{"push_id":1258244001,"size":106,"distinct_size":106,"ref":"refs/heads/master","head":"43f4d36cbf82428374966568ea57a0bc0d664a20","before":"3408fef7448ce7d3c926978ee1a511e7707bffba","commits":[{"sha":"ea0a95d7f162bfa1c9df74471f0064f71cdf80ea","author":{"name":"Wei Yongjun","email":"dca6c8f1a6d37ffc89e9774b7b686d7557106bdd@gmail.com"},"message":"fcoe: Use kfree_skb() instead of kfree()\n\nUse kfree_skb() instead of kfree() to free sk_buff.\n\nSigned-off-by: Wei Yongjun <weiyj.lk@gmail.com>\nAcked-by: Johannes Thumshirn <jth@kernel.org>\nSigned-off-by: Martin K. Petersen <martin.petersen@oracle.com>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/ea0a95d7f162bfa1c9df74471f0064f71cdf80ea"},{"sha":"cf1b18030de29e4e5b0a57695ae5db4a89da0ff7","author":{"name":"Lubomir Rintel","email":"5fd9c3d43dc3364702889daff5ebadc6fc8bb13b@v3.sk"},"message":"USB: serial: option: add D-Link DWM-156/A3\n\nThe device has four interfaces; the three serial ports ought to be\nhandled by this driver:\n\n00 Diagnostic interface serial port\n01 NMEA device serial port\n02 Mass storage (sd card)\n03 Modem serial port\n\nThe other product ids listed in the Windows driver are present already.\n\nSigned-off-by: Lubomir Rintel <lkundrak@v3.sk>\nCc: stable <stable@vger.kernel.org>\nSigned-off-by: Johan Hovold <johan@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/cf1b18030de29e4e5b0a57695ae5db4a89da0ff7"},{"sha":"6977495c06f7f47636a076ee5a0ca571279d9697","author":{"name":"Robert Deliën","email":"b93e48b8445e5b838ee3472c32911ea601bd3bb0@delien.nl"},"message":"USB: serial: ftdi_sio: add PIDs for Ivium Technologies devices\n\nIvium Technologies uses the FTDI VID with custom PIDs for their line of\nelectrochemical interfaces and the PalmSens they developed for PalmSens\nBV.\n\nSigned-off-by: Robert Delien <robert@delien.nl>\nCc: stable <stable@vger.kernel.org>\nSigned-off-by: Johan Hovold <johan@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/6977495c06f7f47636a076ee5a0ca571279d9697"},{"sha":"ae34d12cc1e212ffcd92e069030e54dae69c832f","author":{"name":"Sheng-Hui J. Chu","email":"4ea9e3f8e82030155772554a42f02a9e4bc9e1d1@gmail.com"},"message":"USB: serial: ftdi_sio: add device ID for WICED USB UART dev board\n\nBCM20706V2_EVAL is a WICED dev board designed with FT2232H USB 2.0\nUART/FIFO IC.\n\nTo support BCM920706V2_EVAL dev board for WICED development on Linux.\nAdd the VID(0a5c) and PID(6422) to ftdi_sio driver to allow loading\nftdi_sio for this board.\n\nSigned-off-by: Sheng-Hui J. Chu <s.jeffrey.chu@gmail.com>\nCc: stable <stable@vger.kernel.org>\nSigned-off-by: Johan Hovold <johan@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/ae34d12cc1e212ffcd92e069030e54dae69c832f"},{"sha":"01d7956b58e644ea0d2e8d9340c5727a8fc39d70","author":{"name":"Daniele Palmas","email":"8eadd4e0f410715cd0bee604d0bbc31740484d9b@gmail.com"},"message":"USB: serial: option: add support for Telit LE920A4\n\nThis patch adds a set of compositions for Telit LE920A4.\n\nCompositions in short are:\n\n0x1207: tty + tty\n0x1208: tty + adb + tty + tty\n0x1211: tty + adb + ecm\n0x1212: tty + adb\n0x1213: ecm + tty\n0x1214: tty + adb + ecm + tty\n\ntelit_le922_blacklist_usbcfg3 is reused for compositions 0x1211\nand 0x1214 due to the same interfaces positions.\n\nSigned-off-by: Daniele Palmas <dnlplm@gmail.com>\nCc: stable <stable@vger.kernel.org>\nSigned-off-by: Johan Hovold <johan@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/01d7956b58e644ea0d2e8d9340c5727a8fc39d70"},{"sha":"647024a7df36014bbc4479d92d88e6b77c0afcf6","author":{"name":"Alexey Klimov","email":"e28dfbf0a6996bf3673b668640f9e20275eae331@gmail.com"},"message":"USB: serial: fix memleak in driver-registration error path\n\nudriver struct allocated by kzalloc() will not be freed\nif usb_register() and next calls fail. This patch fixes this\nby adding one more step with kfree(udriver) in error path.\n\nSigned-off-by: Alexey Klimov <klimov.linux@gmail.com>\nAcked-by: Alan Stern <stern@rowland.harvard.edu>\nCc: stable <stable@vger.kernel.org>\nSigned-off-by: Johan Hovold <johan@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/647024a7df36014bbc4479d92d88e6b77c0afcf6"},{"sha":"fa00c437eef8dc2e7b25f8cd868cfa405fcc2bb3","author":{"name":"Dave Carroll","email":"b29f82b30544672af64ad35fbbcd8c458c682cf4@microsemi.com"},"message":"aacraid: Check size values after double-fetch from user\n\nIn aacraid's ioctl_send_fib() we do two fetches from userspace, one the\nget the fib header's size and one for the fib itself. Later we use the\nsize field from the second fetch to further process the fib. If for some\nreason the size from the second fetch is different than from the first\nfix, we may encounter an out-of- bounds access in aac_fib_send(). We\nalso check the sender size to insure it is not out of bounds. This was\nreported in https://bugzilla.kernel.org/show_bug.cgi?id=116751 and was\nassigned CVE-2016-6480.\n\nReported-by: Pengfei Wang <wpengfeinudt@gmail.com>\nFixes: 7c00ffa31 '[SCSI] 2.6 aacraid: Variable FIB size (updated patch)'\nCc: stable@vger.kernel.org\nSigned-off-by: Dave Carroll <david.carroll@microsemi.com>\nReviewed-by: Johannes Thumshirn <jthumshirn@suse.de>\nSigned-off-by: Martin K. Petersen <martin.petersen@oracle.com>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/fa00c437eef8dc2e7b25f8cd868cfa405fcc2bb3"},{"sha":"6bb47e8ab98accb1319bd43c64966340ba3bba9a","author":{"name":"Viresh Kumar","email":"4ca49bc1dcfdfc376d29da1eb07a3e0b3cd46daa@linaro.org"},"message":"usb: hub: Fix unbalanced reference count/memory leak/deadlocks\n\nMemory leak and unbalanced reference count:\n\nIf the hub gets disconnected while the core is still activating it, this\ncan result in leaking memory of few USB structures.\n\nThis will happen if we have done a kref_get() from hub_activate() and\nscheduled a delayed work item for HUB_INIT2/3. Now if hub_disconnect()\ngets called before the delayed work expires, then we will cancel the\nwork from hub_quiesce(), but wouldn't do a kref_put(). And so the\nunbalance.\n\nkmemleak reports this as (with the commit e50293ef9775 backported to\n3.10 kernel with other changes, though the same is true for mainline as\nwell):\n\nunreferenced object 0xffffffc08af5b800 (size 1024):\n  comm \"khubd\", pid 73, jiffies 4295051211 (age 6482.350s)\n  hex dump (first 32 bytes):\n    30 68 f3 8c c0 ff ff ff 00 a0 b2 2e c0 ff ff ff  0h..............\n    01 00 00 00 00 00 00 00 00 94 7d 40 c0 ff ff ff  ..........}@....\n  backtrace:\n    [<ffffffc0003079ec>] create_object+0x148/0x2a0\n    [<ffffffc000cc150c>] kmemleak_alloc+0x80/0xbc\n    [<ffffffc000303a7c>] kmem_cache_alloc_trace+0x120/0x1ac\n    [<ffffffc0006fa610>] hub_probe+0x120/0xb84\n    [<ffffffc000702b20>] usb_probe_interface+0x1ec/0x298\n    [<ffffffc0005d50cc>] driver_probe_device+0x160/0x374\n    [<ffffffc0005d5308>] __device_attach+0x28/0x4c\n    [<ffffffc0005d3164>] bus_for_each_drv+0x78/0xac\n    [<ffffffc0005d4ee0>] device_attach+0x6c/0x9c\n    [<ffffffc0005d42b8>] bus_probe_device+0x28/0xa0\n    [<ffffffc0005d23a4>] device_add+0x324/0x604\n    [<ffffffc000700fcc>] usb_set_configuration+0x660/0x6cc\n    [<ffffffc00070a350>] generic_probe+0x44/0x84\n    [<ffffffc000702914>] usb_probe_device+0x54/0x74\n    [<ffffffc0005d50cc>] driver_probe_device+0x160/0x374\n    [<ffffffc0005d5308>] __device_attach+0x28/0x4c\n\nDeadlocks:\n\nIf the hub gets disconnected early enough (i.e. before INIT2/INIT3 are\nfinished and the init_work is still queued), the core may call\nhub_quiesce() after acquiring interface device locks and it will wait\nfor the work to be cancelled synchronously. But if the work handler is\nalready running in parallel, it may try to acquire the same interface\ndevice lock and this may result in deadlock.\n\nFix both the issues by removing the call to cancel_delayed_work_sync().\n\nCC: <stable@vger.kernel.org> #4.4+\nFixes: e50293ef9775 (\"USB: fix invalid memory access in hub_activate()\")\nReported-by: Manu Gautam <mgautam@codeaurora.org>\nSigned-off-by: Viresh Kumar <viresh.kumar@linaro.org>\nAcked-by: Alan Stern <stern@rowland.harvard.edu>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/6bb47e8ab98accb1319bd43c64966340ba3bba9a"},{"sha":"ca5cbc8b02f9b21cc8cd1ab36668763ec34f9ee8","author":{"name":"Alan Stern","email":"5c4cbde65af01ad64f5b2177d0cd78ab5b01e5a1@rowland.harvard.edu"},"message":"USB: hub: fix up early-exit pathway in hub_activate\n\nThe early-exit pathway in hub_activate, added by commit e50293ef9775\n(\"USB: fix invalid memory access in hub_activate()\") needs\nimprovement.  It duplicates code that is already present at the end of\nthe subroutine, and it neglects to undo the effect of a\nusb_autopm_get_interface_no_resume() call.\n\nThis patch fixes both problems by making the early-exit pathway jump\ndirectly to the end of the subroutine.  It simplifies the code at the\nend by merging two conditionals that actually test the same condition\nalthough they appear different: If type < HUB_INIT3 then type must be\neither HUB_INIT2 or HUB_INIT, and it can't be HUB_INIT because in that\ncase the subroutine would have exited earlier.\n\nSigned-off-by: Alan Stern <stern@rowland.harvard.edu>\nCC: <stable@vger.kernel.org> #4.4+\nReviewed-by: Viresh Kumar <viresh.kumar@linaro.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/ca5cbc8b02f9b21cc8cd1ab36668763ec34f9ee8"},{"sha":"07d316a22e119fa301fd7dba7f1e1adfd4f72c05","author":{"name":"Alan Stern","email":"5c4cbde65af01ad64f5b2177d0cd78ab5b01e5a1@rowland.harvard.edu"},"message":"USB: hub: change the locking in hub_activate\n\nThe locking in hub_activate() is not adequate to provide full mutual\nexclusion with hub_quiesce().  The subroutine locks the hub's\nusb_interface, but the callers of hub_quiesce() (such as\nhub_pre_reset() and hub_event()) hold the lock to the hub's\nusb_device.\n\nThis patch changes hub_activate() to make it acquire the same lock as\nthose other routines.\n\nSigned-off-by: Alan Stern <stern@rowland.harvard.edu>\nCC: <stable@vger.kernel.org> #4.4+\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/07d316a22e119fa301fd7dba7f1e1adfd4f72c05"},{"sha":"28324936f3d672bbf83472fece8f36a158a52276","author":{"name":"Peter Chen","email":"1bd50f75c460ec6fb073f71822628b73bde58ca9@nxp.com"},"message":"usb: misc: usbtest: usbtest_do_ioctl may return positive integer\n\nFor case 14 and case 21, their correct return value is the number\nof bytes transferred, so it is a positive integer. But in usbtest_ioctl,\nit takes non-zero as false return value for usbtest_do_ioctl, so\nit will treat the correct test as wrong test, then the time on\ntests will be the minus value.\n\nSigned-off-by: Peter Chen <peter.chen@nxp.com>\nCc: stable <stable@vger.kernel.org>\nFixes: 18fc4ebdc705 (\"usb: misc: usbtest: Remove timeval usage\")\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/28324936f3d672bbf83472fece8f36a158a52276"},{"sha":"9c6256a5e707a9eb8b91962b550050b13aa75334","author":{"name":"Xiao Han","email":"4bf37f32454804642b7f7ca0de283ab57eb65c95@orange.fr"},"message":"usb: misc: ftdi-elan: Fix off-by-one memory corruptions\n\nThis patch fixes fives off-by-one bugs in the ftdi-elan driver code. The\nbug can be triggered by plugging a USB adapter for CardBus 3G cards (model\nU132 manufactured by Elan Digital Systems, Ltd), causing a kernel panic.\nThe fix was tested on Ubuntu 14.04.4 with 4.7.0-rc14.2.0-27-generic+ and\n4.4.0-22-generic+ kernel. In the ftdi_elan_synchronize function, an\noff-by-one memory corruption occurs when packet_bytes is equal or bigger\nthan m. After having read m bytes, that is bytes_read is equal to m, \"\n..\\x00\" is still copied to the stack variable causing an out bounds write\nof 4 bytes, which overwrites the stack canary and results in a kernel\npanic.\n\nThis off-by-one requires physical access to the machine. It is not\nexploitable since we have no control on the overwritten data.  Similar\noff-by-one bugs have been observed in 4 other functions:\nftdi_elan_stuck_waiting, ftdi_elan_read, ftdi_elan_edset_output and\nftdi_elan_flush_input_fifo.\n\nReported-by: Alex Palesandro <palexster@gmail.com>\nSigned-off-by: Xiao Han <xiao.han@orange.fr>\nTested-by: Paul Chaignon <pchaigno@gmail.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/9c6256a5e707a9eb8b91962b550050b13aa75334"},{"sha":"aed9d65ac3278d4febd8665bd7db59ef53e825fe","author":{"name":"Alan Stern","email":"5c4cbde65af01ad64f5b2177d0cd78ab5b01e5a1@rowland.harvard.edu"},"message":"USB: validate wMaxPacketValue entries in endpoint descriptors\n\nErroneous or malicious endpoint descriptors may have non-zero bits in\nreserved positions, or out-of-bounds values.  This patch helps prevent\nthese from causing problems by bounds-checking the wMaxPacketValue\nentries in endpoint descriptors and capping the values at the maximum\nallowed.\n\nThis issue was first discovered and tests were conducted by Jake Lamberson\n<jake.lamberson1@gmail.com>, an intern working for Rosie Hall.\n\nSigned-off-by: Alan Stern <stern@rowland.harvard.edu>\nReported-by: roswest <roswest@cisco.com>\nTested-by: roswest <roswest@cisco.com>\nCC: <stable@vger.kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/aed9d65ac3278d4febd8665bd7db59ef53e825fe"},{"sha":"bc337b51508beb2d039aff5074a76cfe1c212030","author":{"name":"Marc Ohlf","email":"ad71ae69c0b1fbac8d38c2aa2ee892d3a402ff26@mkt-sys.de"},"message":"usb: ehci: change order of register cleanup during shutdown\n\nIn ehci_turn_off_all_ports() all EHCI port registers are cleared to zero.\nOn some hardware, this can lead to an system hang,\nwhen ehci_port_power() accesses the already cleared registers.\n\nThis patch changes the order of cleanup.\nFirst call ehci_port_power() which respects the current bits in\nport status registers\nand afterwards cleanup the hard way by setting everything to zero.\n\nSigned-off-by: Marc Ohlf <ohlf@mkt-sys.de>\nAcked-by: Alan Stern <stern@rowland.harvard.edu>\nCC: <stable@vger.kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/bc337b51508beb2d039aff5074a76cfe1c212030"},{"sha":"70f7ca9a0262784d0b80727860a63d64ab228e7b","author":{"name":"Jiri Slaby","email":"5983af6a8e8283aa60de579a10bd4a0e541489a0@suse.cz"},"message":"usb: devio, do not warn when allocation fails\n\nusbdev_mmap allocates a buffer. The size of the buffer is determined\nby a user. So with this code (no need to be root):\n\n\tint fd = open(\"/dev/bus/usb/001/001\", O_RDONLY);\n\tmmap(NULL, 0x800000, PROT_READ, MAP_SHARED, fd, 0);\n\nwe can see a warning:\n\nWARNING: CPU: 0 PID: 21771 at ../mm/page_alloc.c:3563 __alloc_pages_slowpath+0x1036/0x16e0()\n...\nCall Trace:\n [<ffffffff8117a3ae>] ? warn_slowpath_null+0x2e/0x40\n [<ffffffff815178b6>] ? __alloc_pages_slowpath+0x1036/0x16e0\n [<ffffffff81516880>] ? warn_alloc_failed+0x250/0x250\n [<ffffffff8151226b>] ? get_page_from_freelist+0x75b/0x28b0\n [<ffffffff815184e3>] ? __alloc_pages_nodemask+0x583/0x6b0\n [<ffffffff81517f60>] ? __alloc_pages_slowpath+0x16e0/0x16e0\n [<ffffffff810565d4>] ? dma_generic_alloc_coherent+0x104/0x220\n [<ffffffffa0269e56>] ? hcd_buffer_alloc+0x1d6/0x3e0 [usbcore]\n [<ffffffffa0269c80>] ? hcd_buffer_destroy+0xa0/0xa0 [usbcore]\n [<ffffffffa0228f05>] ? usb_alloc_coherent+0x65/0x90 [usbcore]\n [<ffffffffa0275c05>] ? usbdev_mmap+0x1a5/0x770 [usbcore]\n...\n\nAllocations like this one should be marked as __GFP_NOWARN. So do so.\n\nThe size could be also clipped by something like:\n\tif (size >= (1 << (MAX_ORDER + PAGE_SHIFT - 1)))\n\t\treturn -ENOMEM;\nBut I think the overall limit of 16M (by usbfs_increase_memory_usage)\nis enough, so that we only silence the warning here.\n\nSigned-off-by: Jiri Slaby <jslaby@suse.cz>\nCc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nCc: Alan Stern <stern@rowland.harvard.edu>\nCc: Steinar H. Gunderson <sesse@google.com>\nCc: Markus Rechberger <mrechberger@gmail.com>\nFixes: f7d34b445a (USB: Add support for usbfs zerocopy.)\nCc: 4.6+ <stable@vger.kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/70f7ca9a0262784d0b80727860a63d64ab228e7b"},{"sha":"5cce438298a0d2a7a857a4a3c3e26aeb8f77b941","author":{"name":"Alan Stern","email":"5c4cbde65af01ad64f5b2177d0cd78ab5b01e5a1@rowland.harvard.edu"},"message":"USB: remove race condition in usbfs/libusb when using reap-after-disconnect\n\nHans de Goede has reported a difficulty in the Linux port of libusb.\nWhen a device is removed, the poll() system call in usbfs starts\nreturning POLLERR as soon as udev->state is set to\nUSB_STATE_NOTATTACHED, but the outstanding URBs are not available for\nreaping until some time later (after usbdev_remove() has been called).\nThis is awkward for libusb or other usbfs clients, although not an\ninsuperable problem.\n\nAt any rate, it's easy to change usbfs so that it returns POLLHUP as\nsoon as the state becomes USB_STATE_NOTATTACHED but it doesn't return\nPOLLERR until after the outstanding URBs have completed.  That's what\nthis patch does; it uses the fact that ps->list is always on the\ndev->filelist list until usbdev_remove() takes it off, which happens\nafter all the outstanding URBs have been cancelled.\n\nSigned-off-by: Alan Stern <stern@rowland.harvard.edu>\nReported-by: Hans de Goede <hdegoede@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/5cce438298a0d2a7a857a4a3c3e26aeb8f77b941"},{"sha":"59b71f774fc2ec2d985251e72fde0f9f88164547","author":{"name":"Jaewon Kim","email":"86f7adc20b6f25ad5bcf1bfc1f7f8dcc7c57a216@gmail.com"},"message":"usb: host: max3421-hcd: fix mask of IO control register\n\nGPIO control register is divided into IOPINS1 and IOPINS2.\nAnd low 4-bit of register is controls output.\n\nSo, this patch fixes wrong mask of GPIO output.\n\nSigned-off-by: Jaewon Kim <jaewon02.kim@samsung.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/59b71f774fc2ec2d985251e72fde0f9f88164547"},{"sha":"beab47d55b883e85bec7771a899ac791c6f92c80","author":{"name":"Markus Elfring","email":"2916b57751e3b8379170cb86139f7bb868e8eca1@users.sourceforge.net"},"message":"of: Delete an unnecessary check before the function call \"of_node_put\"\n\nThe of_node_put() function tests whether its argument is NULL\nand then returns immediately.\nThus the test around the call is not needed.\n\nThis issue was detected by using the Coccinelle software.\n\nSigned-off-by: Markus Elfring <elfring@users.sourceforge.net>\nSigned-off-by: Rob Herring <robh@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/beab47d55b883e85bec7771a899ac791c6f92c80"},{"sha":"89c67752ae4dedc1244344b266c837ddb4053ebd","author":{"name":"Gavin Shan","email":"bb32b15705e6e40930aad50252d4e3af8ca61d1b@linux.vnet.ibm.com"},"message":"drivers/of: Validate device node in __unflatten_device_tree()\n\n@mynodes is set to NULL when __unflatten_device_tree() is called\nto unflatten device sub-tree in PCI hot add scenario on PowerPC\nPowerNV platform. Marking @mynodes detached unconditionally causes\nkernel crash as below backtrace shows:\n\nUnable to handle kernel paging request for data at address 0x00000000\nFaulting instruction address: 0xc000000000b26f64\ncpu 0x0: Vector: 300 (Data Access) at [c000003fcc7cf740]\n    pc: c000000000b26f64: __unflatten_device_tree+0xf4/0x190\n    lr: c000000000b26f40: __unflatten_device_tree+0xd0/0x190\n    sp: c000003fcc7cf9c0\n   msr: 900000000280b033\n   dar: 0\n dsisr: 40000000\n  current = 0xc000003fcc281680\n  paca    = 0xc00000000ff00000\t softe: 0\t irq_happened: 0x01\n    pid   = 2724, comm = sh\nLinux version 4.7.0-gavin-07754-g92a6836 (gwshan@gwshan) (gcc version \\\n4.9.3 (Buildroot 2016.02-rc2-00093-g5ea3bce) ) #539 SMP Mon Aug 1 \\\n12:40:29 AEST 2016\nenter ? for help\n[c000003fcc7cfa50] c000000000b27060 of_fdt_unflatten_tree+0x60/0x90\n[c000003fcc7cfaa0] c0000000004c6288 pnv_php_set_slot_power_state+0x118/0x440\n[c000003fcc7cfb80] c0000000004c6a10 pnv_php_enable+0xc0/0x170\n[c000003fcc7cfbd0] c0000000004c4d80 power_write_file+0xa0/0x190\n[c000003fcc7cfc50] c0000000004be93c pci_slot_attr_store+0x3c/0x60\n[c000003fcc7cfc70] c0000000002d3fd4 sysfs_kf_write+0x94/0xc0\n[c000003fcc7cfcb0] c0000000002d2c30 kernfs_fop_write+0x180/0x260\n[c000003fcc7cfd00] c000000000230fe0 __vfs_write+0x40/0x190\n[c000003fcc7cfd90] c000000000232278 vfs_write+0xc8/0x240\n[c000003fcc7cfde0] c000000000233d90 SyS_write+0x60/0x110\n[c000003fcc7cfe30] c000000000009524 system_call+0x38/0x108\n\nThis avoids the kernel crash by marking @mynodes detached only when\n@mynodes is dereferencing valid device node in __unflatten_device_tree().\n\nFixes: 1d1bde550ea3 (\"of: fdt: mark unflattened tree as detached\")\nReported-by: Meng Li <shlimeng@cn.ibm.com>\nSigned-off-by: Gavin Shan <gwshan@linux.vnet.ibm.com>\nSigned-off-by: Rob Herring <robh@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/89c67752ae4dedc1244344b266c837ddb4053ebd"},{"sha":"e55aeb6ba4e8cc3549bff1e75ea1d029324bce21","author":{"name":"Philipp Zabel","email":"1230e64fdd5ad757d92045c84dafdec86407863a@pengutronix.de"},"message":"of/irq: Mark interrupt controllers as populated before initialisation\n\nThat way the init callback may clear the flag again, in case of drivers\nsplit between early irq chip and a normal platform driver.\n\nFixes: 15cc2ed6dcf9 (\"of/irq: Mark initialised interrupt controllers as populated\")\nSuggested-by: Rob Herring <robh@kernel.org>\nSigned-off-by: Philipp Zabel <p.zabel@pengutronix.de>\nAcked-by: Jon Hunter <jonathanh@nvidia.com>\nSigned-off-by: Rob Herring <robh@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/e55aeb6ba4e8cc3549bff1e75ea1d029324bce21"}]}
{"actor":{"display_login":"kraj"}}