Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* release-1.3.0: Revert "Revert "rtc: alarm: Add power-on alarm feature"" staging: ion: msm: Apply d82ad70 to msm_ion_custom_ioctl BACKPORT: staging: android: ion: Pull out ion ioctls to a separate file Linux 3.18.124 ebtables: arpreply: Add the standard target sanity check ubifs: Check for name being NULL while mounting cgroup: Fix deadlock in cpu hotplug path ext4: avoid running out of journal credits when appending to an inline file jbd2: don't mark block as modified if the handle is out of credits ext4: add more inode number paranoia checks ext4: never move the system.data xattr out of the inode body ext4: always verify the magic number in xattr blocks ext4: add corruption check in ext4_xattr_set_entry() ext4: fix false negatives *and* false positives in ext4_check_descriptors() ext4: always check block group bounds in ext4_init_block_bitmap() ext4: fix check to prevent initializing reserved inodes ext4: only look at the bg_flags field if it is valid USB: serial: simple: add Motorola Tetra MTP6550 id PM / core: Clear the direct_complete flag on errors mac80211: fix setting IEEE80211_KEY_FLAG_RX_MGMT for AP mode keys PCI: Reprogram bridge prefetch registers on resume x86/vdso: Fix vDSO syscall fallback asm constraint regression x86/vdso: Fix asm constraints on vDSO syscall fallbacks fbdev/omapfb: fix omapfb_memory_read infoleak proc: restrict kernel stack dumps to root mtd: fsl-quadspi: fix macro collision problems with READ/WRITE Make file credentials available to the seqfile interfaces dm thin metadata: fix __udivdi3 undefined on 32-bit ocfs2: fix locking for res->tracking and dlm->tracking_list crypto: mxs-dcp - Fix wait logic on chan threads smb2: fix missing files in root share directory listing xen: fix GCC warning and remove duplicate EVTCHN_ROW/EVTCHN_COL usage xen/manage: don't complain about an empty value in control/sysrq node cifs: read overflow in is_valid_oplock_break() s390/qeth: don't dump past end of unknown HW header r8169: Clear RTL_FLAG_TASK_*_PENDING when clearing RTL_FLAG_TASK_ENABLED hexagon: modify ffs() and fls() to return int arch/hexagon: fix kernel/dma.c build warning dm thin metadata: try to avoid ever aborting transactions fs/cifs: suppress a string overflow warning USB: yurex: Check for truncation in yurex_read() RDMA/ucma: check fd type in ucma_migrate_id() mm: madvise(MADV_DODUMP): allow hugetlbfs pages tools/vm/page-types.c: fix "defined but not used" warning tools/vm/slabinfo.c: fix sign-compare warning mac80211: shorten the IBSS debug messages mac80211: Fix station bandwidth setting after channel switch mac80211: fix a race between restart and CSA flows fs/cifs: don't translate SFM_SLASH (U+F026) to backslash net: cadence: Fix a sleep-in-atomic-context bug in macb_halt_tx() RAID10 BUG_ON in raise_barrier when force is true and conf->barrier is 0 cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE gpio: adp5588: Fix sleep-in-atomic-context bug mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X KVM: PPC: Book3S HV: Don't truncate HPTE index in xlate function media: v4l: event: Prevent freeing event subscriptions while accessed arm64: KVM: Sanitize PSTATE.M when being set from userspace hwmon: (adt7475) Make adt7475_read_word() return errors e1000: ensure to free old tx/rx rings in set_ringparam() e1000: check on netif_running() before calling e1000_up() thermal: of-thermal: disable passive polling when thermal zone is disabled ext4: verify the depth of extent tree in ext4_find_extent() arm64: KVM: Tighten guest core register access from userspace staging: android: ion: fix ION_IOC_{MAP,SHARE} use-after-free scsi: target: iscsi: Use bin2hex instead of a re-implementation USB: remove LPM management from usb_driver_claim_interface() Revert "usb: cdc-wdm: Fix a sleep-in-atomic-context bug in service_outstanding_interrupt()" USB: usbdevfs: restore warning for nonsensical flags USB: usbdevfs: sanitize flags more media: uvcvideo: Support realtek's UVC 1.5 device slub: make ->cpu_partial unsigned int USB: handle NULL config in usb_find_alt_setting() USB: fix error handling in usb_driver_claim_interface() spi: rspi: Fix interrupted DMA transfers spi: sh-msiof: Fix handling of write value for SISTR register spi: tegra20-slink: explicitly enable/disable clock serial: cpm_uart: return immediately from console poll floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl nfsd: fix corrupted reply to badly ordered compound module: exclude SHN_UNDEF symbols from kallsyms api ASoC: dapm: Fix potential DAI widget pointer deref when linking DAIs scsi: bnx2i: add error handling for ioremap_nocache HID: hid-ntrig: add error handling for sysfs_create_group ARM: mvebu: declare asm symbols as character arrays in pmsu.c wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout() rndis_wlan: potential buffer overflow in rndis_wlan_auth_indication() ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge media: tm6000: add error handling for dvb_register_adapter drivers/tty: add error handling for pcmcia_loop_config staging: android: ashmem: Fix mmap size validation media: soc_camera: ov772x: correct setting of banding filter media: s3c-camif: ignore -ENOIOCTLCMD from v4l2_subdev_call for s_power ALSA: snd-aoa: add of_node_put() in error path s390/extmem: fix gcc 8 stringop-overflow warning alarmtimer: Prevent overflow for relative nanosleep usb: wusbcore: security: cast sizeof to int for comparison scsi: ibmvscsi: Improve strings handling scsi: target/iscsi: Make iscsit_ta_authentication() respect the output buffer size x86/tsc: Add missing header to tsc_msr.c powerpc/kdump: Handle crashkernel memory reservation failure media: exynos4-is: Prevent NULL pointer dereference in __isp_video_try_fmt() USB: serial: kobil_sct: fix modem-status error handling uwb: hwa-rc: fix memory leak at probe x86/numa_emulation: Fix emulated-to-physical node mapping tsl2550: fix lux1_input error in low light crypto: skcipher - Fix -Wstringop-truncation warnings HID: sony: Support DS4 dongle HID: sony: Update device ids arm64: Add trace_hardirqs_off annotation in ret_to_user ext4: don't mark mmp buffer head dirty ext4: fix online resize's handling of a too-small final block group ext4: recalucate superblock checksum after updating free blocks/inodes ext4: avoid divide by zero fault when deleting corrupted inline directories ocfs2: fix ocfs2 read block panic scsi: target: iscsi: Use hex2bin instead of a re-implementation ipv6: fix possible use-after-free in ip6_xmit() neighbour: confirm neigh entries when ARP packet is received net: hp100: fix always-true check for link up state net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT gso_segment: Reset skb->mac_len after modifying network header mm: shmem.c: Correctly annotate new inodes for lockdep ring-buffer: Allow for rescheduling when removing pages ALSA: emu10k1: fix possible info leak to userspace on SNDRV_EMU10K1_IOCTL_INFO ALSA: bebob: use address returned by kmalloc() instead of kernel stack for streaming DMA mapping ASoC: cs4265: fix MMTLR Data switch control Linux 3.18.123 USB: serial: ti_usb_3410_5052: fix array underflow in completion handler drm/panel: type promotion bug in s6e8aa0_read_mtp_id() ALSA: pcm: Fix snd_interval_refine first/last with open min/max rtc: bq4802: add error handling for devm_ioremap parport: sunbpp: fix error return code ARM: hisi: check of_iomap and fix missing of_node_put ARM: hisi: handle of_iomap and fix missing of_node_put MIPS: loongson64: cs5536: Fix PCI_OHCI_INT_REG reads mtdchar: fix overflows in adjustment of `count` audit: fix use-after-free in audit_add_watch binfmt_elf: Respect error return from `regset->active' CIFS: fix wrapping bugs in num_entries() cifs: prevent integer overflow in nxt_dir_entry() usb: cdc-wdm: Fix a sleep-in-atomic-context bug in service_outstanding_interrupt() USB: yurex: Fix buffer over-read in yurex_write() usb: misc: uss720: Fix two sleep-in-atomic-context bugs USB: serial: io_ti: fix array underflow in completion handler usb: host: u132-hcd: Fix a sleep-in-atomic-context bug in u132_get_frame() usb: Avoid use-after-free by flushing endpoints early in usb_set_interface() USB: Add quirk to support DJI CineSSD usb: Don't die twice if PCI xhci host is not responding in resume Tools: hv: Fix a bug in the key delete code IB/ipoib: Avoid a race condition between start_xmit and cm_rep_handler xen/netfront: fix waiting for xenbus state change pstore: Fix incorrect persistent ram buffer mapping RDMA/cma: Protect cma dev list with lock platform/x86: toshiba_acpi: Fix defined but not used build warnings s390/qeth: reset layer2 attribute on layer switch s390/qeth: fix race in used-buffer accounting mac80211: restrict delayed tailroom needed decrement powerpc/powernv: opal_put_chars partial write fix perf powerpc: Fix callchain ip filtering fbdev: Distinguish between interlaced and progressive modes perf powerpc: Fix callchain ip filtering when return address is in a register fbdev/via: fix defined but not used warning video: goldfishfb: fix memory leak on driver remove fbdev: omapfb: off by one in omapfb_register_client() mtd/maps: fix solutionengine.c printk format warnings MIPS: ath79: fix system restart gfs2: Special-case rindex for gfs2_grow xfrm: fix 'passing zero to ERR_PTR()' warning ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE() macro ALSA: msnd: Fix the default sample sizes mm: get rid of vmacache_flush_all() entirely netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user xhci: Fix use-after-free in xhci_free_virt_device MIPS: WARN_ON invalid DMA cache maintenance, not BUG_ON f2fs: fix to do sanity check with {sit,nat}_ver_bitmap_bytesize mfd: ti_am335x_tscadc: Fix struct clk memory leak partitions/aix: fix usage of uninitialized lv_info and lvname structures partitions/aix: append null character to print data from disk net: dcb: For wild-card lookups, use priority -1, not 0 net: mvneta: fix mtu change on port without link gpio: ml-ioh: Fix buffer underwrite on probe error path x86/mm: Remove in_nmi() warning from vmalloc_fault() Bluetooth: hidp: Fix handling of strncpy for hid->name information scsi: 3ware: fix return 0 on the error path of probe ata: libahci: Correct setting of DEVSLP register MIPS: Fix ISA virt/bus conversion for non-zero PHYS_OFFSET ath10k: prevent active scans on potential unusable channels macintosh/via-pmu: Add missing mmio accessors tty: rocket: Fix possible buffer overwrite on register_PCI uio: potential double frees if __uio_register_device() fails md/raid5: fix data corruption of replacements after originals dropped scsi: target: fix __transport_register_session locking Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV staging/rts5208: Fix read overflow in memcpy staging: rt5208: Fix a sleep-in-atomic bug in xd_copy_page kthread: fix boot hang (regression) on MIPS/OpenRISC kthread: Fix use-after-free if kthread fork fails cfq: Give a chance for arming slice idle timer in case of group_idle i2c: xiic: Make the start and the byte count write atomic ASoC: wm8994: Fix missing break in switch Fixes: Commit 86af955 ("mm: numa: avoid waiting on freed migrated pages") enic: do not call enic_change_mtu in enic_probe irda: Only insert new objects into the global database via setsockopt irda: Fix memory leak caused by repeated binds of irda socket kbuild: make missing $DEPMOD a Warning instead of an Error debugobjects: Make stack check warning more informative btrfs: Don't remove block group that still has pinned down bytes btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized btrfs: replace: Reset on-disk dev stats value after replace powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX. SMB3: Number of requests sent should be displayed for SMB3 not just CIFS smb3: fix reset of bytes read and written stats selftests/powerpc: Kill child processes on SIGINT staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice dm kcopyd: avoid softlockup in run_complete_job PCI: mvebu: Fix I/O space end address calculation scsi: aic94xx: fix an error code in aic94xx_init() s390/dasd: fix hanging offline processing due to canceled worker powerpc: Fix size calculation using resource_size() net/9p: fix error path of p9_virtio_probe platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360 mfd: sm501: Set coherent_dma_mask when creating subdevices ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest() mm/fadvise.c: fix signed overflow UBSAN complaint scripts: modpost: check memory allocation results fat: validate ->i_start before using reiserfs: change j_timestamp type to time64_t fork: don't copy inconsistent signal handler state to child hfs: prevent crash on exit from failed search hfsplus: don't return 0 when fill_super() failed cifs: check if SMB2 PDU size has been padded and suppress the warning ASoC: msm: qdsp6v2: use correct stream id of next session msm: mdss: Fix Gamma LUT bounds condition msm: kgsl: Add a property to find if secure context is supported msm: kgsl: Add a property to find alignment of secure buffers ARM: dts: msm: Enable reset via PM_RESIN_N for mdm9650 CV2X ARM: dts: msm: Enable use-default-batt-values for apq8009-dragon msm: ipa: Validate routing rule id net: core: null pointer derefernce in sockev_client_cb ASoC: msm: qdsp6v2: Fix rtac memory unmap issue in ASM driver netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets ARM: dts: msm: Invert interrupt polarity for K61 on mdm9650 CV2X msm:ipa: Prevent NAT table deletion only if public ip is not assigned msm: ipa3: Add mutex to prevent race condition diag: Prevent out of bound access while initializing msg mask ARM: dts: msm: Add wlan naples support to apq8009 dragon refboard Revert "rtc: alarm: Add power-on alarm feature" ARM: dts: msm: Enable mhi_dev IPC_RTR export for mdm9650 CV2X crypto: msm: Fix device stuck issue nl80211: nl80211_update_ft_ies to validate NL80211_ATTR_IE mmc: sd: limit SD card power limit according to cards capabilities ARM: dts: msm: Add QDSD_BOOT_CTL to sdhci node for MSM8953 MTP. msm: ais: Fix out-of-bounds read in string class name msm:ais:Handling bigger value than upper bound in msm_cpp_irq api net: memset smsg to avoid the padding data mdss: mdp: Fix fudge factor overflow check ARM: dts: msm: Support IPC with PCIe host for mdm9650 EP TTP ARM: dts: msm: Enable reset via PM_RESIN_N for mdm9650 PCIe EP TTP ASoC: msm: qdsp6v2: align param size of PSPD matrix msm: ep_pcie: Apply gpio settings based on the device tree flags UPSTREAM: scsi: sg: don't return bogus Sg_requests msm: camera: cpp: Check for valid tx level ASoC: msm: add new dai link for compress capture for apq8009 ASoC: msm: qdsp6v2: add routing controls to support compress capture ARM: dts: msm: Fix address and size width for common cma node for sdx20 futex: Replace barrier() in unqueue_me() with READ_ONCE() futex: Remove requirement for lock_page() in get_futex_key() BACKPORT: futex: Prevent overflow by strengthen input validation diag: Allocate DCI memory using vzalloc instead of kzalloc defconfig: msm: enable MSM_SYSMON_COMM for 8909 defconfig: Enable rng driver for msm8909 msm: ipa: Add WLAN FW SSR event msm: camera: Fix for Possible information leak issue fbdev: msm: Fix unintialisation of variables ASoC: msm: qdsp6v2: update backend name power: qpnp-charger: Fix null pointer dereference error
- Loading branch information
