{"push_id":2654623694,"size":32,"distinct_size":32,"ref":"refs/heads/upst","head":"9e683ebd03f90459b0c5ab3b680e5ae8113e879f","before":"6e9d6d2ff427fb283162db33c0e1c349db91b5f5","commits":[{"sha":"c43b1e29f80f637fa0b3b281c9201bc577961743","author":{"name":"Johan Hovold","email":"759412786bc533369b22377bf83fb9056c5b25b2@kernel.org"},"message":"gpio: sysfs: fix gpio-chip device-attribute leak\n\ncommit 121b6a79955a3a3fd7bbb9b8cb88d5b9dad6283d upstream.\n\nThe gpio-chip device attributes were never destroyed when the device was\nremoved.\n\nFix by using device_create_with_groups() to create the device attributes\nof the chip class device.\n\nNote that this also fixes the attribute-creation race with userspace.\n\nFixes: d8f388d8dc8d (\"gpio: sysfs interface\")\nSigned-off-by: Johan Hovold <johan@kernel.org>\nSigned-off-by: Linus Walleij <linus.walleij@linaro.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/c43b1e29f80f637fa0b3b281c9201bc577961743"},{"sha":"26887ad0d9c8b02477b89b7437f07d52a594ec31","author":{"name":"Johan Hovold","email":"759412786bc533369b22377bf83fb9056c5b25b2@kernel.org"},"message":"gpio: sysfs: fix gpio device-attribute leak\n\ncommit 0915e6feb38de8d3601819992a5bd050201a56fa upstream.\n\nThe gpio device attributes were never destroyed when the gpio was\nunexported (or on export failures).\n\nUse device_create_with_groups() to create the default device attributes\nof the gpio class device. Note that this also fixes the\nattribute-creation race with userspace for these attributes.\n\nRemove contingent attributes in export error path and on unexport.\n\nFixes: d8f388d8dc8d (\"gpio: sysfs interface\")\nCc: stable <stable@vger.kernel.org>\t# v2.6.27+\nSigned-off-by: Johan Hovold <johan@kernel.org>\nSigned-off-by: Linus Walleij <linus.walleij@linaro.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/26887ad0d9c8b02477b89b7437f07d52a594ec31"},{"sha":"52cb67503e804973b5c37c3a8cfdce0b2f86ef26","author":{"name":"Jim Lin","email":"122938a3a5089ddc63033f3b96fd470c99b0320c@nvidia.com"},"message":"pinctrl: Fix two deadlocks\n\ncommit db93facfb0ef542aa5d8079e47580b3e669a4d82 upstream.\n\nThis patch is to fix two deadlock cases.\nDeadlock 1:\nCPU #1\n pinctrl_register-> pinctrl_get ->\n create_pinctrl\n (Holding lock pinctrl_maps_mutex)\n -> get_pinctrl_dev_from_devname\n (Trying to acquire lock pinctrldev_list_mutex)\nCPU #0\n pinctrl_unregister\n (Holding lock pinctrldev_list_mutex)\n -> pinctrl_put ->> pinctrl_free ->\n pinctrl_dt_free_maps -> pinctrl_unregister_map\n (Trying to acquire lock pinctrl_maps_mutex)\n\nSimply to say\nCPU#1 is holding lock A and trying to acquire lock B,\nCPU#0 is holding lock B and trying to acquire lock A.\n\nDeadlock 2:\nCPU #3\n pinctrl_register-> pinctrl_get ->\n create_pinctrl\n (Holding lock pinctrl_maps_mutex)\n -> get_pinctrl_dev_from_devname\n (Trying to acquire lock pinctrldev_list_mutex)\nCPU #2\n pinctrl_unregister\n (Holding lock pctldev->mutex)\n -> pinctrl_put ->> pinctrl_free ->\n pinctrl_dt_free_maps -> pinctrl_unregister_map\n (Trying to acquire lock pinctrl_maps_mutex)\nCPU #0\n tegra_gpio_request\n (Holding lock pinctrldev_list_mutex)\n -> pinctrl_get_device_gpio_range\n (Trying to acquire lock pctldev->mutex)\n\nSimply to say\nCPU#3 is holding lock A and trying to acquire lock D,\nCPU#2 is holding lock B and trying to acquire lock A,\nCPU#0 is holding lock D and trying to acquire lock B.\n\nSigned-off-by: Jim Lin <jilin@nvidia.com>\nSigned-off-by: Linus Walleij <linus.walleij@linaro.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/52cb67503e804973b5c37c3a8cfdce0b2f86ef26"},{"sha":"63aa8a624a3b76a123434ca9a1dbc22a534a1b3a","author":{"name":"David Jeffery","email":"7369478ed928ca3aa25d8e0595dbfa2e46b54862@redhat.com"},"message":"libata: prevent HSM state change race between ISR and PIO\n\ncommit ce7514526742c0898b837d4395f515b79dfb5a12 upstream.\n\nIt is possible for ata_sff_flush_pio_task() to set ap->hsm_task_state to\nHSM_ST_IDLE in between the time __ata_sff_port_intr() checks for HSM_ST_IDLE\nand before it calls ata_sff_hsm_move() causing ata_sff_hsm_move() to BUG().\n\nThis problem is hard to reproduce making this patch hard to verify, but this\nfix will prevent the race.\n\nI have not been able to reproduce the problem, but here is a crash dump from\na 2.6.32 kernel.\n\nOn examining the ata port's state, its hsm_task_state field has a value of HSM_ST_IDLE:\n\ncrash> struct ata_port.hsm_task_state ffff881c1121c000\n  hsm_task_state = 0\n\nNormally, this should not be possible as ata_sff_hsm_move() was called from ata_sff_host_intr(),\nwhich checks hsm_task_state and won't call ata_sff_hsm_move() if it has a HSM_ST_IDLE value.\n\nPID: 11053  TASK: ffff8816e846cae0  CPU: 0   COMMAND: \"sshd\"\n #0 [ffff88008ba03960] machine_kexec at ffffffff81038f3b\n #1 [ffff88008ba039c0] crash_kexec at ffffffff810c5d92\n #2 [ffff88008ba03a90] oops_end at ffffffff8152b510\n #3 [ffff88008ba03ac0] die at ffffffff81010e0b\n #4 [ffff88008ba03af0] do_trap at ffffffff8152ad74\n #5 [ffff88008ba03b50] do_invalid_op at ffffffff8100cf95\n #6 [ffff88008ba03bf0] invalid_op at ffffffff8100bf9b\n    [exception RIP: ata_sff_hsm_move+317]\n    RIP: ffffffff813a77ad  RSP: ffff88008ba03ca0  RFLAGS: 00010097\n    RAX: 0000000000000000  RBX: ffff881c1121dc60  RCX: 0000000000000000\n    RDX: ffff881c1121dd10  RSI: ffff881c1121dc60  RDI: ffff881c1121c000\n    RBP: ffff88008ba03d00   R8: 0000000000000000   R9: 000000000000002e\n    R10: 000000000001003f  R11: 000000000000009b  R12: ffff881c1121c000\n    R13: 0000000000000000  R14: 0000000000000050  R15: ffff881c1121dd78\n    ORIG_RAX: ffffffffffffffff  CS: 0010  SS: 0018\n #7 [ffff88008ba03d08] ata_sff_host_intr at ffffffff813a7fbd\n #8 [ffff88008ba03d38] ata_sff_interrupt at ffffffff813a821e\n #9 [ffff88008ba03d78] handle_IRQ_event at ffffffff810e6ec0","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/63aa8a624a3b76a123434ca9a1dbc22a534a1b3a"},{"sha":"d19ce9ae29b5a072324716f2ef2e642a04f30694","author":{"name":"Jason Lee Cragg","email":"7d03d9a983451a620c5bf16c10b90e115e96e237@gmail.com"},"message":"ALSA: usb-audio: Add mic volume fix quirk for Logitech Webcam C210\n\ncommit 6455931186bff407493135e74c5f32efd30860e2 upstream.\n\nSigned-off-by: Jason Lee Cragg <jcragg@gmail.com>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/d19ce9ae29b5a072324716f2ef2e642a04f30694"},{"sha":"4bd09bb69d05c6ea334e5dc8a4dc912470789794","author":{"name":"Michael Karcher","email":"c65a0fb7e74ffd2c9fc3a0f9aacb0f6a24b0a68b@mkarcher.dialup.fu-berlin.de"},"message":"scripts/recordmcount.pl: There is no -m32 gcc option on Super-H anymore\n\ncommit 1caf6aaaa47471831d77c75f094d4e00ad1ec808 upstream.\n\nCompiling SH with gcc-4.8 fails due to the -m32 option not being\nsupported.\n\nFrom http://buildd.debian-ports.org/status/fetch.php?pkg=linux&arch=sh4&ver=3.16.7-ckt4-1&stamp=1421425783\n\n      CC      init/main.o\n    gcc-4.8: error: unrecognized command line option '-m32'\n    ld: cannot find init/.tmp_mc_main.o: No such file or directory\n    objcopy: 'init/.tmp_mx_main.o': No such file\n    rm: cannot remove 'init/.tmp_mx_main.o': No such file or directory\n    rm: cannot remove 'init/.tmp_mc_main.o': No such file or directory\n\nLink: http://lkml.kernel.org/r/1421537778-29001-1-git-send-email-kernel@mkarcher.dialup.fu-berlin.de\nLink: http://lkml.kernel.org/r/54BCBDD4.10102@physik.fu-berlin.de\n\nCc: Matt Fleming <matt@console-pimps.org>\nReported-by: John Paul Adrian Glaubitz <glaubitz@physik.fu-berlin.de>\nSigned-off-by: Michael Karcher <kernel@mkarcher.dialup.fu-berlin.de>\nSigned-off-by: Steven Rostedt <rostedt@goodmis.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/4bd09bb69d05c6ea334e5dc8a4dc912470789794"},{"sha":"160476016cf55404a5b329a89bed2091ee8400af","author":{"name":"Chris Wilson","email":"711c73f64afdce07b7e38039a96d2224209e9a6c@chris-wilson.co.uk"},"message":"drm/i915: Fix mutex->owner inspection race under DEBUG_MUTEXES\n\ncommit 226e5ae9e5f9108beb0bde4ac69f68fe6210fed9 upstream.\n\nIf CONFIG_DEBUG_MUTEXES is set, the mutex->owner field is only cleared\nif the mutex debugging is enabled which introduces a race in our\nmutex_is_locked_by() - i.e. we may inspect the old owner value before it\nis acquired by the new task.\n\nThis is the root cause of this error:\n\n# diff --git a/kernel/locking/mutex-debug.c b/kernel/locking/mutex-debug.c\n# index 5cf6731..3ef3736 100644\n# --- a/kernel/locking/mutex-debug.c\n# +++ b/kernel/locking/mutex-debug.c\n# @@ -80,13 +80,13 @@ void debug_mutex_unlock(struct mutex *lock)\n# \t\t\tDEBUG_LOCKS_WARN_ON(lock->owner != current);\n#\n# \t\tDEBUG_LOCKS_WARN_ON(!lock->wait_list.prev && !lock->wait_list.next);\n# -\t\tmutex_clear_owner(lock);\n# \t}\n#\n# \t/*\n# \t * __mutex_slowpath_needs_to_unlock() is explicitly 0 for debug\n# \t * mutexes so that we can do it here after we've verified state.\n# \t */\n# +\tmutex_clear_owner(lock);\n# \tatomic_set(&lock->count, 1);\n#  }\n\nBugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=87955\nSigned-off-by: Chris Wilson <chris@chris-wilson.co.uk>\nReviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>\nSigned-off-by: Jani Nikula <jani.nikula@intel.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/160476016cf55404a5b329a89bed2091ee8400af"},{"sha":"eece69db39ce439af6e7bbfa299aaba0796a499e","author":{"name":"Brian King","email":"bf668d4b220231d97fe248d4ae0ba63a1d887e4c@linux.vnet.ibm.com"},"message":"ipr: wait for aborted command responses\n\ncommit 6cdb08172bc89f0a39e1643c5e7eab362692fd1b upstream.\n\nFixes a race condition in abort handling that was injected\nwhen multiple interrupt support was added. When only a single\ninterrupt is present, the adapter guarantees it will send\nresponses for aborted commands prior to the response for the\nabort command itself. With multiple interrupts, these responses\ngenerally come back on different interrupts, so we need to\nensure the abort thread waits until the aborted command is\ncomplete so we don't perform a double completion. This race\ncondition was being hit frequently in environments which\nwere triggering command timeouts, which was resulting in\na double completion causing a kernel oops.\n\nSigned-off-by: Brian King <brking@linux.vnet.ibm.com>\nReviewed-by: Wendy Xiong <wenxiong@linux.vnet.ibm.com>\nTested-by: Wendy Xiong <wenxiong@linux.vnet.ibm.com>\nSigned-off-by: Christoph Hellwig <hch@lst.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/eece69db39ce439af6e7bbfa299aaba0796a499e"},{"sha":"b08afb3cc6fbc0fe97fe2b9fa5252fe04cdcfa8c","author":{"name":"Joe Thornber","email":"61d5fad70554ae22d57a37634e04f12f58acc678@redhat.com"},"message":"dm cache: share cache-metadata object across inactive and active DM tables\n\ncommit 9b1cc9f251affdd27f29fe46d0989ba76c33faf6 upstream.\n\nIf a DM table is reloaded with an inactive table when the device is not\nsuspended (normal procedure for LVM2), then there will be two dm-bufio\nobjects that can diverge.  This can lead to a situation where the\ninactive table uses bufio to read metadata at the same time the active\ntable writes metadata -- resulting in the inactive table having stale\nmetadata buffers once it is promoted to the active table slot.\n\nFix this by using reference counting and a global list of cache metadata\nobjects to ensure there is only one metadata object per metadata device.\n\nSigned-off-by: Joe Thornber <ejt@redhat.com>\nSigned-off-by: Mike Snitzer <snitzer@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/b08afb3cc6fbc0fe97fe2b9fa5252fe04cdcfa8c"},{"sha":"96c9c8e6e8d5003c60cca09d1940d2778f4398ad","author":{"name":"Sasha Levin","email":"e642b69ed2fc111e09ffdc37feb733a52253340d@oracle.com"},"message":"time: settimeofday: Validate the values of tv from user\n\ncommit 6ada1fc0e1c4775de0e043e1bd3ae9d065491aa5 upstream.\n\nAn unvalidated user input is multiplied by a constant, which can result in\nan undefined behaviour for large values. While this is validated later,\nwe should avoid triggering undefined behaviour.\n\nCc: Thomas Gleixner <tglx@linutronix.de>\nCc: Ingo Molnar <mingo@kernel.org>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>\n[jstultz: include trivial milisecond->microsecond correction noticed\nby Andy]\nSigned-off-by: John Stultz <john.stultz@linaro.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/96c9c8e6e8d5003c60cca09d1940d2778f4398ad"},{"sha":"773899aade38d281ee71df20ebe9867696456e6a","author":{"name":"Sasha Levin","email":"e642b69ed2fc111e09ffdc37feb733a52253340d@oracle.com"},"message":"time: adjtimex: Validate the ADJ_FREQUENCY values\n\ncommit 5e5aeb4367b450a28f447f6d5ab57d8f2ab16a5f upstream.\n\nVerify that the frequency value from userspace is valid and makes sense.\n\nUnverified values can cause overflows later on.\n\nCc: Thomas Gleixner <tglx@linutronix.de>\nCc: Ingo Molnar <mingo@kernel.org>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>\n[jstultz: Fix up bug for negative values and drop redunent cap check]\nSigned-off-by: John Stultz <john.stultz@linaro.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/773899aade38d281ee71df20ebe9867696456e6a"},{"sha":"11be071e2187795cdaf5da27ee090da6e5828bd3","author":{"name":"Fabio Estevam","email":"679188261afeb60eb822cd934fd7b46a48ddd743@freescale.com"},"message":"ARM: dts: imx25: Fix PWM \"per\" clocks\n\ncommit 7ecd0bde5bfea524a843ad8fa8cb66ccbce68779 upstream.\n\nCurrently PWM functionality is broken on mx25 due to the wrong assignment of the\nPWM \"per\" clock.\n\nAccording to Documentation/devicetree/bindings/clock/imx25-clock.txt:\n\tpwm_ipg_per\t\t52\n\n,so update the pwm \"per\" to use 'pwm_ipg_per' instead of 'per10' clock.\n\nWith this change PWM can work fine on mx25.\n\nReported-by: Carlos Soto <csotoalonso@gmail.com>\nSigned-off-by: Fabio Estevam <fabio.estevam@freescale.com>\nSigned-off-by: Shawn Guo <shawn.guo@linaro.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/11be071e2187795cdaf5da27ee090da6e5828bd3"},{"sha":"c2ad99a018d6717344a1d91cd1af407146035212","author":{"name":"Andrew Lunn","email":"02e0a999c50b1f88df7a8f5a04e1b76b35ea6a88@lunn.ch"},"message":"bus: mvebu-mbus: fix support of MBus window 13\n\ncommit 38bdf45f4aa5cb6186d50a29e6cbbd9d486a1519 upstream.\n\nOn Armada XP, 375 and 38x the MBus window 13 has the remap capability,\nlike windows 0 to 7. However, the mvebu-mbus driver isn't currently\ntaking into account this special case, which means that when window 13\nis actually used, the remap registers are left to 0, making the device\nusing this MBus window unavailable.\n\nAs a minimal fix for stable, don't use window 13. A full fix will\nfollow later.\n\nFixes: fddddb52a6c (\"bus: introduce an Marvell EBU MBus driver\")\nReviewed-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>\nSigned-off-by: Andrew Lunn <andrew@lunn.ch>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/c2ad99a018d6717344a1d91cd1af407146035212"},{"sha":"8511ec90d66574170046bf200771a9613cd1253b","author":{"name":"Oliver Hartkopp","email":"06a38fb2ed1a2d0a17f4f06761ac2e5ace5a31ab@hartkopp.net"},"message":"can: dev: fix crtlmode_supported check\n\ncommit 9b1087aa5e86448fe6ad40a58964e35f3ba423d5 upstream.\n\nWhen changing flags in the CAN drivers ctrlmode the provided new content has to\nbe checked whether the bits are allowed to be changed. The bits that are to be\nchanged are given as a bitfield in cm->mask. Therefore checking against\ncm->flags is wrong as the content can hold any kind of values.\n\nThe iproute2 tool sets the bits in cm->mask and cm->flags depending on the\ndetected command line options. To be robust against bogus user space\napplications additionally sanitize the provided flags with the provided mask.\n\nCc: Wolfgang Grandegger <wg@grandegger.com>\nSigned-off-by: Oliver Hartkopp <socketcan@hartkopp.net>\nSigned-off-by: Marc Kleine-Budde <mkl@pengutronix.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/8511ec90d66574170046bf200771a9613cd1253b"},{"sha":"645bbc14b84e9b3255f3518fbafbc6e7b3d6b1d1","author":{"name":"Tobias Jakobi","email":"4c4bdab7e8565a5c263c93a14c8947afdc7cdad5@math.uni-bielefeld.de"},"message":"clocksource: exynos_mct: Fix bitmask regression for exynos4_mct_write\n\ncommit 8c38d28ba8da98f7102c31d35359b4dbe9d1f329 upstream.\n\nEXYNOS4_MCT_L_MASK is defined as 0xffffff00, so applying this bitmask\nproduces a number outside the range 0x00 to 0xff, which always results\nin execution of the default switch statement.\n\nObviously this is wrong and git history shows that the bitmask inversion\nwas incorrectly set during a refactoring of the MCT code.\n\nFix this by putting the inversion at the correct position again.\n\nAcked-by: Kukjin Kim <kgene.kim@samsung.com>\nReported-by: GP Orcullo <kinsamanka@gmail.com>\nReviewed-by: Doug Anderson <dianders@chromium.org>\nSigned-off-by: Tobias Jakobi <tjakobi@math.uni-bielefeld.de>\nSigned-off-by: Daniel Lezcano <daniel.lezcano@linaro.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/645bbc14b84e9b3255f3518fbafbc6e7b3d6b1d1"},{"sha":"355c489bc6a5e3823d1a686171988520a17008ba","author":{"name":"K. Y. Srinivasan","email":"bcbf172338421f26297a2592698edf8cc84ecbef@microsoft.com"},"message":"x86, hyperv: Mark the Hyper-V clocksource as being continuous\n\ncommit 32c6590d126836a062b3140ed52d898507987017 upstream.\n\nThe Hyper-V clocksource is continuous; mark it accordingly.\n\nSigned-off-by: K. Y. Srinivasan <kys@microsoft.com>\nAcked-by: jasowang@redhat.com\nCc: gregkh@linuxfoundation.org\nCc: devel@linuxdriverproject.org\nCc: olaf@aepfle.de\nCc: apw@canonical.com\nLink: http://lkml.kernel.org/r/1421108762-3331-1-git-send-email-kys@microsoft.com\nSigned-off-by: Thomas Gleixner <tglx@linutronix.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/355c489bc6a5e3823d1a686171988520a17008ba"},{"sha":"0c383248673393956b5fd3814b7243a907294b01","author":{"name":"Alexandre Demers","email":"155ff836d06bca82eb14822dc602e268823b4a5f@gmail.com"},"message":"x86/tsc: Change Fast TSC calibration failed from error to info\n\ncommit 520452172e6b318f3a8bd9d4fe1e25066393de25 upstream.\n\nMany users see this message when booting without knowning that it is\nof no importance and that TSC calibration may have succeeded by\nanother way.\n\nAs explained by Paul Bolle in\nhttp://lkml.kernel.org/r/1348488259.1436.22.camel@x61.thuisdomein\n\n  \"Fast TSC calibration failed\" should not be considered as an error\n  since other calibration methods are being tried afterward. At most,\n  those send a warning if they fail (not an error). So let's change\n  the message from error to warning.\n\n[ tglx: Make if pr_info. It's really not important at all ]\n\nFixes: c767a54ba065 x86/debug: Add KERN_<LEVEL> to bare printks, convert printks to pr_<level>\nSigned-off-by: Alexandre Demers <alexandre.f.demers@gmail.com>\nLink: http://lkml.kernel.org/r/1418106470-6906-1-git-send-email-alexandre.f.demers@gmail.com\nSigned-off-by: Thomas Gleixner <tglx@linutronix.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/0c383248673393956b5fd3814b7243a907294b01"},{"sha":"6d2f42edd1722fe5ca3ab674399c65d03dc97d93","author":{"name":"Andy Lutomirski","email":"2cc0d0d76de2e6f37b92deeb83c85cb306fc5dc1@amacapital.net"},"message":"x86, tls, ldt: Stop checking lm in LDT_empty\n\ncommit e30ab185c490e9a9381385529e0fd32f0a399495 upstream.\n\n32-bit programs don't have an lm bit in their ABI, so they can't\nreliably cause LDT_empty to return true without resorting to memset.\nThey shouldn't need to do this.\n\nThis should fix a longstanding, if minor, issue in all 64-bit kernels\nas well as a potential regression in the TLS hardening code.\n\nFixes: 41bdc78544b8 x86/tls: Validate TLS entries to protect espfix\nSigned-off-by: Andy Lutomirski <luto@amacapital.net>\nCc: torvalds@linux-foundation.org\nLink: http://lkml.kernel.org/r/72a059de55e86ad5e2935c80aa91880ddf19d07c.1421954363.git.luto@amacapital.net\nSigned-off-by: Thomas Gleixner <tglx@linutronix.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/6d2f42edd1722fe5ca3ab674399c65d03dc97d93"},{"sha":"3fe9fb8fe25699f1ef41a55d8988c800f65cb7ca","author":{"name":"Andy Lutomirski","email":"2cc0d0d76de2e6f37b92deeb83c85cb306fc5dc1@amacapital.net"},"message":"x86, tls: Interpret an all-zero struct user_desc as \"no segment\"\n\ncommit 3669ef9fa7d35f573ec9c0e0341b29251c2734a7 upstream.\n\nThe Witcher 2 did something like this to allocate a TLS segment index:\n\n        struct user_desc u_info;\n        bzero(&u_info, sizeof(u_info));\n        u_info.entry_number = (uint32_t)-1;\n\n        syscall(SYS_set_thread_area, &u_info);\n\nStrictly speaking, this code was never correct.  It should have set\nread_exec_only and seg_not_present to 1 to indicate that it wanted\nto find a free slot without putting anything there, or it should\nhave put something sensible in the TLS slot if it wanted to allocate\na TLS entry for real.  The actual effect of this code was to\nallocate a bogus segment that could be used to exploit espfix.\n\nThe set_thread_area hardening patches changed the behavior, causing\nset_thread_area to return -EINVAL and crashing the game.\n\nThis changes set_thread_area to interpret this as a request to find\na free slot and to leave it empty, which isn't *quite* what the game\nexpects but should be close enough to keep it working.  In\nparticular, using the code above to allocate two segments will\nallocate the same segment both times.\n\nAccording to FrostbittenKing on Github, this fixes The Witcher 2.\n\nIf this somehow still causes problems, we could instead allocate\na limit==0 32-bit data segment, but that seems rather ugly to me.\n\nFixes: 41bdc78544b8 x86/tls: Validate TLS entries to protect espfix\nSigned-off-by: Andy Lutomirski <luto@amacapital.net>\nCc: torvalds@linux-foundation.org\nLink: http://lkml.kernel.org/r/0cb251abe1ff0958b8e468a9a9a905b80ae3a746.1421954363.git.luto@amacapital.net\nSigned-off-by: Thomas Gleixner <tglx@linutronix.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/3fe9fb8fe25699f1ef41a55d8988c800f65cb7ca"},{"sha":"e50b5461b27fff199c276426be7a9ea30c514d43","author":{"name":"Andy Lutomirski","email":"2cc0d0d76de2e6f37b92deeb83c85cb306fc5dc1@amacapital.net"},"message":"x86/asm/traps: Disable tracing and kprobes in fixup_bad_iret and sync_regs\n\ncommit 7ddc6a2199f1da405a2fb68c40db8899b1a8cd87 upstream.\n\nThese functions can be executed on the int3 stack, so kprobes\nare dangerous. Tracing is probably a bad idea, too.\n\nFixes: b645af2d5905 (\"x86_64, traps: Rework bad_iret\")\nSigned-off-by: Andy Lutomirski <luto@amacapital.net>\nCc: Linus Torvalds <torvalds@linux-foundation.org>\nCc: Steven Rostedt <rostedt@goodmis.org>\nLink: http://lkml.kernel.org/r/50e33d26adca60816f3ba968875801652507d0c4.1416870125.git.luto@amacapital.net\nSigned-off-by: Ingo Molnar <mingo@kernel.org>\n[bwh: Backported to 3.10:\n - Use __kprobes instead of NOKPROBE_SYMBOL()\n - Adjust context]\nSigned-off-by: Ben Hutchings <ben@decadent.org.uk>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/abyss10/android_kernel_mt6582/commits/e50b5461b27fff199c276426be7a9ea30c514d43"}]}
{"actor":{"display_login":"abyss10"}}