{"push_id":608207881,"size":179,"distinct_size":1,"ref":"refs/heads/3.19/master","head":"9954705e1d88de9fced371e1503f762ef2db4ff7","before":"277bdac91159efb8f4815fce96812b90aba3782f","commits":[{"sha":"3ec37c5e28b90c8f9f5173c0a7a61d513684f7b5","author":{"email":"1247e024fd6d643afe2cdb7eafe74907ca00d25d@miroslavurbanek.com","name":"Miroslav Urbanek"},"message":"flowcache: Fix kernel panic in flow_cache_flush_task\n\n[ Upstream commit 233c96fc077d310772375d47522fb444ff546905 ]\n\nflow_cache_flush_task references a structure member flow_cache_gc_work\nwhere it should reference flow_cache_flush_task instead.\n\nKernel panic occurs on kernels using IPsec during XFRM garbage\ncollection. The garbage collection interval can be shortened using the\nfollowing sysctl settings:\n\nnet.ipv4.xfrm4_gc_thresh=4\nnet.ipv6.xfrm6_gc_thresh=4\n\nWith the default settings, our productions servers crash approximately\nonce a week. With the settings above, they crash immediately.\n\nFixes: ca925cf1534e (\"flowcache: Make flow cache name space aware\")\nReported-by: Tomáš Charvát <tc@excello.cz>\nTested-by: Jan Hejl <jh@excello.cz>\nSigned-off-by: Miroslav Urbanek <mu@miroslavurbanek.com>\nAcked-by: Eric Dumazet <edumazet@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/3ec37c5e28b90c8f9f5173c0a7a61d513684f7b5"},{"sha":"5484abd9b6a0449ccca3875dc3eee4ad7e6ebcdd","author":{"email":"3d0f3b9ddcacec30c4008c5e030e6c13a478cb4f@iogearbox.net","name":"Daniel Borkmann"},"message":"ipv6: addrconf: add missing validate_link_af handler\n\n[ Upstream commit 11b1f8288d4341af5d755281c871bff6c3e270dd ]\n\nWe still need a validate_link_af() handler with an appropriate nla policy,\nsimilarly as we have in IPv4 case, otherwise size validations are not being\ndone properly in that case.\n\nFixes: f53adae4eae5 (\"net: ipv6: add tokenized interface identifier support\")\nFixes: bc91b0f07ada (\"ipv6: addrconf: implement address generation modes\")\nCc: Jiri Pirko <jiri@resnulli.us>\nSigned-off-by: Daniel Borkmann <daniel@iogearbox.net>\nAcked-by: Jiri Pirko <jiri@resnulli.us>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/5484abd9b6a0449ccca3875dc3eee4ad7e6ebcdd"},{"sha":"18bb5d3023fbf4331128c67df627cd88ab47911b","author":{"email":"4452d71687b6bc2c9389c3349fdc17fbd73b833b@queasysnail.net","name":"Sabrina Dubroca"},"message":"pktgen: fix UDP checksum computation\n\n[ Upstream commit 7744b5f3693cc06695cb9d6667671c790282730f ]\n\nThis patch fixes two issues in UDP checksum computation in pktgen.\n\nFirst, the pseudo-header uses the source and destination IP\naddresses. Currently, the ports are used for IPv4.\n\nSecond, the UDP checksum covers both header and data.  So we need to\ngenerate the data earlier (move pktgen_finalize_skb up), and compute\nthe checksum for UDP header + data.\n\nFixes: c26bf4a51308c (\"pktgen: Add UDPCSUM flag to support UDP checksums\")\nSigned-off-by: Sabrina Dubroca <sd@queasysnail.net>\nAcked-by: Thomas Graf <tgraf@suug.ch>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/18bb5d3023fbf4331128c67df627cd88ab47911b"},{"sha":"4f630d422d9a18523c75be7fa81d413210904a44","author":{"email":"3d0f3b9ddcacec30c4008c5e030e6c13a478cb4f@iogearbox.net","name":"Daniel Borkmann"},"message":"rtnetlink: ifla_vf_policy: fix misuses of NLA_BINARY\n\n[ Upstream commit 364d5716a7adb91b731a35765d369602d68d2881 ]\n\nifla_vf_policy[] is wrong in advertising its individual member types as\nNLA_BINARY since .type = NLA_BINARY in combination with .len declares the\nlen member as *max* attribute length [0, len].\n\nThe issue is that when do_setvfinfo() is being called to set up a VF\nthrough ndo handler, we could set corrupted data if the attribute length\nis less than the size of the related structure itself.\n\nThe intent is exactly the opposite, namely to make sure to pass at least\ndata of minimum size of len.\n\nFixes: ebc08a6f47ee (\"rtnetlink: Add VF config code to rtnetlink\")\nCc: Mitch Williams <mitch.a.williams@intel.com>\nCc: Jeff Kirsher <jeffrey.t.kirsher@intel.com>\nSigned-off-by: Daniel Borkmann <daniel@iogearbox.net>\nAcked-by: Thomas Graf <tgraf@suug.ch>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/4f630d422d9a18523c75be7fa81d413210904a44"},{"sha":"aee614696c22c6ba6a12de0382e814a347ef25e0","author":{"email":"df4bbba3da7ae0371dc686d07d0ceb66ffa78730@gmail.com","name":"Vlad Yasevich"},"message":"ipv6: Fix fragment id assignment on LE arches.\n\n[ Upstream commit 51f30770e50eb787200f30a79105e2615b379334 ]\n\nRecent commit:\n0508c07f5e0c94f38afd5434e8b2a55b84553077\nAuthor: Vlad Yasevich <vyasevich@gmail.com>\nDate:   Tue Feb 3 16:36:15 2015 -0500\n\n    ipv6: Select fragment id during UFO segmentation if not set.\n\nIntroduced a bug on LE in how ipv6 fragment id is assigned.\nThis was cought by nightly sparce check:\n\nResolve the following sparce error:\n net/ipv6/output_core.c:57:38: sparse: incorrect type in assignment\n (different base types)\n   net/ipv6/output_core.c:57:38:    expected restricted __be32\n[usertype] ip6_frag_id\n   net/ipv6/output_core.c:57:38:    got unsigned int [unsigned]\n[assigned] [usertype] id\n\nFixes: 0508c07f5e0c9 (ipv6: Select fragment id during UFO segmentation if not set.)\nSigned-off-by: Vladislav Yasevich <vyasevic@redhat.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/aee614696c22c6ba6a12de0382e814a347ef25e0"},{"sha":"9519ba7401b98c4c882d06b218d14dce45fcb7c1","author":{"email":"df4bbba3da7ae0371dc686d07d0ceb66ffa78730@gmail.com","name":"Vlad Yasevich"},"message":"ipv6: Make __ipv6_select_ident static\n\n[ Upstream commit 8381eacf5c3b35cf7755f4bc521c4d56d24c1cd9 ]\n\nMake __ipv6_select_ident() static as it isn't used outside\nthe file.\n\nFixes: 0508c07f5e0c9 (ipv6: Select fragment id during UFO segmentation if not set.)\nSigned-off-by: Vladislav Yasevich <vyasevic@redhat.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/9519ba7401b98c4c882d06b218d14dce45fcb7c1"},{"sha":"b73f6e471cdd6c4474aff6b6301af2779462d98d","author":{"email":"312c7d941f03386814be517ffdb3e0eb6624e275@google.com","name":"Eric Dumazet"},"message":"tcp: make sure skb is not shared before using skb_get()\n\n[ Upstream commit ba34e6d9d346fe4e05d7e417b9edf5140772d34c ]\n\nIPv6 can keep a copy of SYN message using skb_get() in\ntcp_v6_conn_request() so that caller wont free the skb when calling\nkfree_skb() later.\n\nTherefore TCP fast open has to clone the skb it is queuing in\nchild->sk_receive_queue, as all skbs consumed from receive_queue are\nfreed using __kfree_skb() (ie assuming skb->users == 1)\n\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nSigned-off-by: Yuchung Cheng <ycheng@google.com>\nFixes: 5b7ed0892f2af (\"tcp: move fastopen functions to tcp_fastopen.c\")\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/b73f6e471cdd6c4474aff6b6301af2779462d98d"},{"sha":"29ec76704d111f747e5640ce3998611c5407049b","author":{"email":"2c0d8efbe28c4f7a45c3ab30c984ed2c126716bd@fb.com","name":"Martin KaFai Lau"},"message":"ipv6: fix ipv6_cow_metrics for non DST_HOST case\n\n[ Upstream commit 3b4711757d7903ab6fa88a9e7ab8901b8227da60 ]\n\nipv6_cow_metrics() currently assumes only DST_HOST routes require\ndynamic metrics allocation from inetpeer.  The assumption breaks\nwhen ndisc discovered router with RTAX_MTU and RTAX_HOPLIMIT metric.\nRefer to ndisc_router_discovery() in ndisc.c and note that dst_metric_set()\nis called after the route is created.\n\nThis patch creates the metrics array (by calling dst_cow_metrics_generic) in\nipv6_cow_metrics().\n\nTest:\nradvd.conf:\ninterface qemubr0\n{\n\tAdvLinkMTU 1300;\n\tAdvCurHopLimit 30;\n\n\tprefix fd00:face:face:face::/64\n\t{\n\t\tAdvOnLink on;\n\t\tAdvAutonomous on;\n\t\tAdvRouterAddr off;\n\t};\n};\n\nBefore:\n[root@qemu1 ~]# ip -6 r show | egrep -v unreachable\nfd00:face:face:face::/64 dev eth0  proto kernel  metric 256  expires 27sec\nfe80::/64 dev eth0  proto kernel  metric 256\ndefault via fe80::74df:d0ff:fe23:8ef2 dev eth0  proto ra  metric 1024  expires 27sec\n\nAfter:\n[root@qemu1 ~]# ip -6 r show | egrep -v unreachable\nfd00:face:face:face::/64 dev eth0  proto kernel  metric 256  expires 27sec mtu 1300\nfe80::/64 dev eth0  proto kernel  metric 256  mtu 1300\ndefault via fe80::74df:d0ff:fe23:8ef2 dev eth0  proto ra  metric 1024  expires 27sec mtu 1300 hoplimit 30\n\nFixes: 8e2ec639173f325 (ipv6: don't use inetpeer to store metrics for routes.)\nSigned-off-by: Martin KaFai Lau <kafai@fb.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/29ec76704d111f747e5640ce3998611c5407049b"},{"sha":"2f3b6173e44a8add131deffe49c556472301f281","author":{"email":"0f114804888b88d50037b04b42e57b858d851b87@gmail.com","name":"WANG Cong"},"message":"rtnetlink: call ->dellink on failure when ->newlink exists\n\n[ Upstream commit 7afb8886a05be68e376655539a064ec672de8a8e ]\n\nIgnacy reported that when eth0 is down and add a vlan device\non top of it like:\n\n  ip link add link eth0 name eth0.1 up type vlan id 1\n\nWe will get a refcount leak:\n\n  unregister_netdevice: waiting for eth0.1 to become free. Usage count = 2\n\nThe problem is when rtnl_configure_link() fails in rtnl_newlink(),\nwe simply call unregister_device(), but for stacked device like vlan,\nwe almost do nothing when we unregister the upper device, more work\nis done when we unregister the lower device, so call its ->dellink().\n\nReported-by: Ignacy Gawedzki <ignacy.gawedzki@green-communications.fr>\nSigned-off-by: Cong Wang <xiyou.wangcong@gmail.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/2f3b6173e44a8add131deffe49c556472301f281"},{"sha":"e67e4522676c60772d3bf476bfbf99fd7d4c1aca","author":{"email":"51abb9c683c0b6664a29ebe2b7e8d8cdfbc4c98e@green-communications.fr","name":"Ignacy Gawędzki"},"message":"gen_stats.c: Duplicate xstats buffer for later use\n\n[ Upstream commit 1c4cff0cf55011792125b6041bc4e9713e46240f ]\n\nThe gnet_stats_copy_app() function gets called, more often than not, with its\nsecond argument a pointer to an automatic variable in the caller's stack.\nTherefore, to avoid copying garbage afterwards when calling\ngnet_stats_finish_copy(), this data is better copied to a dynamically allocated\nmemory that gets freed after use.\n\n[xiyou.wangcong@gmail.com: remove a useless kfree()]\n\nSigned-off-by: Ignacy Gawędzki <ignacy.gawedzki@green-communications.fr>\nSigned-off-by: Cong Wang <xiyou.wangcong@gmail.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/e67e4522676c60772d3bf476bfbf99fd7d4c1aca"},{"sha":"1ccd26c9825ebeb625f04d2e7ebe9c8478a20afe","author":{"email":"dbf41cb3fb2439ca6a6ecbeb8a3e20110560cd31@gmail.com","name":"Alexander Drozdov"},"message":"ipv4: ip_check_defrag should correctly check return value of skb_copy_bits\n\n[ Upstream commit fba04a9e0c869498889b6445fd06cbe7da9bb834 ]\n\nskb_copy_bits() returns zero on success and negative value on error,\nso it is needed to invert the condition in ip_check_defrag().\n\nFixes: 1bf3751ec90c (\"ipv4: ip_check_defrag must not modify skb before unsharing\")\nSigned-off-by: Alexander Drozdov <al.drozdov@gmail.com>\nAcked-by: Eric Dumazet <edumazet@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/1ccd26c9825ebeb625f04d2e7ebe9c8478a20afe"},{"sha":"8959499caafe926472ef0475344a913c825c2708","author":{"email":"dbf41cb3fb2439ca6a6ecbeb8a3e20110560cd31@gmail.com","name":"Alexander Drozdov"},"message":"ipv4: ip_check_defrag should not assume that skb_network_offset is zero\n\n[ Upstream commit 3e32e733d1bbb3f227259dc782ef01d5706bdae0 ]\n\nip_check_defrag() may be used by af_packet to defragment outgoing packets.\nskb_network_offset() of af_packet's outgoing packets is not zero.\n\nSigned-off-by: Alexander Drozdov <al.drozdov@gmail.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/8959499caafe926472ef0475344a913c825c2708"},{"sha":"1dd8e3243c434a4f45bf2a5d1d3a9a0baf37ef64","author":{"email":"ba324ca7b1c77fc20bb970d5aff6eea9377918a5@roeck-us.net","name":"Guenter Roeck"},"message":"net: phy: Fix verification of EEE support in phy_init_eee\n\n[ Upstream commit 54da5a8be3c1e924c35480eb44c6e9b275f6444e ]\n\nphy_init_eee uses phy_find_setting(phydev->speed, phydev->duplex)\nto find a valid entry in the settings array for the given speed\nand duplex value. For full duplex 1000baseT, this will return\nthe first matching entry, which is the entry for 1000baseKX_Full.\n\nIf the phy eee does not support 1000baseKX_Full, this entry will not\nmatch, causing phy_init_eee to fail for no good reason.\n\nFixes: 9a9c56cb34e6 (\"net: phy: fix a bug when verify the EEE support\")\nFixes: 3e7077067e80c (\"phy: Expand phy speed/duplex settings array\")\nCc: Giuseppe Cavallaro <peppe.cavallaro@st.com>\nSigned-off-by: Guenter Roeck <linux@roeck-us.net>\nAcked-by: Florian Fainelli <f.fainelli@gmail.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/1dd8e3243c434a4f45bf2a5d1d3a9a0baf37ef64"},{"sha":"7f77f6c882bcd27a9bf750f96e9fe63ecbe443f5","author":{"email":"51abb9c683c0b6664a29ebe2b7e8d8cdfbc4c98e@green-communications.fr","name":"Ignacy Gawędzki"},"message":"ematch: Fix auto-loading of ematch modules.\n\n[ Upstream commit 34eea79e2664b314cab6a30fc582fdfa7a1bb1df ]\n\nIn tcf_em_validate(), after calling request_module() to load the\nkind-specific module, set em->ops to NULL before returning -EAGAIN, so\nthat module_put() is not called again by tcf_em_tree_destroy().\n\nSigned-off-by: Ignacy Gawędzki <ignacy.gawedzki@green-communications.fr>\nAcked-by: Cong Wang <cwang@twopensource.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/7f77f6c882bcd27a9bf750f96e9fe63ecbe443f5"},{"sha":"488da593c9e4eafd5783a631e644af67fd6cf003","author":{"email":"95dcc1879f3489c0d5163907cdd946775296b2dd@nicira.com","name":"Pravin B Shelar"},"message":"openvswitch: Fix net exit.\n\n[ Upstream commit 7b4577a9da3702049650f7095506e9afd9f68849 ]\n\nOpen vSwitch allows moving internal vport to different namespace\nwhile still connected to the bridge. But when namespace deleted\nOVS does not detach these vports, that results in dangling\npointer to netdevice which causes kernel panic as follows.\nThis issue is fixed by detaching all ovs ports from the deleted\nnamespace at net-exit.\n\nBUG: unable to handle kernel NULL pointer dereference at 0000000000000028\nIP: [<ffffffffa0aadaa5>] ovs_vport_locate+0x35/0x80 [openvswitch]\nOops: 0000 [#1] SMP\nCall Trace:\n [<ffffffffa0aa6391>] lookup_vport+0x21/0xd0 [openvswitch]\n [<ffffffffa0aa65f9>] ovs_vport_cmd_get+0x59/0xf0 [openvswitch]\n [<ffffffff8167e07c>] genl_family_rcv_msg+0x1bc/0x3e0\n [<ffffffff8167e319>] genl_rcv_msg+0x79/0xc0\n [<ffffffff8167d919>] netlink_rcv_skb+0xb9/0xe0\n [<ffffffff8167deac>] genl_rcv+0x2c/0x40\n [<ffffffff8167cffd>] netlink_unicast+0x12d/0x1c0\n [<ffffffff8167d3da>] netlink_sendmsg+0x34a/0x6b0\n [<ffffffff8162e140>] sock_sendmsg+0xa0/0xe0\n [<ffffffff8162e5e8>] ___sys_sendmsg+0x408/0x420\n [<ffffffff8162f541>] __sys_sendmsg+0x51/0x90\n [<ffffffff8162f592>] SyS_sendmsg+0x12/0x20\n [<ffffffff81764ee9>] system_call_fastpath+0x12/0x17\n\nReported-by: Assaf Muller <amuller@redhat.com>\nFixes: 46df7b81454(\"openvswitch: Add support for network namespaces.\")\nSigned-off-by: Pravin B Shelar <pshelar@nicira.com>\nReviewed-by: Thomas Graf <tgraf@noironetworks.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/488da593c9e4eafd5783a631e644af67fd6cf003"},{"sha":"9d0ba3cf285bc815de7d4cf3fc2bf9fe4d4e5c5c","author":{"email":"312c7d941f03386814be517ffdb3e0eb6624e275@google.com","name":"Eric Dumazet"},"message":"sock: sock_dequeue_err_skb() needs hard irq safety\n\n[ Upstream commit 997d5c3f4427f38562cbe207ce05bb25fdcb993b ]\n\nNon NAPI drivers can call skb_tstamp_tx() and then sock_queue_err_skb()\nfrom hard IRQ context.\n\nTherefore, sock_dequeue_err_skb() needs to block hard irq or\ncorruptions or hangs can happen.\n\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nFixes: 364a9e93243d1 (\"sock: deduplicate errqueue dequeue\")\nFixes: cb820f8e4b7f7 (\"net: Provide a generic socket error queue delivery method for Tx time stamps.\")\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/9d0ba3cf285bc815de7d4cf3fc2bf9fe4d4e5c5c"},{"sha":"465146d28c3173d31229df1cf53a4696360a399d","author":{"email":"1428de2d70d1c53cd978750576cb0eaf318833d1@mthode.org","name":"Matthew Thode"},"message":"net: reject creation of netdev names with colons\n\n[ Upstream commit a4176a9391868bfa87705bcd2e3b49e9b9dd2996 ]\n\ncolons are used as a separator in netdev device lookup in dev_ioctl.c\n\nSpecific functions are SIOCGIFTXQLEN SIOCETHTOOL SIOCSIFNAME\n\nSigned-off-by: Matthew Thode <mthode@mthode.org>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/465146d28c3173d31229df1cf53a4696360a399d"},{"sha":"9ae56d8b65097d9f5b95e49663af5f6a479fe839","author":{"email":"fe08d3c717adf2ae63592e4c9aec6e3e404d8e3e@davemloft.net","name":"David S. Miller"},"message":"Revert \"r8169: add support for Byte Queue Limits\"\n\nThis reverts commit 1e918876853aa85435e0f17fd8b4a92dcfff53d6.\n\nRevert BQL support in r8169 driver as several regressions\npoint to this commit and we cannot figure out the real\ncause yet.\n\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/9ae56d8b65097d9f5b95e49663af5f6a479fe839"},{"sha":"37c63bf5b692b8311722b3b64c9d7fe0022d43bf","author":{"email":"312c7d941f03386814be517ffdb3e0eb6624e275@google.com","name":"Eric Dumazet"},"message":"net: pktgen: disable xmit_clone on virtual devices\n\n[ Upstream commit 52d6c8c6ca125872459054daa70f2f1c698c8e75 ]\n\nTrying to use burst capability (aka xmit_more) on a virtual device\nlike bonding is not supported.\n\nFor example, skb might be queued multiple times on a qdisc, with\nvarious list corruptions.\n\nFixes: 38b2cf2982dc (\"net: pktgen: packet bursting via skb->xmit_more\")\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nCc: Alexei Starovoitov <ast@plumgrid.com>\nAcked-by: Alexei Starovoitov <ast@plumgrid.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/37c63bf5b692b8311722b3b64c9d7fe0022d43bf"},{"sha":"82b92857cb40358a86d092db31aa667c5d87af1c","author":{"email":"1b548d10035ae428195c41f5d55eedb1437ccd8a@resnulli.us","name":"Jiri Pirko"},"message":"team: fix possible null pointer dereference in team_handle_frame\n\n[ Upstream commit 57e595631904c827cfa1a0f7bbd7cc9a49da5745 ]\n\nCurrently following race is possible in team:\n\nCPU0                                        CPU1\n                                            team_port_del\n                                              team_upper_dev_unlink\n                                                priv_flags &= ~IFF_TEAM_PORT\nteam_handle_frame\n  team_port_get_rcu\n    team_port_exists\n      priv_flags & IFF_TEAM_PORT == 0\n    return NULL (instead of port got\n                 from rx_handler_data)\n                                              netdev_rx_handler_unregister\n\nThe thing is that the flag is removed before rx_handler is unregistered.\nIf team_handle_frame is called in between, team_port_exists returns 0\nand team_port_get_rcu will return NULL.\nSo do not check the flag here. It is guaranteed by netdev_rx_handler_unregister\nthat team_handle_frame will always see valid rx_handler_data pointer.\n\nSigned-off-by: Jiri Pirko <jiri@resnulli.us>\nFixes: 3d249d4ca7d0 (\"net: introduce ethernet teaming device\")\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/zen-kernel/zen-kernel/commits/82b92857cb40358a86d092db31aa667c5d87af1c"}]}