[PATCH 3.12 00/86] 3.12.74-stable review

From: Jiri Slaby
Date: Thu May 04 2017 - 05:04:32 EST

Next message: Jiri Slaby: "[PATCH 3.12 01/86] drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()"
Previous message: Milian Wolff: "Re: [PATCH v1 2/2] perf report: Display titles in left frame of annotate browser"
Next in thread: Jiri Slaby: "[PATCH 3.12 01/86] drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This is the start of the stable review cycle for the 3.12.74 release.
There are 86 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Mon May 8 11:03:52 CEST 2017.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
http://kernel.org/pub/linux/kernel/people/jirislaby/stable-review/patch-3.12.74-rc1.xz
and the diffstat can be found below.

thanks,
js

===============

Al Viro (1):
p9_client_readdir() fix

Andrey Konovalov (3):
net/packet: fix overflow in check for priv area size
net/packet: fix overflow in check for tp_frame_nr
net/packet: fix overflow in check for tp_reserve

Arnd Bergmann (5):
dvb-usb-v2: avoid use-after-free
ACPI / power: Avoid maybe-uninitialized warning
tty: nozomi: avoid a harmless gcc warning
hostap: avoid uninitialized variable use in hfa384x_get_rid
gfs2: avoid uninitialized variable warning

Ben Hutchings (4):
pegasus: Use heap buffers for all register access
rtl8150: Use heap buffers for all register access
catc: Combine failure cleanup code in catc_probe()
catc: Use heap buffer for memory size test

Benjamin Herrenschmidt (1):
powerpc: Disable HFSCR[TM] if TM is not supported

Cameron Gutman (1):
Input: xpad - add support for Razer Wildcat gamepad

Chris Salls (1):
mm/mempolicy.c: fix error handling in set_mempolicy and mbind.

Chun-Yi Lee (1):
platform/x86: acer-wmi: setup accelerometer when machine has
appropriate notify event

Corey Minyard (1):
MIPS: Fix crash registers on non-crashing CPUs

Daeho Jeong (1):
ext4: fix inode checksum calculation problem if i_extra_size is small

Dan Williams (1):
block: fix del_gendisk() vs blkdev_ioctl crash

David Howells (2):
KEYS: Disallow keyrings beginning with '.' to be joined as session
keyrings
KEYS: Change the name of the dead type to ".dead" to prevent user
access

Dmitry Torokhov (1):
Input: i8042 - add Clevo P650RS to the i8042 reset list

Eric Biggers (1):
KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings

Eric Dumazet (2):
ping: implement proper locking
net: neigh: guard against NULL solicit() method

Eugenia Emantayev (1):
net/mlx4_en: Fix bad WQE issue

Florian Larysch (1):
net: ipv4: fix multipath RTM_GETROUTE behavior when iif is given

Geert Uytterhoeven (1):
char: Drop bogus dependency of DEVPORT on !M68K

Germano Percossi (1):
CIFS: remove bad_network_name flag

Guenter Roeck (1):
usb: hub: Wait for connection to be reestablished after port reset

Guillaume Nault (1):
l2tp: take reference on sessions being dumped

Hongxu Jia (1):
netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT"
failed in 64bit kernel

J. Bruce Fields (1):
nfsd: check for oversized NFSv2/v3 arguments

Jack Morgenstein (1):
net/mlx4_core: Fix racy CQ (Completion Queue) free

James Hogan (8):
metag/usercopy: Drop unused macros
metag/usercopy: Fix alignment error checking
metag/usercopy: Add early abort to copy_to_user
metag/usercopy: Zero rest of buffer from copy_from_user
metag/usercopy: Set flags before ADDZ
metag/usercopy: Fix src fixup in from user rapf loops
metag/usercopy: Add missing fixups
MIPS: KGDB: Use kernel context for sleeping threads

Jamie Bainbridge (1):
ipv6: check raw payload size correctly in ioctl

Jan-Marek Glogowski (1):
Reset TreeId to zero on SMB2 TREE_CONNECT

Janusz Dziedzic (1):
usb: dwc3: gadget: delay unmap of bounced requests

Josh Poimboeuf (1):
ftrace/x86: Fix triple fault with graph tracing and suspend-to-ram

Juergen Gross (1):
xen, fbfront: fix connecting to backend

Kees Cook (1):
mm: Tighten x86 /dev/mem with zeroing reads

Li Qiang (1):
drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()

Mantas M (1):
net: ipv6: check route protocol when deleting routes

Marcelo Henrique Cerri (1):
s390/decompressor: fix initrd corruption caused by bss clear

Martin K. Petersen (2):
scsi: sr: Sanity check returned mode data
scsi: sd: Fix capacity calculation with 32-bit sector_t

Max Bires (1):
char: lack of bool string made CONFIG_DEVPORT always on

Michael Ellerman (1):
powerpc: Reject binutils 2.24 when building little endian

Minchan Kim (1):
zram: do not use copy_page with non-page aligned address

Murray McAllister (2):
drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()
drm/vmwgfx: avoid calling vzalloc with a 0 size in
vmw_get_cap_3d_ioctl()

Nathan Sullivan (1):
net: phy: handle state correctly in phy_stop_machine

Nicholas Bellinger (2):
iscsi-target: Fix TMR reference leak during session shutdown
iscsi-target: Drop work-around for legacy GlobalSAN initiator

Nikolay Aleksandrov (1):
ip6mr: fix notification device destruction

Omar Sandoval (1):
virtio-console: avoid DMA from stack

Paul Mackerras (1):
powerpc: Don't try to fix up misaligned load-with-reservation
instructions

Peter Zijlstra (1):
perf/x86: Avoid exposing wrong/stale data in intel_pmu_lbr_read_32()

RafaÅ MiÅecki (1):
mtd: bcm47xxpart: fix parsing first block after aligned TRX

Sachin Prabhu (1):
cifs: Do not send echoes before Negotiate is complete

Sebastian Siewior (1):
ubi/upd: Always flush after prepared for an update

Stefano Stabellini (1):
xen/x86: don't lose event interrupts

Steven Rostedt (VMware) (2):
tracing: Allocate the snapshot buffer before enabling probe
ring-buffer: Have ring_buffer_iter_empty() return true when empty

Suzuki K Poulose (1):
kvm: arm/arm64: Fix locking for kvm_free_stage2_pgd

Takashi Iwai (1):
ALSA: seq: Don't break snd_use_lock_sync() loop by timeout

Theodore Ts'o (1):
ext4: check if in-inode xattr is corrupted in
ext4_expand_extra_isize_ea()

Thomas Gleixner (1):
x86/vdso: Plug race between mapping and ELF header setup

Thomas Hellstrom (1):
drm/vmwgfx: Remove getparam error message

Thorsten Leemhuis (1):
Input: elantech - add Fujitsu Lifebook E547 to force crc_enabled

Vitaly Kuznetsov (2):
Drivers: hv: don't leak memory in vmbus_establish_gpadl()
Drivers: hv: get rid of timeout in vmbus_open()

Wei Fang (1):
md:raid1: fix a dead loop when read from a WriteMostly disk

Wei Yongjun (1):
ring-buffer: Fix return value check in test_ringbuffer()

Xin Long (1):
sctp: listen on the sock only when it's state is listening or closed

Yazen Ghannam (1):
x86/mce/AMD: Give a name to MCA bank 3 when accessed with legacy MSRs

bsegall@xxxxxxxxxx (1):
ptrace: fix PTRACE_LISTEN race corrupting task->state

santosh.shilimkar@xxxxxxxxxx (1):
RDS: Fix the atomicity for congestion map update

arch/arm/kvm/mmu.c | 12 +
arch/metag/include/asm/uaccess.h | 15 +-
arch/metag/lib/usercopy.c | 312 ++++++++++---------------
arch/mips/kernel/crash.c | 16 +-
arch/mips/kernel/kgdb.c | 48 ++--
arch/powerpc/Makefile | 8 +
arch/powerpc/kernel/align.c | 28 ++-
arch/powerpc/kernel/setup_64.c | 9 +
arch/s390/boot/compressed/misc.c | 35 +--
arch/x86/include/asm/elf.h | 2 +-
arch/x86/kernel/cpu/mcheck/mce_amd.c | 2 +-
arch/x86/kernel/cpu/perf_event_intel_lbr.c | 2 +
arch/x86/kernel/ftrace.c | 12 +
arch/x86/mm/init.c | 41 +++-
arch/x86/xen/time.c | 6 +-
block/genhd.c | 1 -
drivers/acpi/power.c | 1 +
drivers/char/Kconfig | 6 +-
drivers/char/mem.c | 82 ++++---
drivers/char/virtio_console.c | 12 +-
drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c | 4 +-
drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 9 +-
drivers/hv/channel.c | 17 +-
drivers/input/joystick/xpad.c | 2 +
drivers/input/mouse/elantech.c | 8 +
drivers/input/serio/i8042-x86ia64io.h | 7 +
drivers/md/raid1.c | 2 +-
drivers/media/usb/dvb-usb-v2/dvb_usb_core.c | 9 +-
drivers/mtd/bcm47xxpart.c | 10 +-
drivers/mtd/ubi/upd.c | 8 +-
drivers/net/ethernet/mellanox/mlx4/cq.c | 38 +--
drivers/net/ethernet/mellanox/mlx4/en_rx.c | 8 +-
drivers/net/phy/phy.c | 2 +-
drivers/net/usb/catc.c | 56 +++--
drivers/net/usb/pegasus.c | 29 ++-
drivers/net/usb/rtl8150.c | 34 ++-
drivers/net/wireless/hostap/hostap_hw.c | 15 +-
drivers/platform/x86/acer-wmi.c | 22 +-
drivers/scsi/sd.c | 20 +-
drivers/scsi/sr.c | 6 +-
drivers/staging/zram/zram_drv.c | 6 +-
drivers/target/iscsi/iscsi_target_parameters.c | 16 --
drivers/target/iscsi/iscsi_target_util.c | 12 +-
drivers/tty/nozomi.c | 2 +-
drivers/usb/core/hub.c | 11 +-
drivers/usb/dwc3/gadget.c | 21 +-
drivers/video/xen-fbfront.c | 4 +-
fs/cifs/cifsglob.h | 1 -
fs/cifs/smb1ops.c | 10 +
fs/cifs/smb2pdu.c | 9 +-
fs/ext4/inode.c | 5 +-
fs/ext4/xattr.c | 32 ++-
fs/gfs2/dir.c | 4 +-
fs/nfsd/nfssvc.c | 36 +++
kernel/ptrace.c | 14 +-
kernel/trace/ring_buffer.c | 24 +-
kernel/trace/trace.c | 8 +-
mm/mempolicy.c | 20 +-
net/9p/client.c | 4 +
net/core/neighbour.c | 3 +-
net/ipv4/netfilter/arp_tables.c | 4 +-
net/ipv4/ping.c | 5 +-
net/ipv4/route.c | 2 +-
net/ipv6/ip6mr.c | 13 +-
net/ipv6/raw.c | 3 +-
net/ipv6/route.c | 2 +
net/l2tp/l2tp_core.c | 8 +-
net/l2tp/l2tp_core.h | 3 +-
net/l2tp/l2tp_debugfs.c | 10 +-
net/l2tp/l2tp_netlink.c | 7 +-
net/l2tp/l2tp_ppp.c | 10 +-
net/packet/af_packet.c | 8 +-
net/rds/cong.c | 4 +-
net/sctp/socket.c | 3 +
security/keys/gc.c | 2 +-
security/keys/keyctl.c | 20 +-
security/keys/process_keys.c | 44 ++--
sound/core/seq/seq_lock.c | 9 +-
78 files changed, 833 insertions(+), 522 deletions(-)

--
2.12.2

Next message: Jiri Slaby: "[PATCH 3.12 01/86] drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()"
Previous message: Milian Wolff: "Re: [PATCH v1 2/2] perf report: Display titles in left frame of annotate browser"
Next in thread: Jiri Slaby: "[PATCH 3.12 01/86] drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]