![]() -----BEGIN PGP SIGNATURE----- iQIcBAABAgAGBQJZQspmAAoJEE44bZycYXAvLXMP/3Uqx7K7dGjHvvhGA4DhnzSp bGLpjeP1sXXnnd932PN+qkGbl2j/NPjS74DobDqGWnrwxKRzQ21F4YkWJGtb4Pe2 JKcY7y2rbKGcwhpS9qDMkSWuaUKJWF5MAsH08LnCWqlGphGwAH/uPTdqS4iI/CJM aQvaaITe5SVzvpvpyoCVdHqu8K+Ukraf91mvt7hlmrn9OnqO9us9MWulw5sSXQcd pM8ZbRkBDE5OFeVnPKJDBY+cR2ML41wekMMwvJWt7uRyrX2i5c7oQVXYoeYE4MKx Pueb7aG7LQwBUzNJCiZA6PAEFQPwNPCoxHZbAax0D6/JyDWOZukappquzjd6gLDM +U7mxeFTeNZJ5v9tUcUIOb4GaaFcccS3wdDP23V2N8iM88hFVwJn0RSy/pksX37+ ZNDiEyDeJBjz3kh/Kf40zhFIIrABMozFeX3tpSRVVqXb+T6P9l8Y88O2LGY5FCXK QBbAC+jC4X4YI+4v+QWImg9mkfTwzZyjyAlfyjPlHVSK9KDP9M6LXpr2+jKS7jOc ievMOh9ku0HIVuSWGUKZSqjvcF01Bh99tFlX+KqipomwNTwa4hKCLmnOVflF1BPE 8sfD9hvenA0e949kXrURUmqpg6Ujkrbb/lXuD7e2CakCu+XjEMf317R11TyTsHNG 10hsmPsGDVcwbyFOFHS3 =mvzl -----END PGP SIGNATURE----- gpgsig -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEJDfLduVEy2qz2d/TmXOSYMtstxYFAlpqfEUACgkQmXOSYMts txbJOQ/+Pce1eBSgjESWKuz0OP9BfAe9RpWFi7lBZ/EgRwJVYEx6jau9EYXAQ7YT roCIsV6eufhMplYGHJz6EHxK2Hieb1zG9ooX9ss9GxiB6qmqeqC0Slm9EQE15yGT px3fVz9r86edqjtj7UKK0/n8DJUaFh5LWOymLD3d3/115RYQsl/GowugH9F79PvN pR+OyXq7srtfCmwdhZ65012Ef10RXqBRv0fCYBH6r+jkMqb7uSDFzdR39Z7k3QFk AM4+3lTm6EEZ4xZkcMyX3GuQWslpPAlvFdEx43TjdCbseXAqURoppmxvz+Izum75 fy0oOdKl5OSpyZArRkUfZ0MnL6BHGcKxwYV4u1LupwvqPyaUT4yiT5VEUdy9EqJo Syrr0oSR2lrXqQESdxKkmOZVXyul0nF3Fh1p5QlU1/Id9oskMLYqcXegFyhr2Wyp +A4ZozljEQ4AGm4dYFdH3w8TcNDttjztYoKf8OXnaCOj3p/SEq84tk4Hm3vpoPvh 5OzsZC3UB9gJ1mXsKOVKLJFCPzmg61KOvwhopfAcC6cyiIIf/MPCneZeOzsavtQX J+atSNcLVNE3jmrXvUrwxSpZ3KCc3Ti5Q8pD9ni6/B6st2+LO8EXPrS6n2+28nvu hVpjyCXLbghdmn1mjOGW9lvMQEg/Dupj/ocpCPHJnXpbpM8Mcjo= =3eAv -----END PGP SIGNATURE----- Merge 3.10.106 into android-msm-bullhead-3.10-oreo-m5 Changes in 3.10.106: (252 commits) packet: fix race condition in packet_set_ring crypto: crypto_memneq - add equality testing of memory regions w/o timing leaks EVM: Use crypto_memneq() for digest comparisons libceph: don't set weight to IN when OSD is destroyed KVM: x86: fix emulation of "MOV SS, null selector" KVM: x86: Introduce segmented_write_std posix_acl: Clear SGID bit when setting file permissions tmpfs: clear S_ISGID when setting posix ACLs fbdev: color map copying bounds checking selinux: fix off-by-one in setprocattr tcp: avoid infinite loop in tcp_splice_read() xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings KEYS: Change the name of the dead type to ".dead" to prevent user access KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings ext4: fix data exposure after a crash locking/rtmutex: Prevent dequeue vs. unlock race m68k: Fix ndelay() macro hotplug: Make register and unregister notifier API symmetric Btrfs: fix tree search logic when replaying directory entry deletes USB: serial: kl5kusb105: fix open error path block_dev: don't test bdev->bd_contains when it is not stable crypto: caam - fix AEAD givenc descriptors ext4: fix mballoc breakage with 64k block size ext4: fix stack memory corruption with 64k block size ext4: reject inodes with negative size ext4: return -ENOMEM instead of success f2fs: set ->owner for debugfs status file's file_operations block: protect iterate_bdevs() against concurrent close scsi: zfcp: fix use-after-"free" in FC ingress path after TMF scsi: zfcp: do not trace pure benign residual HBA responses at default level scsi: zfcp: fix rport unblock race with LUN recovery ftrace/x86_32: Set ftrace_stub to weak to prevent gcc from using short jumps to it IB/mad: Fix an array index check IB/multicast: Check ib_find_pkey() return value powerpc: Convert cmp to cmpd in idle enter sequence usb: gadget: composite: Test get_alt() presence instead of set_alt() USB: serial: omninet: fix NULL-derefs at open and disconnect USB: serial: quatech2: fix sleep-while-atomic in close USB: serial: pl2303: fix NULL-deref at open USB: serial: keyspan_pda: verify endpoints at probe USB: serial: spcp8x5: fix NULL-deref at open USB: serial: io_ti: fix NULL-deref at open USB: serial: io_ti: fix another NULL-deref at open USB: serial: iuu_phoenix: fix NULL-deref at open USB: serial: garmin_gps: fix memory leak on failed URB submit USB: serial: ti_usb_3410_5052: fix NULL-deref at open USB: serial: io_edgeport: fix NULL-deref at open USB: serial: oti6858: fix NULL-deref at open USB: serial: cyberjack: fix NULL-deref at open USB: serial: kobil_sct: fix NULL-deref in write USB: serial: mos7840: fix NULL-deref at open USB: serial: mos7720: fix NULL-deref at open USB: serial: mos7720: fix use-after-free on probe errors USB: serial: mos7720: fix parport use-after-free on probe errors USB: serial: mos7720: fix parallel probe usb: xhci-mem: use passed in GFP flags instead of GFP_KERNEL usb: musb: Fix trying to free already-free IRQ 4 ALSA: usb-audio: Fix bogus error return in snd_usb_create_stream() USB: serial: kl5kusb105: abort on open exception path staging: iio: ad7606: fix improper setting of oversampling pins usb: dwc3: gadget: always unmap EP0 requests cris: Only build flash rescue image if CONFIG_ETRAX_AXISFLASHMAP is selected hwmon: (ds620) Fix overflows seen when writing temperature limits clk: clk-wm831x: fix a logic error iommu/amd: Fix the left value check of cmd buffer scsi: mvsas: fix command_active typo target/iscsi: Fix double free in lio_target_tiqn_addtpg() mmc: mmc_test: Uninitialized return value powerpc/pci/rpadlpar: Fix device reference leaks ser_gigaset: return -ENOMEM on error instead of success net, sched: fix soft lockup in tc_classify net: stmmac: Fix race between stmmac_drv_probe and stmmac_open gro: Enter slow-path if there is no tailroom gro: use min_t() in skb_gro_reset_offset() gro: Disable frag0 optimization on IPv6 ext headers powerpc: Fix build warning on 32-bit PPC Input: i8042 - add Pegatron touchpad to noloop table mm/hugetlb.c: fix reservation race when freeing surplus pages USB: serial: kl5kusb105: fix line-state error handling USB: serial: ch341: fix initial modem-control state USB: serial: ch341: fix open error handling USB: serial: ch341: fix control-message error handling USB: serial: ch341: fix open and resume after B0 USB: serial: ch341: fix resume after reset USB: serial: ch341: fix modem-control and B0 handling x86/cpu: Fix bootup crashes by sanitizing the argument of the 'clearcpuid=' command-line option NFSv4.1: nfs4_fl_prepare_ds must be careful about reporting success. powerpc/ibmebus: Fix further device reference leaks powerpc/ibmebus: Fix device reference leaks in sysfs interface IB/mlx4: Set traffic class in AH IB/mlx4: Fix port query for 56Gb Ethernet links perf scripting: Avoid leaking the scripting_context variable ARM: dts: imx31: fix clock control module interrupts description svcrpc: don't leak contexts on PROC_DESTROY mmc: mxs-mmc: Fix additional cycles after transmission stop mtd: nand: xway: disable module support ubifs: Fix journal replay wrt. xattr nodes arm64/ptrace: Preserve previous registers for short regset write arm64/ptrace: Avoid uninitialised struct padding in fpr_set() arm64/ptrace: Reject attempts to set incomplete hardware breakpoint fields ARM: ux500: fix prcmu_is_cpu_in_wfi() calculation ite-cir: initialize use_demodulator before using it fuse: do not use iocb after it may have been freed crypto: caam - fix non-hmac hashes drm/i915: Don't leak edid in intel_crt_detect_ddc() s5k4ecgx: select CRC32 helper platform/x86: intel_mid_powerbtn: Set IRQ_ONESHOT net: fix harmonize_features() vs NETIF_F_HIGHDMA tcp: initialize max window for a new fastopen socket svcrpc: fix oops in absence of krb5 module ARM: 8643/3: arm/ptrace: Preserve previous registers for short regset write mac80211: Fix adding of mesh vendor IEs scsi: zfcp: fix use-after-free by not tracing WKA port open/close on failed send drm/i915: fix use-after-free in page_flip_completed() net: use a work queue to defer net_disable_timestamp() work ipv4: keep skb->dst around in presence of IP options netlabel: out of bound access in cipso_v4_validate() ip6_gre: fix ip6gre_err() invalid reads ping: fix a null pointer dereference l2tp: do not use udp_ioctl() packet: fix races in fanout_add() packet: Do not call fanout_release from atomic contexts net: socket: fix recvmmsg not returning error from sock_error USB: serial: mos7840: fix another NULL-deref at open USB: serial: ftdi_sio: fix modem-status error handling USB: serial: ftdi_sio: fix extreme low-latency setting USB: serial: ftdi_sio: fix line-status over-reporting USB: serial: spcp8x5: fix modem-status handling USB: serial: opticon: fix CTS retrieval at open USB: serial: ark3116: fix register-accessor error handling x86/platform/goldfish: Prevent unconditional loading goldfish: Sanitize the broken interrupt handler ocfs2: do not write error flag to user structure we cannot copy from/to mfd: pm8921: Potential NULL dereference in pm8921_remove() drm/nv50/disp: min/max are reversed in nv50_crtc_gamma_set() net: 6lowpan: fix lowpan_header_create non-compression memcpy call vti4: Don't count header length twice. net/sched: em_meta: Fix 'meta vlan' to correctly recognize zero VID frames MIPS: OCTEON: Fix copy_from_user fault handling for large buffers MIPS: Clear ISA bit correctly in get_frame_info() MIPS: Prevent unaligned accesses during stack unwinding MIPS: Fix get_frame_info() handling of microMIPS function size MIPS: Fix is_jump_ins() handling of 16b microMIPS instructions MIPS: Calculate microMIPS ra properly when unwinding the stack MIPS: Handle microMIPS jumps in the same way as MIPS32/MIPS64 jumps uvcvideo: Fix a wrong macro scsi: aacraid: Reorder Adapter status check ath9k: use correct OTP register offsets for the AR9340 and AR9550 fuse: add missing FR_FORCE RDMA/core: Fix incorrect structure packing for booleans NFSv4: fix getacl head length estimation s390/qdio: clear DSCI prior to scanning multiple input queues IB/ipoib: Fix deadlock between rmmod and set_mode ktest: Fix child exit code processing nlm: Ensure callback code also checks that the files match dm: flush queued bios when process blocks to avoid deadlock USB: serial: digi_acceleport: fix OOB data sanity check USB: serial: digi_acceleport: fix OOB-event processing MIPS: ip27: Disable qlge driver in defconfig tracing: Add #undef to fix compile error USB: serial: safe_serial: fix information leak in completion handler USB: serial: omninet: fix reference leaks at open USB: iowarrior: fix NULL-deref at probe USB: iowarrior: fix NULL-deref in write USB: serial: io_ti: fix NULL-deref in interrupt callback USB: serial: io_ti: fix information leak in completion handler vxlan: correctly validate VXLAN ID against VXLAN_N_VID ipv4: mask tos for input route locking/static_keys: Add static_key_{en,dis}able() helpers net: net_enable_timestamp() can be called from irq contexts dccp/tcp: fix routing redirect race net sched actions: decrement module reference count after table flush. perf/core: Fix event inheritance on fork() isdn/gigaset: fix NULL-deref at probe xen: do not re-use pirq number cached in pci device msi msg data net: properly release sk_frag.page net: unix: properly re-increment inflight counter of GC discarded candidates Input: ims-pcu - validate number of endpoints before using them Input: hanwang - validate number of endpoints before using them Input: yealink - validate number of endpoints before using them Input: cm109 - validate number of endpoints before using them USB: uss720: fix NULL-deref at probe USB: idmouse: fix NULL-deref at probe USB: wusbcore: fix NULL-deref at probe uwb: i1480-dfu: fix NULL-deref at probe uwb: hwa-rc: fix NULL-deref at probe mmc: ushc: fix NULL-deref at probe ext4: mark inode dirty after converting inline directory scsi: libsas: fix ata xfer length ALSA: ctxfi: Fallback DMA mask to 32bit ALSA: ctxfi: Fix the incorrect check of dma_set_mask() call ACPI / PNP: Avoid conflicting resource reservations ACPI / resources: free memory on error in add_region_before() ACPI / PNP: Reserve ACPI resources at the fs_initcall_sync stage USB: OHCI: Fix race between ED unlink and URB submission i2c: at91: manage unexpected RXRDY flag when starting a transfer ipv4: igmp: Allow removing groups from a removed interface ptrace: fix PTRACE_LISTEN race corrupting task->state ring-buffer: Fix return value check in test_ringbuffer() metag/usercopy: Fix alignment error checking metag/usercopy: Add early abort to copy_to_user metag/usercopy: Set flags before ADDZ metag/usercopy: Fix src fixup in from user rapf loops metag/usercopy: Add missing fixups s390/decompressor: fix initrd corruption caused by bss clear net/mlx4_en: Fix bad WQE issue net/mlx4_core: Fix racy CQ (Completion Queue) free char: Drop bogus dependency of DEVPORT on !M68K powerpc: Disable HFSCR[TM] if TM is not supported pegasus: Use heap buffers for all register access rtl8150: Use heap buffers for all register access tracing: Allocate the snapshot buffer before enabling probe ring-buffer: Have ring_buffer_iter_empty() return true when empty netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT" failed in 64bit kernel net: phy: handle state correctly in phy_stop_machine l2tp: take reference on sessions being dumped MIPS: KGDB: Use kernel context for sleeping threads ARM: dts: imx31: move CCM device node to AIPS2 bus devices ARM: dts: imx31: fix AVIC base address tun: Fix TUN_PKT_STRIP setting Staging: vt6655-6: potential NULL dereference in hostap_disable_hostapd() net: sctp: rework multihoming retransmission path selection to rfc4960 perf trace: Use the syscall raw_syscalls:sys_enter timestamp USB: usbtmc: add missing endpoint sanity check ping: implement proper locking USB: fix problems with duplicate endpoint addresses USB: dummy-hcd: fix bug in stop_activity (handle ep0) mm/init: fix zone boundary creation can: Fix kernel panic at security_sock_rcv_skb Drivers: hv: avoid vfree() on crash xc2028: avoid use after free xc2028: unlock on error in xc2028_set_config() xc2028: Fix use-after-free bug properly ipv6: fix ip6_tnl_parse_tlv_enc_lim() ipv6: pointer math error in ip6_tnl_parse_tlv_enc_lim() ipv6: fix the use of pcpu_tstats in ip6_tunnel sctp: avoid BUG_ON on sctp_wait_for_sndbuf sctp: deny peeloff operation on asocs with threads sleeping on it KVM: x86: clear bus pointer when destroyed kvm: exclude ioeventfd from counting kvm_io_range limit KVM: kvm_io_bus_unregister_dev() should never fail TTY: n_hdlc, fix lockdep false positive tty: n_hdlc: get rid of racy n_hdlc.tbuf ipv6: handle -EFAULT from skb_copy_bits fs: exec: apply CLOEXEC before changing dumpable task flags mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp dccp/tcp: do not inherit mc_list from parent char: lp: fix possible integer overflow in lp_setup() dccp: fix freeing skb too early for IPV6_RECVPKTINFO Linux 3.10.106 Signed-off-by: Nathan Chancellor <natechancellor@gmail.com> Conflicts: drivers/mfd/pm8921-core.c include/linux/cpu.h kernel/cpu.c net/ipv4/inet_connection_sock.c net/ipv4/ping.c |
||
---|---|---|
.. | ||
arm | ||
Kconfig | ||
assigned-dev.c | ||
async_pf.c | ||
async_pf.h | ||
coalesced_mmio.c | ||
coalesced_mmio.h | ||
eventfd.c | ||
ioapic.c | ||
ioapic.h | ||
iodev.h | ||
iommu.c | ||
irq_comm.c | ||
irqchip.c | ||
kvm_main.c |