{"push_id":1244648799,"size":10,"distinct_size":10,"ref":"refs/heads/master","head":"85e97be32c6242c98dbbc7a241b4a78c1b93327b","before":"9512c47ec2e4f7e1f28ba66e09de536987a6057f","commits":[{"sha":"7de249964f5578e67b99699c5f0b405738d820a2","author":{"name":"Dave Weinstein","email":"ebef9371cc90401e536c8185875c2133e11e1f66@google.com"},"message":"arm: oabi compat: add missing access checks\n\nAdd access checks to sys_oabi_epoll_wait() and sys_oabi_semtimedop().\nThis fixes CVE-2016-3857, a local privilege escalation under\nCONFIG_OABI_COMPAT.\n\nCc: stable@vger.kernel.org\nReported-by: Chiachih Wu <wuchiachih@gmail.com>\nReviewed-by: Kees Cook <keescook@chromium.org>\nReviewed-by: Nicolas Pitre <nico@linaro.org>\nSigned-off-by: Dave Weinstein <olorin@google.com>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>","distinct":true,"url":"https://api.github.com/repos/torvalds/linux/commits/7de249964f5578e67b99699c5f0b405738d820a2"},{"sha":"73984137d32bb6e48646daea60ebe1457a01a061","author":{"name":"Dan Carpenter","email":"60b2bf2bc0bec4ca4a4b046ca7ef9255248abff8@oracle.com"},"message":"rapidio: dereferencing an error pointer\n\nOriginal patch: https://lkml.org/lkml/2016/8/4/32\n\nIf riocm_ch_alloc() fails then we end up dereferencing the error\npointer.\n\nThe problem is that we're not unwinding in the reverse order from how we\nallocate things so it gets confusing.  I've changed this around so now\n\"ch\" is NULL when we are done with it after we call riocm_put_channel().\nThat way we can check if it's NULL and avoid calling riocm_put_channel()\non it twice.\n\nI renamed err_nodev to err_put_new_ch so that it better reflects what\nthe goto does.\n\nThen because we had flipping things around, it means we don't neeed to\ninitialize the pointers to NULL and we can remove an if statement and\npull things in an indent level.\n\nLink: http://lkml.kernel.org/r/20160805152406.20713-1-alexandre.bounine@idt.com\nSigned-off-by: Dan Carpenter <dan.carpenter@oracle.com>\nSigned-off-by: Alexandre Bounine <alexandre.bounine@idt.com>\nCc: Matt Porter <mporter@kernel.crashing.org>\nCc: Andre van Herk <andre.van.herk@prodrive-technologies.com>\nCc: Barry Wood <barry.wood@idt.com>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>","distinct":true,"url":"https://api.github.com/repos/torvalds/linux/commits/73984137d32bb6e48646daea60ebe1457a01a061"},{"sha":"a545de5ce2ef3abc4db0b9331840acf59c8f9efa","author":{"name":"Andrew Morton","email":"1c34db6615bc25a29a6a7c99217d037c3d74d16a@linux-foundation.org"},"message":"revert \"ARM: keystone: dts: add psci command definition\"\n\nRevert commit 51d5d12b8f3d (\"ARM: keystone: dts: add psci command\ndefinition\"), which was inadvertently added twice.\n\nCc: Russell King - ARM Linux <linux@armlinux.org.uk>\nCc: Vitaly Andrianov <vitalya@ti.com>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>","distinct":true,"url":"https://api.github.com/repos/torvalds/linux/commits/a545de5ce2ef3abc4db0b9331840acf59c8f9efa"},{"sha":"3b33719c9b741066f7d2bc6036409752f8e0478d","author":{"name":"Arnd Bergmann","email":"72a0f6d3b182607e6d5c44b93e1abb7b23ee18f3@arndb.de"},"message":"thp: move shmem_huge_enabled() outside of SYSFS ifdef\n\nThe newly introduced shmem_huge_enabled() function has two definitions,\nbut neither of them is visible if CONFIG_SYSFS is disabled, leading to a\nbuild error:\n\n  mm/khugepaged.o: In function `khugepaged':\n  khugepaged.c:(.text.khugepaged+0x3ca): undefined reference to `shmem_huge_enabled'\n\nThis changes the #ifdef guards around the definition to match those that\nare used in the header file.\n\nFixes: e496cf3d7821 (\"thp: introduce CONFIG_TRANSPARENT_HUGE_PAGECACHE\")\nLink: http://lkml.kernel.org/r/20160809123638.1357593-1-arnd@arndb.de\nSigned-off-by: Arnd Bergmann <arnd@arndb.de>\nAcked-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>","distinct":true,"url":"https://api.github.com/repos/torvalds/linux/commits/3b33719c9b741066f7d2bc6036409752f8e0478d"},{"sha":"81cbcbc2d810c0ce49fba81f864302e1afe5ff27","author":{"name":"Joonsoo Kim","email":"e700615c04bcea977d20418bded45c707d0cb497@lge.com"},"message":"mm/page_alloc.c: fix wrong initialization when sysctl_min_unmapped_ratio changes\n\nBefore resetting min_unmapped_pages, we need to initialize\nmin_unmapped_pages rather than min_slab_pages.\n\nFixes: a5f5f91da6 (mm: convert zone_reclaim to node_reclaim)\nLink: http://lkml.kernel.org/r/1470724248-26780-1-git-send-email-iamjoonsoo.kim@lge.com\nSigned-off-by: Joonsoo Kim <iamjoonsoo.kim@lge.com>\nAcked-by: Mel Gorman <mgorman@techsingularity.net>\nCc: Vlastimil Babka <vbabka@suse.cz>\nCc: Johannes Weiner <hannes@cmpxchg.org>\nCc: Minchan Kim <minchan@kernel.org>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>","distinct":true,"url":"https://api.github.com/repos/torvalds/linux/commits/81cbcbc2d810c0ce49fba81f864302e1afe5ff27"},{"sha":"6423aa8192c596848e1b23bd4193dc0924e7274d","author":{"name":"Joonsoo Kim","email":"e700615c04bcea977d20418bded45c707d0cb497@lge.com"},"message":"mm/page_alloc.c: recalculate some of node threshold when on/offline memory\n\nSome of node threshold depends on number of managed pages in the node.\nWhen memory is going on/offline, it can be changed and we need to adjust\nthem.\n\nAdd recalculation to appropriate places and clean-up related functions\nfor better maintenance.\n\nLink: http://lkml.kernel.org/r/1470724248-26780-2-git-send-email-iamjoonsoo.kim@lge.com\nSigned-off-by: Joonsoo Kim <iamjoonsoo.kim@lge.com>\nAcked-by: Mel Gorman <mgorman@techsingularity.net>\nCc: Vlastimil Babka <vbabka@suse.cz>\nCc: Johannes Weiner <hannes@cmpxchg.org>\nCc: Minchan Kim <minchan@kernel.org>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>","distinct":true,"url":"https://api.github.com/repos/torvalds/linux/commits/6423aa8192c596848e1b23bd4193dc0924e7274d"},{"sha":"c8efc390c1e0eca195ae59a2f7cec46773620e0c","author":{"name":"Kirill A. Shutemov","email":"e4d0c2966af3c70025b28e24a0f33104c6291010@linux.intel.com"},"message":"mm, rmap: fix false positive VM_BUG() in page_add_file_rmap()\n\nPageTransCompound() doesn't distinguish THP from from any other type of\ncompound pages.  This can lead to false-positive VM_BUG_ON() in\npage_add_file_rmap() if called on compound page from a driver[1].\n\nI think we can exclude such cases by checking if the page belong to a\nmapping.\n\nThe VM_BUG_ON_PAGE() is downgraded to VM_WARN_ON_ONCE().  This path\nshould not cause any harm to non-THP page, but good to know if we step\non anything else.\n\n[1] http://lkml.kernel.org/r/c711e067-0bff-a6cb-3c37-04dfe77d2db1@redhat.com\n\nLink: http://lkml.kernel.org/r/20160810161345.GA67522@black.fi.intel.com\nSigned-off-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>\nReported-by: Laura Abbott <labbott@redhat.com>\nTested-by: Laura Abbott <labbott@redhat.com>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>","distinct":true,"url":"https://api.github.com/repos/torvalds/linux/commits/c8efc390c1e0eca195ae59a2f7cec46773620e0c"},{"sha":"57dea93ac42d341e1fe902528b348ef6763fa485","author":{"name":"Steve Capper","email":"17bccb5cf1aeda5613c1ae7377626684912d675f@arm.com"},"message":"rmap: fix compound check logic in page_remove_file_rmap\n\nIn page_remove_file_rmap(.) we have the following check:\n\n  VM_BUG_ON_PAGE(compound && !PageTransHuge(page), page);\n\nThis is meant to check for either HugeTLB pages or THP when a compound\npage is passed in.\n\nUnfortunately, if one disables CONFIG_TRANSPARENT_HUGEPAGE, then\nPageTransHuge(.) will always return false, provoking BUGs when one runs\nthe libhugetlbfs test suite.\n\nThis patch replaces PageTransHuge(), with PageHead() which will work for\nboth HugeTLB and THP.\n\nFixes: dd78fedde4b9 (\"rmap: support file thp\")\nLink: http://lkml.kernel.org/r/1470838217-5889-1-git-send-email-steve.capper@arm.com\nSigned-off-by: Steve Capper <steve.capper@arm.com>\nAcked-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>\nCc: Huang Shijie <shijie.huang@arm.com>\nCc: Will Deacon <will.deacon@arm.com>\nCc: Catalin Marinas <catalin.marinas@arm.com>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>","distinct":true,"url":"https://api.github.com/repos/torvalds/linux/commits/57dea93ac42d341e1fe902528b348ef6763fa485"},{"sha":"6039892396d845b18228935561960441900cffca","author":{"name":"Chris Wilson","email":"4181b934c2715a2bba60cdb3cc1b35b2777d1c23@chris-wilson.co.uk"},"message":"mm/slub.c: run free_partial() outside of the kmem_cache_node->list_lock\n\nWith debugobjects enabled and using SLAB_DESTROY_BY_RCU, when a\nkmem_cache_node is destroyed the call_rcu() may trigger a slab\nallocation to fill the debug object pool (__debug_object_init:fill_pool).\n\nEverywhere but during kmem_cache_destroy(), discard_slab() is performed\noutside of the kmem_cache_node->list_lock and avoids a lockdep warning\nabout potential recursion:\n\n  =============================================\n  [ INFO: possible recursive locking detected ]\n  4.8.0-rc1-gfxbench+ #1 Tainted: G     U\n  ---------------------------------------------\n  rmmod/8895 is trying to acquire lock:\n   (&(&n->list_lock)->rlock){-.-...}, at: [<ffffffff811c80d7>] get_partial_node.isra.63+0x47/0x430\n\n  but task is already holding lock:\n   (&(&n->list_lock)->rlock){-.-...}, at: [<ffffffff811cbda4>] __kmem_cache_shutdown+0x54/0x320\n\n  other info that might help us debug this:\n  Possible unsafe locking scenario:\n        CPU0\n        ----\n   lock(&(&n->list_lock)->rlock);\n   lock(&(&n->list_lock)->rlock);\n\n   *** DEADLOCK ***\n   May be due to missing lock nesting notation\n   5 locks held by rmmod/8895:\n   #0:  (&dev->mutex){......}, at: driver_detach+0x42/0xc0\n   #1:  (&dev->mutex){......}, at: driver_detach+0x50/0xc0\n   #2:  (cpu_hotplug.dep_map){++++++}, at: get_online_cpus+0x2d/0x80\n   #3:  (slab_mutex){+.+.+.}, at: kmem_cache_destroy+0x3c/0x220\n   #4:  (&(&n->list_lock)->rlock){-.-...}, at: __kmem_cache_shutdown+0x54/0x320\n\n  stack backtrace:\n  CPU: 6 PID: 8895 Comm: rmmod Tainted: G     U          4.8.0-rc1-gfxbench+ #1\n  Hardware name: Gigabyte Technology Co., Ltd. H87M-D3H/H87M-D3H, BIOS F11 08/18/2015\n  Call Trace:\n    __lock_acquire+0x1646/0x1ad0\n    lock_acquire+0xb2/0x200\n    _raw_spin_lock+0x36/0x50\n    get_partial_node.isra.63+0x47/0x430\n    ___slab_alloc.constprop.67+0x1a7/0x3b0\n    __slab_alloc.isra.64.constprop.66+0x43/0x80\n    kmem_cache_alloc+0x236/0x2d0\n    __debug_object_init+0x2de/0x400\n    debug_object_activate+0x109/0x1e0\n    __call_rcu.constprop.63+0x32/0x2f0\n    call_rcu+0x12/0x20\n    discard_slab+0x3d/0x40\n    __kmem_cache_shutdown+0xdb/0x320\n    shutdown_cache+0x19/0x60\n    kmem_cache_destroy+0x1ae/0x220\n    i915_gem_load_cleanup+0x14/0x40 [i915]\n    i915_driver_unload+0x151/0x180 [i915]\n    i915_pci_remove+0x14/0x20 [i915]\n    pci_device_remove+0x34/0xb0\n    __device_release_driver+0x95/0x140\n    driver_detach+0xb6/0xc0\n    bus_remove_driver+0x53/0xd0\n    driver_unregister+0x27/0x50\n    pci_unregister_driver+0x25/0x70\n    i915_exit+0x1a/0x1e2 [i915]\n    SyS_delete_module+0x193/0x1f0\n    entry_SYSCALL_64_fastpath+0x1c/0xac\n\nFixes: 52b4b950b507 (\"mm: slab: free kmem_cache_node after destroy sysfs file\")\nLink: http://lkml.kernel.org/r/1470759070-18743-1-git-send-email-chris@chris-wilson.co.uk\nReported-by: Dave Gordon <david.s.gordon@intel.com>\nSigned-off-by: Chris Wilson <chris@chris-wilson.co.uk>\nReviewed-by: Vladimir Davydov <vdavydov@virtuozzo.com>\nAcked-by: Christoph Lameter <cl@linux.com>\nCc: Pekka Enberg <penberg@kernel.org>\nCc: David Rientjes <rientjes@google.com>\nCc: Joonsoo Kim <iamjoonsoo.kim@lge.com>\nCc: Dmitry Safonov <dsafonov@virtuozzo.com>\nCc: Daniel Vetter <daniel.vetter@ffwll.ch>\nCc: Dave Gordon <david.s.gordon@intel.com>\nCc: <stable@vger.kernel.org>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>","distinct":true,"url":"https://api.github.com/repos/torvalds/linux/commits/6039892396d845b18228935561960441900cffca"},{"sha":"85e97be32c6242c98dbbc7a241b4a78c1b93327b","author":{"name":"Linus Torvalds","email":"ead7104581934751970e9decb2db5deb20a9e407@linux-foundation.org"},"message":"Merge branch 'akpm' (patches from Andrew)\n\nMerge misc fixes from Andrew Morton:\n \"8 fixes\"\n\n* emailed patches from Andrew Morton <akpm@linux-foundation.org>:\n  mm/slub.c: run free_partial() outside of the kmem_cache_node->list_lock\n  rmap: fix compound check logic in page_remove_file_rmap\n  mm, rmap: fix false positive VM_BUG() in page_add_file_rmap()\n  mm/page_alloc.c: recalculate some of node threshold when on/offline memory\n  mm/page_alloc.c: fix wrong initialization when sysctl_min_unmapped_ratio changes\n  thp: move shmem_huge_enabled() outside of SYSFS ifdef\n  revert \"ARM: keystone: dts: add psci command definition\"\n  rapidio: dereferencing an error pointer","distinct":true,"url":"https://api.github.com/repos/torvalds/linux/commits/85e97be32c6242c98dbbc7a241b4a78c1b93327b"}]}
{"actor":{"display_login":"torvalds"}}