{"push_id":1098530692,"size":5,"distinct_size":5,"ref":"refs/heads/master","head":"c5e0666c5a3ccabdf16bb88451886cdf81849b66","before":"21a9703de3045cda0b3aaa5bc193d2e1062908d2","commits":[{"sha":"d4f6e272f2600bc1295d195a52a9e8bb81656bc7","author":{"email":"ff341aa343d564f9e53e9dcb6996be8c04859a66@oracle.com","name":"Dan Carpenter"},"message":"firmware: qemu_fw_cfg.c: potential unintialized variable\n\nIt acpi_acquire_global_lock() return AE_NOT_CONFIGURED then \"glk\" isn't\ninitialized, which, if you got very unlucky, could cause a bug.\n\nSigned-off-by: Dan Carpenter <dan.carpenter@oracle.com>\nSigned-off-by: Michael S. Tsirkin <mst@redhat.com>","distinct":true,"url":"https://api.github.com/repos/moontide/linux/commits/d4f6e272f2600bc1295d195a52a9e8bb81656bc7"},{"sha":"e00f7bd221292b318d4d09c3f0c2c8af9b1e5edf","author":{"email":"ff341aa343d564f9e53e9dcb6996be8c04859a66@oracle.com","name":"Dan Carpenter"},"message":"virtio: Silence uninitialized variable warning\n\nSmatch complains that we might not initialize \"queue\".  The issue is\ncallers like setup_vq() from virtio_pci_modern.c where \"num\" could be\nsomething like 2 and \"vring_align\" is 64.  In that case, vring_size() is\nless than PAGE_SIZE.  It won't happen in real life, but we're getting\nthe value of \"num\" from a register so it's not really possible to tell\nwhat value it holds with static analysis.\n\nLet's just silence the warning.\n\nSigned-off-by: Dan Carpenter <dan.carpenter@oracle.com>\nSigned-off-by: Michael S. Tsirkin <mst@redhat.com>","distinct":true,"url":"https://api.github.com/repos/moontide/linux/commits/e00f7bd221292b318d4d09c3f0c2c8af9b1e5edf"},{"sha":"5ec0811d30378ae104f250bfc9b3640242d81e3f","author":{"email":"8a741aa8cbd77ebc4a56ddb528ce9fd15d42f034@xmission.com","name":"Eric W. Biederman"},"message":"propogate_mnt: Handle the first propogated copy being a slave\n\nWhen the first propgated copy was a slave the following oops would result:\n> BUG: unable to handle kernel NULL pointer dereference at 0000000000000010\n> IP: [<ffffffff811fba4e>] propagate_one+0xbe/0x1c0\n> PGD bacd4067 PUD bac66067 PMD 0\n> Oops: 0000 [#1] SMP\n> Modules linked in:\n> CPU: 1 PID: 824 Comm: mount Not tainted 4.6.0-rc5userns+ #1523\n> Hardware name: Bochs Bochs, BIOS Bochs 01/01/2007\n> task: ffff8800bb0a8000 ti: ffff8800bac3c000 task.ti: ffff8800bac3c000\n> RIP: 0010:[<ffffffff811fba4e>]  [<ffffffff811fba4e>] propagate_one+0xbe/0x1c0\n> RSP: 0018:ffff8800bac3fd38  EFLAGS: 00010283\n> RAX: 0000000000000000 RBX: ffff8800bb77ec00 RCX: 0000000000000010\n> RDX: 0000000000000000 RSI: ffff8800bb58c000 RDI: ffff8800bb58c480\n> RBP: ffff8800bac3fd48 R08: 0000000000000001 R09: 0000000000000000\n> R10: 0000000000001ca1 R11: 0000000000001c9d R12: 0000000000000000\n> R13: ffff8800ba713800 R14: ffff8800bac3fda0 R15: ffff8800bb77ec00\n> FS:  00007f3c0cd9b7e0(0000) GS:ffff8800bfb00000(0000) knlGS:0000000000000000\n> CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n> CR2: 0000000000000010 CR3: 00000000bb79d000 CR4: 00000000000006e0\n> Stack:\n>  ffff8800bb77ec00 0000000000000000 ffff8800bac3fd88 ffffffff811fbf85\n>  ffff8800bac3fd98 ffff8800bb77f080 ffff8800ba713800 ffff8800bb262b40\n>  0000000000000000 0000000000000000 ffff8800bac3fdd8 ffffffff811f1da0\n> Call Trace:\n>  [<ffffffff811fbf85>] propagate_mnt+0x105/0x140\n>  [<ffffffff811f1da0>] attach_recursive_mnt+0x120/0x1e0\n>  [<ffffffff811f1ec3>] graft_tree+0x63/0x70\n>  [<ffffffff811f1f6b>] do_add_mount+0x9b/0x100\n>  [<ffffffff811f2c1a>] do_mount+0x2aa/0xdf0\n>  [<ffffffff8117efbe>] ? strndup_user+0x4e/0x70\n>  [<ffffffff811f3a45>] SyS_mount+0x75/0xc0\n>  [<ffffffff8100242b>] do_syscall_64+0x4b/0xa0\n>  [<ffffffff81988f3c>] entry_SYSCALL64_slow_path+0x25/0x25\n> Code: 00 00 75 ec 48 89 0d 02 22 22 01 8b 89 10 01 00 00 48 89 05 fd 21 22 01 39 8e 10 01 00 00 0f 84 e0 00 00 00 48 8b 80 d8 00 00 00 <48> 8b 50 10 48 89 05 df 21 22 01 48 89 15 d0 21 22 01 8b 53 30\n> RIP  [<ffffffff811fba4e>] propagate_one+0xbe/0x1c0\n>  RSP <ffff8800bac3fd38>\n> CR2: 0000000000000010\n> ---[ end trace 2725ecd95164f217 ]---\n\nThis oops happens with the namespace_sem held and can be triggered by\nnon-root users.  An all around not pleasant experience.\n\nTo avoid this scenario when finding the appropriate source mount to\ncopy stop the walk up the mnt_master chain when the first source mount\nis encountered.\n\nFurther rewrite the walk up the last_source mnt_master chain so that\nit is clear what is going on.\n\nThe reason why the first source mount is special is that it it's\nmnt_parent is not a mount in the dest_mnt propagation tree, and as\nsuch termination conditions based up on the dest_mnt mount propgation\ntree do not make sense.\n\nTo avoid other kinds of confusion last_dest is not changed when\ncomputing last_source.  last_dest is only used once in propagate_one\nand that is above the point of the code being modified, so changing\nthe global variable is meaningless and confusing.\n\nCc: stable@vger.kernel.org\nfixes: f2ebb3a921c1ca1e2ddd9242e95a1989a50c4c68 (\"smarter propagate_mnt()\")\nReported-by: Tycho Andersen <tycho.andersen@canonical.com>\nReviewed-by: Seth Forshee <seth.forshee@canonical.com>\nTested-by: Seth Forshee <seth.forshee@canonical.com>\nSigned-off-by: \"Eric W. Biederman\" <ebiederm@xmission.com>","distinct":true,"url":"https://api.github.com/repos/moontide/linux/commits/5ec0811d30378ae104f250bfc9b3640242d81e3f"},{"sha":"3cedbec301015d8fb914e7e3af0fc0e034b87d34","author":{"email":"69652caca27c8b940640ad396ab71f93cacec34f@linux-foundation.org","name":"Linus Torvalds"},"message":"Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost\n\nPull virtio/qemu fixes from Michael Tsirkin:\n \"A couple of fixes for virtio and for the new QEMU fw cfg driver\"\n\n* tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost:\n  virtio: Silence uninitialized variable warning\n  firmware: qemu_fw_cfg.c: potential unintialized variable","distinct":true,"url":"https://api.github.com/repos/moontide/linux/commits/3cedbec301015d8fb914e7e3af0fc0e034b87d34"},{"sha":"c5e0666c5a3ccabdf16bb88451886cdf81849b66","author":{"email":"69652caca27c8b940640ad396ab71f93cacec34f@linux-foundation.org","name":"Linus Torvalds"},"message":"Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace\n\nPull userns fix from Eric Biederman:\n \"This contains just a single fix for a nasty oops\"\n\n* 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace:\n  propogate_mnt: Handle the first propogated copy being a slave","distinct":true,"url":"https://api.github.com/repos/moontide/linux/commits/c5e0666c5a3ccabdf16bb88451886cdf81849b66"}]}