Commit e76c0faf authored Jun 14, 2017 by Greg Kroah-Hartman

Merge 4.4.72 into android-4.4



Changes in 4.4.72
	bnx2x: Fix Multi-Cos
	ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()
	cxgb4: avoid enabling napi twice to the same queue
	tcp: disallow cwnd undo when switching congestion control
	vxlan: fix use-after-free on deletion
	ipv6: Fix leak in ipv6_gso_segment().
	net: ping: do not abuse udp_poll()
	net: ethoc: enable NAPI before poll may be scheduled
	net: bridge: start hello timer only if device is up
	sparc64: mm: fix copy_tsb to correctly copy huge page TSBs
	sparc: Machine description indices can vary
	sparc64: reset mm cpumask after wrap
	sparc64: combine activate_mm and switch_mm
	sparc64: redefine first version
	sparc64: add per-cpu mm of secondary contexts
	sparc64: new context wrap
	sparc64: delete old wrap code
	arch/sparc: support NR_CPUS = 4096
	serial: ifx6x60: fix use-after-free on module unload
	ptrace: Properly initialize ptracer_cred on fork
	KEYS: fix dereferencing NULL payload with nonzero length
	KEYS: fix freeing uninitialized memory in key_update()
	crypto: gcm - wait for crypto op not signal safe
	drm/amdgpu/ci: disable mclk switching for high refresh rates (v2)
	nfsd4: fix null dereference on replay
	nfsd: Fix up the "supattr_exclcreat" attributes
	kvm: async_pf: fix rcu_irq_enter() with irqs enabled
	KVM: cpuid: Fix read/write out-of-bounds vulnerability in cpuid emulation
	arm: KVM: Allow unaligned accesses at HYP
	KVM: async_pf: avoid async pf injection when in guest mode
	dmaengine: usb-dmac: Fix DMAOR AE bit definition
	dmaengine: ep93xx: Always start from BASE0
	xen/privcmd: Support correctly 64KB page granularity when mapping memory
	xen-netfront: do not cast grant table reference to signed short
	xen-netfront: cast grant table reference first to type int
	ext4: fix SEEK_HOLE
	ext4: keep existing extra fields when inode expands
	ext4: fix fdatasync(2) after extent manipulation operations
	usb: gadget: f_mass_storage: Serialize wake and sleep execution
	usb: chipidea: udc: fix NULL pointer dereference if udc_start failed
	usb: chipidea: debug: check before accessing ci_role
	staging/lustre/lov: remove set_fs() call from lov_getstripe()
	iio: light: ltr501 Fix interchanged als/ps register field
	iio: proximity: as3935: fix AS3935_INT mask
	drivers: char: random: add get_random_long()
	random: properly align get_random_int_hash
	stackprotector: Increase the per-task stack canary's random range from 32 bits to 64 bits on 64-bit platforms
	cpufreq: cpufreq_register_driver() should return -ENODEV if init fails
	target: Re-add check to reject control WRITEs with overflow data
	drm/msm: Expose our reservation object when exporting a dmabuf.
	Input: elantech - add Fujitsu Lifebook E546/E557 to force crc_enabled
	cpuset: consider dying css as offline
	fs: add i_blocksize()
	ufs: restore proper tail allocation
	fix ufs_isblockset()
	ufs: restore maintaining ->i_blocks
	ufs: set correct ->s_maxsize
	ufs_extend_tail(): fix the braino in calling conventions of ufs_new_fragments()
	ufs_getfrag_block(): we only grab ->truncate_mutex on block creation path
	cxl: Fix error path on bad ioctl
	btrfs: use correct types for page indices in btrfs_page_exists_in_range
	btrfs: fix memory leak in update_space_info failure path
	KVM: arm/arm64: Handle possible NULL stage2 pud when ageing pages
	scsi: qla2xxx: don't disable a not previously enabled PCI device
	powerpc/eeh: Avoid use after free in eeh_handle_special_event()
	powerpc/numa: Fix percpu allocations to be NUMA aware
	powerpc/hotplug-mem: Fix missing endian conversion of aa_index
	perf/core: Drop kernel samples even though :u is specified
	drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()
	drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()
	drm/vmwgfx: Make sure backup_handle is always valid
	drm/nouveau/tmr: fully separate alarm execution/pending lists
	ALSA: timer: Fix race between read and ioctl
	ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT
	ASoC: Fix use-after-free at card unregistration
	drivers: char: mem: Fix wraparound check to allow mappings up to the end
	tty: Drop krefs for interrupted tty lock
	serial: sh-sci: Fix panic when serial console and DMA are enabled
	net: better skb->sender_cpu and skb->napi_id cohabitation
	mm: consider memblock reservations for deferred memory initialization sizing
	NFS: Ensure we revalidate attributes before using execute_ok()
	NFSv4: Don't perform cached access checks before we've OPENed the file
	Make __xfs_xattr_put_listen preperly report errors.
	arm64: hw_breakpoint: fix watchpoint matching for tagged pointers
	arm64: entry: improve data abort handling of tagged pointers
	RDMA/qib,hfi1: Fix MR reference count leak on write with immediate
	usercopy: Adjust tests to deal with SMAP/PAN
	arm64: armv8_deprecated: ensure extension of addr
	arm64: ensure extension of smp_store_release value
	Linux 4.4.72

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

parents 23874bf0 30c9187f

Makefile

+1 −1

Original line number	Diff line number	Diff line
		VERSION = 4
		PATCHLEVEL = 4
		SUBLEVEL = 71
		SUBLEVEL = 72
		EXTRAVERSION =
		NAME = Blurry Fish Butt

arch/arm/kvm/init.S

+2 −3

Original line number	Diff line number	Diff line
		@@ -110,7 +110,6 @@ __do_hyp_init:
		@ - Write permission implies XN: disabled
		@ - Instruction cache: enabled
		@ - Data/Unified cache: enabled
		@ - Memory alignment checks: enabled
		@ - MMU: enabled (this code must be run from an identity mapping)
		mrc p15, 4, r0, c1, c0, 0 @ HSCR
		ldr r2, =HSCTLR_MASK
		@@ -118,8 +117,8 @@ __do_hyp_init:
		mrc p15, 0, r1, c1, c0, 0 @ SCTLR
		ldr r2, =(HSCTLR_EE \| HSCTLR_FI \| HSCTLR_I \| HSCTLR_C)
		and r1, r1, r2
		ARM( ldr r2, =(HSCTLR_M \| HSCTLR_A) )
		THUMB( ldr r2, =(HSCTLR_M \| HSCTLR_A \| HSCTLR_TE) )
		ARM( ldr r2, =(HSCTLR_M) )
		THUMB( ldr r2, =(HSCTLR_M \| HSCTLR_TE) )
		orr r1, r1, r2
		orr r0, r0, r1
		isb

arch/arm/kvm/mmu.c

+3 −0

Original line number	Diff line number	Diff line
		@@ -869,6 +869,9 @@ static pmd_t stage2_get_pmd(struct kvm kvm, struct kvm_mmu_memory_cache *cache
		pmd_t *pmd;

		pud = stage2_get_pud(kvm, cache, addr);
		if (!pud)
		return NULL;

		if (pud_none(*pud)) {
		if (!cache)
		return NULL;

arch/arm64/include/asm/asm-uaccess.h

0 → 100644

+13 −0

Original line number	Diff line number	Diff line
		#ifndef __ASM_ASM_UACCESS_H
		#define __ASM_ASM_UACCESS_H

		/*
		* Remove the address tag from a virtual address, if present.
		*/
		.macro clear_address_tag, dst, addr
		tst \addr, #(1 << 55)
		bic \dst, \addr, #(0xff << 56)
		csel \dst, \dst, \addr, eq
		.endm

		#endif

arch/arm64/include/asm/barrier.h

+14 −4

Original line number	Diff line number	Diff line
		@@ -44,23 +44,33 @@

		#define smp_store_release(p, v) \
		do { \
		union { typeof(*p) __val; char __c[1]; } __u = \
		{ .__val = (__force typeof(*p)) (v) }; \
		compiletime_assert_atomic_type(*p); \
		switch (sizeof(*p)) { \
		case 1: \
		asm volatile ("stlrb %w1, %0" \
		: "=Q" (*p) : "r" (v) : "memory"); \
		: "=Q" (*p) \
		: "r" ((__u8 )__u.__c) \
		: "memory"); \
		break; \
		case 2: \
		asm volatile ("stlrh %w1, %0" \
		: "=Q" (*p) : "r" (v) : "memory"); \
		: "=Q" (*p) \
		: "r" ((__u16 )__u.__c) \
		: "memory"); \
		break; \
		case 4: \
		asm volatile ("stlr %w1, %0" \
		: "=Q" (*p) : "r" (v) : "memory"); \
		: "=Q" (*p) \
		: "r" ((__u32 )__u.__c) \
		: "memory"); \
		break; \
		case 8: \
		asm volatile ("stlr %1, %0" \
		: "=Q" (*p) : "r" (v) : "memory"); \
		: "=Q" (*p) \
		: "r" ((__u64 )__u.__c) \
		: "memory"); \
		break; \
		} \
		} while (0)