Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 90ed47f1 authored by Kyle Yan's avatar Kyle Yan
Browse files

Merge remote-tracking branch '4.9/tmp-47c0adf0' into 4.9 



* 4.9/tmp-47c0adf0:
  Linux 4.9.15
  drivers: hv: Turn off write permission on the hypercall page
  fat: fix using uninitialized fields of fat_inode/fsinfo_inode
  mm: do not call mem_cgroup_free() from within mem_cgroup_alloc()
  thp: fix another corner case of munlock() vs. THPs
  x86/tlb: Fix tlb flushing when lguest clears PGE
  x86, mm: fix gup_pte_range() vs DAX mappings
  libceph: use BUG() instead of BUG_ON(1)
  drm/i915: Fix not finding the VBT when it overlaps with OPREGION_ASLE_EXT
  drm/i915: Avoid spurious WARNs about the wrong pipe in the PPS code
  drm: Cancel drm_fb_helper_resume_work on unload
  drm: Cancel drm_fb_helper_dirty_work on unload
  drm/i915/gvt: Disable access to stolen memory as a guest
  drm/atomic: fix an error code in mode_fixup()
  drm/imx: imx-tve: Do not set the regulator voltage
  dmaengine: imx-sdma - correct the dma transfer residue calculation
  drm/vmwgfx: Work around drm removal of control nodes
  drm/ttm: Make sure BOs being swapped out are cacheable
  drm/edid: Add EDID_QUIRK_FORCE_8BPC quirk for Rotel RSX-1058
  drm/ast: Fix AST2400 POST failure without BMC FW or VBIOS
  drm/ast: Call open_key before enable_mmio in POST code
  drm/ast: Fix test for VGA enabled
  drm/amdgpu: add more cases to DCE11 possible crtc mask setup
  mac80211: use driver-indicated transmitter STA only for data frames
  mac80211: don't handle filtered frames within a BA session
  mac80211: don't reorder frames with SN smaller than SSN
  mac80211: flush delayed work when entering suspend
  nfit, libnvdimm: fix interleave set cookie calculation
  xtensa: move parse_tag_fdt out of #ifdef CONFIG_BLK_DEV_INITRD
  pwm: pca9685: Fix period change with same duty cycle
  nlm: Ensure callback code also checks that the files match
  drivers/pci/hotplug: Fix initial state for empty slot
  drivers/pci/hotplug: Handle presence detection change properly
  target: Fix NULL dereference during LUN lookup + active I/O shutdown
  pci/hotplug/pnv-php: Disable surprise hotplug capability on conflicts
  pci/hotplug/pnv-php: Remove WARN_ON() in pnv_php_put_slot()
  ceph: remove req from unsafe list when unregistering it
  ktest: Fix child exit code processing
  memory/atmel-ebi: Fix ns <-> cycles conversions
  orangefs: Use RCU for destroy_inode
  fs: Better permission checking for submounts
  IB/srp: Fix race conditions related to task management
  IB/srp: Avoid that duplicate responses trigger a kernel bug
  IB/SRP: Avoid using IB_MR_TYPE_SG_GAPS
  IB/mlx5: Fix out-of-bound access
  IB/IPoIB: Add destination address when re-queue packet
  IB/ipoib: Fix deadlock between rmmod and set_mode
  mnt: Tuck mounts under others instead of creating shadow/side mounts.
  brcmfmac: fix incorrect event channel deduction
  cxl: fix nested locking hang during EEH hotplug
  cxl: Prevent read/write to AFU config space while AFU not configured
  net: mvpp2: fix DMA address calculation in mvpp2_txq_inc_put()
  s390: use correct input data address for setup_randomness
  s390: make setup_randomness work
  s390: TASK_SIZE for kernel threads
  s390/chsc: Add exception handler for CHSC instruction
  s390/kdump: Use "LINUX" ELF note name instead of "CORE"
  s390/dcssblk: fix device size calculation in dcssblk_direct_access()
  s390/qdio: clear DSCI prior to scanning multiple input queues
  Bluetooth: Add another AR3012 04ca:3018 device
  KVM: VMX: use correct vmcs_read/write for guest segment selector/base
  KVM: s390: Disable dirty log retrieval for UCONTROL guests
  serial: 8250_pci: Add MKS Tenta SCOM-0800 and SCOM-0801 cards
  tty: n_hdlc: get rid of racy n_hdlc.tbuf
  uid_sys_stats: change to use rt_mutex
  ANDROID: uid_sys_stats: account for fsync syscalls
  ANDROID: sched: add a counter to track fsync
  ANDROID: uid_sys_stats: fix negative write bytes.
  ANDROID: uid_sys_stats: allow writing same state
  ANDROID: uid_sys_stats: rename uid_cputime.c to uid_sys_stats.c
  ANDROID: uid_cputime: add per-uid IO usage accounting
  ANDROID: sched/walt: Fix missing locking in WALT port
  UPSTREAM: arm64: Allow hw watchpoint of length 3,5,6 and 7
  UPSTREAM: arm64: hw_breakpoint: Handle inexact watchpoint addresses
  UPSTREAM: arm64: Allow hw watchpoint at varied offset from base address
  UPSTREAM: hw_breakpoint: Allow watchpoint of length 3,5,6 and 7
  ANDROID: usb: gadget: f_accessory: Fix for UsbAccessory clean unbind.
  ANDROID: nf: IDLETIMER: Use fullsock when querying uid
  ANDROID: Replace spaces by '_' for some android filesystem tracepoints.

Conflicts:
	kernel/sched/core.c
	kernel/sched/fair.c

Change-Id: I31ee14ac15765dbb5fe53800d2c39224131287b0
Signed-off-by: default avatarKyle Yan <kyan@codeaurora.org>
parents 58eb1df2 47c0adf0

Makefile

+1 −1
Original line number Diff line number Diff line 
VERSION = 4

PATCHLEVEL = 9

SUBLEVEL = 14

SUBLEVEL = 15

EXTRAVERSION =

NAME = Roaring Lionus

arch/arm64/include/asm/hw_breakpoint.h

+5 −1
Original line number Diff line number Diff line
@@ -77,7 +77,11 @@ static inline void decode_ctrl_reg(u32 reg, 
/* Lengths */

#define ARM_BREAKPOINT_LEN_1	0x1

#define ARM_BREAKPOINT_LEN_2	0x3

#define ARM_BREAKPOINT_LEN_3	0x7

#define ARM_BREAKPOINT_LEN_4	0xf

#define ARM_BREAKPOINT_LEN_5	0x1f

#define ARM_BREAKPOINT_LEN_6	0x3f

#define ARM_BREAKPOINT_LEN_7	0x7f

#define ARM_BREAKPOINT_LEN_8	0xff



/* Kernel stepping */
@@ -119,7 +123,7 @@ struct perf_event; 
struct pmu;



extern int arch_bp_generic_fields(struct arch_hw_breakpoint_ctrl ctrl,

				  int *gen_len, int *gen_type);

				  int *gen_len, int *gen_type, int *offset);

extern int arch_check_bp_in_kernelspace(struct perf_event *bp);

extern int arch_validate_hwbkpt_settings(struct perf_event *bp);

extern int hw_breakpoint_exceptions_notify(struct notifier_block *unused,

arch/arm64/kernel/hw_breakpoint.c

+115 −38
Original line number Diff line number Diff line
@@ -317,9 +317,21 @@ static int get_hbp_len(u8 hbp_len) 
	case ARM_BREAKPOINT_LEN_2:

		len_in_bytes = 2;

		break;

	case ARM_BREAKPOINT_LEN_3:

		len_in_bytes = 3;

		break;

	case ARM_BREAKPOINT_LEN_4:

		len_in_bytes = 4;

		break;

	case ARM_BREAKPOINT_LEN_5:

		len_in_bytes = 5;

		break;

	case ARM_BREAKPOINT_LEN_6:

		len_in_bytes = 6;

		break;

	case ARM_BREAKPOINT_LEN_7:

		len_in_bytes = 7;

		break;

	case ARM_BREAKPOINT_LEN_8:

		len_in_bytes = 8;

		break;
@@ -349,7 +361,7 @@ int arch_check_bp_in_kernelspace(struct perf_event *bp) 
 * to generic breakpoint descriptions.

 */

int arch_bp_generic_fields(struct arch_hw_breakpoint_ctrl ctrl,

			   int *gen_len, int *gen_type)

			   int *gen_len, int *gen_type, int *offset)

{

	/* Type */

	switch (ctrl.type) {
@@ -369,17 +381,33 @@ int arch_bp_generic_fields(struct arch_hw_breakpoint_ctrl ctrl, 
		return -EINVAL;

	}



	if (!ctrl.len)

		return -EINVAL;

	*offset = __ffs(ctrl.len);



	/* Len */

	switch (ctrl.len) {

	switch (ctrl.len >> *offset) {

	case ARM_BREAKPOINT_LEN_1:

		*gen_len = HW_BREAKPOINT_LEN_1;

		break;

	case ARM_BREAKPOINT_LEN_2:

		*gen_len = HW_BREAKPOINT_LEN_2;

		break;

	case ARM_BREAKPOINT_LEN_3:

		*gen_len = HW_BREAKPOINT_LEN_3;

		break;

	case ARM_BREAKPOINT_LEN_4:

		*gen_len = HW_BREAKPOINT_LEN_4;

		break;

	case ARM_BREAKPOINT_LEN_5:

		*gen_len = HW_BREAKPOINT_LEN_5;

		break;

	case ARM_BREAKPOINT_LEN_6:

		*gen_len = HW_BREAKPOINT_LEN_6;

		break;

	case ARM_BREAKPOINT_LEN_7:

		*gen_len = HW_BREAKPOINT_LEN_7;

		break;

	case ARM_BREAKPOINT_LEN_8:

		*gen_len = HW_BREAKPOINT_LEN_8;

		break;
@@ -423,9 +451,21 @@ static int arch_build_bp_info(struct perf_event *bp) 
	case HW_BREAKPOINT_LEN_2:

		info->ctrl.len = ARM_BREAKPOINT_LEN_2;

		break;

	case HW_BREAKPOINT_LEN_3:

		info->ctrl.len = ARM_BREAKPOINT_LEN_3;

		break;

	case HW_BREAKPOINT_LEN_4:

		info->ctrl.len = ARM_BREAKPOINT_LEN_4;

		break;

	case HW_BREAKPOINT_LEN_5:

		info->ctrl.len = ARM_BREAKPOINT_LEN_5;

		break;

	case HW_BREAKPOINT_LEN_6:

		info->ctrl.len = ARM_BREAKPOINT_LEN_6;

		break;

	case HW_BREAKPOINT_LEN_7:

		info->ctrl.len = ARM_BREAKPOINT_LEN_7;

		break;

	case HW_BREAKPOINT_LEN_8:

		info->ctrl.len = ARM_BREAKPOINT_LEN_8;

		break;
@@ -517,18 +557,17 @@ int arch_validate_hwbkpt_settings(struct perf_event *bp) 
		default:

			return -EINVAL;

		}



		info->address &= ~alignment_mask;

		info->ctrl.len <<= offset;

	} else {

		if (info->ctrl.type == ARM_BREAKPOINT_EXECUTE)

			alignment_mask = 0x3;

		else

			alignment_mask = 0x7;

		if (info->address & alignment_mask)

			return -EINVAL;

		offset = info->address & alignment_mask;

	}



	info->address &= ~alignment_mask;

	info->ctrl.len <<= offset;



	/*

	 * Disallow per-task kernel breakpoints since these would

	 * complicate the stepping code.
@@ -661,12 +700,47 @@ static int breakpoint_handler(unsigned long unused, unsigned int esr, 
}

NOKPROBE_SYMBOL(breakpoint_handler);



/*

 * Arm64 hardware does not always report a watchpoint hit address that matches

 * one of the watchpoints set. It can also report an address "near" the

 * watchpoint if a single instruction access both watched and unwatched

 * addresses. There is no straight-forward way, short of disassembling the

 * offending instruction, to map that address back to the watchpoint. This

 * function computes the distance of the memory access from the watchpoint as a

 * heuristic for the likelyhood that a given access triggered the watchpoint.

 *

 * See Section D2.10.5 "Determining the memory location that caused a Watchpoint

 * exception" of ARMv8 Architecture Reference Manual for details.

 *

 * The function returns the distance of the address from the bytes watched by

 * the watchpoint. In case of an exact match, it returns 0.

 */

static u64 get_distance_from_watchpoint(unsigned long addr, u64 val,

					struct arch_hw_breakpoint_ctrl *ctrl)

{

	u64 wp_low, wp_high;

	u32 lens, lene;



	lens = __ffs(ctrl->len);

	lene = __fls(ctrl->len);



	wp_low = val + lens;

	wp_high = val + lene;

	if (addr < wp_low)

		return wp_low - addr;

	else if (addr > wp_high)

		return addr - wp_high;

	else

		return 0;

}



static int watchpoint_handler(unsigned long addr, unsigned int esr,

			      struct pt_regs *regs)

{

	int i, step = 0, *kernel_step, access;

	int i, step = 0, *kernel_step, access, closest_match = 0;

	u64 min_dist = -1, dist;

	u32 ctrl_reg;

	u64 val, alignment_mask;

	u64 val;

	struct perf_event *wp, **slots;

	struct debug_info *debug_info;

	struct arch_hw_breakpoint *info;
@@ -675,35 +749,15 @@ static int watchpoint_handler(unsigned long addr, unsigned int esr, 
	slots = this_cpu_ptr(wp_on_reg);

	debug_info = &current->thread.debug;



	for (i = 0; i < core_num_wrps; ++i) {

	/*

	 * Find all watchpoints that match the reported address. If no exact

	 * match is found. Attribute the hit to the closest watchpoint.

	 */

	rcu_read_lock();



	for (i = 0; i < core_num_wrps; ++i) {

		wp = slots[i];



		if (wp == NULL)

			goto unlock;



		info = counter_arch_bp(wp);

		/* AArch32 watchpoints are either 4 or 8 bytes aligned. */

		if (is_compat_task()) {

			if (info->ctrl.len == ARM_BREAKPOINT_LEN_8)

				alignment_mask = 0x7;

			else

				alignment_mask = 0x3;

		} else {

			alignment_mask = 0x7;

		}



		/* Check if the watchpoint value matches. */

		val = read_wb_reg(AARCH64_DBG_REG_WVR, i);

		if (val != (addr & ~alignment_mask))

			goto unlock;



		/* Possible match, check the byte address select to confirm. */

		ctrl_reg = read_wb_reg(AARCH64_DBG_REG_WCR, i);

		decode_ctrl_reg(ctrl_reg, &ctrl);

		if (!((1 << (addr & alignment_mask)) & ctrl.len))

			goto unlock;

			continue;



		/*

		 * Check that the access type matches.
@@ -712,18 +766,41 @@ static int watchpoint_handler(unsigned long addr, unsigned int esr, 
		access = (esr & AARCH64_ESR_ACCESS_MASK) ? HW_BREAKPOINT_W :

			 HW_BREAKPOINT_R;

		if (!(access & hw_breakpoint_type(wp)))

			goto unlock;

			continue;



		/* Check if the watchpoint value and byte select match. */

		val = read_wb_reg(AARCH64_DBG_REG_WVR, i);

		ctrl_reg = read_wb_reg(AARCH64_DBG_REG_WCR, i);

		decode_ctrl_reg(ctrl_reg, &ctrl);

		dist = get_distance_from_watchpoint(addr, val, &ctrl);

		if (dist < min_dist) {

			min_dist = dist;

			closest_match = i;

		}

		/* Is this an exact match? */

		if (dist != 0)

			continue;



		info = counter_arch_bp(wp);

		info->trigger = addr;

		perf_bp_event(wp, regs);



		/* Do we need to handle the stepping? */

		if (is_default_overflow_handler(wp))

			step = 1;

	}

	if (min_dist > 0 && min_dist != -1) {

		/* No exact match found. */

		wp = slots[closest_match];

		info = counter_arch_bp(wp);

		info->trigger = addr;

		perf_bp_event(wp, regs);



unlock:

		rcu_read_unlock();

		/* Do we need to handle the stepping? */

		if (is_default_overflow_handler(wp))

			step = 1;

	}

	rcu_read_unlock();



	if (!step)

		return 0;

arch/arm64/kernel/ptrace.c

+4 −3
Original line number Diff line number Diff line
@@ -327,13 +327,13 @@ static int ptrace_hbp_fill_attr_ctrl(unsigned int note_type, 
				     struct arch_hw_breakpoint_ctrl ctrl,

				     struct perf_event_attr *attr)

{

	int err, len, type, disabled = !ctrl.enabled;

	int err, len, type, offset, disabled = !ctrl.enabled;



	attr->disabled = disabled;

	if (disabled)

		return 0;



	err = arch_bp_generic_fields(ctrl, &len, &type);

	err = arch_bp_generic_fields(ctrl, &len, &type, &offset);

	if (err)

		return err;
@@ -352,6 +352,7 @@ static int ptrace_hbp_fill_attr_ctrl(unsigned int note_type, 


	attr->bp_len	= len;

	attr->bp_type	= type;

	attr->bp_addr	+= offset;



	return 0;

}
@@ -404,7 +405,7 @@ static int ptrace_hbp_get_addr(unsigned int note_type, 
	if (IS_ERR(bp))

		return PTR_ERR(bp);



	*addr = bp ? bp->attr.bp_addr : 0;

	*addr = bp ? counter_arch_bp(bp)->address : 0;

	return 0;

}

arch/s390/include/asm/processor.h

+2 −1
Original line number Diff line number Diff line
@@ -89,7 +89,8 @@ extern void execve_tail(void); 
 * User space process size: 2GB for 31 bit, 4TB or 8PT for 64 bit.

 */



#define TASK_SIZE_OF(tsk)	((tsk)->mm->context.asce_limit)

#define TASK_SIZE_OF(tsk)	((tsk)->mm ? \

				 (tsk)->mm->context.asce_limit : TASK_MAX_SIZE)

#define TASK_UNMAPPED_BASE	(test_thread_flag(TIF_31BIT) ? \

					(1UL << 30) : (1UL << 41))

#define TASK_SIZE		TASK_SIZE_OF(current)