{"push_id":927010551,"size":78,"distinct_size":78,"ref":"refs/heads/caf/korg/linux-3.2.y","head":"31b79119914d59febac1bccd19660f98802fece7","before":"95afdc9fef289a42958570d5a4bcc9c939a5b5b8","commits":[{"sha":"a5b234167a1ff46f311f5835828eec2f971b9bb4","author":{"email":"3ca33452d0ba398506359975e18b2014a884f2c8@yandex-team.ru","name":"Roman Gushchin"},"message":"fuse: break infinite loop in fuse_fill_write_pages()\n\ncommit 3ca8138f014a913f98e6ef40e939868e1e9ea876 upstream.\n\nI got a report about unkillable task eating CPU. Further\ninvestigation shows, that the problem is in the fuse_fill_write_pages()\nfunction. If iov's first segment has zero length, we get an infinite\nloop, because we never reach iov_iter_advance() call.\n\nFix this by calling iov_iter_advance() before repeating an attempt to\ncopy data from userspace.\n\nA similar problem is described in 124d3b7041f (\"fix writev regression:\npan hanging unkillable and un-straceable\"). If zero-length segmend\nis followed by segment with invalid address,\niov_iter_fault_in_readable() checks only first segment (zero-length),\niov_iter_copy_from_user_atomic() skips it, fails at second and\nreturns zero -> goto again without skipping zero-length segment.\n\nPatch calls iov_iter_advance() before goto again: we'll skip zero-length\nsegment at second iteraction and iov_iter_fault_in_readable() will detect\ninvalid address.\n\nSpecial thanks to Konstantin Khlebnikov, who helped a lot with the commit\ndescription.\n\nCc: Andrew Morton <akpm@linux-foundation.org>\nCc: Maxim Patlasov <mpatlasov@parallels.com>\nCc: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>\nSigned-off-by: Roman Gushchin <klamm@yandex-team.ru>\nSigned-off-by: Miklos Szeredi <miklos@szeredi.hu>\nFixes: ea9b9907b82a (\"fuse: implement perform_write\")\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/a5b234167a1ff46f311f5835828eec2f971b9bb4"},{"sha":"98d37e7fed9568f37d4a4a150a3773cfafef91ed","author":{"email":"ed9bd6f22d2a1e0b1507d3ddc300dc248265d19a@gmail.com","name":"lucien"},"message":"sctp: translate host order to network order when setting a hmacid\n\ncommit ed5a377d87dc4c87fb3e1f7f698cba38cd893103 upstream.\n\nnow sctp auth cannot work well when setting a hmacid manually, which\nis caused by that we didn't use the network order for hmacid, so fix\nit by adding the transformation in sctp_auth_ep_set_hmacs.\n\neven we set hmacid with the network order in userspace, it still\ncan't work, because of this condition in sctp_auth_ep_set_hmacs():\n\n\t\tif (id > SCTP_AUTH_HMAC_ID_MAX)\n\t\t\treturn -EOPNOTSUPP;\n\nso this wasn't working before and thus it won't break compatibility.\n\nFixes: 65b07e5d0d09 (\"[SCTP]: API updates to suport SCTP-AUTH extensions.\")\nSigned-off-by: Xin Long <lucien.xin@gmail.com>\nSigned-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>\nAcked-by: Neil Horman <nhorman@tuxdriver.com>\nAcked-by: Vlad Yasevich <vyasevich@gmail.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/98d37e7fed9568f37d4a4a150a3773cfafef91ed"},{"sha":"2088131c9fc841b51625099058f346b0b4cc37ad","author":{"email":"9f57ef5ff1095f40b1ee8b7caa363908baef59d7@ladisch.de","name":"Clemens Ladisch"},"message":"ALSA: usb-audio: add packet size quirk for the Medeli DD305\n\ncommit 98d362becb6621bebdda7ed0eac7ad7ec6c37898 upstream.\n\nSigned-off-by: Clemens Ladisch <clemens@ladisch.de>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/2088131c9fc841b51625099058f346b0b4cc37ad"},{"sha":"d5db12a7df3ef9977530ab568e3fbca6f55b10d0","author":{"email":"9f57ef5ff1095f40b1ee8b7caa363908baef59d7@ladisch.de","name":"Clemens Ladisch"},"message":"ALSA: usb-audio: prevent CH345 multiport output SysEx corruption\n\ncommit 1ca8b201309d842642f221db7f02f71c0af5be2d upstream.\n\nThe CH345 USB MIDI chip has two output ports.  However, they are\nmultiplexed through one pin, and the number of ports cannot be reduced\neven for hardware that implements only one connector, so for those\ndevices, data sent to either port ends up on the same hardware output.\nThis becomes a problem when both ports are used at the same time, as\nlonger MIDI commands (such as SysEx messages) are likely to be\ninterrupted by messages from the other port, and thus to get lost.\n\nIt would not be possible for the driver to detect how many ports the\ndevice actually has, except that in practice, _all_ devices built with\nthe CH345 have only one port.  So we can just ignore the device's\ndescriptors, and hardcode one output port.\n\nSigned-off-by: Clemens Ladisch <clemens@ladisch.de>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/d5db12a7df3ef9977530ab568e3fbca6f55b10d0"},{"sha":"90c965cb250eba5aec1e2a15b0ccdd476a025c47","author":{"email":"9f57ef5ff1095f40b1ee8b7caa363908baef59d7@ladisch.de","name":"Clemens Ladisch"},"message":"ALSA: usb-audio: work around CH345 input SysEx corruption\n\ncommit a91e627e3f0ed820b11d86cdc04df38f65f33a70 upstream.\n\nOne of the many faults of the QinHeng CH345 USB MIDI interface chip is\nthat it does not handle received SysEx messages correctly -- every second\nevent packet has a wrong code index number, which is the one from the last\nseen message, instead of 4.  For example, the two messages \"FE F0 01 02 03\n04 05 06 07 08 09 0A 0B 0C 0D 0E F7\" result in the following event\npackets:\n\ncorrect:       CH345:\n0F FE 00 00    0F FE 00 00\n04 F0 01 02    04 F0 01 02\n04 03 04 05    0F 03 04 05\n04 06 07 08    04 06 07 08\n04 09 0A 0B    0F 09 0A 0B\n04 0C 0D 0E    04 0C 0D 0E\n05 F7 00 00    05 F7 00 00\n\nA class-compliant driver must interpret an event packet with CIN 15 as\nhaving a single data byte, so the other two bytes would be ignored.  The\nmessage received by the host would then be missing two bytes out of six;\nin this example, \"F0 01 02 03 06 07 08 09 0C 0D 0E F7\".\n\nThese corrupted SysEx event packages contain only data bytes, while the\nCH345 uses event packets with a correct CIN value only for messages with\na status byte, so it is possible to distinguish between these two cases by\nchecking for the presence of this status byte.\n\n(Other bugs in the CH345's input handling, such as the corruption resulting\nfrom running status, cannot be worked around.)\n\nSigned-off-by: Clemens Ladisch <clemens@ladisch.de>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/90c965cb250eba5aec1e2a15b0ccdd476a025c47"},{"sha":"0ff76b0fc7d38587da4605d9dd72f6e533f5cb46","author":{"email":"c78ce1f14afe451e7304fa93729985d7f1c1cc8c@aleksander.es","name":"Aleksander Morgado"},"message":"USB: serial: option: add support for Novatel MiFi USB620L\n\ncommit e07af133c3e2716db25e3e1e1d9f10c2088e9c1a upstream.\n\nAlso known as Verizon U620L.\n\nThe device is modeswitched from 1410:9020 to 1410:9022 by selecting the\n4th USB configuration:\n\n $ sudo usb_modeswitch –v 0x1410 –p 0x9020 –u 4\n\nThis configuration provides a ECM interface as well as TTYs ('Enterprise\nMode' according to the U620 Linux integration guide).\n\nSigned-off-by: Aleksander Morgado <aleksander@aleksander.es>\nSigned-off-by: Johan Hovold <johan@kernel.org>\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/0ff76b0fc7d38587da4605d9dd72f6e533f5cb46"},{"sha":"ca1fdad157e4b27d3a649a933ac24e35f3892d43","author":{"email":"99325f48769a47b9aabe48dd7058a851b4e7dc6c@flameeyes.eu","name":"Diego Elio Pettenò"},"message":"USB: serial: ti_usb_3410_5052: add Abbott strip port ID to combined table as well.\n\ncommit c9d09dc7ad106492c17c587b6eeb99fe3f43e522 upstream.\n\nWithout this change, the USB cable for Freestyle Option and compatible\nglucometers will not be detected by the driver.\n\nSigned-off-by: Diego Elio Pettenò <flameeyes@flameeyes.eu>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/ca1fdad157e4b27d3a649a933ac24e35f3892d43"},{"sha":"7f2de5f9bb10d670778c0b00ea17a20731bd4b5b","author":{"email":"73675debcd8a436be48ec22211dcf44fe0df0a64@decadent.org.uk","name":"Ben Hutchings"},"message":"USB: ti_usb_3410_502: Fix ID table size\n\nCommit 35a2fbc941ac (\"USB: serial: ti_usb_3410_5052: new device id for\nAbbot strip port cable\") failed to update the size of the\nti_id_table_3410 array.  This doesn't need to be fixed upstream\nfollowing commit d7ece6515e12 (\"USB: ti_usb_3410_5052: remove\nvendor/product module parameters\") but should be fixed in stable\nbranches older than 3.12.\n\nBackports of commit c9d09dc7ad10 (\"USB: serial: ti_usb_3410_5052: add\nAbbott strip port ID to combined table as well.\") similarly failed to\nupdate the size of the ti_id_table_combined array.\n\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/7f2de5f9bb10d670778c0b00ea17a20731bd4b5b"},{"sha":"3d0e1f04e06c64bdd8e77d28156d8a23e450c706","author":{"email":"97b3379caa91f4ee97e44013ae4dc6350540fa9d@infradead.org","name":"David Woodhouse"},"message":"USB: ti_usb_3410_5052: Add Honeywell HGI80 ID\n\ncommit 1bcb49e663f88bccee35b8688e6a3da2bea31fd4 upstream.\n\nThe Honeywell HGI80 is a wireless interface to the evohome connected\nthermostat. It uses a TI 3410 USB-serial port.\n\nSigned-off-by: David Woodhouse <David.Woodhouse@intel.com>\nSigned-off-by: Johan Hovold <johan@kernel.org>\n[bwh: Backported to 3.2: adjust context; update array sizes]\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/3d0e1f04e06c64bdd8e77d28156d8a23e450c706"},{"sha":"fff91a21b73be03e2ee85765d5599c9450b22ed7","author":{"email":"181323dd666a182bc2d953e52d0ac3ab54cd8391@pengutronix.de","name":"Uwe Kleine-König"},"message":"usb: musb: core: fix order of arguments to ulpi write callback\n\ncommit 705e63d2b29c8bbf091119084544d353bda70393 upstream.\n\nThere is a bit of a mess in the order of arguments to the ulpi write\ncallback. There is\n\n\tint ulpi_write(struct ulpi *ulpi, u8 addr, u8 val)\n\nin drivers/usb/common/ulpi.c;\n\n\tstruct usb_phy_io_ops {\n\t\t...\n\t\tint (*write)(struct usb_phy *x, u32 val, u32 reg);\n\t}\n\nin include/linux/usb/phy.h.\n\nThe callback registered by the musb driver has to comply to the latter,\nbut up to now had \"offset\" first which effectively made the function\nbroken for correct users. So flip the order and while at it also\nswitch to the parameter names of struct usb_phy_io_ops's write.\n\nFixes: ffb865b1e460 (\"usb: musb: add ulpi access operations\")\nSigned-off-by: Uwe Kleine-König <u.kleine-koenig@pengutronix.de>\nSigned-off-by: Felipe Balbi <balbi@ti.com>\n[bwh: Backported to 3.2: adjust context]\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/fff91a21b73be03e2ee85765d5599c9450b22ed7"},{"sha":"ba5021857b8651840d1830838db208ddfeed98ca","author":{"email":"4a41ff1e4c66d78fc94269da36951a4e4f75d865@gmail.com","name":"Sachin Pandhare"},"message":"ASoC: wm8962: correct addresses for HPF_C_0/1\n\ncommit e9f96bc53c1b959859599cb30ce6fd4fbb4448c2 upstream.\n\nFrom datasheet:\nR17408 (4400h) HPF_C_1\nR17409 (4401h) HPF_C_0\n17048 -> 17408 (0x4400)\n17049 -> 17409 (0x4401)\n\nSigned-off-by: Sachin Pandhare <sachinpandhare@gmail.com>\nAcked-by: Charles Keepax <ckeepax@opensource.wolfsonmicro.com>\nSigned-off-by: Mark Brown <broonie@kernel.org>\n[bwh: Backported to 3.2: wm8962_reg is a sparse array, not an array of\n { offset, value } pairs]\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/ba5021857b8651840d1830838db208ddfeed98ca"},{"sha":"bb62cdf556744e4e98b2c51abf10c3a108b4c373","author":{"email":"262b42b771725e3ebec40395f2b058e593df7462@cumulusnetworks.com","name":"Nikolay Aleksandrov"},"message":"net: fix __netdev_update_features return on ndo_set_features failure\n\ncommit 00ee5927177792a6e139d50b6b7564d35705556a upstream.\n\nIf ndo_set_features fails __netdev_update_features() will return -1 but\nthis is wrong because it is expected to return 0 if no features were\nchanged (see netdev_update_features()), which will cause a netdev\nnotifier to be called without any actual changes. Fix this by returning\n0 if ndo_set_features fails.\n\nFixes: 6cb6a27c45ce (\"net: Call netdev_features_change() from netdev_update_features()\")\nCC: Michał Mirosław <mirq-linux@rere.qmqm.pl>\nSigned-off-by: Nikolay Aleksandrov <nikolay@cumulusnetworks.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\n[bwh: Backported to 3.2: adjust context]\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/bb62cdf556744e4e98b2c51abf10c3a108b4c373"},{"sha":"9d7b6dfc16b08cce987e8ccc9720dca92a985622","author":{"email":"0da414d9d963da4039c2a0525b1844228075aa58@linux-m68k.org","name":"Geert Uytterhoeven"},"message":"FS-Cache: Add missing initialization of ret in cachefiles_write_page()\n\ncommit cf89752645e47d86ba8a4157f4b121fcb33434c5 upstream.\n\nfs/cachefiles/rdwr.c: In function ‘cachefiles_write_page’:\nfs/cachefiles/rdwr.c:882: warning: ‘ret’ may be used uninitialized in\nthis function\n\nIf the jump to label \"error\" is taken, \"ret\" will indeed be\nuninitialized, and random stack data may be printed by the debug code.\n\nFixes: 102f4d900c9c8f5e (\"FS-Cache: Handle a write to the page immediately beyond the EOF marker\")\nSigned-off-by: Geert Uytterhoeven <geert@linux-m68k.org>\nSigned-off-by: David Howells <dhowells@redhat.com>\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/9d7b6dfc16b08cce987e8ccc9720dca92a985622"},{"sha":"4fffe0aafb9c3ac37c74026275cba43fefa6cd0e","author":{"email":"bff32994ff0f8d048f262a8388145a71b6071bfe@intel.com","name":"Johannes Berg"},"message":"mac80211: mesh: fix call_rcu() usage\n\ncommit c2e703a55245bfff3db53b1f7cbe59f1ee8a4339 upstream.\n\nWhen using call_rcu(), the called function may be delayed quite\nsignificantly, and without a matching rcu_barrier() there's no\nway to be sure it has finished.\nTherefore, global state that could be gone/freed/reused should\nnever be touched in the callback.\n\nFix this in mesh by moving the atomic_dec() into the caller;\nthat's not really a problem since we already unlinked the path\nand it will be destroyed anyway.\n\nThis fixes a crash Jouni observed when running certain tests in\na certain order, in which the mesh interface was torn down, the\nmemory reused for a function pointer (work struct) and running\nthat then crashed since the pointer had been decremented by 1,\nresulting in an invalid instruction byte stream.\n\nFixes: eb2b9311fd00 (\"mac80211: mesh path table implementation\")\nReported-by: Jouni Malinen <j@w1.fi>\nSigned-off-by: Johannes Berg <johannes.berg@intel.com>\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/4fffe0aafb9c3ac37c74026275cba43fefa6cd0e"},{"sha":"6ada5963b40937554af5d65b74a829c194f908f1","author":{"email":"4452d71687b6bc2c9389c3349fdc17fbd73b833b@queasysnail.net","name":"Sabrina Dubroca"},"message":"macvlan: fix leak in macvlan_handle_frame\n\ncommit e639b8d8a7a728f0b05ef2df6cb6b45dc3d4e556 upstream.\n\nReset pskb in macvlan_handle_frame in case skb_share_check returned a\nclone.\n\nFixes: 8a4eb5734e8d (\"net: introduce rx_handler results and logic around that\")\nSigned-off-by: Sabrina Dubroca <sd@queasysnail.net>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/6ada5963b40937554af5d65b74a829c194f908f1"},{"sha":"e40e3262d98d47dd8e7231e68124202e7a532d3d","author":{"email":"73675debcd8a436be48ec22211dcf44fe0df0a64@decadent.org.uk","name":"Ben Hutchings"},"message":"xhci: Add XHCI_INTEL_HOST quirk\n\nExtracted from commit e3567d2c15a7 (\"xhci: Add Intel U1/U2 timeout policy.\")\n\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/e40e3262d98d47dd8e7231e68124202e7a532d3d"},{"sha":"18fb47eeecd9103959e70700fdf0b2b392d8ab0e","author":{"email":"e2d8246fac097e5b4bbb1acd0b9bb7762d90f9f0@intel.com","name":"Rajmohan Mani"},"message":"xhci: Workaround to get Intel xHCI reset working more reliably\n\ncommit a5964396190d0c40dd549c23848c282fffa5d1f2 upstream.\n\nExisting Intel xHCI controllers require a delay of 1 mS,\nafter setting the CMD_RESET bit in command register, before\naccessing any HC registers. This allows the HC to complete\nthe reset operation and be ready for HC register access.\nWithout this delay, the subsequent HC register access,\nmay result in a system hang, very rarely.\n\nVerified CherryView / Braswell platforms go through over\n5000 warm reboot cycles (which was not possible without\nthis patch), without any xHCI reset hang.\n\nSigned-off-by: Rajmohan Mani <rajmohan.mani@intel.com>\nTested-by: Joe Lawrence <joe.lawrence@stratus.com>\nSigned-off-by: Mathias Nyman <mathias.nyman@linux.intel.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\n[bwh: Backported to 3.2: adjust context]\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/18fb47eeecd9103959e70700fdf0b2b392d8ab0e"},{"sha":"8ac227de91d182ed28630b1e3434df2c33a9f1cf","author":{"email":"8a2957e0063f2abf61bd145b6236a74a3708ac54@mork.no","name":"Bjørn Mork"},"message":"USB: option: add XS Stick W100-2 from 4G Systems\n\ncommit 638148e20c7f8f6e95017fdc13bce8549a6925e0 upstream.\n\nThomas reports\n\"\n4gsystems sells two total different LTE-surfsticks under the same name.\n..\nThe newer version of XS Stick W100 is from \"omega\"\n..\nUnder windows the driver switches to the same ID, and uses MI03\\6 for\nnetwork and MI01\\6 for modem.\n..\necho \"1c9e 9b01\" > /sys/bus/usb/drivers/qmi_wwan/new_id\necho \"1c9e 9b01\" > /sys/bus/usb-serial/drivers/option1/new_id\n\nT:  Bus=01 Lev=01 Prnt=01 Port=03 Cnt=01 Dev#=  4 Spd=480 MxCh= 0\nD:  Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1\nP:  Vendor=1c9e ProdID=9b01 Rev=02.32\nS:  Manufacturer=USB Modem\nS:  Product=USB Modem\nS:  SerialNumber=\nC:  #Ifs= 5 Cfg#= 1 Atr=80 MxPwr=500mA\nI:  If#= 0 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=option\nI:  If#= 1 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=ff Prot=ff Driver=option\nI:  If#= 2 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=ff Prot=ff Driver=option\nI:  If#= 3 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=ff Prot=ff Driver=qmi_wwan\nI:  If#= 4 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=usb-storage\n\nNow all important things are there:\n\nwwp0s29f7u2i3 (net), ttyUSB2 (at), cdc-wdm0 (qmi), ttyUSB1 (at)\n\nThere is also ttyUSB0, but it is not usable, at least not for at.\n\nThe device works well with qmi and ModemManager-NetworkManager.\n\"\n\nReported-by: Thomas Schäfer <tschaefer@t-online.de>\nSigned-off-by: Bjørn Mork <bjorn@mork.no>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\n[bwh: Backported to 3.2: adjust context]\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/8ac227de91d182ed28630b1e3434df2c33a9f1cf"},{"sha":"645fd470312a5327fbe39d7343af390330d5003c","author":{"email":"dfbf39eb5bf303a3db5454d815cb8c8888cbadf9@suse.cz","name":"Jiri Slaby"},"message":"usblp: do not set TASK_INTERRUPTIBLE before lock\n\ncommit 19cd80a214821f4b558560ebd76bfb2c38b4f3d8 upstream.\n\nIt is not permitted to set task state before lock. usblp_wwait sets\nthe state to TASK_INTERRUPTIBLE and calls mutex_lock_interruptible.\nUpon return from that function, the state will be TASK_RUNNING again.\n\nThis is clearly a bug and a warning is generated with LOCKDEP too:\nWARNING: CPU: 1 PID: 5109 at kernel/sched/core.c:7404 __might_sleep+0x7d/0x90()\ndo not call blocking ops when !TASK_RUNNING; state=1 set at [<ffffffffa0c588d0>] usblp_wwait+0xa0/0x310 [usblp]\nModules linked in: ...\nCPU: 1 PID: 5109 Comm: captmon Tainted: G        W       4.2.5-0.gef2823b-default #1\nHardware name: LENOVO 23252SG/23252SG, BIOS G2ET33WW (1.13 ) 07/24/2012\n ffffffff81a4edce ffff880236ec7ba8 ffffffff81716651 0000000000000000\n ffff880236ec7bf8 ffff880236ec7be8 ffffffff8106e146 0000000000000282\n ffffffff81a50119 000000000000028b 0000000000000000 ffff8802dab7c508\nCall Trace:\n...\n [<ffffffff8106e1c6>] warn_slowpath_fmt+0x46/0x50\n [<ffffffff8109a8bd>] __might_sleep+0x7d/0x90\n [<ffffffff8171b20f>] mutex_lock_interruptible_nested+0x2f/0x4b0\n [<ffffffffa0c588fc>] usblp_wwait+0xcc/0x310 [usblp]\n [<ffffffffa0c58bb2>] usblp_write+0x72/0x350 [usblp]\n [<ffffffff8121ed98>] __vfs_write+0x28/0xf0\n...\n\nCommit 7f477358e2384c54b190cc3b6ce28277050a041b (usblp: Implement the\nENOSPC convention) moved the set prior locking. So move it back after\nthe lock.\n\nSigned-off-by: Jiri Slaby <jslaby@suse.cz>\nFixes: 7f477358e2 (\"usblp: Implement the ENOSPC convention\")\nAcked-By: Pete Zaitcev <zaitcev@yahoo.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/645fd470312a5327fbe39d7343af390330d5003c"},{"sha":"81a319c5c29913a23947f3d28513974682f3af03","author":{"email":"50cb10d2be062154b17ab4d66a4eab34f1cf1c84@chromium.org","name":"Kees Cook"},"message":"mac: validate mac_partition is within sector\n\ncommit 02e2a5bfebe99edcf9d694575a75032d53fe1b73 upstream.\n\nIf md->signature == MAC_DRIVER_MAGIC and md->block_size == 1023, a single\n512 byte sector would be read (secsize / 512). However the partition\nstructure would be located past the end of the buffer (secsize % 512).\n\nSigned-off-by: Kees Cook <keescook@chromium.org>\nSigned-off-by: Jens Axboe <axboe@fb.com>\n[bwh: Backported to 3.2: adjust filename]\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>","distinct":true,"url":"https://api.github.com/repos/kykdev/caf-msm-3.10/commits/81a319c5c29913a23947f3d28513974682f3af03"}]}