Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

4.4.x #17

Merged
merged 1,834 commits into from
Nov 15, 2017
Merged
Changes from 1 commit
Commits
Show all changes
1834 commits
Select commit Hold shift + click to select a range
abbccd8
USB: serial: mos7840: fix control-message error handling
jhovold Jan 12, 2017
8e8c3d4
partitions/efi: Fix integer overflow in GPT size calculation
Jan 15, 2017
af37494
ASoC: dapm: handle probe deferrals
linusw Jan 13, 2017
093fe10
audit: log 32-bit socketcalls
rgbriggs Jan 17, 2017
7b8c9e6
usb: chipidea: vbus event may exist before starting gadget
Oct 19, 2016
c571039
ASoC: dapm: fix some pointer error handling
linusw Jan 20, 2017
4e6cdc0
MIPS: Lantiq: Fix another request_mem_region() return code check
arndb Jan 17, 2017
b9ff317
net: core: Prevent from dereferencing null pointer when releasing SKB
myunghoj Apr 25, 2017
fa63895
net/packet: check length in getsockopt() called with PACKET_HDRLEN
ramosian-glider Apr 25, 2017
4212115
team: fix memory leaks
SinkFinder Apr 24, 2017
e1e99dc
usb: plusb: Add support for PL-27A1
RoEdAl Apr 20, 2017
1b760fd
mmc: sdio: fix alignment issue in struct sdio_func
hkallweit Mar 29, 2017
e290667
bridge: netlink: register netdevice before executing changelink
idosch Apr 10, 2017
f7f46b3
netfilter: invoke synchronize_rcu after set the _hook_ to NULL
Mar 25, 2017
8bd7216
MIPS: IRQ Stack: Unwind IRQ stack onto task stack
mpredfearn Mar 21, 2017
fa02902
exynos-gsc: Do not swap cb/cr for semi planar formats
Feb 1, 2017
4203f2a
netfilter: nfnl_cthelper: fix incorrect helper->expect_class_max
Mar 19, 2017
cadfa3a
parisc: perf: Fix potential NULL pointer dereference
ArvindYadavCs Mar 14, 2017
9bcd5ce
iommu/io-pgtable-arm: Check for leaf entry before dereferencing it
Feb 27, 2017
13099ee
rds: ib: add error handle
Mar 7, 2017
cb07496
md/raid10: submit bio directly to replacement disk
shligit Feb 23, 2017
088b9a4
i2c: meson: fix wrong variable usage in meson_i2c_put_data
hkallweit Mar 7, 2017
0185496
xfs: remove kmem_zalloc_greedy
djwong Mar 6, 2017
f6c8c71
libata: transport: Remove circular dependency at free time
gwendalcr Mar 3, 2017
13af23e
drivers: firmware: psci: drop duplicate const from psci_of_match
Apr 20, 2016
7cad91f
IB/qib: fix false-postive maybe-uninitialized warning
arndb Mar 14, 2017
d32ee70
ARM: remove duplicate 'const' annotations'
arndb May 11, 2017
2b2bfb5
ALSA: au88x0: avoid theoretical uninitialized access
arndb Mar 23, 2017
2536c20
ttpci: address stringop overflow warning
arndb Feb 2, 2017
c030c36
Linux 4.4.91
gregkh Oct 8, 2017
c2eb312
usb: gadget: inode.c: fix unbalanced spin_lock in ep0_write
eccherda Dec 11, 2015
d20fff0
USB: gadgetfs: Fix crash caused by inadequate synchronization
AlanStern Sep 21, 2017
f72264e
USB: gadgetfs: fix copy_to_user while holding spinlock
AlanStern Sep 21, 2017
86377bf
usb: gadget: udc: atmel: set vbus irqflags explicitly
noglitch Aug 31, 2017
e85bd5b
usb-storage: unusual_devs entry to fix write-access regression for Se…
AlanStern Sep 21, 2017
a7131ed
usb: renesas_usbhs: fix the BCLR setting condition for non-DCP pipe
shimoday Sep 27, 2017
ccc6a47
usb: renesas_usbhs: fix usbhsf_fifo_clear() for RX direction
shimoday Sep 27, 2017
46c7b1f
ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descr…
tiwai Sep 22, 2017
da35816
usb: pci-quirks.c: Corrected timeout values used in handshake
Sep 18, 2017
d25a65e
USB: dummy-hcd: fix connection failures (wrong speed)
AlanStern Sep 26, 2017
d1a0787
USB: dummy-hcd: fix infinite-loop resubmission bug
AlanStern Sep 26, 2017
e84b4a0
USB: dummy-hcd: Fix erroneous synchronization change
AlanStern Sep 26, 2017
b74a454
USB: devio: Don't corrupt user memory
Sep 22, 2017
2efab2c
usb: gadget: mass_storage: set msg_registered after msg registered
Junlisuzhou Apr 14, 2017
a44be3e
USB: g_mass_storage: Fix deadlock when driver is unbound
AlanStern Sep 21, 2017
dd1f96a
lsm: fix smack_inode_removexattr and xattr_getsecurity memleak
cschaufler Sep 19, 2017
8cff155
ALSA: compress: Remove unused variable
gune42 Sep 14, 2017
6d1bc9e
ALSA: usx2y: Suppress kernel warning at page allocation failures
tiwai Oct 2, 2017
2b91a52
driver core: platform: Don't read past the end of "driver_override" b…
nicstange Sep 11, 2017
c85e944
Drivers: hv: fcopy: restore correct transfer length
olafhering Sep 22, 2017
60623d7
stm class: Fix a use-after-free
virtuoso Sep 19, 2017
8750959
ftrace: Fix kmemleak in unregister_ftrace_graph
Sep 12, 2017
146a9dc
HID: i2c-hid: allocate hid buffers for real worst case
adriansm Sep 8, 2017
fc29713
iwlwifi: add workaround to disable wide channels in 5GHz
lucacoelho Aug 15, 2017
9e78ac8
scsi: sd: Do not override max_sectors_kb sysfs setting
martinkpetersen Sep 28, 2017
5d9a9c3
USB: uas: fix bug in handling of alternate settings
AlanStern Sep 22, 2017
feab51a
USB: core: harden cdc_parse_cdc_header
gregkh Sep 21, 2017
ddcbaf8
usb: Increase quirk delay for USB devices
Sep 5, 2017
13713e6
USB: fix out-of-bounds in usb_set_configuration
gregkh Sep 19, 2017
4590ed7
xhci: fix finding correct bus_state structure for USB 3.1 hosts
matnyman Sep 18, 2017
0141f85
iio: adc: twl4030: Fix an error handling path in 'twl4030_madc_probe()'
tititiou36 Sep 23, 2017
0bab541
iio: adc: twl4030: Disable the vusb3v1 rugulator in the error handlin…
tititiou36 Sep 23, 2017
4b9c62a
iio: ad_sigma_delta: Implement a dedicated reset function
dbogdan Sep 5, 2017
b86df98
staging: iio: ad7192: Fix - use the dedicated reset function avoiding…
stefpopa Sep 14, 2017
2c29a38
iio: core: Return error for failed read_reg
Sep 5, 2017
f2f68ec
iio: ad7793: Fix the serial interface reset
dbogdan Sep 5, 2017
18215da
iio: adc: mcp320x: Fix readout of negative voltages
l1k Aug 22, 2017
8b41964
iio: adc: mcp320x: Fix oops on module unload
l1k Aug 22, 2017
5a21af1
uwb: properly check kthread_run return value
xairy Sep 14, 2017
ee5bd0e
uwb: ensure that endpoint is interrupt
xairy Sep 14, 2017
b8af446
brcmfmac: setup passive scan if requested by user-space
Sep 12, 2017
33d1fa4
drm/i915/bios: ignore HDMI on port A
jnikula Sep 21, 2017
6d1400b
nvme: protect against simultaneous shutdown invocations
Nov 26, 2015
90fd673
sched/cpuset/pm: Fix cpuset vs. suspend-resume bugs
Sep 7, 2017
40c00e5
ext4: fix data corruption for mmap writes
jankara May 26, 2017
4f22f07
ext4: Don't clear SGID when inheriting ACLs
jankara Jul 31, 2017
82854fb
ext4: don't allow encrypted operations without keys
tytso Dec 28, 2016
69f53f5
Linux 4.4.92
gregkh Oct 12, 2017
6721969
brcmfmac: add length check in brcmf_cfg80211_escan_handler()
Sep 12, 2017
bd36826
ext4: in ext4_seek_{hole,data}, return -ENXIO for negative offsets
djwong Aug 24, 2017
f2bb4bc
CIFS: Reconnect expired SMB sessions
piastry Jul 8, 2017
6a6c61d
nl80211: Define policy for packet pattern attributes
Oct 3, 2017
45bd4e4
iwlwifi: mvm: use IWL_HCMD_NOCOPY for MCAST_FILTER_CMD
lucacoelho Sep 1, 2017
5fd4551
rcu: Allow for page faults in NMI handlers
paulmck Sep 22, 2017
2fff3c5
USB: dummy-hcd: Fix deadlock caused by disconnect detection
AlanStern Oct 6, 2017
29b202e
MIPS: math-emu: Remove pr_err() calls from fpu_emu()
paulburton Sep 8, 2017
e7485f0
dmaengine: edma: Align the memcpy acnt array size with the transfer
Sep 18, 2017
2929cb9
HID: usbhid: fix out-of-bounds bug
jazzguitar81 Sep 28, 2017
03bd90f
crypto: shash - Fix zero-length shash ahash digest crash
herbertx Oct 9, 2017
6a92b99
KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit
Oct 10, 2017
eb7f316
usb: renesas_usbhs: Fix DMAC sequence for receiving zero-length packet
KAZUMIZU Oct 2, 2017
050c4bb
iommu/amd: Finish TLB flush in amd_iommu_unmap()
joergroedel Oct 13, 2017
dc7c3bd
ALSA: usb-audio: Kill stray URB at exiting
tiwai Oct 10, 2017
23709ae
ALSA: seq: Fix use-after-free at creating a port
tiwai Oct 9, 2017
ca2523c
ALSA: seq: Fix copy_from_user() call inside lock
tiwai Oct 9, 2017
5b01343
ALSA: caiaq: Fix stray URB at probe error path
tiwai Oct 11, 2017
16c1ef6
ALSA: line6: Fix leftover URB at error-path during probe
tiwai Oct 9, 2017
ac94abb
usb: gadget: composite: Fix use-after-free in usb_composite_overwrite…
agabbasov Sep 30, 2017
f3b5384
direct-io: Prevent NULL pointer access in submit_page_section
Oct 9, 2017
399c460
fix unbalanced page refcounting in bio_map_user_iov
vtl Sep 22, 2017
b1f5a26
USB: serial: ftdi_sio: add id for Cypress WICED dev board
Sep 8, 2017
ac22f49
USB: serial: cp210x: add support for ELV TFD500
Sep 18, 2017
34592e0
USB: serial: option: add support for TP-Link LTE module
heinzek Sep 11, 2017
6c14436
USB: serial: qcserial: add Dell DW5818, DW5819
daedalus81 Sep 29, 2017
2085634
USB: serial: console: fix use-after-free after failed setup
jhovold Oct 4, 2017
ad505a7
x86/alternatives: Fix alt_max_short macro to really be a max()
minipli Oct 5, 2017
e1fe381
Linux 4.4.93
gregkh Oct 18, 2017
951ba9f
percpu: make this_cpu_generic_read() atomic w.r.t. interrupts
Sep 26, 2017
c088f7b
drm/dp/mst: save vcpi with payloads
Dec 7, 2015
9f5bbe6
MIPS: Fix minimum alignment requirement of IRQ stack
mpredfearn Jul 10, 2017
dee4506
sctp: potential read out of bounds in sctp_ulpevent_type_enabled()
Sep 13, 2017
2ec54b2
bpf/verifier: reject BPF_ALU64|BPF_END
ecree-solarflare Sep 15, 2017
5356f7e
udpv6: Fix the checksum computation when HW checksum does not apply
Sep 14, 2017
3483c65
ip6_gre: skb_push ipv6hdr before packing the header in ip6gre_header
lxin Sep 15, 2017
aa90be3
net: emac: Fix napi poll list corruption
chunkeey Sep 19, 2017
5be6824
packet: hold bind lock when rebinding to fanout hook
wdebruij Sep 14, 2017
1a4f1ec
bpf: one perf event close won't free bpf program attached by another …
yonghong-song Sep 18, 2017
d9cb4dc
isdn/i4l: fetch the ppp_write buffer in one shot
Sep 20, 2017
93040aa
vti: fix use after free in vti_tunnel_xmit/vti6_tnl_xmit
akodanev Sep 26, 2017
110cf3d
l2tp: Avoid schedule while atomic in exit_net
ridgek Feb 22, 2017
b5f689d
l2tp: fix race condition in l2tp_tunnel_delete
qsn Sep 26, 2017
ee53492
tun: bail out from tun_get_user() if the skb is empty
ramosian-glider Sep 28, 2017
1b6c80e
packet: in packet_do_bind, test fanout with bind_lock held
wdebruij Sep 26, 2017
1299f7e
packet: only test po->has_vnet_hdr once in packet_snd
wdebruij Sep 26, 2017
6856997
net: Set sk_prot_creator when cloning sockets to the right proto
cpaasch Sep 27, 2017
01e3e63
tipc: use only positive error codes in messages
Sep 29, 2017
d44e463
Revert "bsg-lib: don't free job in bsg_prepare_job"
gregkh Oct 19, 2017
28eab3d
locking/lockdep: Add nest_lock integrity test
Mar 1, 2017
7e53f03
watchdog: kempld: fix gcc-4.3 build
arndb Mar 1, 2017
4a464da
irqchip/crossbar: Fix incorrect type of local variables
demathif Feb 23, 2017
3e8c1a0
mac80211_hwsim: check HWSIM_ATTR_RADIO_NAME length
jmberg-intel Feb 27, 2017
7ed668e
mac80211: fix power saving clients handling in iwlwifi
egrumbach Feb 20, 2017
743a3ce
net/mlx4_en: fix overflow in mlx4_en_init_timestamp()
Feb 23, 2017
5c65ed5
netfilter: nf_ct_expect: Change __nf_ct_expect_check() return value.
Feb 24, 2017
4d134d8
iio: adc: xilinx: Fix error handling
tititiou36 Feb 21, 2017
3109615
Btrfs: send, fix failure to rename top level inode due to name collision
Jan 5, 2017
48ca88f
f2fs: do not wait for writeback in write_begin
Feb 17, 2017
d14591e
md/linear: shutup lockdep warnning
shligit Feb 21, 2017
7bf94b9
sparc64: Migrate hvcons irq to panicked cpu
vijaykumar-s Feb 1, 2017
02744a5
net/mlx4_core: Fix VF overwrite of module param which disables DMFS o…
majdmellanox Feb 23, 2017
d3335f5
crypto: xts - Add ECB dependency
mbroz Feb 23, 2017
315689d
ocfs2/dlmglue: prepare tracking logic to avoid recursive cluster lock
Feb 22, 2017
9ac38e3
slub: do not merge cache if slub_debug contains a never-merge flag
Feb 22, 2017
693e651
scsi: scsi_dh_emc: return success in clariion_std_inquiry()
Feb 21, 2017
d7ecae7
net: mvpp2: release reference to txq_cpu[] entry after unmapping
tpetazzoni Feb 21, 2017
c128baf
i2c: at91: ensure state is restored after suspending
alexandrebelloni Feb 16, 2017
c7a20ed
ceph: clean up unsafe d_parent accesses in build_dentry_path
jtlayton Dec 15, 2016
028a419
uapi: fix linux/rds.h userspace compilation errors
ldv-alt Feb 16, 2017
823ba64
uapi: fix linux/mroute6.h userspace compilation errors
ldv-alt Feb 16, 2017
429a4ac
target/iscsi: Fix unsolicited data seq_end_offset calculation
Jan 20, 2017
c2c6f43
nfsd/callback: Cleanup callback cred on shutdown
kinglongmee Feb 5, 2017
cdbbea7
cpufreq: CPPC: add ACPI_PROCESSOR dependency
arndb Feb 14, 2017
401231d
Revert "tty: goldfish: Fix a parameter of a call to free_irq"
gregkh Oct 19, 2017
af9a9a7
Linux 4.4.94
gregkh Oct 21, 2017
abe43c9
USB: devio: Revert "USB: devio: Don't corrupt user memory"
jwrdegoede Oct 16, 2017
9dff499
USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor()
AlanStern Oct 18, 2017
4512d65
USB: serial: metro-usb: add MS7820 device id
jhovold Oct 12, 2017
d729f29
usb: cdc_acm: Add quirk for Elatec TWN3
Oct 11, 2017
d012ab2
usb: quirks: add quirk for WORLDE MINI MIDI keyboard
Oct 3, 2017
67e2580
usb: hub: Allow reset retry for USB2 devices on connect bounce
matnyman Oct 17, 2017
f7d8b2e
ALSA: usb-audio: Add native DSD support for Pro-Ject Pre Box S2 Digital
jlaako Oct 15, 2017
d68b07a
can: gs_usb: fix busy loop if no more TX context is available
grandwolf Sep 14, 2017
583a421
usb: musb: sunxi: Explicitly release USB PHY on exit
net147 Oct 10, 2017
aa62936
usb: musb: Check for host-mode using is_host_active() on reset interrupt
net147 Oct 10, 2017
4d56587
can: esd_usb2: Fix can_dlc value for received RTR, frames
stm-at-esd Oct 18, 2017
195674a
drm/nouveau/bsp/g92: disable by default
imirkin Oct 1, 2017
4516069
drm/nouveau/mmu: flush tlbs before deleting page tables
Sep 25, 2017
f9e9371
ALSA: seq: Enable 'use' locking in all configurations
bwh-ct Oct 17, 2017
68c6107
ALSA: hda: Remove superfluous '-' added by printk conversion
tiwai Oct 17, 2017
efdcbff
i2c: ismt: Separate I2C block read from SMBus block read
epontan Oct 2, 2017
260b673
brcmsmac: make some local variables 'static const' to reduce stack size
arndb Sep 22, 2017
b178c94
bus: mbus: fix window size calculation for 4GB windows
jluebbe Aug 28, 2017
cffdaa6
clockevents/drivers/cs5535: Improve resilience to spurious interrupts
Oct 19, 2017
51ba40f
rtlwifi: rtl8821ae: Fix connection lost problem
lwfinger Sep 20, 2017
2b7e022
KEYS: encrypted: fix dereference of NULL user_key_payload
ebiggers Oct 9, 2017
503ef5c
lib/digsig: fix dereference of NULL user_key_payload
ebiggers Oct 9, 2017
33dea30
KEYS: don't let add_key() update an uninstantiated key
dhowells Oct 12, 2017
6f0dee7
pkcs7: Prevent NULL pointer dereference, since sinfo is not always set.
EricSesterhennX41 Oct 8, 2017
558ca24
parisc: Avoid trashing sr2 and sr3 in LWS code
danglin44 Oct 28, 2016
fcc65ab
parisc: Fix double-word compare and exchange in LWS code on 32-bit ke…
danglin44 Sep 30, 2017
0f85c09
sched/autogroup: Fix autogroup_move_group() to never skip sched_move_…
oleg-nesterov Nov 14, 2016
4db9f11
f2fs crypto: replace some BUG_ON()'s with error checks
Feb 6, 2016
7d9e13d
f2fs crypto: add missing locking for keyring_key access
Feb 6, 2016
1dda04c
fscrypt: fix dereference of NULL user_key_payload
ebiggers Oct 9, 2017
8a004ca
KEYS: Fix race between updating and finding a negative key
dhowells Oct 4, 2017
1bb1d42
fscrypto: require write access to mount to set encryption policy
ebiggers Sep 8, 2016
aa3a0a7
FS-Cache: fix dereference of NULL user_key_payload
ebiggers Oct 9, 2017
9b36699
Linux 4.4.95
gregkh Oct 27, 2017
fce67b3
workqueue: replace pool->manager_arb mutex with a flag
htejun Oct 9, 2017
8c812f0
ALSA: hda/realtek - Add support for ALC236/ALC3204
KailangYang Oct 20, 2017
5f1d33a
ALSA: hda - fix headset mic problem for Dell machines with alc236
jason77-wang Oct 24, 2017
da0345d
ceph: unlock dangling spinlock in try_flush_caps()
jtlayton Oct 19, 2017
3505478
usb: xhci: Handle error condition in xhci_stop_device()
XNUBIA Oct 6, 2017
7d74eec
spi: uapi: spidev: add missing ioctl header
baruchsiach Sep 10, 2017
82e05e9
fuse: fix READDIRPLUS skipping an entry
Oct 25, 2017
8b396ff
xen/gntdev: avoid out of bounds access in case of partial gntdev_mmap()
jgross1 Oct 25, 2017
31d770a
Input: elan_i2c - add ELAN0611 to the ACPI table
khfeng Oct 24, 2017
2c99438
Input: gtco - fix potential out-of-bound access
dtor Oct 23, 2017
1cbbd99
assoc_array: Fix a buggy node-splitting case
dhowells Oct 11, 2017
6e9abbc
scsi: zfcp: fix erp_action use-before-initialize in REC action trace
steffen-maier Oct 13, 2017
62b54cc
scsi: sg: Re-fix off by one in sg_fill_request_table()
bwh-ct Oct 15, 2017
0c3cdb4
can: sun4i: fix loopback mode
GBert Aug 17, 2017
c1b0921
can: kvaser_usb: Correct return value in printout
jassarsson Oct 24, 2017
120ef1a
can: kvaser_usb: Ignore CMD_FLUSH_QUEUE_REPLY messages
jassarsson Oct 24, 2017
a272dc7
regulator: fan53555: fix I2C device ids
gctucker Aug 21, 2017
da0933c
x86/microcode/intel: Disable late loading on model 79
suryasaimadhu Oct 18, 2017
50044e4
ecryptfs: fix dereference of NULL user_key_payload
ebiggers Oct 9, 2017
b3d0469
Revert "drm: bridge: add DT bindings for TI ths8135"
gregkh Oct 31, 2017
27e68f1
Linux 4.4.96
gregkh Nov 2, 2017
7035878
ALSA: timer: Add missing mutex lock for compat ioctls
tiwai Oct 29, 2017
8142e95
ALSA: seq: Fix nested rwsem annotation for lockdep splat
tiwai Oct 29, 2017
d304c91
cifs: check MaxPathNameComponentLength != 0 before using it
Oct 30, 2017
97c5668
KEYS: return full count in keyring_read() if buffer is too small
ebiggers Nov 2, 2017
618b930
KEYS: fix out-of-bounds read during ASN.1 parsing
ebiggers Nov 2, 2017
97d64b7
ASoC: adau17x1: Workaround for noise bug in ADC
Sep 7, 2017
581ac5f
arm64: ensure __dump_instr() checks addr_limit
Nov 2, 2017
4e351b8
ARM: dts: mvebu: pl310-cache disable double-linefill
yanmarkman Oct 15, 2016
cc7d993
ARM: 8715/1: add a private asm/unaligned.h
arndb Oct 20, 2017
fa312b4
ocfs2: fstrim: Fix start offset of first cluster group during fstrim
Nov 2, 2017
6e6eba5
perf tools: Fix build failure on perl script context
namhyung Aug 2, 2016
031b02b
drm/msm: Fix potential buffer overflow issue
Jun 19, 2017
ded34f9
drm/msm: fix an integer overflow test
Jun 30, 2017
a48fce6
tracing/samples: Fix creation and deletion of simple_thread_fn creation
rostedt Oct 17, 2017
b83c288
Fix tracing sample code warning.
torvalds Oct 28, 2017
ba28f16
PM / wakeirq: report a wakeup_event on dedicated wekup irq
grygoriyS Oct 7, 2017
a3e0215
mmc: s3cmci: include linux/interrupt.h for tasklet_struct
arndb Oct 7, 2017
ed414ae
ARM: pxa: Don't rely on public mmc header to include leds.h
storulf Oct 7, 2017
8800aba
mfd: ab8500-sysctrl: Handle probe deferral
linusw Oct 7, 2017
f9776d7
mfd: axp20x: Fix axp288 PEK_DBR and PEK_DBF irqs being swapped
jwrdegoede Oct 7, 2017
a76eb0e
staging: rtl8712u: Fix endian settings for structs describing network…
lwfinger Oct 7, 2017
5624ea1
ext4: fix stripe-unaligned allocations
jankara Oct 7, 2017
3580080
ext4: do not use stripe_width if it is not set
jankara Oct 7, 2017
dec5fcf
i2c: riic: correctly finish transfers
seebe Oct 7, 2017
3b7d9a9
drm/amdgpu: when dpm disabled, also need to stop/start vce.
Oct 7, 2017
0806eaf
perf tools: Only increase index if perf_evsel__new_idx() succeeds
Taeung Oct 7, 2017
762d076
cx231xx: Fix I2C on Internal Master 3 Bus
Oleh-Kravchenko Oct 7, 2017
fff544c
xen/manage: correct return value check on xenbus_scanf()
jbeulich Oct 7, 2017
d1f96c3
scsi: aacraid: Process Error for response I/O
Oct 7, 2017
28a8fc6
platform/x86: intel_mid_thermal: Fix module autoload
Oct 7, 2017
2d1d453
staging: lustre: llite: don't invoke direct_IO for the EOF case
ShengYang1 Oct 7, 2017
efa8f1b
staging: lustre: hsm: stack overrun in hai_dump_data_field
fzago-cray Oct 7, 2017
2d097e5
staging: lustre: ptlrpc: skip lock if export failed
Oct 7, 2017
0e97077
exynos4-is: fimc-is: Unmap region obtained by of_iomap()
ArvindYadavCs Oct 7, 2017
45a012a
mei: return error on notification request to a disconnected client
ausyskin Oct 7, 2017
4b7a358
s390/dasd: check for device error pointer within state change interrupts
stefan-haberland Oct 7, 2017
298455f
bt8xx: fix memory leak
sudipm-mukherjee Oct 7, 2017
883706d
xen: don't print error message in case of missing Xenstore entry
jgross1 May 30, 2017
2ed81e6
staging: r8712u: Fix Sparse warning in rtl871x_xmit.c
lwfinger Feb 11, 2017
c54d070
Linux 4.4.97
gregkh Nov 8, 2017
abe3e64
Merge tag 'v4.4.97' into 4.4.x
redbrain17 Nov 15, 2017
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
USB: gadgetfs: fix copy_to_user while holding spinlock
commit 6e76c01 upstream.

The gadgetfs driver as a long-outstanding FIXME, regarding a call of
copy_to_user() made while holding a spinlock.  This patch fixes the
issue by dropping the spinlock and using the dev->udc_usage mechanism
introduced by another recent patch to guard against status changes
while the lock isn't held.

Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
Reported-by: Andrey Konovalov <andreyknvl@google.com>
Acked-by: Felipe Balbi <felipe.balbi@linux.intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
  • Loading branch information
AlanStern authored and gregkh committed Oct 12, 2017

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
commit f72264e79ae74c845f9af8e2fdda86075afd0331
5 changes: 4 additions & 1 deletion drivers/usb/gadget/legacy/inode.c
Original file line number Diff line number Diff line change
@@ -985,11 +985,14 @@ ep0_read (struct file *fd, char __user *buf, size_t len, loff_t *ptr)
retval = -EIO;
else {
len = min (len, (size_t)dev->req->actual);
// FIXME don't call this with the spinlock held ...
++dev->udc_usage;
spin_unlock_irq(&dev->lock);
if (copy_to_user (buf, dev->req->buf, len))
retval = -EFAULT;
else
retval = len;
spin_lock_irq(&dev->lock);
--dev->udc_usage;
clean_req (dev->gadget->ep0, dev->req);
/* NOTE userspace can't yet choose to stall */
}