{"push_id":1299958244,"size":34,"distinct_size":34,"ref":"refs/heads/master","head":"4cea8776571b18db7485930cb422faa739580c8c","before":"5924bbecd0267d87c24110cbe2041b5075173a25","commits":[{"sha":"6af7e4f77259ee946103387372cb159f2e99a6d4","author":{"name":"Bjorn Helgaas","email":"d58560f8a8eaa2bf0a57092b2469a9a49461ac56@google.com"},"message":"PCI: Mark Haswell Power Control Unit as having non-compliant BARs\n\nThe Haswell Power Control Unit has a non-PCI register (CONFIG_TDP_NOMINAL)\nwhere BAR 0 is supposed to be.  This is erratum HSE43 in the spec update\nreferenced below:\n\n  The PCIe* Base Specification indicates that Configuration Space Headers\n  have a base address register at offset 0x10.  Due to this erratum, the\n  Power Control Unit's CONFIG_TDP_NOMINAL CSR (Bus 1; Device 30; Function\n  3; Offset 0x10) is located where a base register is expected.\n\nMark the PCU as having non-compliant BARs so we don't try to probe any of\nthem.  There are no other BARs on this device.\n\nRename the quirk so it's not Broadwell-specific.\n\nLink: http://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html\nLink: http://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-datasheet-vol-2.html (section 5.4, Device 30 Function 3)\nLink: https://bugzilla.kernel.org/show_bug.cgi?id=153881\nReported-by: Paul Menzel <pmenzel@molgen.mpg.de>\nTested-by: Prarit Bhargava <prarit@redhat.com>\nSigned-off-by: Bjorn Helgaas <bhelgaas@google.com>\nAcked-by: Myron Stowe <myron.stowe@redhat.com>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/6af7e4f77259ee946103387372cb159f2e99a6d4"},{"sha":"2561d309dfd1555e781484af757ed0115035ddb3","author":{"name":"Al Viro","email":"2a537e97523ffee458777df5f34a2f8c9964f945@zeniv.linux.org.uk"},"message":"alpha: fix copy_from_user()\n\nit should clear the destination even when access_ok() fails.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/2561d309dfd1555e781484af757ed0115035ddb3"},{"sha":"2545e5da080b4839dd859e3b09343a884f6ab0e3","author":{"name":"Al Viro","email":"2a537e97523ffee458777df5f34a2f8c9964f945@zeniv.linux.org.uk"},"message":"asm-generic: make copy_from_user() zero the destination properly\n\n... in all cases, including the failing access_ok()\n\nNote that some architectures using asm-generic/uaccess.h have\n__copy_from_user() not zeroing the tail on failure halfway\nthrough.  This variant works either way.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/2545e5da080b4839dd859e3b09343a884f6ab0e3"},{"sha":"035ee288ae7ade4152f1c3cf23a587b04fdc526c","author":{"name":"Lukas Wunner","email":"7725246d78edfda814c85745e312e58ff7befafc@wunner.de"},"message":"PCI: Fix bridge_d3 update on device removal\n\nStarting with v4.8, we allow a PCIe port to runtime suspend to D3hot if the\nport itself and its children satisfy a number of conditions.  Once a child\nis removed, we recheck those conditions in case the removed device was\nblocking the port from suspending.\n\nThe rechecking needs to happen *after* the device has been removed from the\nbus it resides on.  Otherwise when walking the port's subordinate bus in\npci_bridge_d3_update(), the device being removed would erroneously still be\ntaken into account.\n\nHowever the device is removed from the bus_list in pci_destroy_dev() and we\ncurrently recheck *before* that.  Fix it.\n\nFixes: 9d26d3a8f1b0 (\"PCI: Put PCIe ports into D3 during suspend\")\nSigned-off-by: Lukas Wunner <lukas@wunner.de>\nSigned-off-by: Bjorn Helgaas <bhelgaas@google.com>\nReviewed-by: Mika Westerberg <mika.westerberg@linux.intel.com>\nAcked-by: Rafael J. Wysocki <mika.westerberg@linux.intel.com>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/035ee288ae7ade4152f1c3cf23a587b04fdc526c"},{"sha":"9ad18b75c2f6e4a78ce204e79f37781f8815c0fa","author":{"name":"Al Viro","email":"2a537e97523ffee458777df5f34a2f8c9964f945@zeniv.linux.org.uk"},"message":"asm-generic: make get_user() clear the destination on errors\n\nboth for access_ok() failures and for faults halfway through\n\nCc: stable@vger.kernel.org\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/9ad18b75c2f6e4a78ce204e79f37781f8815c0fa"},{"sha":"eb47e0293baaa3044022059f1fa9ff474bfe35cb","author":{"name":"Al Viro","email":"2a537e97523ffee458777df5f34a2f8c9964f945@zeniv.linux.org.uk"},"message":"cris: buggered copy_from_user/copy_to_user/clear_user\n\n* copy_from_user() on access_ok() failure ought to zero the destination\n* none of those primitives should skip the access_ok() check in case of\nsmall constant size.\n\nCc: stable@vger.kernel.org\nAcked-by: Jesper Nilsson <jesper.nilsson@axis.com>\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/eb47e0293baaa3044022059f1fa9ff474bfe35cb"},{"sha":"3b8767a8f00cc6538ba6b1cf0f88502e2fd2eb90","author":{"name":"Al Viro","email":"2a537e97523ffee458777df5f34a2f8c9964f945@zeniv.linux.org.uk"},"message":"frv: fix clear_user()\n\nIt should check access_ok().  Otherwise a bunch of places turn into\ntrivially exploitable rootholes.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/3b8767a8f00cc6538ba6b1cf0f88502e2fd2eb90"},{"sha":"f35c1e0671728d1c9abc405d05ef548b5fcb2fc4","author":{"name":"Al Viro","email":"2a537e97523ffee458777df5f34a2f8c9964f945@zeniv.linux.org.uk"},"message":"hexagon: fix strncpy_from_user() error return\n\nIt's -EFAULT, not -1 (and contrary to the comment in there,\n__strnlen_user() can return 0 - on faults).\n\nCc: stable@vger.kernel.org\nAcked-by: Richard Kuo <rkuo@codeaurora.org>\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/f35c1e0671728d1c9abc405d05ef548b5fcb2fc4"},{"sha":"a5e541f796f17228793694d64b507f5f57db4cd7","author":{"name":"Al Viro","email":"2a537e97523ffee458777df5f34a2f8c9964f945@zeniv.linux.org.uk"},"message":"ia64: copy_from_user() should zero the destination on access_ok() failure\n\nCc: stable@vger.kernel.org\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/a5e541f796f17228793694d64b507f5f57db4cd7"},{"sha":"8ae95ed4ae5fc7c3391ed668b2014c9e2079533b","author":{"name":"Al Viro","email":"2a537e97523ffee458777df5f34a2f8c9964f945@zeniv.linux.org.uk"},"message":"metag: copy_from_user() should zero the destination on access_ok() failure\n\nCc: stable@vger.kernel.org\nAcked-by: James Hogan <james.hogan@imgtec.com>\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/8ae95ed4ae5fc7c3391ed668b2014c9e2079533b"},{"sha":"05d9d0b96e53c52a113fd783c0c97c830c8dc7af","author":{"name":"Vineet Gupta","email":"80f9f0e2eb1c192af8f581af32ef8100861d82f3@synopsys.com"},"message":"ARC: uaccess: get_user to zero out dest in cause of fault\n\nAl reported potential issue with ARC get_user() as it wasn't clearing\nout destination pointer in case of fault due to bad address etc.\n\nVerified using following\n\n| {\n|  \tu32 bogus1 = 0xdeadbeef;\n|\tu64 bogus2 = 0xdead;\n|\tint rc1, rc2;\n|\n|  \tpr_info(\"Orig values %x %llx\\n\", bogus1, bogus2);\n|\trc1 = get_user(bogus1, (u32 __user *)0x40000000);\n|\trc2 = get_user(bogus2, (u64 __user *)0x50000000);\n|\tpr_info(\"access %d %d, new values %x %llx\\n\",\n|\t\trc1, rc2, bogus1, bogus2);\n| }\n\n| [ARCLinux]# insmod /mnt/kernel-module/qtn.ko\n| Orig values deadbeef dead\n| access -14 -14, new values 0 0\n\nReported-by: Al Viro <viro@ZenIV.linux.org.uk>\nCc: Linus Torvalds <torvalds@linux-foundation.org>\nCc: linux-snps-arc@lists.infradead.org\nCc: linux-kernel@vger.kernel.org\nCc: stable@vger.kernel.org\nSigned-off-by: Vineet Gupta <vgupta@synopsys.com>\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/05d9d0b96e53c52a113fd783c0c97c830c8dc7af"},{"sha":"e69d700535ac43a18032b3c399c69bf4639e89a2","author":{"name":"Al Viro","email":"2a537e97523ffee458777df5f34a2f8c9964f945@zeniv.linux.org.uk"},"message":"mips: copy_from_user() must zero the destination on access_ok() failure\n\nCc: stable@vger.kernel.org\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/e69d700535ac43a18032b3c399c69bf4639e89a2"},{"sha":"43403eabf558d2800b429cd886e996fd555aa542","author":{"name":"Al Viro","email":"2a537e97523ffee458777df5f34a2f8c9964f945@zeniv.linux.org.uk"},"message":"mn10300: failing __get_user() and get_user() should zero\n\nCc: stable@vger.kernel.org\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/43403eabf558d2800b429cd886e996fd555aa542"},{"sha":"ae7cc577ec2a4a6151c9e928fd1f595d953ecef1","author":{"name":"Al Viro","email":"2a537e97523ffee458777df5f34a2f8c9964f945@zeniv.linux.org.uk"},"message":"mn10300: copy_from_user() should zero on access_ok() failure...\n\nCc: stable@vger.kernel.org\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/ae7cc577ec2a4a6151c9e928fd1f595d953ecef1"},{"sha":"e33d1f6f72cc82fcfc3d1fb20c9e3ad83b1928fa","author":{"name":"Al Viro","email":"2a537e97523ffee458777df5f34a2f8c9964f945@zeniv.linux.org.uk"},"message":"nios2: copy_from_user() should zero the tail of destination\n\nCc: stable@vger.kernel.org\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/e33d1f6f72cc82fcfc3d1fb20c9e3ad83b1928fa"},{"sha":"2e29f50ad5e23db37dde9be71410d95d50241ecd","author":{"name":"Al Viro","email":"2a537e97523ffee458777df5f34a2f8c9964f945@zeniv.linux.org.uk"},"message":"nios2: fix __get_user()\n\na) should not leave crap on fault\nb) should _not_ require access_ok() in any cases.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/2e29f50ad5e23db37dde9be71410d95d50241ecd"},{"sha":"acb2505d0119033a80c85ac8d02dccae41271667","author":{"name":"Al Viro","email":"2a537e97523ffee458777df5f34a2f8c9964f945@zeniv.linux.org.uk"},"message":"openrisc: fix copy_from_user()\n\n... that should zero on faults.  Also remove the <censored> helpful\nlogics wrt range truncation copied from ppc32.  Where it had ever\nbeen needed only in case of copy_from_user() *and* had not been merged\ninto the mainline until a month after the need had disappeared.\nA decade before openrisc went into mainline, I might add...\n\nCc: stable@vger.kernel.org\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/acb2505d0119033a80c85ac8d02dccae41271667"},{"sha":"aace880feea38875fbc919761b77e5732a3659ef","author":{"name":"Al Viro","email":"2a537e97523ffee458777df5f34a2f8c9964f945@zeniv.linux.org.uk"},"message":"parisc: fix copy_from_user()\n\nCc: stable@vger.kernel.org\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/aace880feea38875fbc919761b77e5732a3659ef"},{"sha":"224264657b8b228f949b42346e09ed8c90136a8e","author":{"name":"Al Viro","email":"2a537e97523ffee458777df5f34a2f8c9964f945@zeniv.linux.org.uk"},"message":"ppc32: fix copy_from_user()\n\nshould clear on access_ok() failures.  Also remove the useless\nrange truncation logics.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/224264657b8b228f949b42346e09ed8c90136a8e"},{"sha":"fd2d2b191fe75825c4c7a6f12f3fef35aaed7dd7","author":{"name":"Al Viro","email":"2a537e97523ffee458777df5f34a2f8c9964f945@zeniv.linux.org.uk"},"message":"s390: get_user() should zero on failure\n\nCc: stable@vger.kernel.org\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>","distinct":true,"url":"https://api.github.com/repos/stffrdhrn/linux/commits/fd2d2b191fe75825c4c7a6f12f3fef35aaed7dd7"}]}
{"actor":{"display_login":"stffrdhrn"}}