Linux 3.4.111

From: Zefan Li
Date: Mon Mar 21 2016 - 23:03:53 EST


I'm announcing the release of the 3.4.111 kernel.

All users of the 3.4 kernel series must upgrade.

The updated 3.4.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-3.4.y
and can be browsed at the normal kernel.org git web browser:
http://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary

----------------------------------------------------------------



The following changes since commit 3edd6224c2a677bb59efe0b083a51fc2b3b5c64d:

Linux 3.4.110 (2015-10-22 09:20:09 +0800)

are available in the git repository at:

git://git.kernel.org/pub/scm/linux/kernel/git/lizf/linux-3.4.y.git tags/v3.4.111

for you to fetch changes up to 3389604d77540abf738b486d650c1745b2d663ca:

Linux 3.4.111 (2016-03-21 09:17:59 +0800)

----------------------------------------------------------------
This is the 3.4.111 stable release

----------------------------------------------------------------
AMAN DEEP (1):
usb: xhci: Bugfix for NULL pointer deference in xhci_endpoint_init() function

Al Viro (3):
9p: don't leave a half-initialized inode sitting around
sg_start_req(): make sure that there's not too many elements in iovec
get rid of s_files and files_lock

Aleksei Mamlin (1):
libata: add ATA_HORKAGE_BROKEN_FPDMA_AA quirk for HP 250GB SATA disk VB0250EAVER

Alex Deucher (1):
drm/radeon/combios: add some validation of lvds values

Alexei Potashnik (1):
target/iscsi: Fix double free of a TUR followed by a solicited NOPOUT

Andrey Vagin (1):
netfilter: nf_conntrack: fix RCU race in nf_conntrack_find_get

Andy Lutomirski (2):
x86/xen: Probe target addresses in set_aliased_prot() before the hypercall
x86/ldt: Make modify_ldt synchronous

Anssi Hannula (1):
ALSA: usb-audio: Add a more accurate volume quirk for AudioQuest DragonFly

Arne Fitzenreiter (2):
libata: add ATA_HORKAGE_NOTRIM
libata: force disable trim for SuperSSpeed S238

Bart Van Assche (1):
libfc: Fix fc_fcp_cleanup_each_cmd()

Ben Hutchings (2):
isdn_ppp: Add checks for allocation failure in isdn_ppp_open()
ppp, slip: Validate VJ compression slot parameters completely

Ben Zhang (1):
kernel/watchdog.c: touch_nmi_watchdog should only touch local cpu not every one

Bernhard Bender (1):
Input: usbtouchscreen - avoid unresponsive TSC-30 touch screen

Brian Campbell (1):
xhci: Calculate old endpoints correctly on device reset

Chris Metcalf (1):
tile: use free_bootmem_late() for initrd

Claudio Cappelli (1):
USB: option: add 2020:4000 ID

Clemens Ladisch (2):
ALSA: tlv: compute TLV_*_ITEM lengths automatically
ALSA: tlv: add DECLARE_TLV_DB_RANGE()

Dan Carpenter (1):
rds: fix an integer overflow test in rds_info_getsockopt()

Daniel Borkmann (1):
rtnetlink: verify IFLA_VF_INFO attributes before passing them to driver

David Ahern (1):
net: Fix RCU splat in af_key

David Daney (1):
MIPS: Make set_pte() SMP safe.

David Howells (2):
KEYS: Fix race between key destruction and finding a keyring by name
KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring

Dennis Yang (1):
dm btree remove: fix bug in redistribute3

Dirk Behme (1):
USB: sierra: add 1199:68AB device ID

Dominic Sacrè (1):
ALSA: usb-audio: Add MIDI support for Steinberg MI2/MI4

Edward Hyunkoo Jee (1):
inet: frags: fix defragmented packet's IP header for af_packet

Eric Northup (1):
KVM: x86: work around infinite loop in microcode when #AC is delivered

Felix Fietkau (1):
MIPS: Fix sched_getaffinity with MT FPAFF enabled

Filipe Manana (1):
Btrfs: use kmem_cache_free when freeing entry in inode cache

Gioh Kim (1):
fs/buffer.c: support buffer cache allocations with gfp modifiers

Hannes Frederic Sowa (3):
net: add validation for the socket syscall protocol argument
ipv6: probe routes asynchronous in rt6_probe
net: fix warnings in 'make htmldocs' by moving macro definition out of field declaration

Heiko Carstens (1):
s390/process: fix sfpc inline assembly

Herbert Xu (2):
net: Clone skb before setting peeked flag
crypto: ixp4xx - Remove bogus BUG_ON on scattered dst buffer

Herton R. Krzesinski (1):
ipc,sem: fix use after free on IPC_RMID after a task using same semaphore set exits

Jan Beulich (1):
x86/LDT: Print the real LDT base address

Jason Wang (1):
virtio-net: drop NETIF_F_FRAGLIST

Jiri Pirko (1):
niu: don't count tx error twice in case of headroom realloc fails

Joe Perches (1):
hpfs: hpfs_error: Remove static buffer, use vsprintf extension %pV instead

Joe Stringer (1):
netfilter: nf_conntrack: Support expectations in different zones

Joe Thornber (4):
dm thin: allocate the cell_sort_array dynamically
dm btree: silence lockdep lock inversion in dm_btree_del()
dm btree: add ref counting ops for the leaves of top level btrees
dm btree remove: fix a bug when rebalancing nodes after removal

Johan Hovold (1):
USB: whiteheat: fix potential null-deref at probe

John Soni Jose (1):
libiscsi: Fix host busy blocking during connection teardown

John Youn (2):
usb: dwc3: Reset the transfer resource index on SET_INTERFACE
usb: dwc3: Fix assignment of EP transfer resources

Joseph Qi (1):
ocfs2: fix BUG in ocfs2_downconvert_thread_do_work()

Juergen Gross (2):
x86/ldt: Correct LDT access in single stepping logic
x86/ldt: Correct FPU emulation access to LDT

Julian Anastasov (2):
net: do not process device backlog during unregistration
net: call rcu_read_lock early in process_backlog

Kirill A. Shutemov (1):
mm: avoid setting up anonymous pages into file mapping

Linus Torvalds (1):
Initialize msg/shm IPC objects before doing ipc_addid()

Lior Amsalem (1):
ata: pmp: add quirk for Marvell 4140 SATA PMP

Marc-Andrè Lureau (1):
vhost: actually track log eventfd file

Marcelo Leitner (1):
ipv6: addrconf: validate new MTU before applying it

Marcelo Tosatti (1):
KVM: x86: move steal time initialization to vcpu entry time

Martin Schwidefsky (1):
s390/sclp: clear upper register halves in _sclp_print_early

Mathias Nyman (1):
xhci: fix off by one error in TRB DMA address boundary check

Michael Walle (1):
EDAC, ppc4xx: Access mci->csrows array elements properly

Michal Hocko (1):
ext4: replace open coded nofail allocation in ext4_free_blocks()

Michal Kubeèek (1):
ipv6: prevent fib6_run_gc() contention

Mikulas Patocka (1):
libata: increase the timeout when setting transfer mode

Neil Brown (1):
SUNRPC: never enqueue a ->rq_cong request on ->sending

NeilBrown (4):
md: make sure everything is freed when dm-raid stops an array.
md: flush ->event_work before stopping array.
md/raid1: fix test for 'was read error from last working device'.
md/raid1: extend spinlock to protect raid1_end_read_request against inconsistencies

Nicholas Bellinger (1):
iscsi-target: Fix use-after-free during TPG session shutdown

Nikolay Borisov (2):
bufferhead: Add _gfp version for sb_getblk()
ext4: avoid deadlocks in the writeback path by using sb_getblk_gfp

Oliver Neukum (1):
usb-storage: ignore ZTE MF 823 card reader in mode 0x1225

Paolo Bonzini (1):
KVM: svm: unconditionally intercept #DB

Peter Sanford (1):
USB: cp210x: add ID for Aruba Networks controllers

Peter Zijlstra (1):
perf: Fix fasync handling on inherited events

Quentin Casasnovas (1):
RDS: fix race condition when sending a message on unbound socket

Rainer Weikusat (2):
unix: avoid use-after-free in ep_remove_wait_queue
af_unix: Guard against other == sk in unix_dgram_sendmsg

Richard Weinberger (1):
localmodconfig: Use Kbuild files too

Sanidhya Kashyap (1):
hpfs: kstrdup() out of memory handling

Sasha Levin (2):
RDS: verify the underlying transport exists before creating a connection
atm: deal with setting entry before mkip was called

Seymour, Shane M (1):
st: null pointer dereference panic caused by use after kref_put by st_open

Stefan Agner (1):
can: mcp251x: fix resume when device is down

Tom Hughes (1):
mac80211: clear subdir_stations when removing debugfs

Tomas Winkler (1):
mmc: block: Add missing mmc_blk_put() in power_ro_lock_show()

WANG Cong (1):
pptp: verify sockaddr_len in pptp_bind() and pptp_connect()

Wengang Wang (1):
rds: rds_ib_device.refcount overflow

Yao-Wen Mao (1):
ALSA: usb-audio: add dB range mapping for some devices

Zefan Li (2):
Revert "usb: dwc3: Reset the transfer resource index on SET_INTERFACE"
Linux 3.4.111

Zhao Junwang (1):
drm: add a check for x/y in drm_mode_setcrtc

Zhuang Jin Can (2):
xhci: report U3 when link is in resume state
xhci: prevent bus_suspend if SS port resuming in phase 1

bingtian.ly@xxxxxxxxxx (1):
net: avoid to hang up on sending due to sysctl configuration overflow.

lucien (1):
sctp: donot reset the overall_error_count in SHUTDOWN_RECEIVE state

Makefile | 2 +-
arch/mips/include/asm/pgtable.h | 31 +++
arch/mips/kernel/mips-mt-fpaff.c | 5 +-
arch/s390/kernel/process.c | 2 +-
arch/s390/kernel/sclp.S | 4 +
arch/tile/kernel/setup.c | 2 +-
arch/x86/include/asm/desc.h | 15 --
arch/x86/include/asm/kvm_host.h | 1 +
arch/x86/include/asm/mmu.h | 3 +-
arch/x86/include/asm/mmu_context.h | 49 ++++-
arch/x86/kernel/cpu/common.c | 4 +-
arch/x86/kernel/ldt.c | 267 ++++++++++++++-----------
arch/x86/kernel/process_64.c | 6 +-
arch/x86/kernel/step.c | 8 +-
arch/x86/kvm/svm.c | 22 +-
arch/x86/kvm/trace.h | 1 +
arch/x86/kvm/vmx.c | 5 +-
arch/x86/kvm/x86.c | 9 +-
arch/x86/math-emu/fpu_entry.c | 3 +-
arch/x86/math-emu/fpu_system.h | 21 +-
arch/x86/math-emu/get_address.c | 3 +-
arch/x86/power/cpu.c | 3 +-
arch/x86/xen/enlighten.c | 40 ++++
drivers/ata/libata-core.c | 9 +-
drivers/ata/libata-pmp.c | 7 +
drivers/ata/libata-scsi.c | 3 +-
drivers/crypto/ixp4xx_crypto.c | 1 -
drivers/edac/ppc4xx_edac.c | 2 +-
drivers/gpu/drm/drm_crtc.c | 7 +-
drivers/gpu/drm/radeon/radeon_combios.c | 7 +-
drivers/input/touchscreen/usbtouchscreen.c | 3 +
drivers/isdn/i4l/isdn_ppp.c | 12 +-
drivers/md/dm-thin.c | 14 +-
drivers/md/md.c | 18 +-
drivers/md/persistent-data/dm-btree-internal.h | 6 +
drivers/md/persistent-data/dm-btree-remove.c | 35 ++--
drivers/md/persistent-data/dm-btree-spine.c | 37 ++++
drivers/md/persistent-data/dm-btree.c | 9 +-
drivers/md/raid1.c | 9 +-
drivers/mmc/card/block.c | 2 +
drivers/net/can/mcp251x.c | 15 +-
drivers/net/ethernet/sun/niu.c | 4 +-
drivers/net/ppp/ppp_generic.c | 6 +-
drivers/net/ppp/pptp.c | 6 +
drivers/net/slip/slhc.c | 12 +-
drivers/net/slip/slip.c | 2 +-
drivers/net/virtio_net.c | 4 +-
drivers/scsi/libfc/fc_fcp.c | 19 +-
drivers/scsi/libiscsi.c | 25 +--
drivers/scsi/sg.c | 3 +
drivers/scsi/st.c | 2 +-
drivers/target/iscsi/iscsi_target.c | 14 +-
drivers/usb/dwc3/core.h | 1 -
drivers/usb/dwc3/ep0.c | 5 -
drivers/usb/dwc3/gadget.c | 70 +++++--
drivers/usb/host/xhci-hub.c | 13 +-
drivers/usb/host/xhci-mem.c | 2 +-
drivers/usb/host/xhci-ring.c | 5 +-
drivers/usb/host/xhci.c | 3 +
drivers/usb/host/xhci.h | 1 +
drivers/usb/serial/cp210x.c | 1 +
drivers/usb/serial/option.c | 1 +
drivers/usb/serial/sierra.c | 1 +
drivers/usb/serial/whiteheat.c | 31 +++
drivers/usb/storage/unusual_devs.h | 12 ++
drivers/vhost/vhost.c | 1 +
fs/9p/vfs_inode.c | 3 +-
fs/9p/vfs_inode_dotl.c | 3 +-
fs/btrfs/inode-map.c | 2 +-
fs/buffer.c | 43 ++--
fs/ext4/extents.c | 7 +-
fs/ext4/mballoc.c | 16 +-
fs/file_table.c | 130 ------------
fs/hpfs/super.c | 19 +-
fs/internal.h | 3 -
fs/ocfs2/dlmglue.c | 10 +-
fs/open.c | 2 -
fs/super.c | 21 +-
include/linux/buffer_head.h | 54 ++++-
include/linux/fs.h | 13 --
include/linux/libata.h | 2 +
include/net/af_unix.h | 1 +
include/net/ip6_fib.h | 2 +-
include/net/sock.h | 1 +
include/sound/tlv.h | 24 ++-
ipc/msg.c | 18 +-
ipc/sem.c | 23 ++-
ipc/shm.c | 13 +-
ipc/util.c | 8 +-
kernel/events/core.c | 12 +-
kernel/watchdog.c | 16 +-
mm/memory.c | 17 +-
net/atm/clip.c | 3 +
net/ax25/af_ax25.c | 3 +
net/core/datagram.c | 41 +++-
net/core/dev.c | 26 +--
net/core/rtnetlink.c | 106 +++++-----
net/core/sysctl_net_core.c | 14 +-
net/decnet/af_decnet.c | 3 +
net/ipv4/af_inet.c | 3 +
net/ipv4/ip_fragment.c | 6 +-
net/ipv4/sysctl_net_ipv4.c | 11 +-
net/ipv6/addrconf.c | 17 +-
net/ipv6/af_inet6.c | 3 +
net/ipv6/ip6_fib.c | 19 +-
net/ipv6/ndisc.c | 4 +-
net/ipv6/route.c | 41 +++-
net/irda/af_irda.c | 3 +
net/key/af_key.c | 46 ++---
net/mac80211/debugfs_netdev.c | 1 +
net/netfilter/nf_conntrack_core.c | 21 +-
net/netfilter/nf_conntrack_expect.c | 3 +-
net/rds/ib_rdma.c | 4 +-
net/rds/info.c | 2 +-
net/rds/send.c | 4 +-
net/sctp/sm_sideeffect.c | 2 +-
net/sunrpc/xprt.c | 3 +
net/unix/af_unix.c | 188 +++++++++++++++--
scripts/kconfig/streamline_config.pl | 2 +-
security/keys/gc.c | 10 +-
sound/usb/mixer.c | 2 +
sound/usb/mixer_maps.c | 12 ++
sound/usb/mixer_quirks.c | 37 ++++
sound/usb/mixer_quirks.h | 4 +
sound/usb/quirks-table.h | 68 +++++++
125 files changed, 1390 insertions(+), 731 deletions(-)