[PATCH 4.4 00/91] 4.4.167-stable review

Greg Kroah-Hartman
2018-12-11T16:20:00Z

This is the start of the stable review cycle for the 4.4.167 release.
There are 91 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu Dec 13 15:15:44 UTC 2018.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.167-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 4.4.167-rc1

Emmanuel Grumbach <emmanuel.grumbach@intel.com>
mac80211: ignore NullFunc frames in the duplicate detection

Felix Fietkau <nbd@nbd.name>
mac80211: fix reordering of buffered broadcast packets

Felix Fietkau <nbd@nbd.name>
mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext

Ben Greear <greearb@candelatech.com>
mac80211: Clear beacon_int in ieee80211_do_stop

Vasyl Vavrychuk <vasyl.vavrychuk@globallogic.com>
mac80211_hwsim: Timer should be initialized before device registered

Macpaul Lin <macpaul@gmail.com>
kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var()

Peter Shih <pihsun@chromium.org>
tty: serial: 8250_mtk: always resume the device in probe.

Paulo Alcantara <palcantara@suse.com>
cifs: Fix separator when building path from dentry

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Staging: lustre: remove two build warnings

Mathias Nyman <mathias.nyman@linux.intel.com>
xhci: Prevent U1/U2 link pm states if exit latency is too long

Bin Liu <b-liu@ti.com>
dmaengine: cppi41: delete channel from pending list when stop channel

Chuck Lever <chuck.lever@oracle.com>
SUNRPC: Fix leak of krb5p encode pages

Halil Pasic <pasic@linux.ibm.com>
virtio/s390: fix race in ccw_io_helper()

Halil Pasic <pasic@linux.ibm.com>
virtio/s390: avoid race on vcdev->config

Takashi Iwai <tiwai@suse.de>
ALSA: pcm: Fix interval evaluation with openmin/max

Takashi Iwai <tiwai@suse.de>
ALSA: pcm: Call snd_pcm_unlink() conditionally at closing

Chanho Min <chanho.min@lge.com>
ALSA: pcm: Fix starvation on down_write_nonblock()

Kai-Heng Feng <kai.heng.feng@canonical.com>
ALSA: hda: Add support for AMD Stoney Ridge

Hui Peng <benquike@gmail.com>
ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c

Mathias Payer <mathias.payer@nebelwelt.net>
USB: check usb_get_extra_descriptor for proper size

Alexander Theissen <alex.theissen@me.com>
usb: appledisplay: Add 27" Apple Cinema Display

Harry Pan <harry.pan@intel.com>
usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device

Yangtao Li <tiny.windzz@gmail.com>
net: amd: add missing of_node_put()

Pan Bian <bianpan2016@163.com>
iommu/vt-d: Use memunmap to free memremap

Vincent Chen <vincentc@andestech.com>
net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts

Aya Levin <ayal@mellanox.com>
net/mlx4: Fix UBSAN warning of signed integer overflow

Tariq Toukan <tariqt@mellanox.com>
net/mlx4_core: Fix uninitialized variable compilation warning

Jack Morgenstein <jackm@dev.mellanox.co.il>
net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command

Denis Bolotin <denis.bolotin@cavium.com>
qed: Fix reading wrong value in loop condition

Denis Bolotin <denis.bolotin@cavium.com>
qed: Fix PTT leak in qed_drain()

Sudarsana Reddy Kalluru <sudarsana.kalluru@cavium.com>
bnx2x: Assign unique DMAE channel number for FW DMAE transactions.

Sven Eckelmann <sven@narfation.org>
batman-adv: Expand merged fragment buffer for full packet

Fabrizio Castro <fabrizio.castro@bp.renesas.com>
can: rcar_can: Fix erroneous registration

Geert Uytterhoeven <geert+renesas@glider.be>
iommu/ipmmu-vmsa: Fix crash on early domain free

Lu Baolu <baolu.lu@linux.intel.com>
iommu/vt-d: Fix NULL pointer dereference in prq_event_thread()

Arnd Bergmann <arnd@arndb.de>
usb: gadget: dummy: fix nonsensical comparisons

Simon Guo <wei.guo.simon@gmail.com>
mm: mlock: avoid increase mm->locked_vm on mlock() when already mlock2(,MLOCK_ONFAULT)

Pavel Tikhomirov <ptikhomirov@virtuozzo.com>
mm: cleancache: fix corruption on missed inode invalidation

Alexey Brodkin <abrodkin@synopsys.com>
arc: [devboards] Add support of NFSv3 ACL

Kevin Hilman <khilman@baylibre.com>
ARC: change defconfig defaults to ARCv2

Filipe Manana <fdmanana@suse.com>
Btrfs: fix use-after-free when dumping free space

Nikolay Borisov <nborisov@suse.com>
btrfs: Always try all copies when reading extent buffers

Adam Wong <adam@adamwong.me>
Input: elan_i2c - add support for ELAN0621 touchpad

Noah Westervelt <nwestervelt@outlook.com>
Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR

Patrick Gaskin <patrick@pgaskin.net>
Input: elan_i2c - add ELAN0620 to the ACPI table

Christian Hoff <christian_hoff@gmx.net>
Input: matrix_keypad - check for errors from of_get_named_gpio()

Cameron Gutman <aicommander@gmail.com>
Input: xpad - quirk all PDP Xbox One gamepads

Wei Yongjun <yongjun_wei@trendmicro.com.cn>
leds: leds-gpio: Fix return value check in create_gpio_led()

Milo Kim <milo.kim@ti.com>
leds: turn off the LED and wait for completion on unregistering LED class device

Markus Hofstaetter <markus.hofstaetter@ait.ac.at>
leds: call led_pwm_set() in leds-pwm to enforce default LED_OFF

Laura Abbott <labbott@redhat.com>
kgdboc: Fix warning with module build

Laura Abbott <labbott@redhat.com>
kgdboc: Fix restrict error

Kees Cook <keescook@chromium.org>
scsi: csiostor: Avoid content leaks and casts

Takashi Iwai <tiwai@suse.de>
ALSA: trident: Suppress gcc string warning

Martin Wilck <mwilck@suse.com>
scsi: scsi_devinfo: cleanly zero-pad devinfo strings

Sam Bobroff <sbobroff@linux.ibm.com>
drm/ast: Fix incorrect free on ioregs

Dmitry V. Levin <ldv@altlinux.org>
mips: fix mips_get_syscall_arg o32 check

Mathias Kresin <dev@kresin.me>
MIPS: ralink: Fix mt7620 nd_sd pinmux

Andrea Parri <andrea.parri@amarulasolutions.com>
uprobes: Fix handle_swbp() vs. unregister() + register() race once more

Sagi Grimberg <sagi@grimberg.me>
iser: set sector for ambiguous mr status errors

Arnd Bergmann <arnd@arndb.de>
kdb: use memmove instead of overlapping memcpy

Arnd Bergmann <arnd@arndb.de>
staging: rts5208: fix gcc-8 logic error warning

Arnd Bergmann <arnd@arndb.de>
scsi: bfa: convert to strlcpy/strlcat

Arnd Bergmann <arnd@arndb.de>
drm: gma500: fix logic error

Sultan Alsawaf <sultanxda@gmail.com>
ip_tunnel: Fix name string concatenate in __ip_tunnel_create()

Guenter Roeck <linux@roeck-us.net>
kernfs: Replace strncpy with memcpy

Linus Torvalds <torvalds@linux-foundation.org>
unifdef: use memcpy instead of strncpy

Guenter Roeck <linux@roeck-us.net>
kobject: Replace strncpy with memcpy

Stephen Rothwell <sfr@canb.auug.org.au>
disable stringop truncation warnings for now

Arnd Bergmann <arnd@arndb.de>
exec: avoid gcc-8 warning for get_task_comm

Xiongfeng Wang <xiongfeng.wang@linaro.org>
Kbuild: suppress packed-not-aligned warning for default setting only

YueHaibing <yuehaibing@huawei.com>
misc: mic/scif: fix copy-paste error in scif_create_remote_lookup

Michael Niewöhner <linux@mniewoehner.de>
usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series

Kai-Heng Feng <kai.heng.feng@canonical.com>
USB: usb-storage: Add new IDs to ums-realtek

Josef Bacik <josef@toxicpanda.com>
btrfs: release metadata before running delayed refs

Richard Genoud <richard.genoud@gmail.com>
dmaengine: at_hdmac: fix module unloading

Richard Genoud <richard.genoud@gmail.com>
dmaengine: at_hdmac: fix memory leak in at_dma_xlate()

Pan Bian <bianpan2016@163.com>
ext2: fix potential use after free

Takashi Iwai <tiwai@suse.de>
ALSA: sparc: Fix invalid snd_free_pages() at error path

Takashi Iwai <tiwai@suse.de>
ALSA: control: Fix race between adding and removing a user element

Takashi Iwai <tiwai@suse.de>
ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write

Takashi Iwai <tiwai@suse.de>
ALSA: wss: Fix invalid snd_free_pages() at error path

Filipe Manana <fdmanana@suse.com>
Btrfs: ensure path name is null terminated at btrfs_control_ioctl

Max Filippov <jcmvbkbc@gmail.com>
xtensa: fix coprocessor context offset definitions

Max Filippov <jcmvbkbc@gmail.com>
xtensa: enable coprocessors that are being flushed

Junaid Shahid <junaids@google.com>
kvm: mmu: Fix race in emulated page table writes

Bernd Eckstein <3erndeckstein@gmail.com>
usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2

Julian Wiedmann <jwi@linux.ibm.com>
s390/qeth: fix length check in SNMP processing

Pan Bian <bianpan2016@163.com>
rapidio/rionet: do not free skb before reading its length

Sasha Levin <sashal@kernel.org>
Revert "wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()"

Matthias Schwarzott <zzam@gentoo.org>
media: em28xx: Fix use-after-free when disconnecting

-------------

Diffstat:

Makefile | 7 ++-
arch/arc/Kconfig | 2 +-
arch/arc/Makefile | 2 +-
arch/arc/configs/axs101_defconfig | 2 +
arch/arc/configs/axs103_defconfig | 1 +
arch/arc/configs/axs103_smp_defconfig | 1 +
arch/arc/configs/nsim_700_defconfig | 1 +
arch/arc/configs/nsimosci_defconfig | 2 +
arch/arc/configs/nsimosci_hs_defconfig | 1 +
arch/arc/configs/nsimosci_hs_smp_defconfig | 1 +
arch/arc/configs/tb10x_defconfig | 1 +
arch/arc/configs/vdk_hs38_defconfig | 1 +
arch/arc/configs/vdk_hs38_smp_defconfig | 1 +
arch/mips/include/asm/syscall.h | 2 +-
arch/mips/ralink/mt7620.c | 2 +-
arch/x86/kvm/mmu.c | 27 +++------
arch/xtensa/kernel/asm-offsets.c | 16 +++---
arch/xtensa/kernel/process.c | 5 +-
drivers/dma/at_hdmac.c | 10 +++-
drivers/dma/cppi41.c | 16 +++++-
drivers/gpu/drm/ast/ast_main.c | 3 +-
drivers/gpu/drm/gma500/mdfld_intel_display.c | 2 +-
drivers/infiniband/ulp/iser/iser_verbs.c | 7 +--
drivers/input/joystick/xpad.c | 16 ++----
drivers/input/keyboard/matrix_keypad.c | 23 +++++---
drivers/input/mouse/elan_i2c_core.c | 3 +
drivers/iommu/intel-iommu.c | 2 +-
drivers/iommu/intel-svm.c | 2 +-
drivers/iommu/ipmmu-vmsa.c | 3 +
drivers/leds/led-class.c | 5 +-
drivers/leds/leds-gpio.c | 4 +-
drivers/leds/leds-pwm.c | 1 +
drivers/media/usb/em28xx/em28xx-dvb.c | 3 +-
drivers/misc/mic/scif/scif_rma.c | 2 +-
drivers/net/can/rcar_can.c | 5 +-
drivers/net/ethernet/amd/sunlance.c | 4 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x.h | 7 +++
drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 1 +
drivers/net/ethernet/faraday/ftmac100.c | 7 +--
drivers/net/ethernet/mellanox/mlx4/alloc.c | 2 +-
drivers/net/ethernet/mellanox/mlx4/mlx4.h | 4 +-
drivers/net/ethernet/mellanox/mlx4/mr.c | 1 +
drivers/net/ethernet/qlogic/qed/qed_int.c | 2 +
drivers/net/ethernet/qlogic/qed/qed_main.c | 2 +-
drivers/net/rionet.c | 2 +-
drivers/net/usb/ipheth.c | 10 ++--
drivers/net/wireless/mac80211_hwsim.c | 8 +--
drivers/net/wireless/ti/wlcore/cmd.c | 6 --
drivers/s390/net/qeth_core_main.c | 27 ++++-----
drivers/s390/virtio/virtio_ccw.c | 17 +++++-
drivers/scsi/bfa/bfa_fcbuild.c | 8 +--
drivers/scsi/bfa/bfa_fcs.c | 78 ++++++++++++-------------
drivers/scsi/bfa/bfa_fcs_lport.c | 62 ++++++++------------
drivers/scsi/bfa/bfa_ioc.c | 2 +-
drivers/scsi/bfa/bfa_svc.c | 4 +-
drivers/scsi/bfa/bfad.c | 20 +++----
drivers/scsi/bfa/bfad_attr.c | 2 +-
drivers/scsi/bfa/bfad_bsg.c | 6 +-
drivers/scsi/csiostor/csio_lnode.c | 43 ++++++++------
drivers/scsi/scsi_devinfo.c | 22 +++----
drivers/staging/lustre/lustre/lmv/lmv_obd.c | 2 +-
drivers/staging/rts5208/sd.c | 6 --
drivers/tty/serial/8250/8250_mtk.c | 16 +++---
drivers/tty/serial/kgdboc.c | 47 ++++++++-------
drivers/usb/core/hub.c | 2 +-
drivers/usb/core/quirks.c | 7 +++
drivers/usb/core/usb.c | 6 +-
drivers/usb/gadget/udc/dummy_hcd.c | 9 ++-
drivers/usb/host/hwa-hc.c | 2 +-
drivers/usb/host/xhci.c | 16 ++++++
drivers/usb/misc/appledisplay.c | 1 +
drivers/usb/storage/unusual_realtek.h | 10 ++++
fs/btrfs/disk-io.c | 10 +---
fs/btrfs/free-space-cache.c | 2 +
fs/btrfs/super.c | 1 +
fs/btrfs/transaction.c | 6 +-
fs/cifs/dir.c | 2 +-
fs/exec.c | 7 +--
fs/ext2/xattr.c | 2 +-
fs/kernfs/symlink.c | 2 +-
include/linux/sched.h | 7 ++-
include/linux/usb.h | 4 +-
include/sound/pcm_params.h | 4 +-
kernel/debug/kdb/kdb_support.c | 4 +-
kernel/events/uprobes.c | 12 +++-
lib/kobject.c | 2 +-
mm/mlock.c | 3 +
mm/truncate.c | 8 ++-
net/batman-adv/fragmentation.c | 2 +-
net/ipv4/ip_tunnel.c | 4 +-
net/mac80211/iface.c | 2 +
net/mac80211/rx.c | 1 +
net/mac80211/status.c | 2 +
net/mac80211/tx.c | 4 +-
net/sunrpc/auth_gss/auth_gss.c | 4 ++
scripts/Makefile.extrawarn | 3 +
scripts/unifdef.c | 4 +-
sound/core/control.c | 80 +++++++++++++++-----------
sound/core/pcm_native.c | 14 +++--
sound/isa/wss/wss_lib.c | 2 -
sound/pci/ac97/ac97_codec.c | 2 +-
sound/pci/hda/hda_intel.c | 4 ++
sound/pci/trident/trident.c | 2 +-
sound/sparc/cs4231.c | 8 +--
sound/usb/card.c | 5 +-
105 files changed, 490 insertions(+), 382 deletions(-)