| Message ID | 20190110070839.6892-1-juergh@canonical.com |
|---|---|
| State | New |
| Headers | show |
| Series | [SRU,Xenial,PULL] Xenial update: 4.4.167 upstream stable release (LP: #1811077) | expand |
On 1/10/19 8:08 AM, Juerg Haefliger wrote: > SRU Justification > > Impact: > The upstream process for stable tree updates is quite similar > in scope to the Ubuntu SRU process, e.g., each patch has to > demonstrably fix a bug, and each patch is vetted by upstream > by originating either directly from a mainline/stable Linux tree or > a minimally backported form of that patch. The following upstream > stable patches should be included in the Ubuntu kernel: > > 4.4.167 upstream stable release > from git://git.kernel.org/ > > > Linux 4.4.167 > mac80211: ignore NullFunc frames in the duplicate detection > mac80211: fix reordering of buffered broadcast packets > mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext > mac80211: Clear beacon_int in ieee80211_do_stop > mac80211_hwsim: Timer should be initialized before device registered > kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var() > tty: serial: 8250_mtk: always resume the device in probe. > cifs: Fix separator when building path from dentry > Staging: lustre: remove two build warnings > xhci: Prevent U1/U2 link pm states if exit latency is too long > SUNRPC: Fix leak of krb5p encode pages > virtio/s390: fix race in ccw_io_helper() > virtio/s390: avoid race on vcdev->config > ALSA: pcm: Fix interval evaluation with openmin/max > ALSA: pcm: Call snd_pcm_unlink() conditionally at closing > ALSA: pcm: Fix starvation on down_write_nonblock() > ALSA: hda: Add support for AMD Stoney Ridge > ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c > USB: check usb_get_extra_descriptor for proper size > usb: appledisplay: Add 27" Apple Cinema Display > usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device > net: amd: add missing of_node_put() > iommu/vt-d: Use memunmap to free memremap > net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts > net/mlx4: Fix UBSAN warning of signed integer overflow > net/mlx4_core: Fix uninitialized variable compilation warning > net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command > qed: Fix reading wrong value in loop condition > qed: Fix PTT leak in qed_drain() > bnx2x: Assign unique DMAE channel number for FW DMAE transactions. > batman-adv: Expand merged fragment buffer for full packet > can: rcar_can: Fix erroneous registration > iommu/ipmmu-vmsa: Fix crash on early domain free > iommu/vt-d: Fix NULL pointer dereference in prq_event_thread() > usb: gadget: dummy: fix nonsensical comparisons > mm: mlock: avoid increase mm->locked_vm on mlock() when already mlock2(,MLOCK_ONFAULT) > mm: cleancache: fix corruption on missed inode invalidation > arc: [devboards] Add support of NFSv3 ACL > ARC: change defconfig defaults to ARCv2 > Btrfs: fix use-after-free when dumping free space > btrfs: Always try all copies when reading extent buffers > Input: elan_i2c - add support for ELAN0621 touchpad > Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR > Input: elan_i2c - add ELAN0620 to the ACPI table > Input: matrix_keypad - check for errors from of_get_named_gpio() > Input: xpad - quirk all PDP Xbox One gamepads > leds: leds-gpio: Fix return value check in create_gpio_led() > leds: turn off the LED and wait for completion on unregistering LED class device > leds: call led_pwm_set() in leds-pwm to enforce default LED_OFF > kgdboc: Fix warning with module build > kgdboc: Fix restrict error > scsi: csiostor: Avoid content leaks and casts > ALSA: trident: Suppress gcc string warning > scsi: scsi_devinfo: cleanly zero-pad devinfo strings > drm/ast: Fix incorrect free on ioregs > mips: fix mips_get_syscall_arg o32 check > MIPS: ralink: Fix mt7620 nd_sd pinmux > uprobes: Fix handle_swbp() vs. unregister() + register() race once more > iser: set sector for ambiguous mr status errors > kdb: use memmove instead of overlapping memcpy > staging: rts5208: fix gcc-8 logic error warning > scsi: bfa: convert to strlcpy/strlcat > drm: gma500: fix logic error > ip_tunnel: Fix name string concatenate in __ip_tunnel_create() > kernfs: Replace strncpy with memcpy > unifdef: use memcpy instead of strncpy > kobject: Replace strncpy with memcpy > disable stringop truncation warnings for now > exec: avoid gcc-8 warning for get_task_comm > Kbuild: suppress packed-not-aligned warning for default setting only > misc: mic/scif: fix copy-paste error in scif_create_remote_lookup > usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series > USB: usb-storage: Add new IDs to ums-realtek > btrfs: release metadata before running delayed refs > dmaengine: at_hdmac: fix module unloading > dmaengine: at_hdmac: fix memory leak in at_dma_xlate() > ext2: fix potential use after free > ALSA: sparc: Fix invalid snd_free_pages() at error path > ALSA: control: Fix race between adding and removing a user element > ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write > ALSA: wss: Fix invalid snd_free_pages() at error path > Btrfs: ensure path name is null terminated at btrfs_control_ioctl > xtensa: fix coprocessor context offset definitions > xtensa: enable coprocessors that are being flushed > kvm: mmu: Fix race in emulated page table writes > usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2 > s390/qeth: fix length check in SNMP processing > rapidio/rionet: do not free skb before reading its length > Revert "wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()" > media: em28xx: Fix use-after-free when disconnecting > > Compile-tested all architectures. > > Signed-off-by: Juerg Haefliger <juergh@canonical.com> > --- > > The following changes since commit 52ea66521fa32dc9f11cd3b1dffa930acf2543a7: > > Linux 4.4.166 (2019-01-09 11:15:50 +0100) > > are available in the Git repository at: > > git://git.launchpad.net/~juergh/+git/xenial-linux update-4.4.167 > > for you to fetch changes up to 42fe6a1871ecef2518b52b356f80f3f8e5c49309: > > Linux 4.4.167 (2019-01-09 12:10:55 +0100) > > ---------------------------------------------------------------- > Adam Wong (1): > Input: elan_i2c - add support for ELAN0621 touchpad > > Alexander Theissen (1): > usb: appledisplay: Add 27" Apple Cinema Display > > Alexey Brodkin (1): > arc: [devboards] Add support of NFSv3 ACL > > Andrea Parri (1): > uprobes: Fix handle_swbp() vs. unregister() + register() race once more > > Arnd Bergmann (6): > exec: avoid gcc-8 warning for get_task_comm > drm: gma500: fix logic error > scsi: bfa: convert to strlcpy/strlcat > staging: rts5208: fix gcc-8 logic error warning > kdb: use memmove instead of overlapping memcpy > usb: gadget: dummy: fix nonsensical comparisons > > Aya Levin (1): > net/mlx4: Fix UBSAN warning of signed integer overflow > > Ben Greear (1): > mac80211: Clear beacon_int in ieee80211_do_stop > > Bernd Eckstein (1): > usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2 > > Cameron Gutman (1): > Input: xpad - quirk all PDP Xbox One gamepads > > Chanho Min (1): > ALSA: pcm: Fix starvation on down_write_nonblock() > > Christian Hoff (1): > Input: matrix_keypad - check for errors from of_get_named_gpio() > > Chuck Lever (1): > SUNRPC: Fix leak of krb5p encode pages > > Denis Bolotin (2): > qed: Fix PTT leak in qed_drain() > qed: Fix reading wrong value in loop condition > > Dmitry V. Levin (1): > mips: fix mips_get_syscall_arg o32 check > > Emmanuel Grumbach (1): > mac80211: ignore NullFunc frames in the duplicate detection > > Fabrizio Castro (1): > can: rcar_can: Fix erroneous registration > > Felix Fietkau (2): > mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext > mac80211: fix reordering of buffered broadcast packets > > Filipe Manana (2): > Btrfs: ensure path name is null terminated at btrfs_control_ioctl > Btrfs: fix use-after-free when dumping free space > > Geert Uytterhoeven (1): > iommu/ipmmu-vmsa: Fix crash on early domain free > > Greg Kroah-Hartman (2): > Staging: lustre: remove two build warnings > Linux 4.4.167 > > Guenter Roeck (2): > kobject: Replace strncpy with memcpy > kernfs: Replace strncpy with memcpy > > Halil Pasic (2): > virtio/s390: avoid race on vcdev->config > virtio/s390: fix race in ccw_io_helper() > > Harry Pan (1): > usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device > > Hui Peng (1): > ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c > > Jack Morgenstein (1): > net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command > > Josef Bacik (1): > btrfs: release metadata before running delayed refs > > Julian Wiedmann (1): > s390/qeth: fix length check in SNMP processing > > Junaid Shahid (1): > kvm: mmu: Fix race in emulated page table writes > > Kai-Heng Feng (2): > USB: usb-storage: Add new IDs to ums-realtek > ALSA: hda: Add support for AMD Stoney Ridge > > Kees Cook (1): > scsi: csiostor: Avoid content leaks and casts > > Kevin Hilman (1): > ARC: change defconfig defaults to ARCv2 > > Laura Abbott (2): > kgdboc: Fix restrict error > kgdboc: Fix warning with module build > > Linus Torvalds (1): > unifdef: use memcpy instead of strncpy > > Lu Baolu (1): > iommu/vt-d: Fix NULL pointer dereference in prq_event_thread() > > Macpaul Lin (1): > kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var() > > Markus Hofstaetter (1): > leds: call led_pwm_set() in leds-pwm to enforce default LED_OFF > > Martin Wilck (1): > scsi: scsi_devinfo: cleanly zero-pad devinfo strings > > Mathias Kresin (1): > MIPS: ralink: Fix mt7620 nd_sd pinmux > > Mathias Nyman (1): > xhci: Prevent U1/U2 link pm states if exit latency is too long > > Mathias Payer (1): > USB: check usb_get_extra_descriptor for proper size > > Matthias Schwarzott (1): > media: em28xx: Fix use-after-free when disconnecting > > Max Filippov (2): > xtensa: enable coprocessors that are being flushed > xtensa: fix coprocessor context offset definitions > > Michael Niewöhner (1): > usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series > > Milo Kim (1): > leds: turn off the LED and wait for completion on unregistering LED class device > > Nikolay Borisov (1): > btrfs: Always try all copies when reading extent buffers > > Noah Westervelt (1): > Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR > > Pan Bian (3): > rapidio/rionet: do not free skb before reading its length > ext2: fix potential use after free > iommu/vt-d: Use memunmap to free memremap > > Patrick Gaskin (1): > Input: elan_i2c - add ELAN0620 to the ACPI table > > Paulo Alcantara (1): > cifs: Fix separator when building path from dentry > > Pavel Tikhomirov (1): > mm: cleancache: fix corruption on missed inode invalidation > > Peter Shih (1): > tty: serial: 8250_mtk: always resume the device in probe. > > Richard Genoud (2): > dmaengine: at_hdmac: fix memory leak in at_dma_xlate() > dmaengine: at_hdmac: fix module unloading > > Sagi Grimberg (1): > iser: set sector for ambiguous mr status errors > > Sam Bobroff (1): > drm/ast: Fix incorrect free on ioregs > > Sasha Levin (1): > Revert "wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()" > > Stephen Rothwell (1): > disable stringop truncation warnings for now > > Sudarsana Reddy Kalluru (1): > bnx2x: Assign unique DMAE channel number for FW DMAE transactions. > > Sultan Alsawaf (1): > ip_tunnel: Fix name string concatenate in __ip_tunnel_create() > > Sven Eckelmann (1): > batman-adv: Expand merged fragment buffer for full packet > > Takashi Iwai (7): > ALSA: wss: Fix invalid snd_free_pages() at error path > ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write > ALSA: control: Fix race between adding and removing a user element > ALSA: sparc: Fix invalid snd_free_pages() at error path > ALSA: trident: Suppress gcc string warning > ALSA: pcm: Call snd_pcm_unlink() conditionally at closing > ALSA: pcm: Fix interval evaluation with openmin/max > > Tariq Toukan (1): > net/mlx4_core: Fix uninitialized variable compilation warning > > Vasyl Vavrychuk (1): > mac80211_hwsim: Timer should be initialized before device registered > > Vincent Chen (1): > net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts > > Wei Yongjun (1): > leds: leds-gpio: Fix return value check in create_gpio_led() > > Xiongfeng Wang (1): > Kbuild: suppress packed-not-aligned warning for default setting only > > Yangtao Li (1): > net: amd: add missing of_node_put() > > YueHaibing (1): > misc: mic/scif: fix copy-paste error in scif_create_remote_lookup > > Makefile | 5 +- > arch/arc/Kconfig | 2 +- > arch/arc/Makefile | 2 +- > arch/arc/configs/axs101_defconfig | 2 + > arch/arc/configs/axs103_defconfig | 1 + > arch/arc/configs/axs103_smp_defconfig | 1 + > arch/arc/configs/nsim_700_defconfig | 1 + > arch/arc/configs/nsimosci_defconfig | 2 + > arch/arc/configs/nsimosci_hs_defconfig | 1 + > arch/arc/configs/nsimosci_hs_smp_defconfig | 1 + > arch/arc/configs/tb10x_defconfig | 1 + > arch/arc/configs/vdk_hs38_defconfig | 1 + > arch/arc/configs/vdk_hs38_smp_defconfig | 1 + > arch/mips/include/asm/syscall.h | 2 +- > arch/mips/ralink/mt7620.c | 2 +- > arch/x86/kvm/mmu.c | 27 +++------ > arch/xtensa/kernel/asm-offsets.c | 16 +++--- > arch/xtensa/kernel/process.c | 5 +- > drivers/dma/at_hdmac.c | 10 +++- > drivers/gpu/drm/ast/ast_main.c | 3 +- > drivers/gpu/drm/gma500/mdfld_intel_display.c | 2 +- > drivers/infiniband/ulp/iser/iser_verbs.c | 7 +-- > drivers/input/joystick/xpad.c | 16 ++---- > drivers/input/keyboard/matrix_keypad.c | 23 +++++--- > drivers/input/mouse/elan_i2c_core.c | 3 + > drivers/iommu/intel-iommu.c | 2 +- > drivers/iommu/intel-svm.c | 2 +- > drivers/iommu/ipmmu-vmsa.c | 3 + > drivers/leds/led-class.c | 5 +- > drivers/leds/leds-gpio.c | 4 +- > drivers/leds/leds-pwm.c | 1 + > drivers/media/usb/em28xx/em28xx-dvb.c | 3 +- > drivers/misc/mic/scif/scif_rma.c | 2 +- > drivers/net/can/rcar_can.c | 5 +- > drivers/net/ethernet/amd/sunlance.c | 4 +- > drivers/net/ethernet/broadcom/bnx2x/bnx2x.h | 7 +++ > drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 1 + > drivers/net/ethernet/faraday/ftmac100.c | 7 +-- > drivers/net/ethernet/mellanox/mlx4/alloc.c | 2 +- > drivers/net/ethernet/mellanox/mlx4/mlx4.h | 4 +- > drivers/net/ethernet/mellanox/mlx4/mr.c | 1 + > drivers/net/ethernet/qlogic/qed/qed_int.c | 2 + > drivers/net/ethernet/qlogic/qed/qed_main.c | 2 +- > drivers/net/rionet.c | 2 +- > drivers/net/usb/ipheth.c | 10 ++-- > drivers/net/wireless/mac80211_hwsim.c | 8 +-- > drivers/net/wireless/ti/wlcore/cmd.c | 6 -- > drivers/s390/net/qeth_core_main.c | 27 ++++----- > drivers/s390/virtio/virtio_ccw.c | 17 +++++- > drivers/scsi/bfa/bfa_fcbuild.c | 8 +-- > drivers/scsi/bfa/bfa_fcs.c | 78 ++++++++++++------------- > drivers/scsi/bfa/bfa_fcs_lport.c | 62 ++++++++------------ > drivers/scsi/bfa/bfa_ioc.c | 2 +- > drivers/scsi/bfa/bfa_svc.c | 4 +- > drivers/scsi/bfa/bfad.c | 20 +++---- > drivers/scsi/bfa/bfad_attr.c | 2 +- > drivers/scsi/bfa/bfad_bsg.c | 6 +- > drivers/scsi/csiostor/csio_lnode.c | 43 ++++++++------ > drivers/scsi/scsi_devinfo.c | 22 +++---- > drivers/staging/lustre/lustre/lmv/lmv_obd.c | 2 +- > drivers/staging/rts5208/sd.c | 6 -- > drivers/tty/serial/8250/8250_mtk.c | 16 +++--- > drivers/tty/serial/kgdboc.c | 47 ++++++++------- > drivers/usb/core/hub.c | 2 +- > drivers/usb/core/quirks.c | 7 +++ > drivers/usb/core/usb.c | 6 +- > drivers/usb/gadget/udc/dummy_hcd.c | 9 ++- > drivers/usb/host/hwa-hc.c | 2 +- > drivers/usb/host/xhci.c | 16 ++++++ > drivers/usb/misc/appledisplay.c | 1 + > drivers/usb/storage/unusual_realtek.h | 10 ++++ > fs/btrfs/disk-io.c | 10 +--- > fs/btrfs/free-space-cache.c | 2 + > fs/btrfs/super.c | 1 + > fs/btrfs/transaction.c | 6 +- > fs/cifs/dir.c | 2 +- > fs/exec.c | 7 +-- > fs/ext2/xattr.c | 2 +- > fs/kernfs/symlink.c | 2 +- > include/linux/sched.h | 7 ++- > include/linux/usb.h | 4 +- > include/sound/pcm_params.h | 4 +- > kernel/debug/kdb/kdb_support.c | 4 +- > kernel/events/uprobes.c | 12 +++- > lib/kobject.c | 2 +- > mm/truncate.c | 8 ++- > net/batman-adv/fragmentation.c | 2 +- > net/ipv4/ip_tunnel.c | 4 +- > net/mac80211/iface.c | 2 + > net/mac80211/rx.c | 1 + > net/mac80211/status.c | 2 + > net/mac80211/tx.c | 4 +- > net/sunrpc/auth_gss/auth_gss.c | 4 ++ > scripts/Makefile.extrawarn | 3 + > scripts/unifdef.c | 4 +- > sound/core/control.c | 80 +++++++++++++++----------- > sound/core/pcm_native.c | 14 +++-- > sound/isa/wss/wss_lib.c | 2 - > sound/pci/ac97/ac97_codec.c | 2 +- > sound/pci/hda/hda_intel.c | 4 ++ > sound/pci/trident/trident.c | 2 +- > sound/sparc/cs4231.c | 8 +-- > sound/usb/card.c | 5 +- > 103 files changed, 471 insertions(+), 380 deletions(-) > Applied to xenial/master-next branch. Thanks, Kleber
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: 4.4.167 upstream stable release from git://git.kernel.org/ Linux 4.4.167 mac80211: ignore NullFunc frames in the duplicate detection mac80211: fix reordering of buffered broadcast packets mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext mac80211: Clear beacon_int in ieee80211_do_stop mac80211_hwsim: Timer should be initialized before device registered kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var() tty: serial: 8250_mtk: always resume the device in probe. cifs: Fix separator when building path from dentry Staging: lustre: remove two build warnings xhci: Prevent U1/U2 link pm states if exit latency is too long SUNRPC: Fix leak of krb5p encode pages virtio/s390: fix race in ccw_io_helper() virtio/s390: avoid race on vcdev->config ALSA: pcm: Fix interval evaluation with openmin/max ALSA: pcm: Call snd_pcm_unlink() conditionally at closing ALSA: pcm: Fix starvation on down_write_nonblock() ALSA: hda: Add support for AMD Stoney Ridge ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c USB: check usb_get_extra_descriptor for proper size usb: appledisplay: Add 27" Apple Cinema Display usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device net: amd: add missing of_node_put() iommu/vt-d: Use memunmap to free memremap net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts net/mlx4: Fix UBSAN warning of signed integer overflow net/mlx4_core: Fix uninitialized variable compilation warning net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command qed: Fix reading wrong value in loop condition qed: Fix PTT leak in qed_drain() bnx2x: Assign unique DMAE channel number for FW DMAE transactions. batman-adv: Expand merged fragment buffer for full packet can: rcar_can: Fix erroneous registration iommu/ipmmu-vmsa: Fix crash on early domain free iommu/vt-d: Fix NULL pointer dereference in prq_event_thread() usb: gadget: dummy: fix nonsensical comparisons mm: mlock: avoid increase mm->locked_vm on mlock() when already mlock2(,MLOCK_ONFAULT) mm: cleancache: fix corruption on missed inode invalidation arc: [devboards] Add support of NFSv3 ACL ARC: change defconfig defaults to ARCv2 Btrfs: fix use-after-free when dumping free space btrfs: Always try all copies when reading extent buffers Input: elan_i2c - add support for ELAN0621 touchpad Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR Input: elan_i2c - add ELAN0620 to the ACPI table Input: matrix_keypad - check for errors from of_get_named_gpio() Input: xpad - quirk all PDP Xbox One gamepads leds: leds-gpio: Fix return value check in create_gpio_led() leds: turn off the LED and wait for completion on unregistering LED class device leds: call led_pwm_set() in leds-pwm to enforce default LED_OFF kgdboc: Fix warning with module build kgdboc: Fix restrict error scsi: csiostor: Avoid content leaks and casts ALSA: trident: Suppress gcc string warning scsi: scsi_devinfo: cleanly zero-pad devinfo strings drm/ast: Fix incorrect free on ioregs mips: fix mips_get_syscall_arg o32 check MIPS: ralink: Fix mt7620 nd_sd pinmux uprobes: Fix handle_swbp() vs. unregister() + register() race once more iser: set sector for ambiguous mr status errors kdb: use memmove instead of overlapping memcpy staging: rts5208: fix gcc-8 logic error warning scsi: bfa: convert to strlcpy/strlcat drm: gma500: fix logic error ip_tunnel: Fix name string concatenate in __ip_tunnel_create() kernfs: Replace strncpy with memcpy unifdef: use memcpy instead of strncpy kobject: Replace strncpy with memcpy disable stringop truncation warnings for now exec: avoid gcc-8 warning for get_task_comm Kbuild: suppress packed-not-aligned warning for default setting only misc: mic/scif: fix copy-paste error in scif_create_remote_lookup usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series USB: usb-storage: Add new IDs to ums-realtek btrfs: release metadata before running delayed refs dmaengine: at_hdmac: fix module unloading dmaengine: at_hdmac: fix memory leak in at_dma_xlate() ext2: fix potential use after free ALSA: sparc: Fix invalid snd_free_pages() at error path ALSA: control: Fix race between adding and removing a user element ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write ALSA: wss: Fix invalid snd_free_pages() at error path Btrfs: ensure path name is null terminated at btrfs_control_ioctl xtensa: fix coprocessor context offset definitions xtensa: enable coprocessors that are being flushed kvm: mmu: Fix race in emulated page table writes usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2 s390/qeth: fix length check in SNMP processing rapidio/rionet: do not free skb before reading its length Revert "wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()" media: em28xx: Fix use-after-free when disconnecting Compile-tested all architectures. Signed-off-by: Juerg Haefliger <juergh@canonical.com> --- The following changes since commit 52ea66521fa32dc9f11cd3b1dffa930acf2543a7: Linux 4.4.166 (2019-01-09 11:15:50 +0100) are available in the Git repository at: git://git.launchpad.net/~juergh/+git/xenial-linux update-4.4.167 for you to fetch changes up to 42fe6a1871ecef2518b52b356f80f3f8e5c49309: Linux 4.4.167 (2019-01-09 12:10:55 +0100) ---------------------------------------------------------------- Adam Wong (1): Input: elan_i2c - add support for ELAN0621 touchpad Alexander Theissen (1): usb: appledisplay: Add 27" Apple Cinema Display Alexey Brodkin (1): arc: [devboards] Add support of NFSv3 ACL Andrea Parri (1): uprobes: Fix handle_swbp() vs. unregister() + register() race once more Arnd Bergmann (6): exec: avoid gcc-8 warning for get_task_comm drm: gma500: fix logic error scsi: bfa: convert to strlcpy/strlcat staging: rts5208: fix gcc-8 logic error warning kdb: use memmove instead of overlapping memcpy usb: gadget: dummy: fix nonsensical comparisons Aya Levin (1): net/mlx4: Fix UBSAN warning of signed integer overflow Ben Greear (1): mac80211: Clear beacon_int in ieee80211_do_stop Bernd Eckstein (1): usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2 Cameron Gutman (1): Input: xpad - quirk all PDP Xbox One gamepads Chanho Min (1): ALSA: pcm: Fix starvation on down_write_nonblock() Christian Hoff (1): Input: matrix_keypad - check for errors from of_get_named_gpio() Chuck Lever (1): SUNRPC: Fix leak of krb5p encode pages Denis Bolotin (2): qed: Fix PTT leak in qed_drain() qed: Fix reading wrong value in loop condition Dmitry V. Levin (1): mips: fix mips_get_syscall_arg o32 check Emmanuel Grumbach (1): mac80211: ignore NullFunc frames in the duplicate detection Fabrizio Castro (1): can: rcar_can: Fix erroneous registration Felix Fietkau (2): mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext mac80211: fix reordering of buffered broadcast packets Filipe Manana (2): Btrfs: ensure path name is null terminated at btrfs_control_ioctl Btrfs: fix use-after-free when dumping free space Geert Uytterhoeven (1): iommu/ipmmu-vmsa: Fix crash on early domain free Greg Kroah-Hartman (2): Staging: lustre: remove two build warnings Linux 4.4.167 Guenter Roeck (2): kobject: Replace strncpy with memcpy kernfs: Replace strncpy with memcpy Halil Pasic (2): virtio/s390: avoid race on vcdev->config virtio/s390: fix race in ccw_io_helper() Harry Pan (1): usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device Hui Peng (1): ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c Jack Morgenstein (1): net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command Josef Bacik (1): btrfs: release metadata before running delayed refs Julian Wiedmann (1): s390/qeth: fix length check in SNMP processing Junaid Shahid (1): kvm: mmu: Fix race in emulated page table writes Kai-Heng Feng (2): USB: usb-storage: Add new IDs to ums-realtek ALSA: hda: Add support for AMD Stoney Ridge Kees Cook (1): scsi: csiostor: Avoid content leaks and casts Kevin Hilman (1): ARC: change defconfig defaults to ARCv2 Laura Abbott (2): kgdboc: Fix restrict error kgdboc: Fix warning with module build Linus Torvalds (1): unifdef: use memcpy instead of strncpy Lu Baolu (1): iommu/vt-d: Fix NULL pointer dereference in prq_event_thread() Macpaul Lin (1): kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var() Markus Hofstaetter (1): leds: call led_pwm_set() in leds-pwm to enforce default LED_OFF Martin Wilck (1): scsi: scsi_devinfo: cleanly zero-pad devinfo strings Mathias Kresin (1): MIPS: ralink: Fix mt7620 nd_sd pinmux Mathias Nyman (1): xhci: Prevent U1/U2 link pm states if exit latency is too long Mathias Payer (1): USB: check usb_get_extra_descriptor for proper size Matthias Schwarzott (1): media: em28xx: Fix use-after-free when disconnecting Max Filippov (2): xtensa: enable coprocessors that are being flushed xtensa: fix coprocessor context offset definitions Michael Niewöhner (1): usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series Milo Kim (1): leds: turn off the LED and wait for completion on unregistering LED class device Nikolay Borisov (1): btrfs: Always try all copies when reading extent buffers Noah Westervelt (1): Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR Pan Bian (3): rapidio/rionet: do not free skb before reading its length ext2: fix potential use after free iommu/vt-d: Use memunmap to free memremap Patrick Gaskin (1): Input: elan_i2c - add ELAN0620 to the ACPI table Paulo Alcantara (1): cifs: Fix separator when building path from dentry Pavel Tikhomirov (1): mm: cleancache: fix corruption on missed inode invalidation Peter Shih (1): tty: serial: 8250_mtk: always resume the device in probe. Richard Genoud (2): dmaengine: at_hdmac: fix memory leak in at_dma_xlate() dmaengine: at_hdmac: fix module unloading Sagi Grimberg (1): iser: set sector for ambiguous mr status errors Sam Bobroff (1): drm/ast: Fix incorrect free on ioregs Sasha Levin (1): Revert "wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()" Stephen Rothwell (1): disable stringop truncation warnings for now Sudarsana Reddy Kalluru (1): bnx2x: Assign unique DMAE channel number for FW DMAE transactions. Sultan Alsawaf (1): ip_tunnel: Fix name string concatenate in __ip_tunnel_create() Sven Eckelmann (1): batman-adv: Expand merged fragment buffer for full packet Takashi Iwai (7): ALSA: wss: Fix invalid snd_free_pages() at error path ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write ALSA: control: Fix race between adding and removing a user element ALSA: sparc: Fix invalid snd_free_pages() at error path ALSA: trident: Suppress gcc string warning ALSA: pcm: Call snd_pcm_unlink() conditionally at closing ALSA: pcm: Fix interval evaluation with openmin/max Tariq Toukan (1): net/mlx4_core: Fix uninitialized variable compilation warning Vasyl Vavrychuk (1): mac80211_hwsim: Timer should be initialized before device registered Vincent Chen (1): net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts Wei Yongjun (1): leds: leds-gpio: Fix return value check in create_gpio_led() Xiongfeng Wang (1): Kbuild: suppress packed-not-aligned warning for default setting only Yangtao Li (1): net: amd: add missing of_node_put() YueHaibing (1): misc: mic/scif: fix copy-paste error in scif_create_remote_lookup Makefile | 5 +- arch/arc/Kconfig | 2 +- arch/arc/Makefile | 2 +- arch/arc/configs/axs101_defconfig | 2 + arch/arc/configs/axs103_defconfig | 1 + arch/arc/configs/axs103_smp_defconfig | 1 + arch/arc/configs/nsim_700_defconfig | 1 + arch/arc/configs/nsimosci_defconfig | 2 + arch/arc/configs/nsimosci_hs_defconfig | 1 + arch/arc/configs/nsimosci_hs_smp_defconfig | 1 + arch/arc/configs/tb10x_defconfig | 1 + arch/arc/configs/vdk_hs38_defconfig | 1 + arch/arc/configs/vdk_hs38_smp_defconfig | 1 + arch/mips/include/asm/syscall.h | 2 +- arch/mips/ralink/mt7620.c | 2 +- arch/x86/kvm/mmu.c | 27 +++------ arch/xtensa/kernel/asm-offsets.c | 16 +++--- arch/xtensa/kernel/process.c | 5 +- drivers/dma/at_hdmac.c | 10 +++- drivers/gpu/drm/ast/ast_main.c | 3 +- drivers/gpu/drm/gma500/mdfld_intel_display.c | 2 +- drivers/infiniband/ulp/iser/iser_verbs.c | 7 +-- drivers/input/joystick/xpad.c | 16 ++---- drivers/input/keyboard/matrix_keypad.c | 23 +++++--- drivers/input/mouse/elan_i2c_core.c | 3 + drivers/iommu/intel-iommu.c | 2 +- drivers/iommu/intel-svm.c | 2 +- drivers/iommu/ipmmu-vmsa.c | 3 + drivers/leds/led-class.c | 5 +- drivers/leds/leds-gpio.c | 4 +- drivers/leds/leds-pwm.c | 1 + drivers/media/usb/em28xx/em28xx-dvb.c | 3 +- drivers/misc/mic/scif/scif_rma.c | 2 +- drivers/net/can/rcar_can.c | 5 +- drivers/net/ethernet/amd/sunlance.c | 4 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x.h | 7 +++ drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 1 + drivers/net/ethernet/faraday/ftmac100.c | 7 +-- drivers/net/ethernet/mellanox/mlx4/alloc.c | 2 +- drivers/net/ethernet/mellanox/mlx4/mlx4.h | 4 +- drivers/net/ethernet/mellanox/mlx4/mr.c | 1 + drivers/net/ethernet/qlogic/qed/qed_int.c | 2 + drivers/net/ethernet/qlogic/qed/qed_main.c | 2 +- drivers/net/rionet.c | 2 +- drivers/net/usb/ipheth.c | 10 ++-- drivers/net/wireless/mac80211_hwsim.c | 8 +-- drivers/net/wireless/ti/wlcore/cmd.c | 6 -- drivers/s390/net/qeth_core_main.c | 27 ++++----- drivers/s390/virtio/virtio_ccw.c | 17 +++++- drivers/scsi/bfa/bfa_fcbuild.c | 8 +-- drivers/scsi/bfa/bfa_fcs.c | 78 ++++++++++++------------- drivers/scsi/bfa/bfa_fcs_lport.c | 62 ++++++++------------ drivers/scsi/bfa/bfa_ioc.c | 2 +- drivers/scsi/bfa/bfa_svc.c | 4 +- drivers/scsi/bfa/bfad.c | 20 +++---- drivers/scsi/bfa/bfad_attr.c | 2 +- drivers/scsi/bfa/bfad_bsg.c | 6 +- drivers/scsi/csiostor/csio_lnode.c | 43 ++++++++------ drivers/scsi/scsi_devinfo.c | 22 +++---- drivers/staging/lustre/lustre/lmv/lmv_obd.c | 2 +- drivers/staging/rts5208/sd.c | 6 -- drivers/tty/serial/8250/8250_mtk.c | 16 +++--- drivers/tty/serial/kgdboc.c | 47 ++++++++------- drivers/usb/core/hub.c | 2 +- drivers/usb/core/quirks.c | 7 +++ drivers/usb/core/usb.c | 6 +- drivers/usb/gadget/udc/dummy_hcd.c | 9 ++- drivers/usb/host/hwa-hc.c | 2 +- drivers/usb/host/xhci.c | 16 ++++++ drivers/usb/misc/appledisplay.c | 1 + drivers/usb/storage/unusual_realtek.h | 10 ++++ fs/btrfs/disk-io.c | 10 +--- fs/btrfs/free-space-cache.c | 2 + fs/btrfs/super.c | 1 + fs/btrfs/transaction.c | 6 +- fs/cifs/dir.c | 2 +- fs/exec.c | 7 +-- fs/ext2/xattr.c | 2 +- fs/kernfs/symlink.c | 2 +- include/linux/sched.h | 7 ++- include/linux/usb.h | 4 +- include/sound/pcm_params.h | 4 +- kernel/debug/kdb/kdb_support.c | 4 +- kernel/events/uprobes.c | 12 +++- lib/kobject.c | 2 +- mm/truncate.c | 8 ++- net/batman-adv/fragmentation.c | 2 +- net/ipv4/ip_tunnel.c | 4 +- net/mac80211/iface.c | 2 + net/mac80211/rx.c | 1 + net/mac80211/status.c | 2 + net/mac80211/tx.c | 4 +- net/sunrpc/auth_gss/auth_gss.c | 4 ++ scripts/Makefile.extrawarn | 3 + scripts/unifdef.c | 4 +- sound/core/control.c | 80 +++++++++++++++----------- sound/core/pcm_native.c | 14 +++-- sound/isa/wss/wss_lib.c | 2 - sound/pci/ac97/ac97_codec.c | 2 +- sound/pci/hda/hda_intel.c | 4 ++ sound/pci/trident/trident.c | 2 +- sound/sparc/cs4231.c | 8 +-- sound/usb/card.c | 5 +- 103 files changed, 471 insertions(+), 380 deletions(-)