12 Apr, 2014

7 commits

  • Several spots in the kernel perform a sequence like:

    skb_queue_tail(&sk->s_receive_queue, skb);
    sk->sk_data_ready(sk, skb->len);

    But at the moment we place the SKB onto the socket receive queue it
    can be consumed and freed up. So this skb->len access is potentially
    to freed up memory.

    Furthermore, the skb->len can be modified by the consumer so it is
    possible that the value isn't accurate.

    And finally, no actual implementation of this callback actually uses
    the length argument. And since nobody actually cared about it's
    value, lots of call sites pass arbitrary values in such as '0' and
    even '1'.

    So just remove the length argument from the callback, that way there
    is no confusion whatsoever and all of these use-after-free cases get
    fixed as a side effect.

    Based upon a patch by Eric Dumazet and his suggestion to audit this
    issue tree-wide.

    Signed-off-by: David S. Miller

    David S. Miller
     
  • K. Y. Srinivasan says:

    ====================
    Fix issues with Heper-V network offload code

    WS2008 R2 does not support udp checksum offload. Furthermore, ws2012 and
    ws2012 r2 have issues offloading udp checksum from Linux guests.
    This patch-set addresses these issues as well as other bug fixes.
    Please apply.

    In this version, I have addressed the comment from David Miller with reagards
    to COWing the skb prior to modifying the header (patch 3/3).
    ====================

    Signed-off-by: David S. Miller

    David S. Miller
     
  • ws2008r2 does not support UDP checksum offload. Thus, we cannnot turn on
    UDP offload in the host. Also, on ws2012 and ws2012 r2, there appear to be
    an issue with UDP checksum offload.
    Fix this issue by computing the UDP checksum in the Hyper-V driver.

    Based on Dave Miller's comments, in this version, I have COWed the skb
    before modifying the UDP header (the checksum field).

    Signed-off-by: K. Y. Srinivasan
    Reviewed-by: Haiyang Zhang
    Signed-off-by: David S. Miller

    KY Srinivasan
     
  • Ws2008R2 supports ndis_version 6.1 and 6.1 is the minimal version required
    for various offloads. Negotiate ndis_version 6.1 when on ws2008r2.

    Signed-off-by: K. Y. Srinivasan
    Reviewed-by: Haiyang Zhang
    Signed-off-by: David S. Miller

    KY Srinivasan
     
  • An outgoing packet can potentially need per-packet information for
    all the offloads and VLAN tagging. Fix this issue.

    Signed-off-by: K. Y. Srinivasan
    Reviewed-by: Haiyang Zhang
    Signed-off-by: David S. Miller

    KY Srinivasan
     
  • br_allowed_ingress() has two problems.

    1. If br_allowed_ingress() is called by br_handle_frame_finish() and
    vlan_untag() in br_allowed_ingress() fails, skb will be freed by both
    vlan_untag() and br_handle_frame_finish().

    2. If br_allowed_ingress() is called by br_dev_xmit() and
    br_allowed_ingress() fails, the skb will not be freed.

    Fix these two problems by freeing the skb in br_allowed_ingress()
    if it fails.

    Signed-off-by: Toshiaki Makita
    Signed-off-by: David S. Miller

    Toshiaki Makita
     
  • Remove the bonding debug_fs entries when the
    module initialization fails. The debug_fs
    entries should be removed together with all other
    already allocated resources.

    Signed-off-by: Thomas Richter
    Signed-off-by: Jay Vosburgh
    Signed-off-by: David S. Miller

    Thomas Richter
     

11 Apr, 2014

1 commit

  • In case of tcp, gso_size contains the tcpmss.

    For UFO (udp fragmentation offloading) skbs, gso_size is the fragment
    payload size, i.e. we must not account for udp header size.

    Otherwise, when using virtio drivers, a to-be-forwarded UFO GSO packet
    will be needlessly fragmented in the forward path, because we think its
    individual segments are too large for the outgoing link.

    Fixes: fe6cc55f3a9a053 ("net: ip, ipv6: handle gso skbs in forwarding path")
    Cc: Eric Dumazet
    Reported-by: Tobias Brunner
    Signed-off-by: Florian Westphal
    Signed-off-by: David S. Miller

    Florian Westphal
     

10 Apr, 2014

4 commits

  • When l2tp driver tries to get PMTU for the tunnel destination, it uses
    the pointer to struct sock that represents PPPoX socket, while it
    should use the pointer that represents UDP socket of the tunnel.

    Signed-off-by: Dmitry Petukhov
    Signed-off-by: David S. Miller

    Dmitry Petukhov
     
  • Dual EMAC works with VLAN segregation of the ports, so default vlan needs
    to be added in dual EMAC case else default vlan will be tagged for all
    egress packets and vlan unaware switches/servers will drop packets
    from the EVM.

    Signed-off-by: Mugunthan V N
    Tested-by: Yegor Yefremov
    Signed-off-by: David S. Miller

    Mugunthan V N
     
  • This condition check makes no difference in the code flow since 3.10

    Signed-off-by: Balakumaran Kannan
    Reviewed-by: Florian Fainelli
    Signed-off-by: David S. Miller

    Balakumaran Kannan
     
  • In function sctp_wake_up_waiters(), we need to involve a test
    if the association is declared dead. If so, we don't have any
    reference to a possible sibling association anymore and need
    to invoke sctp_write_space() instead, and normally walk the
    socket's associations and notify them of new wmem space. The
    reason for special casing is that otherwise, we could run
    into the following issue when a sctp_primitive_SEND() call
    from sctp_sendmsg() fails, and tries to flush an association's
    outq, i.e. in the following way:

    sctp_association_free()
    `-> list_del(&asoc->asocs) base.dead = true
    sctp_outq_free(&asoc->outqueue)
    `-> __sctp_outq_teardown()
    `-> sctp_chunk_free()
    `-> consume_skb()
    `-> sctp_wfree()
    `-> sctp_wake_up_waiters() ep->sndbuf_policy=0

    Therefore, only walk the list in an 'optimized' way if we find
    that the current association is still active. We could also use
    list_del_init() in addition when we call sctp_association_free(),
    but as Vlad suggests, we want to trap such bugs and thus leave
    it poisoned as is.

    Why is it safe to resolve the issue by testing for asoc->base.dead?
    Parallel calls to sctp_sendmsg() are protected under socket lock,
    that is lock_sock()/release_sock(). Only within that path under
    lock held, we're setting skb/chunk owner via sctp_set_owner_w().
    Eventually, chunks are freed directly by an association still
    under that lock. So when traversing association list on destruction
    time from sctp_wake_up_waiters() via sctp_wfree(), a different
    CPU can't be running sctp_wfree() while another one calls
    sctp_association_free() as both happens under the same lock.
    Therefore, this can also not race with setting/testing against
    asoc->base.dead as we are guaranteed for this to happen in order,
    under lock. Further, Vlad says: the times we check asoc->base.dead
    is when we've cached an association pointer for later processing.
    In between cache and processing, the association may have been
    freed and is simply still around due to reference counts. We check
    asoc->base.dead under a lock, so it should always be safe to check
    and not race against sctp_association_free(). Stress-testing seems
    fine now, too.

    Fixes: cd253f9f357d ("net: sctp: wake up all assocs if sndbuf policy is per socket")
    Signed-off-by: Daniel Borkmann
    Cc: Vlad Yasevich
    Acked-by: Neil Horman
    Acked-by: Vlad Yasevich
    Signed-off-by: David S. Miller

    Daniel Borkmann
     

09 Apr, 2014

8 commits

  • Pull more networking updates from David Miller:

    1) If a VXLAN interface is created with no groups, we can crash on
    reception of packets. Fix from Mike Rapoport.

    2) Missing includes in CPTS driver, from Alexei Starovoitov.

    3) Fix string validations in isdnloop driver, from YOSHIFUJI Hideaki
    and Dan Carpenter.

    4) Missing irq.h include in bnxw2x, enic, and qlcnic drivers. From
    Josh Boyer.

    5) AF_PACKET transmit doesn't statistically count TX drops, from Daniel
    Borkmann.

    6) Byte-Queue-Limit enabled drivers aren't handled properly in
    AF_PACKET transmit path, also from Daniel Borkmann.

    Same problem exists in pktgen, and Daniel fixed it there too.

    7) Fix resource leaks in driver probe error paths of new sxgbe driver,
    from Francois Romieu.

    8) Truesize of SKBs can gradually get more and more corrupted in NAPI
    packet recycling path, fix from Eric Dumazet.

    9) Fix uniprocessor netfilter build, from Florian Westphal. In the
    longer term we should perhaps try to find a way for ARRAY_SIZE() to
    work even with zero sized array elements.

    10) Fix crash in netfilter conntrack extensions due to mis-estimation of
    required extension space. From Andrey Vagin.

    11) Since we commit table rule updates before trying to copy the
    counters back to userspace (it's the last action we perform), we
    really can't signal the user copy with an error as we are beyond the
    point from which we can unwind everything. This causes all kinds of
    use after free crashes and other mysterious behavior.

    From Thomas Graf.

    12) Restore previous behvaior of div/mod by zero in BPF filter
    processing. From Daniel Borkmann.

    * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (38 commits)
    net: sctp: wake up all assocs if sndbuf policy is per socket
    isdnloop: several buffer overflows
    netdev: remove potentially harmful checks
    pktgen: fix xmit test for BQL enabled devices
    net/at91_ether: avoid NULL pointer dereference
    tipc: Let tipc_release() return 0
    at86rf230: fix MAX_CSMA_RETRIES parameter
    mac802154: fix duplicate #include headers
    sxgbe: fix duplicate #include headers
    net: filter: be more defensive on div/mod by X==0
    netfilter: Can't fail and free after table replacement
    xen-netback: Trivial format string fix
    net: bcmgenet: Remove unnecessary version.h inclusion
    net: smc911x: Remove unused local variable
    bonding: Inactive slaves should keep inactive flag's value
    netfilter: nf_tables: fix wrong format in request_module()
    netfilter: nf_tables: set names cannot be larger than 15 bytes
    netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len
    netfilter: Add {ipt,ip6t}_osf aliases for xt_osf
    netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks
    ...

    Linus Torvalds
     
  • Pull more staging patches from Greg KH:
    "Here are some more staging patches for 3.15-rc1.

    They include a late-submission of a wireless driver that a bunch of
    people seem to have the hardware for now. As it's stand-alone, it
    should be fine (now passes the 0-day random build bot tests).

    There are also some fixes for the unisys drivers, as they were causing
    havoc on a number of different machines. To resolve all of those
    issues, we just mark the driver as BROKEN now, and we can fix it up
    "properly" over time"

    * tag 'staging-3.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging:
    staging: rtl8723au: The 8723 only has two paths
    Staging: unisys: mark drivers as BROKEN
    Staging: unisys: verify that a control channel exists
    staging: unisys: Add missing close parentheses in filexfer.c
    staging: r8723au: Fix build problem when RFKILL is not selected
    staging: r8723au: Fix randconfig build errors
    staging: r8723au: Turn on build of new driver
    staging: r8723au: Additional source patches
    staging: r8723au: Add source files for new driver - part 4
    staging: r8723au: Add source files for new driver - part 3
    staging: r8723au: Add source files for new driver - part 2
    staging: r8723au: Add source files for new driver - part 1

    Linus Torvalds
     
  • Pull second set of arm64 updates from Catalin Marinas:
    "A second pull request for this merging window, mainly with fixes and
    docs clarification:

    - Documentation clarification on CPU topology and booting
    requirements
    - Additional cache flushing during boot (needed in the presence of
    external caches or under virtualisation)
    - DMA range invalidation fix for non cache line aligned buffers
    - Build failure fix with !COMPAT
    - Kconfig update for STRICT_DEVMEM"

    * tag 'arm64-upstream' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:
    arm64: Fix DMA range invalidation for cache line unaligned buffers
    arm64: Add missing Kconfig for CONFIG_STRICT_DEVMEM
    arm64: fix !CONFIG_COMPAT build failures
    Revert "arm64: virt: ensure visibility of __boot_cpu_mode"
    arm64: Relax the kernel cache requirements for boot
    arm64: Update the TCR_EL1 translation granule definitions for 16K pages
    ARM: topology: Make it clear that all CPUs need to be described

    Linus Torvalds
     
  • Pull second set of s390 patches from Martin Schwidefsky:
    "The second part of Heikos uaccess rework, the page table walker for
    uaccess is now a thing of the past (yay!)

    The code change to fix the theoretical TLB flush problem allows us to
    add a TLB flush optimization for zEC12, this machine has new
    instructions that allow to do CPU local TLB flushes for single pages
    and for all pages of a specific address space.

    Plus the usual bug fixing and some more cleanup"

    * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux:
    s390/uaccess: rework uaccess code - fix locking issues
    s390/mm,tlb: optimize TLB flushing for zEC12
    s390/mm,tlb: safeguard against speculative TLB creation
    s390/irq: Use defines for external interruption codes
    s390/irq: Add defines for external interruption codes
    s390/sclp: add timeout for queued requests
    kvm/s390: also set guest pages back to stable on kexec/kdump
    lcs: Add missing destroy_timer_on_stack()
    s390/tape: Add missing destroy_timer_on_stack()
    s390/tape: Use del_timer_sync()
    s390/3270: fix crash with multiple reset device requests
    s390/bitops,atomic: add missing memory barriers
    s390/zcrypt: add length check for aligned data to avoid overflow in msg-type 6

    Linus Torvalds
     
  • SCTP charges chunks for wmem accounting via skb->truesize in
    sctp_set_owner_w(), and sctp_wfree() respectively as the
    reverse operation. If a sender runs out of wmem, it needs to
    wait via sctp_wait_for_sndbuf(), and gets woken up by a call
    to __sctp_write_space() mostly via sctp_wfree().

    __sctp_write_space() is being called per association. Although
    we assign sk->sk_write_space() to sctp_write_space(), which
    is then being done per socket, it is only used if send space
    is increased per socket option (SO_SNDBUF), as SOCK_USE_WRITE_QUEUE
    is set and therefore not invoked in sock_wfree().

    Commit 4c3a5bdae293 ("sctp: Don't charge for data in sndbuf
    again when transmitting packet") fixed an issue where in case
    sctp_packet_transmit() manages to queue up more than sndbuf
    bytes, sctp_wait_for_sndbuf() will never be woken up again
    unless it is interrupted by a signal. However, a still
    remaining issue is that if net.sctp.sndbuf_policy=0, that is
    accounting per socket, and one-to-many sockets are in use,
    the reclaimed write space from sctp_wfree() is 'unfairly'
    handed back on the server to the association that is the lucky
    one to be woken up again via __sctp_write_space(), while
    the remaining associations are never be woken up again
    (unless by a signal).

    The effect disappears with net.sctp.sndbuf_policy=1, that
    is wmem accounting per association, as it guarantees a fair
    share of wmem among associations.

    Therefore, if we have reclaimed memory in case of per socket
    accounting, wake all related associations to a socket in a
    fair manner, that is, traverse the socket association list
    starting from the current neighbour of the association and
    issue a __sctp_write_space() to everyone until we end up
    waking ourselves. This guarantees that no association is
    preferred over another and even if more associations are
    taken into the one-to-many session, all receivers will get
    messages from the server and are not stalled forever on
    high load. This setting still leaves the advantage of per
    socket accounting in touch as an association can still use
    up global limits if unused by others.

    Fixes: 4eb701dfc618 ("[SCTP] Fix SCTP sendbuffer accouting.")
    Signed-off-by: Daniel Borkmann
    Cc: Thomas Graf
    Cc: Neil Horman
    Cc: Vlad Yasevich
    Acked-by: Vlad Yasevich
    Acked-by: Neil Horman
    Signed-off-by: David S. Miller

    Daniel Borkmann
     
  • Pull drm updates from Dave Airlie:
    "Highlights:

    - drm:

    Generic display port aux features, primary plane support, drm
    master management fixes, logging cleanups, enforced locking checks
    (instead of docs), documentation improvements, minor number
    handling cleanup, pseudofs for shared inodes.

    - ttm:

    add ability to allocate from both ends

    - i915:

    broadwell features, power domain and runtime pm, per-process
    address space infrastructure (not enabled)

    - msm:

    power management, hdmi audio support

    - nouveau:

    ongoing GPU fault recovery, initial maxwell support, random fixes

    - exynos:

    refactored driver to clean up a lot of abstraction, DP support
    moved into drm, LVDS bridge support added, parallel panel support

    - gma500:

    SGX MMU support, SGX irq handling, asle irq work fixes

    - radeon:

    video engine bringup, ring handling fixes, use dp aux helpers

    - vmwgfx:

    add rendernode support"

    * 'drm-next' of git://people.freedesktop.org/~airlied/linux: (849 commits)
    DRM: armada: fix corruption while loading cursors
    drm/dp_helper: don't return EPROTO for defers (v2)
    drm/bridge: export ptn3460_init function
    drm/exynos: remove MODULE_DEVICE_TABLE definitions
    ARM: dts: exynos4412-trats2: enable exynos/fimd node
    ARM: dts: exynos4210-trats: enable exynos/fimd node
    ARM: dts: exynos4412-trats2: add panel node
    ARM: dts: exynos4210-trats: add panel node
    ARM: dts: exynos4: add MIPI DSI Master node
    drm/panel: add S6E8AA0 driver
    ARM: dts: exynos4210-universal_c210: add proper panel node
    drm/panel: add ld9040 driver
    panel/ld9040: add DT bindings
    panel/s6e8aa0: add DT bindings
    drm/exynos: add DSIM driver
    exynos/dsim: add DT bindings
    drm/exynos: disallow fbdev initialization if no device is connected
    drm/mipi_dsi: create dsi devices only for nodes with reg property
    drm/mipi_dsi: add flags to DSI messages
    Skip intel_crt_init for Dell XPS 8700
    ...

    Linus Torvalds
     
  • There are three buffer overflows addressed in this patch.

    1) In isdnloop_fake_err() we add an 'E' to a 60 character string and
    then copy it into a 60 character buffer. I have made the destination
    buffer 64 characters and I'm changed the sprintf() to a snprintf().

    2) In isdnloop_parse_cmd(), p points to a 6 characters into a 60
    character buffer so we have 54 characters. The ->eazlist[] is 11
    characters long. I have modified the code to return if the source
    buffer is too long.

    3) In isdnloop_command() the cbuf[] array was 60 characters long but the
    max length of the string then can be up to 79 characters. I made the
    cbuf array 80 characters long and changed the sprintf() to snprintf().
    I also removed the temporary "dial" buffer and changed it to use "p"
    directly.

    Unfortunately, we pass the "cbuf" string from isdnloop_command() to
    isdnloop_writecmd() which truncates anything over 60 characters to make
    it fit in card->omsg[]. (It can accept values up to 255 characters so
    long as there is a '\n' character every 60 characters). For now I have
    just fixed the memory corruption bug and left the other problems in this
    driver alone.

    Signed-off-by: Dan Carpenter
    Signed-off-by: David S. Miller

    Dan Carpenter
     
  • Signed-off-by: Heiko Carstens
    Signed-off-by: Linus Torvalds

    Heiko Carstens
     

08 Apr, 2014

20 commits

  • If the buffer needing cache invalidation for inbound DMA does start or
    end on a cache line aligned address, we need to use the non-destructive
    clean&invalidate operation. This issue was introduced by commit
    7363590d2c46 (arm64: Implement coherent DMA API based on swiotlb).

    Signed-off-by: Catalin Marinas
    Reported-by: Jon Medhurst (Tixy)

    Catalin Marinas
     
  • Pull ext3 improvements, cleanups, reiserfs fix from Jan Kara:
    "various cleanups for ext2, ext3, udf, isofs, a documentation update
    for quota, and a fix of a race in reiserfs readdir implementation"

    * 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs:
    reiserfs: fix race in readdir
    ext2: acl: remove unneeded include of linux/capability.h
    ext3: explicitly remove inode from orphan list after failed direct io
    fs/isofs/inode.c add __init to init_inodecache()
    ext3: Speedup WB_SYNC_ALL pass
    fs/quota/Kconfig: Update filesystems
    ext3: Update outdated comment before ext3_ordered_writepage()
    ext3: Update PF_MEMALLOC handling in ext3_write_inode()
    ext2/3: use prandom_u32() instead of get_random_bytes()
    ext3: remove an unneeded check in ext3_new_blocks()
    ext3: remove unneeded check in ext3_ordered_writepage()
    fs: Mark function as static in ext3/xattr_security.c
    fs: Mark function as static in ext3/dir.c
    fs: Mark function as static in ext2/xattr_security.c
    ext3: Add __init macro to init_inodecache
    ext2: Add __init macro to init_inodecache
    udf: Add __init macro to init_inodecache
    fs: udf: parse_options: blocksize check

    Linus Torvalds
     
  • Pull kbuild changes from Michal Marek:
    - cleanups in the main Makefiles and Documentation/DocBook/Makefile
    - make O=... directory is automatically created if needed
    - mrproper/distclean removes the old include/linux/version.h to make
    life easier when bisecting across the commit that moved the version.h
    file

    * 'kbuild' of git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild:
    kbuild: docbook: fix the include error when executing "make help"
    kbuild: create a build directory automatically for out-of-tree build
    kbuild: remove redundant '.*.cmd' pattern from make distclean
    kbuild: move "quote" to Kbuild.include to be consistent
    kbuild: docbook: use $(obj) and $(src) rather than specific path
    kbuild: unconditionally clobber include/linux/version.h on distclean
    kbuild: docbook: specify KERNELDOC dependency correctly
    kbuild: docbook: include cmd files more simply
    kbuild: specify build_docproc as a phony target

    Linus Torvalds
     
  • Pull ARC changes from Vineet Gupta:
    - Support for external initrd from Noam
    - Fix broken serial console in nsimosci Virtual Platform
    - Reuse of ENTRY/END assembler macros across hand asm code
    - Other minor fixes here and there

    * tag 'arc-v3.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/vgupta/arc:
    ARC: [nsimosci] Unbork console
    ARC: [nsimosci] Change .dts to use generic 8250 UART
    ARC: [SMP] General Fixes
    ARC: Remove unused DT template file
    ARC: [clockevent] simplify timer ISR
    ARC: [clockevent] can't be SoC specific
    ARC: Remove ARC_HAS_COH_RTSC
    ARC: switch to generic ENTRY/END assembler annotations
    ARC: support external initrd
    ARC: add uImage to .gitignore
    ARC: [arcfpga] Fix __initconst data const-correctness

    Linus Torvalds
     
  • Loading cursors to the LCD controller's SRAM can be corrupted when the
    configured pixel clock is relatively slow. This seems to be caused
    when we write back-to-back to the SRAM registers.

    There doesn't appear to be any status register we can read to check
    when an access has completed.

    Inserting a dummy read between the writes appears to fix the problem.

    Cc: # 3.13
    Signed-off-by: Russell King
    Signed-off-by: Dave Airlie

    Russell King
     
  • Pull Xen build fix from David Vrabel:
    "Fix arm build of drivers/xen/events/

    The merge of irq-core-for-linus branch broke it"

    * tag 'stable/for-linus-3.15-tag2' of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip:
    Xen: do hv callback accounting only on x86

    Linus Torvalds
     
  • Merge second patch-bomb from Andrew Morton:
    - the rest of MM
    - zram updates
    - zswap updates
    - exit
    - procfs
    - exec
    - wait
    - crash dump
    - lib/idr
    - rapidio
    - adfs, affs, bfs, ufs
    - cris
    - Kconfig things
    - initramfs
    - small amount of IPC material
    - percpu enhancements
    - early ioremap support
    - various other misc things

    * emailed patches from Andrew Morton : (156 commits)
    MAINTAINERS: update Intel C600 SAS driver maintainers
    fs/ufs: remove unused ufs_super_block_third pointer
    fs/ufs: remove unused ufs_super_block_second pointer
    fs/ufs: remove unused ufs_super_block_first pointer
    fs/ufs/super.c: add __init to init_inodecache()
    doc/kernel-parameters.txt: add early_ioremap_debug
    arm64: add early_ioremap support
    arm64: initialize pgprot info earlier in boot
    x86: use generic early_ioremap
    mm: create generic early_ioremap() support
    x86/mm: sparse warning fix for early_memremap
    lglock: map to spinlock when !CONFIG_SMP
    percpu: add preemption checks to __this_cpu ops
    vmstat: use raw_cpu_ops to avoid false positives on preemption checks
    slub: use raw_cpu_inc for incrementing statistics
    net: replace __this_cpu_inc in route.c with raw_cpu_inc
    modules: use raw_cpu_write for initialization of per cpu refcount.
    mm: use raw_cpu ops for determining current NUMA node
    percpu: add raw_cpu_ops
    slub: fix leak of 'name' in sysfs_slab_add
    ...

    Linus Torvalds
     
  • Signed-off-by: Lukasz Dorau
    Signed-off-by: Dave Jiang
    Signed-off-by: Maciej Patelczyk
    Cc: Artur Paszkiewicz
    Cc: James Bottomley
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Lukasz Dorau
     
  • Pointer 'usb3' to struct ufs_super_block_third acquired via
    ubh_get_usb_third() is never used in function
    ufs_read_cylinder_structures(). Thus remove it.

    Detected by Coverity: CID 139939.

    Signed-off-by: Christian Engelmayer
    Cc: Evgeniy Dushistov
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Christian Engelmayer
     
  • Pointer 'usb2' to struct ufs_super_block_second acquired via
    ubh_get_usb_second() is never used in function ufs_statfs(). Thus
    remove it.

    Detected by Coverity: CID 139940.

    Signed-off-by: Christian Engelmayer
    Cc: Evgeniy Dushistov
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Christian Engelmayer
     
  • Remove occurences of unused pointers to struct ufs_super_block_first
    that were acquired via ubh_get_usb_first().

    Detected by Coverity: CID 139929 - CID 139936, CID 139940.

    Signed-off-by: Christian Engelmayer
    Cc: Evgeniy Dushistov
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Christian Engelmayer
     
  • init_inodecache is only called by __init init_ufs_fs.

    Signed-off-by: Fabian Frederick
    Cc: Evgeniy Dushistov
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Fabian Frederick
     
  • Add description of early_ioremap_debug kernel parameter.

    Signed-off-by: Mark Salter
    Cc: Borislav Petkov
    Cc: Catalin Marinas
    Cc: Dave Young
    Cc: H. Peter Anvin
    Cc: Will Deacon
    Cc: Ingo Molnar
    Cc: Thomas Gleixner
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Mark Salter
     
  • Add support for early IO or memory mappings which are needed before the
    normal ioremap() is usable. This also adds fixmap support for permanent
    fixed mappings such as that used by the earlyprintk device register
    region.

    Signed-off-by: Mark Salter
    Acked-by: Catalin Marinas
    Cc: Borislav Petkov
    Cc: Dave Young
    Cc: H. Peter Anvin
    Cc: Will Deacon
    Cc: Ingo Molnar
    Cc: Thomas Gleixner
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Mark Salter
     
  • Presently, paging_init() calls init_mem_pgprot() to initialize pgprot
    values used by macros such as PAGE_KERNEL, PAGE_KERNEL_EXEC, etc.

    The new fixmap and early_ioremap support also needs to use these macros
    before paging_init() is called. This patch moves the init_mem_pgprot()
    call out of paging_init() and into setup_arch() so that pgprot_default
    gets initialized in time for fixmap and early_ioremap.

    Signed-off-by: Mark Salter
    Acked-by: Catalin Marinas
    Cc: Will Deacon
    Cc: Borislav Petkov
    Cc: Dave Young
    Cc: H. Peter Anvin
    Cc: Ingo Molnar
    Cc: Thomas Gleixner
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Mark Salter
     
  • Move x86 over to the generic early ioremap implementation.

    Signed-off-by: Mark Salter
    Acked-by: H. Peter Anvin
    Cc: Borislav Petkov
    Cc: Catalin Marinas
    Cc: Dave Young
    Cc: Will Deacon
    Cc: Ingo Molnar
    Cc: Thomas Gleixner
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Mark Salter
     
  • This patch creates a generic implementation of early_ioremap() support
    based on the existing x86 implementation. early_ioremp() is useful for
    early boot code which needs to temporarily map I/O or memory regions
    before normal mapping functions such as ioremap() are available.

    Some architectures have optional MMU. In the no-MMU case, the remap
    functions simply return the passed in physical address and the unmap
    functions do nothing.

    Signed-off-by: Mark Salter
    Acked-by: Catalin Marinas
    Acked-by: H. Peter Anvin
    Cc: Borislav Petkov
    Cc: Dave Young
    Cc: Will Deacon
    Cc: Ingo Molnar
    Cc: Thomas Gleixner
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Mark Salter
     
  • This patch series takes the common bits from the x86 early ioremap
    implementation and creates a generic implementation which may be used by
    other architectures. The early ioremap interfaces are intended for
    situations where boot code needs to make temporary virtual mappings
    before the normal ioremap interfaces are available. Typically, this
    means before paging_init() has run.

    This patch (of 6):

    There's a lot of sparse warnings for code like below: void *a =
    early_memremap(phys_addr, size);

    early_memremap intend to map kernel memory with ioremap facility, the
    return pointer should be a kernel ram pointer instead of iomem one.

    For making the function clearer and supressing sparse warnings this patch
    do below two things:
    1. cast to (__force void *) for the return value of early_memremap
    2. add early_memunmap function and pass (__force void __iomem *) to iounmap

    From Boris:
    "Ingo told me yesterday, it makes sense too. I'd guess we can try it.
    FWIW, all callers of early_memremap use the memory they get remapped
    as normal memory so we should be safe"

    Signed-off-by: Dave Young
    Signed-off-by: Mark Salter
    Acked-by: H. Peter Anvin
    Cc: Borislav Petkov
    Cc: Catalin Marinas
    Cc: Will Deacon
    Cc: Ingo Molnar
    Cc: Thomas Gleixner
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Dave Young
     
  • When the system has only one CPU, lglock is effectively a spinlock; map
    it directly to spinlock to eliminate the indirection and duplicate code.

    In addition to removing overhead, this drops 1.6k of code with a
    defconfig modified to have !CONFIG_SMP, and 1.1k with a minimal config.

    Signed-off-by: Josh Triplett
    Cc: Rusty Russell
    Cc: Michal Marek
    Cc: Thomas Gleixner
    Cc: David Howells
    Cc: "H. Peter Anvin"
    Cc: Nick Piggin
    Cc: Peter Zijlstra
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Josh Triplett
     
  • We define a check function in order to avoid trouble with the include
    files. Then the higher level __this_cpu macros are modified to invoke
    the preemption check.

    [akpm@linux-foundation.org: coding-style fixes]
    Signed-off-by: Christoph Lameter
    Acked-by: Ingo Molnar
    Cc: Tejun Heo
    Tested-by: Grygorii Strashko
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Christoph Lameter