{"push_id":1685686788,"size":730,"distinct_size":730,"ref":"refs/heads/linux-4.10.y","head":"4c031101dc084cfe7aa2e897b88321c69feefe54","before":"d23a9821d3972ae373357e933c8af8216d72e374","commits":[{"sha":"87592def9b31becaba94d93c65b08b38ad175d40","author":{"name":"Purna Chandra Mandal","email":"8bf3a1708a02e858dade007f788145b64f7d53b7@microchip.com"},"message":"MIPS: pic32mzda: Fix linker error for pic32_get_pbclk()\n\ncommit a726f1d2dd4fee179aa4513176d688ad309de6cc upstream.\n\nEarly clock API pic32_get_pbclk() is defined in early_clk.c and used by\ntime.c and early_console.c. When CONFIG_EARLY_PRINTK isn't set,\nearly_clk.c isn't compiled and time.c fails to link.\n\nFix it by compiling early_clk.c always. Also sort files in alphabetical\norder.\n\nFixes: 6e4ad1b41360 (\"MIPS: pic32mzda: fix getting timer clock rate.\")\nReported-by: Harvey Hunt <harvey.hunt@imgtec.com>\nSigned-off-by: Purna Chandra Mandal <purna.mandal@microchip.com>\nReviewed-by: Harvey Hunt <harvey.hunt@imgtec.com>\nCc: Ralf Baechle <ralf@linux-mips.org>\nCc: Joshua Henderson <digitalpeer@digitalpeer.com>\nCc: linux-mips@linux-mips.org\nPatchwork: https://patchwork.linux-mips.org/patch/13383/\nSigned-off-by: James Hogan <james.hogan@imgtec.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/87592def9b31becaba94d93c65b08b38ad175d40"},{"sha":"890fb4e3c3e148084a39336d6543af6be0691a32","author":{"name":"Ralf Baechle","email":"e34dc0f431cfd5378400841df3658f4880373a71@linux-mips.org"},"message":"MIPS: Fix special case in 64 bit IP checksumming.\n\ncommit 66fd848cadaa6be974a8c780fbeb328f0af4d3bd upstream.\n\nFor certain arguments such as saddr = 0xc0a8fd60, daddr = 0xc0a8fda1,\nlen = 80, proto = 17, sum = 0x7eae049d there will be a carry when\nfolding the intermediate 64 bit checksum to 32 bit but the code doesn't\nadd the carry back to the one's complement sum, thus an incorrect result\nwill be generated.\n\nReported-by: Mark Zhang <bomb.zhang@gmail.com>\nSigned-off-by: Ralf Baechle <ralf@linux-mips.org>\nReviewed-by: James Hogan <james.hogan@imgtec.com>\nSigned-off-by: James Hogan <james.hogan@imgtec.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/890fb4e3c3e148084a39336d6543af6be0691a32"},{"sha":"f2b15d5001236c5814317d46f9533c6ea42ae814","author":{"name":"Mirko Parthey","email":"3a6907a4527c4ecca3fa64cf211570c4b7e43602@web.de"},"message":"MIPS: BCM47XX: Fix button inversion for Asus WL-500W\n\ncommit bdfdaf1a016ef09cb941f2edad485a713510b8d5 upstream.\n\nThe Asus WL-500W buttons are active high, but the software treats them\nas active low. Fix the inverted logic.\n\nFixes: 3be972556fa1 (\"MIPS: BCM47XX: Import buttons database from OpenWrt\")\nSigned-off-by: Mirko Parthey <mirko.parthey@web.de>\nAcked-by: Rafał Miłecki <rafal@milecki.pl>\nCc: Hauke Mehrtens <hauke@hauke-m.de>\nCc: linux-mips@linux-mips.org\nPatchwork: https://patchwork.linux-mips.org/patch/15295/\nSigned-off-by: James Hogan <james.hogan@imgtec.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/f2b15d5001236c5814317d46f9533c6ea42ae814"},{"sha":"1764303e5e5aa35b227ea222a4ea76d8ad8d0e6e","author":{"name":"James Cowgill","email":"6794965f96a354505e298167ebebb1505d7f0273@imgtec.com"},"message":"MIPS: OCTEON: Fix copy_from_user fault handling for large buffers\n\ncommit 884b426917e4b3c85f33b382c792a94305dfdd62 upstream.\n\nIf copy_from_user is called with a large buffer (>= 128 bytes) and the\nuserspace buffer refers partially to unreadable memory, then it is\npossible for Octeon's copy_from_user to report the wrong number of bytes\nhave been copied. In the case where the buffer size is an exact multiple\nof 128 and the fault occurs in the last 64 bytes, copy_from_user will\nreport that all the bytes were copied successfully but leave some\ngarbage in the destination buffer.\n\nThe bug is in the main __copy_user_common loop in octeon-memcpy.S where\nin the middle of the loop, src and dst are incremented by 128 bytes. The\nl_exc_copy fault handler is used after this but that assumes that\n\"src < THREAD_BUADDR($28)\". This is not the case if src has already been\nincremented.\n\nFix by adding an extra fault handler which rewinds the src and dst\npointers 128 bytes before falling though to l_exc_copy.\n\nThanks to the pwritev test from the strace test suite for originally\nhighlighting this bug!\n\nFixes: 5b3b16880f40 (\"MIPS: Add Cavium OCTEON processor support ...\")\nSigned-off-by: James Cowgill <James.Cowgill@imgtec.com>\nAcked-by: David Daney <david.daney@cavium.com>\nReviewed-by: James Hogan <james.hogan@imgtec.com>\nCc: Ralf Baechle <ralf@linux-mips.org>\nCc: linux-mips@linux-mips.org\nPatchwork: https://patchwork.linux-mips.org/patch/14978/\nSigned-off-by: James Hogan <james.hogan@imgtec.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/1764303e5e5aa35b227ea222a4ea76d8ad8d0e6e"},{"sha":"734696a238da88aceda7c4b5aa6236486d54b3b2","author":{"name":"Felix Fietkau","email":"8cf1b58efcecbc12846b1b7b0c62f2bc67216d26@nbd.name"},"message":"MIPS: Lantiq: Keep ethernet enabled during boot\n\ncommit 774f0c6419bb8f9d83901d33582c7fe3ba6a6cb3 upstream.\n\nDisabling ethernet during reboot (only to enable it again when the\nethernet driver attaches) can put the chip into a faulty state where it\ncorrupts the header of all incoming packets.\n\nThis happens if packets arrive during the time window where the core is\ndisabled, and it can be easily reproduced by rebooting while sending a\nflood ping to the broadcast address.\n\nFixes: 95135bfa7ead (\"MIPS: Lantiq: Deactivate most of the devices by default\")\nSigned-off-by: Felix Fietkau <nbd@nbd.name>\nAcked-by: John Crispin <john@phrozen.org>\nCc: hauke.mehrtens@lantiq.com\nCc: linux-mips@linux-mips.org\nPatchwork: https://patchwork.linux-mips.org/patch/15078/\nSigned-off-by: James Hogan <james.hogan@imgtec.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/734696a238da88aceda7c4b5aa6236486d54b3b2"},{"sha":"953f805442e14050b606f43f878a7f90d58ccc55","author":{"name":"Paul Burton","email":"6cf344976ede6e423f0f16c3121262bddc8fed82@imgtec.com"},"message":"MIPS: Clear ISA bit correctly in get_frame_info()\n\ncommit ccaf7caf2c73c6db920772bf08bf1d47b2170634 upstream.\n\nget_frame_info() can be called in microMIPS kernels with the ISA bit\nalready clear. For example this happens when unwind_stack_by_address()\nis called because we begin with a PC that has the ISA bit set & subtract\nthe (odd) offset from the preceding symbol (which does not have the ISA\nbit set). Since get_frame_info() unconditionally subtracts 1 from the PC\nin microMIPS kernels it incorrectly misaligns the address it then\nattempts to access code at, leading to an address error exception.\n\nFix this by using msk_isa16_mode() to clear the ISA bit, which allows\nget_frame_info() to function regardless of whether it is provided with a\nPC that has the ISA bit set or not.\n\nSigned-off-by: Paul Burton <paul.burton@imgtec.com>\nFixes: 34c2f668d0f6 (\"MIPS: microMIPS: Add unaligned access support.\")\nCc: Leonid Yegoshin <leonid.yegoshin@imgtec.com>\nCc: linux-mips@linux-mips.org\nPatchwork: https://patchwork.linux-mips.org/patch/14528/\nSigned-off-by: Ralf Baechle <ralf@linux-mips.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/953f805442e14050b606f43f878a7f90d58ccc55"},{"sha":"f9bba20eaae7ffc6c00efc583ae7051c8a730f82","author":{"name":"Paul Burton","email":"6cf344976ede6e423f0f16c3121262bddc8fed82@imgtec.com"},"message":"MIPS: Prevent unaligned accesses during stack unwinding\n\ncommit a3552dace7d1d0cabf573e88fc3025cb90c4a601 upstream.\n\nDuring stack unwinding we call a number of functions to determine what\ntype of instruction we're looking at. The union mips_instruction pointer\nprovided to them may be pointing at a 2 byte, but not 4 byte, aligned\naddress & we thus cannot directly access the 4 byte wide members of the\nunion mips_instruction. To avoid this is_ra_save_ins() copies the\nrequired half-words of the microMIPS instruction to a correctly aligned\nunion mips_instruction on the stack, which it can then access safely.\nThe is_jump_ins() & is_sp_move_ins() functions do not correctly perform\nthis temporary copy, and instead attempt to directly dereference 4 byte\nfields which may be misaligned and lead to an address exception.\n\nFix this by copying the instruction halfwords to a temporary union\nmips_instruction in get_frame_info() such that we can provide a 4 byte\naligned union mips_instruction to the is_*_ins() functions and they do\nnot need to deal with misalignment themselves.\n\nSigned-off-by: Paul Burton <paul.burton@imgtec.com>\nFixes: 34c2f668d0f6 (\"MIPS: microMIPS: Add unaligned access support.\")\nCc: Leonid Yegoshin <leonid.yegoshin@imgtec.com>\nCc: linux-mips@linux-mips.org\nPatchwork: https://patchwork.linux-mips.org/patch/14529/\nSigned-off-by: Ralf Baechle <ralf@linux-mips.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/f9bba20eaae7ffc6c00efc583ae7051c8a730f82"},{"sha":"6ec5e28dfb8d1f55ec3f403867bdec7aa5223e11","author":{"name":"Paul Burton","email":"6cf344976ede6e423f0f16c3121262bddc8fed82@imgtec.com"},"message":"MIPS: Fix get_frame_info() handling of microMIPS function size\n\ncommit b6c7a324df37bf05ef7a2c1580683cf10d082d97 upstream.\n\nget_frame_info() is meant to iterate over up to the first 128\ninstructions within a function, but for microMIPS kernels it will not\nreach that many instructions unless the function is 512 bytes long since\nwe calculate the maximum number of instructions to check by dividing the\nfunction length by the 4 byte size of a union mips_instruction. In\nmicroMIPS kernels this won't do since instructions are variable length.\n\nFix this by instead checking whether the pointer to the current\ninstruction has reached the end of the function, and use max_insns as a\nsimple constant to check the number of iterations against.\n\nSigned-off-by: Paul Burton <paul.burton@imgtec.com>\nFixes: 34c2f668d0f6 (\"MIPS: microMIPS: Add unaligned access support.\")\nCc: Leonid Yegoshin <leonid.yegoshin@imgtec.com>\nCc: linux-mips@linux-mips.org\nPatchwork: https://patchwork.linux-mips.org/patch/14530/\nSigned-off-by: Ralf Baechle <ralf@linux-mips.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/6ec5e28dfb8d1f55ec3f403867bdec7aa5223e11"},{"sha":"f4ab4d6fd79b745f048cea37e3ae434673e8e567","author":{"name":"Paul Burton","email":"6cf344976ede6e423f0f16c3121262bddc8fed82@imgtec.com"},"message":"MIPS: Fix is_jump_ins() handling of 16b microMIPS instructions\n\ncommit 67c75057709a6d85c681c78b9b2f9b71191f01a2 upstream.\n\nis_jump_ins() checks 16b instruction fields without verifying that the\ninstruction is indeed 16b, as is done by is_ra_save_ins() &\nis_sp_move_ins(). Add the appropriate check.\n\nSigned-off-by: Paul Burton <paul.burton@imgtec.com>\nFixes: 34c2f668d0f6 (\"MIPS: microMIPS: Add unaligned access support.\")\nCc: Leonid Yegoshin <leonid.yegoshin@imgtec.com>\nCc: linux-mips@linux-mips.org\nPatchwork: https://patchwork.linux-mips.org/patch/14531/\nSigned-off-by: Ralf Baechle <ralf@linux-mips.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/f4ab4d6fd79b745f048cea37e3ae434673e8e567"},{"sha":"6f6914d77b1815bb1aa7f5f919da671b9420910f","author":{"name":"Paul Burton","email":"6cf344976ede6e423f0f16c3121262bddc8fed82@imgtec.com"},"message":"MIPS: Calculate microMIPS ra properly when unwinding the stack\n\ncommit bb9bc4689b9c635714fbcd5d335bad9934a7ebfc upstream.\n\nget_frame_info() calculates the offset of the return address within a\nstack frame simply by dividing a the bottom 16 bits of the instruction,\ntreated as a signed integer, by the size of a long. Whilst this works\nfor MIPS32 & MIPS64 ISAs where the sw or sd instructions are used, it's\nincorrect for microMIPS where encodings differ. The result is that we\ntypically completely fail to unwind the stack on microMIPS.\n\nFix this by adjusting is_ra_save_ins() to calculate the return address\noffset, and take into account the various different encodings there in\nthe same place as we consider whether an instruction is storing the\nra/$31 register.\n\nWith this we are now able to unwind the stack for kernels targetting the\nmicroMIPS ISA, for example we can produce:\n\n    Call Trace:\n    [<80109e1f>] show_stack+0x63/0x7c\n    [<8011ea17>] __warn+0x9b/0xac\n    [<8011ea45>] warn_slowpath_fmt+0x1d/0x20\n    [<8013fe53>] register_console+0x43/0x314\n    [<8067c58d>] of_setup_earlycon+0x1dd/0x1ec\n    [<8067f63f>] early_init_dt_scan_chosen_stdout+0xe7/0xf8\n    [<8066c115>] do_early_param+0x75/0xac\n    [<801302f9>] parse_args+0x1dd/0x308\n    [<8066c459>] parse_early_options+0x25/0x28\n    [<8066c48b>] parse_early_param+0x2f/0x38\n    [<8066e8cf>] setup_arch+0x113/0x488\n    [<8066c4f3>] start_kernel+0x57/0x328\n    ---[ end trace 0000000000000000 ]---\n\nWhereas previously we only produced:\n\n    Call Trace:\n    [<80109e1f>] show_stack+0x63/0x7c\n    ---[ end trace 0000000000000000 ]---\n\nSigned-off-by: Paul Burton <paul.burton@imgtec.com>\nFixes: 34c2f668d0f6 (\"MIPS: microMIPS: Add unaligned access support.\")\nCc: Leonid Yegoshin <leonid.yegoshin@imgtec.com>\nCc: linux-mips@linux-mips.org\nPatchwork: https://patchwork.linux-mips.org/patch/14532/\nSigned-off-by: Ralf Baechle <ralf@linux-mips.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/6f6914d77b1815bb1aa7f5f919da671b9420910f"},{"sha":"70d4818d1c89e8646a97f89a2086cc47fb40bfae","author":{"name":"Paul Burton","email":"6cf344976ede6e423f0f16c3121262bddc8fed82@imgtec.com"},"message":"MIPS: Handle microMIPS jumps in the same way as MIPS32/MIPS64 jumps\n\ncommit 096a0de427ea333f56f0ee00328cff2a2731bcf1 upstream.\n\nis_jump_ins() checks for plain jump (\"j\") instructions since commit\ne7438c4b893e (\"MIPS: Fix sibling call handling in get_frame_info\") but\nthat commit didn't make the same change to the microMIPS code, leaving\nit inconsistent with the MIPS32/MIPS64 code. Handle the microMIPS\nencoding of the jump instruction too such that it behaves consistently.\n\nSigned-off-by: Paul Burton <paul.burton@imgtec.com>\nFixes: e7438c4b893e (\"MIPS: Fix sibling call handling in get_frame_info\")\nCc: Tony Wu <tung7970@gmail.com>\nCc: linux-mips@linux-mips.org\nPatchwork: https://patchwork.linux-mips.org/patch/14533/\nSigned-off-by: Ralf Baechle <ralf@linux-mips.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/70d4818d1c89e8646a97f89a2086cc47fb40bfae"},{"sha":"4dc455047ef2da6ea83121e0ac189f98ae852742","author":{"name":"Zhang Rui","email":"7a5a1dfbf8f2e71be8c232f10c8bca3b437e2a89@intel.com"},"message":"mmc: sdhci-acpi: support deferred probe\n\ncommit e28d6f048799acb0014491e6b74e580d84bd7916 upstream.\n\nWith commit 67bf5156edc4 (\"gpio / ACPI: fix returned error from\nacpi_dev_gpio_irq_get()\"), mmc_gpiod_request_cd() returns -EPROBE_DEFER if\nGPIO is not ready when sdhci-acpi driver is probed, and sdhci-acpi driver\nshould be probed again later in this case.\n\nThis fixes an order issue when both GPIO and sdhci-acpi drivers are built\nas modules.\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=177101\nTested-by: Jonas Aaberg <cja@gmx.net>\nSigned-off-by: Zhang Rui <rui.zhang@intel.com>\nAcked-by: Adrian Hunter <adrian.hunter@intel.com>\nSigned-off-by: Ulf Hansson <ulf.hansson@linaro.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/4dc455047ef2da6ea83121e0ac189f98ae852742"},{"sha":"895bff918136d72a488db228e5a38a8fa7d4836d","author":{"name":"Nicolas Iooss","email":"c0d64d4e47db0f189cbd8dcd56b59d380e758d07@m4x.org"},"message":"am437x-vpfe: always assign bpp variable\n\ncommit 6ebf75774f823ddbdbd10921006989d4df222f4a upstream.\n\nIn vpfe_s_fmt(), when the sensor format and the requested format were\nthe same, bpp was assigned to vpfe->bpp without being initialized first.\n\nGrab the bpp value that is currently used by using __vpfe_get_format()\ninstead of its wrapper, vpfe_try_fmt().\n\nThis use of uninitialized variable has been found by compiling the\nkernel with clang.\n\nFixes: 417d2e507edc (\"[media] media: platform: add VPFE capture driver\nsupport for AM437X\")\n\nSigned-off-by: Nicolas Iooss <nicolas.iooss_linux@m4x.org>\nSigned-off-by: Hans Verkuil <hans.verkuil@cisco.com>\nSigned-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/895bff918136d72a488db228e5a38a8fa7d4836d"},{"sha":"0dafb02049535575e332924ec31046bd41148b06","author":{"name":"Guennadi Liakhovetski","email":"117d1a3b86a0d44e12f25ae9998323ad9f5814b1@gmx.de"},"message":"uvcvideo: Fix a wrong macro\n\ncommit 17c341ec0115837a610b2da15e32546e26068234 upstream.\n\nDon't mix up UVC_BUF_STATE_* and VB2_BUF_STATE_* codes.\n\nFixes: 6998b6fb4b1c (\"[media] uvcvideo: Use videobuf2-vmalloc\")\n\nSigned-off-by: Guennadi Liakhovetski <guennadi.liakhovetski@intel.com>\nSigned-off-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>\nSigned-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/0dafb02049535575e332924ec31046bd41148b06"},{"sha":"a1403c576b0b6588b8a24c60e1973b14a98a0b04","author":{"name":"Randy Dunlap","email":"7b1545df92ec18ff8c05a6b1165712e69bce8bfd@infradead.org"},"message":"media: fix dm1105.c build error\n\ncommit e3bb3cddd177550d63a3e4909cf1a7782f13414d upstream.\n\nFix dm1105 build error when CONFIG_I2C_ALGOBIT=m and\nCONFIG_DVB_DM1105=y.\n\ndrivers/built-in.o: In function `dm1105_probe':\ndm1105.c:(.text+0x2836e7): undefined reference to `i2c_bit_add_bus'\n\nSigned-off-by: Randy Dunlap <rdunlap@infradead.org>\nReported-by: kbuild test robot <fengguang.wu@intel.com>\nCc: Javier Martinez Canillas <javier@osg.samsung.com>\nSigned-off-by: Hans Verkuil <hans.verkuil@cisco.com>\nSigned-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/a1403c576b0b6588b8a24c60e1973b14a98a0b04"},{"sha":"aa315c9614c87d3166d77c9b99c8148f765dd3a1","author":{"name":"Antti Palosaari","email":"bb508b0009f1fe321d60800ba1b9588602cc893b@iki.fi"},"message":"cxd2820r: fix gpio null pointer dereference\n\ncommit 0ffb94b6cc5df6376ab6bff5b80075641f6716f8 upstream.\n\nSetting GPIOs during probe causes null pointer deference when\nGPIOLIB was not selected by Kconfig. Initialize driver private\nfield before calling set gpios.\n\nIt is regressing bug since 4.9.\n\nFixes: 07fdf7d9f19f (\"[media] cxd2820r: add I2C driver bindings\")\n\nReported-by: Chris Rankin <rankincj@gmail.com>\nTested-by: Chris Rankin <rankincj@gmail.com>\nTested-by: Håkan Lennestål <hakan.lennestal@gmail.com>\nSigned-off-by: Antti Palosaari <crope@iki.fi>\nSigned-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/aa315c9614c87d3166d77c9b99c8148f765dd3a1"},{"sha":"1a0fc4b1d6ae1534289fb19a7b747278216c4fad","author":{"name":"Mauro Carvalho Chehab","email":"ea19850a825a0b2eb1de0168fb2a06f5170bd9e2@s-opensource.com"},"message":"dvb-usb: don't use stack for firmware load\n\ncommit 43fab9793c1f44e665b4f98035a14942edf03ddc upstream.\n\nAs reported by Marc Duponcheel <marc@offline.be>, firmware load on\ndvb-usb is using the stack, with is not allowed anymore on default\nKernel configurations:\n\n[ 1025.958836] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in cold state, will try to load a firmware\n[ 1025.958853] dvb-usb: downloading firmware from file 'dvb-usb-wt220u-zl0353-01.fw'\n[ 1025.958855] dvb-usb: could not stop the USB controller CPU.\n[ 1025.958856] dvb-usb: error while transferring firmware (transferred size: -11, block size: 3)\n[ 1025.958856] dvb-usb: firmware download failed at 8 with -22\n[ 1025.958867] usbcore: registered new interface driver dvb_usb_dtt200u\n\n[    2.789902] dvb-usb: downloading firmware from file 'dvb-usb-wt220u-zl0353-01.fw'\n[    2.789905] ------------[ cut here ]------------\n[    2.789911] WARNING: CPU: 3 PID: 2196 at drivers/usb/core/hcd.c:1584 usb_hcd_map_urb_for_dma+0x430/0x560 [usbcore]\n[    2.789912] transfer buffer not dma capable\n[    2.789912] Modules linked in: btusb dvb_usb_dtt200u(+) dvb_usb_af9035(+) btrtl btbcm dvb_usb dvb_usb_v2 btintel dvb_core bluetooth rc_core rfkill x86_pkg_temp_thermal intel_powerclamp coretemp crc32_pclmul aesni_intel aes_x86_64 glue_helper lrw gf128mul ablk_helper cryptd drm_kms_helper syscopyarea sysfillrect pcspkr i2c_i801 sysimgblt fb_sys_fops drm i2c_smbus i2c_core r8169 lpc_ich mfd_core mii thermal fan rtc_cmos video button acpi_cpufreq processor snd_hda_codec_realtek snd_hda_codec_generic snd_hda_intel snd_hda_codec snd_hwdep snd_hda_core snd_pcm snd_timer snd crc32c_intel ahci libahci libata xhci_pci ehci_pci xhci_hcd ehci_hcd usbcore usb_common dm_mirror dm_region_hash dm_log dm_mod\n[    2.789936] CPU: 3 PID: 2196 Comm: systemd-udevd Not tainted 4.9.0-gentoo #1\n[    2.789937] Hardware name: ASUS All Series/H81I-PLUS, BIOS 0401 07/23/2013\n[    2.789938]  ffffc9000339b690 ffffffff812bd397 ffffc9000339b6e0 0000000000000000\n[    2.789939]  ffffc9000339b6d0 ffffffff81055c86 000006300339b6a0 ffff880116c0c000\n[    2.789941]  0000000000000000 0000000000000000 0000000000000001 ffff880116c08000\n[    2.789942] Call Trace:\n[    2.789945]  [<ffffffff812bd397>] dump_stack+0x4d/0x66\n[    2.789947]  [<ffffffff81055c86>] __warn+0xc6/0xe0\n[    2.789948]  [<ffffffff81055cea>] warn_slowpath_fmt+0x4a/0x50\n[    2.789952]  [<ffffffffa006d460>] usb_hcd_map_urb_for_dma+0x430/0x560 [usbcore]\n[    2.789954]  [<ffffffff814ed5a8>] ? io_schedule_timeout+0xd8/0x110\n[    2.789956]  [<ffffffffa006e09c>] usb_hcd_submit_urb+0x9c/0x980 [usbcore]\n[    2.789958]  [<ffffffff812d0ebf>] ? copy_page_to_iter+0x14f/0x2b0\n[    2.789960]  [<ffffffff81126818>] ? pagecache_get_page+0x28/0x240\n[    2.789962]  [<ffffffff8118c2a0>] ? touch_atime+0x20/0xa0\n[    2.789964]  [<ffffffffa006f7c4>] usb_submit_urb+0x2c4/0x520 [usbcore]\n[    2.789967]  [<ffffffffa006feca>] usb_start_wait_urb+0x5a/0xe0 [usbcore]\n[    2.789969]  [<ffffffffa007000c>] usb_control_msg+0xbc/0xf0 [usbcore]\n[    2.789970]  [<ffffffffa067903d>] usb_cypress_writemem+0x3d/0x40 [dvb_usb]\n[    2.789972]  [<ffffffffa06791cf>] usb_cypress_load_firmware+0x4f/0x130 [dvb_usb]\n[    2.789973]  [<ffffffff8109dbbe>] ? console_unlock+0x2fe/0x5d0\n[    2.789974]  [<ffffffff8109e10c>] ? vprintk_emit+0x27c/0x410\n[    2.789975]  [<ffffffff8109e40a>] ? vprintk_default+0x1a/0x20\n[    2.789976]  [<ffffffff81124d76>] ? printk+0x43/0x4b\n[    2.789977]  [<ffffffffa0679310>] dvb_usb_download_firmware+0x60/0xd0 [dvb_usb]\n[    2.789979]  [<ffffffffa0679898>] dvb_usb_device_init+0x3d8/0x610 [dvb_usb]\n[    2.789981]  [<ffffffffa069e302>] dtt200u_usb_probe+0x92/0xd0 [dvb_usb_dtt200u]\n[    2.789984]  [<ffffffffa007420c>] usb_probe_interface+0xfc/0x270 [usbcore]\n[    2.789985]  [<ffffffff8138bf95>] driver_probe_device+0x215/0x2d0\n[    2.789986]  [<ffffffff8138c0e6>] __driver_attach+0x96/0xa0\n[    2.789987]  [<ffffffff8138c050>] ? driver_probe_device+0x2d0/0x2d0\n[    2.789988]  [<ffffffff81389ffb>] bus_for_each_dev+0x5b/0x90\n[    2.789989]  [<ffffffff8138b7b9>] driver_attach+0x19/0x20\n[    2.789990]  [<ffffffff8138b33c>] bus_add_driver+0x11c/0x220\n[    2.789991]  [<ffffffff8138c91b>] driver_register+0x5b/0xd0\n[    2.789994]  [<ffffffffa0072f6c>] usb_register_driver+0x7c/0x130 [usbcore]\n[    2.789994]  [<ffffffffa06a5000>] ? 0xffffffffa06a5000\n[    2.789996]  [<ffffffffa06a501e>] dtt200u_usb_driver_init+0x1e/0x20 [dvb_usb_dtt200u]\n[    2.789997]  [<ffffffff81000408>] do_one_initcall+0x38/0x140\n[    2.789998]  [<ffffffff8116001c>] ? __vunmap+0x7c/0xc0\n[    2.789999]  [<ffffffff81124fb0>] ? do_init_module+0x22/0x1d2\n[    2.790000]  [<ffffffff81124fe8>] do_init_module+0x5a/0x1d2\n[    2.790002]  [<ffffffff810c96b1>] load_module+0x1e11/0x2580\n[    2.790003]  [<ffffffff810c68b0>] ? show_taint+0x30/0x30\n[    2.790004]  [<ffffffff81177250>] ? kernel_read_file+0x100/0x190\n[    2.790005]  [<ffffffff810c9ffa>] SyS_finit_module+0xba/0xc0\n[    2.790007]  [<ffffffff814f13e0>] entry_SYSCALL_64_fastpath+0x13/0x94\n[    2.790008] ---[ end trace c78a74e78baec6fc ]---\n\nSo, allocate the structure dynamically.\n\nSigned-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/1a0fc4b1d6ae1534289fb19a7b747278216c4fad"},{"sha":"81d5066323a8b422b9a3bb6cd336523e806c1885","author":{"name":"Sean Young","email":"745a5948f3a29be7b294faa8063f9998c214afbb@mess.org"},"message":"lirc_dev: LIRC_{G,S}ET_REC_MODE do not work\n\ncommit bd291208d7f5d6b2d6a033fee449a429230b06df upstream.\n\nSince \"273b902 [media] lirc_dev: use LIRC_CAN_REC() define\" these\nioctls no longer work.\n\nSigned-off-by: Sean Young <sean@mess.org>\nReviewed-by: Andi Shyti <andi.shyti@samsung.com>\nSigned-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/81d5066323a8b422b9a3bb6cd336523e806c1885"},{"sha":"c4b6ff75838f3c39577adffca445f176ed8b1a81","author":{"name":"Sakari Ailus","email":"20e5d1d02c2f1dd1e848b2d45f5d9cb636f7f9d6@linux.intel.com"},"message":"media: Properly pass through media entity types in entity enumeration\n\ncommit 98d85f3cb912fde14593ead54dea4c1a00b3966f upstream.\n\nWhen the functions replaced media entity types, the range which was\nallowed for the types was incorrect. This meant that media entity types\nfor specific devices were not passed correctly to the userspace through\nMEDIA_IOC_ENUM_ENTITIES. Fix it.\n\nFixes: commit b2cd27448b33 (\"[media] media-device: map new functions into old types for legacy API\")\nReported-and-tested-by: Antti Laakso <antti.laakso@intel.com>\n\nSigned-off-by: Sakari Ailus <sakari.ailus@linux.intel.com>\nAcked-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>\nSigned-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/c4b6ff75838f3c39577adffca445f176ed8b1a81"},{"sha":"7cf6b709b6412afd1d93b2c4b37163c3602e3b95","author":{"name":"Theodore Ts'o","email":"27d72d8f7672ec04389c6b6ff53fcc4e9145bb77@mit.edu"},"message":"ext4: fix deadlock between inline_data and ext4_expand_extra_isize_ea()\n\ncommit c755e251357a0cee0679081f08c3f4ba797a8009 upstream.\n\nThe xattr_sem deadlock problems fixed in commit 2e81a4eeedca: \"ext4:\navoid deadlock when expanding inode size\" didn't include the use of\nxattr_sem in fs/ext4/inline.c.  With the addition of project quota\nwhich added a new extra inode field, this exposed deadlocks in the\ninline_data code similar to the ones fixed by 2e81a4eeedca.\n\nThe deadlock can be reproduced via:\n\n   dmesg -n 7\n   mke2fs -t ext4 -O inline_data -Fq -I 256 /dev/vdc 32768\n   mount -t ext4 -o debug_want_extra_isize=24 /dev/vdc /vdc\n   mkdir /vdc/a\n   umount /vdc\n   mount -t ext4 /dev/vdc /vdc\n   echo foo > /vdc/a/foo\n\nand looks like this:\n\n[   11.158815]\n[   11.160276] =============================================\n[   11.161960] [ INFO: possible recursive locking detected ]\n[   11.161960] 4.10.0-rc3-00015-g011b30a8a3cf #160 Tainted: G        W\n[   11.161960] ---------------------------------------------\n[   11.161960] bash/2519 is trying to acquire lock:\n[   11.161960]  (&ei->xattr_sem){++++..}, at: [<c1225a4b>] ext4_expand_extra_isize_ea+0x3d/0x4cd\n[   11.161960]\n[   11.161960] but task is already holding lock:\n[   11.161960]  (&ei->xattr_sem){++++..}, at: [<c1227941>] ext4_try_add_inline_entry+0x3a/0x152\n[   11.161960]\n[   11.161960] other info that might help us debug this:\n[   11.161960]  Possible unsafe locking scenario:\n[   11.161960]\n[   11.161960]        CPU0\n[   11.161960]        ----\n[   11.161960]   lock(&ei->xattr_sem);\n[   11.161960]   lock(&ei->xattr_sem);\n[   11.161960]\n[   11.161960]  *** DEADLOCK ***\n[   11.161960]\n[   11.161960]  May be due to missing lock nesting notation\n[   11.161960]\n[   11.161960] 4 locks held by bash/2519:\n[   11.161960]  #0:  (sb_writers#3){.+.+.+}, at: [<c11a2414>] mnt_want_write+0x1e/0x3e\n[   11.161960]  #1:  (&type->i_mutex_dir_key){++++++}, at: [<c119508b>] path_openat+0x338/0x67a\n[   11.161960]  #2:  (jbd2_handle){++++..}, at: [<c123314a>] start_this_handle+0x582/0x622\n[   11.161960]  #3:  (&ei->xattr_sem){++++..}, at: [<c1227941>] ext4_try_add_inline_entry+0x3a/0x152\n[   11.161960]\n[   11.161960] stack backtrace:\n[   11.161960] CPU: 0 PID: 2519 Comm: bash Tainted: G        W       4.10.0-rc3-00015-g011b30a8a3cf #160\n[   11.161960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.1-1 04/01/2014\n[   11.161960] Call Trace:\n[   11.161960]  dump_stack+0x72/0xa3\n[   11.161960]  __lock_acquire+0xb7c/0xcb9\n[   11.161960]  ? kvm_clock_read+0x1f/0x29\n[   11.161960]  ? __lock_is_held+0x36/0x66\n[   11.161960]  ? __lock_is_held+0x36/0x66\n[   11.161960]  lock_acquire+0x106/0x18a\n[   11.161960]  ? ext4_expand_extra_isize_ea+0x3d/0x4cd\n[   11.161960]  down_write+0x39/0x72\n[   11.161960]  ? ext4_expand_extra_isize_ea+0x3d/0x4cd\n[   11.161960]  ext4_expand_extra_isize_ea+0x3d/0x4cd\n[   11.161960]  ? _raw_read_unlock+0x22/0x2c\n[   11.161960]  ? jbd2_journal_extend+0x1e2/0x262\n[   11.161960]  ? __ext4_journal_get_write_access+0x3d/0x60\n[   11.161960]  ext4_mark_inode_dirty+0x17d/0x26d\n[   11.161960]  ? ext4_add_dirent_to_inline.isra.12+0xa5/0xb2\n[   11.161960]  ext4_add_dirent_to_inline.isra.12+0xa5/0xb2\n[   11.161960]  ext4_try_add_inline_entry+0x69/0x152\n[   11.161960]  ext4_add_entry+0xa3/0x848\n[   11.161960]  ? __brelse+0x14/0x2f\n[   11.161960]  ? _raw_spin_unlock_irqrestore+0x44/0x4f\n[   11.161960]  ext4_add_nondir+0x17/0x5b\n[   11.161960]  ext4_create+0xcf/0x133\n[   11.161960]  ? ext4_mknod+0x12f/0x12f\n[   11.161960]  lookup_open+0x39e/0x3fb\n[   11.161960]  ? __wake_up+0x1a/0x40\n[   11.161960]  ? lock_acquire+0x11e/0x18a\n[   11.161960]  path_openat+0x35c/0x67a\n[   11.161960]  ? sched_clock_cpu+0xd7/0xf2\n[   11.161960]  do_filp_open+0x36/0x7c\n[   11.161960]  ? _raw_spin_unlock+0x22/0x2c\n[   11.161960]  ? __alloc_fd+0x169/0x173\n[   11.161960]  do_sys_open+0x59/0xcc\n[   11.161960]  SyS_open+0x1d/0x1f\n[   11.161960]  do_int80_syscall_32+0x4f/0x61\n[   11.161960]  entry_INT80_32+0x2f/0x2f\n[   11.161960] EIP: 0xb76ad469\n[   11.161960] EFLAGS: 00000286 CPU: 0\n[   11.161960] EAX: ffffffda EBX: 08168ac8 ECX: 00008241 EDX: 000001b6\n[   11.161960] ESI: b75e46bc EDI: b7755000 EBP: bfbdb108 ESP: bfbdafc0\n[   11.161960]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b\n\nReported-by: George Spelvin <linux@sciencehorizons.net>\nSigned-off-by: Theodore Ts'o <tytso@mit.edu>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/vishnunaini/linux-stable/commits/7cf6b709b6412afd1d93b2c4b37163c3602e3b95"}]}
{"actor":{"display_login":"vishnunaini"}}