29 Oct, 2012

1 commit


27 Oct, 2012

15 commits

  • Pull networking fixes from David Miller:
    "This is what we usually expect at this stage of the game, lots of
    little things, mostly in drivers. With the occasional 'oops didn't
    mean to do that' kind of regressions in the core code."

    1) Uninitialized data in __ip_vs_get_timeouts(), from Arnd Bergmann

    2) Reject invalid ACK sequences in Fast Open sockets, from Jerry Chu.

    3) Lost error code on return from _rtl_usb_receive(), from Christian
    Lamparter.

    4) Fix reset resume on USB rt2x00, from Stanislaw Gruszka.

    5) Release resources on error in pch_gbe driver, from Veaceslav Falico.

    6) Default hop limit not set correctly in ip6_template_metrics[], fix
    from Li RongQing.

    7) Gianfar PTP code requests wrong kind of resource during probe, fix
    from Wei Yang.

    8) Fix VHOST net driver on big-endian, from Michael S Tsirkin.

    9) Mallenox driver bug fixes from Jack Morgenstein, Or Gerlitz, Moni
    Shoua, Dotan Barak, and Uri Habusha.

    10) usbnet leaks memory on TX path, fix from Hemant Kumar.

    11) Use socket state test, rather than presence of FIN bit packet, to
    determine FIONREAD/SIOCINQ value. Fix from Eric Dumazet.

    12) Fix cxgb4 build failure, from Vipul Pandya.

    13) Provide a SYN_DATA_ACKED state to complement SYN_FASTOPEN in socket
    info dumps. From Yuchung Cheng.

    14) Fix leak of security path in kfree_skb_partial(). Fix from Eric
    Dumazet.

    15) Handle RX FIFO overflows more resiliently in pch_gbe driver, from
    Veaceslav Falico.

    16) Fix MAINTAINERS file pattern for networking drivers, from Jean
    Delvare.

    17) Add iPhone5 IDs to IPHETH driver, from Jay Purohit.

    18) VLAN device type change restriction is too strict, and should not
    trigger for the automatically generated vlan0 device. Fix from Jiri
    Pirko.

    19) Make PMTU/redirect flushing work properly again in ipv4, from
    Steffen Klassert.

    20) Fix memory corruptions by using kfree_rcu() in netlink_release().
    From Eric Dumazet.

    21) More qmi_wwan device IDs, from Bjørn Mork.

    22) Fix unintentional change of SNAT/DNAT hooks in generic NAT
    infrastructure, from Elison Niven.

    23) Fix 3.6.x regression in xt_TEE netfilter module, from Eric Dumazet.

    * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (57 commits)
    tilegx: fix some issues in the SW TSO support
    qmi_wwan/cdc_ether: move Novatel 551 and E362 to qmi_wwan
    net: usb: Fix memory leak on Tx data path
    net/mlx4_core: Unmap UAR also in the case of error flow
    net/mlx4_en: Don't use vlan tag value as an indication for vlan presence
    net/mlx4_en: Fix double-release-range in tx-rings
    bas_gigaset: fix pre_reset handling
    vhost: fix mergeable bufs on BE hosts
    gianfar_ptp: use iomem, not ioports resource tree in probe
    ipv6: Set default hoplimit as zero.
    NET_VENDOR_TI: make available for am33xx as well
    pch_gbe: fix error handling in pch_gbe_up()
    b43: Fix oops on unload when firmware not found
    mwifiex: clean up scan state on error
    mwifiex: return -EBUSY if specific scan request cannot be honored
    brcmfmac: fix potential NULL dereference
    Revert "ath9k_hw: Updated AR9003 tx gain table for 5GHz"
    ath9k_htc: Add PID/VID for a Ubiquiti WiFiStation
    rt2x00: usb: fix reset resume
    rtlwifi: pass rx setup error code to caller
    ...

    Linus Torvalds
     
  • Pull slave-dmaengine fixes from Vinod Koul:
    "Three fixes for slave dmanegine.

    Two are for typo omissions in sifr dmaengine driver and the last one
    is for the imx driver fixing a missing unlock"

    * 'fixes' of git://git.infradead.org/users/vkoul/slave-dma:
    dmaengine: sirf: fix a typo in moving running dma_desc to active queue
    dmaengine: sirf: fix a typo in dma_prep_interleaved
    dmaengine: imx-dma: fix missing unlock on error in imxdma_xfer_desc()

    Linus Torvalds
     
  • Pull power management and ACPI fixes from Rafael J Wysocki:

    - Fix for a memory leak in acpi_bind_one() from Jesper Juhl.

    - Fix for an error code path memory leak in pm_genpd_attach_cpuidle()
    from Jonghwan Choi.

    - Fix for smp_processor_id() usage in preemptible code in powernow-k8
    from Andreas Herrmann.

    - Fix for a suspend-related memory leak in cpufreq stats from Xiaobing
    Tu.

    - Freezer fix for failure to clear PF_NOFREEZE along with PF_KTHREAD in
    flush_old_exec() from Oleg Nesterov.

    - acpi_processor_notify() fix from Alan Cox.

    * tag 'pm+acpi-for-3.7-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:
    ACPI: missing break
    freezer: exec should clear PF_NOFREEZE along with PF_KTHREAD
    Fix memory leak in cpufreq stats.
    cpufreq / powernow-k8: Remove usage of smp_processor_id() in preemptible code
    PM / Domains: Fix memory leak on error path in pm_genpd_attach_cpuidle
    ACPI: Fix memory leak in acpi_bind_one()

    Linus Torvalds
     
  • Pull infiniband fixes from Roland Dreier:
    "Small batch of fixes for 3.7:
    - Fix crash in error path in cxgb4
    - Fix build error on 32 bits in mlx4
    - Fix SR-IOV bugs in mlx4"

    * tag 'rdma-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/roland/infiniband:
    mlx4_core: Perform correct resource cleanup if mlx4_QUERY_ADAPTER() fails
    mlx4_core: Remove annoying debug messages from SR-IOV flow
    RDMA/cxgb4: Don't free chunk that we have failed to allocate
    IB/mlx4: Synchronize cleanup of MCGs in MCG paravirtualization
    IB/mlx4: Fix QP1 P_Key processing in the Primary Physical Function (PPF)
    IB/mlx4: Fix build error on platforms where UL is not 64 bits

    Linus Torvalds
     
  • Pull USB fixes from Greg Kroah-Hartman:
    "Here are a bunch of USB fixes for the 3.7-rc tree.

    There's a lot of small USB serial driver fixes, and one larger one
    (the mos7840 driver changes are mostly just moving code around to fix
    problems.) Thanks to Johan Hovold for finding the problems and fixing
    them all up.

    Other than those, there is the usual new device ids, xhci bugfixes,
    and gadget driver fixes, nothing out of the ordinary.

    Signed-off-by: Greg Kroah-Hartman "

    * tag 'usb-3.7-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb: (49 commits)
    xhci: trivial: Remove assigned but unused ep_ctx.
    xhci: trivial: Remove assigned but unused slot_ctx.
    xhci: Fix missing break in xhci_evaluate_context_result.
    xhci: Fix potential NULL ptr deref in command cancellation.
    ehci: Add yet-another Lucid nohandoff pci quirk
    ehci: fix Lucid nohandoff pci quirk to be more generic with BIOS versions
    USB: mos7840: fix port_probe flow
    USB: mos7840: fix port-data memory leak
    USB: mos7840: remove invalid disconnect handling
    USB: mos7840: remove NULL-urb submission
    USB: qcserial: fix interface-data memory leak in error path
    USB: option: fix interface-data memory leak in error path
    USB: ipw: fix interface-data memory leak in error path
    USB: mos7840: fix port-device leak in error path
    USB: mos7840: fix urb leak at release
    USB: sierra: fix port-data memory leak
    USB: sierra: fix memory leak in probe error path
    USB: sierra: fix memory leak in attach error path
    USB: usb-wwan: fix multiple memory leaks in error paths
    USB: keyspan: fix NULL-pointer dereferences and memory leaks
    ...

    Linus Torvalds
     
  • Pull serial fix from Greg Kroah-Hartman:
    "Here is one patch, a revert of a omap serial driver patch that was
    causing problems, for your 3.7-rc tree.

    Signed-off-by: Greg Kroah-Hartman "

    * tag 'tty-3.7-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty:
    Revert "serial: omap: fix software flow control"

    Linus Torvalds
     
  • Pull staging driver fixes from Greg Kroah-Hartman:
    "Here are some staging driver fixes for your 3.7-rc tree.

    Nothing major here, a number of iio driver fixups that were causing
    problems, some comedi driver bugfixes, and a bunch of tidspbridge
    warning squashing and other regressions fixed from the 3.6 release.

    All have been in the linux-next releases for a bit.

    Signed-off-by: Greg Kroah-Hartman "

    * tag 'staging-3.7-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging: (32 commits)
    staging: tidspbridge: delete unused mmu functions
    staging: tidspbridge: ioremap physical address of the stack segment in shm
    staging: tidspbridge: ioremap dsp sync addr
    staging: tidspbridge: change type to __iomem for per and core addresses
    staging: tidspbridge: drop const from custom mmu implementation
    staging: tidspbridge: request the right irq for mmu
    staging: ipack: add missing include (implicit declaration of function 'kfree')
    staging: ramster: depends on NET
    staging: omapdrm: fix allocation size for page addresses array
    staging: zram: Fix handling of incompressible pages
    Staging: android: binder: Allow using highmem for binder buffers
    Staging: android: binder: Fix memory leak on thread/process exit
    staging: comedi: ni_labpc: fix possible NULL deref during detach
    staging: comedi: das08: fix possible NULL deref during detach
    staging: comedi: amplc_pc263: fix possible NULL deref during detach
    staging: comedi: amplc_pc236: fix possible NULL deref during detach
    staging: comedi: amplc_pc236: fix invalid register access during detach
    staging: comedi: amplc_dio200: fix possible NULL deref during detach
    staging: comedi: 8255_pci: fix possible NULL deref during detach
    staging: comedi: ni_daq_700: fix dio subdevice regression
    ...

    Linus Torvalds
     
  • Pull driver core fixes from Greg Kroah-Hartman:
    "Here are a number of firmware core fixes for 3.7, and some other minor
    fixes. And some documentation updates thrown in for good measure.

    All have been in the linux-next tree for a while.

    Signed-off-by: Greg Kroah-Hartman "

    * tag 'driver-core-3.7-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core:
    Documentation:Chinese translation of Documentation/arm64/memory.txt
    Documentation:Chinese translation of Documentation/arm64/booting.txt
    Documentation:Chinese translation of Documentation/IRQ.txt
    firmware loader: document kernel direct loading
    sysfs: sysfs_pathname/sysfs_add_one: Use strlcat() instead of strcat()
    dynamic_debug: Remove unnecessary __used
    firmware loader: sync firmware cache by async_synchronize_full_domain
    firmware loader: let direct loading back on 'firmware_buf'
    firmware loader: fix one reqeust_firmware race
    firmware loader: cancel uncache work before caching firmware

    Linus Torvalds
     
  • Pull char/misc driver fixes from Greg Kroah-Hartman:
    "Here are some driver fixes for 3.7. They include extcon driver fixes,
    a hyper-v bugfix, and two other minor driver fixes.

    All of these have been in the linux-next releases for a while.

    Signed-off-by: Greg Kroah-Hartman "

    * tag 'char-misc-3.7-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc:
    sonypi: suspend/resume callbacks should be conditionally compiled on CONFIG_PM_SLEEP
    Drivers: hv: Cleanup error handling in vmbus_open()
    extcon : register for cable interest by cable name
    extcon: trivial: kfree missed from remove path
    extcon: driver model release call not needed
    extcon: MAX77693: Add platform data for MUIC device to initialize registers
    extcon: max77693: Use max77693_update_reg for rmw operations
    extcon: Fix kerneldoc for extcon_set_cable_state and extcon_set_cable_state_
    extcon: adc-jack: Add missing MODULE_LICENSE
    extcon: adc-jack: Fix checking return value of request_any_context_irq
    extcon: Fix return value in extcon_register_interest()
    extcon: unregister compat link on cleanup
    extcon: Unregister compat class at module unload to fix oops
    extcon: optimising the check_mutually_exclusive function
    extcon: standard cable names definition and declaration changed
    extcon-max8997: remove usage of ret in max8997_muic_handle_charger_type_detach
    extcon: Remove duplicate inclusion of extcon.h header file

    Linus Torvalds
     
  • In commit 800179c9b8a1 ("This adds symlink and hardlink restrictions to
    the Linux VFS"), the new link protections were enabled by default, in
    the hope that no actual application would care, despite it being
    technically against legacy UNIX (and documented POSIX) behavior.

    However, it does turn out to break some applications. It's rare, and
    it's unfortunate, but it's unacceptable to break existing systems, so
    we'll have to default to legacy behavior.

    In particular, it has broken the way AFD distributes files, see

    http://www.dwd.de/AFD/

    along with some legacy scripts.

    Distributions can end up setting this at initrd time or in system
    scripts: if you have security problems due to link attacks during your
    early boot sequence, you have bigger problems than some kernel sysctl
    setting. Do:

    echo 1 > /proc/sys/fs/protected_symlinks
    echo 1 > /proc/sys/fs/protected_hardlinks

    to re-enable the link protections.

    Alternatively, we may at some point introduce a kernel config option
    that sets these kinds of "more secure but not traditional" behavioural
    options automatically.

    Reported-by: Nick Bowler
    Reported-by: Holger Kiehl
    Cc: Kees Cook
    Cc: Ingo Molnar
    Cc: Andrew Morton
    Cc: Al Viro
    Cc: Alan Cox
    Cc: Theodore Ts'o
    Cc: stable@kernel.org # v3.6
    Signed-off-by: Linus Torvalds

    Linus Torvalds
     
  • Pull sound fixes from Takashi Iwai:
    "Slightly a high amount of commits come from Adrian Knoth's HDSPM
    driver fixes. Other than that, all small trival fixes or quirks that
    are pretty driver-specific."

    * tag 'sound-3.7' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound:
    ASoC: wm8994: Only enable extra BCLK cycles when required
    ALSA: als3000: check for the kzalloc return value
    ALSA: sound/isa/opti9xx/miro.c: eliminate possible double free
    ALSA: hda - Fix silent headphone output from Toshiba P200
    ALSA: hdspm - Fix coding style in CTL_ELEM macros
    ALSA: hdspm - Fix typo in kcontrol element on RME MADI cards
    ALSA: hdspm - Fix sync_in detection on AES/AES32
    ALSA: hdspm - Fix sync_in reporting on RME MADI cards
    ALSA: hdspm - Also report autosync_sample_rate on MADI and MADIface
    ALSA: hdspm - Fix reported autosync_sample_rate
    ALSA: hdspm - Fix sync check reporting on all RME HDSPM cards
    ALSA: hdspm - Report external rate in slave mode on PCI MADI
    ALSA: hdspm - Allow DDS/Varispeed to be set from userspace
    ALSA: hda - add dock support for Thinkpad T430
    ASoC: ux500_msp_i2s: Fix devm_* and return code merge error
    ASoC: Ux500: Dispose of device nodes correctly

    Linus Torvalds
     
  • Pull DMA-mapping revert from Marek Szyprowski:
    "Due to my mistake, my previous pull request (merged as commit
    cff7b8ba60e3: "Merge branch 'fixes_for_linus' ..") contained a patch
    which is aimed for v3.8 and lacks its dependences. This pull request
    reverts it and fixes build break of ARM architecture."

    * 'fixes_for_linus' of git://git.linaro.org/people/mszyprowski/linux-dma-mapping:
    Revert "ARM: dma-mapping: support debug_dma_mapping_error"

    Linus Torvalds
     
  • Pull x86 fixes from Ingo Molnar:
    "This fixes a couple of nasty page table initialization bugs which were
    causing kdump regressions. A clean rearchitecturing of the code is in
    the works - meanwhile these are reverts that restore the
    best-known-working state of the kernel.

    There's also EFI fixes and other small fixes."

    * 'x86-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
    x86, mm: Undo incorrect revert in arch/x86/mm/init.c
    x86: efi: Turn off efi_enabled after setup on mixed fw/kernel
    x86, mm: Find_early_table_space based on ranges that are actually being mapped
    x86, mm: Use memblock memory loop instead of e820_RAM
    x86, mm: Trim memory in memblock to be page aligned
    x86/irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt
    x86/efi: Fix oops caused by incorrect set_memory_uc() usage
    x86-64: Fix page table accounting
    Revert "x86/mm: Fix the size calculation of mapping tables"
    MAINTAINERS: Add EFI git repository location

    Linus Torvalds
     
  • Pull perf fixes from Ingo Molnar:
    "Most of the kernel diffstat relates to a group of Intel P6 and KNC
    (Xeon-Phi Knights Corner) PMU driver fixes, neither of which is in
    heavy use, so we took the fixes.

    The rest is diverse smallish fixes to the tooling and kernel side."

    * 'perf-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
    perf/x86: Remove unused variable in nhmex_rbox_alter_er()
    perf/x86: Enable overflow on Intel KNC with a custom knc_pmu_handle_irq()
    perf/x86: Remove cpuc->enable check on Intl KNC event enable/disable
    perf/x86: Make Intel KNC use full 40-bit width of counters
    perf/x86/uncore: Handle pci_read_config_dword() errors
    perf/x86: Remove P6 cpuc->enabled check
    perf/x86: Update/fix generic events on P6 PMU
    perf/x86: Fix P6 FP_ASSIST event constraint
    perf, cpu hotplug: Use cached value of smp_processor_id()
    perf, cpu hotplug: Run CPU_STARTING notifiers with irqs disabled
    x86/perf: Fix virtualization sanity check
    perf test: Fix exclude_guest parse events tests
    perf tools: do not flush maps on COMM for perf report
    perf help: Fix --help for builtins
    perf trace: Check if sample raw_data field is set
    perf trace: Validate syscall id before growing syscall table

    Linus Torvalds
     
  • Pull btrfs fixes from Chris Mason:
    "This has our series of fixes for the next rc. The biggest batch is
    from Jan Schmidt, fixing up some problems in our subvolume quota code
    and fixing btrfs send/receive to work with the new extended inode
    refs."

    * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs:
    Btrfs: do not bug when we fail to commit the transaction
    Btrfs: fix memory leak when cloning root's node
    Btrfs: Use btrfs_update_inode_fallback when creating a snapshot
    Btrfs: Send: preserve ownership (uid and gid) also for symlinks.
    Btrfs: fix deadlock caused by the nested chunk allocation
    btrfs: Return EINVAL when length to trim is less than FSB
    Btrfs: fix memory leak in btrfs_quota_enable()
    Btrfs: send correct rdev and mode in btrfs-send
    Btrfs: extended inode refs support for send mechanism
    Btrfs: Fix wrong error handling code
    Fix a sign bug causing invalid memory access in the ino_paths ioctl.
    Btrfs: comment for loop in tree_mod_log_insert_move
    Btrfs: fix extent buffer reference for tree mod log roots
    Btrfs: determine level of old roots
    Btrfs: tree mod log's old roots could still be part of the tree
    Btrfs: fix a tree mod logging issue for root replacement operations
    Btrfs: don't put removals from push_node_left into tree mod log twice

    Linus Torvalds
     

26 Oct, 2012

24 commits

  • …wireless into for-davem

    John W. Linville
     
  • Fix spelling typo in debug messages within drivers/isdn.

    Signed-off-by: Masanari Iida
    Signed-off-by: Jiri Kosina

    Masanari Iida
     
  • …g/efi into x86/urgent

    Pull EFI fixes from Matt Fleming:

    "Fix oops with EFI variables on mixed 32/64-bit firmware/kernels and
    document EFI git repository location on kernel.org."

    Conflicts:
    arch/x86/include/asm/efi.h

    Signed-off-by: Ingo Molnar <mingo@kernel.org>

    Ingo Molnar
     
  • This change correctly computes the header length and data length in
    the fragments to avoid a bug where we would end up with extremely
    slow performance. Also adopt use of skb_frag_size() accessor.

    Signed-off-by: Chris Metcalf
    Cc: stable@vger.kernel.org [v3.6]
    Signed-off-by: David S. Miller

    Chris Metcalf
     
  • These devices provide QMI and ethernet functionality via a standard CDC
    ethernet descriptor. But when driven by cdc_ether, the QMI
    functionality is unavailable because only cdc_ether can claim the USB
    interface. Thus blacklist the devices in cdc_ether and add their IDs to
    qmi_wwan, which enables both QMI and ethernet simultaneously.

    Signed-off-by: Dan Williams
    Cc: stable@vger.kernel.org
    Acked-by: Greg Kroah-Hartman
    Acked-by: Bjørn Mork
    Signed-off-by: David S. Miller

    Dan Williams
     
  • Driver anchors the tx urbs and defers the urb submission if
    a transmit request comes when the interface is suspended.
    Anchoring urb increments the urb reference count. These
    deferred urbs are later accessed by calling usb_get_from_anchor()
    for submission during interface resume. usb_get_from_anchor()
    unanchors the urb but urb reference count remains same.
    This causes the urb reference count to remain non-zero
    after usb_free_urb() gets called and urb never gets freed.
    Hence call usb_put_urb() after anchoring the urb to properly
    balance the reference count for these deferred urbs. Also,
    unanchor these deferred urbs during disconnect, to free them
    up.

    Signed-off-by: Hemant Kumar
    Acked-by: Oliver Neukum
    Signed-off-by: David S. Miller

    Hemant Kumar
     
  • If a failure takes place during the EQ creation, we need to unmap the
    UAR memory block too.

    Signed-off-by: Dotan Barak
    Signed-off-by: Uri Habusha
    Signed-off-by: Or Gerlitz
    Signed-off-by: David S. Miller

    Dotan Barak
     
  • The vlan tag can be zero. This is why it can't serve as an indication
    that packet requires VLAN header in the TX flow.

    Signed-off-by: Moni Shoua
    Signed-off-by: Or Gerlitz
    Signed-off-by: David S. Miller

    Moni Shoua
     
  • The QP range is reserved as a single block. However, when freeing the
    en resources, the tx-ring QPs are released both in mlx4_en_destroy_tx_ring
    (one at a time) and in mlx4_en_free_resources (as a block release).

    Fix by eliminating the one-at-a-time release in mlx4_en_destroy_tx_ring.

    Signed-off-by: Jack Morgenstein
    Signed-off-by: Or Gerlitz
    Signed-off-by: David S. Miller

    Jack Morgenstein
     
  • The delayed work function int_in_work() may call usb_reset_device()
    and thus, indirectly, the driver's pre_reset method. Trying to
    cancel the work synchronously in that situation would deadlock.
    Fix by avoiding cancel_work_sync() in the pre_reset method.

    If the reset was NOT initiated by int_in_work() this might cause
    int_in_work() to run after the post_reset method, with urb_int_in
    already resubmitted, so handle that case gracefully.

    Signed-off-by: Tilman Schmidt
    Signed-off-by: David S. Miller

    Tilman Schmidt
     
  • This reverts commit 871ae57adc5ed092c1341f411514d0e8482e2611, which is
    scheduled for v3.8 and accidently got into v3.7-rc series.

    Signed-off-by: Marek Szyprowski

    Marek Szyprowski
     
  • Pull drm radeon fixes from Dave Airlie:
    "Just radeon fixes in this one:
    - some new PCI IDs
    - ATPX regression fix
    - async VM regression fixes
    - some module options fixes"

    * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux:
    drm/radeon: fix ATPX regression in acpi rework
    drm/radeon: fix ATPX function documentation
    drm/radeon: move the retry to gem_object_create
    drm/radeon: move size limits to gem_object_create.
    drm/radeon: use vzalloc for gart pages
    drm/radeon: fix and simplify pot argument checks v3
    drm/radeon: fix header size estimation in VM code
    drm/radeon: remove set_page check from VM code
    drm/radeon: fix si_set_page v2
    drm/radeon: fix cayman_vm_set_page v2
    drm/radeon: fix PFP sync in vm_flush
    drm/radeon: add error output if VM CS fails on cayman
    drm/radeon: give each backlight a unique id
    drm/radeon: fix sparse warning
    drm/radeon: add some new SI PCI ids

    Linus Torvalds
     
  • Pull NFS bugfixes from Trond Myklebust:

    - Fix the NFSv2/v3 kernel statd protocol, which broke due to net
    namespace related changes.

    - Fix a number of races in the SUNRPC TCP disconnect/reconnect code.

    * tag 'nfs-for-3.7-3' of git://git.linux-nfs.org/projects/trondmy/linux-nfs:
    LOCKD: Clear ln->nsm_clnt only when ln->nsm_users is zero
    LOCKD: fix races in nsm_client_get
    SUNRPC: Get rid of the xs_error_report socket callback
    SUNRPC: Prevent races in xs_abort_connection()
    Revert "SUNRPC: Ensure we close the socket on EPIPE errors too..."
    SUNRPC: Clear the connect flag when socket state is TCP_CLOSE_WAIT

    Linus Torvalds
     
  • Alex writes:
    "Fixes pull request for radeon. The main things here are
    fixing a ATPX regression from the acpi rework, fixing some
    fallout from the async VM work, and fixing some module options
    that were broken in certain cases. Other than that, mainly
    just bug fixes."

    * 'drm-fixes-3.7' of git://people.freedesktop.org/~agd5f/linux:
    drm/radeon: fix ATPX regression in acpi rework
    drm/radeon: fix ATPX function documentation
    drm/radeon: move the retry to gem_object_create
    drm/radeon: move size limits to gem_object_create.
    drm/radeon: use vzalloc for gart pages
    drm/radeon: fix and simplify pot argument checks v3
    drm/radeon: fix header size estimation in VM code
    drm/radeon: remove set_page check from VM code
    drm/radeon: fix si_set_page v2
    drm/radeon: fix cayman_vm_set_page v2
    drm/radeon: fix PFP sync in vm_flush
    drm/radeon: add error output if VM CS fails on cayman
    drm/radeon: give each backlight a unique id
    drm/radeon: fix sparse warning
    drm/radeon: add some new SI PCI ids

    Dave Airlie
     
  • Merge misc fixes from Andrew Morton:
    "18 total. 15 fixes and some updates to a device_cgroup patchset which
    bring it up to date with the version which I should have merged in the
    first place."

    * emailed patches from Andrew Morton : (18 patches)
    fs/compat_ioctl.c: VIDEO_SET_SPU_PALETTE missing error check
    gen_init_cpio: avoid stack overflow when expanding
    drivers/rtc/rtc-imxdi.c: add missing spin lock initialization
    mm, numa: avoid setting zone_reclaim_mode unless a node is sufficiently distant
    pidns: limit the nesting depth of pid namespaces
    drivers/dma/dw_dmac: make driver's endianness configurable
    mm/mmu_notifier: allocate mmu_notifier in advance
    tools/testing/selftests/epoll/test_epoll.c: fix build
    UAPI: fix tools/vm/page-types.c
    mm/page_alloc.c:alloc_contig_range(): return early for err path
    rbtree: include linux/compiler.h for definition of __always_inline
    genalloc: stop crashing the system when destroying a pool
    backlight: ili9320: add missing SPI dependency
    device_cgroup: add proper checking when changing default behavior
    device_cgroup: stop using simple_strtoul()
    device_cgroup: rename deny_all to behavior
    cgroup: fix invalid rcu dereference
    mm: fix XFS oops due to dirty pages without buffers on s390

    Linus Torvalds
     
  • We handle NOTIFY_THROTTLING so don't then fall through to unsupported event.

    Signed-off-by: Alan Cox
    Signed-off-by: Rafael J. Wysocki

    Alan Cox
     
  • Decode multitouch reports from the touch sensor of the Cintiq 24HD
    touch.

    Signed-off-by: Jason Gerecke
    Signed-off-by: Dmitry Torokhov
    Signed-off-by: Linus Torvalds

    Jason Gerecke
     
  • Like our other pen-and-touch products, the Cintiq 24HD touch needs data
    to be shared between its two sensors to facilitate proximity-based palm
    rejection.

    Unlike other tablets that report sensor data through separate interfaces
    of the same USB device, the Cintiq 24HD touch has separate USB devices
    that are connected to an internal USB hub.

    This patch makes it possible to designate the USB VID/PID of the other
    device so that the two may share data. To ensure we don't accidentally
    link to a sensor from a physically separate device (if several have been
    plugged in), we limit the search to siblings (i.e., devices directly
    connected to the same hub).

    Signed-off-by: Jason Gerecke
    Signed-off-by: Dmitry Torokhov
    Signed-off-by: Linus Torvalds

    Jason Gerecke
     
  • If one includes documentation for an external tool, it should be
    correct. This is not:

    1. Overriding the input to rngd should typically be neither
    necessary nor desired. This is especially so since newer
    versions of rngd support a number of different *types* of sources.
    2. The default kernel-exported device is called /dev/hwrng not
    /dev/hwrandom nor /dev/hw_random (both of which were used in the
    past; however, kernel and udev seem to have converged on
    /dev/hwrng.)

    Overall it is better if the documentation for rngd is kept with rngd
    rather than in a kernel Makefile.

    Signed-off-by: H. Peter Anvin
    Cc: David Howells
    Cc: Jeff Garzik
    Signed-off-by: Linus Torvalds

    H. Peter Anvin
     
  • Pull ARM fixes from Russell King:
    "A random collection of various fixes, mainly from Arnd and a few other
    people. Not thing really stands out here."

    * 'fixes' of git://git.linaro.org/people/rmk/linux-arm:
    ARM: drop experimental status for hotplug and Thumb2
    ARM: 7560/1: SMP_TWD: use DIV_ROUND_CLOSEST() for periodic mode
    ARM: 7559/1: smp: switch away from the idmap before updating init_mm.mm_count
    ARM: 7556/1: perf: fix updated event period in response to PERF_EVENT_IOC_PERIOD
    ARM: 7555/1: kexec: fix segment memory addresses check
    ARM: warnings in arch/arm/include/asm/uaccess.h
    ARM: binfmt_flat: unused variable 'persistent'
    ARM: be really quiet when building with 'make -s'
    ARM: pass -marm to gcc by default for both C and assembler
    ARM: Xen: fix initial build problems
    ARM: export default read_current_timer
    ARM: Fix another build warning in arch/arm/mm/alignment.c
    ARM: export set_irq_flags
    ARM: kprobes: make more tests conditional

    Linus Torvalds
     
  • Pull CMA and DMA-mapping fixes from Marek Szyprowski:
    "This consists mainly of a set of one-liner fixes and cleanups for a
    few minor issues identified in both Contiguous Memory Allocator code
    and ARM DMA-mapping subsystem."

    * 'fixes_for_linus' of git://git.linaro.org/people/mszyprowski/linux-dma-mapping:
    ARM: mm: Remove unused arm_vmregion priv field
    ARM: dma-mapping: fix build warning in __dma_alloc()
    ARM: dma-mapping: support debug_dma_mapping_error
    mm: cma: alloc_contig_range: return early for err path
    drivers: cma: Fix wrong CMA selected region size default value
    drivers: dma-coherent: Fix typo in dma_mmap_from_coherent documentation
    drivers: dma-contiguous: Don't redefine SZ_1M

    Linus Torvalds
     
  • Commit

    844ab6f9 x86, mm: Find_early_table_space based on ranges that are actually being mapped

    added back some lines back wrongly that has been removed in commit

    7b16bbf97 Revert "x86/mm: Fix the size calculation of mapping tables"

    remove them again.

    Signed-off-by: Yinghai Lu
    Link: http://lkml.kernel.org/r/CAE9FiQW_vuaYQbmagVnxT2DGsYc=9tNeAbdBq53sYkitPOwxSQ@mail.gmail.com
    Acked-by: Jacob Shin
    Signed-off-by: H. Peter Anvin

    Yinghai Lu
     
  • The compat ioctl for VIDEO_SET_SPU_PALETTE was missing an error check
    while converting ioctl arguments. This could lead to leaking kernel
    stack contents into userspace.

    Patch extracted from existing fix in grsecurity.

    Signed-off-by: Kees Cook
    Cc: David Miller
    Cc: Brad Spengler
    Cc: PaX Team
    Cc:
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Kees Cook
     
  • Fix possible overflow of the buffer used for expanding environment
    variables when building file list.

    In the extremely unlikely case of an attacker having control over the
    environment variables visible to gen_init_cpio, control over the
    contents of the file gen_init_cpio parses, and gen_init_cpio was built
    without compiler hardening, the attacker can gain arbitrary execution
    control via a stack buffer overflow.

    $ cat usr/crash.list
    file foo ${BIG}${BIG}${BIG}${BIG}${BIG}${BIG} 0755 0 0
    $ BIG=$(perl -e 'print "A" x 4096;') ./usr/gen_init_cpio usr/crash.list
    *** buffer overflow detected ***: ./usr/gen_init_cpio terminated

    This also replaces the space-indenting with tabs.

    Patch based on existing fix extracted from grsecurity.

    Signed-off-by: Kees Cook
    Cc: Michal Marek
    Cc: Brad Spengler
    Cc: PaX Team
    Cc:
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Kees Cook