{"push_id":3041569030,"size":32,"distinct_size":32,"ref":"refs/heads/rpi-4.14.y","head":"9d6fdaf722cbb5355f226efcadb30b1bfb7cb0cc","before":"d875f7092a3e6b9d73dd51da080fdb83b06a96b9","commits":[{"sha":"f63387b9ae1ddf1e121b220ebe917aeed7941054","author":{"name":"Alan Chiang","email":"15e3492549bff50b6c348f0a6e2c555ac79fffe4@intel.com"},"message":"eeprom: at24: Add support for address-width property\n\n[ Upstream commit a2b3bf4846e5eed62ea6abb096af2c950961033c ]\n\nProvide a flexible way to determine the addressing bits of eeprom.\nPass the addressing bits to driver through address-width property.\n\nSigned-off-by: Alan Chiang <alanx.chiang@intel.com>\nSigned-off-by: Andy Yeh <andy.yeh@intel.com>\nSigned-off-by: Bartosz Golaszewski <brgl@bgdev.pl>\nSigned-off-by: Sasha Levin <sashal@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/f63387b9ae1ddf1e121b220ebe917aeed7941054"},{"sha":"8a6cee344cc0236d6171bc24506cb593d84b8214","author":{"name":"Amir Goldstein","email":"39b28f342388deb5b19584637eaeed658ed0d1e3@gmail.com"},"message":"vfs: swap names of {do,vfs}_clone_file_range()\n\ncommit a725356b6659469d182d662f22d770d83d3bc7b5 upstream.\n\nCommit 031a072a0b8a (\"vfs: call vfs_clone_file_range() under freeze\nprotection\") created a wrapper do_clone_file_range() around\nvfs_clone_file_range() moving the freeze protection to former, so\noverlayfs could call the latter.\n\nThe more common vfs practice is to call do_xxx helpers from vfs_xxx\nhelpers, where freeze protecction is taken in the vfs_xxx helper, so\nthis anomality could be a source of confusion.\n\nIt seems that commit 8ede205541ff (\"ovl: add reflink/copyfile/dedup\nsupport\") may have fallen a victim to this confusion -\novl_clone_file_range() calls the vfs_clone_file_range() helper in the\nhope of getting freeze protection on upper fs, but in fact results in\noverlayfs allowing to bypass upper fs freeze protection.\n\nSwap the names of the two helpers to conform to common vfs practice\nand call the correct helpers from overlayfs and nfsd.\n\nSigned-off-by: Amir Goldstein <amir73il@gmail.com>\nSigned-off-by: Miklos Szeredi <mszeredi@redhat.com>\nFixes: 031a072a0b8a (\"vfs: call vfs_clone_file_range() under freeze...\")\nSigned-off-by: Amir Goldstein <amir73il@gmail.com>\nSigned-off-by: Sasha Levin <sashal@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/8a6cee344cc0236d6171bc24506cb593d84b8214"},{"sha":"86534d3d824351868fb0992e13777933edb91e6f","author":{"name":"Kristian Evensen","email":"ed4b9e36d7b45c95d901f5fd73a0ec1ecb6083b0@gmail.com"},"message":"USB: serial: option: improve Quectel EP06 detection\n\ncommit 36cae568404a298a19a6e8a3f18641075d4cab04 upstream\n\nThe Quectel EP06 (and EM06/EG06) LTE modem supports updating the USB\nconfiguration, without the VID/PID or configuration number changing.\nWhen the configuration is updated and interfaces are added/removed, the\ninterface numbers are updated. This causes our current code for matching\nEP06 not to work as intended, as the assumption about reserved\ninterfaces no longer holds. If for example the diagnostic (first)\ninterface is removed, option will (try to) bind to the QMI interface.\n\nThis patch improves EP06 detection by replacing the current match with\ntwo matches, and those matches check class, subclass and protocol as\nwell as VID and PID. The diag interface exports class, subclass and\nprotocol as 0xff. For the other serial interfaces, class is 0xff and\nsubclass and protocol are both 0x0.\n\nThe modem can export the following devices and always in this order:\ndiag, nmea, at, ppp. qmi and adb. This means that diag can only ever be\ninterface 0, and interface numbers 1-5 should be marked as reserved. The\nthree other serial devices can have interface numbers 0-3, but I have\nnot marked any interfaces as reserved. The reason is that the serial\ndevices are the only interfaces exported by the device where subclass\nand protocol is 0x0.\n\nQMI exports the same class, subclass and protocol values as the diag\ninterface. However, the two interfaces have different number of\nendpoints, QMI has three and diag two. I have added a check for number\nof interfaces if VID/PID matches the EP06, and we ignore the device if\nnumber of interfaces equals three (and subclass is set).\n\nThe upstream commit does not apply cleanly to the 4.14-tree because of\ndifferences in option_probe(). In order to make the commit apply, a\nslight reshuffeling of the code was needed.\n\nSigned-off-by: Kristian Evensen <kristian.evensen@gmail.com>\nAcked-by: Dan Williams <dcbw@redhat.com>\n[ johan: drop uneeded RSVD(5) for ADB ]\nCc: stable <stable@vger.kernel.org>\nSigned-off-by: Johan Hovold <johan@kernel.org>\nSigned-off-by: Kristian Evensen <kristian.evensen@gmail.com>\nSigned-off-by: Sasha Levin <sashal@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/86534d3d824351868fb0992e13777933edb91e6f"},{"sha":"cc2526f1f5544a440c88f48c4681707ca76e3df1","author":{"name":"Johan Hovold","email":"759412786bc533369b22377bf83fb9056c5b25b2@kernel.org"},"message":"USB: serial: option: add two-endpoints device-id flag\n\ncommit 35aecc02b5b621782111f64cbb032c7f6a90bb32 upstream\n\nAllow matching on interfaces having two endpoints by adding a new\ndevice-id flag.\n\nThis allows for the handling of devices whose interface numbers can\nchange (e.g. Quectel EP06) to be contained in the device-id table.\n\nThe upstream commit removes a variable that is still in use in the 4.14\nversion of the option-driver, so the removal is undone.\n\nTested-by: Kristian Evensen <kristian.evensen@gmail.com>\nCc: stable <stable@vger.kernel.org>\nSigned-off-by: Johan Hovold <johan@kernel.org>\nSigned-off-by: Kristian Evensen <kristian.evensen@gmail.com>\nSigned-off-by: Sasha Levin <sashal@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/cc2526f1f5544a440c88f48c4681707ca76e3df1"},{"sha":"eb9b195c53db75c694bf78576925fcb3eed9d0e1","author":{"name":"Daniel Borkmann","email":"3d0f3b9ddcacec30c4008c5e030e6c13a478cb4f@iogearbox.net"},"message":"bpf: fix partial copy of map_ptr when dst is scalar\n\ncommit 0962590e553331db2cc0aef2dc35c57f6300dbbe upstream.\n\nALU operations on pointers such as scalar_reg += map_value_ptr are\nhandled in adjust_ptr_min_max_vals(). Problem is however that map_ptr\nand range in the register state share a union, so transferring state\nthrough dst_reg->range = ptr_reg->range is just buggy as any new\nmap_ptr in the dst_reg is then truncated (or null) for subsequent\nchecks. Fix this by adding a raw member and use it for copying state\nover to dst_reg.\n\nFixes: f1174f77b50c (\"bpf/verifier: rework value tracking\")\nSigned-off-by: Daniel Borkmann <daniel@iogearbox.net>\nCc: Edward Cree <ecree@solarflare.com>\nAcked-by: Alexei Starovoitov <ast@kernel.org>\nSigned-off-by: Alexei Starovoitov <ast@kernel.org>\nAcked-by: Edward Cree <ecree@solarflare.com>\nSigned-off-by: Sasha Levin <sashal@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/eb9b195c53db75c694bf78576925fcb3eed9d0e1"},{"sha":"0502f1366921284a8f418db753d9fd7af4cd5ba8","author":{"name":"Sasha Levin","email":"ea64c107742a9398dbac3034fbc8d4b5fefb6d69@kernel.org"},"message":"Revert \"ARM: tegra: Fix ULPI regression on Tegra20\"\n\nThis reverts commit b39ac54215190bc178ae7de799e74d327a3c1a33.\n\nThe issue was fixed by upstream commit 5d797111afe1 (\"clk:\ntegra: Add quirk for getting CDEV1/2 clocks on Tegra20\").\n\nSigned-off-by: Sasha Levin <sashal@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/0502f1366921284a8f418db753d9fd7af4cd5ba8"},{"sha":"6eb5633da44ef52e37c27e25400d427b9774ae6e","author":{"name":"Amir Goldstein","email":"39b28f342388deb5b19584637eaeed658ed0d1e3@gmail.com"},"message":"fsnotify: fix ignore mask logic in fsnotify()\n\n[ Upstream commit 9bdda4e9cf2dcecb60a0683b10ffb8cd7e5f2f45 ]\n\nCommit 92183a42898d (\"fsnotify: fix ignore mask logic in\nsend_to_group()\") acknoledges the use case of ignoring an event on\nan inode mark, because of an ignore mask on a mount mark of the same\ngroup (i.e. I want to get all events on this file, except for the events\nthat came from that mount).\n\nThis change depends on correctly merging the inode marks and mount marks\ngroup lists, so that the mount mark ignore mask would be tested in\nsend_to_group(). Alas, the merging of the lists did not take into\naccount the case where event in question is not in the mask of any of\nthe mount marks.\n\nTo fix this, completely remove the tests for inode and mount event masks\nfrom the lists merging code.\n\nFixes: 92183a42898d (\"fsnotify: fix ignore mask logic in send_to_group\")\nSigned-off-by: Amir Goldstein <amir73il@gmail.com>\nSigned-off-by: Jan Kara <jack@suse.cz>\n[amir: backport to v4.14.y]\nSigned-off-by: Amir Goldstein <amir73il@gmail.com>\nSigned-off-by: Sasha Levin <sashal@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/6eb5633da44ef52e37c27e25400d427b9774ae6e"},{"sha":"43607eb9f70823072e1bfc27f84ed81551ac2adb","author":{"name":"Linus Walleij","email":"9cd9d802d23c0ed5e224beabf4ae4a5c478746ef@linaro.org"},"message":"gpio: mxs: Get rid of external API call\n\n[ Upstream commit 833eacc7b5913da9896bacd30db7d490aa777868 ]\n\nThe MXS driver was calling back into the GPIO API from\nits irqchip. This is not very elegant, as we are a driver,\nlet's just shortcut back into the gpio_chip .get() function\ninstead.\n\nThis is a tricky case since the .get() callback is not in\nthis file, instead assigned by bgpio_init(). Calling the\nfunction direcly in the gpio_chip is however the lesser\nevil.\n\nCc: Sascha Hauer <s.hauer@pengutronix.de>\nCc: Janusz Uzycki <j.uzycki@elproma.com.pl>\nSigned-off-by: Linus Walleij <linus.walleij@linaro.org>\nSigned-off-by: Sasha Levin <sashal@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/43607eb9f70823072e1bfc27f84ed81551ac2adb"},{"sha":"33e52eb2d00582fad17177918b83a8df19958989","author":{"name":"Brian Foster","email":"335646b5e374a776a6a2caca10969d6e3ec1cd2b@redhat.com"},"message":"xfs: truncate transaction does not modify the inobt\n\n[ Upstream commit a606ebdb859e78beb757dfefa08001df366e2ef5 ]\n\nThe truncate transaction does not ever modify the inode btree, but\nincludes an associated log reservation. Update\nxfs_calc_itruncate_reservation() to remove the reservation\nassociated with inobt updates.\n\n[Amir:\tThis commit was merged for kernel v4.16 and a twin commit was\n\tmerged for xfsprogs v4.16. As a result, a small xfs filesystem\n\tformatted with features -m rmapbt=1,reflink=1 using mkfs.xfs\n\tversion >= v4.16 cannot be mounted with kernel < v4.16.\n\n\tFor example, xfstests generic/17{1,2,3} format a small fs and\n\twhen trying to mount it, they fail with an assert on this very\n\tdemonic line:\n\n XFS (vdc): Log size 3075 blocks too small, minimum size is 3717 blocks\n XFS (vdc): AAIEEE! Log failed size checks. Abort!\n XFS: Assertion failed: 0, file: src/linux/fs/xfs/xfs_log.c, line: 666\n\n\tThe simple solution for stable kernels is to apply this patch,\n\tbecause mkfs.xfs v4.16 is already in the wild, so we have to\n\tassume that xfs filesystems with a \"too small\" log exist.\n\tRegardless, xfsprogs maintainers should also consider reverting\n\tthe twin patch to stop creating those filesystems for the sake\n\tof users with unpatched kernels.]\n\nSigned-off-by: Brian Foster <bfoster@redhat.com>\nReviewed-by: Dave Chinner <dchinner@redhat.com>\nReviewed-by: Darrick J. Wong <darrick.wong@oracle.com>\nSigned-off-by: Darrick J. Wong <darrick.wong@oracle.com>\nCc: <stable@vger.kernel.org> # v4.9+\nSigned-off-by: Amir Goldstein <amir73il@gmail.com>\nReviewed-by: Darrick J . Wong <darrick.wong@oracle.com>\nSigned-off-by: Sasha Levin <sashal@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/33e52eb2d00582fad17177918b83a8df19958989"},{"sha":"ddb595dfe47278fd8ff3fd171b3729ec45d51b74","author":{"name":"Al Viro","email":"de609eb4d5d70b1d38ec6642adbfc33a2781f63c@zeniv.linux.org.uk"},"message":"cachefiles: fix the race between cachefiles_bury_object() and rmdir(2)\n\ncommit 169b803397499be85bdd1e3d07d6f5e3d4bd669e upstream.\n\nthe victim might've been rmdir'ed just before the lock_rename();\nunlike the normal callers, we do not look the source up after the\nparents are locked - we know it beforehand and just recheck that it's\nstill the child of what used to be its parent.  Unfortunately,\nthe check is too weak - we don't spot a dead directory since its\n->d_parent is unchanged, dentry is positive, etc.  So we sail all\nthe way to ->rename(), with hosting filesystems _not_ expecting\nto be asked renaming an rmdir'ed subdirectory.\n\nThe fix is easy, fortunately - the lock on parent is sufficient for\nmaking IS_DEADDIR() on child safe.\n\nCc: stable@vger.kernel.org\nFixes: 9ae326a69004 (CacheFiles: A cache that backs onto a mounted filesystem)\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>\nSigned-off-by: David Howells <dhowells@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/ddb595dfe47278fd8ff3fd171b3729ec45d51b74"},{"sha":"7a4b046b0ce973f641d1b6ba4c6947ed94d77a80","author":{"name":"Gustavo A. R. Silva","email":"beac5f8171fcde5e2ec734cc5d25d03e7362e8de@embeddedor.com"},"message":"ptp: fix Spectre v1 vulnerability\n\ncommit efa61c8cf2950ab5c0e66cff3cabe2a2b24e81ba upstream.\n\npin_index can be indirectly controlled by user-space, hence leading\nto a potential exploitation of the Spectre variant 1 vulnerability.\n\nThis issue was detected with the help of Smatch:\n\ndrivers/ptp/ptp_chardev.c:253 ptp_ioctl() warn: potential spectre issue\n'ops->pin_config' [r] (local cap)\n\nFix this by sanitizing pin_index before using it to index\nops->pin_config, and before passing it as an argument to\nfunction ptp_set_pinfunc(), in which it is used to index\ninfo->pin_config.\n\nNotice that given that speculation windows are large, the policy is\nto kill the speculation on the first load and not worry if it can be\ncompleted with a dependent load/store [1].\n\n[1] https://marc.info/?l=linux-kernel&m=152449131114778&w=2\n\nCc: stable@vger.kernel.org\nSigned-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com>\nAcked-by: Richard Cochran <richardcochran@gmail.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/7a4b046b0ce973f641d1b6ba4c6947ed94d77a80"},{"sha":"fd3127215babb993c7470dc556e547f5572ca371","author":{"name":"Kai-Heng Feng","email":"06af28c154da900e58fef391e9e9415561e1d8ae@canonical.com"},"message":"drm/edid: Add 6 bpc quirk for BOE panel in HP Pavilion 15-n233sl\n\ncommit 0711a43b6d84ff9189adfbf83c8bbf56eef794bf upstream.\n\nThere's another panel that reports \"DFP 1.x compliant TMDS\" but it\nsupports 6bpc instead of 8 bpc.\n\nApply 6 bpc quirk for the panel to fix it.\n\nBugLink: https://bugs.launchpad.net/bugs/1794387\nCc: <stable@vger.kernel.org> # v4.8+\nSigned-off-by: Kai-Heng Feng <kai.heng.feng@canonical.com>\nSigned-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>\nLink: https://patchwork.freedesktop.org/patch/msgid/20181002152911.4370-1-kai.heng.feng@canonical.com\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/fd3127215babb993c7470dc556e547f5572ca371"},{"sha":"20ff18553ed84b2bc57567e1ac51bf432719c289","author":{"name":"Clint Taylor","email":"1536f9fb9de75b7cb0f9734bd641e55743b5e313@intel.com"},"message":"drm/edid: VSDB yCBCr420 Deep Color mode bit definitions\n\ncommit 9068e02f58740778d8270840657f1e250a2cc60f upstream.\n\nHDMI Forum VSDB YCBCR420 deep color capability bits are 2:0. Correct\ndefinitions in the header for the mask to work correctly.\n\nFixes: e6a9a2c3dc43 (\"drm/edid: parse ycbcr 420 deep color information\")\nBugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=107893\nCc: <stable@vger.kernel.org> # v4.14+\nSigned-off-by: Clint Taylor <clinton.a.taylor@intel.com>\nReviewed-by: Jani Nikula <jani.nikula@intel.com>\nReviewed-by: Shashank Sharma <shashank.sharma@intel.com>\nSigned-off-by: Jani Nikula <jani.nikula@intel.com>\nLink: https://patchwork.freedesktop.org/patch/msgid/1538776335-12569-1-git-send-email-clinton.a.taylor@intel.com\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/20ff18553ed84b2bc57567e1ac51bf432719c289"},{"sha":"c219c2cd34cc1bbf7dc9ffe04c5d7d411349e7c0","author":{"name":"Eugeniy Paltsev","email":"ec089b543c2604b626d7ce60c03e4d074ed102c7@synopsys.com"},"message":"drm: fb-helper: Reject all pixel format changing requests\n\ncommit db05c481977599236f12a85e55de9f5ab37b0a2c upstream.\n\ndrm fbdev emulation doesn't support changing the pixel format at all,\nso reject all pixel format changing requests.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Eugeniy Paltsev <Eugeniy.Paltsev@synopsys.com>\nReviewed-by: Ville Syrjälä <ville.syrjala@linux.intel.com>\nSigned-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>\nLink: https://patchwork.freedesktop.org/patch/msgid/20181003164538.5534-1-Eugeniy.Paltsev@synopsys.com\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/c219c2cd34cc1bbf7dc9ffe04c5d7d411349e7c0"},{"sha":"66448066c2b1ec587e6168a9206ffedd11d94444","author":{"name":"Gustavo A. R. Silva","email":"beac5f8171fcde5e2ec734cc5d25d03e7362e8de@embeddedor.com"},"message":"RDMA/ucma: Fix Spectre v1 vulnerability\n\ncommit a3671a4f973ee9d9621d60166cc3b037c397d604 upstream.\n\nhdr.cmd can be indirectly controlled by user-space, hence leading to\na potential exploitation of the Spectre variant 1 vulnerability.\n\nThis issue was detected with the help of Smatch:\n\ndrivers/infiniband/core/ucma.c:1686 ucma_write() warn: potential\nspectre issue 'ucma_cmd_table' [r] (local cap)\n\nFix this by sanitizing hdr.cmd before using it to index\nucm_cmd_table.\n\nNotice that given that speculation windows are large, the policy is\nto kill the speculation on the first load and not worry if it can be\ncompleted with a dependent load/store [1].\n\n[1] https://marc.info/?l=linux-kernel&m=152449131114778&w=2\n\nCc: stable@vger.kernel.org\nSigned-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com>\nSigned-off-by: Doug Ledford <dledford@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/66448066c2b1ec587e6168a9206ffedd11d94444"},{"sha":"f0e3b74a4dc0ce27abccdfdcd41eae73cee4b9ac","author":{"name":"Gustavo A. R. Silva","email":"beac5f8171fcde5e2ec734cc5d25d03e7362e8de@embeddedor.com"},"message":"IB/ucm: Fix Spectre v1 vulnerability\n\ncommit 0295e39595e1146522f2722715dba7f7fba42217 upstream.\n\nhdr.cmd can be indirectly controlled by user-space, hence leading to\na potential exploitation of the Spectre variant 1 vulnerability.\n\nThis issue was detected with the help of Smatch:\n\ndrivers/infiniband/core/ucm.c:1127 ib_ucm_write() warn: potential\nspectre issue 'ucm_cmd_table' [r] (local cap)\n\nFix this by sanitizing hdr.cmd before using it to index\nucm_cmd_table.\n\nNotice that given that speculation windows are large, the policy is\nto kill the speculation on the first load and not worry if it can be\ncompleted with a dependent load/store [1].\n\n[1] https://marc.info/?l=linux-kernel&m=152449131114778&w=2\n\nCc: stable@vger.kernel.org\nSigned-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com>\nSigned-off-by: Doug Ledford <dledford@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/f0e3b74a4dc0ce27abccdfdcd41eae73cee4b9ac"},{"sha":"8686f337ca17db405ca770c490e725088be58414","author":{"name":"Tobias Herzog","email":"60a494aad99565aa0e296d9777fa8ffce1983ca3@gmx.de"},"message":"cdc-acm: do not reset notification buffer index upon urb unlinking\n\ncommit dae3ddba36f8c337fb59cef07d564da6fc9b7551 upstream.\n\nResetting the write index of the notification buffer on urb unlink (e.g.\nclosing a cdc-acm device from userspace) may lead to wrong interpretation\nof further received notifications, in case the index is not 0 when urb\nunlink happens (i.e. when parts of a notification already have been\ntransferred). On the device side there is no \"reset\" of the notification\ntransimission and thus we would get out of sync with the device.\n\nSigned-off-by: Tobias Herzog <t-herzog@gmx.de>\nAcked-by: Oliver Neukum <oneukum@suse.com>\nCc: stable <stable@vger.kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/8686f337ca17db405ca770c490e725088be58414"},{"sha":"32772ef3f5ed990404c7664782ad77c551d19693","author":{"name":"Tobias Herzog","email":"60a494aad99565aa0e296d9777fa8ffce1983ca3@gmx.de"},"message":"cdc-acm: correct counting of UART states in serial state notification\n\ncommit f976d0e5747ca65ccd0fb2a4118b193d70aa1836 upstream.\n\nThe usb standard (\"Universal Serial Bus Class Definitions for Communication\nDevices\") distiguishes between \"consistent signals\" (DSR, DCD), and\n\"irregular signals\" (break, ring, parity error, framing error, overrun).\nThe bits of \"irregular signals\" are set, if this error/event occurred on\nthe device side and are immeadeatly unset, if the serial state notification\nwas sent.\nLike other drivers of real serial ports do, just the occurence of those\nevents should be counted in serial_icounter_struct (but no 1->0\ntransitions).\n\nSigned-off-by: Tobias Herzog <t-herzog@gmx.de>\nAcked-by: Oliver Neukum <oneukum@suse.com>\nCc: stable <stable@vger.kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/32772ef3f5ed990404c7664782ad77c551d19693"},{"sha":"6f053e36bda96461245d0d01f374dac4f7cab54c","author":{"name":"Oliver Neukum","email":"bfee72d94d376f4e00f72b756466867d7f9eb24e@suse.com"},"message":"cdc-acm: fix race between reset and control messaging\n\ncommit 9397940ed812b942c520e0c25ed4b2c64d57e8b9 upstream.\n\nIf a device splits up a control message and a reset() happens\nbetween the parts, the message is lost and already recieved parts\nmust be dropped.\n\nSigned-off-by: Oliver Neukum <oneukum@suse.com>\nFixes: 1aba579f3cf51 (\"cdc-acm: handle read pipe errors\")\nCc: stable <stable@vger.kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/6f053e36bda96461245d0d01f374dac4f7cab54c"},{"sha":"89cd15c962405428bcd11c5f34127698f29bbd60","author":{"name":"Shuah Khan (Samsung OSG)","email":"90afa3c006319543993f3435e7531028bae47985@kernel.org"},"message":"usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()\n\ncommit 81f7567c51ad97668d1c3a48e8ecc482e64d4161 upstream.\n\nvhci_hub_control() accesses port_status array with out of bounds port\nvalue. Fix it to reference port_status[] only with a valid rhport value\nwhen invalid_rhport flag is true.\n\nThe invalid_rhport flag is set early on after detecting in port value\nis within the bounds or not.\n\nThe following is used reproduce the problem and verify the fix:\nC reproducer:   https://syzkaller.appspot.com/x/repro.c?x=14ed8ab6400000\n\nReported-by: syzbot+bccc1fe10b70fadc78d0@syzkaller.appspotmail.com\nCc: stable <stable@vger.kernel.org>\nSigned-off-by: Shuah Khan (Samsung OSG) <shuah@kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux-raspberrypi/commits/89cd15c962405428bcd11c5f34127698f29bbd60"}]}
{"actor":{"display_login":"kraj"}}