Loading Documentation/kernel-parameters.txt +15 −0 Original line number Diff line number Diff line Loading @@ -2247,6 +2247,8 @@ bytes respectively. Such letter suffixes can also be entirely omitted. spec_store_bypass_disable=off [X86] mds=off [X86] tsx_async_abort=off [X86] no_entry_flush [PPC] no_uaccess_flush [PPC] auto (default) Mitigate all CPU vulnerabilities, but leave SMT Loading Loading @@ -2527,6 +2529,8 @@ bytes respectively. Such letter suffixes can also be entirely omitted. noefi Disable EFI runtime services support. no_entry_flush [PPC] Don't flush the L1-D cache when entering the kernel. noexec [IA-64] noexec [X86] Loading Loading @@ -2588,6 +2592,9 @@ bytes respectively. Such letter suffixes can also be entirely omitted. nospec_store_bypass_disable [HW] Disable all mitigations for the Speculative Store Bypass vulnerability no_uaccess_flush [PPC] Don't flush the L1-D cache after accessing user data. noxsave [BUGS=X86] Disables x86 extended register state save and restore using xsave. The kernel will fallback to enabling legacy floating-point and sse state. Loading Loading @@ -4576,6 +4583,14 @@ bytes respectively. Such letter suffixes can also be entirely omitted. Disables the PV optimizations forcing the HVM guest to run as generic HVM guest with no PV drivers. xen.event_eoi_delay= [XEN] How long to delay EOI handling in case of event storms (jiffies). Default is 10. xen.event_loop_timeout= [XEN] After which time (jiffies) the event handling loop should start to delay EOI handling. Default is 2. xirc2ps_cs= [NET,PCMCIA] Format: <irq>,<irq_mask>,<io>,<full_duplex>,<do_sound>,<lockup_hack>[,<irq2>[,<irq3>[,<irq4>]]] Loading Documentation/networking/ip-sysctl.txt +3 −1 Original line number Diff line number Diff line Loading @@ -883,12 +883,14 @@ icmp_ratelimit - INTEGER icmp_msgs_per_sec - INTEGER Limit maximal number of ICMP packets sent per second from this host. Only messages whose type matches icmp_ratemask (see below) are controlled by this limit. controlled by this limit. For security reasons, the precise count of messages per second is randomized. Default: 1000 icmp_msgs_burst - INTEGER icmp_msgs_per_sec controls number of ICMP packets sent per second, while icmp_msgs_burst controls the burst size of these packets. For security reasons, the precise burst size is randomized. Default: 50 icmp_ratemask - INTEGER Loading Makefile +11 −7 Original line number Diff line number Diff line VERSION = 4 PATCHLEVEL = 4 SUBLEVEL = 240 SUBLEVEL = 245 EXTRAVERSION = NAME = Blurry Fish Butt Loading Loading @@ -626,7 +626,6 @@ endif CLANG_FLAGS += -no-integrated-as CLANG_FLAGS += -Werror=unknown-warning-option CLANG_FLAGS += $(call cc-option, -Wno-misleading-indentation) CLANG_FLAGS += $(call cc-option, -Wno-bool-operation) KBUILD_CFLAGS += $(CLANG_FLAGS) KBUILD_AFLAGS += $(CLANG_FLAGS) endif Loading Loading @@ -1087,12 +1086,17 @@ prepare: prepare0 # needs to be updated, so this check is forced on all builds uts_len := 64 ifneq (,$(BUILD_NUMBER)) UTS_RELEASE=$(KERNELRELEASE)-ab$(BUILD_NUMBER) else UTS_RELEASE=$(KERNELRELEASE) endif define filechk_utsrelease.h if [ `echo -n "$(KERNELRELEASE)" | wc -c ` -gt $(uts_len) ]; then \ echo '"$(KERNELRELEASE)" exceeds $(uts_len) characters' >&2; \ if [ `echo -n "$(UTS_RELEASE)" | wc -c ` -gt $(uts_len) ]; then \ echo '"$(UTS_RELEASE)" exceeds $(uts_len) characters' >&2; \ exit 1; \ fi; \ (echo \#define UTS_RELEASE \"$(KERNELRELEASE)\";) (echo \#define UTS_RELEASE \"$(UTS_RELEASE)\";) endef define filechk_version.h Loading arch/arc/kernel/entry.S +11 −5 Original line number Diff line number Diff line Loading @@ -168,6 +168,7 @@ END(EV_Extension) tracesys: ; save EFA in case tracer wants the PC of traced task ; using ERET won't work since next-PC has already committed lr r12, [efa] GET_CURR_TASK_FIELD_PTR TASK_THREAD, r11 st r12, [r11, THREAD_FAULT_ADDR] ; thread.fault_address Loading Loading @@ -210,9 +211,15 @@ tracesys_exit: ; Breakpoint TRAP ; --------------------------------------------- trap_with_param: mov r0, r12 ; EFA in case ptracer/gdb wants stop_pc ; stop_pc info by gdb needs this info lr r0, [efa] mov r1, sp ; Now that we have read EFA, it is safe to do "fake" rtie ; and get out of CPU exception mode FAKE_RET_FROM_EXCPN ; Save callee regs in case gdb wants to have a look ; SP will grow up by size of CALLEE Reg-File ; NOTE: clobbers r12 Loading @@ -239,10 +246,6 @@ ENTRY(EV_Trap) EXCEPTION_PROLOGUE lr r12, [efa] FAKE_RET_FROM_EXCPN ;============ TRAP 1 :breakpoints ; Check ECR for trap with arg (PROLOGUE ensures r9 has ECR) bmsk.f 0, r9, 7 Loading @@ -250,6 +253,9 @@ ENTRY(EV_Trap) ;============ TRAP (no param): syscall top level ; First return from Exception to pure K mode (Exception/IRQs renabled) FAKE_RET_FROM_EXCPN ; If syscall tracing ongoing, invoke pre-post-hooks GET_CURR_THR_INFO_FLAGS r10 btst r10, TIF_SYSCALL_TRACE Loading arch/arc/kernel/stacktrace.c +6 −1 Original line number Diff line number Diff line Loading @@ -113,7 +113,7 @@ arc_unwind_core(struct task_struct *tsk, struct pt_regs *regs, int (*consumer_fn) (unsigned int, void *), void *arg) { #ifdef CONFIG_ARC_DW2_UNWIND int ret = 0; int ret = 0, cnt = 0; unsigned int address; struct unwind_frame_info frame_info; Loading @@ -133,6 +133,11 @@ arc_unwind_core(struct task_struct *tsk, struct pt_regs *regs, break; frame_info.regs.r63 = frame_info.regs.r31; if (cnt++ > 128) { printk("unwinder looping too long, aborting !\n"); return 0; } } return address; /* return the last address it saw */ Loading Loading
Documentation/kernel-parameters.txt +15 −0 Original line number Diff line number Diff line Loading @@ -2247,6 +2247,8 @@ bytes respectively. Such letter suffixes can also be entirely omitted. spec_store_bypass_disable=off [X86] mds=off [X86] tsx_async_abort=off [X86] no_entry_flush [PPC] no_uaccess_flush [PPC] auto (default) Mitigate all CPU vulnerabilities, but leave SMT Loading Loading @@ -2527,6 +2529,8 @@ bytes respectively. Such letter suffixes can also be entirely omitted. noefi Disable EFI runtime services support. no_entry_flush [PPC] Don't flush the L1-D cache when entering the kernel. noexec [IA-64] noexec [X86] Loading Loading @@ -2588,6 +2592,9 @@ bytes respectively. Such letter suffixes can also be entirely omitted. nospec_store_bypass_disable [HW] Disable all mitigations for the Speculative Store Bypass vulnerability no_uaccess_flush [PPC] Don't flush the L1-D cache after accessing user data. noxsave [BUGS=X86] Disables x86 extended register state save and restore using xsave. The kernel will fallback to enabling legacy floating-point and sse state. Loading Loading @@ -4576,6 +4583,14 @@ bytes respectively. Such letter suffixes can also be entirely omitted. Disables the PV optimizations forcing the HVM guest to run as generic HVM guest with no PV drivers. xen.event_eoi_delay= [XEN] How long to delay EOI handling in case of event storms (jiffies). Default is 10. xen.event_loop_timeout= [XEN] After which time (jiffies) the event handling loop should start to delay EOI handling. Default is 2. xirc2ps_cs= [NET,PCMCIA] Format: <irq>,<irq_mask>,<io>,<full_duplex>,<do_sound>,<lockup_hack>[,<irq2>[,<irq3>[,<irq4>]]] Loading
Documentation/networking/ip-sysctl.txt +3 −1 Original line number Diff line number Diff line Loading @@ -883,12 +883,14 @@ icmp_ratelimit - INTEGER icmp_msgs_per_sec - INTEGER Limit maximal number of ICMP packets sent per second from this host. Only messages whose type matches icmp_ratemask (see below) are controlled by this limit. controlled by this limit. For security reasons, the precise count of messages per second is randomized. Default: 1000 icmp_msgs_burst - INTEGER icmp_msgs_per_sec controls number of ICMP packets sent per second, while icmp_msgs_burst controls the burst size of these packets. For security reasons, the precise burst size is randomized. Default: 50 icmp_ratemask - INTEGER Loading
Makefile +11 −7 Original line number Diff line number Diff line VERSION = 4 PATCHLEVEL = 4 SUBLEVEL = 240 SUBLEVEL = 245 EXTRAVERSION = NAME = Blurry Fish Butt Loading Loading @@ -626,7 +626,6 @@ endif CLANG_FLAGS += -no-integrated-as CLANG_FLAGS += -Werror=unknown-warning-option CLANG_FLAGS += $(call cc-option, -Wno-misleading-indentation) CLANG_FLAGS += $(call cc-option, -Wno-bool-operation) KBUILD_CFLAGS += $(CLANG_FLAGS) KBUILD_AFLAGS += $(CLANG_FLAGS) endif Loading Loading @@ -1087,12 +1086,17 @@ prepare: prepare0 # needs to be updated, so this check is forced on all builds uts_len := 64 ifneq (,$(BUILD_NUMBER)) UTS_RELEASE=$(KERNELRELEASE)-ab$(BUILD_NUMBER) else UTS_RELEASE=$(KERNELRELEASE) endif define filechk_utsrelease.h if [ `echo -n "$(KERNELRELEASE)" | wc -c ` -gt $(uts_len) ]; then \ echo '"$(KERNELRELEASE)" exceeds $(uts_len) characters' >&2; \ if [ `echo -n "$(UTS_RELEASE)" | wc -c ` -gt $(uts_len) ]; then \ echo '"$(UTS_RELEASE)" exceeds $(uts_len) characters' >&2; \ exit 1; \ fi; \ (echo \#define UTS_RELEASE \"$(KERNELRELEASE)\";) (echo \#define UTS_RELEASE \"$(UTS_RELEASE)\";) endef define filechk_version.h Loading
arch/arc/kernel/entry.S +11 −5 Original line number Diff line number Diff line Loading @@ -168,6 +168,7 @@ END(EV_Extension) tracesys: ; save EFA in case tracer wants the PC of traced task ; using ERET won't work since next-PC has already committed lr r12, [efa] GET_CURR_TASK_FIELD_PTR TASK_THREAD, r11 st r12, [r11, THREAD_FAULT_ADDR] ; thread.fault_address Loading Loading @@ -210,9 +211,15 @@ tracesys_exit: ; Breakpoint TRAP ; --------------------------------------------- trap_with_param: mov r0, r12 ; EFA in case ptracer/gdb wants stop_pc ; stop_pc info by gdb needs this info lr r0, [efa] mov r1, sp ; Now that we have read EFA, it is safe to do "fake" rtie ; and get out of CPU exception mode FAKE_RET_FROM_EXCPN ; Save callee regs in case gdb wants to have a look ; SP will grow up by size of CALLEE Reg-File ; NOTE: clobbers r12 Loading @@ -239,10 +246,6 @@ ENTRY(EV_Trap) EXCEPTION_PROLOGUE lr r12, [efa] FAKE_RET_FROM_EXCPN ;============ TRAP 1 :breakpoints ; Check ECR for trap with arg (PROLOGUE ensures r9 has ECR) bmsk.f 0, r9, 7 Loading @@ -250,6 +253,9 @@ ENTRY(EV_Trap) ;============ TRAP (no param): syscall top level ; First return from Exception to pure K mode (Exception/IRQs renabled) FAKE_RET_FROM_EXCPN ; If syscall tracing ongoing, invoke pre-post-hooks GET_CURR_THR_INFO_FLAGS r10 btst r10, TIF_SYSCALL_TRACE Loading
arch/arc/kernel/stacktrace.c +6 −1 Original line number Diff line number Diff line Loading @@ -113,7 +113,7 @@ arc_unwind_core(struct task_struct *tsk, struct pt_regs *regs, int (*consumer_fn) (unsigned int, void *), void *arg) { #ifdef CONFIG_ARC_DW2_UNWIND int ret = 0; int ret = 0, cnt = 0; unsigned int address; struct unwind_frame_info frame_info; Loading @@ -133,6 +133,11 @@ arc_unwind_core(struct task_struct *tsk, struct pt_regs *regs, break; frame_info.regs.r63 = frame_info.regs.r31; if (cnt++ > 128) { printk("unwinder looping too long, aborting !\n"); return 0; } } return address; /* return the last address it saw */ Loading