For some reason, the copyright part was left out of the license
information included in LIC_FILES_CHKSUM, preventing it from being
used in, e.g., documentation to satisfy the requirements of the
license.
Zhixiong Chi [Tue, 18 Sep 2018 08:46:17 +0000 (01:46 -0700)]
curl: CVE-2018-14618
Backport the CVE patch from the upstream
https://github.com/curl/curl/commit/57d299a499155d4b327e341c6024e293b0418243.patch
https://curl.haxx.se/docs/CVE-2018-14618.html
https://nvd.nist.gov/vuln/detail/CVE-2018-14618
Ross Burton [Fri, 12 Oct 2018 13:44:03 +0000 (14:44 +0100)]
python: don't use runtime checks to identify float endianism
Python uses AC_RUN_IFELSE to determine the byte order for floats and doubles,
and falls back onto "I don't know" if it can't run code. This results in
crippled floating point numbers in Python, and the regression tests fail.
Instead of running code, take a macro from autoconf-archive which compiles C
with a special double in which has an ASCII representation, and then greps the
binary to identify the format.
This is essentially a backport of the Python 3 patch in oe-core 1781b87.
Signed-off-by: Derek Straka <derek@asterius.io> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
[Bug fix update only, drop patches included in update] Signed-off-by: Armin Kuster <akuster808@gmail.com>
Bruce Ashfield [Wed, 17 Oct 2018 13:38:58 +0000 (09:38 -0400)]
linux-yocto/4.14: update to v4.14.76
Integrating the korg -stable updates that comprise the following commits:
0b46ce3e3423 Linux 4.14.76 c03f0ab15f3b ath10k: fix scan crash due to incorrect length calculation 711b942ae3be virtio_balloon: fix increment of vb->num_pfns in fill_balloon() 7f42eada5e3f virtio_balloon: fix deadlock on OOM 251bc1f44c33 rds: rds_ib_recv_alloc_cache() should call alloc_percpu_gfp() instead 4c925efc2230 ubifs: Check for name being NULL while mounting 5656b7354183 ucma: fix a use-after-free in ucma_resolve_ip() 3a7a9fb68c97 f2fs: fix invalid memory access dfe96e30b5a5 perf utils: Move is_directory() to path.h 75fc05a20f5f crypto: chelsio - Fix memory corruption in DMA Mapped buffers. b5dcd4ab8e6c ARC: clone syscall to setp r25 as thread pointer af1a8101794d powerpc/lib: fix book3s/32 boot failure due to code patching 609fbeddb24c powerpc: Avoid code patching freed init sections 4e43fbc8ef25 powerpc/lib/code-patching: refactor patch_instruction() 0f6e2f4e06be nvme_fc: fix ctrl create failures racing with workq items 1b2ad48a85c4 ath10k: fix kernel panic issue during pci probe 8146256b7dcd ath10k: fix use-after-free in ath10k_wmi_cmd_send_nowait 327400b3a708 perf tools: Fix python extension build for gcc 8 ec727693a9ef perf annotate: Use asprintf when formatting objdump command line 79f87e09bcb2 of: unittest: Disable interrupt node tests for old world MAC systems 171f90d4ae84 tty: Drop tty->count on tty_reopen() failure c92e73b11ed1 usb: cdc_acm: Do not leak URB buffers 821c42e7d5ea USB: serial: simple: add Motorola Tetra MTP6550 id 35123e64a168 usb: xhci-mtk: resume USB3 roothub first c096f5c4a8bc xhci: Add missing CAS workaround for Intel Sunrise Point xHCI ec6ae632e04b dm cache: fix resize crash if user doesn't reload cache table f11a6abfdb41 dm cache metadata: ignore hints array being too small during resize 1364055c96c5 PM / core: Clear the direct_complete flag on errors 9047696cb3f8 mac80211: fix setting IEEE80211_KEY_FLAG_RX_MGMT for AP mode keys 8ebd65583375 PCI: Reprogram bridge prefetch registers on resume 25bc6e80f9d6 x86/vdso: Fix vDSO syscall fallback asm constraint regression 1194e838b879 x86/vdso: Only enable vDSO retpolines when enabled and supported 64ff5747e2af selftests/x86: Add clock_gettime() tests to test_vdso 30500cc74a36 x86/vdso: Fix asm constraints on vDSO syscall fallbacks 71a0556255de drm/syncobj: Don't leak fences when WAIT_FOR_SUBMIT is set 0c0dd182adae drm/amdgpu: Fix vce work queue was not cancelled when suspend 309a1c5cfc59 xen-netback: fix input validation in xenvif_set_hash_mapping() f66d89483bb3 fbdev/omapfb: fix omapfb_memory_read infoleak 887361696fb9 clocksource/drivers/timer-atmel-pit: Properly handle error cases 8e2e2192eb35 blk-mq: I/O and timer unplugs are inverted in blktrace 87a9d1cc2e8f KVM: x86: fix L1TF's MMIO GFN calculation 5178716b55c4 mm/vmstat.c: skip NR_TLB_REMOTE_FLUSH* properly a2e0493f99e6 mm, thp: fix mlocking THP page with migration enabled 5f4f5b1f4491 mm: migration: fix migration of huge PMD shared pages ab18409cf05f perf/core: Add sanity check to deal with pinned event failure 8e6a9240b191 Linux 4.14.75 4e7ea65127ac dm thin metadata: fix __udivdi3 undefined on 32-bit 07f79b39d474 ixgbe: check return value of napi_complete_done() de0e2a92ccc5 ocfs2: fix locking for res->tracking and dlm->tracking_list f8566a92ab75 proc: restrict kernel stack dumps to root 4de0fb95a287 tools: hv: fcopy: set 'error' in case an unknown operation was requested 1d24e2609002 Drivers: hv: vmbus: Use get/put_cpu() in vmbus_connect() 119bf9470be9 gpiolib: Free the last requested descriptor 1df517a4cafd crypto: caam/jr - fix ablkcipher_edesc pointer arithmetic 3b1a8535b8e1 crypto: mxs-dcp - Fix wait logic on chan threads 90ecb700345c crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe() a5bb359c078a ALSA: hda/realtek - Cannot adjust speaker's volume on Dell XPS 27 7760 06f93e40f939 iommu/amd: Clear memory encryption mask from physical address dcdb2262d389 smb2: fix missing files in root share directory listing b420b7b7923b sysfs: Do not return POSIX ACL xattrs via listxattr fa7d75f64b80 ovl: fix format of setxattr debug 8d75ecc13fdc ovl: fix memory leak on unlink of indexed file be406434737b ovl: fix access beyond unterminated strings aa41fb9593af xen: fix GCC warning and remove duplicate EVTCHN_ROW/EVTCHN_COL usage a502165dae09 xen: avoid crash in disable_hotplug_cpu 4e1494794ebc xen/manage: don't complain about an empty value in control/sysrq node dfb29d69e4d8 cifs: read overflow in is_valid_oplock_break() 7d60f98cde7a s390/qeth: don't dump past end of unknown HW header d5afd6b6eae5 s390/qeth: use vzalloc for QUERY OAT buffer ad297898159f r8169: Clear RTL_FLAG_TASK_*_PENDING when clearing RTL_FLAG_TASK_ENABLED f7b86faf0bd1 drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk f2c9d68ed3c2 arm64: jump_label.h: use asm_volatile_goto macro instead of "asm goto" 7a2df42a5371 hexagon: modify ffs() and fls() to return int 2eb3072b2785 arch/hexagon: fix kernel/dma.c build warning 1484d4ff2770 dm thin metadata: try to avoid ever aborting transactions 1e9054e75d22 perf/x86/intel: Add support/quirk for the MISPREDICT bit on Knights Landing CPUs 36918e899e3c net: ena: fix missing calls to READ_ONCE 3e2cc5bd61fe net: ena: fix driver when PAGE_SIZE == 64kB a5bdc726e5ff fs/cifs: suppress a string overflow warning 3941dbe190ba dm raid: fix rebuild of specific devices by updating superblock 112d65a51f2b drm/nouveau/disp: fix DP disable race 1a255bf1e749 drm/nouveau/TBDdevinit: don't fail when PMU/PRE_OS is missing from VBIOS 34d54566ae4a net/mlx5: Consider PCI domain in search for next dev f36f3ebdf1e1 nvmet-rdma: fix possible bogus dereference under heavy load a90a52c51ad4 USB: yurex: Check for truncation in yurex_read() 2c423318f07c HID: sensor-hub: Restore fixup for Lenovo ThinkPad Helix 2 sensor hub report d4da71220317 RDMA/ucma: check fd type in ucma_migrate_id() 60ea8815d6e8 Revert "iio: temperature: maxim_thermocouple: add MAX31856 part" 1173678a4f4a netfilter: nf_tables: release chain in flushing set c00f01c40211 perf probe powerpc: Ignore SyS symbols irrespective of endianness 4095fd29fee7 perf util: Fix bad memory access in trace info. 9d7bc329c123 perf evsel: Fix potential null pointer dereference in perf_evsel__new_idx() 8b98b7eeb45d scsi: qedi: Add the CRC size within iSCSI NVM image dd44c35cc16c scsi: iscsi: target: Set conn->sess to NULL when iscsi_login_set_conn_values fails b6515e0f915b HID: hid-saitek: Add device ID for RAT 7 Contagion 81c823c22355 usb: gadget: fotg210-udc: Fix memory leak of fotg210->ep[i] b6cc0ba2cbf4 HID: add support for Apple Magic Keyboards b969656b4662 netfilter: xt_cluster: add dependency on conntrack module 10fdfea70d46 bpf: 32-bit RSH verification must truncate input before the ALU op dcc89aaf5a8d mm: madvise(MADV_DODUMP): allow hugetlbfs pages ee0516c4a1fe tools/vm/page-types.c: fix "defined but not used" warning 5cbf015b971c tools/vm/slabinfo.c: fix sign-compare warning 27c4ad84fd01 mac80211: shorten the IBSS debug messages e132eb09fdd2 mac80211: don't Tx a deauth frame if the AP forbade Tx 8788737af389 mac80211: Fix station bandwidth setting after channel switch 37cdc7e35ae4 mac80211: fix a race between restart and CSA flows 4fa55f6d29fd cfg80211: fix a type issue in ieee80211_chandef_to_operating_class() 43a01409ef4c mac80211: fix an off-by-one issue in A-MSDU max_subframe computation 25cb8544342a fs/cifs: don't translate SFM_SLASH (U+F026) to backslash 8590e6fecb5e net: cadence: Fix a sleep-in-atomic-context bug in macb_halt_tx() b08d15cc921f i2c: uniphier-f: issue STOP only for last message or I2C_M_STOP 82fc9c6b7b9a i2c: uniphier: issue STOP only for last message or I2C_M_STOP da26e5729c04 RAID10 BUG_ON in raise_barrier when force is true and conf->barrier is 0 36fadeb87be8 md/raid5-cache: disable reshape completely dc492842b700 ARC: atomics: unbork atomic_fetch_##op() 7e259a0537be gpio: Fix crash due to registration race 3b83a52796cd tools/kvm_stat: fix handling of invalid paths in debugfs provider 52614f7bf1b5 tools/kvm_stat: fix python3 issues 0d66ce687869 mac80211: always account for A-MSDU header changes 2592adfe326b mac80211: do not convert to A-MSDU if frag/subframe limited b22a5d20aab1 cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE e7577a1f1a65 net: hns: add netif_carrier_off before change speed and duplex 7fd11a1ad542 net: hns: add the code for cleaning pkt in chip bdd29365a74c gpiolib-acpi: Register GpioInt ACPI event handlers from a late_initcall 73bfec0a6bde gpiolib: acpi: Switch to cansleep version of GPIO library call 9a5d353908db mac80211: avoid kernel panic when building AMSDU from non-linear SKB 79448960e3d7 mac80211: mesh: fix HWMP sequence numbering to follow standard 34bec4daf88c gpio: adp5588: Fix sleep-in-atomic-context bug 0081e67083ed mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X 7c209ebc7f15 mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X 6054817c5e07 scsi: csiostor: add a check for NULL pointer after kmalloc() 4e380c50cf12 btrfs: btrfs_shrink_device should call commit transaction at the end 9e685bec07ae KVM: PPC: Book3S HV: Don't truncate HPTE index in xlate function 381538ae75cf mac80211_hwsim: require at least one channel 4ae9a73be7ac mac80211: Run TXQ teardown code before de-registering interfaces 3a738e7f734c tools/power turbostat: fix possible sprintf buffer overflow cdb2d37d345d serial: mvebu-uart: Fix reporting of effective CSIZE to userspace a17e2a72e714 drm/amdgpu: add another ATPX quirk for TOPAZ d9e61345652b drm/amd/pp: initialize result to before or'ing in data e6abbe80c883 Linux 4.14.74 d61ba3417e4f media: v4l: event: Prevent freeing event subscriptions while accessed fcaca557760f arm64: KVM: Sanitize PSTATE.M when being set from userspace 4fff53acff15 x86/pti: Fix section mismatch warning/error 23210d92f617 i2c: i801: Allow ACPI AML access I/O ports not reserved for SMBus 647b6d4ff699 arm/arm64: smccc-1.1: Handle function result as parameters 826d8678cde2 arm/arm64: smccc-1.1: Make return values unsigned long 75b3054d6807 ARM: dts: omap4-droid4: Fix emmc errors seen on some devices d11237bdcf95 nvme-fcloop: Fix dropped LS's to removed target port 516b72e36ded ata: ftide010: Add a quirk for SQ201 46cb720a8a3e drm/amdgpu: Update power state at the end of smu hw_init. 50850b432cc5 drm/amdgpu: Enable/disable gfx PG feature in rlc safe mode 9190a7ea313f Revert "ARM: dts: imx7d: Invert legacy PCI irq mapping" d3ddd8e16cab hwmon: (adt7475) Make adt7475_read_word() return errors 0647ce03bd48 hwmon: (ina2xx) fix sysfs shunt resistor read access 59f5838cc950 crypto: cavium/nitrox - fix for command corruption in queue full case with backlog submissions. 243af256387c e1000: ensure to free old tx/rx rings in set_ringparam() 716865940461 e1000: check on netif_running() before calling e1000_up() e8baff89bc3f net: hns: fix skb->truesize underestimation 333f26129fd9 net: hns: fix length and page_offset overflow when CONFIG_ARM64_64K_PAGES 92935e1c2a7e bpf: sockmap: write_space events need to be passed to TCP handler f0a8c1257fc3 tls: possible hang when do_tcp_sendpages hits sndbuf is full case 97ee8505c637 isofs: reject hardware sector size > 2048 bytes 083be6fbfdcb thermal: of-thermal: disable passive polling when thermal zone is disabled 308206bd2770 qed: Avoid sending mailbox commands when MFW is not responsive 583f866501c1 qed: Prevent a possible deadlock during driver load and unload 73046b822c4c qed: Wait for MCP halt and resume commands to take place 33906ae926e0 qed: Wait for ready indication before rereading the shmem 38d070f9090a arm64: KVM: Tighten guest core register access from userspace d428e43eb684 serial: imx: restore handshaking irq for imx1 016d4aae9d84 drm/i915: Remove vma from object on destroy, not close d134e9170417 ovl: hash non-dir by lower inode for fsnotify 105470069de3 RDMA/uverbs: Atomically flush and mark closed the comp event queue 693536a7ce39 IB/hfi1: Fix context recovery when PBC has an UnsupportedVL 412a4b4db1a6 IB/hfi1: Invalid user input can result in crash d9e49e9ed8d6 IB/hfi1: Fix SL array bounds check fcbe49c82b82 IB/srp: Avoid that sg_reset -d ${srp_device} triggers an infinite loop 3011b91478ff Input: elantech - enable middle button of touchpad on ThinkPad P72 9691f745e17a USB: remove LPM management from usb_driver_claim_interface() be2360ed2d22 Revert "usb: cdc-wdm: Fix a sleep-in-atomic-context bug in service_outstanding_interrupt()" ec6dc4b61c33 USB: usbdevfs: restore warning for nonsensical flags 25a8d4825165 USB: usbdevfs: sanitize flags more 67d8e231759f media: uvcvideo: Support realtek's UVC 1.5 device 1ddc0781c0ce slub: make ->cpu_partial unsigned int e75c01761a11 usb: musb: dsps: do not disable CPPI41 irq in driver teardown 5b6717c6a3c0 USB: handle NULL config in usb_find_alt_setting() 4253abe6a3aa USB: fix error handling in usb_driver_claim_interface() 5eaaa5e9bd56 regulator: fix crash caused by null driver data b6adc1f24bb3 spi: rspi: Fix interrupted DMA transfers 082e34f367a5 spi: rspi: Fix invalid SPI use during system suspend 6074b71d617d spi: sh-msiof: Fix handling of write value for SISTR register d120858fca5f spi: sh-msiof: Fix invalid SPI use during system suspend 429773341c34 spi: tegra20-slink: explicitly enable/disable clock dc89d37f9098 intel_th: Fix device removal logic 247cc73cd8f5 serial: cpm_uart: return immediately from console poll 2b7ba104769b tty: serial: lpuart: avoid leaking struct tty_struct 4fe780c1baec x86/mm: Expand static page table for fixmap space 04bc4dd86d0f floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl f88e50ea0300 ARM: dts: dra7: fix DCAN node addresses 99795ed0c62d iio: 104-quad-8: Fix off-by-one error in register selection a82a772da750 Input: xen-kbdfront - fix multi-touch XenStore node's locations 91e30cae8903 fs/lock: skip lock owner pid translation in case we are in init_pid_ns 0c4439c44416 EDAC: Fix memleak in module init error path a4f7bea87887 nfsd: fix corrupted reply to badly ordered compound de6ccdbd7734 gpio: Fix wrong rounding in gpio-menz127 5bcbbadf6ac5 module: exclude SHN_UNDEF symbols from kallsyms api 05f78b1a0e0c ASoC: dapm: Fix potential DAI widget pointer deref when linking DAIs 3fd534a5480e EDAC, i7core: Fix memleaks and use-after-free on probe and remove c96c2f2b11b6 scsi: megaraid_sas: Update controller info during resume a56b97a2fc2d iomap: complete partial direct I/O writes synchronously 13ab355240a9 scsi: bnx2i: add error handling for ioremap_nocache d5963fae7f36 perf/x86/intel/lbr: Fix incomplete LBR call stack 85222eb56f2a MIPS: boot: fix build rule of vmlinux.its.S b8e30b822d08 HID: hid-ntrig: add error handling for sysfs_create_group 69cb15d6596d arm: dts: mediatek: Add missing cooling device properties for CPUs 5ef7a3782de8 ARM: mvebu: declare asm symbols as character arrays in pmsu.c e87efc44dd36 wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout() dad01c56989a brcmsmac: fix wrap around in conversion from constant to s16 62bd8064fa88 rndis_wlan: potential buffer overflow in rndis_wlan_auth_indication() 3c7f6b2cf6d6 ath10k: transmit queued frames after processing rx packets c1283a6270a2 drm/sun4i: Fix releasing node when enumerating enpoints 3f7056e1822d net: phy: xgmiitorgmii: Check phy_driver ready before accessing accb431813bf ath10k: protect ath10k_htt_rx_ring_free with rx_ring.lock 0f4ca55e441c net: phy: xgmiitorgmii: Check read_status results 8d9fd12b1eef ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge 0ebe95dee2f2 media: tm6000: add error handling for dvb_register_adapter 0091a4ede783 drivers/tty: add error handling for pcmcia_loop_config 3af342f5ddbd staging: android: ashmem: Fix mmap size validation 1b16d06a9e27 media: omap3isp: zero-initialize the isp cam_xclk{a,b} initial data daefaacc6e02 media: soc_camera: ov772x: correct setting of banding filter 381f8d235dd8 media: s3c-camif: ignore -ENOIOCTLCMD from v4l2_subdev_call for s_power 85d3dbd8e7f2 ALSA: snd-aoa: add of_node_put() in error path 3e3f075f72bd posix-timers: Sanitize overrun handling a05bd4ba655f posix-timers: Make forward callback return s64 cf373da10039 iio: accel: adxl345: convert address field usage in iio_chan_spec 8cbb2f74c093 mtd: rawnand: atmel: add module param to avoid using dma a838008bb11f s390/extmem: fix gcc 8 stringop-overflow warning 33cd135ebc97 s390/scm_blk: correct numa_node in scm_blk_dev_setup 98a34e26d93d s390/dasd: correct numa_node in dasd_alloc_queue a4dbaf7c2de0 alarmtimer: Prevent overflow for relative nanosleep 9374ffc6f3d3 s390/sysinfo: add missing #ifdef CONFIG_PROC_FS 8deb5801f154 powerpc/powernv/ioda2: Reduce upper limit for DMA window size 45d3d58f9739 ath10k: sdio: set skb len for all rx packets b31f41e02c80 ath10k: sdio: use same endpoint id for all packets in a bundle 149f530334f0 usb: wusbcore: security: cast sizeof to int for comparison ebee32dd8f04 scsi: target: Avoid that EXTENDED COPY commands trigger lock inversion 336b73754169 scsi: ibmvscsi: Improve strings handling 1390c37d1670 scsi: klist: Make it safe to use klists in atomic context bdfc40bc1b09 scsi: target/iscsi: Make iscsit_ta_authentication() respect the output buffer size 2cbead46fd4e ARM: dts: ls1021a: Add missing cooling device properties for CPUs 8430918a04e3 x86/entry/64: Add two more instruction suffixes 8e90c7ef50e2 ARM: hwmod: RTC: Don't assume lock/unlock will be called with irq enabled 0a29ab00339e x86/tsc: Add missing header to tsc_msr.c 23e4ab4069d1 media: staging/imx: fill vb2_v4l2_buffer field entry 6fd38ba41e34 media: fsl-viu: fix error handling in viu_of_probe() 769ae06e4442 powerpc/kdump: Handle crashkernel memory reservation failure 333cb98f393b IB/mlx4: Test port number before querying type. 1f94cf4c81cb media: exynos4-is: Prevent NULL pointer dereference in __isp_video_try_fmt() 0ca45668ecdb IB/core: type promotion bug in rdma_rw_init_one_mr() eca859882359 RDMA/i40w: Hold read semaphore while looking after VMA e862ab6b69c4 RDMA/bnxt_re: Fix a couple off by one bugs e0ccd2360a47 md-cluster: clear another node's suspend_area after the copy is finished e70f938a605a power: remove possible deadlock when unregistering power_supply 1117e411a46c s390/mm: correct allocate_pgste proc_handler callback bc4ce060b305 iommu/msm: Don't call iommu_device_{,un}link from atomic context 96e878907c90 6lowpan: iphc: reset mac_header after decompress to fix panic 410534a34315 USB: serial: kobil_sct: fix modem-status error handling 90de5688afc3 Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 834a9ef5f831 iommu/amd: make sure TLB to be flushed before IOVA freed c7e653a24c18 power: vexpress: fix corruption in notifier registration c1a630680c8b uwb: hwa-rc: fix memory leak at probe 72bad20e9316 serial: sh-sci: Stop RX FIFO timer during port shutdown 0470189cd9b9 misc: sram: enable clock before registering regions 914b4daa9b6d power: supply: axp288_charger: Fix initial constant_charge_current value 2efa4bd5aa9a staging: rts5208: fix missing error check on call to rtsx_write_register 6ecd10b1aa22 x86/numa_emulation: Fix emulated-to-physical node mapping 127cd4e23323 vmci: type promotion bug in qp_host_get_user_memory() 4804f372b53f tsl2550: fix lux1_input error in low light db12e7d3e9bc iio: adc: ina2xx: avoid kthread_stop() with stale task_struct 29db2772349d crypto: skcipher - Fix -Wstringop-truncation warnings 3b65f403d7d0 Linux 4.14.73 97513162cd6d spi: Fix double IDR allocation with DT aliases ed5e9462f661 tick/nohz: Prevent bogus softirq pending warning 3a411a04be4e iw_cxgb4: only allow 1 flush on user qps 956fa50745b3 vmw_balloon: include asm/io.h 23ac2a32b2f8 PCI: aardvark: Size bridges before resources allocation fe87d18b1471 sched/fair: Fix vruntime_normalized() for remote non-migration wakeup 0d09307bc242 ext4: show test_dummy_encryption mount option in /proc/mounts 3dc006d212e3 ext4: don't mark mmp buffer head dirty ba48e66e3f53 ext4: fix online resizing for bigalloc file systems with a 1k block size 6a4d7b584d38 ext4: fix online resize's handling of a too-small final block group 22654a3b4a30 ext4: recalucate superblock checksum after updating free blocks/inodes 779af00b3fa3 ext4: avoid arithemetic overflow that can trigger a BUG 3f9eafe8772f ext4: avoid divide by zero fault when deleting corrupted inline directories 31343d27f18f ext4: check to make sure the rename(2)'s destination is not freed 4334a6ae867a tty: vt_ioctl: fix potential Spectre v1 57c806be0160 drm/amdgpu: add new polaris pci id 5575041b09cd drm: udl: Destroy framebuffer only if it was initialized c70d8a488a41 drm/vc4: Fix the "no scaling" case on multi-planar YUV formats 35e48a086071 drm/nouveau/drm/nouveau: Prevent handling ACPI HPD events too early 0f966da783a3 drm/nouveau/drm/nouveau: Use pm_runtime_get_noresume() in connector_detect() 409af02c200e drm/nouveau/drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement 9ac837e079a0 drm/nouveau/drm/nouveau: Don't forget to cancel hpd_work on suspend/unload 42387d8e4aef drm/nouveau: Fix deadlocks in nouveau_connector_detect() 7c1ca8fb8633 ocfs2: fix ocfs2 read block panic 1d7e23f9068f Revert "ubifs: xattr: Don't operate on deleted inodes" 44383139a39c scsi: target: iscsi: Use bin2hex instead of a re-implementation 755e45f3155c scsi: target: iscsi: Use hex2bin instead of a re-implementation 50ec69edf3f0 Revert "uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member name" 13d216167d3d Revert "rpmsg: core: add support to power domains for devices" 6447b34fc270 mm: shmem.c: Correctly annotate new inodes for lockdep 7eba38a3f65d ring-buffer: Allow for rescheduling when removing pages 0e5cdbac0303 Revert "PCI: Add ACS quirk for Intel 300 series" f3765abb60c7 spi: fix IDR collision on systems with both fixed and dynamic SPI bus numbers 5ca87a38202e xen/x86/vpmu: Zero struct pt_regs before calling into sample handling code 7eced4478f4e xen/netfront: don't bug in case of too many frags e2d5285b98ef platform/x86: alienware-wmi: Correct a memory leak ff6805037d83 ALSA: oxfw: fix memory leak of private data 08f4f8b93809 ALSA: oxfw: fix memory leak of discovered stream formats at error path 996899a9cbd8 ALSA: oxfw: fix memory leak for model-dependent data at error path d9929097176d ALSA: fireworks: fix memory leak of response buffer at error path 40e2596f06b0 ALSA: firewire-tascam: fix memory leak of private data 933f20a61e26 ALSA: firewire-digi00x: fix memory leak of private data 70165a445b00 ALSA: fireface: fix memory leak in ff400_switch_fetching_mode() 352701c288c1 ALSA: emu10k1: fix possible info leak to userspace on SNDRV_EMU10K1_IOCTL_INFO 7c4881d64ed7 ALSA: bebob: use address returned by kmalloc() instead of kernel stack for streaming DMA mapping 16b8c03864b7 ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix I/O at error path c7cf0304d41f ASoC: rsnd: fixup not to call clk_get/set under non-atomic a388e6d7a822 ASoC: cs4265: fix MMTLR Data switch control 6ead7a8a4ec1 NFC: Fix the number of pipes 4a16b3cd084d NFC: Fix possible memory corruption when handling SHDLC I-Frame commands 18fef87e05d3 tls: clear key material from kernel memory when do_tls_setsockopt_conf fails 0c0334299a7e tls: zero the crypto information from tls_context before freeing 10cacaf13189 tls: don't copy the key out of tls12_crypto_info_aes_gcm_128 ee547ed7dee4 net/sched: act_sample: fix NULL dereference in the data path b13f721a3409 udp6: add missing checks on edumux packet processing ff64a1a2ca3d neighbour: confirm neigh entries when ARP packet is received 0f6f77f3b8f4 udp4: fix IP_CMSG_CHECKSUM for connected sockets 6f5ec16ee02b qmi_wwan: set DTR for modems in forced USB2 mode f3aa1f3a1113 pppoe: fix reception of frames with no mac header c0f2c063abc8 net: hp100: fix always-true check for link up state 9951e17efd05 net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT bba90d3686fd ipv6: fix possible use-after-free in ip6_xmit() 13a47054f0b2 gso_segment: Reset skb->mac_len after modifying network header
Backporting the following fixes from 4.18 to 4.14 to remove beaglebone
configuration warnings:
1fb0b0379fb5 beaglebone: Clean up the cfg file 4176e7ded8e1 beaglebone: Drop the needless unsetting of the kernel options 65c209da574d beaglebone: Drop the obsolete kernel options
Bruce Ashfield [Sat, 22 Sep 2018 17:18:54 +0000 (13:18 -0400)]
linux-yocto: enable pci and CRYPTO_DEV_VIRTIO
With recent kernels and the latest openssl we observe hangs when there
is not sufficient entropy in the system before crypto is used
(i.e. OpenVSwitch or openssh server).
This was mainly observed on qemuarm64, but can happen elsewhere. So
we enable CRYPTO_DEV_VIRTIO in the main virtio fragment and enable
PCI for qemuarm64 to ensure that entropy is available.
Bruce Ashfield [Sat, 22 Sep 2018 17:18:53 +0000 (13:18 -0400)]
linux-yocto/4.14: update to v4.14.71
Integrating the korg stable releases up to v4.14.71 which comprise
the following commits:
1244bbb3e921 Linux 4.14.71 06274364edb4 mm: get rid of vmacache_flush_all() entirely 8b34a7b14ee7 autofs: fix autofs_sbi() does not check super block type daf0ca743b28 tuntap: fix use after free during release ab75811f7181 tun: fix use after free for ptr_ring 8626c40a3093 mtd: ubi: wl: Fix error return code in ubi_wl_init() 08fb833b40e3 ip: frags: fix crash in ip_do_fragment() b3a0c61b7369 ip: process in-order fragments efficiently c91f27fb5716 ip: add helpers to process in-order fragments faster. 04b28f406e86 ipv4: frags: precedence bug in ip_expire() 6b921536f170 net: sk_buff rbnode reorg 37c7cc80b1d7 net: add rb_to_skb() and other rb tree helpers 6bf32cda46eb net: pskb_trim_rcsum() and CHECKSUM_COMPLETE are friends 5123ffdad659 ipv6: defrag: drop non-last frags smaller than min mtu 3bde783eca23 net: modify skb_rbtree_purge to return the truesize of all purged skbs. 7750c414b89b net: speed up skb_rbtree_purge() 1c44969111cc ip: discard IPv4 datagrams with overlapping segments. 5fff99e88a1f inet: frags: fix ip6frag_low_thresh boundary 48c2afc16888 inet: frags: get rid of ipfrag_skb_cb/FRAG_CB 8291cd943a9b inet: frags: reorganize struct netns_frags bd946fb5226e rhashtable: reorganize struct rhashtable layout 3226bdcb0448 ipv6: frags: rewrite ip6_expire_frag_queue() 085a0147447a inet: frags: do not clone skb in ip_expire() 990204ddc5f6 inet: frags: break the 2GB limit for frags storage caa4249eca08 inet: frags: remove inet_frag_maybe_warn_overflow() 5b1b3ad46dd1 inet: frags: get rif of inet_frag_evicting() bd3df633f17d inet: frags: remove some helpers 9aee41eff751 inet: frags: use rhashtables for reassembly units 33dc9f7c5d12 rhashtable: add schedule points 11be675bf0aa ipv6: export ip6 fragments sysctl to unprivileged users 266da0fb83f3 inet: frags: refactor lowpan_net_frag_init() eb1686ae5e20 inet: frags: refactor ipv6_frag_init() 0512f7e93504 inet: frags: Convert timers to use timer_setup() 0cbf74b9519d inet: frags: refactor ipfrag_init() 673220d6417d inet: frags: add a pointer to struct netns_frags 6093d5abcf5a inet: frags: change inet_frags_init_net() return value 6f7bf899b92d drm/i915: set DP Main Stream Attribute for color range on DDI platforms bdbf6e0b9326 RDMA/cma: Do not ignore net namespace for unbound cm_id 0d1d365d1d44 MIPS: WARN_ON invalid DMA cache maintenance, not BUG_ON 1181e8687a8d NFSv4.1: Fix a potential layoutget/layoutrecall deadlock 0983ef553d8f f2fs: fix to do sanity check with {sit,nat}_ver_bitmap_bytesize 7beff543897c mfd: ti_am335x_tscadc: Fix struct clk memory leak b28c14ae3576 iommu/ipmmu-vmsa: Fix allocation in atomic context 1252c1daa9c3 f2fs: Fix uninitialized return in f2fs_ioc_shutdown() 9d54a48ef296 f2fs: fix to wait on page writeback before updating page 9e850bc7691a media: helene: fix xtal frequency setting at power on 5deea7d63ba1 partitions/aix: fix usage of uninitialized lv_info and lvname structures f3677a5c7d08 partitions/aix: append null character to print data from disk 758289892a13 media: s5p-mfc: Fix buffer look up in s5p_mfc_handle_frame_{new, copy_time} functions b0a6faaa6060 Input: atmel_mxt_ts - only use first T9 instance e85940a5bb5f dm cache: only allow a single io_mode cache feature to be requested 94f885db2a18 net: dcb: For wild-card lookups, use priority -1, not 0 946cf3fe1be6 MIPS: generic: fix missing of_node_put() e607db7ce984 MIPS: Octeon: add missing of_node_put() 7fb2b50ee596 f2fs: fix to do sanity check with reserved blkaddr of inline inode ee5067c60606 tpm/tpm_i2c_infineon: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT) cf503dbe5c22 tpm_tis_spi: Pass the SPI IRQ down to the driver 894b7c6584ed f2fs: fix to skip GC if type in SSA and SIT is inconsistent 7141f97cdd83 pktcdvd: Fix possible Spectre-v1 for pkt_devs 5f91efc475c8 f2fs: try grabbing node page lock aggressively in sync scenario fd4e3615936c net: mvneta: fix mtu change on port without link 0cfe17c2a909 pinctrl/amd: only handle irq if it is pending and unmasked acd73639c38c gpio: ml-ioh: Fix buffer underwrite on probe error path 1fc16c07d63b pinctrl: imx: off by one in imx_pinconf_group_dbg_show() 591ee8d9cd2f x86/mm: Remove in_nmi() warning from vmalloc_fault() 60deae3d9fc9 Bluetooth: hidp: Fix handling of strncpy for hid->name information 1dac27c707c8 ath10k: disable bundle mgmt tx completion event support 6158c2b70a8a tools/testing/nvdimm: kaddr and pfn can be NULL to ->direct_access() 383195f9feca scsi: 3ware: fix return 0 on the error path of probe 62128a8d8489 ata: libahci: Correct setting of DEVSLP register 7cadaaa96c07 ata: libahci: Allow reconfigure of DEVSLP register 3f3d6c0608b7 MIPS: Fix ISA virt/bus conversion for non-zero PHYS_OFFSET 1ed3a9307230 rpmsg: core: add support to power domains for devices 0e890d1cf491 wlcore: Set rx_status boottime_ns field on rx bd21eb8aa705 ath10k: prevent active scans on potential unusable channels 2dacb8cc67ef ath9k_hw: fix channel maximum power level test 473983f319cc ath9k: report tx status on EOSP 40992419f135 macintosh/via-pmu: Add missing mmio accessors 968f03158db5 perf evlist: Fix error out while applying initial delay and LBR cc33476b67b8 perf c2c report: Fix crash for empty browser 521aedea92cd NFSv4.0 fix client reference leak in callback c39273ce0d85 perf tools: Allow overriding MAX_NR_CPUS at compile time e296ac45b568 f2fs: fix defined but not used build warnings e04910746abe f2fs: do not set free of current section d85e49570227 f2fs: fix to active page in lru list for read path ca21de151016 tty: rocket: Fix possible buffer overwrite on register_PCI 4bb1d3ec658c Drivers: hv: vmbus: Cleanup synic memory free path eec63d96d0e4 firmware: vpd: Fix section enabled flag on vpd_section_destroy 16c6e01a4a98 uio: potential double frees if __uio_register_device() fails 2458e91302aa misc: ti-st: Fix memory leak in the error path of probe() 8e6ee30ad80f gpu: ipu-v3: default to id 0 on missing OF alias 3b9909896570 media: camss: csid: Configure data type and decode format properly cb71229f6483 timers: Clear timer_base::must_forward_clk with timer_base::lock held d1060bfcdc72 md/raid5: fix data corruption of replacements after originals dropped 1f6324f4ea5b scsi: target: fix __transport_register_session locking 3ddbcd49bbb3 blk-mq: fix updating tags depth 47a6917f4b72 net: phy: Fix the register offsets in Broadcom iProc mdio mux driver 6b7c7186c210 media: dw2102: Fix memleak on sequence of probes cbd5e67820a9 media: davinci: vpif_display: Mix memory leak on probe error path 77e120a9c64a selftests/bpf: fix a typo in map in map test 274977d99c19 powerpc/powernv: Fix concurrency issue with npu->mmio_atsd_usage 16aa222d2293 gpio: tegra: Move driver registration to subsys_init level fb281ed2e4dc Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV 0455f5d63b3e i2c: aspeed: Add an explicit type casting for *get_clk_reg_val 5ffdd121d0c4 ethtool: Remove trailing semicolon for static inline 96e5b8cc3cfd misc: mic: SCIF Fix scif_get_new_port() error handling 0b2d28449e68 ARC: [plat-axs*]: Enable SWAP e5d857d5f1fc tpm: separate cmd_ready/go_idle from runtime_pm 64def6f35348 crypto: aes-generic - fix aes-generic regression on powerpc 0fad94cf1016 switchtec: Fix Spectre v1 vulnerability ff225750dc4e x86/microcode: Update the new microcode revision unconditionally 05104410c9d1 x86/microcode: Make sure boot_cpu_data.microcode is up-to-date 1d92a611db50 cpu/hotplug: Prevent state corruption on error rollback cb2625854091 cpu/hotplug: Adjust misplaced smb() in cpuhp_thread_fun() cc4271088619 ALSA: hda - Fix cancel_work_sync() stall from jackpoll work a709c46fdcd0 KVM: VMX: Do not allow reexecute_instruction() when skipping MMIO instr d5fca5314c4d KVM: s390: vsie: copy wrapping keys to right place ae3968b41645 Btrfs: fix data corruption when deduplicating between different files 55bcfe019ac4 smb3: check for and properly advertise directory lease support b0b69369eecc SMB3: Backup intent flag missing for directory opens with backupuid mounts 9efcaa7c4afb MIPS: VDSO: Match data page cache colouring when D$ aliases 492519107c9d android: binder: fix the race mmap and alloc_new_buf_locked 381992bcccac block: bfq: swap puts in bfqg_and_blkg_put 23ecbbad7bf9 nbd: don't allow invalid blocksize settings 425739151e03 scsi: lpfc: Correct MDS diag and nvmet configuration d98b67089c0e i2c: i801: fix DNV's SMBCTRL register offset 831223b294f8 i2c: xiic: Make the start and the byte count write atomic 5dfe87ac34e2 Linux 4.14.70 ab088bc2911d arm64: Handle mismatched cache type 469c89aa5d7e arm64: Fix mismatched cache line size detection 0d2e80411a1a ASoC: wm8994: Fix missing break in switch 03717f80cf2c arm64: cpu_errata: include required headers 82a0e0f5cf40 x86: kvm: avoid unused variable warning e02c9275beea kvm: x86: Set highest physical address bits in non-present/reserved SPTEs 39cff99ba469 Revert "ARM: imx_v6_v7_defconfig: Select ULPI support" e37957305de3 irda: Only insert new objects into the global database via setsockopt 77be9452d0e5 irda: Fix memory leak caused by repeated binds of irda socket 63fd9d43c018 s390/lib: use expoline for all bcr instructions 9370868fd3ca kbuild: make missing $DEPMOD a Warning instead of an Error 1e0750745bdf drm/i915: Increase LSPCON timeout 13b23ccfa288 x86/xen: don't write ptes directly in 32-bit PV guests d85c2999a7b5 x86/pae: use 64 bit atomic xchg function in native_ptep_get_and_clear 685a452ce3bf usb: dwc3: core: Fix ULPI PHYs and prevent phy_get/ulpi_init during suspend/resume 44e5d0b6ce63 HID: add quirk for another PIXART OEM mouse used by HP 801fc191bb15 mm: Fix devm_memremap_pages() collision handling 1508043c32a9 lightnvm: pblk: free padded entries in write buffer fd8cb2e71cdd sched/deadline: Fix switching to -deadline 8d015a362a84 debugobjects: Make stack check warning more informative 448b5498f6c6 uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member name 589a8eafc74e drm/amdgpu:add VCN booting with firmware loaded by PSP 4a4afcf76c96 drm/amdgpu:add VCN support in PSP driver d47d14de2438 drm/amdgpu:add new firmware id for VCN 997157c4eb38 drm/amdgpu:add tmr mc address into amdgpu_firmware_info 65d20e40552f drm/amdgpu: update tmr mc address f40ecf3fe04a drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80 d991f8ae4071 drm/amd/pp/Polaris12: Fix a chunk of registers missed to program c46a1b2622fa drm/amdgpu: Fix RLC safe mode test in gfx_v9_0_enter_rlc_safe_mode 7e1a6951ca99 drm/i915/lpe: Mark LPE audio runtime pm as "no callbacks" a35d3352434d ARM: rockchip: Force CONFIG_PM on Rockchip systems 1f62d35cd2e1 arm64: rockchip: Force CONFIG_PM on Rockchip systems 33f4c5c68044 btrfs: Don't remove block group that still has pinned down bytes 0cdbc3faf960 btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized 2f92584bf1f6 btrfs: replace: Reset on-disk dev stats value after replace 145b1f56b992 btrfs: Exit gracefully when chunk map cannot be inserted to the tree 80f97c79f3e1 kvm: nVMX: Fix fault vector for VMX operation at CPL > 0 1187e0186d81 KVM: vmx: track host_state.loaded using a loaded_vmcs pointer 0aa49a4ddc8e clk: rockchip: Add pclk_rkpwm_pmu to PMU critical clocks in rk3399 92ef9425c6e1 powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX. f3c124c3077d powerpc/64s: Make rfi_flush_fallback a little more robust 17b1473e6433 powerpc/platforms/85xx: fix t1042rdb_diu.c build errors & warning e5f0192fe220 SMB3: Number of requests sent should be displayed for SMB3 not just CIFS f6a01ab96067 smb3: fix reset of bytes read and written stats 9dd38052a3eb cfq: Suppress compiler warnings about comparisons 9b3fa26f0092 RDS: IB: fix 'passing zero to ERR_PTR()' warning e33c8a2896ec selftests/powerpc: Kill child processes on SIGINT c861151b1fe9 iommu/omap: Fix cache flushes on L2 table entries 0a65ab39f8b6 ASoC: rt5677: Fix initialization of rt5677_of_match.data 3e86f5157661 staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice 120130a75724 dm kcopyd: avoid softlockup in run_complete_job 50956ef66cdb PCI: mvebu: Fix I/O space end address calculation 301ae5910648 xen/balloon: fix balloon initialization for PVH Dom0 a333f3f2a255 Input: do not use WARN() in input_alloc_absinfo() a9fac97e2e50 NFSv4: Fix error handling in nfs4_sp4_select_mode() 8ac6b147534c scsi: aic94xx: fix an error code in aic94xx_init() 24165131bcab ACPI / scan: Initialize status to ACPI_STA_DEFAULT c953a5038d2d s390/dasd: fix panic for failed online processing ab16afe8c624 s390/dasd: fix hanging offline processing due to canceled worker d67c7c9dd14f block: bvec_nr_vecs() returns value for wrong slab 6952b4ed9e42 perf probe powerpc: Fix trace event post-processing af675a6eefe9 powerpc: Fix size calculation using resource_size() c20a5e06b750 powerpc/uaccess: Enable get_user(u64, *p) on 32-bit 47425c36d3fb f2fs: fix to clear PG_checked flag in set_page_dirty() c2842800d6bd net/9p: fix error path of p9_virtio_probe 4cd195263e42 net/9p/trans_fd.c: fix race by holding the lock 5859129cf62e irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP 5e51aa84f4e8 perf tools: Check for null when copying nsinfo. 800dbcee10cd net: hns3: Fix for phy link issue when using marvell phy driver a77439e5fb28 net: hns3: Fix for command format parsing error in hclge_is_all_function_id_zero c16a0727c71a RDMA/hns: Fix usage of bitmap allocation functions return values 0c02e0c3fd13 tcp, ulp: add alias for all ulp modules 58de2cef2b68 netfilter: fix memory leaks on netlink_dump_start error e4f419133dfa platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360 044e9463ec20 mfd: sm501: Set coherent_dma_mask when creating subdevices ccf1ae823e4a ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest() a2805f40c77e s390/kdump: Fix memleak in nt_vmcoreinfo 2b81b00edba1 netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses f95c5cde34e8 platform/x86: intel_punit_ipc: fix build errors e20c4abf9186 fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot() 4570403f6e11 mm/fadvise.c: fix signed overflow UBSAN complaint 2dc61587a103 pwm: meson: Fix mux clock names 52ec8484a7c5 IB/hfi1: Invalid NUMA node information can cause a divide by zero e5ef973b137f x86/mce: Add notifier_block forward declaration b7540b6235f0 virtio: pci-legacy: Validate queue pfn ab4bddc2d032 scripts: modpost: check memory allocation results 7bbf1e8a2471 fat: validate ->i_start before using 305277dae99e fs/proc/kcore.c: use __pa_symbol() for KCORE_TEXT list entries 68e787c3c800 hfsplus: fix NULL dereference in hfsplus_lookup() 003d4c3bf5a5 reiserfs: change j_timestamp type to time64_t f552f8c28d34 fork: don't copy inconsistent signal handler state to child 8b89affb42ae sunrpc: Don't use stack buffer with scatterlist ece4ba1c0c90 hfs: prevent crash on exit from failed search 7d6eba211a1a hfsplus: don't return 0 when fill_super() failed d4e42116f77e cifs: check if SMB2 PDU size has been padded and suppress the warning c9ba1b82ce96 net: sched: action_ife: take reference to meta module e54c50709019 act_ife: fix a potential deadlock cd7330c06195 act_ife: move tcfa_lock down to where necessary 8aa07625eb81 hv_netvsc: Fix a deadlock by getting rtnl lock earlier in netvsc_probe() dadb0110a49d hv_netvsc: ignore devices that are not PCI bf82c2cb1450 vhost: correctly check the iova range when waking virtqueue fe0d111fea19 mlxsw: spectrum_switchdev: Do not leak RIFs when removing bridge 3c035a48e774 sctp: hold transport before accessing its asoc in sctp_transport_get_next 456e46f05b37 nfp: wait for posted reconfigs when disabling the device 8fed734df375 tipc: fix a missing rhashtable_walk_exit() 417b068a6a7a net/sched: act_pedit: fix dump of extended layered op 56af4184d356 vti6: remove !skb->ignore_df check from vti6_xmit() e4b6c5fd31bd tcp: do not restart timewait timer on rst reception 3eada53de462 r8169: add support for NCube 8168 network card d19688e347a1 qlge: Fix netdev features configuration. 7f1e6ec4ff12 net: sched: Fix memory exposure from short TCA_U32_SEL cb765f5c3c5b net: macb: do not disable MDIO bus at open/close time 1ef819e411f8 net: bcmgenet: use MAC link status for fixed phy a16405ad27f6 ipv4: tcp: send zero IPID for RST and ACK sent in SYN-RECV and TIME-WAIT state a08d7ea10bc7 act_ife: fix a potential use-after-free 7fe7a0f4c5cf Linux 4.14.69 29245d36680e arm64: mm: always enable CONFIG_HOLES_IN_ZONE 3098933c1213 fs/quota: Fix spectre gadget in do_quotactl 0682e027f39d crypto: caam/qi - fix error path in xts setkey ccb38942fbe1 crypto: caam/jr - fix descriptor DMA unmapping be6f98b203d3 crypto: caam - fix DMA mapping direction for RSA forms 2 & 3 9f830cf2d510 crypto: vmx - Fix sleep-in-atomic bugs 300ec47ab8ea perf auxtrace: Fix queue resize 5a842ecca279 cap_inode_getsecurity: use d_find_any_alias() instead of d_find_alias() d1a265da7b29 bcache: release dc->writeback_lock properly in bch_writeback_thread() c8d875b471b6 libnvdimm: fix ars_status output length calculation ff0791f467d0 getxattr: use correct xattr length 19b99719970b udlfb: set optimal write delay d0f2eb3a419b fb: fix lost console when the user unplugs a USB adapter 9b0dd656d593 pwm: tiehrpwm: Fix disabling of output of PWMs 0ef9c771924d pwm: tiehrpwm: Don't use emulation mode bits to control PWM output 63bbaa1469e6 ubifs: Fix synced_i_size calculation for xattr inodes 8a23348d76a1 ubifs: xattr: Don't operate on deleted inodes f6d7acc1d9ca ubifs: Check data node size before truncate 3259dd7176e4 Revert "UBIFS: Fix potential integer overflow in allocation" a230db38a9fd ubifs: Fix memory leak in lprobs self-check 656d6e6f6d23 userns: move user access out of the mutex b692c405a1ae sys: don't hold uts_sem while accessing userspace memory c2ea292b1350 iommu/vt-d: Fix dev iotlb pfsid use eb58c40465f3 iommu/vt-d: Add definitions for PFSID 7cf82f3b7a77 mm/tlb: Remove tlb_remove_table() non-concurrent condition ddcb92700552 ARM: tegra: Fix Tegra30 Cardhu PCA954x reset d453f04e813a NFSv4: Fix a sleep in atomic context in nfs4_callback_sequence() c5759d5a7e6a NFSv4: Fix locking in pnfs_generic_recover_commit_reqs bf23ba3737e0 NFSv4 client live hangs after live data migration recovery ec13c53dc59f pnfs/blocklayout: off by one in bl_map_stripe() ed480f2b9e86 block, bfq: return nbytes and not zero from struct cftype .write() method fe806eb54bca xtensa: increase ranges in ___invalidate_{i,d}cache_all 0d78efe0412b xtensa: limit offsets in __loop_cache_{all,page} 025cc91f8c52 KVM: PPC: Book3S: Fix guest DMA when guest partially backed by THP pages 58936d4d7b14 KVM: VMX: fixes for vmentry_l1d_flush module parameter 015156f50179 PM / sleep: wakeup: Fix build error caused by missing SRCU support 924383edf44c cpufreq: governor: Avoid accessing invalid governor_data 256f63f52ec3 drivers/block/zram/zram_drv.c: fix bug storing backing_dev 8840ca570f2b ovl: fix wrong use of impure dir cache in ovl_iterate() aa9ceea20788 mfd: hi655x: Fix regmap area declared size for hi655x 4f6789cad647 uprobes: Use synchronize_rcu() not synchronize_sched() a36e2aa90576 livepatch: Validate module/old func name length 68a735eb9a16 printk/tracing: Do not trace printk_nmi_enter() cbde057aa0e7 tracing/blktrace: Fix to allow setting same value 4c9016757e3b tracing: Do not call start/stop() functions when tracing_on does not change 2b4c940dccbe rtc: omap: fix potential crash on power off bbac5374b537 vmw_balloon: fix VMCI use when balloon built into kernel 89667b269e87 vmw_balloon: VMCI_DOORBELL_SET does not check status d3b403844db5 vmw_balloon: do not use 2MB without batching 9fd44e90903c vmw_balloon: fix inflation of 64-bit GFNs c0a8e047734c extcon: Release locking when sending the notification of connector state 3f9481902f0b iio: ad9523: Fix return value for ad952x_store() e4d3a25111dc iio: ad9523: Fix displayed phase b86374912fee iio: sca3000: Fix missing return in switch 91b48a9ced06 Drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind() d286cfd45277 uart: fix race between uart_put_char() and uart_shutdown() 5044eb05026e dm crypt: don't decrease device limits f961be894413 dm cache metadata: set dirty on all cache blocks after a crash b7227e6044be dm cache metadata: save in-core policy_hint_size to on-disk superblock 3bef88257145 dm thin: stop no_space_timeout worker when switching to write-mode 4f4b1c5c4c8a dm integrity: change 'suspending' variable from bool to int 5f04d296f24b net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree() 312479e06828 net/9p/client.c: version pointer uninitialized f92953b0765b 9p/virtio: fix off-by-one error in sg list bounds check 4827a583871a fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed 390671089d62 9p: fix multiple NULL-pointer-dereferences def89b81ef45 RDMA/rxe: Set wqe->status correctly if an unexpected response is received bac5c3c122f4 ib_srpt: Fix a use-after-free in srpt_close_ch() 241e62005c74 cxl: Fix wrong comparison in cxl_adapter_context_get() 1eb08e7b192d powerpc/powernv/pci: Work around races in PCI bridge enabling 15677df25afc PCI: Add wrappers for dev_printk() 4bfd910e8fb3 powerpc/pseries: Fix endianness while restoring of r3 in MCE handler. ed53c0ecc959 powerpc/fadump: handle crash memory ranges array index overflow 259c5122f3a8 Fix kexec forbidding kernels signed with keys in the secondary keyring to boot f70805bef73e Replace magic for trusting the secondary keyring with #define 9cbb32610233 mailbox: xgene-slimpro: Fix potential NULL pointer dereference c160382ab064 media: Revert "[media] tvp5150: fix pad format frame height" fba6b7f4bbe2 libertas: fix suspend and resume for SDIO connected cards 7188f7416438 drm/i915/userptr: reject zero user_size 1e2698976822 block: really disable runtime-pm for blk-mq 0affbaece6d0 block: blk_init_allocated_queue() set q->fq as NULL in the fail case cf12d0f9c0dc readahead: stricter check for bdi io_pages 8513c01ae15f mmc: renesas_sdhi_internal_dmac: fix #define RST_RESERVED_BITS e7b6b3699b97 spi: cadence: Change usleep_range() to udelay(), for atomic context dc9a7dd57f63 spi: spi-fsl-dspi: Fix imprecise abort on VF500 during probe 23554cab1ebd spi: pxa2xx: Add support for Intel Ice Lake aa1d05c50483 spi: davinci: fix a NULL pointer dereference 4d3016e56c3d 9p/net: Fix zero-copy path in the 9p virtio transport 4a2262972b5d net: mac802154: tx: expand tailroom if necessary 54c0fa829d45 net: 6lowpan: fix reserved space for single frames ee13f7edca58 Linux 4.14.68 77d1658e5dd1 gcc-plugins: Use dynamic initializers 616d41d1b408 gcc-plugins: Add include required by GCC release 8 73b2e7073b51 cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status 63a0f9de021a watchdog: Mark watchdog touch functions as notrace f9f67667e0ae power: generic-adc-battery: check for duplicate properties copied from iio channels 54cecb7440bc power: generic-adc-battery: fix out-of-bounds write when copying channel properties d2a97eba0c4e PM / clk: signedness bug in of_pm_clk_add_clks() 2adc2541a5c4 clk: rockchip: fix clk_i2sout parent selection bits on rk3399 ae302d685162 iscsi target: fix session creation failure handling 5b55b24cec4c scsi: core: Avoid that SCSI device removal through sysfs triggers a deadlock c984f4d1d40a scsi: sysfs: Introduce sysfs_{un,}break_active_protection() d071004e0249 scsi: mpt3sas: Fix _transport_smp_handler() error path 61ec14f42c84 tpm: Return the actual size when receiving an unsupported command ba0797a8016c MIPS: lib: Provide MIPS64r6 __multi3() for GCC < 7 1c40cd97ffe3 MIPS: Change definition of cpu_relax() for Loongson-3 156b5e33ab12 MIPS: Always use -march=<arch>, not -<arch> shortcuts 62c59b1ddbdc MIPS: Correct the 64-bit DSP accumulator register size 4bdf9c175980 kprobes: Make list and blacklist root user read only 6ba27d3e2b4a kprobes/arm: Fix %p uses in error messages 0536c9e41f3f s390/pci: fix out of bounds access during irq setup 2ac8fbd174d7 s390/numa: move initial setup of node_to_cpumask_map 97e3dcc08e4e s390/qdio: reset old sbal_state flags bcd169a2726a s390: fix br_r1_trampoline for machines without exrl 9fae74e9a441 s390/mm: fix addressing exception after suspend/resume bbcbaf56ff4b x86/entry/64: Wipe KASAN stack shadow before rewind_stack_do_exit() cf9fcdd6c2a2 hwmon: (nct6775) Fix potential Spectre v1 ec4034835eaf x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ f64979512c5e x86/spectre: Add missing family 6 check to microcode check f822ceb82608 x86/irqflags: Mark native_restore_fl extern inline 53f01e2004ae x86/nmi: Fix NMI uaccess race against CR3 switching fbd5b82d30d2 x86/vdso: Fix lsl operand order 42228037aa5f pinctrl: freescale: off by one in imx1_pinconf_group_dbg_show() 7806d2ef4904 ASoC: sirf: Fix potential NULL pointer dereference 2ef691428ee3 ASoC: zte: Fix incorrect PCM format bit usages d1913b9e07e7 ASoC: dpcm: don't merge format from invalid codec dai e16bbdeccdd7 b43/leds: Ensure NUL-termination of LED name string f0f3784ee3e9 b43legacy/leds: Ensure NUL-termination of LED name string f337a54878e2 udl-kms: avoid division c0357c1895ae udl-kms: fix crash due to uninitialized memory 86c18c5a4bc5 udl-kms: handle allocation failure 29e641a3693a udl-kms: change down_interruptible to down e8a3f3a03655 fuse: Add missed unlock_page() to fuse_readpages_fill() ff4a71855d0a fuse: Fix oops at process_init_reply() 973206923812 fuse: umount should wait for all requests fc17d7519e8e fuse: fix unlocked access to processing queue cfb6eca6e4bb fuse: fix double request_end() 7d392674443c fuse: fix initial parallel dirops eaebcf902ae0 fuse: Don't access pipe->buffers without pipe_lock() c49505f6efb1 x86/kvm/vmx: Remove duplicate l1d flush definitions 933e1ab12051 KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled cedb8037f069 x86/process: Re-export start_thread() 4587db4c2a95 x86/vdso: Fix vDSO build if a retpoline is emitted 310f2a6e3ad3 x86/speculation/l1tf: Suggest what to do on systems with too much RAM 59463ec29cac x86/speculation/l1tf: Fix off-by-one error when warning that system has too much RAM 7418d7086217 x86/speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit e9afa7c1ef17 mm/tlb, x86/mm: Support invalidating TLB caches for RCU_TABLE_FREE 3e0994616d4a mm: move tlb_table_flush to tlb_flush_mmu_free 7d91aa5717db platform/x86: ideapad-laptop: Apply no_hw_rfkill to Y20-15IKBM, too 0c9bed369889 nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event 509c0cdfb438 ext4: reset error code in ext4_find_entry in fallback 5043e05dd571 ext4: sysfs: print ext4_super_block fields as little-endian 7773a6d94896 ext4: check for NUL characters in extended attribute's name bd0f93a630ff stop_machine: Atomically queue and wake stopper threads e72107b2d995 stop_machine: Reflow cpu_stop_queue_two_works() 97f76f3bc406 s390/kvm: fix deadlock when killed by oom 4a06fdf2c490 KVM: arm/arm64: Skip updating PTE entry if no change 792a039415dc KVM: arm/arm64: Skip updating PMD entry if no change 75677d72be74 arm64: dts: rockchip: corrected uart1 clock-names for rk3328 5a56b307992e arm64: mm: check for upper PAGE_SHIFT bits in pfn_valid() a8affa695373 kprobes/arm64: Fix %p uses in error messages cd71265a8cd6 printk/nmi: Prevent deadlock when accessing the main log buffer in NMI 943276ef14c7 printk: Create helper function to queue deferred console handling 646e7c04803f printk: Split the code for storing a message into the log buffer b48522b7887a iommu/arm-smmu: Error out only if not enough context interrupts f91ca31f5379 Btrfs: fix btrfs_write_inode vs delayed iput deadlock e7457f97d2af btrfs: don't leak ret from do_chunk_alloc 770025cc4b69 btrfs: use correct compare function of dirty_metadata_bytes 758f55f91833 smb3: fill in statfs fsid and correct namelen 66913d23eeda smb3: don't request leases in symlink creation and query be1210c7758c smb3: Do not send SMB3 SET_INFO if nothing changed 82a856f52733 smb3: enumerating snapshots was leaving part of the data off end d5f2790a7a1e cifs: check kmalloc before use cba34b940773 cifs: add missing debug entries for kconfig options cfcfbe08d298 mei: don't update offset in write cf7ab2abc524 mm/memory.c: check return value of ioremap_prot 7bb880a11650 scsi: vmw_pvscsi: Return DID_RESET for status SAM_STAT_COMMAND_TERMINATED 4ce46fff750d scsi: fcoe: clear FC_RP_STARTED flags when receiving a LOGO a67aef68ef24 scsi: fcoe: drop frames in ELS LOGO error path 95239b2db50f scsi: fcoe: fix use-after-free in fcoe_ctlr_els_send fbb37b72489d gpiolib-acpi: make sure we trigger edge events at least once on boot 1d7bf02d716d memcg: remove memcg_cgroup::id from IDR on mem_cgroup_css_alloc() failure 47041cf42a47 drivers: net: lmc: fix case value for target abort error 28013eecf6a0 Squashfs: Compute expected length from inode size rather than block length 249778d9459a mm: delete historical BUG from zap_pmd_range() 8babbc02f893 squashfs metadata 2: electric boogaloo dfa5c4bf8c94 enic: do not call enic_change_mtu in enic_probe 574a4f3e6173 sparc: use asm-generic version of msi.h 7c841ea7f8f1 sparc/time: Add missing __init to init_tick_ops() 24fab572ae7d arc: fix type warnings in arc/mm/cache.c 391e3007e447 arc: fix build errors in arc/include/asm/delay.h aca05b1741d3 arc: [plat-eznps] fix printk warning in arc/plat-eznps/mtm.c 79f9c523ca43 arc: [plat-eznps] fix data type errors in platform headers d267258ee192 ARC: [plat-eznps] Add missing struct nps_host_reg_aux_dpc 2312e6a802b3 enic: handle mtu change for vf properly d4f96c0515fc nfp: flower: fix port metadata conversion bug bc928fdf5d1e bpf: use GFP_ATOMIC instead of GFP_KERNEL in bpf_parse_prog() 331c36cd01d8 ARC: dma [non-IOC] setup SMP_CACHE_BYTES and cache_line_size 49c1fba34589 Revert "MIPS: BCM47XX: Enable 74K Core ExternalSync for PCIe erratum" 9339ea7c92fc tools/power turbostat: Read extended processor family from CPUID a73b6c4c2601 zswap: re-check zswap_is_full() after do zswap_shrink() 92c159863d8a ipc/sem.c: prevent queue.status tearing in semop 2dd2f7722570 hinic: Link the logical network device to the pci device in sysfs d00c34f8e205 selftests/ftrace: Add snapshot and tracing_on test case 2c69b0300458 cachefiles: Wait rather than BUG'ing on "Unexpected object collision" 4029dd9fc48b cachefiles: Fix refcounting bug in backing-file read monitoring 819b476c2138 fscache: Allow cancelled operations to be enqueued 165335d4f18e x86/boot: Fix if_changed build flip/flop bug d35aab9df15a sched/rt: Restore rt_runtime after disabling RT_RUNTIME_SHARE 0ba83f87c3f1 i2c/mux, locking/core: Annotate the nested rt_mutex usage b3da5df23900 locking/rtmutex: Allow specifying a subclass for nested locking 354e35beb0c5 net: axienet: Fix double deregister of mdio f63868841a31 qmi_wwan: fix interface number for DW5821e production firmware 637de2c01678 bnx2x: Fix invalid memory access in rss hash config path. 1875957f2ec4 media: staging: omap4iss: Include asm/cacheflush.h after generic includes 00f795e12b8b perf/x86/amd/ibs: Don't access non-started event 385b40b4fc1b i2c: davinci: Avoid zero value of CLKH 562d7bc6c966 can: m_can: Move accessing of message ram to after clocks are enabled 0b14a856f918 can: mpc5xxx_can: check of_iomap return before use 06ab42734529 net: prevent ISA drivers from building on PPC32 5803ce5effc9 atl1c: reserve min skb headroom ffb34418ca94 qed: Correct Multicast API to reflect existence of 256 approximate buckets. f4e284f1db9e qed: Fix possible race for the link state value. 77c65d5f40c6 qed: Fix link flap issue due to mismatching EEE capabilities. b970d8a1c213 net: caif: Add a missing rcu_read_unlock() in caif_flow_cb a10170d94ed4 tools/power turbostat: fix -S on UP systems 10ca6b3f92d3 KVM: vmx: use local variable for current_vmptr when emulating VMPTRST 123534dbd490 netfilter: nf_tables: don't allow to rename to already-pending name 4a0144a43c52 netfilter: nf_tables: fix memory leaks on chain rename e3476a6da5d8 bpf, ppc64: fix unexpected r0=0 exit path inside bpf_xadd a685c4c4d6e8 netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy() 70e88fef36ec usb: gadget: f_uac2: fix endianness of 'struct cntrl_*_lay3' 7cd80fc138f2 tools: usb: ffs-test: Fix build on big endian systems 645fef5e8dde usb/phy: fix PPC64 build errors in phy-fsl-usb.c a362655deb0e usb: gadget: u_audio: protect stream runtime fields with stream spinlock c7d18686e87a usb: gadget: u_audio: remove cached period bytes value 42b09bece176 usb: gadget: u_audio: remove caching of stream buffer parameters 224c0d0894ff usb: gadget: u_audio: update hw_ptr in iso_complete after data copied dc126a1e5fb8 usb: gadget: u_audio: fix pcm/card naming in g_audio_setup() fa18ff7edb88 usb: gadget: f_uac2: fix error handling in afunc_bind (again) 43b058dc21cd usb: gadget: r8a66597: Fix a possible sleep-in-atomic-context bugs in r8a66597_queue() 3f41c2d0e618 usb: gadget: r8a66597: Fix two possible sleep-in-atomic-context bugs in init_controller() 05ee6166d702 nbd: handle unexpected replies better ced413c5ef85 nbd: don't requeue the same request twice. 962ff36dac01 drm/imx: imx-ldb: check if channel is enabled before printing warning a43eac2d855b drm/imx: imx-ldb: disable LDB on driver bind 9ac1a4644bb8 scsi: libiscsi: fix possible NULL pointer dereference in case of TMF ca5fc53ad401 scsi: target: iscsi: cxgbit: fix max iso npdu calculation 384f0d9fe4ad drm/bridge: adv7511: Reset registers on hotplug 7cb625dd9ed6 nl80211: Add a missing break in parse_station_flags 147b89c421d0 ext4: clear mmp sequence number when remounting read-only de044d4ecc65 mac80211: add stations tied to AP_VLANs during hw reconfig b6f147a2d907 esp6: fix memleak on error path in esp6_input 0118f86d21f1 xfrm: free skb if nlsk pointer is NULL d35cc7ed2cfe xfrm: fix missing dst_release() after policy blocking lbcast and multicast d2adc199957f vti6: fix PMTU caching and reporting on xmit 7ff4bf211f3e crypto: vmx - Use skcipher for ctr fallback
Some of the reference BSPs for 4.14 need fixes that have been done
on 4.18 and master to silence warnings, so we cherry-pick the
following changes:
f991b21d7858 config: flash: drop obselete config values da7524cf2980 edgerouter: Drop the obsolete kernel options 675c5b0cde65 cfg: drop MACH_VERSATILE_PB and MACH_VERSTAILE_AB 0936b18ed8d5 cfg/timer/rtc: toggle RTC_CLASS instead of GEN_RTC 634d8f2230d1 mpc8315e-rdb: Drop the obsolete kernel options 9beb3a28736e rt: drop obselete configuration options
cfg/timer/rtc: toggle RTC_CLASS instead of GEN_RTC
In 2016, the final removal of GEN_RTC happened with commit 6705fdb3 char/genrtc: remove the rest of the driver
What is remaining, is a legacy driver (char/rtc) and the new
RTC_CLASS framework - which supports everything except S390
and Atari. Many platforms automatically support the right
driver for RTC_CLASS framework.
Signed-off-by: Jens Rehsack <sno@netbsd.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
]
Bruce Ashfield [Sat, 22 Sep 2018 17:18:48 +0000 (13:18 -0400)]
linux-yocto: configuration warning fixes
Integrating the following commits to address kernel configuration
audit warnings:
856794172e8f features/intel-pinctrl: Fix conflict with configs 397b67321037 bsp/intel-x86: Rename CONFIG_R8723BE to CONFIG_RTL8723BE fca2a16483f2 features/thermal: Add dependency for kernel option b6110e2e8e55 features/tpm: fix conflict with configs and add dependency ee22bc1f8fcd features/mmc: modify dependency e50eb6bd929b features: drop the obsolete kernel option f5327047994f features/hostapd: drop obsolete configs 48b54e625876 bsp/intel-x86: Drop configs that has been removed by kernel
Dan McGregor [Wed, 17 Oct 2018 21:22:35 +0000 (15:22 -0600)]
base-files: change permissions on /sys and /proc
The kernel mounts /proc and /sys with the mode 555. Fedora explicitly
sets this value in its filesystem setup package. Debian doesn't seem
to set it explictly. Having them be 755 causes permission issues on
upgrades inside a container where the guest does not have the
permission to change the modes of the mount points.
So, just bite the bullet and force them to be 555.
Armin Kuster [Mon, 22 Oct 2018 14:05:12 +0000 (15:05 +0100)]
tzdata: update to 2018f
Briefly:
Volgograd moves from +03 to +04 on 2018-10-28.
Fiji ends DST 2019-01-13, not 2019-01-20.
Most of Chile changes DST dates, effective 2019-04-06.
Changes to future timestamps
Volgograd moves from +03 to +04 on 2018-10-28 at 02:00.
(Thanks to Alexander Fetisov and Stepan Golosunov.)
Fiji ends DST 2019-01-13 instead of the 2019-01-20 previously
predicted. (Thanks to Raymond Kumar.) Adjust future predictions
accordingly.
Most of Chile will end DST on the first Saturday in April at 24:00 mainland
time, and resume DST on the first Saturday in September at 24:00 mainland
time. The changes are effective from 2019-04-06, and do not affect the
Magallanes region modeled by America/Punta_Arenas. (Thanks to Juan Correa
and Tim Parenti.) Adjust future predictions accordingly.
Changes to past timestamps
The 2018-05-05 North Korea 30-minute time zone change took place
at 23:30 the previous day, not at 00:00 that day.
China's 1988 spring-forward transition was on April 17, not
April 10. Its DST transitions in 1986/91 were at 02:00, not 00:00.
(Thanks to P Chan.)
Fix several issues for Macau before 1992. Macau's pre-1904 LMT
was off by 10 s. Macau switched to +08 in 1904 not 1912, and
temporarily switched to +09/+10 during World War II. Macau
observed DST in 1942/79, not 1961/80, and there were several
errors for transition times and dates. (Thanks to P Chan.)
The 1948-1951 fallback transitions in Japan were at 25:00 on
September's second Saturday, not at 24:00. (Thanks to Phake Nick.)
zic turns this into 01:00 on the day after September's second
Saturday, which is the best that POSIX or C platforms can do.
Incorporate 1940-1949 Asia/Shanghai DST transitions from a 2014
paper by Li Yu, replacing more-questionable data from Shanks.
Changes to time zone abbreviations
Use "PST" and "PDT" for Philippine time. (Thanks to Paul Goyette.)
Changes to documentation
New restrictions: A Rule name must start with a character that
is neither an ASCII digit nor "-" nor "+", and an unquoted name
should not use characters in the set "!$%&'()*,/:;<=>?@[\]^`{|}~".
The latter restriction makes room for future extensions (a
possibility noted by Tom Lane).
tzfile.5 now documents what time types apply before the first and
after the last transition, if any.
Documentation now uses the spelling "timezone" for a TZ setting
that determines timestamp history, and "time zone" for a
geographic region currently sharing the same standard time.
The name "TZif" is now used for the tz binary data format.
tz-link.htm now mentions the A0 TimeZone Migration utilities.
(Thanks to Aldrin Martoq for the link.)
Changes to build procedure
New 'make' target 'rearguard_tarballs' to build the rearguard
tarball only. This is a convenience on platforms that lack lzip
if you want to build the rearguard tarball. (Problem reported by
Deborah Goldsmith.)
tzdata.zi is now more stable from release to release. (Problem
noted by Tom Lane.) It is also a bit shorter.
tzdata.zi now can contain comment lines documenting configuration
information, such as which data format was selected, which input
files were used, and how leap seconds are treated. (Problems
noted by Lester Caine and Brian Inglis.) If the Makefile defaults
are used these comment lines are absent, for backward
compatibility. A redistributor intending to alter its copy of the
files should also append "-LABEL" to the 'version' file's first
line, where "LABEL" identifies the redistributor's change.
(From OE-Core rev: 9d786808fb9471eff46d95dd354f6254e468aa17)
Armin Kuster [Mon, 22 Oct 2018 14:05:11 +0000 (15:05 +0100)]
tzcode: update to 2018f
Changes to code
zic now always generates TZif files where time type 0 is used for
timestamps before the first transition. This simplifies the
reading of TZif files and should not affect behavior of existing
TZif readers because the same set of time types is used; only
their internal indexes may have changed. This affects only the
legacy zones EST5EDT, CST6CDT, MST7MDT, PST8PDT, CET, MET, and
EET, which previously used nonzero types for these timestamps.
Because of the type 0 change, zic no longer outputs a dummy
transition at time -2**59 (before the Big Bang), as clients should
no longer need this to handle historical timestamps correctly.
This reverts a change introduced in 2013d and shrinks most TZif
files by a few bytes.
zic now supports negative time-of-day in Rule and Leap lines, e.g.,
"Rule X min max - Apr lastSun -6:00 1:00 -" means the transition
occurs at 18:00 on the Saturday before the last Sunday in April.
This behavior was documented in 2018a but the code did not
entirely match the documentation.
localtime.c no longer requires at least one time type in TZif
files that lack transitions or have a POSIX-style TZ string. This
future-proofs the code against possible future extensions to the
format that would allow TZif files with POSIX-style TZ strings and
without transitions or time types.
A read-access subscript error in localtime.c has been fixed.
It could occur only in TZif files with timecnt == 0, something that
does not happen in practice now but could happen in future versions.
localtime.c no longer ignores TZif POSIX-style TZ strings that
specify only standard time. Instead, these TZ strings now
override the default time type for timestamps after the last
transition (or for all time stamps if there are no transitions),
just as DST strings specifying DST have always done.
leapseconds.awk now outputs "#updated" and "#expires" comments,
and supports leap seconds at the ends of months other than June
and December. (Inspired by suggestions from Chris Woodbury.)
(From OE-Core rev: 4670dcdb6e2504469c30ebed828d4702d8c0003c)
Armin Kuster [Fri, 4 May 2018 17:05:16 +0000 (10:05 -0700)]
tzdata: update to 2018e
Briefly:
North Korea switches back to +09 on 2018-05-05.
The main format uses negative DST again, for Ireland etc.
'make tarballs' now also builds a rearguard tarball.
New 's' and 'd' suffixes in SAVE columns of Rule and Zone lines.
Changes to past and future time stamps
North Korea switches back from +0830 to +09 on 2018-05-05.
(Thanks to Kang Seonghoon, Arthur David Olson, Seo Sanghyeon,
and Tim Parenti.)
Bring back the negative-DST changes of 2018a, except be more
compatible with data parsers that do not support negative DST.
Also, this now affects historical time stamps in Namibia and the
former Czechoslovakia, not just Ireland. The main format now uses
negative DST to model time stamps in Europe/Dublin (from 1971 on),
Europe/Prague (1946/7), and Africa/Windhoek (1994/2017). This
does not affect UT offsets, only time zone abbreviations and the
tm_isdst flag. Also, this does not affect rearguard or vanguard
formats; effectively the main format now uses vanguard instead of
rearguard format. Data parsers that do not support negative DST
can still use data from the rearguard tarball described below
Armin Kuster [Fri, 4 May 2018 17:05:15 +0000 (10:05 -0700)]
tzcode-native: updatet to 2018e
Changes to build procedure
The command 'make tarballs' now also builds the tarball
tzdataVERSION-rearguard.tar.gz, which is like tzdataVERSION.tar.gz
except that it uses rearguard format intended for trailing-edge
data parsers.
Changes to data format and to code
The SAVE column of Rule and Zone lines can now have an 's' or 'd'
suffix, which specifies whether the adjusted time is standard time
or daylight saving time. If no suffix is given, daylight saving
time is used if and only if the SAVE column is nonzero; this is
the longstanding behavior. Although this new feature is not used
in tzdata, it could be used to specify the legal time in Namibia
1994-2017, as opposed to the popular time (see below).
Changes to past time stamps
From 1994 through 2017 Namibia observed DST in winter, not summer.
That is, it used negative DST, as Ireland still does. This change
does not affect UTC offsets; it affects only the tm_isdst flag and
the abbreviation used during summer, which is now CAT, not WAST.
Although (as noted by Michael Deckers) summer and winter time were
both simply called "standard time" in Namibian law, in common
practice winter time was considered to be DST (as noted by Stephen
Colebourne). The full effect of this change is only in vanguard
format; in rearguard and main format, the tm_isdst flag is still
zero in winter and nonzero in summer.
In 1946/7 Czechoslovakia also observed negative DST in winter.
The full effect of this change is only in vanguard format; in
rearguard and main formats, it is modeled as plain GMT without
daylight saving. Also, the dates of some 1944/5 DST transitions
in Czechoslovakia have been changed.
(From OE-Core rev: aeb3d295581908ca9a9d8f1705f70b49b2de32e3)
Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
Bruce Ashfield [Mon, 22 Oct 2018 06:20:10 +0000 (06:20 +0000)]
kernel: specify dependencies for compilation for config tasks
With recent kernels (i.e. 4.17+) the configuration phase of the kernel
will check for capabilities/options of the compiler for CVE and other
mitigation support.
For a general kernel, we want to ensure that CC is fully defined when
the config targets are invoked (so the proper compiler will be checked).
For linux-yocto, we also need to specify the compiler/tools dependencies
for the configme task since it executes before configure and hence the
main kernel build DEPENDS will not always be in the sysroot before it
executes. Without those dependencies the kernel will be incorrectly
configured (i.e. bison is missing) or the configuration will fail the
mitigation tests.
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Sinan Kaya <okaya@kernel.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
The fix is similar to what was done for PowerPC32.
It solves below error, while compiling for PowerPC64,
-- snip --
| ../../../../valgrind-3.13.0/none/tests/ppc64/test_isa_2_06_part2.c: In function 'usage':
| ../../../../valgrind-3.13.0/none/tests/ppc64/test_isa_2_06_part2.c:1778:3: warning: implicit declaration of function 'fprintf' [-Wimplicit-function-declaration]
| fprintf(stderr,
| ^~~~~~~
| ../../../../valgrind-3.13.0/none/tests/ppc64/test_isa_2_06_part2.c:1778:3: warning: incompatible implicit declaration of built-in function 'fprintf'
| ../../../../valgrind-3.13.0/none/tests/ppc64/test_isa_2_06_part2.c:1778:3: note: include '<stdio.h>' or provide a declaration of 'fprintf'
| ../../../../valgrind-3.13.0/none/tests/ppc64/test_isa_2_06_part2.c:1778:11: error: 'stderr' undeclared (first use in this function)
| fprintf(stderr,
| ^~~~~~
-- snip --
Anuj Mittal [Tue, 16 Oct 2018 02:47:12 +0000 (10:47 +0800)]
perl: skip tests that are not useful
Some tests, like the one that compares the hashes for a list of files
against those stored in a .dat file, don't make sense for downstream
distros packaging perl.
Backport a patch from upstream that allows skipping of these tests at
runtime. Also remove the local patch trying to keep hashes up-to-date
for one of those tests.
Ola x Nilsson [Thu, 4 Oct 2018 10:43:28 +0000 (12:43 +0200)]
externalsrc.bbclass: Set BB_DONT_CACHE for non-target recipes
BB_DONT_CACHE was not set for non-virtual recipes where PN != BPN, such
as quilt-native. Recipes that do not set BBCLASSEXTEND should always
have BB_DONT_CACHE set by externalsrc.
Signed-off-by: Ola x Nilsson <olani@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
The previous logic assumed that if $BUILD_IMAGES_FROM_FEEDS=1 then a
complete set of ipk feeds from which to build the image is already
present under $IPK_FEED_URIS at do_rootfs runtime.
$IPK_FEED_URIS usually contains "file://${DEPLOY_DIR_IPK}" which
renders the above assumption bad because some recipes in the current
build can contain code like do_install[nostamp] = "1" which will cause
rebuilds bumping $PR and invalidating the index.
Even when the index is manually re-created before an image build
("bitbake package-index"), the nostamp will cause failures because the
dependency gets rebuilt before do_rootfs in the "bitbake <image>" call.
So make the opkg rootfs index logic the same as for rpm/deb, to always
update the index in $DEPLOY_DIR_IPK to fix the above nostamp failure.
Feeds outside $DEPLOY_DIR_IPK added to $IPK_FEED_URIS continue to work
as usual, for eg. by using a http:// URI.
runqemu: fix handling of SIGTERM and the problem of line wrapping
The current handling of SIGTERM is incorrect as the process pid returned
by Popen call with shell setting to True is actualy the shell instead of
the qemu process. So use shlex to split cmd so that we can avoid using
shell=True. This ensures the child process is the actual qemu process.
Also, as we install a SIGTERM handler, we need handle the situation of
qemu terminated by SIGTERM, otherwise we will get ERROR message in such
case.
Besides, we have a problem that after running qemu, the terminal's behavior
is incorrect regarding long lines or long commands. Long commands or long
outputs should appear in multiple lines, but they appear in the same line,
overriding previous output. Use `tput smam' to fix this problem.
Chen Qi [Thu, 7 Jun 2018 07:52:46 +0000 (15:52 +0800)]
runqemu: add SIGTERM handler to make sure things are cleaned up
Add SIGTERM handler so that runqemu could clean things up correctly
when receving such signal.
This problem was originally observed when running testimage. On
some hosts, after running testimage task, the user has to manually
operate on the tap interface (e.g. `sudo ip link del tap0') in order
for the next runqemu command to launch successfully.
The problem is about runqemu, SIGTERM and network manager on the host.
In testimage task, the runqemu process will receive SIGTERM. In such
situation, its cleanup() function is not run, resulting in tap interface
not cleaned up. On some hosts, the network manager will bring down the
tap interface automatically, thus this problem. I saw this problem on
Fedora21.
I think we'd better just clean up the tap interface ourselves.
So this patch adds to runqemu a SIGTERM handler, in which the actual
qemu process is terminated and other things cleaned up.
Sinan Kaya [Fri, 5 Oct 2018 00:39:08 +0000 (00:39 +0000)]
python3: CVE-2018-1061
* CVE-2018-1060
Prevent low-grade poplib REDOS:
The regex to test a mail server's timestamp is susceptible to
catastrophic backtracking on long evil responses from the server.
Happily, the maximum length of malicious inputs is 2K thanks
to a limit introduced in the fix for CVE-2013-1752.
* CVE-2018-1061
Prevent difflib REDOS
The default regex for IS_LINE_JUNK is susceptible to
catastrophic backtracking.
This is a potential DOS vector.
Replace it with an equivalent non-vulnerable regex.
Sinan Kaya [Fri, 5 Oct 2018 00:39:07 +0000 (00:39 +0000)]
libxml2: CVE-2018-14404
* CVE-2018-14404
A null pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval()
function of libxml2 when parsing invalid XPath expression. Applications processing
untrusted XSL format inputs with the use of libxml2 library may be vulnerable to
denial of service attack due to crash of the application.
checklayer: avoid recursive loop in add_layer_dependencies
When Layer A and Layer B depend on each other, then we will end up in a
recursive loop in function recurse_dependencies(). To avoid such situation
before making the recursive function call we check whether or not we have
already processed this layer.
e.g. without this patch, running this script on layers with dependency loops, we are seeing:
When mount command is executed in rootfs module of initrd, eudev creates
a loop0 device node, applies rules and adds a inotify watch to it. Right
after this step, we execute finish which first tries to kill any running
udevd daemon before doing a switch_root.
In some cases, it is possible that switch_root is executed before
inotify_add_watch was actually processed which would lead to errors like:
| inotify_add_watch(6, /dev/loop0, 10) failed: No such file or directory
Make sure that we process all the events in queue before actually trying
to kill udevd to prevent this race.
* CVE-2017-7961
The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco has an
"outside the range of representable values of type long" undefined
behavior issue, which might allow remote attackers to cause a denial
of service (application crash) or possibly have unspecified other
impact via a crafted CSS file.
CVE: CVE-2017-7961
Ref: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7961 Signed-off-by: Sinan Kaya <okaya@kernel.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
Sinan Kaya [Mon, 24 Sep 2018 16:08:07 +0000 (16:08 +0000)]
gnupg: CVE-2018-9234
* CVE-2018-9234
GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key
certification requires an offline master Certify key, which results
in apparently valid certifications that occurred only with access to
a signing subkey.
Affects gnupg <= 2.2.5
CVE: CVE-2018-9234
Ref: https://access.redhat.com/security/cve/cve-2018-9234 Signed-off-by: Sinan Kaya <okaya@kernel.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
Anuj Mittal [Wed, 3 Oct 2018 10:27:50 +0000 (18:27 +0800)]
qemux86-directdisk: remove mem= parameter
Remove usage of a specific amount of memory and let it be controlled by
users. This was the default behaviour before it was changed by commit 3b79d9a78 that switched the wks file to be used for qemux86.
Also fixes the bitbake parsing issues seen because of memory starvation
using build appliance images.
Ross Burton [Wed, 18 Jul 2018 15:54:50 +0000 (16:54 +0100)]
cmake: put cmake.m4 and toolchain file in PN
Previously cmake-dev held some files which should be in cmake.
- cmake.m4 should be in installed in cmake so it can be used out of the box
- nativesdk-specific OEToolchainConfig.cmake file used to be in cmake, but the
change of default packaging rules move it into cmake-dev. This recipe is the
exception and it should be moved back.
Add the extra paths to cmake, and clear FILES for cmake-dev to ensure nothing
else slips in.
Kernel image can be 'vmlinuz' for 'bzImage' but the script is written to
support 'vmlinuz' only. When building with meta-intel on sumo branch, the
kernel image is now bzImage and the installation will fail. Add option to
install bzImage as well.
Signed-off-by: Chong Yi Chai <chong.yi.chai@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
Sinan Kaya [Sat, 22 Sep 2018 02:16:50 +0000 (02:16 +0000)]
sqlite3: CVE-2018-8740
* CVE-2018-8740
In SQLite through 3.22.0, databases whose schema is corrupted
using a CREATE TABLE AS statement could cause a NULL pointer dereference,
related to build.c and prepare.c.
Affects sqlite3 <= 3.22.0
CVE: CVE-2018-8740
Ref: https://access.redhat.com/security/cve/cve-2018-8740 Signed-off-by: Sinan Kaya <okaya@kernel.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
Sinan Kaya [Sat, 22 Sep 2018 02:16:49 +0000 (02:16 +0000)]
libpng: CVE-2018-13785
* CVE-2018-13785
In libpng 1.6.34, a wrong calculation of row_factor in the
png_check_chunk_length function (pngrutil.c) may trigger an
integer overflow and resultant divide-by-zero while processing
a crafted PNG file, leading to a denial of service.
cve-check.bbclass: do not download the CVE DB in package-specific tasks
Disable downloading of the vulnerability DB in do_check_cves() task.
When invoked in this task, cve-check-tool attempts re-download of the CVE DB
if the latter is older than certain threshold. While reasonable for a
stand-alone CVE checker, this behavior can cause errors in parallel builds
if the build time is longer than this threshold:
* Other tasks might be using the DB.
* Several packages can start the download of the same file at the same time.
This check is not really needed, as the DB has been downloaded by
cve_check_tool:do_populate_cve_db() which is a prerequisite of any do_build().
The DB will be at most (threshold + build_time) old.
Jon Szymaniak [Wed, 9 May 2018 21:45:10 +0000 (16:45 -0500)]
cve-check.bbclass: detect CVE IDs listed on multiple lines
Some backported patches fix multiple CVEs and list the corresponding
identifiers on multiple lines, rather than on a single line.
cve-check.bbclass yields false positive warnings when CVE IDs are
presented on multiple lines because re.search() returns only
the first match.
An example of this behavior may be found when running do_cve_check() on
the wpa-supplicant recipe while in the rocko branch. Only CVE-2017-13077
is reported to be patched by commit de57fd8, despite the patch including
fixes for a total of 9 CVEs.
This is resolved by iterating over all regular expression matches,
rather than just the first.
Changqing Li [Thu, 13 Sep 2018 05:45:46 +0000 (13:45 +0800)]
apr-util: fix ptest fail problem
Test suite test_dbm failed after gdbm upgrtade to 13.1,
from 13.1, return value of some function are changed.
* gdbm_fetch, gdbm_firstkey, and gdbm_nextkey behavior
If the requested key was not found, these functions return datum with
dptr pointing to NULL and set gdbm_errno to GDBM_ITEM_NOT_FOUND (in
prior releases, gdbm_errno was set to GDBM_NO_ERROR),
Bruce Ashfield [Fri, 24 Aug 2018 14:59:54 +0000 (10:59 -0400)]
linux-yocto/4.14: update to v4.14.62
Integratign the korg -stable updates that comprise the following
commits:
1aa1166eface Linux 4.14.62 7d29fb53439c jfs: Fix inconsistency between memory allocation and ea_buf->max_size 59f35b983e8a xfs: don't call xfs_da_shrink_inode with NULL bp 6f021e4ef39a xfs: validate cached inodes are free when allocated 27c41b170183 xfs: catch inode allocation state mismatch corruption a34399927da1 intel_idle: Graceful probe failure when MWAIT is disabled d626ac9669f2 nvmet-fc: fix target sgl list on large transfers 4af9c61ad953 nvme-pci: Fix queue double allocations 12c058df8272 nvme-pci: allocate device queues storage space at probe 0ea7fcfc7fe6 Btrfs: fix file data corruption after cloning a range and fsync ea464580fef7 i2c: imx: Fix reinit_completion() use 60baabc37bc1 ring_buffer: tracing: Inherit the tracing setting to next ring buffer ff28e5cc58c2 ACPI / PCI: Bail early in acpi_pci_add_bus() if there is no ACPI handle dd69abaccbf7 ext4: fix false negatives *and* false positives in ext4_check_descriptors() 09901e570c9e netlink: Don't shift on 64 for ngroups 2d898915ccf4 nohz: Fix missing tick reprogram when interrupting an inline softirq e5bcbedadfd9 nohz: Fix local_timer_softirq_pending() a6d9dacf4e44 genirq: Make force irq threading setup more robust a96feef5b071 scsi: qla2xxx: Return error when TMF returns f70766f1338d scsi: qla2xxx: Fix ISP recovery on unload 01cda405c88b scsi: qla2xxx: Fix NPIV deletion by calling wait_for_sess_deletion 43d7c954b22e scsi: qla2xxx: Fix unintialized List head crash 2ae6c0413b47 Linux 4.14.61 b4653a3ea3d7 scsi: sg: fix minor memory leak in error path 1a08888316d2 drm/vc4: Reset ->{x, y}_scaling[1] when dealing with uniplanar formats 51ef850c78bb crypto: padlock-aes - Fix Nano workaround data corruption 65be9cbe1224 RDMA/uverbs: Expand primary and alt AV port checks 4aa0acf29064 iwlwifi: add more card IDs for 9000 series 0eba9f5d3d48 userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails a1b5bcffe4a4 audit: fix potential null dereference 'context->module.name' e5a16c6a6707 kvm: x86: vmx: fix vpid leak c1a29c2d00c6 x86/entry/64: Remove %ebx handling from error_entry/exit 7cf6b325f554 x86/apic: Future-proof the TSC_DEADLINE quirk for SKX 34a938cd3ad4 virtio_balloon: fix another race between migration and ballooning 45c8178cf69e net: socket: fix potential spectre v1 gadget in socketcall c8159f9a1ae9 can: ems_usb: Fix memory leak on ems_usb_disconnect() e7de67165efe squashfs: more metadata hardenings 953f918d548b squashfs: more metadata hardening a766ccbf1d29 net/mlx5e: E-Switch, Initialize eswitch only if eswitch manager e0638b6a054c rxrpc: Fix user call ID check in rxrpc_service_prealloc_one 83a46456c983 net: stmmac: Fix WoL for PCI-based setups 1828cb3d10d9 netlink: Fix spectre v1 gadget in netlink_create() bcbdea137159 net: dsa: Do not suspend/resume closed slave_dev 8721f3608945 ipv4: frags: handle possible skb truesize change fc63057d5fda inet: frag: enforce memory limits earlier dc8edd08cd89 bonding: avoid lockdep confusion in bond_get_stats() deaacd62c217 Linux 4.14.60 0a2f6725115d tcp: add one more quick ack after after ECN events 1f04d750f668 tcp: refactor tcp_ecn_check_ce to remove sk type cast fd31083cbe05 tcp: do not aggressively quick ack after ECN events 1c005489fa98 tcp: add max_quickacks param to tcp_incr_quickack and tcp_enter_quickack_mode 5a1baf194475 tcp: do not force quickack when receiving out-of-order packets fffd3058eaf4 netlink: Don't shift with UB on nlk->ngroups e208cda5f10e netlink: Do not subscribe to non-existent groups da970765b24c xen-netfront: wait xenbus state change when load module manually 7309441887f6 tcp_bbr: fix bw probing to raise in-flight data for very small BDPs 7f36a065963a NET: stmmac: align DMA stuff to largest cache line length e071e2fdf45e net: mdio-mux: bcm-iproc: fix wrong getter and setter pair ccdbe7e2374a net: lan78xx: fix rx handling before first packet is send 112e80ac8285 net: fix amd-xgbe flow-control issue 11b694387ab4 net: ena: Fix use of uninitialized DMA address bits field 1494a3a70ce0 ipv4: remove BUG_ON() from fib_compute_spec_dst 20556dc7f239 net: dsa: qca8k: Allow overwriting CPU port setting 2eda475b0849 net: dsa: qca8k: Add QCA8334 binding documentation 1fbc97b32b7e net: dsa: qca8k: Enable RXMAC when bringing up a port 62310e69f1ae net: dsa: qca8k: Force CPU port to its highest bandwidth a61b3378b847 RDMA/uverbs: Protect from attempts to create flows on unsupported QP b8e9dd160ca3 usb: gadget: udc: renesas_usb3: should remove debugfs 6aaaca7b81e4 ovl: Sync upper dirty data when syncing overlayfs 21b5b5e80bcf PCI: xgene: Remove leftover pci_scan_child_bus() call 011626d61a43 PCI: pciehp: Assume NoCompl+ for Thunderbolt ports f547aa20b4f6 ext4: fix check to prevent initializing reserved inodes dc1b4b710fbe ext4: check for allocation block validity with block group locked cdcbe750acd6 ext4: fix inline data updates with checksums enabled 961f9feb4332 squashfs: be more careful about metadata corruption af41fd042fc1 random: mix rdrand with entropy sent in from userspace b8088c524ae2 block: reset bi_iter.bi_done after splitting bio cc5d7097ba8f blkdev: __blkdev_direct_IO_simple: fix leak in error case 2258351cf086 block: bio_iov_iter_get_pages: fix size of last iovec 2488689fe468 drm/dp/mst: Fix off-by-one typo when dump payload table 2aa0e652bce1 drm/atomic-helper: Drop plane->fb references only for drm_atomic_helper_shutdown() 20f01a1b7b6d drm: Add DP PSR2 sink enable bit a2fdb85a15eb ASoC: topology: Add missing clock gating parameter when parsing hw_configs b754906cd9c9 ASoC: topology: Fix bclk and fsync inversion in set_link_hw_format() e1d4f1e2856e media: si470x: fix __be16 annotations 98121d665d93 media: atomisp: compat32: fix __user annotations a5ed99bc6f59 scsi: cxlflash: Avoid clobbering context control register value bb7cccb01c84 scsi: cxlflash: Synchronize reset and remove ops 07b2a0d00183 scsi: megaraid_sas: Increase timeout by 1 sec for non-RAID fastpath IOs 0b45eb5a340d scsi: scsi_dh: replace too broad "TP9" string with the exact models fb2b60e27a16 regulator: Don't return or expect -errno from of_map_mode() 4886bf00337f media: omap3isp: fix unbalanced dma_iommu_mapping 09740f513e3f crypto: authenc - don't leak pointers to authenc keys a07fc8dd2bd4 crypto: authencesn - don't leak pointers to authenc keys f17d397bfed4 usb: hub: Don't wait for connect state at resume for powered-off ports d136b7ab24b8 microblaze: Fix simpleImage format generation 6cfd0d3c627f soc: imx: gpcv2: Do not pass static memory as platform data 62079c8371aa serial: core: Make sure compiler barfs for 16-byte earlycon names 41e1f1feee06 staging: lustre: ldlm: free resource when ldlm_lock_create() fails. e906355a7f96 staging: lustre: llite: correct removexattr detection fea5a0d87816 staging: vchiq_core: Fix missing semaphore release in error case 06d6d1ad241d audit: allow not equal op for audit by executable e7cb8f11f6e2 rsi: fix nommu_map_sg overflow kernel panic 0be8aa812cef rsi: Fix 'invalid vdd' warning in mmc e660508795d6 ipconfig: Correctly initialise ic_nameservers 18a48a7a4418 drm/gma500: fix psb_intel_lvds_mode_valid()'s return type 75d1087174d2 igb: Fix queue selection on MAC filters on i210 c7ab132d7e3d arm64: defconfig: Enable Rockchip io-domain driver 2ee4fbcd27f9 nvme: lightnvm: add granby support 503f22cf7b2a memory: tegra: Apply interrupts mask per SoC 9746d3696de9 memory: tegra: Do not handle spurious interrupts c06f5a018f71 delayacct: Use raw_spinlocks da2b62c740de stop_machine: Use raw spinlocks 4531135811a5 backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction 232703c9091f dt-bindings: net: meson-dwmac: new compatible name for AXG SoC c3b540c06954 net: hns3: Fixes the out of bounds access in hclge_map_tqp 17b26041363f spi: meson-spicc: Fix error handling in meson_spicc_probe() c9e5888ec8ae dt-bindings: pinctrl: meson: add support for the Meson8m2 SoC d6ce4f1bf79a mmc: pwrseq: Use kmalloc_array instead of stack VLA f0b0debbb49d mmc: dw_mmc: update actual clock for mmc debugfs ab76f866c8f0 ALSA: hda/ca0132: fix build failure when a local macro is defined c6f9830cfb47 drm/atomic: Handling the case when setting old crtc for plane cf0061396910 media: siano: get rid of __le32/__le16 cast warnings 4bbf1ce3a1e3 f2fs: avoid fsync() failure caused by EAGAIN in writepage() 15239633dc55 bpf: fix references to free_bpf_prog_info() in comments b62ed0bbbd63 thermal: exynos: fix setting rising_threshold for Exynos5433 66eb9942673a staging: lustre: o2iblnd: Fix FastReg map/unmap for MLX5 52a21fcafa71 staging: lustre: o2iblnd: fix race at kiblnd_connect_peer de3da42dc775 scsi: qedf: Set the UNLOADING flag when removing a vport ad1562ae8135 scsi: hisi_sas: config ATA de-reset as an constrained command for v3 hw 13e4e358b94c scsi: megaraid: silence a static checker bug ca588ff3e7d6 scsi: 3w-xxxx: fix a missing-check bug a0e86c016bb4 scsi: 3w-9xxx: fix a missing-check bug 112f47373e36 bnxt_en: Check unsupported speeds in bnxt_update_link() on PF only. c9b5d1519c24 perf: fix invalid bit in diagnostic entry d5d8223d7c67 s390/cpum_sf: Add data entry sizes to sampling trailer entry af5e8846a5e9 brcmfmac: Add support for bcm43364 wireless chipset 59d9b120600d mtd: rawnand: fsl_ifc: fix FSL NAND driver to read all ONFI parameter pages d49f8498042a media: saa7164: Fix driver name in debug output f3766ad7d325 media: media-device: fix ioctl function types ce222fb1256b ACPI / LPSS: Only call pwm_add_table() for Bay Trail PWM if PMIC HRV is 2 885d2128ab7f libata: Fix command retry decision adf9ceabfc16 media: rcar_jpu: Add missing clk_disable_unprepare() on error in jpu_open() 240bc678f726 net: phy: phylink: Release link GPIO fa57e8d54494 dma-iommu: Fix compilation when !CONFIG_IOMMU_DMA deb1feaad03a tty: Fix data race in tty_insert_flip_string_fixed_flag 731b918a624c i40e: free the skb after clearing the bitlock 6fdc5235693b nvmem: properly handle returned value nvmem_reg_read 901366594729 ARM: dts: sh73a0: Add missing interrupt-affinity to PMU node 9c552c4e262f ARM: dts: emev2: Add missing interrupt-affinity to PMU node b565e4e9dd09 ARM: dts: stih407-pinctrl: Fix complain about IRQ_TYPE_NONE usage d7ed9da96a8a EDAC, altera: Fix ARM64 build warning d0eca5d32b11 HID: i2c-hid: check if device is there before really probing 83eef34c65f1 powerpc/embedded6xx/hlwd-pic: Prevent interrupts from being handled by Starlet b42848b2a819 drm/amdgpu: Remove VRAM from shared bo domains. 14bedc05ab2d drm/radeon: fix mode_valid's return type 3ee32f73fc72 arm64: dts: renesas: salvator-common: use audio-graph-card for Sound d85073283aa7 HID: hid-plantronics: Re-resend Update to map button for PTT products 6a43d5a3ca6c arm64: cmpwait: Clear event register before arming exclusive monitor 62a87c8759f2 media: atomisp: ov2680: don't declare unused vars 25436aa5c184 ALSA: usb-audio: Apply rate limit to warning messages in URB complete callback d239ee35ddb2 net: ethernet: ti: cpsw-phy-sel: check bus_find_device() ret value 0bd08027bd19 media: smiapp: fix timeout checking in smiapp_read_nvm 41b16e6ec6a8 ixgbevf: fix MAC address changes through ixgbevf_set_mac() 7627ecfc4902 md: fix NULL dereference of mddev->pers in remove_and_add_spares() 1b3433cfa222 md/raid1: add error handling of read error from FailFast device 6192b115c58b regulator: pfuze100: add .is_enable() for pfuze100_swb_regulator_ops 9b56c4151ac2 ALSA: emu10k1: Rate-limit error messages about page errors 9f25b548732c rtc: tps65910: fix possible race condition 8f5e7596fe3a rtc: vr41xx: fix possible race condition aca6728fa1ed rtc: tps6586x: fix possible race condition 192591ade6ec Bluetooth: btusb: add ID for LiteOn 04ca:301a 33775b07426b drm/nouveau/fifo/gk104-: poll for runlist update completion fdb5207dc1f1 scsi: zfcp: assert that the ERP lock is held when tracing a recovery trigger b095b5888eab scsi: ufs: fix exception event handling c9f744135ad7 scsi: ufs: ufshcd: fix possible unclocked register access 63c7e58dab1e fscrypt: use unbound workqueue for decryption 1d6908ce90b5 net: hns3: Fix the missing client list node initialization 625d1e783375 spi: Add missing pm_runtime_put_noidle() after failed get d0a963cf845c drivers/perf: arm-ccn: don't log to dmesg in event_init cffbdb7702ba ima: based on policy verify firmware signatures (pre-allocated buffer) 945e6ce33d80 mwifiex: correct histogram data with appropriate index a30ff89c34b8 net: dsa: qca8k: Add support for QCA8334 switch 082900a6d567 PCI: pciehp: Request control of native hotplug only if supported 39da0cf774db bpf: powerpc64: pad function address loads with NOPs cf957ba7c6e8 pinctrl: at91-pio4: add missing of_node_put 210807e92b49 powerpc/8xx: fix invalid register expression in head_8xx.S 56a58a5395ab spi: sh-msiof: Fix setting SIRMDR1.SYNCAC to match SITMDR1.SYNCAC 7eda31872980 powerpc: Add __printf verification to prom_printf 566be4969b83 powerpc/powermac: Mark variable x as unused d26f8af1a126 powerpc/powermac: Add missing prototype for note_bootable_part() ee8c480702a6 powerpc/chrp/time: Make some functions static, add missing header include c0ff32b7e852 powerpc/32: Add a missing include header 935674605cf8 ath: Add regulatory mapping for Bahamas 936058197fbb ath: Add regulatory mapping for Bermuda c4b93c91bb63 ath: Add regulatory mapping for Serbia aafbcce424ec ath: Add regulatory mapping for Tanzania 5e895c9cb8ca ath: Add regulatory mapping for Uganda 3c51226005d9 ath: Add regulatory mapping for APL2_FCCA cdd106451c6a ath: Add regulatory mapping for APL13_WORLD f198926d6a40 ath: Add regulatory mapping for ETSI8_WORLD be1c9763cbc7 ath: Add regulatory mapping for FCC3_ETSIC 1afb8720b694 nvme-pci: Fix AER reset handling 4bb1acf80c7f nvme-rdma: stop admin queue before freeing it 2040b0d8c9c0 PCI: Prevent sysfs disable of device while driver is attached d93663a78783 PM / wakeup: Make s2idle_lock a RAW_SPINLOCK 652b94b72696 x86/microcode: Make the late update update_lock a raw lock for RT 2737a4adec5a btrfs: qgroup: Finish rescan when hit the last leaf of extent tree 31371d2dad49 btrfs: add barriers to btrfs_sync_log before log_commit_wait wakeups 3bf165384e82 Btrfs: don't BUG_ON() in btrfs_truncate_inode_items() ef61d940cd96 Btrfs: don't return ino to ino cache if inode item removal fails 9aecdc961e6a media: videobuf2-core: don't call memop 'finish' when queueing b7ffc03574f8 media: tw686x: Fix incorrect vb2_mem_ops GFP flags 1a95962bf210 net: hns3: Fixes the init of the VALID BD info in the descriptor 6f8688bf299b wlcore: sdio: check for valid platform device data before suspend 852feed35dcd mwifiex: handle race during mwifiex_usb_disconnect 6648fdc71138 mfd: cros_ec: Fail early if we cannot identify the EC 3d4837733945 ASoC: dpcm: fix BE dai not hw_free and shutdown 5650a9be9635 Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011 678e64c63217 Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning 73425f6ad6eb iwlwifi: pcie: fix race in Rx buffer allocator 59b837d5927c btrfs: balance dirty metadata pages in btrfs_finish_ordered_io 233cba023484 PCI: Fix devm_pci_alloc_host_bridge() memory leak f559bb20c1ae selftests: intel_pstate: return Kselftest Skip code for skipped tests 4312c2df0b7b selftests: memfd: return Kselftest Skip code for skipped tests 9c8f3af66282 selftests/intel_pstate: Improve test, minor fixes 596a9bfe8190 perf/x86/intel/uncore: Correct fixed counter index check for NHM 71b1bf6e9753 perf/x86/intel/uncore: Correct fixed counter index check in generic code 38c8c0a9709d usbip: dynamically allocate idev by nports found in sysfs bc30588b8e08 usbip: usbip_detach: Fix memory, udev context and udev leak 63019044fb89 block, bfq: remove wrong lock in bfq_requests_merged 67226fb52c23 f2fs: fix race in between GC and atomic open ad8d61efc9b7 f2fs: fix to detect failure of dquot_initialize c92d09e35d2d f2fs: Fix deadlock in shutdown ioctl 4f979af7b0ad f2fs: fix to wait page writeback during revoking atomic write de13b2ac741f f2fs: fix to don't trigger writeback during recovery f3f029197738 f2fs: fix error path of move_data_page 122031c29202 disable loading f2fs module on PAGE_SIZE > 4KB 1339e2b8eaea pnfs: Don't release the sequence slot until we've processed layoutget on open 20fc8b34c195 netfilter: nf_tables: check msg_type before nft_trans_set(trans) 4f5fd8a1ae16 lightnvm: pblk: warn in case of corrupted write buffer 929e1a3906e1 RDMA/mad: Convert BUG_ONs to error flows a23e1da9773b powerpc/64s: Fix compiler store ordering to SLB shadow area 0aceed2d7ec1 hvc_opal: don't set tb_ticks_per_usec in udbg_init_opal_common() bc0b4615cc97 powerpc/eeh: Fix use-after-release of EEH driver 04cda3ac3312 powerpc/64s: Add barrier_nospec 47b356145017 powerpc/lib: Adjust .balign inside string functions for PPC32 e27dad1eb1ac infiniband: fix a possible use-after-free bug 848f260301d0 e1000e: Ignore TSYNCRXCTL when getting I219 clock attributes 4c717e335ae1 ceph: fix alignment of rasize cdad03c1f21e bpf, arm32: fix inconsistent naming about emit_a32_lsr_{r64,i64} 8dcf2dbf65ef printk: drop in_nmi check from printk_safe_flush_on_panic() 2f6a38b131ab watchdog: da9063: Fix updating timeout value d90c9b07cb32 irqchip/ls-scfg-msi: Map MSIs in the iommu ff60eda50453 netfilter: ipset: List timing out entries with "timeout 1" instead of zero 52f072f580e4 netfilter: ipset: forbid family for hash:mac sets a47ece2b17c2 perf tools: Fix pmu events parsing rule 6a929b97b777 rtc: ensure rtc_set_alarm fails when alarms are not supported 191d00f8c872 mm/slub.c: add __printf verification to slab_err() b9d1724cf618 mm: vmalloc: avoid racy handling of debugobjects in vunmap 9e1a1fc0cd9b mm: /proc/pid/pagemap: hide swap entries from unprivileged users 9691035cbf72 kernel/hung_task.c: show all hung tasks before panic 827faa4eb566 vfio/type1: Fix task tracking for QEMU vCPU hotplug 8f38152f2ae2 vfio/mdev: Check globally for duplicate devices ca014df110e9 vfio: platform: Fix reset module leak in error path 5a47fe3efd4d nfsd: fix potential use-after-free in nfsd4_decode_getdeviceinfo baad2bf44770 NFSv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY 42b1df406a29 ALSA: fm801: add error handling for snd_ctl_add 40ff9a54dd9b ALSA: emu10k1: add error handling for snd_ctl_add 44a78f7d1757 skip LAYOUTRETURN if layout is invalid 0a84c912f575 hv_netvsc: fix network namespace issues with VF support 51b694070738 xen/netfront: raise max number of slots in xennet_get_responses() a45f5ee6850b kcov: ensure irq code sees a valid area 73990abb1a04 mlxsw: spectrum_switchdev: Fix port_vlan refcounting c1550e014135 arm64: fix vmemmap BUILD_BUG_ON() triggering on !vmemmap setups 4681e8820f99 tracing: Quiet gcc warning about maybe unused link variable 86428ec165ee tracing/kprobes: Fix trace_probe flags on enable_trace_kprobe() failure f957456878eb kthread, tracing: Don't expose half-written comm when creating kthreads 10419b0c16d4 tracing: Fix possible double free in event_enable_trigger_func() 9158a7debe53 tracing: Fix double free of event_trigger_data a2f85c02810f delayacct: fix crash in delayacct_blkio_end() after delayacct init failure 8eead4f5dea9 kvm, mm: account shadow page tables to kmemcg ca6427facd96 Input: elan_i2c - add another ACPI ID for Lenovo Ideapad 330-15AST e0e385e2126e Input: i8042 - add Lenovo LaVie Z to the i8042 reset list b4667635de2e Input: elan_i2c - add ACPI ID for lenovo ideapad 330 c09032b71fc6 spi: spi-s3c64xx: Fix system resume support e581f7c590cc drivers/infiniband/ulp/srpt/ib_srpt.c: fix build with gcc-4.4.4 1e8bb2e9c9df IB/srpt: Fix an out-of-bounds stack access in srpt_zerolength_write() d02c9c8bfef1 drivers/infiniband/core/verbs.c: fix build with gcc-4.4.4 3af618717e71 RDMA/core: Avoid that ib_drain_qp() triggers an out-of-bounds stack access c0b86d269bf0 i2c: core: decrease reference count of device node in i2c_unregister_device 2d5fc7ffa84b fork: unconditionally clear stack on fork 53208e12faa5 Linux 4.14.59 e94f784fddd5 turn off -Wattribute-alias 08382d3a1be2 can: m_can.c: fix setup of CCCR register: clear CCCR NISO bit before checking can.ctrlmode a55d3d73d457 can: peak_canfd: fix firmware < v3.3.0: limit allocation to 32-bit DMA addr only 60454a9715df can: xilinx_can: fix RX overflow interrupt not being enabled 19c756e01b09 can: xilinx_can: fix incorrect clear of non-processed interrupts 189c7890f33b can: xilinx_can: keep only 1-2 frames in TX FIFO to fix TX accounting 96bf3257c866 can: xilinx_can: fix device dropping off bus on RX overrun c5846b2fd57b can: xilinx_can: fix recovery from error states not being propagated f820de2a08b6 can: xilinx_can: fix power management handling 464a3f9139f4 can: xilinx_can: fix RX loop if RXNEMP is asserted without RXOK 55cb8f40c8d7 driver core: Partially revert "driver core: correct device's shutdown order" 5421694d8cd7 usb: gadget: f_fs: Only return delayed status when len is 0 68fc92a0f391 usb: dwc2: Fix DMA alignment to start at allocated boundary ac3f65c6b635 usb: core: handle hub C_PORT_OVER_CURRENT condition e089c305af49 usb: cdc_acm: Add quirk for Castles VEGA3000 ab9489c4db89 staging: speakup: fix wraparound in uaccess length check 22e3d3178b18 tcp: add tcp_ooo_try_coalesce() helper ec645ae62309 tcp: call tcp_drop() from tcp_data_queue_ofo() 6285a74a536f tcp: detect malicious patterns in tcp_collapse_ofo_queue() 81e6b01d1c10 tcp: avoid collapses in tcp_prune_queue() if possible f3a5ba6310e1 tcp: free batches of packets in tcp_prune_ofo_queue() ae70b6153197 tcp: do not delay ACK in DCTCP upon CE status change 78636179f6e6 tcp: do not cancel delay-AcK on DCTCP special ACK f7f24b369383 tcp: helpers to send special DCTCP ack 68c9bdfc8b42 tcp: fix dctcp delayed ACK schedule 68974d0b9c86 vxlan: fix default fdb entry netlink notify ordering during netdev create bb0335aacfdd vxlan: make netlink notify in vxlan_fdb_destroy optional 1c345a529258 vxlan: add new fdb alloc and create helpers 23557c5d34b9 rtnetlink: add rtnl_link_state check in rtnl_configure_link 464e2326a7f5 sock: fix sg page frag coalescing in sk_alloc_sg 50b464d33964 net: phy: consider PHY_IGNORE_INTERRUPT in phy_start_aneg_priv 46f9e1d0bd4e multicast: do not restore deleted record source filter mode to new one 6d5b7d68f45b net/ipv6: Fix linklocal to global address with VRF 047af2d8ced3 net/mlx5e: Fix quota counting in aRFS expire flow c83cd44202b5 net/mlx5e: Don't allow aRFS for encapsulated packets 291d99ac4dc2 net/mlx5: Adjust clock overflow work period f208fbad98fd net: skb_segment() should not return NULL 6e92f04a4fef net/mlx4_core: Save the qpn from the input modifier in RST2INIT wrapper df20f746d68b ip: in cmsg IP(V6)_ORIGDSTADDR call pskb_may_pull c2ce657fd68c ip: hash fragments consistently f1fb27fc256c bonding: set default miimon value for non-arp modes if not set 7e454c18b76f drm/nouveau: Set DRIVER_ATOMIC cap earlier to fix debugfs d0bd2c70ffcb drm/nouveau/drm/nouveau: Fix runtime PM leak in nv50_disp_atomic_commit() 58113603a4ea KVM: PPC: Check if IOMMU page is contained in the pinned physical page 14500f14e0b6 xen/PVH: Set up GS segment for stack canary de019e7857fb MIPS: Fix off-by-one in pci_resource_to_user() 4c686d73bc3e MIPS: ath79: fix register address in ath79_ddr_wb_flush() 4168a8422364 Revert "cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting" f952480a8fc1 Linux 4.14.58 3fcc143edcdd xhci: Fix perceived dead host due to runtime suspend race with event handler ff42682f21d7 powerpc/powernv: Fix save/restore of SPRG3 on entry/exit from stop (idle) ea8a50e5f829 cxl_getfile(): fix double-iput() on alloc_file() failures b12c7d0847e2 alpha: fix osf_wait4() breakage 78cdeb665fb1 net: usb: asix: replace mii_nway_restart in resume path bbf9b1a46420 ipv6: make DAD fail with enhanced DAD when nonce length differs 7c14cf21867c net: systemport: Fix CRC forwarding check for SYSTEMPORT Lite 65851c6b6d6e net/mlx4_en: Don't reuse RX page when XDP is set 7e7fefde7dec hv_netvsc: Fix napi reschedule while receive completion is busy c7daaa272dda tg3: Add higher cpu clock for 5762. c84c7d8383c2 qmi_wwan: add support for Quectel EG91 294dc77bb75e ptp: fix missing break in switch 811ad4b366a6 net: phy: fix flag masking in __set_phy_supported 78382d78bb4a net/ipv4: Set oif in fib_compute_spec_dst 829f4fd66354 skbuff: Unconditionally copy pfmemalloc in __skb_clone() 6403b54a4f7e net: Don't copy pfmemalloc flag in __copy_skb_header() cc0ab64759c8 net: diag: Don't double-free TCP_NEW_SYN_RECV sockets in tcp_abort cfb876dc3042 lib/rhashtable: consider param->min_size when setting initial table size 9f7276ce825b ipv6: ila: select CONFIG_DST_CACHE a5d33d38bd37 ipv6: fix useless rol32 call on hash 0348dcd98af3 ipv4: Return EINVAL when ping_group_range sysctl doesn't map to user ns c8347d91cfd7 gen_stats: Fix netlink stats dumping in the presence of padding dd1363ca743e drm/nouveau: Avoid looping through fake MST connectors 22c4488c8649 drm/nouveau: Use drm_connector_list_iter_* for iterating connectors 387362c3ed80 drm/i915: Fix hotplug irq ack on i965/g4x d21fb63010c4 stop_machine: Disable preemption when waking two stopper threads 9a2e4a01ded2 vfio/spapr: Use IOMMU pageshift rather than pagesize a5b8eae53672 vfio/pci: Fix potential Spectre v1 dfc328156dde cpufreq: intel_pstate: Register when ACPI PCCH is present 70ef1db1f21d mm/huge_memory.c: fix data loss when splitting a file pmd be2657752e9e mm: memcg: fix use after free in mem_cgroup_iter() 95c58105bd97 ARC: mm: allow mprotect to make stack mappings executable 3c732b3ab3a5 ARC: configs: Remove CONFIG_INITRAMFS_SOURCE from defconfigs 13e5197d7ef6 ARC: Fix CONFIG_SWAP edb5e3eeb14a ARCv2: [plat-hsdk]: Save accl reg pair by default a82d4478337a ALSA: hda: add mute led support for HP ProBook 455 G5 feefc072d10d ALSA: hda/realtek - Add Panasonic CF-SZ6 headset jack quirk 5d251646ab15 ALSA: rawmidi: Change resized buffers atomically 321089a0aa35 fat: fix memory allocation failure handling of match_strdup() 1450a7c5da03 x86/MCE: Remove min interval polling limitation aa49e48232ee x86/events/intel/ds: Fix bts_interrupt_threshold alignment b4108288eab8 x86/apm: Don't access __preempt_count with zeroed fs 3a46a033bfa8 KVM/Eventfd: Avoid crash when assign and deassign specific eventfd in parallel. 763ccb4d1980 scsi: sd_zbc: Fix variable type and bogus comment ecc160ece609 Linux 4.14.57 779128d80cb0 string: drop __must_check from strscpy() and restore strscpy() usages in cgroup 96fd60c8160c arm64: KVM: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID 1b749f8a2416 arm64: KVM: Handle guest's ARCH_WORKAROUND_2 requests 805357aa65bb arm64: KVM: Add ARCH_WORKAROUND_2 support for guests 0592871918f0 arm64: KVM: Add HYP per-cpu accessors b769d86ea9d4 arm64: ssbd: Add prctl interface for per-thread mitigation e7d02797288f arm64: ssbd: Introduce thread flag to control userspace mitigation c5c89bb4deb8 arm64: ssbd: Restore mitigation status on CPU resume 02e26bd9ad58 arm64: ssbd: Skip apply_ssbd if not using dynamic mitigation 8d6907af4583 arm64: ssbd: Add global mitigation state accessor 45808ab2f924 arm64: Add 'ssbd' command-line option 837c87c233c1 arm64: Add ARCH_WORKAROUND_2 probing 1bffd4869011 arm64: Add per-cpu infrastructure to call ARCH_WORKAROUND_2 5ad09d2abb5a arm64: Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 1de2719134b5 arm/arm64: smccc: Add SMCCC-specific return codes 2cdc2e62a6ac KVM: arm64: Avoid storing the vcpu pointer on the stack dca7815605af KVM: arm/arm64: Do not use kern_hyp_va() with kvm_vgic_global_state e77175fafa7d arm64: alternatives: Add dynamic patching feature 286950e0831b KVM: arm64: Stop save/restoring host tpidr_el1 on VHE 0dac9f10d952 arm64: alternatives: use tpidr_el2 on VHE hosts 6256b86e8519 KVM: arm64: Change hyp_panic()s dependency on tpidr_el2 8ad56472d67c KVM: arm/arm64: Convert kvm_host_cpu_state to a static per-cpu allocation ed812b882599 KVM: arm64: Store vcpu on the stack during __guest_enter() 115df2a7c5ba net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL. a4b57440d971 rds: avoid unenecessary cong_update in loop transport 1bbe05e27af1 bdi: Fix another oops in wb_workfn() 28c74ff85efd netfilter: ipv6: nf_defrag: drop skb dst before queueing b124e97f3ef5 nsh: set mac len based on inner packet 00235ab80007 autofs: fix slab out of bounds read in getname_kernel() 30a7a7b04f8b tls: Stricter error checking in zerocopy sendmsg path d9bb71d76c07 KEYS: DNS: fix parsing multiple options cba5008502f2 reiserfs: fix buffer overflow with long warning messages 766a7ad6639b netfilter: ebtables: reject non-bridge targets b5199c61e95c PCI: hv: Disable/enable IRQs rather than BH in hv_compose_msi_msg() aa6be396714c block: do not use interruptible wait anywhere f1059632a4fc mtd: rawnand: denali_dt: set clk_x_rate to 200 MHz unconditionally c4bfed85bae8 crypto: af_alg - Initialize sg_num_bytes in error code path 16b3ae12337e clocksource: Initialize cs->wd_list a406abeb7416 media: rc: oops in ir_timer_keyup after device unplug 67f7c68a9085 xhci: Fix USB3 NULL pointer dereference at logical disconnect. 2be27d444f61 net: lan78xx: Fix race in tx pending skb size calculation 12c0949a0745 rtlwifi: rtl8821ae: fix firmware is not ready to run ee8d2e719c1e rtlwifi: Fix kernel Oops "Fw download fail!!" 3caea5150c15 net: cxgb3_main: fix potential Spectre v1 d8530e891edd VSOCK: fix loopback on big-endian systems 7eba6537c3d1 vhost_net: validate sock before trying to put its fd 2dc4696ee6d9 tcp: prevent bogus FRTO undos with non-SACK flows 3373d6d056d7 tcp: fix Fast Open key endianness 4f5f7bce308e strparser: Remove early eaten to fix full tcp receive buffer stall 32761addd300 stmmac: fix DMA channel hang in half-duplex mode 5e90946baa57 r8152: napi hangup fix after disconnect d8c1603d0bb4 qmi_wwan: add support for the Dell Wireless 5821e module dd537828bf73 qed: Limit msix vectors in kdump kernel to the minimum required count. 023a2043bc8a qed: Fix use of incorrect size in memcpy call. 4c2849931b23 qed: Fix setting of incorrect eswitch mode. d725fde81ffc qede: Adverstise software timestamp caps when PHC is not available. 35e324ebeee0 net/tcp: Fix socket lookups with SO_BINDTODEVICE b3c66b54d8fe net: sungem: fix rx checksum support b36f997add36 net_sched: blackhole: tell upper qdisc about dropped packets 5e6b4b9b28b7 net/packet: fix use-after-free ddbbd3e05743 net: mvneta: fix the Rx desc DMA address in the Rx path 7ae129dd6778 net/mlx5: Fix wrong size allocation for QoS ETC TC regitster 46ff2bc7aeb1 net/mlx5: Fix required capability for manipulating MPFS 8b7b5f76693c net/mlx5: Fix incorrect raw command length parsing 075b50381248 net/mlx5: Fix command interface race in polling mode c3994f4f8bda net/mlx5: E-Switch, Avoid setup attempt if not being e-switch manager b216867c02ac net/mlx5e: Don't attempt to dereference the ppriv struct if not being eswitch manager 1d8dda4444fa net/mlx5e: Avoid dealing with vport representors if not being e-switch manager f389c17b8dc5 net: macb: Fix ptp time adjustment for large negative delta b364a914c499 net: fix use-after-free in GRO with ESP fb6b14663d56 net: dccp: switch rx_tstamp_last_feedback to monotonic clock a3225a836e56 net: dccp: avoid crash in ccid3_hc_rx_send_feedback() a2e53d69f685 ixgbe: split XDP_TX tail and XDP_REDIRECT map flushing f5a42d63f0d4 ipvlan: fix IFLA_MTU ignored on NEWLINK d10c0baaae3f ipv6: sr: fix passing wrong flags to crypto_alloc_shash() e34e92d8b689 hv_netvsc: split sub-channel setup into async and sync 43c9207d0296 atm: zatm: Fix potential Spectre v1 f93d65939a4a atm: Preserve value of skb->truesize when accounting to vcc c62e2f087af1 alx: take rtnl before calling __alx_open from resume 03bb9187754e crypto: crypto4xx - fix crypto4xx_build_pdr, crypto4xx_build_sdr leak 996a6a393b3f crypto: crypto4xx - remove bad list_del dc3782a3e9c6 PCI: exynos: Fix a potential init_clk_resources NULL pointer dereference b1c3ce0cfff2 bcm63xx_enet: do not write to random DMA channel on BCM6345 b913a05ab75e bcm63xx_enet: correct clock usage 1ccab2bf726e ocfs2: ip_alloc_sem should be taken in ocfs2_get_block() c59a8f13f36b ocfs2: subsystem.su_mutex is required while accessing the item->ci_parent f5778c2d657e xprtrdma: Fix corner cases when handling device removal 1083a7e8130c cpufreq / CPPC: Set platform specific transition_delay_us 61a9f6b7fe0c Btrfs: fix duplicate extents after fsync of file with prealloc extents edefb935700c x86/paravirt: Make native_save_fl() extern inline 92e50158fc0a x86/asm: Add _ASM_ARG* constants for argument registers to <asm/asm.h> 779145a6f6ec compiler-gcc.h: Add __attribute__((gnu_inline)) to all inline declarations cff26c95b24c Linux 4.14.56 eab3a3412215 f2fs: give message and set need_fsck given broken node id d2c18ad18cc7 loop: remember whether sysfs_create_group() was done e8484443c9db RDMA/ucm: Mark UCM interface as BROKEN 140eae92cf70 PM / hibernate: Fix oops at snapshot_write() 6f9f5797fc7d loop: add recursion validation to LOOP_CHANGE_FD 348b32aa3a37 netfilter: x_tables: initialise match/target check parameter struct e5ee20c65b34 netfilter: nf_queue: augment nfqa_cfg_policy 0032322689bb uprobes/x86: Remove incorrect WARN_ON() in uprobe_init_insn() 19f39eff68b4 crypto: x86/salsa20 - remove x86 salsa20 implementations 2a017ea2ea14 nvme-pci: Remap CMB SQ entries on every controller reset 54ca2776fcca xen: setup pv irq ops vector earlier f47f1f976745 iw_cxgb4: correctly enforce the max reg_mr depth 33beaca902a6 i2c: tegra: Fix NACK error handling ac5270d4bd46 IB/hfi1: Fix incorrect mixing of ERR_PTR and NULL return values e61f8cb63ede tools build: fix # escaping in .cmd files for future Make d8148f732748 arm64: neon: Fix function may_use_simd() return error status 324881805629 kbuild: delete INSTALL_FW_PATH from kbuild documentation 36244e3a60cf tracing: Reorder display of TGID to be after PID 81ebc9decd16 mm: do not bug_on on incorrect length in __mm_populate() ff62981880d1 fs, elf: make sure to page align bss in load_elf_library e6f011384c92 fs/proc/task_mmu.c: fix Locked field in /proc/pid/smaps* 684a2d8ed53f mm: do not drop unused pages when userfaultd is running f329f46764b1 ALSA: hda - Handle pm failure during hotplug 11c6be539e1a ALSA: hda/realtek - two more lenovo models need fixup of MIC_LOCATION e58114824fa6 scsi: megaraid_sas: fix selection of reply queue c3aa570dd539 scsi: megaraid_sas: Create separate functions to allocate ctrl memory fda0eab89ccf scsi: megaraid_sas: replace is_ventura with adapter_type checks 90229163fa6c scsi: megaraid_sas: replace instance->ctrl_context checks with instance->adapter_type d7e6dcdaa3ea scsi: megaraid_sas: use adapter_type for all gen controllers ef86f3a72adb genirq/affinity: assign vectors to all possible CPUs 298243a5fb64 Fix up non-directory creation in SGID directories a6d26649fda0 devpts: resolve devpts bind-mounts cd360be6488c devpts: hoist out check for DEVPTS_SUPER_MAGIC 7499390b8ba5 xhci: xhci-mem: off by one in xhci_stream_id_to_ring() 55f51e5b4cff usb: quirks: add delay quirks for Corsair Strafe 82b9cb4d3f06 USB: serial: mos7840: fix status-register error handling 90f2a76ccd37 USB: yurex: fix out-of-bounds uaccess in read handler f24b02c3a081 USB: serial: keyspan_pda: fix modem-status error handling 7aa69d8f50be USB: serial: cp210x: add another USB ID for Qivicon ZigBee stick 7ce4add980f5 USB: serial: ch341: fix type promotion bug in ch341_control_in() 1fb3563fac7e ahci: Disable LPM on Lenovo 50 series laptops with a too old BIOS 1e39eb1bb1c0 vmw_balloon: fix inflation with batching 33b9257a64fe ata: Fix ZBC_OUT all bit handling aae31a169efb ata: Fix ZBC_OUT command block check a3bb42c1bc6c staging: r8822be: Fix RTL8822be can't find any wireless AP e5bb39faedd7 staging: rtl8723bs: Prevent an underflow in rtw_check_beacon_data(). 908bfe10dd14 ibmasm: don't write out of bounds in read handler ccb242ec5020 mmc: dw_mmc: fix card threshold control configuration 2c9fa8ff7045 mmc: sdhci-esdhc-imx: allow 1.8V modes without 100/200MHz pinctrl states 6fce06b68b44 MIPS: Fix ioremap() RAM check 0818c44b8df7 MIPS: Use async IPIs for arch_trigger_cpumask_backtrace() 14ab9902422c MIPS: Call dump_stack() from show_regs() 77f738e84293 ASoC: mediatek: preallocate pages use platform device 99ebaf4f43dd media: rc: mce_kbd decoder: fix stuck keys 1e92e813554a Linux 4.14.55 b3ef356a096e Revert mm/vmstat.c: fix vmstat_update() preemption BUG 7cf346dfdea5 sched, tracing: Fix trace_sched_pi_setprio() for deboosting 32199c810655 staging: comedi: quatech_daqp_cs: fix no-op loop daqp_ao_insn_write() 6d2b458d3d14 netfilter: nf_log: don't hold nf_log_mutex during user access ac6bfe418e04 mtd: cfi_cmdset_0002: Change erase functions to check chip good only b76d8aa04240 mtd: cfi_cmdset_0002: Change erase functions to retry for error eb638a002274 mtd: cfi_cmdset_0002: Change definition naming to retry write operation 74ec37d03a12 dm: prevent DAX mounts if not supported 0605fa6daa66 dm: set QUEUE_FLAG_DAX accordingly in dm_table_set_restrictions() 3729e5561e1e dax: check for QUEUE_FLAG_DAX in bdev_dax_supported() 8214347c260b dax: change bdev_dax_supported() to support boolean returns a19385766b4f fs: allow per-device dax status checking for filesystems 5941026fc7a5 mtd: rawnand: mxc: set spare area size register explicitly c4097c64d03a media: cx25840: Use subdev host data for PLL override e82885490a61 Kbuild: fix # escaping in .cmd files for future Make 3bb6397ba643 Revert "dpaa_eth: fix error in dpaa_remove()" 42dc2a7bb72e f2fs: truncate preallocated blocks in error case a2c7493c7f31 media: vb2: core: Finish buffers at the end of the stream b16a6af97461 mm: hwpoison: disable memory error handling on 1GB hugepage 07a1c2d1131b irq/core: Fix boot crash when the irqaffinity= boot parameter is passed on CPUMASK_OFFSTACK=y kernels(v1) 50b4d984f55e HID: debug: check length before copy_to_user() c1d21fe74c25 HID: hiddev: fix potential Spectre v1 702027291bf5 HID: i2c-hid: Fix "incomplete report" noise c894755d1bc8 block: cope with WRITE ZEROES failing in blkdev_issue_zeroout() 3e3f1310c606 block: factor out __blkdev_issue_zero_pages() fba3230595cb ext4: check superblock mapped prior to committing 54bf664ae4fa ext4: add more mount time checks of the superblock c24aab6d8664 ext4: add more inode number paranoia checks 02945e49dc20 ext4: avoid running out of journal credits when appending to an inline file 8a9ef17c0dc9 ext4: never move the system.data xattr out of the inode body deb465ec750b ext4: clear i_data in ext4_inode_info when removing inline data 64804502d0e9 ext4: include the illegal physical block in the bad map ext4_error msg d69a9df614fc ext4: verify the depth of extent tree in ext4_find_extent() 44a4bc970bfa ext4: only look at the bg_flags field if it is valid ac48bb9bc0a3 ext4: always check block group bounds in ext4_init_block_bitmap() ac93c718365a ext4: make sure bitmaps and the inode table don't overlap with bg descriptors 3150e8913b95 ext4: always verify the magic number in xattr blocks 0dc148230f38 ext4: add corruption check in ext4_xattr_set_entry() 0321e68838d7 jbd2: don't mark block as modified if the handle is out of credits b541f470d4bd drm/udl: fix display corruption of the last line 3cb81bce2191 drm: Use kvzalloc for allocating blob property memory 748144f35514 cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting 28cada984c0e cifs: Fix infinite loop when using hard mount option f5f485d888d5 cifs: Fix memory leak in smb2_set_ea() ff533735af1d cifs: Fix use after free of a mid_q_entry 5d8ddc819c84 vfio: Use get_user_pages_longterm correctly 0ce6c4646371 drbd: fix access after free 2b6eff5923ce s390: Correct register corruption in critical section cleanup e6cf7e687285 scsi: target: Fix truncated PR-in ReadKeys response 6e51bfa95086 scsi: sg: mitigate read/write abuse 54f1da1ff034 tracing: Fix missing return symbol in function_graph output 48b019a51ab8 mm: hugetlb: yield when prepping struct pages 6fe74fb8af89 userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access 5893f4c3fb78 Linux 4.14.54 88b01cac4add net: dsa: b53: Add BCM5389 support 28b64cc7a846 net/sonic: Use dma_mapping_error() 4888ced6b749 platform/x86: asus-wmi: Fix NULL pointer dereference 0d5e04e239ad sched/core: Require cpu_active() in select_task_rq(), for user tasks e4c55e0e6a75 sched/core: Fix rules for running on online && !active CPUs 93b84462eadf fs: clear writeback errors in inode_init_always ae14c044587e perf bpf: Fix NULL return handling in bpf__prepare_load() be5af6bec31a perf test: "Session topology" dumps core on s390 d689ad5c91af net: qmi_wwan: Add Netgear Aircard 779S d20dcd2f1135 atm: zatm: fix memcmp casting 3ee6bd9411a6 iwlwifi: pcie: compare with number of IRQs requested for, not number of CPUs 4abab5dca723 ipvs: fix buffer overflow with sync daemon and service 27aa533f24e9 netfilter: nft_limit: fix packet ratelimiting 510e1e8020a8 s390/dasd: use blk_mq_rq_from_pdu for per request data db73501ebc3a netfilter: ebtables: handle string from userspace with care e36bc9930d85 afs: Fix directory permissions check 4cf1fbcdef7f xfrm6: avoid potential infinite loop in _decode_session6() 693d06dffb43 mtd: rawnand: fix return value check for bad block status 0ed70f206449 ARM: dts: imx6q: Use correct SDMA script for SPI5 core 259cc05cce43 netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain() 5acd64888e02 netfilter: ip6t_rpfilter: provide input interface for route lookup 3f8e85fbbaa5 netfilter: don't set F_IFACE on ipv6 fib lookups 2fc45ef96287 md: remove special meaning of ->quiesce(.., 2) ce57466d323b md: allow metadata update while suspending. 7c435e224530 md: use mddev_suspend/resume instead of ->quiesce() feabea216559 md: move suspend_hi/lo handling into core md code cc091f3fbbdb md: don't call bitmap_create() while array is quiesced. e44e4cf3a8db md: always hold reconfig_mutex when calling mddev_suspend() b8d8cde449fd netfilter: nf_tables: fix NULL-ptr in nf_tables_dump_obj() 44956f98fd8b netfilter: nf_tables: add missing netlink attrs to policies 082711fa3178 netfilter: nf_tables: fix memory leak on error exit return 174757e28b7b netfilter: nf_tables: increase nft_counters_enabled in nft_chain_stats_replace() d3a9b8a51181 netfilter: nf_tables: disable preemption in nft_update_chain_stats() 491b1a866e4a netfilter: nft_meta: fix wrong value dereference in nft_meta_set_eval 2b93cb2861de netfilter: nf_tables: bogus EBUSY in chain deletions 4ae6a7afae53 netfilter: nf_tables: don't assume chain stats are set when jumplabel is set 365e73e07fba netfilter: nft_compat: fix handling of large matchinfo size ea200cdd6056 netfilter: nft_compat: prepare for indirect info storage 1ea5ed0cadca netfilter: nf_tables: nft_compat: fix refcount leak on xt module 1d795d1241d3 drm/i915: Enable provoking vertex fix on Gen9 systems. 78e7000fe63f drm/amdgpu: Refactor amdgpu_vram_mgr_bo_invisible_size helper a1bf87cfb6ea drm/amdgpu: Use kvmalloc_array for allocating VRAM manager nodes array af597bb61370 drm/atmel-hlcdc: check stride values in the first plane 7d0ed747bc56 drm/qxl: Call qxl_bo_unref outside atomic context dd19ea36f596 drm/amdgpu: fix the missed vcn fw version report 40e2064b8fc7 drm/amdgpu: Add APU support in vi_set_vce_clocks ce686c42476e drm/amdgpu: Add APU support in vi_set_uvd_clocks b141de45e2dc vt: prevent leaking uninitialized data to userspace via /dev/vcs* b124a1c182fa serdev: fix memleak on module unload 3ff8e558ba7b serial: 8250_pci: Remove stalled entries in blacklist 2a7a8556b3b4 staging: android: ion: Return an ERR_PTR in ion_map_kernel c034d161fa63 n_tty: Access echo_* variables carefully. d105fb8c8894 n_tty: Fix stall at n_tty_receive_char_special(). 716382f1c1ea xhci: Fix kernel oops in trace_xhci_free_virt_device 0a7db82ed9cc usb: typec: ucsi: Fix for incorrect status data issue 47adbb26373f usb: typec: ucsi: acpi: Workaround for cache mode issue f2e9a38558d8 acpi: Add helper for deactivating memory region 447294efb995 usb: dwc2: fix the incorrect bitmaps for the ports of multi_tt hub e80add5223dd USB: serial: cp210x: add Silicon Labs IDs for Windows Update 15e449969537 USB: serial: cp210x: add CESINEL device ids 874f2a7d412e usb: cdc_acm: Add quirk for Uniden UBC125 scanner fa745a1bd983 Linux 4.14.53 4798e96b7646 xhci: Fix use-after-free in xhci_free_virt_device 0b19825ffa28 dm thin: handle running out of data space vs concurrent discard fb4d8744a8f9 dm zoned: avoid triggering reclaim from inside dmz_map() 0cfb151b9352 x86/efi: Fix efi_call_phys_epilog() with CONFIG_X86_5LEVEL=y 251141340fd8 block: Fix cloning of requests with a special payload 29413e068b2b block: Fix transfer when chunk sectors exceeds max 804a0db743e0 slub: fix failure when we delete and create a slab cache cd41a8fac35a ALSA: hda/realtek - Fix the problem of two front mics on more machines c75f047560cb ALSA: hda/realtek - Add a quirk for FSC ESPRIMO U9210 59bcd69457c7 ALSA: hda/realtek - Fix pop noise on Lenovo P50 & co 69f96e9b570a ALSA: timer: Fix UBSAN warning at SNDRV_TIMER_IOCTL_NEXT_DEVICE ioctl 3d1de95138fb Input: elantech - fix V4 report decoding for module with middle key 524a0c6f2efd Input: elantech - enable middle button of touchpads on ThinkPad P52 ade767642cc7 Input: elan_i2c_smbus - fix more potential stack buffer overflows 8fa052853d48 Input: xpad - fix GPD Win 2 controller name 1b241aa840df udf: Detect incorrect directory size d08dfdeaf49d xen: Remove unnecessary BUG_ON from __unbind_from_irq() fff76ff5e2b0 mm: fix devmem_is_allowed() for sub-page System RAM intersections 6f23028480c4 mm/ksm.c: ignore STABLE_FLAG of rmap_item->address in rmap_walk_ksm() 76022230aa64 rbd: flush rbd_dev->watch_dwork after watch is unregistered 3c718460f5a3 pwm: lpss: platform: Save/restore the ctrl register over a suspend/resume 24ab6e6858e7 Input: elan_i2c - add ELAN0618 (Lenovo v330 15IKB) ACPI ID a7f3c0abac1d ACPI / LPSS: Add missing prv_offset setting for byt/cht PWM devices 9aa818d42bf5 video: uvesafb: Fix integer overflow in allocation fb7fecb4d90f NFSv4: Fix a typo in nfs41_sequence_process 63715ead82c5 NFSv4: Revert commit 5f83d86cf531d ("NFSv4.x: Fix wraparound issues..") c92d800fc9c4 NFSv4: Fix possible 1-byte stack overflow in nfs_idmap_read_and_verify_message 89864c2e7506 nfsd: restrict rd_maxcount to svc_max_payload in nfsd_encode_readdir c508ed236c8b media: dvb_frontend: fix locking issues at dvb_frontend_get_event() 2c40fa51428b media: cx231xx: Add support for AverMedia DVD EZMaker 7 06b846486668 media: v4l2-compat-ioctl32: prevent go past max size b28f53169c0f media: vsp1: Release buffers for each video node 3564366d5509 perf/x86/intel/uncore: Add event constraint for BDX PCU 5cb6105d2211 perf vendor events: Add Goldmont Plus V1 event file c3382e70a043 perf intel-pt: Fix packet decoding of CYC packets 4e7b3632eafa perf intel-pt: Fix "Unexpected indirect branch" error 65a163984abe perf intel-pt: Fix MTC timing after overflow e1587f178eb1 perf intel-pt: Fix decoding to accept CBR between FUP and corresponding TIP 9e9db211cfb9 perf intel-pt: Fix sync_switch INTEL_PT_SS_NOT_TRACING 5009bd5b9321 perf tools: Fix symbol and object code resolution for vdso32 and vdsox32 f810961e06c6 arm: dts: mt7623: fix invalid memory node being generated 18be8bd3aceb mfd: intel-lpss: Fix Intel Cannon Lake LPSS I2C input clock f79c97198b55 mfd: intel-lpss: Program REMAP register in PIO mode 779d5f71c232 backlight: tps65217_bl: Fix Device Tree node lookup f893fca0a4b5 backlight: max8925_bl: Fix Device Tree node lookup 3db7c40093f6 backlight: as3711_bl: Fix Device Tree node lookup b7261fc5f574 UBIFS: Fix potential integer overflow in allocation a23cf10d9abb ubi: fastmap: Correctly handle interrupted erasures in EBA b24d90f4d66d ubi: fastmap: Cancel work upon detach db04f92b6580 rpmsg: smd: do not use mananged resources for endpoints and channels dfeb333b590c md: fix two problems with setting the "re-add" device state. 88896a963b4e rtc: sun6i: Fix bit_idx value for clk_register_gate b90f3eccf8aa clk: at91: PLL recalc_rate() now using cached MUL and DIV values a98f1946ea58 linvdimm, pmem: Preserve read-only setting for pmem devices a64be479ef08 scsi: zfcp: fix missing REC trigger trace on enqueue without ERP thread beadcfcca257 scsi: zfcp: fix missing REC trigger trace for all objects in ERP_FAILED 60ed2673986f scsi: zfcp: fix missing REC trigger trace on terminate_rport_io for ERP_FAILED 071f23266c30 scsi: zfcp: fix missing REC trigger trace on terminate_rport_io early return 3d0d31e512f2 scsi: zfcp: fix misleading REC trigger trace where erp_action setup failed 941e8bee351e scsi: zfcp: fix missing SCSI trace for retry of abort / scsi_eh TMF 74da693a03ce scsi: zfcp: fix missing SCSI trace for result of eh_host_reset_handler 9db2ad79b8f0 scsi: qla2xxx: Mask off Scope bits in retry delay 9224583a5ee2 scsi: qla2xxx: Fix setting lower transfer speed if GPSC fails 2829829c3e61 scsi: hpsa: disable device during shutdown 2d329968a883 mm: fix __gup_device_huge vs unmap 5d6ad5a03067 iio: sca3000: Fix an error handling path in 'sca3000_probe()' d55209eeb121 iio: adc: ad7791: remove sample freq sysfs attributes 6101eea47bf3 Btrfs: fix return value on rename exchange failure af20e4eccc2d X.509: unpack RSA signatureValue field from BIT STRING 7dfc81992a3e irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node 88c4318d3633 time: Make sure jiffies_to_msecs() preserves non-zero time periods 0fe95015fb93 MIPS: io: Add barrier after register read in inX() 93e1297f9edc cpufreq: intel_pstate: Fix scaling max/min limits with Turbo 3.0 55be2e6f50ac pinctrl: devicetree: Fix pctldev pointer overwrite 7cc7ae5ce018 pinctrl: samsung: Correct EINTG banks order 9e838b2e5a3c auxdisplay: fix broken menu 226ffbf6135c PCI: pciehp: Clear Presence Detect and Data Link Layer Status Changed on resume fc0096bceae9 PCI: Add ACS quirk for Intel 300 series 78923ba96779 PCI: Add ACS quirk for Intel 7th & 8th Gen mobile e4a424c550b6 PCI: hv: Make sure the bus domain is really unique 43f6a09c8c5b MIPS: BCM47XX: Enable 74K Core ExternalSync for PCIe erratum c375d0bd6684 mtd: cfi_cmdset_0002: Avoid walking all chips when unlocking. fbbde9343c3e mtd: cfi_cmdset_0002: Fix unlocking requests crossing a chip boudary 2f11a0c8c23a mtd: cfi_cmdset_0002: fix SEGV unlocking multiple chips 80349943d56c mtd: cfi_cmdset_0002: Use right chip in do_ppb_xxlock() 746c1362c434 mtd: cfi_cmdset_0002: Change write buffer to check correct value d097e5b5a1bc xprtrdma: Return -ENOBUFS when no pages are available 786c8d79f34f RDMA/mlx4: Discard unknown SQP work requests a33699925122 IB/hfi1: Fix user context tail allocation for DMA_RTAIL 964705c4a691 IB/hfi1: Optimize kthread pointer locking when queuing CQ entries 2bd28cba43bd IB/hfi1: Reorder incorrect send context disable 9e81f9a2cef1 IB/hfi1: Fix fault injection init/exit issues c32951862c1a IB/isert: fix T10-pi check mask setting 7d4aaca8d093 IB/isert: Fix for lib/dma_debug check_sync warning c06f8c2173b2 IB/mlx5: Fetch soft WQE's on fatal error state 96fb9b88385f IB/core: Make testing MR flags for writability a static inline function 1c82abc1b26a IB/mlx4: Mark user MR as writable if actual virtual memory is writable 49e1083214c6 IB/{hfi1, qib}: Add handling of kernel restart e884ed82995a IB/qib: Fix DMA api warning with debug kernel c41cb9cb5611 tpm: fix race condition in tpm_common_write() 1bf1a5e21798 tpm: fix use after free in tpm2_load_context() 1ed6871464b8 of: platform: stop accessing invalid dev in of_platform_device_destroy 6ba51909693c of: unittest: for strings, account for trailing \0 in property length field 4910cc250b4d of: overlay: validate offset from property fixups 728ea2302acc ARM64: dts: meson: disable sd-uhs modes on the libretech-cc 64df84dcf1e4 arm64: mm: Ensure writes to swapper are ordered wrt subsequent cache maintenance ee6ae5ac75ab arm64: kpti: Use early_param for kpti= command-line option cdfa28c29ad4 arm64: Fix syscall restarting around signal suppressed by tracer 14ca7d344e27 ARM: dts: socfpga: Fix NAND controller node compatible for Arria10 ae6647c78ff8 ARM: dts: socfpga: Fix NAND controller clock supply 3482130d8d1e ARM: dts: socfpga: Fix NAND controller node compatible 3db24d2e192f ARM: dts: Fix SPI node for Arria10 eda170a9fe51 ARM: 8764/1: kgdb: fix NUMREGBYTES so that gdb_regs[] is the correct size c9debbd1a5b8 cxl: Disable prefault_mode in Radix mode 971a55574b47 soc: rockchip: power-domain: Fix wrong value when power up pd with writemask 56fbab60aa47 powerpc/fadump: Unregister fadump on kexec down path. 3b185e667b52 cpuidle: powernv: Fix promotion from snooze if next state disabled a5d49dfb20c9 powerpc/powernv/cpuidle: Init all present cpus for deep states 134e70c22eb0 powerpc/powernv: copy/paste - Mask SO bit in CR 0e8bb91c6dd6 powerpc/powernv/ioda2: Remove redundant free of TCE pages 919c9b8187bc powerpc/ptrace: Fix enforcement of DAWR constraints 1ab9092356a1 powerpc/perf: Fix memory allocation for core-imc based on num_possible_cpus() c12d24161611 powerpc/ptrace: Fix setting 512B aligned breakpoints with PTRACE_SET_DEBUGREG 5fefd9a5d97a powerpc/mm/hash: Add missing isync prior to kernel stack SLB switch 69829f749a43 fuse: fix control dir setup and teardown 3a37d85a90da fuse: don't keep dead fuse_conn at fuse_fill_super(). 2f7bf369b5f8 fuse: atomic_o_trunc should truncate pagecache 02832578eb9d fuse: fix congested state leak on aborted connections a47c3c48769a printk: fix possible reuse of va_list variable affd84024cbe Bluetooth: hci_qca: Avoid missing rampatch failure with userspace fw loader 3ffecef63d09 ipmi:bt: Set the timeout before doing a capabilities check 26e03f8dcd34 branch-check: fix long->int truncation when profiling branches 5eff5dbf3108 mips: ftrace: fix static function graph tracing 5f7a15af646d ftrace/selftest: Have the reset_trigger code be a bit more careful ea0ac01f68aa lib/vsprintf: Remove atomic-unsafe support for %pCr 9fcc267de242 clk: renesas: cpg-mssr: Stop using printk format %pCr 0cf93821e34d thermal: bcm2835: Stop using printk format %pCr b2291a435c29 ASoC: cirrus: i2s: Fix {TX|RX}LinCtrlData setup b5e8118779e5 ASoC: cirrus: i2s: Fix LRCLK configuration 7a1d79de77f5 ASoC: cs35l35: Add use_single_rw to regmap config 040fecfd714a ASoC: dapm: delete dapm_kcontrol_data paths list before freeing it 4e0ce7053a12 1wire: family module autoload fails because of upper/lower case mismatch. 3c22218ed869 usb: do not reset if a low-speed or full-speed device timed out 8b03376580c9 PM / OPP: Update voltage in case freq == old_freq ba0be5973f9e PM / core: Fix supplier device runtime PM usage counter imbalance b7ac0389770a PM / Domains: Fix error path during attach in genpd 8ae5d476a3b7 signal/xtensa: Consistenly use SIGBUS in do_unaligned_user 980899da5dc9 serial: sh-sci: Use spin_{try}lock_irqsave instead of open coding version 60711b27c5f5 m68k/mac: Fix SWIM memory resource end address da9ad89c72d5 m68k/mm: Adjust VM area to be unmapped by gap size for __iounmap() ab693cc665ca x86: Call fixup_exception() before notify_die() in math_error() 64d44661e220 x86/mce: Do not overwrite MCi_STATUS in mce_no_way_out() 5b8e086891b0 x86/mce: Fix incorrect "Machine check from unknown source" message d292f33b7494 x86/mce: Check for alternate indication of machine check recovery on Skylake 1d1dd2011adc x86/mce: Improve error message when kernel cannot recover dbb37d98b93d x86/xen: Add call of speculative_store_bypass_ht_init() to PV paths 3ce79716a9ff x86/spectre_v1: Disable compiler optimizations over array_index_mask_nospec() a26899e0baa4 Linux 4.14.52 1d26c112959f mm, page_alloc: do not break __GFP_THISNODE by zonelist reset 250edf9580f7 fs/binfmt_misc.c: do not allow offset overflow 7446344baafb vhost: fix info leak due to uninitialized memory d37c95f52911 HID: wacom: Correct logical maximum Y for 2nd-gen Intuos Pro large ab17de60ceaa HID: intel_ish-hid: ipc: register more pm callbacks to support hibernation e3e6bd6a1476 orangefs: report attributes_mask and attributes for statx f7e4328c3700 orangefs: set i_size on new symlink b8511dbff263 iwlwifi: fw: harden page loading code 2d58a9ac892a x86/intel_rdt: Enable CMT and MBM on new Skylake stepping e6ef46cb8f01 w1: mxc_w1: Enable clock before calling clk_get_rate() on it 0667483adeee libata: Drop SanDisk SD7UB3Q*G1001 NOLPM quirk 27c0f1e5d94d libata: zpodd: small read overflow in eject_tray() 1404d2e5dd36 cpufreq: governors: Fix long idle detection logic in load calculation c3c77b5db393 cpufreq: Fix new policy initialization during limits updates via sysfs 67b46304b92b bdi: Move cgroup bdi_writeback to a dedicated low concurrency workqueue ba502bf2be45 blk-mq: reinit q->tag_set_list entry only after grace period 00946218ffe3 nbd: use bd_set_size when updating disk size a477d00557f5 nbd: update size when connected edee2e826640 nbd: fix nbd device deletion ffb179cfbcf6 cifs: For SMB2 security informaion query, check for minimum sized security descriptor instead of sizeof FileAllInformation class 2a8737336dbd CIFS: 511c54a2f69195b28afb9dd119f03787b1625bb4 adds a check for session expiry ae62f35def75 smb3: on reconnect set PreviousSessionId field dcde75924f25 smb3: fix various xid leaks e0b510a4170e x86/MCE: Fix stack out-of-bounds write in mce-inject.c: Flags_read() c5c00990f75d ALSA: hda: add dock and led support for HP ProBook 640 G4 e6c9fd8cf7d0 ALSA: hda: add dock and led support for HP EliteBook 830 G5 a3eb20df0e23 ALSA: hda - Handle kzalloc() failure in snd_hda_attach_pcm_stream() 03701e42cc19 ALSA: hda/conexant - Add fixup for HP Z2 G4 workstation ff7eb857eeca ALSA: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs b1cf23c2c8db btrfs: scrub: Don't use inode pages for device replace 4cb8942042bd btrfs: return error value if create_io_em failed in cow_file_range 5f7e3b5b96f8 Btrfs: fix memory and mount leak in btrfs_ioctl_rm_dev_v2() 55d29ff48222 Btrfs: fix clone vs chattr NODATASUM race c81a6be9da6d driver core: Don't ignore class_dir_create_and_add() failure. f3233cb2485c ext4: fix fencepost error in check for inode count overflow during resize 21542545990c ext4: correctly handle a zero-length xattr with a non-zero e_value_offs 02d45ec6e770 ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() e81d371dac30 ext4: do not allow external inodes for inline data bd713edfc85d ext4: update mtime in ext4_punch_hole even if no blocks are released f70af46a52b3 ext4: fix hole length detection in ext4_ind_map_blocks() 84f4d2c6dabe NFSv4.1: Fix up replays of interrupted requests 5e8a5c30546f tls: fix use-after-free in tls_push_record 244c10f9bfa3 hv_netvsc: Fix a network regression after ifdown/ifup 5320e035d7bb net: in virtio_net_hdr only add VLAN_HLEN to csum_start if payload holds vlan 2e5d3168821d udp: fix rx queue len reported by diag and proc interface 91717ffc9057 socket: close race condition between sock_close() and sockfs_setattr() 39f4ae01c1d6 tcp: verify the checksum of the first data segment in a new connection 81d159444da5 net/sched: act_simple: fix parsing of TCA_DEF_DATA 73c0eab8d215 net: dsa: add error handling for pskb_trim_rcsum 6bcc27abfa62 ipv6: allow PMTU exceptions to local routes 6e48ee025dc9 cdc_ncm: avoid padding beyond end of skb 584b975af0d2 bonding: re-evaluate force_primary when the primary slave name changes 33445c07cd45 Linux 4.14.51 40c809774c69 tcp: do not overshoot window_clamp in tcp_rcv_space_adjust() 7ab8fc065fff Btrfs: make raid6 rebuild retry more 6bf89b7c6b31 Btrfs: fix scrub to repair raid6 corruption db5f02cc70a8 Revert "Btrfs: fix scrub to repair raid6 corruption" 5e4b5b7194d3 ARM: kexec: fix kdump register saving on panic() bb7a554ae745 ARM: 8758/1: decompressor: restore r1 and r2 just before jumping to the kernel c7d7e3f62dbe ARM: 8753/1: decompressor: add a missing parameter to the addruart macro 823e02ea7be5 efi/libstub/arm64: Handle randomized TEXT_OFFSET 3f5c7add0d0f parisc: Move setup_profiling_timer() out of init section 588977742078 sched/deadline: Make the grub_reclaim() function static fb49d19ed9da sched/debug: Move the print_rt_rq() and print_dl_rq() declarations to kernel/sched/sched.h 96ef5c441494 drm/dumb-buffers: Integer overflow in drm_mode_create_ioctl() 77a60e752ec8 locking/percpu-rwsem: Annotate rwsem ownership transfer by setting RWSEM_OWNER_UNKNOWN b3f84e48786d locking/rwsem: Add a new RWSEM_ANONYMOUSLY_OWNED flag c5746752bdbe clk: imx6ull: use OSC clock during AXI rate change 0c5dfa51caf7 ARM: davinci: board-dm646x-evm: set VPIF capture card name eb6b0d6987fc ARM: davinci: board-dm646x-evm: pass correct I2C adapter id for VPIF ae7418dd09f9 ARM: davinci: dm646x: fix timer interrupt generation daf6bdb29d55 i2c: viperboard: return message count on master_xfer success cbfe697cdba9 i2c: pmcmsp: fix error return from master_xfer 0c1885743a9b i2c: pmcmsp: return message count on master_xfer success 7416dd78ad9a ARM: keystone: fix platform_domain_notifier array overrun a187b9c72d0c usb: musb: fix remote wakeup racing with suspend 634b9e0aabd9 afs: Fix the non-encryption of calls a92a28636157 mtd: Fix comparison in map_word_andequal() 9b9ac282bad9 x86/pkeys/selftests: Add a test for pkey 0 b1f192a9e0cd x86/pkeys/selftests: Save off 'prot' for allocations cdfdffcaa8f9 x86/pkeys/selftests: Fix pointer math 2dd0e5d62a6b x86/pkeys/selftests: Fix pkey exhaustion test off-by-one 63bdea73bd52 x86/pkeys/selftests: Add PROT_EXEC test 1fcd226878b3 x86/pkeys/selftests: Factor out "instruction page" 777d513aaaf6 x86/pkeys/selftests: Allow faults on unknown keys 9545530701c9 x86/pkeys/selftests: Remove dead debugging code, fix dprint_in_signal 8b9f3a7404d7 x86/pkeys/selftests: Stop using assert() 477c024fb33a x86/pkeys/selftests: Give better unexpected fault error messages 4824a6473b85 x86/selftests: Add mov_to_ss test c25b160c8da6 x86/mpx/selftests: Adjust the self-test to fresh distros that export the MPX ABI 2361f1f4fff2 x86/pkeys/selftests: Adjust the self-test to fresh distros that export the pkeys ABI 847f0cacf21e objtool, kprobes/x86: Sync the latest <asm/insn.h> header with tools/objtool/arch/x86/include/asm/insn.h 5aaee3e9ef32 uprobes/x86: Prohibit probing on MOV SS instruction ba202cd5a1f0 kprobes/x86: Prohibit probing on exception masking instructions 12ddc2639e31 ocfs2: take inode cluster lock before moving reflinked inode from orphan dir 553495752c82 proc/kcore: don't bounds check against address 0 20e557fb26ca init: fix false positives in W+X checking 86900754306e net sched actions: fix invalid pointer dereferencing if skbedit flags missing 55e95f9ad712 ixgbe: return error on unsupported SFP module when resetting 33d1c29e935e x86: Delay skip of emulated hypercall instruction ce44a4d5db63 KVM: Extend MAX_IRQ_ROUTES to 4096 for all archs 29475c404b56 rxrpc: Fix the min security level for kernel calls b2abd2b98afc rxrpc: Fix error reception on AF_INET6 sockets b5b3188098b3 qede: Fix gfp flags sent to rdma event node allocation 6618d064baca qed: Fix l2 initializations over iWARP personality dc5af7b0de98 tipc: eliminate KMSAN uninit-value in strcmp complaint 6ca2fa569d65 agp: uninorth: make two functions static 8223298c5075 cifs: smb2ops: Fix listxattr() when there are no EAs fcc0315abc95 arm64: Add MIDR encoding for NVIDIA CPUs 56068475a7f0 can: dev: increase bus-off message severity 4dc2437cdd6b net: aquantia: driver should correctly declare vlan_features bits a951cf4da896 x86/xen: Reset VCPU0 info pointer after shared_info remap ba29f3738e86 mac80211: use timeout from the AddBA response instead of the request e4bd54eb87c8 ARM: dts: cygnus: fix irq type for arm global timer 36166445a922 driver core: add __printf verification to __ata_ehi_pushv_desc bc707b2d950b drm/omap: handle alloc failures in omap_connector 771f573cc158 drm/omap: check return value from soc_device_match a490d0570df2 drm/omap: fix possible NULL ref issue in tiler_reserve_2d 9631f32b61dc drm/omap: fix uninitialized ret variable ca3c09a74945 drm/omap: silence unititialized variable warning 6ad69952d50d mac80211: Adjust SAE authentication timeout 46d6ee12fa9d tee: check shm references are consistent in offset/size d40e177f29ab sh: fix build failure for J2 cpu with SMP disabled 0742396317a0 sched/core: Introduce set_special_state() a614eaa465f7 spi: bcm2835aux: ensure interrupts are enabled for shared handler 373a625cb3c4 RDMA/cma: Do not query GID during QP state transition to RTR 3c54e919bd4f IB/hfi1: Fix memory leak in exception path in get_irq_affinity() 77662d35b8c5 IB/hfi1 Use correct type for num_user_context 194feed06bce smc: fix sendpage() call 9c0f528f6bf0 ARM: OMAP1: ams-delta: fix deferred_fiq handler ac5e86401fea nvme: Set integrity flag for user passthrough commands b19122a48f01 nvme: fix potential memory leak in option parsing 665d3c7f1e50 iommu/vt-d: fix shift-out-of-bounds in bug checking d98905c00c4c arm64: tegra: Make BCM89610 PHY interrupt as active low 61ca60932d52 kthread, sched/wait: Fix kthread_parkme() wait-loop e7a65e899d52 stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock a814d1101042 parisc: drivers.c: Fix section mismatches 609377d79e75 bpf, x64: fix memleak when not converging after image 666776d5f45d scsi: vmw-pvscsi: return DID_BUS_BUSY for adapter-initated aborts 09e12b91d12c hexagon: export csum_partial_copy_nocheck 8794fff6f4d9 hexagon: add memset_io() helper 960fe000b1d3 Input: atmel_mxt_ts - fix the firmware update f8d7147cb60f ARM: dts: logicpd-som-lv: Fix Audio Mute 8c4511032ac1 ARM: dts: logicpd-som-lv: Fix WL127x Startup Issues 691f0a6b3b09 ARM: OMAP2+: powerdomain: use raw_smp_processor_id() for trace 061a560f3293 dt-bindings: panel: lvds: Fix path to display timing bindings b1ac1ca7352d ARM: davinci: board-dm355-evm: fix broken networking 034a9e9b235e ARM: davinci: board-omapl138-hawk: fix GPIO numbers for MMC/SD lookup 0bf4a2db2964 ARM: davinci: board-da850-evm: fix GPIO lookup for MMC/SD 38ffd4d581ff ARM: davinci: board-da830-evm: fix GPIO lookup for MMC/SD 13e4a2083d2b IB/core: Make ib_mad_client_id atomic 5cb0ba254fee <linux/stringhash.h>: fix end_name_hash() for 64bit long 3fbbdb44cead IB/rxe: avoid double kfree_skb b4f6e28c801a IB/rxe: add RXE_START_MASK for rxe_opcode IB_OPCODE_RC_SEND_ONLY_INV d2be557eef15 RDMA/iwpm: fix memory leak on map_info 019ce25a4ee0 RDMA/cma: Fix use after destroy access to net namespace for IPoIB 84f66378da20 IB/uverbs: Fix validating mandatory attributes fb019834bf8e IB: make INFINIBAND_ADDR_TRANS configurable b8500e6e8eb5 ib_srp: depend on INFINIBAND_ADDR_TRANS 08088b8a0793 ib_srpt: depend on INFINIBAND_ADDR_TRANS 4e2b7d1687c4 nvmet-rdma: depend on INFINIBAND_ADDR_TRANS 8e6dba9166ed nvme: depend on INFINIBAND_ADDR_TRANS 5d33c9d0fbd8 tipc: fix bug in function tipc_nl_node_dump_monitor f1e5bbe86ec1 i2c: sprd: Fix the i2c count issue 201dc1345bfe i2c: sprd: Prevent i2c accesses after suspend is called 40d526e67212 bpf: fix uninitialized variable in bpf tools 09daf2df8db8 x86/cpu/intel: Add missing TLB cpuid values 75b0436b24d6 ata: ahci: mvebu: override ahci_stop_engine for mvebu AHCI 48c0bf9af161 libahci: Allow drivers to override stop_engine 81d27c6ed637 KVM: arm/arm64: vgic: fix possible spectre-v1 in vgic_mmio_read_apr() e3d1002e14ce arm64: fix possible spectre-v1 in ptrace_hbp_get_event() 06beec871640 blk-mq: fix sysfs inflight counter 11ac08bd73eb HID: intel-ish-hid: use put_device() instead of kfree() d803d94a3fcd rpmsg: added MODULE_ALIAS for rpmsg_char bb7894391aad remoteproc: qcom: Fix potential device node leaks af22d1b7705a perf/x86/intel: Don't enable freeze-on-smi for PerfMon V1 3958294c661e rds: ib: Fix missing call to rds_ib_dev_put in rds_ib_setup_qp 9079946f612b selftests: ftrace: Add a testcase for multiple actions on trigger 27e13b330dd2 HID: wacom: Release device resource data obtained by devres_alloc() 2f3ca3908fc0 HID: lenovo: Add support for IBM/Lenovo Scrollpoint mice e6ec885f5f4c arm64: ptrace: remove addr_limit manipulation ef0fa5e6f52b net: ethtool: Add missing kernel doc for FEC parameters b1d0907c6fed thermal: int3403_thermal: Fix NULL pointer deref on module load / probe 56dfe52e04a2 drm/amdkfd: fix clock counter retrieval for node without GPU 73ea96beb771 ACPI / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 00a85086e51f ARM: dts: da850: fix W=1 warnings with pinmux node 9148e21d7624 net: phy: marvell: clear wol event before setting it b0471926ceb5 powerpc/powernv/memtrace: Let the arch hotunplug code flush cache a4fa9189d608 dt-bindings: meson-uart: DT fix s/clocks-names/clock-names/ 71c8e7432a2e ACPI / PM: Blacklist Low Power S0 Idle _DSM for ThinkPad X1 Tablet(2016) d3bd4954286b usb: typec: ucsi: fix tracepoint related build error 6d2707f26892 mm: memcg: add __GFP_NOWARN in __memcg_schedule_kmem_cache_create() cd2cc6d13170 kexec_file: do not add extra alignment to efi memmap d497efd805fe proc: revalidate kernel thread inodes to root:root a20600762300 mm, pagemap: fix swap offset value for PMD migration entry 6385f2da8b3b scsi: isci: Fix infinite loop in while loop 12f9bb1a273e scsi: storvsc: Set up correct queue depth values for IDE devices fc0d99fde0d2 parisc: time: Convert read_persistent_clock() to read_persistent_clock64() 6bf379f26a54 vfs: Undo an overly zealous MS_RDONLY -> SB_RDONLY conversion bd595dbfcbd6 net: hns: Avoid action name truncation ea7246c25892 blkcg: init root blkcg_gq under lock b6126afd64d0 drm/msm: don't deref error pointer in the msm_fbdev_create error path 5151a0c8d730 drm/msm/dsi: use correct enum in dsi_get_cmd_fmt be04f7301d8d drm/msm: Fix possible null dereference on failure of get_pages() 625b5b8c76d4 ASoC: msm8916-wcd-analog: use threaded context for mbhc events 705fd605237b netfilter: nf_tables: fix out-of-bounds in nft_chain_commit_update d11b04c34894 netfilter: nf_tables: NAT chain and extensions require NF_TABLES 348288a2699c scsi: target: fix crash with iscsi target and dvd 4fb7926bba58 scsi: megaraid_sas: Do not log an error if FW successfully initializes. af2cc1d2e75c scsi: iscsi: respond to netlink with unicast when appropriate 3f64c0c502ef tipc: fix infinite loop when dumping link monitor summary 9d5e2d69705f blkcg: don't hold blkcg lock when deactivating policy c5b6316c3f51 spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo() 5f4bf078e779 ASoC: topology: Check widget kcontrols before deref. ff3080bab10d xen: xenbus_dev_frontend: Really return response string d5cf1ed8d3ae ASoC: topology: Fix bugs of freeing soc topology bd8acfd77dd3 PCI: kirin: Fix reset gpio name 150efd30c3a0 soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure 305043739272 soc: bcm: raspberrypi-power: Fix use of __packed d066fd9d7e9b eCryptfs: don't pass up plaintext names when using filename encryption 3f54483edea2 ASoC: rt5514: Add the missing register in the readable table 9d33f89c40e9 clk: honor CLK_MUX_ROUND_CLOSEST in generic clk mux dccf9862a7f5 dt-bindings: dmaengine: rcar-dmac: document R8A77965 support 20d681359337 dt-bindings: serial: sh-sci: Add support for r8a77965 (H)SCIF 20d3d7fa75b2 dt-bindings: pinctrl: sunxi: Fix reference to driver 5eeb26c58c0a doc: Add vendor prefix for Kieback & Peter GmbH 3ca7dddaa13f spi: sh-msiof: Fix bit field overflow writes to TSCR/RSCR b3ccb8a77ed1 MIPS: dts: Boston: Fix PCI bus dtc warnings: ba041775a9a8 isofs: fix potential memory leak in mount option parsing d27cd5cb9b38 s390/smsgiucv: disable SMSG on module unload e7b720ef94d8 MIPS: io: Add barrier after register read in readX() dc94ac5fc410 fsnotify: fix ignore mask logic in send_to_group() 025e42a5e7a3 perf report: Fix switching to another perf.data file 7bb0c4bd79ab nfp: ignore signals when communicating with management FW d96da2acac5d MIPS: io: Prevent compiler reordering writeX() df5524e5483b x86: Add check for APIC access address for vmentry of L2 guests 9b78e9ddc47a KVM: X86: fix incorrect reference of trace_kvm_pi_irte_update 176ebf4df971 Input: synaptics-rmi4 - fix an unchecked out of memory error path 65783949c813 clocksource/drivers/imx-tpm: Correct some registers operation flow cda6fd4d9382 Linux 4.14.50 87883c89b405 crypto: omap-sham - fix memleak efc67e746b27 crypto: vmx - Remove overly verbose printk from AES XTS init 1bc36d12a6ed crypto: vmx - Remove overly verbose printk from AES init routines b9705796e44b crypto: cavium - Limit result reading attempts 072e8b1f58d5 crypto: cavium - Fix fallout from CONFIG_VMAP_STACK 4854c879107c crypto: caam - fix size of RSA prime factor q f535e1c3b394 crypto: caam/qi - fix IV DMA mapping and updating 9ed3135cab14 crypto: caam - fix IV DMA mapping and updating 635ac89ea764 crypto: caam - fix DMA mapping dir for generated IV ed0a79561189 crypto: caam - strip input zeros from RSA input buffer 3c42aa03cd6a Input: elan_i2c - add ELAN0612 (Lenovo v330 14IKB) ACPI ID c4168f192057 Input: goodix - add new ACPI id for GPD Win 2 touch screen 53e4b19fcd0c kvm: x86: use correct privilege level for sgdt/sidt/fxsave/fxrstor access 739ac8f4a516 tty: pl011: Avoid spuriously stuck-off interrupts 5ee296fde55e vmw_balloon: fixing double free when batching mode is off a64ff0bea051 serial: 8250: omap: Fix idling of clocks for unused uarts 804f09011069 serial: samsung: fix maxburst parameter for DMA transactions db30b8eb960a tty/serial: atmel: use port->name as name in request_irq() 95b8204b4491 serial: sh-sci: Stop using printk format %pCr d6a9e699a3c2 usb: gadget: udc: renesas_usb3: disable the controller's irqs for reconnecting 262af4fe6dff usb: gadget: function: printer: avoid wrong list handling in printer_write() 874cb201d511 phy: qcom-qusb2: Fix crash if nvmem cell not specified cb6b5869658b Input: xpad - add GPD Win 2 Controller USB IDs 5c2e9e9bf444 usb-storage: Add compatibility quirk flags for G-Technologies G-Drive c839680e8cbf usb-storage: Add support for FL_ALWAYS_SYNC flag in the UAS driver f31eb7298ba4 usbip: vhci_sysfs: fix potential Spectre v1 1caeb5022449 NFC: pn533: don't send USB data off of the stack f1769a9ba4bf staging: android: ion: Switch to pr_warn_once in ion_buffer_destroy bd2742e83660 KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and kvm_write_guest_virt_system b1bd9caf5e98 kvm: nVMX: Enforce cpl=0 for VMX instructions 3d2f03393267 KVM: x86: introduce linear_{read,write}_system 9791d9d7e2ac KVM: X86: Fix reserved bits check for MOV to CR3 c7a372ddc3db gpio: No NULL owner 7d970250cb8d af_key: Always verify length of provided sadb_key 1cbd5ece0527 blkdev_report_zones_ioctl(): Use vmalloc() to allocate large buffers d02ae00ab6d0 netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump() 70d7bbd9b504 Linux 4.14.49 2abd4c3ed20d drm: set FMODE_UNSIGNED_OFFSET for drm files 3fe4b0cf9383 PCI: hv: Do not wait forever on a device that has disappeared dd4be396b8c5 cls_flower: Fix incorrect idr release when failing to modify rule c931c9aee2f3 rtnetlink: validate attributes in do_setlink() fa11d992533b virtio-net: fix leaking page for gso packet during mergeable XDP 2b8b2b26c378 net/mlx5e: When RXFCS is set, add FCS data into checksum calculation 155cd575588b virtio-net: correctly check num_buf during err path e2d47fa107f9 tun: Fix NULL pointer dereference in XDP redirect 43153f090165 net/mlx4: Fix irq-unsafe spinlock usage 31c1e078e3ca virtio-net: correctly transmit XDP buff after linearizing 0dbd822f6440 net-sysfs: Fix memory leak in XPS configuration 900679988fdf net: phy: broadcom: Fix auxiliary control register reads 8d80a839c179 ipv6: sr: fix memory OOB access in seg6_do_srh_encap/inline c5e1541ef6fe vrf: check the original netdevice for generating redirect 6d431f6e6880 vhost: synchronize IOTLB message with dev cleanup f2bb94069f3e team: use netdev_features_t instead of u32 60473d7034ee sctp: not allow transport timeout value less than HZ/5 for hb_timer 0a3608662ff6 qed: Fix mask for physical address in ILT entry 0d751192afde packet: fix reserve calculation 1c2c7767e876 net: usb: cdc_mbim: add flag FLAG_SEND_ZLP 8acb0708ab6d net: phy: broadcom: Fix bcm_write_exp() c85df6eb6e86 net/packet: refine check for priv area size 95159ad9635a net: metrics: add proper netlink validation 341c03313a9a net: ipv4: add missing RTA_TABLE to rtm_ipv4_policy be1f1827a89a netdev-FAQ: clarify DaveM's position for stable backports c6fae49a447c kcm: Fix use-after-free caused by clonned sockets ebe79f9cf44f isdn: eicon: fix a missing-check bug 3f8f52c5f200 ipv6: omit traffic class when calculating flow hash ff33a32949c8 ipv4: remove warning in ip_recv_error f1409a73b6f4 ipmr: properly check rhltable_init() return value f200de49dff8 ip6_tunnel: remove magic mtu value 0xFFF8 989986db8f66 ip6mr: only set ip6mr_table from setsockopt when ip6mr_new_table succeeds cbf561634db3 enic: set DMA mask to 47 bit 0d2eb422fe35 dccp: don't free ccid2_hc_tx_sock struct in dccp_disconnect() d591263c7947 bnx2x: use the right constant 128f0d700569 be2net: Fix error detection logic for BE3 d58cf41924e8 kconfig: Avoid format overflow warning from GCC 8.1 058dd233b559 btrfs: define SUPER_FLAG_METADUMP_V2 af760b568ef1 mmap: relax file size limit for regular files 16d7ceb04b55 mmap: introduce sane default mmap limits 7cb10a4ce724 scsi: sd_zbc: Avoid that resetting a zone fails sporadically 1110636ed2d9 scsi: sd_zbc: Fix potential memory leak 2c6025ebc7fd Linux 4.14.48 1dd9566d9542 powerpc/mm/slice: Fix hugepage allocation at hint address on 8xx 399e039634a4 powerpc/mm/slice: Enhance for supporting PPC32 b8b23e8926b3 powerpc/mm/slice: create header files dedicated to slices e14db4feb035 powerpc/mm/slice: Remove intermediate bitmap copy c95c5f419e57 drm/i915: Disable LVDS on Radiant P845 72571f26757e drm/i915/lvds: Move acpi lid notification registration to registration phase ffedc7ade784 drm/psr: Fix missed entry in PSR setup time table. 5890358c60e5 intel_th: Use correct device when freeing buffers 792be048cf9c Revert "rt2800: use TXOP_BACKOFF for probe frames" a7027b7d698e mm/huge_memory.c: __split_huge_page() use atomic ClearPageDirty() 4a1b66bcec03 IB/core: Fix error code for invalid GID entry bdf1daba5f62 hwtracing: stm: fix build error on some arches 1f8c4ed2dba5 stm class: Use vmalloc for the master map a70f19b29560 scsi: scsi_transport_srp: Fix shost to rport translation 8a6576219da8 MIPS: prctl: Disallow FRE without FR with PR_SET_FP_MODE requests f7a36d7ac838 MIPS: ptrace: Fix PTRACE_PEEKUSR requests for 64-bit FGRs ed5bd13bec35 MIPS: lantiq: gphy: Drop reboot/remove reset asserts 6d67a723ef37 iio: adc: select buffer for at91-sama5d2_adc 838f25e3d9f2 iio:kfifo_buf: check for uint overflow 30ab9366f763 iio:buffer: make length types match kfifo types d30819abd1c4 iio: ad7793: implement IIO_CHAN_INFO_SAMP_FREQ a6f81fcb2c39 tcp: avoid integer overflows in tcp_rcv_space_adjust() 96b086a7bfe5 kbuild: clang: disable unused variable warnings only when constant 9b6eda5797b1 platform/chrome: cros_ec_lpc: remove redundant pointer request a81920c73eb0 ASoC: Intel: sst: remove redundant variable dma_dev_name bcc9c6f03201 rtlwifi: rtl8192cu: Remove variable self-assignment in rf.c 8524af02d132 drm/amd/powerplay: Fix enum mismatch 074e30a3fc09 dma-buf: remove redundant initialization of sg_table 5a92c6e3e2f3 drm/i915: Always sanity check engine state upon idling 151b144bc602 kbuild: clang: remove crufty HOSTCFLAGS bc342bc02954 cfg80211: further limit wiphy names to 64 bytes 9808c97d3cb4 selinux: KASAN: slab-out-of-bounds in xattr_getsecurity c6a95f37d3a0 tracing: Make the snapshot trigger work with instances 8441a0014a29 tracing: Fix crash when freeing instances with event triggers 2be683020be4 Input: elan_i2c_smbus - fix corrupted stack 9a85abc79483 Input: synaptics - add Lenovo 80 series ids to SMBus 9c707c93e179 Input: synaptics - add Intertouch support on X1 Carbon 6th and X280 af504c5a88b3 Input: synaptics - Lenovo Thinkpad X1 Carbon G5 (2017) with Elantech trackpoints should use RMI 88859f6cc5c4 Input: synaptics - Lenovo Carbon X1 Gen5 (2017) devices should use RMI d1db300b8ffc xfs: detect agfl count corruption and reset agfl d9a59eac3fd6 xfs: convert XFS_AGFL_SIZE to a helper function 54978daa9dc5 PCI: hv: Fix 2 hang issues in hv_compose_msi_msg() 085fc1967b56 Revert "pinctrl: msm: Use dynamic GPIO numbering" 4cbe6caa4c6c x86/MCE/AMD: Cache SMCA MISC block addresses 5df3a1b9f87b x86/mce/AMD: Carve out SMCA get_block_address() code 6bcf3b066c69 objtool: Fix "noreturn" detection for recursive sibling calls 806a730c0b0b objtool: Detect RIP-relative switch table references, part 2 afb5e5c8a125 objtool: Detect RIP-relative switch table references 2c26d5784e71 objtool: Support GCC 8 switch tables 1bea53df12c4 objtool: Support GCC 8's cold subfunctions b968dd7650c8 mm: fix the NULL mapping case in __isolate_lru_page() 6a19487d5a93 fix io_destroy()/aio_complete() race
Bruce Ashfield [Fri, 24 Aug 2018 14:59:53 +0000 (10:59 -0400)]
linux-yocto/4.12: update to v4.12.28
Integrating Paul Gortmaker's -stable updates to 4.12 that comprise the
following changes:
f4fd7580487d Linux 4.12.28 d15dfc7d192f net: mvneta: eliminate wrong call to handle rx descriptor error c7a79cbd2b44 net: mvneta: use proper rxq_number in loop on rx queues f65f1aed2ef2 net: mvneta: clear interface link status on port disable 402f4ea26693 tcp: add tcp_ooo_try_coalesce() helper 035eddf502ef tcp: call tcp_drop() from tcp_data_queue_ofo() c224a5920d55 tcp: detect malicious patterns in tcp_collapse_ofo_queue() 7c5d21c36cec tcp: avoid collapses in tcp_prune_queue() if possible f999a5cfc3eb tcp: free batches of packets in tcp_prune_ofo_queue() 3471d76b1128 net: add rb_to_skb() and other rb tree helpers fcd212157f50 libnvdimm, pfn: fix start_pad handling for aligned namespaces d90d61722843 libnvdimm, dax: fix 1GB-aligned namespaces vs physical misalignment df6a2110169e drm/sun4i: Fix error path handling d2d90272068d drm/i915: Flush pending GTT writes before unbinding 55e3ba836aee powerpc/perf: Dereference BHRB entries safely 32c5b092ac7e clk: sunxi: sun9i-mmc: Implement reset callback for reset controls a472f9b5c546 pinctrl: cherryview: Mask all interrupts on Intel_Strago based systems 32f9f01a1b49 spi: a3700: Fix clk prescaling for coefficient over 15 39e2376e2774 spi: xilinx: Detect stall with Unknown commands 104bf43e4653 Revert "parisc: Re-enable interrupts early" 2c6a864363b5 parisc: Hide Diva-built-in serial aux and graphics card 4e92abc4d371 parisc: Align os_hpmc_size on word boundary 8df2ad333664 ALSA: usb-audio: Add native DSD support for Esoteric D-05X 2d7184d7f8b1 ALSA: rawmidi: Avoid racy info ioctl via ctl device 425708ccc413 mfd: twl6040: Fix child-node lookup d99aacab316b mfd: twl4030-audio: Fix sibling-node lookup cd2ca561cdd7 mfd: cros ec: spi: Don't send first message too soon f5d153b69e6a crypto: mcryptd - protect the per-CPU queue with a lock 01b2634b17f4 acpi, nfit: fix health event notification 1170a37d5339 ACPI: APEI / ERST: Fix missing error handling in erst_reader() 0cf5d1f5ce10 bpf: fix incorrect sign extension in check_alu_op() 39cc58874bfc bpf, sparc: fix usage of wrong reg for load_skb_regs after call 8c570303798e bpf, ppc64: do not reload skb pointers in non-skb context 05bd23b36b88 bpf, s390x: do not reload skb pointers in non-skb context da92e092ffa7 platform/x86: asus-wireless: send an EV_SYN/SYN_REPORT between state changes ab3980511fa0 thermal/drivers/hisi: Fix multiple alarm interrupts firing ed7ec377cb05 thermal/drivers/hisi: Simplify the temperature/step computation b4322338048d thermal/drivers/hisi: Fix kernel panic on alarm interrupt e9b4b6019cc2 thermal/drivers/hisi: Fix missing interrupt enablement 01f1870f5aa8 IB/opa_vnic: Properly return the total MACs in UC MAC list 59522364dab2 IB/opa_vnic: Properly clear Mac Table Digest 84cf0ea1cb2a cpuidle: fix broadcast control when broadcast can not be entered fdb28a72dafa rtc: set the alarm to the next expiring timer 245a952509f6 tcp: fix under-evaluated ssthresh in TCP Vegas ebe28298b759 clk: sunxi-ng: sun6i: Rename HDMI DDC clock to avoid name collision c31c122f7744 staging: greybus: light: Release memory obtained by kasprintf 7900ee86e495 net: ipv6: send NS for DAD when link operationally up 0c8d7ea9c7db ibmvnic: Set state UP eb3237c59a98 fm10k: ensure we process SM mbx when processing VF mbx a076534d71b3 vfio/pci: Virtualize Maximum Payload Size 0e8c3cf3f83e i40e: fix client notify of VF reset 2e3bad157461 scsi: lpfc: PLOGI failures during NPIV testing 022e3fe9ac98 scsi: lpfc: Fix secure firmware updates 9e7341570bf9 fm10k: fix mis-ordered parameters in declaration for .ndo_set_vf_bw af88451b2676 ASoC: codecs: msm8916-wcd-analog: fix module autoload 2fc38deb5bed ASoC: img-parallel-out: Add pm_runtime_get/put to set_fmt callback 4529e660bc83 tracing: Exclude 'generic fields' from histograms 3485fd44f243 PCI/AER: Report non-fatal errors only to the affected endpoint 64e367610786 Bluetooth: BT_HCIUART now depends on SERIAL_DEV_BUS 47663fe61367 Bluetooth: hci_uart_set_flow_control: Fix NULL deref when using serdev 58adf4fe65f8 md: always set THREAD_WAKEUP and wake up wqueue if thread existed e9f7be0e550e block,bfq: Disable writeback throttling c09fcc304541 IB/rxe: put the pool on allocation failure 392f4c00adca IB/rxe: check for allocation failure on elem 179099ba0d69 ixgbe: fix use of uninitialized padding e2e131da3b6b i40e: use the safe hash table iterator when deleting mac filters 757ad831c703 igb: check memory allocation failure e156a3afb676 PM / OPP: Move error message to debug level 9bd17b3b4bb6 PCI: Create SR-IOV virtfn/physfn links before attaching driver 54da833e63b0 scsi: mpt3sas: Fix IO error occurs on pulling out a drive from RAID1 volume created on two SATA drive 929cc7c94e3b scsi: cxgb4i: fix Tx skb leak 84aa72a81de3 PCI: Avoid bus reset if bridge itself is broken 3932edaebc65 net: phy: at803x: Change error to EINVAL for invalid MAC e9bd07539e3f rtc: pl031: make interrupt optional 9f77ab2f562c crypto: lrw - Fix an error handling path in 'create()' 59e5a2e7eec9 crypto: crypto4xx - increase context and scatter ring buffer elements 13c0df6a379d clk: sunxi-ng: sun5i: Fix bit offset of audio PLL post-divider 68e13e506d6e clk: sunxi-ng: nm: Check if requested rate is supported by fractional clock 3996734fc715 drm: Add retries for lspcon mode detection 77190a6d2d57 backlight: pwm_bl: Fix overflow condition d3b4b8043ff7 optee: fix invalid of_node_put() in optee_driver_init() 752218b19686 posix-timer: Properly check sigevent->sigev_notify 16c39a33a5c6 ACPI / APEI: adjust a local variable type in ghes_ioremap_pfn_irq() ba0b2e6cbb82 Linux 4.12.27 feea4d492d73 usb: musb: da8xx: fix babble condition handling 6d8d83c4ec67 ath10k: fix build errors with !CONFIG_PM 00e875f83a3c ath9k: fix tx99 potential info leak 01cf18e17476 lightnvm: pblk: fix min size for page mempool 4413575d48be lightnvm: pblk: initialize debug stat counter 87135620a06a lightnvm: pblk: fix changing GC group list for a line 3b1abf7d20f6 icmp: don't fail on fragment reassembly time exceeded 4be8ae2da97b IB/ipoib: Fix lockdep issue found on ipoib_ib_dev_heavy_flush 7d284754ed54 IB/ipoib: Grab rtnl lock on heavy flush when calling ndo_open/stop 634b3e0fefd7 RDMA/cma: Avoid triggering undefined behavior f9f24086ba42 macvlan: Only deliver one copy of the frame to the macvlan interface aba3745fc9b0 udf: Avoid overflow when session starts at large offset 4a9bf3983ef9 md-cluster: fix wrong condition check in raid1_write_request e08da1a3d9d5 raid5-ppl: check recovery_offset when performing ppl recovery a6b9b60622b0 scsi: bfa: integer overflow in debugfs a6adc19ff5a4 scsi: sd: change allow_restart to bool in sysfs interface d23a6641b217 scsi: sd: change manage_start_stop to bool in sysfs interface be59ef05ed52 rtl8188eu: Fix a possible sleep-in-atomic bug in rtw_disassoc_cmd 9257df5ece69 vt6655: Fix a possible sleep-in-atomic bug in vt6655_suspend 5d0d0b750520 IB/core: Fix calculation of maximum RoCE MTU 950215a22a7a scsi: scsi_devinfo: Add REPORTLUN2 to EMC SYMMETRIX blacklist entry 40dd3da9911d raid5: Set R5_Expanded on parity devices as well as data. d63147f7712f pinctrl: adi2: Fix Kconfig build problem b25a34c20291 dev/dax: fix uninitialized variable build warning 3b928d69ed7c tty fix oops when rmmod 8250 6fd73bd5acc5 ipv4: ipv4_default_advmss() should use route mtu e8552a24db2a soc: mediatek: pwrap: fix compiler errors 023499e5fff8 powerpc/xmon: Check before calling xive functions 7092b9c569ee powerpc/perf/hv-24x7: Fix incorrect comparison in memord d85bb8676f60 serdev: ttyport: enforce tty-driver open() requirement dcc2d9b7db19 mfd: mxs-lradc: Fix error handling in mxs_lradc_probe() d7630ac47698 scsi: hpsa: destroy sas transport properties before scsi_host a2133c918746 scsi: hpsa: cleanup sas_phy structures in sysfs when unloading 37686080a0c8 PCI: Detach driver before procfs & sysfs teardown on device remove 585eb66776b7 RDMA/cxgb4: Declare stag as __be32 06a21042a540 xfs: fix incorrect extent state in xfs_bmap_add_extent_unwritten_real 98da748f2c95 xfs: fix log block underflow during recovery cycle verification 9aaebfb38490 l2tp: cleanup l2tp_tunnel_delete calls 4fd806e81bcb nvme: use kref_get_unless_zero in nvme_find_get_ns 377d9449f868 platform/x86: hp_accel: Add quirk for HP ProBook 440 G4 89e9f0fce2a4 liquidio: fix kernel panic in VF driver 85aad298ecc2 samples/bpf: adjust rlimit RLIMIT_MEMLOCK for xdp1 767f9da42096 ARM64: dts: meson-gxbb-odroidc2: fix usb1 power supply 65743dd02181 mtd: spi-nor: stm32-quadspi: Fix uninitialized error return code 0501313aa697 btrfs: tests: Fix a memory leak in error handling path in 'run_test()' 563e097ec448 btrfs: avoid null pointer dereference on fs_info when calling btrfs_crit 3faadbbe68b1 btrfs: undo writable superblocke when sprouting fails 7028f26c6034 btrfs: Explicitly handle btrfs_update_root failure 3f0a4dfc8eb9 Bluetooth: hci_ldisc: Fix another race when closing the tty. abb921b20fa0 Ib/hfi1: Return actual operational VLs in port info query 879b18ebb8f4 bcache: fix wrong cache_misses statistics 744eb7bd3386 bcache: explicitly destroy mutex while exiting 653aad5c1702 media: usbtv: fix brightness and contrast controls c4d5c7940953 GFS2: Take inode off order_write list when setting jdata flag 2e510357e1a6 scsi: scsi_debug: write_same: fix error report 56c755841ee6 misc: pci_endpoint_test: Avoid triggering a BUG() b55d52393e28 misc: pci_endpoint_test: Fix failure path return values in probe aeac8e4c0c15 thermal/drivers/step_wise: Fix temperature regulation misbehavior aaca414203c4 ASoC: rsnd: rsnd_ssi_run_mods() needs to care ssi_parent_mod 0587e5a36d00 ppp: Destroy the mutex when cleanup 4a7735ca4455 clk: tegra: Fix cclk_lp divisor register 0006385aadd0 clk: tegra: Use readl_relaxed_poll_timeout_atomic() in tegra210_clock_init() 6ae2754d991b blk-mq-sched: dispatch from scheduler IFF progress is made in ->dispatch ec4585cdc959 clk: hi6220: mark clock cs_atb_syspll as critical f203d6193f5c clk: imx6: refine hdmi_isfr's parent to make HDMI work on i.MX6 SoCs w/o VPU c9ce9a4d1734 clk: imx: imx7d: Fix parent clock for OCRAM_CLK 5f200f317929 clk: mediatek: add the option for determining PLL source clock 6f7955a0aa2a crypto: tcrypt - fix buffer lengths in test_aead_speed() 40734099baaa xfs: truncate pagecache before writeback in xfs_setattr_size() 165b974bd72a iommu/amd: Limit the IOVA page range to the specified addresses a2e1fcc04fb6 badblocks: fix wrong return value in badblocks_set if badblocks are disabled 75920b77b802 target/file: Do not return error for UNMAP if length is zero ca73c042292d target:fix condition return in core_pr_dump_initiator_port() 8e2ee3f5ff33 iscsi-target: fix memory leak in lio_target_tiqn_addtpg() f1ae60da96df target/iscsi: Fix a race condition in iscsit_add_reject_from_cmd() d5adfbee09dc target/iscsi: Detect conn_cmd_list corruption early edd7fdf83184 platform/x86: intel_punit_ipc: Fix resource ioremap warning da2aa58cb07b powerpc/pseries/vio: Dispose of virq mapping on vdevice unregister 2ae1d60028ab powerpc/ipic: Fix status get and status clear 1d0cfd6df447 powerpc/opal: Fix EBUSY bug in acquiring tokens 88189efa7ee7 netfilter: ipvs: Fix inappropriate output of procfs 39254860365c iommu/mediatek: Fix driver name c82f9ea385ab PCI: dwc: Fix enumeration end when reaching root subordinate 5dad0dfd17df PCI: Do not allocate more buses than available in parent 4a917030981d powerpc: Don't preempt_disable() in show_cpuinfo() 0bc0d339ff6c powerpc/powernv/cpufreq: Fix the frequency read by /proc/cpuinfo 7842177fdc43 PCI/PME: Handle invalid data when reading Root Status 301c44edb5a1 dmaengine: ti-dma-crossbar: Correct am335x/am43xx mux value type 2761bc37b1c2 ASoC: Intel: Skylake: Fix uuid_module memory leak in failure case c42830902147 PM / s2idle: Clear the events_check_enabled flag 9c70ec2c413d scsi: aacraid: address UBSAN warning regression 3819c3c756b0 scsi: aacraid: use timespec64 instead of timeval e262d43729be rtc: pcf8563: fix output clock rate 3ecf1bdeb61e video: fbdev: au1200fb: Return an error code if a memory allocation fails d56242baba22 video: fbdev: au1200fb: Release some resources if a memory allocation fails 3b53b4e4c0ab video: udlfb: Fix read EDID timeout f50c8ab6dc0d fbdev: controlfb: Add missing modes to fix out of bounds access bfbfacb318cd sfc: don't warn on successful change of MAC ae058bf77e63 HID: cp2112: fix broken gpio_direction_input callback 91590951dec1 ext4: fix crash when a directory's i_size is too small 4fae0491c35c ext4: fix fdatasync(2) after fallocate(2) operation df19eb58d7be dmaengine: dmatest: fix container_of member in dmatest_callback 100cb4506fb4 dmaengine: dmatest: move callback wait queue to thread context 4d873e954ac0 eeprom: at24: change nvmem stride to 1 b90737b239b0 iw_cxgb4: only insert drain cqes if wq is flushed 6b1f48a27656 dm: fix various targets to dm_register_target after module __init resources created 26c2e6fc10f1 scsi: core: Fix a scsi_show_rq() NULL pointer dereference 04039227baf7 nfsd: auth: Fix gid sorting when rootsquash enabled 143fdc512ac6 NFS: Fix unstable write completion 7482c56f758c NFS: Use an atomic_long_t to count the number of commits 3ef4a32040bf nfs: don't wait on commit in nfs_commit_inode() if there were no commit requests 4a70dd38f444 xhci: Don't add a virt_dev to the devs array before it's fully allocated fa7944fd5601 usb: xhci: fix TDS for MTK xHCI1.1 80aa2eb9b51b ceph: drop negative child dentries before try pruning inode's alias b9db0ab47687 mmc: core: apply NO_CMD23 quirk to some specific cards ff1b82c5314c usbip: fix stub_send_ret_submit() vulnerability to null transfer_buffer cea2ad71f37b usbip: fix stub_rx: harden CMD_SUBMIT path to handle malicious input 1e5edda8ccd3 usbip: fix stub_rx: get_pipe() to validate endpoint number 3ac1e4089c48 USB: core: prevent malicious bNumInterfaces overflow 2479ee21bf60 USB: uas and storage: Add US_FL_BROKEN_FUA for another JMicron JMS567 ID b3fd05a19818 tracing: Allocate mask_str buffer dynamically 5eb37713e296 kernel: make groups_sort calling a responsibility group_info allocators d87a616735d8 cifs: fix NULL deref in SMB2_read d22121ce1210 crypto: rsa - fix buffer overread when stripping leading zeroes 0ad02bd37731 mfd: fsl-imx25: Clean up irq settings during removal
binutils: Change the ARM assembler's ADR and ADRl pseudo-ops so that they will only set the bottom bit of imported thumb function symbols if the -mthumb-interwork option is active.
Andrej Valek [Tue, 4 Sep 2018 15:48:06 +0000 (17:48 +0200)]
wpa-supplicant: fix CVE-2018-14526
Ignore unauthenticated encrypted EAPOL-Key data in supplicant
processing. When using WPA2, these are frames that have the Encrypted
flag set, but not the MIC flag.
Yi Zhao [Fri, 7 Sep 2018 00:22:05 +0000 (08:22 +0800)]
taglib: Security fix CVE-2018-11439
CVE-2018-11439: The TagLib::Ogg::FLAC::File::scan function in
oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause
information disclosure (heap-based buffer over-read) via a crafted audio
file.
Mike Looijmans [Fri, 24 Aug 2018 07:21:44 +0000 (09:21 +0200)]
busybox/mdev-mount.sh: Fix partition detect and cleanup mountpoint on fail
This fixes issues mainly seen when mounting eMMC devices:
The wildcard /sys/block/${DEVBASE}/${DEVBASE}*1 matches both "mmcblk0p1"
and "mmcblk0boot1" for example, and this results in syntax errors. Fix this
by searching for a "partition" file instead, which only exists for real
partitions and not 'fakes' like the eMMC extra's.
When mount fails, the mountpoint file is left behind, causing later attempts
at auto-mounting it to fail. If mount fails, remove the mountpoint, leaving
the system in the state as it was before the mount attempt.
Yi Zhao [Fri, 24 Aug 2018 07:21:27 +0000 (15:21 +0800)]
blktrace: Security fix CVE-2018-10689
CVE-2018-10689: blktrace (aka Block IO Tracing) 1.2.0, as used with the
Linux kernel and Android, has a buffer overflow in the dev_map_read
function in btt/devmap.c because the device and devno arrays are too
small, as demonstrated by an invalid free when using the btt program
with a crafted file.
(perl #131844) fix various space calculation issues in
pp_pack.c
- for the originally reported case, if the start/cur pointer is in the
top 75% of the address space the add (cur) + glen addition would
overflow, resulting in the condition failing incorrectly.
- the addition of the existing space used to the space needed could
overflow, resulting in too small an allocation and a buffer overflow.
- the scaling for UTF8 could overflow.
- the multiply to calculate the space needed for many items could
overflow.
For the first case, do a space calculation without making new pointers.
For the other cases, detect the overflow and croak if there's an
overflow.
Originally this used Size_t_MAX as the maximum size of a memory
allocation, but for -DDEBUGGING builds realloc() throws a panic for
allocations over half the address space in size, changing the error
reported for the allocation.
For non-DEBUGGING builds the Size_t_MAX limit has the small chance
of finding a system that has 3GB of contiguous space available, and
allocating that space, which could be a denial of servce in some cases.
Unfortunately changing the limit to half the address space means that
the exact case with the original issue can no longer occur, so the
test is no longer testing against the address + length issue that
caused the original problem, since the allocation is failing earlier.
One option would be to change the test so the size request by pack is
just under 2GB, but this has a higher (but still low) probability that
the system has the address space available, and will actually try to
allocate the memory, so let's not do that.
Note: changed
plan tests => 14713;
to
plan tests => 14712;
in a/t/op/pack.t
to apply this patch on perl 5.24.1.
* CVE-2018-6798-1
The proximal cause is several instances in regexec.c of the code
assuming that the input was valid UTF-8, whereas the input was too short
for what the start byte claimed it would be.
I grepped through the core for any other similar uses, and did not find
any.
While reading file content via 'guest-file-read' command,
'qmp_guest_file_read' routine allocates buffer of count+1
bytes. It could overflow for large values of 'count'.
Add check to avoid it.
* CVE-2018-1000030-1
[2.7] bpo-31530: Stop crashes when iterating over a file on multiple threads
* CVE-2018-1000030-2
Multiple threads iterating over a file can corrupt the file's internal readahead
buffer resulting in crashes. To fix this, cache buffer state thread-locally for
the duration of a file_iternext call and only update the file's internal state
after reading completes.
No attempt is made to define or provide "reasonable" semantics for iterating
over a file on multiple threads. (Non-crashing) races are still
present. Duplicated, corrupt, and missing data will happen.
This was originally fixed by 6401e56, which
raised an exception from seek() and next() when concurrent operations were
detected. Alas, this simpler solution breaks legitimate use cases such as
capturing the standard streams when multiple threads are logging.
proc/readproc.c: Fix bugs and overflows in file2strvec().
Note: this is by far the most important and complex patch of the whole
series, please review it carefully; thank you very much!
For this patch, we decided to keep the original function's design and
skeleton, to avoid regressions and behavior changes, while fixing the
various bugs and overflows. And like the "Harden file2str()" patch, this
patch does not fail when about to overflow, but truncates instead: there
is information available about this process, so return it to the caller;
also, we used INT_MAX as a limit, but a lower limit could be used.
The easy changes:
- Replace sprintf() with snprintf() (and check for truncation).
- Replace "if (n == 0 && rbuf == 0)" with "if (n <= 0 && tot <= 0)" and
do break instead of return: it simplifies the code (only one place to
handle errors), and also guarantees that in the while loop either n or
tot is > 0 (or both), even if n is reset to 0 when about to overflow.
- Remove the "if (n < 0)" block in the while loop: it is (and was) dead
code, since we enter the while loop only if n >= 0.
- Rewrite the missing-null-terminator detection: in the original
function, if the size of the file is a multiple of 2047, a null-
terminator is appended even if the file is already null-terminated.
- Replace "if (n <= 0 && !end_of_file)" with "if (n < 0 || tot <= 0)":
originally, it was equivalent to "if (n < 0)", but we added "tot <= 0"
to handle the first break of the while loop, and to guarantee that in
the rest of the function tot is > 0.
- Double-force ("belt and suspenders") the null-termination of rbuf:
this is (and was) essential to the correctness of the function.
- Replace the final "while" loop with a "for" loop that behaves just
like the preceding "for" loop: in the original function, this would
lead to unexpected results (for example, if rbuf is |\0|A|\0|, this
would return the array {"",NULL} but should return {"","A",NULL}; and
if rbuf is |A|\0|B| (should never happen because rbuf should be null-
terminated), this would make room for two pointers in ret, but would
write three pointers to ret).
The hard changes:
- Prevent the integer overflow of tot in the while loop, but unlike
file2str(), file2strvec() cannot let tot grow until it almost reaches
INT_MAX, because it needs more space for the pointers: this is why we
introduced ARG_LEN, which also guarantees that we can add "align" and
a few sizeof(char*)s to tot without overflowing.
- Prevent the integer overflow of "tot + c + align": when INT_MAX is
(almost) reached, we write the maximal safe amount of pointers to ret
(ARG_LEN guarantees that there is always space for *ret = rbuf and the
NULL terminator).
newgidmap: enforce setgroups=deny if self-mapping a group
This is necessary to match the kernel-side policy of "self-mapping in a
user namespace is fine, but you cannot drop groups" -- a policy that was
created in order to stop user namespaces from allowing trivial privilege
escalation by dropping supplementary groups that were "blacklisted" from
certain paths.
This is the simplest fix for the underlying issue, and effectively makes
it so that unless a user has a valid mapping set in /etc/subgid (which
only administrators can modify) -- and they are currently trying to use
that mapping -- then /proc/$pid/setgroups will be set to deny. This
workaround is only partial, because ideally it should be possible to set
an "allow_setgroups" or "deny_setgroups" flag in /etc/subgid to allow
administrators to further restrict newgidmap(1).
We also don't write anything in the "allow" case because "allow" is the
default, and users may have already written "deny" even if they
technically are allowed to use setgroups. And we don't write anything if
the setgroups policy is already "deny".
Submodule "names" come from the untrusted .gitmodules file,
but we blindly append them to $GIT_DIR/modules to create our
on-disk repo paths. This means you can do bad things by
putting "../" into the name (among other things).
Let's sanity-check these names to avoid building a path that
can be exploited. There are two main decisions:
1. What should the allowed syntax be?
It's tempting to reuse verify_path(), since submodule
names typically come from in-repo paths. But there are
two reasons not to:
a. It's technically more strict than what we need, as
we really care only about breaking out of the
$GIT_DIR/modules/ hierarchy. E.g., having a
submodule named "foo/.git" isn't actually
dangerous, and it's possible that somebody has
manually given such a funny name.
b. Since we'll eventually use this checking logic in
fsck to prevent downstream repositories, it should
be consistent across platforms. Because
verify_path() relies on is_dir_sep(), it wouldn't
block "foo\..\bar" on a non-Windows machine.
2. Where should we enforce it? These days most of the
.gitmodules reads go through submodule-config.c, so
I've put it there in the reading step. That should
cover all of the C code.
We also construct the name for "git submodule add"
inside the git-submodule.sh script. This is probably
not a big deal for security since the name is coming
from the user anyway, but it would be polite to remind
them if the name they pick is invalid (and we need to
expose the name-checker to the shell anyway for our
test scripts).
This patch issues a warning when reading .gitmodules
and just ignores the related config entry completely.
This will generally end up producing a sensible error,
as it works the same as a .gitmodules file which is
missing a submodule entry (so "submodule update" will
barf, but "git clone --recurse-submodules" will print
an error but not abort the clone.
There is one minor oddity, which is that we print the
warning once per malformed config key (since that's how
the config subsystem gives us the entries). So in the
new test, for example, the user would see three
warnings. That's OK, since the intent is that this case
should never come up outside of malicious repositories
(and then it might even benefit the user to see the
message multiple times).
Credit for finding this vulnerability and the proof of
concept from which the test script was adapted goes to
Etienne Stalmans.
Affects: git < 2.13.7 and git < 2.14.4 and git < 2.15.2 and git < 2.16.4 and
git < 2.17.1
