{"push_id":2917968636,"size":381,"distinct_size":381,"ref":"refs/heads/rpi-4.14.y","head":"373d17e61c015cf12bb32373e84c17b9bbeb38e6","before":"55136f51cd88c4fb30a29587ee84d4cdd4c821ff","commits":[{"sha":"fe827643a5b598651a497ec5cde82efb340401ab","author":{"name":"popcornmix","email":"0ccb355d7aa08f1a2a9103e16d9034fc018e984f@gmail.com"},"message":"Merge remote-tracking branch 'stable/linux-4.14.y' into rpi-4.14.y","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/fe827643a5b598651a497ec5cde82efb340401ab"},{"sha":"74f7a305a189d88c506fbc0e22a491d71852c7df","author":{"name":"popcornmix","email":"0ccb355d7aa08f1a2a9103e16d9034fc018e984f@gmail.com"},"message":"cxd2880: CXD2880_SPI_DRV should select DVB_CXD2880 with MEDIA_SUBDRV_AUTOSELECT","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/74f7a305a189d88c506fbc0e22a491d71852c7df"},{"sha":"d829e9d1950af96839dea13b0703ac0822d35f7b","author":{"name":"Nathan Chancellor","email":"f65d3f2dc139dcfe7b6f0b0a466af3bc5fed8fa7@gmail.com"},"message":"Merge remote-tracking branch 'upstream/rpi-4.14.y' into rpi-4.14.y\n\n* upstream/rpi-4.14.y:\n  cxd2880: CXD2880_SPI_DRV should select DVB_CXD2880 with MEDIA_SUBDRV_AUTOSELECT\n\nSigned-off-by: Nathan Chancellor <natechancellor@gmail.com>","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/d829e9d1950af96839dea13b0703ac0822d35f7b"},{"sha":"898a5560cb94270f355b6737c148d5db80304558","author":{"name":"Phil Elwell","email":"e888d2bd6f13f82caa51a37c03d034c76f661ba3@raspberrypi.org"},"message":"configs: Add SENSOR_GPIO_FAN=m\n\nSigned-off-by: Phil Elwell <phil@raspberrypi.org>","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/898a5560cb94270f355b6737c148d5db80304558"},{"sha":"9a95beb6527b0ab67b7e12e8533c1b651141ff96","author":{"name":"Phil Elwell","email":"e888d2bd6f13f82caa51a37c03d034c76f661ba3@raspberrypi.org"},"message":"BCM270X_DT: Add gpio-fan overlay\n\nSigned-off-by: Phil Elwell <phil@raspberrypi.org>","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/9a95beb6527b0ab67b7e12e8533c1b651141ff96"},{"sha":"f92b55d534dcf9e740352b9c6c98f01f38aaa5e8","author":{"name":"Hermes Zhang","email":"422893ea210b8a14ca8dfaea3af4b108ea1b3ef1@axis.com"},"message":"Bluetooth: hci_ldisc: Free rw_semaphore on close\n\ncommit e6a57d22f787e73635ce0d29eef0abb77928b3e9 upstream.\n\nThe percpu_rw_semaphore is not currently freed, and this leads to\na crash when the stale rcu callback is invoked.  DEBUG_OBJECTS\ndetects this.\n\n ODEBUG: free active (active state 1) object type: rcu_head hint: (null)\n ------------[ cut here ]------------\n WARNING: CPU: 1 PID: 2024 at debug_print_object+0xac/0xc8\n PC is at debug_print_object+0xac/0xc8\n LR is at debug_print_object+0xac/0xc8\n Call trace:\n [<ffffff80082e2c2c>] debug_print_object+0xac/0xc8\n [<ffffff80082e40b0>] debug_check_no_obj_freed+0x1e8/0x228\n [<ffffff8008191254>] kfree+0x1cc/0x250\n [<ffffff80083cc03c>] hci_uart_tty_close+0x54/0x108\n [<ffffff800832e118>] tty_ldisc_close.isra.1+0x40/0x58\n [<ffffff800832e14c>] tty_ldisc_kill+0x1c/0x40\n [<ffffff800832e3dc>] tty_ldisc_release+0x94/0x170\n [<ffffff8008325554>] tty_release_struct+0x1c/0x58\n [<ffffff8008326400>] tty_release+0x3b0/0x490\n [<ffffff80081a3fe8>] __fput+0x88/0x1d0\n [<ffffff80081a418c>] ____fput+0xc/0x18\n [<ffffff80080c0624>] task_work_run+0x9c/0xc0\n [<ffffff80080a9e24>] do_exit+0x24c/0x8a0\n [<ffffff80080aa4e0>] do_group_exit+0x38/0xa0\n [<ffffff80080aa558>] __wake_up_parent+0x0/0x28\n [<ffffff8008082c00>] el0_svc_naked+0x34/0x38\n ---[ end trace bfe08cbd89098cdf ]---\n\nSigned-off-by: Hermes Zhang <chenhuiz@axis.com>\nSigned-off-by: Marcel Holtmann <marcel@holtmann.org>","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/f92b55d534dcf9e740352b9c6c98f01f38aaa5e8"},{"sha":"71538ec053e0cdeddabbc84f30c6c53d6d6e4e9b","author":{"name":"Dave Stevenson","email":"16834d49b581735deecc472e2612dc9d2632c702@raspberrypi.org"},"message":"dtoverlays: Correct DT handling camera GPIOs\n\nThe firmware has support for updating overrides with the correct\nGPIO settings for the camera GPIOs, but the wrong device tree\nsetup ended up being merged.\nCorrect the DT configuration so that the firmware does set it\nup correctly.\n\nSigned-off-by: Dave Stevenson <dave.stevenson@raspberrypi.org>","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/71538ec053e0cdeddabbc84f30c6c53d6d6e4e9b"},{"sha":"675e29ff7124059cb3b8b56fd7ae0ea131196982","author":{"name":"Dave Stevenson","email":"16834d49b581735deecc472e2612dc9d2632c702@raspberrypi.org"},"message":"media: ov5647: Use gpiod_set_value_cansleep\n\nAll calls to the gpio library are in contexts that can sleep,\ntherefore there is no issue with having those GPIOs controlled\nby controllers which require sleeping (eg I2C GPIO expanders).\n\nSwitch to using gpiod_set_value_cansleep instead of gpiod_set_value\nto avoid triggering the warning in gpiolib should the GPIO\ncontroller need to sleep.\n\nSigned-off-by: Dave Stevenson <dave.stevenson@raspberrypi.org>","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/675e29ff7124059cb3b8b56fd7ae0ea131196982"},{"sha":"831223b294f8531616c2487d139a2f8d7b67d8c4","author":{"name":"Shubhrajyoti Datta","email":"4964604d87ad29709539f6f8f544ea6e18c5490e@xilinx.com"},"message":"i2c: xiic: Make the start and the byte count write atomic\n\ncommit ae7304c3ea28a3ba47a7a8312c76c654ef24967e upstream.\n\nDisable interrupts while configuring the transfer and enable them back.\n\nWe have below as the programming sequence\n1. start and slave address\n2. byte count and stop\n\nIn some customer platform there was a lot of interrupts between 1 and 2\nand after slave address (around 7 clock cyles) if 2 is not executed\nthen the transaction is nacked.\n\nTo fix this case make the 2 writes atomic.\n\nSigned-off-by: Shubhrajyoti Datta <shubhrajyoti.datta@xilinx.com>\nSigned-off-by: Michal Simek <michal.simek@xilinx.com>\n[wsa: added a newline for better readability]\nSigned-off-by: Wolfram Sang <wsa@the-dreams.de>\nCc: stable@kernel.org\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/831223b294f8531616c2487d139a2f8d7b67d8c4"},{"sha":"d98b67089c0e34578d31257c08633ea60b087c1e","author":{"name":"Felipe Balbi","email":"d79216928cfdb58376b0b00a1a44a75e52dbc84e@linux.intel.com"},"message":"i2c: i801: fix DNV's SMBCTRL register offset\n\ncommit 851a15114895c5bce163a6f2d57e0aa4658a1be4 upstream.\n\nDNV's iTCO is slightly different with SMBCTRL sitting at a different\noffset when compared to all other devices. Let's fix so that we can\nproperly use iTCO watchdog.\n\nFixes: 84d7f2ebd70d (\"i2c: i801: Add support for Intel DNV\")\nCc: <stable@vger.kernel.org> # v4.4+\nSigned-off-by: Felipe Balbi <felipe.balbi@linux.intel.com>\nReviewed-by: Jean Delvare <jdelvare@suse.de>\nSigned-off-by: Wolfram Sang <wsa@the-dreams.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/d98b67089c0e34578d31257c08633ea60b087c1e"},{"sha":"425739151e03c00487910a9d9cdfbd55cceb9975","author":{"name":"James Smart","email":"b345d0404e0a2e84a4d1df4aa0510cf6eec09f7d@gmail.com"},"message":"scsi: lpfc: Correct MDS diag and nvmet configuration\n\ncommit 53e13ee087a80e8d4fc95436318436e5c2c1f8c2 upstream.\n\nA recent change added some MDS processing in the lpfc_drain_txq routine\nthat relies on the fcp_wq being allocated. For nvmet operation the fcp_wq\nis not allocated because it can only be an nvme-target.  When the original\nMDS support was added LS_MDS_LOOPBACK was defined wrong, (0x16) it should\nhave been 0x10 (decimal value used for hex setting). This incorrect value\nallowed MDS_LOOPBACK to be set simultaneously with LS_NPIV_FAB_SUPPORTED,\ncausing the driver to crash when it accesses the non-existent fcp_wq.\n\nCorrect the bad value setting for LS_MDS_LOOPBACK.\n\nFixes: \tae9e28f36a6c  (\"lpfc: Add MDS Diagnostic support.\")\nCc: <stable@vger.kernel.org> # v4.12+\nSigned-off-by: Dick Kennedy <dick.kennedy@broadcom.com>\nSigned-off-by: James Smart <james.smart@broadcom.com>\nTested-by: Ewan D. Milne <emilne@redhat.com>\nSigned-off-by: Martin K. Petersen <martin.petersen@oracle.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/425739151e03c00487910a9d9cdfbd55cceb9975"},{"sha":"23ecbbad7bf921f83a5c99718ded203676ddd91c","author":{"name":"Jens Axboe","email":"cd8c6775e60d6f67a6984377324e5290df3d5358@kernel.dk"},"message":"nbd: don't allow invalid blocksize settings\n\ncommit bc811f05d77f47059c197a98b6ad242eb03999cb upstream.\n\nsyzbot reports a divide-by-zero off the NBD_SET_BLKSIZE ioctl.\nWe need proper validation of the input here. Not just if it's\nzero, but also if the value is a power-of-2 and in a valid\nrange. Add that.\n\nCc: stable@vger.kernel.org\nReported-by: syzbot <syzbot+25dbecbec1e62c6b0dd4@syzkaller.appspotmail.com>\nReviewed-by: Josef Bacik <josef@toxicpanda.com>\nSigned-off-by: Jens Axboe <axboe@kernel.dk>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/23ecbbad7bf921f83a5c99718ded203676ddd91c"},{"sha":"381992bcccac4185ccdbbd2d9a3018238982b963","author":{"name":"Konstantin Khlebnikov","email":"3b96b99f19643d33e1bfa1caa535c041c3608549@yandex-team.ru"},"message":"block: bfq: swap puts in bfqg_and_blkg_put\n\ncommit d5274b3cd6a814ccb2f56d81ee87cbbf51bd4cf7 upstream.\n\nFix trivial use-after-free. This could be last reference to bfqg.\n\nFixes: 8f9bebc33dd7 (\"block, bfq: access and cache blkg data only when safe\")\nAcked-by: Paolo Valente <paolo.valente@linaro.org>\nSigned-off-by: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>\nSigned-off-by: Jens Axboe <axboe@kernel.dk>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/381992bcccac4185ccdbbd2d9a3018238982b963"},{"sha":"492519107c9d5ecfe3298586e3f5a33ac968b62c","author":{"name":"Minchan Kim","email":"eee62f459f15dcddf87a8df69e8328e2a2562028@kernel.org"},"message":"android: binder: fix the race mmap and alloc_new_buf_locked\n\ncommit da1b9564e85b1d7baf66cbfabcab27e183a1db63 upstream.\n\nThere is RaceFuzzer report like below because we have no lock to close\nbelow the race between binder_mmap and binder_alloc_new_buf_locked.\nTo close the race, let's use memory barrier so that if someone see\nalloc->vma is not NULL, alloc->vma_vm_mm should be never NULL.\n\n(I didn't add stable mark intentionallybecause standard android\nuserspace libraries that interact with binder (libbinder & libhwbinder)\nprevent the mmap/ioctl race. - from Todd)\n\n\"\nThread interleaving:\nCPU0 (binder_alloc_mmap_handler)              CPU1 (binder_alloc_new_buf_locked)\n=====                                         =====\n// drivers/android/binder_alloc.c\n// #L718 (v4.18-rc3)\nalloc->vma = vma;\n                                              // drivers/android/binder_alloc.c\n                                              // #L346 (v4.18-rc3)\n                                              if (alloc->vma == NULL) {\n                                                  ...\n                                                  // alloc->vma is not NULL at this point\n                                                  return ERR_PTR(-ESRCH);\n                                              }\n                                              ...\n                                              // #L438\n                                              binder_update_page_range(alloc, 0,\n                                                      (void *)PAGE_ALIGN((uintptr_t)buffer->data),\n                                                      end_page_addr);\n\n                                              // In binder_update_page_range() #L218\n                                              // But still alloc->vma_vm_mm is NULL here\n                                              if (need_mm && mmget_not_zero(alloc->vma_vm_mm))\nalloc->vma_vm_mm = vma->vm_mm;\n\nCrash Log:\n==================================================================\nBUG: KASAN: null-ptr-deref in __atomic_add_unless include/asm-generic/atomic-instrumented.h:89 [inline]\nBUG: KASAN: null-ptr-deref in atomic_add_unless include/linux/atomic.h:533 [inline]\nBUG: KASAN: null-ptr-deref in mmget_not_zero include/linux/sched/mm.h:75 [inline]\nBUG: KASAN: null-ptr-deref in binder_update_page_range+0xece/0x18e0 drivers/android/binder_alloc.c:218\nWrite of size 4 at addr 0000000000000058 by task syz-executor0/11184\n\nCPU: 1 PID: 11184 Comm: syz-executor0 Not tainted 4.18.0-rc3 #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.8.2-0-g33fbe13 by qemu-project.org 04/01/2014\nCall Trace:\n __dump_stack lib/dump_stack.c:77 [inline]\n dump_stack+0x16e/0x22c lib/dump_stack.c:113\n kasan_report_error mm/kasan/report.c:352 [inline]\n kasan_report+0x163/0x380 mm/kasan/report.c:412\n check_memory_region_inline mm/kasan/kasan.c:260 [inline]\n check_memory_region+0x140/0x1a0 mm/kasan/kasan.c:267\n kasan_check_write+0x14/0x20 mm/kasan/kasan.c:278\n __atomic_add_unless include/asm-generic/atomic-instrumented.h:89 [inline]\n atomic_add_unless include/linux/atomic.h:533 [inline]\n mmget_not_zero include/linux/sched/mm.h:75 [inline]\n binder_update_page_range+0xece/0x18e0 drivers/android/binder_alloc.c:218\n binder_alloc_new_buf_locked drivers/android/binder_alloc.c:443 [inline]\n binder_alloc_new_buf+0x467/0xc30 drivers/android/binder_alloc.c:513\n binder_transaction+0x125b/0x4fb0 drivers/android/binder.c:2957\n binder_thread_write+0xc08/0x2770 drivers/android/binder.c:3528\n binder_ioctl_write_read.isra.39+0x24f/0x8e0 drivers/android/binder.c:4456\n binder_ioctl+0xa86/0xf34 drivers/android/binder.c:4596\n vfs_ioctl fs/ioctl.c:46 [inline]\n do_vfs_ioctl+0x154/0xd40 fs/ioctl.c:686\n ksys_ioctl+0x94/0xb0 fs/ioctl.c:701\n __do_sys_ioctl fs/ioctl.c:708 [inline]\n __se_sys_ioctl fs/ioctl.c:706 [inline]\n __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:706\n do_syscall_64+0x167/0x4b0 arch/x86/entry/common.c:290\n entry_SYSCALL_64_after_hwframe+0x49/0xbe\n\"\n\nSigned-off-by: Todd Kjos <tkjos@google.com>\nSigned-off-by: Minchan Kim <minchan@kernel.org>\nReviewed-by: Martijn Coenen <maco@android.com>\nCc: stable <stable@vger.kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/492519107c9d5ecfe3298586e3f5a33ac968b62c"},{"sha":"9efcaa7c4afba5628f2650a76f69c798f47eeb18","author":{"name":"Paul Burton","email":"85f1bffadddedccfafc0ae065a06aa636075387f@mips.com"},"message":"MIPS: VDSO: Match data page cache colouring when D$ aliases\n\ncommit 0f02cfbc3d9e413d450d8d0fd660077c23f67eff upstream.\n\nWhen a system suffers from dcache aliasing a user program may observe\nstale VDSO data from an aliased cache line. Notably this can break the\nexpectation that clock_gettime(CLOCK_MONOTONIC, ...) is, as its name\nsuggests, monotonic.\n\nIn order to ensure that users observe updates to the VDSO data page as\nintended, align the user mappings of the VDSO data page such that their\ncache colouring matches that of the virtual address range which the\nkernel will use to update the data page - typically its unmapped address\nwithin kseg0.\n\nThis ensures that we don't introduce aliasing cache lines for the VDSO\ndata page, and therefore that userland will observe updates without\nrequiring cache invalidation.\n\nSigned-off-by: Paul Burton <paul.burton@mips.com>\nReported-by: Hauke Mehrtens <hauke@hauke-m.de>\nReported-by: Rene Nielsen <rene.nielsen@microsemi.com>\nReported-by: Alexandre Belloni <alexandre.belloni@bootlin.com>\nFixes: ebb5e78cc634 (\"MIPS: Initial implementation of a VDSO\")\nPatchwork: https://patchwork.linux-mips.org/patch/20344/\nTested-by: Alexandre Belloni <alexandre.belloni@bootlin.com>\nTested-by: Hauke Mehrtens <hauke@hauke-m.de>\nCc: James Hogan <jhogan@kernel.org>\nCc: linux-mips@linux-mips.org\nCc: stable@vger.kernel.org # v4.4+\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/9efcaa7c4afba5628f2650a76f69c798f47eeb18"},{"sha":"b0b69369eecc4cdc6680e1bf6e14a632d5a447d9","author":{"name":"Steve French","email":"13c6874f9652fc0c0017781cf16d61808fd56f39@microsoft.com"},"message":"SMB3: Backup intent flag missing for directory opens with backupuid mounts\n\ncommit 5e19697b56a64004e2d0ff1bb952ea05493c088f upstream.\n\nWhen \"backup intent\" is requested on the mount (e.g. backupuid or\nbackupgid mount options), the corresponding flag needs to be set\non opens of directories (and files) but was missing in some\nplaces causing access denied trying to enumerate and backup\nservers.\n\nFixes kernel bugzilla #200953\nhttps://bugzilla.kernel.org/show_bug.cgi?id=200953\n\nReported-and-tested-by: <whh@rubrik.com>\nSigned-off-by: Steve French <stfrench@microsoft.com>\nCC: Stable <stable@vger.kernel.org>\nReviewed-by: Pavel Shilovsky <pshilov@microsoft.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/b0b69369eecc4cdc6680e1bf6e14a632d5a447d9"},{"sha":"55bcfe019ac4a2ab2308cec4dae83b7830fa9b6a","author":{"name":"Steve French","email":"13c6874f9652fc0c0017781cf16d61808fd56f39@microsoft.com"},"message":"smb3: check for and properly advertise directory lease support\n\ncommit f801568332321e2b1e7a8bd26c3e4913a312a2ec upstream.\n\nAlthough servers will typically ignore unsupported features,\nwe should advertise the support for directory leases (as\nWindows e.g. does) in the negotiate protocol capabilities we\npass to the server, and should check for the server capability\n(CAP_DIRECTORY_LEASING) before sending a lease request for an\nopen of a directory.  This will prevent us from accidentally\nsending directory leases to SMB2.1 or SMB2 server for example.\n\nSigned-off-by: Steve French <stfrench@microsoft.com>\nCC: Stable <stable@vger.kernel.org>\nReviewed-by: Ronnie Sahlberg <lsahlber@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/55bcfe019ac4a2ab2308cec4dae83b7830fa9b6a"},{"sha":"ae3968b416459f3754feefb0bc685e9f3261bb3e","author":{"name":"Filipe Manana","email":"e0fcd583df77ec6c08e6d1257619cc1216ddc994@suse.com"},"message":"Btrfs: fix data corruption when deduplicating between different files\n\ncommit de02b9f6bb65a6a1848f346f7a3617b7a9b930c0 upstream.\n\nIf we deduplicate extents between two different files we can end up\ncorrupting data if the source range ends at the size of the source file,\nthe source file's size is not aligned to the filesystem's block size\nand the destination range does not go past the size of the destination\nfile size.\n\nExample:\n\n  $ mkfs.btrfs -f /dev/sdb\n  $ mount /dev/sdb /mnt\n\n  $ xfs_io -f -c \"pwrite -S 0x6b 0 2518890\" /mnt/foo\n  # The first byte with a value of 0xae starts at an offset (2518890)\n  # which is not a multiple of the sector size.\n  $ xfs_io -c \"pwrite -S 0xae 2518890 102398\" /mnt/foo\n\n  # Confirm the file content is full of bytes with values 0x6b and 0xae.\n  $ od -t x1 /mnt/foo\n  0000000 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b\n  *\n  11467540 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b ae ae ae ae ae ae\n  11467560 ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae\n  *\n  11777540 ae ae ae ae ae ae ae ae\n  11777550\n\n  # Create a second file with a length not aligned to the sector size,\n  # whose bytes all have the value 0x6b, so that its extent(s) can be\n  # deduplicated with the first file.\n  $ xfs_io -f -c \"pwrite -S 0x6b 0 557771\" /mnt/bar\n\n  # Now deduplicate the entire second file into a range of the first file\n  # that also has all bytes with the value 0x6b. The destination range's\n  # end offset must not be aligned to the sector size and must be less\n  # then the offset of the first byte with the value 0xae (byte at offset\n  # 2518890).\n  $ xfs_io -c \"dedupe /mnt/bar 0 1957888 557771\" /mnt/foo\n\n  # The bytes in the range starting at offset 2515659 (end of the\n  # deduplication range) and ending at offset 2519040 (start offset\n  # rounded up to the block size) must all have the value 0xae (and not\n  # replaced with 0x00 values). In other words, we should have exactly\n  # the same data we had before we asked for deduplication.\n  $ od -t x1 /mnt/foo\n  0000000 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b\n  *\n  11467540 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b ae ae ae ae ae ae\n  11467560 ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae\n  *\n  11777540 ae ae ae ae ae ae ae ae\n  11777550\n\n  # Unmount the filesystem and mount it again. This guarantees any file\n  # data in the page cache is dropped.\n  $ umount /dev/sdb\n  $ mount /dev/sdb /mnt\n\n  $ od -t x1 /mnt/foo\n  0000000 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b\n  *\n  11461300 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 00 00 00 00 00\n  11461320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n  *\n  11470000 ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae\n  *\n  11777540 ae ae ae ae ae ae ae ae\n  11777550\n\n  # The bytes in range 2515659 to 2519040 have a value of 0x00 and not a\n  # value of 0xae, data corruption happened due to the deduplication\n  # operation.\n\nSo fix this by rounding down, to the sector size, the length used for the\ndeduplication when the following conditions are met:\n\n  1) Source file's range ends at its i_size;\n  2) Source file's i_size is not aligned to the sector size;\n  3) Destination range does not cross the i_size of the destination file.\n\nFixes: e1d227a42ea2 (\"btrfs: Handle unaligned length in extent_same\")\nCC: stable@vger.kernel.org # 4.2+\nSigned-off-by: Filipe Manana <fdmanana@suse.com>\nSigned-off-by: David Sterba <dsterba@suse.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/ae3968b416459f3754feefb0bc685e9f3261bb3e"},{"sha":"d5fca5314c4da9d17b2db5d01a57fce48ec0f081","author":{"name":"Pierre Morel","email":"d95f280a221ff712ada79312579d6df6c67a2d03@linux.ibm.com"},"message":"KVM: s390: vsie: copy wrapping keys to right place\n\ncommit 204c97245612b6c255edf4e21e24d417c4a0c008 upstream.\n\nCopy the key mask to the right offset inside the shadow CRYCB\n\nFixes: bbeaa58b3 (\"KVM: s390: vsie: support aes dea wrapping keys\")\nSigned-off-by: Pierre Morel <pmorel@linux.ibm.com>\nReviewed-by: David Hildenbrand <david@redhat.com>\nReviewed-by: Cornelia Huck <cohuck@redhat.com>\nReviewed-by: Janosch Frank <frankja@linux.ibm.com>\nCc: stable@vger.kernel.org # v4.8+\nMessage-Id: <1535019956-23539-2-git-send-email-pmorel@linux.ibm.com>\nSigned-off-by: Janosch Frank <frankja@linux.ibm.com>\nSigned-off-by: Christian Borntraeger <borntraeger@de.ibm.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/d5fca5314c4da9d17b2db5d01a57fce48ec0f081"},{"sha":"a709c46fdcd07940ae75bbca417b5b825bf92bce","author":{"name":"Sean Christopherson","email":"c0cf6ffb699e0a4c98b3fa7c5dd03fa419b94ed2@intel.com"},"message":"KVM: VMX: Do not allow reexecute_instruction() when skipping MMIO instr\n\ncommit c4409905cd6eb42cfd06126e9226b0150e05a715 upstream.\n\nRe-execution after an emulation decode failure is only intended to\nhandle a case where two or vCPUs race to write a shadowed page, i.e.\nwe should never re-execute an instruction as part of MMIO emulation.\nAs handle_ept_misconfig() is only used for MMIO emulation, it should\npass EMULTYPE_NO_REEXECUTE when using the emulator to skip an instr\nin the fast-MMIO case where VM_EXIT_INSTRUCTION_LEN is invalid.\n\nAnd because the cr2 value passed to x86_emulate_instruction() is only\ndestined for use when retrying or reexecuting, we can simply call\nemulate_instruction().\n\nFixes: d391f1207067 (\"x86/kvm/vmx: do not use vm-exit instruction length\n                      for fast MMIO when running nested\")\nCc: Vitaly Kuznetsov <vkuznets@redhat.com>\nSigned-off-by: Sean Christopherson <sean.j.christopherson@intel.com>\nCc: stable@vger.kernel.org\nSigned-off-by: Radim Krčmář <rkrcmar@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/nathanchance/pi-kernel/commits/a709c46fdcd07940ae75bbca417b5b825bf92bce"}]}
{"actor":{"display_login":"nathanchance"}}