{"push_id":1291928562,"size":47,"distinct_size":47,"ref":"refs/heads/master","head":"d0acc7dfd90eb97e90ccd42a567034017ec60fb8","before":"711bef65e91d2a06730bf8c64bb00ecab48815a1","commits":[{"sha":"02ba38a5b6d6e0bc89c7b74651f1873055028a56","author":{"name":"Russell King","email":"8640768d851c67eb4c0e8bfcf2aabcc8010b9372@armlinux.org.uk"},"message":"ARM: sa1100: fix 3.6864MHz clock\n\npxa_timer wants to be able to call clk_enable() etc on this clock,\nbut our clk_enable() implementation expects non-NULL enable/disable\noperations.  Provide these dummy implementations.\n\nUnable to handle kernel NULL pointer dereference at virtual address 00000000\npgd = c0204000\n[00000000] *pgd=00000000\nInternal error: Oops: 80000005 [#1] ARM\nModules linked in:\nCPU: 0 PID: 0 Comm: swapper Not tainted 4.8.0-rc2+ #887\nHardware name: Intel-Assabet\ntask: c0644590 task.stack: c0640000\nPC is at 0x0\nLR is at clk_enable+0x40/0x58\npc : [<00000000>]    lr : [<c021b178>]    psr: 600000d3\nsp : c0641f60  ip : c0641f4c  fp : c0641f74\nr10: c1ffc7a0  r9 : 6901b118  r8 : 00000001\nr7 : c0639a34  r6 : 0000001b  r5 : a00000d3  r4 : c0645d70\nr3 : c0645d78  r2 : 00000001  r1 : c0641ef0  r0 : c0645d70\nFlags: nZCv  IRQs off  FIQs off  Mode SVC_32  ISA ARM  Segment none\nControl: c020717f  Table: c020717f  DAC: 00000053\nProcess swapper (pid: 0, stack limit = 0xc0640188)\nStack: (0xc0641f60 to 0xc0642000)\n1f60: 00384000 c08762e4 c0641f98 c0641f78 c063308c c021b144 00000000 00000000\n1f80: 00000000 c0660b20 ffffffff c0641fa8 c0641f9c c06220ec c0633058 c0641fb8\n1fa0: c0641fac c061f114 c06220dc c0641ff4 c0641fbc c061bb68 c061f0fc ffffffff\n1fc0: ffffffff 00000000 c061b6cc c0639a34 c0660cd4 c0642038 c0639a30 c0645434\n1fe0: c0204000 c06380f8 00000000 c0641ff8 c0208048 c061b954 00000000 00000000\nBacktrace:\n[<c021b138>] (clk_enable) from [<c063308c>] (pxa_timer_nodt_init+0x40/0x120)\n r5:c08762e4 r4:00384000\n[<c063304c>] (pxa_timer_nodt_init) from [<c06220ec>] (sa1100_timer_init+0x1c/0x20)\n r6:ffffffff r5:c0660b20 r4:00000000\n[<c06220d0>] (sa1100_timer_init) from [<c061f114>] (time_init+0x24/0x2c)\n[<c061f0f0>] (time_init) from [<c061bb68>] (start_kernel+0x220/0x42c)\n[<c061b948>] (start_kernel) from [<c0208048>] (0xc0208048)\n r10:c06380f8 r8:c0204000 r7:c0645434 r6:c0639a30 r5:c0642038 r4:c0660cd4\nCode: bad PC value\n---[ end trace 0000000000000000 ]---\nKernel panic - not syncing: Attempted to kill the idle task!\n\nFixes: ee3a4020f7c9 (\"ARM: 8250/1: sa1100: provide OSTIMER0 clock for pxa_timer\")\nAcked-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>\nSigned-off-by: Russell King <rmk+kernel@armlinux.org.uk>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/02ba38a5b6d6e0bc89c7b74651f1873055028a56"},{"sha":"198b51e8a6a31d3a6f8e9dd9cade3635d0291f26","author":{"name":"Russell King","email":"8640768d851c67eb4c0e8bfcf2aabcc8010b9372@armlinux.org.uk"},"message":"ARM: sa1100: register clocks early\n\nSince we switched to use pxa_timer, we need to provide the OSTIMER0\nclock.  However, as the clock is initialised early, we need to provide\nthe clock early as well, so that pxa_timer can find it.  Adding the\nclock to the clkdev table at core_initcall() time is way too late.\n\nMove the initialisation earlier.\n\nFixes: ee3a4020f7c9 (\"ARM: 8250/1: sa1100: provide OSTIMER0 clock for pxa_timer\")\nAcked-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>\nSigned-off-by: Russell King <rmk+kernel@armlinux.org.uk>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/198b51e8a6a31d3a6f8e9dd9cade3635d0291f26"},{"sha":"f271b779f415455e904f3f10067ab7f2fb8af497","author":{"name":"Vladimir Murzin","email":"d238da7533c76cfba8ad7a15752031e962fc43c9@arm.com"},"message":"ARM: 8599/1: mm: pull asm/memory.h explicitly\n\nCommit d78114554939a (\"\"ARM: 8512/1: proc-v7.S: Adjust stack address when\nXIP_KERNEL\"\") introduced a macro which lives under asm/memory.h.\nUnfortunately, for MMU-less systems (like R-class) it leads to build failure:\n\narch/arm/mm/proc-v7.S: Assembler messages:\narch/arm/mm/proc-v7.S:538: Error: unrecognised relocation suffix\nmake[1]: *** [arch/arm/mm/proc-v7.o] Error 1\nmake: *** [arch/arm/mm] Error 2\n\nsince it is implicitly pulled via asm/pgtable.h for MMU capable systems only.\n\nTo fix it include asm/memory.h explicitly.\n\nSigned-off-by: Vladimir Murzin <vladimir.murzin@arm.com>\nSigned-off-by: Russell King <rmk+kernel@arm.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/f271b779f415455e904f3f10067ab7f2fb8af497"},{"sha":"1527eda3ab290f4ab519fe495c70ede5b0ad699f","author":{"name":"Robin Murphy","email":"74ee054f2911f160e9f54bee1a41a27f813ebb5a@arm.com"},"message":"ARM: 8600/1: Enforce some NS-SVC initialisation\n\nSince the non-secure copies of banked registers lack architecturally\ndefined reset values, there is no actual guarantee when entering in Hyp\nfrom secure-only firmware that the Non-Secure PL1 state will look the\nway that kernel entry (in particular the decompressor stub) expects.\nSo far, we've been getting away with it thanks to implementation details\nof ARMv7 cores and/or bootloader behaviour, but for the sake of forwards\ncompatibility let's try to ensure that we have a minimally sane state\nbefore dropping down into it.\n\nCc: Russell King <linux@armlinux.org.uk>\nReviewed-by: Marc Zyngier <marc.zyngier@arm.com>\nReviewed-by: Christoffer Dall <christoffer.dall@linaro.org>\nSigned-off-by: Robin Murphy <robin.murphy@arm.com>\nSigned-off-by: Russell King <rmk+kernel@arm.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/1527eda3ab290f4ab519fe495c70ede5b0ad699f"},{"sha":"8fba54aebbdf1f999738121922e74bf796ad60ee","author":{"name":"Miklos Szeredi","email":"c27ee2952768e22f4d3ab9aec0e78ac5f4ddea98@redhat.com"},"message":"fuse: direct-io: don't dirty ITER_BVEC pages\n\nWhen reading from a loop device backed by a fuse file it deadlocks on\nlock_page().\n\nThis is because the page is already locked by the read() operation done on\nthe loop device.  In this case we don't want to either lock the page or\ndirty it.\n\nSo do what fs/direct-io.c does: only dirty the page for ITER_IOVEC vectors.\n\nReported-by: Sheng Yang <sheng@yasker.org>\nFixes: aa4d86163e4e (\"block: loop: switch to VFS ITER_BVEC\")\nSigned-off-by: Miklos Szeredi <mszeredi@redhat.com>\nCc: <stable@vger.kernel.org> # v4.1+\nReviewed-by: Sheng Yang <sheng@yasker.org>\nReviewed-by: Ashish Samant <ashish.samant@oracle.com>\nTested-by: Sheng Yang <sheng@yasker.org>\nTested-by: Ashish Samant <ashish.samant@oracle.com>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/8fba54aebbdf1f999738121922e74bf796ad60ee"},{"sha":"da60626e7d02a4f385cae80e450afc8b07035368","author":{"name":"Russell King","email":"8640768d851c67eb4c0e8bfcf2aabcc8010b9372@armlinux.org.uk"},"message":"ARM: sa1100: clear reset status prior to reboot\n\nClear the current reset status prior to rebooting the platform.  This\nadds the bit missing from 04fef228fb00 (\"[ARM] pxa: introduce\nreset_status and clear_reset_status for driver's usage\").\n\nFixes: 04fef228fb00 (\"[ARM] pxa: introduce reset_status and clear_reset_status for driver's usage\")\nSigned-off-by: Russell King <rmk+kernel@armlinux.org.uk>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/da60626e7d02a4f385cae80e450afc8b07035368"},{"sha":"6b760bb2c63a9e322c0e4a0b5daf335ad93d5a33","author":{"name":"Vegard Nossum","email":"9c44e0ed746b5c309b0bf31e4bae8fb5eb72beb1@oracle.com"},"message":"ALSA: timer: fix division by zero after SNDRV_TIMER_IOCTL_CONTINUE\n\nI got this:\n\n    divide error: 0000 [#1] PREEMPT SMP KASAN\n    CPU: 1 PID: 1327 Comm: a.out Not tainted 4.8.0-rc2+ #189\n    Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.9.3-0-ge2fc41e-prebuilt.qemu-project.org 04/01/2014\n    task: ffff8801120a9580 task.stack: ffff8801120b0000\n    RIP: 0010:[<ffffffff82c8bd9a>]  [<ffffffff82c8bd9a>] snd_hrtimer_callback+0x1da/0x3f0\n    RSP: 0018:ffff88011aa87da8  EFLAGS: 00010006\n    RAX: 0000000000004f76 RBX: ffff880112655e88 RCX: 0000000000000000\n    RDX: 0000000000000000 RSI: ffff880112655ea0 RDI: 0000000000000001\n    RBP: ffff88011aa87e00 R08: ffff88013fff905c R09: ffff88013fff9048\n    R10: ffff88013fff9050 R11: 00000001050a7b8c R12: ffff880114778a00\n    R13: ffff880114778ab4 R14: ffff880114778b30 R15: 0000000000000000\n    FS:  00007f071647c700(0000) GS:ffff88011aa80000(0000) knlGS:0000000000000000\n    CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n    CR2: 0000000000603001 CR3: 0000000112021000 CR4: 00000000000006e0\n    Stack:\n     0000000000000000 ffff880114778ab8 ffff880112655ea0 0000000000004f76\n     ffff880112655ec8 ffff880112655e80 ffff880112655e88 ffff88011aa98fc0\n     00000000b97ccf2b dffffc0000000000 ffff88011aa98fc0 ffff88011aa87ef0\n    Call Trace:\n     <IRQ>\n     [<ffffffff813abce7>] __hrtimer_run_queues+0x347/0xa00\n     [<ffffffff82c8bbc0>] ? snd_hrtimer_close+0x130/0x130\n     [<ffffffff813ab9a0>] ? retrigger_next_event+0x1b0/0x1b0\n     [<ffffffff813ae1a6>] ? hrtimer_interrupt+0x136/0x4b0\n     [<ffffffff813ae220>] hrtimer_interrupt+0x1b0/0x4b0\n     [<ffffffff8120f91e>] local_apic_timer_interrupt+0x6e/0xf0\n     [<ffffffff81227ad3>] ? kvm_guest_apic_eoi_write+0x13/0xc0\n     [<ffffffff83c35086>] smp_apic_timer_interrupt+0x76/0xa0\n     [<ffffffff83c3416c>] apic_timer_interrupt+0x8c/0xa0\n     <EOI>\n     [<ffffffff83c3239c>] ? _raw_spin_unlock_irqrestore+0x2c/0x60\n     [<ffffffff82c8185d>] snd_timer_start1+0xdd/0x670\n     [<ffffffff82c87015>] snd_timer_continue+0x45/0x80\n     [<ffffffff82c88100>] snd_timer_user_ioctl+0x1030/0x2830\n     [<ffffffff8159f3a0>] ? __follow_pte.isra.49+0x430/0x430\n     [<ffffffff82c870d0>] ? snd_timer_pause+0x80/0x80\n     [<ffffffff815a26fa>] ? do_wp_page+0x3aa/0x1c90\n     [<ffffffff815aa4f8>] ? handle_mm_fault+0xbc8/0x27f0\n     [<ffffffff815a9930>] ? __pmd_alloc+0x370/0x370\n     [<ffffffff82c870d0>] ? snd_timer_pause+0x80/0x80\n     [<ffffffff816b0733>] do_vfs_ioctl+0x193/0x1050\n     [<ffffffff816b05a0>] ? ioctl_preallocate+0x200/0x200\n     [<ffffffff81002f2f>] ? syscall_trace_enter+0x3cf/0xdb0\n     [<ffffffff815045ba>] ? __context_tracking_exit.part.4+0x9a/0x1e0\n     [<ffffffff81002b60>] ? exit_to_usermode_loop+0x190/0x190\n     [<ffffffff82001a97>] ? check_preemption_disabled+0x37/0x1e0\n     [<ffffffff81d93889>] ? security_file_ioctl+0x89/0xb0\n     [<ffffffff816b167f>] SyS_ioctl+0x8f/0xc0\n     [<ffffffff816b15f0>] ? do_vfs_ioctl+0x1050/0x1050\n     [<ffffffff81005524>] do_syscall_64+0x1c4/0x4e0\n     [<ffffffff83c32b2a>] entry_SYSCALL64_slow_path+0x25/0x25\n    Code: e8 fc 42 7b fe 8b 0d 06 8a 50 03 49 0f af cf 48 85 c9 0f 88 7c 01 00 00 48 89 4d a8 e8 e0 42 7b fe 48 8b 45 c0 48 8b 4d a8 48 99 <48> f7 f9 49 01 c7 e8 cb 42 7b fe 48 8b 55 d0 48 b8 00 00 00 00\n    RIP  [<ffffffff82c8bd9a>] snd_hrtimer_callback+0x1da/0x3f0\n     RSP <ffff88011aa87da8>\n    ---[ end trace 6aa380f756a21074 ]---\n\nThe problem happens when you call ioctl(SNDRV_TIMER_IOCTL_CONTINUE) on a\ncompletely new/unused timer -- it will have ->sticks == 0, which causes a\ndivide by 0 in snd_hrtimer_callback().\n\nSigned-off-by: Vegard Nossum <vegard.nossum@oracle.com>\nCc: <stable@vger.kernel.org>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/6b760bb2c63a9e322c0e4a0b5daf335ad93d5a33"},{"sha":"8ddc05638ee42b18ba4fe99b5fb647fa3ad20456","author":{"name":"Vegard Nossum","email":"9c44e0ed746b5c309b0bf31e4bae8fb5eb72beb1@oracle.com"},"message":"ALSA: timer: fix NULL pointer dereference on memory allocation failure\n\nI hit this with syzkaller:\n\n    kasan: CONFIG_KASAN_INLINE enabled\n    kasan: GPF could be caused by NULL-ptr deref or user memory access\n    general protection fault: 0000 [#1] PREEMPT SMP KASAN\n    CPU: 0 PID: 1327 Comm: a.out Not tainted 4.8.0-rc2+ #190\n    Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.9.3-0-ge2fc41e-prebuilt.qemu-project.org 04/01/2014\n    task: ffff88011278d600 task.stack: ffff8801120c0000\n    RIP: 0010:[<ffffffff82c8ba07>]  [<ffffffff82c8ba07>] snd_hrtimer_start+0x77/0x100\n    RSP: 0018:ffff8801120c7a60  EFLAGS: 00010006\n    RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000007\n    RDX: 0000000000000009 RSI: 1ffff10023483091 RDI: 0000000000000048\n    RBP: ffff8801120c7a78 R08: ffff88011a5cf768 R09: ffff88011a5ba790\n    R10: 0000000000000002 R11: ffffed00234b9ef1 R12: ffff880114843980\n    R13: ffffffff84213c00 R14: ffff880114843ab0 R15: 0000000000000286\n    FS:  00007f72958f3700(0000) GS:ffff88011aa00000(0000) knlGS:0000000000000000\n    CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n    CR2: 0000000000603001 CR3: 00000001126ab000 CR4: 00000000000006f0\n    Stack:\n     ffff880114843980 ffff880111eb2dc0 ffff880114843a34 ffff8801120c7ad0\n     ffffffff82c81ab1 0000000000000000 ffffffff842138e0 0000000100000000\n     ffff880111eb2dd0 ffff880111eb2dc0 0000000000000001 ffff880111eb2dc0\n    Call Trace:\n     [<ffffffff82c81ab1>] snd_timer_start1+0x331/0x670\n     [<ffffffff82c85bfd>] snd_timer_start+0x5d/0xa0\n     [<ffffffff82c8795e>] snd_timer_user_ioctl+0x88e/0x2830\n     [<ffffffff8159f3a0>] ? __follow_pte.isra.49+0x430/0x430\n     [<ffffffff82c870d0>] ? snd_timer_pause+0x80/0x80\n     [<ffffffff815a26fa>] ? do_wp_page+0x3aa/0x1c90\n     [<ffffffff8132762f>] ? put_prev_entity+0x108f/0x21a0\n     [<ffffffff82c870d0>] ? snd_timer_pause+0x80/0x80\n     [<ffffffff816b0733>] do_vfs_ioctl+0x193/0x1050\n     [<ffffffff813510af>] ? cpuacct_account_field+0x12f/0x1a0\n     [<ffffffff816b05a0>] ? ioctl_preallocate+0x200/0x200\n     [<ffffffff81002f2f>] ? syscall_trace_enter+0x3cf/0xdb0\n     [<ffffffff815045ba>] ? __context_tracking_exit.part.4+0x9a/0x1e0\n     [<ffffffff81002b60>] ? exit_to_usermode_loop+0x190/0x190\n     [<ffffffff82001a97>] ? check_preemption_disabled+0x37/0x1e0\n     [<ffffffff81d93889>] ? security_file_ioctl+0x89/0xb0\n     [<ffffffff816b167f>] SyS_ioctl+0x8f/0xc0\n     [<ffffffff816b15f0>] ? do_vfs_ioctl+0x1050/0x1050\n     [<ffffffff81005524>] do_syscall_64+0x1c4/0x4e0\n     [<ffffffff83c32b2a>] entry_SYSCALL64_slow_path+0x25/0x25\n    Code: c7 c7 c4 b9 c8 82 48 89 d9 4c 89 ee e8 63 88 7f fe e8 7e 46 7b fe 48 8d 7b 48 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 84 c0 7e 65 80 7b 48 00 74 0e e8 52 46\n    RIP  [<ffffffff82c8ba07>] snd_hrtimer_start+0x77/0x100\n     RSP <ffff8801120c7a60>\n    ---[ end trace 5955b08db7f2b029 ]---\n\nThis can happen if snd_hrtimer_open() fails to allocate memory and\nreturns an error, which is currently not checked by snd_timer_open():\n\n    ioctl(SNDRV_TIMER_IOCTL_SELECT)\n     - snd_timer_user_tselect()\n\t- snd_timer_close()\n\t   - snd_hrtimer_close()\n\t      - (struct snd_timer *) t->private_data = NULL\n        - snd_timer_open()\n           - snd_hrtimer_open()\n              - kzalloc() fails; t->private_data is still NULL\n\n    ioctl(SNDRV_TIMER_IOCTL_START)\n     - snd_timer_user_start()\n\t- snd_timer_start()\n\t   - snd_timer_start1()\n\t      - snd_hrtimer_start()\n\t\t- t->private_data == NULL // boom\n\nSigned-off-by: Vegard Nossum <vegard.nossum@oracle.com>\nCc: <stable@vger.kernel.org>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/8ddc05638ee42b18ba4fe99b5fb647fa3ad20456"},{"sha":"83d9956b7e6b310c1062df7894257251c625b22e","author":{"name":"Ken Lin","email":"6210ca49aa7597016c32c42a46763a794379bb1b@advantech.com.tw"},"message":"ALSA: usb-audio: Add sample rate inquiry quirk for B850V3 CP2114\n\nAvoid getting sample rate on B850V3 CP2114 as it is unsupported and\ncauses noisy \"current rate is different from the runtime rate\" messages\nwhen playback starts.\n\nSigned-off-by: Ken Lin <ken.lin@advantech.com.tw>\nSigned-off-by: Akshay Bhat <akshay.bhat@timesys.com>\nCc: <stable@vger.kernel.org>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/83d9956b7e6b310c1062df7894257251c625b22e"},{"sha":"311042d1b67d9a1856a8e1294e7729fb86f64014","author":{"name":"Shrirang Bagul","email":"9c3deed621ea4a0951a9a8029614c0d0a4f2540a@canonical.com"},"message":"ALSA: hda - Add headset mic quirk for Dell Inspiron 5468\n\nThis patch enables headset microphone on some variants of\nDell Inspiron 5468. (Dell SSID 0x07ad)\n\nBugLink: https://bugs.launchpad.net/bugs/1617900\nSigned-off-by: Shrirang Bagul <shrirang.bagul@canonical.com>\nCc: <stable@vger.kernel.org>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/311042d1b67d9a1856a8e1294e7729fb86f64014"},{"sha":"fd06c77eb9200b53d421da5fffe0dcd894b5d72a","author":{"name":"Kai-Heng Feng","email":"49d050d7a2ceecc3a608b6160348d55167459976@canonical.com"},"message":"ALSA: hda - Enable subwoofer on Dell Inspiron 7559\n\nThe subwoofer on Inspiron 7559 was disabled originally.\nApplying a pin fixup to node 0x1b can enable it and make it work.\n\nOld pin: 0x411111f0\nNew pin: 0x90170151\n\nSigned-off-by: Kai-Heng Feng <kai.heng.feng@canonical.com>\nCc: <stable@vger.kernel.org>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/fd06c77eb9200b53d421da5fffe0dcd894b5d72a"},{"sha":"04b2d9c9c319277ad4fbbb71855c256a9f4d5f98","author":{"name":"Takashi Sakamoto","email":"df5cd14c20ca9e9623cd2ae7eba41070ac8353e1@sakamocchi.jp"},"message":"ALSA: firewire-tascam: accessing to user space outside spinlock\n\nIn hwdep interface of firewire-tascam driver, accessing to user space is\nin a critical section with disabled local interrupt. Depending on\narchitecture, accessing to user space can cause page fault exception. Then\nlocal processor stores machine status and handle the synchronous event. A\nhandler corresponding to the event can call task scheduler to wait for\npreparing pages. In a case of usage of single core processor, the state to\ndisable local interrupt is worse because it doesn't handle usual interrupts\nfrom hardware.\n\nThis commit fixes this bug, by performing the accessing outside spinlock.\n\nReported-by: Vaishali Thakkar <vaishali.thakkar@oracle.com>\nCc: stable@vger.kernel.org\nFixes: e5e0c3dd257b('ALSA: firewire-tascam: add hwdep interface')\nSigned-off-by: Takashi Sakamoto <o-takashi@sakamocchi.jp>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/04b2d9c9c319277ad4fbbb71855c256a9f4d5f98"},{"sha":"6b1ca4bcadf9ef077cc5f03c6822ba276ed14902","author":{"name":"Takashi Sakamoto","email":"df5cd14c20ca9e9623cd2ae7eba41070ac8353e1@sakamocchi.jp"},"message":"ALSA: fireworks: accessing to user space outside spinlock\n\nIn hwdep interface of fireworks driver, accessing to user space is in a\ncritical section with disabled local interrupt. Depending on architecture,\naccessing to user space can cause page fault exception. Then local\nprocessor stores machine status and handles the synchronous event. A\nhandler corresponding to the event can call task scheduler to wait for\npreparing pages. In a case of usage of single core processor, the state to\ndisable local interrupt is worse because it don't handle usual interrupts\nfrom hardware.\n\nThis commit fixes this bug, performing the accessing outside spinlock. This\ncommit also gives up counting the number of queued response messages to\nsimplify ring-buffer management.\n\nReported-by: Vaishali Thakkar <vaishali.thakkar@oracle.com>\nCc: stable@vger.kernel.org\nFixes: 555e8a8f7f14('ALSA: fireworks: Add command/response functionality into hwdep interface')\nSigned-off-by: Takashi Sakamoto <o-takashi@sakamocchi.jp>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/6b1ca4bcadf9ef077cc5f03c6822ba276ed14902"},{"sha":"11749e086b2766cccf6217a527ef5c5604ba069c","author":{"name":"Vegard Nossum","email":"9c44e0ed746b5c309b0bf31e4bae8fb5eb72beb1@oracle.com"},"message":"ALSA: timer: fix NULL pointer dereference in read()/ioctl() race\n\nI got this with syzkaller:\n\n    ==================================================================\n    BUG: KASAN: null-ptr-deref on address 0000000000000020\n    Read of size 32 by task syz-executor/22519\n    CPU: 1 PID: 22519 Comm: syz-executor Not tainted 4.8.0-rc2+ #169\n    Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.9.3-0-ge2fc41e-prebuilt.qemu-project.org 04/01/2\n    014\n     0000000000000001 ffff880111a17a00 ffffffff81f9f141 ffff880111a17a90\n     ffff880111a17c50 ffff880114584a58 ffff880114584a10 ffff880111a17a80\n     ffffffff8161fe3f ffff880100000000 ffff880118d74a48 ffff880118d74a68\n    Call Trace:\n     [<ffffffff81f9f141>] dump_stack+0x83/0xb2\n     [<ffffffff8161fe3f>] kasan_report_error+0x41f/0x4c0\n     [<ffffffff8161ff74>] kasan_report+0x34/0x40\n     [<ffffffff82c84b54>] ? snd_timer_user_read+0x554/0x790\n     [<ffffffff8161e79e>] check_memory_region+0x13e/0x1a0\n     [<ffffffff8161e9c1>] kasan_check_read+0x11/0x20\n     [<ffffffff82c84b54>] snd_timer_user_read+0x554/0x790\n     [<ffffffff82c84600>] ? snd_timer_user_info_compat.isra.5+0x2b0/0x2b0\n     [<ffffffff817d0831>] ? proc_fault_inject_write+0x1c1/0x250\n     [<ffffffff817d0670>] ? next_tgid+0x2a0/0x2a0\n     [<ffffffff8127c278>] ? do_group_exit+0x108/0x330\n     [<ffffffff8174653a>] ? fsnotify+0x72a/0xca0\n     [<ffffffff81674dfe>] __vfs_read+0x10e/0x550\n     [<ffffffff82c84600>] ? snd_timer_user_info_compat.isra.5+0x2b0/0x2b0\n     [<ffffffff81674cf0>] ? do_sendfile+0xc50/0xc50\n     [<ffffffff81745e10>] ? __fsnotify_update_child_dentry_flags+0x60/0x60\n     [<ffffffff8143fec6>] ? kcov_ioctl+0x56/0x190\n     [<ffffffff81e5ada2>] ? common_file_perm+0x2e2/0x380\n     [<ffffffff81746b0e>] ? __fsnotify_parent+0x5e/0x2b0\n     [<ffffffff81d93536>] ? security_file_permission+0x86/0x1e0\n     [<ffffffff816728f5>] ? rw_verify_area+0xe5/0x2b0\n     [<ffffffff81675355>] vfs_read+0x115/0x330\n     [<ffffffff81676371>] SyS_read+0xd1/0x1a0\n     [<ffffffff816762a0>] ? vfs_write+0x4b0/0x4b0\n     [<ffffffff82001c2c>] ? __this_cpu_preempt_check+0x1c/0x20\n     [<ffffffff8150455a>] ? __context_tracking_exit.part.4+0x3a/0x1e0\n     [<ffffffff816762a0>] ? vfs_write+0x4b0/0x4b0\n     [<ffffffff81005524>] do_syscall_64+0x1c4/0x4e0\n     [<ffffffff810052fc>] ? syscall_return_slowpath+0x16c/0x1d0\n     [<ffffffff83c3276a>] entry_SYSCALL64_slow_path+0x25/0x25\n    ==================================================================\n\nThere are a couple of problems that I can see:\n\n - ioctl(SNDRV_TIMER_IOCTL_SELECT), which potentially sets\n   tu->queue/tu->tqueue to NULL on memory allocation failure, so read()\n   would get a NULL pointer dereference like the above splat\n\n - the same ioctl() can free tu->queue/to->tqueue which means read()\n   could potentially see (and dereference) the freed pointer\n\nWe can fix both by taking the ioctl_lock mutex when dereferencing\n->queue/->tqueue, since that's always held over all the ioctl() code.\n\nJust looking at the code I find it likely that there are more problems\nhere such as tu->qhead pointing outside the buffer if the size is\nchanged concurrently using SNDRV_TIMER_IOCTL_PARAMS.\n\nSigned-off-by: Vegard Nossum <vegard.nossum@oracle.com>\nCc: <stable@vger.kernel.org>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/11749e086b2766cccf6217a527ef5c5604ba069c"},{"sha":"e1ff3dd1ae52cef5b5373c8cc4ad949c2c25a71c","author":{"name":"Miklos Szeredi","email":"c27ee2952768e22f4d3ab9aec0e78ac5f4ddea98@redhat.com"},"message":"ovl: fix workdir creation\n\nWorkdir creation fails in latest kernel.\n\nFix by allowing EOPNOTSUPP as a valid return value from\nvfs_removexattr(XATTR_NAME_POSIX_ACL_*).  Upper filesystem may not support\nACL and still be perfectly able to support overlayfs.\n\nReported-by: Martin Ziegler <ziegler@uni-freiburg.de>\nSigned-off-by: Miklos Szeredi <mszeredi@redhat.com>\nFixes: c11b9fdd6a61 (\"ovl: remove posix_acl_default from workdir\")\nCc: <stable@vger.kernel.org>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/e1ff3dd1ae52cef5b5373c8cc4ad949c2c25a71c"},{"sha":"c86d06ba2818c5126078cb0cf4e0175ec381045b","author":{"name":"Tejun Heo","email":"e1d87360d7f4d7b7ebaddc11b54e50a559aaba57@kernel.org"},"message":"PM / QoS: avoid calling cancel_delayed_work_sync() during early boot\n\nof_clk_init() ends up calling into pm_qos_update_request() very early\nduring boot where irq is expected to stay disabled.\npm_qos_update_request() uses cancel_delayed_work_sync() which\ncorrectly assumes that irq is enabled on invocation and\nunconditionally disables and re-enables it.\n\nGate cancel_delayed_work_sync() invocation with kevented_up() to avoid\nenabling irq unexpectedly during early boot.\n\nSigned-off-by: Tejun Heo <tj@kernel.org>\nReported-and-tested-by: Qiao Zhou <qiaozhou@asrmicro.com>\nLink: http://lkml.kernel.org/r/d2501c4c-8e7b-bea3-1b01-000b36b5dfe9@asrmicro.com\nSigned-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/c86d06ba2818c5126078cb0cf4e0175ec381045b"},{"sha":"ed7a6948394305b810d0c6203268648715e5006f","author":{"name":"Wang Xiaoguang","email":"1eabe160327d2e4b22d174074e183aa7855bfff1@cn.fujitsu.com"},"message":"btrfs: do not decrease bytes_may_use when replaying extents\n\nWhen replaying extents, there is no need to update bytes_may_use\nin btrfs_alloc_logged_file_extent(), otherwise it'll trigger a\nWARN_ON about bytes_may_use.\n\nFixes: (\"btrfs: update btrfs_space_info's bytes_may_use timely\")\nSigned-off-by: Wang Xiaoguang <wangxg.fnst@cn.fujitsu.com>\nReviewed-by: Josef Bacik <jbacik@fb.com>\nSigned-off-by: David Sterba <dsterba@suse.com>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/ed7a6948394305b810d0c6203268648715e5006f"},{"sha":"d81d8258218228d3137055afe8acf981c3ebed46","author":{"name":"Thiago Jung Bauermann","email":"d0df6085a5964d5522651aade9112cbd17dd5a08@linux.vnet.ibm.com"},"message":"powerpc/pseries: Fix little endian build with CONFIG_KEXEC=n\n\nOn ppc64le, builds with CONFIG_KEXEC=n fail with:\n\narch/powerpc/platforms/pseries/setup.c: In function ‘pseries_big_endian_exceptions’:\narch/powerpc/platforms/pseries/setup.c:403:13: error: implicit declaration of function ‘kdump_in_progress’\n  if (rc && !kdump_in_progress())\n\nThis is because pseries/setup.c includes <linux/kexec.h>, but\nkdump_in_progress() is defined in <asm/kexec.h>. This is a problem\nbecause the former only includes the latter if CONFIG_KEXEC_CORE=y.\n\nFix it by including <asm/kexec.h> directly, as is done in powernv/setup.c.\n\nFixes: d3cbff1b5a90 (\"powerpc: Put exception configuration in a common place\")\nSigned-off-by: Thiago Jung Bauermann <bauerman@linux.vnet.ibm.com>\nSigned-off-by: Michael Ellerman <mpe@ellerman.id.au>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/d81d8258218228d3137055afe8acf981c3ebed46"},{"sha":"f8e33475b0da98c4bffc91017a3fbbfb443a7bdb","author":{"name":"Benjamin Herrenschmidt","email":"58942ee662d0fe5d44043b40ceefc845bad5a84d@kernel.crashing.org"},"message":"powerpc/xics/opal: Fix processor numbers in OPAL ICP\n\nWhen using the OPAL ICP backend we incorrectly pass Linux CPU numbers\nrather than HW CPU numbers to OPAL.\n\nFixes: d74361881f0d (\"powerpc/xics: Add ICP OPAL backend\")\nSigned-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>\nSigned-off-by: Michael Ellerman <mpe@ellerman.id.au>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/f8e33475b0da98c4bffc91017a3fbbfb443a7bdb"},{"sha":"b314427a52fd8daa1215d30e56de01e32edec531","author":{"name":"Gavin Shan","email":"bb32b15705e6e40930aad50252d4e3af8ca61d1b@linux.vnet.ibm.com"},"message":"powerpc/powernv: Fix crash on releasing compound PE\n\nThe compound PE is created to accommodate the devices attached to\none specific PCI bus that consume multiple M64 segments. The compound\nPE is made up of one master PE and possibly multiple slave PEs. The\nslave PEs should be destroyed when releasing the master PE. A kernel\ncrash happens when derferencing @pe->pdev on releasing the slave PE\nin pnv_ioda_deconfigure_pe().\n\n  # echo 0 > /sys/bus/pci/slots/C7/power\n  iommu: Removing device 0000:01:00.1 from group 0\n  iommu: Removing device 0000:01:00.0 from group 0\n  Unable to handle kernel paging request for data at address 0x00000010\n  Faulting instruction address: 0xc00000000005d898\n  cpu 0x1: Vector: 300 (Data Access) at [c000000fe8217620]\n      pc: c00000000005d898: pnv_ioda_release_pe+0x288/0x610\n      lr: c00000000005dbdc: pnv_ioda_release_pe+0x5cc/0x610\n      sp: c000000fe82178a0\n     msr: 9000000000009033\n     dar: 10\n   dsisr: 40000000\n    current = 0xc000000fe815ab80\n    paca    = 0xc00000000ff00400\t softe: 0\t irq_happened: 0x01\n      pid   = 2709, comm = sh\n  Linux version 4.8.0-rc5-gavin-00006-g745efdb (gwshan@gwshan) \\\n  (gcc version 4.9.3 (Buildroot 2016.02-rc2-00093-g5ea3bce) ) #586 SMP \\\n  Tue Sep 6 13:37:29 AEST 2016\n  enter ? for help\n  [c000000fe8217940] c00000000005d684 pnv_ioda_release_pe+0x74/0x610\n  [c000000fe82179e0] c000000000034460 pcibios_release_device+0x50/0x70\n  [c000000fe8217a10] c0000000004aba80 pci_release_dev+0x50/0xa0\n  [c000000fe8217a40] c000000000704898 device_release+0x58/0xf0\n  [c000000fe8217ac0] c000000000470510 kobject_release+0x80/0xf0\n  [c000000fe8217b00] c000000000704dd4 put_device+0x24/0x40\n  [c000000fe8217b20] c0000000004af94c pci_remove_bus_device+0x12c/0x150\n  [c000000fe8217b60] c000000000034244 pci_hp_remove_devices+0x94/0xd0\n  [c000000fe8217ba0] c0000000004ca444 pnv_php_disable_slot+0x64/0xb0\n  [c000000fe8217bd0] c0000000004c88c0 power_write_file+0xa0/0x190\n  [c000000fe8217c50] c0000000004c248c pci_slot_attr_store+0x3c/0x60\n  [c000000fe8217c70] c0000000002d6494 sysfs_kf_write+0x94/0xc0\n  [c000000fe8217cb0] c0000000002d50f0 kernfs_fop_write+0x180/0x260\n  [c000000fe8217d00] c0000000002334a0 __vfs_write+0x40/0x190\n  [c000000fe8217d90] c000000000234738 vfs_write+0xc8/0x240\n  [c000000fe8217de0] c000000000236250 SyS_write+0x60/0x110\n  [c000000fe8217e30] c000000000009524 system_call+0x38/0x108\n\nIt fixes the kernel crash by bypassing releasing resources (DMA,\nIO and memory segments, PELTM) because there are no resources assigned\nto the slave PE.\n\nFixes: c5f7700bbd2e (\"powerpc/powernv: Dynamically release PE\")\nReported-by: Frederic Barrat <fbarrat@linux.vnet.ibm.com>\nSigned-off-by: Gavin Shan <gwshan@linux.vnet.ibm.com>\nSigned-off-by: Michael Ellerman <mpe@ellerman.id.au>","distinct":true,"url":"https://api.github.com/repos/neosilky/linux/commits/b314427a52fd8daa1215d30e56de01e32edec531"}]}
{"actor":{"display_login":"neosilky"}}