{"push_id":2652951878,"size":212,"distinct_size":212,"ref":"refs/heads/rpi-4.16.y","head":"5ed2c275f7672ed307f61f1ef8c43c3817de5af8","before":"2362500e0a547b4683c86725aa0aa7b38cbbdbe1","commits":[{"sha":"5d78f66d1d439295bdb2783150cc0c2037698d27","author":{"name":"Taehee Yoo","email":"6de65b15142147918004ed846c7e65326f9b9238@gmail.com"},"message":"netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump()\n\ncommit b71534583f22d08c3e3563bf5100aeb5f5c9fbe5 upstream.\n\nIn the nft_ct_helper_obj_dump(), always priv->helper4 is dereferenced.\nBut if family is ipv6, priv->helper6 should be dereferenced.\n\nSteps to reproduces:\n\n   #test.nft\n   table ip6 filter {\n\t   ct helper ftp {\n\t\t   type \"ftp\" protocol tcp\n\t   }\n\t   chain input {\n\t\t   type filter hook input priority 4;\n\t\t   ct helper set \"ftp\"\n\t   }\n   }\n\n   %nft -f test.nft\n   %nft list ruleset\n\nwe can see the below messages:\n\n[  916.286233] kasan: GPF could be caused by NULL-ptr deref or user memory access\n[  916.294777] general protection fault: 0000 [#1] SMP DEBUG_PAGEALLOC KASAN PTI\n[  916.302613] Modules linked in: nft_objref nf_conntrack_sip nf_conntrack_snmp nf_conntrack_broadcast nf_conntrack_ftp nft_ct nf_conntrack nf_tables nfnetlink [last unloaded: nfnetlink]\n[  916.318758] CPU: 1 PID: 2093 Comm: nft Not tainted 4.17.0-rc4+ #181\n[  916.326772] Hardware name: To be filled by O.E.M. To be filled by O.E.M./Aptio CRB, BIOS 5.6.5 07/08/2015\n[  916.338773] RIP: 0010:strlen+0x1a/0x90\n[  916.342781] RSP: 0018:ffff88010ff0f2f8 EFLAGS: 00010292\n[  916.346773] RAX: dffffc0000000000 RBX: ffff880119b26ee8 RCX: ffff88010c150038\n[  916.354777] RDX: 0000000000000002 RSI: ffff880119b26ee8 RDI: 0000000000000010\n[  916.362773] RBP: 0000000000000010 R08: 0000000000007e88 R09: ffff88010c15003c\n[  916.370773] R10: ffff88010c150037 R11: ffffed002182a007 R12: ffff88010ff04040\n[  916.378779] R13: 0000000000000010 R14: ffff880119b26f30 R15: ffff88010ff04110\n[  916.387265] FS:  00007f57a1997700(0000) GS:ffff88011b800000(0000) knlGS:0000000000000000\n[  916.394785] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[  916.402778] CR2: 00007f57a0ac80f0 CR3: 000000010ff02000 CR4: 00000000001006e0\n[  916.410772] Call Trace:\n[  916.414787]  nft_ct_helper_obj_dump+0x94/0x200 [nft_ct]\n[  916.418779]  ? nft_ct_set_eval+0x560/0x560 [nft_ct]\n[  916.426771]  ? memset+0x1f/0x40\n[  916.426771]  ? __nla_reserve+0x92/0xb0\n[  916.434774]  ? memcpy+0x34/0x50\n[  916.434774]  nf_tables_fill_obj_info+0x484/0x860 [nf_tables]\n[  916.442773]  ? __nft_release_basechain+0x600/0x600 [nf_tables]\n[  916.450779]  ? lock_acquire+0x193/0x380\n[  916.454771]  ? lock_acquire+0x193/0x380\n[  916.458789]  ? nf_tables_dump_obj+0x148/0xcb0 [nf_tables]\n[  916.462777]  nf_tables_dump_obj+0x5f0/0xcb0 [nf_tables]\n[  916.470769]  ? __alloc_skb+0x30b/0x500\n[  916.474779]  netlink_dump+0x752/0xb50\n[  916.478775]  __netlink_dump_start+0x4d3/0x750\n[  916.482784]  nf_tables_getobj+0x27a/0x930 [nf_tables]\n[  916.490774]  ? nft_obj_notify+0x100/0x100 [nf_tables]\n[  916.494772]  ? nf_tables_getobj+0x930/0x930 [nf_tables]\n[  916.502579]  ? nf_tables_dump_flowtable_done+0x70/0x70 [nf_tables]\n[  916.506774]  ? nft_obj_notify+0x100/0x100 [nf_tables]\n[  916.514808]  nfnetlink_rcv_msg+0x8ab/0xa86 [nfnetlink]\n[  916.518771]  ? nfnetlink_rcv_msg+0x550/0xa86 [nfnetlink]\n[  916.526782]  netlink_rcv_skb+0x23e/0x360\n[  916.530773]  ? nfnetlink_bind+0x200/0x200 [nfnetlink]\n[  916.534778]  ? debug_check_no_locks_freed+0x280/0x280\n[  916.542770]  ? netlink_ack+0x870/0x870\n[  916.546786]  ? ns_capable_common+0xf4/0x130\n[  916.550765]  nfnetlink_rcv+0x172/0x16c0 [nfnetlink]\n[  916.554771]  ? sched_clock_local+0xe2/0x150\n[  916.558774]  ? sched_clock_cpu+0x144/0x180\n[  916.566575]  ? lock_acquire+0x380/0x380\n[  916.570775]  ? sched_clock_local+0xe2/0x150\n[  916.574765]  ? nfnetlink_net_init+0x130/0x130 [nfnetlink]\n[  916.578763]  ? sched_clock_cpu+0x144/0x180\n[  916.582770]  ? lock_acquire+0x193/0x380\n[  916.590771]  ? lock_acquire+0x193/0x380\n[  916.594766]  ? lock_acquire+0x380/0x380\n[  916.598760]  ? netlink_deliver_tap+0x262/0xa60\n[  916.602766]  ? lock_acquire+0x193/0x380\n[  916.606766]  netlink_unicast+0x3ef/0x5a0\n[  916.610771]  ? netlink_attachskb+0x630/0x630\n[  916.614763]  netlink_sendmsg+0x72a/0xb00\n[  916.618769]  ? netlink_unicast+0x5a0/0x5a0\n[  916.626766]  ? _copy_from_user+0x92/0xc0\n[  916.630773]  __sys_sendto+0x202/0x300\n[  916.634772]  ? __ia32_sys_getpeername+0xb0/0xb0\n[  916.638759]  ? lock_acquire+0x380/0x380\n[  916.642769]  ? lock_acquire+0x193/0x380\n[  916.646761]  ? finish_task_switch+0xf4/0x560\n[  916.650763]  ? __schedule+0x582/0x19a0\n[  916.655301]  ? __sched_text_start+0x8/0x8\n[  916.655301]  ? up_read+0x1c/0x110\n[  916.655301]  ? __do_page_fault+0x48b/0xaa0\n[  916.655301]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe\n[  916.655301]  __x64_sys_sendto+0xdd/0x1b0\n[  916.655301]  do_syscall_64+0x96/0x3d0\n[  916.655301]  entry_SYSCALL_64_after_hwframe+0x49/0xbe\n[  916.655301] RIP: 0033:0x7f57a0ff5e03\n[  916.655301] RSP: 002b:00007fff6367e0a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c\n[  916.655301] RAX: ffffffffffffffda RBX: 00007fff6367f1e0 RCX: 00007f57a0ff5e03\n[  916.655301] RDX: 0000000000000020 RSI: 00007fff6367e110 RDI: 0000000000000003\n[  916.655301] RBP: 00007fff6367e100 R08: 00007f57a0ce9160 R09: 000000000000000c\n[  916.655301] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff6367e110\n[  916.655301] R13: 0000000000000020 R14: 00007f57a153c610 R15: 0000562417258de0\n[  916.655301] Code: ff ff ff 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 fa 53 48 c1 ea 03 48 b8 00 00 00 00 00 fc ff df 48 89 fd 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f\n[  916.655301] RIP: strlen+0x1a/0x90 RSP: ffff88010ff0f2f8\n[  916.771929] ---[ end trace 1065e048e72479fe ]---\n[  916.777204] Kernel panic - not syncing: Fatal exception\n[  916.778158] Kernel Offset: 0x14000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)\n\nSigned-off-by: Taehee Yoo <ap420073@gmail.com>\nAcked-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/5d78f66d1d439295bdb2783150cc0c2037698d27"},{"sha":"c8d1919d3761e08d742c721465deef3dab013037","author":{"name":"Atul Gupta","email":"3a44156bb6eca084a4bb0cab11a9ae7501e32f54@chelsio.com"},"message":"crypto: chelsio - request to HW should wrap\n\ncommit 4c826fed675dfffd8485c5477b616d61d1ec9e9a upstream.\n\n-Tx request and data is copied to HW Q in 64B desc, check for\nend of queue and adjust the current position to start from\nbeginning before passing the additional request info.\n-key context copy should check key length only\n-Few reverse christmas tree correction\n\nSigned-off-by: Atul Gupta <atul.gupta@chelsio.com>\nSigned-off-by: Herbert Xu <herbert@gondor.apana.org.au>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/c8d1919d3761e08d742c721465deef3dab013037"},{"sha":"41d148af5f3b4e2d81a561435b169c8cd61c4fa1","author":{"name":"Bart Van Assche","email":"28563a2d387a4f8f033bf7abbf80937064dfbe0c@wdc.com"},"message":"blkdev_report_zones_ioctl(): Use vmalloc() to allocate large buffers\n\ncommit 327ea4adcfa37194739f1ec7c70568944d292281 upstream.\n\nAvoid that complaints similar to the following appear in the kernel log\nif the number of zones is sufficiently large:\n\n  fio: page allocation failure: order:9, mode:0x140c0c0(GFP_KERNEL|__GFP_COMP|__GFP_ZERO), nodemask=(null)\n  Call Trace:\n  dump_stack+0x63/0x88\n  warn_alloc+0xf5/0x190\n  __alloc_pages_slowpath+0x8f0/0xb0d\n  __alloc_pages_nodemask+0x242/0x260\n  alloc_pages_current+0x6a/0xb0\n  kmalloc_order+0x18/0x50\n  kmalloc_order_trace+0x26/0xb0\n  __kmalloc+0x20e/0x220\n  blkdev_report_zones_ioctl+0xa5/0x1a0\n  blkdev_ioctl+0x1ba/0x930\n  block_ioctl+0x41/0x50\n  do_vfs_ioctl+0xaa/0x610\n  SyS_ioctl+0x79/0x90\n  do_syscall_64+0x79/0x1b0\n  entry_SYSCALL_64_after_hwframe+0x3d/0xa2\n\nFixes: 3ed05a987e0f (\"blk-zoned: implement ioctls\")\nSigned-off-by: Bart Van Assche <bart.vanassche@wdc.com>\nCc: Shaun Tancheff <shaun.tancheff@seagate.com>\nCc: Damien Le Moal <damien.lemoal@hgst.com>\nCc: Christoph Hellwig <hch@lst.de>\nCc: Martin K. Petersen <martin.petersen@oracle.com>\nCc: Hannes Reinecke <hare@suse.com>\nCc: <stable@vger.kernel.org>\nSigned-off-by: Jens Axboe <axboe@kernel.dk>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/41d148af5f3b4e2d81a561435b169c8cd61c4fa1"},{"sha":"6f41a76cc0723739bc46902b9dfae07605150174","author":{"name":"Kevin Easton","email":"ffb4761cba839470133bee36aeb139f58d7dbaa9@guarana.org"},"message":"af_key: Always verify length of provided sadb_key\n\ncommit 4b66af2d6356a00e94bcdea3e7fea324e8b5c6f4 upstream.\n\nKey extensions (struct sadb_key) include a user-specified number of key\nbits.  The kernel uses that number to determine how much key data to copy\nout of the message in pfkey_msg2xfrm_state().\n\nThe length of the sadb_key message must be verified to be long enough,\neven in the case of SADB_X_AALG_NULL.  Furthermore, the sadb_key_len value\nmust be long enough to include both the key data and the struct sadb_key\nitself.\n\nIntroduce a helper function verify_key_len(), and call it from\nparse_exthdrs() where other exthdr types are similarly checked for\ncorrectness.\n\nSigned-off-by: Kevin Easton <kevin@guarana.org>\nReported-by: syzbot+5022a34ca5a3d49b84223653fab632dfb7b4cf37@syzkaller.appspotmail.com\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>\nCc: Zubin Mithra <zsm@chromium.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/6f41a76cc0723739bc46902b9dfae07605150174"},{"sha":"1ede3f3a2425138bb93522f10860e5682fd1256e","author":{"name":"Wanpeng Li","email":"ab8ac92aed17a02f2e86162bb83ed8da94a09c3f@tencent.com"},"message":"KVM: X86: Fix reserved bits check for MOV to CR3\n\ncommit a780a3ea628268b2ad0ed43d7f28d90db0ff18be upstream.\n\nMSB of CR3 is a reserved bit if the PCIDE bit is not set in CR4.\nIt should be checked when PCIDE bit is not set, however commit\n'd1cd3ce900441 (\"KVM: MMU: check guest CR3 reserved bits based on\nits physical address width\")' removes the bit 63 checking\nunconditionally. This patch fixes it by checking bit 63 of CR3\nwhen PCIDE bit is not set in CR4.\n\nFixes: d1cd3ce900441 (KVM: MMU: check guest CR3 reserved bits based on its physical address width)\nCc: Paolo Bonzini <pbonzini@redhat.com>\nCc: Radim Krčmář <rkrcmar@redhat.com>\nCc: Liran Alon <liran.alon@oracle.com>\nCc: stable@vger.kernel.org\nReviewed-by: Junaid Shahid <junaids@google.com>\nSigned-off-by: Wanpeng Li <wanpengli@tencent.com>\nSigned-off-by: Paolo Bonzini <pbonzini@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/1ede3f3a2425138bb93522f10860e5682fd1256e"},{"sha":"83ac059a0ecf810e17875e8cc39e8bd2f3bbdc3a","author":{"name":"Paolo Bonzini","email":"69d3ebcf5ee4e7f05a50dc23cd96655b730804b4@redhat.com"},"message":"KVM: x86: introduce linear_{read,write}_system\n\ncommit 79367a65743975e5cac8d24d08eccc7fdae832b0 upstream.\n\nWrap the common invocation of ctxt->ops->read_std and ctxt->ops->write_std, so\nas to have a smaller patch when the functions grow another argument.\n\nFixes: 129a72a0d3c8 (\"KVM: x86: Introduce segmented_write_std\", 2017-01-12)\nCc: stable@vger.kernel.org\nSigned-off-by: Paolo Bonzini <pbonzini@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/83ac059a0ecf810e17875e8cc39e8bd2f3bbdc3a"},{"sha":"b775e0be2c1006a540cdf4982dc588d641e09b2e","author":{"name":"Felix Wilhelm","email":"62b3c488cef8c5be5662407fd807e2a32e0a3658@google.com"},"message":"kvm: nVMX: Enforce cpl=0 for VMX instructions\n\ncommit 727ba748e110b4de50d142edca9d6a9b7e6111d8 upstream.\n\nVMX instructions executed inside a L1 VM will always trigger a VM exit\neven when executed with cpl 3. This means we must perform the\nprivilege check in software.\n\nFixes: 70f3aac964ae(\"kvm: nVMX: Remove superfluous VMX instruction fault checks\")\nCc: stable@vger.kernel.org\nSigned-off-by: Felix Wilhelm <fwilhelm@google.com>\nSigned-off-by: Paolo Bonzini <pbonzini@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/b775e0be2c1006a540cdf4982dc588d641e09b2e"},{"sha":"2ec2e04aa191612945c611697d456c4a2f4c8147","author":{"name":"Paolo Bonzini","email":"69d3ebcf5ee4e7f05a50dc23cd96655b730804b4@redhat.com"},"message":"KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and kvm_write_guest_virt_system\n\ncommit ce14e868a54edeb2e30cb7a7b104a2fc4b9d76ca upstream.\n\nInt the next patch the emulator's .read_std and .write_std callbacks will\ngrow another argument, which is not needed in kvm_read_guest_virt and\nkvm_write_guest_virt_system's callers.  Since we have to make separate\nfunctions, let's give the currently existing names a nicer interface, too.\n\nFixes: 129a72a0d3c8 (\"KVM: x86: Introduce segmented_write_std\", 2017-01-12)\nCc: stable@vger.kernel.org\nSigned-off-by: Paolo Bonzini <pbonzini@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/2ec2e04aa191612945c611697d456c4a2f4c8147"},{"sha":"93957d0d9b17c27ba2b1687972e59c8c11aa34ae","author":{"name":"Laura Abbott","email":"b8f3952ea9a7ddc193d05c7cc03f120086c69f1e@redhat.com"},"message":"staging: android: ion: Switch to pr_warn_once in ion_buffer_destroy\n\ncommit 45ad559a29629cb1c64ee636563c69b71524f077 upstream.\n\nSyzbot reported yet another warning with Ion:\n\nWARNING: CPU: 0 PID: 1467 at drivers/staging/android/ion/ion.c:122\nion_buffer_destroy+0xd4/0x190 drivers/staging/android/ion/ion.c:122\nKernel panic - not syncing: panic_on_warn set ...\n\nThis is catching that a buffer was freed with an existing kernel mapping\nstill present. This can be easily be triggered from userspace by calling\nDMA_BUF_SYNC_START without calling DMA_BUF_SYNC_END. Switch to a single\npr_warn_once to indicate the error without being disruptive.\n\nReported-by: syzbot+cd8bcd40cb049efa2770@syzkaller.appspotmail.com\nReported-by: syzbot <syzkaller@googlegroups.com>\nSigned-off-by: Laura Abbott <labbott@redhat.com>\nCc: stable <stable@vger.kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/93957d0d9b17c27ba2b1687972e59c8c11aa34ae"},{"sha":"ffc1b74ebbce8321d33e8fca6222954399ab306b","author":{"name":"Greg Kroah-Hartman","email":"4645f7897fd33786a2ee1264d590b3c400559d85@linuxfoundation.org"},"message":"NFC: pn533: don't send USB data off of the stack\n\ncommit dbafc28955fa6779dc23d1607a0fee5e509a278b upstream.\n\nIt's amazing that this driver ever worked, but now that x86 doesn't\nallow USB data to be sent off of the stack, it really does not work at\nall.  Fix this up by properly allocating the data for the small\n\"commands\" that get sent to the device off of the stack.\n\nWe do this for one command by having a whole urb just for ack messages,\nas they can be submitted in interrupt context, so we can not use\nusb_bulk_msg().  But the poweron command can sleep (and does), so use\nusb_bulk_msg() for that transfer.\n\nReported-by: Carlos Manuel Santos <cmmpsantos@gmail.com>\nCc: Samuel Ortiz <sameo@linux.intel.com>\nCc: Stephen Hemminger <stephen@networkplumber.org>\nCc: stable <stable@vger.kernel.org>\nReviewed-by: Johan Hovold <johan@kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/ffc1b74ebbce8321d33e8fca6222954399ab306b"},{"sha":"d5217875c201ae73f996614ded48b7a21dc6e018","author":{"name":"Gustavo A. R. Silva","email":"beac5f8171fcde5e2ec734cc5d25d03e7362e8de@embeddedor.com"},"message":"usbip: vhci_sysfs: fix potential Spectre v1\n\ncommit a0d6ec88090d7b1b008429c44532a388e29bb1bd upstream.\n\npdev_nr and rhport can be controlled by user-space, hence leading to\na potential exploitation of the Spectre variant 1 vulnerability.\n\nThis issue was detected with the help of Smatch:\ndrivers/usb/usbip/vhci_sysfs.c:238 detach_store() warn: potential spectre issue 'vhcis'\ndrivers/usb/usbip/vhci_sysfs.c:328 attach_store() warn: potential spectre issue 'vhcis'\ndrivers/usb/usbip/vhci_sysfs.c:338 attach_store() warn: potential spectre issue 'vhci->vhci_hcd_ss->vdev'\ndrivers/usb/usbip/vhci_sysfs.c:340 attach_store() warn: potential spectre issue 'vhci->vhci_hcd_hs->vdev'\n\nFix this by sanitizing pdev_nr and rhport before using them to index\nvhcis and vhci->vhci_hcd_ss->vdev respectively.\n\nNotice that given that speculation windows are large, the policy is\nto kill the speculation on the first load and not worry if it can be\ncompleted with a dependent load/store [1].\n\n[1] https://marc.info/?l=linux-kernel&m=152449131114778&w=2\n\nCc: stable@vger.kernel.org\nSigned-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com>\nAcked-by: Shuah Khan (Samsung OSG) <shuah@kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/d5217875c201ae73f996614ded48b7a21dc6e018"},{"sha":"07d5657f605fe53894186e81a7127c143b3ab6c4","author":{"name":"Alexander Kappner","email":"620085386a2c64ec2f1d43bef997c15003f13da2@godking.net"},"message":"usb-storage: Add support for FL_ALWAYS_SYNC flag in the UAS driver\n\ncommit 8c4e97ddfe73a0958bb0abf7e6a3bc4cc3e04936 upstream.\n\nThe ALWAYS_SYNC flag is currently honored by the usb-storage driver but not UAS\nand is required to work around devices that become unstable upon being\nqueried for cache. This code is taken straight from:\ndrivers/usb/storage/scsiglue.c:284\n\nSigned-off-by: Alexander Kappner <agk@godking.net>\nAcked-by: Alan Stern <stern@rowland.harvard.edu>\nCc: stable <stable@vger.kernel.org>\nAcked-by: Oliver Neukum <oneukum@suse.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/07d5657f605fe53894186e81a7127c143b3ab6c4"},{"sha":"c19954a23ccfd0d07f0a2014ef1a4a20579d2039","author":{"name":"Alexander Kappner","email":"620085386a2c64ec2f1d43bef997c15003f13da2@godking.net"},"message":"usb-storage: Add compatibility quirk flags for G-Technologies G-Drive\n\ncommit ca7d9515d0e6825351ce106066cea1f60e40b1c8 upstream.\n\nThe \"G-Drive\" (sold by G-Technology) external USB 3.0 drive\n hangs on write access under UAS and usb-storage:\n\n[  136.079121] sd 15:0:0:0: [sdi] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE\n[  136.079144] sd 15:0:0:0: [sdi] tag#0 Sense Key : Illegal Request [current]\n[  136.079152] sd 15:0:0:0: [sdi] tag#0 Add. Sense: Invalid field in cdb\n[  136.079176] sd 15:0:0:0: [sdi] tag#0 CDB: Write(16) 8a 08 00 00 00 00 00 00 00 00 00 00 00 08 00 00\n[  136.079180] print_req_error: critical target error, dev sdi, sector 0\n[  136.079183] Buffer I/O error on dev sdi, logical block 0, lost sync page write\n[  136.173148] EXT4-fs (sdi): mounted filesystem with ordered data mode. Opts: (null)\n[  140.583998] sd 15:0:0:0: [sdi] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE\n[  140.584010] sd 15:0:0:0: [sdi] tag#0 Sense Key : Illegal Request [current]\n[  140.584016] sd 15:0:0:0: [sdi] tag#0 Add. Sense: Invalid field in cdb\n[  140.584022] sd 15:0:0:0: [sdi] tag#0 CDB: Write(16) 8a 08 00 00 00 00 e8 c4 00 18 00 00 00 08 00 00\n[  140.584025] print_req_error: critical target error, dev sdi, sector 3905159192\n[  140.584044] print_req_error: critical target error, dev sdi, sector 3905159192\n[  140.584052] Aborting journal on device sdi-8.\n\nThe proposed patch adds compatibility quirks. Because the drive requires two\nquirks (one to work with UAS, and another to work with usb-storage), adding this\nunder unusual_devs.h and not just unusual_uas.h so kernels compiled without UAS\nreceive the quirk. With the patch, the drive works reliably on UAS and usb-\nstorage.\n(tested on NEC Corporation uPD720200 USB 3.0 host controller).\n\nSigned-off-by: Alexander Kappner <agk@godking.net>\nAcked-by: Alan Stern <stern@rowland.harvard.edu>\nCc: stable <stable@vger.kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/c19954a23ccfd0d07f0a2014ef1a4a20579d2039"},{"sha":"67977d9b35c30aefc743ee39667f02ee387ace25","author":{"name":"Ethan Lee","email":"4cf3106865d6d80e9321d2098fbc2cb22d71251a@gmail.com"},"message":"Input: xpad - add GPD Win 2 Controller USB IDs\n\ncommit c1ba08390a8bb13c927e699330896adc15b78205 upstream.\n\nGPD Win 2 Website: http://www.gpd.hk/gpdwin2.asp\n\nTested on a unit from the first production run sent to Indiegogo backers\n\nSigned-off-by: Ethan Lee <flibitijibibo@gmail.com>\nCc: stable@vger.kernel.org\nSigned-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/67977d9b35c30aefc743ee39667f02ee387ace25"},{"sha":"dc7d1c24c27bc429bdbbafe2706be172d8a686d4","author":{"name":"Manu Gautam","email":"51907cac86db5f2ed57a4ac58c042ecc27c0b352@codeaurora.org"},"message":"phy: qcom-qusb2: Fix crash if nvmem cell not specified\n\ncommit 0b4555e776ba0712c6fafb98b226b21fd05d2427 upstream.\n\nDriver currently crashes due to NULL pointer deference\nwhile updating PHY tune register if nvmem cell is NULL.\nSince, fused value for Tune1/2 register is optional,\nwe'd rather bail out.\n\nFixes: ca04d9d3e1b1 (\"phy: qcom-qusb2: New driver for QUSB2 PHY on Qcom chips\")\nReviewed-by: Vivek Gautam <vivek.gautam@codeaurora.org>\nReviewed-by: Evan Green <evgreen@chromium.org>\nCc: stable <stable@vger.kernel.org> # 4.14+\nSigned-off-by: Manu Gautam <mgautam@codeaurora.org>\nSigned-off-by: Kishon Vijay Abraham I <kishon@ti.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/dc7d1c24c27bc429bdbbafe2706be172d8a686d4"},{"sha":"e17f6e2cdcf16a07167f0d3d8843a0b5f1d0ecc2","author":{"name":"Ruslan Bilovol","email":"e046e784ab9944f3cd72b9da5ba569a2098c4a44@gmail.com"},"message":"usb: core: message: remove extra endianness conversion in usb_set_isoch_delay\n\ncommit 48b73d0fa11aa8613d51f7be61d2fa7f0ab05fd3 upstream.\n\nNo need to do extra endianness conversion in\nusb_set_isoch_delay because it is already done\nin usb_control_msg()\n\nFixes: 886ee36e7205 (\"usb: core: add support for USB_REQ_SET_ISOCH_DELAY\")\nCc: Dmytro Panchenko <dmytro.panchenko@globallogic.com>\nCc: Felipe Balbi <felipe.balbi@linux.intel.com>\nCc: stable <stable@vger.kernel.org> # v4.16+\nSigned-off-by: Ruslan Bilovol <ruslan.bilovol@gmail.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/e17f6e2cdcf16a07167f0d3d8843a0b5f1d0ecc2"},{"sha":"fea74c710b821dd8a5f2e3226cc1a0a0f96863b0","author":{"name":"Heikki Krogerus","email":"0364a60538b3766c953bdea7e7e4859afd98436c@linux.intel.com"},"message":"usb: typec: wcove: Remove dependency on HW FSM\n\ncommit 05826ff135ee083d28c006fbde6e810f17437166 upstream.\n\nThe USB Type-C PHY in Intel WhiskeyCove PMIC has build-in\nUSB Type-C state machine which we were relying on to\nconfigure the CC lines correctly. This patch removes that\ndependency and configures the CC line according to commands\nfrom the port manager (tcpm.c) in wcove_set_cc().\n\nThis fixes an issue where USB devices attached to the USB\nType-C port do not get enumerated. When acting as\nsource/host, the HW FSM sometimes fails to configure the PHY\ncorrectly.\n\nFixes: 3c4fb9f16921 (\"usb: typec: wcove: start using tcpm for USB PD support\")\nCc: stable@vger.kernel.org\nSigned-off-by: Heikki Krogerus <heikki.krogerus@linux.intel.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/fea74c710b821dd8a5f2e3226cc1a0a0f96863b0"},{"sha":"8a760bda09b77b5f3b1b59f47e519e616a381c7a","author":{"name":"Yoshihiro Shimoda","email":"de6fb888308c49c20838826baf4e7cc406af80ff@renesas.com"},"message":"usb: gadget: function: printer: avoid wrong list handling in printer_write()\n\ncommit 4a014a7339f441b0851ce012f469c0fadac61c81 upstream.\n\nWhen printer_write() calls usb_ep_queue(), a udc driver (e.g.\nrenesas_usbhs driver) may call usb_gadget_giveback_request() in\nthe udc .queue ops immediately. Then, printer_write() calls\nlist_add(&req->list, &dev->tx_reqs_active) wrongly. After that,\nif we do unbind the printer driver, WARN_ON() happens in\nprinter_func_unbind() because the list entry is not removed.\n\nSo, this patch moves list_add(&req->list, &dev->tx_reqs_active)\ncalling before usb_ep_queue().\n\nSigned-off-by: Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>\nAcked-by: Felipe Balbi <felipe.balbi@linux.intel.com>\nCc: stable <stable@vger.kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/8a760bda09b77b5f3b1b59f47e519e616a381c7a"},{"sha":"c34dfee464b5243bc0f10e0b51a50874429ee5c2","author":{"name":"Yoshihiro Shimoda","email":"de6fb888308c49c20838826baf4e7cc406af80ff@renesas.com"},"message":"usb: gadget: udc: renesas_usb3: fix double phy_put()\n\ncommit 8223b2f89ca63e203dcb54148e30d94979f17b0b upstream.\n\nThis patch fixes an issue that this driver cause double phy_put()\ncalling. This driver must not call phy_put() in the remove because\nthe driver calls devm_phy_get() in the probe.\n\nFixes: 279d4bc64060 (\"usb: gadget: udc: renesas_usb3: add support for generic phy\")\nCc: <stable@vger.kernel.org> # v4.15+\nReviewed-by: Simon Horman <horms+renesas@verge.net.au>\nSigned-off-by: Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>\nSigned-off-by: Felipe Balbi <felipe.balbi@linux.intel.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/c34dfee464b5243bc0f10e0b51a50874429ee5c2"},{"sha":"19d6939bc0d6b92ea035b892fb69dd3d0240f5d6","author":{"name":"Yoshihiro Shimoda","email":"de6fb888308c49c20838826baf4e7cc406af80ff@renesas.com"},"message":"usb: gadget: udc: renesas_usb3: should remove debugfs\n\ncommit 1990cf7c21ea185cec98c6d45a82c04481261e35 upstream.\n\nThis patch fixes an issue that this driver doesn't remove its debugfs.\n\nFixes: 43ba968b00ea (\"usb: gadget: udc: renesas_usb3: add debugfs to set the b-device mode\")\nCc: <stable@vger.kernel.org> # v4.14+\nSigned-off-by: Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>\nReviewed-by: Simon Horman <horms+renesas@verge.net.au>\nSigned-off-by: Felipe Balbi <felipe.balbi@linux.intel.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/raspberrypi/linux/commits/19d6939bc0d6b92ea035b892fb69dd3d0240f5d6"}]}
{"actor":{"display_login":"popcornmix"}}