{"push_id":2340827309,"size":273,"distinct_size":2,"ref":"refs/heads/work/hns/drivers/gpio/gpio-pcal6524","head":"e68a037bf97fbac8ef086f455ef724420fdd0d86","before":"30165cde6dd06a5c73a383b1618f1518db81add0","commits":[{"sha":"e89166990f11c3f21e1649d760dd35f9e410321c","author":{"name":"Liu Bo","email":"2320f47fd1b0bdd58584dbc8b4d320b2decf8329@oracle.com"},"message":"Btrfs: fix deadlock in run_delalloc_nocow\n\n@cur_offset is not set back to what it should be (@cow_start) if\nbtrfs_next_leaf() returns something wrong, and the range [cow_start,\ncur_offset) remains locked forever.\n\ncc: <stable@vger.kernel.org>\nSigned-off-by: Liu Bo <bo.li.liu@oracle.com>\nReviewed-by: Josef Bacik <jbacik@fb.com>\nSigned-off-by: David Sterba <dsterba@suse.com>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/e89166990f11c3f21e1649d760dd35f9e410321c"},{"sha":"1846430c24d66e85cc58286b3319c82cd54debb2","author":{"name":"Liu Bo","email":"2320f47fd1b0bdd58584dbc8b4d320b2decf8329@oracle.com"},"message":"Btrfs: fix crash due to not cleaning up tree log block's dirty bits\n\nIn cases that the whole fs flips into readonly status due to failures in\ncritical sections, then log tree's blocks are still dirty, and this leads\nto a crash during umount time, the crash is about use-after-free,\n\numount\n -> close_ctree\n    -> stop workers\n    -> iput(btree_inode)\n       -> iput_final\n          -> write_inode_now\n\t     -> ...\n\t       -> queue job on stop'd workers\n\ncc: <stable@vger.kernel.org> v3.12+\nFixes: 681ae50917df (\"Btrfs: cleanup reserved space when freeing tree log on error\")\nSigned-off-by: Liu Bo <bo.li.liu@oracle.com>\nReviewed-by: Josef Bacik <jbacik@fb.com>\nSigned-off-by: David Sterba <dsterba@suse.com>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/1846430c24d66e85cc58286b3319c82cd54debb2"},{"sha":"55237a5f2431a72435e3ed39e4306e973c0446b7","author":{"name":"Liu Bo","email":"2320f47fd1b0bdd58584dbc8b4d320b2decf8329@oracle.com"},"message":"Btrfs: fix extent state leak from tree log\n\nIt's possible that btrfs_sync_log() bails out after one of the two\nbtrfs_write_marked_extents() which convert extent state's state bit into\nEXTENT_NEED_WAIT from EXTENT_DIRTY/EXTENT_NEW, however only EXTENT_DIRTY\nand EXTENT_NEW are searched by free_log_tree() so that those extent states\nwith EXTENT_NEED_WAIT lead to memory leak.\n\ncc: <stable@vger.kernel.org>\nSigned-off-by: Liu Bo <bo.li.liu@oracle.com>\nReviewed-by: Josef Bacik <jbacik@fb.com>\nSigned-off-by: David Sterba <dsterba@suse.com>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/55237a5f2431a72435e3ed39e4306e973c0446b7"},{"sha":"e8f1bc1493855e32b7a2a019decc3c353d94daf6","author":{"name":"Liu Bo","email":"2320f47fd1b0bdd58584dbc8b4d320b2decf8329@oracle.com"},"message":"Btrfs: fix btrfs_evict_inode to handle abnormal inodes correctly\n\nThis regression is introduced in\ncommit 3d48d9810de4 (\"btrfs: Handle uninitialised inode eviction\").\n\nThere are two problems,\n\na) it is ->destroy_inode() that does the final free on inode, not\n   ->evict_inode(),\nb) clear_inode() must be called before ->evict_inode() returns.\n\nThis could end up hitting BUG_ON(inode->i_state != (I_FREEING | I_CLEAR));\nin evict() because I_CLEAR is set in clear_inode().\n\nFixes: commit 3d48d9810de4 (\"btrfs: Handle uninitialised inode eviction\")\nCc: <stable@vger.kernel.org> # v4.7-rc6+\nSigned-off-by: Liu Bo <bo.li.liu@oracle.com>\nReviewed-by: Nikolay Borisov <nborisov@suse.com>\nReviewed-by: Josef Bacik <jbacik@fb.com>\nSigned-off-by: David Sterba <dsterba@suse.com>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/e8f1bc1493855e32b7a2a019decc3c353d94daf6"},{"sha":"1a932ef4e47984dee227834667b5ff5a334e4805","author":{"name":"Liu Bo","email":"2320f47fd1b0bdd58584dbc8b4d320b2decf8329@oracle.com"},"message":"Btrfs: fix use-after-free on root->orphan_block_rsv\n\nI got these from running generic/475,\n\nWARNING: CPU: 0 PID: 26384 at fs/btrfs/inode.c:3326 btrfs_orphan_commit_root+0x1ac/0x2b0 [btrfs]\nBUG: unable to handle kernel NULL pointer dereference at 0000000000000010\nIP: btrfs_block_rsv_release+0x1c/0x70 [btrfs]\nCall Trace:\n  btrfs_orphan_release_metadata+0x9f/0x200 [btrfs]\n  btrfs_orphan_del+0x10d/0x170 [btrfs]\n  btrfs_setattr+0x500/0x640 [btrfs]\n  notify_change+0x7ae/0x870\n  do_truncate+0xca/0x130\n  vfs_truncate+0x2ee/0x3d0\n  do_sys_truncate+0xaf/0xf0\n  SyS_truncate+0xe/0x10\n  entry_SYSCALL_64_fastpath+0x1f/0x96\n\nThe race is between btrfs_orphan_commit_root and btrfs_orphan_del,\n        t1                                        t2\nbtrfs_orphan_commit_root                     btrfs_orphan_del\n   spin_lock\n   check (&root->orphan_inodes)\n   root->orphan_block_rsv = NULL;\n   spin_unlock\n                                             atomic_dec(&root->orphan_inodes);\n                                             access root->orphan_block_rsv\n\nAccessing root->orphan_block_rsv must be done before decreasing\nroot->orphan_inodes.\n\ncc: <stable@vger.kernel.org> v3.12+\nFixes: 703c88e03524 (\"Btrfs: fix tracking of orphan inode count\")\nSigned-off-by: Liu Bo <bo.li.liu@oracle.com>\nReviewed-by: Josef Bacik <jbacik@fb.com>\nSigned-off-by: David Sterba <dsterba@suse.com>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/1a932ef4e47984dee227834667b5ff5a334e4805"},{"sha":"900c9981680067573671ecc5cbfa7c5770be3a40","author":{"name":"Liu Bo","email":"2320f47fd1b0bdd58584dbc8b4d320b2decf8329@oracle.com"},"message":"Btrfs: fix unexpected -EEXIST when creating new inode\n\nThe highest objectid, which is assigned to new inode, is decided at\nthe time of initializing fs roots.  However, in cases where log replay\ngets processed, the btree which fs root owns might be changed, so we\nhave to search it again for the highest objectid, otherwise creating\nnew inode would end up with -EEXIST.\n\ncc: <stable@vger.kernel.org> v4.4-rc6+\nFixes: f32e48e92596 (\"Btrfs: Initialize btrfs_root->highest_objectid when loading tree root and subvolume roots\")\nSigned-off-by: Liu Bo <bo.li.liu@oracle.com>\nReviewed-by: Josef Bacik <jbacik@fb.com>\nSigned-off-by: David Sterba <dsterba@suse.com>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/900c9981680067573671ecc5cbfa7c5770be3a40"},{"sha":"952bd3db0dada9994fa7edd891178075abcc045d","author":{"name":"Nikolay Borisov","email":"dd0fd13c528769af6d8630f3b89030dc93bef797@suse.com"},"message":"btrfs: Ignore errors from btrfs_qgroup_trace_extent_post\n\nRunning generic/019 with qgroups on the scratch device enabled is almost\nguaranteed to trigger the BUG_ON in btrfs_free_tree_block. It's supposed\nto trigger only on -ENOMEM, in reality, however, it's possible to get\n-EIO from btrfs_qgroup_trace_extent_post. This function just finds the\nroots of the extent being tracked and sets the qrecord->old_roots list.\nIf this operation fails nothing critical happens except the quota\naccounting can be considered wrong. In such case just set the\nINCONSISTENT flag for the quota and print a warning, rather than killing\noff the system. Additionally, it's possible to trigger a BUG_ON in\nbtrfs_truncate_inode_items as well.\n\nSigned-off-by: Nikolay Borisov <nborisov@suse.com>\nReviewed-by: Qu Wenruo <wqu@suse.com>\n[ error message adjustments ]\nSigned-off-by: David Sterba <dsterba@suse.com>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/952bd3db0dada9994fa7edd891178075abcc045d"},{"sha":"c8195a7b1ad5648857ce20ba24f384faed8512bc","author":{"name":"Zygo Blaxell","email":"79deebe948b0f676ddb458fe39117144ff2ca79a@umail.furryterror.org"},"message":"btrfs: remove spurious WARN_ON(ref->count < 0) in find_parent_nodes\n\nUntil v4.14, this warning was very infrequent:\n\n\tWARNING: CPU: 3 PID: 18172 at fs/btrfs/backref.c:1391 find_parent_nodes+0xc41/0x14e0\n\tModules linked in: [...]\n\tCPU: 3 PID: 18172 Comm: bees Tainted: G      D W    L  4.11.9-zb64+ #1\n\tHardware name: System manufacturer System Product Name/M5A78L-M/USB3, BIOS 2101    12/02/2014\n\tCall Trace:\n\t dump_stack+0x85/0xc2\n\t __warn+0xd1/0xf0\n\t warn_slowpath_null+0x1d/0x20\n\t find_parent_nodes+0xc41/0x14e0\n\t __btrfs_find_all_roots+0xad/0x120\n\t ? extent_same_check_offsets+0x70/0x70\n\t iterate_extent_inodes+0x168/0x300\n\t iterate_inodes_from_logical+0x87/0xb0\n\t ? iterate_inodes_from_logical+0x87/0xb0\n\t ? extent_same_check_offsets+0x70/0x70\n\t btrfs_ioctl+0x8ac/0x2820\n\t ? lock_acquire+0xc2/0x200\n\t do_vfs_ioctl+0x91/0x700\n\t ? __fget+0x112/0x200\n\t SyS_ioctl+0x79/0x90\n\t entry_SYSCALL_64_fastpath+0x23/0xc6\n\t ? trace_hardirqs_off_caller+0x1f/0x140\n\nStarting with v4.14 (specifically 86d5f9944252 (\"btrfs: convert prelimary\nreference tracking to use rbtrees\")) the WARN_ON occurs three orders of\nmagnitude more frequently--almost once per second while running workloads\nlike bees.\n\nReplace the WARN_ON() with a comment rationale for its removal.\nThe rationale is paraphrased from an explanation by Edmund Nadolski\n<enadolski@suse.de> on the linux-btrfs mailing list.\n\nFixes: 8da6d5815c59 (\"Btrfs: added btrfs_find_all_roots()\")\nSigned-off-by: Zygo Blaxell <ce3g8jdj@umail.furryterror.org>\nReviewed-by: Lu Fengqi <lufq.fnst@cn.fujitsu.com>\nSigned-off-by: David Sterba <dsterba@suse.com>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/c8195a7b1ad5648857ce20ba24f384faed8512bc"},{"sha":"627e08738e4315458c5df06358ce7a65cfdd635d","author":{"name":"Filipe Manana","email":"396addc00218539530419b15da697a581cb02fca@suse.com"},"message":"Btrfs: fix null pointer dereference when replacing missing device\n\nWhen we are replacing a missing device we mount the filesystem with the\ndegraded mode option in which case we are allowed to have a btrfs device\nstructure without a backing device member (its bdev member is NULL) and\ntherefore we can't dereference that member. Commit 38b5f68e9811\n(\"btrfs: drop btrfs_device::can_discard to query directly\") started to\ndereference that member when discarding extents, resulting in a null\npointer dereference:\n\n [ 3145.322257] BTRFS warning (device sdf): devid 2 uuid 4d922414-58eb-4880-8fed-9c3840f6c5d5 is missing\n [ 3145.364116] BTRFS info (device sdf): dev_replace from <missing disk> (devid 2) to /dev/sdg started\n [ 3145.413489] BUG: unable to handle kernel NULL pointer dereference at 00000000000000e0\n [ 3145.415085] IP: btrfs_discard_extent+0x6a/0xf8 [btrfs]\n [ 3145.415085] PGD 0 P4D 0\n [ 3145.415085] Oops: 0000 [#1] PREEMPT SMP PTI\n [ 3145.415085] Modules linked in: ppdev ghash_clmulni_intel pcbc aesni_intel aes_x86_64 crypto_simd cryptd glue_helper evdev psmouse parport_pc serio_raw i2c_piix4 i2\n [ 3145.415085] CPU: 0 PID: 11989 Comm: btrfs Tainted: G        W        4.15.0-rc9-btrfs-next-55+ #1\n [ 3145.415085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.10.2-0-g5f4c7b1-prebuilt.qemu-project.org 04/01/2014\n [ 3145.415085] RIP: 0010:btrfs_discard_extent+0x6a/0xf8 [btrfs]\n [ 3145.415085] RSP: 0018:ffffc90004813c60 EFLAGS: 00010293\n [ 3145.415085] RAX: ffff88020d39cc00 RBX: ffff88020c4ea2a0 RCX: 0000000000000002\n [ 3145.415085] RDX: 0000000000000000 RSI: ffff88020c4ea240 RDI: 0000000000000000\n [ 3145.415085] RBP: 0000000000000000 R08: 0000000000004000 R09: 0000000000000000\n [ 3145.415085] R10: ffffc90004813ae8 R11: 0000000000000000 R12: 0000000000000000\n [ 3145.415085] R13: ffff88020c418000 R14: 0000000000000000 R15: 0000000000000000\n [ 3145.415085] FS:  00007f565681f8c0(0000) GS:ffff88023fc00000(0000) knlGS:0000000000000000\n [ 3145.415085] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n [ 3145.415085] CR2: 00000000000000e0 CR3: 000000020d208006 CR4: 00000000001606f0\n [ 3145.415085] Call Trace:\n [ 3145.415085]  btrfs_finish_extent_commit+0x9a/0x1be [btrfs]\n [ 3145.415085]  btrfs_commit_transaction+0x649/0x7a0 [btrfs]\n [ 3145.415085]  ? start_transaction+0x2b0/0x3b3 [btrfs]\n [ 3145.415085]  btrfs_dev_replace_start+0x274/0x30c [btrfs]\n [ 3145.415085]  btrfs_dev_replace_by_ioctl+0x45/0x59 [btrfs]\n [ 3145.415085]  btrfs_ioctl+0x1a91/0x1d62 [btrfs]\n [ 3145.415085]  ? lock_acquire+0x16a/0x1af\n [ 3145.415085]  ? vfs_ioctl+0x1b/0x28\n [ 3145.415085]  ? trace_hardirqs_on_caller+0x14c/0x1a6\n [ 3145.415085]  vfs_ioctl+0x1b/0x28\n [ 3145.415085]  do_vfs_ioctl+0x5a9/0x5e0\n [ 3145.415085]  ? _raw_spin_unlock_irq+0x34/0x46\n [ 3145.415085]  ? entry_SYSCALL_64_fastpath+0x5/0x8b\n [ 3145.415085]  ? trace_hardirqs_on_caller+0x14c/0x1a6\n [ 3145.415085]  SyS_ioctl+0x52/0x76\n [ 3145.415085]  entry_SYSCALL_64_fastpath+0x1e/0x8b\n [ 3145.415085] RIP: 0033:0x7f56558b3c47\n [ 3145.415085] RSP: 002b:00007ffdcfac4c58 EFLAGS: 00000202\n [ 3145.415085] Code: be 02 00 00 00 4c 89 ef e8 b9 e7 03 00 85 c0 89 c5 75 75 48 8b 44 24 08 45 31 f6 48 8d 58 60 eb 52 48 8b 03 48 8b b8 a0 00 00 00 <48> 8b 87 e0 00\n [ 3145.415085] RIP: btrfs_discard_extent+0x6a/0xf8 [btrfs] RSP: ffffc90004813c60\n [ 3145.415085] CR2: 00000000000000e0\n [ 3145.458185] ---[ end trace 06302e7ac31902bf ]---\n\nThis is trivially reproduced by running the test btrfs/027 from fstests\nlike this:\n\n  $ MOUNT_OPTIONS=\"-o discard\" ./check btrfs/027\n\nFix this by skipping devices without a backing device before attempting\nto discard.\n\nFixes: 38b5f68e9811 (\"btrfs: drop btrfs_device::can_discard to query directly\")\nSigned-off-by: Filipe Manana <fdmanana@suse.com>\nSigned-off-by: David Sterba <dsterba@suse.com>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/627e08738e4315458c5df06358ce7a65cfdd635d"},{"sha":"fd649f10c3d21ee9d7542c609f29978bdf73ab94","author":{"name":"Nikolay Borisov","email":"dd0fd13c528769af6d8630f3b89030dc93bef797@suse.com"},"message":"btrfs: Fix use-after-free when cleaning up fs_devs with a single stale device\n\nCommit 4fde46f0cc71 (\"Btrfs: free the stale device\") introduced\nbtrfs_free_stale_device which iterates the device lists for all\nregistered btrfs filesystems and deletes those devices which aren't\nmounted. In a btrfs_devices structure has only 1 device attached to it\nand it is unused then btrfs_free_stale_devices will proceed to also free\nthe btrfs_fs_devices struct itself. Currently this leads to a use after\nfree since list_for_each_entry will try to perform a check on the\nalready freed memory to see if it has to terminate the loop.\n\nThe fix is to use 'break' when we know we are freeing the current\nfs_devs.\n\nFixes: 4fde46f0cc71 (\"Btrfs: free the stale device\")\nSigned-off-by: Nikolay Borisov <nborisov@suse.com>\nReviewed-by: Anand Jain <anand.jain@oracle.com>\nSigned-off-by: David Sterba <dsterba@suse.com>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/fd649f10c3d21ee9d7542c609f29978bdf73ab94"},{"sha":"8e1eb3fa009aa7c0b944b3c8b26b07de0efb3200","author":{"name":"Dan Williams","email":"11d4d1e92ac6a0e1ab4aaa72a56a5c1cae6b74af@intel.com"},"message":"x86/entry/64: Clear extra registers beyond syscall arguments, to reduce speculation attack surface\n\nAt entry userspace may have (maliciously) populated the extra registers\noutside the syscall calling convention with arbitrary values that could\nbe useful in a speculative execution (Spectre style) attack.\n\nClear these registers to minimize the kernel's attack surface.\n\nNote, this only clears the extra registers and not the unused\nregisters for syscalls less than 6 arguments, since those registers are\nlikely to be clobbered well before their values could be put to use\nunder speculation.\n\nNote, Linus found that the XOR instructions can be executed with\nminimized cost if interleaved with the PUSH instructions, and Ingo's\nanalysis found that R10 and R11 should be included in the register\nclearing beyond the typical 'extra' syscall calling convention\nregisters.\n\nSuggested-by: Linus Torvalds <torvalds@linux-foundation.org>\nReported-by: Andi Kleen <ak@linux.intel.com>\nSigned-off-by: Dan Williams <dan.j.williams@intel.com>\nCc: <stable@vger.kernel.org>\nCc: Andy Lutomirski <luto@kernel.org>\nCc: Borislav Petkov <bp@alien8.de>\nCc: Brian Gerst <brgerst@gmail.com>\nCc: Denys Vlasenko <dvlasenk@redhat.com>\nCc: H. Peter Anvin <hpa@zytor.com>\nCc: Josh Poimboeuf <jpoimboe@redhat.com>\nCc: Peter Zijlstra <peterz@infradead.org>\nCc: Thomas Gleixner <tglx@linutronix.de>\nLink: http://lkml.kernel.org/r/151787988577.7847.16733592218894189003.stgit@dwillia2-desk3.amr.corp.intel.com\n[ Made small improvements to the changelog and the code comments. ]\nSigned-off-by: Ingo Molnar <mingo@kernel.org>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/8e1eb3fa009aa7c0b944b3c8b26b07de0efb3200"},{"sha":"5355ccbe02da413df22eb05f89ca2da9959f9147","author":{"name":"Peter Zijlstra","email":"4d3106856cce90e8f40acc5180f60ddda3a23b6e@infradead.org"},"message":"x86/cpufeature: Reindent _static_cpu_has()\n\nBecause its daft..\n\nSigned-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>\nReviewed-by: Borislav Petkov <bp@suse.de>\nCc: Josh Poimboeuf <jpoimboe@redhat.com>\nCc: Linus Torvalds <torvalds@linux-foundation.org>\nCc: Peter Zijlstra <peterz@infradead.org>\nCc: Thomas Gleixner <tglx@linutronix.de>\nSigned-off-by: Ingo Molnar <mingo@kernel.org>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/5355ccbe02da413df22eb05f89ca2da9959f9147"},{"sha":"3197b04bb39b596613ff2f8143c5cd0a6908debf","author":{"name":"Peter Zijlstra","email":"4d3106856cce90e8f40acc5180f60ddda3a23b6e@infradead.org"},"message":"x86/cpufeature: Update _static_cpu_has() to use all named variables\n\nBecause more readable..\n\nRequested-by: Josh Poimboeuf <jpoimboe@redhat.com>\nSigned-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>\nCc: Linus Torvalds <torvalds@linux-foundation.org>\nCc: Peter Zijlstra <peterz@infradead.org>\nCc: Thomas Gleixner <tglx@linutronix.de>\nSigned-off-by: Ingo Molnar <mingo@kernel.org>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/3197b04bb39b596613ff2f8143c5cd0a6908debf"},{"sha":"3ac6d8c787b835b997eb23e43e09aa0895ef7d58","author":{"name":"Dan Williams","email":"11d4d1e92ac6a0e1ab4aaa72a56a5c1cae6b74af@intel.com"},"message":"x86/entry/64: Clear registers for exceptions/interrupts, to reduce speculation attack surface\n\nClear the 'extra' registers on entering the 64-bit kernel for exceptions\nand interrupts. The common registers are not cleared since they are\nlikely clobbered well before they can be exploited in a speculative\nexecution attack.\n\nOriginally-From: Andi Kleen <ak@linux.intel.com>\nSigned-off-by: Dan Williams <dan.j.williams@intel.com>\nCc: <stable@vger.kernel.org>\nCc: Andy Lutomirski <luto@kernel.org>\nCc: Borislav Petkov <bp@alien8.de>\nCc: Brian Gerst <brgerst@gmail.com>\nCc: Denys Vlasenko <dvlasenk@redhat.com>\nCc: H. Peter Anvin <hpa@zytor.com>\nCc: Josh Poimboeuf <jpoimboe@redhat.com>\nCc: Linus Torvalds <torvalds@linux-foundation.org>\nCc: Peter Zijlstra <peterz@infradead.org>\nCc: Thomas Gleixner <tglx@linutronix.de>\nLink: http://lkml.kernel.org/r/151787989146.7847.15749181712358213254.stgit@dwillia2-desk3.amr.corp.intel.com\n[ Made small improvements to the changelog and the code comments. ]\nSigned-off-by: Ingo Molnar <mingo@kernel.org>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/3ac6d8c787b835b997eb23e43e09aa0895ef7d58"},{"sha":"6b8cf5cc9965673951f1ab3f0e3cf23d06e3e2ee","author":{"name":"Dan Williams","email":"11d4d1e92ac6a0e1ab4aaa72a56a5c1cae6b74af@intel.com"},"message":"x86/entry/64/compat: Clear registers for compat syscalls, to reduce speculation attack surface\n\nAt entry userspace may have populated registers with values that could\notherwise be useful in a speculative execution attack. Clear them to\nminimize the kernel's attack surface.\n\nOriginally-From: Andi Kleen <ak@linux.intel.com>\nSigned-off-by: Dan Williams <dan.j.williams@intel.com>\nCc: <stable@vger.kernel.org>\nCc: Andy Lutomirski <luto@kernel.org>\nCc: Borislav Petkov <bp@alien8.de>\nCc: Brian Gerst <brgerst@gmail.com>\nCc: Denys Vlasenko <dvlasenk@redhat.com>\nCc: H. Peter Anvin <hpa@zytor.com>\nCc: Josh Poimboeuf <jpoimboe@redhat.com>\nCc: Linus Torvalds <torvalds@linux-foundation.org>\nCc: Peter Zijlstra <peterz@infradead.org>\nCc: Thomas Gleixner <tglx@linutronix.de>\nLink: http://lkml.kernel.org/r/151787989697.7847.4083702787288600552.stgit@dwillia2-desk3.amr.corp.intel.com\n[ Made small improvements to the changelog. ]\nSigned-off-by: Ingo Molnar <mingo@kernel.org>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/6b8cf5cc9965673951f1ab3f0e3cf23d06e3e2ee"},{"sha":"3f2f7c553d077be6a30cb96b2976a2c940bf5335","author":{"name":"Hui Wang","email":"9d5fe9a97fbb9544eef3d32c5cf8dcaba19b36f5@canonical.com"},"message":"ALSA: hda - Fix headset mic detection problem for two Dell machines\n\nOne of them has the codec of alc256 and the other one has the codec\nof alc289.\n\nCc: <stable@vger.kernel.org>\nSigned-off-by: Hui Wang <hui.wang@canonical.com>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/3f2f7c553d077be6a30cb96b2976a2c940bf5335"},{"sha":"40e2c4e5a7efcd50983aacbddd3c617e776018bf","author":{"name":"Kailang Yang","email":"08a5e1a5190dd16d580b4a90f5cf0a516ee59156@realtek.com"},"message":"ALSA: hda/realtek - Add headset mode support for Dell laptop\n\nThis platform had two Dmic and single Dmic.\nThis update was for single Dmic.\n\nThis commit was for two Dmic.\n\nFixes: 75ee94b20b46 (\"ALSA: hda - fix headset mic problem for Dell machines...\")\nSigned-off-by: Kailang Yang <kailang@realtek.com>\nCc: <stable@vger.kernel.org>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/40e2c4e5a7efcd50983aacbddd3c617e776018bf"},{"sha":"61fcf8ece9b6b09450250c4ca40cc3b81a96a68d","author":{"name":"Kailang Yang","email":"08a5e1a5190dd16d580b4a90f5cf0a516ee59156@realtek.com"},"message":"ALSA: hda/realtek - Enable Thinkpad Dock device for ALC298 platform\n\nThinkpad Dock device support for ALC298 platform.\nIt need to use SSID for the quirk table.\nBecause IdeaPad also has ALC298 platform.\nUse verb for the quirk table will confuse.\n\nSigned-off-by: Kailang Yang <kailang@realtek.com>\nCc: <stable@vger.kernel.org>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/61fcf8ece9b6b09450250c4ca40cc3b81a96a68d"},{"sha":"eff84b379089cd8b4e83599639c1f5f6e34ef7bf","author":{"name":"Eric Biggers","email":"0106d512ed1cb672be29d4b167a07ead51709fba@google.com"},"message":"crypto: sha512-mb - initialize pending lengths correctly\n\nThe SHA-512 multibuffer code keeps track of the number of blocks pending\nin each lane.  The minimum of these values is used to identify the next\nlane that will be completed.  Unused lanes are set to a large number\n(0xFFFFFFFF) so that they don't affect this calculation.\n\nHowever, it was forgotten to set the lengths to this value in the\ninitial state, where all lanes are unused.  As a result it was possible\nfor sha512_mb_mgr_get_comp_job_avx2() to select an unused lane, causing\na NULL pointer dereference.  Specifically this could happen in the case\nwhere ->update() was passed fewer than SHA512_BLOCK_SIZE bytes of data,\nso it then called sha_complete_job() without having actually submitted\nany blocks to the multi-buffer code.  This hit a NULL pointer\ndereference if another task happened to have submitted blocks\nconcurrently to the same CPU and the flush timer had not yet expired.\n\nFix this by initializing sha512_mb_mgr->lens correctly.\n\nAs usual, this bug was found by syzkaller.\n\nFixes: 45691e2d9b18 (\"crypto: sha512-mb - submit/flush routines for AVX2\")\nReported-by: syzbot <syzkaller@googlegroups.com>\nCc: <stable@vger.kernel.org> # v4.8+\nSigned-off-by: Eric Biggers <ebiggers@google.com>\nSigned-off-by: Herbert Xu <herbert@gondor.apana.org.au>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/eff84b379089cd8b4e83599639c1f5f6e34ef7bf"},{"sha":"87a81dce53b1ea61acaeefa5191a0376a2d1d721","author":{"name":"LEROY Christophe","email":"039dabc4895565112aed26d4ec2b65f486237723@c-s.fr"},"message":"crypto: talitos - fix Kernel Oops on hashing an empty file\n\nPerforming the hash of an empty file leads to a kernel Oops\n\n[   44.504600] Unable to handle kernel paging request for data at address 0x0000000c\n[   44.512819] Faulting instruction address: 0xc02d2be8\n[   44.524088] Oops: Kernel access of bad area, sig: 11 [#1]\n[   44.529171] BE PREEMPT CMPC885\n[   44.532232] CPU: 0 PID: 491 Comm: md5sum Not tainted 4.15.0-rc8-00211-g3a968610b6ea #81\n[   44.540814] NIP:  c02d2be8 LR: c02d2984 CTR: 00000000\n[   44.545812] REGS: c6813c90 TRAP: 0300   Not tainted  (4.15.0-rc8-00211-g3a968610b6ea)\n[   44.554223] MSR:  00009032 <EE,ME,IR,DR,RI>  CR: 48222822  XER: 20000000\n[   44.560855] DAR: 0000000c DSISR: c0000000\n[   44.560855] GPR00: c02d28fc c6813d40 c6828000 c646fa40 00000001 00000001 00000001 00000000\n[   44.560855] GPR08: 0000004c 00000000 c000bfcc 00000000 28222822 100280d4 00000000 10020008\n[   44.560855] GPR16: 00000000 00000020 00000000 00000000 10024008 00000000 c646f9f0 c6179a10\n[   44.560855] GPR24: 00000000 00000001 c62f0018 c6179a10 00000000 c6367a30 c62f0000 c646f9c0\n[   44.598542] NIP [c02d2be8] ahash_process_req+0x448/0x700\n[   44.603751] LR [c02d2984] ahash_process_req+0x1e4/0x700\n[   44.608868] Call Trace:\n[   44.611329] [c6813d40] [c02d28fc] ahash_process_req+0x15c/0x700 (unreliable)\n[   44.618302] [c6813d90] [c02060c4] hash_recvmsg+0x11c/0x210\n[   44.623716] [c6813db0] [c0331354] ___sys_recvmsg+0x98/0x138\n[   44.629226] [c6813eb0] [c03332c0] __sys_recvmsg+0x40/0x84\n[   44.634562] [c6813f10] [c03336c0] SyS_socketcall+0xb8/0x1d4\n[   44.640073] [c6813f40] [c000d1ac] ret_from_syscall+0x0/0x38\n[   44.645530] Instruction dump:\n[   44.648465] 38c00001 7f63db78 4e800421 7c791b78 54690ffe 0f090000 80ff0190 2f870000\n[   44.656122] 40befe50 2f990001 409e0210 813f01bc <8129000c> b39e003a 7d29c214 913e003c\n\nThis patch fixes that Oops by checking if src is NULL.\n\nFixes: 6a1e8d14156d4 (\"crypto: talitos - making mapping helpers more generic\")\nCc: <stable@vger.kernel.org>\nSigned-off-by: Christophe Leroy <christophe.leroy@c-s.fr>\nSigned-off-by: Herbert Xu <herbert@gondor.apana.org.au>","distinct":false,"url":"https://api.github.com/repos/OpenPhoenux/gta04-kernel/commits/87a81dce53b1ea61acaeefa5191a0376a2d1d721"}]}
{"actor":{"display_login":"op-mirror"}}