[PATCH 3.16 000/204] 3.16.52-rc1 review

From: Ben Hutchings
Date: Thu Dec 28 2017 - 13:05:10 EST


This is the start of the stable review cycle for the 3.16.52 release.
There are 204 patches in this series, which will be posted as responses
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Mon Jan 1 17:00:00 UTC 2018.
Anything received after that time might be too late.

All the patches have also been committed to the linux-3.16.y-rc branch of
https://git.kernel.org/pub/scm/linux/kernel/git/bwh/linux-stable-rc.git .
A shortlog and diffstat can be found below.

Ben.

-------------

Adrian Salido (1):
HID: i2c-hid: allocate hid buffers for real worst case
[8320caeeffdefec3b58b9d4a7ed8e1079492fe7b]

Al Viro (3):
Bluetooth: bnep: bnep_add_connection() should verify that it's dealing with l2cap socket
[71bb99a02b32b4cc4265118e85f6035ca72923f0]
Bluetooth: cmtp: cmtp_add_connection() should verify that it's dealing with l2cap socket
[96c26653ce65bf84f3212f8b00d4316c1efcbf4c]
more bio_map_user_iov() leak fixes
[2b04e8f6bbb196cab4b232af0f8d48ff2c7a8058]

Alan Stern (11):
USB: core: prevent malicious bNumInterfaces overflow
[48a4ff1c7bb5a32d2e396b03132d20d552c0eca7]
USB: dummy-hcd: Fix deadlock caused by disconnect detection
[ab219221a5064abfff9f78c323c4a257b16cdb81]
USB: dummy-hcd: Fix erroneous synchronization change
[7dbd8f4cabd96db5a50513de9d83a8105a5ffc81]
USB: dummy-hcd: fix connection failures (wrong speed)
[fe659bcc9b173bcfdd958ce2aec75e47651e74e1]
USB: dummy-hcd: fix infinite-loop resubmission bug
[0173a68bfb0ad1c72a6ee39cc485aa2c97540b98]
USB: g_mass_storage: Fix deadlock when driver is unbound
[1fbbb78f25d1291274f320462bf6908906f538db]
USB: gadgetfs, dummy-hcd, net2280: fix locking for callbacks
[f16443a034c7aa359ddf6f0f9bc40d01ca31faea]
USB: gadgetfs: Fix crash caused by inadequate synchronization
[520b72fc64debf8a86c3853b8e486aa5982188f0]
USB: gadgetfs: fix copy_to_user while holding spinlock
[6e76c01e71551cb221c1f3deacb9dcd9a7346784]
usb-storage: fix bogus hardware error messages for ATA pass-thru devices
[a4fd4a724d6c30ad671046d83be2e9be2f11d275]
usb-storage: unusual_devs entry to fix write-access regression for Seagate external drives
[113f6eb6d50cfa5e2a1cdcf1678b12661fa272ab]

Alex Estrin (1):
Revert "IB/ipoib: Update broadcast object if PKey value was changed in index 0"
[612601d0013f03de9dc134809f242ba6da9ca252]

Alexey Kodanev (1):
vti: fix use after free in vti_tunnel_xmit/vti6_tnl_xmit
[36f6ee22d2d66046e369757ec6bbe1c482957ba6]

Andreas Engel (1):
USB: serial: cp210x: add support for ELV TFD500
[c496ad835c31ad639b6865714270b3003df031f6]

Andreas Gruenbacher (2):
direct-io: Prevent NULL pointer access in submit_page_section
[899f0429c7d3eed886406cd72182bee3b96aa1f9]
vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
[fc46820b27a2d9a46f7e90c9ceb4a64a1bc5fab8]

Andrei Vagin (1):
net/unix: don't show information about sockets from other namespaces
[0f5da659d8f1810f44de14acf2c80cd6499623a0]

Andrew Gabbasov (1):
usb: gadget: composite: Fix use-after-free in usb_composite_overwrite_options
[aec17e1e249567e82b26dafbb86de7d07fde8729]

Andrew Honig (1):
KVM: VMX: remove I/O port 0x80 bypass on Intel hosts
[d59d51f088014f25c2562de59b9abff4f42a7468]

Andrey Konovalov (2):
uwb: ensure that endpoint is interrupt
[70e743e4cec3733dc13559f6184b35d358b9ef3f]
uwb: properly check kthread_run return value
[bbf26183b7a6236ba602f4d6a2f7cade35bba043]

Aravind Gopalakrishnan (2):
pci_ids: Add PCI device IDs for F15h M60h
[4cbbdb51cc921f95978360fd7a0652d493dadc3e]
x86, amd_nb: Add device IDs to NB tables for F15h M60h
[15895a729e02ea55433b912cc31d5c6de16359ec]

Arnd Bergmann (4):
ARM: 8715/1: add a private asm/unaligned.h
[1cce91dfc8f7990ca3aea896bfb148f240b12860]
gpio: acpi: work around false-positive -Wstring-overflow warning
[e40a3ae1f794a35c4af3746291ed6fedc1fa0f6f]
include/linux/of.h: provide of_n_{addr,size}_cells wrappers for !CONFIG_OF
[8a1ac5dc7be09883051b1bf89a5e57d7ad850fa5]
usb: gadget: dummy: fix nonsensical comparisons
[7661ca09b2ff98f48693f431bb01fed62830e433]

Ashish Samant (1):
ocfs2: fstrim: Fix start offset of first cluster group during fstrim
[105ddc93f06ebe3e553f58563d11ed63dbcd59f0]

Baruch Siach (1):
spi: uapi: spidev: add missing ioctl header
[a2b4a79b88b24c49d98d45a06a014ffd22ada1a4]

Ben Hutchings (1):
ipsec: Fix aborted xfrm policy dump crash
[1137b5e2529a8f5ca8ee709288ecba3e68044df2]

Bo Yan (1):
tracing: Erase irqsoff trace with empty write
[8dd33bcb7050dd6f8c1432732f930932c9d3a33e]

Borislav Petkov (3):
x86/cpu/AMD: Apply the Erratum 688 fix when the BIOS doesn't
[bfc1168de949cd3e9ca18c3480b5085deff1ea7c]
x86/microcode/intel: Disable late loading on model 79
[723f2828a98c8ca19842042f418fb30dd8cfc0f7]
x86/oprofile/ppro: Do not use __this_cpu*() in preemptible context
[a743bbeef27b9176987ec0cb7f906ab0ab52d1da]

Casey Schaufler (1):
lsm: fix smack_inode_removexattr and xattr_getsecurity memleak
[57e7ba04d422c3d41c8426380303ec9b7533ded9]

Christophe Jaillet (1):
IB/mlx5: Fix the size parameter to find_first_bit
[fffd68734dc685e208e86d8c5f6522cd695a8d60]

Colin Ian King (2):
IB/ocrdma: fix incorrect fall-through on switch statement
[06564f60859bdf7e73d70ae35d7e285e96ae9c46]
staging: iio: ade7759: fix signed extension bug on shift of a u8
[13ffe9a26df4e156363579b25c904dd0b1e31bfb]

Cong Wang (2):
tun: call dev_get_valid_name() before register_netdevice()
[0ad646c81b2182f7fa67ec0c8c825e0ee165696d]
vlan: fix a use-after-free in vlan_device_event()
[052d41c01b3a2e3371d66de569717353af489d63]

Craig Gallek (1):
tun/tap: sanitize TUNSETSNDBUF input
[93161922c658c714715686cd0cf69b090cb9bf1d]

Dan Carpenter (1):
tile: array underflow in setup_maxnodemem()
[637f23abca87d26e091e0d6647ec878d97d2c6cd]

David Disseldorp (2):
SMB: fix leak of validate negotiate info response buffer
[fe83bebc05228e838ed5cbbc62712ab50dd40e18]
SMB: fix validate negotiate info uninitialised memory use
[a2d9daad1d2dfbd307ab158044d1c323d7babbde]

Dmitry Fleytman (1):
usb: Increase quirk delay for USB devices
[b2a542bbb3081dbd64acc8929c140d196664c406]

Dmitry Torokhov (3):
Input: ims-psu - check if CDC union descriptor is sane
[ea04efee7635c9120d015dcdeeeb6988130cb67a]
Input: uinput - avoid FF flush when destroying device
[e8b95728f724797f958912fd9b765a695595d3a6]
Input: uinput - avoid crash when sending FF request to device going away
[6b4877c7bdc6ae39ce03716df7caeecf204697eb]

Dongjiu Geng (1):
arm/arm64: KVM: set right LR register value for 32 bit guest when inject abort
[fd6c8c206fc5d0717b0433b191de0715122f33bb]

Dragos Bogdan (2):
iio: ad7793: Fix the serial interface reset
[7ee3b7ebcb74714df6d94c8f500f307e1ee5dda5]
iio: ad_sigma_delta: Implement a dedicated reset function
[7fc10de8d49a748c476532c9d8e8fe19e548dd67]

Eric Biggers (18):
FS-Cache: fix dereference of NULL user_key_payload
[d124b2c53c7bee6569d2a2d0b18b4a1afde00134]
KEYS: add missing permission check for request_key() destination
[4dca6ea1d9432052afb06baf2e3ae78188a4410b]
KEYS: don't revoke uninstantiated key in request_key_auth_new()
[f7b48cf08fa63a68b59c2894806ee478216d7f91]
KEYS: encrypted: fix dereference of NULL user_key_payload
[13923d0865ca96312197962522e88bc0aedccd74]
KEYS: fix NULL pointer dereference during ASN.1 parsing [ver #2]
[624f5ab8720b3371367327a822c267699c1823b8]
KEYS: fix cred refcount leak in request_key_auth_new()
[44d8143340a99b167c74365e844516b73523c087]
KEYS: fix key refcount leak in keyctl_assume_authority()
[884bee0215fcc239b30c062c37ca29077005e064]
KEYS: fix key refcount leak in keyctl_read_key()
[7fc0786d956d9e59b68d282be9b156179846ea3d]
KEYS: fix out-of-bounds read during ASN.1 parsing
[2eb9eabf1e868fda15808954fb29b0f105ed65f1]
KEYS: fix writing past end of user-supplied buffer in keyring_read()
[e645016abc803dafc75e4b8f6e4118f088900ffb]
KEYS: prevent creating a different user's keyrings
[237bbd29f7a049d310d907f4b2716a7feef9abf3]
KEYS: return full count in keyring_read() if buffer is too small
[3239b6f29bdfb4b0a2ba59df995fc9e6f4df7f1f]
KEYS: trusted: fix writing past end of buffer in trusted_read()
[a3c812f7cfd80cf51e8f5b7034f7418f6beb56c1]
KEYS: trusted: sanitize all key material
[ee618b4619b72527aaed765f0f0b74072b281159]
crypto: hmac - require that the underlying hash algorithm is unkeyed
[af3ff8045bbf3e32f1a448542e73abb4c8ceb6f1]
crypto: salsa20 - fix blkcipher_walk API usage
[ecaaab5649781c5a0effdaf298a925063020500e]
ecryptfs: fix dereference of NULL user_key_payload
[f66665c09ab489a11ca490d6a82df57cfc1bea3e]
lib/digsig: fix dereference of NULL user_key_payload
[192cabd6a296cbc57b3d8c05c4c89d87fc102506]

Eric Dumazet (3):
netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user
[e466af75c074e76107ae1cd5a2823e9c61894ffb]
tcp: fastopen: fix on syn-data transmit failure
[b5b7db8d680464b1d631fd016f5e093419f0bfd9]
tcp: fix tcp_mtu_probe() vs highest_sack
[2b7cda9c35d3b940eb9ce74b30bbd5eb30db493d]

Eric W. Biederman (5):
exec: Ensure mm->user_ns contains the execed files
[f84df2a6f268de584a201e8911384a2d244876e3]
mm: Add a user_ns owner to mm_struct and fix ptrace permission checks
[bfedb589252c01fa505ac9f6f2a3d5d68d707ef4]
ptrace: Capture the ptracer's creds not PT_PTRACE_CAP
[64b875f7ac8a5d60a4e191479299e931ee949b67]
ptrace: Don't allow accessing an undumpable mm
[84d77d3f06e7e8dea057d10e8ec77ad71f721be3]
ptrace: Properly initialize ptracer_cred on fork
[c70d9d809fdeecedb96972457ee45c49a232d97f]

Ethan Zhao (1):
sched/sysctl: Check user input value of sysctl_sched_time_avg
[5ccba44ba118a5000cccc50076b0344632459779]

Felipe Balbi (1):
usb: quirks: add quirk for WORLDE MINI MIDI keyboard
[2811501e6d8f5747d08f8e25b9ecf472d0dc4c7d]

Florian Westphal (1):
netfilter: ipset: pernet ops must be unregistered last
[e23ed762db7ed1950a6408c3be80bc56909ab3d4]

Geert Uytterhoeven (4):
sh: sh7264: remove nonexistent GPIO_PH[0-7] to fix pinctrl registration
[eae3df7e82318d798f45dedf111e241805ec7a4a]
sh: sh7269: remove nonexistent GPIO_PH[0-7] to fix pinctrl registration
[d9d73e81fe82fdf4ee65a48c26531edc04108349]
sh: sh7722: remove nonexistent GPIO_PTQ7 to fix pinctrl registration
[b78412b8300a8453b78d2c1b0b925b66493bb011]
sh: sh7757: remove nonexistent GPIO_PT[JLNQ]7_RESV to fix pinctrl registration
[d8ce38f69843a56da044e56b6c16aecfbc3c6e39]

Gerald Schaefer (1):
s390/mm: fix write access check in gup_huge_pmd()
[ba385c0594e723d41790ecfb12c610e6f90c7785]

Guillaume Nault (6):
l2tp: check ps->sock before running pppol2tp_session_ioctl()
[5903f594935a3841137c86b9d5b75143a5b7121c]
l2tp: don't use l2tp_tunnel_find() in l2tp_ip and l2tp_ip6
[8f7dc9ae4a7aece9fbc3e6637bdfa38b36bcdf09]
l2tp: fix l2tp_eth module loading
[9f775ead5e570e7e19015b9e4e2f3dd6e71a5935]
l2tp: hold socket before dropping lock in l2tp_ip{, 6}_recv()
[a3c18422a4b4e108bcf6a2328f48867e1003fd95]
l2tp: hold tunnel in pppol2tp_connect()
[f9e56baf03f9d36043a78f16e3e8b2cfd211e09e]
l2tp: hold tunnel socket when handling control frames in l2tp_ip and l2tp_ip6
[94d7ee0baa8b764cf64ad91ed69464c1a6a0066b]

Gustavo A. R. Silva (1):
MIPS: microMIPS: Fix incorrect mask in insn_table_MM
[77238e76b9156d28d86c1e31c00ed2960df0e4de]

Hante Meuleman (1):
brcmfmac: Add length checks on firmware events
[0aedbcaf6f182690790d98d90d5fe1e64c846c34]

Haozhong Zhang (1):
KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit
[8eb3f87d903168bdbd1222776a6b1e281f50513e]

Henryk Heisig (1):
USB: serial: option: add support for TP-Link LTE module
[837ddc4793a69b256ac5e781a5e729b448a8d983]

Herbert Xu (1):
crypto: shash - Fix zero-length shash ahash digest crash
[b61907bb42409adf9b3120f741af7c57dd7e3db2]

Ilya Dryomov (1):
rbd: use GFP_NOIO for parent stat and data requests
[1e37f2f84680fa7f8394fd444b6928e334495ccc]

Ilya Lesokhin (1):
IB/mlx5: Simplify mlx5_ib_cont_pages
[d67bc5d4e3e100d762c0f57ea67f28bc219698a6]

Jan Luebbe (1):
bus: mbus: fix window size calculation for 4GB windows
[2bbbd96357ce76cc45ec722c00f654aa7b189112]

Jani Nikula (1):
drm/i915/bios: ignore HDMI on port A
[d27ffc1d00327c29b3aa97f941b42f0949f9e99f]

Jann Horn (1):
security: let security modules use PTRACE_MODE_* with bitmasks
[3dfb7d8cdbc7ea0c2970450e60818bb3eefbad69]

Jason A. Donenfeld (1):
security/keys: properly zero out sensitive key material in big_key
[910801809b2e40a4baedd080ef5d80b4a180e70e]

Jean Delvare (1):
kernel/params.c: align add_sysfs_param documentation with code
[630cc2b30a42c70628368a412beb4a5e5dd71abe]

Jeff Lance (1):
Input: ti_am335x_tsc - fix incorrect step config for 5 wire touchscreen
[cf5dd48907bebaefdb43a8ca079be77e8da2cb20]

Jeffrey Chu (1):
USB: serial: ftdi_sio: add id for Cypress WICED dev board
[a6c215e21b0dc5fe9416dce90f9acc2ea53c4502]

Jim Dickerson (1):
usb: pci-quirks.c: Corrected timeout values used in handshake
[114ec3a6f9096d211a4aff4277793ba969a62c73]

Jimmy Assarsson (1):
can: kvaser_usb: Correct return value in printout
[8f65a923e6b628e187d5e791cf49393dd5e8c2f9]

Joerg Roedel (1):
iommu/amd: Finish TLB flush in amd_iommu_unmap()
[ce76353f169a6471542d999baf3d29b121dce9c0]

Johan Hovold (1):
USB: serial: metro-usb: add MS7820 device id
[31dc3f819bac28a0990b36510197560258ab7421]

Johannes Thumshirn (1):
scsi: libiscsi: fix shifting of DID_REQUEUE host byte
[eef9ffdf9cd39b2986367bc8395e2772bc1284ba]

John David Anglin (1):
parisc: Fix double-word compare and exchange in LWS code on 32-bit kernels
[374b3bf8e8b519f61eb9775888074c6e46b3bf0c]

Jonathan Basseri (1):
xfrm: Clear sk_dst_cache when applying per-socket policy.
[2b06cdf3e688b98fcc9945873b5d42792bd4eee0]

Kazuya Mizuguchi (1):
usb: renesas_usbhs: Fix DMAC sequence for receiving zero-length packet
[29c7f3e68eec4ae94d85ad7b5dfdafdb8089f513]

Kevin Cernekee (4):
brcmfmac: Add check for short event packets
[dd2349121bb1b8ff688c3ca6a2a0bea9d8c142ca]
netfilter: nfnetlink_cthelper: Add missing permission checks
[4b380c42f7d00a395feede754f0bc2292eebe6e5]
netfilter: xt_osf: Add missing permission checks
[916a27901de01446bcf57ecca4783f6cff493309]
netlink: Add netns check on taps
[93c647643b48f0131f02e45da3bd367d80443291]

Kirill A. Shutemov (1):
mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d()
[a8f97366452ed491d13cf1e44241bc0b5740b1f0]

Konstantin Khlebnikov (2):
Smack: remove unneeded NULL-termination from securtity label
[da1b63566c469bf3e2b24182114422e16b1aa34c]
net_sched: always reset qdisc backlog in qdisc_reset()
[c8e1812960eeae42e2183154927028511c4bc566]

LEROY Christophe (2):
crypto: talitos - Don't provide setkey for non hmac hashing algs.
[56136631573baa537a15e0012055ffe8cfec1a33]
crypto: talitos - fix sha224
[afd62fa26343be6445479e75de9f07092a061459]

Lauro Ramos Venancio (1):
sched/topology: Optimize build_group_mask()
[f32d782e31bf079f600dcec126ed117b0577e85c]

Li Bin (1):
workqueue: Fix NULL pointer dereference
[cef572ad9bd7f85035ba8272e5352040e8be0152]

Luca Coelho (1):
iwlwifi: mvm: use IWL_HCMD_NOCOPY for MCAST_FILTER_CMD
[97bce57bd7f96e1218751996f549a6e61f18cc8c]

Lukas Wunner (1):
iio: adc: mcp320x: Fix oops on module unload
[0964e40947a630a2a6f724e968246992f97bcf1c]

Maksim Salau (1):
usb: cdc_acm: Add quirk for Elatec TWN3
[765fb2f181cad669f2beb87842a05d8071f2be85]

Marc Zyngier (1):
arm64: Make sure SPsel is always set
[5371513fb338fb9989c569dc071326d369d6ade8]

Marek Szyprowski (1):
iommu/exynos: Remove initconst attribute to avoid potential kernel oops
[9d25e3cc83d731ae4eeb017fd07562fde3f80bef]

Mark Rutland (3):
ARM: 8720/1: ensure dump_instr() checks addr_limit
[b9dd05c7002ee0ca8b676428b2268c26399b5e31]
arm64: ensure __dump_instr() checks addr_limit
[7a7003b1da010d2b0d1dc8bf21c10f5c73b389f1]
arm64: fix dump_instr when PAN and UAO are in use
[c5cea06be060f38e5400d796e61cfc8c36e52924]

Martin K. Petersen (1):
scsi: sd: Implement blacklist option for WRITE SAME w/ UNMAP
[28a0bc4120d38a394499382ba21d6965a67a3703]

Mathias Nyman (2):
usb: hub: Allow reset retry for USB2 devices on connect bounce
[1ac7db63333db1eeff901bfd6bbcd502b4634fa4]
xhci: fix finding correct bus_state structure for USB 3.1 hosts
[5a838a13c9b4e5dd188b7a6eaeb894e9358ead0c]

Matt Bennett (1):
ip6_gre: Reduce log level in ip6gre_err() to debug
[a46496ce38eeb401344d5623c1960dbf2f1769be]

Matt Fornero (1):
iio: core: Return error for failed read_reg
[3d62c78a6eb9a7d67bace9622b66ad51e81c5f9b]

Matthew Wilcox (1):
fs/mpage.c: fix mpage_writepage() for pages with buffers
[f892760aa66a2d657deaf59538fb69433036767c]

Mayank Rana (1):
usb: xhci: Handle error condition in xhci_stop_device()
[b3207c65dfafae27e7c492cb9188c0dc0eeaf3fd]

Michael S. Tsirkin (1):
macvtap: fix TUNSETSNDBUF values > 64k
[3ea79249e81e5ed051f2e6480cbde896d99046e8]

Miklos Szeredi (1):
fuse: fix READDIRPLUS skipping an entry
[c6cdd51404b7ac12dd95173ddfc548c59ecf037f]

Mohamed Ghannam (1):
dccp: CVE-2017-8824: use-after-free in DCCP code
[69c64866ce072dea1d1e59a0d61e0f66c0dffb76]

Nicolai Stange (1):
PCI: Fix race condition with driver_override
[9561475db680f7144d2223a409dd3d7e322aca03]

Nicolas Dichtel (1):
net: enable interface alias removal via rtnl
[2459b4c635858094df78abb9ca87d99f89fe8ca5]

Oleg Nesterov (1):
ptrace: change __ptrace_unlink() to clear ->ptrace under ->siglock
[1333ab03150478df8d6f5673a91df1e50dc6ab97]

Omar Sandoval (1):
Btrfs: fix incorrect {node,sector}size endianness from BTRFS_IOC_FS_INFO
[bea7eafdbda3ba1d4b2ccb9cca829eefb7989bb9]

Oswald Buddenhagen (1):
MIPS: AR7: Ensure that serial ports are properly set up
[b084116f8587b222a2c5ef6dcd846f40f24b9420]

Paolo Abeni (4):
IPv4: early demux can return an error code
[7487449c86c65202b3b725c4524cb48dd65e4e6f]
ipv4: fix broadcast packets reception
[ad0ea1989cc4d5905941d0a9e62c63ad6d859cef]
udp: fix bcast packet reception
[996b44fcef8f216ea0b6b6e74468c5a77b5e341f]
udp: perform source validation for mcast early demux
[bc044e8db7962e727a75b591b9851ff2ac5cf846]

Paul Burton (1):
MIPS: Fix CM region target definitions
[6a6cba1d945a7511cdfaf338526871195e420762]

Peng Xu (1):
nl80211: Define policy for packet pattern attributes
[ad670233c9e1d5feb365d870e30083ef1b889177]

Peter Zijlstra (3):
sched/topology: Remove FORCE_SD_OVERLAP
[af85596c74de2fd9abb87501ae280038ac28a3f4]
sched/topology: Simplify build_overlap_sched_groups()
[91eaed0d61319f58a9f8e43d41a8cbb069b4f73d]
x86/uaccess, sched/preempt: Verify access_ok() context
[7c4788950ba5922fde976d80b72baf46f14dee8d]

Ravi Bangoria (1):
powerpc/sysrq: Fix oops whem ppmu is not registered
[4917fcb58cc73f6b81455e3c5f960144809ddf1a]

Ricard Wanderlof (1):
ASoC: adau17x1: Workaround for noise bug in ADC
[1e6f4fc06f6411adf98bbbe7fcd79442cd2b2a75]

Richard SchÃtz (1):
can: c_can: don't indicate triple sampling support for D_CAN
[fb5f0b3ef69b95e665e4bbe8a3de7201f09f1071]

Ronnie Sahlberg (1):
cifs: check rsp for NULL before dereferencing in SMB2_open
[bf2afee14e07de16d3cafc67edbfc2a3cc65e4bc]

Sabrina Dubroca (1):
l2tp: fix race condition in l2tp_tunnel_delete
[62b982eeb4589b2e6d7c01a90590e3a4c2b2ca19]

Satoru Takeuchi (1):
btrfs: prevent to set invalid default subvolid
[6d6d282932d1a609e60dc4467677e0e863682f57]

Sekhar Nori (1):
ARM: dts: da850-evm: add serial and ethernet aliases
[ce21574ad1922b403198ee664c4dff276f514f1d]

Shrirang Bagul (1):
USB: serial: qcserial: add Dell DW5818, DW5819
[f5d9644c5fca7d8e8972268598bb516a7eae17f9]

Shu Wang (2):
cifs: release auth_key.response for reconnect.
[f5c4ba816315d3b813af16f5571f86c8d4e897bd]
cifs: release cifs root_cred after exit_cifs
[94183331e815617246b1baa97e0916f358c794bb]

Stefan MÃtje (1):
can: esd_usb2: Fix can_dlc value for received RTR, frames
[72d92e865d1560723e1957ee3f393688c49ca5bf]

Stefan Popa (1):
staging: iio: ad7192: Fix - use the dedicated reset function avoiding dma from stack.
[f790923f146140a261ad211e5baf75d169f16fb2]

Stefano Brivio (1):
scsi: lpfc: Don't return internal MBXERR_ERROR code from probe function
[5c756065e47dc3e84b00577bd109f0a8e69903d7]

Steffen Maier (1):
scsi: zfcp: fix erp_action use-before-initialize in REC action trace
[ab31fd0ce65ec93828b617123792c1bb7c6dcc42]

Steve French (3):
SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
[1013e760d10e614dc10b5624ce9fc41563ba2e65]
SMB3: Validate negotiate request must always be signed
[4587eee04e2ac7ac3ac9fa2bc164fb6e548f99cd]
SMB: Validate negotiate (to protect against downgrade) even if signing off
[0603c96f3af50e2f9299fa410c224ab1d465e0f9]

Tahsin Erdogan (1):
tracing: Fix trace_pipe behavior for instance traces
[75df6e688ccd517e339a7c422ef7ad73045b18a2]

Takashi Iwai (10):
ALSA: caiaq: Fix stray URB at probe error path
[99fee508245825765ff60155fed43f970ff83a8f]
ALSA: hda: Remove superfluous '-' added by printk conversion
[6bf88a343db2b3c160edf9b82a74966b31cc80bd]
ALSA: seq: Avoid invalid lockdep class warning
[3510c7aa069aa83a2de6dab2b41401a198317bdc]
ALSA: seq: Fix OSS sysex delivery in OSS emulation
[132d358b183ac6ad8b3fea32ad5e0663456d18d1]
ALSA: seq: Fix copy_from_user() call inside lock
[5803b023881857db32ffefa0d269c90280a67ee0]
ALSA: seq: Fix nested rwsem annotation for lockdep splat
[1f20f9ff57ca23b9f5502fca85ce3977e8496cb1]
ALSA: timer: Add missing mutex lock for compat ioctls
[79fb0518fec8c8b4ea7f1729f54f293724b3dbb0]
ALSA: timer: Limit max instances per timer
[9b7d869ee5a77ed4a462372bb89af622e705bfb8]
ALSA: timer: Protect the whole snd_timer_close() with open race
[9984d1b5835ca29fc7025186a891ee7398d21cc7]
ALSA: usx2y: Suppress kernel warning at page allocation failures
[7682e399485fe19622b6fd82510b1f4551e48a25]

Tejun Heo (1):
workqueue: replace pool->manager_arb mutex with a flag
[692b48258dda7c302e777d7d5f4217244478f1f6]

Tyrel Datwyler (1):
powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
[b537ca6fede69a281dc524983e5e633d79a10a08]

Wanpeng Li (1):
KVM: Fix stack-out-of-bounds read in write_mmio
[e39d200fa5bf5b94a0948db0dae44c1b73b84a56]

Will Deacon (1):
arm64: fault: Route pte translation faults via do_translation_fault
[760bfb47c36a07741a089bf6a28e854ffbee7dc9]

Willem de Bruijn (1):
packet: only test po->has_vnet_hdr once in packet_snd
[da7c9561015e93d10fe6aab73e9288e0d09d65a6]

Wolfgang Grandegger (1):
can: gs_usb: fix busy loop if no more TX context is available
[97819f943063b622eca44d3644067c190dc75039]

Xin Long (4):
ip6_gre: only increase err_count for some certain type icmpv6 in ip6gre_err
[f8d20b46ce55cf40afb30dcef6d9288f7ef46d9b]
ip6_gre: skb_push ipv6hdr before packing the header in ip6gre_header
[76cc0d3282d4b933fa144fa41fbc5318e0fdca24]
sctp: add the missing sock_owned_by_user check in sctp_icmp_redirect
[1cc276cec9ec574d41cf47dfc0f51406b6f26ab4]
sctp: fix a type cast warnings that causes a_rwnd gets the wrong value
[f6fc6bc0b8e0bb13a210bd7386ffdcb1a5f30ef1]

Yasuaki Ishimatsu (2):
mm/memory_hotplug: change pfn_to_section_nr/section_nr_to_pfn macro to inline function
[1dd2bfc86818ddbc95f98e312e7704350223fd7d]
mm/memory_hotplug: define find_{smallest|biggest}_section_pfn as unsigned long
[d09b0137d204bebeaafed672bc5a244e9ac92edb]

Yazen Ghannam (1):
x86/amd_nb: Add Fam17h Data Fabric as "Northbridge"
[b791c6b6a55c402367cc544f54921074253db061]

Ye Yin (1):
netfilter/ipvs: clear ipvs_property flag when SKB net namespace changed
[2b5ec1a5f9738ee7bf8f5ec0526e75e00362c48f]

Yoshihiro Shimoda (2):
usb: renesas_usbhs: fix the BCLR setting condition for non-DCP pipe
[6124607acc88fffeaadf3aacfeb3cc1304c87387]
usb: renesas_usbhs: fix usbhsf_fifo_clear() for RX direction
[0a2ce62b61f2c76d0213edf4e37aaf54a8ddf295]

Makefile | 4 +-
arch/alpha/kernel/ptrace.c | 2 +-
arch/arm/boot/dts/da850-evm.dts | 7 ++
arch/arm/include/asm/Kbuild | 1 -
arch/arm/include/asm/unaligned.h | 27 +++++
arch/arm/kernel/traps.c | 28 ++++--
arch/arm/kvm/emulate.c | 5 +-
arch/arm/kvm/mmio.c | 4 +-
arch/arm64/kernel/head.S | 1 +
arch/arm64/kernel/traps.c | 28 +++---
arch/arm64/kvm/inject_fault.c | 16 ++-
arch/arm64/mm/fault.c | 2 +-
arch/blackfin/kernel/ptrace.c | 4 +-
arch/cris/arch-v32/kernel/ptrace.c | 2 +-
arch/ia64/kernel/ptrace.c | 2 +-
arch/mips/ar7/platform.c | 1 +
arch/mips/include/asm/mips-cm.h | 4 +-
arch/mips/kernel/ptrace32.c | 4 +-
arch/mips/mm/uasm-micromips.c | 2 +-
arch/parisc/kernel/syscall.S | 6 +-
arch/powerpc/kernel/ptrace32.c | 4 +-
arch/powerpc/perf/core-book3s.c | 5 +
arch/powerpc/platforms/pseries/mobility.c | 4 +-
arch/s390/mm/gup.c | 7 +-
arch/sh/include/cpu-sh2a/cpu/sh7264.h | 4 +-
arch/sh/include/cpu-sh2a/cpu/sh7269.h | 4 +-
arch/sh/include/cpu-sh4/cpu/sh7722.h | 2 +-
arch/sh/include/cpu-sh4/cpu/sh7757.h | 8 +-
arch/tile/kernel/setup.c | 2 +-
arch/x86/crypto/salsa20_glue.c | 7 --
arch/x86/include/asm/uaccess.h | 14 ++-
arch/x86/kernel/amd_nb.c | 48 +++++++++
arch/x86/kernel/cpu/microcode/intel.c | 18 ++++
arch/x86/kvm/vmx.c | 7 +-
arch/x86/kvm/x86.c | 8 +-
arch/x86/oprofile/op_model_ppro.c | 4 +-
block/bio.c | 14 ++-
crypto/hmac.c | 6 +-
crypto/salsa20_generic.c | 7 --
crypto/shash.c | 13 ++-
drivers/block/rbd.c | 4 +-
drivers/bus/mvebu-mbus.c | 2 +-
drivers/crypto/talitos.c | 7 +-
drivers/gpio/gpiolib-acpi.c | 2 +-
drivers/gpu/drm/i915/intel_bios.c | 7 ++
drivers/hid/i2c-hid/i2c-hid.c | 3 +-
drivers/iio/adc/ad7793.c | 4 +-
drivers/iio/adc/ad_sigma_delta.c | 28 ++++++
drivers/iio/adc/mcp320x.c | 1 +
drivers/iio/industrialio-core.c | 4 +-
drivers/infiniband/hw/mlx5/mem.c | 49 ++++-----
drivers/infiniband/hw/ocrdma/ocrdma_hw.c | 3 +
drivers/infiniband/ulp/ipoib/ipoib_ib.c | 13 ---
drivers/input/ff-core.c | 13 ++-
drivers/input/misc/ims-pcu.c | 16 ++-
drivers/input/misc/uinput.c | 57 +++++++----
drivers/input/touchscreen/ti_am335x_tsc.c | 2 +-
drivers/iommu/amd_iommu.c | 1 +
drivers/iommu/exynos-iommu.c | 2 +-
drivers/net/can/c_can/c_can_pci.c | 1 -
drivers/net/can/c_can/c_can_platform.c | 1 -
drivers/net/can/usb/esd_usb2.c | 2 +-
drivers/net/can/usb/gs_usb.c | 10 +-
drivers/net/can/usb/kvaser_usb.c | 3 +-
drivers/net/macvtap.c | 6 +-
drivers/net/tun.c | 7 ++
drivers/net/wireless/brcm80211/brcmfmac/fweh.c | 58 +++--------
drivers/net/wireless/brcm80211/brcmfmac/fweh.h | 68 ++++++++++---
drivers/net/wireless/brcm80211/brcmfmac/p2p.c | 10 ++
.../net/wireless/brcm80211/brcmfmac/wl_cfg80211.c | 5 +
drivers/net/wireless/iwlwifi/mvm/mac80211.c | 10 +-
drivers/pci/pci-sysfs.c | 11 ++-
drivers/s390/scsi/zfcp_aux.c | 5 +
drivers/s390/scsi/zfcp_erp.c | 18 ++--
drivers/s390/scsi/zfcp_scsi.c | 5 +
drivers/scsi/libiscsi.c | 2 +-
drivers/scsi/lpfc/lpfc_init.c | 1 +
drivers/scsi/scsi_scan.c | 3 +
drivers/scsi/sd.c | 16 ++-
drivers/staging/iio/adc/ad7192.c | 4 +-
drivers/staging/iio/meter/ade7759.c | 2 +-
drivers/usb/class/cdc-acm.c | 3 +
drivers/usb/core/config.c | 6 +-
drivers/usb/core/hub.c | 13 ++-
drivers/usb/core/quirks.c | 4 +
drivers/usb/gadget/composite.c | 5 +
drivers/usb/gadget/dummy_hcd.c | 81 +++++++++++----
drivers/usb/gadget/f_mass_storage.c | 31 ++----
drivers/usb/gadget/f_mass_storage.h | 14 ---
drivers/usb/gadget/inode.c | 55 +++++++++--
drivers/usb/gadget/mass_storage.c | 20 +---
drivers/usb/gadget/net2280.c | 5 +-
drivers/usb/host/pci-quirks.c | 8 +-
drivers/usb/host/xhci-hub.c | 22 ++++-
drivers/usb/host/xhci.h | 2 +-
drivers/usb/renesas_usbhs/fifo.c | 23 ++++-
drivers/usb/serial/cp210x.c | 1 +
drivers/usb/serial/ftdi_sio.c | 2 +
drivers/usb/serial/ftdi_sio_ids.h | 7 ++
drivers/usb/serial/metro-usb.c | 1 +
drivers/usb/serial/option.c | 2 +
drivers/usb/serial/qcserial.c | 4 +
drivers/usb/storage/transport.c | 14 ++-
drivers/usb/storage/unusual_devs.h | 7 ++
drivers/uwb/hwa-rc.c | 2 +
drivers/uwb/uwbd.c | 12 ++-
fs/block_dev.c | 6 +-
fs/btrfs/ioctl.c | 10 +-
fs/cifs/cifsfs.c | 2 +-
fs/cifs/connect.c | 8 ++
fs/cifs/file.c | 7 ++
fs/cifs/smb2pdu.c | 34 +++++--
fs/direct-io.c | 3 +-
fs/ecryptfs/ecryptfs_kernel.h | 25 +++--
fs/ecryptfs/keystore.c | 9 +-
fs/exec.c | 22 ++++-
fs/fscache/object-list.c | 7 ++
fs/fuse/dir.c | 3 +-
fs/mpage.c | 14 ++-
fs/ocfs2/alloc.c | 24 +++--
fs/read_write.c | 4 +-
fs/xattr.c | 2 +-
include/crypto/internal/hash.h | 8 ++
include/linux/buffer_head.h | 1 +
include/linux/capability.h | 2 +
include/linux/iio/adc/ad_sigma_delta.h | 3 +
include/linux/input.h | 1 +
include/linux/key.h | 2 +
include/linux/mbus.h | 4 +-
include/linux/mm.h | 2 +
include/linux/mm_types.h | 1 +
include/linux/mmzone.h | 10 +-
include/linux/netdevice.h | 3 +
include/linux/of.h | 10 ++
include/linux/pci_ids.h | 2 +
include/linux/preempt_mask.h | 21 ++--
include/linux/ptrace.h | 11 ++-
include/linux/sched.h | 1 +
include/linux/skbuff.h | 7 ++
include/net/protocol.h | 2 +-
include/net/route.h | 4 +-
include/net/tcp.h | 8 +-
include/net/udp.h | 2 +-
include/scsi/scsi_device.h | 1 +
include/scsi/scsi_devinfo.h | 1 +
include/sound/seq_kernel.h | 3 +-
include/sound/seq_virmidi.h | 1 +
include/sound/timer.h | 2 +
include/trace/events/kvm.h | 7 +-
include/uapi/linux/spi/spidev.h | 1 +
kernel/capability.c | 36 ++++++-
kernel/fork.c | 9 +-
kernel/params.c | 2 +-
kernel/ptrace.c | 91 +++++++++++------
kernel/sched/core.c | 21 ++--
kernel/sched/features.h | 1 -
kernel/sysctl.c | 3 +-
kernel/trace/trace.c | 12 ++-
kernel/workqueue.c | 37 +++----
kernel/workqueue_internal.h | 3 +-
lib/asn1_decoder.c | 7 +-
lib/digsig.c | 6 ++
mm/huge_memory.c | 14 +--
mm/init-mm.c | 2 +
mm/memory.c | 2 +-
mm/memory_hotplug.c | 6 +-
mm/nommu.c | 2 +-
net/8021q/vlan.c | 6 +-
net/bluetooth/bnep/core.c | 3 +
net/bluetooth/cmtp/core.c | 3 +
net/core/dev.c | 6 +-
net/core/rtnetlink.c | 5 +-
net/core/skbuff.c | 1 +
net/dccp/proto.c | 5 +
net/ipv4/ip_input.c | 22 +++--
net/ipv4/ip_vti.c | 3 +-
net/ipv4/route.c | 44 +++++----
net/ipv4/tcp_ipv4.c | 9 +-
net/ipv4/tcp_output.c | 12 ++-
net/ipv4/udp.c | 30 ++++--
net/ipv6/ip6_gre.c | 41 ++++----
net/ipv6/ip6_vti.c | 3 +-
net/l2tp/l2tp_core.c | 10 +-
net/l2tp/l2tp_core.h | 5 +-
net/l2tp/l2tp_eth.c | 51 +---------
net/l2tp/l2tp_ip.c | 20 ++--
net/l2tp/l2tp_ip6.c | 21 ++--
net/l2tp/l2tp_ppp.c | 10 +-
net/netfilter/ipset/ip_set_core.c | 23 +++--
net/netfilter/nfnetlink_cthelper.c | 10 ++
net/netfilter/x_tables.c | 4 +-
net/netfilter/xt_osf.c | 7 ++
net/netlink/af_netlink.c | 3 +
net/packet/af_packet.c | 4 +-
net/sched/sch_generic.c | 1 +
net/sctp/input.c | 2 +-
net/sctp/sm_sideeffect.c | 4 +-
net/unix/diag.c | 2 +
net/wireless/nl80211.c | 12 ++-
net/xfrm/xfrm_state.c | 1 +
net/xfrm/xfrm_user.c | 3 +-
security/keys/big_key.c | 2 +-
security/keys/encrypted-keys/encrypted.c | 7 ++
security/keys/internal.h | 2 +-
security/keys/key.c | 2 +
security/keys/keyctl.c | 8 +-
security/keys/keyring.c | 72 +++++++-------
security/keys/process_keys.c | 8 +-
security/keys/request_key.c | 46 +++++++--
security/keys/request_key_auth.c | 69 ++++++-------
security/keys/trusted.c | 69 ++++++-------
security/smack/smack_lsm.c | 65 ++++++------
security/yama/yama_lsm.c | 4 +-
sound/core/hrtimer.c | 1 +
sound/core/seq/oss/seq_oss_midi.c | 4 +-
sound/core/seq/oss/seq_oss_readq.c | 29 ++++++
sound/core/seq/oss/seq_oss_readq.h | 2 +
sound/core/seq/seq_clientmgr.c | 2 +-
sound/core/seq/seq_virmidi.c | 27 +++--
sound/core/timer.c | 109 ++++++++++++++-------
sound/core/timer_compat.c | 17 +++-
sound/pci/hda/hda_codec.c | 2 +-
sound/soc/codecs/adau17x1.c | 24 ++++-
sound/soc/codecs/adau17x1.h | 2 +
sound/usb/caiaq/device.c | 12 ++-
sound/usb/usx2y/usb_stream.c | 6 +-
226 files changed, 1733 insertions(+), 945 deletions(-)

--
Ben Hutchings
The two most common things in the universe are hydrogen and stupidity.