setting device address iio: adc: vf610: fix conversion mode sysfs node name igb: Make DMA faster when CPU is active on the PCIe link MIPS: Remove repetitive increase irq_err_count x86/xen: Remove undefined behavior in setup_features() bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers USB: serial: option: add Telit LE910Cx 0x1250 composition random: quiet urandom warning ratelimit suppression message dm era: commit metadata in postsuspend after worker stops ata: libata: add qc->flags in ata_qc_complete_template tracepoint random: schedule mix_interrupt_randomness() less often vt: drop old FONT ioctls BACKPORT: l2tp: fix race in pppol2tp_release with session object destroy BACKPORT: l2tp: don't use inet_shutdown on ppp session destroy Linux 4.9.320 tcp: drop the hash_32() part from the index calculation tcp: increase source port perturb table to 2^16 tcp: dynamically allocate the perturb table used by source ports tcp: add small random increments to the source port tcp: use different parts of the port_offset for index and offset secure_seq: use the 64 bits of the siphash for port offset calculation tcp: add some entropy in __inet_hash_connect() tcp: change source port randomizarion at connect() time fuse: fix pipe buffer lifetime for direct_io Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" swiotlb: fix info leak with DMA_FROM_DEVICE xprtrdma: fix incorrect header size calculations s390/mm: use non-quiescing sske for KVM switch to keyed guest l2tp: fix race in pppol2tp_release with session object destroy l2tp: don't use inet_shutdown on ppp session destroy ext4: add reserved GDT blocks check ext4: make variable "count" signed ext4: fix bug_on ext4_mb_use_inode_pa serial: 8250: Store to lsr_save_flags after lsr read usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe USB: serial: io_ti: add Agilent E5805A support USB: serial: option: add support for Cinterion MV31 with new baseline comedi: vmk80xx: fix expression for tx buffer size irqchip/gic-v3: Iterate over possible CPUs by for_each_possible_cpu() irqchip/gic/realview: Fix refcount leak in realview_gic_of_init misc: atmel-ssc: Fix IRQ check in ssc_probe pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE random: credit cpu and bootloader seeds by default net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology scsi: vmw_pvscsi: Expand vcpuHint to 16 bits ASoC: wm8962: Fix suspend while playing music ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() ASoC: cs42l56: Correct typo in minimum level for SX volume controls ASoC: cs42l52: Correct TLV for Bypass Volume ASoC: cs53l30: Correct number of volume levels on SX controls ASoC: cs42l52: Fix TLV scales for mixer controls random: account for arch randomness in bits random: mark bootloader randomness code as __init random: avoid checking crng_ready() twice in random_init() crypto: drbg - make reseeding from get_random_bytes() synchronous crypto: drbg - always try to free Jitter RNG instance crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() crypto: drbg - prepare for more fine-grained tracking of seeding state crypto: drbg - always seeded with SP800-90B compliant noise source crypto: drbg - add FIPS 140-2 CTRNG for noise source Revert "random: use static branch for crng_ready()" random: check for signals after page of pool writes random: wire up fops->splice_{read,write}_iter() random: convert to using fops->write_iter() random: move randomize_page() into mm where it belongs random: move initialization functions out of hot pages random: use proper return types on get_random_{int,long}_wait() random: remove extern from functions in header random: use static branch for crng_ready() random: credit architectural init the exact amount random: handle latent entropy and command line from random_init() random: use proper jiffies comparison macro random: remove ratelimiting for in-kernel unseeded randomness random: avoid initializing twice in credit race random: use symbolic constants for crng_init states siphash: use one source of truth for siphash permutations random: help compiler out with fast_mix() by using simpler arguments random: do not use input pool from hard IRQs random: order timer entropy functions below interrupt functions random: do not pretend to handle premature next security model random: do not use batches when !crng_ready() random: insist on random_get_entropy() existing in order to simplify uapi: rename ext2_swab() to swab() and share globally in swab.h xtensa: use fallback for random_get_entropy() instead of zero sparc: use fallback for random_get_entropy() instead of zero um: use fallback for random_get_entropy() instead of zero x86/tsc: Use fallback for random_get_entropy() instead of zero nios2: use fallback for random_get_entropy() instead of zero arm: use fallback for random_get_entropy() instead of zero mips: use fallback for random_get_entropy() instead of just c0 random m68k: use fallback for random_get_entropy() instead of zero timekeeping: Add raw clock fallback for random_get_entropy() powerpc: define get_cycles macro for arch-override alpha: define get_cycles macro for arch-override parisc: define get_cycles macro for arch-override s390: define get_cycles macro for arch-override ia64: define get_cycles macro for arch-override init: call time_init() before rand_initialize() random: fix sysctl documentation nits random: document crng_fast_key_erasure() destination possibility random: make random_get_entropy() return an unsigned long random: check for signals every PAGE_SIZE chunk of /dev/[u]random random: check for signal_pending() outside of need_resched() check random: do not allow user to keep crng key around on stack random: do not split fast init input in add_hwgenerator_randomness() random: mix build-time latent entropy into pool at init random: re-add removed comment about get_random_{u32,u64} reseeding random: treat bootloader trust toggle the same way as cpu trust toggle random: skip fast_init if hwrng provides large chunk of entropy random: check for signal and try earlier when generating entropy random: reseed more often immediately after booting random: make consistent usage of crng_ready() random: use SipHash as interrupt entropy accumulator random: replace custom notifier chain with standard one random: don't let 644 read-only sysctls be written to random: give sysctl_random_min_urandom_seed a more sensible value random: do crng pre-init loading in worker rather than irq random: unify cycles_t and jiffies usage and types random: cleanup UUID handling random: only wake up writers after zap if threshold was passed random: round-robin registers as ulong, not u32 random: clear fast pool, crng, and batches in cpuhp bring up random: pull add_hwgenerator_randomness() declaration into random.h hwrng: remember rng chosen by user hwrng: use rng source with best quality hwrng: core - remove unused PFX macro hwrng: core - Move hwrng miscdev minor number to include/linux/miscdevice.h hwrng: core - Rewrite the header hwrng: core - rewrite better comparison to NULL hwrng: core - do not use multiple blank lines random: check for crng_init == 0 in add_device_randomness() random: unify early init crng load accounting random: do not take pool spinlock at boot random: defer fast pool mixing to worker workqueue: make workqueue available early during boot random: rewrite header introductory comment random: group sysctl functions random: group userspace read/write functions random: group entropy collection functions random: group entropy extraction functions random: group initialization wait functions random: remove whitespace and reorder includes random: remove useless header comment random: introduce drain_entropy() helper to declutter crng_reseed() random: deobfuscate irq u32/u64 contributions random: add proper SPDX header random: remove unused tracepoints random: remove ifdef'd out interrupt bench random: tie batched entropy generation to base_crng generation random: zero buffer after reading entropy from userspace random: remove outdated INT_MAX >> 6 check in urandom_read() random: use hash function for crng_slow_load() random: absorb fast pool into input pool after fast load random: do not xor RDRAND when writing into /dev/random random: ensure early RDSEED goes through mixer on init random: inline leaves of rand_initialize() random: use RDSEED instead of RDRAND in entropy extraction random: fix locking in crng_fast_load() random: remove batched entropy locking random: remove use_input_pool parameter from crng_reseed() random: make credit_entropy_bits() always safe random: always wake up entropy writers after extraction random: use linear min-entropy accumulation crediting random: simplify entropy debiting random: use computational hash for entropy extraction random: only call crng_finalize_init() for primary_crng random: access primary_pool directly rather than through pointer random: continually use hwgenerator randomness random: simplify arithmetic function flow in account() random: access input_pool_data directly rather than through pointer random: cleanup fractional entropy shift constants random: prepend remaining pool constants with POOL_ random: de-duplicate INPUT_POOL constants random: remove unused OUTPUT_POOL constants random: rather than entropy_store abstraction, use global random: try to actively add entropy rather than passively wait for it random: remove unused extract_entropy() reserved argument random: remove incomplete last_data logic random: cleanup integer types crypto: chacha20 - Fix chacha20_block() keystream alignment (again) random: cleanup poolinfo abstraction random: fix typo in comments random: don't reset crng_init_cnt on urandom_read() random: avoid superfluous call to RDRAND in CRNG extraction random: early initialization of ChaCha constants random: initialize ChaCha20 constants with correct endianness random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs random: harmonize "crng init done" messages random: mix bootloader randomness into pool random: do not re-init if crng_reseed completes before primary init random: do not sign extend bytes for rotation when mixing random: use BLAKE2s instead of SHA1 in extraction random: remove unused irq_flags argument from add_interrupt_randomness() random: document add_hwgenerator_randomness() with other input functions crypto: blake2s - adjust include guard naming crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h> MAINTAINERS: co-maintain random.c random: remove dead code left over from blocking pool random: avoid arch_get_random_seed_long() when collecting IRQ randomness random: add arch_get_random_*long_early() powerpc: Use bool in archrandom.h linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check linux/random.h: Use false with bool linux/random.h: Remove arch_has_random, arch_has_random_seed powerpc: Remove arch_has_random, arch_has_random_seed x86: Remove arch_has_random, arch_has_random_seed random: avoid warnings for !CONFIG_NUMA builds random: split primary/secondary crng init paths random: remove some dead code of poolinfo random: fix typo in add_timer_randomness() random: Add and use pr_fmt() random: convert to ENTROPY_BITS for better code readability random: remove unnecessary unlikely() random: remove kernel.random.read_wakeup_threshold random: delete code to pull data into pools random: remove the blocking pool random: fix crash on multiple early calls to add_bootloader_randomness() random: make /dev/random be almost like /dev/urandom random: ignore GRND_RANDOM in getentropy(2) random: add GRND_INSECURE to return best-effort non-cryptographic bytes random: Add a urandom_read_nowait() for random APIs that don't warn random: Don't wake crng_init_wait when crng_init == 1 lib/crypto: sha1: re-roll loops to reduce code size lib/crypto: blake2s: move hmac construction into wireguard crypto: blake2s - generic C library implementation and selftest crypto: Deduplicate le32_to_cpu_array() and cpu_to_le32_array() Revert "hwrng: core - Freeze khwrng thread during suspend" char/random: Add a newline at the end of the file random: Use wait_event_freezable() in add_hwgenerator_randomness() fdt: add support for rng-seed random: Support freezable kthreads in add_hwgenerator_randomness() random: fix soft lockup when trying to read from an uninitialized blocking pool latent_entropy: avoid build error when plugin cflags are not set random: document get_random_int() family random: move rand_initialize() earlier random: only read from /dev/random after its pool has received 128 bits drivers/char/random.c: make primary_crng static drivers/char/random.c: remove unused stuct poolinfo::poolbits drivers/char/random.c: constify poolinfo_table random: make CPU trust a boot parameter random: Make crng state queryable random: remove preempt disabled region random: add a config option to trust the CPU's hwrng random: Return nbytes filled from hw RNG random: Fix whitespace pre random-bytes work drivers/char/random.c: remove unused dont_count_entropy random: optimize add_interrupt_randomness random: always fill buffer in get_random_bytes_wait crypto: chacha20 - Fix keystream alignment for chacha20_block() random: fix data race on crng_node_pool random: always use batched entropy for get_random_u{32,64} Revert "char/random: silence a lockdep splat with printk()" char/random: silence a lockdep splat with printk() random: add a spinlock_t to struct batched_entropy random: rate limit unseeded randomness warnings random: fix possible sleeping allocation from irq context random: set up the NUMA crng instances after the CRNG is fully initialized random: use a different mixing algorithm for add_device_randomness() random: fix warning message on ia64 and parisc random: reorder READ_ONCE() in get_random_uXX random: suppress spammy warnings about unseeded randomness random: do not ignore early device randomness random: warn when kernel uses unseeded randomness random: add get_random_{bytes,u32,u64,int,long,once}_wait family random: add wait_for_random_bytes() API random: silence compiler warnings and fix race random: invalidate batched entropy after crng init random: move random_min_urandom_seed into CONFIG_SYSCTL ifdef block random: convert get_random_int/long into get_random_u32/u64 random: fix comment for unused random_min_urandom_seed random: remove variable limit random: remove stale urandom_init_wait random: remove stale maybe_reseed_primary_crng 9p: missing chunk of "fs/9p: Don't update file type when updating file attributes" Linux 4.9.319 x86/speculation/mmio: Print SMT warning KVM: x86/speculation: Disable Fill buffer clear within guests x86/speculation/mmio: Reuse SRBDS mitigation for SBDS x86/speculation/srbds: Update SRBDS mitigation selection x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data x86/speculation/mmio: Enable CPU Fill buffer clearing on idle x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data x86/speculation: Add a common function for MD_CLEAR mitigation update x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug Documentation: Add documentation for Processor MMIO Stale Data x86/cpu: Add another Alder Lake CPU to the Intel family x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family x86/cpu: Add Comet Lake to the Intel CPU models header x86/CPU: Add more Icelake model numbers x86/CPU: Add Icelake model number x86/cpu: Add Cannonlake to Intel family x86/cpu: Add Jasper Lake to Intel family cpu/speculation: Add prototype for cpu_show_srbds() x86/cpu: Add Elkhart Lake to Intel family ANDROID: arch: fix backported syscall numbers Linux 4.9.318 tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd PCI: qcom: Fix unbalanced PHY init on probe errors mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write powerpc/32: Fix overread/overwrite of thread_struct via ptrace Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files cifs: return errors during session setup during reconnects ALSA: hda/conexant - Fix loopback issue with CX20632 vringh: Fix loop descriptors check in the indirect cases nodemask: Fix return values to be unsigned modpost: fix undefined behavior of is_arm_mapping_symbol() drm/radeon: fix a possible null pointer dereference Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" md: protect md_unregister_thread from reentrancy serial: msm_serial: disable interrupts in __msm_console_write() staging: rtl8712: fix uninit-value in r871xu_drv_init() clocksource/drivers/sp804: Avoid error on multiple instances misc: rtsx: set NULL intfdata when probe fails usb: dwc2: gadget: don't reset gadget's driver->bus USB: hcd-pci: Fully suspend across freeze/thaw cycle drivers: usb: host: Fix deadlock in oxu_bus_suspend() drivers: tty: serial: Fix deadlock in sa1100_set_termios() USB: host: isp116x: check return value after calling platform_get_resource() drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() tty: Fix a possible resource leak in icom_probe tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() lkdtm/usercopy: Expand size of "out of frame" object iio: dummy: iio_simple_dummy: check the return value of kstrdup() net: altera: Fix refcount leak in altera_tse_mdio_create net: xfrm: unexport __init-annotated xfrm4_protocol_init() SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe net: fix nla_strcmp to handle more then one trailing null character video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() m68knommu: fix undefined reference to `_init_sp' m68knommu: set ZERO_PAGE() to the allocated zeroed page i2c: cadence: Increase timeout per message if necessary tracing: Avoid adding tracer option before update_tracer_options tcp: tcp_rtx_synack() can be called from process context jffs2: fix memory leak in jffs2_do_fill_super modpost: fix removing numeric suffixes net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 serial: sh-sci: Don't allow CS5-6 serial: txx9: Don't allow CS5-6 serial: digicolor-usart: Don't allow CS5-6 serial: meson: acquire port->lock in startup() rtc: mt6397: check return value after calling platform_get_resource() rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value pwm: lp3943: Fix duty calculation in case period was clamped USB: storage: karma: fix rio_karma_init return usb: usbip: add missing device lock on tweak configuration cmd usb: usbip: fix a refcount leak in stub_probe() staging: greybus: codecs: fix type confusion of list iterator variable pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards netfilter: nf_tables: disallow non-stateful expression in sets earlier MIPS: IP27: Remove incorrect `cpu_has_fpu' override RDMA/rxe: Generate a completion for unsupported/invalid opcode dt-bindings: gpio: altera: correct interrupt-cells docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 gma500: fix an incorrect NULL check on list iterator carl9170: tx: fix an incorrect use of list iterator ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control rtl818x: Prevent using not initialized queues hugetlb: fix huge_pmd_unshare address update nodemask.h: fix compilation error with GCC12 iommu/msm: Fix an incorrect NULL check on list iterator um: Fix out-of-bounds read in LDT setup um: chan_user: Fix winch_tramp() return value mac80211: upgrade passive scan to active scan on DFS channels after beacon rx irqchip: irq-xtensa-mx: fix initial IRQ affinity irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x RDMA/hfi1: Fix potential integer multiplication overflow errors md: fix an incorrect NULL check in md_reload_sb md: fix an incorrect NULL check in does_sb_need_changing drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled scsi: dc395x: Fix a missing check on list iterator ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock dlm: fix missing lkb refcount handling dlm: fix plock invalid read ext4: verify dir block before splitting it ext4: fix bug_on in ext4_writepages ext4: fix use-after-free in ext4_rename_dir_prepare fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages iwlwifi: mvm: fix assert 1F04 upon reconfig wifi: mac80211: fix use-after-free in chanctx code iommu/amd: Increase timeout waiting for GA log enablement video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup Input: sparcspkr - fix refcount leak in bbc_beep_probe tty: fix deadlock caused by calling printk() under tty_port->lock powerpc/4xx/cpm: Fix return value of __setup() handler powerpc/idle: Fix return value of __setup() handler powerpc/8xx: export 'cpm_setbrg' for modules drivers/base/node.c: fix compaction sysfs file leak scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac() mfd: ipaq-micro: Fix error check return value of platform_get_irq() soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc rxrpc: Don't try to resend the request if we're receiving the reply rxrpc: Fix listen() setting the bar too high for the prealloc rings ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() sctp: read sk->sk_bound_dev_if once in sctp_rcv() m68k: math-emu: Fix dependencies of math emulation support Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init media: exynos4-is: Change clk_disable to clk_disable_unprepare regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe media: uvcvideo: Fix missing check to determine if element is found in list drm/msm: return an error pointer in msm_gem_prime_get_sg_table() x86/mm: Cleanup the control_va_addr_alignment() __setup handler drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() drm/msm/hdmi: check return value after calling platform_get_resource_byname() drm/msm/dsi: fix error checks and return values for DSI xmit functions x86/pm: Fix false positive kmemleak report in msr_build_context() inotify: show inotify mask flags in proc fdinfo ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix spi: img-spfi: Fix pm_runtime_get_sync() error checking HID: hid-led: fix maximum brightness for Dream Cheeky NFC: NULL out the dev->rfkill to prevent UAF spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout drm/mediatek: Fix mtk_cec_mask() x86/delay: Fix the wrong asm constraint in delay_loop() ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe drm: fix EDID struct for old ARM OABI format macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled powerpc/xics: fix refcount leak in icp_opal_init() PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() ARM: hisi: Add missing of_node_put after of_find_compatible_node ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM ARM: versatile: Add missing of_node_put in dcscb_init fat: add ratelimit to fat*_ent_bread() ARM: OMAP1: clock: Fix UART rate reporting algorithm fs: jfs: fix possible NULL pointer dereference in dbFree() eth: tg3: silence the GCC 12 array-bounds warning rxrpc: Return an error to sendmsg if call failed media: exynos4-is: Fix compile warning ASoC: rt5645: Fix errorenous cleanup order nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags openrisc: start CPU timer early in boot ipmi:ssif: Check for NULL msg when handling events and messages dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC ASoC: dapm: Don't fold register value changes into notifications ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL drm/amd/pm: fix the compile warning scsi: megaraid: Fix error check return value of register_chrdev() media: cx25821: Fix the warning when removing the module ath9k: fix QCA9561 PA bias level drm/amd/pm: fix double free in si_parse_power_table() ALSA: jack: Access input_dev under mutex ACPICA: Avoid cache flush inside virtual machines ipw2x00: Fix potential NULL dereference in libipw_xmit() b43: Fix assigning negative value to unsigned variable b43legacy: Fix assigning negative value to unsigned variable mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes btrfs: add "0x" prefix for unsupported optional features ptrace: Reimplement PTRACE_KILL by always sending SIGKILL ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP USB: new quirk for Dell Gen 2 devices BACKPORT: psi: Fix uaf issue when psi trigger is destroyed while being polled Conflicts: drivers/char/Kconfig drivers/char/random.c fs/fat/fatent.c include/linux/random.h init/main.c kernel/cpu.c lib/Makefile Change-Id: I06579fa22a0347a0d8d2fa32bd6b7b6b54db626f	2022-08-09 06:05:50 +03:00
Tokunori Ikegami	6630c79930	mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N ... commit 0a8e98305f63deaf0a799d5cf5532cc83af035d1 upstream. Since commit dfeae1073583("mtd: cfi_cmdset_0002: Change write buffer to check correct value") buffered writes fail on S29GL064N. This is because, on S29GL064N, reads return 0xFF at the end of DQ polling for write completion, where as, chip_good() check expects actual data written to the last location to be returned post DQ polling completion. Fix is to revert to using chip_good() for S29GL064N which only checks for DQ lines to settle down to determine write completion. Link: https://lore.kernel.org/r/b687c259-6413-26c9-d4c9-b3afa69ea124@pengutronix.de/ Fixes: dfeae1073583("mtd: cfi_cmdset_0002: Change write buffer to check correct value") Cc: stable@vger.kernel.org Signed-off-by: Tokunori Ikegami <ikegami.t@gmail.com> Acked-by: Vignesh Raghavendra <vigneshr@ti.com> Signed-off-by: Miquel Raynal <miquel.raynal@bootlin.com> Link: https://lore.kernel.org/linux-mtd/20220323170458.5608-3-ikegami.t@gmail.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-06-14 16:52:41 +02:00
lucaswei	f09d91fe02	Merge android-4.9-q (4.9.248) into android-msm-pixel-4.9-lts ... Merge 4.9.248 into android-4.9-q Linux 4.9.248 x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes Input: i8042 - fix error return code in i8042_setup_aux() i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() gfs2: check for empty rgrp tree in gfs2_ri_update * tracing: Fix userstacktrace option for instances kernel/trace/trace.c kernel/trace/trace.h spi: bcm2835: Release the DMA channel if probe fails after dma_init spi: bcm2835: Fix use-after-free on unbind spi: bcm-qspi: Fix use-after-free on unbind * spi: Introduce device-managed SPI controller allocation drivers/spi/spi.c include/linux/spi/spi.h iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs i2c: imx: Check for I2SR_IAL after every byte i2c: imx: Fix reset of I2SR_IAL flag cifs: fix potential use-after-free in cifs_echo_request() ftrace: Fix updating FTRACE_FL_TRAMP * tty: Fix ->session locking drivers/tty/tty_io.c include/linux/tty.h ALSA: hda/generic: Add option to enforce preferred_dacs pairs ALSA: hda/realtek - Add new codec supported for ALC897 * tty: Fix ->pgrp locking in tiocspgrp() drivers/tty/tty_io.c USB: serial: option: add support for Thales Cinterion EXS82 USB: serial: option: add Fibocom NL668 variants USB: serial: ch341: sort device-id entries USB: serial: ch341: add new Product ID for CH341A USB: serial: kl5kusb105: fix memleak on open * usb: gadget: f_fs: Use local copy of descriptors for userspace copy drivers/usb/gadget/function/f_fs.c * vlan: consolidate VLAN parsing code and limit max parsing depth include/linux/if_vlan.h include/net/inet_ecn.h pinctrl: baytrail: Fix pin being driven low for a while on gpiod_get(..., GPIOD_OUT_HIGH) pinctrl: baytrail: Replace WARN with dev_info_once when setting direct-irq pin to output btrfs: sysfs: init devices outside of the chunk_mutex RDMA/i40iw: Address an mmap handler exploit in i40iw * spi: Fix controller unregister order harder drivers/spi/spi.c Input: i8042 - add ByteSpeed touchpad to noloop table * Input: xpad - support Ardwiino Controllers drivers/input/joystick/xpad.c dt-bindings: net: correct interrupt flags in examples net/mlx5: Fix wrong address reclaim when command interface is down net: pasemi: fix error return code in pasemi_mac_open() cxgb3: fix error return code in t3_sge_alloc_qset() net/x25: prevent a couple of overflows ibmvnic: Fix TX completion error handling ibmvnic: Ensure that SCRQ entry reads are correctly ordered netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal * bonding: wait for sysfs kobject destruction before freeing struct slave drivers/net/bonding/bond_main.c drivers/net/bonding/bond_sysfs_slave.c include/net/bonding.h usbnet: ipheth: fix connectivity with iOS 14 rose: Fix Null pointer dereference in rose_send_frame() net/af_iucv: set correct sk_protocol for child sockets ANDROID: cuttlefish_defconfig: Disable CONFIG_KSM Merge 4.9.247 into android-4.9-q Linux 4.9.247 * USB: core: Fix regression in Hercules audio card drivers/usb/core/quirks.c * USB: core: add endpoint-blacklist quirk drivers/usb/core/config.c drivers/usb/core/quirks.c drivers/usb/core/usb.h include/linux/usb/quirks.h * regulator: workaround self-referent regulators drivers/regulator/core.c * regulator: avoid resolve_supply() infinite recursion drivers/regulator/core.c x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb usb: gadget: Fix memleak in gadgetfs_fill_super * usb: gadget: f_midi: Fix memleak in f_midi_alloc drivers/usb/gadget/function/f_midi.c * USB: core: Change %pK for __user pointers to %px drivers/usb/core/devio.c perf probe: Fix to die_entrypc() returns error correctly platform/x86: toshiba_acpi: Fix the wrong variable assignment can: gs_usb: fix endianess problem with candleLight firmware efivarfs: revert "fix memory leak in efivarfs_create()" ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq net: ena: set initial DMA width to avoid intel iommu issue nfc: s3fwrn5: use signed integer for parsing GPIO numbers IB/mthca: fix return value of error branch in mthca_init_cq() bnxt_en: Release PCI regions when DMA mask setup fails during probe. video: hyperv_fb: Fix the cache type when mapping the VRAM bnxt_en: fix error return code in bnxt_init_board() * scsi: ufs: Fix race between shutdown and runtime resume flow drivers/scsi/ufs/ufshcd.c batman-adv: set .owner to THIS_MODULE phy: tegra: xusb: Fix dangling pointer on probe failure perf/x86: fix sysfs type mismatches scsi: target: iscsi: Fix cmd abort fabric stop race scsi: libiscsi: Fix NOP race condition dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size * proc: don't allow async path resolution of /proc/self components fs/proc/self.c x86/xen: don't unbind uninitialized lock_kicker_irq dmaengine: xilinx_dma: use readl_poll_timeout_atomic variant HID: hid-sensor-hub: Fix issue with devices with no report ID Input: i8042 - allow insmod to succeed on devices without an i8042 controller * HID: cypress: Support Varmilo Keyboards' media hotkeys drivers/hid/hid-ids.h ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close ALSA: hda/hdmi: Use single mutex unlock in error paths * arm64: pgtable: Fix pte_accessible() arch/arm64/include/asm/pgtable.h btrfs: inode: Verify inode mode to avoid NULL pointer dereference btrfs: tree-checker: Enhance chunk checker to validate chunk profile * PCI: Add device even if driver attach failed drivers/pci/bus.c btrfs: fix lockdep splat when reading qgroup config on mount mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() perf event: Check ref_reloc_sym before using it * BACKPORT: arm64: SW PAN: Point saved ttbr0 at the zero page when switching to init_mm arch/arm64/include/asm/efi.h arch/arm64/include/asm/mmu_context.h Merge 4.9.246 into android-4.9-q Linux 4.9.246 x86/microcode/intel: Check patch signature before saving microcode for early loading s390/cpum_sf.c: fix file permission for cpum_sfb_size mac80211: free sta in sta_info_insert_finish() on errors mac80211: minstrel: fix tx status processing corner case mac80211: minstrel: remove deferred sampling code xtensa: disable preemption around cache alias management calls * regulator: fix memory leak with repeated set_machine_constraints() drivers/regulator/core.c iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum * ext4: fix bogus warning in ext4_update_dx_flag() fs/ext4/ext4.h efivarfs: fix memory leak in efivarfs_create() tty: serial: imx: keep console clocks always on ALSA: mixart: Fix mutex deadlock * ALSA: ctl: fix error path at adding user-defined element set sound/core/control.c powerpc/uaccess-flush: fix missing includes in kup-radix.h * libfs: fix error cast of negative value in simple_attr_write() fs/libfs.c xfs: revert "xfs: fix rmap key and record comparison functions" regulator: ti-abb: Fix array out of bound read access on the first transition MIPS: Alchemy: Fix memleak in alchemy_clk_setup_cpu can: m_can: m_can_handle_state_change(): fix state change can: peak_usb: fix potential integer overflow on shift of a int can: dev: can_restart(): post buffer from the right context perf lock: Don't free "lock_seq_stat" if read_count isn't zero ARM: dts: imx50-evk: Fix the chip select 1 IOMUX arm: dts: imx6qdl-udoo: fix rgmii phy-mode for ksz9031 phy MIPS: export has_transparent_hugepage() for modules Input: adxl34x - clean up a data type in adxl34x_probe() * vfs: remove lockdep bogosity in __sb_start_write fs/super.c * arm64: psci: Avoid printing in cpu_psci_cpu_die() arch/arm64/kernel/psci.c pinctrl: rockchip: enable gpio pclk for rockchip_gpio_to_irq mlxsw: core: Use variable timeout for EMAD retries net: ftgmac100: Fix crash when removing driver tcp: only postpone PROBE_RTT if RTT is < current min_rtt estimate net: usb: qmi_wwan: Set DTR quirk for MR400 sctp: change to hold/put transport for proto_unreach_timer qlcnic: fix error return code in qlcnic_83xx_restart_hw() net: x25: Increase refcnt of "struct x25_neigh" in x25_rx_call_request net/mlx4_core: Fix init_hca fields offset * netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist() net/netlabel/netlabel_unlabeled.c * netlabel: fix our progress tracking in netlbl_unlabel_staticlist() net/netlabel/netlabel_unlabeled.c net: Have netpoll bring-up DSA management interface * net: bridge: add missing counters to ndo_get_stats64 callback net/bridge/br_device.c net: b44: fix error return code in b44_init_one() * inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill() net/ipv4/inet_diag.c devlink: Add missing genlmsg_cancel() in devlink_nl_sb_port_pool_fill() bnxt_en: read EEPROM A2h address using page 0 atm: nicstar: Unmap DMA on send error * ah6: fix error return code in ah6_input() net/ipv6/ah6.c Merge 4.9.245 into android-4.9-q Linux 4.9.245 ACPI: GED: fix -Wformat KVM: x86: clflushopt should be treated as a no-op by emulation mac80211: always wind down STA state Input: sunkbd - avoid use-after-free in teardown paths powerpc/8xx: Always fault when _PAGE_ACCESSED is not set i2c: mux: pca954x: Add missing pca9546 definition to chip_desc i2c: imx: Fix external abort on interrupt in exit paths i2c: imx: use clk notifier for rate changes powerpc/64s: flush L1D after user accesses powerpc/uaccess: Evaluate macro arguments once, before user access is allowed powerpc: Fix __clear_user() with KUAP enabled powerpc: Implement user_access_begin and friends powerpc: Add a framework for user access tracking powerpc/64s: flush L1D on kernel entry powerpc/64s: move some exception handlers out of line powerpc/64s: Define MASKABLE_RELON_EXCEPTION_PSERIES_OOL Linux 4.9.244 Convert trailing spaces and periods in path components * ext4: fix leaking sysfs kobject after failed mount fs/ext4/super.c * reboot: fix overflow parsing reboot cpu number kernel/reboot.c * Revert "kernel/reboot.c: convert simple_strtoul to kstrtoint" kernel/reboot.c * perf/core: Fix race in the perf_mmap_close() function kernel/events/core.c xen/events: block rogue events for some time xen/events: defer eoi in case of excessive number of events xen/events: use a common cpu hotplug hook for event channels xen/events: switch user event channels to lateeoi model xen/pciback: use lateeoi irq binding xen/scsiback: use lateeoi irq binding xen/netback: use lateeoi irq binding xen/blkback: use lateeoi irq binding xen/events: add a new "late EOI" evtchn framework xen/events: fix race in evtchn_fifo_unmask() xen/events: add a proper barrier to 2-level uevent unmasking xen/events: avoid removing an event channel while handling it * perf/core: Fix a memory leak in perf_event_parse_addr_filter() kernel/events/core.c * perf/core: Fix crash when using HW tracing kernel filters kernel/events/core.c * perf/core: Fix bad use of igrab() include/linux/perf_event.h kernel/events/core.c x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP * random32: make prandom_u32() output unpredictable drivers/char/random.c include/linux/prandom.h kernel/time/timer.c lib/random32.c net: Update window_clamp if SOCK_RCVBUF is set net/x25: Fix null-ptr-deref in x25_connect net/af_iucv: fix null pointer dereference on shutdown * IPv6: Set SIT tunnel hard_header_len to zero net/ipv6/sit.c * swiotlb: fix "x86: Don't panic if can not alloc buffer for swiotlb" lib/swiotlb.c pinctrl: amd: fix incorrect way to disable debounce filter pinctrl: amd: use higher precision for 512 RtcClk drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[] * don't dump the threads that had been already exiting when zapped. kernel/exit.c ocfs2: initialize ip_next_orphan mei: protect mei_cl_mtu from null dereference usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode * ext4: unlock xattr_sem properly in ext4_inline_data_truncate() fs/ext4/inline.c * ext4: correctly report "not supported" for {usr,grp}jquota when !CONFIG_QUOTA fs/ext4/super.c * perf: Fix get_recursion_context() kernel/events/internal.h cosa: Add missing kfree in error path of cosa_write * of/address: Fix of_node memory leak in of_dma_is_coherent drivers/of/address.c xfs: fix a missing unlock on error in xfs_fs_map_blocks xfs: fix rmap key and record comparison functions xfs: fix flags argument to rmap lookup when converting shared file rmaps pinctrl: aspeed: Fix GPI only function problem. iommu/amd: Increase interrupt remapping table limit to 512 entries scsi: scsi_dh_alua: Avoid crash during alua_bus_detach() * cfg80211: regulatory: Fix inconsistent format argument net/wireless/reg.c mac80211: fix use of skb payload instead of header drm/amdgpu: perform srbm soft reset always on SDMA resume scsi: hpsa: Fix memory leak in hpsa_init_one() gfs2: check for live vs. read-only file system in gfs2_fitrim gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free usb: gadget: goku_udc: fix potential crashes in probe ath9k_htc: Use appropriate rs_datalen type geneve: add transport ports in route lookup for geneve i40e: Memory leak in i40e_config_iwarp_qvlist i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c i40e: Wrong truncation from u16 to u8 i40e: add num_vectors checker in iwarp handler i40e: Fix a potential NULL pointer dereference * pinctrl: devicetree: Avoid taking direct reference to device name string drivers/pinctrl/devicetree.c Btrfs: fix missing error return if writeback for extent buffer never started xfs: flush new eof page on truncate to avoid post-eof corruption can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping can: peak_usb: add range checking in decode operations can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() perf tools: Add missing swap for ino_generation * net: xfrm: fix a race condition during allocing spi net/xfrm/xfrm_state.c * genirq: Let GENERIC_IRQ_IPI select IRQ_DOMAIN_HIERARCHY kernel/irq/Kconfig btrfs: reschedule when cloning lots of extents * time: Prevent undefined behaviour in timespec64_to_ns() include/linux/time64.h mm: mempolicy: fix potential pte_unmap_unlock pte error gfs2: Wake up when sd_glock_disposal becomes zero * ring-buffer: Fix recursion protection transitions between interrupt context kernel/trace/ring_buffer.c * regulator: defer probe when trying to get voltage from unresolved supply drivers/regulator/core.c UPSTREAM: thermal/drivers/hisi: Remove bogus const from function return type * UPSTREAM: net/ipv6: don't reinitialize ndev->cnf.addr_gen_mode on new inet6_dev net/ipv6/addrconf.c UPSTREAM: tee: shm: fix use-after-free via temporarily dropped reference UPSTREAM: Documentation: ip-sysctl.txt: document addr_gen_mode UPSTREAM: net: crypto set sk to NULL when af_alg_release. * UPSTREAM: ipv6: don't auto-add link-local address to lag ports net/ipv6/addrconf.c * UPSTREAM: ipv6: ndisc: RFC-ietf-6man-ra-pref64-09 is now published as RFC8781 include/net/ndisc.h * UPSTREAM: binder: fix incorrect cmd to binder_stat_br drivers/android/binder.c * UPSTREAM: arm64: SW PAN: Update saved ttbr0 value on enter_lazy_tlb arch/arm64/include/asm/mmu_context.h UPSTREAM: staging: android: vsoc: fix copy_from_user overrun Merge 4.9.243 into android-4.9-q Linux 4.9.243 powercap: restrict energy meter to root access Merge 4.9.242 into android-4.9-q Linux 4.9.242 Revert "ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE" ARC: stack unwinding: avoid indefinite looping * USB: Add NO_LPM quirk for Kingston flash drive drivers/usb/core/quirks.c USB: serial: option: add Telit FN980 composition 0x1055 USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231 USB: serial: cyberjack: fix write-URB completion race serial: txx9: add missing platform_driver_unregister() on error in serial_txx9_init serial: 8250_mtk: Fix uart_get_baud_rate warning * fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent kernel/fork.c * vt: Disable KD_FONT_OP_COPY drivers/tty/vt/vt.c ACPI: NFIT: Fix comparison to '-ENXIO' vsock: use ns_capable_noaudit() on socket create * scsi: core: Don't start concurrent async scan on same host drivers/scsi/scsi_scan.c * of: Fix reserved-memory overlap detection drivers/of/of_reserved_mem.c x86/kexec: Use up-to-dated screen_info copy to fill boot params ARM: dts: sun4i-a10: fix cpu_alert temperature * tracing: Fix out of bounds write in get_trace_buf kernel/trace/trace.c * ftrace: Handle tracing when switching between context kernel/trace/trace.h * ftrace: Fix recursion check for NMI test kernel/trace/trace.h * kthread_worker: prevent queuing delayed work from timer_fn when it is being canceled kernel/kthread.c * ALSA: usb-audio: Add implicit feedback quirk for Qu-16 sound/usb/pcm.c Fonts: Replace discarded const qualifier gianfar: Account for Tx PTP timestamp in the skb headroom gianfar: Replace skb_realloc_headroom with skb_cow_head for PTP tipc: fix use-after-free in tipc_bcast_get_mode xen/events: don't use chip_data for legacy IRQs staging: octeon: Drop on uncorrectable alignment or FCS error staging: octeon: repair "fixed-link" support staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice * KVM: arm64: Fix AArch32 handling of DBGD{CCINT,SCRext} and DBGVCR arch/arm64/include/asm/kvm_host.h * device property: Don't clear secondary pointer for shared primary firmware node drivers/base/core.c * device property: Keep secondary firmware node secondary by type drivers/base/core.c ARM: s3c24xx: fix missing system reset ARM: samsung: fix PM debug build with DEBUG_LL but !MMU hil/parisc: Disable HIL driver when it gets stuck cachefiles: Handle readpage error correctly * arm64: berlin: Select DW_APB_TIMER_OF arch/arm64/Kconfig.platforms * tty: make FONTX ioctl use the tty pointer they were actually passed drivers/tty/vt/vt_ioctl.c rtc: rx8010: don't modify the global rtc ops vringh: fix __vringh_iov() when riov and wiov are different * ring-buffer: Return 0 on success from ring_buffer_resize() kernel/trace/ring_buffer.c 9P: Cast to loff_t before multiplying libceph: clear con->out_msg on Policy::stateful_server faults ceph: promote to unsigned long long before shifting ia64: fix build error with !COREDUMP ubi: check kthread_should_stop() after the setting of task state ubifs: dent: Fix some potential memory leaks while iterating entries powerpc/powernv/elog: Fix race while processing OPAL error log event. powerpc: Warn about use of smt_snooze_delay iio:gyro:itg3200: Fix timestamp alignment and prevent data leak. iio:adc:ti-adc12138 Fix alignment issue with timestamp iio:light:si1145: Fix timestamp alignment and prevent data leak. dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status * vt: keyboard, extend func_buf_lock to readers drivers/tty/vt/keyboard.c * vt: keyboard, simplify vt_kdgkbsent drivers/tty/vt/keyboard.c usb: host: fsl-mph-dr-of: check return of dma_set_mask() * usb: dwc3: core: don't trigger runtime pm when remove driver drivers/usb/dwc3/core.c * usb: dwc3: core: add phy cleanup for probe error handling drivers/usb/dwc3/core.c btrfs: fix use-after-free on readahead extent after failure to create it btrfs: cleanup cow block on error btrfs: reschedule if necessary when logging directory items scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove() w1: mxc_w1: Fix timeout resolution problem leading to bus error acpi-cpufreq: Honor _PSD table setting on new AMD CPUs ACPI: debug: don't allow debugging when ACPI is disabled ACPI: video: use ACPI backlight for HP 635 Notebook ACPI / extlog: Check for RDMSR failure NFS: fix nfs_path in case of a rename retry * fs: Don't invalidate page buffers in block_write_full_page() fs/buffer.c leds: bcm6328, bcm6358: use devres LED registering function perf/x86/amd/ibs: Fix raw sample data accumulation perf/x86/amd/ibs: Don't include randomized bits in get_ibs_op_count() md/raid5: fix oops during stripe resizing ARM: dts: s5pv210: remove dedicated 'audio-subsystem' node ARM: dts: s5pv210: move PMU node out of clock controller ARM: dts: s5pv210: remove DMA controller bus node name to fix dtschema warnings memory: emif: Remove bogus debugfs error handling gfs2: add validation checks for size of superblock * ext4: Detect already used quota file early fs/ext4/super.c drivers: watchdog: rdc321x_wdt: Fix race condition bugs net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid clk: ti: clockdomain: fix static checker warning md/bitmap: md_bitmap_get_counter returns wrong blocks power: supply: test_power: add missing newlines when printing parameters by sysfs bus/fsl_mc: Do not rely on caller to provide non NULL mc_io drivers/net/wan/hdlc_fr: Correctly handle special skb->protocol values * arm64/mm: return cpu_all_mask when node is NUMA_NO_NODE arch/arm64/include/asm/numa.h USB: adutux: fix debugging cpufreq: sti-cpufreq: add stih418 support * kgdb: Make "kgdbcon" work properly with "kgdb_earlycon" kernel/debug/debug_core.c * printk: reduce LOG_BUF_SHIFT range for H8300 init/Kconfig mmc: via-sdmmc: Fix data race bug media: tw5864: check status of tw5864_frameinterval_get ath10k: fix VHT NSS calculation when STBC is enabled video: fbdev: pvr2fb: initialize variables xfs: fix realtime bitmap/summary file truncation when growing rt volume ARM: 8997/2: hw_breakpoint: Handle inexact watchpoint addresses um: change sigio_spinlock to a mutex * f2fs: fix to check segment boundary during SIT page readahead fs/f2fs/checkpoint.c * f2fs: add trace exit in exception path fs/f2fs/checkpoint.c sparc64: remove mm_cpumask clearing to fix kthread_use_mm race powerpc/powernv/smp: Fix spurious DBG() warning mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish() * fscrypt: use EEXIST when file already uses different policy fs/crypto/policy.c * fscrypto: move ioctl processing more fully into common code fs/crypto/policy.c fs/ext4/ext4.h fs/ext4/ioctl.c fs/f2fs/f2fs.h fs/f2fs/file.c * fscrypt: return -EXDEV for incompatible rename or link into encrypted dir fs/crypto/policy.c fs/ext4/namei.c fs/f2fs/namei.c ata: sata_rcar: Fix DMA boundary mask mtd: lpddr: Fix bad logic in print_drs_error p54: avoid accessing the data mapped to streaming DMA * fuse: fix page dereference after free fs/fuse/dev.c arch/x86/amd/ibs: Fix re-arming IBS Fetch tipc: fix memory leak caused by tipc_buf_append() ravb: Fix bit fields checking in ravb_hwtstamp_get() efivarfs: Replace invalid slashes with exclamation marks in dentries. powerpc/powernv/opal-dump : Use IRQ_HANDLED instead of numbers in interrupt handler * scripts/setlocalversion: make git describe output more reliable scripts/setlocalversion SUNRPC: ECONNREFUSED should cause a rebind. * ANDROID: Temporarily disable XFRM_USER_COMPAT filtering net/xfrm/xfrm_state.c net/xfrm/xfrm_user.c * BACKPORT: xfrm/compat: Translate 32-bit user_policy from sockptr include/net/xfrm.h net/xfrm/xfrm_state.c * BACKPORT: xfrm/compat: Add 32=>64-bit messages translator include/net/xfrm.h net/xfrm/Kconfig net/xfrm/xfrm_user.c * UPSTREAM: xfrm/compat: Attach xfrm dumps to 64=>32 bit translator net/xfrm/xfrm_user.c * BACKPORT: xfrm/compat: Add 64=>32-bit messages translator include/net/xfrm.h net/xfrm/xfrm_user.c * BACKPORT: xfrm: Provide API to register translator module include/net/xfrm.h net/xfrm/Kconfig net/xfrm/Makefile net/xfrm/xfrm_state.c * UPSTREAM: mm/sl[uo]b: export __kmalloc_track(_node)_caller mm/slub.c ANDROID: Publish uncompressed Image on aarch64 * ANDROID: Makefile: append BUILD_NUMBER to version string when defined Makefile Change-Id: I345c9bde484cf008679253982f61b2a833527c3e Signed-off-by: Lucas Wei <lucaswei@google.com>	2021-01-25 15:50:07 +08:00
lucaswei	474475fa1d	Merge android-4.9-q (4.9.241) into android-msm-pixel-4.9-lts ... Merge 4.9.241 into android-4.9-q Linux 4.9.241 usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets. eeprom: at25: set minimum read/write access stride to 1 USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync(). usb: cdc-acm: add quirk to blacklist ETAS ES58X devices net: korina: cast KSEG0 address to pointer in kfree ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() * usb: core: Solve race condition in anchor cleanup functions drivers/usb/core/urb.c brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach reiserfs: Fix memory leak in reiserfs_parse_options() ipvs: Fix uninit-value in do_ip_vs_set_ctl() tty: ipwireless: fix error handling Fix use after free in get_capset_info callback. rtl8xxxu: prevent potential memory leak brcmsmac: fix memory leak in wlc_phy_attach_lcnphy scsi: ibmvfc: Fix error return in ibmvfc_probe() * Bluetooth: Only mark socket zapped after unlocking net/bluetooth/l2cap_sock.c usb: ohci: Default to per-port over-current protection xfs: make sure the rt allocator doesn't run off the end reiserfs: only call unlock_new_inode() if I_NEW misc: rtsx: Fix memory leak in rtsx_pci_probe ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() USB: cdc-acm: handle broken union descriptors udf: Avoid accessing uninitialized data on failed inode read udf: Limit sparing table size usb: gadget: function: printer: fix use-after-free in __lock_acquire misc: vop: add round_up(x,4) for vring_size to avoid kernel panic mic: vop: copy data to kernel space then write to io memory * scsi: target: core: Add CONTROL field for trace events include/scsi/scsi_common.h scsi: mvumi: Fix error return in mvumi_io_attach() PM: hibernate: remove the bogus call to get_gendisk() in software_resume() ntfs: add check for mft record size in superblock fs: dlm: fix configfs memory leak media: saa7134: avoid a shift overflow * mmc: sdio: Check for CISTPL_VERS_1 buffer size drivers/mmc/core/sdio_cis.c media: uvcvideo: Ensure all probed info is returned to v4l2 media: media/pci: prevent memory leak in bttv_probe media: bdisp: Fix runtime PM imbalance on error media: platform: sti: hva: Fix runtime PM imbalance on error media: platform: s3c-camif: Fix runtime PM imbalance on error media: vsp1: Fix runtime PM imbalance on error media: exynos4-is: Fix a reference count leak media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync media: ati_remote: sanity check for both endpoints media: firewire: fix memory leak crypto: ccp - fix error handling NTB: hw: amd: fix an issue about leak system resources nvmet: fix uninitialized work for zero kato powerpc/powernv/dump: Fix race while processing OPAL dump arm64: dts: zynqmp: Remove additional compatible string for i2c IPs arm64: dts: qcom: msm8916: Fix MDP/DSI interrupts memory: fsl-corenet-cf: Fix handling of platform_get_irq() error memory: omap-gpmc: Fix a couple off by ones KVM: x86: emulating RDPID failure shall return #UD rather than #GP Input: sun4i-ps2 - fix handling of platform_get_irq() error Input: twl4030_keypad - fix handling of platform_get_irq() error Input: omap4-keypad - fix handling of platform_get_irq() error Input: ep93xx_keypad - fix handling of platform_get_irq() error Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume() vfio/pci: Clear token on bypass registration failure clk: bcm2835: add missing release if devm_clk_hw_register fails clk: at91: clk-main: update key before writing AT91_CKGR_MOR rapidio: fix the missed put_device() for rio_mport_add_riodev rapidio: fix error handling path * lib/crc32.c: fix trivial typo in preprocessor condition lib/crc32.c IB/rdmavt: Fix sizeof mismatch cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_reboot_notifier powerpc/perf/hv-gpci: Fix starting index value powerpc/perf: Exclude pmc5/6 from the irrelevant PMU group constraints * overflow: Include header file with SIZE_MAX declaration include/linux/overflow.h * kdb: Fix pager search for multi-line strings kernel/debug/kdb/kdb_io.c RDMA/hns: Set the unsupported wr opcode perf intel-pt: Fix "context_switch event has no tid" error powerpc/tau: Disable TAU between measurements powerpc/tau: Remove duplicated set_thresholds() call powerpc/tau: Use appropriate temperature sample interval RDMA/qedr: Fix use of uninitialized field ARM: 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using DT values mtd: mtdoops: Don't write panic data twice mtd: lpddr: fix excessive stack usage with clang powerpc/icp-hv: Fix missing of_node_put() in success path powerpc/pseries: Fix missing of_node_put() in rng_init() IB/mlx4: Adjust delayed work when a dup is observed IB/mlx4: Fix starvation in paravirt mux/demux net: korina: fix kfree of rx/tx descriptor array mwifiex: fix double free scsi: be2iscsi: Fix a theoretical leak in beiscsi_create_eqs() * nl80211: fix non-split wiphy information net/wireless/nl80211.c * usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well drivers/usb/gadget/function/u_ether.c usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above. iwlwifi: mvm: split a print to avoid a WARNING in ROC mfd: sm501: Fix leaks in probe() net: enic: Cure the enic api locking trainwreck * quota: clear padding in v2r1_mem2diskdqb() fs/quota/quota_v2.c ALSA: seq: oss: Avoid mutex lock for a long-time ioctl misc: mic: scif: Fix error handling path ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd() HID: roccat: add bounds checking in kone_sysfs_write_settings() video: fbdev: sis: fix null ptr dereference video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error drivers/virt/fsl_hypervisor: Fix error handling path * pty: do tty_flip_buffer_push without port->lock in pty_write drivers/tty/pty.c tty: hvcs: Don't NULL tty->driver_data until hvcs_cleanup() * tty: serial: earlycon dependency drivers/tty/serial/Kconfig VMCI: check return value of get_user_pages_fast() for errors backlight: sky81452-backlight: Fix refcount imbalance on error scsi: csiostor: Fix wrong return value in csio_hw_prep_fw() scsi: qla4xxx: Fix an error handling path in 'qla4xxx_get_host_stats()' drm/gma500: fix error check mwifiex: Do not use GFP_KERNEL in atomic context ASoC: qcom: lpass-platform: fix memory leak wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680 ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() ath6kl: prevent potential array overflow in ath6kl_add_new_sta() ath10k: provide survey info as accumulated data * regulator: resolve supply after creating regulator drivers/regulator/core.c media: ti-vpe: Fix a missing check and reference count leak media: platform: fcp: Fix a reference count leak. media: tc358743: initialize variable crypto: omap-sham - fix digcnt register handling with export/import media: omap3isp: Fix memleak in isp_probe media: m5mols: Check function pointer in m5mols_sensor_power media: Revert "media: exynos4-is: Add missed check for pinctrl_lookup_state()" crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call EDAC/i5100: Fix error handling order in i5100_init_one() crypto: algif_aead - Do not set MAY_BACKLOG on the async path ima: Don't ignore errors from crypto_shash_update() KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages cifs: remove bogus debug code * icmp: randomize the global rate limiter net/ipv4/icmp.c * tcp: fix to update snd_wl1 in bulk receiver fast path net/ipv4/tcp_input.c nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download() net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling ether_setup net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device ALSA: bebob: potential info leak in hwdep_read() r8169: fix data corruption issue on RTL8402 * net/ipv4: always honour route mtu during forwarding include/net/ip.h tipc: fix the skb_unshare() in tipc_buf_append() ibmveth: Identify ingress large send packets. * UPSTREAM: binder: fix UAF when releasing todo list drivers/android/binder.c * ANDROID: namespace'ify tcp_default_init_rwnd implementation include/net/netns/ipv4.h include/net/tcp.h net/ipv4/sysctl_net_ipv4.c net/ipv4/tcp_input.c net/ipv4/tcp_ipv4.c net/ipv4/tcp_minisocks.c net/ipv4/tcp_output.c Merge 4.9.240 into android-4.9-q Linux 4.9.240 crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA reiserfs: Fix oops during mount reiserfs: Initialize inode keys properly USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters USB: serial: pl2303: add device-id for HP GC device staging: comedi: check validity of wMaxPacketSize of usb endpoints found USB: serial: option: Add Telit FT980-KS composition USB: serial: option: add Cellient MPL200 card media: usbtv: Fix refcounting mixup * Bluetooth: Disconnect if E0 is used for Level 4 include/net/bluetooth/hci_core.h net/bluetooth/hci_conn.c net/bluetooth/hci_event.c * Bluetooth: Fix update of connection state in `hci_encrypt_cfm` include/net/bluetooth/hci_core.h * Bluetooth: Consolidate encryption handling in hci_encrypt_cfm include/net/bluetooth/hci_core.h net/bluetooth/hci_event.c * Bluetooth: fix kernel oops in store_pending_adv_report net/bluetooth/hci_event.c * Bluetooth: MGMT: Fix not checking if BT_HS is enabled net/bluetooth/mgmt.c * Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel include/net/bluetooth/l2cap.h net/bluetooth/l2cap_core.c net/bluetooth/l2cap_sock.c * Bluetooth: A2MP: Fix not initializing all members net/bluetooth/a2mp.c Merge 4.9.239 into android-4.9-q Linux 4.9.239 * net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails drivers/net/usb/rtl8150.c * mm: khugepaged: recalculate min_free_kbytes after memory hotplug as expected by khugepaged include/linux/khugepaged.h mm/page_alloc.c * perf: Fix task_function_call() error handling kernel/events/core.c rxrpc: Fix server keyring leak rxrpc: Fix some missing _bh annotations on locking conn->state_lock rxrpc: Downgrade the BUG() for unsupported token type in rxrpc_read() rxrpc: Fix rxkad token xdr encoding * mdio: fix mdio-thunder.c dependency & build error drivers/net/phy/Kconfig * bonding: set dev->needed_headroom in bond_setup_by_slave() drivers/net/bonding/bond_main.c * xfrm: Use correct address family in xfrm_state_find net/xfrm/xfrm_state.c net: stmmac: removed enabling eee in EEE set callback * xfrm: clone whole liftime_cur structure in xfrm_do_migrate net/xfrm/xfrm_state.c * xfrm: clone XFRMA_REPLAY_ESN_VAL in xfrm_do_migrate include/net/xfrm.h drm/amdgpu: prevent double kfree ttm->sg openvswitch: handle DNAT tuple collision net: team: fix memory leak in __team_options_register team: set dev->needed_headroom in team_setup_by_port() sctp: fix sctp_auth_init_hmacs() error path mm/khugepaged: fix filemap page_to_pgoff(page) != offset macsec: avoid use-after-free in macsec_handle_frame() ftrace: Move RCU is watching check after recursion check mtd: rawnand: sunxi: Fix the probe error path perf top: Fix stdio interface input handling with glibc 2.28+ * driver core: Fix probe_count imbalance in really_probe() drivers/base/dd.c platform/x86: thinkpad_acpi: re-initialize ACPI buffer size when reuse platform/x86: thinkpad_acpi: initialize tp_nvram_state variable * usermodehelper: reset umask to default before executing user process kernel/kmod.c * net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key() net/wireless/nl80211.c fbcon: Fix global-out-of-bounds read in fbcon_get_font() Revert "ravb: Fixed to be able to unload modules" * Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts include/linux/font.h * fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h include/linux/font.h * netfilter: ctnetlink: add a range check for l3/l4 protonum net/netfilter/nf_conntrack_netlink.c * ep_create_wakeup_source(): dentry name can change under you... fs/eventpoll.c * epoll: EPOLL_CTL_ADD: close the race in decision to take fast path fs/eventpoll.c * epoll: replace ->visited/visited_list with generation count fs/eventpoll.c * epoll: do not insert into poll queues until all sanity checks are done fs/eventpoll.c * net/packet: fix overflow in tpacket_rcv net/packet/af_packet.c * random32: Restore __latent_entropy attribute on net_rand_state lib/random32.c i2c: cpm: Fix i2c_ram structure iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate() clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED nfs: Fix security label length not being reset mac80211: do not allow bigger VHT MPDUs than the hardware supports drivers/net/wan/hdlc: Set skb->protocol before transmitting drivers/net/wan/lapbether: Make skb->protocol consistent with the header rndis_host: increase sleep time in the query-response loop net: dec: de2104x: Increase receive ring size for Tulip drm/amdgpu: restore proper ref count in amdgpu_display_crtc_set_config Input: i8042 - add nopnp quirk for Acer Aspire 5 A515 gpio: tc35894: fix up tc35894 interrupt configuration USB: gadget: f_ncm: Fix NDP16 datagram validation vsock/virtio: stop workers during the .remove() vsock/virtio: use RCU to avoid use-after-free on the_virtio_vsock Merge 4.9.238 into android-4.9-q Linux 4.9.238 ata: sata_mv, avoid trigerrable BUG_ON ata: make qc_prep return ata_completion_errors ata: define AC_ERR_OK * lib/string.c: implement stpcpy lib/string.c kprobes: Fix to check probe enabled before disarm_kprobe_ftrace() MIPS: Add the missing 'CPU_1074K' into __get_cpu_type() ALSA: asihpi: fix iounmap in error handler batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh batman-adv: Add missing include for in_interrupt() mac802154: tx: fix use-after-free batman-adv: mcast/TT: fix wrongly dropped or rerouted packets atm: eni: fix the missed pci_disable_device() for eni_init_one() batman-adv: bla: fix type misuse for backbone_gw hash indexing mwifiex: Increase AES key storage size to 256 bits clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init() ieee802154/adf7242: check status of adf7242_read_reg objtool: Fix noreturn detection for ignored functions * i2c: core: Call i2c_acpi_install_space_handler() before i2c_acpi_register_devices() drivers/i2c/i2c-core.c s390/init: add missing __init annotations vfio/pci: fix racy on error and request eventfd ctx selftests/x86/syscall_nt: Clear weird flags after each test cifs: Fix double add page to memcg when cifs_readpages vfio/pci: Clear error and request eventfd ctx after releasing x86/speculation/mds: Mark mds_user_clear_cpu_buffers() __always_inline mtd: parser: cmdline: Support MTD names containing one or more colons ceph: fix potential race in ceph_check_caps mtd: rawnand: omap_elm: Fix runtime PM imbalance on error perf kcore_copy: Fix module map when there are no modules loaded perf util: Fix memory leak of prefix_if_not_in vfio/pci: fix memory leaks of eventfd ctx btrfs: don't force read-only after error in drop snapshot * printk: handle blank console arguments passed in. kernel/printk/printk.c e1000: Do not perform reset in reset_task if we are already down USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int * fuse: don't check refcount after stealing page fs/fuse/dev.c ALSA: hda: Fix potential race in unsol event handler tty: serial: samsung: Correct clock selection logic USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe() * Bluetooth: Handle Inquiry Cancel error after Inquiry Complete net/bluetooth/hci_event.c phy: samsung: s5pv210-usb2: Add delay after reset atm: fix a memory leak of vcc->user_back dt-bindings: sound: wm8994: Correct required supplies based on actual implementaion drivers: char: tlclk.c: Avoid data race between init and interrupt handler * bdev: Reduce time holding bd_mutex in sync in blkdev_close() fs/block_dev.c KVM: Remove CREATE_IRQCHIP/SET_PIT2 race * mm/mmap.c: initialize align_offset explicitly for vm_unmapped_area mm/mmap.c * mm/filemap.c: clear page error before actual read mm/filemap.c * ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor sound/usb/midi.c ubifs: Fix out-of-bounds memory access caused by abnormal value of node_len svcrdma: Fix leak of transport addresses SUNRPC: Fix a potential buffer overflow in 'svc_print_xprts()' tools: gpio-hammer: Avoid potential overflow in main cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_work_fn serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout serial: 8250_omap: Fix sleeping function called from invalid context during probe serial: 8250_port: Don't service RX FIFO if throttled * tracing: Use address-of operator on section symbols kernel/trace/trace.c tpm: ibmvtpm: Wait for buffer to be set before proceeding xfs: don't ever return a stale pointer from __xfs_dir3_free_read media: tda10071: fix unsigned sign extension overflow * Bluetooth: L2CAP: handle l2cap config request during open state net/bluetooth/l2cap_core.c drm/amdgpu: increase atombios cmd timeout * timekeeping: Prevent 32bit truncation in scale64_check_overflow() kernel/time/timekeeping.c * Bluetooth: guard against controllers sending zero'd events net/bluetooth/hci_event.c media: go7007: Fix URB type for interrupt handling dmaengine: tegra-apb: Prevent race conditions on channel's freeing * bpf: Remove recursion prevention from rcu free callback kernel/bpf/hashtab.c x86/pkeys: Add check for pkey "overflow" KVM: x86: fix incorrect comparison in trace event RDMA/rxe: Fix configuration of atomic queue pair attributes drm/omap: fix possible object reference leak scsi: lpfc: Fix coverity errors in fmdi attribute handling scsi: lpfc: Fix RQ buffer leakage when no IOCBs available * selinux: sel_avc_get_stat_idx should increase position index security/selinux/selinuxfs.c audit: CONFIG_CHANGE don't log internal bookkeeping as an event * skbuff: fix a data race in skb_queue_len() include/linux/skbuff.h net/unix/af_unix.c ALSA: hda: Clear RIRB status before reading WP KVM: fix overflow of zero page refcount with ksm running * Bluetooth: prefetch channel before killing sock net/bluetooth/l2cap_sock.c * mm: pagewalk: fix termination condition in walk_pte_range() mm/pagewalk.c * Bluetooth: Fix refcount use-after-free issue net/bluetooth/l2cap_core.c net/bluetooth/l2cap_sock.c ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter * tracing: Set kernel_stack's caller size properly kernel/trace/trace_entries.h dmaengine: zynqmp_dma: fix burst length configuration ACPI: EC: Reference count query handlers under lock media: ti-vpe: cal: Restrict DMA to avoid memory corruption * seqlock: Require WRITE_ONCE surrounding raw_seqcount_barrier include/linux/seqlock.h * rt_cpu_seq_next should increase position index net/ipv4/route.c * neigh_stat_seq_next() should increase position index net/core/neighbour.c * kernel/sys.c: avoid copying possible padding bytes in copy_to_user kernel/sys.c CIFS: Properly process SMB3 lease breaks * debugfs: Fix !DEBUG_FS debugfs_create_automount include/linux/debugfs.h RDMA/iw_cgxb4: Fix an error handling path in 'c4iw_connect()' xfs: fix attr leaf header freemap.size underflow RDMA/i40iw: Fix potential use after free bcache: fix a lost wake-up problem caused by mca_cannibalize_lock * tracing: Adding NULL checks for trace_array descriptor pointer kernel/trace/trace.c kernel/trace/trace_events.c * mfd: mfd-core: Protect against NULL call-back function pointer drivers/mfd/mfd-core.c mtd: cfi_cmdset_0002: don't free cfi->cfiq in error path of cfi_amdstd_setup() clk/ti/adpll: allocate room for terminating null PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out * ALSA: usb-audio: Add delay quirk for H570e USB headsets sound/usb/quirks.c ASoC: kirkwood: fix IRQ error handling gma/gma500: fix a memory disclosure bug due to uninitialized bytes m68k: q40: Fix info-leak in rtc_ioctl scsi: aacraid: fix illegal IO beyond last LBA serial: 8250: Avoid error message on reprobe * net: add __must_check to skb_put_padto() include/linux/skbuff.h net/hsr: Check skb_put_padto() return value * net: phy: Avoid NPD upon phy_detach() when driver is unbound drivers/net/phy/phy_device.c bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex. tipc: use skb_unshare() instead in tipc_buf_append() * ip: fix tos reflection in ack and reset packets net/ipv4/ip_output.c hdlc_ppp: add range checks in ppp_cp_parse_cr() mtd: Fix comparison in map_word_andequal() RDMA/ucma: ucma_context reference leak in error path kprobes: fix kill kprobe which has been marked as gone KVM: fix memory leak in kvm_io_bus_unregister_dev() * af_key: pfkey_dump needs parameter validation net/key/af_key.c Change-Id: Ic405992aa26bd9ce6da4fdcf67ab341ef9427b53 Signed-off-by: lucaswei <lucaswei@google.com>	2020-11-26 18:08:27 +08:00
Gustavo A. R. Silva	609c0dea93	mtd: lpddr: Fix bad logic in print_drs_error ... commit 1c9c02bb22684f6949d2e7ddc0a3ff364fd5a6fc upstream. Update logic for broken test. Use a more common logging style. It appears the logic in this function is broken for the consecutive tests of if (prog_status & 0x3) ... else if (prog_status & 0x2) ... else (prog_status & 0x1) ... Likely the first test should be if ((prog_status & 0x3) == 0x3) Found by inspection of include files using printk. Fixes: eb3db27507 ("[MTD] LPDDR PFOW definition") Cc: stable@vger.kernel.org Reported-by: Joe Perches <joe@perches.com> Signed-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com> Acked-by: Miquel Raynal <miquel.raynal@bootlin.com> Signed-off-by: Miquel Raynal <miquel.raynal@bootlin.com> Link: https://lore.kernel.org/linux-mtd/3fb0e29f5b601db8be2938a01d974b00c8788501.1588016644.git.gustavo@embeddedor.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2020-11-10 10:23:51 +01:00
Ben Hutchings	0e3ebb38f3	mtd: Fix comparison in map_word_andequal() ... commit ea739a287f4f16d6250bea779a1026ead79695f2 upstream. Commit 9e343e87d2c4 ("mtd: cfi: convert inline functions to macros") changed map_word_andequal() into a macro, but also changed the right hand side of the comparison from val3 to val2. Change it back to use val3 on the right hand side. Thankfully this did not cause a regression because all callers currently pass the same argument for val2 and val3. Fixes: 9e343e87d2c4 ("mtd: cfi: convert inline functions to macros") Signed-off-by: Ben Hutchings <ben@decadent.org.uk> Signed-off-by: Boris Brezillon <boris.brezillon@bootlin.com> Signed-off-by: Nobuhiro Iwamatsu (CIP) <noburhio1.nobuhiro@toshiba.co.jp> Signed-off-by: Sasha Levin <sashal@kernel.org>	2020-10-01 20:40:00 +02:00
lucaswei	2b5e67e8a2	Merge android-4.9-q (4.9.232) into android-msm-pixel-4.9-lts ... Merge 4.9.232 into android-4.9-q Linux 4.9.232 perf: Make perf able to build with latest libbfd perf tools: Fix snprint warnings for gcc 8 perf annotate: Use asprintf when formatting objdump command line perf probe: Fix to check blacklist address correctly xfs: set format back to extents if xfs_bmap_extents_to_btree * regmap: debugfs: check count when read regmap file drivers/base/regmap/regmap-debugfs.c drivers/net/wan/x25_asy: Fix to make it work ip6_gre: fix null-ptr-deref in ip6gre_init_net() * tcp: allow at most one TLP probe per flight include/linux/tcp.h net/ipv4/tcp_input.c net/ipv4/tcp_output.c AX.25: Prevent integer overflows in connect and sendmsg rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA * net: udp: Fix wrong clean up for IS_UDPLITE macro net/ipv4/udp.c net/ipv6/udp.c * net-sysfs: add a newline when printing 'tx_timeout' by sysfs net/core/net-sysfs.c * dev: Defer free of skbs in flush_backlog net/core/dev.c AX.25: Prevent out-of-bounds read in ax25_sendmsg() AX.25: Fix out-of-bounds read in ax25_connect() ath9k: Fix regression with Atheros 9271 ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb parisc: Add atomic64_set_release() define to avoid CPU soft lockups io-mapping: indicate mapping failure * mm/memcg: fix refcount error while moving and swapping mm/memcontrol.c * Makefile: Fix GCC_TOOLCHAIN_DIR prefix for Clang cross compilation Makefile * vt: Reject zero-sized screen buffer size. drivers/tty/vt/vt.c serial: 8250_mtk: Fix high-speed baud rates clamping serial: 8250: fix null-ptr-deref in serial8250_start_tx() staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG shift staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG shift staging: comedi: ni_6527: fix INSN_CONFIG_DIGITAL_TRIG support staging: comedi: addi_apci_1032: check INSN_CONFIG_DIGITAL_TRIG shift staging: wlan-ng: properly check endpoint types Revert "cifs: Fix the target file was deleted when rename failed." * usb: xhci: Fix ASM2142/ASM3142 DMA addressing drivers/usb/host/xhci-pci.c usb: xhci-mtk: fix the failure of bandwidth allocation x86: math-emu: Fix up 'cmp' insn for clang ias * arm64: Use test_tsk_thread_flag() for checking TIF_SINGLESTEP arch/arm64/kernel/debug-monitors.c usb: gadget: udc: gr_udc: fix memleak on error handling path in gr_ep_init() dmaengine: ioat setting ioat timeout as module parameter * regmap: dev_get_regmap_match(): fix string comparison drivers/base/regmap/regmap.c dmaengine: tegra210-adma: Fix runtime PM imbalance on error * HID: apple: Disable Fn-key key-re-mapping on clone keyboards drivers/hid/hid-apple.c HID: i2c-hid: add Mediacom FlexBook edge13 to descriptor override scripts/decode_stacktrace: strip basepath from all paths net: smc91x: Fix possible memory leak in smc_drv_probe() net: dp83640: fix SIOCSHWTSTAMP to update the struct with actual configuration * ax88172a: fix ax88172a_unbind() failures drivers/net/usb/ax88172a.c hippi: Fix a size used in a 'pci_free_consistent()' in an error handling path bnxt_en: Fix race when modifying pause settings. btrfs: fix mount failure caused by race with umount btrfs: fix double free on ulist after backref resolution failure ASoC: rt5670: Correct RT5670_LDO_SEL_MASK * ALSA: info: Drop WARN_ON() from buffer NULL sanity check sound/core/info.c uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression SUNRPC reverting d03727b248d0 ("NFSv4 fix CLOSE not waiting for direct IO compeletion") drm/nouveau/i2c/g94-: increase NV_PMGR_DP_AUXCTL_TRANSACTREQ timeout net: sky2: initialize return of gm_phy_read drivers/net/wan/lapbether: Fixed the value of hard_header_len xtensa: update *pos in cpuinfo_op.next xtensa: fix __sync_fetch_and_{and,or}_4 declarations scsi: scsi_transport_spi: Fix function pointer check mac80211: allow rx of mesh eapol frames with default rx key pinctrl: amd: fix npins for uart0 in kerncz_groups * UPSTREAM: xtables: extend matches and targets with .usersize net/netfilter/xt_CT.c net/netfilter/xt_TEE.c net/netfilter/xt_bpf.c net/netfilter/xt_connlimit.c net/netfilter/xt_hashlimit.c net/netfilter/xt_limit.c net/netfilter/xt_quota.c net/netfilter/xt_string.c * UPSTREAM: ip6tables: use match, target and data copy_to_user helpers net/ipv6/netfilter/ip6_tables.c * UPSTREAM: iptables: use match, target and data copy_to_user helpers net/ipv4/netfilter/ip_tables.c * UPSTREAM: xtables: add xt_match, xt_target and data copy_to_user functions include/linux/netfilter/x_tables.h net/netfilter/x_tables.c Merge 4.9.231 into android-4.9-q Linux 4.9.231 x86/cpu: Move x86_cache_bits settings * irqchip/gic: Atomically update affinity drivers/irqchip/irq-gic.c * sched/fair: handle case of task_h_load() returning 0 kernel/sched/fair.c * arm64: ptrace: Override SPSR.SS when single-stepping is enabled arch/arm64/include/asm/debug-monitors.h arch/arm64/kernel/debug-monitors.c arch/arm64/kernel/ptrace.c misc: atmel-ssc: lock with mutex instead of spinlock dmaengine: fsl-edma: Fix NULL pointer exception in fsl_edma_tx_handler hwmon: (emc2103) fix unable to change fan pwm1_enable attribute MIPS: Fix build for LTS kernel caused by backporting lpj adjustment * timer: Fix wheel index calculation on last level kernel/time/timer.c uio_pdrv_genirq: fix use without device tree and no interrupt Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list mei: bus: don't clean driver pointer * fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS fs/fuse/file.c virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial USB: serial: option: add Quectel EG95 LTE modem USB: serial: option: add GosunCn GM500 series USB: serial: ch341: add new Product ID for CH340 USB: serial: cypress_m8: enable Simply Automated UPB PIM USB: serial: iuu_phoenix: fix memory corruption usb: gadget: function: fix missing spinlock in f_uac1_legacy usb: chipidea: core: add wakeup support for extcon usb: dwc2: Fix shutdown callback in platform USB: c67x00: fix use after free in c67x00_giveback_urb * ALSA: usb-audio: Fix race against the error recovery URB submission sound/usb/midi.c ALSA: line6: Perform sanity check for each URB creation * usb: core: Add a helper function to check the validity of EP type in URB drivers/usb/core/urb.c include/linux/usb.h * HID: magicmouse: do not set up autorepeat drivers/hid/hid-magicmouse.c mtd: rawnand: brcmnand: fix CS0 layout perf stat: Zero all the 'ena' and 'run' array slot stats for interval mode ARM: dts: socfpga: Align L2 cache-controller nodename with dtschema Revert "thermal: mediatek: fix register index error" staging: comedi: verify array index is correct before using it usb: gadget: udc: atmel: fix uninitialized read in debug printk spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate iio:health:afe4404 Fix timestamp alignment and prevent data leak. Revert "usb/ohci-platform: Fix a warning when hibernating" * Revert "usb/xhci-plat: Set PM runtime as active on resume" drivers/usb/host/xhci-plat.c Revert "usb/ehci-platform: Set PM runtime as active on resume" net: dsa: bcm_sf2: Fix node reference count spi: fix initial SPI_SR value in spi-fsl-dspi iio:health:afe4403 Fix timestamp alignment and prevent data leak. iio:pressure:ms5611 Fix buffer element alignment iio: pressure: zpa2326: handle pm_runtime_get_sync failure iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe() iio: magnetometer: ak8974: Fix runtime PM imbalance on error iio:magnetometer:ak8974: Fix alignment and data leak issues i2c: eg20t: Load module automatically if ID matches * cgroup: Fix sock_cgroup_data on big-endian. include/linux/cgroup-defs.h * cgroup: fix cgroup_sk_alloc() for sk_clone_lock() include/linux/cgroup-defs.h include/linux/cgroup.h kernel/cgroup.c net/core/sock.c * tcp: md5: allow changing MD5 keys in all socket states net/ipv4/tcp.c * tcp: md5: do not send silly options in SYNCOOKIES net/ipv4/tcp_output.c * tcp: make sure listeners don't initialize congestion-control state net/ipv4/tcp.c net/ipv4/tcp_cong.c * genetlink: remove genl_bind include/net/genetlink.h net/netlink/genetlink.c * tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers net/ipv4/tcp.c net/ipv4/tcp_ipv4.c * tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key() net/ipv4/tcp.c net/ipv4/tcp_ipv4.c net: usb: qmi_wwan: add support for Quectel EG95 LTE modem * net: Added pointer check for dst->ops->neigh_lookup in dst_neigh_lookup_skb include/net/dst.h llc: make sure applications use ARPHRD_ETHER * l2tp: remove skb_dst_set() from l2tp_xmit_skb() net/l2tp/l2tp_core.c * ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg net/ipv4/ping.c s390/mm: fix huge pte soft dirty copying ARC: elf: use right ELF_ARCH ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE drm/radeon: fix double free btrfs: fix fatal extent_buffer readahead vs releasepage race Revert "ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb" KVM: x86: bit 8 of non-leaf PDPEs is not reserved * KVM: arm64: Fix definition of PAGE_HYP_DEVICE arch/arm64/include/asm/pgtable-prot.h * ALSA: usb-audio: add quirk for MacroSilicon MS2109 sound/usb/quirks-table.h ALSA: hda - let hs_mic be picked ahead of hp_mic ALSA: opl3: fix infoleak in opl3 net: macb: mark device wake capable when "magic-packet" property present bnxt_en: fix NULL dereference in case SR-IOV configuration fails * arm64: kgdb: Fix single-step exception handling oops arch/arm64/kernel/kgdb.c * ALSA: compress: fix partial_drain completion state include/sound/compress_driver.h sound/core/compress_offload.c smsc95xx: avoid memory leak in smsc95xx_bind smsc95xx: check return value of smsc95xx_reset net: cxgb4: fix return error value in t4_prep_fw scsi: mptscsih: Fix read sense data size ARM: imx6: add missing put_device() call in imx6q_suspend_init() cifs: update ctime and mtime during truncate s390/kasan: fix early pgm check handler execution * spi: spidev: fix a potential use-after-free in spidev_release() drivers/spi/spidev.c * spi: spidev: fix a race between spidev_release and spidev_remove drivers/spi/spidev.c gpu: host1x: Detach driver on unregister KVM: s390: reduce number of IO pins to 1 ANDROID: cuttlefish_defconfig: Drop built-in cmdline (except nopti) Merge 4.9.230 into android-4.9-q Linux 4.9.230 * efi: Make it possible to disable efivar_ssdt entirely drivers/firmware/efi/Kconfig * netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 net/netfilter/nf_conntrack_h323_main.c MIPS: Add missing EHB in mtc0 -> mfc0 sequence for DSPen cifs: Fix the target file was deleted when rename failed. SMB3: Honor persistent/resilient handle flags for multiuser mounts SMB3: Honor 'seal' flag for multiuser mounts * Revert "ALSA: usb-audio: Improve frames size computation" sound/usb/card.h sound/usb/endpoint.c sound/usb/endpoint.h sound/usb/pcm.c i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665 virtio-blk: free vblk-vqs in error path of virtblk_probe() hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add() hwmon: (max6697) Make sure the OVERT mask is set correctly cxgb4: parse TC-U32 key values and masks natively * sched/rt: Show the 'sched_rr_timeslice' SCHED_RR timeslice tuning knob in milliseconds include/linux/sched/sysctl.h kernel/sched/core.c kernel/sched/rt.c kernel/sysctl.c crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() * kgdb: Avoid suspicious RCU usage warning kernel/debug/debug_core.c usb: usbtest: fix missing kfree(dev->buf) in usbtest_disconnect * mm/slub: fix stack overruns with SLUB_STATS mm/slub.c * mm/slub.c: fix corrupted freechain in deactivate_slab() mm/slub.c usbnet: smsc95xx: Fix use-after-free after removal EDAC/amd64: Read back the scrub rate PCI register on F15h * mm: fix swap cache node allocation mask mm/swap_state.c btrfs: fix data block group relocation failure due to concurrent scrub btrfs: cow_file_range() num_bytes and disk_num_bytes are same btrfs: fix a block group ref counter leak after failure to remove block group Merge 4.9.229 into android-4.9-q Linux 4.9.229 Revert "tty: hvc: Fix data abort due to race in hvc_open" xfs: add agf freeblocks verify in xfs_agf_verify NFSv4 fix CLOSE not waiting for direct IO compeletion pNFS/flexfiles: Fix list corruption if the mirror count changes SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment() sunrpc: fixed rollback in rpc_gssd_dummy_populate() drm/radeon: fix fb_div check in ni_init_smc_spll_table() * tracing: Fix event trigger to accept redundant spaces kernel/trace/trace_events_trigger.c * arm64: perf: Report the PC value in REGS_ABI_32 mode arch/arm64/kernel/perf_regs.c ocfs2: fix panic on nfs server over ocfs2 ocfs2: fix value of OCFS2_INVALID_SLOT ocfs2: load global_inode_alloc * mm/slab: use memzero_explicit() in kzfree() mm/slab_common.c KVM: X86: Fix MSR range of APIC registers in X2APIC mode ACPI: sysfs: Fix pm_profile_attr type ALSA: hda: Add NVIDIA codec IDs 9a & 9d through a0 to patch table * blktrace: break out of blktrace setup on concurrent calls kernel/trace/blktrace.c * kbuild: improve cc-option to clean up all temporary files scripts/Kbuild.include s390/ptrace: fix setting syscall number net: alx: fix race condition in alx_remove ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function * sched/core: Fix PI boosting between RT and DEADLINE tasks kernel/sched/core.c netfilter: ipset: fix unaligned atomic access usb: gadget: udc: Potential Oops in error handling code ARM: imx5: add missing put_device() call in imx_suspend_alloc_ocram() net: qed: fix excessive QM ILT lines consumption net: qed: fix NVMe login fails over VFs net: qed: fix left elements count calculation RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads() efi/esrt: Fix reference count leak in esre_create_sysfs_entry. cifs/smb3: Fix data inconsistent when zero file range cifs/smb3: Fix data inconsistent when punch hole * xhci: Poll for U0 after disabling USB2 LPM drivers/usb/host/xhci.c * ALSA: usb-audio: Fix OOB access of mixer element list sound/usb/mixer.c sound/usb/mixer.h sound/usb/mixer_quirks.c * ALSA: usb-audio: Clean up mixer element list traverse sound/usb/mixer.c sound/usb/mixer.h sound/usb/mixer_quirks.c sound/usb/mixer_scarlett.c * ALSA: usb-audio: uac1: Invalidate ctl on interrupt sound/usb/mixer.c cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip * xhci: Fix enumeration issue when setting max packet size for FS devices. drivers/usb/host/xhci.c * xhci: Fix incorrect EP_STATE_MASK drivers/usb/host/xhci.h * ALSA: usb-audio: add quirk for Denon DCD-1500RE sound/usb/quirks.c usb: host: ehci-exynos: Fix error check in exynos_ehci_probe() USB: ehci: reopen solution for Synopsys HC bug * usb: add USB_QUIRK_DELAY_INIT for Logitech C922 drivers/usb/core/quirks.c usb: dwc2: Postponed gadget registration to the udc class driver USB: ohci-sm501: Add missed iounmap() in remove * net: core: reduce recursion limit value include/linux/netdevice.h * net: Do not clear the sock TX queue in sk_set_socket() include/net/sock.h net/core/sock.c * net: Fix the arp error in some cases net/ipv4/fib_semantics.c * sctp: Don't advertise IPv4 addresses if ipv6only is set on the socket include/net/sctp/constants.h * tcp: grow window for OOO packets only for SACK flows net/ipv4/tcp_input.c ip6_gre: fix use-after-free in ip6gre_tunnel_lookup() * tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT net/ipv4/tcp_cubic.c * ip_tunnel: fix use-after-free in ip_tunnel_lookup() net/ipv4/ip_tunnel.c tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes rxrpc: Fix notification call on completion of discarded calls rocker: fix incorrect error handling in dma_rings_init * net: usb: ax88179_178a: fix packet alignment padding drivers/net/usb/ax88179_178a.c * net: fix memleak in register_netdevice() net/core/dev.c * mld: fix memory leak in ipv6_mc_destroy_dev() net/ipv6/mcast.c fix a braino in "sparc32: fix register window handling in genregs32_[gs]et()" * net: sched: export __netdev_watchdog_up() net/sched/sch_generic.c * l2tp: Allow duplicate session creation with UDP net/l2tp/l2tp_core.c * scsi: scsi_devinfo: handle non-terminated strings drivers/scsi/scsi_devinfo.c mtd: rawnand: tmio: Fix the probe error path mtd: rawnand: mtk: Fix the probe error path mtd: rawnand: plat_nand: Fix the probe error path mtd: rawnand: socrates: Fix the probe error path mtd: rawnand: orion: Fix the probe error path mtd: rawnand: xway: Fix the probe error path mtd: rawnand: sharpsl: Fix the probe error path mtd: rawnand: diskonchip: Fix the probe error path mtd: rawnand: Pass a nand_chip object to nand_release() * media: dvb_frontend: fix return error code drivers/media/dvb-core/dvb_frontend.c * media: dvb_frontend: fix wrong cast in compat_ioctl drivers/media/dvb-core/dvb_frontend.c * media: dvb_frontend: Add commands implementation for compat ioct drivers/media/dvb-core/dvb_frontend.c * media: dvb_frontend: Add compat_ioctl callback drivers/media/dvb-core/dvb_frontend.c fs/compat_ioctl.c * media: dvb_frontend: Add unlocked_ioctl in dvb_frontend.c drivers/media/dvb-core/dvb_frontend.c * media: dvb_frontend: be sure to init dvb_frontend_handle_ioctl() return code drivers/media/dvb-core/dvb_frontend.c * media: dvb_frontend: dtv_property_process_set() cleanups drivers/media/dvb-core/dvb_frontend.c * media: dvb_frontend: fix return values for FE_SET_PROPERTY drivers/media/dvb-core/dvb_frontend.c include/uapi/linux/dvb/frontend.h * media: dvb_frontend: better document the -EPERM condition drivers/media/dvb-core/dvb_frontend.c * media: dvb_frontend: get rid of property cache's state drivers/media/dvb-core/dvb_frontend.c drivers/media/dvb-core/dvb_frontend.h * media: dvb_frontend: cleanup ioctl handling logic drivers/media/dvb-core/dvb_frontend.c * media: dvb_frontend: cleanup dvb_frontend_ioctl_properties() drivers/media/dvb-core/dvb_frontend.c * media: dvb_frontend: get rid of set_property() callback drivers/media/dvb-core/dvb_frontend.c drivers/media/dvb-core/dvb_frontend.h media: friio-fe: get rid of set_property() media: stv6110: get rid of a srate dead code media: stv0288: get rid of set_property boilerplate * media: dvb_frontend: get rid of get_property() callback drivers/media/dvb-core/dvb_frontend.c drivers/media/dvb-core/dvb_frontend.h * media: dvb/frontend.h: document the uAPI file include/uapi/linux/dvb/frontend.h * media: dvb/frontend.h: move out a private internal structure drivers/media/dvb-core/dvb_frontend.c include/uapi/linux/dvb/frontend.h * media: dvb_frontend: initialize variable s with FE_NONE instead of 0 drivers/media/dvb-core/dvb_frontend.c * net: core: device_rename: Use rwsem instead of a seqcount net/core/dev.c * sched/rt, net: Use CONFIG_PREEMPTION.patch net/core/dev.c e1000e: Do not wake up the system via WOL if device wakeup is disabled * kretprobe: Prevent triggering kretprobe from within kprobe_flush_task include/linux/kprobes.h x86/kprobes: Avoid kretprobe recursion bug powerpc/kprobes: Fixes for kprobe_lookup_name() on BE kprobes: Fix to protect kick_kprobe_optimizer() by kprobe_mutex * crypto: algboss - don't wait during notifier callback crypto/algboss.c drm/i915: Whitelist context-local timestamp in the gen9 cmdparser s390: fix syscall_get_error for compat processes * block: nr_sects_write(): Disable preemption on seqcount write include/linux/genhd.h x86/boot/compressed: Relax sed symbol type regex for LLVM ld.lld * drm/dp_mst: Increase ACT retry timeout to 3s drivers/gpu/drm/drm_dp_mst_topology.c * ext4: fix partial cluster initialization when splitting extent fs/ext4/extents.c * selinux: fix double free security/selinux/ss/services.c drm/qxl: Use correct notify port address when creating cursor ring * drm/dp_mst: Reformat drm_dp_check_act_status() a bit drivers/gpu/drm/drm_dp_mst_topology.c * drm: encoder_slave: fix refcouting error for modules drivers/gpu/drm/drm_encoder_slave.c libata: Use per port sync for detach * block: Fix use-after-free in blkdev_get() fs/block_dev.c bcache: fix potential deadlock problem in btree_gc_coalesce perf report: Fix NULL pointer dereference in hists__fprintf_nr_sample_events() usb/ehci-platform: Set PM runtime as active on resume * usb/xhci-plat: Set PM runtime as active on resume drivers/usb/host/xhci-plat.c scsi: acornscsi: Fix an error handling path in acornscsi_probe() selftests/net: in timestamping, strncpy needs to preserve null byte selftests/vm/pkeys: fix alloc_random_pkey() to make it really random * elfnote: mark all .note sections SHF_ALLOC include/linux/elfnote.h * include/linux/bitops.h: avoid clang shift-count-overflow warnings include/linux/bitops.h * lib/zlib: remove outdated and incorrect pre-increment optimization lib/zlib_inflate/inffast.c crypto: omap-sham - add proper load balancing support for multicore pinctrl: imxl: Fix an error handling path in 'imx1_pinctrl_core_probe()' scsi: iscsi: Fix reference count leak in iscsi_boot_create_kobj gfs2: Allow lock_nolock mount to specify jid=X openrisc: Fix issue with argument clobbering for clone/fork ASoC: fsl_asrc_dma: Fix dma_chan leak when config DMA channel failed extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()' NFSv4.1 fix rpc_call_done assignment for BIND_CONN_TO_SESSION net: sunrpc: Fix off-by-one issues in 'rpc_ntop6' clk: bcm2835: Fix return type of bcm2835_register_gate * usb: gadget: Fix issue with config_ep_by_speed function drivers/usb/gadget/composite.c include/linux/usb/composite.h usb: gadget: fix potential double-free in m66592_probe. usb: gadget: lpc32xx_udc: don't dereference ep pointer before null check USB: gadget: udc: s3c2410_udc: Remove pointless NULL check in s3c2410_udc_nuke usb: dwc2: gadget: move gadget resume after the core is in L0 state watchdog: da9062: No need to ping manually before setting timeout IB/cma: Fix ports memory leak in cma_configfs PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port powerpc/64s/pgtable: fix an undefined behaviour clk: samsung: exynos5433: Add IGNORE_UNUSED flag to sclk_i2s1 tty: n_gsm: Fix bogus i++ in gsm_data_kick USB: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe() drm/msm/mdp5: Fix mdp5_init error path for failed mdp5_kms allocation usb/ohci-platform: Fix a warning when hibernating vfio-pci: Mask cap zero powerpc/ps3: Fix kexec shutdown hang powerpc/pseries/ras: Fix FWNMI_VALID off by one tty: n_gsm: Fix waking up upper tty layer when room available tty: n_gsm: Fix SOF skipping clk: ti: composite: fix memory leak dlm: remove BUG() before panic() scsi: mpt3sas: Fix double free warnings power: supply: smb347-charger: IRQSTAT_D is volatile power: supply: lp8788: Fix an error handling path in 'lp8788_charger_probe()' PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges PCI: rcar: Fix incorrect programming of OB windows * drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a driver developer is foolish drivers/base/platform.c serial: amba-pl011: Make sure we initialize the port.lock spinlock i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output staging: sm750fb: add missing case while setting FB_VISUAL tty: hvc: Fix data abort due to race in hvc_open s390/qdio: put thinint indicator after early error * ALSA: usb-audio: Improve frames size computation sound/usb/card.h sound/usb/endpoint.c sound/usb/endpoint.h sound/usb/pcm.c scsi: ibmvscsi: Don't send host info in adapter info MAD after LPM scsi: sr: Fix sr_probe() missing deallocate of device minor * mksysmap: Fix the mismatch of '.L' symbols in System.map scripts/mksysmap yam: fix possible memory leak in yam_init_driver powerpc/crashkernel: Take "mem=" option into account nfsd: Fix svc_xprt refcnt leak when setup callback client failed powerpc/perf/hv-24x7: Fix inconsistent output values incase multiple hv-24x7 events run clk: clk-flexgen: fix clock-critical handling scsi: lpfc: Fix lpfc_nodelist leak when processing unsolicited event mfd: wm8994: Fix driver operation if loaded as modules vfio/pci: fix memory leaks in alloc_perm_bits() ps3disk: use the default segment boundary PCI: aardvark: Don't blindly enable ASPM L0s and don't write to read-only register usblp: poison URBs upon disconnect i2c: pxa: clear all master action bits in i2c_pxa_stop_message() iio: bmp280: fix compensation of humidity scsi: qla2xxx: Fix issue with adapter's stopping state ALSA: isa/wavefront: prevent out of bounds write in ioctl ARM: integrator: Add some Kconfig selections backlight: lp855x: Ensure regulators are disabled on probe failure clk: qcom: msm8916: Fix the address location of pll->config_reg iio: pressure: bmp280: Tolerate IRQ before registering i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets clk: sunxi: Fix incorrect usage of round_down() * power: supply: bq24257_charger: Replace depends on REGMAP_I2C with select drivers/power/supply/Kconfig Change-Id: I9fdac4691b013061a19d375293b7049b999830d0 Signed-off-by: lucaswei <lucaswei@google.com>	2020-08-11 20:25:36 +08:00
Boris Brezillon	6624691037	mtd: rawnand: Pass a nand_chip object to nand_release() ... [ Upstream commit 59ac276f22270fb2094910f9a734c17f41c25e70 ] Let's make the raw NAND API consistent by patching all helpers to take a nand_chip object instead of an mtd_info one. Now is nand_release()'s turn. Signed-off-by: Boris Brezillon <boris.brezillon@bootlin.com> Signed-off-by: Miquel Raynal <miquel.raynal@bootlin.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2020-06-30 15:38:36 -04:00
lucaswei	ea8ebe3ab8	Merge android-4.9-q (4.9.210) into android-msm-pixel-4.9-lts ... Merge 4.9.210 into android-4.9-q Linux 4.9.210 drm/i915/gen9: Clear residual context state on context switch netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present * netfilter: arp_tables: init netns pointer in xt_tgchk_param struct net/ipv4/netfilter/arp_tables.c * USB: Fix: Don't skip endpoint descriptors with maxpacket=0 drivers/usb/core/config.c rtl8xxxu: prevent leaking urb scsi: bfa: release allocated memory in case of error mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf mwifiex: fix possible heap overflow in mwifiex_process_country_ie() * tty: always relink the port drivers/tty/tty_port.c * tty: link tty and port before configuring it as console drivers/tty/serial/serial_core.c drivers/tty/tty_port.c staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21 staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713 usb: musb: dma: Correct parameter passed to IRQ handler usb: musb: Disable pullup at init usb: musb: fix idling for suspend after disconnect interrupt USB: serial: option: add ZLP support for 0x1bc7/0x9010 staging: vt6656: set usb_set_intfdata on driver fail. can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling to irq mode can: gs_usb: gs_usb_probe(): use descriptors of current altsetting * drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ drivers/gpu/drm/drm_dp_mst_topology.c * Input: add safety guards to input_set_keycode() drivers/input/input.c * HID: hid-input: clear unmapped usages drivers/hid/hid-input.c * HID: uhid: Fix returning EPOLLOUT from uhid_char_poll drivers/hid/uhid.c * HID: Fix slab-out-of-bounds read in hid_field_extract drivers/hid/hid-core.c tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail * tcp: minimize false-positives on TCP/GRO check net/ipv4/tcp_input.c * ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5 sound/usb/quirks.c usb: chipidea: host: Disable port power only if previously enabled * chardev: Avoid potential use-after-free in 'chrdev_open()' fs/char_dev.c * kobject: Export kobject_get_unless_zero() include/linux/kobject.h lib/kobject.c Merge 4.9.209 into android-4.9-q Linux 4.9.209 USB: serial: option: add Telit ME910G1 0x110a composition * USB: core: fix check for duplicate endpoints drivers/usb/core/config.c vlan: fix memory leak in vlan_dev_set_egress_priority * net: sch_prio: When ungrafting, replace with FIFO net/sched/sch_prio.c vlan: vlan_changelink() should propagate errors vxlan: fix tos value before xmit * tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK net/ipv4/tcp_input.c sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM net: usb: lan78xx: fix possible skb leak net: stmmac: dwmac-sunxi: Allow all RGMII modes * macvlan: do not assume mac_header is set in macvlan_broadcast() include/linux/if_ether.h llc2: Fix return statement of llc_stat_ev_rx_null_dsap_xid_c (and _test_c) parisc: Fix compiler warnings in debug_core.c * block: fix memleak when __blk_rq_map_user_iov() is failed block/blk-map.c net: stmmac: RX buffer size must be 16 byte aligned perf/x86/intel: Fix PT PMI handling * kconfig: don't crash on NULL expressions in expr_eq() scripts/kconfig/expr.c regulator: rn5t618: fix module aliases ASoC: wm8962: fix lambda value * rfkill: Fix incorrect check to avoid NULL pointer dereference net/rfkill/core.c net: usb: lan78xx: Fix error message format specifier bnx2x: Fix logic to get total no. of PFs per engine bnx2x: Do not handle requests from VFs after parity powerpc: Ensure that swiotlb buffer is allocated from low memory samples: bpf: Replace symbol compare of trace_event ARM: dts: am437x-gp/epos-evm: fix panel compatible spi: spi-cavium-thunderx: Add missing pci_release_regions() netfilter: uapi: Avoid undefined left-shift in xt_sctp.h ARM: vexpress: Set-up shared OPP table instead of individual for each CPU efi/gop: Fix memory leak in __gop_query32/64() efi/gop: Return EFI_SUCCESS if a usable GOP was found efi/gop: Return EFI_NOT_FOUND if there are no usable GOPs * netfilter: ctnetlink: netns exit must wait for callbacks net/netfilter/nf_conntrack_netlink.c locking/spinlock/debug: Fix various data races * pstore/ram: Write new dumps to start of recycled zones fs/pstore/ram.c locking/x86: Remove the unused atomic_inc_short() methd xen/blkback: Avoid unmapping unmapped grant pages s390/smp: fix physical to logical CPU map for SMT * net: add annotations on hh->hh_len lockless accesses include/net/neighbour.h net/core/neighbour.c net/ethernet/eth.c ath9k_htc: Discard undersized packets ath9k_htc: Modify byte order for an error message rxrpc: Fix possible NULL pointer access in ICMP handling powerpc/pseries/hvconsole: Fix stack overread via udbg * drm/mst: Fix MST sideband up-reply failure handling drivers/gpu/drm/drm_dp_mst_topology.c * fix compat handling of FICLONERANGE, FIDEDUPERANGE and FS_IOC_FIEMAP fs/compat_ioctl.c tty: serial: msm_serial: Fix lockup for sysrq and oops media: usb: fix memory leak in af9005_identify_state regulator: ab8500: Remove AB8505 USB regulator media: flexcop-usb: ensure -EIO is returned on error condition * Bluetooth: Fix memory leak in hci_connect_le_scan net/bluetooth/hci_conn.c * Bluetooth: delete a stray unlock net/bluetooth/l2cap_core.c Bluetooth: btusb: fix PM leak in error case of setup xfs: don't check for AG deadlock for realtime files in bunmapi nfsd4: fix up replay_matches_cache() * PM / devfreq: Check NULL governor in available_governors_show drivers/devfreq/devfreq.c * arm64: Revert support for execute-only user mappings arch/arm64/include/asm/pgtable-prot.h arch/arm64/include/asm/pgtable.h arch/arm64/mm/fault.c mm/mmap.c ftrace: Avoid potential division by zero in function profiler ALSA: cs4236: fix error return comparison of an unsigned integer tracing: Have the histogram compare functions convert to u64 first * gpiolib: fix up emulated open drain outputs drivers/gpio/gpiolib.c ata: ahci_brcm: Fix AHCI resources management ata: ahci_brcm: Allow optional reset controller to be used ata: libahci_platform: Export again ahci_platform_<en/dis>able_phys() * compat_ioctl: block: handle Persistent Reservations block/compat_ioctl.c * dmaengine: Fix access to uninitialized dma_slave_caps include/linux/dmaengine.h * locks: print unsigned ino in /proc/locks fs/locks.c * memcg: account security cred as well to kmemcg kernel/cred.c * mm/zsmalloc.c: fix the migrated zspage statistics. mm/zsmalloc.c MIPS: Avoid VDSO ABI breakage due to global register variable ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code Revert "perf report: Add warning when libunwind not compiled in" * drm: limit to INT_MAX in create_blob ioctl drivers/gpu/drm/drm_property.c * taskstats: fix data-race kernel/taskstats.c xfs: fix mount failure crash on invalid iclog memory access PM / hibernate: memory_bm_find_bit(): Tighten node optimisation xen/balloon: fix ballooned page accounting without hotplug enabled xen-blkback: prevent premature module unload IB/mlx4: Follow mirror sequence of device add during device removal s390/cpum_sf: Avoid SBD overflow condition in irq handler s390/cpum_sf: Adjust sampling interval to avoid hitting sample limits md: raid1: check rdev before reference in raid1_sync_request func usb: gadget: fix wrong endpoint desc scsi: libsas: stop discovering if oob mode is disconnected scsi: iscsi: qla4xxx: fix double free in probe scsi: qla2xxx: Don't call qlt_async_event twice scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func RDMA/cma: add missed unregister_pernet_subsys in init failure * PM / devfreq: Don't fail devfreq_dev_release if not in list drivers/devfreq/devfreq.c * arm64: alternatives: use tpidr_el2 on VHE hosts arch/arm64/mm/proc.S Merge 4.9.208 into android-4.9-q Linux 4.9.208 gtp: avoid zero size hashtable gtp: fix wrong condition in gtp_genl_dump_pdp() * tcp: do not send empty skb from tcp_write_xmit() net/ipv4/tcp_output.c * tcp/dccp: fix possible race __inet_lookup_established() include/linux/rculist_nulls.h include/net/inet_hashtables.h include/net/sock.h net/ipv4/inet_diag.c net/ipv4/inet_hashtables.c net/ipv4/tcp_ipv4.c net/ipv6/inet6_hashtables.c vhost/vsock: accept only packets with the right dst_cid net: ena: fix napi handler misbehavior when the napi budget is zero * mmc: sdhci: Update the tuning failed messages to pr_debug level drivers/mmc/host/sdhci.c pinctrl: baytrail: Really serialize all register accesses tty/serial: atmel: fix out of range clock divider handling * hrtimer: Annotate lockless access to timer->state include/linux/hrtimer.h kernel/time/hrtimer.c * net: icmp: fix data-race in cmp_global_allow() net/ipv4/icmp.c netfilter: bridge: make sure to pull arp header in br_nf_forward_arp() 6pack,mkiss: fix possible deadlock * netfilter: ebtables: compat: reject all padding in matches/watchers net/bridge/netfilter/ebtables.c * filldir[64]: remove WARN_ON_ONCE() for bad directory entries fs/readdir.c * Make filldir[64]() verify the directory entry filename is valid fs/readdir.c perf strbuf: Remove redundant va_end() in strbuf_addv() ALSA: hda - Downgrade error message for single-cmd fallback * net, sysctl: Fix compiler warning when only cBPF is present net/core/sysctl_net_core.c x86/mce: Fix possibly incorrect severity calculation on AMD * kernel: sysctl: make drop_caches write-only kernel/sysctl.c ocfs2: fix passing zero to 'PTR_ERR' warning s390/cpum_sf: Check for SDBT and SDB consistency * libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h include/linux/libfdt_env.h perf regs: Make perf_reg_name() return "unknown" instead of NULL cdrom: respect device capabilities during opening action * scripts/kallsyms: fix definitely-lost memory leak scripts/kallsyms.c gpio: mpc8xxx: Don't overwrite default irq_set_type callback scsi: target: iscsi: Wait for all commands to finish before freeing a session scsi: scsi_debug: num_tgts must be >= 0 scsi: pm80xx: Fix for SATA device discovery * ext4: work around deleting a file with i_nlink == 0 safely fs/ext4/namei.c * HID: Improve Windows Precision Touchpad detection. drivers/hid/hid-core.c bcache: at least try to shrink 1 node in bch_mca_scan() clk: pxa: fix one of the pxa RTC clocks scsi: atari_scsi: sun3_scsi: Set sg_tablesize to 1 instead of SG_NONE powerpc/security: Fix wrong message when RFI Flush is disable powerpc/pseries/cmm: Implement release() function for sysfs device * scsi: ufs: fix potential bug which ends in system hang drivers/scsi/ufs/ufshcd.c scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences * fs/quota: handle overflows of sysctl fs.quota.* and report as unsigned long fs/quota/dquot.c include/linux/quota.h irqchip: ingenic: Error out if IRQ domain creation failed irqchip/irq-bcm7038-l1: Enable parent IRQ if necessary * clk: qcom: Allow constant ratio freq tables for rcg drivers/clk/qcom/clk-rcg2.c drivers/clk/qcom/common.c scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow * scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6) drivers/scsi/scsi_trace.c * jbd2: Fix statistics for the number of logged blocks fs/jbd2/commit.c powerpc/book3s64/hash: Add cond_resched to avoid soft lockup warning powerpc/security/book3s64: Report L1TF status in sysfs clocksource/drivers/asm9260: Add a check for of_clk_get dma-debug: add a schedule point in debug_dma_dump_mappings() powerpc/pseries: Don't fail hash page table insert for bolted mapping powerpc/pseries: Mark accumulate_stolen_time() as notrace scsi: csiostor: Don't enable IRQs too early scsi: lpfc: Fix SLI3 hba in loop mode not discovering devices scsi: target: compare full CHAP_A Algorithm strings iommu/tegra-smmu: Fix page tables in > 4 GiB memory Input: atmel_mxt_ts - disable IRQ across suspend scsi: lpfc: Fix locking on mailbox command completion scsi: mpt3sas: Fix clear pending bit in ioctl status perf probe: Fix to show function entry line as probe-able mmc: sdhci-of-esdhc: fix P2020 errata handling powerpc/irq: fix stack overflow verification * ext4: check for directory entries too close to block end fs/ext4/dir.c * ext4: fix ext4_empty_dir() for directories with holes fs/ext4/namei.c staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes USB: EHCI: Do not return -EPIPE when hub is disconnected usbip: Fix error path of vhci_recv_ret_submit() * net: dst: Force 4-byte alignment of dst_metrics include/net/dst.h sctp: fully initialize v4 addr in some functions net: usb: lan78xx: Fix suspend/resume PHY register access error net: qlogic: Fix error paths in ql_alloc_large_buffers() net: nfc: nci: fix a possible sleep-in-atomic-context bug in nci_uart_tty_receive() net: hisilicon: Fix a BUG trigered by wrong bytes_compl * mod_devicetable: fix PHY module format include/linux/mod_devicetable.h fjes: fix missed check in fjes_acpi_add * af_packet: set defaule value for tmo net/packet/af_packet.c Btrfs: fix removal logic of the tree mod log that leads to use-after-free issues btrfs: abort transaction after failed inode updates in create_subvol btrfs: return error pointer from alloc_test_extent_buffer btrfs: do not call synchronize_srcu() in inode_tree_del btrfs: don't double lock the subvol_sem for rename exchange * usb: xhci: Fix build warning seen with CONFIG_PM=n drivers/usb/host/xhci-pci.c * Revert "mmc: sdhci: Fix incorrect switch to HS mode" drivers/mmc/host/sdhci.c btrfs: don't prematurely free work in reada_start_machine_worker() * net: phy: initialise phydev speed and duplex sanely drivers/net/phy/phy_device.c libtraceevent: Fix memory leakage in copy_filter_type * crypto: vmx - Avoid weird build failures drivers/crypto/vmx/Makefile crypto: sun4i-ss - Fix 64-bit size_t warnings on sun4i-ss-hash.c fbtft: Make sure string is NULL terminated iwlwifi: check kasprintf() return value x86/insn: Add some Intel instructions to the opcode map spi: st-ssc4: add missed pm_runtime_disable btrfs: don't prematurely free work in run_ordered_work() btrfs: don't prematurely free work in end_workqueue_fn() mmc: tmio: Add MMC_CAP_ERASE to allow erase/discard/trim requests spi: tegra20-slink: add missed clk_unprepare iwlwifi: mvm: fix unaligned read of rx_pkt_status x86/crash: Add a forward declaration of struct kimage * cpufreq: Register drivers only after CPU devices have been registered drivers/cpufreq/cpufreq.c parport: load lowlevel driver if ports not found s390/disassembler: don't hide instruction addresses ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile spi: pxa2xx: Add missed security checks EDAC/ghes: Fix grain calculation media: si470x-i2c: add missed operations in remove media: pvrusb2: Fix oops on tear-down when radio support is not present ath10k: fix get invalid tx rate for Mesh metric perf probe: Filter out instances except for inlined subroutine and subprogram perf probe: Skip end-of-sequence and non statement lines perf probe: Fix to show calling lines of inlined functions perf probe: Return a better scope DIE if there is no best scope perf probe: Skip overlapped location on searching variables perf probe: Fix to probe a function which has no entry pc perf probe: Fix to show inlined function callsite without entry_pc perf probe: Fix to show ranges of variables in functions without entry_pc perf probe: Fix to probe an inline function which has no entry pc perf probe: Walk function lines in lexical blocks perf probe: Fix to list probe event with correct line number perf probe: Fix to find range-only function instance rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt() * ALSA: timer: Limit max amount of slave instances sound/core/timer.c spi: img-spfi: fix potential double release bnx2x: Fix PF-VF communication over multi-cos queues. * Bluetooth: Fix advertising duplicated flags net/bluetooth/hci_request.c pinctrl: sh-pfc: sh7734: Fix duplicate TCLK1_B libata: Ensure ata_port probe has completed before detach * arm64: psci: Reduce the waiting time for cpu_psci_cpu_kill() arch/arm64/kernel/psci.c x86/ioapic: Prevent inconsistent state when moving an interrupt rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot drm/gma500: fix memory disclosures due to uninitialized bytes x86/mce: Lower throttling MCE messages' priority to warning * Bluetooth: hci_core: fix init for HCI_USER_CHANNEL net/bluetooth/hci_core.c iio: adc: max1027: Reset the device at probe time * usb: usbfs: Suppress problematic bind and unbind uevents. drivers/usb/core/devio.c perf report: Add warning when libunwind not compiled in perf test: Report failure for mmap events x86/mm: Use the correct function type for native_set_fixmap() extcon: sm5502: Reset registers during initialization media: ti-vpe: vpe: Make sure YUYV is set as default format media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence number media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel format mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring samples: pktgen: fix proc_cmd command result check logic media: cec-funcs.h: add status_req checks media: flexcop-usb: fix NULL-ptr deref in flexcop_usb_transfer_init() regulator: max8907: Fix the usage of uninitialized variable in max8907_regulator_probe() hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled usb: renesas_usbhs: add suspend event support in gadget mode tools/power/cpupower: Fix initializer override in hsw_ext_cstates media: ov6650: Fix stored frame format not in sync with hardware media: i2c: ov2659: Fix missing 720p register config media: i2c: ov2659: fix s_stream return value media: am437x-vpfe: Setting STD to current value is not an error IB/iser: bound protection_sg size by data_sg size libertas: fix a potential NULL pointer dereference rtlwifi: prevent memory leak in rtl_usb_probe staging: rtl8188eu: fix possible null dereference staging: rtl8192u: fix multiple memory leaks on error path * spi: Add call to spi_slave_abort() function when spidev driver is released drivers/spi/spidev.c iio: light: bh1750: Resolve compiler warning and make code more readable drm/bridge: analogix-anx78xx: silence -EPROBE_DEFER warnings * drm: mst: Fix query_payload ack reply struct include/drm/drm_dp_mst_helper.h ALSA: hda/ca0132 - Avoid endless loop ALSA: hda/ca0132 - Keep power on during processing DSP response * ALSA: pcm: Avoid possible info leaks from PCM stream buffers sound/core/pcm_native.c btrfs: handle ENOENT in btrfs_uuid_tree_iterate btrfs: do not leak reloc root if we fail to read the fs root btrfs: skip log replay on orphaned roots * UPSTREAM: HID: input: map digitizer battery usage drivers/hid/hid-input.c include/linux/hid.h ANDROID: cuttlefish_defconfig: Disable TRANSPARENT_HUGEPAGE Merge 4.9.207 into android-4.9-q Linux 4.9.207 net: stmmac: don't stop NAPI processing when dropping a packet net: stmmac: use correct DMA buffer size in the RX descriptor * xhci: fix USB3 device initiated resume race with roothub autosuspend drivers/usb/host/xhci-hub.c drivers/usb/host/xhci-ring.c drivers/usb/host/xhci.h drm/radeon: fix r1xx/r2xx register checker for POT textures scsi: iscsi: Fix a potential deadlock in the timeout handler dm btree: increase rebalance threshold in __rebalance2() * dma-buf: Fix memory leak in sync_file_merge() drivers/dma-buf/sync_file.c vfio/pci: call irq_bypass_unregister_producer() before freeing irq ARM: tegra: Fix FLOW_CTLR_HALT register clobbering by tegra_resume() ARM: dts: s3c64xx: Fix init order of clock providers CIFS: Respect O_SYNC and O_DIRECT flags during reconnect xtensa: fix TLB sanity checker * PCI/MSI: Fix incorrect MSI-X masking on resume drivers/pci/msi.c * PCI: Fix Intel ACS quirk UPDCR register address drivers/pci/quirks.c * Revert "regulator: Defer init completion for a while after late_initcall" drivers/regulator/core.c * tcp: Protect accesses to .ts_recent_stamp with {READ,WRITE}_ONCE() include/net/tcp.h * tcp: tighten acceptance of ACKs not matching a child socket include/net/tcp.h * tcp: fix rejected syncookies due to stale timestamps include/linux/time.h include/net/tcp.h * inet: protect against too small mtu values. include/linux/netdevice.h include/net/ip.h net/core/dev.c net/ipv4/devinet.c net/ipv4/ip_output.c tipc: fix ordering of tipc module init and exit routine * tcp: md5: fix potential overestimation of TCP option space net/ipv4/tcp_output.c openvswitch: support asymmetric conntrack net: ethernet: ti: cpsw: fix extra rx interrupt * net: bridge: deny dev_set_mac_address() when unregistering net/bridge/br_device.c nvme: host: core: fix precedence of ternary operator * kernel/module.c: wakeup processes in module_wq on module unload kernel/module.c net/mlx5e: Fix SFF 8472 eeprom length sunrpc: fix crash when cache_head become valid before update * workqueue: Fix missing kfree(rescuer) in destroy_workqueue() kernel/workqueue.c * blk-mq: make sure that line break can be printed block/blk-mq-sysfs.c * ext4: fix a bug in ext4_wait_for_tail_page_commit fs/ext4/inode.c * mm/shmem.c: cast the type of unmap_start to u64 mm/shmem.c * firmware: qcom: scm: Ensure 'a0' status code is treated as signed drivers/firmware/qcom_scm-64.c reiserfs: fix extended attributes on the root directory powerpc: Fix vDSO clock_getres() scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() scsi: qla2xxx: Fix session lookup in qlt_abort_work() scsi: qla2xxx: Fix DMA unmap leak pinctrl: samsung: Fix device node refcount leaks in S3C64xx wakeup controller init ARM: dts: omap3-tao3530: Fix incorrect MMC card detection GPIO polarity ath10k: fix fw crash by moving chip reset after napi disabled x86/MCE/AMD: Carve out the MC4_MISC thresholding quirk x86/MCE/AMD: Turn off MC4_MISC thresholding on all family 0x15 models e100: Fix passing zero to 'PTR_ERR' warning in e100_load_ucode_wait scsi: lpfc: Cap NPIV vports to 256 omap: pdata-quirks: remove openpandora quirks for mmc3 and wl1251 Btrfs: fix negative subv_writers counter and data space leak after buffered write iio: adis16480: Add debugfs_reg_access entry * xhci: make sure interrupts are restored to correct state drivers/usb/host/xhci-hub.c * xhci: Fix memory leak in xhci_add_in_port() drivers/usb/host/xhci-mem.c * usb: xhci: only set D3hot for pci device drivers/usb/host/xhci-pci.c drivers/usb/host/xhci.c drivers/usb/host/xhci.h scsi: zfcp: trace channel log even for FCP command responses * quota: fix livelock in dquot_writeback_dquots fs/quota/dquot.c ext2: check err when partial != NULL * quota: Check that quota is not dirty before release fs/quota/dquot.c include/linux/quotaops.h * video/hdmi: Fix AVI bar unpack drivers/video/hdmi.c powerpc: Allow 64bit VDSO __kernel_sync_dicache to work across ranges >4GB ppdev: fix PPGETTIME/PPSETTIME ioctls mmc: host: omap_hsmmc: add code for special init of wl1251 to get rid of pandora_wl1251_init_card pinctrl: samsung: Fix device node refcount leaks in init code pinctrl: samsung: Fix device node refcount leaks in S3C24xx wakeup controller init ACPI: PM: Avoid attaching ACPI PM domain to certain devices ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data() ACPI: OSL: only free map once in osl.c * PM / devfreq: Lock devfreq in trans_stat_show drivers/devfreq/devfreq.c * cpuidle: Do not unset the driver if it is there already drivers/cpuidle/driver.c media: radio: wl1273: fix interrupt masking on release media: bdisp: fix memleak on release ar5523: check NULL before memcpy() in ar5523_cmd() cgroup: pids: use atomic64_t for pids->limit * blk-mq: avoid sysfs buffer overflow with too many CPU cores block/blk-mq-sysfs.c * ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report sound/soc/soc-jack.c * workqueue: Fix pwq ref leak in rescuer_thread() kernel/workqueue.c * workqueue: Fix spurious sanity check failures in destroy_workqueue() kernel/workqueue.c ALSA: hda - Fix pending unsol events at shutdown lib: raid6: fix awk build warnings rtlwifi: rtl8192de: Fix missing enable interrupt flag rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address btrfs: record all roots for rename exchange on a subvol Btrfs: send, skip backreference walking for extents with many references btrfs: Remove btrfs_bio::flags member btrfs: check page->mapping when loading free space cache virtio-balloon: fix managed page counts when migrating pages between zones mtd: spear_smi: Fix Write Burst mode usb: mon: Fix a deadlock in usbmon between mmap and read * usb: core: urb: fix URB structure initialization function drivers/usb/core/urb.c USB: adutux: fix interface sanity check USB: serial: io_edgeport: fix epic endpoint lookup USB: idmouse: fix interface sanity checks USB: atm: ueagle-atm: add missing endpoint check iio: humidity: hdc100x: fix IIO_HUMIDITYRELATIVE channel reporting ARM: dts: pandora-common: define wl1251 as child node of mmc3 * xhci: Increase STS_HALT timeout in xhci_suspend() drivers/usb/host/xhci.c staging: gigaset: add endpoint-type sanity check staging: gigaset: fix illegal free on probe errors staging: gigaset: fix general protection fault on probe staging: rtl8712: fix interface sanity check staging: rtl8188eu: fix interface sanity check * usb: Allow USB device to be warm reset in suspended state drivers/usb/core/hub.c USB: uas: heed CAPACITY_HEURISTICS USB: uas: honor flag to avoid CAPACITY16 * usb: gadget: configfs: Fix missing spin_lock_init() drivers/usb/gadget/configfs.c appletalk: Set error code if register_snap_client failed * appletalk: Fix potential NULL pointer dereference in unregister_snap_client include/linux/atalk.h KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332) * thermal: Fix deadlock in thermal thermal_zone_device_check drivers/thermal/thermal_core.c RDMA/qib: Validate ->show()/store() callbacks before calling them spi: atmel: Fix CS high support crypto: user - fix memory leak in crypto_report crypto: ecdh - fix big endian bug in ECC library crypto: ccp - fix uninitialized list head crypto: crypto4xx - fix double-free in crypto4xx_destroy_sdr KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES KVM: x86: do not modify masked bits of shared MSRs drm/i810: Prevent underflow in ioctl * jbd2: Fix possible overflow in jbd2_log_space_left() include/linux/jbd2.h can: slcan: Fix use-after-free Read in slcan_open * tty: vt: keyboard: reject invalid keycodes drivers/tty/vt/keyboard.c CIFS: Fix SMB2 oplock break processing CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect coresight: etm4x: Fix input validation for sysfs. Input: goodix - add upside-down quirk for Teclast X89 tablet ALSA: pcm: oss: Avoid potential buffer overflows * fuse: verify attributes fs/fuse/dir.c fs/fuse/fuse_i.h * fuse: verify nlink fs/fuse/dir.c * sched/fair: Scale bandwidth quota and period without losing quota/period ratio precision kernel/sched/fair.c ARM: dts: sunxi: Fix PMU compatible strings mlx4: Use snprintf instead of complicated strcpy media: stkwebcam: Bugfix for wrong return values * tty: Don't block on IO when ldisc change is pending drivers/tty/n_tty.c drivers/tty/tty_ldisc.c include/linux/tty.h nfsd: Return EPERM, not EACCES, in some SETATTR cases MIPS: OCTEON: cvmx_pko_mem_debug8: use oldest forward compatible definition powerpc/math-emu: Update macros from GCC net/mlx4_core: Fix return codes of unsupported operations dlm: fix invalid cluster name warning ARM: dts: realview: Fix some more duplicate regulator nodes clk: sunxi-ng: h3/h5: Fix CSI_MCLK parent ARM: dts: pxa: clean up USB controller nodes mtd: fix mtd_oobavail() incoherent returned value * kbuild: fix single target build for external module Makefile * modpost: skip ELF local symbols during section mismatch check scripts/mod/modpost.c * tcp: fix SNMP TCP timeout under-estimation net/ipv4/tcp_timer.c * tcp: fix off-by-one bug on aborting window-probing socket net/ipv4/tcp_timer.c ARM: dts: realview-pbx: Fix duplicate regulator nodes ARM: dts: mmp2: fix the gpio interrupt cell number net/x25: fix null_x25_address handling net/x25: fix called/calling length calculation in x25_parse_address_block ARM: OMAP1/2: fix SoC name printing nfsd: fix a warning in __cld_pipe_upcall() ARM: debug: enable UART1 for socfpga Cyclone5 dlm: NULL check before kmem_cache_destroy is not needed i2c: imx: don't print error message on probe defer serial: imx: fix error handling in console_setup altera-stapl: check for a null key before strcasecmp'ing it * dma-mapping: fix return type of dma_set_max_seg_size() include/linux/dma-mapping.h * ACPI: fix acpi_find_child_device() invocation in acpi_preset_companion() include/linux/acpi.h * usb: dwc3: don't log probe deferrals; but do log other error codes drivers/usb/dwc3/core.c dmaengine: coh901318: Remove unused variable dmaengine: coh901318: Fix a double-lock bug media: pulse8-cec: return 0 when invalidating the logical address ARM: dts: exynos: Use Samsung SoC specific compatible for DWC2 module rtc: dt-binding: abx80x: fix resistance scale rtc: max8997: Fix the returned value in case of error in 'max8997_rtc_read_alarm()' math-emu/soft-fp.h: (_FP_ROUND_ZERO) cast 0 to void to fix warning MIPS: OCTEON: octeon-platform: fix typing * regulator: Fix return value of _set_load() stub include/linux/regulator/consumer.h Staging: iio: adt7316: Fix i2c data reading, set the data field pinctrl: qcom: ssbi-gpio: fix gpio-hog related boot issues scsi: zfcp: drop default switch case which might paper over missing case MIPS: SiByte: Enable ZONE_DMA32 for LittleSur dlm: fix missing idr_destroy for recover_idr ARM: dts: rockchip: Fix rk3288-rock2 vcc_flash name clk: rockchip: fix rk3188 sclk_mac_lbtest parameter ordering clk: rockchip: fix rk3188 sclk_smc gate data extcon: max8997: Fix lack of path setting in USB device mode net/mlx5: Release resource on error flow ARM: 8813/1: Make aligned 2-byte getuser()/putuser() atomic on ARMv6+ iwlwifi: mvm: Send non offchannel traffic via AP sta cxgb4vf: fix memleak in mac_hlist initialization * serial: core: Allow processing sysrq at port unlock time include/linux/serial_core.h net: ep93xx_eth: fix mismatch of request_mem_region in remove rsxx: add missed destroy_workqueue calls in remove * ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed() sound/core/pcm_lib.c Input: cyttsp4_core - fix use after free bug NFC: nxp-nci: Fix NULL pointer dereference after I2C communication error audit_get_nd(): don't unlock parent too early exportfs_decode_fh(): negative pinned may become positive without the parent locked RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN autofs: fix a leak in autofs_expire_indirect() serial: ifx6x60: add missed pm_runtime_disable * serial: serial_core: Perform NULL checks for break_ctl ops drivers/tty/serial/serial_core.c serial: pl011: Fix DMA ->flush_buffer() tty: serial: msm_serial: Fix flow control tty: serial: fsl_lpuart: use the sg count from dma_map_sg usb: gadget: u_serial: add missing port entry locking arm64: tegra: Fix 'active-low' warning for Jetson TX1 regulator * UPSTREAM: binder: fix incorrect calculation for num_valid drivers/android/binder.c * ANDROID: sched/core: Fix arm32 allmodconfig build-break include/trace/events/sched.h * BACKPORT: bpf: permit multiple bpf attachments for a single perf event include/linux/bpf.h include/linux/trace_events.h include/trace/perf.h kernel/bpf/core.c kernel/events/core.c kernel/trace/bpf_trace.c kernel/trace/trace_kprobe.c * UPSTREAM: bpf: use the same condition in perf event set/free bpf handler kernel/events/core.c * BACKPORT: bpf: multi program support for cgroup+bpf include/linux/bpf-cgroup.h include/linux/bpf.h include/linux/filter.h include/uapi/linux/bpf.h kernel/bpf/cgroup.c kernel/bpf/core.c kernel/bpf/syscall.c kernel/cgroup.c Merge 4.9.206 into android-4.9-q Linux 4.9.206 net: fec: fix clock count mis-match platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer hwrng: stm32 - fix unbalanced pm_runtime_enable * HID: core: check whether Usage Page item is after Usage ID items drivers/hid/hid-core.c * net: sched: fix `tc -s class show` no bstats on class with nolock subqueues net/sched/sch_mq.c net/sched/sch_multiq.c net/sched/sch_prio.c * sctp: cache netns in sctp_ep_common include/net/sctp/structs.h tipc: fix link name length check openvswitch: remove another BUG_ON() openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() slip: Fix use-after-free Read in slip_open openvswitch: fix flow command message size macvlan: schedule bc_work even if error media: atmel: atmel-isc: fix asd memory allocation * pwm: Clear chip_data in pwm_put() drivers/pwm/core.c net: macb: fix error format in dev_err() * media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE drivers/media/v4l2-core/v4l2-ctrls.c mei: bus: prefix device names on bus with the bus name USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P staging: rtl8192e: fix potential use after free clk: at91: fix update bit maps on CFG_MOR write mm, gup: add missing refcount overflow checks on x86 and s390 mtd: Remove a debug trace in mtdpart.c powerpc/pseries/dlpar: Fix a missing check in dlpar_parse_cc_property() scsi: libsas: Check SMP PHY control function result ACPI / APEI: Switch estatus pool to use vmalloc memory scsi: libsas: Support SATA PHY connection rate unmatch fixing during discovery iommu/amd: Fix NULL dereference bug in match_hid_uid * net: dev: Use unsigned integer as an argument to left-shift include/linux/netdevice.h sctp: don't compare hb_timer expire date before starting it * net: fix possible overflow in __sk_mem_raise_allocated() include/net/sock.h net/core/sock.c sfc: initialise found bitmap in efx_ef10_mtd_probe tipc: fix skb may be leaky in tipc_link_input decnet: fix DN_IFREQ_SIZE * ip_tunnel: Make none-tunnel-dst tunnel port work with lwtunnel net/ipv4/ip_tunnel.c sfc: suppress duplicate nvmem partition types in efx_ef10_mtd_probe * net/core/neighbour: fix kmemleak minimal reference count for hash tables net/core/neighbour.c * net/core/neighbour: tell kmemleak about hash tables net/core/neighbour.c tipc: fix memory leak in tipc_nl_compat_publ_dump mtd: Check add_mtd_device() ret code * lib/genalloc.c: include vmalloc.h lib/genalloc.c * drivers/base/platform.c: kmemleak ignore a known leak drivers/base/platform.c * lib/genalloc.c: use vzalloc_node() to allocate the bitmap lib/genalloc.c * lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk include/linux/genalloc.h lib/genalloc.c * vmscan: return NODE_RECLAIM_NOSCAN in node_reclaim() when CONFIG_NUMA is n include/linux/swap.h mm/internal.h ocfs2: clear journal dirty flag after shutdown journal net/wan/fsl_ucc_hdlc: Avoid double free in ucc_hdlc_probe() tipc: fix a missing check of genlmsg_put atl1e: checking the status of atl1e_write_phy_reg net: dsa: bcm_sf2: Propagate error value from mdio_write net: stmicro: fix a missing check of clk_prepare um: Make GCOV depend on !KCOV * net/net_namespace: Check the return value of register_pernet_subsys() net/core/net_namespace.c pwm: clps711x: Fix period calculation crypto: mxc-scc - fix build warnings on ARM64 powerpc/pseries: Fix node leak in update_lmb_associativity_index() powerpc/83xx: handle machine check caused by watchdog timer regulator: tps65910: fix a missing check of return value drbd: fix print_st_err()'s prototype to match the definition drbd: do not block when adjusting "disk-options" while IO is frozen drbd: reject attach of unsuitable uuids even if connected drbd: ignore "all zero" peer volume sizes in handshake powerpc/powernv/eeh/npu: Fix uninitialized variables in opal_pci_eeh_freeze_status vfio/spapr_tce: Get rid of possible infinite loop powerpc/44x/bamboo: Fix PCI range powerpc/mm: Make NULL pointer deferences explicit on bad page faults. powerpc/prom: fix early DEBUG messages ath6kl: Fix off by one error in scan completion ath6kl: Only use match sets when firmware supports it scsi: csiostor: fix incorrect dma device in case of vport scsi: qla2xxx: deadlock by configfs_depend_item RDMA/srp: Propagate ib_post_send() failures to the SCSI mid-layer openrisc: Fix broken paths to arch/or32 serial: max310x: Fix tx_empty() callback drivers/regulator: fix a missing check of return value powerpc/xmon: fix dump_segments() powerpc/book3s/32: fix number of bats in p/v_block_mapped() IB/qib: Fix an error code in qib_sdma_verbs_send() xfs: Fix bulkstat compat ioctls on x32 userspace. xfs: Align compat attrlist_by_handle with native implementation. gfs2: take jdata unstuff into account in do_grow dm flakey: Properly corrupt multi-page bios. HID: doc: fix wrong data structure reference for UHID_OUTPUT pinctrl: sh-pfc: sh7734: Fix shifted values in IPSR10 pinctrl: sh-pfc: sh7264: Fix PFCR3 and PFCR0 register configuration KVM: s390: unregister debug feature on failing arch init net/mlx5: Continue driver initialization despite debugfs failure pinctrl: xway: fix gpio-hog related boot issues xen/pciback: Check dev_data before using it HID: intel-ish-hid: fixes incorrect error handling btrfs: only track ref_heads in delayed_ref_updates mtd: rawnand: sunxi: Write pageprog related opcodes to WCMD_SET VSOCK: bind to random port for VMADDR_PORT_ANY * gpiolib: Fix return value of gpio_to_desc() stub if !GPIOLIB include/linux/gpio/consumer.h microblaze: move "... is ready" messages to arch/microblaze/Makefile microblaze: adjust the help to the real behavior ubi: Do not drop UBI device reference before using ubi: Put MTD device after it is not used xfs: require both realtime inodes to mount rtl818x: fix potential use after free mwifiex: debugfs: correct histogram spacing, formatting mwifiex: fix potential NULL dereference and use after free crypto: user - support incremental algorithm dumps ACPI / LPSS: Ignore acpi_device_fix_up_power() return value ARM: ks8695: fix section mismatch warning PM / AVS: SmartReflex: NULL check before some freeing functions is not needed * arm64: smp: Handle errors reported by the firmware arch/arm64/kernel/smp.c * arm64: mm: Prevent mismatched 52-bit VA support arch/arm64/kernel/head.S arch/arm64/kernel/smp.c parisc: Fix HP SDC hpa address output parisc: Fix serio address output ARM: dts: imx53-voipac-dmm-668: Fix memory node duplication ARM: debug-imx: only define DEBUG_IMX_UART_PORT if needed scsi: lpfc: Fix dif and first burst use in write commands pwm: bcm-iproc: Prevent unloading the driver module while in use block: drbd: remove a stray unlock in __drbd_send_protocol() mac80211: fix station inactive_time shortly after boot scripts/gdb: fix debugging modules compiled with hot/cold partitioning watchdog: meson: Fix the wrong value of left time can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset on open can: peak_usb: report bus recovery as well net: fec: add missed clk_disable_unprepare in remove clk: at91: avoid sleeping early * reset: fix reset_control_ops kerneldoc comment include/linux/reset-controller.h clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume ASoC: kirkwood: fix external clock probe defer * ASoC: compress: fix unsigned integer overflow check sound/core/compress_offload.c Change-Id: Ida917e8b91aa0dd373b92c6bdc283734141543d4 Signed-off-by: lucaswei <lucaswei@google.com>	2020-02-14 10:56:19 +08:00
Miquel Raynal	1bd5701bbe	mtd: fix mtd_oobavail() incoherent returned value ... [ Upstream commit 4348433d8c0234f44adb6e12112e69343f50f0c5 ] mtd_oobavail() returns either mtd->oovabail or mtd->oobsize. Both values are unsigned 32-bit entities, so there is no reason to pretend returning a signed one. Signed-off-by: Miquel Raynal <miquel.raynal@bootlin.com> Signed-off-by: Boris Brezillon <boris.brezillon@bootlin.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2019-12-21 10:41:19 +01:00
Petri Gynther	c5455d53de	Merge 4.9.98 into android-msm-bluecross-4.9-lts ... Linux 4.9.98 powerpc/eeh: Fix race with driver un/bind x86/microcode/intel: Save microcode patch unconditionally x86/smpboot: Don't use mwait_play_dead() on AMD systems x86/ipc: Fix x32 version of shmid64_ds and msqid64_ds tools/lib/subcmd/pager.c: do not alias select() params objtool, perf: Fix GCC 8 -Wrestrict error drm/amdgpu: set COMPUTE_PGM_RSRC1 for SGPR/VGPR clearing shaders rtc: opal: Fix OPAL RTC driver OPAL_BUSY loops cpufreq: powernv: Fix hardlockup due to synchronous smp_call in timer interrupt * earlycon: Use a pointer table to fix __earlycon_table stride drivers/of/fdt.c drivers/tty/serial/earlycon.c include/asm-generic/vmlinux.lds.h include/linux/serial_core.h libceph: validate con->state at the top of try_write() libceph: reschedule a tick in finish_hunting() libceph: un-backoff on tick when we have a authenticated session ASoC: fsl_esai: Fix divisor calculation failure at lower ratio * crypto: drbg - set freed buffers to NULL crypto/drbg.c * ARM: amba: Don't read past the end of sysfs "driver_override" buffer drivers/amba/bus.c * ARM: amba: Fix race condition with driver_override drivers/amba/bus.c * ARM: amba: Make driver_override output consistent with other buses drivers/amba/bus.c PCI: aardvark: Fix PCIe Max Read Request Size setting PCI: aardvark: Set PIO_ADDR_LS correctly in advk_pcie_rd_conf() PCI: aardvark: Fix logic in advk_pcie_{rd,wr}_conf() * scsi: sd: Defer spinning up drive while SANITIZE is in progress drivers/scsi/sd.c * kobject: don't use WARN for registration failures lib/kobject.c mtd: cfi: cmdset_0002: Do not allow read/write to suspend erase block. mtd: cfi: cmdset_0001: Workaround Micron Erase suspend bug. mtd: cfi: cmdset_0001: Do not allow read/write to suspend erase block. ALSA: hda/realtek - Add some fixes for ALC233 ALSA: hda: Hardening for potential Spectre v1 ALSA: seq: oss: Hardening for potential Spectre v1 ALSA: seq: oss: Fix unbalanced use lock for synth MIDI device * ALSA: core: Report audio_tstamp in snd_pcm_sync_ptr sound/core/pcm_native.c * ALSA: control: Hardening for potential Spectre v1 include/sound/control.h ALSA: rme9652: Hardening for potential Spectre v1 ALSA: hdspm: Hardening for potential Spectre v1 ALSA: asihpi: Hardening for potential Spectre v1 ALSA: opl3: Hardening for potential Spectre v1 ALSA: dice: fix error path to destroy initialized stream data ALSA: dice: fix OUI for TC group * tty: Use __GFP_NOFAIL for tty_ldisc_get() drivers/tty/tty_ldisc.c tty: n_gsm: Fix DLCI handling for ADM mode if debug & 2 is not set tty: n_gsm: Fix long delays with control frame timeouts in ADM mode * tty: Don't call panic() at tty_ldisc_init() drivers/tty/tty_io.c drivers/tty/tty_ldisc.c include/linux/tty.h drm/virtio: fix vq wait_event condition virtio_console: free buffers after reset * virtio: add ability to iterate over vqs include/linux/virtio.h * ALSA: usb-audio: Skip broken EU on Dell dock USB-audio sound/usb/mixer_maps.c * USB: Increment wakeup count on remote wakeup. drivers/usb/core/hcd.c drivers/usb/core/hub.c * usb: core: Add quirk for HP v222w 16GB Mini drivers/usb/core/quirks.c USB: serial: cp210x: add ID for NI USB serial console USB: serial: ftdi_sio: use jtag quirk for Arrow USB Blaster * USB: serial: simple: add libtransistor console drivers/usb/serial/Kconfig usbip: vhci_hcd: Fix usb device and sockfd leaks usbip: usbip_host: fix to hold parent lock for device_attach() calls usbip: usbip_event: fix to not print kernel pointer address * random: rate limit unseeded randomness warnings drivers/char/random.c * random: fix possible sleeping allocation from irq context drivers/char/random.c * random: set up the NUMA crng instances after the CRNG is fully initialized drivers/char/random.c * ext4: fix bitmap position validation fs/ext4/balloc.c * ext4: add validity checks for bitmap block numbers fs/ext4/balloc.c fs/ext4/ialloc.c * ext4: set h_journal if there is a failure starting a reserved handle fs/jbd2/transaction.c * ext4: prevent right-shifting extents beyond EXT_MAX_BLOCKS fs/ext4/extents.c Change-Id: Ifb1c384eb4b130ae2da4e7d5702deddabb09b6b9 Signed-off-by: Petri Gynther <pgynther@google.com>	2018-08-10 19:24:15 -07:00
Joakim Tjernlund	54a21fe4d8	mtd: cfi: cmdset_0001: Do not allow read/write to suspend erase block. ... commit 6510bbc88e3258631831ade49033537081950605 upstream. Currently it is possible to read and/or write to suspend EB's. Writing /dev/mtdX or /dev/mtdblockX from several processes may break the flash state machine. Signed-off-by: Joakim Tjernlund <joakim.tjernlund@infinera.com> Cc: <stable@vger.kernel.org> Reviewed-by: Richard Weinberger <richard@nod.at> Signed-off-by: Boris Brezillon <boris.brezillon@bootlin.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2018-05-01 15:13:07 -07:00
Blagovest Kolenichev	82ccf838e2	Merge android-4.9-o.82 (2d34d45) into msm-4.9 ... * refs/heads/tmp-2d34d45: Linux 4.9.82 ftrace: Remove incorrect setting of glob search field mn10300/misalignment: Use SIGSEGV SEGV_MAPERR to report a failed user copy ovl: fix failure to fsync lower dir acpi, nfit: fix register dimm error handling ACPI: sbshc: remove raw pointer from printk() message drm/i915: Avoid PPS HW/SW state mismatch due to rounding btrfs: Handle btrfs_set_extent_delalloc failure in fixup worker lib/ubsan: add type mismatch handler for new GCC/Clang lib/ubsan.c: s/missaligned/misaligned/ clocksource/drivers/stm32: Fix kernel panic with multiple timers pktcdvd: Fix pkt_setup_dev() error path pinctrl: intel: Initialize GPIO properly when used through irqchip EDAC, octeon: Fix an uninitialized variable warning xtensa: fix futex_atomic_cmpxchg_inatomic alpha: fix formating of stack content alpha: fix reboot on Avanti platform alpha: fix crash if pthread_create races with signal delivery signal/sh: Ensure si_signo is initialized in do_divide_error signal/openrisc: Fix do_unaligned_access to send the proper signal Bluetooth: btusb: Restore QCA Rome suspend/resume fix with a "rewritten" version Revert "Bluetooth: btusb: fix QCA Rome suspend/resume" Bluetooth: btsdio: Do not bind to non-removable BCM43341 HID: quirks: Fix keyboard + touchpad on Toshiba Click Mini not working pipe: fix off-by-one error when checking buffer limits pipe: actually allow root to exceed the pipe buffer limits kernel/relay.c: revert "kernel/relay.c: fix potential memory leak" kernel/async.c: revert "async: simplify lowest_in_progress()" fs/proc/kcore.c: use probe_kernel_read() instead of memcpy() media: cxusb, dib0700: ignore XC2028_I2C_FLUSH media: ts2020: avoid integer overflows on 32 bit machines media: dvb-frontends: fix i2c access helpers for KASAN watchdog: imx2_wdt: restore previous timeout after suspend+resume ASoC: skl: Fix kernel warning due to zero NHTL entry ASoC: rockchip: i2s: fix playback after runtime resume KVM: arm/arm64: Handle CPU_PM_ENTER_FAILED KVM: nVMX: Fix races when sending nested PI while dest enters/leaves L2 arm: KVM: Fix SMCCC handling of unimplemented SMC/HVC calls crypto: sha512-mb - initialize pending lengths correctly crypto: caam - fix endless loop when DECO acquire fails media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic media: v4l2-compat-ioctl32.c: don't copy back the result for certain errors media: v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type media: v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 media: v4l2-compat-ioctl32: Copy v4l2_window->global_alpha media: v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs media: v4l2-compat-ioctl32.c: fix ctrl_is_pointer media: v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 media: v4l2-compat-ioctl32.c: avoid sizeof(type) media: v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 media: v4l2-compat-ioctl32.c: fix the indentation media: v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF media: v4l2-ioctl.c: don't copy back the result for -ENOTTY nsfs: mark dentry with DCACHE_RCUACCESS crypto: poly1305 - remove ->setkey() method crypto: mcryptd - pass through absence of ->setkey() crypto: cryptd - pass through absence of ->setkey() crypto: hash - introduce crypto_hash_alg_has_setkey() ahci: Add Intel Cannon Lake PCH-H PCI ID ahci: Add PCI ids for Intel Bay Trail, Cherry Trail and Apollo Lake AHCI ahci: Annotate PCI ids for mobile Intel chipsets as such kernfs: fix regression in kernfs_fop_write caused by wrong type NFS: Fix a race between mmap() and O_DIRECT NFS: reject request for id_legacy key without auxdata NFS: commit direct writes even if they fail partially NFS: Add a cond_resched() to nfs_commit_release_pages() nfs/pnfs: fix nfs_direct_req ref leak when i/o falls back to the mds ubifs: Massage assert in ubifs_xattr_set() wrt. init_xattrs ubi: block: Fix locking for idr_alloc/idr_remove ubi: fastmap: Erase outdated anchor PEBs during attach mtd: nand: sunxi: Fix ECC strength choice mtd: nand: Fix nand_do_read_oob() return value mtd: nand: brcmnand: Disable prefetch by default mtd: cfi: convert inline functions to macros media: hdpvr: Fix an error handling path in hdpvr_probe() media: dvb-usb-v2: lmedm04: move ts2020 attach to dm04_lme2510_tuner media: dvb-usb-v2: lmedm04: Improve logic checking of warm start dccp: CVE-2017-8824: use-after-free in DCCP code sched/rt: Up the root domain ref count when passing it around via IPIs sched/rt: Use container_of() to get root domain in rto_push_irq_work_func() usb: gadget: uvc: Missing files for configfs interface posix-timer: Properly check sigevent->sigev_notify kaiser: fix compile error without vsyscall dmaengine: dmatest: fix container_of member in dmatest_callback CIFS: zero sensitive data when freeing cifs: Fix autonegotiate security settings mismatch cifs: Fix missing put_xid in cifs_file_strict_mmap powerpc/pseries: include linux/types.h in asm/hvcall.h Conflicts: drivers/media/v4l2-core/v4l2-compat-ioctl32.c Change-Id: Ibd9486e6f8be9673b381f86d69fafa081c8f2539 Signed-off-by: Blagovest Kolenichev <bkolenichev@codeaurora.org>	2018-02-27 01:11:43 -08:00
Arnd Bergmann	cbdabc7027	mtd: cfi: convert inline functions to macros ... commit 9e343e87d2c4c707ef8fae2844864d4dde3a2d13 upstream. The map_word_() functions, dating back to linux-2.6.8, try to perform bitwise operations on a 'map_word' structure. This may have worked with compilers that were current then (gcc-3.4 or earlier), but end up being rather inefficient on any version I could try now (gcc-4.4 or higher). Specifically we hit a problem analyzed in gcc PR81715 where we fail to reuse the stack space for local variables. This can be seen immediately in the stack consumption for cfi_staa_erase_varsize() and other functions that (with CONFIG_KASAN) can be up to 2200 bytes. Changing the inline functions into macros brings this down to 1280 bytes. Without KASAN, the same problem exists, but the stack consumption is lower to start with, my patch shrinks it from 920 to 496 bytes on with arm-linux-gnueabi-gcc-5.4, and saves around 1KB in .text size for cfi_cmdset_0020.c, as it avoids copying map_word structures for each call to one of these helpers. With the latest gcc-8 snapshot, the problem is fixed in upstream gcc, but nobody uses that yet, so we should still work around it in mainline kernels and probably backport the workaround to stable kernels as well. We had a couple of other functions that suffered from the same gcc bug, and all of those had a simpler workaround involving dummy variables in the inline function. Unfortunately that did not work here, the macro hack was the best I could come up with. It would also be helpful to have someone to a little performance testing on the patch, to see how much it helps in terms of CPU utilitzation. Link: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=81715 Signed-off-by: Arnd Bergmann <arnd@arndb.de> Acked-by: Richard Weinberger <richard@nod.at> Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2018-02-17 13:21:13 +01:00
Sahitya Tummala	88c3522c0f	Revert "mtd: make mtd_partition.name const" ... This reverts 'commit 26a6d240e2 ("mtd: make mtd_partition.name const")'. This is needed to fix the compilation issue with msm_qpic_nand driver which makes changes to mtd partition name. Change-Id: Ic10df9c29d08d3df5df351f33e84a2c8e5158b43 Signed-off-by: Sahitya Tummala <stummala@codeaurora.org>	2017-06-19 08:27:32 +05:30
Boris Brezillon	73f907fd5f	mtd: nand: Fix data interface configuration logic ... When changing from one data interface setting to another, one has to ensure a specific sequence which is described in the ONFI spec. One of these constraints is that the CE line has go high after a reset before a command can be sent with the new data interface setting, which is not guaranteed by the current implementation. Rework the nand_reset() function and all the call sites to make sure the CE line is asserted and released when required. Also make sure to actually apply the new data interface setting on the first die. Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com> Fixes: d8e725dd83 ("mtd: nand: automate NAND timings selection") Reviewed-by: Sascha Hauer <s.hauer@pengutronix.de> Tested-by: Marc Gonzalez <marc_gonzalez@sigmadesigns.com>	2016-10-28 09:58:36 +02:00
Brian Norris	69db4aa44f	Merge tag '4.9/mtd-pairing-scheme' of github.com:linux-nand/linux ... Introduction of the MTD pairing scheme concept.	2016-10-08 20:56:54 -07:00
Richard Weinberger	d44154f969	mtd: nand: Provide nand_cleanup() function to free NAND related resources ... Provide a nand_cleanup() function to free all nand related resources without unregistering the mtd device. This should allow drivers to call mtd_device_unregister() and handle its return value and still being able to cleanup all nand related resources. Signed-off-by: Richard Weinberger <richard@nod.at> Signed-off-by: Daniel Walter <dwalter@sigma-star.at> Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-09-23 09:35:16 +02:00
Boris Brezillon	ba78ee00e1	mtd: nand: Add an option to maximize the ECC strength ... The generic NAND DT bindings allows one to tweak the ECC strength and step size to their need. It can be used to lower the ECC strength to match a bootloader/firmware config, but might also be used to get a better reliability. In the latter case, the user might want to use the maximum ECC strength without having to explicitly calculate the exact value (this value not only depends on the OOB size, but also on the NAND controller, and can be tricky to extract). Add a generic 'nand-ecc-maximize' DT property and the associated NAND_ECC_MAXIMIZE flag, to let ECC controller drivers select the best ECC strength and step-size on their own. Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com> Acked-by: Rob Herring <robh@kernel.org>	2016-09-23 09:35:16 +02:00
Boris Brezillon	d8e725dd83	mtd: nand: automate NAND timings selection ... The NAND framework provides several helpers to query timing modes supported by a NAND chip, but this implies that all NAND controller drivers have to implement the same timings selection dance. Also currently NAND devices can be resetted at arbitrary places which also resets the timing for ONFI chips to timing mode 0. Provide a common logic to select the best timings based on ONFI or ->onfi_timing_mode_default information. Hook this into nand_reset() to make sure the new timing is applied each time during a reset. NAND controller willing to support timings adjustment should just implement the ->setup_data_interface() method. Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com> Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de>	2016-09-23 09:35:16 +02:00
Sascha Hauer	6e1f9708db	mtd: nand: Expose data interface for ONFI mode 0 ... The nand layer will need ONFI mode 0 to use it as timing mode before and right after reset. Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de> Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-09-23 09:35:16 +02:00
Sascha Hauer	b88730ada9	mtd: nand: Add function to convert ONFI mode to data_interface ... onfi_init_data_interface() initializes a data interface with values from a given ONFI mode. Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de> Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-09-23 09:35:16 +02:00
Sascha Hauer	eee64b700e	mtd: nand: Introduce nand_data_interface ... Currently we have no data structure to fully describe a NAND timing. We only have struct nand_sdr_timings for NAND timings in SDR mode, but nothing for DDR mode and also no container to store both types of timing. This patch adds struct nand_data_interface which stores the timing type and a union of different timings. This can be used to pass to drivers in order to configure the timing. Add kerneldoc for struct nand_sdr_timings while touching it anyway. Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de> Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-09-23 09:35:16 +02:00
Sascha Hauer	2f94abfe35	mtd: nand: Create a NAND reset function ... When NAND devices are resetted some initialization may have to be done, like for example they have to be configured for the timing mode that shall be used. To get a common place where this initialization can be implemented create a nand_reset() function. This currently only issues a NAND_CMD_RESET to the NAND device. The places issuing this command manually are replaced with a call to nand_reset(). Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de> Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-09-23 09:35:16 +02:00
Sascha Hauer	7902259183	mtd: nand: remove unnecessary 'extern' from function declarations ... 'extern' is not necessary for function declarations. To prevent people from adding the keyword to new declarations remove the existing ones. Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de> Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-09-23 09:35:16 +02:00
Marc Gonzalez	d45bc58dd3	mtd: nand: import nand_hw_control_init() ... The code to initialize a struct nand_hw_control is duplicated across several drivers. Factorize it using an inline function. Signed-off-by: Marc Gonzalez <marc_gonzalez@sigmadesigns.com> Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-09-23 09:35:16 +02:00
Boris Brezillon	477b0229ac	mtd: introduce the mtd_pairing_scheme concept ... MLC and TLC NAND devices are using NAND cells exposing more than one bit, but instead of attaching all the bits in a given cell to a single NAND page, each bit is usually attached to a different page. This concept is called 'page pairing', and has significant impacts on the flash storage usage. The main problem showed by these devices is that interrupting a page program operation may not only corrupt the page we are programming but also the page it is paired with, hence the need to expose to MTD users the pairing scheme information. The pairing APIs allows one to query pairing information attached to a given page (here called wunit), or the other way around (the wunit pointed by pairing information). It also provides several helpers to help the conversion between absolute offsets and wunits, and query the number of pairing groups. Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com> Reviewed-by: Brian Norris <computersforpeace@gmail.com>	2016-09-15 16:47:56 +02:00
Brian Norris	1ed106914a	Merge tag 'nand/for-4.8' of github.com:linux-nand/linux into mtd ... Pull NAND changes from Boris Brezillon: """ This pull request contains only one notable change: * Addition of the MTK NAND controller driver And a bunch of specific NAND driver improvements/fixes. Here are the changes that are worth mentioning: * A few fixes/improvements for the xway NAND controller driver * A few fixes for the sunxi NAND controller driver * Support for DMA in the sunxi NAND driver * Support for the sunxi NAND controller IP embedded in A23/A33 SoCs * Addition for bitflips detection in erased pages to the brcmnand driver * Support for new brcmnand IPs * Update of the OMAP-GPMC binding to support DMA channel description """	2016-07-15 17:06:26 -07:00
Rafał Miłecki	1c7fe6b438	mtd: nand: add ESMT manufacturer ... I got device with ESMT (Elite Semiconductor Memory Technology Inc) F59L1G81MA flash that was detected as: [ 0.852034] nand: device found, Manufacturer ID: 0xc8, Chip ID: 0xd1 [ 0.858402] nand: Unknown NAND 128MiB 3,3V 8-bit [ 0.863031] nand: 128MiB, SLC, page size: 2048, OOB size: 64 According to the F59L1G81MA datasheet (and Read Id documentation) C8h is a "Maker Code" which should mean ESMT. Add it to fix above "Unknown". Signed-off-by: Rafał Miłecki <zajec5@gmail.com> Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-06-09 21:23:20 +02:00
Michal Suchanek	2dd087b169	mtd: spi-nor: stop passing around retlen ... Do not pass retlen to hardware driver read/write functions. Update it in spi-nor generic driver instead. Signed-off-by: Michal Suchanek <hramrach@gmail.com> Signed-off-by: Brian Norris <computersforpeace@gmail.com> Tested-by Cyrille Pitchen <cyrille.pitchen@atmel.com> Acked-by: Michal Suchanek <hramrach@gmail.com> Tested-by: Michal Suchanek <hramrach@gmail.com>	2016-06-01 17:22:52 -07:00
Michal Suchanek	59451e1233	mtd: spi-nor: change return value of read/write ... Change the return value of spi-nor device read and write methods to allow returning amount of data transferred and errors as read(2)/write(2) does. Also, start handling positive returns in spi_nor_read(), since we want to convert drivers to start returning the read-length both via *retlen and the return code. (We don't need to do the same transition process for spi_nor_write(), since ->write() didn't used to have a return code at all.) Signed-off-by: Michal Suchanek <hramrach@gmail.com> Signed-off-by: Brian Norris <computersforpeace@gmail.com> Tested-by Cyrille Pitchen <cyrille.pitchen@atmel.com> Acked-by: Michal Suchanek <hramrach@gmail.com> Tested-by: Michal Suchanek <hramrach@gmail.com>	2016-06-01 17:22:28 -07:00
Brian Norris	e5366a266a	mtd: spi-nor: support GigaDevice gd25lq64c ... Also note the GigaDevice JEDEC ID. No write-protect support yet, since this flash uses a different status register layout. Cc: Ezequiel Garcia <ezequiel@vanguardiasur.com.ar> Signed-off-by: Brian Norris <computersforpeace@gmail.com> Acked-by: Marek Vasut <marex@denx.de>	2016-05-10 15:44:18 -07:00
Brian Norris	2cbaf5491c	Merge tag 'nand/for-4.7' of github.com:linux-nand/linux ... Updates from Boris Brezillon: This pull request contains the following infrastructure changes: * introduction of the ECC algo concept to extend the ECC mode one * replacement of the nand_ecclayout infrastructure by something more future-proof. * addition of an mtd-activity led trigger to replace the nand-activity one And a bunch of specific NAND driver improvements/fixes. Here are the changes that are worth mentioning: * rework of the OMAP GPMC and NAND drivers * prepare the sunxi NAND driver to receive DMA support * handle bitflips in erased pages on GPMI revisions that do not support this in hardware. * tag 'nand/for-4.7' of github.com:linux-nand/linux: (152 commits) mtd: brcmnand: respect ECC algorithm set by NAND subsystem gpmi-nand: Handle ECC Errors in erased pages Documentation: devicetree: deprecate "soft_bch" nand-ecc-mode value mtd: nand: add support for "nand-ecc-algo" DT property mtd: mtd: drop NAND_ECC_SOFT_BCH enum value mtd: drop support for NAND_ECC_SOFT_BCH as "soft_bch" mapping mtd: nand: read ECC algorithm from the new field mtd: nand: fsmc: validate ECC setup by checking algorithm directly mtd: nand: set ECC algorithm to Hamming on fallback staging: mt29f_spinand: set ECC algorithm explicitly CRIS v32: nand: set ECC algorithm explicitly mtd: nand: atmel: set ECC algorithm explicitly mtd: nand: davinci: set ECC algorithm explicitly mtd: nand: bf5xx: set ECC algorithm explicitly mtd: nand: omap2: Fix high memory dma prefetch transfer mtd: nand: omap2: Start dma request before enabling prefetch mtd: nandsim: add __init attribute mtd: nand: move of_get_nand_xxx() helpers into nand_base.c mtd: nand: sh_flctl: rely on generic DT parsing done in nand_scan_ident() mtd: nand: mxc: rely on generic DT parsing done in nand_scan_ident() ...	2016-05-05 18:04:53 -07:00
Rafał Miłecki	e4225ae823	mtd: mtd: drop NAND_ECC_SOFT_BCH enum value ... This value should not be part of nand_ecc_modes_t as it specifies algorithm not a mode. We successfully managed to introduce new "algo" field which is respected now. Signed-off-by: Rafał Miłecki <zajec5@gmail.com> Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-05-05 23:55:13 +02:00
Boris Brezillon	aab616e31d	mtd: kill the nand_ecclayout struct ... Now that all MTD drivers have moved to the mtd_ooblayout_ops model we can safely remove the struct nand_ecclayout definition, and all the remaining places where it was still used. Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-05-05 23:51:51 +02:00
Boris Brezillon	7f2b092c9e	mtd: nand: kill the ecc->layout field ... Now that all NAND drivers have switched to mtd_ooblayout_ops, we can kill the ecc->layout field. Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-05-05 23:51:50 +02:00
Boris Brezillon	a411679fb5	mtd: onenand: switch to mtd_ooblayout_ops ... Implementing the mtd_ooblayout_ops interface is the new way of exposing ECC/OOB layout to MTD users. Modify the onenand drivers to switch to this approach. Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-05-05 23:51:49 +02:00
Boris Brezillon	04a123a99f	mtd: nand: fsmc: get rid of the fsmc_nand_eccplace struct ... Now that mtd_ooblayout_ecc() returns the ECC byte position using the OOB free method, we can get rid of the fsmc_nand_eccplace struct. Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-05-05 23:51:43 +02:00
Boris Brezillon	e5b2d30e42	mtd: nand: sharpsl: switch to mtd_ooblayout_ops ... Implementing the mtd_ooblayout_ops interface is the new way of exposing ECC/OOB layout to MTD users. Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-05-05 23:51:36 +02:00
Boris Brezillon	41b207a70d	mtd: nand: implement the default mtd_ooblayout_ops ... Replace the default nand_ecclayout definitions for large and small page devices with the equivalent mtd_ooblayout_ops. Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-04-19 22:05:56 +02:00
Boris Brezillon	adbbc3bc82	mtd: create an mtd_ooblayout_ops struct to ease ECC layout definition ... ECC layout definitions are currently exposed using the nand_ecclayout struct which embeds oobfree and eccpos arrays with predefined size. This approach was acceptable when NAND chips were providing relatively small OOB regions, but MLC and TLC now provide OOB regions of several hundreds of bytes, which implies a non negligible overhead for everybody even those who only need to support legacy NANDs. Create an mtd_ooblayout_ops interface providing the same functionality (expose the ECC and oobfree layout) without the need for this huge structure. The mtd->ecclayout is now deprecated and should be replaced by the equivalent mtd_ooblayout_ops. In the meantime we provide a wrapper around the ->ecclayout field to ease migration to this new model. Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-04-19 22:05:55 +02:00
Boris Brezillon	036d6543f8	mtd: add mtd_set_ecclayout() helper function ... Add an mtd_set_ecclayout() helper function to avoid direct accesses to the mtd->ecclayout field. This will ease future reworks of ECC layout definition. Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-04-19 22:05:53 +02:00
Boris Brezillon	75eb2cec25	mtd: add mtd_ooblayout_xxx() helper functions ... In order to make the ecclayout definition completely dynamic we need to rework the way the OOB layout are defined and iterated. Create a few mtd_ooblayout_xxx() helpers to ease OOB bytes manipulation and hide ecclayout internals to their users. Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-04-19 22:05:47 +02:00
Boris Brezillon	9d02fc2a51	mtd: nand: export default read/write oob functions ... Export the default read/write oob functions (for the standard and syndrome scheme), so that drivers can use them for their raw implementation and implement their own functions for the normal oob operation. This is required if your ECC engine is capable of fixing some of the OOB data. In this case you have to overload the ->read_oob() and ->write_oob(), but if you don't specify the ->read/write_oob_raw() functions they are assigned to the ->read/write_oob() implementation, which is not what you want. Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-04-19 22:05:38 +02:00
Rafał Miłecki	b0fcd8ab7b	mtd: nand: add new enum for storing ECC algorithm ... Our nand_ecc_modes_t is already a bit abused by value NAND_ECC_SOFT_BCH. This enum should store ECC mode only and putting algorithm details there is a bad idea. It would result in too many values impossible to support in a sane way. To solve this problem let's add a new enum. We'll have to modify all drivers to set it properly but once it's done it'll be possible to drop NAND_ECC_SOFT_BCH. That will result in a cleaner design and more possibilities like setting ECC algorithm for hardware ECC mode. Signed-off-by: Rafał Miłecki <zajec5@gmail.com> Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>	2016-04-19 22:02:32 +02:00
Ezequiel Garcia	0c034fe377	mtd: Uninline mtd_write_oob and move it to mtdcore.c ... There's no reason for having mtd_write_oob inlined in mtd.h header. Move it to mtdcore.c where it belongs. Signed-off-by: Ezequiel Garcia <ezequiel@vanguardiasur.com.ar> Acked-by: Boris Brezillon <boris.brezillon@free-electrons.com> Signed-off-by: Jacek Anaszewski <j.anaszewski@samsung.com>	2016-04-13 10:23:14 +02:00
Arnd Bergmann	fddcca5107	mtd: avoid stack overflow in MTD CFI code ... When map_word gets too large, we use a lot of kernel stack, and for MTD_MAP_BANK_WIDTH_32, this means we use more than the recommended 1024 bytes in a number of functions: drivers/mtd/chips/cfi_cmdset_0020.c: In function 'cfi_staa_write_buffers': drivers/mtd/chips/cfi_cmdset_0020.c:651:1: warning: the frame size of 1336 bytes is larger than 1024 bytes [-Wframe-larger-than=] drivers/mtd/chips/cfi_cmdset_0020.c: In function 'cfi_staa_erase_varsize': drivers/mtd/chips/cfi_cmdset_0020.c:972:1: warning: the frame size of 1208 bytes is larger than 1024 bytes [-Wframe-larger-than=] drivers/mtd/chips/cfi_cmdset_0001.c: In function 'do_write_buffer': drivers/mtd/chips/cfi_cmdset_0001.c:1835:1: warning: the frame size of 1240 bytes is larger than 1024 bytes [-Wframe-larger-than=] This can be avoided if all operations on the map word are done indirectly and the stack gets reused between the calls. We can mostly achieve this by selecting MTD_COMPLEX_MAPPINGS whenever MTD_MAP_BANK_WIDTH_32 is set, but for the case that no other bank width is enabled, we also need to use a non-constant map_bankwidth() to convince the compiler to use less stack. Signed-off-by: Arnd Bergmann <arnd@arndb.de> [Brian: this patch mostly achieves its goal by forcing MTD_COMPLEX_MAPPINGS (and the accompanying indirection) for 256-bit mappings; the rest of the change is mostly a wash, though it helps reduce stack size slightly. If we really care about supporting 256-bit mappings though, we should consider rewriting some of this code to avoid keeping and assigning so many 256-bit objects on the stack.] Signed-off-by: Brian Norris <computersforpeace@gmail.com>	2016-04-03 16:46:24 -07:00
Archit Taneja	9f3e04297b	mtd: nand: don't select chip in nand_chip's block_bad op ... One of the arguments passed to struct nand_chip's block_bad op is 'getchip', which, if true, is supposed to get and select the nand device, and later unselect and release the device. This op is intended to be replaceable by drivers. The drivers shouldn't be responsible for selecting/unselecting chip. Like other ops, the chip should already be selected before the block_bad op is called. Remove the getchip argument from the block_bad op and nand_block_checkbad. Move the chip selection to nand_block_isbad, since it is the only caller to nand_block_checkbad which requires chip selection. Modify nand_block_bad (the default function for the op) such that it doesn't select the chip. Remove the getchip argument from the bad_block funcs in cafe_nand, diskonchip and docg4 drivers. Reviewed-by: Boris Brezillon <boris.brezillon@free-electrons.com> Signed-off-by: Archit Taneja <architt@codeaurora.org> Signed-off-by: Brian Norris <computersforpeace@gmail.com>	2016-03-10 10:52:21 -08:00
Brian Norris	3dd8012a8e	mtd: spi-nor: add TB (Top/Bottom) protect support ... Some flash support a bit in the status register that inverts protection so that it applies to the bottom of the flash, not the top. This yields additions to the protection range table, as noted in the comments. Because this feature is not universal to all flash that support lock/unlock, control it via a new flag. Signed-off-by: Brian Norris <computersforpeace@gmail.com> Tested-by: Ezequiel Garcia <ezequiel@vanguardiasur.com.ar>	2016-03-07 18:01:57 -08:00
Boris BREZILLON	a8c65d504e	mtd: nand: simplify nand_bch_init() usage ... nand_bch_init() requires several arguments which could directly be deduced from the mtd device. Get rid of those useless parameters. nand_bch_init() is also requiring the caller to provide a proper eccbytes value, while this value could be deduced from the ecc.size and ecc.strength value. Fallback to eccbytes calculation when it is set to 0. Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com> Signed-off-by: Brian Norris <computersforpeace@gmail.com>	2016-03-07 16:23:09 -08:00