{"push_id":1184845171,"size":73,"distinct_size":0,"ref":"refs/heads/linaro/linux-linaro-lsk-v4.1","head":"439863d92fda525a8f3b326a24490e91c70f0496","before":"7c0ca54c030093b1d887c432304414d269a9504c","commits":[{"sha":"4dbfb8be1989118cd013c058c2f0ce199ecaf93f","author":{"name":"Arnd Bergmann","email":"72a0f6d3b182607e6d5c44b93e1abb7b23ee18f3@arndb.de"},"message":"crypto: public_key: select CRYPTO_AKCIPHER\n\n[ Upstream commit bad6a185b4d6f81d0ed2b6e4c16307969f160b95 ]\n\nIn some rare randconfig builds, we can end up with\nASYMMETRIC_PUBLIC_KEY_SUBTYPE enabled but CRYPTO_AKCIPHER disabled,\nwhich fails to link because of the reference to crypto_alloc_akcipher:\n\ncrypto/built-in.o: In function `public_key_verify_signature':\n:(.text+0x110e4): undefined reference to `crypto_alloc_akcipher'\n\nThis adds a Kconfig 'select' statement to ensure the dependency\nis always there.\n\nCc: <stable@vger.kernel.org>\nSigned-off-by: Arnd Bergmann <arnd@arndb.de>\nSigned-off-by: Herbert Xu <herbert@gondor.apana.org.au>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/4dbfb8be1989118cd013c058c2f0ce199ecaf93f"},{"sha":"8cdfb73d8c344384469ddd019320ea9cd9e718a9","author":{"name":"James Bottomley","email":"c61de33534998ae239ac3bcee9c77ffbb5713c74@HansenPartnership.com"},"message":"scsi_lib: correctly retry failed zero length REQ_TYPE_FS commands\n\n[ Upstream commit a621bac3044ed6f7ec5fa0326491b2d4838bfa93 ]\n\nWhen SCSI was written, all commands coming from the filesystem\n(REQ_TYPE_FS commands) had data.  This meant that our signal for needing\nto complete the command was the number of bytes completed being equal to\nthe number of bytes in the request.  Unfortunately, with the advent of\nflush barriers, we can now get zero length REQ_TYPE_FS commands, which\nconfuse this logic because they satisfy the condition every time.  This\nmeans they never get retried even for retryable conditions, like UNIT\nATTENTION because we complete them early assuming they're done.  Fix\nthis by special casing the early completion condition to recognise zero\nlength commands with errors and let them drop through to the retry code.\n\nCc: stable@vger.kernel.org\nReported-by: Sebastian Parschauer <s.parschauer@gmx.de>\nSigned-off-by: James E.J. Bottomley <jejb@linux.vnet.ibm.com>\nTested-by: Jack Wang <jinpu.wang@profitbricks.com>\nSigned-off-by: Martin K. Petersen <martin.petersen@oracle.com>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/8cdfb73d8c344384469ddd019320ea9cd9e718a9"},{"sha":"b182f703e49b54b6a7d135b279f4ac53abf337a2","author":{"name":"Tom Lendacky","email":"aae724d943dd57e8b9dec8b455e9688272d2d782@amd.com"},"message":"crypto: ccp - Fix AES XTS error for request sizes above 4096\n\n[ Upstream commit ab6a11a7c8ef47f996974dd3c648c2c0b1a36ab1 ]\n\nThe ccp-crypto module for AES XTS support has a bug that can allow requests\ngreater than 4096 bytes in size to be passed to the CCP hardware. The CCP\nhardware does not support request sizes larger than 4096, resulting in\nincorrect output. The request should actually be handled by the fallback\nmechanism instantiated by the ccp-crypto module.\n\nAdd a check to insure the request size is less than or equal to the maximum\nsupported size and use the fallback mechanism if it is not.\n\nCc: <stable@vger.kernel.org> # 3.14.x-\nSigned-off-by: Tom Lendacky <thomas.lendacky@amd.com>\nSigned-off-by: Herbert Xu <herbert@gondor.apana.org.au>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/b182f703e49b54b6a7d135b279f4ac53abf337a2"},{"sha":"f98a3feb04c264bdb6b1127831bca65484b6185e","author":{"name":"Russell Currey","email":"2eacafec92f559d51886f12bbdf842327b6af83e@russell.cc"},"message":"powerpc/pseries/eeh: Handle RTAS delay requests in configure_bridge\n\n[ Upstream commit 871e178e0f2c4fa788f694721a10b4758d494ce1 ]\n\nIn the \"ibm,configure-pe\" and \"ibm,configure-bridge\" RTAS calls, the\nspec states that values of 9900-9905 can be returned, indicating that\nsoftware should delay for 10^x (where x is the last digit, i.e. 990x)\nmilliseconds and attempt the call again. Currently, the kernel doesn't\nknow about this, and respecting it fixes some PCI failures when the\nhypervisor is busy.\n\nThe delay is capped at 0.2 seconds.\n\nCc: <stable@vger.kernel.org> # 3.10+\nSigned-off-by: Russell Currey <ruscur@russell.cc>\nAcked-by: Gavin Shan <gwshan@linux.vnet.ibm.com>\nSigned-off-by: Michael Ellerman <mpe@ellerman.id.au>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/f98a3feb04c264bdb6b1127831bca65484b6185e"},{"sha":"3de5aac328d5006b251fff8b3bf0c4940898ad42","author":{"name":"Kailang Yang","email":"08a5e1a5190dd16d580b4a90f5cf0a516ee59156@realtek.com"},"message":"ALSA: hda/realtek - ALC256 speaker noise issue\n\n[ Upstream commit e69e7e03ed225abf3e1c43545aa3bcb68dc81d5f ]\n\nThat is some different register for ALC255 and ALC256.\nALC256 can't fit with some ALC255 register.\nThis issue is cause from LDO output voltage control.\nThis patch is updated the right LDO register value.\n\nSigned-off-by: Kailang Yang <kailang@realtek.com>\nCc: <stable@vger.kernel.org>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/3de5aac328d5006b251fff8b3bf0c4940898ad42"},{"sha":"466a158ee7f1913f104b04b7e14baccd95af15bf","author":{"name":"hongkun.cao","email":"824314f26c060724ed640c402188d098413fd4dd@mediatek.com"},"message":"pinctrl: mediatek: fix dual-edge code defect\n\n[ Upstream commit 5edf673d07fdcb6498be24914f3f38f8d8843199 ]\n\nWhen a dual-edge irq is triggered, an incorrect irq will be reported on\ncondition that the external signal is not stable and this incorrect irq\nhas been registered.\nCorrect the register offset.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Hongkun Cao <hongkun.cao@mediatek.com>\nReviewed-by: Matthias Brugger <matthias.bgg@gmail.com>\nSigned-off-by: Linus Walleij <linus.walleij@linaro.org>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/466a158ee7f1913f104b04b7e14baccd95af15bf"},{"sha":"d58d489f2e03ceb48f8dd979d94cac9b3451d0cd","author":{"name":"Thomas Huth","email":"88e8c2c9848c27f046284b2ccf48cd5b58fafc02@redhat.com"},"message":"powerpc: Fix definition of SIAR and SDAR registers\n\n[ Upstream commit d23fac2b27d94aeb7b65536a50d32bfdc21fe01e ]\n\nThe SIAR and SDAR registers are available twice, one time as SPRs\n780 / 781 (unprivileged, but read-only), and one time as the SPRs\n796 / 797 (privileged, but read and write). The Linux kernel code\ncurrently uses the unprivileged  SPRs - while this is OK for reading,\nwriting to that register of course does not work.\nSince the KVM code tries to write to this register, too (see the mtspr\nin book3s_hv_rmhandlers.S), the contents of this register sometimes get\nlost for the guests, e.g. during migration of a VM.\nTo fix this issue, simply switch to the privileged SPR numbers instead.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Thomas Huth <thuth@redhat.com>\nAcked-by: Paul Mackerras <paulus@ozlabs.org>\nSigned-off-by: Michael Ellerman <mpe@ellerman.id.au>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/d58d489f2e03ceb48f8dd979d94cac9b3451d0cd"},{"sha":"dd254ba2b75a05dd7e2d843a30aa6371bb7dd67a","author":{"name":"Thomas Huth","email":"88e8c2c9848c27f046284b2ccf48cd5b58fafc02@redhat.com"},"message":"powerpc: Use privileged SPR number for MMCR2\n\n[ Upstream commit 8dd75ccb571f3c92c48014b3dabd3d51a115ab41 ]\n\nWe are already using the privileged versions of MMCR0, MMCR1\nand MMCRA in the kernel, so for MMCR2, we should better use\nthe privileged versions, too, to be consistent.\n\nFixes: 240686c13687 (\"powerpc: Initialise PMU related regs on Power8\")\nCc: stable@vger.kernel.org # v3.10+\nSuggested-by: Paul Mackerras <paulus@ozlabs.org>\nSigned-off-by: Thomas Huth <thuth@redhat.com>\nAcked-by: Paul Mackerras <paulus@ozlabs.org>\nSigned-off-by: Michael Ellerman <mpe@ellerman.id.au>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/dd254ba2b75a05dd7e2d843a30aa6371bb7dd67a"},{"sha":"6e19f72011a87e576c00b2c38108cfa461542fca","author":{"name":"Martin Willi","email":"ea98e1d0a9a4d10e3af04e16be88050749615623@strongswan.org"},"message":"mac80211_hwsim: Add missing check for HWSIM_ATTR_SIGNAL\n\n[ Upstream commit 62397da50bb20a6b812c949ef465d7e69fe54bb6 ]\n\nA wmediumd that does not send this attribute causes a NULL pointer\ndereference, as the attribute is accessed even if it does not exist.\n\nThe attribute was required but never checked ever since userspace frame\nforwarding has been introduced. The issue gets more problematic once we\nallow wmediumd registration from user namespaces.\n\nCc: stable@vger.kernel.org\nFixes: 7882513bacb1 (\"mac80211_hwsim driver support userspace frame tx/rx\")\nSigned-off-by: Martin Willi <martin@strongswan.org>\nSigned-off-by: Johannes Berg <johannes.berg@intel.com>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/6e19f72011a87e576c00b2c38108cfa461542fca"},{"sha":"2b8944f05530cb759468c42895571e46d103b883","author":{"name":"Bob Copeland","email":"b4a5ea001e047040e8c9075b67a268293138da2c@bobcopeland.com"},"message":"mac80211: mesh: flush mesh paths unconditionally\n\n[ Upstream commit fe7a7c57629e8dcbc0e297363a9b2366d67a6dc5 ]\n\nCurrently, the mesh paths associated with a nexthop station are cleaned\nup in the following code path:\n\n    __sta_info_destroy_part1\n    synchronize_net()\n    __sta_info_destroy_part2\n     -> cleanup_single_sta\n       -> mesh_sta_cleanup\n         -> mesh_plink_deactivate\n           -> mesh_path_flush_by_nexthop\n\nHowever, there are a couple of problems here:\n\n1) the paths aren't flushed at all if the MPM is running in userspace\n   (e.g. when using wpa_supplicant or authsae)\n\n2) there is no synchronize_rcu between removing the path and readers\n   accessing the nexthop, which means the following race is possible:\n\nCPU0                            CPU1\n~~~~                            ~~~~\n                                sta_info_destroy_part1()\n                                synchronize_net()\nrcu_read_lock()\nmesh_nexthop_resolve()\n  mpath = mesh_path_lookup()\n                                [...] -> mesh_path_flush_by_nexthop()\n  sta = rcu_dereference(\n    mpath->next_hop)\n                                kfree(sta)\n  access sta <-- CRASH\n\nFix both of these by unconditionally flushing paths before destroying\nthe sta, and by adding a synchronize_net() after path flush to ensure\nno active readers can still dereference the sta.\n\nFixes this crash:\n\n[  348.529295] BUG: unable to handle kernel paging request at 00020040\n[  348.530014] IP: [<f929245d>] ieee80211_mps_set_frame_flags+0x40/0xaa [mac80211]\n[  348.530014] *pde = 00000000\n[  348.530014] Oops: 0000 [#1] PREEMPT\n[  348.530014] Modules linked in: drbg ansi_cprng ctr ccm ppp_generic slhc ipt_MASQUERADE nf_nat_masquerade_ipv4 8021q ]\n[  348.530014] CPU: 0 PID: 20597 Comm: wget Tainted: G           O 4.6.0-rc5-wt=V1 #1\n[  348.530014] Hardware name: To Be Filled By O.E.M./To be filled by O.E.M., BIOS 080016  11/07/2014\n[  348.530014] task: f64fa280 ti: f4f9c000 task.ti: f4f9c000\n[  348.530014] EIP: 0060:[<f929245d>] EFLAGS: 00010246 CPU: 0\n[  348.530014] EIP is at ieee80211_mps_set_frame_flags+0x40/0xaa [mac80211]\n[  348.530014] EAX: f4ce63e0 EBX: 00000088 ECX: f3788416 EDX: 00020008\n[  348.530014] ESI: 00000000 EDI: 00000088 EBP: f6409a4c ESP: f6409a40\n[  348.530014]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 0068\n[  348.530014] CR0: 80050033 CR2: 00020040 CR3: 33190000 CR4: 00000690\n[  348.530014] Stack:\n[  348.530014]  00000000 f4ce63e0 f5f9bd80 f6409a64 f9291d80 0000ce67 f5d51e00 f4ce63e0\n[  348.530014]  f3788416 f6409a80 f9291dc1 f4ce8320 f4ce63e0 f5d51e00 f4ce63e0 f4ce8320\n[  348.530014]  f6409a98 f9277f6f 00000000 00000000 0000007c 00000000 f6409b2c f9278dd1\n[  348.530014] Call Trace:\n[  348.530014]  [<f9291d80>] mesh_nexthop_lookup+0xbb/0xc8 [mac80211]\n[  348.530014]  [<f9291dc1>] mesh_nexthop_resolve+0x34/0xd8 [mac80211]\n[  348.530014]  [<f9277f6f>] ieee80211_xmit+0x92/0xc1 [mac80211]\n[  348.530014]  [<f9278dd1>] __ieee80211_subif_start_xmit+0x807/0x83c [mac80211]\n[  348.530014]  [<c04df012>] ? sch_direct_xmit+0xd7/0x1b3\n[  348.530014]  [<c022a8c6>] ? __local_bh_enable_ip+0x5d/0x7b\n[  348.530014]  [<f956870c>] ? nf_nat_ipv4_out+0x4c/0xd0 [nf_nat_ipv4]\n[  348.530014]  [<f957e036>] ? iptable_nat_ipv4_fn+0xf/0xf [iptable_nat]\n[  348.530014]  [<c04c6f45>] ? netif_skb_features+0x14d/0x30a\n[  348.530014]  [<f9278e10>] ieee80211_subif_start_xmit+0xa/0xe [mac80211]\n[  348.530014]  [<c04c769c>] dev_hard_start_xmit+0x1f8/0x267\n[  348.530014]  [<c04c7261>] ?  validate_xmit_skb.isra.120.part.121+0x10/0x253\n[  348.530014]  [<c04defc6>] sch_direct_xmit+0x8b/0x1b3\n[  348.530014]  [<c04c7a9c>] __dev_queue_xmit+0x2c8/0x513\n[  348.530014]  [<c04c7cfb>] dev_queue_xmit+0xa/0xc\n[  348.530014]  [<f91bfc7a>] batadv_send_skb_packet+0xd6/0xec [batman_adv]\n[  348.530014]  [<f91bfdc4>] batadv_send_unicast_skb+0x15/0x4a [batman_adv]\n[  348.530014]  [<f91b5938>] batadv_dat_send_data+0x27e/0x310 [batman_adv]\n[  348.530014]  [<f91c30b5>] ? batadv_tt_global_hash_find.isra.11+0x8/0xa [batman_adv]\n[  348.530014]  [<f91b63f3>] batadv_dat_snoop_outgoing_arp_request+0x208/0x23d [batman_adv]\n[  348.530014]  [<f91c0cd9>] batadv_interface_tx+0x206/0x385 [batman_adv]\n[  348.530014]  [<c04c769c>] dev_hard_start_xmit+0x1f8/0x267\n[  348.530014]  [<c04c7261>] ?  validate_xmit_skb.isra.120.part.121+0x10/0x253\n[  348.530014]  [<c04defc6>] sch_direct_xmit+0x8b/0x1b3\n[  348.530014]  [<c04c7a9c>] __dev_queue_xmit+0x2c8/0x513\n[  348.530014]  [<f80cbd2a>] ? igb_xmit_frame+0x57/0x72 [igb]\n[  348.530014]  [<c04c7cfb>] dev_queue_xmit+0xa/0xc\n[  348.530014]  [<f843a326>] br_dev_queue_push_xmit+0xeb/0xfb [bridge]\n[  348.530014]  [<f843a35f>] br_forward_finish+0x29/0x74 [bridge]\n[  348.530014]  [<f843a23b>] ? deliver_clone+0x3b/0x3b [bridge]\n[  348.530014]  [<f843a714>] __br_forward+0x89/0xe7 [bridge]\n[  348.530014]  [<f843a336>] ? br_dev_queue_push_xmit+0xfb/0xfb [bridge]\n[  348.530014]  [<f843a234>] deliver_clone+0x34/0x3b [bridge]\n[  348.530014]  [<f843a68b>] ? br_flood+0x95/0x95 [bridge]\n[  348.530014]  [<f843a66d>] br_flood+0x77/0x95 [bridge]\n[  348.530014]  [<f843a809>] br_flood_forward+0x13/0x1a [bridge]\n[  348.530014]  [<f843a68b>] ? br_flood+0x95/0x95 [bridge]\n[  348.530014]  [<f843b877>] br_handle_frame_finish+0x392/0x3db [bridge]\n[  348.530014]  [<c04e9b2b>] ? nf_iterate+0x2b/0x6b\n[  348.530014]  [<f843baa6>] br_handle_frame+0x1e6/0x240 [bridge]\n[  348.530014]  [<f843b4e5>] ? br_handle_local_finish+0x6a/0x6a [bridge]\n[  348.530014]  [<c04c4ba0>] __netif_receive_skb_core+0x43a/0x66b\n[  348.530014]  [<f843b8c0>] ? br_handle_frame_finish+0x3db/0x3db [bridge]\n[  348.530014]  [<c023cea4>] ? resched_curr+0x19/0x37\n[  348.530014]  [<c0240707>] ? check_preempt_wakeup+0xbf/0xfe\n[  348.530014]  [<c0255dec>] ? ktime_get_with_offset+0x5c/0xfc\n[  348.530014]  [<c04c4fc1>] __netif_receive_skb+0x47/0x55\n[  348.530014]  [<c04c57ba>] netif_receive_skb_internal+0x40/0x5a\n[  348.530014]  [<c04c61ef>] napi_gro_receive+0x3a/0x94\n[  348.530014]  [<f80ce8d5>] igb_poll+0x6fd/0x9ad [igb]\n[  348.530014]  [<c0242bd8>] ? swake_up_locked+0x14/0x26\n[  348.530014]  [<c04c5d29>] net_rx_action+0xde/0x250\n[  348.530014]  [<c022a743>] __do_softirq+0x8a/0x163\n[  348.530014]  [<c022a6b9>] ? __hrtimer_tasklet_trampoline+0x19/0x19\n[  348.530014]  [<c021100f>] do_softirq_own_stack+0x26/0x2c\n[  348.530014]  <IRQ>\n[  348.530014]  [<c022a957>] irq_exit+0x31/0x6f\n[  348.530014]  [<c0210eb2>] do_IRQ+0x8d/0xa0\n[  348.530014]  [<c058152c>] common_interrupt+0x2c/0x40\n[  348.530014] Code: e7 8c 00 66 81 ff 88 00 75 12 85 d2 75 0e b2 c3 b8 83 e9 29 f9 e8 a7 5f f9 c6 eb 74 66 81 e3 8c 005\n[  348.530014] EIP: [<f929245d>] ieee80211_mps_set_frame_flags+0x40/0xaa [mac80211] SS:ESP 0068:f6409a40\n[  348.530014] CR2: 0000000000020040\n[  348.530014] ---[ end trace 48556ac26779732e ]---\n[  348.530014] Kernel panic - not syncing: Fatal exception in interrupt\n[  348.530014] Kernel Offset: disabled\n\nCc: stable@vger.kernel.org\nReported-by: Fred Veldini <fred.veldini@gmail.com>\nTested-by: Fred Veldini <fred.veldini@gmail.com>\nSigned-off-by: Bob Copeland <me@bobcopeland.com>\nSigned-off-by: Johannes Berg <johannes.berg@intel.com>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/2b8944f05530cb759468c42895571e46d103b883"},{"sha":"fbcda466f1b3cb237eb5416393671e9e1bece57b","author":{"name":"Ewan D. Milne","email":"cded145a908be3e02214f20f5d969606627c9934@redhat.com"},"message":"scsi: Add QEMU CD-ROM to VPD Inquiry Blacklist\n\n[ Upstream commit fbd83006e3e536fcb103228d2422ea63129ccb03 ]\n\nLinux fails to boot as a guest with a QEMU CD-ROM:\n\n[    4.439488] ata2.00: ATAPI: QEMU CD-ROM, 0.8.2, max UDMA/100\n[    4.443649] ata2.00: configured for MWDMA2\n[    4.450267] scsi 1:0:0:0: CD-ROM            QEMU     QEMU CD-ROM      0.8. PQ: 0 ANSI: 5\n[    4.464317] ata2.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x6 frozen\n[    4.464319] ata2.00: BMDMA stat 0x5\n[    4.464339] ata2.00: cmd a0/01:00:00:00:01/00:00:00:00:00/a0 tag 0 dma 16640 in\n[    4.464339]          Inquiry 12 01 00 00 ff 00res 48/20:02:00:24:00/00:00:00:00:00/a0 Emask 0x2 (HSM violation)\n[    4.464341] ata2.00: status: { DRDY DRQ }\n[    4.465864] ata2: soft resetting link\n[    4.625971] ata2.00: configured for MWDMA2\n[    4.628290] ata2: EH complete\n[    4.646670] ata2.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x6 frozen\n[    4.646671] ata2.00: BMDMA stat 0x5\n[    4.646683] ata2.00: cmd a0/01:00:00:00:01/00:00:00:00:00/a0 tag 0 dma 16640 in\n[    4.646683]          Inquiry 12 01 00 00 ff 00res 48/20:02:00:24:00/00:00:00:00:00/a0 Emask 0x2 (HSM violation)\n[    4.646685] ata2.00: status: { DRDY DRQ }\n[    4.648193] ata2: soft resetting link\n\n...\n\nFix this by suppressing VPD inquiry for this device.\n\nSigned-off-by: Ewan D. Milne <emilne@redhat.com>\nReported-by: Jan Stancek <jstancek@redhat.com>\nTested-by: Jan Stancek <jstancek@redhat.com>\nCc: <stable@vger.kernel.org>\nReviewed-by: Johannes Thumshirn <jthumshirn@suse.de>\nSigned-off-by: Martin K. Petersen <martin.petersen@oracle.com>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/fbcda466f1b3cb237eb5416393671e9e1bece57b"},{"sha":"3327b0c01cf4941a7692e715c158bce85011e0a6","author":{"name":"Thomas Huth","email":"88e8c2c9848c27f046284b2ccf48cd5b58fafc02@redhat.com"},"message":"powerpc/pseries: Add POWER8NVL support to ibm,client-architecture-support call\n\n[ Upstream commit 7cc851039d643a2ee7df4d18177150f2c3a484f5 ]\n\nIf we do not provide the PVR for POWER8NVL, a guest on this system\ncurrently ends up in PowerISA 2.06 compatibility mode on KVM, since QEMU\ndoes not provide a generic PowerISA 2.07 mode yet. So some new\ninstructions from POWER8 (like \"mtvsrd\") get disabled for the guest,\nresulting in crashes when using code compiled explicitly for\nPOWER8 (e.g. with the \"-mcpu=power8\" option of GCC).\n\nFixes: ddee09c099c3 (\"powerpc: Add PVR for POWER8NVL processor\")\nCc: stable@vger.kernel.org # v4.0+\nSigned-off-by: Thomas Huth <thuth@redhat.com>\nSigned-off-by: Michael Ellerman <mpe@ellerman.id.au>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/3327b0c01cf4941a7692e715c158bce85011e0a6"},{"sha":"f5a826aa29aba9e2800ae8269df2f274d6bb322f","author":{"name":"Viresh Kumar","email":"4ca49bc1dcfdfc376d29da1eb07a3e0b3cd46daa@linaro.org"},"message":"thermal/cpu_cooling: rename cpufreq_val as clipped_freq\n\n[ Upstream commit 59f0d21883f39d27f14408d4ca211dce80658963 ]\n\nThat's what it is for, lets name it properly.\n\nSigned-off-by: Viresh Kumar <viresh.kumar@linaro.org>\nSigned-off-by: Eduardo Valentin <edubezval@gmail.com>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/f5a826aa29aba9e2800ae8269df2f274d6bb322f"},{"sha":"1c4732bd6d31d8ded9b6ce802e60cd92fc1701bb","author":{"name":"Lukasz Luba","email":"c676eaa8110283e2e390a63c30de4d930fa13bd5@arm.com"},"message":"thermal: cpu_cooling: fix improper order during initialization\n\n[ Upstream commit f840ab18bdf2e415dac21d09fbbbd2873111bd48 ]\n\nThe freq_table array is not populated before calling\nthermal_of_cooling_register. The code which populates the freq table was\nintroduced in commit f6859014.\nThis should be done before registering new thermal cooling device.\nThe log shows effects of this wrong decision.\n[    2.172614] cpu cpu1: Failed to get voltage for frequency 1984518656000: -34\n[    2.220863] cpu cpu0: Failed to get voltage for frequency 1984524416000: -34\n\nCc: <stable@vger.kernel.org> # 3.19+\nFixes: f6859014c7e7 (\"thermal: cpu_cooling: Store frequencies in descending order\")\nSigned-off-by: Lukasz Luba <lukasz.luba@arm.com>\nAcked-by: Javi Merino <javi.merino@arm.com>\nAcked-by: Viresh Kumar <viresh.kumar@linaro.org>\nSigned-off-by: Zhang Rui <rui.zhang@intel.com>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/1c4732bd6d31d8ded9b6ce802e60cd92fc1701bb"},{"sha":"3d69d142d6431c9daecc6e47daf22abd386311af","author":{"name":"Ilia Mirkin","email":"b2ef0ae728ba642680a7b0ef24aed39533e21358@alum.mit.edu"},"message":"drm/nouveau/gr: document mp error 0x10\n\n[ Upstream commit 3988f645f053a6889d00324dac3e57bd62cb8900 ]\n\nNVIDIA provided the documentation for mp error 0x10, INVALID_ADDR_SPACE,\nwhich apparently happens when trying to use an atomic operation on\nlocal or shared memory (instead of global memory).\n\nSigned-off-by: Ilia Mirkin <imirkin@alum.mit.edu>\nSigned-off-by: Ben Skeggs <bskeggs@redhat.com>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/3d69d142d6431c9daecc6e47daf22abd386311af"},{"sha":"063c66caefc18d026a1f9d5c49bf6bf761feb318","author":{"name":"Ben Skeggs","email":"63a676a8a1b300e6f5baea1ffe7bc1e56ba63d0e@redhat.com"},"message":"drm/nouveau/gr/gf100-: update sm error decoding from gk20a nvgpu headers\n\n[ Upstream commit 383d0a419f8e63e3d65e706c3c515fa9505ce364 ]\n\nSigned-off-by: Ben Skeggs <bskeggs@redhat.com>\nCc: stable@vger.kernel.org\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/063c66caefc18d026a1f9d5c49bf6bf761feb318"},{"sha":"34e6c73e0bebcec0ff4788170b1abd51cbf683ad","author":{"name":"Ben Skeggs","email":"63a676a8a1b300e6f5baea1ffe7bc1e56ba63d0e@redhat.com"},"message":"drm/nouveau/fbcon: fix out-of-bounds memory accesses\n\n[ Upstream commit f045f459d925138fe7d6193a8c86406bda7e49da ]\n\nReported by KASAN.\n\nSigned-off-by: Ben Skeggs <bskeggs@redhat.com>\nCc: stable@vger.kernel.org\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/34e6c73e0bebcec0ff4788170b1abd51cbf683ad"},{"sha":"5642859e6a68f8c8c1e0c5163fad29ad4497f6f5","author":{"name":"Russell King","email":"8640768d851c67eb4c0e8bfcf2aabcc8010b9372@armlinux.org.uk"},"message":"ARM: fix PTRACE_SETVFPREGS on SMP systems\n\n[ Upstream commit e2dfb4b880146bfd4b6aa8e138c0205407cebbaf ]\n\nPTRACE_SETVFPREGS fails to properly mark the VFP register set to be\nreloaded, because it undoes one of the effects of vfp_flush_hwstate().\n\nSpecifically vfp_flush_hwstate() sets thread->vfpstate.hard.cpu to\nan invalid CPU number, but vfp_set() overwrites this with the original\nCPU number, thereby rendering the hardware state as apparently \"valid\",\neven though the software state is more recent.\n\nFix this by reverting the previous change.\n\nCc: <stable@vger.kernel.org>\nFixes: 8130b9d7b9d8 (\"ARM: 7308/1: vfp: flush thread hwstate before copying ptrace registers\")\nAcked-by: Will Deacon <will.deacon@arm.com>\nTested-by: Simon Marchi <simon.marchi@ericsson.com>\nSigned-off-by: Russell King <rmk+kernel@armlinux.org.uk>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/5642859e6a68f8c8c1e0c5163fad29ad4497f6f5"},{"sha":"f9301f929c0a02505a1e151b636c5a9af4f04bfc","author":{"name":"Paolo Bonzini","email":"7438500e0207b21c4e5dfca8d2a7898734cd7706@redhat.com"},"message":"KVM: irqfd: fix NULL pointer dereference in kvm_irq_map_gsi\n\n[ Upstream commit c622a3c21ede892e370b56e1ceb9eb28f8bbda6b ]\n\nFound by syzkaller:\n\n    BUG: unable to handle kernel NULL pointer dereference at 0000000000000120\n    IP: [<ffffffffa0797202>] kvm_irq_map_gsi+0x12/0x90 [kvm]\n    PGD 6f80b067 PUD b6535067 PMD 0\n    Oops: 0000 [#1] SMP\n    CPU: 3 PID: 4988 Comm: a.out Not tainted 4.4.9-300.fc23.x86_64 #1\n    [...]\n    Call Trace:\n     [<ffffffffa0795f62>] irqfd_update+0x32/0xc0 [kvm]\n     [<ffffffffa0796c7c>] kvm_irqfd+0x3dc/0x5b0 [kvm]\n     [<ffffffffa07943f4>] kvm_vm_ioctl+0x164/0x6f0 [kvm]\n     [<ffffffff81241648>] do_vfs_ioctl+0x298/0x480\n     [<ffffffff812418a9>] SyS_ioctl+0x79/0x90\n     [<ffffffff817a1062>] tracesys_phase2+0x84/0x89\n    Code: b5 71 a7 e0 5b 41 5c 41 5d 5d f3 c3 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 8b 8f 10 2e 00 00 31 c0 48 89 e5 <39> 91 20 01 00 00 76 6a 48 63 d2 48 8b 94 d1 28 01 00 00 48 85\n    RIP  [<ffffffffa0797202>] kvm_irq_map_gsi+0x12/0x90 [kvm]\n     RSP <ffff8800926cbca8>\n    CR2: 0000000000000120\n\nTestcase:\n\n    #include <unistd.h>\n    #include <sys/syscall.h>\n    #include <string.h>\n    #include <stdint.h>\n    #include <linux/kvm.h>\n    #include <fcntl.h>\n    #include <sys/ioctl.h>\n\n    long r[26];\n\n    int main()\n    {\n        memset(r, -1, sizeof(r));\n        r[2] = open(\"/dev/kvm\", 0);\n        r[3] = ioctl(r[2], KVM_CREATE_VM, 0);\n\n        struct kvm_irqfd ifd;\n        ifd.fd = syscall(SYS_eventfd2, 5, 0);\n        ifd.gsi = 3;\n        ifd.flags = 2;\n        ifd.resamplefd = ifd.fd;\n        r[25] = ioctl(r[3], KVM_IRQFD, &ifd);\n        return 0;\n    }\n\nReported-by: Dmitry Vyukov <dvyukov@google.com>\nCc: stable@vger.kernel.org\nSigned-off-by: Paolo Bonzini <pbonzini@redhat.com>\nSigned-off-by: Radim Krčmář <rkrcmar@redhat.com>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/f9301f929c0a02505a1e151b636c5a9af4f04bfc"},{"sha":"839c2669344ed8c10f3b6f968c467071b6288067","author":{"name":"Paolo Bonzini","email":"7438500e0207b21c4e5dfca8d2a7898734cd7706@redhat.com"},"message":"KVM: x86: fix OOPS after invalid KVM_SET_DEBUGREGS\n\n[ Upstream commit d14bdb553f9196169f003058ae1cdabe514470e6 ]\n\nMOV to DR6 or DR7 causes a #GP if an attempt is made to write a 1 to\nany of bits 63:32.  However, this is not detected at KVM_SET_DEBUGREGS\ntime, and the next KVM_RUN oopses:\n\n   general protection fault: 0000 [#1] SMP\n   CPU: 2 PID: 14987 Comm: a.out Not tainted 4.4.9-300.fc23.x86_64 #1\n   Hardware name: LENOVO 2325F51/2325F51, BIOS G2ET32WW (1.12 ) 05/30/2012\n   [...]\n   Call Trace:\n    [<ffffffffa072c93d>] kvm_arch_vcpu_ioctl_run+0x141d/0x14e0 [kvm]\n    [<ffffffffa071405d>] kvm_vcpu_ioctl+0x33d/0x620 [kvm]\n    [<ffffffff81241648>] do_vfs_ioctl+0x298/0x480\n    [<ffffffff812418a9>] SyS_ioctl+0x79/0x90\n    [<ffffffff817a0f2e>] entry_SYSCALL_64_fastpath+0x12/0x71\n   Code: 55 83 ff 07 48 89 e5 77 27 89 ff ff 24 fd 90 87 80 81 0f 23 fe 5d c3 0f 23 c6 5d c3 0f 23 ce 5d c3 0f 23 d6 5d c3 0f 23 de 5d c3 <0f> 23 f6 5d c3 0f 0b 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00\n   RIP  [<ffffffff810639eb>] native_set_debugreg+0x2b/0x40\n    RSP <ffff88005836bd50>\n\nTestcase (beautified/reduced from syzkaller output):\n\n    #include <unistd.h>\n    #include <sys/syscall.h>\n    #include <string.h>\n    #include <stdint.h>\n    #include <linux/kvm.h>\n    #include <fcntl.h>\n    #include <sys/ioctl.h>\n\n    long r[8];\n\n    int main()\n    {\n        struct kvm_debugregs dr = { 0 };\n\n        r[2] = open(\"/dev/kvm\", O_RDONLY);\n        r[3] = ioctl(r[2], KVM_CREATE_VM, 0);\n        r[4] = ioctl(r[3], KVM_CREATE_VCPU, 7);\n\n        memcpy(&dr,\n               \"\\x5d\\x6a\\x6b\\xe8\\x57\\x3b\\x4b\\x7e\\xcf\\x0d\\xa1\\x72\"\n               \"\\xa3\\x4a\\x29\\x0c\\xfc\\x6d\\x44\\x00\\xa7\\x52\\xc7\\xd8\"\n               \"\\x00\\xdb\\x89\\x9d\\x78\\xb5\\x54\\x6b\\x6b\\x13\\x1c\\xe9\"\n               \"\\x5e\\xd3\\x0e\\x40\\x6f\\xb4\\x66\\xf7\\x5b\\xe3\\x36\\xcb\",\n               48);\n        r[7] = ioctl(r[4], KVM_SET_DEBUGREGS, &dr);\n        r[6] = ioctl(r[4], KVM_RUN, 0);\n    }\n\nReported-by: Dmitry Vyukov <dvyukov@google.com>\nCc: stable@vger.kernel.org\nSigned-off-by: Paolo Bonzini <pbonzini@redhat.com>\nSigned-off-by: Radim Krčmář <rkrcmar@redhat.com>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":false,"url":"https://api.github.com/repos/dianlujitao/CAF_kernel_msm-3.18/commits/839c2669344ed8c10f3b6f968c467071b6288067"}]}
{"actor":{"display_login":"dianlujitao"}}