Commit bd71171c authored Feb 22, 2023 by Greg Kroah-Hartman

Merge 4.19.273 into android-4.19-stable



Changes in 4.19.273
	firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region
	bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()
	ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
	netrom: Fix use-after-free caused by accept on already connected socket
	squashfs: harden sanity check in squashfs_read_xattr_id_table
	ata: libata: Fix sata_down_spd_limit() when no link speed is reported
	net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
	scsi: target: core: Fix warning on RT kernels
	scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
	i2c: rk3x: fix a bunch of kernel-doc warnings
	net/x25: Fix to not accept on connected socket
	iio: adc: stm32-dfsdm: fill module aliases
	usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API
	usb: dwc3: qcom: enable vbus override when in OTG dr-mode
	usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait
	vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
	Input: i8042 - move __initconst to fix code styling warning
	Input: i8042 - merge quirk tables
	Input: i8042 - add TUXEDO devices to i8042 quirk tables
	Input: i8042 - add Clevo PCX0DX to i8042 quirk table
	nVMX x86: Check VMX-preemption timer controls on vmentry of L2 guests
	KVM: VMX: Move VMX specific files to a "vmx" subdirectory
	KVM: VMX: Move caching of MSR_IA32_XSS to hardware_setup()
	KVM: x86/vmx: Do not skip segment attributes if unusable bit is set
	thermal: intel: int340x: Protect trip temperature from concurrent updates
	fbcon: Check font dimension limits
	watchdog: diag288_wdt: do not use stack buffers for hardware data
	watchdog: diag288_wdt: fix __diag288() inline assembly
	efi: Accept version 2 of memory attributes table
	iio: hid: fix the retval in accel_3d_capture_sample
	iio: adc: berlin2-adc: Add missing of_node_put() in error path
	iio:adc:twl6030: Enable measurements of VUSB, VBAT and others
	parisc: Fix return code of pdc_iodc_print()
	parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case
	riscv: disable generation of unwind tables
	mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
	mm/swapfile: add cond_resched() in get_swap_pages()
	Squashfs: fix handling and sanity checking of xattr_ids count
	serial: 8250_dma: Fix DMA Rx completion race
	serial: 8250_dma: Fix DMA Rx rearm race
	thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type()
	iio:adc:twl6030: Enable measurement of VAC
	btrfs: limit device extents to the device size
	ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control()
	IB/hfi1: Restore allocated resources on failed copyout
	net: phy: add macros for PHYID matching
	net: phy: meson-gxl: add g12a support
	net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY
	rds: rds_rm_zerocopy_callback() use list_first_entry()
	selftests: forwarding: lib: quote the sysctl values
	ALSA: pci: lx6464es: fix a debug loop
	pinctrl: aspeed: Fix confusing types in return value
	pinctrl: single: fix potential NULL dereference
	pinctrl: intel: Convert unsigned to unsigned int
	pinctrl: intel: Restore the pins that used to be in Direct IRQ mode
	net: USB: Fix wrong-direction WARNING in plusb.c
	usb: core: add quirk for Alcor Link AK9563 smartcard reader
	usb: typec: altmodes/displayport: Fix probe pin assign check
	riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte
	arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive
	arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive
	bpf: Always return target ifindex in bpf_fib_lookup
	migrate: hugetlb: check for hugetlb shared PMD in node migration
	ASoC: cs42l56: fix DT probe
	tools/virtio: fix the vringh test for virtio ring changes
	net/rose: Fix to not accept on connected socket
	nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association
	aio: fix mremap after fork null-deref
	netfilter: nft_tproxy: restrict to prerouting hook
	Revert "x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN"
	mmc: sdio: fix possible resource leaks in some error paths
	ALSA: hda/conexant: add a new hda codec SN6180
	ALSA: hda/realtek - fixed wrong gpio assigned
	hugetlb: check for undefined shift on 32 bit architectures
	revert "squashfs: harden sanity check in squashfs_read_xattr_id_table"
	i40e: add double of VLAN header when computing the max MTU
	net: bgmac: fix BCM5358 support by setting correct flags
	dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.
	net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
	net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence
	bnxt_en: Fix mqprio and XDP ring checking logic
	net: stmmac: Restrict warning on disabling DMA store and fwd mode
	net: mpls: fix stale pointer if allocation fails during device rename
	ipv6: Fix datagram socket connection with DSCP.
	ipv6: Fix tcp socket connection with DSCP.
	i40e: Add checking for null for nlmsg_find_attr()
	kvm: initialize all of the kvm_debugregs structure before sending it to userspace
	nilfs2: fix underflow in second superblock position calculations
	net: phy: meson-gxl: Add generic dummy stubs for MMD register access
	Linux 4.19.273

Change-Id: Id9b61e7d5d9399a46dc2d52a392eacf5cbe30248
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

parents 289c814f 3eb67e32

Makefile

+1 −1

Original line number	Diff line number	Diff line
		# SPDX-License-Identifier: GPL-2.0
		VERSION = 4
		PATCHLEVEL = 19
		SUBLEVEL = 272
		SUBLEVEL = 273
		EXTRAVERSION =
		NAME = "People's Front"

arch/arm64/boot/dts/amlogic/meson-axg.dtsi

+2 −2

Original line number	Diff line number	Diff line
		@@ -167,7 +167,7 @@
		sd_emmc_b: sd@5000 {
		compatible = "amlogic,meson-axg-mmc";
		reg = <0x0 0x5000 0x0 0x800>;
		interrupts = <GIC_SPI 217 IRQ_TYPE_EDGE_RISING>;
		interrupts = <GIC_SPI 217 IRQ_TYPE_LEVEL_HIGH>;
		status = "disabled";
		clocks = <&clkc CLKID_SD_EMMC_B>,
		<&clkc CLKID_SD_EMMC_B_CLK0>,
		@@ -179,7 +179,7 @@
		sd_emmc_c: mmc@7000 {
		compatible = "amlogic,meson-axg-mmc";
		reg = <0x0 0x7000 0x0 0x800>;
		interrupts = <GIC_SPI 218 IRQ_TYPE_EDGE_RISING>;
		interrupts = <GIC_SPI 218 IRQ_TYPE_LEVEL_HIGH>;
		status = "disabled";
		clocks = <&clkc CLKID_SD_EMMC_C>,
		<&clkc CLKID_SD_EMMC_C_CLK0>,

arch/arm64/boot/dts/amlogic/meson-gx.dtsi

+3 −3

Original line number	Diff line number	Diff line
		@@ -470,21 +470,21 @@
		sd_emmc_a: mmc@70000 {
		compatible = "amlogic,meson-gx-mmc", "amlogic,meson-gxbb-mmc";
		reg = <0x0 0x70000 0x0 0x800>;
		interrupts = <GIC_SPI 216 IRQ_TYPE_EDGE_RISING>;
		interrupts = <GIC_SPI 216 IRQ_TYPE_LEVEL_HIGH>;
		status = "disabled";
		};

		sd_emmc_b: mmc@72000 {
		compatible = "amlogic,meson-gx-mmc", "amlogic,meson-gxbb-mmc";
		reg = <0x0 0x72000 0x0 0x800>;
		interrupts = <GIC_SPI 217 IRQ_TYPE_EDGE_RISING>;
		interrupts = <GIC_SPI 217 IRQ_TYPE_LEVEL_HIGH>;
		status = "disabled";
		};

		sd_emmc_c: mmc@74000 {
		compatible = "amlogic,meson-gx-mmc", "amlogic,meson-gxbb-mmc";
		reg = <0x0 0x74000 0x0 0x800>;
		interrupts = <GIC_SPI 218 IRQ_TYPE_EDGE_RISING>;
		interrupts = <GIC_SPI 218 IRQ_TYPE_LEVEL_HIGH>;
		status = "disabled";
		};
		};

arch/parisc/kernel/firmware.c

+3 −2

Original line number	Diff line number	Diff line
		@@ -1197,7 +1197,7 @@ static char __attribute__((aligned(64))) iodc_dbuf[4096];
		*/
		int pdc_iodc_print(const unsigned char *str, unsigned count)
		{
		unsigned int i;
		unsigned int i, found = 0;
		unsigned long flags;

		for (i = 0; i < count;) {
		@@ -1206,6 +1206,7 @@ int pdc_iodc_print(const unsigned char *str, unsigned count)
		iodc_dbuf[i+0] = '\r';
		iodc_dbuf[i+1] = '\n';
		i += 2;
		found = 1;
		goto print;
		default:
		iodc_dbuf[i] = str[i];
		@@ -1222,7 +1223,7 @@ int pdc_iodc_print(const unsigned char *str, unsigned count)
		__pa(iodc_retbuf), 0, __pa(iodc_dbuf), i, 0);
		spin_unlock_irqrestore(&pdc_lock, flags);

		return i;
		return i - found;
		}

		#if !defined(BOOTLOADER)

arch/parisc/kernel/ptrace.c

+13 −2

Original line number	Diff line number	Diff line
		@@ -128,6 +128,12 @@ long arch_ptrace(struct task_struct *child, long request,
		unsigned long tmp;
		long ret = -EIO;

		unsigned long user_regs_struct_size = sizeof(struct user_regs_struct);
		#ifdef CONFIG_64BIT
		if (is_compat_task())
		user_regs_struct_size /= 2;
		#endif

		switch (request) {

		/* Read the word at location addr in the USER area. For ptraced
		@@ -183,14 +189,14 @@ long arch_ptrace(struct task_struct *child, long request,
		return copy_regset_to_user(child,
		task_user_regset_view(current),
		REGSET_GENERAL,
		0, sizeof(struct user_regs_struct),
		0, user_regs_struct_size,
		datap);

		case PTRACE_SETREGS: /* Set all gp regs in the child. */
		return copy_regset_from_user(child,
		task_user_regset_view(current),
		REGSET_GENERAL,
		0, sizeof(struct user_regs_struct),
		0, user_regs_struct_size,
		datap);

		case PTRACE_GETFPREGS: /* Get the child FPU state. */
		@@ -304,6 +310,11 @@ long compat_arch_ptrace(struct task_struct *child, compat_long_t request,
		}
		}
		break;
		case PTRACE_GETREGS:
		case PTRACE_SETREGS:
		case PTRACE_GETFPREGS:
		case PTRACE_SETFPREGS:
		return arch_ptrace(child, request, addr, data);

		default:
		ret = compat_ptrace_request(child, request, addr, data);