{"push_id":2387282753,"size":33,"distinct_size":33,"ref":"refs/heads/oreo-mr1","head":"52f9b051aa8a1890bbd0aad3e4fef715e13c0482","before":"04c388b2ef46bf5c6724a6c86902903722403edf","commits":[{"sha":"008656835a1bfafe37771d2ba2249a8eaeb4eab6","author":{"name":"Arnd Bergmann","email":"72a0f6d3b182607e6d5c44b93e1abb7b23ee18f3@arndb.de"},"message":"crypto: public_key: select CRYPTO_AKCIPHER\n\n[ Upstream commit bad6a185b4d6f81d0ed2b6e4c16307969f160b95 ]\n\nIn some rare randconfig builds, we can end up with\nASYMMETRIC_PUBLIC_KEY_SUBTYPE enabled but CRYPTO_AKCIPHER disabled,\nwhich fails to link because of the reference to crypto_alloc_akcipher:\n\ncrypto/built-in.o: In function `public_key_verify_signature':\n:(.text+0x110e4): undefined reference to `crypto_alloc_akcipher'\n\nThis adds a Kconfig 'select' statement to ensure the dependency\nis always there.\n\nCc: <stable@vger.kernel.org>\nSigned-off-by: Arnd Bergmann <arnd@arndb.de>\nSigned-off-by: Herbert Xu <herbert@gondor.apana.org.au>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/008656835a1bfafe37771d2ba2249a8eaeb4eab6"},{"sha":"b57a1706c76a352712c06be9348ee2ffcd50b47c","author":{"name":"James Bottomley","email":"c61de33534998ae239ac3bcee9c77ffbb5713c74@HansenPartnership.com"},"message":"scsi_lib: correctly retry failed zero length REQ_TYPE_FS commands\n\n[ Upstream commit a621bac3044ed6f7ec5fa0326491b2d4838bfa93 ]\n\nWhen SCSI was written, all commands coming from the filesystem\n(REQ_TYPE_FS commands) had data.  This meant that our signal for needing\nto complete the command was the number of bytes completed being equal to\nthe number of bytes in the request.  Unfortunately, with the advent of\nflush barriers, we can now get zero length REQ_TYPE_FS commands, which\nconfuse this logic because they satisfy the condition every time.  This\nmeans they never get retried even for retryable conditions, like UNIT\nATTENTION because we complete them early assuming they're done.  Fix\nthis by special casing the early completion condition to recognise zero\nlength commands with errors and let them drop through to the retry code.\n\nCc: stable@vger.kernel.org\nReported-by: Sebastian Parschauer <s.parschauer@gmx.de>\nSigned-off-by: James E.J. Bottomley <jejb@linux.vnet.ibm.com>\nTested-by: Jack Wang <jinpu.wang@profitbricks.com>\nSigned-off-by: Martin K. Petersen <martin.petersen@oracle.com>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/b57a1706c76a352712c06be9348ee2ffcd50b47c"},{"sha":"ce0cad42490c559fc3ca204bb6f5a581f6ef5573","author":{"name":"Tom Lendacky","email":"aae724d943dd57e8b9dec8b455e9688272d2d782@amd.com"},"message":"crypto: ccp - Fix AES XTS error for request sizes above 4096\n\n[ Upstream commit ab6a11a7c8ef47f996974dd3c648c2c0b1a36ab1 ]\n\nThe ccp-crypto module for AES XTS support has a bug that can allow requests\ngreater than 4096 bytes in size to be passed to the CCP hardware. The CCP\nhardware does not support request sizes larger than 4096, resulting in\nincorrect output. The request should actually be handled by the fallback\nmechanism instantiated by the ccp-crypto module.\n\nAdd a check to insure the request size is less than or equal to the maximum\nsupported size and use the fallback mechanism if it is not.\n\nCc: <stable@vger.kernel.org> # 3.14.x-\nSigned-off-by: Tom Lendacky <thomas.lendacky@amd.com>\nSigned-off-by: Herbert Xu <herbert@gondor.apana.org.au>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/ce0cad42490c559fc3ca204bb6f5a581f6ef5573"},{"sha":"267e997cd36392954a8c210523ef027b78b58b32","author":{"name":"Russell Currey","email":"2eacafec92f559d51886f12bbdf842327b6af83e@russell.cc"},"message":"powerpc/pseries/eeh: Handle RTAS delay requests in configure_bridge\n\n[ Upstream commit 871e178e0f2c4fa788f694721a10b4758d494ce1 ]\n\nIn the \"ibm,configure-pe\" and \"ibm,configure-bridge\" RTAS calls, the\nspec states that values of 9900-9905 can be returned, indicating that\nsoftware should delay for 10^x (where x is the last digit, i.e. 990x)\nmilliseconds and attempt the call again. Currently, the kernel doesn't\nknow about this, and respecting it fixes some PCI failures when the\nhypervisor is busy.\n\nThe delay is capped at 0.2 seconds.\n\nCc: <stable@vger.kernel.org> # 3.10+\nSigned-off-by: Russell Currey <ruscur@russell.cc>\nAcked-by: Gavin Shan <gwshan@linux.vnet.ibm.com>\nSigned-off-by: Michael Ellerman <mpe@ellerman.id.au>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/267e997cd36392954a8c210523ef027b78b58b32"},{"sha":"e342ed8fc0fb4b090f42e09db46649193c4b81d7","author":{"name":"Thomas Huth","email":"88e8c2c9848c27f046284b2ccf48cd5b58fafc02@redhat.com"},"message":"powerpc: Fix definition of SIAR and SDAR registers\n\n[ Upstream commit d23fac2b27d94aeb7b65536a50d32bfdc21fe01e ]\n\nThe SIAR and SDAR registers are available twice, one time as SPRs\n780 / 781 (unprivileged, but read-only), and one time as the SPRs\n796 / 797 (privileged, but read and write). The Linux kernel code\ncurrently uses the unprivileged  SPRs - while this is OK for reading,\nwriting to that register of course does not work.\nSince the KVM code tries to write to this register, too (see the mtspr\nin book3s_hv_rmhandlers.S), the contents of this register sometimes get\nlost for the guests, e.g. during migration of a VM.\nTo fix this issue, simply switch to the privileged SPR numbers instead.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Thomas Huth <thuth@redhat.com>\nAcked-by: Paul Mackerras <paulus@ozlabs.org>\nSigned-off-by: Michael Ellerman <mpe@ellerman.id.au>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/e342ed8fc0fb4b090f42e09db46649193c4b81d7"},{"sha":"de31d25a3bc1c37d7d30d5a1b9cee67bf1fe9aa7","author":{"name":"Thomas Huth","email":"88e8c2c9848c27f046284b2ccf48cd5b58fafc02@redhat.com"},"message":"powerpc: Use privileged SPR number for MMCR2\n\n[ Upstream commit 8dd75ccb571f3c92c48014b3dabd3d51a115ab41 ]\n\nWe are already using the privileged versions of MMCR0, MMCR1\nand MMCRA in the kernel, so for MMCR2, we should better use\nthe privileged versions, too, to be consistent.\n\nFixes: 240686c13687 (\"powerpc: Initialise PMU related regs on Power8\")\nCc: stable@vger.kernel.org # v3.10+\nSuggested-by: Paul Mackerras <paulus@ozlabs.org>\nSigned-off-by: Thomas Huth <thuth@redhat.com>\nAcked-by: Paul Mackerras <paulus@ozlabs.org>\nSigned-off-by: Michael Ellerman <mpe@ellerman.id.au>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/de31d25a3bc1c37d7d30d5a1b9cee67bf1fe9aa7"},{"sha":"46c57e776799e952d01bf9b25c7630ec18647202","author":{"name":"Martin Willi","email":"ea98e1d0a9a4d10e3af04e16be88050749615623@strongswan.org"},"message":"mac80211_hwsim: Add missing check for HWSIM_ATTR_SIGNAL\n\n[ Upstream commit 62397da50bb20a6b812c949ef465d7e69fe54bb6 ]\n\nA wmediumd that does not send this attribute causes a NULL pointer\ndereference, as the attribute is accessed even if it does not exist.\n\nThe attribute was required but never checked ever since userspace frame\nforwarding has been introduced. The issue gets more problematic once we\nallow wmediumd registration from user namespaces.\n\nCc: stable@vger.kernel.org\nFixes: 7882513bacb1 (\"mac80211_hwsim driver support userspace frame tx/rx\")\nSigned-off-by: Martin Willi <martin@strongswan.org>\nSigned-off-by: Johannes Berg <johannes.berg@intel.com>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/46c57e776799e952d01bf9b25c7630ec18647202"},{"sha":"9cac3aff4cbcfd50449aff4a6b5c96f16b4a4a5d","author":{"name":"Bob Copeland","email":"b4a5ea001e047040e8c9075b67a268293138da2c@bobcopeland.com"},"message":"mac80211: mesh: flush mesh paths unconditionally\n\n[ Upstream commit fe7a7c57629e8dcbc0e297363a9b2366d67a6dc5 ]\n\nCurrently, the mesh paths associated with a nexthop station are cleaned\nup in the following code path:\n\n    __sta_info_destroy_part1\n    synchronize_net()\n    __sta_info_destroy_part2\n     -> cleanup_single_sta\n       -> mesh_sta_cleanup\n         -> mesh_plink_deactivate\n           -> mesh_path_flush_by_nexthop\n\nHowever, there are a couple of problems here:\n\n1) the paths aren't flushed at all if the MPM is running in userspace\n   (e.g. when using wpa_supplicant or authsae)\n\n2) there is no synchronize_rcu between removing the path and readers\n   accessing the nexthop, which means the following race is possible:\n\nCPU0                            CPU1\n~~~~                            ~~~~\n                                sta_info_destroy_part1()\n                                synchronize_net()\nrcu_read_lock()\nmesh_nexthop_resolve()\n  mpath = mesh_path_lookup()\n                                [...] -> mesh_path_flush_by_nexthop()\n  sta = rcu_dereference(\n    mpath->next_hop)\n                                kfree(sta)\n  access sta <-- CRASH\n\nFix both of these by unconditionally flushing paths before destroying\nthe sta, and by adding a synchronize_net() after path flush to ensure\nno active readers can still dereference the sta.\n\nFixes this crash:\n\n[  348.529295] BUG: unable to handle kernel paging request at 00020040\n[  348.530014] IP: [<f929245d>] ieee80211_mps_set_frame_flags+0x40/0xaa [mac80211]\n[  348.530014] *pde = 00000000\n[  348.530014] Oops: 0000 [#1] PREEMPT\n[  348.530014] Modules linked in: drbg ansi_cprng ctr ccm ppp_generic slhc ipt_MASQUERADE nf_nat_masquerade_ipv4 8021q ]\n[  348.530014] CPU: 0 PID: 20597 Comm: wget Tainted: G           O 4.6.0-rc5-wt=V1 #1\n[  348.530014] Hardware name: To Be Filled By O.E.M./To be filled by O.E.M., BIOS 080016  11/07/2014\n[  348.530014] task: f64fa280 ti: f4f9c000 task.ti: f4f9c000\n[  348.530014] EIP: 0060:[<f929245d>] EFLAGS: 00010246 CPU: 0\n[  348.530014] EIP is at ieee80211_mps_set_frame_flags+0x40/0xaa [mac80211]\n[  348.530014] EAX: f4ce63e0 EBX: 00000088 ECX: f3788416 EDX: 00020008\n[  348.530014] ESI: 00000000 EDI: 00000088 EBP: f6409a4c ESP: f6409a40\n[  348.530014]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 0068\n[  348.530014] CR0: 80050033 CR2: 00020040 CR3: 33190000 CR4: 00000690\n[  348.530014] Stack:\n[  348.530014]  00000000 f4ce63e0 f5f9bd80 f6409a64 f9291d80 0000ce67 f5d51e00 f4ce63e0\n[  348.530014]  f3788416 f6409a80 f9291dc1 f4ce8320 f4ce63e0 f5d51e00 f4ce63e0 f4ce8320\n[  348.530014]  f6409a98 f9277f6f 00000000 00000000 0000007c 00000000 f6409b2c f9278dd1\n[  348.530014] Call Trace:\n[  348.530014]  [<f9291d80>] mesh_nexthop_lookup+0xbb/0xc8 [mac80211]\n[  348.530014]  [<f9291dc1>] mesh_nexthop_resolve+0x34/0xd8 [mac80211]\n[  348.530014]  [<f9277f6f>] ieee80211_xmit+0x92/0xc1 [mac80211]\n[  348.530014]  [<f9278dd1>] __ieee80211_subif_start_xmit+0x807/0x83c [mac80211]\n[  348.530014]  [<c04df012>] ? sch_direct_xmit+0xd7/0x1b3\n[  348.530014]  [<c022a8c6>] ? __local_bh_enable_ip+0x5d/0x7b\n[  348.530014]  [<f956870c>] ? nf_nat_ipv4_out+0x4c/0xd0 [nf_nat_ipv4]\n[  348.530014]  [<f957e036>] ? iptable_nat_ipv4_fn+0xf/0xf [iptable_nat]\n[  348.530014]  [<c04c6f45>] ? netif_skb_features+0x14d/0x30a\n[  348.530014]  [<f9278e10>] ieee80211_subif_start_xmit+0xa/0xe [mac80211]\n[  348.530014]  [<c04c769c>] dev_hard_start_xmit+0x1f8/0x267\n[  348.530014]  [<c04c7261>] ?  validate_xmit_skb.isra.120.part.121+0x10/0x253\n[  348.530014]  [<c04defc6>] sch_direct_xmit+0x8b/0x1b3\n[  348.530014]  [<c04c7a9c>] __dev_queue_xmit+0x2c8/0x513\n[  348.530014]  [<c04c7cfb>] dev_queue_xmit+0xa/0xc\n[  348.530014]  [<f91bfc7a>] batadv_send_skb_packet+0xd6/0xec [batman_adv]\n[  348.530014]  [<f91bfdc4>] batadv_send_unicast_skb+0x15/0x4a [batman_adv]\n[  348.530014]  [<f91b5938>] batadv_dat_send_data+0x27e/0x310 [batman_adv]\n[  348.530014]  [<f91c30b5>] ? batadv_tt_global_hash_find.isra.11+0x8/0xa [batman_adv]\n[  348.530014]  [<f91b63f3>] batadv_dat_snoop_outgoing_arp_request+0x208/0x23d [batman_adv]\n[  348.530014]  [<f91c0cd9>] batadv_interface_tx+0x206/0x385 [batman_adv]\n[  348.530014]  [<c04c769c>] dev_hard_start_xmit+0x1f8/0x267\n[  348.530014]  [<c04c7261>] ?  validate_xmit_skb.isra.120.part.121+0x10/0x253\n[  348.530014]  [<c04defc6>] sch_direct_xmit+0x8b/0x1b3\n[  348.530014]  [<c04c7a9c>] __dev_queue_xmit+0x2c8/0x513\n[  348.530014]  [<f80cbd2a>] ? igb_xmit_frame+0x57/0x72 [igb]\n[  348.530014]  [<c04c7cfb>] dev_queue_xmit+0xa/0xc\n[  348.530014]  [<f843a326>] br_dev_queue_push_xmit+0xeb/0xfb [bridge]\n[  348.530014]  [<f843a35f>] br_forward_finish+0x29/0x74 [bridge]\n[  348.530014]  [<f843a23b>] ? deliver_clone+0x3b/0x3b [bridge]\n[  348.530014]  [<f843a714>] __br_forward+0x89/0xe7 [bridge]\n[  348.530014]  [<f843a336>] ? br_dev_queue_push_xmit+0xfb/0xfb [bridge]\n[  348.530014]  [<f843a234>] deliver_clone+0x34/0x3b [bridge]\n[  348.530014]  [<f843a68b>] ? br_flood+0x95/0x95 [bridge]\n[  348.530014]  [<f843a66d>] br_flood+0x77/0x95 [bridge]\n[  348.530014]  [<f843a809>] br_flood_forward+0x13/0x1a [bridge]\n[  348.530014]  [<f843a68b>] ? br_flood+0x95/0x95 [bridge]\n[  348.530014]  [<f843b877>] br_handle_frame_finish+0x392/0x3db [bridge]\n[  348.530014]  [<c04e9b2b>] ? nf_iterate+0x2b/0x6b\n[  348.530014]  [<f843baa6>] br_handle_frame+0x1e6/0x240 [bridge]\n[  348.530014]  [<f843b4e5>] ? br_handle_local_finish+0x6a/0x6a [bridge]\n[  348.530014]  [<c04c4ba0>] __netif_receive_skb_core+0x43a/0x66b\n[  348.530014]  [<f843b8c0>] ? br_handle_frame_finish+0x3db/0x3db [bridge]\n[  348.530014]  [<c023cea4>] ? resched_curr+0x19/0x37\n[  348.530014]  [<c0240707>] ? check_preempt_wakeup+0xbf/0xfe\n[  348.530014]  [<c0255dec>] ? ktime_get_with_offset+0x5c/0xfc\n[  348.530014]  [<c04c4fc1>] __netif_receive_skb+0x47/0x55\n[  348.530014]  [<c04c57ba>] netif_receive_skb_internal+0x40/0x5a\n[  348.530014]  [<c04c61ef>] napi_gro_receive+0x3a/0x94\n[  348.530014]  [<f80ce8d5>] igb_poll+0x6fd/0x9ad [igb]\n[  348.530014]  [<c0242bd8>] ? swake_up_locked+0x14/0x26\n[  348.530014]  [<c04c5d29>] net_rx_action+0xde/0x250\n[  348.530014]  [<c022a743>] __do_softirq+0x8a/0x163\n[  348.530014]  [<c022a6b9>] ? __hrtimer_tasklet_trampoline+0x19/0x19\n[  348.530014]  [<c021100f>] do_softirq_own_stack+0x26/0x2c\n[  348.530014]  <IRQ>\n[  348.530014]  [<c022a957>] irq_exit+0x31/0x6f\n[  348.530014]  [<c0210eb2>] do_IRQ+0x8d/0xa0\n[  348.530014]  [<c058152c>] common_interrupt+0x2c/0x40\n[  348.530014] Code: e7 8c 00 66 81 ff 88 00 75 12 85 d2 75 0e b2 c3 b8 83 e9 29 f9 e8 a7 5f f9 c6 eb 74 66 81 e3 8c 005\n[  348.530014] EIP: [<f929245d>] ieee80211_mps_set_frame_flags+0x40/0xaa [mac80211] SS:ESP 0068:f6409a40\n[  348.530014] CR2: 0000000000020040\n[  348.530014] ---[ end trace 48556ac26779732e ]---\n[  348.530014] Kernel panic - not syncing: Fatal exception in interrupt\n[  348.530014] Kernel Offset: disabled\n\nCc: stable@vger.kernel.org\nReported-by: Fred Veldini <fred.veldini@gmail.com>\nTested-by: Fred Veldini <fred.veldini@gmail.com>\nSigned-off-by: Bob Copeland <me@bobcopeland.com>\nSigned-off-by: Johannes Berg <johannes.berg@intel.com>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/9cac3aff4cbcfd50449aff4a6b5c96f16b4a4a5d"},{"sha":"403b95353325aec56672bb9b4f01750eada5751f","author":{"name":"Ewan D. Milne","email":"cded145a908be3e02214f20f5d969606627c9934@redhat.com"},"message":"scsi: Add QEMU CD-ROM to VPD Inquiry Blacklist\n\n[ Upstream commit fbd83006e3e536fcb103228d2422ea63129ccb03 ]\n\nLinux fails to boot as a guest with a QEMU CD-ROM:\n\n[    4.439488] ata2.00: ATAPI: QEMU CD-ROM, 0.8.2, max UDMA/100\n[    4.443649] ata2.00: configured for MWDMA2\n[    4.450267] scsi 1:0:0:0: CD-ROM            QEMU     QEMU CD-ROM      0.8. PQ: 0 ANSI: 5\n[    4.464317] ata2.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x6 frozen\n[    4.464319] ata2.00: BMDMA stat 0x5\n[    4.464339] ata2.00: cmd a0/01:00:00:00:01/00:00:00:00:00/a0 tag 0 dma 16640 in\n[    4.464339]          Inquiry 12 01 00 00 ff 00res 48/20:02:00:24:00/00:00:00:00:00/a0 Emask 0x2 (HSM violation)\n[    4.464341] ata2.00: status: { DRDY DRQ }\n[    4.465864] ata2: soft resetting link\n[    4.625971] ata2.00: configured for MWDMA2\n[    4.628290] ata2: EH complete\n[    4.646670] ata2.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x6 frozen\n[    4.646671] ata2.00: BMDMA stat 0x5\n[    4.646683] ata2.00: cmd a0/01:00:00:00:01/00:00:00:00:00/a0 tag 0 dma 16640 in\n[    4.646683]          Inquiry 12 01 00 00 ff 00res 48/20:02:00:24:00/00:00:00:00:00/a0 Emask 0x2 (HSM violation)\n[    4.646685] ata2.00: status: { DRDY DRQ }\n[    4.648193] ata2: soft resetting link\n\n...\n\nFix this by suppressing VPD inquiry for this device.\n\nSigned-off-by: Ewan D. Milne <emilne@redhat.com>\nReported-by: Jan Stancek <jstancek@redhat.com>\nTested-by: Jan Stancek <jstancek@redhat.com>\nCc: <stable@vger.kernel.org>\nReviewed-by: Johannes Thumshirn <jthumshirn@suse.de>\nSigned-off-by: Martin K. Petersen <martin.petersen@oracle.com>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/403b95353325aec56672bb9b4f01750eada5751f"},{"sha":"ee20274fabe1b30b86f45d913a15f5cf0defdd80","author":{"name":"Thierry Reding","email":"4ab3bbead55647fdaaf6677e676b52259d853f2f@nvidia.com"},"message":"drm/fb-helper: Propagate errors from initial config failure\n\n[ Upstream commit 01934c2a691882185b3021d437df13bcba07711d ]\n\nMake drm_fb_helper_initial_config() return an int rather than a bool so\nthat the error can be properly propagated. While at it, update drivers\nto propagate errors further rather than just ignore them.\n\nv2:\n- cirrus: No cleanup is required, the top-level cirrus_driver_load()\n  will do it as part of cirrus_driver_unload() in its cleanup path.\n  Reported-by: Fengguang Wu <fengguang.wu@intel.com>\n\nCc: David Airlie <airlied@linux.ie>\nCc: Daniel Vetter <daniel.vetter@ffwll.ch>\nCc: Patrik Jakobsson <patrik.r.jakobsson@gmail.com>\nCc: Rob Clark <robdclark@gmail.com>\nCc: Tomi Valkeinen <tomi.valkeinen@ti.com>\nCc: Alex Deucher <alexander.deucher@amd.com>\nCc: Christian König <christian.koenig@amd.com>\nCc: Ben Skeggs <bskeggs@redhat.com>\nSigned-off-by: Thierry Reding <treding@nvidia.com>\nReviewed-by: Alex Deucher <alexander.deucher@amd.com>\nReviewed-by: Patrik Jakobsson <patrik.r.jakobsson@gmail.com>\nReviewed-by: Christian König <christian.koenig@amd.com>\n[danvet: Squash in simplification patch from kbuild.]\nSigned-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>\n\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/ee20274fabe1b30b86f45d913a15f5cf0defdd80"},{"sha":"6a962d0ab004eaedf8d67353dcee2591995a2c81","author":{"name":"Ben Skeggs","email":"63a676a8a1b300e6f5baea1ffe7bc1e56ba63d0e@redhat.com"},"message":"drm/nouveau/fbcon: fix out-of-bounds memory accesses\n\n[ Upstream commit f045f459d925138fe7d6193a8c86406bda7e49da ]\n\nReported by KASAN.\n\nSigned-off-by: Ben Skeggs <bskeggs@redhat.com>\nCc: stable@vger.kernel.org\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/6a962d0ab004eaedf8d67353dcee2591995a2c81"},{"sha":"b0f8d64a5f8aa3dceff51bf83b58378627bf27d9","author":{"name":"Russell King","email":"8640768d851c67eb4c0e8bfcf2aabcc8010b9372@armlinux.org.uk"},"message":"ARM: fix PTRACE_SETVFPREGS on SMP systems\n\n[ Upstream commit e2dfb4b880146bfd4b6aa8e138c0205407cebbaf ]\n\nPTRACE_SETVFPREGS fails to properly mark the VFP register set to be\nreloaded, because it undoes one of the effects of vfp_flush_hwstate().\n\nSpecifically vfp_flush_hwstate() sets thread->vfpstate.hard.cpu to\nan invalid CPU number, but vfp_set() overwrites this with the original\nCPU number, thereby rendering the hardware state as apparently \"valid\",\neven though the software state is more recent.\n\nFix this by reverting the previous change.\n\nCc: <stable@vger.kernel.org>\nFixes: 8130b9d7b9d8 (\"ARM: 7308/1: vfp: flush thread hwstate before copying ptrace registers\")\nAcked-by: Will Deacon <will.deacon@arm.com>\nTested-by: Simon Marchi <simon.marchi@ericsson.com>\nSigned-off-by: Russell King <rmk+kernel@armlinux.org.uk>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/b0f8d64a5f8aa3dceff51bf83b58378627bf27d9"},{"sha":"9a579331430c2cebb99488f664a736654988532d","author":{"name":"Paolo Bonzini","email":"7438500e0207b21c4e5dfca8d2a7898734cd7706@redhat.com"},"message":"KVM: irqfd: fix NULL pointer dereference in kvm_irq_map_gsi\n\n[ Upstream commit c622a3c21ede892e370b56e1ceb9eb28f8bbda6b ]\n\nFound by syzkaller:\n\n    BUG: unable to handle kernel NULL pointer dereference at 0000000000000120\n    IP: [<ffffffffa0797202>] kvm_irq_map_gsi+0x12/0x90 [kvm]\n    PGD 6f80b067 PUD b6535067 PMD 0\n    Oops: 0000 [#1] SMP\n    CPU: 3 PID: 4988 Comm: a.out Not tainted 4.4.9-300.fc23.x86_64 #1\n    [...]\n    Call Trace:\n     [<ffffffffa0795f62>] irqfd_update+0x32/0xc0 [kvm]\n     [<ffffffffa0796c7c>] kvm_irqfd+0x3dc/0x5b0 [kvm]\n     [<ffffffffa07943f4>] kvm_vm_ioctl+0x164/0x6f0 [kvm]\n     [<ffffffff81241648>] do_vfs_ioctl+0x298/0x480\n     [<ffffffff812418a9>] SyS_ioctl+0x79/0x90\n     [<ffffffff817a1062>] tracesys_phase2+0x84/0x89\n    Code: b5 71 a7 e0 5b 41 5c 41 5d 5d f3 c3 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 8b 8f 10 2e 00 00 31 c0 48 89 e5 <39> 91 20 01 00 00 76 6a 48 63 d2 48 8b 94 d1 28 01 00 00 48 85\n    RIP  [<ffffffffa0797202>] kvm_irq_map_gsi+0x12/0x90 [kvm]\n     RSP <ffff8800926cbca8>\n    CR2: 0000000000000120\n\nTestcase:\n\n    #include <unistd.h>\n    #include <sys/syscall.h>\n    #include <string.h>\n    #include <stdint.h>\n    #include <linux/kvm.h>\n    #include <fcntl.h>\n    #include <sys/ioctl.h>\n\n    long r[26];\n\n    int main()\n    {\n        memset(r, -1, sizeof(r));\n        r[2] = open(\"/dev/kvm\", 0);\n        r[3] = ioctl(r[2], KVM_CREATE_VM, 0);\n\n        struct kvm_irqfd ifd;\n        ifd.fd = syscall(SYS_eventfd2, 5, 0);\n        ifd.gsi = 3;\n        ifd.flags = 2;\n        ifd.resamplefd = ifd.fd;\n        r[25] = ioctl(r[3], KVM_IRQFD, &ifd);\n        return 0;\n    }\n\nReported-by: Dmitry Vyukov <dvyukov@google.com>\nCc: stable@vger.kernel.org\nSigned-off-by: Paolo Bonzini <pbonzini@redhat.com>\nSigned-off-by: Radim Krčmář <rkrcmar@redhat.com>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/9a579331430c2cebb99488f664a736654988532d"},{"sha":"26c6a77797c961c345b3d9c2be96f2cbde6276a1","author":{"name":"Paolo Bonzini","email":"7438500e0207b21c4e5dfca8d2a7898734cd7706@redhat.com"},"message":"KVM: x86: fix OOPS after invalid KVM_SET_DEBUGREGS\n\n[ Upstream commit d14bdb553f9196169f003058ae1cdabe514470e6 ]\n\nMOV to DR6 or DR7 causes a #GP if an attempt is made to write a 1 to\nany of bits 63:32.  However, this is not detected at KVM_SET_DEBUGREGS\ntime, and the next KVM_RUN oopses:\n\n   general protection fault: 0000 [#1] SMP\n   CPU: 2 PID: 14987 Comm: a.out Not tainted 4.4.9-300.fc23.x86_64 #1\n   Hardware name: LENOVO 2325F51/2325F51, BIOS G2ET32WW (1.12 ) 05/30/2012\n   [...]\n   Call Trace:\n    [<ffffffffa072c93d>] kvm_arch_vcpu_ioctl_run+0x141d/0x14e0 [kvm]\n    [<ffffffffa071405d>] kvm_vcpu_ioctl+0x33d/0x620 [kvm]\n    [<ffffffff81241648>] do_vfs_ioctl+0x298/0x480\n    [<ffffffff812418a9>] SyS_ioctl+0x79/0x90\n    [<ffffffff817a0f2e>] entry_SYSCALL_64_fastpath+0x12/0x71\n   Code: 55 83 ff 07 48 89 e5 77 27 89 ff ff 24 fd 90 87 80 81 0f 23 fe 5d c3 0f 23 c6 5d c3 0f 23 ce 5d c3 0f 23 d6 5d c3 0f 23 de 5d c3 <0f> 23 f6 5d c3 0f 0b 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00\n   RIP  [<ffffffff810639eb>] native_set_debugreg+0x2b/0x40\n    RSP <ffff88005836bd50>\n\nTestcase (beautified/reduced from syzkaller output):\n\n    #include <unistd.h>\n    #include <sys/syscall.h>\n    #include <string.h>\n    #include <stdint.h>\n    #include <linux/kvm.h>\n    #include <fcntl.h>\n    #include <sys/ioctl.h>\n\n    long r[8];\n\n    int main()\n    {\n        struct kvm_debugregs dr = { 0 };\n\n        r[2] = open(\"/dev/kvm\", O_RDONLY);\n        r[3] = ioctl(r[2], KVM_CREATE_VM, 0);\n        r[4] = ioctl(r[3], KVM_CREATE_VCPU, 7);\n\n        memcpy(&dr,\n               \"\\x5d\\x6a\\x6b\\xe8\\x57\\x3b\\x4b\\x7e\\xcf\\x0d\\xa1\\x72\"\n               \"\\xa3\\x4a\\x29\\x0c\\xfc\\x6d\\x44\\x00\\xa7\\x52\\xc7\\xd8\"\n               \"\\x00\\xdb\\x89\\x9d\\x78\\xb5\\x54\\x6b\\x6b\\x13\\x1c\\xe9\"\n               \"\\x5e\\xd3\\x0e\\x40\\x6f\\xb4\\x66\\xf7\\x5b\\xe3\\x36\\xcb\",\n               48);\n        r[7] = ioctl(r[4], KVM_SET_DEBUGREGS, &dr);\n        r[6] = ioctl(r[4], KVM_RUN, 0);\n    }\n\nReported-by: Dmitry Vyukov <dvyukov@google.com>\nCc: stable@vger.kernel.org\nSigned-off-by: Paolo Bonzini <pbonzini@redhat.com>\nSigned-off-by: Radim Krčmář <rkrcmar@redhat.com>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/26c6a77797c961c345b3d9c2be96f2cbde6276a1"},{"sha":"045f08909af86b12a5030c5ce34bb15f9a201bed","author":{"name":"Andre Przywara","email":"e18662054c872a726023dbfa4e7db0d5fee233cc@arm.com"},"message":"arm64: GICv3: introduce symbolic names for GICv3 ICC_SGI1R_EL1 fields\n\n[ Upstream commit 7e5802781c3e109558ddfd8b02155ad24d872ee7 ]\n\nThe gic_send_sgi() function used hardcoded bit shift values to\ngenerate the ICC_SGI1R_EL1 register value.\nReplace this with symbolic names to allow reusing them later.\n\nSigned-off-by: Andre Przywara <andre.przywara@arm.com>\nReviewed-by: Christoffer Dall <christoffer.dall@linaro.org>\nSigned-off-by: Christoffer Dall <christoffer.dall@linaro.org>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/045f08909af86b12a5030c5ce34bb15f9a201bed"},{"sha":"d822ea89aa219e61c91afbe4136e42502d08f85b","author":{"name":"Marc Zyngier","email":"3404add73d8af5dc5183acdd46985971473febc7@arm.com"},"message":"irqchip/gic-v3: Fix ICC_SGI1R_EL1.INTID decoding mask\n\n[ Upstream commit dd5f1b049dc139876801db3cdd0f20d21fd428cc ]\n\nThe INTID mask is wrong, and is made a signed value, which has\nnteresting effects in the KVM emulation. Let's sanitize it.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Marc Zyngier <marc.zyngier@arm.com>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/d822ea89aa219e61c91afbe4136e42502d08f85b"},{"sha":"33fae4cc30d0451479f620af8846c5d717f08b7b","author":{"name":"Chris Wilson","email":"4181b934c2715a2bba60cdb3cc1b35b2777d1c23@chris-wilson.co.uk"},"message":"locking/ww_mutex: Report recursive ww_mutex locking early\n\n[ Upstream commit 0422e83d84ae24b933e4b0d4c1e0f0b4ae8a0a3b ]\n\nRecursive locking for ww_mutexes was originally conceived as an\nexception. However, it is heavily used by the DRM atomic modesetting\ncode. Currently, the recursive deadlock is checked after we have queued\nup for a busy-spin and as we never release the lock, we spin until\nkicked, whereupon the deadlock is discovered and reported.\n\nA simple solution for the now common problem is to move the recursive\ndeadlock discovery to the first action when taking the ww_mutex.\n\nSuggested-by: Maarten Lankhorst <maarten.lankhorst@linux.intel.com>\nSigned-off-by: Chris Wilson <chris@chris-wilson.co.uk>\nSigned-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>\nReviewed-by: Maarten Lankhorst <maarten.lankhorst@linux.intel.com>\nCc: Andrew Morton <akpm@linux-foundation.org>\nCc: Linus Torvalds <torvalds@linux-foundation.org>\nCc: Paul E. McKenney <paulmck@linux.vnet.ibm.com>\nCc: Peter Zijlstra <peterz@infradead.org>\nCc: Thomas Gleixner <tglx@linutronix.de>\nCc: stable@vger.kernel.org\nLink: http://lkml.kernel.org/r/1464293297-19777-1-git-send-email-chris@chris-wilson.co.uk\nSigned-off-by: Ingo Molnar <mingo@kernel.org>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/33fae4cc30d0451479f620af8846c5d717f08b7b"},{"sha":"1155365dd825753302246654dc988c1a31462b04","author":{"name":"AceLan Kao","email":"e3df762a2fc4dae3f69c888910991996a5ce2d8a@canonical.com"},"message":"ALSA: hda - Fix headset mic detection problem for Dell machine\n\n[ Upstream commit f90d83b301701026b2e4c437a3613f377f63290e ]\n\nAdd the pin configuration value of this machine into the pin_quirk\ntable to make DELL1_MIC_NO_PRESENCE apply to this machine.\n\nSigned-off-by: AceLan Kao <acelan.kao@canonical.com>\nCc: <stable@vger.kernel.org>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/1155365dd825753302246654dc988c1a31462b04"},{"sha":"014694d9879ab5a571f72477fb84cffee9deb968","author":{"name":"Sergei Shtylyov","email":"405474b86ca3821db87329a130f0575274587812@cogentembedded.com"},"message":"of: irq: fix of_irq_get[_byname]() kernel-doc\n\n[ Upstream commit 3993546646baf1dab5f5c4f7d9bb58f2046fd1c1 ]\n\nThe kernel-doc for the of_irq_get[_byname]()  is clearly inadequate in\ndescribing the return values -- of_irq_get_byname() is documented better\nthan of_irq_get() but it  still doesn't mention that 0 is returned iff\nirq_create_of_mapping() fails (it doesn't return an error code in this\ncase). Document all possible return value variants, making the writing\nof the word \"IRQ\" consistent, while at it...\n\nFixes: 9ec36cafe43b (\"of/irq: do irq resolution in platform_get_irq\")\nFixes: ad69674e73a1 (\"of/irq: do irq resolution in platform_get_irq_byname()\")\nSigned-off-by: Sergei Shtylyov <sergei.shtylyov@cogentembedded.com>\nCC: stable@vger.kernel.org\nSigned-off-by: Rob Herring <robh@kernel.org>\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/014694d9879ab5a571f72477fb84cffee9deb968"},{"sha":"ec5ef4f89be8c7b14deb23a684b6adc3e4c3c220","author":{"name":"Helge Deller","email":"1f1989f8847b0c866a7c344d7b6e7f5b396fbba1@gmx.de"},"message":"parisc: Fix pagefault crash in unaligned __get_user() call\n\n[ Upstream commit 8b78f260887df532da529f225c49195d18fef36b ]\n\nOne of the debian buildd servers had this crash in the syslog without\nany other information:\n\n Unaligned handler failed, ret = -2\n clock_adjtime (pid 22578): Unaligned data reference (code 28)\n CPU: 1 PID: 22578 Comm: clock_adjtime Tainted: G  E  4.5.0-2-parisc64-smp #1 Debian 4.5.4-1\n task: 000000007d9960f8 ti: 00000001bde7c000 task.ti: 00000001bde7c000\n\n      YZrvWESTHLNXBCVMcbcbcbcbOGFRQPDI\n PSW: 00001000000001001111100000001111 Tainted: G            E\n r00-03  000000ff0804f80f 00000001bde7c2b0 00000000402d2be8 00000001bde7c2b0\n r04-07  00000000409e1fd0 00000000fa6f7fff 00000001bde7c148 00000000fa6f7fff\n r08-11  0000000000000000 00000000ffffffff 00000000fac9bb7b 000000000002b4d4\n r12-15  000000000015241c 000000000015242c 000000000000002d 00000000fac9bb7b\n r16-19  0000000000028800 0000000000000001 0000000000000070 00000001bde7c218\n r20-23  0000000000000000 00000001bde7c210 0000000000000002 0000000000000000\n r24-27  0000000000000000 0000000000000000 00000001bde7c148 00000000409e1fd0\n r28-31  0000000000000001 00000001bde7c320 00000001bde7c350 00000001bde7c218\n sr00-03  0000000001200000 0000000001200000 0000000000000000 0000000001200000\n sr04-07  0000000000000000 0000000000000000 0000000000000000 0000000000000000\n\n IASQ: 0000000000000000 0000000000000000 IAOQ: 00000000402d2e84 00000000402d2e88\n  IIR: 0ca0d089    ISR: 0000000001200000  IOR: 00000000fa6f7fff\n  CPU:        1   CR30: 00000001bde7c000 CR31: ffffffffffffffff\n  ORIG_R28: 00000002369fe628\n  IAOQ[0]: compat_get_timex+0x2dc/0x3c0\n  IAOQ[1]: compat_get_timex+0x2e0/0x3c0\n  RP(r2): compat_get_timex+0x40/0x3c0\n Backtrace:\n  [<00000000402d4608>] compat_SyS_clock_adjtime+0x40/0xc0\n  [<0000000040205024>] syscall_exit+0x0/0x14\n\nThis means the userspace program clock_adjtime called the clock_adjtime()\nsyscall and then crashed inside the compat_get_timex() function.\nSyscalls should never crash programs, but instead return EFAULT.\n\nThe IIR register contains the executed instruction, which disassebles\ninto \"ldw 0(sr3,r5),r9\".\nThis load-word instruction is part of __get_user() which tried to read the word\nat %r5/IOR (0xfa6f7fff). This means the unaligned handler jumped in.  The\nunaligned handler is able to emulate all ldw instructions, but it fails if it\nfails to read the source e.g. because of page fault.\n\nThe following program reproduces the problem:\n\n#define _GNU_SOURCE\n#include <unistd.h>\n#include <sys/syscall.h>\n#include <sys/mman.h>\n\nint main(void) {\n        /* allocate 8k */\n        char *ptr = mmap(NULL, 2*4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0);\n        /* free second half (upper 4k) and make it invalid. */\n        munmap(ptr+4096, 4096);\n        /* syscall where first int is unaligned and clobbers into invalid memory region */\n        /* syscall should return EFAULT */\n        return syscall(__NR_clock_adjtime, 0, ptr+4095);\n}\n\nTo fix this issue we simply need to check if the faulting instruction address\nis in the exception fixup table when the unaligned handler failed. If it\nis, call the fixup routine instead of crashing.\n\nWhile looking at the unaligned handler I found another issue as well: The\ntarget register should not be modified if the handler was unsuccessful.\n\nSigned-off-by: Helge Deller <deller@gmx.de>\nCc: stable@vger.kernel.org\nSigned-off-by: Sasha Levin <sasha.levin@oracle.com>","distinct":true,"url":"https://api.github.com/repos/mracar07/kernel_yu_msm8937/commits/ec5ef4f89be8c7b14deb23a684b6adc3e4c3c220"}]}
{"actor":{"display_login":"mracar07"}}