{"push_id":701848707,"size":175,"distinct_size":1,"ref":"refs/heads/nexus-5-m-preview","head":"3427cfe1b537f4e1cc8d0da13be46444583fbc29","before":"706a350eca8c41ffb39d59b20031bc38230f76a6","commits":[{"sha":"830f883662666d396a4633a8492843b1de6044f7","author":{"email":"b6edad08270b2e4ffbcb0879e25a0e29a48c5275@gmail.com","name":"Dmitry Eremin-Solenikov"},"message":"ARM: pxa: add regulator_has_full_constraints to corgi board file\n\ncommit 271e80176aae4e5b481f4bb92df9768c6075bbca upstream.\n\nAdd regulator_has_full_constraints() call to corgi board file to let\nregulator core know that we do not have any additional regulators left.\nThis lets it substitute unprovided regulators with dummy ones.\n\nThis fixes the following warnings that can be seen on corgi if\nregulators are enabled:\n\nads7846 spi1.0: unable to get regulator: -517\nspi spi1.0: Driver ads7846 requests probe deferral\nwm8731 0-001b: Failed to get supply 'AVDD': -517\nwm8731 0-001b: Failed to request supplies: -517\nwm8731 0-001b: ASoC: failed to probe component -517\ncorgi-audio corgi-audio: ASoC: failed to instantiate card -517\n\nSigned-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>\nAcked-by: Mark Brown <broonie@kernel.org>\nSigned-off-by: Robert Jarzmik <robert.jarzmik@free.fr>\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/830f883662666d396a4633a8492843b1de6044f7"},{"sha":"6c6b1b293e549de440fa5229cf2153c8c7960243","author":{"email":"b6edad08270b2e4ffbcb0879e25a0e29a48c5275@gmail.com","name":"Dmitry Eremin-Solenikov"},"message":"ARM: pxa: add regulator_has_full_constraints to poodle board file\n\ncommit 9bc78f32c2e430aebf6def965b316aa95e37a20c upstream.\n\nAdd regulator_has_full_constraints() call to poodle board file to let\nregulator core know that we do not have any additional regulators left.\nThis lets it substitute unprovided regulators with dummy ones.\n\nThis fixes the following warnings that can be seen on poodle if\nregulators are enabled:\n\nads7846 spi1.0: unable to get regulator: -517\nspi spi1.0: Driver ads7846 requests probe deferral\nwm8731 0-001b: Failed to get supply 'AVDD': -517\nwm8731 0-001b: Failed to request supplies: -517\nwm8731 0-001b: ASoC: failed to probe component -517\n\nSigned-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>\nAcked-by: Mark Brown <broonie@kernel.org>\nSigned-off-by: Robert Jarzmik <robert.jarzmik@free.fr>\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/6c6b1b293e549de440fa5229cf2153c8c7960243"},{"sha":"3df3cce4efd1004907d1abd75f34465ae62c9954","author":{"email":"b6edad08270b2e4ffbcb0879e25a0e29a48c5275@gmail.com","name":"Dmitry Eremin-Solenikov"},"message":"ARM: pxa: add regulator_has_full_constraints to spitz board file\n\ncommit baad2dc49c5d970ea881d92981a1b76c94a7b7a1 upstream.\n\nAdd regulator_has_full_constraints() call to spitz board file to let\nregulator core know that we do not have any additional regulators left.\nThis lets it substitute unprovided regulators with dummy ones.\n\nThis fixes the following warnings that can be seen on spitz if\nregulators are enabled:\n\nads7846 spi2.0: unable to get regulator: -517\nspi spi2.0: Driver ads7846 requests probe deferral\n\nSigned-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>\nAcked-by: Mark Brown <broonie@kernel.org>\nSigned-off-by: Robert Jarzmik <robert.jarzmik@free.fr>\n[lizf: Backported to 3.4: adjust context]\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/3df3cce4efd1004907d1abd75f34465ae62c9954"},{"sha":"0d51bca9808936920dd6042743b002a4d85c6fec","author":{"email":"e2c59234e0cf8698d30644ce184b76e2bc15ea39@gmail.com","name":"Martin Vajnar"},"message":"hx4700: regulator: declare full constraints\n\ncommit a52d209336f8fc7483a8c7f4a8a7d2a8e1692a6c upstream.\n\nSince the removal of CONFIG_REGULATOR_DUMMY option, the touchscreen stopped\nworking. This patch enables the \"replacement\" for REGULATOR_DUMMY and\nallows the touchscreen to work even though there is no regulator for \"vcc\".\n\nSigned-off-by: Martin Vajnar <martin.vajnar@gmail.com>\nSigned-off-by: Robert Jarzmik <robert.jarzmik@free.fr>\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/0d51bca9808936920dd6042743b002a4d85c6fec"},{"sha":"3274eed40faa3c0af04a78c2372ec4bd172bbe7a","author":{"email":"39bb74b16720293e1449e36465485b27216fbd6d@gmail.com","name":"Ricardo Ribalda Delgado"},"message":"PCI: Generate uppercase hex for modalias var in uevent\n\ncommit 145b3fe579db66fbe999a2bc3fd5b63dffe9636d upstream.\n\nSome implementations of modprobe fail to load the driver for a PCI device\nautomatically because the \"interface\" part of the modalias from the kernel\nis lowercase, and the modalias from file2alias is uppercase.\n\nThe \"interface\" is the low-order byte of the Class Code, defined in PCI\nr3.0, Appendix D.  Most interface types defined in the spec do not use\nalpha characters, so they won't be affected.  For example, 00h, 01h, 10h,\n20h, etc. are unaffected.\n\nPrint the \"interface\" byte of the Class Code in uppercase hex, as we\nalready do for the Vendor ID, Device ID, Class, etc.\n\nCommit 89ec3dcf17fd (\"PCI: Generate uppercase hex for modalias interface\nclass\") fixed only half of the problem.  Some udev implementations rely on\nthe uevent file and not the modalias file.\n\nFixes: d1ded203adf1 (\"PCI: add MODALIAS to hotplug event for pci devices\")\nFixes: 89ec3dcf17fd (\"PCI: Generate uppercase hex for modalias interface class\")\nSigned-off-by: Ricardo Ribalda Delgado <ricardo.ribalda@gmail.com>\nSigned-off-by: Bjorn Helgaas <bhelgaas@google.com>\nAcked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\n[lizf: Backported to 3.4: adjust filename]\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/3274eed40faa3c0af04a78c2372ec4bd172bbe7a"},{"sha":"aef29c3576fb89843193a2a026719a0fdb4145ab","author":{"email":"265264fed90bdf8e813a354375ec16f47ebdb1c5@linutronix.de","name":"Sebastian Andrzej Siewior"},"message":"usb: core: buffer: smallest buffer should start at ARCH_DMA_MINALIGN\n\ncommit 5efd2ea8c9f4f12916ffc8ba636792ce052f6911 upstream.\n\nthe following error pops up during \"testusb -a -t 10\"\n| musb-hdrc musb-hdrc.1.auto: dma_pool_free buffer-128,\tf134e000/be842000 (bad dma)\nhcd_buffer_create() creates a few buffers, the smallest has 32 bytes of\nsize. ARCH_KMALLOC_MINALIGN is set to 64 bytes. This combo results in\nhcd_buffer_alloc() returning memory which is 32 bytes aligned and it\nmight by identified by buffer_offset() as another buffer. This means the\nbuffer which is on a 32 byte boundary will not get freed, instead it\ntries to free another buffer with the error message.\n\nThis patch fixes the issue by creating the smallest DMA buffer with the\nsize of ARCH_KMALLOC_MINALIGN (or 32 in case ARCH_KMALLOC_MINALIGN is\nsmaller). This might be 32, 64 or even 128 bytes. The next three pools\nwill have the size 128, 512 and 2048.\nIn case the smallest pool is 128 bytes then we have only three pools\ninstead of four (and zero the first entry in the array).\nThe last pool size is always 2048 bytes which is the assumed PAGE_SIZE /\n2 of 4096. I doubt it makes sense to continue using PAGE_SIZE / 2 where\nwe would end up with 8KiB buffer in case we have 16KiB pages.\nInstead I think it makes sense to have a common size(s) and extend them\nif there is need to.\nThere is a BUILD_BUG_ON() now in case someone has a minalign of more than\n128 bytes.\n\nSigned-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>\nAcked-by: Alan Stern <stern@rowland.harvard.edu>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/aef29c3576fb89843193a2a026719a0fdb4145ab"},{"sha":"b24c9cfb7c8c72e74ec1b8c5bcf3e26e20c56e77","author":{"email":"ed1245e46949b7b8f2bca25d41520ebc8aeefcf8@intel.com","name":"Matthew Wilcox"},"message":"axonram: Fix bug in direct_access\n\ncommit 91117a20245b59f70b563523edbf998a62fc6383 upstream.\n\nThe 'pfn' returned by axonram was completely bogus, and has been since\n2008.\n\nSigned-off-by: Matthew Wilcox <matthew.r.wilcox@intel.com>\nReviewed-by: Jan Kara <jack@suse.cz>\nReviewed-by: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>\nSigned-off-by: Jens Axboe <axboe@fb.com>\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/b24c9cfb7c8c72e74ec1b8c5bcf3e26e20c56e77"},{"sha":"de2a293c9b4cfda94aeb5572383beaa6493dd96d","author":{"email":"0d9d62b6946df53600b61f071e2018034c546d7b@gmail.com","name":"Dmitry Tunin"},"message":"Bluetooth: ath3k: Add support of AR3012 bluetooth 13d3:3423 device\n\ncommit 033efa920a7f22a8caf7a38d851a2f451781bbf7 upstream.\n\nAdd support of 13d3:3423 device.\n\nBugLink: https://bugs.launchpad.net/bugs/1411193\n\nT: Bus=01 Lev=02 Prnt=03 Port=00 Cnt=01 Dev#= 5 Spd=12 MxCh= 0\nD: Ver= 1.10 Cls=e0(wlcon) Sub=01 Prot=01 MxPS=64 #Cfgs= 1\nP: Vendor=13d3 ProdID=3423 Rev= 0.01\nC:* #Ifs= 2 Cfg#= 1 Atr=e0 MxPwr=100mA\nA: FirstIf#= 0 IfCount= 2 Cls=e0(wlcon) Sub=01 Prot=01\nI:* If#= 0 Alt= 0 #EPs= 3 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb\nE: Ad=81(I) Atr=03(Int.) MxPS= 16 Ivl=1ms\nE: Ad=82(I) Atr=02(Bulk) MxPS= 64 Ivl=0ms\nE: Ad=02(O) Atr=02(Bulk) MxPS= 64 Ivl=0ms\nI:* If#= 1 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb\nE: Ad=83(I) Atr=01(Isoc) MxPS= 0 Ivl=1ms\nE: Ad=03(O) Atr=01(Isoc) MxPS= 0 Ivl=1ms\nI: If#= 1 Alt= 1 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb\nE: Ad=83(I) Atr=01(Isoc) MxPS= 9 Ivl=1ms\nE: Ad=03(O) Atr=01(Isoc) MxPS= 9 Ivl=1ms\nI: If#= 1 Alt= 2 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb\nE: Ad=83(I) Atr=01(Isoc) MxPS= 17 Ivl=1ms\nE: Ad=03(O) Atr=01(Isoc) MxPS= 17 Ivl=1ms\nI: If#= 1 Alt= 3 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb\nE: Ad=83(I) Atr=01(Isoc) MxPS= 25 Ivl=1ms\nE: Ad=03(O) Atr=01(Isoc) MxPS= 25 Ivl=1ms\nI: If#= 1 Alt= 4 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb\nE: Ad=83(I) Atr=01(Isoc) MxPS= 33 Ivl=1ms\nE: Ad=03(O) Atr=01(Isoc) MxPS= 33 Ivl=1ms\nI: If#= 1 Alt= 5 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb\nE: Ad=83(I) Atr=01(Isoc) MxPS= 49 Ivl=1ms\nE: Ad=03(O) Atr=01(Isoc) MxPS= 49 Ivl=1ms\n\nSigned-off-by: Dmitry Tunin <hanipouspilot@gmail.com>\nSigned-off-by: Marcel Holtmann <marcel@holtmann.org>\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/de2a293c9b4cfda94aeb5572383beaa6493dd96d"},{"sha":"6b962632ba4bdae071db35520e3dbb5e2d50e780","author":{"email":"d7a2c23eccda99639e3fab64d868a1b1895748fa@samsung.com","name":"Andrey Ryabinin"},"message":"smack: fix possible use after frees in task_security() callers\n\ncommit 6d1cff2a885850b78b40c34777b46cf5da5d1050 upstream.\n\nWe hit use after free on dereferncing pointer to task_smack struct in\nsmk_of_task() called from smack_task_to_inode().\n\ntask_security() macro uses task_cred_xxx() to get pointer to the task_smack.\ntask_cred_xxx() could be used only for non-pointer members of task's\ncredentials. It cannot be used for pointer members since what they point\nto may disapper after dropping RCU read lock.\n\nMainly task_security() used this way:\n\tsmk_of_task(task_security(p))\n\nIntead of this introduce function smk_of_task_struct() which\ntakes task_struct as argument and returns pointer to smk_known struct\nand do this under RCU read lock.\nBogus task_security() macro is not used anymore, so remove it.\n\nKASan's report for this:\n\n\tAddressSanitizer: use after free in smack_task_to_inode+0x50/0x70 at addr c4635600\n\t=============================================================================\n\tBUG kmalloc-64 (Tainted: PO): kasan error\n\t-----------------------------------------------------------------------------\n\n\tDisabling lock debugging due to kernel taint\n\tINFO: Allocated in new_task_smack+0x44/0xd8 age=39 cpu=0 pid=1866\n\t\tkmem_cache_alloc_trace+0x88/0x1bc\n\t\tnew_task_smack+0x44/0xd8\n\t\tsmack_cred_prepare+0x48/0x21c\n\t\tsecurity_prepare_creds+0x44/0x4c\n\t\tprepare_creds+0xdc/0x110\n\t\tsmack_setprocattr+0x104/0x150\n\t\tsecurity_setprocattr+0x4c/0x54\n\t\tproc_pid_attr_write+0x12c/0x194\n\t\tvfs_write+0x1b0/0x370\n\t\tSyS_write+0x5c/0x94\n\t\tret_fast_syscall+0x0/0x48\n\tINFO: Freed in smack_cred_free+0xc4/0xd0 age=27 cpu=0 pid=1564\n\t\tkfree+0x270/0x290\n\t\tsmack_cred_free+0xc4/0xd0\n\t\tsecurity_cred_free+0x34/0x3c\n\t\tput_cred_rcu+0x58/0xcc\n\t\trcu_process_callbacks+0x738/0x998\n\t\t__do_softirq+0x264/0x4cc\n\t\tdo_softirq+0x94/0xf4\n\t\tirq_exit+0xbc/0x120\n\t\thandle_IRQ+0x104/0x134\n\t\tgic_handle_irq+0x70/0xac\n\t\t__irq_svc+0x44/0x78\n\t\t_raw_spin_unlock+0x18/0x48\n\t\tsync_inodes_sb+0x17c/0x1d8\n\t\tsync_filesystem+0xac/0xfc\n\t\tvdfs_file_fsync+0x90/0xc0\n\t\tvfs_fsync_range+0x74/0x7c\n\tINFO: Slab 0xd3b23f50 objects=32 used=31 fp=0xc4635600 flags=0x4080\n\tINFO: Object 0xc4635600 @offset=5632 fp=0x  (null)\n\n\tBytes b4 c46355f0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a  ZZZZZZZZZZZZZZZZ\n\tObject c4635600: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk\n\tObject c4635610: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk\n\tObject c4635620: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk\n\tObject c4635630: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5  kkkkkkkkkkkkkkk.\n\tRedzone c4635640: bb bb bb bb                                      ....\n\tPadding c46356e8: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a  ZZZZZZZZZZZZZZZZ\n\tPadding c46356f8: 5a 5a 5a 5a 5a 5a 5a 5a                          ZZZZZZZZ\n\tCPU: 5 PID: 834 Comm: launchpad_prelo Tainted: PBO 3.10.30 #1\n\tBacktrace:\n\t[<c00233a4>] (dump_backtrace+0x0/0x158) from [<c0023dec>] (show_stack+0x20/0x24)\n\t r7:c4634010 r6:d3b23f50 r5:c4635600 r4:d1002140\n\t[<c0023dcc>] (show_stack+0x0/0x24) from [<c06d6d7c>] (dump_stack+0x20/0x28)\n\t[<c06d6d5c>] (dump_stack+0x0/0x28) from [<c01c1d50>] (print_trailer+0x124/0x144)\n\t[<c01c1c2c>] (print_trailer+0x0/0x144) from [<c01c1e88>] (object_err+0x3c/0x44)\n\t r7:c4635600 r6:d1002140 r5:d3b23f50 r4:c4635600\n\t[<c01c1e4c>] (object_err+0x0/0x44) from [<c01cac18>] (kasan_report_error+0x2b8/0x538)\n\t r6:d1002140 r5:d3b23f50 r4:c6429cf8 r3:c09e1aa7\n\t[<c01ca960>] (kasan_report_error+0x0/0x538) from [<c01c9430>] (__asan_load4+0xd4/0xf8)\n\t[<c01c935c>] (__asan_load4+0x0/0xf8) from [<c031e168>] (smack_task_to_inode+0x50/0x70)\n\t r5:c4635600 r4:ca9da000\n\t[<c031e118>] (smack_task_to_inode+0x0/0x70) from [<c031af64>] (security_task_to_inode+0x3c/0x44)\n\t r5:cca25e80 r4:c0ba9780\n\t[<c031af28>] (security_task_to_inode+0x0/0x44) from [<c023d614>] (pid_revalidate+0x124/0x178)\n\t r6:00000000 r5:cca25e80 r4:cbabe3c0 r3:00008124\n\t[<c023d4f0>] (pid_revalidate+0x0/0x178) from [<c01db98c>] (lookup_fast+0x35c/0x43y4)\n\t r9:c6429efc r8:00000101 r7:c079d940 r6:c6429e90 r5:c6429ed8 r4:c83c4148\n\t[<c01db630>] (lookup_fast+0x0/0x434) from [<c01deec8>] (do_last.isra.24+0x1c0/0x1108)\n\t[<c01ded08>] (do_last.isra.24+0x0/0x1108) from [<c01dff04>] (path_openat.isra.25+0xf4/0x648)\n\t[<c01dfe10>] (path_openat.isra.25+0x0/0x648) from [<c01e1458>] (do_filp_open+0x3c/0x88)\n\t[<c01e141c>] (do_filp_open+0x0/0x88) from [<c01ccb28>] (do_sys_open+0xf0/0x198)\n\t r7:00000001 r6:c0ea2180 r5:0000000b r4:00000000\n\t[<c01cca38>] (do_sys_open+0x0/0x198) from [<c01ccc00>] (SyS_open+0x30/0x34)\n\t[<c01ccbd0>] (SyS_open+0x0/0x34) from [<c001db80>] (ret_fast_syscall+0x0/0x48)\n\tRead of size 4 by thread T834:\n\tMemory state around the buggy address:\n\t c4635380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n\t c4635400: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc\n\t c4635480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n\t c4635500: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc\n\t c4635580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n\t>c4635600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n\t           ^\n\t c4635680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n\t c4635700: 00 00 00 00 04 fc fc fc fc fc fc fc fc fc fc fc\n\t c4635780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n\t c4635800: 00 00 00 00 00 00 04 fc fc fc fc fc fc fc fc fc\n\t c4635880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n\t==================================================================\n\nSigned-off-by: Andrey Ryabinin <a.ryabinin@samsung.com>\n[lizf: Backported to 3.4:\n - smk_of_task() returns char* instead of smack_known *\n - replace task_security() with smk_of_task() with smk_of_task_struct()\n   manually]\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/6b962632ba4bdae071db35520e3dbb5e2d50e780"},{"sha":"8de2a8d9accf7d20eb69e55717455c4753104bb6","author":{"email":"ae115cfa58aaa81618f054056f573d0d78c5ed09@linux.vnet.ibm.com","name":"David Hildenbrand"},"message":"KVM: s390: base hrtimer on a monotonic clock\n\ncommit 0ac96caf0f9381088c673a16d910b1d329670edf upstream.\n\nThe hrtimer that handles the wait with enabled timer interrupts\nshould not be disturbed by changes of the host time.\n\nThis patch changes our hrtimer to be based on a monotonic clock.\n\nSigned-off-by: David Hildenbrand <dahi@linux.vnet.ibm.com>\nAcked-by: Cornelia Huck <cornelia.huck@de.ibm.com>\nSigned-off-by: Christian Borntraeger <borntraeger@de.ibm.com>\n[lizf: Backported to 3.4: adjust context]\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/8de2a8d9accf7d20eb69e55717455c4753104bb6"},{"sha":"af6d6d92b456cd35261299bfe5380267fa5593a9","author":{"email":"242b79f0804cf52679d58f27ed754158c1323c75@amd.com","name":"Michel Dänzer"},"message":"PCI: Fix infinite loop with ROM image of size 0\n\ncommit 16b036af31e1456cb69243a5a0c9ef801ecd1f17 upstream.\n\nIf the image size would ever read as 0, pci_get_rom_size() could keep\nprocessing the same image over and over again.  Exit the loop if we ever\nread a length of zero.\n\nThis fixes a soft lockup on boot when the radeon driver calls\npci_get_rom_size() on an AMD Radeon R7 250X PCIe discrete graphics card.\n\n[bhelgaas: changelog, reference]\nLink: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1386973\nReported-by: Federico <federicotg@gmail.com>\nSigned-off-by: Michel Dänzer <michel.daenzer@amd.com>\nSigned-off-by: Bjorn Helgaas <bhelgaas@google.com>\nReviewed-by: Alex Deucher <alexander.deucher@amd.com>\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/af6d6d92b456cd35261299bfe5380267fa5593a9"},{"sha":"71ff678d407c318017a92e24da14e01a989814c0","author":{"email":"86885009934dd83ce1c36ac4d6ee016dd0c314bb@csclub.uwaterloo.ca","name":"Lennart Sorensen"},"message":"USB: cp210x: add ID for RUGGEDCOM USB Serial Console\n\ncommit a6f0331236fa75afba14bbcf6668d42cebb55c43 upstream.\n\nAdded the USB serial console device ID for Siemens Ruggedcom devices\nwhich have a USB port for their serial console.\n\nSigned-off-by: Len Sorensen <lsorense@csclub.uwaterloo.ca>\nSigned-off-by: Johan Hovold <johan@kernel.org>\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/71ff678d407c318017a92e24da14e01a989814c0"},{"sha":"d2848d647b5ac1be9dfd46c634bcd667ea76ed7e","author":{"email":"9e6ba6483b6a3e14d61f7c987e72ecb5b46122d6@mev.co.uk","name":"Ian Abbott"},"message":"staging: comedi: comedi_compat32.c: fix COMEDI_CMD copy back\n\ncommit 42b8ce6f55facfa101462e694d33fc6bca471138 upstream.\n\n`do_cmd_ioctl()` in \"comedi_fops.c\" handles the `COMEDI_CMD` ioctl.\nThis returns `-EAGAIN` if it has copied a modified `struct comedi_cmd`\nback to user-space.  (This occurs when the low-level Comedi driver's\n`do_cmdtest()` handler returns non-zero to indicate a problem with the\ncontents of the `struct comedi_cmd`, or when the `struct comedi_cmd` has\nthe `CMDF_BOGUS` flag set.)\n\n`compat_cmd()` in \"comedi_compat32.c\" handles the 32-bit compatible\nversion of the `COMEDI_CMD` ioctl.  Currently, it never copies a 32-bit\ncompatible version of `struct comedi_cmd` back to user-space, which is\nat odds with the way the regular `COMEDI_CMD` ioctl is handled.  To fix\nit, change `compat_cmd()` to copy a 32-bit compatible version of the\n`struct comedi_cmd` back to user-space when the main ioctl handler\nreturns `-EAGAIN`.\n\nSigned-off-by: Ian Abbott <abbotti@mev.co.uk>\nReviewed-by: H Hartley Sweeten <hsweeten@visionengravers.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/d2848d647b5ac1be9dfd46c634bcd667ea76ed7e"},{"sha":"16d67beba92a80d8c766834ea01cdd040d9ff6df","author":{"email":"b6edad08270b2e4ffbcb0879e25a0e29a48c5275@gmail.com","name":"Dmitry Eremin-Solenikov"},"message":"ARM: 8284/1: sa1100: clear RCSR_SMR on resume\n\ncommit e461894dc2ce7778ccde1c3483c9b15a85a7fc5f upstream.\n\nStrongARM core uses RCSR SMR bit to tell to bootloader that it was reset\nby entering the sleep mode. After we have resumed, there is little point\nin having that bit enabled. Moreover, if this bit is set before reboot,\nthe bootloader can become confused. Thus clear the SMR bit on resume\njust before clearing the scratchpad (resume address) register.\n\nSigned-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>\nSigned-off-by: Russell King <rmk+kernel@arm.linux.org.uk>\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/16d67beba92a80d8c766834ea01cdd040d9ff6df"},{"sha":"b13026256c16200b53d251ab27f610712407721f","author":{"email":"e7d8216bf9b1956703857d0050bd04192118f43d@oracle.com","name":"Chuck Lever"},"message":"xprtrdma: Free the pd if ib_query_qp() fails\n\ncommit 5ae711a24601257f395c1f8746ac95be0cbd75e5 upstream.\n\nIf ib_query_qp() fails or the memory registration mode isn't\nsupported, don't leak the PD. An orphaned IB/core resource will\ncause IB module removal to hang.\n\nFixes: bd7ed1d13304 (\"RPC/RDMA: check selected memory registration ...\")\nSigned-off-by: Chuck Lever <chuck.lever@oracle.com>\nReviewed-by: Steve Wise <swise@opengridcomputing.com>\nSigned-off-by: Anna Schumaker <Anna.Schumaker@Netapp.com>\n[lizf: Backported to 3.4: only two goto statements need to be changed]\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/b13026256c16200b53d251ab27f610712407721f"},{"sha":"a54c78b91ad0058aef14fd4804e5d6f8e253cf2b","author":{"email":"bfee72d94d376f4e00f72b756466867d7f9eb24e@suse.de","name":"Oliver Neukum"},"message":"cdc-acm: add sanity checks\n\ncommit 7e860a6e7aa62b337a61110430cd633db5b0d2dd upstream.\n\nCheck the special CDC headers for a plausible minimum length.\nAnother big operating systems ignores such garbage.\n\nSigned-off-by: Oliver Neukum <oneukum@suse.de>\nReviewed-by: Adam Lee <adam8157@gmail.com>\nTested-by: Adam Lee <adam8157@gmail.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\n[lizf: Backported to 3.4: adjust context]\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/a54c78b91ad0058aef14fd4804e5d6f8e253cf2b"},{"sha":"019b694fbccafebc550a7b1fcb3bb13e9b32ae03","author":{"email":"75ea6bb7bfc1186f92d26164de5f9268c9a45b59@rowland.harvard.edu","name":"Alan Stern"},"message":"USB: add flag for HCDs that can't receive wakeup requests (isp1760-hcd)\n\ncommit 074f9dd55f9cab1b82690ed7e44bcf38b9616ce0 upstream.\n\nCurrently the USB stack assumes that all host controller drivers are\ncapable of receiving wakeup requests from downstream devices.\nHowever, this isn't true for the isp1760-hcd driver, which means that\nit isn't safe to do a runtime suspend of any device attached to a\nroot-hub port if the device requires wakeup.\n\nThis patch adds a \"cant_recv_wakeups\" flag to the usb_hcd structure\nand sets the flag in isp1760-hcd.  The core is modified to prevent a\ndirect child of the root hub from being put into runtime suspend with\nwakeup enabled if the flag is set.\n\nSigned-off-by: Alan Stern <stern@rowland.harvard.edu>\nTested-by: Nicolas Pitre <nico@linaro.org>\nSigned-off-by: Greg Kroah-Hartman <greg@kroah.com>\n[lizf: Backported to 3.4: adjust context]\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/019b694fbccafebc550a7b1fcb3bb13e9b32ae03"},{"sha":"c415c7ab984b1bc1f0fd760784e436df1b6d3132","author":{"email":"75ea6bb7bfc1186f92d26164de5f9268c9a45b59@rowland.harvard.edu","name":"Alan Stern"},"message":"USB: fix use-after-free bug in usb_hcd_unlink_urb()\n\ncommit c99197902da284b4b723451c1471c45b18537cde upstream.\n\nThe usb_hcd_unlink_urb() routine in hcd.c contains two possible\nuse-after-free errors.  The dev_dbg() statement at the end of the\nroutine dereferences urb and urb->dev even though both structures may\nhave been deallocated.\n\nThis patch fixes the problem by storing urb->dev in a local variable\n(avoiding the dereference of urb) and moving the dev_dbg() up before\nthe usb_put_dev() call.\n\nSigned-off-by: Alan Stern <stern@rowland.harvard.edu>\nReported-by: Joe Lawrence <joe.lawrence@stratus.com>\nTested-by: Joe Lawrence <joe.lawrence@stratus.com>\nSigned-off-by: Greg Kroah-Hartman <greg@kroah.com>\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/c415c7ab984b1bc1f0fd760784e436df1b6d3132"},{"sha":"68e9176bf7429cce8ed93859a1995f2d0f3ca209","author":{"email":"408789a210b05fb3b46935e815320d62ba00a06e@linaro.org","name":"Nicolas Pitre"},"message":"vt: provide notifications on selection changes\n\ncommit 19e3ae6b4f07a87822c1c9e7ed99d31860e701af upstream.\n\nThe vcs device's poll/fasync support relies on the vt notifier to signal\nchanges to the screen content.  Notifier invocations were missing for\nchanges that comes through the selection interface though.  Fix that.\n\nTested with BRLTTY 5.2.\n\nSigned-off-by: Nicolas Pitre <nico@linaro.org>\nCc: Dave Mielke <dave@mielke.cc>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/68e9176bf7429cce8ed93859a1995f2d0f3ca209"},{"sha":"39343b59730f4559577f03992cf2763fd1043469","author":{"email":"4b8373d016f277527198385ba72fda0feb5da015@hurleysoftware.com","name":"Peter Hurley"},"message":"tty: Prevent untrappable signals from malicious program\n\ncommit 37480a05685ed5b8e1b9bf5e5c53b5810258b149 upstream.\n\nCommit 26df6d13406d1a5 (\"tty: Add EXTPROC support for LINEMODE\")\nallows a process which has opened a pty master to send _any_ signal\nto the process group of the pty slave. Although potentially\nexploitable by a malicious program running a setuid program on\na pty slave, it's unknown if this exploit currently exists.\n\nLimit to signals actually used.\n\nCc: Theodore Ts'o <tytso@mit.edu>\nCc: Howard Chu <hyc@symas.com>\nCc: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>\nCc: Jiri Slaby <jslaby@suse.cz>\nSigned-off-by: Peter Hurley <peter@hurleysoftware.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nSigned-off-by: Zefan Li <lizefan@huawei.com>","distinct":false,"url":"https://api.github.com/repos/norbertc/nexus-kernel/commits/39343b59730f4559577f03992cf2763fd1043469"}]}