{"push_id":2427209459,"size":309,"distinct_size":95,"ref":"refs/heads/master","head":"f36b7534b83357cf52e747905de6d65b4f7c2512","before":"3215b9d57a2c75c4305a3956ca303d7004485200","commits":[{"sha":"19d7df69fdb2636856dc8919de72fc1bf8f79598","author":{"name":"Steffen Klassert","email":"e12a4e53ffae7bea4a26a8251851e5c5b883df46@secunet.com"},"message":"xfrm: Refuse to insert 32 bit userspace socket policies on 64 bit systems\n\nWe don't have a compat layer for xfrm, so userspace and kernel\nstructures have different sizes in this case. This results in\na broken configuration, so refuse to configure socket policies\nwhen trying to insert from 32 bit userspace as we do it already\nwith policies inserted via netlink.\n\nReported-and-tested-by: syzbot+e1a1577ca8bcb47b769a@syzkaller.appspotmail.com\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/19d7df69fdb2636856dc8919de72fc1bf8f79598"},{"sha":"2471c98165494173a3cd03231b216b909c063e41","author":{"name":"Steffen Klassert","email":"e12a4e53ffae7bea4a26a8251851e5c5b883df46@secunet.com"},"message":"xfrm: Fix policy hold queue after flowcache removal.\n\nNow that the flowcache is removed we need to generate\na new dummy bundle every time we check if the needed\nSAs are in place because the dummy bundle is not cached\nanymore. Fix it by passing the XFRM_LOOKUP_QUEUE flag\nto xfrm_lookup(). This makes sure that we get a dummy\nbundle in case the SAs are not yet in place.\n\nFixes: 3ca28286ea80 (\"xfrm_policy: bypass flow_cache_lookup\")\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/2471c98165494173a3cd03231b216b909c063e41"},{"sha":"d97ca5d714a5334aecadadf696875da40f1fbf3e","author":{"name":"Florian Westphal","email":"dbfaf6a80dfd937969ef4cfe4989863cfe354fce@strlen.de"},"message":"xfrm_user: uncoditionally validate esn replay attribute struct\n\nThe sanity test added in ecd7918745234 can be bypassed, validation\nonly occurs if XFRM_STATE_ESN flag is set, but rest of code doesn't care\nand just checks if the attribute itself is present.\n\nSo always validate.  Alternative is to reject if we have the attribute\nwithout the flag but that would change abi.\n\nReported-by: syzbot+0ab777c27d2bb7588f73@syzkaller.appspotmail.com\nCc: Mathias Krause <minipli@googlemail.com>\nFixes: ecd7918745234 (\"xfrm_user: ensure user supplied esn replay window is valid\")\nFixes: d8647b79c3b7e (\"xfrm: Add user interface for esn and big anti-replay windows\")\nSigned-off-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/d97ca5d714a5334aecadadf696875da40f1fbf3e"},{"sha":"510c321b557121861601f9d259aadd65aa274f35","author":{"name":"Xin Long","email":"0c651f6709819e543c4ca1708bc1021b57131127@gmail.com"},"message":"xfrm: reuse uncached_list to track xdsts\n\nIn early time, when freeing a xdst, it would be inserted into\ndst_garbage.list first. Then if it's refcnt was still held\nsomewhere, later it would be put into dst_busy_list in\ndst_gc_task().\n\nWhen one dev was being unregistered, the dev of these dsts in\ndst_busy_list would be set with loopback_dev and put this dev.\nSo that this dev's removal wouldn't get blocked, and avoid the\nkmsg warning:\n\n  kernel:unregister_netdevice: waiting for veth0 to become \\\n  free. Usage count = 2\n\nHowever after Commit 52df157f17e5 (\"xfrm: take refcnt of dst\nwhen creating struct xfrm_dst bundle\"), the xdst will not be\nfreed with dst gc, and this warning happens.\n\nTo fix it, we need to find these xdsts that are still held by\nothers when removing the dev, and free xdst's dev and set it\nwith loopback_dev.\n\nBut unfortunately after flow_cache for xfrm was deleted, no\nlist tracks them anymore. So we need to save these xdsts\nsomewhere to release the xdst's dev later.\n\nTo make this easier, this patch is to reuse uncached_list to\ntrack xdsts, so that the dev refcnt can be released in the\nevent NETDEV_UNREGISTER process of fib_netdev_notifier.\n\nThanks to Florian, we could move forward this fix quickly.\n\nFixes: 52df157f17e5 (\"xfrm: take refcnt of dst when creating struct xfrm_dst bundle\")\nReported-by: Jianlin Shi <jishi@redhat.com>\nReported-by: Hangbin Liu <liuhangbin@gmail.com>\nTested-by: Eyal Birger <eyal.birger@gmail.com>\nSigned-off-by: Xin Long <lucien.xin@gmail.com>\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/510c321b557121861601f9d259aadd65aa274f35"},{"sha":"5ab2ba931255d8bf03009c06d58dce97de32797c","author":{"name":"Sara Sharon","email":"d7bcdcc61ca09ba7238cfeec441ba5a9340087e8@intel.com"},"message":"iwlwifi: mvm: fix security bug in PN checking\n\nA previous patch allowed the same PN for packets originating from the\nsame AMSDU by copying PN only for the last packet in the series.\n\nThis however is bogus since we cannot assume the last frame will be\nreceived on the same queue, and if it is received on a different ueue\nwe will end up not incrementing the PN and possibly let the next\npacket to have the same PN and pass through.\n\nChange the logic instead to driver explicitly indicate for the second\nsub frame and on to be allowed to have the same PN as the first\nsubframe. Indicate it to mac80211 as well for the fallback queue.\n\nFixes: f1ae02b186d9 (\"iwlwifi: mvm: allow same PN for de-aggregated AMSDU\")\nSigned-off-by: Sara Sharon <sara.sharon@intel.com>\nSigned-off-by: Luca Coelho <luciano.coelho@intel.com>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/5ab2ba931255d8bf03009c06d58dce97de32797c"},{"sha":"fc07bd8ce19bff9e7479c04077ddb5957d1a27be","author":{"name":"Sara Sharon","email":"d7bcdcc61ca09ba7238cfeec441ba5a9340087e8@intel.com"},"message":"iwlwifi: mvm: fix IBSS for devices that support station type API\n\nIn IBSS, the mac80211 sets the cab_queue to be invalid.\n\nHowever, the multicast station uses it, so we need to override it.\n\nA previous patch did it, but it was nested inside the if's and was\napplied only for legacy FWs that don't support the new station type\nAPI, instead of being applied for all paths.\n\nIn addition, add a missing NL80211_IFTYPE_ADHOC to the initialization\nof the queues in iwl_mvm_mac_ctxt_init()\n\nFixes: ee48b72211f8 (\"iwlwifi: mvm: support ibss in dqa mode\")\nSigned-off-by: Sara Sharon <sara.sharon@intel.com>\nSigned-off-by: Luca Coelho <luciano.coelho@intel.com>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/fc07bd8ce19bff9e7479c04077ddb5957d1a27be"},{"sha":"4437ba7ee7de7e71d11deb91c87a370e4ffd2601","author":{"name":"Emmanuel Grumbach","email":"8b9b3ed0afbc1fa5fc02c3dc29b7819d4e9d8433@intel.com"},"message":"iwlwifi: pcie: don't warn if we use all the transmit pointers\n\nOur Transmit Frame Descriptor (TFD) is a DMA descriptor that\nincludes several pointers to be able to transmit a packet\nwhich is not physically contiguous.\n\nDepending on the hardware being use, we can have 20 or 25\npointers in a single TFD. In both cases, it is more than\nenough and it is quite hard to hit this limit.\nIt has been reported that when using specific applications\n(Ktorrent), we can actually use all the pointers and then\na long standing bug showed up.\n\nWhen we free the TFD, we check its number of valid pointers\nand make sure it doesn't exceed the number of pointers the\nhardware support.\nThis check had an off by one bug: it is perfectly valid to\nfree the 20 pointers if the TFD has 20 pointers.\n\nFix that.\n\nhttps://bugzilla.kernel.org/show_bug.cgi?id=197981\n\nSigned-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>\nSigned-off-by: Luca Coelho <luciano.coelho@intel.com>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/4437ba7ee7de7e71d11deb91c87a370e4ffd2601"},{"sha":"4b7f7ee2a5f523cf002328c6c02cb3e28a0fb30b","author":{"name":"Shaul Triebitz","email":"6899d0e17af7d5e41365b18768f5ad5d8af029f5@intel.com"},"message":"iwlwifi: align timestamp cancel with timestamp start\n\nCanceling the periodic timestamp work should be\ndone in the opposite flow to where it was started.\nThis also prevents from sending the MARKER command\nduring the mac_stop flow - causing a false queue hang\n(FW is no longer there to send a response).\n\nFixes: 93b167c13a3a (\"iwlwifi: runtime: sync FW and host clocks for logs\")\nSigned-off-by: Shaul Triebitz <shaul.triebitz@intel.com>\nSigned-off-by: Luca Coelho <luciano.coelho@intel.com>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/4b7f7ee2a5f523cf002328c6c02cb3e28a0fb30b"},{"sha":"6b7a5aea71b342ec0593d23b08383e1f33da4c9a","author":{"name":"Naftali Goldstein","email":"dbb03e6612254bf3162d0b972a1177229838bd59@intel.com"},"message":"iwlwifi: mvm: always init rs with 20mhz bandwidth rates\n\nIn AP mode, when a new station associates, rs is initialized immediately\nupon association completion, before the phy context is updated with the\nassociation parameters, so the sta bandwidth might be wider than the phy\ncontext allows.\nTo avoid this issue, always initialize rs with 20mhz bandwidth rate, and\nafter authorization, when the phy context is already up-to-date, re-init\nrs with the correct bw.\n\nSigned-off-by: Naftali Goldstein <naftali.goldstein@intel.com>\nSigned-off-by: Luca Coelho <luciano.coelho@intel.com>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/6b7a5aea71b342ec0593d23b08383e1f33da4c9a"},{"sha":"143a4454daaf0e80a2b9f37159a0d6d2b61e64ed","author":{"name":"Xin Long","email":"0c651f6709819e543c4ca1708bc1021b57131127@gmail.com"},"message":"xfrm: do not call rcu_read_unlock when afinfo is NULL in xfrm_get_tos\n\nWhen xfrm_policy_get_afinfo returns NULL, it will not hold rcu\nread lock. In this case, rcu_read_unlock should not be called\nin xfrm_get_tos, just like other places where it's calling\nxfrm_policy_get_afinfo.\n\nFixes: f5e2bb4f5b22 (\"xfrm: policy: xfrm_get_tos cannot fail\")\nSigned-off-by: Xin Long <lucien.xin@gmail.com>\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/143a4454daaf0e80a2b9f37159a0d6d2b61e64ed"},{"sha":"013cb81e89f8a70deef086ca29a923faf5585ab0","author":{"name":"Steffen Klassert","email":"e12a4e53ffae7bea4a26a8251851e5c5b883df46@secunet.com"},"message":"xfrm: Fix infinite loop in xfrm_get_dst_nexthop with transport mode.\n\nOn transport mode we forget to fetch the child dst_entry\nbefore we continue the while loop, this leads to an infinite\nloop. Fix this by fetching the child dst_entry before we\ncontinue the while loop.\n\nFixes: 0f6c480f23f4 (\"xfrm: Move dst->path into struct xfrm_dst\")\nReported-by: syzbot+7d03c810e50aaedef98a@syzkaller.appspotmail.com\nTested-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/013cb81e89f8a70deef086ca29a923faf5585ab0"},{"sha":"8bbda283b1a70becedc40e1d127a3b379c696046","author":{"name":"Kalle Valo","email":"41b48f228022447bae8a0900c23f76a0b1ca799c@codeaurora.org"},"message":"Merge tag 'iwlwifi-for-kalle-2018-02-16-2' of git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-fixes\n\nFirst batch of iwlwifi fixes intended for 4.16:\n\n* A couple of bugzilla fixes\n  - Fix a bogus warning when freeing a TFD;\n  - Fix severe throughput problem with 9000 series;\n* Fix for a bug that caused queue hangs in certain situations;\n* Fix for an issue with IBSS;\n* Fix an issue with rate-scalingin AP-mode.","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/8bbda283b1a70becedc40e1d127a3b379c696046"},{"sha":"78dc897b7ee67205423dbbc6b56be49fb18d15b5","author":{"name":"Larry Finger","email":"15b8df22a685ea626b641ec4b41ea74b2ea632fd@lwfinger.net"},"message":"rtlwifi: rtl8723be: Fix loss of signal\n\nIn commit c713fb071edc (\"rtlwifi: rtl8821ae: Fix connection lost problem\ncorrectly\") a problem in rtl8821ae that caused loss of signal was fixed.\nThat same problem has now been reported for rtl8723be. Accordingly,\nthe ASPM L1 latency has been increased from 0 to 7 to fix the instability.\n\nSigned-off-by: Larry Finger <Larry.Finger@lwfinger.net>\nCc: Stable <stable@vger.kernel.org>\nTested-by: James Cameron <quozl@laptop.org>\nSigned-off-by: Kalle Valo <kvalo@codeaurora.org>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/78dc897b7ee67205423dbbc6b56be49fb18d15b5"},{"sha":"b8b549eec8187ac1b12075d69a2d84d89b5e811a","author":{"name":"Steffen Klassert","email":"e12a4e53ffae7bea4a26a8251851e5c5b883df46@secunet.com"},"message":"xfrm: Fix ESN sequence number handling for IPsec GSO packets.\n\nWhen IPsec offloading was introduced, we accidentally incremented\nthe sequence number counter on the xfrm_state by one packet\ntoo much in the ESN case. This leads to a sequence number gap of\none packet after each GSO packet. Fix this by setting the sequence\nnumber to the correct value.\n\nFixes: d7dbefc45cf5 (\"xfrm: Add xfrm_replay_overflow functions for offloading\")\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/b8b549eec8187ac1b12075d69a2d84d89b5e811a"},{"sha":"f0e8c61110c2c85903b136ba070daf643a8b6842","author":{"name":"Hans de Goede","email":"a4b43a7169288183ae7c1f5a0140023a97961f48@redhat.com"},"message":"Bluetooth: btusb: Remove Yoga 920 from the btusb_needs_reset_resume_table\n\nCommit 1fdb92697469 (\"Bluetooth: btusb: Use DMI matching for QCA\nreset_resume quirking\"), added the Lenovo Yoga 920 to the\nbtusb_needs_reset_resume_table.\n\nTesting has shown that this is a false positive and the problems where\ncaused by issues with the initial fix: commit fd865802c66b (\"Bluetooth:\nbtusb: fix QCA Rome suspend/resume\"), which has already been reverted.\n\nSo the QCA Rome BT in the Yoga 920 does not need a reset-resume quirk at\nall and this commit removes it from the btusb_needs_reset_resume_table.\n\nNote that after this commit the btusb_needs_reset_resume_table is now\nempty. It is kept around on purpose, since this whole series of commits\nstarted for a reason and there are actually broken platforms around,\nwhich need to be added to it.\n\nBugLink: https://bugzilla.redhat.com/show_bug.cgi?id=1514836\nFixes: 1fdb92697469 (\"Bluetooth: btusb: Use DMI matching for QCA ...\")\nCc: stable@vger.kernel.org\nCc: Brian Norris <briannorris@chromium.org>\nCc: Kai-Heng Feng <kai.heng.feng@canonical.com>\nTested-by: Kevin Fenzi <kevin@scrye.com>\nSuggested-by: Brian Norris <briannorris@chromium.org>\nSigned-off-by: Hans de Goede <hdegoede@redhat.com>\nReviewed-by: Brian Norris <briannorris@chromium.org>\nSigned-off-by: Marcel Holtmann <marcel@holtmann.org>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/f0e8c61110c2c85903b136ba070daf643a8b6842"},{"sha":"0c6e526646c04ce31d4aaa280ed2237dd1cd774c","author":{"name":"Kai-Heng Feng","email":"49d050d7a2ceecc3a608b6160348d55167459976@canonical.com"},"message":"Bluetooth: btusb: Add Dell OptiPlex 3060 to btusb_needs_reset_resume_table\n\nThe issue can be reproduced before commit fd865802c66b (\"Bluetooth:\nbtusb: fix QCA Rome suspend/resume\") gets introduced, so the reset\nresume quirk is still needed for this system.\n\nT:  Bus=01 Lev=01 Prnt=01 Port=13 Cnt=01 Dev#=  4 Spd=12  MxCh= 0\nD:  Ver= 2.01 Cls=e0(wlcon) Sub=01 Prot=01 MxPS=64 #Cfgs=  1\nP:  Vendor=0cf3 ProdID=e007 Rev=00.01\nC:  #Ifs= 2 Cfg#= 1 Atr=e0 MxPwr=100mA\nI:  If#= 0 Alt= 0 #EPs= 3 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb\nI:  If#= 1 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb\n\nCc: stable@vger.kernel.org\nCc: Brian Norris <briannorris@chromium.org>\nCc: Hans de Goede <hdegoede@redhat.com>\nSigned-off-by: Kai-Heng Feng <kai.heng.feng@canonical.com>\nSigned-off-by: Marcel Holtmann <marcel@holtmann.org>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/0c6e526646c04ce31d4aaa280ed2237dd1cd774c"},{"sha":"64e759f58f128730b97a3c3a26d283c075ad7c86","author":{"name":"Szymon Janc","email":"ba410c865b8c5d9b26e0c42f46695755b34caf22@codecoup.pl"},"message":"Bluetooth: Fix missing encryption refresh on Security Request\n\nIf Security Request is received on connection that is already encrypted\nwith sufficient security master should perform encryption key refresh\nprocedure instead of just ignoring Slave Security Request\n(Core Spec 5.0 Vol 3 Part H 2.4.6).\n\n> ACL Data RX: Handle 3585 flags 0x02 dlen 6\n      SMP: Security Request (0x0b) len 1\n        Authentication requirement: Bonding, No MITM, SC, No Keypresses (0x09)\n< HCI Command: LE Start Encryption (0x08|0x0019) plen 28\n        Handle: 3585\n        Random number: 0x0000000000000000\n        Encrypted diversifier: 0x0000\n        Long term key: 44264272a5c426a9e868f034cf0e69f3\n> HCI Event: Command Status (0x0f) plen 4\n      LE Start Encryption (0x08|0x0019) ncmd 1\n        Status: Success (0x00)\n> HCI Event: Encryption Key Refresh Complete (0x30) plen 3\n        Status: Success (0x00)\n        Handle: 3585\n\nSigned-off-by: Szymon Janc <szymon.janc@codecoup.pl>\nSigned-off-by: Marcel Holtmann <marcel@holtmann.org>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/64e759f58f128730b97a3c3a26d283c075ad7c86"},{"sha":"7f8ae00f63725e835b5ed8a97bc18bf1c950acb2","author":{"name":"Haim Dreyfuss","email":"b6e0d1cfb26522d5a9893c60ad0d5e0c598e4af3@intel.com"},"message":"iwlwifi: Cancel and set MARKER_CMD timer during suspend-resume\n\nWhile entering to D3 mode there is a gap between the time the\ndriver handles the D3_CONFIG_CMD response to the time the host is going\nto sleep.\nIn between there might be cases which MARKER_CMD can tailgate.\nAlso during resume flow the MARKER_CMD might get sent while D0I3_CMD\nis being handled in the FW.\nCancel MARKER_CMD timer and set it again properly during suspend\nresume flows to prevent this command from being sent accidentlly.\n\nSigned-off-by: Haim Dreyfuss <haim.dreyfuss@intel.com>\nSigned-off-by: Luca Coelho <luciano.coelho@intel.com>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/7f8ae00f63725e835b5ed8a97bc18bf1c950acb2"},{"sha":"de04d4fbf87b769ab18c480e4f020c53e74bbdd2","author":{"name":"Sara Sharon","email":"d7bcdcc61ca09ba7238cfeec441ba5a9340087e8@intel.com"},"message":"iwlwifi: mvm: fix TX of CCMP 256\n\nWe don't have enough room in the TX command for a CCMP 256\nkey, and need to use key from table.\n\nFixes: 3264bf032bd9 (\"[BUGFIX] iwlwifi: mvm: Fix CCMP IV setting\")\nSigned-off-by: Sara Sharon <sara.sharon@intel.com>\nSigned-off-by: Luca Coelho <luciano.coelho@intel.com>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/de04d4fbf87b769ab18c480e4f020c53e74bbdd2"},{"sha":"40d53f4a60c9eb10d4fa58066c23ba1af8a59e39","author":{"name":"Andrei Otcheretianski","email":"f64cea4c479387bd4e7aa9d255c0348332c3f665@intel.com"},"message":"iwlwifi: mvm: Fix channel switch for count 0 and 1\n\nIt was assumed that apply_time==0 implies immediate scheduling, which is\nwrong. Instead, the fw expects the START_IMMEDIATELY flag to be set.\nOtherwise, this resulted in 0x3063 assert.\nFix that.\nWhile at it rename the T2_V2_START_IMMEDIATELY to\nTE_V2_START_IMMEDIATELY.\n\nFixes: f5d8f50f271d (\"iwlwifi: mvm: Fix channel switch in case of count <= 1\")\nSigned-off-by: Andrei Otcheretianski <andrei.otcheretianski@intel.com>\nSigned-off-by: Luca Coelho <luciano.coelho@intel.com>","distinct":false,"url":"https://api.github.com/repos/jessfraz/linux/commits/40d53f4a60c9eb10d4fa58066c23ba1af8a59e39"}]}
{"actor":{"display_login":"jessfraz"}}