]> git.ipfire.org Git - thirdparty/grsecurity-scrape.git/blob - test/changelog-test.txt
Auto commit, 1 new patch{es}.
[thirdparty/grsecurity-scrape.git] / test / changelog-test.txt
1 commit cc5fa2f058fdfb4fe6e0e7b8e16766e839163b3d
2 Author: Brad Spengler <spender@grsecurity.net>
3 Date: Thu Jun 30 17:39:11 2016 -0400
4
5 compile fix
6
7 arch/x86/mm/init.c | 38 ++++++++++++++++++++++++++++++++++++++
8 1 file changed, 38 insertions(+)
9
10 commit 67a4e5ea21f50a40a96ab6d486e589dfa58a75c3
11 Merge: ae14b26 97ed08d
12 Author: Brad Spengler <spender@grsecurity.net>
13 Date: Thu Jun 30 17:30:57 2016 -0400
14
15 Merge branch 'pax-test' into grsec-test
16
17 commit 97ed08d8aa41b452ab3835343852cd388c2044e3
18 Author: Brad Spengler <spender@grsecurity.net>
19 Date: Thu Jun 30 17:26:41 2016 -0400
20
21 Update to pax-linux-4.5.7-test20.patch:
22 - fixed a compile error with the brcmnand driver under CONSTIFY, reported by blake and spender
23 - fixed a few sections on constified pernet_operations objects
24 - merged some KERNEXEC/x86 boot time setup code with DEBUG_RODATA
25
26 arch/x86/Kconfig.debug | 1 -
27 arch/x86/kernel/head_32.S | 21 ++++------
28 arch/x86/kernel/head_64.S | 9 +++--
29 arch/x86/kernel/vmlinux.lds.S | 12 ------
30 arch/x86/mm/init.c | 92 -------------------------------------------
31 arch/x86/mm/init_32.c | 46 ++++++++++++++++------
32 arch/x86/mm/init_64.c | 54 +++++++++++++++++++++++--
33 include/linux/init.h | 6 +++
34 security/Kconfig | 1 +
35 9 files changed, 104 insertions(+), 138 deletions(-)
36
37 commit ae14b26dc8becf26b63cbcbe1ff865ee332699a6
38 Merge: 9d9a962 0e82a4c
39 Author: Brad Spengler <spender@grsecurity.net>
40 Date: Wed Jun 29 21:59:37 2016 -0400
41
42 Merge branch 'pax-test' into grsec-test
43
44 commit 0e82a4c62fbaea6bb193c8aa0bd9968325d4f28f
45 Author: Brad Spengler <spender@grsecurity.net>
46 Date: Wed Jun 29 21:58:53 2016 -0400
47
48 Backport from pax-linux-4.6.3-test9.patch:
49 - fixed a compile error with the brcmnand driver under CONSTIFY, reported by blake and spender
50 - fixed a few sections on constified pernet_operations objects
51
52 drivers/mtd/nand/brcmnand/brcmnand.h | 2 +-
53 drivers/net/loopback.c | 2 +-
54 fs/proc/proc_net.c | 2 +-
55 include/linux/netdevice.h | 2 +-
56 kernel/audit.c | 2 +-
57 net/core/dev.c | 4 ++--
58 net/core/net-procfs.c | 4 ++--
59 net/core/net_namespace.c | 2 +-
60 net/core/sock.c | 2 +-
61 net/ipv4/af_inet.c | 4 ++--
62 net/ipv4/devinet.c | 2 +-
63 net/ipv4/icmp.c | 2 +-
64 net/ipv4/proc.c | 2 +-
65 net/ipv4/raw.c | 2 +-
66 net/ipv4/route.c | 8 ++++----
67 net/ipv4/sysctl_net_ipv4.c | 2 +-
68 net/ipv4/tcp_ipv4.c | 2 +-
69 net/ipv4/tcp_metrics.c | 2 +-
70 net/ipv4/xfrm4_policy.c | 2 +-
71 net/netlink/af_netlink.c | 2 +-
72 net/xfrm/xfrm_policy.c | 2 +-
73 scripts/gcc-plugins/gcc-common.h | 4 ++--
74 22 files changed, 29 insertions(+), 29 deletions(-)
75
76 commit 9d9a962d41feb6c669e922dc745274d6837e65a0
77 Author: Brad Spengler <spender@grsecurity.net>
78 Date: Wed Jun 29 09:37:24 2016 -0400
79
80 Fix section conflict
81
82 drivers/hwmon/dell-smm-hwmon.c | 2 +-
83 1 file changed, 1 insertion(+), 1 deletion(-)
84
85 commit da933a642cfedfd5c8aeea6b639b7c4281c09ac0
86 Merge: 86572f86 cf76181
87 Author: Brad Spengler <spender@grsecurity.net>
88 Date: Wed Jun 29 09:23:24 2016 -0400
89
90 Merge branch 'pax-test' into grsec-test
91
92 commit cf761817d0edbf2b54534346ad3db500202c9f78
93 Author: Brad Spengler <spender@grsecurity.net>
94 Date: Wed Jun 29 09:22:59 2016 -0400
95
96 Update to pax-linux-4.5.7-test19.patch:
97 - fixed constify compile regression that triggered on aliases of certain constified variables, reported by Yves-Alexis Perez <corsac@corsac.net>
98
99 drivers/clk/socfpga/clk-gate-a10.c | 2 +-
100 drivers/clk/socfpga/clk-pll-a10.c | 2 +-
101 drivers/hwmon/dell-smm-hwmon.c | 2 +-
102 scripts/gcc-plugins/constify_plugin.c | 11 ++++++++++-
103 scripts/gcc-plugins/gcc-common.h | 1 +
104 5 files changed, 14 insertions(+), 4 deletions(-)
105
106 commit 86572f86f379b0e6e22bf5dacb327ed0f4b43fbf
107 Author: Brad Spengler <spender@grsecurity.net>
108 Date: Tue Jun 28 21:29:02 2016 -0400
109
110 Fix section conflict caught by recent constify plugin improvements
111
112 drivers/hwmon/dell-smm-hwmon.c | 2 +-
113 1 file changed, 1 insertion(+), 1 deletion(-)
114
115 commit f6702b62ac3f7b94968ccebbfef7b33d16752926
116 Author: Brad Spengler <spender@grsecurity.net>
117 Date: Tue Jun 28 20:55:33 2016 -0400
118
119 Mark some ARM _ops __read_only for consistency
120
121 drivers/clk/socfpga/clk-gate-a10.c | 2 +-
122 drivers/clk/socfpga/clk-pll-a10.c | 2 +-
123 2 files changed, 2 insertions(+), 2 deletions(-)
124
125 commit 4766cd23999675173175ff7563bdf2c785ecb9de
126 Merge: a256990 791e52d
127 Author: Brad Spengler <spender@grsecurity.net>
128 Date: Tue Jun 28 20:52:20 2016 -0400
129
130 Merge branch 'pax-test' into grsec-test
131
132 commit 791e52d5d1ef361e6f2fdf2dc3cf51ca712788b2
133 Author: Brad Spengler <spender@grsecurity.net>
134 Date: Tue Jun 28 20:51:37 2016 -0400
135
136 Update to pax-linux-4.5.7-test18.patch:
137 - fixed a compile error of the constify plugin under older gcc versions
138 - Emese added a few nocapture attributes to powerpc as well
139 - fixed a few compile errors due to writes to constified fptrs on arm, reported by blake and spender
140 - fixed compile error with certain gcc versions when plugins were passed twice, reported by spender
141 - fixed regression causing random execve failures under UDEREF/amd64 and with ASLR disabled, reported by jotik
142 - taught the constify plugin to detect section mismatches of constified objects
143 - fixed a few section mismatches of constified objects that triggered LTO compilation errors
144 - changed the recent hyperv fix to be LTO compatible
145
146 arch/powerpc/include/asm/string.h | 18 ++--
147 arch/x86/Kconfig | 6 +-
148 arch/x86/boot/string.h | 4 +-
149 drivers/clk/socfpga/clk-gate-a10.c | 7 +-
150 drivers/clk/socfpga/clk-pll-a10.c | 7 +-
151 drivers/hv/hv.c | 3 +-
152 drivers/hwmon/applesmc.c | 2 +-
153 drivers/hwmon/dell-smm-hwmon.c | 2 +-
154 drivers/iommu/io-pgtable-arm.c | 2 +-
155 drivers/leds/leds-clevo-mail.c | 2 +-
156 drivers/leds/leds-ss4200.c | 2 +-
157 drivers/platform/chrome/chromeos_laptop.c | 2 +-
158 drivers/platform/chrome/cros_ec_lpc.c | 2 +-
159 include/linux/memory.h | 2 +-
160 init/Makefile | 3 -
161 scripts/Makefile.gcc-plugins | 2 +
162 scripts/gcc-plugins/constify_plugin.c | 131 +++++++++++++++++++++---------
163 scripts/gcc-plugins/gcc-common.h | 13 +++
164 18 files changed, 141 insertions(+), 69 deletions(-)
165
166 commit a256990dcb829c5a2f7ef5935dccb5f5faf5b5aa
167 Author: Brad Spengler <spender@grsecurity.net>
168 Date: Tue Jun 28 19:16:51 2016 -0400
169
170 !GRKERNSEC compile fixes
171
172 fs/proc/base.c | 2 ++
173 fs/proc/task_mmu.c | 4 ++++
174 fs/proc/task_nommu.c | 2 +-
175 3 files changed, 7 insertions(+), 1 deletion(-)
176
177 commit ed27bdf50d7ab1ed254e12e71639b5da9bc7981c
178 Author: Brad Spengler <spender@grsecurity.net>
179 Date: Tue Jun 28 18:51:23 2016 -0400
180
181 Allow active ptracers access to /proc/pid/maps and /proc/pid/mem for tasks
182 they are ptracing. Also clean up the maps code to avoid duplicate PaX flag
183 checks. Thanks to ekleog for reporting and testing, and Robert O'Callahan
184 for collaborating on changes/cleanups to rr to fix support for grsecurity.
185
186 fs/proc/base.c | 24 +++++++++++++++++++-----
187 fs/proc/internal.h | 7 +++++--
188 fs/proc/task_mmu.c | 45 +++++++++++++++++++++------------------------
189 fs/proc/task_nommu.c | 2 +-
190 include/linux/sched.h | 21 +++++++++++++++++++++
191 5 files changed, 67 insertions(+), 32 deletions(-)
192
193 commit 489fa0be1ea2ce2665611bc315f229486c64dbc5
194 Author: Brad Spengler <spender@grsecurity.net>
195 Date: Mon Jun 27 23:19:52 2016 -0400
196
197 Historically we did not trigger a BUG() on REFCOUNT violations due to the risk
198 of false positives, some of which took months or longer to exhibit themselves.
199 Initially, in fact, there was no task killing at all involved due to the risk of
200 a legitimate increment following a full set of intentional "leaky" increments
201 causing the wrong process to be killed and the wrong user to be banned (or a
202 panic ensuing). These risks were also weighed against the risk documented in
203 the REFCOUNT blog and elsewhere of a race on x86 where the refcount could
204 surpass INT_MAX. Regardless of whether the race is practical or not (and ways
205 of addressing that race are already mentioned in the REFCOUNT blog) given the
206 recent development of a GCC plugin to proactively tease out false positives
207 mentioned above, it's safe enough now to simply BUG() on refcount overflow
208 attempts. This handles both the race case as well as the case of atomic_t being
209 used when atomic64_t is really necessary to be able to express the full amount
210 of object references (when grsecurity's kernel bruteforce defense is enabled as
211 it is by default).
212
213 Suggested by Jann Horn at: http://www.openwall.com/lists/kernel-hardening/2016/06/25/2
214
215 fs/exec.c | 5 +----
216 1 file changed, 1 insertion(+), 4 deletions(-)
217
218 commit 0fb349e90e9de1d35ab4e7cd33b0f230b30c340f
219 Author: Brad Spengler <spender@grsecurity.net>
220 Date: Mon Jun 27 17:14:06 2016 -0400
221
222 Fix a UAF only triggerable by privileged root processes on the
223 short-lived delayed_cred pointer by grabbing a reference where
224 applicable at fork time -- not a security issue
225 Thanks to Jann Horn for the report
226
227 kernel/fork.c | 5 +++++
228 1 file changed, 5 insertions(+)
229
230 commit 6eb392861c72839f7af44d0e57927f362a2a0df5
231 Author: Brad Spengler <spender@grsecurity.net>
232 Date: Sun Jun 26 18:07:05 2016 -0400
233
234 compile fix
235
236 fs/posix_acl.c | 2 +-
237 1 file changed, 1 insertion(+), 1 deletion(-)
238
239 commit 1eed3a4206abdd68b35537dcff1b1832b28d4617
240 Author: Ben Hutchings <ben@decadent.org.uk>
241 Date: Wed Jun 22 19:43:35 2016 +0100
242
243 nfsd: check permissions when setting ACLs
244
245 Use set_posix_acl, which includes proper permission checks, instead of
246 calling ->set_acl directly. Without this anyone may be able to grant
247 themselves permissions to a file by setting the ACL.
248
249 Lock the inode to make the new checks atomic with respect to set_acl.
250 (Also, nfsd was the only caller of set_acl not locking the inode, so I
251 suspect this may fix other races.)
252
253 This also simplifies the code, and ensures our ACLs are checked by
254 posix_acl_valid.
255
256 The permission checks and the inode locking were lost with commit
257 4ac7249e, which changed nfsd to use the set_acl inode operation directly
258 instead of going through xattr handlers.
259
260 Reported-by: David Sinquin <david@sinquin.eu>
261 [agreunba@redhat.com: use set_posix_acl]
262 Fixes: 4ac7249e
263 Cc: Christoph Hellwig <hch@infradead.org>
264 Cc: Al Viro <viro@zeniv.linux.org.uk>
265 Cc: stable@vger.kernel.org
266 Signed-off-by: J. Bruce Fields <bfields@redhat.com>
267
268 fs/nfsd/nfs2acl.c | 20 ++++++++++----------
269 fs/nfsd/nfs3acl.c | 16 +++++++---------
270 fs/nfsd/nfs4acl.c | 16 ++++++++--------
271 3 files changed, 25 insertions(+), 27 deletions(-)
272
273 commit d5be7c0c7a8e0408e9faf62dcaaf2471fe19d3a0
274 Author: Andreas Gruenbacher <agruenba@redhat.com>
275 Date: Wed Jun 22 23:57:25 2016 +0200
276
277 posix_acl: Add set_posix_acl
278
279 Factor out part of posix_acl_xattr_set into a common function that takes
280 a posix_acl, which nfsd can also call.
281
282 The prototype already exists in include/linux/posix_acl.h.
283
284 Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com>
285 Cc: stable@vger.kernel.org
286 Cc: Christoph Hellwig <hch@infradead.org>
287 Cc: Al Viro <viro@zeniv.linux.org.uk>
288 Signed-off-by: J. Bruce Fields <bfields@redhat.com>
289
290 fs/posix_acl.c | 46 +++++++++++++++++++++++++++-------------------
291 1 file changed, 27 insertions(+), 19 deletions(-)
292
293 commit 5d722e6ce47a1c1987e862c84c4b56ddbc4423de
294 Author: Brad Spengler <spender@grsecurity.net>
295 Date: Sun Jun 26 17:33:38 2016 -0400
296
297 Fix ICE caused by duplicate plugin loads from the recent plugin
298 infrastructure changes
299
300 init/Makefile | 3 ---
301 1 file changed, 3 deletions(-)
302
303 commit 278d24df4f61ab171288187e6952ace4a82d42dc
304 Merge: 0c59418 83e55cb
305 Author: Brad Spengler <spender@grsecurity.net>
306 Date: Sun Jun 26 12:40:25 2016 -0400
307
308 Merge branch 'pax-test' into grsec-test
309
310 commit 83e55cbeedfb0b8712de995457c395b1ba8fe936
311 Author: Brad Spengler <spender@grsecurity.net>
312 Date: Sun Jun 26 12:11:40 2016 -0400
313
314 Update to pax-linux-4.5.7-test16.patch:
315 - imported a few more gcc plugin infrastructure changes from Emese's upstreaming work
316
317 .gitignore | 1 +
318 Makefile | 1 +
319 drivers/hv/hv.c | 2 +-
320 fs/namespace.c | 3 +-
321 include/linux/init.h | 4 +-
322 scripts/Makefile | 3 +-
323 scripts/Makefile.clean | 3 +-
324 scripts/Makefile.gcc-plugins | 5 ++-
325 scripts/Makefile.host | 7 ++-
326 scripts/gcc-plugins/Makefile | 54 +++++++----------------
327 scripts/gcc-plugins/rap_plugin/Makefile | 2 +
328 scripts/gcc-plugins/size_overflow_plugin/Makefile | 2 +
329 12 files changed, 39 insertions(+), 48 deletions(-)
330
331 commit 0c59418c05aa82cc46806b2b9b324d44ad5f043b
332 Author: Scott Bauer <sbauer@plzdonthack.me>
333 Date: Thu Jun 23 08:59:47 2016 -0600
334
335 HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands
336
337 This patch validates the num_values parameter from userland during the
338 HIDIOCGUSAGES and HIDIOCSUSAGES commands. Previously, if the report id was set
339 to HID_REPORT_ID_UNKNOWN, we would fail to validate the num_values parameter
340 leading to a heap overflow.
341
342 Cc: stable@vger.kernel.org
343 Signed-off-by: Scott Bauer <sbauer@plzdonthack.me>
344 Signed-off-by: Jiri Kosina <jkosina@suse.cz>
345
346 drivers/hid/usbhid/hiddev.c | 10 +++++-----
347 1 file changed, 5 insertions(+), 5 deletions(-)
348
349 commit 6c4919ead98c7342acecbd28f781dd2c3a37be4e
350 Author: Brad Spengler <spender@grsecurity.net>
351 Date: Sat Jun 25 07:22:44 2016 -0400
352
353 fix typo
354
355 scripts/Makefile.gcc-plugins | 2 +-
356 1 file changed, 1 insertion(+), 1 deletion(-)
357
358 commit 44fc4dd89969440d883528361bf65e6e82e35b49
359 Author: Brad Spengler <spender@grsecurity.net>
360 Date: Fri Jun 24 19:37:20 2016 -0400
361
362 RANDSTRUCT compile fix
363
364 drivers/gpu/drm/amd/powerplay/hwmgr/fiji_thermal.c | 20 ++++++++++----------
365 drivers/gpu/drm/amd/powerplay/hwmgr/tonga_thermal.c | 20 ++++++++++----------
366 2 files changed, 20 insertions(+), 20 deletions(-)
367
368 commit 08022b387ddd8856d39ace5d6f92636c7d1b422a
369 Author: Brad Spengler <spender@grsecurity.net>
370 Date: Fri Jun 24 19:22:39 2016 -0400
371
372 RANDSTRUCT compile fix
373
374 .../drm/amd/powerplay/hwmgr/cz_clockpowergating.c | 12 +++--
375 drivers/gpu/drm/amd/powerplay/hwmgr/cz_hwmgr.c | 58 +++++++++++-----------
376 2 files changed, 38 insertions(+), 32 deletions(-)
377
378 commit f48aea278530eb71ce2f9a24dc9e245f29d530ba
379 Author: Brad Spengler <spender@grsecurity.net>
380 Date: Fri Jun 24 18:52:19 2016 -0400
381
382 compile fix
383
384 drivers/hv/hv.c | 2 +-
385 1 file changed, 1 insertion(+), 1 deletion(-)
386
387 commit 1ce67be0c2ccf325fc5110ee052a8d0b08f09959
388 Author: Brad Spengler <spender@grsecurity.net>
389 Date: Fri Jun 24 17:45:26 2016 -0400
390
391 Add missing entries for RANDSTRUCT to scripts/Makefile.gcc-plugins
392 Bug introduced during 4.5 port during merging with upstream bikeshedding
393 scripts/gcc-plugins/Makefile was updated properly, but scripts/Makefile.gcc-plugins was not
394 This unfortunately means RANDSTRUCT was silently not enabled for all of the 4.5 patches to date
395
396 scripts/Makefile.gcc-plugins | 5 +++++
397 1 file changed, 5 insertions(+)
398
399 commit 6bf5265035d4617a1ef7845e7915389e1c65647b
400 Merge: c881b58 542e9e9
401 Author: Brad Spengler <spender@grsecurity.net>
402 Date: Fri Jun 24 17:01:33 2016 -0400
403
404 Merge branch 'pax-test' into grsec-test
405
406 commit 542e9e9a75e654b7e352025ecc67c6a2f98d8ea2
407 Author: Brad Spengler <spender@grsecurity.net>
408 Date: Fri Jun 24 17:00:25 2016 -0400
409
410 Update to pax-linux-4.5.7-test14.patch:
411 - synchronized with Emese's gcc plugin related changes headed upstream
412 - fixed a REFCOUNT false positive in nf_conntrack_init_net, reported by minipli
413 - fixed a regression in the recent Hyper-V support under !KERNEXEC
414
415 Makefile | 9 ---------
416 arch/x86/entry/vdso/vma.c | 2 +-
417 drivers/hv/hv.c | 2 +-
418 include/linux/compiler-gcc.h | 2 ++
419 include/linux/init.h | 8 +-------
420 include/linux/random.h | 8 ++++----
421 mm/page_alloc.c | 8 +++++---
422 net/netfilter/nf_conntrack_core.c | 4 ++--
423 scripts/Kbuild.include | 10 +++++++---
424 scripts/Makefile.gcc-plugins | 31 ++++++++++++++++++++++++-------
425 scripts/gcc-plugin.sh | 14 ++++++++++++++
426 security/Kconfig | 3 ++-
427 12 files changed, 63 insertions(+), 38 deletions(-)
428
429 commit c881b58ba51680e30758c1ea12058cd76c578672
430 Author: Brad Spengler <spender@grsecurity.net>
431 Date: Wed Jun 22 19:27:11 2016 -0400
432
433 compile fix
434
435 arch/x86/mm/init.c | 2 +-
436 1 file changed, 1 insertion(+), 1 deletion(-)
437
438 commit 6f889875e9f23d3d5a4751d09cc47f6e39eb9e1b
439 Author: Brad Spengler <spender@grsecurity.net>
440 Date: Wed Jun 22 17:37:53 2016 -0400
441
442 Don't bother further restricting /dev/mem when GRKERNSEC_KMEM is disabled,
443 fixes tboot use
444 Reported by Mark van Dijk
445 Previous MSR problem was also reported by Mark van Dijk
446
447 arch/x86/mm/init.c | 16 +++++-----------
448 1 file changed, 5 insertions(+), 11 deletions(-)
449
450 commit 1b99e76b8f41a8495ff085ffccab0e1bc8abed59
451 Author: Brad Spengler <spender@grsecurity.net>
452 Date: Wed Jun 22 17:22:14 2016 -0400
453
454 Whitelist writes to MSR_IA32_ENERGY_PERF_BIAS
455
456 arch/x86/kernel/msr.c | 6 ++++--
457 1 file changed, 4 insertions(+), 2 deletions(-)
458
459 commit 8c013d99d311850cade58ed5f9da05fb7f2c2873
460 Merge: 33e588f 9b2decf
461 Author: Brad Spengler <spender@grsecurity.net>
462 Date: Wed Jun 22 07:46:27 2016 -0400
463
464 Merge branch 'pax-test' into grsec-test
465
466 commit 9b2decf0bccddae6e630a2548d53d2a9718891a3
467 Author: Brad Spengler <spender@grsecurity.net>
468 Date: Wed Jun 22 07:46:03 2016 -0400
469
470 Update to pax-linux-4.5.7-test13.patch:
471 - fixed a bad function pointer cast in dma_buf_show caught by RAP, by Mathias Krause <minipli@googlemail.com>
472 - fixed a bad function type in the intel cstate sysfs code caught by RAP, reported by sth0R (https://forums.grsecurity.net/viewtopic.php?f=3&t=4497)
473 - worked around an intentional integer overflow in the PCI resource sizing code caught by the size overflow plugin, reported by kysse/Ville Vuorinen
474 - fixed an integer underflow in the ELF coredump code caught by the size overflow plugin, reported by Dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4495)
475 - fixed Hyper-V's hypercall page allocation to work under !KERNEXEC as well, reported by btnet (https://forums.grsecurity.net/viewtopic.php?f=3&t=3911), based on an idea by Pablo Sole (https://bugs.alpinelinux.org/issues/1021#note-27)
476 - fixed a REFCOUNT false positive in wpan_phy_new
477
478 arch/x86/include/asm/pgtable_64.h | 2 +-
479 arch/x86/kernel/cpu/perf_event_intel_cstate.c | 6 +++---
480 arch/x86/kernel/head_64.S | 10 ++++++++--
481 arch/x86/xen/mmu.c | 10 ++++++++--
482 drivers/dma-buf/dma-buf.c | 5 ++---
483 drivers/hv/hv.c | 23 +++++++----------------
484 drivers/pci/setup-bus.c | 8 ++++++--
485 fs/exec.c | 4 ++--
486 include/linux/types.h | 2 ++
487 net/ieee802154/core.c | 6 +++---
488 10 files changed, 42 insertions(+), 34 deletions(-)
489
490 commit 33e588f130c19cac089c2b0d70c939bee84ba812
491 Author: Brad Spengler <spender@grsecurity.net>
492 Date: Fri Jun 17 20:15:46 2016 -0400
493
494 Update KSTACKOVERFLOW dependency, update documentation
495
496 grsecurity/Kconfig | 8 ++++----
497 1 file changed, 4 insertions(+), 4 deletions(-)
498
499 commit d877624a8034129afc61dcc0f6127d69ee7a08d5
500 Author: Brad Spengler <spender@grsecurity.net>
501 Date: Wed Jun 15 06:28:18 2016 -0400
502
503 Backport fix for http://seclists.org/oss-sec/2016/q2/553
504
505 security/keys/key.c | 2 +-
506 1 file changed, 1 insertion(+), 1 deletion(-)
507
508 commit 39c61be367e5f1e1e0a08592ab3b23e71779ac9f
509 Merge: c63d655 66f9687
510 Author: Brad Spengler <spender@grsecurity.net>
511 Date: Tue Jun 14 18:19:37 2016 -0400
512
513 Merge branch 'pax-test' into grsec-test
514
515 commit 66f968756cfcc3ab040ad99deb570fb445108fb9
516 Author: Brad Spengler <spender@grsecurity.net>
517 Date: Tue Jun 14 18:19:04 2016 -0400
518
519 Update to pax-linux-4.5.5-test12.patch:
520 - fixed a KERNEXEC regression when writing to /proc/sys/kernel/watchdog_cpumask, reported by shadowdaemon
521 - Emese worked around a gcc induced intentional integer overflow in jfs that triggered a size overflow report, reported by g66 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4486)
522 - Emese relicensed the size overflow plugin to GPLv2 only
523 - Emese added size overflow coverage for vmnet in the hash tables, reported by Shawn <citypw@gmail.com>
524 - Emese enhanced the latent entropy in various ways (https://github.com/ephox-gcc-plugins/latent_entropy/commits/master)
525 - fixed pax_sanitize_slab=off for kmalloc and boot caches, by Mathias Krause <minipli@ld-linux.so>
526 - eliminated the memory overhead of SLUB sanitization, by Mathias Krause <minipli@ld-linux.so>
527
528 kernel/smpboot.c | 3 +
529 mm/slab.c | 2 +
530 mm/slab.h | 15 +
531 mm/slab_common.c | 7 -
532 mm/slob.c | 2 +
533 mm/slub.c | 8 +-
534 scripts/gcc-plugins/latent_entropy_plugin.c | 361 +++++++++++++++------
535 .../disable_size_overflow_hash.data | 1 +
536 .../insert_size_overflow_asm.c | 2 +-
537 .../size_overflow_plugin/intentional_overflow.c | 2 +-
538 .../size_overflow_plugin/remove_unnecessary_dup.c | 2 +-
539 .../size_overflow_plugin/size_overflow_debug.c | 2 +-
540 .../size_overflow_plugin/size_overflow_hash.data | 1 -
541 .../size_overflow_hash_aux.data | 5 +
542 .../size_overflow_plugin/size_overflow_ipa.c | 2 +-
543 .../size_overflow_plugin/size_overflow_misc.c | 2 +-
544 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
545 .../size_overflow_plugin_hash.c | 2 +-
546 .../size_overflow_plugin/size_overflow_transform.c | 2 +-
547 .../size_overflow_transform_core.c | 2 +-
548 20 files changed, 310 insertions(+), 115 deletions(-)
549
550 commit c63d655907910533ed9d50671e98774b4b797578
551 Author: Tejun Heo <tj@kernel.org>
552 Date: Wed May 25 11:48:25 2016 -0400
553
554 percpu: fix synchronization between synchronous map extension and chunk destruction
555
556 For non-atomic allocations, pcpu_alloc() can try to extend the area
557 map synchronously after dropping pcpu_lock; however, the extension
558 wasn't synchronized against chunk destruction and the chunk might get
559 freed while extension is in progress.
560
561 This patch fixes the bug by putting most of non-atomic allocations
562 under pcpu_alloc_mutex to synchronize against pcpu_balance_work which
563 is responsible for async chunk management including destruction.
564
565 Signed-off-by: Tejun Heo <tj@kernel.org>
566 Reported-and-tested-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
567 Reported-by: Vlastimil Babka <vbabka@suse.cz>
568 Reported-by: Sasha Levin <sasha.levin@oracle.com>
569 Cc: stable@vger.kernel.org # v3.18+
570 Fixes: 1a4d76076cda ("percpu: implement asynchronous chunk population")
571
572 mm/percpu.c | 16 ++++++++--------
573 1 file changed, 8 insertions(+), 8 deletions(-)
574
575 commit 63442a31da7b33c5d6ab80254a2af78616b91aa8
576 Author: Tejun Heo <tj@kernel.org>
577 Date: Wed May 25 11:48:25 2016 -0400
578
579 percpu: fix synchronization between chunk->map_extend_work and chunk destruction
580
581 Atomic allocations can trigger async map extensions which is serviced
582 by chunk->map_extend_work. pcpu_balance_work which is responsible for
583 destroying idle chunks wasn't synchronizing properly against
584 chunk->map_extend_work and may end up freeing the chunk while the work
585 item is still in flight.
586
587 This patch fixes the bug by rolling async map extension operations
588 into pcpu_balance_work.
589
590 Signed-off-by: Tejun Heo <tj@kernel.org>
591 Reported-and-tested-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
592 Reported-by: Vlastimil Babka <vbabka@suse.cz>
593 Reported-by: Sasha Levin <sasha.levin@oracle.com>
594 Cc: stable@vger.kernel.org # v3.18+
595 Fixes: 9c824b6a172c ("percpu: make sure chunk->map array has available space")
596
597 mm/percpu.c | 57 ++++++++++++++++++++++++++++++++++++---------------------
598 1 file changed, 36 insertions(+), 21 deletions(-)
599
600 commit 7187611ba0d834ec7db27904c0cdf07bc9bc7d8f
601 Author: Brad Spengler <spender@grsecurity.net>
602 Date: Sat Jun 11 19:54:40 2016 -0400
603
604 Only bother establishing the PTEs for the vmap'd stack on creation
605
606 fs/exec.c | 1 -
607 include/linux/sched.h | 9 ++++-----
608 kernel/fork.c | 3 ++-
609 kernel/sched/core.c | 2 --
610 4 files changed, 6 insertions(+), 9 deletions(-)
611
612 commit a6e150dfb383fcb4c8d5294c59f2d21425ff9f72
613 Author: Brad Spengler <spender@grsecurity.net>
614 Date: Sat Jun 11 13:18:33 2016 -0400
615
616 Work around upstream's use of probe_kernel_address in alignment handling
617 which uses KERNEL_DS but wants to access userland memory directly --
618 not allowed by PaX. Reported by jotik
619
620 arch/arm/mm/alignment.c | 24 ++++++++++++++++++++----
621 1 file changed, 20 insertions(+), 4 deletions(-)
622
623 commit 1646af929d2465bc7a21a3c180de677e0b0b7950
624 Author: Dave Chinner <dchinner@redhat.com>
625 Date: Wed May 18 14:09:12 2016 +1000
626
627 xfs: mark reclaimed inodes invalid earlier
628
629 The last thing we do before using call_rcu() on an xfs_inode to be
630 freed is mark it as invalid. This means there is a window between
631 when we know for certain that the inode is going to be freed and
632 when we do actually mark it as "freed".
633
634 This is important in the context of RCU lookups - we can look up the
635 inode, find that it is valid, and then use it as such not realising
636 that it is in the final stages of being freed.
637
638 As such, mark the inode as being invalid the moment we know it is
639 going to be reclaimed. This can be done while we still hold the
640 XFS_ILOCK_EXCL and the flush lock in xfs_inode_reclaim, meaning that
641 it occurs well before we remove it from the radix tree, and that
642 the i_flags_lock, the XFS_ILOCK and the inode flush lock all act as
643 synchronisation points for detecting that an inode is about to go
644 away.
645
646 For defensive purposes, this allows us to add a further check to
647 xfs_iflush_cluster to ensure we skip inodes that are being freed
648 after we grab the XFS_ILOCK_SHARED and the flush lock - we know that
649 if the inode number if valid while we have these locks held we know
650 that it has not progressed through reclaim to the point where it is
651 clean and is about to be freed.
652
653 [bfoster: fixed __xfs_inode_clear_reclaim() using ip->i_ino after it
654 had already been zeroed.]
655
656 Signed-off-by: Dave Chinner <dchinner@redhat.com>
657 Reviewed-by: Brian Foster <bfoster@redhat.com>
658 Signed-off-by: Dave Chinner <david@fromorbit.com>
659
660 fs/xfs/xfs_icache.c | 46 ++++++++++++++++++++++++++++++++++------------
661 fs/xfs/xfs_inode.c | 13 +++++++++++++
662 2 files changed, 47 insertions(+), 12 deletions(-)
663
664 commit 096f3d24e77f4cd8fe50008623b26c89cb00ccda
665 Author: Dave Chinner <dchinner@redhat.com>
666 Date: Wed May 18 14:01:53 2016 +1000
667
668 xfs: xfs_inode_free() isn't RCU safe
669
670 The xfs_inode freed in xfs_inode_free() has multiple allocated
671 structures attached to it. We free these in xfs_inode_free() before
672 we mark the inode as invalid, and before we run call_rcu() to queue
673 the structure for freeing.
674
675 Unfortunately, this freeing can race with other accesses that are in
676 the RCU current grace period that have found the inode in the radix
677 tree with a valid state. This includes xfs_iflush_cluster(), which
678 calls xfs_inode_clean(), and that accesses the inode log item on the
679 xfs_inode.
680
681 The log item structure is freed in xfs_inode_free(), so there is the
682 possibility we can be accessing freed memory in xfs_iflush_cluster()
683 after validating the xfs_inode structure as being valid for this RCU
684 context. Hence we can get spuriously incorrect clean state returned
685 from such checks. This can lead to use thinking the inode is dirty
686 when it is, in fact, clean, and so incorrectly attaching it to the
687 buffer for IO and completion processing.
688
689 This then leads to use-after-free situations on the xfs_inode itself
690 if the IO completes after the current RCU grace period expires. The
691 buffer callbacks will access the xfs_inode and try to do all sorts
692 of things it shouldn't with freed memory.
693
694 IOWs, xfs_iflush_cluster() only works correctly when racing with
695 inode reclaim if the inode log item is present and correctly stating
696 the inode is clean. If the inode is being freed, then reclaim has
697 already made sure the inode is clean, and hence xfs_iflush_cluster
698 can skip it. However, we are accessing the inode inode under RCU
699 read lock protection and so also must ensure that all dynamically
700 allocated memory we reference in this context is not freed until the
701 RCU grace period expires.
702
703 To fix this, move all the potential memory freeing into
704 xfs_inode_free_callback() so that we are guarantee RCU protected
705 lookup code will always have the memory structures it needs
706 available during the RCU grace period that lookup races can occur
707 in.
708
709 Discovered-by: Brain Foster <bfoster@redhat.com>
710 Signed-off-by: Dave Chinner <dchinner@redhat.com>
711 Reviewed-by: Christoph Hellwig <hch@lst.de>
712 Signed-off-by: Dave Chinner <david@fromorbit.com>
713
714 fs/xfs/xfs_icache.c | 14 +++++++-------
715 1 file changed, 7 insertions(+), 7 deletions(-)
716
717 commit eaec09dbc18fe0ae7905b33b4c819a467a0e801d
718 Author: Jann Horn <jannh@google.com>
719 Date: Wed Jun 1 11:55:07 2016 +0200
720
721 sched: panic on corrupted stack end
722
723 Until now, hitting this BUG_ON caused a recursive oops (because oops
724 handling involves do_exit(), which calls into the scheduler, which in
725 turn raises an oops), which caused stuff below the stack to be
726 overwritten until a panic happened (e.g. via an oops in interrupt
727 context, caused by the overwritten CPU index in the thread_info).
728
729 Just panic directly.
730
731 Signed-off-by: Jann Horn <jannh@google.com>
732 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
733
734 kernel/sched/core.c | 3 ++-
735 1 file changed, 2 insertions(+), 1 deletion(-)
736
737 commit 96894afd3cbd735ed9230f058a32865dec270da2
738 Author: Jann Horn <jannh@google.com>
739 Date: Wed Jun 1 11:55:06 2016 +0200
740
741 ecryptfs: forbid opening files without mmap handler
742
743 This prevents users from triggering a stack overflow through a recursive
744 invocation of pagefault handling that involves mapping procfs files into
745 virtual memory.
746
747 Signed-off-by: Jann Horn <jannh@google.com>
748 Acked-by: Tyler Hicks <tyhicks@canonical.com>
749 Cc: stable@vger.kernel.org
750 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
751
752 fs/ecryptfs/kthread.c | 13 +++++++++++--
753 1 file changed, 11 insertions(+), 2 deletions(-)
754
755 commit 06608cb36ab8329c7cf03fdabc86fb7f64a2656d
756 Author: Jann Horn <jannh@google.com>
757 Date: Wed Jun 1 11:55:05 2016 +0200
758
759 proc: prevent stacking filesystems on top
760
761 This prevents stacking filesystems (ecryptfs and overlayfs) from using
762 procfs as lower filesystem. There is too much magic going on inside
763 procfs, and there is no good reason to stack stuff on top of procfs.
764
765 (For example, procfs does access checks in VFS open handlers, and
766 ecryptfs by design calls open handlers from a kernel thread that doesn't
767 drop privileges or so.)
768
769 Signed-off-by: Jann Horn <jannh@google.com>
770 Cc: stable@vger.kernel.org
771 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
772
773 fs/proc/root.c | 7 +++++++
774 1 file changed, 7 insertions(+)
775
776 commit 7cff8ffababda8d77e7e3a3f2621b26269279b9a
777 Author: Al Viro <viro@zeniv.linux.org.uk>
778 Date: Wed May 4 14:04:13 2016 -0400
779
780 ecryptfs: fix handling of directory opening
781
782 First of all, trying to open them r/w is idiocy; it's guaranteed to fail.
783 Moreover, assigning ->f_pos and assuming that everything will work is
784 blatantly broken - try that with e.g. tmpfs as underlying layer and watch
785 the fireworks. There may be a non-trivial amount of state associated with
786 current IO position, well beyond the numeric offset. Using the single
787 struct file associated with underlying inode is really not a good idea;
788 we ought to open one for each ecryptfs directory struct file.
789
790 Additionally, file_operations both for directories and non-directories are
791 full of pointless methods; non-directories should *not* have ->iterate(),
792 directories should not have ->flush(), ->fasync() and ->splice_read().
793
794 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
795
796 fs/ecryptfs/file.c | 71 ++++++++++++++++++++++++++++++++++++++++++------------
797 1 file changed, 55 insertions(+), 16 deletions(-)
798
799 commit b690dcd62ad1433e69d391a267ce01534c19d20a
800 Author: Brad Spengler <spender@grsecurity.net>
801 Date: Wed Jun 8 20:59:28 2016 -0400
802
803 fix compiler warnings
804
805 fs/exec.c | 4 ++--
806 1 file changed, 2 insertions(+), 2 deletions(-)
807
808 commit 5d43ec1fb9c94f0c2644e0d09a8257442134a0ce
809 Author: Brad Spengler <spender@grsecurity.net>
810 Date: Wed Jun 8 20:52:00 2016 -0400
811
812 Avoid some UB
813
814 fs/exec.c | 8 ++++----
815 1 file changed, 4 insertions(+), 4 deletions(-)
816
817 commit d34347de1cae1f7bd8ea4223d5baca5da8ea4529
818 Author: Brad Spengler <spender@grsecurity.net>
819 Date: Wed Jun 8 20:23:27 2016 -0400
820
821 compile fix
822
823 kernel/smpboot.c | 1 +
824 1 file changed, 1 insertion(+)
825
826 commit 4dfdd6b803d58fec94306a4ff437d500a9c80908
827 Author: Brad Spengler <spender@grsecurity.net>
828 Date: Wed Jun 8 20:13:34 2016 -0400
829
830 Add open/close around cpumask modification, reported by shadowdaemon
831 Triggered by writing to /proc/sys/kernel/watchdog_cpumask
832
833 kernel/smpboot.c | 2 ++
834 1 file changed, 2 insertions(+)
835
836 commit 1ee24693e22a535dbede927beba7b90cd8559eb4
837 Merge: 11150b9 dec4686
838 Author: Brad Spengler <spender@grsecurity.net>
839 Date: Wed Jun 8 07:39:26 2016 -0400
840
841 Merge branch 'pax-test' into grsec-test
842
843 commit dec468678ead461fc786adfbb2505b6ef66a371a
844 Merge: 85a5882 8c596d1
845 Author: Brad Spengler <spender@grsecurity.net>
846 Date: Wed Jun 8 07:39:18 2016 -0400
847
848 Merge branch 'linux-4.5.y' into pax-test
849
850 commit 11150b92c4cd78ec6a22ad0ff682faf2354b4445
851 Author: Brad Spengler <spender@grsecurity.net>
852 Date: Sun Jun 5 14:18:34 2016 -0400
853
854 compile fix
855
856 grsecurity/grsec_tpe.c | 4 ++--
857 include/linux/uidgid.h | 1 +
858 2 files changed, 3 insertions(+), 2 deletions(-)
859
860 commit 6e548aad3425733ed443e4a3232205935f0d4939
861 Author: Brad Spengler <spender@grsecurity.net>
862 Date: Sun Jun 5 08:19:09 2016 -0400
863
864 Workaround some Debian bike-shedding so that group-writable /bin dirs
865 (with group ownership of root) don't trigger TPE violations
866 Reported by jvoisin
867
868 grsecurity/grsec_tpe.c | 4 ++--
869 1 file changed, 2 insertions(+), 2 deletions(-)
870
871 commit 735ea2028ce017246358d22ec81dc6db73499770
872 Author: Brad Spengler <spender@grsecurity.net>
873 Date: Sun Jun 5 04:23:15 2016 -0400
874
875 move another instance of is_privileged_binary outside of atomic
876
877 grsecurity/gracl_segv.c | 4 +++-
878 1 file changed, 3 insertions(+), 1 deletion(-)
879
880 commit e08a7bcc7b7a1e423b5346bcef85d9a92185f65f
881 Merge: d094457 85a5882
882 Author: Brad Spengler <spender@grsecurity.net>
883 Date: Sun Jun 5 04:09:29 2016 -0400
884
885 Merge branch 'pax-test' into grsec-test
886
887 commit 85a588299f41d6a116b8d07d902de986968a84b0
888 Merge: 89f00c3 ec2a755
889 Author: Brad Spengler <spender@grsecurity.net>
890 Date: Sun Jun 5 04:08:42 2016 -0400
891
892 Merge branch 'linux-4.5.y' into pax-test
893
894 commit d094457eb90a693f7007b7f4b26c2132137c7ed2
895 Author: Brad Spengler <spender@grsecurity.net>
896 Date: Mon May 30 10:15:11 2016 -0400
897
898 move privilege/xattr check outside of locks to prevent warning, reported by shadowdaemon
899
900 grsecurity/grsec_sig.c | 7 +++++--
901 1 file changed, 5 insertions(+), 2 deletions(-)
902
903 commit 2fad2bb3392409d98498b3af53cf39f2475e4b70
904 Author: Brad Spengler <spender@grsecurity.net>
905 Date: Sun May 29 10:11:27 2016 -0400
906
907 Fix another harmless warning
908
909 fs/proc/proc_sysctl.c | 2 +-
910 1 file changed, 1 insertion(+), 1 deletion(-)
911
912 commit d62f996e40c87e46b20f45e16819f92d49f3e926
913 Author: Brad Spengler <spender@grsecurity.net>
914 Date: Sun May 29 09:56:32 2016 -0400
915
916 Fix more harmless compiler warnings
917
918 grsecurity/gracl_policy.c | 8 ++++----
919 1 file changed, 4 insertions(+), 4 deletions(-)
920
921 commit 558b784a2b87e337d12bae07d60f435c2f06d849
922 Author: Brad Spengler <spender@grsecurity.net>
923 Date: Sun May 29 09:47:50 2016 -0400
924
925 Fix more harmless warnings
926
927 grsecurity/gracl.c | 6 +++---
928 1 file changed, 3 insertions(+), 3 deletions(-)
929
930 commit 32ec63339ab130758e6941d7f1d8993e41956980
931 Author: Brad Spengler <spender@grsecurity.net>
932 Date: Sun May 29 09:41:23 2016 -0400
933
934 Fix another warning
935
936 include/linux/sched.h | 1 +
937 1 file changed, 1 insertion(+)
938
939 commit 789369de0dbde1fedd2d5cb0ee3474e160af187c
940 Author: Brad Spengler <spender@grsecurity.net>
941 Date: Sun May 29 09:22:05 2016 -0400
942
943 Fix some harmless compiler warnings
944
945 grsecurity/grsum.c | 4 ++--
946 1 file changed, 2 insertions(+), 2 deletions(-)
947
948 commit ed18543a205c206d0aa8ee6b04c606579823b7b3
949 Merge: b0b4143 89f00c3
950 Author: Brad Spengler <spender@grsecurity.net>
951 Date: Sun May 29 08:34:18 2016 -0400
952
953 Merge branch 'pax-test' into grsec-test
954
955 commit 89f00c3b596a62ae5bcfe4920e9d05b9a94be7fa
956 Author: Brad Spengler <spender@grsecurity.net>
957 Date: Sun May 29 08:26:37 2016 -0400
958
959 Update to pax-linux-4.5.5-test11.patch:
960 - fixed arm kuser helper emulation for thumb mode userland, reported by Wizzup(https://forums.grsecurity.net/viewtopic.php?f=3&t=4479)
961 - fixed incorrect function pointer casts in bcache caught by RAP, reported by torsten (https://forums.grsecurity.net/viewtopic.php?f=3&t=4482)
962 - worked around a few intentional integer underflows in the xhci driver caught by the size overflow plugin, reported by Dennis Wassenberg <dennis.wassenberg@secunet.com>
963 - moved gcc plugins from tools/gcc to scripts/gcc-plugins and simplified the plugin build system, by Emese
964 - changed the constify and latent entropy plugins to use a consistent command line switch for compile-time disabling
965 - cleaned up a few unusued macros, whitespace, inline asm constraints, etc
966 - hid the lvalue casts needed for constify behind the const_cast macro, by Mathias Krause <minipli@ld-linux.so>
967
968 Makefile | 50 +-
969 arch/Kconfig | 14 +
970 arch/arm/Kconfig | 1 +
971 arch/arm/boot/compressed/Makefile | 2 +
972 arch/arm/mach-exynos/suspend.c | 4 +-
973 arch/arm/mach-omap2/powerdomains43xx_data.c | 2 +-
974 arch/arm/mach-shmobile/platsmp-apmu.c | 2 +-
975 arch/arm/mm/fault.c | 14 +
976 arch/arm64/Kconfig | 1 +
977 arch/mips/Kconfig | 1 +
978 arch/powerpc/Kconfig | 1 +
979 arch/powerpc/include/asm/atomic.h | 7 +-
980 arch/powerpc/kernel/Makefile | 8 +-
981 arch/sparc/Kconfig | 1 +
982 arch/um/Makefile | 4 +-
983 arch/x86/Kconfig | 1 +
984 arch/x86/boot/Makefile | 3 -
985 arch/x86/boot/compressed/Makefile | 3 -
986 arch/x86/entry/common.c | 2 +-
987 arch/x86/include/asm/thread_info.h | 27 -
988 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 2 +-
989 arch/x86/kernel/cpu/perf_event_intel_pt.c | 10 +-
990 arch/x86/kernel/i8259.c | 4 +-
991 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
992 arch/x86/oprofile/nmi_int.c | 2 +-
993 arch/x86/oprofile/op_model_amd.c | 6 +-
994 arch/x86/oprofile/op_model_ppro.c | 4 +-
995 arch/x86/pci/vmd.c | 2 +-
996 arch/x86/realmode/rm/Makefile | 3 -
997 drivers/acpi/bgrt.c | 4 +-
998 drivers/ata/libata-core.c | 2 +-
999 drivers/ata/pata_arasan_cf.c | 2 +-
1000 drivers/base/platform-msi.c | 14 +-
1001 drivers/base/power/domain.c | 4 +-
1002 drivers/bus/arm-cci.c | 6 +-
1003 drivers/cdrom/cdrom.c | 2 +-
1004 drivers/clk/socfpga/clk-gate.c | 4 +-
1005 drivers/clk/socfpga/clk-pll.c | 4 +-
1006 drivers/clk/ti/clk.c | 4 +-
1007 drivers/cpufreq/acpi-cpufreq.c | 8 +-
1008 drivers/cpufreq/cpufreq-dt.c | 2 +-
1009 drivers/cpufreq/cpufreq.c | 8 +-
1010 drivers/cpufreq/cpufreq_ondemand.c | 4 +-
1011 drivers/cpufreq/p4-clockmod.c | 6 +-
1012 drivers/cpufreq/speedstep-centrino.c | 2 +-
1013 drivers/firmware/dmi_scan.c | 8 +-
1014 drivers/firmware/efi/efi.c | 10 +-
1015 drivers/firmware/google/memconsole.c | 2 +-
1016 drivers/gpio/gpiolib.c | 8 +-
1017 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 2 +-
1018 drivers/gpu/drm/i810/i810_drv.c | 2 +-
1019 drivers/gpu/drm/i915/i915_irq.c | 86 +-
1020 drivers/gpu/drm/i915/intel_display.c | 6 +-
1021 drivers/gpu/drm/mga/mga_drv.c | 2 +-
1022 drivers/gpu/drm/omapdrm/dss/display.c | 6 +-
1023 drivers/gpu/drm/qxl/qxl_drv.c | 2 +-
1024 drivers/gpu/drm/qxl/qxl_ttm.c | 4 +-
1025 drivers/gpu/drm/r128/r128_drv.c | 2 +-
1026 drivers/gpu/drm/radeon/radeon_drv.c | 2 +-
1027 drivers/gpu/drm/savage/savage_drv.c | 2 +-
1028 drivers/gpu/drm/sis/sis_drv.c | 2 +-
1029 drivers/gpu/drm/tegra/dc.c | 2 +-
1030 drivers/gpu/drm/tegra/sor.c | 2 +-
1031 drivers/gpu/drm/via/via_drv.c | 2 +-
1032 drivers/idle/intel_idle.c | 4 +-
1033 drivers/infiniband/hw/qib/qib.h | 1 -
1034 drivers/iommu/arm-smmu.c | 4 +-
1035 drivers/isdn/hardware/eicon/mntfunc.c | 2 +-
1036 drivers/md/bcache/btree.c | 11 +-
1037 drivers/md/bcache/closure.c | 4 +-
1038 drivers/md/bcache/closure.h | 8 +-
1039 drivers/md/bcache/journal.c | 16 +-
1040 drivers/md/bcache/movinggc.c | 12 +-
1041 drivers/md/bcache/request.c | 54 +-
1042 drivers/md/bcache/request.h | 2 +-
1043 drivers/md/bcache/super.c | 30 +-
1044 drivers/md/bcache/writeback.c | 12 +-
1045 drivers/media/platform/am437x/am437x-vpfe.c | 2 +-
1046 drivers/mfd/twl4030-irq.c | 4 +-
1047 drivers/misc/c2port/core.c | 2 +-
1048 drivers/misc/mic/scif/scif_api.c | 8 +-
1049 drivers/mmc/host/mmci.c | 2 +-
1050 drivers/mmc/host/omap_hsmmc.c | 2 +-
1051 drivers/mmc/host/sdhci-esdhc-imx.c | 2 +-
1052 drivers/mmc/host/sdhci-s3c.c | 6 +-
1053 drivers/net/ethernet/cavium/liquidio/lio_main.c | 2 +-
1054 drivers/net/ethernet/hisilicon/hns/hns_ae_adapt.c | 4 +-
1055 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 2 +-
1056 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 6 +-
1057 drivers/net/macvlan.c | 14 +-
1058 drivers/net/wireless/ath/ath9k/main.c | 20 +-
1059 drivers/net/wireless/intel/iwlegacy/3945-mac.c | 2 +-
1060 drivers/net/wireless/mac80211_hwsim.c | 22 +-
1061 drivers/net/wireless/ti/wl1251/sdio.c | 8 +-
1062 drivers/net/wireless/ti/wl12xx/main.c | 4 +-
1063 drivers/net/wireless/ti/wl18xx/main.c | 4 +-
1064 drivers/of/fdt.c | 2 +-
1065 drivers/pci/hotplug/acpiphp_ibm.c | 2 +-
1066 drivers/pci/hotplug/cpcihp_zt5550.c | 6 +-
1067 drivers/pci/hotplug/pci_hotplug_core.c | 4 +-
1068 drivers/pci/msi.c | 12 +-
1069 drivers/pinctrl/pinctrl-at91.c | 2 +-
1070 drivers/platform/x86/msi-laptop.c | 12 +-
1071 drivers/power/reset/at91-reset.c | 2 +-
1072 drivers/powercap/powercap_sys.c | 6 +-
1073 drivers/regulator/max8660.c | 4 +-
1074 drivers/regulator/max8973-regulator.c | 12 +-
1075 drivers/regulator/mc13892-regulator.c | 4 +-
1076 drivers/rtc/rtc-armada38x.c | 4 +-
1077 drivers/rtc/rtc-cmos.c | 2 +-
1078 drivers/rtc/rtc-m48t59.c | 2 +-
1079 drivers/rtc/rtc-rx8010.c | 6 +-
1080 drivers/rtc/rtc-test.c | 4 +-
1081 drivers/scsi/aacraid/aachba.c | 4 +-
1082 drivers/scsi/lpfc/lpfc_init.c | 4 +-
1083 drivers/scsi/qla2xxx/qla_os.c | 4 +-
1084 drivers/staging/sm750fb/sm750.c | 8 +-
1085 drivers/thermal/cpu_cooling.c | 6 +-
1086 drivers/thermal/int340x_thermal/int3400_thermal.c | 4 +-
1087 drivers/thermal/of-thermal.c | 12 +-
1088 drivers/tty/pty.c | 2 +-
1089 drivers/tty/serial/8250/8250_core.c | 6 +-
1090 drivers/tty/serial/kgdb_nmi.c | 2 +-
1091 drivers/usb/host/xhci-ring.c | 52 +-
1092 drivers/video/fbdev/aty/atyfb_base.c | 4 +-
1093 drivers/video/fbdev/aty/mach64_cursor.c | 2 +-
1094 drivers/video/fbdev/core/fb_defio.c | 6 +-
1095 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 12 +-
1096 drivers/video/fbdev/nvidia/nvidia.c | 18 +-
1097 drivers/video/fbdev/omap2/omapfb/dss/display.c | 6 +-
1098 drivers/video/fbdev/s1d13xxxfb.c | 4 +-
1099 drivers/video/fbdev/smscufx.c | 2 +-
1100 drivers/video/fbdev/udlfb.c | 2 +-
1101 drivers/video/fbdev/uvesafb.c | 4 +-
1102 drivers/video/fbdev/vesafb.c | 2 +-
1103 fs/fuse/cuse.c | 6 +-
1104 fs/jffs2/file.c | 2 +-
1105 fs/nls/nls_base.c | 4 +-
1106 fs/nls/nls_euc-jp.c | 4 +-
1107 fs/nls/nls_koi8-ru.c | 4 +-
1108 fs/proc/proc_sysctl.c | 4 +-
1109 fs/tracefs/inode.c | 4 +-
1110 include/linux/compiler-gcc.h | 1 +
1111 include/linux/compiler.h | 4 +
1112 include/linux/seq_buf.h | 2 +-
1113 include/linux/sysfs.h | 2 +-
1114 kernel/cgroup.c | 14 +-
1115 kernel/irq/msi.c | 12 +-
1116 kernel/notifier.c | 4 +-
1117 kernel/pid.c | 2 +-
1118 kernel/trace/trace_output.c | 8 +-
1119 net/core/rtnetlink.c | 2 +-
1120 net/xfrm/xfrm_state.c | 2 +-
1121 scripts/Makefile | 1 +
1122 scripts/Makefile.gcc-plugins | 138 +-
1123 scripts/Makefile.host | 6 +-
1124 scripts/gcc-plugin.sh | 4 +-
1125 scripts/gcc-plugins/Makefile | 45 +
1126 scripts/gcc-plugins/checker_plugin.c | 496 +
1127 scripts/gcc-plugins/colorize_plugin.c | 162 +
1128 scripts/gcc-plugins/constify_plugin.c | 521 +
1129 scripts/gcc-plugins/gcc-common.h | 879 +
1130 scripts/gcc-plugins/gcc-generate-gimple-pass.h | 175 +
1131 scripts/gcc-plugins/gcc-generate-ipa-pass.h | 289 +
1132 scripts/gcc-plugins/gcc-generate-rtl-pass.h | 175 +
1133 scripts/gcc-plugins/gcc-generate-simple_ipa-pass.h | 175 +
1134 scripts/gcc-plugins/initify_plugin.c | 536 +
1135 scripts/gcc-plugins/kallocstat_plugin.c | 135 +
1136 scripts/gcc-plugins/kernexec_plugin.c | 407 +
1137 scripts/gcc-plugins/latent_entropy_plugin.c | 438 +
1138 scripts/gcc-plugins/rap_plugin/Makefile | 4 +
1139 scripts/gcc-plugins/rap_plugin/rap.h | 36 +
1140 scripts/gcc-plugins/rap_plugin/rap_fptr_pass.c | 220 +
1141 scripts/gcc-plugins/rap_plugin/rap_hash.c | 382 +
1142 scripts/gcc-plugins/rap_plugin/rap_plugin.c | 511 +
1143 scripts/gcc-plugins/rap_plugin/sip.c | 96 +
1144 .../gcc-plugins/size_overflow_plugin/.gitignore | 3 +
1145 scripts/gcc-plugins/size_overflow_plugin/Makefile | 28 +
1146 .../disable_size_overflow_hash.data | 12444 +++++++++++
1147 .../generate_size_overflow_hash.sh | 103 +
1148 .../insert_size_overflow_asm.c | 369 +
1149 .../size_overflow_plugin/intentional_overflow.c | 1166 +
1150 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
1151 .../size_overflow_plugin/size_overflow.h | 331 +
1152 .../size_overflow_plugin/size_overflow_debug.c | 194 +
1153 .../size_overflow_plugin/size_overflow_hash.data | 21504 +++++++++++++++++++
1154 .../size_overflow_hash_aux.data | 92 +
1155 .../size_overflow_plugin/size_overflow_ipa.c | 1163 +
1156 .../size_overflow_plugin/size_overflow_misc.c | 505 +
1157 .../size_overflow_plugin/size_overflow_plugin.c | 290 +
1158 .../size_overflow_plugin_hash.c | 352 +
1159 .../size_overflow_plugin/size_overflow_transform.c | 743 +
1160 .../size_overflow_transform_core.c | 1025 +
1161 scripts/gcc-plugins/stackleak_plugin.c | 350 +
1162 scripts/gcc-plugins/structleak_plugin.c | 239 +
1163 scripts/package/builddeb | 2 +-
1164 security/Kconfig | 8 +-
1165 sound/soc/codecs/sti-sas.c | 8 +-
1166 sound/soc/soc-ac97.c | 4 +-
1167 tools/gcc/Makefile | 46 -
1168 tools/gcc/checker_plugin.c | 496 -
1169 tools/gcc/colorize_plugin.c | 162 -
1170 tools/gcc/constify_plugin.c | 521 -
1171 tools/gcc/gcc-common.h | 879 -
1172 tools/gcc/gcc-generate-gimple-pass.h | 175 -
1173 tools/gcc/gcc-generate-ipa-pass.h | 289 -
1174 tools/gcc/gcc-generate-rtl-pass.h | 175 -
1175 tools/gcc/gcc-generate-simple_ipa-pass.h | 175 -
1176 tools/gcc/initify_plugin.c | 536 -
1177 tools/gcc/kallocstat_plugin.c | 135 -
1178 tools/gcc/kernexec_plugin.c | 407 -
1179 tools/gcc/latent_entropy_plugin.c | 422 -
1180 tools/gcc/rap_plugin/Makefile | 4 -
1181 tools/gcc/rap_plugin/rap.h | 36 -
1182 tools/gcc/rap_plugin/rap_fptr_pass.c | 220 -
1183 tools/gcc/rap_plugin/rap_hash.c | 382 -
1184 tools/gcc/rap_plugin/rap_plugin.c | 511 -
1185 tools/gcc/rap_plugin/sip.c | 96 -
1186 tools/gcc/size_overflow_plugin/.gitignore | 3 -
1187 tools/gcc/size_overflow_plugin/Makefile | 28 -
1188 .../disable_size_overflow_hash.data | 12444 -----------
1189 .../generate_size_overflow_hash.sh | 103 -
1190 .../insert_size_overflow_asm.c | 369 -
1191 .../size_overflow_plugin/intentional_overflow.c | 1166 -
1192 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 -
1193 tools/gcc/size_overflow_plugin/size_overflow.h | 331 -
1194 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 -
1195 .../size_overflow_plugin/size_overflow_hash.data | 21504 -------------------
1196 .../size_overflow_hash_aux.data | 92 -
1197 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1163 -
1198 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 -
1199 .../size_overflow_plugin/size_overflow_plugin.c | 290 -
1200 .../size_overflow_plugin_hash.c | 352 -
1201 .../size_overflow_plugin/size_overflow_transform.c | 743 -
1202 .../size_overflow_transform_core.c | 1025 -
1203 tools/gcc/stackleak_plugin.c | 350 -
1204 tools/gcc/structleak_plugin.c | 239 -
1205 237 files changed, 47340 insertions(+), 47276 deletions(-)
1206
1207 commit b0b41430a8c9e6e5067c896c07d361e527e298e8
1208 Author: Brad Spengler <spender@grsecurity.net>
1209 Date: Sat May 21 13:59:19 2016 -0400
1210
1211 Fix gcc assert properly, from Emese Revfy
1212
1213 tools/gcc/size_overflow_plugin/intentional_overflow.c | 2 +-
1214 tools/gcc/size_overflow_plugin/size_overflow_plugin.c | 2 +-
1215 2 files changed, 2 insertions(+), 2 deletions(-)
1216
1217 commit 5e7a47f06420603b0f26f1b45fe2ab02838795c9
1218 Merge: f844209 5929595
1219 Author: Brad Spengler <spender@grsecurity.net>
1220 Date: Fri May 20 20:19:27 2016 -0400
1221
1222 Merge branch 'pax-test' into grsec-test
1223
1224 commit 5929595ec558e9282901842bdf9e4a981751fb08
1225 Author: Brad Spengler <spender@grsecurity.net>
1226 Date: Fri May 20 20:18:58 2016 -0400
1227
1228 Update to pax-linux-4.5.5-test9.patch:
1229 - fixed a few more incorrect fptr casts for RAP
1230
1231 arch/x86/math-emu/fpu_etc.c | 9 +++++++--
1232 arch/x86/math-emu/fpu_trig.c | 13 +++++++++----
1233 arch/x86/math-emu/reg_constant.c | 7 ++++++-
1234 drivers/isdn/hisax/hfc_2bds0.c | 4 ++--
1235 drivers/isdn/hisax/hfcscard.c | 6 ++++--
1236 drivers/isdn/hisax/saphir.c | 5 +++--
1237 drivers/isdn/hisax/teleint.c | 5 +++--
1238 drivers/media/pci/sta2x11/sta2x11_vip.c | 5 +++--
1239 drivers/net/hamradio/baycom_epp.c | 2 +-
1240 9 files changed, 38 insertions(+), 18 deletions(-)
1241
1242 commit f84420916698cdf33a81f046206d050e2c3e6966
1243 Merge: fa18ce2 445754e
1244 Author: Brad Spengler <spender@grsecurity.net>
1245 Date: Fri May 20 18:52:20 2016 -0400
1246
1247 Merge branch 'pax-test' into grsec-test
1248
1249 commit 445754e5717176c2b3431a0cde1e90df51cc43e2
1250 Author: Brad Spengler <spender@grsecurity.net>
1251 Date: Fri May 20 18:51:52 2016 -0400
1252
1253 Update to pax-linux-4.5.4-test8.patch:
1254 - fixed a USERCOPY report in the mwifiex driver, by Dennis Wassenberg <dennis.wassenberg@secunet.com> and Mathias Krause <minipli@ld-linux.so>
1255
1256 drivers/net/wireless/marvell/mwifiex/11n_aggr.c | 2 +-
1257 drivers/net/wireless/marvell/mwifiex/pcie.c | 4 ++--
1258 drivers/net/wireless/marvell/mwifiex/sdio.c | 10 ++++------
1259 3 files changed, 7 insertions(+), 9 deletions(-)
1260
1261 commit fa18ce2d37a92442162fb72b8f85ee86120ffacb
1262 Author: Brad Spengler <spender@grsecurity.net>
1263 Date: Thu May 19 18:30:08 2016 -0400
1264
1265 Update size_overflow hash, from Dr. Toth
1266
1267 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
1268 1 file changed, 1 insertion(+)
1269
1270 commit 61c487965dbc34618fe292663759d6fa0515bcad
1271 Merge: fbc84d2 a734dbd
1272 Author: Brad Spengler <spender@grsecurity.net>
1273 Date: Thu May 19 06:26:52 2016 -0400
1274
1275 Merge branch 'pax-test' into grsec-test
1276
1277 commit a734dbda8b785c38baa1858df2bffc89b45d070a
1278 Merge: 238dfca 3b41b7e
1279 Author: Brad Spengler <spender@grsecurity.net>
1280 Date: Thu May 19 06:24:25 2016 -0400
1281
1282 Merge branch 'linux-4.5.y' into pax-test
1283
1284 commit fbc84d202d311b4dc09bcc922678df60b6e76614
1285 Merge: 84fa82c 238dfca
1286 Author: Brad Spengler <spender@grsecurity.net>
1287 Date: Fri May 13 18:00:06 2016 -0400
1288
1289 Merge branch 'pax-test' into grsec-test
1290
1291 commit 238dfca3ffe87f4410e67c8ceb554b9ce4f3132b
1292 Author: Brad Spengler <spender@grsecurity.net>
1293 Date: Fri May 13 17:59:42 2016 -0400
1294
1295 Compile fix for older gcc
1296
1297 tools/gcc/size_overflow_plugin/intentional_overflow.c | 2 +-
1298 1 file changed, 1 insertion(+), 1 deletion(-)
1299
1300 commit 84fa82c59fa5051e1485a3dcc857b87b70dbc18d
1301 Merge: 2cece8e 4654023
1302 Author: Brad Spengler <spender@grsecurity.net>
1303 Date: Fri May 13 17:31:49 2016 -0400
1304
1305 Merge branch 'pax-test' into grsec-test
1306
1307 commit 4654023e72b0834142594eee879e657664498443
1308 Author: Brad Spengler <spender@grsecurity.net>
1309 Date: Fri May 13 17:29:38 2016 -0400
1310
1311 Update to pax-linux-4.5.4-test7.patch:
1312 - changed the RAP hash emission code to accomodate x86 disassemblers, suggested by Mathias Krause <minipli@ld-linux.so>
1313 - fixed a few size overflow false positives in JFS due to the lack of endian conversion macros for signed types, reported by ryonaloli via hunger
1314 - fixed a compiler assert triggered by the size overflow plugin
1315
1316 tools/gcc/rap_plugin/rap_plugin.c | 39 ++++++++++++++++++----
1317 .../disable_size_overflow_hash.data | 3 ++
1318 .../size_overflow_plugin/intentional_overflow.c | 2 +-
1319 .../size_overflow_plugin/size_overflow_hash.data | 3 --
1320 4 files changed, 36 insertions(+), 11 deletions(-)
1321
1322 commit 2cece8e8e0e2fce9943345c0ebebd7436929868e
1323 Merge: 6df0471 ea68d2e
1324 Author: Brad Spengler <spender@grsecurity.net>
1325 Date: Thu May 12 18:41:15 2016 -0400
1326
1327 Merge branch 'pax-test' into grsec-test
1328
1329 commit ea68d2e7123a83aba24db99d5ef487b1397fd6d0
1330 Author: Brad Spengler <spender@grsecurity.net>
1331 Date: Thu May 12 18:40:50 2016 -0400
1332
1333 Update to pax-linux-4.5.3-test6.patch:
1334 - really fixed https://forums.grsecurity.net/viewtopic.php?f=3&t=4473
1335 - the nfsd_proc_read fix for RAP had a typo causing an oops, reported by Carlos Carvalho (https://forums.grsecurity.net/viewtopic.php?f=3&t=4471)
1336 - fixed a few format string warnings in the RAP hash emission code, reported by Dwokfur
1337
1338 drivers/net/ppp/pptp.c | 1 -
1339 fs/nfsd/nfsproc.c | 2 +-
1340 tools/gcc/rap_plugin/rap_fptr_pass.c | 2 +-
1341 tools/gcc/rap_plugin/rap_plugin.c | 14 ++++++++++----
1342 4 files changed, 12 insertions(+), 7 deletions(-)
1343
1344 commit 6df04719a7cf4d3f60c9e6190f8eb4b986ce2b1b
1345 Author: David Howells <dhowells@redhat.com>
1346 Date: Tue Feb 23 11:03:12 2016 +0000
1347
1348 KEYS: Fix ASN.1 indefinite length object parsing
1349
1350 This fixes CVE-2016-0758.
1351
1352 In the ASN.1 decoder, when the length field of an ASN.1 value is extracted,
1353 it isn't validated against the remaining amount of data before being added
1354 to the cursor. With a sufficiently large size indicated, the check:
1355
1356 datalen - dp < 2
1357
1358 may then fail due to integer overflow.
1359
1360 Fix this by checking the length indicated against the amount of remaining
1361 data in both places a definite length is determined.
1362
1363 Whilst we're at it, make the following changes:
1364
1365 (1) Check the maximum size of extended length does not exceed the capacity
1366 of the variable it's being stored in (len) rather than the type that
1367 variable is assumed to be (size_t).
1368
1369 (2) Compare the EOC tag to the symbolic constant ASN1_EOC rather than the
1370 integer 0.
1371
1372 (3) To reduce confusion, move the initialisation of len outside of:
1373
1374 for (len = 0; n > 0; n--) {
1375
1376 since it doesn't have anything to do with the loop counter n.
1377
1378 Signed-off-by: David Howells <dhowells@redhat.com>
1379 Reviewed-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
1380 Acked-by: David Woodhouse <David.Woodhouse@intel.com>
1381 Acked-by: Peter Jones <pjones@redhat.com>
1382
1383 lib/asn1_decoder.c | 16 +++++++++-------
1384 1 file changed, 9 insertions(+), 7 deletions(-)
1385
1386 commit acb6cef8047476b8afc3ff3f07286b9e36de1b77
1387 Merge: 735f14a a7c9bec
1388 Author: Brad Spengler <spender@grsecurity.net>
1389 Date: Wed May 11 17:05:21 2016 -0400
1390
1391 Merge branch 'pax-test' into grsec-test
1392
1393 commit a7c9bec57dea73ceee1246a64df55038ea840be9
1394 Merge: f5bd134 a29ab35
1395 Author: Brad Spengler <spender@grsecurity.net>
1396 Date: Wed May 11 17:04:48 2016 -0400
1397
1398 Merge branch 'linux-4.5.y' into pax-test
1399
1400 commit 735f14a2b5562cd1329b263a81781d59dacffd3e
1401 Author: Brad Spengler <spender@grsecurity.net>
1402 Date: Wed May 11 06:57:40 2016 -0400
1403
1404 Fix typo in nfsd RAP changes causing oops reported by Carlos Carvalho
1405 at: https://forums.grsecurity.net/viewtopic.php?f=3&t=4471
1406
1407 fs/nfsd/nfsproc.c | 2 +-
1408 1 file changed, 1 insertion(+), 1 deletion(-)
1409
1410 commit 35e1e615072d0bb885b38ee1b2ada7a0a6a91f9d
1411 Merge: 9e3e5ae3e f5bd134
1412 Author: Brad Spengler <spender@grsecurity.net>
1413 Date: Tue May 10 20:56:54 2016 -0400
1414
1415 Merge branch 'pax-test' into grsec-test
1416
1417 commit f5bd1342fa631bb3b69a2e8919785c827c4edf74
1418 Author: Brad Spengler <spender@grsecurity.net>
1419 Date: Tue May 10 20:55:57 2016 -0400
1420
1421 Update to pax-linux-4.5.3-test5.patch:
1422 - marked all indirectly callable x86 asm crypto functions, reported by Dwokfur and minipli (https://forums.grsecurity.net/viewtopic.php?f=3&t=4468)
1423 - worked around an intentional integer overflow introduced by gcc-6 that triggered a size overflow false positive, reported by hooruD, chron and Fen (https://forums.grsecurity.net/viewtopic.php?f=3&t=4469)
1424 - made some preparations for enabling RAP on i386 as well, will have to wait due to KERNEXEC
1425
1426 arch/x86/crypto/aesni-intel_asm.S | 6 +++---
1427 arch/x86/crypto/sha-mb/sha1_mb_mgr_flush_avx2.S | 4 ++--
1428 arch/x86/crypto/sha-mb/sha1_mb_mgr_submit_avx2.S | 2 +-
1429 arch/x86/crypto/sha256_ni_asm.S | 2 +-
1430 arch/x86/crypto/twofish-i586-asm_32.S | 2 +-
1431 arch/x86/entry/common.c | 1 -
1432 include/linux/linkage.h | 22 +++++++++++++++-------
1433 tools/gcc/rap_plugin/rap_fptr_pass.c | 2 +-
1434 tools/gcc/rap_plugin/rap_hash.c | 1 +
1435 tools/gcc/rap_plugin/rap_plugin.c | 18 +++++++++---------
1436 .../disable_size_overflow_hash.data | 1 +
1437 .../size_overflow_plugin/size_overflow_hash.data | 1 -
1438 12 files changed, 35 insertions(+), 27 deletions(-)
1439
1440 commit 9e3e5ae3e9ed69452d4133490dd1831376b9a1e8
1441 Merge: e5983fd cfcaa03
1442 Author: Brad Spengler <spender@grsecurity.net>
1443 Date: Sun May 8 08:04:18 2016 -0400
1444
1445 Merge branch 'pax-test' into grsec-test
1446
1447 commit cfcaa036dd3756fc32e083a7c486c1143d93fd22
1448 Author: Brad Spengler <spender@grsecurity.net>
1449 Date: Sun May 8 08:03:53 2016 -0400
1450
1451 Update to pax-linux-4.5.3-test4.patch:
1452 - fixed a few incorrect function types (mostly start_xmit callbacks) found by RAP, reported by cinder (https://forums.grsecurity.net/viewtopic.php?f=3&t=4466)
1453
1454 drivers/char/tpm/tpm-chip.c | 7 ++++++-
1455 drivers/net/can/bfin_can.c | 2 +-
1456 drivers/net/can/flexcan.c | 2 +-
1457 drivers/net/ethernet/adi/bfin_mac.c | 2 +-
1458 drivers/net/ethernet/allwinner/sun4i-emac.c | 2 +-
1459 drivers/net/ethernet/amd/7990.c | 2 +-
1460 drivers/net/ethernet/amd/7990.h | 2 +-
1461 drivers/net/ethernet/amd/atarilance.c | 4 ++--
1462 drivers/net/ethernet/amd/declance.c | 2 +-
1463 drivers/net/ethernet/amd/sun3lance.c | 4 ++--
1464 drivers/net/ethernet/amd/sunlance.c | 2 +-
1465 drivers/net/ethernet/broadcom/bcm63xx_enet.c | 2 +-
1466 drivers/net/ethernet/davicom/dm9000.c | 2 +-
1467 drivers/net/ethernet/faraday/ftgmac100.c | 2 +-
1468 drivers/net/ethernet/faraday/ftmac100.c | 2 +-
1469 drivers/net/ethernet/freescale/fec_mpc52xx.c | 2 +-
1470 drivers/net/ethernet/freescale/fs_enet/fs_enet-main.c | 2 +-
1471 drivers/net/ethernet/freescale/gianfar.c | 4 ++--
1472 drivers/net/ethernet/freescale/ucc_geth.c | 2 +-
1473 drivers/net/ethernet/i825xx/lib82596.c | 4 ++--
1474 drivers/net/ethernet/ibm/ehea/ehea_main.c | 2 +-
1475 drivers/net/ethernet/ibm/emac/core.c | 4 ++--
1476 drivers/net/ethernet/micrel/ks8695net.c | 2 +-
1477 drivers/net/ethernet/moxa/moxart_ether.c | 2 +-
1478 drivers/net/ethernet/netx-eth.c | 2 +-
1479 drivers/net/ethernet/nuvoton/w90p910_ether.c | 2 +-
1480 drivers/net/ethernet/nxp/lpc_eth.c | 2 +-
1481 drivers/net/ethernet/seeq/sgiseeq.c | 2 +-
1482 drivers/net/ethernet/sgi/ioc3-eth.c | 4 ++--
1483 drivers/net/ethernet/smsc/smc911x.c | 2 +-
1484 drivers/net/ethernet/smsc/smc91x.c | 2 +-
1485 drivers/net/ethernet/sun/sunbmac.c | 2 +-
1486 drivers/net/ethernet/sun/sunqe.c | 2 +-
1487 drivers/net/ethernet/sun/sunvnet.c | 10 +++++-----
1488 drivers/net/ethernet/ti/cpmac.c | 2 +-
1489 drivers/net/ethernet/ti/netcp_core.c | 2 +-
1490 drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
1491 drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 2 +-
1492 drivers/net/xen-netback/interface.c | 2 +-
1493 drivers/net/xen-netfront.c | 2 +-
1494 40 files changed, 55 insertions(+), 50 deletions(-)
1495
1496 commit e5983fd19799feb3bf947cd0dc2b5435deee3332
1497 Merge: 5ecb84f a235ecd
1498 Author: Brad Spengler <spender@grsecurity.net>
1499 Date: Sat May 7 00:00:42 2016 -0400
1500
1501 Merge branch 'pax-test' into grsec-test
1502
1503 commit a235ecd8bdece417e83f9cf89c76607bf15955dc
1504 Author: Brad Spengler <spender@grsecurity.net>
1505 Date: Fri May 6 23:59:34 2016 -0400
1506
1507 Update to pax-linux-4.5.3-test3.patch:
1508 - fixed some more of PARAVIRT for RAP, reported by hunger
1509 - Emese increased the coverage of initify by marking up str* and mem* functions
1510 - added error reporting for refusing to load modules incompatible with KERNEXEC's 'or' method, reported by Martin Väth (https://bugs.gentoo.org/show_bug.cgi?id=581726)
1511
1512 arch/arm/include/asm/string.h | 10 ++---
1513 arch/arm64/include/asm/string.h | 22 +++++------
1514 arch/x86/boot/string.h | 4 +-
1515 arch/x86/include/asm/string_32.h | 20 +++++-----
1516 arch/x86/include/asm/string_64.h | 16 ++++----
1517 arch/x86/kernel/paravirt-spinlocks.c | 22 +++++++++--
1518 arch/x86/xen/mmu.c | 6 ++-
1519 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 ++---
1520 include/linux/string.h | 70 +++++++++++++++++-----------------
1521 include/linux/syscalls.h | 2 +-
1522 kernel/module.c | 4 +-
1523 mm/fadvise.c | 2 +-
1524 tools/gcc/randomize_layout_seed.h | 1 -
1525 tools/gcc/rap_plugin/rap_plugin.c | 7 +++-
1526 14 files changed, 109 insertions(+), 87 deletions(-)
1527
1528 commit 5ecb84f55a9bdf8b39054c23d90646ba0591ce1c
1529 Author: Brad Spengler <spender@grsecurity.net>
1530 Date: Fri May 6 08:51:58 2016 -0400
1531
1532 Remove !PARAVIRT dependency on RAP
1533
1534 security/Kconfig | 2 +-
1535 1 file changed, 1 insertion(+), 1 deletion(-)
1536
1537 commit eecd10d7c579d2601c384c1e9e0f062a8dda40e7
1538 Author: Brad Spengler <spender@grsecurity.net>
1539 Date: Fri May 6 06:34:48 2016 -0400
1540
1541 Update copyright year
1542
1543 tools/gcc/randomize_layout_plugin.c | 2 +-
1544 1 file changed, 1 insertion(+), 1 deletion(-)
1545
1546 commit 7d7e01439c2601abcae2ecfc66a883be258a2691
1547 Merge: 3315e83 c2aa83b
1548 Author: Brad Spengler <spender@grsecurity.net>
1549 Date: Fri May 6 06:34:25 2016 -0400
1550
1551 Merge branch 'pax-test' into grsec-test
1552
1553 commit c2aa83bf2d65989c262ff33312874ee7fe38606a
1554 Author: Brad Spengler <spender@grsecurity.net>
1555 Date: Fri May 6 06:34:04 2016 -0400
1556
1557 Update to pax-linux-4.5.2-test2.patch:
1558 - minipli fixed a few missing hunks left out from the 4.5 port
1559 - fixed a regression in handling user.pax.flags on tmpfs, reported by blueness and Stebalien (https://forums.grsecurity.net/viewtopic.php?f=3&t=4462)
1560 - fixed a few compile regressions on arm, reported by Wizzup
1561 - fixed PARAVIRT for RAP, reported by spender
1562 - fixed the very old PAGEEXEC/i386 TLB reload code for SMAP (not that it could work there), reported by spender
1563 - Emese fixed a false positive size overflow report caused by gcc-5 and newer, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4455)
1564
1565 arch/arm/Kconfig | 2 +-
1566 arch/arm/include/asm/domain.h | 2 +-
1567 arch/arm/kernel/process.c | 6 +
1568 arch/mips/mm/mmap.c | 27 ++++
1569 arch/powerpc/kernel/process.c | 39 +++++
1570 arch/s390/kernel/process.c | 13 ++
1571 arch/x86/entry/entry_32.S | 2 +-
1572 arch/x86/include/asm/fixmap.h | 2 +-
1573 arch/x86/kernel/paravirt.c | 90 +++++++++--
1574 arch/x86/mm/fault.c | 2 +
1575 arch/x86/mm/pgtable.c | 2 +-
1576 drivers/cpufreq/intel_pstate.c | 2 +-
1577 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 7 +-
1578 drivers/net/ethernet/8390/ax88796.c | 4 +-
1579 drivers/oprofile/oprofilefs.c | 4 +-
1580 drivers/platform/x86/thinkpad_acpi.c | 1 -
1581 fs/xattr.c | 2 +-
1582 include/asm-generic/atomic-long.h | 4 +
1583 include/uapi/linux/xattr.h | 3 +-
1584 kernel/module.c | 2 +-
1585 mm/shmem.c | 2 -
1586 security/Kconfig | 2 +
1587 .../insert_size_overflow_asm.c | 2 +-
1588 .../size_overflow_plugin/intentional_overflow.c | 80 ++++++++--
1589 .../size_overflow_plugin/remove_unnecessary_dup.c | 2 +-
1590 tools/gcc/size_overflow_plugin/size_overflow.h | 8 +-
1591 .../gcc/size_overflow_plugin/size_overflow_debug.c | 2 +-
1592 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 2 +-
1593 .../gcc/size_overflow_plugin/size_overflow_misc.c | 2 +-
1594 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
1595 .../size_overflow_plugin_hash.c | 2 +-
1596 .../size_overflow_plugin/size_overflow_transform.c | 34 ++---
1597 .../size_overflow_transform_core.c | 170 +++++++++++----------
1598 33 files changed, 370 insertions(+), 156 deletions(-)
1599
1600 commit 3315e83c1e9738784da3c1c5836dd13b7593a8f1
1601 Author: Brad Spengler <spender@grsecurity.net>
1602 Date: Wed May 4 21:03:36 2016 -0400
1603
1604 Add PAGEEXEC support for i386 !PAE on SMAP-capable processors
1605 (won't be used by anyone, just for correctness sake)
1606
1607 arch/x86/mm/fault.c | 2 ++
1608 1 file changed, 2 insertions(+)
1609
1610 commit b9e96108d2092c12e42e1810a62aec85f6ddc501
1611 Merge: 6d98323 a3273aa
1612 Author: Brad Spengler <spender@grsecurity.net>
1613 Date: Wed May 4 19:06:44 2016 -0400
1614
1615 Merge branch 'pax-test' into grsec-test
1616
1617 commit a3273aa2488f9e201620ee53af1acfd99c58650a
1618 Merge: e0e4c2c fbc310e
1619 Author: Brad Spengler <spender@grsecurity.net>
1620 Date: Wed May 4 19:06:36 2016 -0400
1621
1622 Merge branch 'linux-4.5.y' into pax-test
1623
1624 commit 6d98323e0b511bdb77b9ef11d84207219331ac69
1625 Author: Brad Spengler <spender@grsecurity.net>
1626 Date: Tue May 3 21:58:09 2016 -0400
1627
1628 Backport fix from http://www.spinics.net/lists/linux-usb/msg140243.html
1629
1630 drivers/usb/core/devio.c | 9 +++++----
1631 1 file changed, 5 insertions(+), 4 deletions(-)
1632
1633 commit b003c68f96dd6a483b515290756816b6c909f34f
1634 Author: Brad Spengler <spender@grsecurity.net>
1635 Date: Sun May 1 12:06:48 2016 -0400
1636
1637 Add note about RANDSTRUCT and the gcc runtime library exception
1638
1639 tools/gcc/randomize_layout_plugin.c | 5 +++++
1640 1 file changed, 5 insertions(+)
1641
1642 commit fe375f07d31c5d561fcca4016f7c33e885fa3586
1643 Author: Brad Spengler <spender@grsecurity.net>
1644 Date: Fri Apr 29 06:22:29 2016 -0400
1645
1646 Revert change to regmap_access_show()
1647
1648 drivers/base/regmap/regmap-debugfs.c | 3 +--
1649 1 file changed, 1 insertion(+), 2 deletions(-)
1650
1651 commit 3f5df6e7cf9716b4854fb282b6eb22cb1e52e92a
1652 Author: Brad Spengler <spender@grsecurity.net>
1653 Date: Fri Apr 29 06:20:12 2016 -0400
1654
1655 Merge a number of fixes from Mathias Krause
1656
1657 arch/x86/entry/entry_32.S | 2 +-
1658 drivers/base/regmap/regmap-debugfs.c | 3 ++-
1659 drivers/cpufreq/intel_pstate.c | 2 +-
1660 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 7 ++++++-
1661 drivers/oprofile/oprofilefs.c | 4 ++--
1662 drivers/platform/x86/thinkpad_acpi.c | 1 -
1663 init/Kconfig | 1 -
1664 kernel/module.c | 4 +---
1665 8 files changed, 13 insertions(+), 11 deletions(-)
1666
1667 commit 127927d7e57793eca299226cb31ecd9d235bbd62
1668 Author: Brad Spengler <spender@grsecurity.net>
1669 Date: Thu Apr 28 20:58:04 2016 -0400
1670
1671 Add temporary dependency on !PARAVIRT for RAP until some fallout can be fixed
1672
1673 security/Kconfig | 2 +-
1674 1 file changed, 1 insertion(+), 1 deletion(-)
1675
1676 commit d37fff4904eee095ce50ea522efbfaf2a4bcb47e
1677 Author: Brad Spengler <spender@grsecurity.net>
1678 Date: Thu Apr 28 18:44:18 2016 -0400
1679
1680 Update to pax-linux-4.5.2-test1y.patch
1681
1682 tools/gcc/rap_plugin/rap_plugin.c | 6 ++++--
1683 1 file changed, 4 insertions(+), 2 deletions(-)
1684
1685 commit 5e309719b190a24dccd73c8b6ae388bd7f34660b
1686 Merge: ac01f5e e0e4c2c
1687 Author: Brad Spengler <spender@grsecurity.net>
1688 Date: Thu Apr 28 17:37:37 2016 -0400
1689
1690 Merge branch 'pax-test' into grsec-test
1691
1692 commit e0e4c2ce05e0cd594b716a1e12d91928a0d083fd
1693 Author: Brad Spengler <spender@grsecurity.net>
1694 Date: Thu Apr 28 17:36:23 2016 -0400
1695
1696 Update to pax-linux-4.5.2-test1x.patch
1697
1698 arch/x86/include/asm/alternative-asm.h | 8 --------
1699 drivers/lguest/core.c | 2 +-
1700 kernel/sched/deadline.c | 4 ++--
1701 mm/swap.c | 7 ++++++-
1702 tools/gcc/colorize_plugin.c | 2 +-
1703 tools/gcc/gcc-common.h | 21 +++++++++++++++++++++
1704 6 files changed, 31 insertions(+), 13 deletions(-)
1705
1706 commit ac01f5eb279d93b10d63f87c9d851e039ab1bc3e
1707 Author: Brad Spengler <spender@grsecurity.net>
1708 Date: Thu Apr 28 17:35:14 2016 -0400
1709
1710 Initial import of grsecurity 3.1 for 4.5.2 with limited RAP support
1711
1712 Documentation/dontdiff | 2 +
1713 Documentation/kernel-parameters.txt | 11 +
1714 Documentation/sysctl/kernel.txt | 15 +
1715 Makefile | 5 +-
1716 arch/alpha/include/asm/cache.h | 4 +-
1717 arch/alpha/kernel/osf_sys.c | 12 +-
1718 arch/arc/Kconfig | 1 +
1719 arch/arm/Kconfig | 1 +
1720 arch/arm/Kconfig.debug | 1 +
1721 arch/arm/include/asm/thread_info.h | 7 +-
1722 arch/arm/kernel/entry-common.S | 8 +-
1723 arch/arm/kernel/process.c | 4 +-
1724 arch/arm/kernel/ptrace.c | 9 +
1725 arch/arm/kernel/traps.c | 7 +-
1726 arch/arm/mm/Kconfig | 4 +-
1727 arch/arm/mm/fault.c | 40 +-
1728 arch/arm/mm/mmap.c | 8 +-
1729 arch/arm/net/bpf_jit_32.c | 51 +-
1730 arch/arm64/Kconfig.debug | 1 +
1731 arch/avr32/include/asm/cache.h | 4 +-
1732 arch/blackfin/Kconfig.debug | 1 +
1733 arch/blackfin/include/asm/cache.h | 3 +-
1734 arch/cris/include/arch-v10/arch/cache.h | 3 +-
1735 arch/cris/include/arch-v32/arch/cache.h | 3 +-
1736 arch/frv/include/asm/cache.h | 3 +-
1737 arch/frv/mm/elf-fdpic.c | 4 +-
1738 arch/hexagon/include/asm/cache.h | 6 +-
1739 arch/ia64/Kconfig | 1 +
1740 arch/ia64/include/asm/cache.h | 3 +-
1741 arch/ia64/kernel/sys_ia64.c | 2 +
1742 arch/ia64/mm/hugetlbpage.c | 2 +
1743 arch/m32r/include/asm/cache.h | 4 +-
1744 arch/m68k/include/asm/cache.h | 4 +-
1745 arch/metag/mm/hugetlbpage.c | 1 +
1746 arch/microblaze/include/asm/cache.h | 3 +-
1747 arch/mips/Kconfig | 1 +
1748 arch/mips/include/asm/thread_info.h | 11 +-
1749 arch/mips/kernel/irq.c | 3 +
1750 arch/mips/kernel/ptrace.c | 9 +
1751 arch/mips/mm/mmap.c | 4 +-
1752 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
1753 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
1754 arch/nios2/lib/memset.c | 2 +-
1755 arch/openrisc/include/asm/cache.h | 4 +-
1756 arch/parisc/include/asm/cache.h | 3 +
1757 arch/parisc/kernel/sys_parisc.c | 4 +
1758 arch/powerpc/Kconfig | 1 +
1759 arch/powerpc/include/asm/cache.h | 4 +-
1760 arch/powerpc/include/asm/thread_info.h | 5 +-
1761 arch/powerpc/kernel/Makefile | 2 +
1762 arch/powerpc/kernel/irq.c | 3 +
1763 arch/powerpc/kernel/process.c | 10 +-
1764 arch/powerpc/kernel/ptrace.c | 14 +
1765 arch/powerpc/kernel/traps.c | 5 +
1766 arch/powerpc/mm/slice.c | 2 +-
1767 arch/s390/Kconfig.debug | 1 +
1768 arch/s390/include/asm/cache.h | 4 +-
1769 arch/score/include/asm/cache.h | 4 +-
1770 arch/sh/include/asm/cache.h | 3 +-
1771 arch/sh/mm/mmap.c | 6 +-
1772 arch/sparc/include/asm/cache.h | 4 +-
1773 arch/sparc/include/asm/pgalloc_64.h | 1 +
1774 arch/sparc/include/asm/thread_info_64.h | 8 +-
1775 arch/sparc/kernel/process_32.c | 6 +-
1776 arch/sparc/kernel/process_64.c | 8 +-
1777 arch/sparc/kernel/ptrace_64.c | 14 +
1778 arch/sparc/kernel/sys_sparc_64.c | 8 +-
1779 arch/sparc/kernel/syscalls.S | 8 +-
1780 arch/sparc/kernel/traps_32.c | 8 +-
1781 arch/sparc/kernel/traps_64.c | 28 +-
1782 arch/sparc/kernel/unaligned_64.c | 2 +-
1783 arch/sparc/mm/fault_64.c | 2 +-
1784 arch/sparc/mm/hugetlbpage.c | 15 +-
1785 arch/tile/Kconfig | 1 +
1786 arch/tile/include/asm/cache.h | 3 +-
1787 arch/tile/mm/hugetlbpage.c | 2 +
1788 arch/um/include/asm/cache.h | 3 +-
1789 arch/unicore32/include/asm/cache.h | 6 +-
1790 arch/x86/Kconfig | 21 +
1791 arch/x86/Kconfig.debug | 2 +
1792 arch/x86/crypto/sha-mb/sha1_mb.c | 4 +-
1793 arch/x86/entry/common.c | 14 +
1794 arch/x86/entry/entry_32.S | 2 +-
1795 arch/x86/entry/entry_64.S | 2 +-
1796 arch/x86/ia32/ia32_aout.c | 2 +
1797 arch/x86/include/asm/floppy.h | 20 +-
1798 arch/x86/include/asm/fpu/types.h | 69 +-
1799 arch/x86/include/asm/io.h | 2 +-
1800 arch/x86/include/asm/page.h | 12 +-
1801 arch/x86/include/asm/paravirt_types.h | 21 +-
1802 arch/x86/include/asm/processor.h | 12 +-
1803 arch/x86/include/asm/thread_info.h | 6 +-
1804 arch/x86/kernel/dumpstack.c | 10 +-
1805 arch/x86/kernel/dumpstack_32.c | 2 +-
1806 arch/x86/kernel/dumpstack_64.c | 2 +-
1807 arch/x86/kernel/ioport.c | 13 +
1808 arch/x86/kernel/irq_32.c | 3 +
1809 arch/x86/kernel/irq_64.c | 4 +
1810 arch/x86/kernel/ldt.c | 18 +
1811 arch/x86/kernel/msr.c | 10 +
1812 arch/x86/kernel/ptrace.c | 14 +
1813 arch/x86/kernel/signal.c | 9 +-
1814 arch/x86/kernel/sys_i386_32.c | 9 +-
1815 arch/x86/kernel/sys_x86_64.c | 8 +-
1816 arch/x86/kernel/traps.c | 5 +
1817 arch/x86/kernel/verify_cpu.S | 1 +
1818 arch/x86/kernel/vm86_32.c | 15 +
1819 arch/x86/mm/fault.c | 12 +-
1820 arch/x86/mm/hugetlbpage.c | 15 +-
1821 arch/x86/mm/init.c | 66 +-
1822 arch/x86/mm/init_32.c | 6 +-
1823 arch/x86/net/bpf_jit_comp.c | 4 +
1824 arch/x86/platform/efi/efi_64.c | 2 +-
1825 arch/x86/xen/Kconfig | 1 +
1826 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
1827 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
1828 crypto/scatterwalk.c | 10 +-
1829 drivers/acpi/acpica/hwxfsleep.c | 11 +-
1830 drivers/acpi/custom_method.c | 4 +
1831 drivers/block/cciss.h | 30 +-
1832 drivers/block/smart1,2.h | 40 +-
1833 drivers/cdrom/cdrom.c | 2 +-
1834 drivers/char/Kconfig | 4 +-
1835 drivers/char/genrtc.c | 1 +
1836 drivers/char/mem.c | 17 +
1837 drivers/char/random.c | 5 +-
1838 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
1839 drivers/crypto/ccp/ccp-crypto-aes-cmac.c | 3 +
1840 drivers/crypto/ccp/ccp-crypto-sha.c | 3 +
1841 drivers/crypto/marvell/cesa.h | 3 +-
1842 drivers/crypto/marvell/hash.c | 106 +-
1843 drivers/firewire/ohci.c | 4 +
1844 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 78 +-
1845 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
1846 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
1847 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
1848 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
1849 drivers/hid/hid-wiimote-debug.c | 2 +-
1850 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
1851 drivers/input/touchscreen/sur40.c | 21 +-
1852 drivers/iommu/Kconfig | 1 +
1853 drivers/iommu/amd_iommu.c | 14 +-
1854 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
1855 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
1856 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
1857 drivers/isdn/i4l/isdn_concap.c | 6 +-
1858 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
1859 drivers/lguest/core.c | 2 +-
1860 drivers/md/bcache/Kconfig | 1 +
1861 drivers/md/raid5.c | 8 +
1862 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
1863 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
1864 drivers/media/radio/radio-cadet.c | 5 +-
1865 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
1866 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
1867 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
1868 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
1869 drivers/message/fusion/mptbase.c | 9 +
1870 drivers/misc/sgi-xp/xp_main.c | 12 +-
1871 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
1872 drivers/net/ethernet/mellanox/mlx4/en_rx.c | 2 +-
1873 drivers/net/hyperv/hyperv_net.h | 7 +-
1874 drivers/net/hyperv/netvsc_drv.c | 5 +-
1875 drivers/net/hyperv/rndis_filter.c | 4 +-
1876 drivers/net/wan/lmc/lmc_media.c | 97 +-
1877 drivers/net/wan/z85230.c | 24 +-
1878 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
1879 drivers/net/wireless/zydas/zd1211rw/zd_usb.c | 2 +-
1880 drivers/pci/proc.c | 9 +
1881 drivers/platform/x86/asus-wmi.c | 12 +
1882 drivers/rtc/rtc-dev.c | 3 +
1883 drivers/scsi/bfa/bfa_fcs.c | 19 +-
1884 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
1885 drivers/scsi/bfa/bfa_modules.h | 12 +-
1886 drivers/scsi/cxgbi/libcxgbi.c | 1 +
1887 drivers/scsi/hpsa.h | 40 +-
1888 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
1889 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
1890 drivers/staging/wilc1000/host_interface.h | 1 +
1891 drivers/staging/wilc1000/wilc_spi.c | 1 +
1892 drivers/tty/serial/uartlite.c | 4 +-
1893 drivers/tty/sysrq.c | 2 +-
1894 drivers/tty/tty_io.c | 4 +
1895 drivers/tty/vt/keyboard.c | 22 +-
1896 drivers/uio/uio.c | 6 +-
1897 drivers/usb/core/hub.c | 5 +
1898 drivers/usb/gadget/function/f_uac1.c | 1 +
1899 drivers/usb/gadget/function/u_uac1.c | 1 +
1900 drivers/usb/host/hwa-hc.c | 9 +-
1901 drivers/usb/usbip/usbip_common.c | 11 +
1902 drivers/usb/usbip/vhci_sysfs.c | 2 +-
1903 drivers/video/fbdev/arcfb.c | 2 +-
1904 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
1905 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
1906 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
1907 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++----
1908 drivers/xen/xenfs/xenstored.c | 5 +
1909 firmware/Makefile | 2 +
1910 firmware/WHENCE | 20 +-
1911 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
1912 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
1913 fs/attr.c | 4 +
1914 fs/autofs4/waitq.c | 9 +
1915 fs/binfmt_aout.c | 7 +
1916 fs/binfmt_elf.c | 40 +-
1917 fs/compat.c | 20 +-
1918 fs/coredump.c | 17 +-
1919 fs/dcache.c | 3 +
1920 fs/debugfs/inode.c | 19 +-
1921 fs/ecryptfs/keystore.c | 6 +-
1922 fs/exec.c | 235 +-
1923 fs/ext2/balloc.c | 4 +-
1924 fs/ext2/super.c | 8 +-
1925 fs/ext4/balloc.c | 4 +-
1926 fs/ext4/extents.c | 2 +-
1927 fs/fcntl.c | 4 +
1928 fs/fhandle.c | 3 +-
1929 fs/file.c | 4 +
1930 fs/filesystems.c | 4 +
1931 fs/fs_struct.c | 20 +-
1932 fs/hugetlbfs/inode.c | 5 +-
1933 fs/inode.c | 8 +-
1934 fs/kernfs/dir.c | 6 +
1935 fs/mount.h | 4 +-
1936 fs/namei.c | 295 +-
1937 fs/namespace.c | 24 +
1938 fs/nfsd/nfscache.c | 2 +-
1939 fs/open.c | 38 +
1940 fs/overlayfs/inode.c | 3 +
1941 fs/overlayfs/super.c | 6 +-
1942 fs/pipe.c | 2 +-
1943 fs/posix_acl.c | 15 +-
1944 fs/proc/Kconfig | 10 +-
1945 fs/proc/array.c | 67 +-
1946 fs/proc/base.c | 175 +-
1947 fs/proc/cmdline.c | 4 +
1948 fs/proc/devices.c | 4 +
1949 fs/proc/fd.c | 13 +-
1950 fs/proc/generic.c | 64 +
1951 fs/proc/inode.c | 17 +
1952 fs/proc/internal.h | 11 +-
1953 fs/proc/interrupts.c | 4 +
1954 fs/proc/kcore.c | 3 +
1955 fs/proc/proc_net.c | 31 +
1956 fs/proc/proc_sysctl.c | 52 +-
1957 fs/proc/root.c | 8 +
1958 fs/proc/stat.c | 69 +-
1959 fs/proc/task_mmu.c | 66 +-
1960 fs/readdir.c | 19 +
1961 fs/reiserfs/item_ops.c | 24 +-
1962 fs/reiserfs/super.c | 4 +
1963 fs/select.c | 2 +
1964 fs/seq_file.c | 30 +-
1965 fs/stat.c | 20 +-
1966 fs/sysfs/dir.c | 30 +-
1967 fs/utimes.c | 7 +
1968 fs/xattr.c | 26 +-
1969 grsecurity/Kconfig | 1205 ++++
1970 grsecurity/Makefile | 54 +
1971 grsecurity/gracl.c | 2757 +++++++++
1972 grsecurity/gracl_alloc.c | 105 +
1973 grsecurity/gracl_cap.c | 127 +
1974 grsecurity/gracl_compat.c | 269 +
1975 grsecurity/gracl_fs.c | 448 ++
1976 grsecurity/gracl_ip.c | 386 ++
1977 grsecurity/gracl_learn.c | 207 +
1978 grsecurity/gracl_policy.c | 1784 ++++++
1979 grsecurity/gracl_res.c | 68 +
1980 grsecurity/gracl_segv.c | 304 +
1981 grsecurity/gracl_shm.c | 40 +
1982 grsecurity/grsec_chdir.c | 19 +
1983 grsecurity/grsec_chroot.c | 506 ++
1984 grsecurity/grsec_disabled.c | 445 ++
1985 grsecurity/grsec_exec.c | 189 +
1986 grsecurity/grsec_fifo.c | 26 +
1987 grsecurity/grsec_fork.c | 23 +
1988 grsecurity/grsec_init.c | 294 +
1989 grsecurity/grsec_ipc.c | 48 +
1990 grsecurity/grsec_link.c | 65 +
1991 grsecurity/grsec_log.c | 340 +
1992 grsecurity/grsec_mem.c | 48 +
1993 grsecurity/grsec_mount.c | 65 +
1994 grsecurity/grsec_pax.c | 47 +
1995 grsecurity/grsec_proc.c | 20 +
1996 grsecurity/grsec_ptrace.c | 30 +
1997 grsecurity/grsec_sig.c | 245 +
1998 grsecurity/grsec_sock.c | 244 +
1999 grsecurity/grsec_sysctl.c | 497 ++
2000 grsecurity/grsec_time.c | 16 +
2001 grsecurity/grsec_tpe.c | 78 +
2002 grsecurity/grsec_tty.c | 18 +
2003 grsecurity/grsec_usb.c | 15 +
2004 grsecurity/grsum.c | 54 +
2005 include/linux/binfmts.h | 5 +-
2006 include/linux/capability.h | 13 +
2007 include/linux/compiler-gcc.h | 5 +
2008 include/linux/compiler.h | 8 +
2009 include/linux/cred.h | 8 +-
2010 include/linux/dcache.h | 5 +-
2011 include/linux/fs.h | 24 +-
2012 include/linux/fs_struct.h | 2 +-
2013 include/linux/fsnotify.h | 6 +
2014 include/linux/gracl.h | 342 ++
2015 include/linux/gracl_compat.h | 156 +
2016 include/linux/gralloc.h | 9 +
2017 include/linux/grdefs.h | 140 +
2018 include/linux/grinternal.h | 231 +
2019 include/linux/grmsg.h | 120 +
2020 include/linux/grsecurity.h | 259 +
2021 include/linux/grsock.h | 19 +
2022 include/linux/ipc.h | 2 +-
2023 include/linux/ipc_namespace.h | 2 +-
2024 include/linux/kallsyms.h | 18 +-
2025 include/linux/key-type.h | 4 +-
2026 include/linux/kmod.h | 5 +
2027 include/linux/kobject.h | 2 +-
2028 include/linux/lsm_hooks.h | 4 +-
2029 include/linux/mm.h | 12 +
2030 include/linux/mm_types.h | 4 +-
2031 include/linux/module.h | 5 +-
2032 include/linux/mount.h | 2 +-
2033 include/linux/msg.h | 2 +-
2034 include/linux/netfilter/xt_gradm.h | 9 +
2035 include/linux/path.h | 4 +-
2036 include/linux/perf_event.h | 13 +-
2037 include/linux/pid_namespace.h | 2 +-
2038 include/linux/printk.h | 2 +-
2039 include/linux/proc_fs.h | 22 +-
2040 include/linux/proc_ns.h | 2 +-
2041 include/linux/random.h | 2 +-
2042 include/linux/rbtree_augmented.h | 4 +-
2043 include/linux/scatterlist.h | 12 +-
2044 include/linux/sched.h | 114 +-
2045 include/linux/security.h | 1 +
2046 include/linux/sem.h | 2 +-
2047 include/linux/seq_file.h | 5 +
2048 include/linux/shm.h | 6 +-
2049 include/linux/skbuff.h | 3 +
2050 include/linux/slab.h | 9 -
2051 include/linux/sysctl.h | 8 +-
2052 include/linux/thread_info.h | 6 +-
2053 include/linux/tty.h | 2 +-
2054 include/linux/tty_driver.h | 4 +-
2055 include/linux/uidgid.h | 5 +
2056 include/linux/user_namespace.h | 2 +-
2057 include/linux/utsname.h | 2 +-
2058 include/linux/vermagic.h | 16 +-
2059 include/linux/vmalloc.h | 8 +
2060 include/net/af_unix.h | 2 +-
2061 include/net/ip.h | 2 +-
2062 include/net/neighbour.h | 2 +-
2063 include/net/net_namespace.h | 2 +-
2064 include/net/sctp/structs.h | 2 +-
2065 include/net/sock.h | 2 +-
2066 include/trace/events/fs.h | 53 +
2067 include/uapi/linux/personality.h | 1 +
2068 init/Kconfig | 4 +
2069 init/main.c | 46 +-
2070 ipc/mqueue.c | 1 +
2071 ipc/msg.c | 3 +-
2072 ipc/msgutil.c | 4 +-
2073 ipc/sem.c | 3 +-
2074 ipc/shm.c | 26 +-
2075 ipc/util.c | 6 +
2076 kernel/auditsc.c | 2 +-
2077 kernel/bpf/syscall.c | 10 +-
2078 kernel/bpf/verifier.c | 1 -
2079 kernel/capability.c | 41 +-
2080 kernel/cgroup.c | 5 +-
2081 kernel/compat.c | 1 +
2082 kernel/configs.c | 11 +
2083 kernel/cred.c | 112 +-
2084 kernel/events/core.c | 14 +-
2085 kernel/exit.c | 10 +-
2086 kernel/fork.c | 86 +-
2087 kernel/futex.c | 4 +-
2088 kernel/kallsyms.c | 9 +
2089 kernel/kcmp.c | 4 +
2090 kernel/kexec_core.c | 2 +-
2091 kernel/kmod.c | 96 +-
2092 kernel/kprobes.c | 9 +-
2093 kernel/ksysfs.c | 2 +
2094 kernel/locking/lockdep_proc.c | 10 +-
2095 kernel/module.c | 110 +-
2096 kernel/panic.c | 4 +-
2097 kernel/pid.c | 18 +-
2098 kernel/power/Kconfig | 2 +
2099 kernel/printk/printk.c | 7 +-
2100 kernel/ptrace.c | 50 +-
2101 kernel/resource.c | 10 +
2102 kernel/sched/core.c | 11 +-
2103 kernel/sched/debug.c | 4 +
2104 kernel/signal.c | 37 +-
2105 kernel/sys.c | 64 +-
2106 kernel/sysctl.c | 172 +-
2107 kernel/taskstats.c | 6 +
2108 kernel/time/posix-timers.c | 8 +
2109 kernel/time/time.c | 5 +
2110 kernel/time/timekeeping.c | 3 +
2111 kernel/time/timer_list.c | 13 +-
2112 kernel/time/timer_stats.c | 10 +-
2113 kernel/trace/Kconfig | 2 +
2114 kernel/trace/trace_syscalls.c | 8 +
2115 kernel/user_namespace.c | 15 +
2116 kernel/workqueue.c | 29 +
2117 lib/Kconfig.debug | 12 +-
2118 lib/Kconfig.kasan | 2 +-
2119 lib/is_single_threaded.c | 3 +
2120 lib/list_debug.c | 65 +-
2121 lib/nlattr.c | 2 +
2122 lib/rbtree.c | 4 +-
2123 lib/vsprintf.c | 39 +-
2124 localversion-grsec | 1 +
2125 mm/Kconfig | 8 +-
2126 mm/Kconfig.debug | 1 +
2127 mm/filemap.c | 8 +-
2128 mm/kmemleak.c | 4 +-
2129 mm/memory.c | 2 +-
2130 mm/mempolicy.c | 12 +-
2131 mm/migrate.c | 3 +-
2132 mm/mlock.c | 11 +-
2133 mm/mmap.c | 127 +-
2134 mm/mprotect.c | 8 +
2135 mm/oom_kill.c | 4 +
2136 mm/page_alloc.c | 2 +-
2137 mm/process_vm_access.c | 6 +
2138 mm/shmem.c | 2 +-
2139 mm/slab.c | 14 +-
2140 mm/slab_common.c | 2 +-
2141 mm/slob.c | 12 +
2142 mm/slub.c | 33 +-
2143 mm/swap.c | 6 +-
2144 mm/util.c | 3 +
2145 mm/vmalloc.c | 82 +-
2146 mm/vmstat.c | 29 +-
2147 net/appletalk/atalk_proc.c | 2 +-
2148 net/atm/lec.c | 6 +-
2149 net/atm/mpoa_caches.c | 43 +-
2150 net/bridge/netfilter/ebtables.c | 4 +
2151 net/can/bcm.c | 2 +-
2152 net/can/proc.c | 2 +-
2153 net/core/dev_ioctl.c | 7 +-
2154 net/core/filter.c | 8 +-
2155 net/core/net-procfs.c | 17 +-
2156 net/core/pktgen.c | 2 +-
2157 net/core/sock.c | 23 +-
2158 net/core/sysctl_net_core.c | 2 +-
2159 net/decnet/dn_dev.c | 2 +-
2160 net/ipv4/devinet.c | 6 +-
2161 net/ipv4/inet_hashtables.c | 4 +
2162 net/ipv4/ip_input.c | 7 +
2163 net/ipv4/ip_sockglue.c | 3 +-
2164 net/ipv4/netfilter/arp_tables.c | 43 +-
2165 net/ipv4/netfilter/ip_tables.c | 48 +-
2166 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
2167 net/ipv4/route.c | 6 +-
2168 net/ipv4/tcp_input.c | 6 +-
2169 net/ipv4/tcp_ipv4.c | 24 +-
2170 net/ipv4/tcp_minisocks.c | 9 +-
2171 net/ipv4/tcp_timer.c | 11 +
2172 net/ipv4/udp.c | 24 +
2173 net/ipv6/addrconf.c | 13 +-
2174 net/ipv6/netfilter/ip6_tables.c | 48 +-
2175 net/ipv6/proc.c | 2 +-
2176 net/ipv6/tcp_ipv6.c | 23 +-
2177 net/ipv6/udp.c | 7 +
2178 net/ipx/ipx_proc.c | 2 +-
2179 net/irda/irproc.c | 2 +-
2180 net/llc/llc_proc.c | 2 +-
2181 net/netfilter/Kconfig | 10 +
2182 net/netfilter/Makefile | 1 +
2183 net/netfilter/nf_conntrack_core.c | 8 +
2184 net/netfilter/xt_gradm.c | 51 +
2185 net/netfilter/xt_hashlimit.c | 4 +-
2186 net/netfilter/xt_recent.c | 2 +-
2187 net/packet/af_packet.c | 1 +
2188 net/sctp/bind_addr.c | 14 +-
2189 net/sctp/protocol.c | 1 +
2190 net/sctp/sm_make_chunk.c | 3 +-
2191 net/sctp/socket.c | 4 +-
2192 net/socket.c | 75 +-
2193 net/sunrpc/Kconfig | 1 +
2194 net/sunrpc/cache.c | 2 +-
2195 net/sunrpc/stats.c | 2 +-
2196 net/sysctl_net.c | 2 +-
2197 net/unix/af_unix.c | 52 +-
2198 net/vmw_vsock/vmci_transport_notify.c | 30 +-
2199 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
2200 net/x25/sysctl_net_x25.c | 2 +-
2201 net/x25/x25_proc.c | 2 +-
2202 scripts/package/Makefile | 2 +-
2203 scripts/package/mkspec | 41 +-
2204 security/Kconfig | 364 +-
2205 security/apparmor/file.c | 4 +-
2206 security/apparmor/lsm.c | 8 +-
2207 security/commoncap.c | 29 +
2208 security/keys/internal.h | 2 +-
2209 security/min_addr.c | 2 +
2210 security/tomoyo/file.c | 12 +-
2211 security/tomoyo/mount.c | 4 +
2212 security/tomoyo/tomoyo.c | 20 +-
2213 security/yama/Kconfig | 2 +-
2214 sound/synth/emux/emux_seq.c | 14 +-
2215 sound/usb/line6/driver.c | 40 +-
2216 sound/usb/line6/toneport.c | 12 +-
2217 tools/gcc/.gitignore | 1 +
2218 tools/gcc/Makefile | 12 +
2219 tools/gcc/gen-random-seed.sh | 8 +
2220 tools/gcc/randomize_layout_plugin.c | 935 +++
2221 tools/gcc/randomize_layout_seed.h | 1 -
2222 .../size_overflow_plugin/size_overflow_hash.data | 202 +-
2223 511 files changed, 32630 insertions(+), 3134 deletions(-)
2224
2225 commit a89837d0fc99aab94b5c8b975215de260271c1f7
2226 Author: Brad Spengler <spender@grsecurity.net>
2227 Date: Wed Apr 27 20:43:37 2016 -0400
2228
2229 Initial port of PaX to 4.5.2 with a limited form of RAP
2230 (< 1/5th the total size of the full developed RAP plugin)
2231 No retaddr protection via XOR canary
2232 No C++ support
2233 No LTO support
2234 Removal of a few optimization passes
2235 No compile time reporting of bad fptr casts
2236
2237 The RAP plugin should therefore be used only to compile an
2238 appropriate vanilla kernel with this patch.
2239
2240 Documentation/dontdiff | 46 +-
2241 Documentation/kbuild/makefiles.txt | 39 +-
2242 Documentation/kernel-parameters.txt | 28 +
2243 Makefile | 52 +-
2244 arch/alpha/include/asm/atomic.h | 10 +
2245 arch/alpha/include/asm/elf.h | 7 +
2246 arch/alpha/include/asm/pgalloc.h | 6 +
2247 arch/alpha/include/asm/pgtable.h | 11 +
2248 arch/alpha/kernel/module.c | 2 +-
2249 arch/alpha/kernel/osf_sys.c | 8 +-
2250 arch/alpha/mm/fault.c | 141 +-
2251 arch/arm/Kconfig | 3 +-
2252 arch/arm/include/asm/atomic.h | 323 +-
2253 arch/arm/include/asm/cache.h | 5 +-
2254 arch/arm/include/asm/cacheflush.h | 2 +-
2255 arch/arm/include/asm/checksum.h | 14 +-
2256 arch/arm/include/asm/cmpxchg.h | 4 +
2257 arch/arm/include/asm/cpuidle.h | 2 +-
2258 arch/arm/include/asm/domain.h | 42 +-
2259 arch/arm/include/asm/elf.h | 9 +-
2260 arch/arm/include/asm/fncpy.h | 2 +
2261 arch/arm/include/asm/futex.h | 1 +
2262 arch/arm/include/asm/kmap_types.h | 2 +-
2263 arch/arm/include/asm/mach/dma.h | 2 +-
2264 arch/arm/include/asm/mach/map.h | 16 +-
2265 arch/arm/include/asm/outercache.h | 2 +-
2266 arch/arm/include/asm/page.h | 3 +-
2267 arch/arm/include/asm/pgalloc.h | 20 +
2268 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
2269 arch/arm/include/asm/pgtable-2level.h | 3 +
2270 arch/arm/include/asm/pgtable-3level.h | 3 +
2271 arch/arm/include/asm/pgtable.h | 54 +-
2272 arch/arm/include/asm/smp.h | 2 +-
2273 arch/arm/include/asm/thread_info.h | 3 +
2274 arch/arm/include/asm/tls.h | 3 +
2275 arch/arm/include/asm/uaccess.h | 113 +-
2276 arch/arm/include/uapi/asm/ptrace.h | 2 +-
2277 arch/arm/kernel/armksyms.c | 2 +-
2278 arch/arm/kernel/cpuidle.c | 2 +-
2279 arch/arm/kernel/entry-armv.S | 109 +-
2280 arch/arm/kernel/entry-common.S | 40 +-
2281 arch/arm/kernel/entry-header.S | 55 +
2282 arch/arm/kernel/fiq.c | 3 +
2283 arch/arm/kernel/module-plts.c | 7 +-
2284 arch/arm/kernel/module.c | 38 +-
2285 arch/arm/kernel/patch.c | 2 +
2286 arch/arm/kernel/process.c | 92 +-
2287 arch/arm/kernel/reboot.c | 1 +
2288 arch/arm/kernel/setup.c | 20 +-
2289 arch/arm/kernel/signal.c | 35 +-
2290 arch/arm/kernel/smp.c | 2 +-
2291 arch/arm/kernel/tcm.c | 4 +-
2292 arch/arm/kernel/vmlinux.lds.S | 6 +-
2293 arch/arm/kvm/arm.c | 8 +-
2294 arch/arm/lib/copy_page.S | 1 +
2295 arch/arm/lib/csumpartialcopyuser.S | 4 +-
2296 arch/arm/lib/delay.c | 2 +-
2297 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
2298 arch/arm/mach-exynos/suspend.c | 6 +-
2299 arch/arm/mach-mvebu/coherency.c | 4 +-
2300 arch/arm/mach-omap2/board-n8x0.c | 2 +-
2301 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
2302 arch/arm/mach-omap2/omap-smp.c | 1 +
2303 arch/arm/mach-omap2/omap_device.c | 4 +-
2304 arch/arm/mach-omap2/omap_device.h | 4 +-
2305 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
2306 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
2307 arch/arm/mach-omap2/wd_timer.c | 6 +-
2308 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
2309 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
2310 arch/arm/mach-tegra/irq.c | 1 +
2311 arch/arm/mach-ux500/pm.c | 1 +
2312 arch/arm/mach-zynq/platsmp.c | 1 +
2313 arch/arm/mm/Kconfig | 6 +-
2314 arch/arm/mm/cache-l2x0.c | 2 +-
2315 arch/arm/mm/context.c | 10 +-
2316 arch/arm/mm/fault.c | 146 +
2317 arch/arm/mm/fault.h | 12 +
2318 arch/arm/mm/init.c | 39 +
2319 arch/arm/mm/ioremap.c | 4 +-
2320 arch/arm/mm/mmap.c | 36 +-
2321 arch/arm/mm/mmu.c | 162 +-
2322 arch/arm/net/bpf_jit_32.c | 3 +
2323 arch/arm/plat-iop/setup.c | 2 +-
2324 arch/arm/plat-omap/sram.c | 2 +
2325 arch/arm64/include/asm/atomic.h | 10 +
2326 arch/arm64/include/asm/percpu.h | 8 +-
2327 arch/arm64/include/asm/pgalloc.h | 5 +
2328 arch/arm64/include/asm/uaccess.h | 1 +
2329 arch/arm64/mm/dma-mapping.c | 2 +-
2330 arch/avr32/include/asm/elf.h | 8 +-
2331 arch/avr32/include/asm/kmap_types.h | 4 +-
2332 arch/avr32/mm/fault.c | 27 +
2333 arch/frv/include/asm/atomic.h | 10 +
2334 arch/frv/include/asm/kmap_types.h | 2 +-
2335 arch/frv/mm/elf-fdpic.c | 3 +-
2336 arch/ia64/Makefile | 1 +
2337 arch/ia64/include/asm/atomic.h | 10 +
2338 arch/ia64/include/asm/elf.h | 7 +
2339 arch/ia64/include/asm/pgalloc.h | 12 +
2340 arch/ia64/include/asm/pgtable.h | 13 +-
2341 arch/ia64/include/asm/spinlock.h | 2 +-
2342 arch/ia64/include/asm/uaccess.h | 27 +-
2343 arch/ia64/kernel/module.c | 20 +-
2344 arch/ia64/kernel/palinfo.c | 2 +-
2345 arch/ia64/kernel/sys_ia64.c | 7 +
2346 arch/ia64/kernel/vmlinux.lds.S | 2 +-
2347 arch/ia64/mm/fault.c | 32 +-
2348 arch/ia64/mm/init.c | 15 +-
2349 arch/m32r/lib/usercopy.c | 6 +
2350 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
2351 arch/mips/include/asm/atomic.h | 372 +-
2352 arch/mips/include/asm/cache.h | 3 +-
2353 arch/mips/include/asm/elf.h | 7 +
2354 arch/mips/include/asm/exec.h | 2 +-
2355 arch/mips/include/asm/hw_irq.h | 2 +-
2356 arch/mips/include/asm/local.h | 57 +
2357 arch/mips/include/asm/page.h | 2 +-
2358 arch/mips/include/asm/pgalloc.h | 5 +
2359 arch/mips/include/asm/pgtable.h | 3 +
2360 arch/mips/include/asm/uaccess.h | 1 +
2361 arch/mips/kernel/binfmt_elfn32.c | 7 +
2362 arch/mips/kernel/binfmt_elfo32.c | 7 +
2363 arch/mips/kernel/irq-gt641xx.c | 2 +-
2364 arch/mips/kernel/irq.c | 6 +-
2365 arch/mips/kernel/pm-cps.c | 2 +-
2366 arch/mips/kernel/process.c | 12 -
2367 arch/mips/kernel/sync-r4k.c | 24 +-
2368 arch/mips/kernel/traps.c | 13 +-
2369 arch/mips/lib/ashldi3.c | 21 +-
2370 arch/mips/lib/ashrdi3.c | 19 +-
2371 arch/mips/lib/libgcc.h | 12 +-
2372 arch/mips/mm/fault.c | 25 +
2373 arch/mips/mm/init.c | 4 +-
2374 arch/mips/mm/mmap.c | 51 +-
2375 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
2376 arch/mips/sni/rm200.c | 2 +-
2377 arch/mips/vr41xx/common/icu.c | 2 +-
2378 arch/mips/vr41xx/common/irq.c | 4 +-
2379 arch/parisc/include/asm/atomic.h | 10 +
2380 arch/parisc/include/asm/elf.h | 7 +
2381 arch/parisc/include/asm/pgalloc.h | 6 +
2382 arch/parisc/include/asm/pgtable.h | 11 +
2383 arch/parisc/include/asm/uaccess.h | 4 +-
2384 arch/parisc/kernel/module.c | 26 +-
2385 arch/parisc/kernel/sys_parisc.c | 15 +
2386 arch/parisc/kernel/traps.c | 4 +-
2387 arch/parisc/mm/fault.c | 140 +-
2388 arch/powerpc/include/asm/atomic.h | 329 +-
2389 arch/powerpc/include/asm/book3s/32/hash.h | 1 +
2390 arch/powerpc/include/asm/elf.h | 12 +
2391 arch/powerpc/include/asm/exec.h | 2 +-
2392 arch/powerpc/include/asm/kmap_types.h | 2 +-
2393 arch/powerpc/include/asm/local.h | 46 +
2394 arch/powerpc/include/asm/mman.h | 2 +-
2395 arch/powerpc/include/asm/page.h | 8 +-
2396 arch/powerpc/include/asm/page_64.h | 7 +-
2397 arch/powerpc/include/asm/pgalloc-64.h | 7 +
2398 arch/powerpc/include/asm/pgtable.h | 1 +
2399 arch/powerpc/include/asm/reg.h | 1 +
2400 arch/powerpc/include/asm/smp.h | 2 +-
2401 arch/powerpc/include/asm/spinlock.h | 42 +-
2402 arch/powerpc/include/asm/uaccess.h | 141 +-
2403 arch/powerpc/kernel/Makefile | 5 +
2404 arch/powerpc/kernel/exceptions-64e.S | 4 +-
2405 arch/powerpc/kernel/exceptions-64s.S | 2 +-
2406 arch/powerpc/kernel/module_32.c | 15 +-
2407 arch/powerpc/kernel/process.c | 46 -
2408 arch/powerpc/kernel/signal_32.c | 2 +-
2409 arch/powerpc/kernel/signal_64.c | 2 +-
2410 arch/powerpc/kernel/traps.c | 21 +
2411 arch/powerpc/kernel/vdso.c | 5 +-
2412 arch/powerpc/lib/usercopy_64.c | 18 -
2413 arch/powerpc/mm/fault.c | 56 +-
2414 arch/powerpc/mm/mmap.c | 16 +
2415 arch/powerpc/mm/slice.c | 21 +-
2416 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
2417 arch/s390/include/asm/atomic.h | 10 +
2418 arch/s390/include/asm/elf.h | 7 +
2419 arch/s390/include/asm/exec.h | 2 +-
2420 arch/s390/include/asm/uaccess.h | 13 +-
2421 arch/s390/kernel/module.c | 22 +-
2422 arch/s390/kernel/process.c | 20 -
2423 arch/s390/mm/mmap.c | 22 +-
2424 arch/score/include/asm/exec.h | 2 +-
2425 arch/score/kernel/process.c | 5 -
2426 arch/sh/mm/mmap.c | 28 +-
2427 arch/sparc/include/asm/atomic_64.h | 110 +-
2428 arch/sparc/include/asm/cache.h | 2 +-
2429 arch/sparc/include/asm/elf_32.h | 7 +
2430 arch/sparc/include/asm/elf_64.h | 7 +
2431 arch/sparc/include/asm/pgalloc_32.h | 1 +
2432 arch/sparc/include/asm/pgalloc_64.h | 1 +
2433 arch/sparc/include/asm/pgtable.h | 4 +
2434 arch/sparc/include/asm/pgtable_32.h | 15 +-
2435 arch/sparc/include/asm/pgtsrmmu.h | 5 +
2436 arch/sparc/include/asm/setup.h | 4 +-
2437 arch/sparc/include/asm/spinlock_64.h | 35 +-
2438 arch/sparc/include/asm/thread_info_32.h | 1 +
2439 arch/sparc/include/asm/thread_info_64.h | 2 +
2440 arch/sparc/include/asm/uaccess.h | 1 +
2441 arch/sparc/include/asm/uaccess_32.h | 28 +-
2442 arch/sparc/include/asm/uaccess_64.h | 24 +-
2443 arch/sparc/kernel/Makefile | 2 +-
2444 arch/sparc/kernel/prom_common.c | 2 +-
2445 arch/sparc/kernel/smp_64.c | 8 +-
2446 arch/sparc/kernel/sys_sparc_32.c | 2 +-
2447 arch/sparc/kernel/sys_sparc_64.c | 58 +-
2448 arch/sparc/kernel/traps_64.c | 27 +-
2449 arch/sparc/lib/Makefile | 2 +-
2450 arch/sparc/lib/atomic_64.S | 57 +-
2451 arch/sparc/lib/ksyms.c | 6 +-
2452 arch/sparc/mm/Makefile | 2 +-
2453 arch/sparc/mm/fault_32.c | 292 +
2454 arch/sparc/mm/fault_64.c | 486 +
2455 arch/sparc/mm/hugetlbpage.c | 30 +-
2456 arch/sparc/mm/init_64.c | 10 +-
2457 arch/tile/include/asm/atomic_64.h | 10 +
2458 arch/tile/include/asm/uaccess.h | 4 +-
2459 arch/um/Makefile | 4 +
2460 arch/um/include/asm/kmap_types.h | 2 +-
2461 arch/um/include/asm/page.h | 3 +
2462 arch/um/include/asm/pgtable-3level.h | 1 +
2463 arch/um/kernel/process.c | 16 -
2464 arch/x86/Kconfig | 26 +-
2465 arch/x86/Kconfig.cpu | 6 +-
2466 arch/x86/Kconfig.debug | 4 +-
2467 arch/x86/Makefile | 13 +-
2468 arch/x86/boot/Makefile | 3 +
2469 arch/x86/boot/bitops.h | 4 +-
2470 arch/x86/boot/boot.h | 2 +-
2471 arch/x86/boot/compressed/Makefile | 20 +
2472 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
2473 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
2474 arch/x86/boot/compressed/head_32.S | 4 +-
2475 arch/x86/boot/compressed/head_64.S | 12 +-
2476 arch/x86/boot/compressed/misc.c | 11 +-
2477 arch/x86/boot/cpucheck.c | 16 +-
2478 arch/x86/boot/header.S | 6 +-
2479 arch/x86/boot/memory.c | 2 +-
2480 arch/x86/boot/video-vesa.c | 1 +
2481 arch/x86/boot/video.c | 2 +-
2482 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
2483 arch/x86/crypto/aesni-intel_asm.S | 110 +-
2484 arch/x86/crypto/aesni-intel_glue.c | 4 +-
2485 arch/x86/crypto/blowfish-x86_64-asm_64.S | 11 +-
2486 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 22 +-
2487 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 22 +-
2488 arch/x86/crypto/camellia-x86_64-asm_64.S | 11 +-
2489 arch/x86/crypto/camellia_aesni_avx2_glue.c | 18 +-
2490 arch/x86/crypto/camellia_aesni_avx_glue.c | 18 +-
2491 arch/x86/crypto/camellia_glue.c | 8 +-
2492 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 55 +-
2493 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 37 +-
2494 arch/x86/crypto/cast6_avx_glue.c | 16 +-
2495 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 2 +
2496 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
2497 arch/x86/crypto/glue_helper.c | 2 +-
2498 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
2499 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 21 +-
2500 arch/x86/crypto/serpent-avx2-asm_64.S | 21 +-
2501 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
2502 arch/x86/crypto/serpent_avx2_glue.c | 14 +-
2503 arch/x86/crypto/serpent_avx_glue.c | 18 +-
2504 arch/x86/crypto/serpent_sse2_glue.c | 4 +-
2505 arch/x86/crypto/sha1_ssse3_asm.S | 13 +-
2506 arch/x86/crypto/sha1_ssse3_glue.c | 56 +-
2507 arch/x86/crypto/sha256-avx-asm.S | 5 +-
2508 arch/x86/crypto/sha256-avx2-asm.S | 5 +-
2509 arch/x86/crypto/sha256-ssse3-asm.S | 6 +-
2510 arch/x86/crypto/sha256_ssse3_glue.c | 26 +-
2511 arch/x86/crypto/sha512-avx-asm.S | 5 +-
2512 arch/x86/crypto/sha512-avx2-asm.S | 5 +-
2513 arch/x86/crypto/sha512-ssse3-asm.S | 5 +-
2514 arch/x86/crypto/sha512_ssse3_glue.c | 22 +-
2515 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 37 +-
2516 arch/x86/crypto/twofish-i586-asm_32.S | 2 +-
2517 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 6 +-
2518 arch/x86/crypto/twofish-x86_64-asm_64.S | 7 +-
2519 arch/x86/crypto/twofish_avx_glue.c | 21 +-
2520 arch/x86/crypto/twofish_glue.c | 4 +-
2521 arch/x86/crypto/twofish_glue_3way.c | 12 +-
2522 arch/x86/entry/Makefile | 2 +
2523 arch/x86/entry/calling.h | 86 +-
2524 arch/x86/entry/common.c | 70 +-
2525 arch/x86/entry/entry_32.S | 311 +-
2526 arch/x86/entry/entry_64.S | 629 +-
2527 arch/x86/entry/entry_64_compat.S | 115 +-
2528 arch/x86/entry/thunk_64.S | 2 +
2529 arch/x86/entry/vdso/Makefile | 5 +-
2530 arch/x86/entry/vdso/vclock_gettime.c | 2 +-
2531 arch/x86/entry/vdso/vdso2c.h | 8 +-
2532 arch/x86/entry/vdso/vma.c | 37 +-
2533 arch/x86/entry/vsyscall/vsyscall_64.c | 20 +-
2534 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
2535 arch/x86/ia32/ia32_signal.c | 23 +-
2536 arch/x86/ia32/sys_ia32.c | 42 +-
2537 arch/x86/include/asm/alternative-asm.h | 51 +-
2538 arch/x86/include/asm/alternative.h | 4 +-
2539 arch/x86/include/asm/apic.h | 2 +-
2540 arch/x86/include/asm/apm.h | 4 +-
2541 arch/x86/include/asm/atomic.h | 230 +-
2542 arch/x86/include/asm/atomic64_32.h | 100 +
2543 arch/x86/include/asm/atomic64_64.h | 164 +-
2544 arch/x86/include/asm/bitops.h | 18 +-
2545 arch/x86/include/asm/boot.h | 2 +-
2546 arch/x86/include/asm/cache.h | 5 +-
2547 arch/x86/include/asm/checksum_32.h | 12 +-
2548 arch/x86/include/asm/cmpxchg.h | 39 +
2549 arch/x86/include/asm/compat.h | 4 +
2550 arch/x86/include/asm/cpufeature.h | 16 +-
2551 arch/x86/include/asm/crypto/camellia.h | 30 +-
2552 arch/x86/include/asm/crypto/glue_helper.h | 10 +-
2553 arch/x86/include/asm/crypto/serpent-avx.h | 18 +-
2554 arch/x86/include/asm/crypto/serpent-sse2.h | 8 +-
2555 arch/x86/include/asm/crypto/twofish.h | 10 +-
2556 arch/x86/include/asm/desc.h | 78 +-
2557 arch/x86/include/asm/desc_defs.h | 6 +
2558 arch/x86/include/asm/div64.h | 2 +-
2559 arch/x86/include/asm/dma.h | 2 +
2560 arch/x86/include/asm/elf.h | 33 +-
2561 arch/x86/include/asm/emergency-restart.h | 2 +-
2562 arch/x86/include/asm/fpu/internal.h | 38 +-
2563 arch/x86/include/asm/fpu/types.h | 5 +-
2564 arch/x86/include/asm/futex.h | 14 +-
2565 arch/x86/include/asm/hw_irq.h | 4 +-
2566 arch/x86/include/asm/hypervisor.h | 2 +-
2567 arch/x86/include/asm/i8259.h | 2 +-
2568 arch/x86/include/asm/io.h | 22 +-
2569 arch/x86/include/asm/irqflags.h | 5 +
2570 arch/x86/include/asm/kprobes.h | 9 +-
2571 arch/x86/include/asm/kvm_emulate.h | 7 +-
2572 arch/x86/include/asm/local.h | 106 +-
2573 arch/x86/include/asm/mman.h | 15 +
2574 arch/x86/include/asm/mmu.h | 14 +-
2575 arch/x86/include/asm/mmu_context.h | 133 +-
2576 arch/x86/include/asm/module.h | 23 +-
2577 arch/x86/include/asm/nmi.h | 19 +-
2578 arch/x86/include/asm/page.h | 1 +
2579 arch/x86/include/asm/page_32.h | 12 +-
2580 arch/x86/include/asm/page_64.h | 14 +-
2581 arch/x86/include/asm/paravirt.h | 46 +-
2582 arch/x86/include/asm/paravirt_types.h | 13 +-
2583 arch/x86/include/asm/pgalloc.h | 23 +
2584 arch/x86/include/asm/pgtable-2level.h | 2 +
2585 arch/x86/include/asm/pgtable-3level.h | 7 +
2586 arch/x86/include/asm/pgtable.h | 126 +-
2587 arch/x86/include/asm/pgtable_32.h | 14 +-
2588 arch/x86/include/asm/pgtable_32_types.h | 24 +-
2589 arch/x86/include/asm/pgtable_64.h | 23 +-
2590 arch/x86/include/asm/pgtable_64_types.h | 5 +
2591 arch/x86/include/asm/pgtable_types.h | 27 +-
2592 arch/x86/include/asm/pmem.h | 2 +-
2593 arch/x86/include/asm/preempt.h | 2 +-
2594 arch/x86/include/asm/processor.h | 57 +-
2595 arch/x86/include/asm/ptrace.h | 15 +-
2596 arch/x86/include/asm/realmode.h | 4 +-
2597 arch/x86/include/asm/reboot.h | 10 +-
2598 arch/x86/include/asm/rmwcc.h | 84 +-
2599 arch/x86/include/asm/rwsem.h | 60 +-
2600 arch/x86/include/asm/segment.h | 27 +-
2601 arch/x86/include/asm/smap.h | 43 +
2602 arch/x86/include/asm/smp.h | 14 +-
2603 arch/x86/include/asm/stackprotector.h | 4 +-
2604 arch/x86/include/asm/stacktrace.h | 34 +-
2605 arch/x86/include/asm/switch_to.h | 4 +-
2606 arch/x86/include/asm/sys_ia32.h | 6 +-
2607 arch/x86/include/asm/thread_info.h | 27 +-
2608 arch/x86/include/asm/tlbflush.h | 77 +-
2609 arch/x86/include/asm/traps.h | 4 +-
2610 arch/x86/include/asm/uaccess.h | 210 +-
2611 arch/x86/include/asm/uaccess_32.h | 28 +-
2612 arch/x86/include/asm/uaccess_64.h | 169 +-
2613 arch/x86/include/asm/word-at-a-time.h | 2 +-
2614 arch/x86/include/asm/x86_init.h | 10 +-
2615 arch/x86/include/asm/xen/page.h | 2 +-
2616 arch/x86/include/uapi/asm/e820.h | 2 +-
2617 arch/x86/kernel/Makefile | 2 +-
2618 arch/x86/kernel/acpi/boot.c | 4 +-
2619 arch/x86/kernel/acpi/sleep.c | 4 +
2620 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
2621 arch/x86/kernel/alternative.c | 124 +-
2622 arch/x86/kernel/apic/apic.c | 4 +-
2623 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
2624 arch/x86/kernel/apic/apic_noop.c | 2 +-
2625 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
2626 arch/x86/kernel/apic/io_apic.c | 10 +-
2627 arch/x86/kernel/apic/msi.c | 2 +-
2628 arch/x86/kernel/apic/probe_32.c | 4 +-
2629 arch/x86/kernel/apic/vector.c | 2 +
2630 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
2631 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
2632 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
2633 arch/x86/kernel/apm_32.c | 21 +-
2634 arch/x86/kernel/asm-offsets.c | 20 +
2635 arch/x86/kernel/asm-offsets_64.c | 1 +
2636 arch/x86/kernel/cpu/Makefile | 4 -
2637 arch/x86/kernel/cpu/amd.c | 2 +-
2638 arch/x86/kernel/cpu/bugs_64.c | 2 +
2639 arch/x86/kernel/cpu/common.c | 202 +-
2640 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
2641 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
2642 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
2643 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
2644 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
2645 arch/x86/kernel/cpu/mshyperv.c | 2 +-
2646 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
2647 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
2648 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
2649 arch/x86/kernel/cpu/perf_event.c | 10 +-
2650 arch/x86/kernel/cpu/perf_event.h | 2 +-
2651 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 8 +-
2652 arch/x86/kernel/cpu/perf_event_intel.c | 34 +-
2653 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
2654 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
2655 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
2656 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
2657 arch/x86/kernel/cpu/perf_event_intel_pt.c | 42 +-
2658 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 8 +-
2659 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 6 +-
2660 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 14 +-
2661 arch/x86/kernel/cpu/vmware.c | 2 +-
2662 arch/x86/kernel/crash_dump_64.c | 2 +-
2663 arch/x86/kernel/doublefault.c | 8 +-
2664 arch/x86/kernel/dumpstack.c | 24 +-
2665 arch/x86/kernel/dumpstack_32.c | 25 +-
2666 arch/x86/kernel/dumpstack_64.c | 72 +-
2667 arch/x86/kernel/e820.c | 4 +-
2668 arch/x86/kernel/early_printk.c | 1 +
2669 arch/x86/kernel/espfix_64.c | 44 +-
2670 arch/x86/kernel/fpu/core.c | 24 +-
2671 arch/x86/kernel/fpu/init.c | 49 +-
2672 arch/x86/kernel/fpu/regset.c | 22 +-
2673 arch/x86/kernel/fpu/signal.c | 20 +-
2674 arch/x86/kernel/fpu/xstate.c | 6 +-
2675 arch/x86/kernel/ftrace.c | 18 +-
2676 arch/x86/kernel/head64.c | 14 +-
2677 arch/x86/kernel/head_32.S | 237 +-
2678 arch/x86/kernel/head_64.S | 173 +-
2679 arch/x86/kernel/i386_ksyms_32.c | 12 +
2680 arch/x86/kernel/i8259.c | 10 +-
2681 arch/x86/kernel/io_delay.c | 2 +-
2682 arch/x86/kernel/ioport.c | 2 +-
2683 arch/x86/kernel/irq.c | 8 +-
2684 arch/x86/kernel/irq_32.c | 45 +-
2685 arch/x86/kernel/jump_label.c | 10 +-
2686 arch/x86/kernel/kgdb.c | 21 +-
2687 arch/x86/kernel/kprobes/core.c | 28 +-
2688 arch/x86/kernel/kprobes/opt.c | 16 +-
2689 arch/x86/kernel/ksysfs.c | 2 +-
2690 arch/x86/kernel/kvm.c | 2 +-
2691 arch/x86/kernel/kvmclock.c | 20 +-
2692 arch/x86/kernel/ldt.c | 25 +
2693 arch/x86/kernel/livepatch.c | 9 +-
2694 arch/x86/kernel/machine_kexec_32.c | 6 +-
2695 arch/x86/kernel/mcount_64.S | 21 +-
2696 arch/x86/kernel/module.c | 78 +-
2697 arch/x86/kernel/msr.c | 2 +-
2698 arch/x86/kernel/nmi.c | 34 +-
2699 arch/x86/kernel/nmi_selftest.c | 4 +-
2700 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
2701 arch/x86/kernel/paravirt.c | 43 +-
2702 arch/x86/kernel/paravirt_patch_64.c | 8 +
2703 arch/x86/kernel/pci-calgary_64.c | 2 +-
2704 arch/x86/kernel/pci-iommu_table.c | 2 +-
2705 arch/x86/kernel/pci-swiotlb.c | 2 +-
2706 arch/x86/kernel/process.c | 80 +-
2707 arch/x86/kernel/process_32.c | 29 +-
2708 arch/x86/kernel/process_64.c | 14 +-
2709 arch/x86/kernel/ptrace.c | 20 +-
2710 arch/x86/kernel/pvclock.c | 8 +-
2711 arch/x86/kernel/reboot.c | 44 +-
2712 arch/x86/kernel/reboot_fixups_32.c | 2 +-
2713 arch/x86/kernel/relocate_kernel_64.S | 3 +-
2714 arch/x86/kernel/setup.c | 29 +-
2715 arch/x86/kernel/setup_percpu.c | 29 +-
2716 arch/x86/kernel/signal.c | 17 +-
2717 arch/x86/kernel/smp.c | 2 +-
2718 arch/x86/kernel/smpboot.c | 29 +-
2719 arch/x86/kernel/step.c | 6 +-
2720 arch/x86/kernel/sys_i386_32.c | 184 +
2721 arch/x86/kernel/sys_x86_64.c | 28 +-
2722 arch/x86/kernel/tboot.c | 22 +-
2723 arch/x86/kernel/time.c | 8 +-
2724 arch/x86/kernel/tls.c | 7 +-
2725 arch/x86/kernel/tracepoint.c | 4 +-
2726 arch/x86/kernel/traps.c | 64 +-
2727 arch/x86/kernel/tsc.c | 2 +-
2728 arch/x86/kernel/uprobes.c | 4 +-
2729 arch/x86/kernel/vm86_32.c | 6 +-
2730 arch/x86/kernel/vmlinux.lds.S | 153 +-
2731 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
2732 arch/x86/kernel/x86_init.c | 6 +-
2733 arch/x86/kvm/cpuid.c | 21 +-
2734 arch/x86/kvm/emulate.c | 20 +-
2735 arch/x86/kvm/i8259.c | 10 +-
2736 arch/x86/kvm/ioapic.c | 2 +
2737 arch/x86/kvm/lapic.c | 2 +-
2738 arch/x86/kvm/paging_tmpl.h | 2 +-
2739 arch/x86/kvm/svm.c | 10 +-
2740 arch/x86/kvm/vmx.c | 60 +-
2741 arch/x86/kvm/x86.c | 44 +-
2742 arch/x86/lguest/boot.c | 3 +-
2743 arch/x86/lib/atomic64_386_32.S | 164 +
2744 arch/x86/lib/atomic64_cx8_32.S | 98 +-
2745 arch/x86/lib/checksum_32.S | 99 +-
2746 arch/x86/lib/clear_page_64.S | 3 +
2747 arch/x86/lib/cmpxchg16b_emu.S | 3 +
2748 arch/x86/lib/copy_page_64.S | 14 +-
2749 arch/x86/lib/copy_user_64.S | 66 +-
2750 arch/x86/lib/csum-copy_64.S | 14 +-
2751 arch/x86/lib/csum-wrappers_64.c | 8 +-
2752 arch/x86/lib/getuser.S | 74 +-
2753 arch/x86/lib/insn.c | 8 +-
2754 arch/x86/lib/iomap_copy_64.S | 2 +
2755 arch/x86/lib/memcpy_64.S | 6 +
2756 arch/x86/lib/memmove_64.S | 3 +-
2757 arch/x86/lib/memset_64.S | 3 +
2758 arch/x86/lib/mmx_32.c | 243 +-
2759 arch/x86/lib/msr-reg.S | 2 +
2760 arch/x86/lib/putuser.S | 87 +-
2761 arch/x86/lib/rwsem.S | 6 +-
2762 arch/x86/lib/usercopy_32.c | 359 +-
2763 arch/x86/lib/usercopy_64.c | 22 +-
2764 arch/x86/math-emu/fpu_aux.c | 2 +-
2765 arch/x86/math-emu/fpu_entry.c | 4 +-
2766 arch/x86/math-emu/fpu_system.h | 2 +-
2767 arch/x86/mm/Makefile | 4 +
2768 arch/x86/mm/extable.c | 26 +-
2769 arch/x86/mm/fault.c | 570 +-
2770 arch/x86/mm/gup.c | 6 +-
2771 arch/x86/mm/highmem_32.c | 6 +
2772 arch/x86/mm/hugetlbpage.c | 24 +-
2773 arch/x86/mm/init.c | 111 +-
2774 arch/x86/mm/init_32.c | 111 +-
2775 arch/x86/mm/init_64.c | 46 +-
2776 arch/x86/mm/iomap_32.c | 4 +
2777 arch/x86/mm/ioremap.c | 52 +-
2778 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
2779 arch/x86/mm/mmap.c | 40 +-
2780 arch/x86/mm/mmio-mod.c | 10 +-
2781 arch/x86/mm/mpx.c | 6 +-
2782 arch/x86/mm/numa.c | 2 +-
2783 arch/x86/mm/pageattr.c | 42 +-
2784 arch/x86/mm/pat.c | 12 +-
2785 arch/x86/mm/pat_rbtree.c | 2 +-
2786 arch/x86/mm/pf_in.c | 10 +-
2787 arch/x86/mm/pgtable.c | 209 +-
2788 arch/x86/mm/pgtable_32.c | 3 +
2789 arch/x86/mm/setup_nx.c | 7 +
2790 arch/x86/mm/tlb.c | 4 +
2791 arch/x86/mm/uderef_64.c | 37 +
2792 arch/x86/net/bpf_jit.S | 11 +
2793 arch/x86/net/bpf_jit_comp.c | 13 +-
2794 arch/x86/oprofile/backtrace.c | 6 +-
2795 arch/x86/oprofile/nmi_int.c | 10 +-
2796 arch/x86/oprofile/op_model_amd.c | 8 +-
2797 arch/x86/oprofile/op_model_ppro.c | 7 +-
2798 arch/x86/oprofile/op_x86_model.h | 2 +-
2799 arch/x86/pci/intel_mid_pci.c | 2 +-
2800 arch/x86/pci/irq.c | 8 +-
2801 arch/x86/pci/pcbios.c | 112 +-
2802 arch/x86/pci/vmd.c | 4 +-
2803 arch/x86/platform/efi/efi_32.c | 24 +
2804 arch/x86/platform/efi/efi_64.c | 26 +-
2805 arch/x86/platform/efi/efi_stub_32.S | 64 +-
2806 arch/x86/platform/efi/efi_stub_64.S | 2 +
2807 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
2808 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
2809 arch/x86/platform/intel-mid/mfld.c | 4 +-
2810 arch/x86/platform/intel-mid/mrfl.c | 2 +-
2811 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
2812 arch/x86/platform/olpc/olpc_dt.c | 2 +-
2813 arch/x86/power/cpu.c | 11 +-
2814 arch/x86/realmode/init.c | 10 +-
2815 arch/x86/realmode/rm/Makefile | 3 +
2816 arch/x86/realmode/rm/header.S | 4 +-
2817 arch/x86/realmode/rm/reboot.S | 4 +
2818 arch/x86/realmode/rm/trampoline_32.S | 12 +-
2819 arch/x86/realmode/rm/trampoline_64.S | 3 +-
2820 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
2821 arch/x86/tools/Makefile | 2 +-
2822 arch/x86/tools/relocs.c | 97 +-
2823 arch/x86/um/mem_32.c | 2 +-
2824 arch/x86/um/tls_32.c | 2 +-
2825 arch/x86/xen/enlighten.c | 52 +-
2826 arch/x86/xen/mmu.c | 19 +-
2827 arch/x86/xen/smp.c | 16 +-
2828 arch/x86/xen/xen-asm_32.S | 2 +-
2829 arch/x86/xen/xen-head.S | 11 +
2830 arch/x86/xen/xen-ops.h | 2 -
2831 block/bio.c | 4 +-
2832 block/blk-cgroup.c | 18 +-
2833 block/blk-map.c | 2 +-
2834 block/blk-softirq.c | 2 +-
2835 block/bsg.c | 12 +-
2836 block/cfq-iosched.c | 4 +-
2837 block/compat_ioctl.c | 4 +-
2838 block/genhd.c | 9 +-
2839 block/partitions/efi.c | 8 +-
2840 block/scsi_ioctl.c | 29 +-
2841 crypto/cast6_generic.c | 6 +-
2842 crypto/cryptd.c | 4 +-
2843 crypto/crypto_user.c | 2 +-
2844 crypto/pcrypt.c | 2 +-
2845 crypto/salsa20_generic.c | 16 +-
2846 crypto/serpent_generic.c | 6 +-
2847 crypto/zlib.c | 12 +-
2848 drivers/acpi/ac.c | 2 +-
2849 drivers/acpi/acpi_video.c | 2 +-
2850 drivers/acpi/apei/apei-internal.h | 2 +-
2851 drivers/acpi/apei/ghes.c | 10 +-
2852 drivers/acpi/battery.c | 2 +-
2853 drivers/acpi/bgrt.c | 6 +-
2854 drivers/acpi/blacklist.c | 4 +-
2855 drivers/acpi/bus.c | 4 +-
2856 drivers/acpi/device_pm.c | 4 +-
2857 drivers/acpi/ec.c | 6 +-
2858 drivers/acpi/pci_slot.c | 2 +-
2859 drivers/acpi/processor_idle.c | 2 +-
2860 drivers/acpi/processor_pdc.c | 2 +-
2861 drivers/acpi/sleep.c | 2 +-
2862 drivers/acpi/sysfs.c | 14 +-
2863 drivers/acpi/thermal.c | 2 +-
2864 drivers/acpi/video_detect.c | 7 +-
2865 drivers/android/binder.c | 2 +-
2866 drivers/ata/libata-core.c | 12 +-
2867 drivers/ata/libata-scsi.c | 2 +-
2868 drivers/ata/libata.h | 2 +-
2869 drivers/ata/pata_arasan_cf.c | 4 +-
2870 drivers/atm/adummy.c | 2 +-
2871 drivers/atm/ambassador.c | 8 +-
2872 drivers/atm/atmtcp.c | 14 +-
2873 drivers/atm/eni.c | 10 +-
2874 drivers/atm/firestream.c | 8 +-
2875 drivers/atm/fore200e.c | 14 +-
2876 drivers/atm/he.c | 18 +-
2877 drivers/atm/horizon.c | 4 +-
2878 drivers/atm/idt77252.c | 36 +-
2879 drivers/atm/iphase.c | 34 +-
2880 drivers/atm/lanai.c | 12 +-
2881 drivers/atm/nicstar.c | 46 +-
2882 drivers/atm/solos-pci.c | 4 +-
2883 drivers/atm/suni.c | 4 +-
2884 drivers/atm/uPD98402.c | 16 +-
2885 drivers/atm/zatm.c | 6 +-
2886 drivers/base/bus.c | 4 +-
2887 drivers/base/devres.c | 4 +-
2888 drivers/base/devtmpfs.c | 8 +-
2889 drivers/base/node.c | 2 +-
2890 drivers/base/platform-msi.c | 20 +-
2891 drivers/base/power/domain.c | 6 +-
2892 drivers/base/power/runtime.c | 61 +-
2893 drivers/base/power/sysfs.c | 2 +-
2894 drivers/base/power/wakeup.c | 8 +-
2895 drivers/base/regmap/regmap-debugfs.c | 4 +-
2896 drivers/base/regmap/regmap.c | 4 +-
2897 drivers/base/syscore.c | 4 +-
2898 drivers/block/cciss.c | 28 +-
2899 drivers/block/cciss.h | 2 +-
2900 drivers/block/cpqarray.c | 28 +-
2901 drivers/block/cpqarray.h | 2 +-
2902 drivers/block/drbd/drbd_bitmap.c | 2 +-
2903 drivers/block/drbd/drbd_int.h | 8 +-
2904 drivers/block/drbd/drbd_main.c | 12 +-
2905 drivers/block/drbd/drbd_nl.c | 16 +-
2906 drivers/block/drbd/drbd_receiver.c | 38 +-
2907 drivers/block/drbd/drbd_state.c | 12 +-
2908 drivers/block/drbd/drbd_state.h | 2 +-
2909 drivers/block/drbd/drbd_state_change.h | 8 +-
2910 drivers/block/drbd/drbd_worker.c | 14 +-
2911 drivers/block/floppy.c | 8 +-
2912 drivers/block/pktcdvd.c | 4 +-
2913 drivers/block/rbd.c | 2 +-
2914 drivers/bluetooth/btwilink.c | 2 +-
2915 drivers/bus/arm-cci.c | 12 +-
2916 drivers/cdrom/cdrom.c | 11 +-
2917 drivers/cdrom/gdrom.c | 1 -
2918 drivers/char/agp/compat_ioctl.c | 2 +-
2919 drivers/char/agp/frontend.c | 4 +-
2920 drivers/char/agp/intel-gtt.c | 4 +-
2921 drivers/char/hpet.c | 2 +-
2922 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
2923 drivers/char/ipmi/ipmi_poweroff.c | 2 +-
2924 drivers/char/ipmi/ipmi_si_intf.c | 12 +-
2925 drivers/char/ipmi/ipmi_ssif.c | 12 +-
2926 drivers/char/mem.c | 47 +-
2927 drivers/char/nvram.c | 2 +-
2928 drivers/char/pcmcia/synclink_cs.c | 16 +-
2929 drivers/char/random.c | 12 +-
2930 drivers/char/sonypi.c | 11 +-
2931 drivers/char/tpm/tpm_acpi.c | 3 +-
2932 drivers/char/tpm/tpm_eventlog.c | 5 +-
2933 drivers/char/virtio_console.c | 6 +-
2934 drivers/clk/clk-composite.c | 2 +-
2935 drivers/clk/samsung/clk.h | 2 +-
2936 drivers/clk/socfpga/clk-gate.c | 9 +-
2937 drivers/clk/socfpga/clk-pll.c | 9 +-
2938 drivers/clk/ti/clk.c | 8 +-
2939 drivers/cpufreq/acpi-cpufreq.c | 17 +-
2940 drivers/cpufreq/cpufreq-dt.c | 4 +-
2941 drivers/cpufreq/cpufreq.c | 27 +-
2942 drivers/cpufreq/cpufreq_governor.c | 2 +-
2943 drivers/cpufreq/cpufreq_governor.h | 10 +-
2944 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
2945 drivers/cpufreq/intel_pstate.c | 54 +-
2946 drivers/cpufreq/p4-clockmod.c | 12 +-
2947 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
2948 drivers/cpufreq/speedstep-centrino.c | 7 +-
2949 drivers/cpuidle/driver.c | 2 +-
2950 drivers/cpuidle/dt_idle_states.c | 2 +-
2951 drivers/cpuidle/governor.c | 2 +-
2952 drivers/cpuidle/governors/ladder.c | 13 +-
2953 drivers/cpuidle/sysfs.c | 2 +-
2954 drivers/crypto/hifn_795x.c | 4 +-
2955 drivers/crypto/qat/qat_common/adf_aer.c | 2 +-
2956 drivers/crypto/qat/qat_common/adf_sriov.c | 4 +-
2957 drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +-
2958 drivers/devfreq/devfreq.c | 4 +-
2959 drivers/dma/sh/shdma-base.c | 4 +-
2960 drivers/dma/sh/shdmac.c | 2 +-
2961 drivers/edac/edac_device.c | 4 +-
2962 drivers/edac/edac_device_sysfs.c | 2 +-
2963 drivers/edac/edac_mc_sysfs.c | 4 +-
2964 drivers/edac/edac_module.c | 2 +-
2965 drivers/edac/edac_pci.c | 4 +-
2966 drivers/edac/edac_pci_sysfs.c | 22 +-
2967 drivers/edac/mce_amd.h | 2 +-
2968 drivers/firewire/core-card.c | 6 +-
2969 drivers/firewire/core-cdev.c | 4 +-
2970 drivers/firewire/core-device.c | 2 +-
2971 drivers/firewire/core-iso.c | 2 +-
2972 drivers/firewire/core-transaction.c | 1 +
2973 drivers/firewire/core.h | 1 +
2974 drivers/firmware/dmi-id.c | 9 +-
2975 drivers/firmware/dmi_scan.c | 12 +-
2976 drivers/firmware/efi/cper.c | 8 +-
2977 drivers/firmware/efi/efi.c | 12 +-
2978 drivers/firmware/efi/efivars.c | 2 +-
2979 drivers/firmware/efi/runtime-map.c | 2 +-
2980 drivers/firmware/google/gsmi.c | 2 +-
2981 drivers/firmware/google/memconsole.c | 7 +-
2982 drivers/firmware/memmap.c | 2 +-
2983 drivers/firmware/psci.c | 2 +-
2984 drivers/gpio/gpio-davinci.c | 6 +-
2985 drivers/gpio/gpio-em.c | 2 +-
2986 drivers/gpio/gpio-ich.c | 2 +-
2987 drivers/gpio/gpio-omap.c | 4 +-
2988 drivers/gpio/gpio-rcar.c | 2 +-
2989 drivers/gpio/gpio-vr41xx.c | 2 +-
2990 drivers/gpio/gpiolib.c | 12 +-
2991 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 4 +-
2992 drivers/gpu/drm/amd/amdgpu/amdgpu_atpx_handler.c | 2 +-
2993 drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 8 +-
2994 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
2995 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 18 +-
2996 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
2997 drivers/gpu/drm/amd/amdgpu/fiji_smc.c | 4 +-
2998 drivers/gpu/drm/amd/amdgpu/iceland_smc.c | 4 +-
2999 drivers/gpu/drm/amd/amdgpu/tonga_smc.c | 4 +-
3000 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
3001 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
3002 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
3003 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
3004 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
3005 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
3006 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
3007 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
3008 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
3009 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
3010 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
3011 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
3012 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
3013 drivers/gpu/drm/armada/armada_drv.c | 3 +-
3014 drivers/gpu/drm/ast/ast_mode.c | 2 +-
3015 drivers/gpu/drm/bochs/bochs_kms.c | 2 +-
3016 drivers/gpu/drm/drm_atomic.c | 7 +-
3017 drivers/gpu/drm/drm_crtc.c | 10 +-
3018 drivers/gpu/drm/drm_drv.c | 2 +-
3019 drivers/gpu/drm/drm_fops.c | 12 +-
3020 drivers/gpu/drm/drm_global.c | 14 +-
3021 drivers/gpu/drm/drm_info.c | 13 +-
3022 drivers/gpu/drm/drm_ioc32.c | 13 +-
3023 drivers/gpu/drm/drm_ioctl.c | 2 +-
3024 drivers/gpu/drm/drm_irq.c | 7 +-
3025 drivers/gpu/drm/drm_pci.c | 9 +-
3026 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
3027 drivers/gpu/drm/exynos/exynos_drm_g2d.c | 7 +-
3028 drivers/gpu/drm/gma500/cdv_intel_crt.c | 2 +-
3029 drivers/gpu/drm/gma500/cdv_intel_dp.c | 2 +-
3030 drivers/gpu/drm/gma500/cdv_intel_hdmi.c | 2 +-
3031 drivers/gpu/drm/gma500/cdv_intel_lvds.c | 2 +-
3032 drivers/gpu/drm/gma500/mdfld_dsi_output.c | 8 +-
3033 drivers/gpu/drm/gma500/oaktrail_hdmi.c | 2 +-
3034 drivers/gpu/drm/gma500/psb_drv.c | 1 -
3035 drivers/gpu/drm/gma500/psb_intel_drv.h | 2 +-
3036 drivers/gpu/drm/gma500/psb_intel_lvds.c | 2 +-
3037 drivers/gpu/drm/gma500/psb_intel_sdvo.c | 2 +-
3038 drivers/gpu/drm/i2c/tda998x_drv.c | 2 +-
3039 drivers/gpu/drm/i810/i810_dma.c | 2 +-
3040 drivers/gpu/drm/i810/i810_drv.c | 6 +-
3041 drivers/gpu/drm/i810/i810_drv.h | 6 +-
3042 drivers/gpu/drm/i915/dvo.h | 2 +-
3043 drivers/gpu/drm/i915/i915_dma.c | 4 +-
3044 drivers/gpu/drm/i915/i915_drv.c | 7 +-
3045 drivers/gpu/drm/i915/i915_drv.h | 2 +-
3046 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
3047 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
3048 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
3049 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
3050 drivers/gpu/drm/i915/i915_irq.c | 88 +-
3051 drivers/gpu/drm/i915/intel_display.c | 26 +-
3052 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
3053 drivers/gpu/drm/mga/mga_drv.c | 5 +-
3054 drivers/gpu/drm/mga/mga_drv.h | 6 +-
3055 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
3056 drivers/gpu/drm/mga/mga_irq.c | 8 +-
3057 drivers/gpu/drm/mga/mga_state.c | 2 +-
3058 drivers/gpu/drm/mgag200/mgag200_mode.c | 2 +-
3059 drivers/gpu/drm/nouveau/nouveau_acpi.c | 2 +-
3060 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
3061 drivers/gpu/drm/nouveau/nouveau_connector.c | 2 +-
3062 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 +-
3063 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
3064 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
3065 drivers/gpu/drm/nouveau/nouveau_usif.c | 7 +-
3066 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
3067 drivers/gpu/drm/nouveau/nvkm/subdev/bios/shadow.c | 7 +-
3068 .../gpu/drm/nouveau/nvkm/subdev/bios/shadowpci.c | 7 +-
3069 drivers/gpu/drm/omapdrm/Makefile | 2 +-
3070 drivers/gpu/drm/omapdrm/dss/display.c | 8 +-
3071 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
3072 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
3073 drivers/gpu/drm/qxl/qxl_display.c | 2 +-
3074 drivers/gpu/drm/qxl/qxl_drv.c | 8 +-
3075 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
3076 drivers/gpu/drm/qxl/qxl_ioctl.c | 12 +-
3077 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
3078 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
3079 drivers/gpu/drm/r128/r128_cce.c | 2 +-
3080 drivers/gpu/drm/r128/r128_drv.c | 4 +-
3081 drivers/gpu/drm/r128/r128_drv.h | 6 +-
3082 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
3083 drivers/gpu/drm/r128/r128_irq.c | 4 +-
3084 drivers/gpu/drm/r128/r128_state.c | 6 +-
3085 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
3086 drivers/gpu/drm/radeon/radeon_atpx_handler.c | 2 +-
3087 drivers/gpu/drm/radeon/radeon_connectors.c | 10 +-
3088 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
3089 drivers/gpu/drm/radeon/radeon_drv.c | 11 +-
3090 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
3091 drivers/gpu/drm/radeon/radeon_kms.c | 8 +-
3092 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
3093 drivers/gpu/drm/savage/savage_bci.c | 2 +-
3094 drivers/gpu/drm/savage/savage_drv.c | 5 +-
3095 drivers/gpu/drm/savage/savage_drv.h | 2 +-
3096 drivers/gpu/drm/sis/sis_drv.c | 5 +-
3097 drivers/gpu/drm/sis/sis_drv.h | 2 +-
3098 drivers/gpu/drm/sis/sis_mm.c | 2 +-
3099 drivers/gpu/drm/tegra/dc.c | 2 +-
3100 drivers/gpu/drm/tegra/dsi.c | 2 +-
3101 drivers/gpu/drm/tegra/hdmi.c | 2 +-
3102 drivers/gpu/drm/tegra/sor.c | 7 +-
3103 drivers/gpu/drm/tilcdc/Makefile | 6 +-
3104 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
3105 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
3106 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
3107 drivers/gpu/drm/udl/udl_connector.c | 2 +-
3108 drivers/gpu/drm/udl/udl_fb.c | 1 -
3109 drivers/gpu/drm/vc4/vc4_drv.c | 8 +-
3110 drivers/gpu/drm/via/via_dma.c | 2 +-
3111 drivers/gpu/drm/via/via_drv.c | 5 +-
3112 drivers/gpu/drm/via/via_drv.h | 6 +-
3113 drivers/gpu/drm/via/via_irq.c | 18 +-
3114 drivers/gpu/drm/virtio/virtgpu_display.c | 2 +-
3115 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
3116 drivers/gpu/drm/vmwgfx/vmwgfx_fence.c | 7 +-
3117 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
3118 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
3119 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
3120 drivers/gpu/vga/vga_switcheroo.c | 4 +-
3121 drivers/hid/hid-core.c | 4 +-
3122 drivers/hid/hid-magicmouse.c | 2 +-
3123 drivers/hid/hid-sensor-custom.c | 2 +-
3124 drivers/hv/channel.c | 6 +-
3125 drivers/hv/hv.c | 4 +-
3126 drivers/hv/hv_balloon.c | 18 +-
3127 drivers/hv/hyperv_vmbus.h | 2 +-
3128 drivers/hwmon/acpi_power_meter.c | 6 +-
3129 drivers/hwmon/applesmc.c | 2 +-
3130 drivers/hwmon/asus_atk0110.c | 10 +-
3131 drivers/hwmon/coretemp.c | 2 +-
3132 drivers/hwmon/dell-smm-hwmon.c | 2 +-
3133 drivers/hwmon/ibmaem.c | 2 +-
3134 drivers/hwmon/iio_hwmon.c | 2 +-
3135 drivers/hwmon/nct6683.c | 6 +-
3136 drivers/hwmon/nct6775.c | 6 +-
3137 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
3138 drivers/hwmon/sht15.c | 12 +-
3139 drivers/hwmon/via-cputemp.c | 2 +-
3140 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
3141 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
3142 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
3143 drivers/i2c/i2c-dev.c | 2 +-
3144 drivers/ide/ide-cd.c | 2 +-
3145 drivers/ide/ide-disk.c | 2 +-
3146 drivers/ide/ide.c | 4 +-
3147 drivers/idle/intel_idle.c | 6 +-
3148 drivers/iio/industrialio-core.c | 2 +-
3149 drivers/iio/magnetometer/ak8975.c | 2 +-
3150 drivers/infiniband/core/cm.c | 46 +-
3151 drivers/infiniband/core/fmr_pool.c | 20 +-
3152 drivers/infiniband/core/netlink.c | 5 +-
3153 drivers/infiniband/core/ucm.c | 4 +-
3154 drivers/infiniband/core/uverbs_cmd.c | 3 +
3155 drivers/infiniband/hw/cxgb4/device.c | 6 +-
3156 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
3157 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
3158 drivers/infiniband/hw/mlx4/mad.c | 2 +-
3159 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
3160 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
3161 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
3162 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
3163 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
3164 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
3165 drivers/infiniband/hw/nes/nes.c | 4 +-
3166 drivers/infiniband/hw/nes/nes.h | 40 +-
3167 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
3168 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
3169 drivers/infiniband/hw/nes/nes_nic.c | 42 +-
3170 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
3171 drivers/infiniband/hw/qib/qib.h | 1 +
3172 drivers/infiniband/hw/qib/qib_iba7322.c | 4 +-
3173 drivers/infiniband/hw/qib/qib_pcie.c | 2 +-
3174 drivers/infiniband/ulp/ipoib/ipoib_main.c | 2 +-
3175 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
3176 drivers/infiniband/ulp/srpt/ib_srpt.c | 8 +-
3177 drivers/input/evdev.c | 2 +-
3178 drivers/input/gameport/gameport.c | 4 +-
3179 drivers/input/input.c | 4 +-
3180 drivers/input/joystick/sidewinder.c | 1 +
3181 drivers/input/misc/ims-pcu.c | 4 +-
3182 drivers/input/mouse/psmouse.h | 2 +-
3183 drivers/input/mousedev.c | 2 +-
3184 drivers/input/serio/serio.c | 4 +-
3185 drivers/input/serio/serio_raw.c | 4 +-
3186 drivers/input/touchscreen/htcpen.c | 2 +-
3187 drivers/iommu/arm-smmu-v3.c | 2 +-
3188 drivers/iommu/arm-smmu.c | 42 +-
3189 drivers/iommu/io-pgtable-arm.c | 98 +-
3190 drivers/iommu/io-pgtable.c | 11 +-
3191 drivers/iommu/io-pgtable.h | 21 +-
3192 drivers/iommu/iommu.c | 2 +-
3193 drivers/iommu/ipmmu-vmsa.c | 13 +-
3194 drivers/iommu/irq_remapping.c | 2 +-
3195 drivers/irqchip/irq-gic.c | 2 +-
3196 drivers/irqchip/irq-i8259.c | 2 +-
3197 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
3198 drivers/irqchip/irq-ts4800.c | 2 +-
3199 drivers/isdn/capi/capi.c | 10 +-
3200 drivers/isdn/gigaset/interface.c | 8 +-
3201 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
3202 drivers/isdn/hardware/avm/b1.c | 4 +-
3203 drivers/isdn/hardware/eicon/capifunc.c | 6 +-
3204 drivers/isdn/hardware/eicon/dadapter.c | 18 +-
3205 drivers/isdn/hardware/eicon/diddfunc.c | 7 +-
3206 drivers/isdn/hardware/eicon/divasfunc.c | 9 +-
3207 drivers/isdn/hardware/eicon/divasync.h | 2 +-
3208 drivers/isdn/hardware/eicon/idifunc.c | 9 +-
3209 drivers/isdn/hardware/eicon/mntfunc.c | 13 +-
3210 drivers/isdn/hardware/mISDN/avmfritz.c | 2 +-
3211 drivers/isdn/hardware/mISDN/hfcmulti.c | 7 +-
3212 drivers/isdn/hardware/mISDN/hfcpci.c | 16 +-
3213 drivers/isdn/hardware/mISDN/mISDNinfineon.c | 7 +-
3214 drivers/isdn/hardware/mISDN/mISDNipac.c | 5 +-
3215 drivers/isdn/hardware/mISDN/netjet.c | 2 +-
3216 drivers/isdn/hardware/mISDN/speedfax.c | 7 +-
3217 drivers/isdn/hardware/mISDN/w6692.c | 7 +-
3218 drivers/isdn/hisax/amd7930_fn.c | 5 +-
3219 drivers/isdn/hisax/arcofi.c | 5 +-
3220 drivers/isdn/hisax/diva.c | 7 +-
3221 drivers/isdn/hisax/elsa.c | 9 +-
3222 drivers/isdn/hisax/fsm.c | 5 +-
3223 drivers/isdn/hisax/hfc4s8s_l1.c | 14 +-
3224 drivers/isdn/hisax/hfc_pci.c | 10 +-
3225 drivers/isdn/hisax/hfc_sx.c | 10 +-
3226 drivers/isdn/hisax/hfc_usb.c | 12 +-
3227 drivers/isdn/hisax/icc.c | 5 +-
3228 drivers/isdn/hisax/ipacx.c | 7 +-
3229 drivers/isdn/hisax/isac.c | 5 +-
3230 drivers/isdn/hisax/isar.c | 5 +-
3231 drivers/isdn/hisax/isdnl3.c | 5 +-
3232 drivers/isdn/hisax/w6692.c | 5 +-
3233 drivers/isdn/i4l/isdn_common.c | 2 +
3234 drivers/isdn/i4l/isdn_tty.c | 22 +-
3235 drivers/isdn/icn/icn.c | 2 +-
3236 drivers/isdn/mISDN/dsp.h | 4 +-
3237 drivers/isdn/mISDN/dsp_cmx.c | 4 +-
3238 drivers/isdn/mISDN/dsp_core.c | 4 +-
3239 drivers/isdn/mISDN/dsp_tones.c | 4 +-
3240 drivers/isdn/mISDN/fsm.c | 5 +-
3241 drivers/isdn/mISDN/l1oip_core.c | 8 +-
3242 drivers/lguest/core.c | 9 +-
3243 drivers/lguest/page_tables.c | 2 +-
3244 drivers/lguest/x86/core.c | 12 +-
3245 drivers/lguest/x86/switcher_32.S | 27 +-
3246 drivers/lightnvm/rrpc.c | 4 +-
3247 drivers/lightnvm/rrpc.h | 2 +-
3248 drivers/md/bcache/alloc.c | 2 +-
3249 drivers/md/bcache/bcache.h | 10 +-
3250 drivers/md/bcache/btree.c | 2 +-
3251 drivers/md/bcache/closure.h | 2 +-
3252 drivers/md/bcache/io.c | 10 +-
3253 drivers/md/bcache/journal.c | 2 +-
3254 drivers/md/bcache/stats.c | 26 +-
3255 drivers/md/bcache/stats.h | 16 +-
3256 drivers/md/bcache/super.c | 2 +-
3257 drivers/md/bcache/sysfs.c | 20 +-
3258 drivers/md/bitmap.c | 2 +-
3259 drivers/md/dm-cache-target.c | 116 +-
3260 drivers/md/dm-ioctl.c | 2 +-
3261 drivers/md/dm-raid.c | 2 +-
3262 drivers/md/dm-raid1.c | 18 +-
3263 drivers/md/dm-stats.c | 6 +-
3264 drivers/md/dm-stripe.c | 10 +-
3265 drivers/md/dm-table.c | 2 +-
3266 drivers/md/dm-thin-metadata.c | 4 +-
3267 drivers/md/dm.c | 28 +-
3268 drivers/md/md.c | 41 +-
3269 drivers/md/md.h | 8 +-
3270 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
3271 drivers/md/persistent-data/dm-space-map.h | 1 +
3272 drivers/md/raid1.c | 8 +-
3273 drivers/md/raid10.c | 20 +-
3274 drivers/md/raid5.c | 26 +-
3275 drivers/media/dvb-core/dvb_net.c | 2 +-
3276 drivers/media/dvb-core/dvbdev.c | 2 +-
3277 drivers/media/dvb-frontends/af9033.h | 2 +-
3278 drivers/media/dvb-frontends/cx24116.c | 2 +-
3279 drivers/media/dvb-frontends/cx24117.c | 2 +-
3280 drivers/media/dvb-frontends/cx24120.c | 2 +-
3281 drivers/media/dvb-frontends/cx24123.c | 2 +-
3282 drivers/media/dvb-frontends/cxd2820r_core.c | 2 +-
3283 drivers/media/dvb-frontends/dib3000.h | 2 +-
3284 drivers/media/dvb-frontends/dib7000p.h | 2 +-
3285 drivers/media/dvb-frontends/dib8000.h | 2 +-
3286 drivers/media/dvb-frontends/hd29l2.c | 2 +-
3287 drivers/media/dvb-frontends/lgdt3306a.c | 2 +-
3288 drivers/media/dvb-frontends/mt312.c | 6 +-
3289 drivers/media/dvb-frontends/s921.c | 2 +-
3290 drivers/media/pci/bt8xx/dst.c | 2 +-
3291 drivers/media/pci/cx88/cx88-video.c | 6 +-
3292 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
3293 drivers/media/pci/pt1/va1j5jf8007s.c | 2 +-
3294 drivers/media/pci/pt1/va1j5jf8007t.c | 2 +-
3295 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
3296 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
3297 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
3298 drivers/media/pci/tw68/tw68-core.c | 2 +-
3299 drivers/media/pci/zoran/zoran.h | 1 -
3300 drivers/media/pci/zoran/zoran_card.c | 4 +-
3301 drivers/media/pci/zoran/zoran_driver.c | 3 -
3302 drivers/media/platform/omap/omap_vout.c | 11 +-
3303 drivers/media/platform/s5p-tv/mixer.h | 2 +-
3304 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
3305 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
3306 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
3307 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
3308 drivers/media/platform/soc_camera/soc_camera.c | 2 +-
3309 drivers/media/radio/radio-cadet.c | 2 +
3310 drivers/media/radio/radio-maxiradio.c | 2 +-
3311 drivers/media/radio/radio-shark.c | 2 +-
3312 drivers/media/radio/radio-shark2.c | 2 +-
3313 drivers/media/radio/radio-si476x.c | 2 +-
3314 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
3315 drivers/media/usb/pvrusb2/pvrusb2-context.c | 8 +-
3316 drivers/media/usb/pvrusb2/pvrusb2-dvb.c | 7 +-
3317 drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 2 +-
3318 drivers/media/usb/pvrusb2/pvrusb2-std.c | 2 +-
3319 drivers/media/usb/pvrusb2/pvrusb2-v4l2.c | 6 +-
3320 drivers/media/usb/uvc/uvc_driver.c | 4 +-
3321 drivers/media/v4l2-core/v4l2-common.c | 2 +-
3322 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
3323 drivers/media/v4l2-core/v4l2-device.c | 4 +-
3324 drivers/media/v4l2-core/v4l2-ioctl.c | 293 +-
3325 drivers/memory/omap-gpmc.c | 21 +-
3326 drivers/message/fusion/mptbase.c | 4 +-
3327 drivers/message/fusion/mptlan.c | 2 +-
3328 drivers/message/fusion/mptsas.c | 34 +-
3329 drivers/mfd/ab8500-debugfs.c | 2 +-
3330 drivers/mfd/kempld-core.c | 2 +-
3331 drivers/mfd/max8925-i2c.c | 2 +-
3332 drivers/mfd/tps65910.c | 2 +-
3333 drivers/mfd/twl4030-irq.c | 9 +-
3334 drivers/misc/c2port/core.c | 4 +-
3335 drivers/misc/kgdbts.c | 6 +-
3336 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
3337 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
3338 drivers/misc/mic/scif/scif_api.c | 10 +-
3339 drivers/misc/mic/scif/scif_rb.c | 8 +-
3340 drivers/misc/sgi-gru/gruhandles.c | 4 +-
3341 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
3342 drivers/misc/sgi-gru/grutables.h | 158 +-
3343 drivers/misc/sgi-xp/xp.h | 2 +-
3344 drivers/misc/sgi-xp/xp_main.c | 57 +-
3345 drivers/misc/sgi-xp/xpc.h | 3 +-
3346 drivers/misc/sgi-xp/xpc_main.c | 2 +-
3347 drivers/misc/sgi-xp/xpnet.c | 2 +-
3348 drivers/misc/ti-st/st_kim.c | 32 +-
3349 drivers/mmc/card/mmc_test.c | 4 +-
3350 drivers/mmc/host/dw_mmc.h | 2 +-
3351 drivers/mmc/host/mmci.c | 4 +-
3352 drivers/mmc/host/omap_hsmmc.c | 4 +-
3353 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
3354 drivers/mmc/host/sdhci-s3c.c | 8 +-
3355 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
3356 drivers/mtd/devices/block2mtd.c | 2 +-
3357 drivers/mtd/devices/phram.c | 2 +-
3358 drivers/mtd/maps/gpio-addr-flash.c | 2 +-
3359 drivers/mtd/maps/latch-addr-flash.c | 2 +-
3360 drivers/mtd/maps/pci.c | 4 +-
3361 drivers/mtd/maps/pcmciamtd.c | 8 +-
3362 drivers/mtd/maps/sbc_gxx.c | 2 +-
3363 drivers/mtd/nand/cafe_nand.c | 18 +-
3364 drivers/mtd/nand/denali.c | 1 +
3365 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
3366 drivers/mtd/nftlmount.c | 1 +
3367 drivers/mtd/sm_ftl.c | 2 +-
3368 drivers/mtd/ubi/build.c | 2 +-
3369 drivers/net/bonding/bond_netlink.c | 2 +-
3370 drivers/net/caif/caif_hsi.c | 4 +-
3371 drivers/net/caif/caif_serial.c | 2 +-
3372 drivers/net/caif/caif_spi.c | 2 +-
3373 drivers/net/caif/caif_virtio.c | 2 +-
3374 drivers/net/can/Kconfig | 2 +-
3375 drivers/net/can/dev.c | 2 +-
3376 drivers/net/can/janz-ican3.c | 2 +-
3377 drivers/net/can/led.c | 2 +-
3378 drivers/net/can/sun4i_can.c | 2 +-
3379 drivers/net/can/vcan.c | 2 +-
3380 drivers/net/can/xilinx_can.c | 2 +-
3381 drivers/net/dummy.c | 2 +-
3382 drivers/net/ethernet/8390/ax88796.c | 4 +-
3383 drivers/net/ethernet/8390/axnet_cs.c | 4 +-
3384 drivers/net/ethernet/8390/ne2k-pci.c | 6 +-
3385 drivers/net/ethernet/8390/pcnet_cs.c | 4 +-
3386 drivers/net/ethernet/altera/altera_tse_main.c | 6 +-
3387 drivers/net/ethernet/amd/amd8111e.c | 5 +-
3388 drivers/net/ethernet/amd/pcnet32.c | 7 +-
3389 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
3390 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
3391 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
3392 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
3393 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 66 +-
3394 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
3395 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
3396 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
3397 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
3398 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
3399 drivers/net/ethernet/apm/xgene/xgene_enet_main.c | 4 +-
3400 drivers/net/ethernet/arc/emac_main.c | 2 +-
3401 drivers/net/ethernet/atheros/alx/main.c | 2 +-
3402 drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 2 +-
3403 drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 2 +-
3404 drivers/net/ethernet/aurora/nb8800.c | 2 +-
3405 drivers/net/ethernet/broadcom/bnx2.c | 2 +-
3406 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
3407 drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.c | 216 +-
3408 drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.h | 4 +-
3409 drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 2 +-
3410 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
3411 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
3412 drivers/net/ethernet/broadcom/tg3.c | 2 +-
3413 drivers/net/ethernet/broadcom/tg3.h | 1 +
3414 drivers/net/ethernet/brocade/bna/bfa_cs.h | 42 +-
3415 drivers/net/ethernet/brocade/bna/bfa_ioc.c | 10 +-
3416 drivers/net/ethernet/brocade/bna/bfa_ioc.h | 4 +-
3417 drivers/net/ethernet/brocade/bna/bfa_msgq.h | 8 +-
3418 drivers/net/ethernet/brocade/bna/bna_enet.c | 6 +-
3419 drivers/net/ethernet/brocade/bna/bna_tx_rx.c | 6 +-
3420 drivers/net/ethernet/brocade/bna/bna_types.h | 24 +-
3421 drivers/net/ethernet/brocade/bna/bnad.c | 11 +-
3422 drivers/net/ethernet/cadence/macb.c | 4 +-
3423 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
3424 drivers/net/ethernet/cavium/liquidio/lio_main.c | 15 +-
3425 drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c | 2 +-
3426 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
3427 drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 2 +-
3428 drivers/net/ethernet/chelsio/cxgb4vf/adapter.h | 2 +-
3429 drivers/net/ethernet/chelsio/cxgb4vf/sge.c | 2 +-
3430 drivers/net/ethernet/dec/tulip/de4x5.c | 13 +-
3431 drivers/net/ethernet/emulex/benet/be_main.c | 4 +-
3432 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
3433 drivers/net/ethernet/faraday/ftmac100.c | 2 +
3434 drivers/net/ethernet/hisilicon/hip04_eth.c | 2 +-
3435 drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 2 +-
3436 drivers/net/ethernet/hisilicon/hns/hns_ae_adapt.c | 6 +-
3437 drivers/net/ethernet/intel/e100.c | 2 +-
3438 drivers/net/ethernet/intel/e1000/e1000_main.c | 2 +-
3439 drivers/net/ethernet/intel/e1000e/netdev.c | 2 +-
3440 drivers/net/ethernet/intel/fm10k/fm10k_pci.c | 2 +-
3441 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
3442 drivers/net/ethernet/intel/igb/igb_main.c | 2 +-
3443 drivers/net/ethernet/intel/igbvf/netdev.c | 2 +-
3444 drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 2 +-
3445 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
3446 drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 4 +-
3447 drivers/net/ethernet/marvell/pxa168_eth.c | 2 +-
3448 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
3449 drivers/net/ethernet/mellanox/mlx4/main.c | 2 +-
3450 drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 +-
3451 drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +-
3452 drivers/net/ethernet/micrel/ks8851_mll.c | 2 +-
3453 drivers/net/ethernet/neterion/s2io.c | 2 +-
3454 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
3455 drivers/net/ethernet/neterion/vxge/vxge-main.c | 2 +-
3456 .../net/ethernet/netronome/nfp/nfp_net_common.c | 2 +-
3457 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
3458 .../net/ethernet/oki-semi/pch_gbe/pch_gbe_main.c | 4 +-
3459 .../net/ethernet/qlogic/netxen/netxen_nic_main.c | 2 +-
3460 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
3461 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
3462 drivers/net/ethernet/qlogic/qlcnic/qlcnic_main.c | 2 +-
3463 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
3464 drivers/net/ethernet/realtek/r8169.c | 8 +-
3465 drivers/net/ethernet/renesas/sh_eth.c | 2 +-
3466 drivers/net/ethernet/rocker/rocker.c | 4 +-
3467 drivers/net/ethernet/sfc/ptp.c | 2 +-
3468 drivers/net/ethernet/sfc/selftest.c | 20 +-
3469 drivers/net/ethernet/smsc/smsc911x.c | 2 +-
3470 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
3471 drivers/net/ethernet/synopsys/dwc_eth_qos.c | 2 +-
3472 drivers/net/ethernet/via/via-rhine.c | 2 +-
3473 drivers/net/ethernet/wiznet/w5100.c | 2 +-
3474 drivers/net/ethernet/wiznet/w5300.c | 2 +-
3475 drivers/net/geneve.c | 2 +-
3476 drivers/net/hyperv/hyperv_net.h | 2 +-
3477 drivers/net/hyperv/netvsc_drv.c | 2 +-
3478 drivers/net/hyperv/rndis_filter.c | 7 +-
3479 drivers/net/ifb.c | 2 +-
3480 drivers/net/ipvlan/ipvlan_core.c | 2 +-
3481 drivers/net/ipvlan/ipvlan_main.c | 6 +-
3482 drivers/net/irda/sh_irda.c | 2 +-
3483 drivers/net/irda/vlsi_ir.c | 18 +-
3484 drivers/net/irda/vlsi_ir.h | 14 +-
3485 drivers/net/macvlan.c | 20 +-
3486 drivers/net/macvtap.c | 10 +-
3487 drivers/net/nlmon.c | 2 +-
3488 drivers/net/phy/phy_device.c | 6 +-
3489 drivers/net/plip/plip.c | 2 +-
3490 drivers/net/ppp/ppp_generic.c | 4 +-
3491 drivers/net/ppp/pptp.c | 1 +
3492 drivers/net/rionet.c | 2 +-
3493 drivers/net/slip/slhc.c | 2 +-
3494 drivers/net/team/team.c | 4 +-
3495 drivers/net/tun.c | 7 +-
3496 drivers/net/usb/hso.c | 28 +-
3497 drivers/net/usb/ipheth.c | 2 +-
3498 drivers/net/usb/r8152.c | 2 +-
3499 drivers/net/usb/sierra_net.c | 4 +-
3500 drivers/net/virtio_net.c | 2 +-
3501 drivers/net/vrf.c | 4 +-
3502 drivers/net/vxlan.c | 4 +-
3503 drivers/net/wimax/i2400m/rx.c | 2 +-
3504 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
3505 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
3506 drivers/net/wireless/ath/ath6kl/core.h | 2 +-
3507 drivers/net/wireless/ath/ath6kl/txrx.c | 2 +-
3508 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
3509 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
3510 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
3511 drivers/net/wireless/ath/ath9k/main.c | 22 +-
3512 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
3513 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
3514 drivers/net/wireless/ath/carl9170/main.c | 10 +-
3515 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
3516 drivers/net/wireless/ath/wil6210/pcie_bus.c | 2 +-
3517 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
3518 drivers/net/wireless/atmel/at76c50x-usb.c | 2 +-
3519 drivers/net/wireless/atmel/atmel.c | 183 +-
3520 drivers/net/wireless/broadcom/b43/phy_lp.c | 2 +-
3521 drivers/net/wireless/broadcom/b43legacy/main.c | 5 +-
3522 .../broadcom/brcm80211/brcmsmac/phy/phy_cmn.c | 3 +-
3523 .../broadcom/brcm80211/brcmsmac/phy_shim.c | 5 +-
3524 .../broadcom/brcm80211/brcmsmac/phy_shim.h | 2 +-
3525 drivers/net/wireless/cisco/airo.c | 201 +-
3526 drivers/net/wireless/intel/ipw2x00/ipw2100.c | 8 +-
3527 drivers/net/wireless/intel/ipw2x00/ipw2200.c | 6 +-
3528 drivers/net/wireless/intel/iwlegacy/3945-mac.c | 11 +-
3529 drivers/net/wireless/intel/iwlegacy/4965-mac.c | 7 +-
3530 drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c | 34 +-
3531 drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 4 +-
3532 drivers/net/wireless/intel/iwlwifi/mvm/tx.c | 2 +-
3533 drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 4 +-
3534 .../net/wireless/intersil/hostap/hostap_ioctl.c | 134 +-
3535 drivers/net/wireless/intersil/orinoco/wext.c | 131 +-
3536 drivers/net/wireless/intersil/prism54/isl_ioctl.c | 292 +-
3537 drivers/net/wireless/mac80211_hwsim.c | 28 +-
3538 drivers/net/wireless/marvell/mwifiex/main.c | 2 +-
3539 drivers/net/wireless/ralink/rt2x00/rt2400pci.c | 4 +-
3540 drivers/net/wireless/ralink/rt2x00/rt2500pci.c | 4 +-
3541 drivers/net/wireless/ralink/rt2x00/rt2500usb.c | 4 +-
3542 drivers/net/wireless/ralink/rt2x00/rt2800lib.c | 6 +-
3543 drivers/net/wireless/ralink/rt2x00/rt2x00.h | 2 +-
3544 drivers/net/wireless/ralink/rt2x00/rt2x00queue.c | 4 +-
3545 drivers/net/wireless/ralink/rt2x00/rt61pci.c | 4 +-
3546 drivers/net/wireless/ralink/rt2x00/rt73usb.c | 4 +-
3547 drivers/net/wireless/realtek/rtlwifi/base.c | 14 +-
3548 drivers/net/wireless/realtek/rtlwifi/base.h | 4 +-
3549 drivers/net/wireless/realtek/rtlwifi/pci.c | 15 +-
3550 drivers/net/wireless/realtek/rtlwifi/ps.c | 6 +-
3551 drivers/net/wireless/realtek/rtlwifi/ps.h | 6 +-
3552 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
3553 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
3554 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
3555 drivers/net/wireless/zydas/zd1201.c | 192 +-
3556 drivers/nvme/host/pci.c | 2 +-
3557 drivers/of/fdt.c | 4 +-
3558 drivers/oprofile/buffer_sync.c | 8 +-
3559 drivers/oprofile/event_buffer.c | 2 +-
3560 drivers/oprofile/oprof.c | 2 +-
3561 drivers/oprofile/oprofile_stats.c | 10 +-
3562 drivers/oprofile/oprofile_stats.h | 10 +-
3563 drivers/oprofile/oprofilefs.c | 2 +-
3564 drivers/oprofile/timer_int.c | 2 +-
3565 drivers/parport/procfs.c | 4 +-
3566 drivers/pci/host/pci-host-generic.c | 2 +-
3567 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
3568 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
3569 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
3570 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
3571 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
3572 drivers/pci/hotplug/pciehp_core.c | 2 +-
3573 drivers/pci/msi.c | 22 +-
3574 drivers/pci/pci-sysfs.c | 6 +-
3575 drivers/pci/pci.h | 4 +-
3576 drivers/pci/pcie/aspm.c | 10 +-
3577 drivers/pci/pcie/portdrv_pci.c | 2 +-
3578 drivers/pci/probe.c | 2 +-
3579 drivers/pci/setup-bus.c | 2 +-
3580 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
3581 drivers/pinctrl/pinctrl-at91.c | 5 +-
3582 drivers/platform/chrome/chromeos_pstore.c | 2 +-
3583 drivers/platform/x86/alienware-wmi.c | 4 +-
3584 drivers/platform/x86/apple-gmux.c | 2 +-
3585 drivers/platform/x86/compal-laptop.c | 2 +-
3586 drivers/platform/x86/hdaps.c | 2 +-
3587 drivers/platform/x86/ibm_rtl.c | 2 +-
3588 drivers/platform/x86/intel_oaktrail.c | 2 +-
3589 drivers/platform/x86/msi-laptop.c | 16 +-
3590 drivers/platform/x86/msi-wmi.c | 2 +-
3591 drivers/platform/x86/samsung-laptop.c | 2 +-
3592 drivers/platform/x86/samsung-q10.c | 2 +-
3593 drivers/platform/x86/sony-laptop.c | 14 +-
3594 drivers/platform/x86/thinkpad_acpi.c | 11 +-
3595 drivers/pnp/pnpbios/bioscalls.c | 14 +-
3596 drivers/pnp/pnpbios/core.c | 2 +-
3597 drivers/power/pda_power.c | 7 +-
3598 drivers/power/power_supply.h | 4 +-
3599 drivers/power/power_supply_core.c | 7 +-
3600 drivers/power/power_supply_sysfs.c | 6 +-
3601 drivers/power/reset/at91-reset.c | 5 +-
3602 drivers/powercap/powercap_sys.c | 136 +-
3603 drivers/ptp/ptp_private.h | 2 +-
3604 drivers/ptp/ptp_sysfs.c | 2 +-
3605 drivers/regulator/core.c | 4 +-
3606 drivers/regulator/max8660.c | 6 +-
3607 drivers/regulator/max8973-regulator.c | 16 +-
3608 drivers/regulator/mc13892-regulator.c | 8 +-
3609 drivers/remoteproc/remoteproc_core.c | 26 +-
3610 drivers/rtc/rtc-armada38x.c | 7 +-
3611 drivers/rtc/rtc-cmos.c | 4 +-
3612 drivers/rtc/rtc-ds1307.c | 2 +-
3613 drivers/rtc/rtc-m48t59.c | 4 +-
3614 drivers/rtc/rtc-rv8803.c | 15 +-
3615 drivers/rtc/rtc-rx8010.c | 8 +-
3616 drivers/rtc/rtc-test.c | 6 +-
3617 drivers/scsi/aacraid/aachba.c | 11 +-
3618 drivers/scsi/aic7xxx/aic79xx.h | 2 +-
3619 drivers/scsi/aic7xxx/aic79xx_core.c | 11 +-
3620 drivers/scsi/be2iscsi/be_main.c | 2 +-
3621 drivers/scsi/bfa/bfa.h | 4 +-
3622 drivers/scsi/bfa/bfa_core.c | 4 +-
3623 drivers/scsi/bfa/bfa_cs.h | 124 +-
3624 drivers/scsi/bfa/bfa_fcpim.h | 14 +-
3625 drivers/scsi/bfa/bfa_fcs.h | 34 +-
3626 drivers/scsi/bfa/bfa_fcs_fcpim.c | 6 +-
3627 drivers/scsi/bfa/bfa_fcs_lport.c | 4 +-
3628 drivers/scsi/bfa/bfa_fcs_rport.c | 4 +-
3629 drivers/scsi/bfa/bfa_ioc.c | 8 +-
3630 drivers/scsi/bfa/bfa_ioc.h | 16 +-
3631 drivers/scsi/bfa/bfa_svc.c | 12 +-
3632 drivers/scsi/bfa/bfa_svc.h | 20 +-
3633 drivers/scsi/bfa/bfad.c | 12 +-
3634 drivers/scsi/bfa/bfad_bsg.c | 8 +-
3635 drivers/scsi/bfa/bfad_drv.h | 5 +-
3636 drivers/scsi/csiostor/csio_defs.h | 19 +-
3637 drivers/scsi/csiostor/csio_hw.c | 67 +-
3638 drivers/scsi/csiostor/csio_init.c | 2 +-
3639 drivers/scsi/csiostor/csio_lnode.c | 32 +-
3640 drivers/scsi/csiostor/csio_rnode.c | 28 +-
3641 drivers/scsi/csiostor/csio_scsi.c | 37 +-
3642 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
3643 drivers/scsi/fcoe/fcoe_transport.c | 16 +-
3644 drivers/scsi/hosts.c | 4 +-
3645 drivers/scsi/hpsa.c | 38 +-
3646 drivers/scsi/hpsa.h | 2 +-
3647 drivers/scsi/hptiop.c | 2 -
3648 drivers/scsi/hptiop.h | 1 -
3649 drivers/scsi/ipr.c | 32 +-
3650 drivers/scsi/ipr.h | 2 +-
3651 drivers/scsi/libfc/fc_exch.c | 50 +-
3652 drivers/scsi/libsas/sas_ata.c | 2 +-
3653 drivers/scsi/lpfc/lpfc.h | 8 +-
3654 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
3655 drivers/scsi/lpfc/lpfc_init.c | 8 +-
3656 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
3657 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
3658 drivers/scsi/mpt3sas/mpt3sas_base.c | 2 +-
3659 drivers/scsi/mpt3sas/mpt3sas_scsih.c | 4 +-
3660 drivers/scsi/pmcraid.c | 46 +-
3661 drivers/scsi/pmcraid.h | 8 +-
3662 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
3663 drivers/scsi/qla2xxx/qla_gbl.h | 8 +-
3664 drivers/scsi/qla2xxx/qla_os.c | 15 +-
3665 drivers/scsi/qla2xxx/qla_target.c | 16 +-
3666 drivers/scsi/qla2xxx/qla_target.h | 2 +-
3667 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
3668 drivers/scsi/qla4xxx/ql4_os.c | 15 +-
3669 drivers/scsi/scsi.c | 2 +-
3670 drivers/scsi/scsi_lib.c | 8 +-
3671 drivers/scsi/scsi_sysfs.c | 2 +-
3672 drivers/scsi/scsi_transport_fc.c | 8 +-
3673 drivers/scsi/scsi_transport_iscsi.c | 6 +-
3674 drivers/scsi/scsi_transport_spi.c | 2 +-
3675 drivers/scsi/scsi_transport_srp.c | 8 +-
3676 drivers/scsi/sd.c | 6 +-
3677 drivers/scsi/sg.c | 2 +-
3678 drivers/scsi/sr.c | 21 +-
3679 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
3680 drivers/spi/spi.c | 2 +-
3681 drivers/staging/android/timed_output.c | 6 +-
3682 drivers/staging/comedi/comedi_fops.c | 8 +-
3683 drivers/staging/fbtft/fbtft-core.c | 2 +-
3684 drivers/staging/fbtft/fbtft.h | 2 +-
3685 drivers/staging/gdm724x/gdm_lte.c | 2 +-
3686 drivers/staging/gdm724x/gdm_tty.c | 2 +-
3687 drivers/staging/gdm72xx/gdm_wimax.c | 2 +-
3688 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
3689 drivers/staging/iio/adc/ad7280a.c | 4 +-
3690 .../staging/lustre/lnet/klnds/socklnd/socklnd.h | 6 +-
3691 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
3692 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
3693 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
3694 .../lustre/lustre/include/lustre/lustre_idl.h | 92 +-
3695 drivers/staging/lustre/lustre/include/lustre_dlm.h | 8 +-
3696 drivers/staging/lustre/lustre/include/lustre_net.h | 2 +-
3697 drivers/staging/lustre/lustre/include/obd.h | 2 +-
3698 drivers/staging/lustre/lustre/ldlm/ldlm_request.c | 5 +-
3699 drivers/staging/lustre/lustre/llite/dir.c | 2 +-
3700 drivers/staging/lustre/lustre/lov/lov_io.c | 62 +-
3701 drivers/staging/lustre/lustre/obdclass/llog_swab.c | 24 +-
3702 drivers/staging/lustre/lustre/osc/osc_request.c | 24 +-
3703 drivers/staging/lustre/lustre/ptlrpc/layout.c | 7 +-
3704 .../staging/lustre/lustre/ptlrpc/pack_generic.c | 151 +-
3705 drivers/staging/octeon/ethernet-rx.c | 24 +-
3706 drivers/staging/octeon/ethernet.c | 8 +-
3707 drivers/staging/panel/panel.c | 4 +-
3708 drivers/staging/rdma/hfi1/pcie.c | 2 +-
3709 drivers/staging/rtl8188eu/core/rtw_mlme_ext.c | 18 +-
3710 drivers/staging/rtl8188eu/hal/rtl8188eu_recv.c | 2 +-
3711 drivers/staging/rtl8188eu/hal/rtl8188eu_xmit.c | 2 +-
3712 drivers/staging/rtl8188eu/include/Hal8188EPhyCfg.h | 8 -
3713 drivers/staging/rtl8188eu/include/hal_intf.h | 5 +-
3714 drivers/staging/rtl8188eu/include/odm_precomp.h | 2 +-
3715 drivers/staging/rtl8188eu/include/recv_osdep.h | 1 -
3716 drivers/staging/rtl8188eu/include/rtl8188e_recv.h | 2 +-
3717 drivers/staging/rtl8188eu/include/rtl8188e_xmit.h | 2 +-
3718 drivers/staging/rtl8188eu/include/rtw_cmd.h | 1 -
3719 drivers/staging/rtl8188eu/include/rtw_eeprom.h | 6 -
3720 drivers/staging/rtl8188eu/include/rtw_ioctl.h | 9 -
3721 drivers/staging/rtl8188eu/include/rtw_mlme_ext.h | 12 +-
3722 drivers/staging/rtl8188eu/include/xmit_osdep.h | 2 +-
3723 drivers/staging/rtl8188eu/os_dep/usb_ops_linux.c | 4 +-
3724 drivers/staging/rtl8188eu/os_dep/xmit_linux.c | 2 +-
3725 drivers/staging/rtl8192e/rtl8192e/rtl_core.c | 49 +-
3726 drivers/staging/rtl8192e/rtl8192e/rtl_core.h | 4 +-
3727 drivers/staging/rtl8192e/rtl8192e/rtl_dm.c | 10 +-
3728 drivers/staging/rtl8192e/rtl8192e/rtl_dm.h | 4 +-
3729 drivers/staging/rtl8192e/rtl8192e/rtl_ps.c | 6 +-
3730 drivers/staging/rtl8192e/rtl8192e/rtl_ps.h | 3 +-
3731 drivers/staging/rtl8192e/rtl8192e/rtl_wx.c | 48 +-
3732 drivers/staging/rtl8192e/rtllib.h | 4 +-
3733 drivers/staging/rtl8192e/rtllib_softmac.c | 32 +-
3734 drivers/staging/rtl8192e/rtllib_softmac_wx.c | 2 +-
3735 drivers/staging/rtl8192e/rtllib_tx.c | 2 +-
3736 drivers/staging/rtl8192u/ieee80211/ieee80211.h | 2 +-
3737 .../staging/rtl8192u/ieee80211/ieee80211_softmac.c | 6 +-
3738 drivers/staging/rtl8192u/ieee80211/ieee80211_tx.c | 2 +-
3739 drivers/staging/rtl8192u/r8192U_core.c | 7 +-
3740 drivers/staging/rtl8712/rtl8712_recv.c | 6 +-
3741 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
3742 drivers/staging/rtl8712/rtl871x_ioctl.h | 14 -
3743 drivers/staging/rtl8712/rtl871x_xmit.c | 2 +-
3744 drivers/staging/rtl8712/rtl871x_xmit.h | 2 +-
3745 drivers/staging/rtl8712/usb_ops_linux.c | 2 +-
3746 drivers/staging/rtl8712/xmit_linux.c | 2 +-
3747 drivers/staging/rtl8712/xmit_osdep.h | 2 +-
3748 drivers/staging/rtl8723au/core/rtw_mlme_ext.c | 12 +-
3749 drivers/staging/rtl8723au/core/rtw_xmit.c | 2 +-
3750 drivers/staging/rtl8723au/hal/rtl8723au_recv.c | 2 +-
3751 drivers/staging/rtl8723au/hal/usb_ops_linux.c | 4 +-
3752 drivers/staging/rtl8723au/include/Hal8723APhyCfg.h | 8 -
3753 drivers/staging/rtl8723au/include/drv_types.h | 2 +-
3754 drivers/staging/rtl8723au/include/hal_intf.h | 2 -
3755 drivers/staging/rtl8723au/include/recv_osdep.h | 1 -
3756 drivers/staging/rtl8723au/include/rtw_ap.h | 2 -
3757 drivers/staging/rtl8723au/include/rtw_cmd.h | 1 -
3758 drivers/staging/rtl8723au/include/rtw_eeprom.h | 7 -
3759 drivers/staging/rtl8723au/include/rtw_mlme_ext.h | 14 +-
3760 drivers/staging/rtl8723au/include/usb_ops.h | 8 +-
3761 drivers/staging/rtl8723au/include/xmit_osdep.h | 2 +-
3762 drivers/staging/rtl8723au/os_dep/ioctl_cfg80211.c | 2 +-
3763 drivers/staging/rtl8723au/os_dep/xmit_linux.c | 2 +-
3764 drivers/staging/sm750fb/sm750.c | 14 +-
3765 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
3766 drivers/staging/unisys/visornic/visornic_main.c | 2 +-
3767 drivers/staging/wilc1000/linux_wlan.c | 2 +-
3768 drivers/staging/wilc1000/wilc_spi.c | 2 -
3769 drivers/staging/wilc1000/wilc_wlan.h | 2 +-
3770 drivers/staging/wlan-ng/p80211netdev.c | 2 +-
3771 drivers/target/sbp/sbp_target.c | 4 +-
3772 drivers/thermal/cpu_cooling.c | 9 +-
3773 drivers/thermal/devfreq_cooling.c | 19 +-
3774 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
3775 drivers/thermal/of-thermal.c | 17 +-
3776 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
3777 drivers/tty/cyclades.c | 6 +-
3778 drivers/tty/hvc/hvc_console.c | 14 +-
3779 drivers/tty/hvc/hvcs.c | 21 +-
3780 drivers/tty/hvc/hvsi.c | 22 +-
3781 drivers/tty/hvc/hvsi_lib.c | 4 +-
3782 drivers/tty/ipwireless/tty.c | 27 +-
3783 drivers/tty/moxa.c | 2 +-
3784 drivers/tty/n_gsm.c | 6 +-
3785 drivers/tty/n_tty.c | 28 +-
3786 drivers/tty/pty.c | 4 +-
3787 drivers/tty/rocket.c | 6 +-
3788 drivers/tty/serial/8250/8250_core.c | 10 +-
3789 drivers/tty/serial/8250/8250_pci.c | 2 +-
3790 drivers/tty/serial/ifx6x60.c | 2 +-
3791 drivers/tty/serial/ioc4_serial.c | 6 +-
3792 drivers/tty/serial/jsm/jsm_driver.c | 2 +-
3793 drivers/tty/serial/kgdb_nmi.c | 4 +-
3794 drivers/tty/serial/kgdboc.c | 34 +-
3795 drivers/tty/serial/msm_serial.c | 4 +-
3796 drivers/tty/serial/samsung.c | 9 +-
3797 drivers/tty/serial/serial_core.c | 8 +-
3798 drivers/tty/synclink.c | 34 +-
3799 drivers/tty/synclink_gt.c | 28 +-
3800 drivers/tty/synclinkmp.c | 34 +-
3801 drivers/tty/tty_io.c | 2 +-
3802 drivers/tty/tty_ldisc.c | 8 +-
3803 drivers/tty/tty_port.c | 22 +-
3804 drivers/uio/uio.c | 13 +-
3805 drivers/usb/atm/cxacru.c | 2 +-
3806 drivers/usb/atm/usbatm.c | 24 +-
3807 drivers/usb/class/cdc-acm.h | 2 +-
3808 drivers/usb/core/devices.c | 6 +-
3809 drivers/usb/core/devio.c | 12 +-
3810 drivers/usb/core/hcd.c | 4 +-
3811 drivers/usb/core/sysfs.c | 2 +-
3812 drivers/usb/core/usb.c | 2 +-
3813 drivers/usb/early/ehci-dbgp.c | 16 +-
3814 drivers/usb/gadget/function/f_phonet.c | 2 +-
3815 drivers/usb/gadget/function/u_serial.c | 22 +-
3816 drivers/usb/gadget/legacy/inode.c | 4 +-
3817 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
3818 drivers/usb/host/ehci-hcd.c | 2 +-
3819 drivers/usb/host/ehci-hub.c | 4 +-
3820 drivers/usb/host/ehci-q.c | 4 +-
3821 drivers/usb/host/fotg210-hcd.c | 2 +-
3822 drivers/usb/host/hwa-hc.c | 2 +-
3823 drivers/usb/host/ohci-hcd.c | 2 +-
3824 drivers/usb/host/r8a66597.h | 2 +-
3825 drivers/usb/host/uhci-hcd.c | 2 +-
3826 drivers/usb/host/xhci-pci.c | 2 +-
3827 drivers/usb/host/xhci.c | 2 +-
3828 drivers/usb/misc/appledisplay.c | 4 +-
3829 drivers/usb/misc/sisusbvga/sisusb_con.c | 98 +-
3830 drivers/usb/serial/console.c | 8 +-
3831 drivers/usb/storage/transport.c | 2 +-
3832 drivers/usb/storage/usb.c | 2 +-
3833 drivers/usb/storage/usb.h | 2 +-
3834 drivers/usb/usbip/vhci.h | 2 +-
3835 drivers/usb/usbip/vhci_hcd.c | 6 +-
3836 drivers/usb/usbip/vhci_rx.c | 2 +-
3837 drivers/usb/wusbcore/wa-hc.h | 4 +-
3838 drivers/usb/wusbcore/wa-xfer.c | 2 +-
3839 drivers/vfio/pci/vfio_pci.c | 2 +-
3840 drivers/vhost/vringh.c | 20 +-
3841 drivers/video/backlight/kb3886_bl.c | 2 +-
3842 drivers/video/console/dummycon.c | 96 +-
3843 drivers/video/console/fbcon.c | 2 +-
3844 drivers/video/console/vgacon.c | 23 +-
3845 drivers/video/fbdev/aty/aty128fb.c | 2 +-
3846 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
3847 drivers/video/fbdev/aty/mach64_ct.c | 5 +-
3848 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
3849 drivers/video/fbdev/aty/mach64_gx.c | 17 +-
3850 drivers/video/fbdev/core/fb_defio.c | 6 +-
3851 drivers/video/fbdev/core/fbmem.c | 12 +-
3852 drivers/video/fbdev/hyperv_fb.c | 4 +-
3853 drivers/video/fbdev/i810/i810_accel.c | 1 +
3854 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
3855 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
3856 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
3857 drivers/video/fbdev/omap2/omapfb/dss/display.c | 8 +-
3858 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
3859 drivers/video/fbdev/sis/sis_main.h | 2 +-
3860 drivers/video/fbdev/smscufx.c | 4 +-
3861 drivers/video/fbdev/udlfb.c | 36 +-
3862 drivers/video/fbdev/uvesafb.c | 52 +-
3863 drivers/video/fbdev/vesafb.c | 58 +-
3864 drivers/video/fbdev/via/via_clock.h | 2 +-
3865 drivers/xen/events/events_base.c | 6 +-
3866 drivers/xen/xen-pciback/pci_stub.c | 2 +-
3867 fs/9p/vfs_addr.c | 2 +-
3868 fs/9p/vfs_inode_dotl.c | 4 +-
3869 fs/Kconfig.binfmt | 2 +-
3870 fs/afs/file.c | 8 +-
3871 fs/afs/inode.c | 4 +-
3872 fs/afs/internal.h | 4 +-
3873 fs/aio.c | 2 +-
3874 fs/autofs4/waitq.c | 2 +-
3875 fs/befs/endian.h | 6 +-
3876 fs/binfmt_aout.c | 23 +-
3877 fs/binfmt_elf.c | 670 +-
3878 fs/binfmt_elf_fdpic.c | 4 +-
3879 fs/block_dev.c | 2 +-
3880 fs/btrfs/ctree.c | 11 +-
3881 fs/btrfs/ctree.h | 4 +-
3882 fs/btrfs/delayed-inode.c | 6 +-
3883 fs/btrfs/delayed-inode.h | 4 +-
3884 fs/btrfs/delayed-ref.c | 4 +-
3885 fs/btrfs/disk-io.c | 4 +-
3886 fs/btrfs/extent_map.c | 8 +-
3887 fs/btrfs/file.c | 4 +-
3888 fs/btrfs/free-space-cache.h | 1 +
3889 fs/btrfs/raid56.c | 30 +-
3890 fs/btrfs/super.c | 2 +-
3891 fs/btrfs/sysfs.c | 2 +-
3892 fs/btrfs/tests/btrfs-tests.c | 2 +-
3893 fs/btrfs/tests/free-space-tests.c | 2 +-
3894 fs/btrfs/transaction.c | 2 +-
3895 fs/btrfs/tree-log.c | 8 +-
3896 fs/btrfs/tree-log.h | 2 +-
3897 fs/btrfs/volumes.c | 14 +-
3898 fs/btrfs/volumes.h | 22 +-
3899 fs/buffer.c | 2 +-
3900 fs/cachefiles/bind.c | 6 +-
3901 fs/cachefiles/daemon.c | 8 +-
3902 fs/cachefiles/internal.h | 12 +-
3903 fs/cachefiles/namei.c | 2 +-
3904 fs/cachefiles/proc.c | 12 +-
3905 fs/ceph/dir.c | 12 +-
3906 fs/ceph/super.c | 4 +-
3907 fs/cifs/cifs_debug.c | 12 +-
3908 fs/cifs/cifsfs.c | 8 +-
3909 fs/cifs/cifsglob.h | 54 +-
3910 fs/cifs/file.c | 14 +-
3911 fs/cifs/misc.c | 4 +-
3912 fs/cifs/smb1ops.c | 80 +-
3913 fs/cifs/smb2ops.c | 84 +-
3914 fs/cifs/smb2pdu.c | 3 +-
3915 fs/coda/cache.c | 10 +-
3916 fs/coda/dir.c | 5 +-
3917 fs/compat.c | 9 +-
3918 fs/compat_binfmt_elf.c | 2 +
3919 fs/compat_ioctl.c | 12 +-
3920 fs/configfs/dir.c | 10 +-
3921 fs/coredump.c | 18 +-
3922 fs/dcache.c | 64 +-
3923 fs/ecryptfs/inode.c | 2 +-
3924 fs/ecryptfs/miscdev.c | 2 +-
3925 fs/exec.c | 365 +-
3926 fs/exofs/inode.c | 7 +-
3927 fs/ext2/xattr.c | 5 +-
3928 fs/ext4/ext4.h | 20 +-
3929 fs/ext4/mballoc.c | 44 +-
3930 fs/ext4/resize.c | 16 +-
3931 fs/ext4/super.c | 2 +-
3932 fs/ext4/sysfs.c | 2 +-
3933 fs/ext4/xattr.c | 5 +-
3934 fs/fhandle.c | 5 +-
3935 fs/file.c | 18 +-
3936 fs/freevxfs/vxfs_inode.c | 8 +-
3937 fs/freevxfs/vxfs_inode.h | 4 +-
3938 fs/fs-writeback.c | 11 +-
3939 fs/fs_struct.c | 8 +-
3940 fs/fscache/cookie.c | 40 +-
3941 fs/fscache/internal.h | 202 +-
3942 fs/fscache/object.c | 26 +-
3943 fs/fscache/operation.c | 38 +-
3944 fs/fscache/page.c | 110 +-
3945 fs/fscache/stats.c | 348 +-
3946 fs/fuse/cuse.c | 10 +-
3947 fs/fuse/dev.c | 4 +-
3948 fs/fuse/file.c | 4 +-
3949 fs/fuse/inode.c | 4 +-
3950 fs/gfs2/aops.c | 2 +-
3951 fs/gfs2/file.c | 2 +-
3952 fs/gfs2/glock.c | 22 +-
3953 fs/gfs2/glops.c | 4 +-
3954 fs/gfs2/quota.c | 6 +-
3955 fs/hugetlbfs/inode.c | 13 +-
3956 fs/inode.c | 4 +-
3957 fs/jbd2/commit.c | 2 +-
3958 fs/jbd2/transaction.c | 4 +-
3959 fs/jffs2/erase.c | 3 +-
3960 fs/jffs2/file.c | 3 +-
3961 fs/jffs2/fs.c | 2 +-
3962 fs/jffs2/os-linux.h | 2 +-
3963 fs/jffs2/wbuf.c | 3 +-
3964 fs/jfs/super.c | 2 +-
3965 fs/kernfs/dir.c | 2 +-
3966 fs/kernfs/file.c | 20 +-
3967 fs/libfs.c | 10 +-
3968 fs/lockd/clnt4xdr.c | 46 +-
3969 fs/lockd/clntproc.c | 4 +-
3970 fs/lockd/clntxdr.c | 44 +-
3971 fs/lockd/mon.c | 24 +-
3972 fs/lockd/svc.c | 2 +-
3973 fs/lockd/svc4proc.c | 69 +-
3974 fs/lockd/svcproc.c | 75 +-
3975 fs/lockd/xdr.c | 44 +-
3976 fs/lockd/xdr4.c | 41 +-
3977 fs/logfs/dev_bdev.c | 13 +-
3978 fs/logfs/dev_mtd.c | 13 +-
3979 fs/logfs/dir.c | 4 +-
3980 fs/logfs/logfs.h | 5 +-
3981 fs/logfs/readwrite.c | 2 +-
3982 fs/logfs/segment.c | 2 +-
3983 fs/logfs/super.c | 39 -
3984 fs/namei.c | 16 +-
3985 fs/namespace.c | 16 +-
3986 fs/nfs/callback.h | 18 +-
3987 fs/nfs/callback_proc.c | 26 +-
3988 fs/nfs/callback_xdr.c | 73 +-
3989 fs/nfs/dir.c | 5 +-
3990 fs/nfs/inode.c | 6 +-
3991 fs/nfs/internal.h | 5 +-
3992 fs/nfs/mount_clnt.c | 26 +-
3993 fs/nfs/nfs2xdr.c | 101 +-
3994 fs/nfs/nfs3xdr.c | 201 +-
3995 fs/nfs/nfs42xdr.c | 60 +-
3996 fs/nfs/nfs4xdr.c | 507 +-
3997 fs/nfs/read.c | 2 +-
3998 fs/nfs/symlink.c | 6 +-
3999 fs/nfsd/current_stateid.h | 24 +-
4000 fs/nfsd/nfs2acl.c | 85 +-
4001 fs/nfsd/nfs3acl.c | 44 +-
4002 fs/nfsd/nfs3proc.c | 271 +-
4003 fs/nfsd/nfs3xdr.c | 171 +-
4004 fs/nfsd/nfs4callback.c | 31 +-
4005 fs/nfsd/nfs4proc.c | 320 +-
4006 fs/nfsd/nfs4state.c | 111 +-
4007 fs/nfsd/nfs4xdr.c | 564 +-
4008 fs/nfsd/nfscache.c | 11 +-
4009 fs/nfsd/nfsproc.c | 193 +-
4010 fs/nfsd/nfsxdr.c | 96 +-
4011 fs/nfsd/vfs.c | 6 +-
4012 fs/nfsd/xdr.h | 50 +-
4013 fs/nfsd/xdr3.h | 100 +-
4014 fs/nfsd/xdr4.h | 50 +-
4015 fs/nls/nls_base.c | 26 +-
4016 fs/nls/nls_cp932.c | 2 +-
4017 fs/nls/nls_cp936.c | 2 +-
4018 fs/nls/nls_cp949.c | 2 +-
4019 fs/nls/nls_cp950.c | 2 +-
4020 fs/nls/nls_euc-jp.c | 8 +-
4021 fs/nls/nls_koi8-ru.c | 8 +-
4022 fs/notify/fanotify/fanotify_user.c | 4 +-
4023 fs/notify/notification.c | 4 +-
4024 fs/ntfs/dir.c | 4 +-
4025 fs/ntfs/inode.c | 19 +-
4026 fs/ntfs/inode.h | 4 +-
4027 fs/ntfs/mft.c | 4 +-
4028 fs/ntfs/super.c | 8 +-
4029 fs/ocfs2/dlm/dlmcommon.h | 4 +-
4030 fs/ocfs2/dlm/dlmdebug.c | 10 +-
4031 fs/ocfs2/dlm/dlmdomain.c | 4 +-
4032 fs/ocfs2/dlm/dlmmaster.c | 4 +-
4033 fs/ocfs2/dlmfs/dlmfs.c | 4 +-
4034 fs/ocfs2/localalloc.c | 2 +-
4035 fs/ocfs2/ocfs2.h | 10 +-
4036 fs/ocfs2/suballoc.c | 12 +-
4037 fs/ocfs2/super.c | 20 +-
4038 fs/overlayfs/copy_up.c | 2 +-
4039 fs/pipe.c | 72 +-
4040 fs/posix_acl.c | 4 +-
4041 fs/proc/array.c | 20 +
4042 fs/proc/base.c | 7 +-
4043 fs/proc/kcore.c | 36 +-
4044 fs/proc/meminfo.c | 2 +-
4045 fs/proc/nommu.c | 2 +-
4046 fs/proc/proc_sysctl.c | 26 +-
4047 fs/proc/task_mmu.c | 39 +-
4048 fs/proc/task_nommu.c | 6 +-
4049 fs/proc/vmcore.c | 16 +-
4050 fs/qnx6/qnx6.h | 4 +-
4051 fs/quota/netlink.c | 4 +-
4052 fs/read_write.c | 34 +-
4053 fs/readdir.c | 3 +-
4054 fs/reiserfs/do_balan.c | 2 +-
4055 fs/reiserfs/procfs.c | 2 +-
4056 fs/reiserfs/reiserfs.h | 4 +-
4057 fs/select.c | 2 +-
4058 fs/seq_file.c | 4 +-
4059 fs/splice.c | 43 +-
4060 fs/squashfs/xattr.c | 10 +-
4061 fs/super.c | 3 +-
4062 fs/sysv/sysv.h | 2 +-
4063 fs/tracefs/inode.c | 8 +-
4064 fs/ubifs/find.c | 34 +-
4065 fs/ubifs/lprops.c | 5 +-
4066 fs/udf/misc.c | 2 +-
4067 fs/ufs/swab.h | 4 +-
4068 fs/userfaultfd.c | 2 +-
4069 fs/xattr.c | 21 +
4070 fs/xfs/libxfs/xfs_bmap.c | 2 +-
4071 fs/xfs/libxfs/xfs_da_btree.c | 4 +-
4072 fs/xfs/xfs_dir2_readdir.c | 7 +-
4073 fs/xfs/xfs_ioctl.c | 2 +-
4074 fs/xfs/xfs_linux.h | 4 +-
4075 include/acpi/ghes.h | 2 +-
4076 include/asm-generic/4level-fixup.h | 2 +
4077 include/asm-generic/atomic-long.h | 176 +-
4078 include/asm-generic/atomic64.h | 12 +
4079 include/asm-generic/bitops/__fls.h | 2 +-
4080 include/asm-generic/bitops/fls.h | 2 +-
4081 include/asm-generic/bitops/fls64.h | 4 +-
4082 include/asm-generic/bug.h | 6 +-
4083 include/asm-generic/cache.h | 4 +-
4084 include/asm-generic/emergency-restart.h | 2 +-
4085 include/asm-generic/kmap_types.h | 4 +-
4086 include/asm-generic/local.h | 13 +
4087 include/asm-generic/pgtable-nopmd.h | 18 +-
4088 include/asm-generic/pgtable-nopud.h | 15 +-
4089 include/asm-generic/pgtable.h | 16 +
4090 include/asm-generic/sections.h | 1 +
4091 include/asm-generic/uaccess.h | 16 +
4092 include/asm-generic/vmlinux.lds.h | 15 +-
4093 include/crypto/algapi.h | 2 +-
4094 include/crypto/cast6.h | 4 +-
4095 include/crypto/serpent.h | 4 +-
4096 include/crypto/xts.h | 2 +-
4097 include/drm/drmP.h | 19 +-
4098 include/drm/drm_mm.h | 2 +-
4099 include/drm/drm_modeset_helper_vtables.h | 2 +-
4100 include/drm/i915_pciids.h | 2 +-
4101 include/drm/intel-gtt.h | 4 +-
4102 include/drm/ttm/ttm_memory.h | 2 +-
4103 include/drm/ttm/ttm_page_alloc.h | 1 +
4104 include/keys/asymmetric-subtype.h | 2 +-
4105 include/keys/encrypted-type.h | 2 +-
4106 include/keys/rxrpc-type.h | 2 +-
4107 include/keys/user-type.h | 2 +-
4108 include/linux/atmdev.h | 4 +-
4109 include/linux/atomic.h | 12 +-
4110 include/linux/audit.h | 2 +-
4111 include/linux/average.h | 2 +-
4112 include/linux/binfmts.h | 3 +-
4113 include/linux/bitmap.h | 2 +-
4114 include/linux/bitops.h | 8 +-
4115 include/linux/blk-cgroup.h | 24 +-
4116 include/linux/blkdev.h | 2 +-
4117 include/linux/blktrace_api.h | 2 +-
4118 include/linux/cache.h | 8 +
4119 include/linux/cdrom.h | 1 -
4120 include/linux/cgroup-defs.h | 2 +-
4121 include/linux/cleancache.h | 2 +-
4122 include/linux/clk-provider.h | 1 +
4123 include/linux/compat.h | 15 +-
4124 include/linux/compiler-gcc.h | 30 +-
4125 include/linux/compiler.h | 193 +-
4126 include/linux/configfs.h | 2 +-
4127 include/linux/cpufreq.h | 7 +-
4128 include/linux/cpuidle.h | 5 +-
4129 include/linux/cpumask.h | 14 +-
4130 include/linux/crypto.h | 4 +-
4131 include/linux/ctype.h | 2 +-
4132 include/linux/dcache.h | 4 +-
4133 include/linux/decompress/mm.h | 2 +-
4134 include/linux/devfreq.h | 2 +-
4135 include/linux/device.h | 7 +-
4136 include/linux/dma-mapping.h | 2 +-
4137 include/linux/efi.h | 1 +
4138 include/linux/elf.h | 2 +
4139 include/linux/err.h | 4 +-
4140 include/linux/extcon.h | 2 +-
4141 include/linux/fb.h | 3 +-
4142 include/linux/fdtable.h | 2 +-
4143 include/linux/firewire.h | 2 +-
4144 include/linux/fs.h | 5 +-
4145 include/linux/fs_struct.h | 2 +-
4146 include/linux/fscache-cache.h | 2 +-
4147 include/linux/fscache.h | 2 +-
4148 include/linux/fsnotify.h | 2 +-
4149 include/linux/genhd.h | 4 +-
4150 include/linux/genl_magic_func.h | 2 +-
4151 include/linux/genl_magic_struct.h | 4 +-
4152 include/linux/gfp.h | 14 +-
4153 include/linux/highmem.h | 12 +
4154 include/linux/hugetlb.h | 2 +-
4155 include/linux/hugetlb_cgroup.h | 11 +
4156 include/linux/hwmon-sysfs.h | 6 +-
4157 include/linux/i2c.h | 1 +
4158 include/linux/if_pppox.h | 2 +-
4159 include/linux/init.h | 12 +-
4160 include/linux/init_task.h | 7 +
4161 include/linux/interrupt.h | 6 +-
4162 include/linux/iommu.h | 2 +-
4163 include/linux/ioport.h | 2 +-
4164 include/linux/ipc.h | 2 +-
4165 include/linux/irq.h | 5 +-
4166 include/linux/irqdesc.h | 2 +-
4167 include/linux/irqdomain.h | 3 +
4168 include/linux/jbd2.h | 2 +-
4169 include/linux/jiffies.h | 16 +-
4170 include/linux/kallsyms.h | 18 +-
4171 include/linux/key-type.h | 2 +-
4172 include/linux/kgdb.h | 6 +-
4173 include/linux/kmemleak.h | 4 +-
4174 include/linux/kobject.h | 3 +-
4175 include/linux/kobject_ns.h | 2 +-
4176 include/linux/kref.h | 2 +-
4177 include/linux/libata.h | 2 +-
4178 include/linux/linkage.h | 12 +
4179 include/linux/list.h | 15 +
4180 include/linux/lockd/xdr.h | 34 +-
4181 include/linux/lockd/xdr4.h | 34 +-
4182 include/linux/lockref.h | 26 +-
4183 include/linux/math64.h | 10 +-
4184 include/linux/memcontrol.h | 2 +-
4185 include/linux/mempolicy.h | 7 +
4186 include/linux/mm.h | 97 +-
4187 include/linux/mm_types.h | 20 +
4188 include/linux/mmiotrace.h | 4 +-
4189 include/linux/mmzone.h | 2 +-
4190 include/linux/mod_devicetable.h | 4 +-
4191 include/linux/module.h | 58 +-
4192 include/linux/moduleloader.h | 16 +
4193 include/linux/moduleparam.h | 12 +-
4194 include/linux/net.h | 2 +-
4195 include/linux/netdevice.h | 7 +-
4196 include/linux/netfilter.h | 2 +-
4197 include/linux/netfilter/ipset/ip_set_comment.h | 3 +-
4198 include/linux/netfilter/nfnetlink.h | 2 +-
4199 include/linux/netlink.h | 12 +-
4200 include/linux/nls.h | 4 +-
4201 include/linux/notifier.h | 3 +-
4202 include/linux/oprofile.h | 4 +-
4203 include/linux/padata.h | 2 +-
4204 include/linux/pagemap.h | 4 +-
4205 include/linux/pci_hotplug.h | 3 +-
4206 include/linux/percpu.h | 2 +-
4207 include/linux/perf_event.h | 12 +-
4208 include/linux/pid.h | 4 +-
4209 include/linux/pipe_fs_i.h | 8 +-
4210 include/linux/pm.h | 1 +
4211 include/linux/pm_domain.h | 2 +-
4212 include/linux/pm_runtime.h | 2 +-
4213 include/linux/pnp.h | 2 +-
4214 include/linux/poison.h | 4 +-
4215 include/linux/power/smartreflex.h | 2 +-
4216 include/linux/ppp-comp.h | 2 +-
4217 include/linux/preempt.h | 21 +
4218 include/linux/printk.h | 2 +-
4219 include/linux/proc_ns.h | 2 +-
4220 include/linux/psci.h | 2 +-
4221 include/linux/quota.h | 2 +-
4222 include/linux/random.h | 19 +-
4223 include/linux/rculist.h | 16 +
4224 include/linux/rcupdate.h | 8 +
4225 include/linux/reboot.h | 14 +-
4226 include/linux/regset.h | 3 +-
4227 include/linux/relay.h | 2 +-
4228 include/linux/rio.h | 2 +-
4229 include/linux/rmap.h | 4 +-
4230 include/linux/sched.h | 76 +-
4231 include/linux/sched/sysctl.h | 1 +
4232 include/linux/scif.h | 2 +-
4233 include/linux/semaphore.h | 2 +-
4234 include/linux/seq_file.h | 1 +
4235 include/linux/seqlock.h | 10 +
4236 include/linux/signal.h | 2 +-
4237 include/linux/skbuff.h | 12 +-
4238 include/linux/slab.h | 47 +-
4239 include/linux/slab_def.h | 14 +-
4240 include/linux/slub_def.h | 2 +-
4241 include/linux/smp.h | 2 +
4242 include/linux/sock_diag.h | 2 +-
4243 include/linux/sonet.h | 2 +-
4244 include/linux/spinlock.h | 17 +-
4245 include/linux/srcu.h | 5 +-
4246 include/linux/sunrpc/addr.h | 8 +-
4247 include/linux/sunrpc/clnt.h | 2 +-
4248 include/linux/sunrpc/svc.h | 2 +-
4249 include/linux/sunrpc/svc_rdma.h | 18 +-
4250 include/linux/sunrpc/svcauth.h | 2 +-
4251 include/linux/swapops.h | 10 +-
4252 include/linux/swiotlb.h | 3 +-
4253 include/linux/syscalls.h | 34 +-
4254 include/linux/syscore_ops.h | 2 +-
4255 include/linux/sysctl.h | 3 +-
4256 include/linux/sysfs.h | 9 +-
4257 include/linux/sysrq.h | 3 +-
4258 include/linux/tcp.h | 14 +-
4259 include/linux/thread_info.h | 7 +
4260 include/linux/tty.h | 4 +-
4261 include/linux/tty_driver.h | 2 +-
4262 include/linux/tty_ldisc.h | 2 +-
4263 include/linux/types.h | 16 +
4264 include/linux/uaccess.h | 2 +-
4265 include/linux/uio_driver.h | 2 +-
4266 include/linux/unaligned/access_ok.h | 24 +-
4267 include/linux/usb.h | 12 +-
4268 include/linux/usb/hcd.h | 1 +
4269 include/linux/usb/renesas_usbhs.h | 2 +-
4270 include/linux/vermagic.h | 21 +-
4271 include/linux/vga_switcheroo.h | 8 +-
4272 include/linux/vmalloc.h | 7 +-
4273 include/linux/vmstat.h | 24 +-
4274 include/linux/writeback.h | 3 +-
4275 include/linux/xattr.h | 5 +-
4276 include/linux/zlib.h | 3 +-
4277 include/media/v4l2-dev.h | 2 +-
4278 include/media/v4l2-device.h | 2 +-
4279 include/net/9p/transport.h | 2 +-
4280 include/net/bluetooth/l2cap.h | 2 +-
4281 include/net/bonding.h | 2 +-
4282 include/net/caif/cfctrl.h | 6 +-
4283 include/net/cfg80211-wext.h | 20 +-
4284 include/net/cfg802154.h | 2 +-
4285 include/net/fib_rules.h | 3 +-
4286 include/net/flow.h | 2 +-
4287 include/net/genetlink.h | 2 +-
4288 include/net/gro_cells.h | 2 +-
4289 include/net/inet_connection_sock.h | 2 +-
4290 include/net/inet_sock.h | 2 +-
4291 include/net/inetpeer.h | 2 +-
4292 include/net/ip_fib.h | 2 +-
4293 include/net/ip_vs.h | 8 +-
4294 include/net/ipv6.h | 2 +-
4295 include/net/irda/ircomm_tty.h | 1 +
4296 include/net/irda/irias_object.h | 2 +-
4297 include/net/irda/irlmp.h | 1 +
4298 include/net/irda/irlmp_event.h | 6 +-
4299 include/net/irda/timer.h | 6 +-
4300 include/net/iucv/af_iucv.h | 2 +-
4301 include/net/llc_c_ac.h | 2 +-
4302 include/net/llc_c_ev.h | 4 +-
4303 include/net/llc_c_st.h | 2 +-
4304 include/net/llc_s_ac.h | 2 +-
4305 include/net/llc_s_st.h | 2 +-
4306 include/net/mac80211.h | 6 +-
4307 include/net/neighbour.h | 4 +-
4308 include/net/net_namespace.h | 18 +-
4309 include/net/netfilter/nf_conntrack.h | 2 +-
4310 include/net/netlink.h | 2 +-
4311 include/net/netns/conntrack.h | 6 +-
4312 include/net/netns/ipv4.h | 4 +-
4313 include/net/netns/ipv6.h | 4 +-
4314 include/net/netns/xfrm.h | 2 +-
4315 include/net/ping.h | 2 +-
4316 include/net/protocol.h | 4 +-
4317 include/net/rtnetlink.h | 2 +-
4318 include/net/sctp/checksum.h | 4 +-
4319 include/net/sctp/sm.h | 4 +-
4320 include/net/sctp/structs.h | 2 +-
4321 include/net/snmp.h | 10 +-
4322 include/net/sock.h | 12 +-
4323 include/net/tcp.h | 8 +-
4324 include/net/xfrm.h | 15 +-
4325 include/rdma/ib_cm.h | 8 +-
4326 include/rdma/iw_cm.h | 2 +-
4327 include/scsi/libfc.h | 3 +-
4328 include/scsi/scsi_device.h | 6 +-
4329 include/scsi/scsi_driver.h | 2 +-
4330 include/scsi/scsi_transport_fc.h | 3 +-
4331 include/scsi/sg.h | 2 +-
4332 include/sound/compress_driver.h | 2 +-
4333 include/sound/control.h | 4 +-
4334 include/sound/pcm.h | 2 +-
4335 include/sound/rawmidi.h | 3 +-
4336 include/sound/seq_kernel.h | 2 +-
4337 include/sound/soc.h | 4 +-
4338 include/trace/events/irq.h | 4 +-
4339 include/uapi/linux/a.out.h | 8 +
4340 include/uapi/linux/bcache.h | 5 +-
4341 include/uapi/linux/byteorder/little_endian.h | 28 +-
4342 include/uapi/linux/connector.h | 2 +-
4343 include/uapi/linux/elf.h | 28 +
4344 include/uapi/linux/screen_info.h | 2 +-
4345 include/uapi/linux/swab.h | 6 +-
4346 include/uapi/linux/xattr.h | 4 +
4347 include/video/udlfb.h | 8 +-
4348 include/video/uvesafb.h | 1 +
4349 init/Kconfig | 2 +-
4350 init/Makefile | 3 +
4351 init/do_mounts.c | 16 +-
4352 init/do_mounts.h | 8 +-
4353 init/do_mounts_initrd.c | 30 +-
4354 init/do_mounts_md.c | 6 +-
4355 init/init_task.c | 4 +
4356 init/initramfs.c | 38 +-
4357 init/main.c | 30 +-
4358 ipc/compat.c | 4 +-
4359 ipc/ipc_sysctl.c | 14 +-
4360 ipc/mq_sysctl.c | 4 +-
4361 ipc/sem.c | 4 +-
4362 ipc/shm.c | 8 +-
4363 kernel/audit.c | 8 +-
4364 kernel/auditsc.c | 4 +-
4365 kernel/bpf/core.c | 28 +-
4366 kernel/capability.c | 3 +
4367 kernel/cgroup.c | 29 +-
4368 kernel/compat.c | 38 +-
4369 kernel/debug/debug_core.c | 16 +-
4370 kernel/debug/kdb/kdb_main.c | 4 +-
4371 kernel/events/core.c | 38 +-
4372 kernel/events/internal.h | 10 +-
4373 kernel/events/uprobes.c | 2 +-
4374 kernel/exit.c | 27 +-
4375 kernel/fork.c | 175 +-
4376 kernel/futex.c | 11 +-
4377 kernel/futex_compat.c | 2 +-
4378 kernel/irq/manage.c | 2 +-
4379 kernel/irq/msi.c | 19 +-
4380 kernel/irq/spurious.c | 2 +-
4381 kernel/jump_label.c | 5 +
4382 kernel/kallsyms.c | 40 +-
4383 kernel/kexec.c | 3 +-
4384 kernel/kmod.c | 8 +-
4385 kernel/kprobes.c | 4 +-
4386 kernel/ksysfs.c | 2 +-
4387 kernel/locking/lockdep.c | 7 +-
4388 kernel/locking/mutex-debug.c | 12 +-
4389 kernel/locking/mutex-debug.h | 4 +-
4390 kernel/locking/mutex.c | 6 +-
4391 kernel/module.c | 403 +-
4392 kernel/notifier.c | 17 +-
4393 kernel/padata.c | 4 +-
4394 kernel/panic.c | 11 +-
4395 kernel/pid.c | 6 +-
4396 kernel/pid_namespace.c | 2 +-
4397 kernel/power/process.c | 12 +-
4398 kernel/profile.c | 14 +-
4399 kernel/ptrace.c | 8 +-
4400 kernel/rcu/rcutorture.c | 60 +-
4401 kernel/rcu/tiny.c | 4 +-
4402 kernel/rcu/tree.c | 42 +-
4403 kernel/rcu/tree.h | 16 +-
4404 kernel/rcu/tree_plugin.h | 18 +-
4405 kernel/rcu/tree_trace.c | 14 +-
4406 kernel/resource.c | 4 +-
4407 kernel/sched/auto_group.c | 4 +-
4408 kernel/sched/core.c | 49 +-
4409 kernel/sched/fair.c | 2 +-
4410 kernel/sched/rt.c | 4 +-
4411 kernel/sched/sched.h | 13 +-
4412 kernel/signal.c | 28 +-
4413 kernel/smp.c | 2 +-
4414 kernel/smpboot.c | 4 +-
4415 kernel/softirq.c | 12 +-
4416 kernel/stop_machine.c | 2 +-
4417 kernel/sys.c | 10 +-
4418 kernel/sys_ni.c | 4 +-
4419 kernel/sysctl.c | 34 +-
4420 kernel/time/alarmtimer.c | 4 +-
4421 kernel/time/posix-clock.c | 8 +-
4422 kernel/time/posix-cpu-timers.c | 4 +-
4423 kernel/time/posix-timers.c | 36 +-
4424 kernel/time/timer.c | 2 +-
4425 kernel/time/timer_stats.c | 10 +-
4426 kernel/trace/blktrace.c | 6 +-
4427 kernel/trace/ftrace.c | 33 +-
4428 kernel/trace/ring_buffer.c | 96 +-
4429 kernel/trace/trace.c | 2 +-
4430 kernel/trace/trace.h | 2 +-
4431 kernel/trace/trace_clock.c | 4 +-
4432 kernel/trace/trace_events.c | 1 -
4433 kernel/trace/trace_functions_graph.c | 4 +-
4434 kernel/trace/trace_mmiotrace.c | 8 +-
4435 kernel/trace/trace_output.c | 10 +-
4436 kernel/trace/trace_seq.c | 2 +-
4437 kernel/trace/trace_stack.c | 2 +-
4438 kernel/user.c | 2 +-
4439 kernel/user_namespace.c | 2 +-
4440 kernel/utsname_sysctl.c | 2 +-
4441 kernel/watchdog.c | 2 +-
4442 kernel/workqueue.c | 8 +-
4443 lib/Kconfig.debug | 8 +-
4444 lib/Makefile | 2 +-
4445 lib/bitmap.c | 8 +-
4446 lib/bug.c | 2 +
4447 lib/debugobjects.c | 2 +-
4448 lib/decompress_bunzip2.c | 3 +-
4449 lib/decompress_unlzma.c | 4 +-
4450 lib/div64.c | 4 +-
4451 lib/dma-debug.c | 4 +-
4452 lib/inflate.c | 2 +-
4453 lib/ioremap.c | 4 +-
4454 lib/irq_poll.c | 2 +-
4455 lib/kobject.c | 4 +-
4456 lib/list_debug.c | 126 +-
4457 lib/lockref.c | 44 +-
4458 lib/percpu-refcount.c | 2 +-
4459 lib/radix-tree.c | 2 +-
4460 lib/random32.c | 2 +-
4461 lib/rhashtable.c | 4 +-
4462 lib/show_mem.c | 2 +-
4463 lib/strncpy_from_user.c | 2 +-
4464 lib/strnlen_user.c | 2 +-
4465 lib/swiotlb.c | 2 +-
4466 lib/usercopy.c | 6 +
4467 lib/vsprintf.c | 12 +-
4468 mm/Kconfig | 6 +-
4469 mm/backing-dev.c | 4 +-
4470 mm/debug.c | 3 +
4471 mm/filemap.c | 10 +-
4472 mm/gup.c | 13 +-
4473 mm/highmem.c | 6 +-
4474 mm/hugetlb.c | 125 +-
4475 mm/hugetlb_cgroup.c | 60 +-
4476 mm/internal.h | 3 +-
4477 mm/maccess.c | 12 +-
4478 mm/madvise.c | 37 +
4479 mm/memcontrol.c | 6 +-
4480 mm/memory-failure.c | 6 +-
4481 mm/memory.c | 424 +-
4482 mm/mempolicy.c | 25 +
4483 mm/mlock.c | 18 +-
4484 mm/mm_init.c | 2 +-
4485 mm/mmap.c | 573 +-
4486 mm/mprotect.c | 137 +-
4487 mm/mremap.c | 39 +-
4488 mm/nommu.c | 21 +-
4489 mm/page-writeback.c | 2 +-
4490 mm/page_alloc.c | 53 +-
4491 mm/percpu.c | 2 +-
4492 mm/process_vm_access.c | 14 +-
4493 mm/readahead.c | 2 +-
4494 mm/rmap.c | 43 +-
4495 mm/shmem.c | 37 +-
4496 mm/slab.c | 111 +-
4497 mm/slab.h | 22 +-
4498 mm/slab_common.c | 86 +-
4499 mm/slob.c | 218 +-
4500 mm/slub.c | 111 +-
4501 mm/sparse-vmemmap.c | 4 +-
4502 mm/sparse.c | 2 +-
4503 mm/swap.c | 2 +
4504 mm/swapfile.c | 12 +-
4505 mm/util.c | 6 +
4506 mm/vmalloc.c | 116 +-
4507 mm/vmstat.c | 12 +-
4508 net/8021q/vlan.c | 5 +-
4509 net/8021q/vlan_netlink.c | 2 +-
4510 net/9p/mod.c | 4 +-
4511 net/9p/trans_fd.c | 2 +-
4512 net/atm/atm_misc.c | 8 +-
4513 net/atm/lec.h | 2 +-
4514 net/atm/proc.c | 6 +-
4515 net/atm/resources.c | 4 +-
4516 net/ax25/sysctl_net_ax25.c | 2 +-
4517 net/batman-adv/bat_iv_ogm.c | 8 +-
4518 net/batman-adv/fragmentation.c | 2 +-
4519 net/batman-adv/routing.c | 4 +-
4520 net/batman-adv/soft-interface.c | 12 +-
4521 net/batman-adv/sysfs.c | 40 +-
4522 net/batman-adv/sysfs.h | 4 +-
4523 net/batman-adv/translation-table.c | 14 +-
4524 net/batman-adv/types.h | 8 +-
4525 net/bluetooth/hci_sock.c | 2 +-
4526 net/bluetooth/l2cap_core.c | 6 +-
4527 net/bluetooth/l2cap_sock.c | 12 +-
4528 net/bluetooth/rfcomm/sock.c | 4 +-
4529 net/bluetooth/rfcomm/tty.c | 4 +-
4530 net/bridge/br_netlink.c | 2 +-
4531 net/bridge/netfilter/ebtables.c | 6 +-
4532 net/caif/cfctrl.c | 11 +-
4533 net/caif/chnl_net.c | 4 +-
4534 net/can/af_can.c | 2 +-
4535 net/can/gw.c | 6 +-
4536 net/ceph/ceph_common.c | 2 +-
4537 net/ceph/messenger.c | 4 +-
4538 net/compat.c | 26 +-
4539 net/core/datagram.c | 2 +-
4540 net/core/dev.c | 16 +-
4541 net/core/filter.c | 2 +-
4542 net/core/flow.c | 6 +-
4543 net/core/neighbour.c | 18 +-
4544 net/core/net-sysfs.c | 2 +-
4545 net/core/net_namespace.c | 8 +-
4546 net/core/netpoll.c | 4 +-
4547 net/core/rtnetlink.c | 17 +-
4548 net/core/scm.c | 12 +-
4549 net/core/skbuff.c | 11 +-
4550 net/core/sock.c | 28 +-
4551 net/core/sock_diag.c | 15 +-
4552 net/core/sysctl_net_core.c | 22 +-
4553 net/decnet/af_decnet.c | 1 +
4554 net/decnet/sysctl_net_decnet.c | 4 +-
4555 net/dsa/dsa.c | 2 +-
4556 net/hsr/hsr_device.c | 2 +-
4557 net/hsr/hsr_netlink.c | 2 +-
4558 net/ieee802154/6lowpan/core.c | 2 +-
4559 net/ieee802154/6lowpan/reassembly.c | 14 +-
4560 net/ipv4/af_inet.c | 2 +-
4561 net/ipv4/arp.c | 2 +-
4562 net/ipv4/devinet.c | 18 +-
4563 net/ipv4/fib_frontend.c | 6 +-
4564 net/ipv4/fib_semantics.c | 2 +-
4565 net/ipv4/inet_connection_sock.c | 4 +-
4566 net/ipv4/inet_diag.c | 4 +-
4567 net/ipv4/inet_timewait_sock.c | 2 +-
4568 net/ipv4/inetpeer.c | 2 +-
4569 net/ipv4/ip_fragment.c | 15 +-
4570 net/ipv4/ip_gre.c | 6 +-
4571 net/ipv4/ip_sockglue.c | 2 +-
4572 net/ipv4/ip_vti.c | 4 +-
4573 net/ipv4/ipconfig.c | 6 +-
4574 net/ipv4/ipip.c | 4 +-
4575 net/ipv4/netfilter/arp_tables.c | 12 +-
4576 net/ipv4/netfilter/ip_tables.c | 12 +-
4577 net/ipv4/ping.c | 14 +-
4578 net/ipv4/proc.c | 8 +-
4579 net/ipv4/raw.c | 14 +-
4580 net/ipv4/route.c | 32 +-
4581 net/ipv4/sysctl_net_ipv4.c | 22 +-
4582 net/ipv4/tcp_input.c | 6 +-
4583 net/ipv4/tcp_probe.c | 2 +-
4584 net/ipv4/udp.c | 10 +-
4585 net/ipv4/xfrm4_mode_transport.c | 2 +-
4586 net/ipv4/xfrm4_policy.c | 17 +-
4587 net/ipv4/xfrm4_state.c | 4 +-
4588 net/ipv6/addrconf.c | 24 +-
4589 net/ipv6/af_inet6.c | 2 +-
4590 net/ipv6/datagram.c | 2 +-
4591 net/ipv6/icmp.c | 2 +-
4592 net/ipv6/inet6_hashtables.c | 2 +-
4593 net/ipv6/ip6_fib.c | 4 +-
4594 net/ipv6/ip6_gre.c | 10 +-
4595 net/ipv6/ip6_tunnel.c | 4 +-
4596 net/ipv6/ip6_vti.c | 4 +-
4597 net/ipv6/ipv6_sockglue.c | 2 +-
4598 net/ipv6/ndisc.c | 2 +-
4599 net/ipv6/netfilter/ip6_tables.c | 12 +-
4600 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
4601 net/ipv6/ping.c | 33 +-
4602 net/ipv6/proc.c | 10 +-
4603 net/ipv6/raw.c | 17 +-
4604 net/ipv6/reassembly.c | 13 +-
4605 net/ipv6/route.c | 2 +-
4606 net/ipv6/sit.c | 4 +-
4607 net/ipv6/sysctl_net_ipv6.c | 2 +-
4608 net/ipv6/udp.c | 6 +-
4609 net/ipv6/xfrm6_mode_transport.c | 2 +-
4610 net/ipv6/xfrm6_policy.c | 17 +-
4611 net/irda/discovery.c | 2 +-
4612 net/irda/ircomm/ircomm_core.c | 13 +-
4613 net/irda/ircomm/ircomm_tty.c | 24 +-
4614 net/irda/ircomm/ircomm_tty_attach.c | 4 +-
4615 net/irda/irda_device.c | 14 +-
4616 net/irda/iriap.c | 14 +-
4617 net/irda/irias_object.c | 10 +-
4618 net/irda/irlan/irlan_client.c | 2 +-
4619 net/irda/irlap.c | 15 +-
4620 net/irda/irlap_event.c | 2 +-
4621 net/irda/irlmp.c | 21 +-
4622 net/irda/irlmp_event.c | 6 +-
4623 net/irda/irnet/irnet.h | 2 +-
4624 net/irda/irnet/irnet_irda.c | 6 +-
4625 net/irda/irttp.c | 8 +-
4626 net/irda/timer.c | 24 +-
4627 net/iucv/af_iucv.c | 4 +-
4628 net/iucv/iucv.c | 2 +-
4629 net/key/af_key.c | 4 +-
4630 net/l2tp/l2tp_eth.c | 40 +-
4631 net/l2tp/l2tp_ip.c | 2 +-
4632 net/l2tp/l2tp_ip6.c | 2 +-
4633 net/mac80211/cfg.c | 10 +-
4634 net/mac80211/debugfs.c | 2 +-
4635 net/mac80211/debugfs_key.c | 4 +-
4636 net/mac80211/ieee80211_i.h | 3 +-
4637 net/mac80211/iface.c | 20 +-
4638 net/mac80211/key.c | 4 +-
4639 net/mac80211/main.c | 2 +-
4640 net/mac80211/pm.c | 4 +-
4641 net/mac80211/rate.c | 2 +-
4642 net/mac80211/sta_info.c | 2 +-
4643 net/mac80211/tx.c | 2 +-
4644 net/mac80211/util.c | 8 +-
4645 net/mac80211/wpa.c | 10 +-
4646 net/mac802154/iface.c | 6 +-
4647 net/mpls/af_mpls.c | 10 +-
4648 net/netfilter/ipset/ip_set_core.c | 7 +-
4649 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
4650 net/netfilter/ipvs/ip_vs_core.c | 4 +-
4651 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
4652 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
4653 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
4654 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
4655 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
4656 net/netfilter/nf_conntrack_acct.c | 2 +-
4657 net/netfilter/nf_conntrack_core.c | 2 +-
4658 net/netfilter/nf_conntrack_ecache.c | 2 +-
4659 net/netfilter/nf_conntrack_helper.c | 2 +-
4660 net/netfilter/nf_conntrack_netlink.c | 22 +-
4661 net/netfilter/nf_conntrack_proto.c | 2 +-
4662 net/netfilter/nf_conntrack_standalone.c | 2 +-
4663 net/netfilter/nf_conntrack_timestamp.c | 2 +-
4664 net/netfilter/nf_log.c | 10 +-
4665 net/netfilter/nf_nat_ftp.c | 2 +-
4666 net/netfilter/nf_nat_irc.c | 2 +-
4667 net/netfilter/nf_sockopt.c | 4 +-
4668 net/netfilter/nf_tables_api.c | 13 +-
4669 net/netfilter/nfnetlink_acct.c | 7 +-
4670 net/netfilter/nfnetlink_cthelper.c | 2 +-
4671 net/netfilter/nfnetlink_cttimeout.c | 2 +-
4672 net/netfilter/nfnetlink_log.c | 4 +-
4673 net/netfilter/nft_compat.c | 9 +-
4674 net/netfilter/xt_IDLETIMER.c | 12 +-
4675 net/netfilter/xt_statistic.c | 8 +-
4676 net/netlink/af_netlink.c | 14 +-
4677 net/netlink/diag.c | 2 +-
4678 net/netlink/genetlink.c | 14 +-
4679 net/openvswitch/vport-geneve.c | 7 +-
4680 net/openvswitch/vport-gre.c | 7 +-
4681 net/openvswitch/vport-internal_dev.c | 4 +-
4682 net/openvswitch/vport-netdev.c | 7 +-
4683 net/openvswitch/vport-vxlan.c | 7 +-
4684 net/packet/af_packet.c | 26 +-
4685 net/packet/diag.c | 2 +-
4686 net/packet/internal.h | 6 +-
4687 net/phonet/pep.c | 6 +-
4688 net/phonet/socket.c | 2 +-
4689 net/phonet/sysctl.c | 2 +-
4690 net/rds/cong.c | 6 +-
4691 net/rds/ib.h | 2 +-
4692 net/rds/ib_cm.c | 2 +-
4693 net/rds/ib_recv.c | 4 +-
4694 net/rds/iw.h | 2 +-
4695 net/rds/iw_cm.c | 2 +-
4696 net/rds/iw_recv.c | 4 +-
4697 net/rds/rds.h | 2 +-
4698 net/rds/tcp.c | 2 +-
4699 net/rds/tcp.h | 6 +-
4700 net/rds/tcp_send.c | 2 +-
4701 net/rxrpc/af_rxrpc.c | 2 +-
4702 net/rxrpc/ar-ack.c | 14 +-
4703 net/rxrpc/ar-call.c | 2 +-
4704 net/rxrpc/ar-connection.c | 2 +-
4705 net/rxrpc/ar-connevent.c | 2 +-
4706 net/rxrpc/ar-input.c | 4 +-
4707 net/rxrpc/ar-internal.h | 8 +-
4708 net/rxrpc/ar-local.c | 2 +-
4709 net/rxrpc/ar-output.c | 4 +-
4710 net/rxrpc/ar-peer.c | 2 +-
4711 net/rxrpc/ar-proc.c | 4 +-
4712 net/rxrpc/ar-transport.c | 2 +-
4713 net/rxrpc/rxkad.c | 4 +-
4714 net/sched/sch_generic.c | 4 +-
4715 net/sched/sch_tbf.c | 9 +-
4716 net/sctp/ipv6.c | 6 +-
4717 net/sctp/protocol.c | 10 +-
4718 net/sctp/sm_sideeffect.c | 4 +-
4719 net/sctp/socket.c | 21 +-
4720 net/sctp/sysctl.c | 10 +-
4721 net/socket.c | 18 +-
4722 net/sunrpc/auth_gss/gss_rpc_upcall.c | 4 +-
4723 net/sunrpc/auth_gss/gss_rpc_xdr.c | 11 +-
4724 net/sunrpc/auth_gss/gss_rpc_xdr.h | 8 +-
4725 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
4726 net/sunrpc/clnt.c | 4 +-
4727 net/sunrpc/rpcb_clnt.c | 66 +-
4728 net/sunrpc/sched.c | 4 +-
4729 net/sunrpc/svc.c | 8 +-
4730 net/sunrpc/svcauth_unix.c | 2 +-
4731 net/sunrpc/xprtrdma/svc_rdma.c | 44 +-
4732 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
4733 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
4734 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
4735 net/tipc/netlink_compat.c | 12 +-
4736 net/tipc/subscr.c | 2 +-
4737 net/unix/diag.c | 2 +-
4738 net/unix/sysctl_net_unix.c | 2 +-
4739 net/wireless/scan.c | 3 +-
4740 net/wireless/wext-compat.c | 140 +-
4741 net/wireless/wext-compat.h | 8 +-
4742 net/wireless/wext-core.c | 19 +-
4743 net/wireless/wext-sme.c | 5 +-
4744 net/xfrm/xfrm_policy.c | 16 +-
4745 net/xfrm/xfrm_state.c | 37 +-
4746 net/xfrm/xfrm_sysctl.c | 2 +-
4747 net/xfrm/xfrm_user.c | 2 +-
4748 scripts/Kbuild.include | 2 +-
4749 scripts/Makefile.build | 2 +-
4750 scripts/Makefile.clean | 3 +-
4751 scripts/Makefile.extrawarn | 4 +
4752 scripts/Makefile.gcc-plugins | 69 +
4753 scripts/Makefile.host | 68 +-
4754 scripts/basic/fixdep.c | 12 +-
4755 scripts/dtc/checks.c | 14 +-
4756 scripts/dtc/data.c | 6 +-
4757 scripts/dtc/flattree.c | 8 +-
4758 scripts/dtc/livetree.c | 4 +-
4759 scripts/gcc-plugin.sh | 51 +
4760 scripts/headers_install.sh | 1 +
4761 scripts/kallsyms.c | 4 +-
4762 scripts/kconfig/lkc.h | 5 +-
4763 scripts/kconfig/menu.c | 2 +-
4764 scripts/kconfig/symbol.c | 6 +-
4765 scripts/link-vmlinux.sh | 2 +-
4766 scripts/mod/file2alias.c | 14 +-
4767 scripts/mod/modpost.c | 40 +-
4768 scripts/mod/modpost.h | 6 +-
4769 scripts/mod/sumversion.c | 2 +-
4770 scripts/module-common.lds | 4 +
4771 scripts/package/builddeb | 1 +
4772 scripts/pnmtologo.c | 6 +-
4773 scripts/sortextable.h | 6 +-
4774 scripts/tags.sh | 2 +-
4775 security/Kconfig | 703 +-
4776 security/apparmor/include/policy.h | 2 +-
4777 security/apparmor/lsm.c | 16 +-
4778 security/apparmor/policy.c | 4 +-
4779 security/integrity/ima/ima.h | 4 +-
4780 security/integrity/ima/ima_api.c | 2 +-
4781 security/integrity/ima/ima_fs.c | 4 +-
4782 security/integrity/ima/ima_queue.c | 2 +-
4783 security/keys/internal.h | 8 +-
4784 security/keys/key.c | 18 +-
4785 security/keys/keyring.c | 4 -
4786 security/selinux/avc.c | 6 +-
4787 security/selinux/include/xfrm.h | 2 +-
4788 security/yama/yama_lsm.c | 2 +-
4789 sound/aoa/codecs/onyx.c | 7 +-
4790 sound/aoa/codecs/onyx.h | 1 +
4791 sound/core/oss/pcm_oss.c | 18 +-
4792 sound/core/pcm_compat.c | 2 +-
4793 sound/core/pcm_lib.c | 3 +-
4794 sound/core/pcm_native.c | 4 +-
4795 sound/core/rawmidi.c | 5 +-
4796 sound/core/seq/oss/seq_oss_synth.c | 4 +-
4797 sound/core/seq/seq_clientmgr.c | 10 +-
4798 sound/core/seq/seq_compat.c | 2 +-
4799 sound/core/seq/seq_fifo.c | 6 +-
4800 sound/core/seq/seq_fifo.h | 2 +-
4801 sound/core/seq/seq_memory.c | 18 +-
4802 sound/core/seq/seq_midi.c | 5 +-
4803 sound/core/seq/seq_virmidi.c | 2 +-
4804 sound/core/sound.c | 2 +-
4805 sound/drivers/mts64.c | 14 +-
4806 sound/drivers/opl4/opl4_lib.c | 2 +-
4807 sound/drivers/portman2x4.c | 3 +-
4808 sound/firewire/amdtp-am824.c | 2 +-
4809 sound/firewire/amdtp-stream.c | 4 +-
4810 sound/firewire/amdtp-stream.h | 2 +-
4811 sound/firewire/digi00x/amdtp-dot.c | 2 +-
4812 sound/firewire/isight.c | 10 +-
4813 sound/firewire/oxfw/oxfw-scs1x.c | 8 +-
4814 sound/oss/sb_audio.c | 2 +-
4815 sound/oss/swarm_cs4297a.c | 6 +-
4816 sound/pci/als300.c | 2 +-
4817 sound/pci/aw2/aw2-alsa.c | 2 -
4818 sound/pci/aw2/aw2-saa7146.c | 4 +-
4819 sound/pci/ctxfi/ctamixer.c | 14 +-
4820 sound/pci/ctxfi/ctamixer.h | 8 +-
4821 sound/pci/ctxfi/ctatc.c | 20 +-
4822 sound/pci/ctxfi/ctdaio.c | 6 +-
4823 sound/pci/ctxfi/ctdaio.h | 4 +-
4824 sound/pci/ctxfi/ctsrc.c | 13 +-
4825 sound/pci/ctxfi/ctsrc.h | 8 +-
4826 sound/pci/hda/hda_codec.c | 2 +-
4827 sound/pci/ymfpci/ymfpci.h | 2 +-
4828 sound/pci/ymfpci/ymfpci_main.c | 12 +-
4829 sound/soc/codecs/cx20442.c | 8 +-
4830 sound/soc/codecs/sti-sas.c | 10 +-
4831 sound/soc/codecs/tlv320dac33.c | 7 +-
4832 sound/soc/codecs/uda1380.c | 7 +-
4833 sound/soc/intel/skylake/skl-sst-dsp.h | 4 +-
4834 sound/soc/soc-ac97.c | 6 +-
4835 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
4836 tools/gcc/Makefile | 46 +
4837 tools/gcc/checker_plugin.c | 496 +
4838 tools/gcc/colorize_plugin.c | 162 +
4839 tools/gcc/constify_plugin.c | 521 +
4840 tools/gcc/gcc-common.h | 858 +
4841 tools/gcc/gcc-generate-gimple-pass.h | 175 +
4842 tools/gcc/gcc-generate-ipa-pass.h | 289 +
4843 tools/gcc/gcc-generate-rtl-pass.h | 175 +
4844 tools/gcc/gcc-generate-simple_ipa-pass.h | 175 +
4845 tools/gcc/initify_plugin.c | 536 +
4846 tools/gcc/kallocstat_plugin.c | 135 +
4847 tools/gcc/kernexec_plugin.c | 407 +
4848 tools/gcc/latent_entropy_plugin.c | 422 +
4849 tools/gcc/randomize_layout_seed.h | 1 +
4850 tools/gcc/rap_plugin/Makefile | 4 +
4851 tools/gcc/rap_plugin/rap.h | 36 +
4852 tools/gcc/rap_plugin/rap_fptr_pass.c | 220 +
4853 tools/gcc/rap_plugin/rap_hash.c | 381 +
4854 tools/gcc/rap_plugin/rap_plugin.c | 477 +
4855 tools/gcc/rap_plugin/sip.c | 96 +
4856 tools/gcc/size_overflow_plugin/.gitignore | 3 +
4857 tools/gcc/size_overflow_plugin/Makefile | 28 +
4858 .../disable_size_overflow_hash.data | 12440 +++++++++++
4859 .../generate_size_overflow_hash.sh | 103 +
4860 .../insert_size_overflow_asm.c | 369 +
4861 .../size_overflow_plugin/intentional_overflow.c | 1118 +
4862 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
4863 tools/gcc/size_overflow_plugin/size_overflow.h | 329 +
4864 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
4865 .../size_overflow_plugin/size_overflow_hash.data | 21508 +++++++++++++++++++
4866 .../size_overflow_hash_aux.data | 92 +
4867 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1163 +
4868 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
4869 .../size_overflow_plugin/size_overflow_plugin.c | 290 +
4870 .../size_overflow_plugin_hash.c | 352 +
4871 .../size_overflow_plugin/size_overflow_transform.c | 745 +
4872 .../size_overflow_transform_core.c | 1015 +
4873 tools/gcc/stackleak_plugin.c | 350 +
4874 tools/gcc/structleak_plugin.c | 239 +
4875 tools/include/linux/compiler.h | 8 +
4876 tools/perf/util/include/asm/alternative-asm.h | 3 +
4877 tools/virtio/linux/uaccess.h | 2 +-
4878 virt/kvm/kvm_main.c | 42 +-
4879 2639 files changed, 76327 insertions(+), 13888 deletions(-)
4880 commit 5988c8dba8a5da45e35d71f4a8fec34c267258c5
4881 Author: Brad Spengler <spender@grsecurity.net>
4882 Date: Mon Apr 25 20:40:53 2016 -0400
4883
4884 Fix DoS in n_tty_receive_buf_common reported by marcan at:
4885 https://forums.grsecurity.net/viewtopic.php?t=4342&p=16222
4886 and via lengthy diatribe on Twitter:
4887 https://twitter.com/marcan42/status/724740708104474626
4888 https://twitter.com/marcan42/status/724740985146609664
4889 https://twitter.com/marcan42/status/724741270325760000
4890 https://twitter.com/marcan42/status/724742465199050752
4891 https://twitter.com/marcan42/status/724745886794833920
4892 https://twitter.com/marcan42/status/724749571495075840
4893 https://twitter.com/marcan42/status/724746427285409796
4894 https://twitter.com/marcan42/status/724743150263095296
4895 https://twitter.com/marcan42/status/724757473433808896
4896
4897 Fix it correctly instead of using the incorrect fix suggested
4898 by marcan (aka "try reading the code next time")
4899 The original code was meant to fix an integer truncation issue
4900 that would also have caused a SIZE_OVERFLOW "DoS".
4901
4902 drivers/tty/n_tty.c | 9 +++++----
4903 1 file changed, 5 insertions(+), 4 deletions(-)
4904
4905 commit 5459ff57d8987389fa17d5d6f55b70a789347c2f
4906 Author: Brad Spengler <spender@grsecurity.net>
4907 Date: Mon Apr 25 19:52:33 2016 -0400
4908
4909 Avoid overflow in environ_read() caught by SIZE_OVERFLOW,
4910 reported by jotik at:
4911 https://forums.grsecurity.net/viewtopic.php?t=4363&p=16217
4912 patch from Mathias Krause
4913
4914 fs/proc/base.c | 2 +-
4915 1 file changed, 1 insertion(+), 1 deletion(-)
4916
4917 commit 24a5c92e147af1e739e9eeca020c61ad2674e784
4918 Author: Jiri Benc <jbenc@redhat.com>
4919 Date: Fri Apr 22 13:09:13 2016 +0200
4920
4921 cxgbi: fix uninitialized flowi6
4922
4923 ip6_route_output looks into different fields in the passed flowi6 structure,
4924 yet cxgbi passes garbage in nearly all those fields. Zero the structure out
4925 first.
4926
4927 Fixes: fc8d0590d9142 ("libcxgbi: Add ipv6 api to driver")
4928 Signed-off-by: Jiri Benc <jbenc@redhat.com>
4929 Signed-off-by: David S. Miller <davem@davemloft.net>
4930
4931 drivers/scsi/cxgbi/libcxgbi.c | 1 +
4932 1 file changed, 1 insertion(+)
4933
4934 commit ec65caa32652841a5be21d6e73146921af16d7a8
4935 Author: Brad Spengler <spender@grsecurity.net>
4936 Date: Wed Apr 20 20:59:43 2016 -0400
4937
4938 Make /proc/sched_debug only readable by root, mentioned in
4939 recent NCC Group paper on Linux containers
4940
4941 kernel/sched/debug.c | 4 ++++
4942 1 file changed, 4 insertions(+)
4943
4944 commit 7957d30730bb26a4aef54ab484dc3b4108f1fdb1
4945 Merge: 463149f ff26083
4946 Author: Brad Spengler <spender@grsecurity.net>
4947 Date: Wed Apr 20 17:55:53 2016 -0400
4948
4949 Merge branch 'pax-test' into grsec-test
4950
4951 commit ff260839e610d2bc1b0c579edd7deb0028198f01
4952 Author: Brad Spengler <spender@grsecurity.net>
4953 Date: Wed Apr 20 17:55:24 2016 -0400
4954
4955 Update to pax-linux-4.4.8-test14.patch:
4956 - Emese fixed some CodingStyle issues in the latent entropy plugin
4957 - fixed some build problems on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394)
4958
4959 arch/mips/include/asm/cache.h | 3 ++-
4960 arch/mips/lib/ashldi3.c | 21 ++++++++++++++-------
4961 arch/mips/lib/ashrdi3.c | 19 +++++++++++++------
4962 arch/mips/lib/libgcc.h | 12 +++++++++---
4963 drivers/idle/intel_idle.c | 6 ++++--
4964 tools/gcc/latent_entropy_plugin.c | 29 +++++++++++++++--------------
4965 6 files changed, 57 insertions(+), 33 deletions(-)
4966
4967 commit 463149f47a64db4b26a13009f83ed73d393a209c
4968 Author: Xiaodong Liu <xiaodong.liu@intel.com>
4969 Date: Tue Apr 12 09:45:51 2016 +0000
4970
4971 crypto: sha1-mb - use corrcet pointer while completing jobs
4972
4973 In sha_complete_job, incorrect mcryptd_hash_request_ctx pointer is used
4974 when check and complete other jobs. If the memory of first completed req
4975 is freed, while still completing other jobs in the func, kernel will
4976 crash since NULL pointer is assigned to RIP.
4977
4978 Cc: <stable@vger.kernel.org>
4979 Signed-off-by: Xiaodong Liu <xiaodong.liu@intel.com>
4980 Acked-by: Tim Chen <tim.c.chen@linux.intel.com>
4981 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
4982
4983 arch/x86/crypto/sha-mb/sha1_mb.c | 4 ++--
4984 1 file changed, 2 insertions(+), 2 deletions(-)
4985
4986 commit b4e6484e67b917afb77478cab1260f41dbbc92fc
4987 Author: Tom Lendacky <thomas.lendacky@amd.com>
4988 Date: Wed Apr 13 10:52:25 2016 -0500
4989
4990 crypto: ccp - Prevent information leakage on export
4991
4992 Prevent information from leaking to userspace by doing a memset to 0 of
4993 the export state structure before setting the structure values and copying
4994 it. This prevents un-initialized padding areas from being copied into the
4995 export area.
4996
4997 Cc: <stable@vger.kernel.org> # 3.14.x-
4998 Reported-by: Ben Hutchings <ben@decadent.org.uk>
4999 Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
5000 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
5001
5002 drivers/crypto/ccp/ccp-crypto-aes-cmac.c | 3 +++
5003 drivers/crypto/ccp/ccp-crypto-sha.c | 3 +++
5004 2 files changed, 6 insertions(+)
5005
5006 commit 7d7e961d3f4e4614b22518d8e410e6cf4108f1b0
5007 Author: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
5008 Date: Mon Apr 18 14:33:54 2016 +0300
5009
5010 net/mlx4_en: allocate non 0-order pages for RX ring with __GFP_NOMEMALLOC
5011
5012 High order pages are optional here since commit 51151a16a60f ("mlx4: allow
5013 order-0 memory allocations in RX path"), so here is no reason for depleting
5014 reserves. Generic __netdev_alloc_frag() implements the same logic.
5015
5016 Signed-off-by: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
5017 Acked-by: Eric Dumazet <edumazet@google.com>
5018 Signed-off-by: David S. Miller <davem@davemloft.net>
5019
5020 drivers/net/ethernet/mellanox/mlx4/en_rx.c | 2 +-
5021 1 file changed, 1 insertion(+), 1 deletion(-)
5022
5023 commit 6b80edde2edc7fd055f9be8ec42b88abbe328639
5024 Author: Ignat Korchagin <ignat.korchagin@gmail.com>
5025 Date: Thu Mar 17 18:00:29 2016 +0000
5026
5027 USB: usbip: fix potential out-of-bounds write
5028
5029 Fix potential out-of-bounds write to urb->transfer_buffer
5030 usbip handles network communication directly in the kernel. When receiving a
5031 packet from its peer, usbip code parses headers according to protocol. As
5032 part of this parsing urb->actual_length is filled. Since the input for
5033 urb->actual_length comes from the network, it should be treated as untrusted.
5034 Any entity controlling the network may put any value in the input and the
5035 preallocated urb->transfer_buffer may not be large enough to hold the data.
5036 Thus, the malicious entity is able to write arbitrary data to kernel memory.
5037
5038 Signed-off-by: Ignat Korchagin <ignat.korchagin@gmail.com>
5039 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
5040
5041 drivers/usb/usbip/usbip_common.c | 11 +++++++++++
5042 1 file changed, 11 insertions(+)
5043
5044 commit 0ce101ec9e74c2cfcd28cbcd18b0626e3d9a2482
5045 Merge: d60a24d f5fe5fd
5046 Author: Brad Spengler <spender@grsecurity.net>
5047 Date: Wed Apr 20 17:35:58 2016 -0400
5048
5049 Merge branch 'pax-test' into grsec-test
5050
5051 commit f5fe5fddf49f1b81a2a3bb43b1e0a8c087aba438
5052 Merge: a107ba2 8c9aef0
5053 Author: Brad Spengler <spender@grsecurity.net>
5054 Date: Wed Apr 20 17:35:29 2016 -0400
5055
5056 Merge branch 'linux-4.4.y' into pax-test
5057
5058 commit d60a24d6e4f61072d0bd1dc12be1177181fa8c2b
5059 Author: Brad Spengler <spender@grsecurity.net>
5060 Date: Mon Apr 18 17:48:10 2016 -0400
5061
5062 fix cast for constify change, reported by pipacs
5063
5064 drivers/idle/intel_idle.c | 4 ++--
5065 1 file changed, 2 insertions(+), 2 deletions(-)
5066
5067 commit 1d376287aeba7a53c91d5ee49ef0a11d02193964
5068 Author: Brad Spengler <spender@grsecurity.net>
5069 Date: Fri Apr 15 21:31:07 2016 -0400
5070
5071 Use proper type for function pointer
5072
5073 drivers/gpu/drm/gma500/mdfld_dsi_output.c | 6 +++---
5074 1 file changed, 3 insertions(+), 3 deletions(-)
5075
5076 commit 0a4104a2fa32904102fac07245426d78a1e9dfab
5077 Author: Brad Spengler <spender@grsecurity.net>
5078 Date: Fri Apr 15 21:24:04 2016 -0400
5079
5080 Fix skylake cstates compat with constify
5081
5082 drivers/idle/intel_idle.c | 6 ++++--
5083 1 file changed, 4 insertions(+), 2 deletions(-)
5084
5085 commit f433f8fd372253c9e78e307afe5b800c5ab0ea61
5086 Author: Brad Spengler <spender@grsecurity.net>
5087 Date: Fri Apr 15 21:10:44 2016 -0400
5088
5089 Update size_overflow hash table
5090
5091 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 3 ++-
5092 1 file changed, 2 insertions(+), 1 deletion(-)
5093
5094 commit ef7804da81cb3c6b6a4c985a3c14ee230a03f26a
5095 Author: Brad Spengler <spender@grsecurity.net>
5096 Date: Fri Apr 15 20:52:37 2016 -0400
5097
5098 compile fix
5099
5100 fs/coredump.c | 3 ---
5101 1 file changed, 3 deletions(-)
5102
5103 commit 967224da52bd98d078b1237aea5ec9e622238fba
5104 Merge: 92771d6 a107ba2
5105 Author: Brad Spengler <spender@grsecurity.net>
5106 Date: Fri Apr 15 20:30:23 2016 -0400
5107
5108 Merge branch 'pax-test' into grsec-test
5109
5110 commit a107ba25214d9694eb836fb04c782ad694977b91
5111 Merge: 4d8fc00 b40108b
5112 Author: Brad Spengler <spender@grsecurity.net>
5113 Date: Fri Apr 15 20:18:26 2016 -0400
5114
5115 Merge branch 'linux-4.4.y' into pax-test
5116
5117 commit 92771d60677d68e8f6ea7a91ff34dd6e24b6d4cf
5118 Author: Brad Spengler <spender@grsecurity.net>
5119 Date: Sun Apr 10 07:18:03 2016 -0400
5120
5121 From: Mathias Krause <minipli@googlemail.com>
5122 To: "David S. Miller" <davem@davemloft.net>
5123 Cc: netdev@vger.kernel.org, "Eric W. Biederman" <ebiederm@xmission.com>, Pavel
5124 Emelyanov <xemul@parallels.com>
5125 Subject: [PATCH net] packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag
5126 interface
5127
5128 Because we miss to wipe the remainder of i->addr[] in packet_mc_add(),
5129 pdiag_put_mclist() leaks uninitialized heap bytes via the
5130 PACKET_DIAG_MCLIST netlink attribute.
5131
5132 Fix this by explicitly memset(0)ing the remaining bytes in i->addr[].
5133
5134 Fixes: eea68e2f1a00 ("packet: Report socket mclist info via diag module")
5135 Signed-off-by: Mathias Krause <minipli@googlemail.com>
5136 Cc: Eric W. Biederman <ebiederm@xmission.com>
5137 Cc: Pavel Emelyanov <xemul@parallels.com>
5138 ---
5139 The bug itself precedes commit eea68e2f1a00 but the list wasn't exposed
5140 to userland before the introduction of the packet_diag interface.
5141 Therefore the "Fixes:" line on that commit.
5142
5143 net/packet/af_packet.c | 1 +
5144 1 file changed, 1 insertion(+)
5145
5146 commit 4286ce3f9e9db4d68870af46ae1d5f9b90b920dd
5147 Author: Jakub Sitnicki <jkbs@redhat.com>
5148 Date: Tue Apr 5 18:41:08 2016 +0200
5149
5150 ipv6: Count in extension headers in skb->network_header
5151
5152 When sending a UDPv6 message longer than MTU, account for the length
5153 of fragmentable IPv6 extension headers in skb->network_header offset.
5154 Same as we do in alloc_new_skb path in __ip6_append_data().
5155
5156 This ensures that later on __ip6_make_skb() will make space in
5157 headroom for fragmentable extension headers:
5158
5159 /* move skb->data to ip header from ext header */
5160 if (skb->data < skb_network_header(skb))
5161 __skb_pull(skb, skb_network_offset(skb));
5162
5163 Prevents a splat due to skb_under_panic:
5164
5165 skbuff: skb_under_panic: text:ffffffff8143397b len:2126 put:14 \
5166 head:ffff880005bacf50 data:ffff880005bacf4a tail:0x48 end:0xc0 dev:lo
5167 ------------[ cut here ]------------
5168 kernel BUG at net/core/skbuff.c:104!
5169 invalid opcode: 0000 [#1] KASAN
5170 CPU: 0 PID: 160 Comm: reproducer Not tainted 4.6.0-rc2 #65
5171 [...]
5172 Call Trace:
5173 [<ffffffff813eb7b9>] skb_push+0x79/0x80
5174 [<ffffffff8143397b>] eth_header+0x2b/0x100
5175 [<ffffffff8141e0d0>] neigh_resolve_output+0x210/0x310
5176 [<ffffffff814eab77>] ip6_finish_output2+0x4a7/0x7c0
5177 [<ffffffff814efe3a>] ip6_output+0x16a/0x280
5178 [<ffffffff815440c1>] ip6_local_out+0xb1/0xf0
5179 [<ffffffff814f1115>] ip6_send_skb+0x45/0xd0
5180 [<ffffffff81518836>] udp_v6_send_skb+0x246/0x5d0
5181 [<ffffffff8151985e>] udpv6_sendmsg+0xa6e/0x1090
5182 [...]
5183
5184 Reported-by: Ji Jianwen <jiji@redhat.com>
5185 Signed-off-by: Jakub Sitnicki <jkbs@redhat.com>
5186 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
5187 Signed-off-by: David S. Miller <davem@davemloft.net>
5188
5189 net/ipv6/ip6_output.c | 8 ++++----
5190 1 file changed, 4 insertions(+), 4 deletions(-)
5191
5192 commit 638dad49a9ba3d86f627adb58b2f4636ed253685
5193 Author: Thadeu Lima de Souza Cascardo <cascardo@redhat.com>
5194 Date: Fri Apr 1 17:17:50 2016 -0300
5195
5196 ip6_tunnel: set rtnl_link_ops before calling register_netdevice
5197
5198 When creating an ip6tnl tunnel with ip tunnel, rtnl_link_ops is not set
5199 before ip6_tnl_create2 is called. When register_netdevice is called, there
5200 is no linkinfo attribute in the NEWLINK message because of that.
5201
5202 Setting rtnl_link_ops before calling register_netdevice fixes that.
5203
5204 Fixes: 0b112457229d ("ip6tnl: add support of link creation via rtnl")
5205 Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@redhat.com>
5206 Acked-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
5207 Signed-off-by: David S. Miller <davem@davemloft.net>
5208
5209 net/ipv6/ip6_tunnel.c | 2 +-
5210 1 file changed, 1 insertion(+), 1 deletion(-)
5211
5212 commit 14146a0bfaf2ced0055fe549c8fa0941c61e2457
5213 Author: Brad Spengler <spender@grsecurity.net>
5214 Date: Tue Apr 5 21:12:44 2016 -0400
5215
5216 Code cleanups to RANDSTRUCT based on feedback from the PaX Team
5217
5218 tools/gcc/randomize_layout_plugin.c | 18 ++++++++++++------
5219 1 file changed, 12 insertions(+), 6 deletions(-)
5220
5221 commit 3f7dea5e59b0bb34f6bdb628c87251f0105b3d57
5222 Author: Brad Spengler <spender@grsecurity.net>
5223 Date: Sun Apr 3 20:10:10 2016 -0400
5224
5225 Fix RANDSTRUCT support on ARM
5226
5227 tools/gcc/randomize_layout_plugin.c | 54 +++++++++++++++++++++++++++++++++++--
5228 1 file changed, 52 insertions(+), 2 deletions(-)
5229
5230 commit bd893a75ab49f6ea5a216eb334471507337118ba
5231 Merge: 87b7f1d 4d8fc00
5232 Author: Brad Spengler <spender@grsecurity.net>
5233 Date: Sat Apr 2 11:54:20 2016 -0400
5234
5235 Merge branch 'pax-test' into grsec-test
5236
5237 commit 4d8fc00c0066b1921e233123b346efe6ffb27691
5238 Author: Brad Spengler <spender@grsecurity.net>
5239 Date: Sat Apr 2 11:53:53 2016 -0400
5240
5241 Update to pax-linux-4.4.6-test13.patch:
5242 - fixed a REFCOUNT related compile regression on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394)
5243 - worked around an integer signedness mixup in md causing a size overflow false positive, reported by Étienne Buira (https://bugs.gentoo.org/show_bug.cgi?id=578502)
5244
5245 arch/mips/include/asm/atomic.h | 4 ----
5246 tools/gcc/size_overflow_plugin/disable_size_overflow_hash.data | 1 +
5247 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 -
5248 3 files changed, 1 insertion(+), 5 deletions(-)
5249
5250 commit 87b7f1d200023ba826b9d552834a2ee85e67526c
5251 Merge: 3335266 3abdad0
5252 Author: Brad Spengler <spender@grsecurity.net>
5253 Date: Sat Apr 2 11:19:17 2016 -0400
5254
5255 Merge branch 'pax-test' into grsec-test
5256
5257 commit 3abdad0c3b436c076c88289f07a250b811d6f79d
5258 Author: Brad Spengler <spender@grsecurity.net>
5259 Date: Sat Apr 2 11:12:56 2016 -0400
5260
5261 Update to pax-linux-4.4.6-test12.patch:
5262 - fixed vmalloc_fault on i386/PAE to use the correct percpu userland pgd table/entry
5263 - fixed a size overflow false positive report in pptp, reported by Pinkbyte (https://forums.grsecurity.net/viewtopic.php?f=3&t=4437)
5264 - fixed a size overflow false positive report in tbf_segment, reported by audiocricket (https://forums.grsecurity.net/viewtopic.php?f=3&t=4438)
5265 - Emese fixed the x86 vdso32 CFLAGS to omit the gcc plugins
5266 - Emese simplified the gcc plugin related make rules, suggested by Masahiro Yamada
5267 - André Fabian Silva Delgado fixed a compile regression on arm, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4435)
5268 - fixed an integer sign conversion error in nfs_super_set_maxbytes caught by the size overflow plugin, reported by Alexey Dvoichenkov <xale@hyperplane.net>
5269 - fixed a size overflow false positive in squashfs, reported by Mathias Krause <minipli@ld-linux.so>
5270 - fixed a size overflow false positive in xfrm6_transport_output, reported by marcan (https://forums.grsecurity.net/viewtopic.php?f=3&t=4426)
5271 - fixed an integer truncation bug in elf_kcore_store_hdr caught by the size overflow plugin
5272 - fixed a gratuitous userland dereference in the amd64 stack walker
5273 - added latent entropy gathering to a few more functions
5274 - constified a few smp_hotplug_thread instances
5275
5276 arch/x86/entry/vdso/Makefile | 1 +
5277 arch/x86/include/asm/cpufeature.h | 1 -
5278 arch/x86/kernel/dumpstack_64.c | 17 ++++++-----------
5279 arch/x86/kernel/head_32.S | 6 +++---
5280 arch/x86/mm/fault.c | 2 +-
5281 drivers/iommu/arm-smmu.c | 2 +-
5282 drivers/net/ppp/pptp.c | 1 +
5283 drivers/staging/rdma/ehca/ehca_irq.c | 2 +-
5284 fs/nfs/internal.h | 5 +++--
5285 fs/proc/kcore.c | 2 +-
5286 kernel/module.c | 6 +++---
5287 kernel/rcu/tree.c | 2 +-
5288 kernel/softirq.c | 2 +-
5289 kernel/stop_machine.c | 2 +-
5290 net/ipv6/xfrm6_mode_transport.c | 2 +-
5291 net/sched/sch_tbf.c | 9 ++++++---
5292 scripts/Makefile.gcc-plugins | 13 +++----------
5293 scripts/Makefile.host | 3 +--
5294 .../disable_size_overflow_hash.data | 4 +++-
5295 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 6 ++----
5296 20 files changed, 40 insertions(+), 48 deletions(-)
5297
5298 commit 3335266d5bec9bc01580736c0a7026ed96cf25e5
5299 Author: Mika Penttilä <mika.penttila@nextfour.com>
5300 Date: Mon Feb 22 17:56:52 2016 +0100
5301
5302 ARM: 8544/1: set_memory_xx fixes
5303
5304 Allow zero size updates. This makes set_memory_xx() consistent with x86, s390 and arm64 and makes apply_to_page_range() not to BUG() when loading modules.
5305
5306 Signed-off-by: Mika Penttilä mika.penttila@nextfour.com
5307 Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
5308
5309 arch/arm/mm/pageattr.c | 3 +++
5310 1 file changed, 3 insertions(+)
5311
5312 commit d6d6499b22c0e5593a16f41c516041b23fbf9eeb
5313 Author: Josh Boyer <jwboyer@fedoraproject.org>
5314 Date: Mon Mar 14 10:42:38 2016 -0400
5315
5316 USB: iowarrior: fix oops with malicious USB descriptors
5317
5318 The iowarrior driver expects at least one valid endpoint. If given
5319 malicious descriptors that specify 0 for the number of endpoints,
5320 it will crash in the probe function. Ensure there is at least
5321 one endpoint on the interface before using it.
5322
5323 The full report of this issue can be found here:
5324 http://seclists.org/bugtraq/2016/Mar/87
5325
5326 Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
5327 Cc: stable <stable@vger.kernel.org>
5328 Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org>
5329 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
5330
5331 drivers/usb/misc/iowarrior.c | 6 ++++++
5332 1 file changed, 6 insertions(+)
5333
5334 commit 79a1fb47ab1245e81040bcd45b3e44e65d282684
5335 Author: Oliver Neukum <oneukum@suse.com>
5336 Date: Tue Mar 15 10:14:04 2016 +0100
5337
5338 USB: cdc-acm: more sanity checking
5339
5340 An attack has become available which pretends to be a quirky
5341 device circumventing normal sanity checks and crashes the kernel
5342 by an insufficient number of interfaces. This patch adds a check
5343 to the code path for quirky devices.
5344
5345 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5346 CC: stable@vger.kernel.org
5347 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
5348
5349 drivers/usb/class/cdc-acm.c | 3 +++
5350 1 file changed, 3 insertions(+)
5351
5352 commit 6ee21acdf0da6602671cb50edeca0abfba3955f7
5353 Author: Oliver Neukum <oneukum@suse.com>
5354 Date: Wed Mar 16 13:26:17 2016 +0100
5355
5356 USB: usb_driver_claim_interface: add sanity checking
5357
5358 Attacks that trick drivers into passing a NULL pointer
5359 to usb_driver_claim_interface() using forged descriptors are
5360 known. This thwarts them by sanity checking.
5361
5362 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5363 CC: stable@vger.kernel.org
5364 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
5365
5366 drivers/usb/core/driver.c | 6 +++++-
5367 1 file changed, 5 insertions(+), 1 deletion(-)
5368
5369 commit 44247834ddab762509eaaf5c742e15bfadcd9d94
5370 Author: Paolo Bonzini <pbonzini@redhat.com>
5371 Date: Mon Mar 21 10:15:25 2016 +0100
5372
5373 KVM: fix spin_lock_init order on x86
5374
5375 Moving the initialization earlier is needed in 4.6 because
5376 kvm_arch_init_vm is now using mmu_lock, causing lockdep to
5377 complain:
5378
5379 [ 284.440294] INFO: trying to register non-static key.
5380 [ 284.445259] the code is fine but needs lockdep annotation.
5381 [ 284.450736] turning off the locking correctness validator.
5382 ...
5383 [ 284.528318] [<ffffffff810aecc3>] lock_acquire+0xd3/0x240
5384 [ 284.533733] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm]
5385 [ 284.541467] [<ffffffff81715581>] _raw_spin_lock+0x41/0x80
5386 [ 284.546960] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm]
5387 [ 284.554707] [<ffffffffa0305aa0>] kvm_page_track_register_notifier+0x20/0x60 [kvm]
5388 [ 284.562281] [<ffffffffa02ece70>] kvm_mmu_init_vm+0x20/0x30 [kvm]
5389 [ 284.568381] [<ffffffffa02dbf7a>] kvm_arch_init_vm+0x1ea/0x200 [kvm]
5390 [ 284.574740] [<ffffffffa02bff3f>] kvm_dev_ioctl+0xbf/0x4d0 [kvm]
5391
5392 However, it also helps fixing a preexisting problem, which is why this
5393 patch is also good for stable kernels: kvm_create_vm was incrementing
5394 current->mm->mm_count but not decrementing it at the out_err label (in
5395 case kvm_init_mmu_notifier failed). The new initialization order makes
5396 it possible to add the required mmdrop without adding a new error label.
5397
5398 Cc: stable@vger.kernel.org
5399 Reported-by: Borislav Petkov <bp@alien8.de>
5400 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5401
5402 virt/kvm/kvm_main.c | 21 +++++++++++----------
5403 1 file changed, 11 insertions(+), 10 deletions(-)
5404
5405 commit 9d0cf281d74a9fe490f3ba5ca3d0e57eac066e1c
5406 Author: Paolo Bonzini <pbonzini@redhat.com>
5407 Date: Fri Mar 18 16:53:42 2016 +0100
5408
5409 KVM: VMX: avoid guest hang on invalid invvpid instruction
5410
5411 A guest executing an invalid invvpid instruction would hang
5412 because the instruction pointer was not updated.
5413
5414 Reported-by: jmontleo@redhat.com
5415 Tested-by: jmontleo@redhat.com
5416 Cc: stable@vger.kernel.org
5417 Fixes: 99b83ac893b84ed1a62ad6d1f2b6cc32026b9e85
5418 Reviewed-by: David Matlack <dmatlack@google.com>
5419 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5420
5421 arch/x86/kvm/vmx.c | 1 +
5422 1 file changed, 1 insertion(+)
5423
5424 commit 602caaece277e5e21ae43771398bbf7778061beb
5425 Author: Paolo Bonzini <pbonzini@redhat.com>
5426 Date: Fri Mar 18 16:53:29 2016 +0100
5427
5428 KVM: VMX: avoid guest hang on invalid invept instruction
5429
5430 A guest executing an invalid invept instruction would hang
5431 because the instruction pointer was not updated.
5432
5433 Cc: stable@vger.kernel.org
5434 Fixes: bfd0a56b90005f8c8a004baf407ad90045c2b11e
5435 Reviewed-by: David Matlack <dmatlack@google.com>
5436 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5437
5438 arch/x86/kvm/vmx.c | 1 +
5439 1 file changed, 1 insertion(+)
5440
5441 commit 3309ac82d6596de8abc6ea51dd0a942416da1cc1
5442 Author: Jann Horn <jann@thejh.net>
5443 Date: Tue Mar 22 14:25:36 2016 -0700
5444
5445 fs/coredump: prevent fsuid=0 dumps into user-controlled directories
5446
5447 This commit fixes the following security hole affecting systems where
5448 all of the following conditions are fulfilled:
5449
5450 - The fs.suid_dumpable sysctl is set to 2.
5451 - The kernel.core_pattern sysctl's value starts with "/". (Systems
5452 where kernel.core_pattern starts with "|/" are not affected.)
5453 - Unprivileged user namespace creation is permitted. (This is
5454 true on Linux >=3.8, but some distributions disallow it by
5455 default using a distro patch.)
5456
5457 Under these conditions, if a program executes under secure exec rules,
5458 causing it to run with the SUID_DUMP_ROOT flag, then unshares its user
5459 namespace, changes its root directory and crashes, the coredump will be
5460 written using fsuid=0 and a path derived from kernel.core_pattern - but
5461 this path is interpreted relative to the root directory of the process,
5462 allowing the attacker to control where a coredump will be written with
5463 root privileges.
5464
5465 To fix the security issue, always interpret core_pattern for dumps that
5466 are written under SUID_DUMP_ROOT relative to the root directory of init.
5467
5468 Signed-off-by: Jann Horn <jann@thejh.net>
5469 Acked-by: Kees Cook <keescook@chromium.org>
5470 Cc: Al Viro <viro@zeniv.linux.org.uk>
5471 Cc: "Eric W. Biederman" <ebiederm@xmission.com>
5472 Cc: Andy Lutomirski <luto@kernel.org>
5473 Cc: Oleg Nesterov <oleg@redhat.com>
5474 Cc: <stable@vger.kernel.org>
5475 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
5476 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
5477
5478 arch/um/drivers/mconsole_kern.c | 2 +-
5479 fs/coredump.c | 31 +++++++++++++++++++++++++++----
5480 fs/fhandle.c | 2 +-
5481 fs/open.c | 6 ++----
5482 include/linux/fs.h | 2 +-
5483 kernel/sysctl_binary.c | 2 +-
5484 6 files changed, 33 insertions(+), 12 deletions(-)
5485
5486 commit a7c8d3c91a3e50d0873942f09afbb5071382d5e7
5487 Author: Takashi Iwai <tiwai@suse.de>
5488 Date: Fri Apr 1 12:28:16 2016 +0200
5489
5490 ALSA: timer: Use mod_timer() for rearming the system timer
5491
5492 ALSA system timer backend stops the timer via del_timer() without sync
5493 and leaves del_timer_sync() at the close instead. This is because of
5494 the restriction by the design of ALSA timer: namely, the stop callback
5495 may be called from the timer handler, and calling the sync shall lead
5496 to a hangup. However, this also triggers a kernel BUG() when the
5497 timer is rearmed immediately after stopping without sync:
5498 kernel BUG at kernel/time/timer.c:966!
5499 Call Trace:
5500 <IRQ>
5501 [<ffffffff8239c94e>] snd_timer_s_start+0x13e/0x1a0
5502 [<ffffffff8239e1f4>] snd_timer_interrupt+0x504/0xec0
5503 [<ffffffff8122fca0>] ? debug_check_no_locks_freed+0x290/0x290
5504 [<ffffffff8239ec64>] snd_timer_s_function+0xb4/0x120
5505 [<ffffffff81296b72>] call_timer_fn+0x162/0x520
5506 [<ffffffff81296add>] ? call_timer_fn+0xcd/0x520
5507 [<ffffffff8239ebb0>] ? snd_timer_interrupt+0xec0/0xec0
5508 ....
5509
5510 It's the place where add_timer() checks the pending timer. It's clear
5511 that this may happen after the immediate restart without sync in our
5512 cases.
5513
5514 So, the workaround here is just to use mod_timer() instead of
5515 add_timer(). This looks like a band-aid fix, but it's a right move,
5516 as snd_timer_interrupt() takes care of the continuous rearm of timer.
5517
5518 Reported-by: Jiri Slaby <jslaby@suse.cz>
5519 Cc: <stable@vger.kernel.org>
5520 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5521
5522 sound/core/timer.c | 4 ++--
5523 1 file changed, 2 insertions(+), 2 deletions(-)
5524
5525 commit 2de05c5fc90b461d78a54a7240b664a068844c8c
5526 Author: Daniel Vetter <daniel.vetter@ffwll.ch>
5527 Date: Wed Mar 30 11:40:43 2016 +0200
5528
5529 drm/udl: Use unlocked gem unreferencing
5530
5531 For drm_gem_object_unreference callers are required to hold
5532 dev->struct_mutex, which these paths don't. Enforcing this requirement
5533 has become a bit more strict with
5534
5535 commit ef4c6270bf2867e2f8032e9614d1a8cfc6c71663
5536 Author: Daniel Vetter <daniel.vetter@ffwll.ch>
5537 Date: Thu Oct 15 09:36:25 2015 +0200
5538
5539 drm/gem: Check locking in drm_gem_object_unreference
5540
5541 Cc: stable@vger.kernel.org
5542 Signed-off-by: Daniel Vetter <daniel.vetter@intel.com>
5543 Signed-off-by: Dave Airlie <airlied@redhat.com>
5544
5545 drivers/gpu/drm/udl/udl_fb.c | 2 +-
5546 drivers/gpu/drm/udl/udl_gem.c | 2 +-
5547 2 files changed, 2 insertions(+), 2 deletions(-)
5548
5549 commit c8153b6b1731b8fee33966dd8d148643240f1dc0
5550 Author: Jan Kara <jack@suse.com>
5551 Date: Mon Dec 7 14:34:49 2015 -0500
5552
5553 ext4: fix races of writeback with punch hole and zero range
5554
5555 When doing delayed allocation, update of on-disk inode size is postponed
5556 until IO submission time. However hole punch or zero range fallocate
5557 calls can end up discarding the tail page cache page and thus on-disk
5558 inode size would never be properly updated.
5559
5560 Make sure the on-disk inode size is updated before truncating page
5561 cache.
5562
5563 Signed-off-by: Jan Kara <jack@suse.com>
5564 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5565
5566 fs/ext4/ext4.h | 3 +++
5567 fs/ext4/extents.c | 5 +++++
5568 fs/ext4/inode.c | 35 ++++++++++++++++++++++++++++++++++-
5569 3 files changed, 42 insertions(+), 1 deletion(-)
5570
5571 commit d64beb441579f2667e99eb9d4d6e83deb88bf59b
5572 Author: Jan Kara <jack@suse.com>
5573 Date: Mon Dec 7 14:31:11 2015 -0500
5574
5575 ext4: fix races between buffered IO and collapse / insert range
5576
5577 Current code implementing FALLOC_FL_COLLAPSE_RANGE and
5578 FALLOC_FL_INSERT_RANGE is prone to races with buffered writes and page
5579 faults. If buffered write or write via mmap manages to squeeze between
5580 filemap_write_and_wait_range() and truncate_pagecache() in the fallocate
5581 implementations, the written data is simply discarded by
5582 truncate_pagecache() although it should have been shifted.
5583
5584 Fix the problem by moving filemap_write_and_wait_range() call inside
5585 i_mutex and i_mmap_sem. That way we are protected against races with
5586 both buffered writes and page faults.
5587
5588 Signed-off-by: Jan Kara <jack@suse.com>
5589 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5590
5591 fs/ext4/extents.c | 59 +++++++++++++++++++++++++++++--------------------------
5592 1 file changed, 31 insertions(+), 28 deletions(-)
5593
5594 commit b1ae49aa4dad39233b16456e0765a23ba4e0546c
5595 Author: Jan Kara <jack@suse.com>
5596 Date: Mon Dec 7 14:29:17 2015 -0500
5597
5598 ext4: move unlocked dio protection from ext4_alloc_file_blocks()
5599
5600 Currently ext4_alloc_file_blocks() was handling protection against
5601 unlocked DIO. However we now need to sometimes call it under i_mmap_sem
5602 and sometimes not and DIO protection ranks above it (although strictly
5603 speaking this cannot currently create any deadlocks). Also
5604 ext4_zero_range() was actually getting & releasing unlocked DIO
5605 protection twice in some cases. Luckily it didn't introduce any real bug
5606 but it was a land mine waiting to be stepped on. So move DIO protection
5607 out from ext4_alloc_file_blocks() into the two callsites.
5608
5609 Signed-off-by: Jan Kara <jack@suse.com>
5610 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5611
5612 fs/ext4/extents.c | 21 ++++++++++-----------
5613 1 file changed, 10 insertions(+), 11 deletions(-)
5614
5615 commit f9329a4ec30a26f0fababf809c5f1a3ef851b625
5616 Author: Jan Kara <jack@suse.com>
5617 Date: Mon Dec 7 14:28:03 2015 -0500
5618
5619 ext4: fix races between page faults and hole punching
5620
5621 Currently, page faults and hole punching are completely unsynchronized.
5622 This can result in page fault faulting in a page into a range that we
5623 are punching after truncate_pagecache_range() has been called and thus
5624 we can end up with a page mapped to disk blocks that will be shortly
5625 freed. Filesystem corruption will shortly follow. Note that the same
5626 race is avoided for truncate by checking page fault offset against
5627 i_size but there isn't similar mechanism available for punching holes.
5628
5629 Fix the problem by creating new rw semaphore i_mmap_sem in inode and
5630 grab it for writing over truncate, hole punching, and other functions
5631 removing blocks from extent tree and for read over page faults. We
5632 cannot easily use i_data_sem for this since that ranks below transaction
5633 start and we need something ranking above it so that it can be held over
5634 the whole truncate / hole punching operation. Also remove various
5635 workarounds we had in the code to reduce race window when page fault
5636 could have created pages with stale mapping information.
5637
5638 Signed-off-by: Jan Kara <jack@suse.com>
5639 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5640
5641 fs/ext4/ext4.h | 10 +++++++++
5642 fs/ext4/extents.c | 54 ++++++++++++++++++++++++--------------------
5643 fs/ext4/file.c | 66 ++++++++++++++++++++++++++++++++++++++++++++++--------
5644 fs/ext4/inode.c | 36 +++++++++++++++++++++--------
5645 fs/ext4/super.c | 1 +
5646 fs/ext4/truncate.h | 2 ++
5647 6 files changed, 127 insertions(+), 42 deletions(-)
5648
5649 commit 572a615b85c1d5c8aeea4ffd24ab428775a1cca9
5650 Author: Guenter Roeck <linux@roeck-us.net>
5651 Date: Sat Mar 26 12:28:05 2016 -0700
5652
5653 hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiated
5654
5655 arm:pxa_defconfig can result in the following crash if the max1111 driver
5656 is not instantiated.
5657
5658 Unhandled fault: page domain fault (0x01b) at 0x00000000
5659 pgd = c0004000
5660 [00000000] *pgd=00000000
5661 Internal error: : 1b [#1] PREEMPT ARM
5662 Modules linked in:
5663 CPU: 0 PID: 300 Comm: kworker/0:1 Not tainted 4.5.0-01301-g1701f680407c #10
5664 Hardware name: SHARP Akita
5665 Workqueue: events sharpsl_charge_toggle
5666 task: c390a000 ti: c391e000 task.ti: c391e000
5667 PC is at max1111_read_channel+0x20/0x30
5668 LR is at sharpsl_pm_pxa_read_max1111+0x2c/0x3c
5669 pc : [<c03aaab0>] lr : [<c0024b50>] psr: 20000013
5670 ...
5671 [<c03aaab0>] (max1111_read_channel) from [<c0024b50>]
5672 (sharpsl_pm_pxa_read_max1111+0x2c/0x3c)
5673 [<c0024b50>] (sharpsl_pm_pxa_read_max1111) from [<c00262e0>]
5674 (spitzpm_read_devdata+0x5c/0xc4)
5675 [<c00262e0>] (spitzpm_read_devdata) from [<c0024094>]
5676 (sharpsl_check_battery_temp+0x78/0x110)
5677 [<c0024094>] (sharpsl_check_battery_temp) from [<c0024f9c>]
5678 (sharpsl_charge_toggle+0x48/0x110)
5679 [<c0024f9c>] (sharpsl_charge_toggle) from [<c004429c>]
5680 (process_one_work+0x14c/0x48c)
5681 [<c004429c>] (process_one_work) from [<c0044618>] (worker_thread+0x3c/0x5d4)
5682 [<c0044618>] (worker_thread) from [<c004a238>] (kthread+0xd0/0xec)
5683 [<c004a238>] (kthread) from [<c000a670>] (ret_from_fork+0x14/0x24)
5684
5685 This can occur because the SPI controller driver (SPI_PXA2XX) is built as
5686 module and thus not necessarily loaded. While building SPI_PXA2XX into the
5687 kernel would make the problem disappear, it appears prudent to ensure that
5688 the driver is instantiated before accessing its data structures.
5689
5690 Cc: Arnd Bergmann <arnd@arndb.de>
5691 Cc: stable@vger.kernel.org
5692 Signed-off-by: Guenter Roeck <linux@roeck-us.net>
5693
5694 drivers/hwmon/max1111.c | 6 ++++++
5695 1 file changed, 6 insertions(+)
5696
5697 commit f75f1af7a0b4be055855ca5120ee78174f3370f2
5698 Author: Nicolai Stange <nicstange@gmail.com>
5699 Date: Sun Mar 20 23:23:46 2016 +0100
5700
5701 PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument
5702
5703 Despite what the DocBook comment to pkcs7_validate_trust() says, the
5704 *_trusted argument is never set to false.
5705
5706 pkcs7_validate_trust() only positively sets *_trusted upon encountering
5707 a trusted PKCS#7 SignedInfo block.
5708
5709 This is quite unfortunate since its callers, system_verify_data() for
5710 example, depend on pkcs7_validate_trust() clearing *_trusted on non-trust.
5711
5712 Indeed, UBSAN splats when attempting to load the uninitialized local
5713 variable 'trusted' from system_verify_data() in pkcs7_validate_trust():
5714
5715 UBSAN: Undefined behaviour in crypto/asymmetric_keys/pkcs7_trust.c:194:14
5716 load of value 82 is not a valid value for type '_Bool'
5717 [...]
5718 Call Trace:
5719 [<ffffffff818c4d35>] dump_stack+0xbc/0x117
5720 [<ffffffff818c4c79>] ? _atomic_dec_and_lock+0x169/0x169
5721 [<ffffffff8194113b>] ubsan_epilogue+0xd/0x4e
5722 [<ffffffff819419fa>] __ubsan_handle_load_invalid_value+0x111/0x158
5723 [<ffffffff819418e9>] ? val_to_string.constprop.12+0xcf/0xcf
5724 [<ffffffff818334a4>] ? x509_request_asymmetric_key+0x114/0x370
5725 [<ffffffff814b83f0>] ? kfree+0x220/0x370
5726 [<ffffffff818312c2>] ? public_key_verify_signature_2+0x32/0x50
5727 [<ffffffff81835e04>] pkcs7_validate_trust+0x524/0x5f0
5728 [<ffffffff813c391a>] system_verify_data+0xca/0x170
5729 [<ffffffff813c3850>] ? top_trace_array+0x9b/0x9b
5730 [<ffffffff81510b29>] ? __vfs_read+0x279/0x3d0
5731 [<ffffffff8129372f>] mod_verify_sig+0x1ff/0x290
5732 [...]
5733
5734 The implication is that pkcs7_validate_trust() effectively grants trust
5735 when it really shouldn't have.
5736
5737 Fix this by explicitly setting *_trusted to false at the very beginning
5738 of pkcs7_validate_trust().
5739
5740 Cc: <stable@vger.kernel.org>
5741 Signed-off-by: Nicolai Stange <nicstange@gmail.com>
5742 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
5743
5744 crypto/asymmetric_keys/pkcs7_trust.c | 2 ++
5745 1 file changed, 2 insertions(+)
5746
5747 commit 1052826f7352ccc98167129b0b83222f45d50046
5748 Author: Florian Westphal <fw@strlen.de>
5749 Date: Tue Mar 22 18:02:49 2016 +0100
5750
5751 netfilter: x_tables: validate e->target_offset early
5752
5753 We should check that e->target_offset is sane before
5754 mark_source_chains gets called since it will fetch the target entry
5755 for loop detection.
5756
5757 Signed-off-by: Florian Westphal <fw@strlen.de>
5758 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5759
5760 net/ipv4/netfilter/arp_tables.c | 17 ++++++++---------
5761 net/ipv4/netfilter/ip_tables.c | 17 ++++++++---------
5762 net/ipv6/netfilter/ip6_tables.c | 17 ++++++++---------
5763 3 files changed, 24 insertions(+), 27 deletions(-)
5764
5765 commit b35d19509e8dab157214e46dd24314663ccf554f
5766 Author: Florian Westphal <fw@strlen.de>
5767 Date: Tue Mar 22 18:02:50 2016 +0100
5768
5769 netfilter: x_tables: make sure e->next_offset covers remaining blob size
5770
5771 Otherwise this function may read data beyond the ruleset blob.
5772
5773 Signed-off-by: Florian Westphal <fw@strlen.de>
5774 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5775
5776 net/ipv4/netfilter/arp_tables.c | 6 ++++--
5777 net/ipv4/netfilter/ip_tables.c | 6 ++++--
5778 net/ipv6/netfilter/ip6_tables.c | 6 ++++--
5779 3 files changed, 12 insertions(+), 6 deletions(-)
5780
5781 commit 4d7642ed66b69140733a7b51fcd6d37ce4d4514c
5782 Author: Florian Westphal <fw@strlen.de>
5783 Date: Tue Mar 22 18:02:52 2016 +0100
5784
5785 netfilter: x_tables: fix unconditional helper
5786
5787 Ben Hawkes says:
5788
5789 In the mark_source_chains function (net/ipv4/netfilter/ip_tables.c) it
5790 is possible for a user-supplied ipt_entry structure to have a large
5791 next_offset field. This field is not bounds checked prior to writing a
5792 counter value at the supplied offset.
5793
5794 Problem is that mark_source_chains should not have been called --
5795 the rule doesn't have a next entry, so its supposed to return
5796 an absolute verdict of either ACCEPT or DROP.
5797
5798 However, the function conditional() doesn't work as the name implies.
5799 It only checks that the rule is using wildcard address matching.
5800
5801 However, an unconditional rule must also not be using any matches
5802 (no -m args).
5803
5804 The underflow validator only checked the addresses, therefore
5805 passing the 'unconditional absolute verdict' test, while
5806 mark_source_chains also tested for presence of matches, and thus
5807 proceeeded to the next (not-existent) rule.
5808
5809 Unify this so that all the callers have same idea of 'unconditional rule'.
5810
5811 Reported-by: Ben Hawkes <hawkes@google.com>
5812 Signed-off-by: Florian Westphal <fw@strlen.de>
5813 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5814
5815 net/ipv4/netfilter/arp_tables.c | 18 +++++++++---------
5816 net/ipv4/netfilter/ip_tables.c | 23 +++++++++++------------
5817 net/ipv6/netfilter/ip6_tables.c | 23 +++++++++++------------
5818 3 files changed, 31 insertions(+), 33 deletions(-)
5819
5820 commit e3e51682563f1453dfc4b9ef88b29af4d1a78e78
5821 Author: Pablo Neira Ayuso <pablo@netfilter.org>
5822 Date: Thu Mar 24 21:29:53 2016 +0100
5823
5824 netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES
5825
5826 Make sure the table names via getsockopt GET_ENTRIES is nul-terminated
5827 in ebtables and all the x_tables variants and their respective compat
5828 code. Uncovered by KASAN.
5829
5830 Reported-by: Baozeng Ding <sploving1@gmail.com>
5831 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5832
5833 net/bridge/netfilter/ebtables.c | 4 ++++
5834 net/ipv4/netfilter/arp_tables.c | 2 ++
5835 net/ipv4/netfilter/ip_tables.c | 2 ++
5836 net/ipv6/netfilter/ip6_tables.c | 2 ++
5837 4 files changed, 10 insertions(+)
5838
5839 commit 7742471b674597627f8f608f6a89c6e5bbd6533d
5840 Author: Nicolai Stange <nicstange@gmail.com>
5841 Date: Fri Mar 25 14:22:14 2016 -0700
5842
5843 mm/filemap: generic_file_read_iter(): check for zero reads unconditionally
5844
5845 If
5846 - generic_file_read_iter() gets called with a zero read length,
5847 - the read offset is at a page boundary,
5848 - IOCB_DIRECT is not set
5849 - and the page in question hasn't made it into the page cache yet,
5850 then do_generic_file_read() will trigger a readahead with a req_size hint
5851 of zero.
5852
5853 Since roundup_pow_of_two(0) is undefined, UBSAN reports
5854
5855 UBSAN: Undefined behaviour in include/linux/log2.h:63:13
5856 shift exponent 64 is too large for 64-bit type 'long unsigned int'
5857 CPU: 3 PID: 1017 Comm: sa1 Tainted: G L 4.5.0-next-20160318+ #14
5858 [...]
5859 Call Trace:
5860 [...]
5861 [<ffffffff813ef61a>] ondemand_readahead+0x3aa/0x3d0
5862 [<ffffffff813ef61a>] ? ondemand_readahead+0x3aa/0x3d0
5863 [<ffffffff813c73bd>] ? find_get_entry+0x2d/0x210
5864 [<ffffffff813ef9c3>] page_cache_sync_readahead+0x63/0xa0
5865 [<ffffffff813cc04d>] do_generic_file_read+0x80d/0xf90
5866 [<ffffffff813cc955>] generic_file_read_iter+0x185/0x420
5867 [...]
5868 [<ffffffff81510b06>] __vfs_read+0x256/0x3d0
5869 [...]
5870
5871 when get_init_ra_size() gets called from ondemand_readahead().
5872
5873 The net effect is that the initial readahead size is arch dependent for
5874 requested read lengths of zero: for example, since
5875
5876 1UL << (sizeof(unsigned long) * 8)
5877
5878 evaluates to 1 on x86 while its result is 0 on ARMv7, the initial readahead
5879 size becomes 4 on the former and 0 on the latter.
5880
5881 What's more, whether or not the file access timestamp is updated for zero
5882 length reads is decided differently for the two cases of IOCB_DIRECT
5883 being set or cleared: in the first case, generic_file_read_iter()
5884 explicitly skips updating that timestamp while in the latter case, it is
5885 always updated through the call to do_generic_file_read().
5886
5887 According to POSIX, zero length reads "do not modify the last data access
5888 timestamp" and thus, the IOCB_DIRECT behaviour is POSIXly correct.
5889
5890 Let generic_file_read_iter() unconditionally check the requested read
5891 length at its entry and return immediately with success if it is zero.
5892
5893 Signed-off-by: Nicolai Stange <nicstange@gmail.com>
5894 Cc: Al Viro <viro@zeniv.linux.org.uk>
5895 Reviewed-by: Jan Kara <jack@suse.cz>
5896 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
5897 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
5898
5899 mm/filemap.c | 7 ++++---
5900 1 file changed, 4 insertions(+), 3 deletions(-)
5901
5902 commit 604785419da498d7e876a0191b2e11626db706bb
5903 Author: Oliver Neukum <oneukum@suse.com>
5904 Date: Thu Mar 17 14:00:17 2016 -0700
5905
5906 Input: ims-pcu - sanity check against missing interfaces
5907
5908 A malicious device missing interface can make the driver oops.
5909 Add sanity checking.
5910
5911 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5912 CC: stable@vger.kernel.org
5913 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
5914
5915 drivers/input/misc/ims-pcu.c | 4 ++++
5916 1 file changed, 4 insertions(+)
5917
5918 commit 24c3f4f6652f07eb2c3deea1488ff4de00592e80
5919 Author: Vladis Dronov <vdronov@redhat.com>
5920 Date: Wed Mar 23 11:53:46 2016 -0700
5921
5922 Input: ati_remote2 - fix crashes on detecting device with invalid descriptor
5923
5924 The ati_remote2 driver expects at least two interfaces with one
5925 endpoint each. If given malicious descriptor that specify one
5926 interface or no endpoints, it will crash in the probe function.
5927 Ensure there is at least two interfaces and one endpoint for each
5928 interface before using it.
5929
5930 The full disclosure: http://seclists.org/bugtraq/2016/Mar/90
5931
5932 Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
5933 Signed-off-by: Vladis Dronov <vdronov@redhat.com>
5934 Cc: stable@vger.kernel.org
5935 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
5936
5937 drivers/input/misc/ati_remote2.c | 36 ++++++++++++++++++++++++++++++------
5938 1 file changed, 30 insertions(+), 6 deletions(-)
5939
5940 commit 262df604d00e72a4b930fbf7fe3a770f0196a5a5
5941 Author: Oliver Neukum <oneukum@suse.com>
5942 Date: Wed Mar 23 14:36:56 2016 -0700
5943
5944 Input: sur40 - fix DMA on stack
5945
5946 During the initialisation the driver uses a buffer on the stack for DMA.
5947 That violates the cache coherency rules. The fix is to allocate the buffer
5948 with kmalloc().
5949
5950 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5951 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
5952
5953 drivers/input/touchscreen/sur40.c | 21 ++++++++++++++-------
5954 1 file changed, 14 insertions(+), 7 deletions(-)
5955
5956 commit 015dd03669b2ab646723f6b123377e4ef5694a10
5957 Author: Haiyang Zhang <haiyangz@microsoft.com>
5958 Date: Wed Mar 23 09:43:10 2016 -0700
5959
5960 hv_netvsc: Fix the array sizes to be max supported channels
5961
5962 The VRSS_CHANNEL_MAX is the max number of channels supported by Hyper-V
5963 hosts. We use it for the related array sizes instead of using NR_CPUS,
5964 which may be set to several thousands.
5965 This patch reduces possible memory allocation failures.
5966
5967 Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
5968 Reviewed-by: K. Y. Srinivasan <kys@microsoft.com>
5969 Signed-off-by: David S. Miller <davem@davemloft.net>
5970
5971 drivers/net/hyperv/hyperv_net.h | 7 ++++---
5972 drivers/net/hyperv/rndis_filter.c | 4 ++--
5973 2 files changed, 6 insertions(+), 5 deletions(-)
5974
5975 commit a850a78d6393ef22a970266cbbefdf3dba0267b5
5976 Author: Haiyang Zhang <haiyangz@microsoft.com>
5977 Date: Wed Mar 23 09:43:09 2016 -0700
5978
5979 hv_netvsc: Fix accessing freed memory in netvsc_change_mtu()
5980
5981 struct netvsc_device is freed in rndis_filter_device_remove(). So we save
5982 the nvdev->num_chn into a temp variable for later usage.
5983
5984 (Please also include this patch into stable branch.)
5985
5986 Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
5987 Reviewed-by: K. Y. Srinivasan <kys@microsoft.com>
5988 Signed-off-by: David S. Miller <davem@davemloft.net>
5989
5990 drivers/net/hyperv/netvsc_drv.c | 5 ++++-
5991 1 file changed, 4 insertions(+), 1 deletion(-)
5992
5993 commit 7409626e43fe871cede30ac926425938f3ccddaf
5994 Author: Guillaume Nault <g.nault@alphalink.fr>
5995 Date: Wed Mar 23 16:38:55 2016 +0100
5996
5997 ppp: take reference on channels netns
5998
5999 Let channels hold a reference on their network namespace.
6000 Some channel types, like ppp_async and ppp_synctty, can have their
6001 userspace controller running in a different namespace. Therefore they
6002 can't rely on them to preclude their netns from being removed from
6003 under them.
6004
6005 ==================================================================
6006 BUG: KASAN: use-after-free in ppp_unregister_channel+0x372/0x3a0 at
6007 addr ffff880064e217e0
6008 Read of size 8 by task syz-executor/11581
6009 =============================================================================
6010 BUG net_namespace (Not tainted): kasan: bad access detected
6011 -----------------------------------------------------------------------------
6012
6013 Disabling lock debugging due to kernel taint
6014 INFO: Allocated in copy_net_ns+0x6b/0x1a0 age=92569 cpu=3 pid=6906
6015 [< none >] ___slab_alloc+0x4c7/0x500 kernel/mm/slub.c:2440
6016 [< none >] __slab_alloc+0x4c/0x90 kernel/mm/slub.c:2469
6017 [< inline >] slab_alloc_node kernel/mm/slub.c:2532
6018 [< inline >] slab_alloc kernel/mm/slub.c:2574
6019 [< none >] kmem_cache_alloc+0x23a/0x2b0 kernel/mm/slub.c:2579
6020 [< inline >] kmem_cache_zalloc kernel/include/linux/slab.h:597
6021 [< inline >] net_alloc kernel/net/core/net_namespace.c:325
6022 [< none >] copy_net_ns+0x6b/0x1a0 kernel/net/core/net_namespace.c:360
6023 [< none >] create_new_namespaces+0x2f6/0x610 kernel/kernel/nsproxy.c:95
6024 [< none >] copy_namespaces+0x297/0x320 kernel/kernel/nsproxy.c:150
6025 [< none >] copy_process.part.35+0x1bf4/0x5760 kernel/kernel/fork.c:1451
6026 [< inline >] copy_process kernel/kernel/fork.c:1274
6027 [< none >] _do_fork+0x1bc/0xcb0 kernel/kernel/fork.c:1723
6028 [< inline >] SYSC_clone kernel/kernel/fork.c:1832
6029 [< none >] SyS_clone+0x37/0x50 kernel/kernel/fork.c:1826
6030 [< none >] entry_SYSCALL_64_fastpath+0x16/0x7a kernel/arch/x86/entry/entry_64.S:185
6031
6032 INFO: Freed in net_drop_ns+0x67/0x80 age=575 cpu=2 pid=2631
6033 [< none >] __slab_free+0x1fc/0x320 kernel/mm/slub.c:2650
6034 [< inline >] slab_free kernel/mm/slub.c:2805
6035 [< none >] kmem_cache_free+0x2a0/0x330 kernel/mm/slub.c:2814
6036 [< inline >] net_free kernel/net/core/net_namespace.c:341
6037 [< none >] net_drop_ns+0x67/0x80 kernel/net/core/net_namespace.c:348
6038 [< none >] cleanup_net+0x4e5/0x600 kernel/net/core/net_namespace.c:448
6039 [< none >] process_one_work+0x794/0x1440 kernel/kernel/workqueue.c:2036
6040 [< none >] worker_thread+0xdb/0xfc0 kernel/kernel/workqueue.c:2170
6041 [< none >] kthread+0x23f/0x2d0 kernel/drivers/block/aoe/aoecmd.c:1303
6042 [< none >] ret_from_fork+0x3f/0x70 kernel/arch/x86/entry/entry_64.S:468
6043 INFO: Slab 0xffffea0001938800 objects=3 used=0 fp=0xffff880064e20000
6044 flags=0x5fffc0000004080
6045 INFO: Object 0xffff880064e20000 @offset=0 fp=0xffff880064e24200
6046
6047 CPU: 1 PID: 11581 Comm: syz-executor Tainted: G B 4.4.0+
6048 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
6049 rel-1.8.2-0-g33fbe13 by qemu-project.org 04/01/2014
6050 00000000ffffffff ffff8800662c7790 ffffffff8292049d ffff88003e36a300
6051 ffff880064e20000 ffff880064e20000 ffff8800662c77c0 ffffffff816f2054
6052 ffff88003e36a300 ffffea0001938800 ffff880064e20000 0000000000000000
6053 Call Trace:
6054 [< inline >] __dump_stack kernel/lib/dump_stack.c:15
6055 [<ffffffff8292049d>] dump_stack+0x6f/0xa2 kernel/lib/dump_stack.c:50
6056 [<ffffffff816f2054>] print_trailer+0xf4/0x150 kernel/mm/slub.c:654
6057 [<ffffffff816f875f>] object_err+0x2f/0x40 kernel/mm/slub.c:661
6058 [< inline >] print_address_description kernel/mm/kasan/report.c:138
6059 [<ffffffff816fb0c5>] kasan_report_error+0x215/0x530 kernel/mm/kasan/report.c:236
6060 [< inline >] kasan_report kernel/mm/kasan/report.c:259
6061 [<ffffffff816fb4de>] __asan_report_load8_noabort+0x3e/0x40 kernel/mm/kasan/report.c:280
6062 [< inline >] ? ppp_pernet kernel/include/linux/compiler.h:218
6063 [<ffffffff83ad71b2>] ? ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
6064 [< inline >] ppp_pernet kernel/include/linux/compiler.h:218
6065 [<ffffffff83ad71b2>] ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
6066 [< inline >] ? ppp_pernet kernel/drivers/net/ppp/ppp_generic.c:293
6067 [<ffffffff83ad6f26>] ? ppp_unregister_channel+0xe6/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
6068 [<ffffffff83ae18f3>] ppp_asynctty_close+0xa3/0x130 kernel/drivers/net/ppp/ppp_async.c:241
6069 [<ffffffff83ae1850>] ? async_lcp_peek+0x5b0/0x5b0 kernel/drivers/net/ppp/ppp_async.c:1000
6070 [<ffffffff82c33239>] tty_ldisc_close.isra.1+0x99/0xe0 kernel/drivers/tty/tty_ldisc.c:478
6071 [<ffffffff82c332c0>] tty_ldisc_kill+0x40/0x170 kernel/drivers/tty/tty_ldisc.c:744
6072 [<ffffffff82c34943>] tty_ldisc_release+0x1b3/0x260 kernel/drivers/tty/tty_ldisc.c:772
6073 [<ffffffff82c1ef21>] tty_release+0xac1/0x13e0 kernel/drivers/tty/tty_io.c:1901
6074 [<ffffffff82c1e460>] ? release_tty+0x320/0x320 kernel/drivers/tty/tty_io.c:1688
6075 [<ffffffff8174de36>] __fput+0x236/0x780 kernel/fs/file_table.c:208
6076 [<ffffffff8174e405>] ____fput+0x15/0x20 kernel/fs/file_table.c:244
6077 [<ffffffff813595ab>] task_work_run+0x16b/0x200 kernel/kernel/task_work.c:115
6078 [< inline >] exit_task_work kernel/include/linux/task_work.h:21
6079 [<ffffffff81307105>] do_exit+0x8b5/0x2c60 kernel/kernel/exit.c:750
6080 [<ffffffff813fdd20>] ? debug_check_no_locks_freed+0x290/0x290 kernel/kernel/locking/lockdep.c:4123
6081 [<ffffffff81306850>] ? mm_update_next_owner+0x6f0/0x6f0 kernel/kernel/exit.c:357
6082 [<ffffffff813215e6>] ? __dequeue_signal+0x136/0x470 kernel/kernel/signal.c:550
6083 [<ffffffff8132067b>] ? recalc_sigpending_tsk+0x13b/0x180 kernel/kernel/signal.c:145
6084 [<ffffffff81309628>] do_group_exit+0x108/0x330 kernel/kernel/exit.c:880
6085 [<ffffffff8132b9d4>] get_signal+0x5e4/0x14f0 kernel/kernel/signal.c:2307
6086 [< inline >] ? kretprobe_table_lock kernel/kernel/kprobes.c:1113
6087 [<ffffffff8151d355>] ? kprobe_flush_task+0xb5/0x450 kernel/kernel/kprobes.c:1158
6088 [<ffffffff8115f7d3>] do_signal+0x83/0x1c90 kernel/arch/x86/kernel/signal.c:712
6089 [<ffffffff8151d2a0>] ? recycle_rp_inst+0x310/0x310 kernel/include/linux/list.h:655
6090 [<ffffffff8115f750>] ? setup_sigcontext+0x780/0x780 kernel/arch/x86/kernel/signal.c:165
6091 [<ffffffff81380864>] ? finish_task_switch+0x424/0x5f0 kernel/kernel/sched/core.c:2692
6092 [< inline >] ? finish_lock_switch kernel/kernel/sched/sched.h:1099
6093 [<ffffffff81380560>] ? finish_task_switch+0x120/0x5f0 kernel/kernel/sched/core.c:2678
6094 [< inline >] ? context_switch kernel/kernel/sched/core.c:2807
6095 [<ffffffff85d794e9>] ? __schedule+0x919/0x1bd0 kernel/kernel/sched/core.c:3283
6096 [<ffffffff81003901>] exit_to_usermode_loop+0xf1/0x1a0 kernel/arch/x86/entry/common.c:247
6097 [< inline >] prepare_exit_to_usermode kernel/arch/x86/entry/common.c:282
6098 [<ffffffff810062ef>] syscall_return_slowpath+0x19f/0x210 kernel/arch/x86/entry/common.c:344
6099 [<ffffffff85d88022>] int_ret_from_sys_call+0x25/0x9f kernel/arch/x86/entry/entry_64.S:281
6100 Memory state around the buggy address:
6101 ffff880064e21680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
6102 ffff880064e21700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
6103 >ffff880064e21780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
6104 ^
6105 ffff880064e21800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
6106 ffff880064e21880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
6107 ==================================================================
6108
6109 Fixes: 273ec51dd7ce ("net: ppp_generic - introduce net-namespace functionality v2")
6110 Reported-by: Baozeng Ding <sploving1@gmail.com>
6111 Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
6112 Reviewed-by: Cyrill Gorcunov <gorcunov@openvz.org>
6113 Signed-off-by: David S. Miller <davem@davemloft.net>
6114
6115 drivers/net/ppp/ppp_generic.c | 4 +++-
6116 1 file changed, 3 insertions(+), 1 deletion(-)
6117
6118 commit bfb890c1ac9d29b377f6bec4a5aab51d053114c4
6119 Author: Herbert Xu <herbert@gondor.apana.org.au>
6120 Date: Wed Mar 16 17:06:01 2016 +0800
6121
6122 eCryptfs: Use skcipher and shash
6123
6124 eCryptfs: Fix null pointer dereference on kzalloc error path
6125
6126 The conversion to skcipher and shash added a couple of null pointer
6127 dereference bugs on the kzalloc failure path. This patch fixes them.
6128
6129 Fixes: 3095e8e366b4 ("eCryptfs: Use skcipher and shash")
6130 Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
6131 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
6132
6133 fs/ecryptfs/keystore.c | 6 ++----
6134 1 file changed, 2 insertions(+), 4 deletions(-)
6135
6136 commit 58a8421ae537e0609c4ff59bf6b11be869a43cc6
6137 Author: Boris BREZILLON <boris.brezillon@free-electrons.com>
6138 Date: Thu Mar 17 10:21:34 2016 +0100
6139
6140 crypto: marvell/cesa - fix memory leak
6141
6142 Crypto requests are not guaranteed to be finalized (->final() call),
6143 and can be freed at any moment, without getting any notification from
6144 the core. This can lead to memory leaks of the ->cache buffer.
6145
6146 Make this buffer part of the request object, and allocate an extra buffer
6147 from the DMA cache pool when doing DMA operations.
6148
6149 As a side effect, this patch also fixes another bug related to cache
6150 allocation and DMA operations. When the core allocates a new request and
6151 import an existing state, a cache buffer can be allocated (depending
6152 on the state). The problem is, at that very moment, we don't know yet
6153 whether the request will use DMA or not, and since everything is
6154 likely to be initialized to zero, mv_cesa_ahash_alloc_cache() thinks it
6155 should allocate a buffer for standard operation. But when
6156 mv_cesa_ahash_free_cache() is called, req->type has been set to
6157 CESA_DMA_REQ in the meantime, thus leading to an invalind dma_pool_free()
6158 call (the buffer passed in argument has not been allocated from the pool).
6159
6160 Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
6161 Reported-by: Gregory CLEMENT <gregory.clement@free-electrons.com>
6162 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
6163
6164 drivers/crypto/marvell/cesa.h | 3 +-
6165 drivers/crypto/marvell/hash.c | 86 +++++++++----------------------------------
6166 2 files changed, 20 insertions(+), 69 deletions(-)
6167
6168 commit 1ec604f99895b9c37f26a692ff83a7da02d667fd
6169 Author: Boris BREZILLON <boris.brezillon@free-electrons.com>
6170 Date: Thu Mar 17 10:21:35 2016 +0100
6171
6172 crypto: marvell/cesa - initialize hash states
6173
6174 ->export() might be called before we have done an update operation,
6175 and in this case the ->state field is left uninitialized.
6176 Put the correct default value when initializing the request.
6177
6178 Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
6179 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
6180
6181 drivers/crypto/marvell/hash.c | 20 ++++++++++++++++++++
6182 1 file changed, 20 insertions(+)
6183
6184 commit 23879f055d23e82c2f78cceca22c33e631973977
6185 Author: David S. Miller <davem@davemloft.net>
6186 Date: Sun Mar 13 23:28:00 2016 -0400
6187
6188 ipv4: Don't do expensive useless work during inetdev destroy.
6189
6190 When an inetdev is destroyed, every address assigned to the interface
6191 is removed. And in this scenerio we do two pointless things which can
6192 be very expensive if the number of assigned interfaces is large:
6193
6194 1) Address promotion. We are deleting all addresses, so there is no
6195 point in doing this.
6196
6197 2) A full nf conntrack table purge for every address. We only need to
6198 do this once, as is already caught by the existing
6199 masq_dev_notifier so masq_inet_event() can skip this.
6200
6201 Reported-by: Solar Designer <solar@openwall.com>
6202 Signed-off-by: David S. Miller <davem@davemloft.net>
6203 Tested-by: Cyrill Gorcunov <gorcunov@openvz.org>
6204
6205 net/ipv4/devinet.c | 4 ++++
6206 net/ipv4/fib_frontend.c | 4 ++++
6207 net/ipv4/netfilter/nf_nat_masquerade_ipv4.c | 12 ++++++++++--
6208 3 files changed, 18 insertions(+), 2 deletions(-)
6209
6210 commit 60394231e840e884024592a76a6c5612433d3756
6211 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
6212 Date: Tue Mar 8 10:34:28 2016 -0300
6213
6214 sctp: fix copying more bytes than expected in sctp_add_bind_addr
6215
6216 Dmitry reported that sctp_add_bind_addr may read more bytes than
6217 expected in case the parameter is a IPv4 addr supplied by the user
6218 through calls such as sctp_bindx_add(), because it always copies
6219 sizeof(union sctp_addr) while the buffer may be just a struct
6220 sockaddr_in, which is smaller.
6221
6222 This patch then fixes it by limiting the memcpy to the min between the
6223 union size and a (new parameter) provided addr size. Where possible this
6224 parameter still is the size of that union, except for reading from
6225 user-provided buffers, which then it accounts for protocol type.
6226
6227 Reported-by: Dmitry Vyukov <dvyukov@google.com>
6228 Tested-by: Dmitry Vyukov <dvyukov@google.com>
6229 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
6230 Signed-off-by: David S. Miller <davem@davemloft.net>
6231
6232 include/net/sctp/structs.h | 2 +-
6233 net/sctp/bind_addr.c | 14 ++++++++------
6234 net/sctp/protocol.c | 1 +
6235 net/sctp/sm_make_chunk.c | 3 ++-
6236 net/sctp/socket.c | 4 +++-
6237 5 files changed, 15 insertions(+), 9 deletions(-)
6238
6239 commit 9831caa50e1453818c5ec618890291f028b7992f
6240 Author: Brad Spengler <spender@grsecurity.net>
6241 Date: Mon Mar 28 19:20:28 2016 -0400
6242
6243 Also allow /bin/false as needed by systemd
6244
6245 kernel/kmod.c | 2 +-
6246 1 file changed, 1 insertion(+), 1 deletion(-)
6247
6248 commit bb38a61b496a3f09f4d7b93d2f0fe15476918147
6249 Author: Brad Spengler <spender@grsecurity.net>
6250 Date: Tue Mar 22 16:59:43 2016 -0400
6251
6252 Fix size_overflow FP reported by marcan at:
6253 https://forums.grsecurity.net/viewtopic.php?f=3&t=4426
6254
6255 net/ipv6/xfrm6_mode_transport.c | 2 +-
6256 1 file changed, 1 insertion(+), 1 deletion(-)
6257
6258 commit 523a36a9c845da3051e58c6767c2e1a0f640998a
6259 Merge: 0d0ec9e c0b77a7
6260 Author: Brad Spengler <spender@grsecurity.net>
6261 Date: Wed Mar 16 20:20:40 2016 -0400
6262
6263 Merge branch 'pax-test' into grsec-test
6264
6265 commit c0b77a7cb578199f0b7dc90768a13ca6c044aba9
6266 Merge: 10d57c1 0d19123
6267 Author: Brad Spengler <spender@grsecurity.net>
6268 Date: Wed Mar 16 20:20:27 2016 -0400
6269
6270 Merge branch 'linux-4.4.y' into pax-test
6271
6272 commit 0d0ec9ee83144ab839710a01cfd746bd78257394
6273 Author: Brad Spengler <spender@grsecurity.net>
6274 Date: Mon Mar 14 20:15:47 2016 -0400
6275
6276 Invert logic to clean up code
6277
6278 fs/namei.c | 32 +++++++-------------------------
6279 grsecurity/grsec_chroot.c | 10 +++++-----
6280 2 files changed, 12 insertions(+), 30 deletions(-)
6281
6282 commit 39e0e623c84863af7b3ace759b583ff938fde2b7
6283 Author: Brad Spengler <spender@grsecurity.net>
6284 Date: Mon Mar 14 19:59:36 2016 -0400
6285
6286 compile fix
6287
6288 fs/namei.c | 5 ++---
6289 1 file changed, 2 insertions(+), 3 deletions(-)
6290
6291 commit 2b3ad8bc095fea829275b7fcc7e5671677b8ed33
6292 Author: Brad Spengler <spender@grsecurity.net>
6293 Date: Mon Mar 14 19:57:53 2016 -0400
6294
6295 Also handle renames
6296
6297 fs/namei.c | 9 +++++++++
6298 1 file changed, 9 insertions(+)
6299
6300 commit 54dfd13b19743d4a340de0cd5683b5bde44e7d9c
6301 Author: Brad Spengler <spender@grsecurity.net>
6302 Date: Mon Mar 14 19:45:56 2016 -0400
6303
6304 Add additional check to cover lookup family of functions
6305
6306 fs/namei.c | 9 +++++++++
6307 1 file changed, 9 insertions(+)
6308
6309 commit c3df846baa7873fb99401136f220676b87452918
6310 Author: Brad Spengler <spender@grsecurity.net>
6311 Date: Mon Mar 14 18:42:37 2016 -0400
6312
6313 compile fix
6314
6315 fs/namei.c | 2 +-
6316 1 file changed, 1 insertion(+), 1 deletion(-)
6317
6318 commit 384ea9c0ef9df4298dfa3a71948c08e70f1092bf
6319 Author: Brad Spengler <spender@grsecurity.net>
6320 Date: Mon Mar 14 18:34:40 2016 -0400
6321
6322 Fix recent chroot check on the create side, as reported by
6323 Toralf Foerster
6324
6325 fs/namei.c | 26 ++++++++++++++++----------
6326 1 file changed, 16 insertions(+), 10 deletions(-)
6327
6328 commit 82e7dc61a626c47887d392ff9cd35b104f01fd25
6329 Author: Paolo Bonzini <pbonzini@redhat.com>
6330 Date: Tue Mar 8 12:13:39 2016 +0100
6331
6332 KVM: MMU: fix ept=0/pte.u=1/pte.w=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0 combo
6333
6334 Yes, all of these are needed. :) This is admittedly a bit odd, but
6335 kvm-unit-tests access.flat tests this if you run it with "-cpu host"
6336 and of course ept=0.
6337
6338 KVM runs the guest with CR0.WP=1, so it must handle supervisor writes
6339 specially when pte.u=1/pte.w=0/CR0.WP=0. Such writes cause a fault
6340 when U=1 and W=0 in the SPTE, but they must succeed because CR0.WP=0.
6341 When KVM gets the fault, it sets U=0 and W=1 in the shadow PTE and
6342 restarts execution. This will still cause a user write to fault, while
6343 supervisor writes will succeed. User reads will fault spuriously now,
6344 and KVM will then flip U and W again in the SPTE (U=1, W=0). User reads
6345 will be enabled and supervisor writes disabled, going back to the
6346 originary situation where supervisor writes fault spuriously.
6347
6348 When SMEP is in effect, however, U=0 will enable kernel execution of
6349 this page. To avoid this, KVM also sets NX=1 in the shadow PTE together
6350 with U=0. If the guest has not enabled NX, the result is a continuous
6351 stream of page faults due to the NX bit being reserved.
6352
6353 The fix is to force EFER.NX=1 even if the CPU is taking care of the EFER
6354 switch. (All machines with SMEP have the CPU_LOAD_IA32_EFER vm-entry
6355 control, so they do not use user-return notifiers for EFER---if they did,
6356 EFER.NX would be forced to the same value as the host).
6357
6358 There is another bug in the reserved bit check, which I've split to a
6359 separate patch for easier application to stable kernels.
6360
6361 Cc: stable@vger.kernel.org
6362 Cc: Andy Lutomirski <luto@amacapital.net>
6363 Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.intel.com>
6364 Fixes: f6577a5fa15d82217ca73c74cd2dcbc0f6c781dd
6365 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
6366
6367 Documentation/virtual/kvm/mmu.txt | 3 ++-
6368 arch/x86/kvm/vmx.c | 36 +++++++++++++++++++++++-------------
6369 2 files changed, 25 insertions(+), 14 deletions(-)
6370
6371 commit 802a88e57b141e9643e93afb7805813ad8da22f3
6372 Author: Paolo Bonzini <pbonzini@redhat.com>
6373 Date: Wed Mar 9 14:28:02 2016 +0100
6374
6375 KVM: MMU: fix reserved bit check for ept=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0
6376
6377 KVM has special logic to handle pages with pte.u=1 and pte.w=0 when
6378 CR0.WP=1. These pages' SPTEs flip continuously between two states:
6379 U=1/W=0 (user and supervisor reads allowed, supervisor writes not allowed)
6380 and U=0/W=1 (supervisor reads and writes allowed, user writes not allowed).
6381
6382 When SMEP is in effect, however, U=0 will enable kernel execution of
6383 this page. To avoid this, KVM also sets NX=1 in the shadow PTE together
6384 with U=0, making the two states U=1/W=0/NX=gpte.NX and U=0/W=1/NX=1.
6385 When guest EFER has the NX bit cleared, the reserved bit check thinks
6386 that the latter state is invalid; teach it that the smep_andnot_wp case
6387 will also use the NX bit of SPTEs.
6388
6389 Cc: stable@vger.kernel.org
6390 Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.inel.com>
6391 Fixes: c258b62b264fdc469b6d3610a907708068145e3b
6392 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
6393
6394 arch/x86/kvm/mmu.c | 4 +++-
6395 1 file changed, 3 insertions(+), 1 deletion(-)
6396
6397 commit 3925851224428c1d2bca32cf33821befb947c4f3
6398 Author: Ming Lei <ming.lei@canonical.com>
6399 Date: Sat Mar 12 22:56:19 2016 +0800
6400
6401 block: don't optimize for non-cloned bio in bio_get_last_bvec()
6402
6403 For !BIO_CLONED bio, we can use .bi_vcnt safely, but it
6404 doesn't mean we can just simply return .bi_io_vec[.bi_vcnt - 1]
6405 because the start postion may have been moved in the middle of
6406 the bvec, such as splitting in the middle of bvec.
6407
6408 Fixes: 7bcd79ac50d9(block: bio: introduce helpers to get the 1st and last bvec)
6409 Cc: stable@vger.kernel.org
6410 Reported-by: Kent Overstreet <kent.overstreet@gmail.com>
6411 Signed-off-by: Ming Lei <ming.lei@canonical.com>
6412 Signed-off-by: Jens Axboe <axboe@fb.com>
6413
6414 include/linux/bio.h | 5 -----
6415 1 file changed, 5 deletions(-)
6416
6417 commit db541463b4a0926bebdbac743c8736fb9e903d58
6418 Author: Borislav Petkov <bp@alien8.de>
6419 Date: Fri Mar 11 12:32:06 2016 +0100
6420
6421 x86/fpu: Fix eager-FPU handling on legacy FPU machines
6422
6423 i486 derived cores like Intel Quark support only the very old,
6424 legacy x87 FPU (FSAVE/FRSTOR, CPUID bit FXSR is not set), and
6425 our FPU code wasn't handling the saving and restoring there
6426 properly in the 'eagerfpu' case.
6427
6428 So after we made eagerfpu the default for all CPU types:
6429
6430 58122bf1d856 x86/fpu: Default eagerfpu=on on all CPUs
6431
6432 these old FPU designs broke. First, Andy Shevchenko reported a splat:
6433
6434 WARNING: CPU: 0 PID: 823 at arch/x86/include/asm/fpu/internal.h:163 fpu__clear+0x8c/0x160
6435
6436 which was us trying to execute FXRSTOR on those machines even though
6437 they don't support it.
6438
6439 After taking care of that, Bryan O'Donoghue reported that a simple FPU
6440 test still failed because we weren't initializing the FPU state properly
6441 on those machines.
6442
6443 Take care of all that.
6444
6445 Reported-and-tested-by: Bryan O'Donoghue <pure.logic@nexus-software.ie>
6446 Reported-by: Andy Shevchenko <andy.shevchenko@gmail.com>
6447 Signed-off-by: Borislav Petkov <bp@suse.de>
6448 Acked-by: Linus Torvalds <torvalds@linux-foundation.org>
6449 Cc: Andrew Morton <akpm@linux-foundation.org>
6450 Cc: Andy Lutomirski <luto@amacapital.net>
6451 Cc: Borislav Petkov <bp@alien8.de>
6452 Cc: Brian Gerst <brgerst@gmail.com>
6453 Cc: Dave Hansen <dave.hansen@linux.intel.com>
6454 Cc: Denys Vlasenko <dvlasenk@redhat.com>
6455 Cc: Fenghua Yu <fenghua.yu@intel.com>
6456 Cc: H. Peter Anvin <hpa@zytor.com>
6457 Cc: Oleg Nesterov <oleg@redhat.com>
6458 Cc: Peter Zijlstra <peterz@infradead.org>
6459 Cc: Quentin Casasnovas <quentin.casasnovas@oracle.com>
6460 Cc: Thomas Gleixner <tglx@linutronix.de>
6461 Cc: Yu-cheng <yu-cheng.yu@intel.com>
6462 Link: http://lkml.kernel.org/r/20160311113206.GD4312@pd.tnic
6463 Signed-off-by: Ingo Molnar <mingo@kernel.org>
6464
6465 arch/x86/kernel/fpu/core.c | 4 +++-
6466 arch/x86/kernel/fpu/init.c | 2 +-
6467 2 files changed, 4 insertions(+), 2 deletions(-)
6468
6469 commit 8fed14e935cb62d2d46e99793d728dc7760dcc87
6470 Author: Brad Spengler <spender@grsecurity.net>
6471 Date: Sun Mar 13 11:35:56 2016 -0400
6472
6473 Compile fixes
6474
6475 fs/namei.c | 2 +-
6476 grsecurity/grsec_chroot.c | 2 +-
6477 include/linux/grsecurity.h | 2 +-
6478 3 files changed, 3 insertions(+), 3 deletions(-)
6479
6480 commit aab25a3496c4683c5858056960010119fb7d9a5a
6481 Author: Brad Spengler <spender@grsecurity.net>
6482 Date: Sun Mar 13 10:53:59 2016 -0400
6483
6484 Use fput instead of put_filp()
6485
6486 fs/namei.c | 4 ++--
6487 1 file changed, 2 insertions(+), 2 deletions(-)
6488
6489 commit 928ddec9dfe5415dff82d941c3b3e76ee6f48761
6490 Author: Brad Spengler <spender@grsecurity.net>
6491 Date: Sun Mar 13 10:30:54 2016 -0400
6492
6493 Update MPROTECT_COMPAT config description, disable by default
6494
6495 security/Kconfig | 18 ++++++------------
6496 1 file changed, 6 insertions(+), 12 deletions(-)
6497
6498 commit 4cc29af2e81e7a4bdfab1afedfdedca6e23362d5
6499 Author: Brad Spengler <spender@grsecurity.net>
6500 Date: Sun Mar 13 10:35:55 2016 -0400
6501
6502 As reported by Jann Horn, chroot scenarios where the chrooting application
6503 brings in a directory fd can be used to access any file outside of the chroot
6504 via *at syscalls. To maintain compatibility with Chromium and other apps,
6505 we specifically only disallow relative accesses off a directory fd when the
6506 final path is not located under that directory described by the fd and exists
6507 outside of the chroot. This additional restriction will exist under the
6508 current GRKERNSEC_CHROOT_FCHDIR option.
6509
6510 fs/namei.c | 9 +++++++++
6511 grsecurity/Kconfig | 10 ++++++----
6512 grsecurity/grsec_chroot.c | 39 +++++++++++++++++++++++++++++++++++++++
6513 include/linux/grmsg.h | 1 +
6514 include/linux/grsecurity.h | 1 +
6515 5 files changed, 56 insertions(+), 4 deletions(-)
6516
6517 commit 7d02a991213f0b07a3677dcc93cdafc3ac309142
6518 Author: Brad Spengler <spender@grsecurity.net>
6519 Date: Thu Mar 10 22:17:16 2016 -0500
6520
6521 Update size_overflow hash table
6522
6523 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
6524 1 file changed, 1 insertion(+)
6525
6526 commit 29f25ddda6a5625340df26beb394279fefea2b49
6527 Author: Brad Spengler <spender@grsecurity.net>
6528 Date: Thu Mar 10 22:16:04 2016 -0500
6529
6530 Fix module support
6531
6532 kernel/module.c | 3 ++-
6533 1 file changed, 2 insertions(+), 1 deletion(-)
6534
6535 commit b057a45636b626e7eaf03077ed0916b95fea054c
6536 Merge: ba5ee94 10d57c1
6537 Author: Brad Spengler <spender@grsecurity.net>
6538 Date: Thu Mar 10 21:36:10 2016 -0500
6539
6540 Merge branch 'pax-test' into grsec-test
6541
6542 commit 10d57c107e7fabffbe616b14efab73df585576c2
6543 Merge: 1cbae46 62e2195
6544 Author: Brad Spengler <spender@grsecurity.net>
6545 Date: Thu Mar 10 21:34:58 2016 -0500
6546
6547 Update to pax-linux-4.4.5-test9.patch:
6548 - fixed an integer signedness mixup in the old select syscall caught by the size overflow plugin, by Mathias Krause <minipli@ld-linux.so>
6549 - Emese cleaned up a few unnecessary type casts in the size overflow plugin
6550 - fixed the initify plugin to not trigger a compiler assert with gcc 6 in LTO mode
6551 - compile the x86 vdso without plugins, reported by Emese
6552 - fixed a REFCOUNT/arm compile error, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4410)
6553 - fixed gcc-common.h for gcc 6, reported by psturm (https://forums.grsecurity.net/viewtopic.php?f=3&t=4394)
6554
6555 Merge branch 'linux-4.4.y' into pax-test
6556
6557 commit ba5ee94199b11c1429559a08c2158677dd8f1761
6558 Author: Brad Spengler <spender@grsecurity.net>
6559 Date: Thu Mar 3 20:20:19 2016 -0500
6560
6561 Update size_overflow hash table
6562
6563 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
6564 1 file changed, 1 insertion(+)
6565
6566 commit 50a5cd726362f0988b81a54d4c962acf8fd34a70
6567 Merge: 335c04c 1cbae46
6568 Author: Brad Spengler <spender@grsecurity.net>
6569 Date: Thu Mar 3 20:04:00 2016 -0500
6570
6571 Merge branch 'pax-test' into grsec-test
6572
6573 commit 1cbae46efa0b111ef2d46502f8d34c4c572a0e00
6574 Merge: a51cdb8 c252409
6575 Author: Brad Spengler <spender@grsecurity.net>
6576 Date: Thu Mar 3 19:57:43 2016 -0500
6577
6578 Merge branch 'linux-4.4.y' into pax-test
6579
6580 commit 335c04c8146a696a6101a9c69dbd47f11383549e
6581 Merge: 897877e a51cdb8
6582 Author: Brad Spengler <spender@grsecurity.net>
6583 Date: Tue Mar 1 17:57:24 2016 -0500
6584
6585 Merge branch 'pax-test' into grsec-test
6586
6587 commit a51cdb83569b450858737a30d2be043d87d7ddc1
6588 Author: Brad Spengler <spender@grsecurity.net>
6589 Date: Tue Mar 1 17:56:43 2016 -0500
6590
6591 Update to pax-linux-4.4.3-test6.patch:
6592 - spender fixed the cftype constification fallout, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4391)
6593 - fixed a few section mismatches on notifier_block variables
6594 - fixed a few REFCOUNT false positives found by Emese's plugin
6595 - constified hypervisor_x86
6596
6597 arch/x86/include/asm/hypervisor.h | 2 +-
6598 arch/x86/kernel/cpu/mshyperv.c | 2 +-
6599 arch/x86/kernel/cpu/vmware.c | 2 +-
6600 arch/x86/kernel/kvm.c | 2 +-
6601 drivers/lightnvm/rrpc.c | 4 ++--
6602 drivers/lightnvm/rrpc.h | 2 +-
6603 drivers/net/can/led.c | 2 +-
6604 drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +-
6605 drivers/net/ethernet/rocker/rocker.c | 4 ++--
6606 drivers/net/ipvlan/ipvlan_main.c | 6 +++---
6607 drivers/net/vrf.c | 2 +-
6608 drivers/staging/rtl8188eu/core/rtw_mlme_ext.c | 12 ++++++------
6609 drivers/staging/rtl8188eu/include/rtw_mlme_ext.h | 2 +-
6610 drivers/staging/rtl8723au/core/rtw_mlme_ext.c | 12 ++++++------
6611 drivers/staging/rtl8723au/include/drv_types.h | 2 +-
6612 drivers/staging/rtl8723au/include/rtw_mlme_ext.h | 2 +-
6613 drivers/staging/rtl8723au/include/usb_ops.h | 4 ++--
6614 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
6615 fs/proc/kcore.c | 2 +-
6616 mm/hugetlb_cgroup.c | 8 ++++----
6617 mm/mm_init.c | 2 +-
6618 mm/slub.c | 2 +-
6619 net/mac802154/iface.c | 2 +-
6620 23 files changed, 41 insertions(+), 41 deletions(-)
6621
6622 commit 897877e79629a0b854e98cb666a9d898256d45a7
6623 Merge: 1ffa5d5 4f4b213
6624 Author: Brad Spengler <spender@grsecurity.net>
6625 Date: Sun Feb 28 20:54:59 2016 -0500
6626
6627 Merge branch 'pax-test' into grsec-test
6628
6629 commit 4f4b21342a4a4f87c01f7909406e6b5f4c9dadbf
6630 Author: Brad Spengler <spender@grsecurity.net>
6631 Date: Sun Feb 28 20:54:06 2016 -0500
6632
6633 Update to pax-linux-4.4.3-test5.patch:
6634 - constified xfrm_mgr and cftype, by Mathias Krause <minipli@ld-linux.so>
6635 - Emese fixed a few checkpatch reports on the gcc plugin generator headers
6636 - Emese fixed a false positive size overflow report in get_next_ino, reported by KARBOWSKI Piotr <piotr.karbowski@gmail.com>
6637 - added a generator for SIMPLE_IPA passes as well
6638
6639 include/linux/cgroup-defs.h | 2 +-
6640 include/linux/hugetlb.h | 2 +-
6641 include/linux/hugetlb_cgroup.h | 11 ++
6642 include/net/xfrm.h | 2 +-
6643 kernel/cgroup.c | 29 ++--
6644 mm/hugetlb.c | 55 ++++++-
6645 mm/hugetlb_cgroup.c | 60 ++-----
6646 mm/mmap.c | 38 ++---
6647 net/xfrm/xfrm_state.c | 4 +-
6648 tools/gcc/constify_plugin.c | 5 +-
6649 tools/gcc/gcc-common.h | 42 +++--
6650 tools/gcc/gcc-generate-gimple-pass.h | 27 ++--
6651 tools/gcc/gcc-generate-ipa-pass.h | 43 ++---
6652 tools/gcc/gcc-generate-rtl-pass.h | 27 ++--
6653 tools/gcc/gcc-generate-simple_ipa-pass.h | 173 +++++++++++++++++++++
6654 tools/gcc/size_overflow_plugin/.gitignore | 1 +
6655 .../disable_size_overflow_hash.data | 7 +-
6656 .../size_overflow_plugin/size_overflow_hash.data | 3 -
6657 18 files changed, 385 insertions(+), 146 deletions(-)
6658
6659 commit 1ffa5d50a2161311d46b56fdef734f309503cb80
6660 Author: Brad Spengler <spender@grsecurity.net>
6661 Date: Sun Feb 28 20:43:02 2016 -0500
6662
6663 Make suid/sgid bruteforce prevention also apply to binaries with fscaps
6664 enabled
6665
6666 grsecurity/grsec_sig.c | 3 +--
6667 1 file changed, 1 insertion(+), 2 deletions(-)
6668
6669 commit cfdb373a77c88d01c1539e605e28143af5981571
6670 Author: Brad Spengler <spender@grsecurity.net>
6671 Date: Sun Feb 28 19:12:39 2016 -0500
6672
6673 compile fix
6674
6675 grsecurity/gracl_segv.c | 2 +-
6676 grsecurity/grsec_sig.c | 2 +-
6677 2 files changed, 2 insertions(+), 2 deletions(-)
6678
6679 commit 67d5160f8c1ee12ee4da1e7ad57f8688fcc77b53
6680 Author: Brad Spengler <spender@grsecurity.net>
6681 Date: Sun Feb 28 18:24:50 2016 -0500
6682
6683 Update the daemon check in handling of anti-bruteforcing of suid binaries
6684 by GRKERNSEC_BRUTE to prevent a bypass reported by Jann Horn where one
6685 could create unprivileged copies of the suid binary via ptrace, inject
6686 code into them, and fork+exec a privileged copy. A crash then in the
6687 privileged copy would trigger the daemon detection which could be avoided
6688 by simply terminating the original process. Defeat this by using our
6689 is_privileged_binary() function against the task's mm->binfmt->file to detect
6690 an fscaps-enabled or suid/sgid binary being involved.
6691
6692 Also update the RBAC RES_CRASH code to use is_privileged_binary().
6693
6694 grsecurity/gracl_segv.c | 15 +--------------
6695 grsecurity/grsec_sig.c | 3 ++-
6696 2 files changed, 3 insertions(+), 15 deletions(-)
6697
6698 commit 7382ec22b0c9627c674ccbb00210276d26f219e3
6699 Author: Brad Spengler <spender@grsecurity.net>
6700 Date: Sun Feb 28 15:06:32 2016 -0500
6701
6702 Fix a GRKERNSEC_PTRACE_READEXEC bypass reported by Jann Horn where one
6703 could dump out an unreadable suid binary by creating a script that used
6704 that binary as an interpreter.
6705
6706 fs/exec.c | 14 +++++++++-----
6707 1 file changed, 9 insertions(+), 5 deletions(-)
6708
6709 commit 3e60eddebe1c59b97c0b5432506bf8e13d84e8e6
6710 Merge: 2d35d52 8327ee6
6711 Author: Brad Spengler <spender@grsecurity.net>
6712 Date: Thu Feb 25 18:44:11 2016 -0500
6713
6714 Merge branch 'pax-test' into grsec-test
6715
6716 Conflicts:
6717 fs/proc/base.c
6718 kernel/ptrace.c
6719 mm/process_vm_access.c
6720
6721 commit 8327ee64e5e24ae6a3446dd96b95d5185f70e1f6
6722 Merge: 09d53c7 2134d97
6723 Author: Brad Spengler <spender@grsecurity.net>
6724 Date: Thu Feb 25 18:36:46 2016 -0500
6725
6726 Merge branch 'linux-4.4.y' into pax-test
6727
6728 Conflicts:
6729 mm/mmap.c
6730
6731 commit 2d35d5276f3feb0c053209f8c3a77b1f55f9d96b
6732 Author: Brad Spengler <spender@grsecurity.net>
6733 Date: Wed Feb 24 07:59:12 2016 -0500
6734
6735 Remove /proc/pid/map_files which we had previously prevented via
6736 an inverted dependency on checkpoint/restart, but clearly should have
6737 guarded independently as upstream in 4.3 enabled it regardless of checkpoint/
6738 restart support. It can be used since 4.3 as an ASLR leak under RBAC to
6739 processes of the same UID. Thanks to Mathias Krause for the report!
6740
6741 fs/proc/base.c | 2 ++
6742 1 file changed, 2 insertions(+)
6743
6744 commit e4f1e517092222aa28179b20e14c0ddfb2796049
6745 Author: Brad Spengler <spender@grsecurity.net>
6746 Date: Thu Feb 18 19:32:39 2016 -0500
6747
6748 Update size_overflow hash table
6749
6750 .../size_overflow_plugin/size_overflow_hash.data | 158 +++++++++++++++++----
6751 1 file changed, 131 insertions(+), 27 deletions(-)
6752
6753 commit d5f895ddfa903d0d70425b8c3d7ef649c7e6943b
6754 Author: Brad Spengler <spender@grsecurity.net>
6755 Date: Thu Feb 18 18:52:37 2016 -0500
6756
6757 Update size_overflow hash table
6758
6759 .../size_overflow_plugin/size_overflow_hash.data | 293 +++++++++++++++++----
6760 1 file changed, 237 insertions(+), 56 deletions(-)
6761
6762 commit 9d198df724c306c36e254fe19d0957fb608c3fa2
6763 Author: Brad Spengler <spender@grsecurity.net>
6764 Date: Thu Feb 18 18:23:03 2016 -0500
6765
6766 compile fix
6767
6768 tools/gcc/randomize_layout_plugin.c | 2 +-
6769 1 file changed, 1 insertion(+), 1 deletion(-)
6770
6771 commit 024d2af98b755712daff6ed7c49af921da4e8883
6772 Author: Brad Spengler <spender@grsecurity.net>
6773 Date: Thu Feb 18 18:19:47 2016 -0500
6774
6775 compile fix
6776
6777 tools/gcc/randomize_layout_plugin.c | 2 +-
6778 1 file changed, 1 insertion(+), 1 deletion(-)
6779
6780 commit 14a7b3bb5c3d8c6ef70c3e0842a5adc7f0f3e2c8
6781 Author: Brad Spengler <spender@grsecurity.net>
6782 Date: Thu Feb 18 18:16:32 2016 -0500
6783
6784 compile fix
6785
6786 tools/gcc/randomize_layout_plugin.c | 9 +++++----
6787 1 file changed, 5 insertions(+), 4 deletions(-)
6788
6789 commit 9b2d0ee62bc66858c274f256c0502cbcbd34b2bf
6790 Author: Brad Spengler <spender@grsecurity.net>
6791 Date: Thu Feb 18 17:54:51 2016 -0500
6792
6793 Compile fix
6794
6795 tools/gcc/randomize_layout_plugin.c | 2 +-
6796 1 file changed, 1 insertion(+), 1 deletion(-)
6797
6798 commit 13823395101c4228ecded4b624583389ee13bfb3
6799 Author: Brad Spengler <spender@grsecurity.net>
6800 Date: Thu Feb 18 17:35:21 2016 -0500
6801
6802 compile fix
6803
6804 Makefile | 5 +----
6805 1 file changed, 1 insertion(+), 4 deletions(-)
6806
6807 commit 0316a42a37e67b0bc8a545c7a8b63db2d25f1ab0
6808 Merge: 45cbb7e 09d53c7
6809 Author: Brad Spengler <spender@grsecurity.net>
6810 Date: Thu Feb 18 16:40:51 2016 -0500
6811
6812 Merge branch 'pax-test' into grsec-test
6813
6814 Conflicts:
6815 Makefile
6816 include/linux/genl_magic_struct.h
6817 scripts/mod/modpost.c
6818 tools/gcc/size_overflow_plugin/size_overflow_hash.data
6819
6820 commit 09d53c74140e87e886a28980cedbb7e771f2a356
6821 Author: Brad Spengler <spender@grsecurity.net>
6822 Date: Thu Feb 18 16:24:02 2016 -0500
6823
6824 Update to pax-linux-4.4.2-test4.patch:
6825 - fixed the initialization of ipc_namespace.shm_ctlmax to prevent the size overflow plugin from catching an integer truncation when calling shmem_kernel_file_setup, reported by Mathias Krause <minipli@ld-linux.so>
6826 - moved gcc plugin related makefile bits into a separate file, by Emese
6827 - changed modpost to report writable function pointers separately
6828 - increased the size of mem_cgroup.numainfo_events to avoid a wraparound caught by REFCOUNT, reported by alexey vlasov
6829 - reduced the size of the compat syscall entry points on amd64
6830 - fixed an integer signedness mixup in drbd caught by the size overflow plugin, reported by iamb and gaima (https://forums.grsecurity.net/viewtopic.php?f=3&t=4366)
6831 - Emese regenerated the size overflow hash table for 4.4
6832 - all plugins now use the new pass generator headers
6833
6834 Makefile | 73 +-
6835 arch/x86/entry/entry_64.S | 2 +-
6836 arch/x86/entry/entry_64_compat.S | 48 +-
6837 fs/exec.c | 3 +
6838 include/linux/genl_magic_struct.h | 4 +-
6839 include/linux/memcontrol.h | 2 +-
6840 ipc/shm.c | 2 +-
6841 mm/memcontrol.c | 6 +-
6842 scripts/Makefile.extrawarn | 4 +
6843 scripts/Makefile.gcc-plugins | 69 +
6844 scripts/mod/modpost.c | 15 +-
6845 tools/gcc/checker_plugin.c | 71 +-
6846 tools/gcc/colorize_plugin.c | 65 +-
6847 tools/gcc/constify_plugin.c | 65 +-
6848 tools/gcc/gcc-generate-gimple-pass.h | 172 +
6849 tools/gcc/gcc-generate-ipa-pass.h | 286 +
6850 tools/gcc/gcc-generate-rtl-pass.h | 172 +
6851 tools/gcc/initify_plugin.c | 74 +-
6852 tools/gcc/kallocstat_plugin.c | 65 +-
6853 tools/gcc/kernexec_plugin.c | 184 +-
6854 tools/gcc/latent_entropy_plugin.c | 71 +-
6855 tools/gcc/randomize_layout_seed.h | 1 -
6856 .../disable_size_overflow_hash.h | 152601 ------------------
6857 .../insert_size_overflow_asm.c | 71 +-
6858 .../size_overflow_plugin/intentional_overflow.c | 6 +-
6859 tools/gcc/size_overflow_plugin/size_overflow.h | 20 +-
6860 .../size_overflow_plugin/size_overflow_hash.data | 2898 +-
6861 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 94 +-
6862 .../size_overflow_plugin/size_overflow_plugin.c | 14 +-
6863 .../size_overflow_plugin/size_overflow_transform.c | 2 +-
6864 .../size_overflow_transform_core.c | 2 +-
6865 tools/gcc/stackleak_plugin.c | 132 +-
6866 tools/gcc/structleak_plugin.c | 67 +-
6867 33 files changed, 2238 insertions(+), 155123 deletions(-)
6868
6869 commit 45cbb7e015a18625dafb019246e13e8cf3a18ace
6870 Merge: 3b5448b 0c85110
6871 Author: Brad Spengler <spender@grsecurity.net>
6872 Date: Wed Feb 17 19:11:25 2016 -0500
6873
6874 Merge branch 'pax-test' into grsec-test
6875
6876 commit 0c851109f683896aaff8a310bbfa943272b47516
6877 Merge: 6cb4f49 1cb8570
6878 Author: Brad Spengler <spender@grsecurity.net>
6879 Date: Wed Feb 17 19:11:21 2016 -0500
6880
6881 Merge branch 'linux-4.4.y' into pax-test
6882
6883 commit 3b5448bd1d85025d19b2587902e4264eb212a0a3
6884 Author: Brad Spengler <spender@grsecurity.net>
6885 Date: Mon Feb 15 18:02:40 2016 -0500
6886
6887 Fix a drbd bug reported by iamb on the forums:
6888 https://forums.grsecurity.net/viewtopic.php?f=3&t=4366#p16032
6889 which caused a size_overflow report
6890
6891 include/linux/genl_magic_struct.h | 4 ++--
6892 1 file changed, 2 insertions(+), 2 deletions(-)
6893
6894 commit 061fcd0e74441189a87bfe13b55fb02b98f7d7c0
6895 Author: Brad Spengler <spender@grsecurity.net>
6896 Date: Mon Feb 15 13:20:38 2016 -0500
6897
6898 compile fix
6899
6900 drivers/staging/wilc1000/host_interface.h | 1 +
6901 1 file changed, 1 insertion(+)
6902
6903 commit 675f2dcbdd4ea3293eea9c42f0cc427b1c903fc8
6904 Author: Brad Spengler <spender@grsecurity.net>
6905 Date: Mon Feb 15 12:54:52 2016 -0500
6906
6907 Update size_overflow hash table
6908
6909 .../size_overflow_plugin/size_overflow_hash.data | 21 +++++++++++++++++----
6910 1 file changed, 17 insertions(+), 4 deletions(-)
6911
6912 commit c8c50394f0c9f2e9baaeb884a29be2057cadbf7b
6913 Author: Brad Spengler <spender@grsecurity.net>
6914 Date: Mon Feb 15 12:53:54 2016 -0500
6915
6916 compile fix
6917
6918 drivers/staging/wilc1000/wilc_spi.c | 1 -
6919 drivers/staging/wilc1000/wilc_wlan.h | 2 +-
6920 2 files changed, 1 insertion(+), 2 deletions(-)
6921
6922 commit a9dd4481db099082967585be8e153899e5fd24c7
6923 Author: Brad Spengler <spender@grsecurity.net>
6924 Date: Mon Feb 15 12:52:32 2016 -0500
6925
6926 compile fix
6927
6928 fs/proc/fd.c | 2 --
6929 1 file changed, 2 deletions(-)
6930
6931 commit 5acb4fa0063460807096429f073181d1c5a3e566
6932 Author: Brad Spengler <spender@grsecurity.net>
6933 Date: Mon Feb 15 12:32:13 2016 -0500
6934
6935 Update size_overflow hash table
6936
6937 .../size_overflow_plugin/size_overflow_hash.data | 224 +++++++++++++++++----
6938 1 file changed, 182 insertions(+), 42 deletions(-)
6939
6940 commit c0bac9ff9af7ef753740622b5736684a32b49a9f
6941 Author: Brad Spengler <spender@grsecurity.net>
6942 Date: Mon Feb 15 12:31:16 2016 -0500
6943
6944 compile fix
6945
6946 drivers/staging/wilc1000/wilc_spi.c | 1 +
6947 1 file changed, 1 insertion(+)
6948
6949 commit 2f89ebdee131f6a6c85e611e5b993d4b19bc2673
6950 Author: Brad Spengler <spender@grsecurity.net>
6951 Date: Mon Feb 15 12:28:36 2016 -0500
6952
6953 RANDSTRUCT compile fix
6954
6955 drivers/staging/wilc1000/wilc_spi.c | 32 ++++++++++++++++----------------
6956 1 file changed, 16 insertions(+), 16 deletions(-)
6957
6958 commit 693be5d7f5b783f451499bbe83162aeb0f27a09f
6959 Author: Brad Spengler <spender@grsecurity.net>
6960 Date: Mon Feb 15 12:24:49 2016 -0500
6961
6962 RANDSTRUCT compile fix
6963
6964 drivers/staging/wilc1000/wilc_sdio.c | 34 +++++++++++++++++-----------------
6965 1 file changed, 17 insertions(+), 17 deletions(-)
6966
6967 commit bdf3dcd665c1a8ef9b69ad6525760c5160ec19a2
6968 Author: Hariprasad S <hariprasad@chelsio.com>
6969 Date: Fri Dec 11 13:59:17 2015 +0530
6970
6971 iw_cxgb3: Fix incorrectly returning error on success
6972
6973 The cxgb3_*_send() functions return NET_XMIT_ values, which are
6974 positive integers values. So don't treat positive return values
6975 as an error.
6976
6977 Signed-off-by: Steve Wise <swise@opengridcomputing.com>
6978 Signed-off-by: Hariprasad Shenai <hariprasad@chelsio.com>
6979 Signed-off-by: Doug Ledford <dledford@redhat.com>
6980
6981 drivers/infiniband/hw/cxgb3/iwch_cm.c | 4 ++--
6982 1 file changed, 2 insertions(+), 2 deletions(-)
6983
6984 commit 8705fe372dc21046ca3fc55381b70cffb4c60207
6985 Author: Daniel Borkmann <daniel@iogearbox.net>
6986 Date: Wed Feb 10 16:47:11 2016 +0100
6987
6988 bpf: fix branch offset adjustment on backjumps after patching ctx expansion
6989
6990 When ctx access is used, the kernel often needs to expand/rewrite
6991 instructions, so after that patching, branch offsets have to be
6992 adjusted for both forward and backward jumps in the new eBPF program,
6993 but for backward jumps it fails to account the delta. Meaning, for
6994 example, if the expansion happens exactly on the insn that sits at
6995 the jump target, it doesn't fix up the back jump offset.
6996
6997 Analysis on what the check in adjust_branches() is currently doing:
6998
6999 /* adjust offset of jmps if necessary */
7000 if (i < pos && i + insn->off + 1 > pos)
7001 insn->off += delta;
7002 else if (i > pos && i + insn->off + 1 < pos)
7003 insn->off -= delta;
7004
7005 First condition (forward jumps):
7006
7007 Before: After:
7008
7009 insns[0] insns[0]
7010 insns[1] <--- i/insn insns[1] <--- i/insn
7011 insns[2] <--- pos insns[P] <--- pos
7012 insns[3] insns[P] `------| delta
7013 insns[4] <--- target_X insns[P] `-----|
7014 insns[5] insns[3]
7015 insns[4] <--- target_X
7016 insns[5]
7017
7018 First case is if we cross pos-boundary and the jump instruction was
7019 before pos. This is handeled correctly. I.e. if i == pos, then this
7020 would mean our jump that we currently check was the patchlet itself
7021 that we just injected. Since such patchlets are self-contained and
7022 have no awareness of any insns before or after the patched one, the
7023 delta is correctly not adjusted. Also, for the second condition in
7024 case of i + insn->off + 1 == pos, means we jump to that newly patched
7025 instruction, so no offset adjustment are needed. That part is correct.
7026
7027 Second condition (backward jumps):
7028
7029 Before: After:
7030
7031 insns[0] insns[0]
7032 insns[1] <--- target_X insns[1] <--- target_X
7033 insns[2] <--- pos <-- target_Y insns[P] <--- pos <-- target_Y
7034 insns[3] insns[P] `------| delta
7035 insns[4] <--- i/insn insns[P] `-----|
7036 insns[5] insns[3]
7037 insns[4] <--- i/insn
7038 insns[5]
7039
7040 Second interesting case is where we cross pos-boundary and the jump
7041 instruction was after pos. Backward jump with i == pos would be
7042 impossible and pose a bug somewhere in the patchlet, so the first
7043 condition checking i > pos is okay only by itself. However, i +
7044 insn->off + 1 < pos does not always work as intended to trigger the
7045 adjustment. It works when jump targets would be far off where the
7046 delta wouldn't matter. But, for example, where the fixed insn->off
7047 before pointed to pos (target_Y), it now points to pos + delta, so
7048 that additional room needs to be taken into account for the check.
7049 This means that i) both tests here need to be adjusted into pos + delta,
7050 and ii) for the second condition, the test needs to be <= as pos
7051 itself can be a target in the backjump, too.
7052
7053 Fixes: 9bac3d6d548e ("bpf: allow extended BPF programs access skb fields")
7054 Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
7055 Signed-off-by: David S. Miller <davem@davemloft.net>
7056
7057 kernel/bpf/verifier.c | 2 +-
7058 1 file changed, 1 insertion(+), 1 deletion(-)
7059
7060 commit 61b513b644116e77313addf65970db58f4981608
7061 Author: Ryan Ware <ware@linux.intel.com>
7062 Date: Thu Feb 11 15:58:44 2016 -0800
7063
7064 EVM: Use crypto_memneq() for digest comparisons
7065
7066 This patch fixes vulnerability CVE-2016-2085. The problem exists
7067 because the vm_verify_hmac() function includes a use of memcmp().
7068 Unfortunately, this allows timing side channel attacks; specifically
7069 a MAC forgery complexity drop from 2^128 to 2^12. This patch changes
7070 the memcmp() to the cryptographically safe crypto_memneq().
7071
7072 Reported-by: Xiaofei Rex Guo <xiaofei.rex.guo@intel.com>
7073 Signed-off-by: Ryan Ware <ware@linux.intel.com>
7074 Cc: stable@vger.kernel.org
7075 Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
7076 Signed-off-by: James Morris <james.l.morris@oracle.com>
7077
7078 security/integrity/evm/evm_main.c | 3 ++-
7079 1 file changed, 2 insertions(+), 1 deletion(-)
7080
7081 commit 970b961e7d0684624f9c69f0b4367d5c76b65a63
7082 Author: Michael McConville <mmcco@mykolab.com>
7083 Date: Fri Feb 5 20:46:25 2016 -0500
7084
7085 dscc4: Undefined signed int shift
7086
7087 My analysis in the below mail applies, although the second part is
7088 unnecessary because i isn't used in arithmetic operations here:
7089
7090 https://marc.info/?l=openbsd-tech&m=145377854103866&w=2
7091
7092 Thanks for your time.
7093
7094 Signed-off-by: Michael McConville <mmcco@mykolab.com>
7095 Acked-by: Francois Romieu <romieu@fr.zoreil.com>
7096 Signed-off-by: David S. Miller <davem@davemloft.net>
7097
7098 drivers/net/wan/dscc4.c | 2 +-
7099 1 file changed, 1 insertion(+), 1 deletion(-)
7100
7101 commit d843df24b6680b600e87ebfea3b7b198b90b5a2a
7102 Author: Andrey Konovalov <andreyknvl@gmail.com>
7103 Date: Sat Feb 13 11:08:06 2016 +0300
7104
7105 ALSA: usb-audio: avoid freeing umidi object twice
7106
7107 The 'umidi' object will be free'd on the error path by snd_usbmidi_free()
7108 when tearing down the rawmidi interface. So we shouldn't try to free it
7109 in snd_usbmidi_create() after having registered the rawmidi interface.
7110
7111 Found by KASAN.
7112
7113 Signed-off-by: Andrey Konovalov <andreyknvl@gmail.com>
7114 Acked-by: Clemens Ladisch <clemens@ladisch.de>
7115 Cc: <stable@vger.kernel.org>
7116 Signed-off-by: Takashi Iwai <tiwai@suse.de>
7117
7118 sound/usb/midi.c | 1 -
7119 1 file changed, 1 deletion(-)
7120
7121 commit ed3a8ab1976674d56e258da93639e61f1446e703
7122 Author: zengtao <prime.zeng@huawei.com>
7123 Date: Tue Feb 2 11:38:34 2016 +0800
7124
7125 cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
7126
7127 The datatype __kernel_time_t is u32 on 32bit platform, so its subject to
7128 overflows in the timeval/timespec to cputime conversion.
7129
7130 Currently the following functions are affected:
7131 1. setitimer()
7132 2. timer_create/timer_settime()
7133 3. sys_clock_nanosleep
7134
7135 This can happen on MIPS32 and ARM32 with "Full dynticks CPU time accounting"
7136 enabled, which is required for CONFIG_NO_HZ_FULL.
7137
7138 Enforce u64 conversion to prevent the overflow.
7139
7140 Fixes: 31c1fc818715 ("ARM: Kconfig: allow full nohz CPU accounting")
7141 Signed-off-by: zengtao <prime.zeng@huawei.com>
7142 Reviewed-by: Arnd Bergmann <arnd@arndb.de>
7143 Cc: <fweisbec@gmail.com>
7144 Cc: stable@vger.kernel.org
7145 Link: http://lkml.kernel.org/r/1454384314-154784-1-git-send-email-prime.zeng@huawei.com
7146 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
7147
7148 include/asm-generic/cputime_nsecs.h | 5 +++--
7149 1 file changed, 3 insertions(+), 2 deletions(-)
7150
7151 commit bf8a2de485da37d73850e7cfa31967b7798b6ce0
7152 Author: Brad Spengler <spender@grsecurity.net>
7153 Date: Mon Feb 15 11:55:18 2016 -0500
7154
7155 Fix building with allnoconfig, don't make our added DATA_TO_TEXT mismatch warnings
7156 count as actual mismatches
7157
7158 scripts/mod/modpost.c | 3 ++-
7159 1 file changed, 2 insertions(+), 1 deletion(-)
7160
7161 commit c9d82b6d0f1a2484fea0a516989dbdc6c55e5693
7162 Author: Brad Spengler <spender@grsecurity.net>
7163 Date: Mon Feb 15 11:44:36 2016 -0500
7164
7165 Compile fix
7166
7167 tools/gcc/randomize_layout_seed.h | 1 -
7168 1 file changed, 1 deletion(-)
7169
7170 commit fb68cbb98732e6801e8fc8d1da1f1195e51ff077
7171 Author: Brad Spengler <spender@grsecurity.net>
7172 Date: Mon Feb 15 11:27:32 2016 -0500
7173
7174 disable USELIB
7175
7176 init/Kconfig | 3 ++-
7177 1 file changed, 2 insertions(+), 1 deletion(-)
7178
7179 commit cbda9a44b7f92161eb1e444bf7fe2bbcbedaae65
7180 Author: Brad Spengler <spender@grsecurity.net>
7181 Date: Mon Feb 15 11:23:56 2016 -0500
7182
7183 compile fix
7184
7185 fs/proc/fd.c | 2 +-
7186 1 file changed, 1 insertion(+), 1 deletion(-)
7187
7188 commit 5cf0a2e87ab7105d1ba01f55f7636fa2e1fa4bb4
7189 Author: Brad Spengler <spender@grsecurity.net>
7190 Date: Mon Feb 15 11:19:26 2016 -0500
7191
7192 Initial import of grsecurity for Linux 4.4.1
7193
7194 Documentation/dontdiff | 2 +
7195 Documentation/kernel-parameters.txt | 11 +
7196 Documentation/sysctl/fs.txt | 23 +
7197 Documentation/sysctl/kernel.txt | 15 +
7198 Makefile | 18 +-
7199 arch/alpha/include/asm/cache.h | 4 +-
7200 arch/alpha/kernel/osf_sys.c | 12 +-
7201 arch/arc/Kconfig | 1 +
7202 arch/arm/Kconfig | 1 +
7203 arch/arm/Kconfig.debug | 1 +
7204 arch/arm/include/asm/thread_info.h | 7 +-
7205 arch/arm/kernel/entry-common.S | 8 +-
7206 arch/arm/kernel/process.c | 4 +-
7207 arch/arm/kernel/ptrace.c | 9 +
7208 arch/arm/kernel/traps.c | 7 +-
7209 arch/arm/mm/Kconfig | 4 +-
7210 arch/arm/mm/fault.c | 40 +-
7211 arch/arm/mm/mmap.c | 8 +-
7212 arch/arm/net/bpf_jit_32.c | 51 +-
7213 arch/arm64/Kconfig.debug | 1 +
7214 arch/avr32/include/asm/cache.h | 4 +-
7215 arch/blackfin/Kconfig.debug | 1 +
7216 arch/blackfin/include/asm/cache.h | 3 +-
7217 arch/cris/include/arch-v10/arch/cache.h | 3 +-
7218 arch/cris/include/arch-v32/arch/cache.h | 3 +-
7219 arch/frv/include/asm/cache.h | 3 +-
7220 arch/frv/mm/elf-fdpic.c | 4 +-
7221 arch/hexagon/include/asm/cache.h | 6 +-
7222 arch/ia64/Kconfig | 1 +
7223 arch/ia64/include/asm/cache.h | 3 +-
7224 arch/ia64/kernel/sys_ia64.c | 2 +
7225 arch/ia64/mm/hugetlbpage.c | 2 +
7226 arch/m32r/include/asm/cache.h | 4 +-
7227 arch/m68k/include/asm/cache.h | 4 +-
7228 arch/metag/mm/hugetlbpage.c | 1 +
7229 arch/microblaze/include/asm/cache.h | 3 +-
7230 arch/mips/Kconfig | 1 +
7231 arch/mips/include/asm/cache.h | 3 +-
7232 arch/mips/include/asm/thread_info.h | 11 +-
7233 arch/mips/kernel/irq.c | 3 +
7234 arch/mips/kernel/ptrace.c | 9 +
7235 arch/mips/mm/mmap.c | 4 +-
7236 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
7237 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
7238 arch/openrisc/include/asm/cache.h | 4 +-
7239 arch/parisc/include/asm/cache.h | 3 +
7240 arch/parisc/kernel/sys_parisc.c | 4 +
7241 arch/powerpc/Kconfig | 1 +
7242 arch/powerpc/include/asm/cache.h | 4 +-
7243 arch/powerpc/include/asm/thread_info.h | 5 +-
7244 arch/powerpc/kernel/Makefile | 2 +
7245 arch/powerpc/kernel/irq.c | 3 +
7246 arch/powerpc/kernel/process.c | 10 +-
7247 arch/powerpc/kernel/ptrace.c | 14 +
7248 arch/powerpc/kernel/traps.c | 5 +
7249 arch/powerpc/mm/slice.c | 2 +-
7250 arch/s390/Kconfig.debug | 1 +
7251 arch/s390/include/asm/cache.h | 4 +-
7252 arch/score/include/asm/cache.h | 4 +-
7253 arch/sh/include/asm/cache.h | 3 +-
7254 arch/sh/mm/mmap.c | 6 +-
7255 arch/sparc/include/asm/cache.h | 4 +-
7256 arch/sparc/include/asm/pgalloc_64.h | 1 +
7257 arch/sparc/include/asm/thread_info_64.h | 8 +-
7258 arch/sparc/kernel/process_32.c | 6 +-
7259 arch/sparc/kernel/process_64.c | 8 +-
7260 arch/sparc/kernel/ptrace_64.c | 14 +
7261 arch/sparc/kernel/sys_sparc_64.c | 8 +-
7262 arch/sparc/kernel/syscalls.S | 8 +-
7263 arch/sparc/kernel/traps_32.c | 8 +-
7264 arch/sparc/kernel/traps_64.c | 28 +-
7265 arch/sparc/kernel/unaligned_64.c | 2 +-
7266 arch/sparc/mm/fault_64.c | 2 +-
7267 arch/sparc/mm/hugetlbpage.c | 15 +-
7268 arch/tile/Kconfig | 1 +
7269 arch/tile/include/asm/cache.h | 3 +-
7270 arch/tile/mm/hugetlbpage.c | 2 +
7271 arch/um/include/asm/cache.h | 3 +-
7272 arch/unicore32/include/asm/cache.h | 6 +-
7273 arch/x86/Kconfig | 21 +
7274 arch/x86/Kconfig.debug | 2 +
7275 arch/x86/entry/common.c | 14 +
7276 arch/x86/entry/entry_32.S | 2 +-
7277 arch/x86/entry/entry_64.S | 2 +-
7278 arch/x86/ia32/ia32_aout.c | 2 +
7279 arch/x86/include/asm/floppy.h | 20 +-
7280 arch/x86/include/asm/fpu/types.h | 69 +-
7281 arch/x86/include/asm/io.h | 2 +-
7282 arch/x86/include/asm/page.h | 12 +-
7283 arch/x86/include/asm/paravirt_types.h | 23 +-
7284 arch/x86/include/asm/pgtable_types.h | 6 +-
7285 arch/x86/include/asm/processor.h | 12 +-
7286 arch/x86/include/asm/thread_info.h | 6 +-
7287 arch/x86/include/asm/uaccess.h | 2 +-
7288 arch/x86/kernel/dumpstack.c | 10 +-
7289 arch/x86/kernel/dumpstack_32.c | 2 +-
7290 arch/x86/kernel/dumpstack_64.c | 2 +-
7291 arch/x86/kernel/ioport.c | 13 +
7292 arch/x86/kernel/irq_32.c | 3 +
7293 arch/x86/kernel/irq_64.c | 4 +
7294 arch/x86/kernel/ldt.c | 18 +
7295 arch/x86/kernel/msr.c | 10 +
7296 arch/x86/kernel/ptrace.c | 14 +
7297 arch/x86/kernel/signal.c | 9 +-
7298 arch/x86/kernel/sys_i386_32.c | 9 +-
7299 arch/x86/kernel/sys_x86_64.c | 8 +-
7300 arch/x86/kernel/traps.c | 5 +
7301 arch/x86/kernel/verify_cpu.S | 1 +
7302 arch/x86/kernel/vm86_32.c | 15 +
7303 arch/x86/mm/fault.c | 12 +-
7304 arch/x86/mm/hugetlbpage.c | 15 +-
7305 arch/x86/mm/init.c | 66 +-
7306 arch/x86/mm/init_32.c | 6 +-
7307 arch/x86/mm/pageattr.c | 4 +-
7308 arch/x86/net/bpf_jit_comp.c | 4 +
7309 arch/x86/platform/efi/efi_64.c | 2 +-
7310 arch/x86/xen/Kconfig | 1 +
7311 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
7312 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
7313 crypto/scatterwalk.c | 10 +-
7314 drivers/acpi/acpica/hwxfsleep.c | 11 +-
7315 drivers/acpi/custom_method.c | 4 +
7316 drivers/block/cciss.h | 30 +-
7317 drivers/block/smart1,2.h | 40 +-
7318 drivers/cdrom/cdrom.c | 2 +-
7319 drivers/char/Kconfig | 4 +-
7320 drivers/char/genrtc.c | 1 +
7321 drivers/char/mem.c | 17 +
7322 drivers/char/random.c | 5 +-
7323 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
7324 drivers/firewire/ohci.c | 4 +
7325 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
7326 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
7327 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
7328 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
7329 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
7330 drivers/hid/hid-wiimote-debug.c | 2 +-
7331 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
7332 drivers/iommu/Kconfig | 1 +
7333 drivers/iommu/amd_iommu.c | 14 +-
7334 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
7335 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
7336 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
7337 drivers/isdn/i4l/isdn_concap.c | 6 +-
7338 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
7339 drivers/md/bcache/Kconfig | 1 +
7340 drivers/md/raid5.c | 8 +
7341 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
7342 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
7343 drivers/media/radio/radio-cadet.c | 5 +-
7344 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
7345 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
7346 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
7347 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
7348 drivers/message/fusion/mptbase.c | 9 +
7349 drivers/misc/sgi-xp/xp_main.c | 12 +-
7350 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
7351 drivers/net/ppp/pptp.c | 34 +-
7352 drivers/net/wan/lmc/lmc_media.c | 97 +-
7353 drivers/net/wan/z85230.c | 24 +-
7354 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
7355 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
7356 drivers/pci/proc.c | 9 +
7357 drivers/platform/x86/asus-wmi.c | 12 +
7358 drivers/rtc/rtc-dev.c | 3 +
7359 drivers/scsi/bfa/bfa_fcs.c | 19 +-
7360 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
7361 drivers/scsi/bfa/bfa_modules.h | 12 +-
7362 drivers/scsi/hpsa.h | 40 +-
7363 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
7364 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
7365 drivers/tty/serial/uartlite.c | 4 +-
7366 drivers/tty/sysrq.c | 2 +-
7367 drivers/tty/tty_io.c | 4 +
7368 drivers/tty/vt/keyboard.c | 22 +-
7369 drivers/uio/uio.c | 6 +-
7370 drivers/usb/core/hub.c | 5 +
7371 drivers/usb/gadget/function/f_uac1.c | 1 +
7372 drivers/usb/gadget/function/u_uac1.c | 1 +
7373 drivers/usb/host/hwa-hc.c | 9 +-
7374 drivers/usb/usbip/vhci_sysfs.c | 2 +-
7375 drivers/video/fbdev/arcfb.c | 2 +-
7376 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
7377 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
7378 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
7379 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++----
7380 drivers/xen/xenfs/xenstored.c | 5 +
7381 firmware/Makefile | 2 +
7382 firmware/WHENCE | 20 +-
7383 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
7384 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
7385 fs/attr.c | 4 +
7386 fs/autofs4/waitq.c | 9 +
7387 fs/binfmt_aout.c | 7 +
7388 fs/binfmt_elf.c | 40 +-
7389 fs/compat.c | 20 +-
7390 fs/compat_ioctl.c | 253 +-
7391 fs/coredump.c | 17 +-
7392 fs/dcache.c | 3 +
7393 fs/debugfs/inode.c | 11 +-
7394 fs/exec.c | 231 +-
7395 fs/ext2/balloc.c | 4 +-
7396 fs/ext2/super.c | 8 +-
7397 fs/ext4/balloc.c | 4 +-
7398 fs/ext4/extents.c | 2 +-
7399 fs/fcntl.c | 4 +
7400 fs/fhandle.c | 3 +-
7401 fs/file.c | 4 +
7402 fs/filesystems.c | 4 +
7403 fs/fs_struct.c | 20 +-
7404 fs/hugetlbfs/inode.c | 24 +-
7405 fs/inode.c | 8 +-
7406 fs/internal.h | 7 +
7407 fs/ioctl.c | 4 +-
7408 fs/kernfs/dir.c | 6 +
7409 fs/mount.h | 4 +-
7410 fs/namei.c | 283 +-
7411 fs/namespace.c | 24 +
7412 fs/nfsd/nfscache.c | 2 +-
7413 fs/open.c | 38 +
7414 fs/overlayfs/inode.c | 3 +
7415 fs/overlayfs/super.c | 6 +-
7416 fs/pipe.c | 49 +-
7417 fs/posix_acl.c | 15 +-
7418 fs/proc/Kconfig | 10 +-
7419 fs/proc/array.c | 69 +-
7420 fs/proc/base.c | 186 +-
7421 fs/proc/cmdline.c | 4 +
7422 fs/proc/devices.c | 4 +
7423 fs/proc/fd.c | 12 +-
7424 fs/proc/generic.c | 64 +
7425 fs/proc/inode.c | 17 +
7426 fs/proc/internal.h | 11 +-
7427 fs/proc/interrupts.c | 4 +
7428 fs/proc/kcore.c | 3 +
7429 fs/proc/namespaces.c | 4 +-
7430 fs/proc/proc_net.c | 31 +
7431 fs/proc/proc_sysctl.c | 52 +-
7432 fs/proc/root.c | 8 +
7433 fs/proc/stat.c | 69 +-
7434 fs/proc/task_mmu.c | 66 +-
7435 fs/readdir.c | 19 +
7436 fs/reiserfs/item_ops.c | 24 +-
7437 fs/reiserfs/super.c | 4 +
7438 fs/select.c | 2 +
7439 fs/seq_file.c | 30 +-
7440 fs/stat.c | 20 +-
7441 fs/sysfs/dir.c | 30 +-
7442 fs/utimes.c | 7 +
7443 fs/xattr.c | 26 +-
7444 grsecurity/Kconfig | 1203 ++++
7445 grsecurity/Makefile | 54 +
7446 grsecurity/gracl.c | 2757 +++++++++
7447 grsecurity/gracl_alloc.c | 105 +
7448 grsecurity/gracl_cap.c | 127 +
7449 grsecurity/gracl_compat.c | 269 +
7450 grsecurity/gracl_fs.c | 448 ++
7451 grsecurity/gracl_ip.c | 386 ++
7452 grsecurity/gracl_learn.c | 207 +
7453 grsecurity/gracl_policy.c | 1786 ++++++
7454 grsecurity/gracl_res.c | 68 +
7455 grsecurity/gracl_segv.c | 304 +
7456 grsecurity/gracl_shm.c | 40 +
7457 grsecurity/grsec_chdir.c | 19 +
7458 grsecurity/grsec_chroot.c | 467 ++
7459 grsecurity/grsec_disabled.c | 445 ++
7460 grsecurity/grsec_exec.c | 189 +
7461 grsecurity/grsec_fifo.c | 26 +
7462 grsecurity/grsec_fork.c | 23 +
7463 grsecurity/grsec_init.c | 294 +
7464 grsecurity/grsec_ipc.c | 48 +
7465 grsecurity/grsec_link.c | 65 +
7466 grsecurity/grsec_log.c | 340 +
7467 grsecurity/grsec_mem.c | 48 +
7468 grsecurity/grsec_mount.c | 65 +
7469 grsecurity/grsec_pax.c | 47 +
7470 grsecurity/grsec_proc.c | 20 +
7471 grsecurity/grsec_ptrace.c | 30 +
7472 grsecurity/grsec_sig.c | 245 +
7473 grsecurity/grsec_sock.c | 244 +
7474 grsecurity/grsec_sysctl.c | 497 ++
7475 grsecurity/grsec_time.c | 16 +
7476 grsecurity/grsec_tpe.c | 78 +
7477 grsecurity/grsec_tty.c | 18 +
7478 grsecurity/grsec_usb.c | 15 +
7479 grsecurity/grsum.c | 54 +
7480 include/linux/binfmts.h | 5 +-
7481 include/linux/capability.h | 13 +
7482 include/linux/compiler-gcc.h | 5 +
7483 include/linux/compiler.h | 8 +
7484 include/linux/cred.h | 8 +-
7485 include/linux/dcache.h | 5 +-
7486 include/linux/fs.h | 26 +-
7487 include/linux/fs_struct.h | 2 +-
7488 include/linux/fsnotify.h | 6 +
7489 include/linux/gracl.h | 342 ++
7490 include/linux/gracl_compat.h | 156 +
7491 include/linux/gralloc.h | 9 +
7492 include/linux/grdefs.h | 140 +
7493 include/linux/grinternal.h | 231 +
7494 include/linux/grmsg.h | 119 +
7495 include/linux/grsecurity.h | 258 +
7496 include/linux/grsock.h | 19 +
7497 include/linux/ipc.h | 2 +-
7498 include/linux/ipc_namespace.h | 2 +-
7499 include/linux/kallsyms.h | 18 +-
7500 include/linux/key-type.h | 4 +-
7501 include/linux/kmod.h | 5 +
7502 include/linux/kobject.h | 2 +-
7503 include/linux/lsm_hooks.h | 4 +-
7504 include/linux/mm.h | 12 +
7505 include/linux/mm_types.h | 4 +-
7506 include/linux/module.h | 5 +-
7507 include/linux/mount.h | 2 +-
7508 include/linux/msg.h | 2 +-
7509 include/linux/netfilter/xt_gradm.h | 9 +
7510 include/linux/path.h | 4 +-
7511 include/linux/perf_event.h | 13 +-
7512 include/linux/pid_namespace.h | 2 +-
7513 include/linux/pipe_fs_i.h | 4 +
7514 include/linux/poison.h | 2 +-
7515 include/linux/printk.h | 2 +-
7516 include/linux/proc_fs.h | 22 +-
7517 include/linux/proc_ns.h | 2 +-
7518 include/linux/ptrace.h | 24 +-
7519 include/linux/radix-tree.h | 22 +-
7520 include/linux/random.h | 2 +-
7521 include/linux/rbtree_augmented.h | 4 +-
7522 include/linux/scatterlist.h | 12 +-
7523 include/linux/sched.h | 115 +-
7524 include/linux/security.h | 1 +
7525 include/linux/sem.h | 2 +-
7526 include/linux/seq_file.h | 5 +
7527 include/linux/shm.h | 6 +-
7528 include/linux/shmem_fs.h | 5 +-
7529 include/linux/skbuff.h | 3 +
7530 include/linux/slab.h | 9 -
7531 include/linux/sysctl.h | 8 +-
7532 include/linux/thread_info.h | 6 +-
7533 include/linux/tty.h | 2 +-
7534 include/linux/tty_driver.h | 4 +-
7535 include/linux/uidgid.h | 5 +
7536 include/linux/user_namespace.h | 2 +-
7537 include/linux/utsname.h | 2 +-
7538 include/linux/vermagic.h | 16 +-
7539 include/linux/vmalloc.h | 8 +
7540 include/net/af_unix.h | 6 +-
7541 include/net/ip.h | 2 +-
7542 include/net/neighbour.h | 2 +-
7543 include/net/net_namespace.h | 2 +-
7544 include/net/netfilter/nf_conntrack_core.h | 8 +-
7545 include/net/scm.h | 1 +
7546 include/net/sock.h | 2 +-
7547 include/trace/events/fs.h | 53 +
7548 include/uapi/linux/personality.h | 1 +
7549 init/Kconfig | 2 +
7550 init/main.c | 46 +-
7551 ipc/mqueue.c | 1 +
7552 ipc/msg.c | 3 +-
7553 ipc/msgutil.c | 4 +-
7554 ipc/sem.c | 3 +-
7555 ipc/shm.c | 26 +-
7556 ipc/util.c | 6 +
7557 kernel/auditsc.c | 2 +-
7558 kernel/bpf/syscall.c | 10 +-
7559 kernel/capability.c | 41 +-
7560 kernel/cgroup.c | 5 +-
7561 kernel/compat.c | 1 +
7562 kernel/configs.c | 11 +
7563 kernel/cred.c | 112 +-
7564 kernel/events/core.c | 16 +-
7565 kernel/exit.c | 10 +-
7566 kernel/fork.c | 86 +-
7567 kernel/futex.c | 6 +-
7568 kernel/futex_compat.c | 2 +-
7569 kernel/kallsyms.c | 9 +
7570 kernel/kcmp.c | 8 +-
7571 kernel/kexec_core.c | 2 +-
7572 kernel/kmod.c | 96 +-
7573 kernel/kprobes.c | 9 +-
7574 kernel/ksysfs.c | 2 +
7575 kernel/locking/lockdep_proc.c | 10 +-
7576 kernel/module.c | 108 +-
7577 kernel/panic.c | 4 +-
7578 kernel/pid.c | 18 +-
7579 kernel/power/Kconfig | 2 +
7580 kernel/printk/printk.c | 7 +-
7581 kernel/ptrace.c | 89 +-
7582 kernel/resource.c | 10 +
7583 kernel/sched/core.c | 11 +-
7584 kernel/seccomp.c | 22 +-
7585 kernel/signal.c | 37 +-
7586 kernel/sys.c | 64 +-
7587 kernel/sysctl.c | 186 +-
7588 kernel/taskstats.c | 6 +
7589 kernel/time/posix-timers.c | 8 +
7590 kernel/time/time.c | 5 +
7591 kernel/time/timekeeping.c | 3 +
7592 kernel/time/timer_list.c | 13 +-
7593 kernel/time/timer_stats.c | 10 +-
7594 kernel/trace/Kconfig | 2 +
7595 kernel/trace/trace_syscalls.c | 8 +
7596 kernel/user_namespace.c | 15 +
7597 lib/Kconfig.debug | 13 +-
7598 lib/Kconfig.kasan | 2 +-
7599 lib/is_single_threaded.c | 3 +
7600 lib/list_debug.c | 65 +-
7601 lib/nlattr.c | 2 +
7602 lib/radix-tree.c | 12 +-
7603 lib/rbtree.c | 4 +-
7604 lib/vsprintf.c | 39 +-
7605 localversion-grsec | 1 +
7606 mm/Kconfig | 8 +-
7607 mm/Kconfig.debug | 1 +
7608 mm/filemap.c | 1 +
7609 mm/kmemleak.c | 4 +-
7610 mm/memory.c | 2 +-
7611 mm/mempolicy.c | 12 +-
7612 mm/migrate.c | 3 +-
7613 mm/mlock.c | 11 +-
7614 mm/mmap.c | 103 +-
7615 mm/mprotect.c | 8 +
7616 mm/oom_kill.c | 4 +
7617 mm/page_alloc.c | 2 +-
7618 mm/process_vm_access.c | 8 +-
7619 mm/shmem.c | 11 +-
7620 mm/slab.c | 14 +-
7621 mm/slab_common.c | 2 +-
7622 mm/slob.c | 12 +
7623 mm/slub.c | 33 +-
7624 mm/util.c | 3 +
7625 mm/vmalloc.c | 82 +-
7626 mm/vmstat.c | 29 +-
7627 net/appletalk/atalk_proc.c | 2 +-
7628 net/atm/lec.c | 6 +-
7629 net/atm/mpoa_caches.c | 42 +-
7630 net/can/bcm.c | 2 +-
7631 net/can/proc.c | 2 +-
7632 net/core/dev_ioctl.c | 7 +-
7633 net/core/filter.c | 8 +-
7634 net/core/net-procfs.c | 17 +-
7635 net/core/pktgen.c | 2 +-
7636 net/core/scm.c | 7 +
7637 net/core/sock.c | 3 +-
7638 net/core/sysctl_net_core.c | 2 +-
7639 net/decnet/dn_dev.c | 2 +-
7640 net/ipv4/Kconfig | 1 +
7641 net/ipv4/devinet.c | 6 +-
7642 net/ipv4/inet_hashtables.c | 4 +
7643 net/ipv4/ip_input.c | 7 +
7644 net/ipv4/ip_sockglue.c | 3 +-
7645 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
7646 net/ipv4/route.c | 6 +-
7647 net/ipv4/tcp_input.c | 6 +-
7648 net/ipv4/tcp_ipv4.c | 24 +-
7649 net/ipv4/tcp_minisocks.c | 9 +-
7650 net/ipv4/tcp_timer.c | 11 +
7651 net/ipv4/udp.c | 24 +
7652 net/ipv6/Kconfig | 1 +
7653 net/ipv6/addrconf.c | 13 +-
7654 net/ipv6/proc.c | 2 +-
7655 net/ipv6/tcp_ipv6.c | 23 +-
7656 net/ipv6/udp.c | 7 +
7657 net/ipx/ipx_proc.c | 2 +-
7658 net/irda/irproc.c | 2 +-
7659 net/iucv/af_iucv.c | 3 +
7660 net/llc/llc_proc.c | 2 +-
7661 net/netfilter/Kconfig | 10 +
7662 net/netfilter/Makefile | 1 +
7663 net/netfilter/nf_conntrack_core.c | 46 +-
7664 net/netfilter/nf_conntrack_helper.c | 2 +-
7665 net/netfilter/nf_conntrack_netlink.c | 2 +-
7666 net/netfilter/xt_gradm.c | 51 +
7667 net/netfilter/xt_hashlimit.c | 4 +-
7668 net/netfilter/xt_recent.c | 2 +-
7669 net/openvswitch/actions.c | 19 +-
7670 net/sctp/sm_sideeffect.c | 11 +-
7671 net/sctp/sm_statefuns.c | 17 +-
7672 net/socket.c | 75 +-
7673 net/sunrpc/Kconfig | 1 +
7674 net/sunrpc/cache.c | 2 +-
7675 net/sunrpc/stats.c | 2 +-
7676 net/sysctl_net.c | 2 +-
7677 net/unix/af_unix.c | 57 +-
7678 net/unix/garbage.c | 8 +-
7679 net/vmw_vsock/vmci_transport_notify.c | 30 +-
7680 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
7681 net/x25/sysctl_net_x25.c | 2 +-
7682 net/x25/x25_proc.c | 2 +-
7683 scripts/package/Makefile | 2 +-
7684 scripts/package/mkspec | 41 +-
7685 security/Kconfig | 369 +-
7686 security/apparmor/file.c | 4 +-
7687 security/apparmor/lsm.c | 8 +-
7688 security/commoncap.c | 36 +-
7689 security/keys/internal.h | 2 +-
7690 security/min_addr.c | 2 +
7691 security/smack/smack_lsm.c | 8 +-
7692 security/tomoyo/file.c | 12 +-
7693 security/tomoyo/mount.c | 4 +
7694 security/tomoyo/tomoyo.c | 20 +-
7695 security/yama/Kconfig | 2 +-
7696 security/yama/yama_lsm.c | 4 +-
7697 sound/core/timer.c | 4 +-
7698 sound/synth/emux/emux_seq.c | 14 +-
7699 sound/usb/line6/driver.c | 40 +-
7700 sound/usb/line6/toneport.c | 12 +-
7701 tools/gcc/.gitignore | 1 +
7702 tools/gcc/Makefile | 12 +
7703 tools/gcc/gen-random-seed.sh | 8 +
7704 tools/gcc/randomize_layout_plugin.c | 930 +++
7705 tools/gcc/size_overflow_plugin/.gitignore | 1 +
7706 .../size_overflow_plugin/size_overflow_hash.data | 463 +-
7707 513 files changed, 33007 insertions(+), 3251 deletions(-)
7708
7709 commit 6cb4f49b6a55cf16ae82685e1ab9b74c95b2f743
7710 Author: Brad Spengler <spender@grsecurity.net>
7711 Date: Mon Feb 15 10:51:41 2016 -0500
7712
7713 Initial import of pax-linux-4.4.1-test3.patch
7714
7715 Documentation/dontdiff | 46 +-
7716 Documentation/kbuild/makefiles.txt | 39 +-
7717 Documentation/kernel-parameters.txt | 28 +
7718 Makefile | 119 +-
7719 arch/alpha/include/asm/atomic.h | 10 +
7720 arch/alpha/include/asm/elf.h | 7 +
7721 arch/alpha/include/asm/pgalloc.h | 6 +
7722 arch/alpha/include/asm/pgtable.h | 11 +
7723 arch/alpha/kernel/module.c | 2 +-
7724 arch/alpha/kernel/osf_sys.c | 8 +-
7725 arch/alpha/mm/fault.c | 141 +-
7726 arch/arm/Kconfig | 3 +-
7727 arch/arm/include/asm/atomic.h | 323 +-
7728 arch/arm/include/asm/cache.h | 5 +-
7729 arch/arm/include/asm/cacheflush.h | 2 +-
7730 arch/arm/include/asm/checksum.h | 14 +-
7731 arch/arm/include/asm/cmpxchg.h | 4 +
7732 arch/arm/include/asm/cpuidle.h | 2 +-
7733 arch/arm/include/asm/domain.h | 42 +-
7734 arch/arm/include/asm/elf.h | 9 +-
7735 arch/arm/include/asm/fncpy.h | 2 +
7736 arch/arm/include/asm/futex.h | 1 +
7737 arch/arm/include/asm/kmap_types.h | 2 +-
7738 arch/arm/include/asm/mach/dma.h | 2 +-
7739 arch/arm/include/asm/mach/map.h | 16 +-
7740 arch/arm/include/asm/outercache.h | 2 +-
7741 arch/arm/include/asm/page.h | 3 +-
7742 arch/arm/include/asm/pgalloc.h | 20 +
7743 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
7744 arch/arm/include/asm/pgtable-2level.h | 3 +
7745 arch/arm/include/asm/pgtable-3level.h | 3 +
7746 arch/arm/include/asm/pgtable.h | 54 +-
7747 arch/arm/include/asm/smp.h | 2 +-
7748 arch/arm/include/asm/thread_info.h | 3 +
7749 arch/arm/include/asm/tls.h | 3 +
7750 arch/arm/include/asm/uaccess.h | 113 +-
7751 arch/arm/include/uapi/asm/ptrace.h | 2 +-
7752 arch/arm/kernel/armksyms.c | 2 +-
7753 arch/arm/kernel/cpuidle.c | 2 +-
7754 arch/arm/kernel/entry-armv.S | 109 +-
7755 arch/arm/kernel/entry-common.S | 40 +-
7756 arch/arm/kernel/entry-header.S | 55 +
7757 arch/arm/kernel/fiq.c | 3 +
7758 arch/arm/kernel/module-plts.c | 7 +-
7759 arch/arm/kernel/module.c | 38 +-
7760 arch/arm/kernel/patch.c | 2 +
7761 arch/arm/kernel/process.c | 92 +-
7762 arch/arm/kernel/reboot.c | 1 +
7763 arch/arm/kernel/setup.c | 20 +-
7764 arch/arm/kernel/signal.c | 35 +-
7765 arch/arm/kernel/smp.c | 2 +-
7766 arch/arm/kernel/tcm.c | 4 +-
7767 arch/arm/kernel/vmlinux.lds.S | 6 +-
7768 arch/arm/kvm/arm.c | 8 +-
7769 arch/arm/lib/copy_page.S | 1 +
7770 arch/arm/lib/csumpartialcopyuser.S | 4 +-
7771 arch/arm/lib/delay.c | 2 +-
7772 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
7773 arch/arm/mach-exynos/suspend.c | 6 +-
7774 arch/arm/mach-mvebu/coherency.c | 4 +-
7775 arch/arm/mach-omap2/board-n8x0.c | 2 +-
7776 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
7777 arch/arm/mach-omap2/omap-smp.c | 1 +
7778 arch/arm/mach-omap2/omap_device.c | 4 +-
7779 arch/arm/mach-omap2/omap_device.h | 4 +-
7780 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
7781 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
7782 arch/arm/mach-omap2/wd_timer.c | 6 +-
7783 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
7784 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
7785 arch/arm/mach-tegra/irq.c | 1 +
7786 arch/arm/mach-ux500/pm.c | 1 +
7787 arch/arm/mach-zynq/platsmp.c | 1 +
7788 arch/arm/mm/Kconfig | 6 +-
7789 arch/arm/mm/cache-l2x0.c | 2 +-
7790 arch/arm/mm/context.c | 10 +-
7791 arch/arm/mm/fault.c | 146 +
7792 arch/arm/mm/fault.h | 12 +
7793 arch/arm/mm/init.c | 39 +
7794 arch/arm/mm/ioremap.c | 4 +-
7795 arch/arm/mm/mmap.c | 30 +-
7796 arch/arm/mm/mmu.c | 162 +-
7797 arch/arm/net/bpf_jit_32.c | 3 +
7798 arch/arm/plat-iop/setup.c | 2 +-
7799 arch/arm/plat-omap/sram.c | 2 +
7800 arch/arm64/include/asm/atomic.h | 10 +
7801 arch/arm64/include/asm/percpu.h | 8 +-
7802 arch/arm64/include/asm/pgalloc.h | 5 +
7803 arch/arm64/include/asm/uaccess.h | 1 +
7804 arch/arm64/mm/dma-mapping.c | 2 +-
7805 arch/avr32/include/asm/elf.h | 8 +-
7806 arch/avr32/include/asm/kmap_types.h | 4 +-
7807 arch/avr32/mm/fault.c | 27 +
7808 arch/frv/include/asm/atomic.h | 10 +
7809 arch/frv/include/asm/kmap_types.h | 2 +-
7810 arch/frv/mm/elf-fdpic.c | 3 +-
7811 arch/ia64/Makefile | 1 +
7812 arch/ia64/include/asm/atomic.h | 10 +
7813 arch/ia64/include/asm/elf.h | 7 +
7814 arch/ia64/include/asm/pgalloc.h | 12 +
7815 arch/ia64/include/asm/pgtable.h | 13 +-
7816 arch/ia64/include/asm/spinlock.h | 2 +-
7817 arch/ia64/include/asm/uaccess.h | 27 +-
7818 arch/ia64/kernel/module.c | 45 +-
7819 arch/ia64/kernel/palinfo.c | 2 +-
7820 arch/ia64/kernel/sys_ia64.c | 7 +
7821 arch/ia64/kernel/vmlinux.lds.S | 2 +-
7822 arch/ia64/mm/fault.c | 32 +-
7823 arch/ia64/mm/init.c | 15 +-
7824 arch/m32r/lib/usercopy.c | 6 +
7825 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
7826 arch/mips/include/asm/atomic.h | 368 +-
7827 arch/mips/include/asm/elf.h | 7 +
7828 arch/mips/include/asm/exec.h | 2 +-
7829 arch/mips/include/asm/hw_irq.h | 2 +-
7830 arch/mips/include/asm/local.h | 57 +
7831 arch/mips/include/asm/page.h | 2 +-
7832 arch/mips/include/asm/pgalloc.h | 5 +
7833 arch/mips/include/asm/pgtable.h | 3 +
7834 arch/mips/include/asm/uaccess.h | 1 +
7835 arch/mips/kernel/binfmt_elfn32.c | 7 +
7836 arch/mips/kernel/binfmt_elfo32.c | 7 +
7837 arch/mips/kernel/irq-gt641xx.c | 2 +-
7838 arch/mips/kernel/irq.c | 6 +-
7839 arch/mips/kernel/pm-cps.c | 2 +-
7840 arch/mips/kernel/process.c | 12 -
7841 arch/mips/kernel/sync-r4k.c | 24 +-
7842 arch/mips/kernel/traps.c | 13 +-
7843 arch/mips/mm/fault.c | 25 +
7844 arch/mips/mm/mmap.c | 51 +-
7845 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
7846 arch/mips/sni/rm200.c | 2 +-
7847 arch/mips/vr41xx/common/icu.c | 2 +-
7848 arch/mips/vr41xx/common/irq.c | 4 +-
7849 arch/parisc/include/asm/atomic.h | 10 +
7850 arch/parisc/include/asm/elf.h | 7 +
7851 arch/parisc/include/asm/pgalloc.h | 6 +
7852 arch/parisc/include/asm/pgtable.h | 11 +
7853 arch/parisc/include/asm/uaccess.h | 4 +-
7854 arch/parisc/kernel/module.c | 50 +-
7855 arch/parisc/kernel/sys_parisc.c | 15 +
7856 arch/parisc/kernel/traps.c | 4 +-
7857 arch/parisc/mm/fault.c | 140 +-
7858 arch/powerpc/include/asm/atomic.h | 329 +-
7859 arch/powerpc/include/asm/elf.h | 12 +
7860 arch/powerpc/include/asm/exec.h | 2 +-
7861 arch/powerpc/include/asm/kmap_types.h | 2 +-
7862 arch/powerpc/include/asm/local.h | 46 +
7863 arch/powerpc/include/asm/mman.h | 2 +-
7864 arch/powerpc/include/asm/page.h | 8 +-
7865 arch/powerpc/include/asm/page_64.h | 7 +-
7866 arch/powerpc/include/asm/pgalloc-64.h | 7 +
7867 arch/powerpc/include/asm/pgtable.h | 1 +
7868 arch/powerpc/include/asm/pte-hash32.h | 1 +
7869 arch/powerpc/include/asm/reg.h | 1 +
7870 arch/powerpc/include/asm/smp.h | 2 +-
7871 arch/powerpc/include/asm/spinlock.h | 42 +-
7872 arch/powerpc/include/asm/uaccess.h | 141 +-
7873 arch/powerpc/kernel/Makefile | 5 +
7874 arch/powerpc/kernel/exceptions-64e.S | 4 +-
7875 arch/powerpc/kernel/exceptions-64s.S | 2 +-
7876 arch/powerpc/kernel/module_32.c | 15 +-
7877 arch/powerpc/kernel/process.c | 46 -
7878 arch/powerpc/kernel/signal_32.c | 2 +-
7879 arch/powerpc/kernel/signal_64.c | 2 +-
7880 arch/powerpc/kernel/traps.c | 21 +
7881 arch/powerpc/kernel/vdso.c | 5 +-
7882 arch/powerpc/lib/usercopy_64.c | 18 -
7883 arch/powerpc/mm/fault.c | 56 +-
7884 arch/powerpc/mm/mmap.c | 16 +
7885 arch/powerpc/mm/slice.c | 13 +-
7886 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
7887 arch/s390/include/asm/atomic.h | 10 +
7888 arch/s390/include/asm/elf.h | 7 +
7889 arch/s390/include/asm/exec.h | 2 +-
7890 arch/s390/include/asm/uaccess.h | 13 +-
7891 arch/s390/kernel/module.c | 22 +-
7892 arch/s390/kernel/process.c | 20 -
7893 arch/s390/mm/mmap.c | 16 +
7894 arch/score/include/asm/exec.h | 2 +-
7895 arch/score/kernel/process.c | 5 -
7896 arch/sh/mm/mmap.c | 22 +-
7897 arch/sparc/include/asm/atomic_64.h | 110 +-
7898 arch/sparc/include/asm/cache.h | 2 +-
7899 arch/sparc/include/asm/elf_32.h | 7 +
7900 arch/sparc/include/asm/elf_64.h | 7 +
7901 arch/sparc/include/asm/pgalloc_32.h | 1 +
7902 arch/sparc/include/asm/pgalloc_64.h | 1 +
7903 arch/sparc/include/asm/pgtable.h | 4 +
7904 arch/sparc/include/asm/pgtable_32.h | 15 +-
7905 arch/sparc/include/asm/pgtsrmmu.h | 5 +
7906 arch/sparc/include/asm/setup.h | 4 +-
7907 arch/sparc/include/asm/spinlock_64.h | 35 +-
7908 arch/sparc/include/asm/thread_info_32.h | 1 +
7909 arch/sparc/include/asm/thread_info_64.h | 2 +
7910 arch/sparc/include/asm/uaccess.h | 1 +
7911 arch/sparc/include/asm/uaccess_32.h | 28 +-
7912 arch/sparc/include/asm/uaccess_64.h | 24 +-
7913 arch/sparc/kernel/Makefile | 2 +-
7914 arch/sparc/kernel/prom_common.c | 2 +-
7915 arch/sparc/kernel/smp_64.c | 8 +-
7916 arch/sparc/kernel/sys_sparc_32.c | 2 +-
7917 arch/sparc/kernel/sys_sparc_64.c | 52 +-
7918 arch/sparc/kernel/traps_64.c | 27 +-
7919 arch/sparc/lib/Makefile | 2 +-
7920 arch/sparc/lib/atomic_64.S | 57 +-
7921 arch/sparc/lib/ksyms.c | 6 +-
7922 arch/sparc/mm/Makefile | 2 +-
7923 arch/sparc/mm/fault_32.c | 292 +
7924 arch/sparc/mm/fault_64.c | 486 +
7925 arch/sparc/mm/hugetlbpage.c | 22 +-
7926 arch/sparc/mm/init_64.c | 10 +-
7927 arch/tile/include/asm/atomic_64.h | 10 +
7928 arch/tile/include/asm/uaccess.h | 4 +-
7929 arch/um/Makefile | 4 +
7930 arch/um/include/asm/kmap_types.h | 2 +-
7931 arch/um/include/asm/page.h | 3 +
7932 arch/um/include/asm/pgtable-3level.h | 1 +
7933 arch/um/kernel/process.c | 16 -
7934 arch/x86/Kconfig | 26 +-
7935 arch/x86/Kconfig.cpu | 6 +-
7936 arch/x86/Kconfig.debug | 4 +-
7937 arch/x86/Makefile | 13 +-
7938 arch/x86/boot/Makefile | 3 +
7939 arch/x86/boot/bitops.h | 4 +-
7940 arch/x86/boot/boot.h | 2 +-
7941 arch/x86/boot/compressed/Makefile | 3 +
7942 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
7943 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
7944 arch/x86/boot/compressed/head_32.S | 4 +-
7945 arch/x86/boot/compressed/head_64.S | 12 +-
7946 arch/x86/boot/compressed/misc.c | 11 +-
7947 arch/x86/boot/cpucheck.c | 16 +-
7948 arch/x86/boot/header.S | 6 +-
7949 arch/x86/boot/memory.c | 2 +-
7950 arch/x86/boot/video-vesa.c | 1 +
7951 arch/x86/boot/video.c | 2 +-
7952 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
7953 arch/x86/crypto/aesni-intel_asm.S | 106 +-
7954 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
7955 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
7956 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
7957 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
7958 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
7959 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
7960 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 2 +
7961 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
7962 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
7963 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
7964 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
7965 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
7966 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
7967 arch/x86/crypto/sha256-avx-asm.S | 2 +
7968 arch/x86/crypto/sha256-avx2-asm.S | 2 +
7969 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
7970 arch/x86/crypto/sha512-avx-asm.S | 2 +
7971 arch/x86/crypto/sha512-avx2-asm.S | 2 +
7972 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
7973 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
7974 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
7975 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
7976 arch/x86/entry/calling.h | 86 +-
7977 arch/x86/entry/common.c | 28 +-
7978 arch/x86/entry/entry_32.S | 311 +-
7979 arch/x86/entry/entry_64.S | 625 +-
7980 arch/x86/entry/entry_64_compat.S | 67 +-
7981 arch/x86/entry/thunk_64.S | 2 +
7982 arch/x86/entry/vdso/Makefile | 2 +-
7983 arch/x86/entry/vdso/vdso2c.h | 8 +-
7984 arch/x86/entry/vdso/vma.c | 37 +-
7985 arch/x86/entry/vsyscall/vsyscall_64.c | 20 +-
7986 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
7987 arch/x86/ia32/ia32_signal.c | 23 +-
7988 arch/x86/ia32/sys_ia32.c | 42 +-
7989 arch/x86/include/asm/alternative-asm.h | 43 +-
7990 arch/x86/include/asm/alternative.h | 4 +-
7991 arch/x86/include/asm/apic.h | 2 +-
7992 arch/x86/include/asm/apm.h | 4 +-
7993 arch/x86/include/asm/atomic.h | 230 +-
7994 arch/x86/include/asm/atomic64_32.h | 100 +
7995 arch/x86/include/asm/atomic64_64.h | 164 +-
7996 arch/x86/include/asm/bitops.h | 18 +-
7997 arch/x86/include/asm/boot.h | 2 +-
7998 arch/x86/include/asm/cache.h | 5 +-
7999 arch/x86/include/asm/checksum_32.h | 12 +-
8000 arch/x86/include/asm/cmpxchg.h | 39 +
8001 arch/x86/include/asm/compat.h | 4 +
8002 arch/x86/include/asm/cpufeature.h | 17 +-
8003 arch/x86/include/asm/desc.h | 78 +-
8004 arch/x86/include/asm/desc_defs.h | 6 +
8005 arch/x86/include/asm/div64.h | 2 +-
8006 arch/x86/include/asm/dma.h | 2 +
8007 arch/x86/include/asm/elf.h | 33 +-
8008 arch/x86/include/asm/emergency-restart.h | 2 +-
8009 arch/x86/include/asm/fpu/internal.h | 42 +-
8010 arch/x86/include/asm/fpu/types.h | 5 +-
8011 arch/x86/include/asm/futex.h | 14 +-
8012 arch/x86/include/asm/hw_irq.h | 4 +-
8013 arch/x86/include/asm/i8259.h | 2 +-
8014 arch/x86/include/asm/io.h | 22 +-
8015 arch/x86/include/asm/irqflags.h | 5 +
8016 arch/x86/include/asm/kprobes.h | 9 +-
8017 arch/x86/include/asm/local.h | 106 +-
8018 arch/x86/include/asm/mman.h | 15 +
8019 arch/x86/include/asm/mmu.h | 14 +-
8020 arch/x86/include/asm/mmu_context.h | 133 +-
8021 arch/x86/include/asm/module.h | 17 +-
8022 arch/x86/include/asm/nmi.h | 19 +-
8023 arch/x86/include/asm/page.h | 1 +
8024 arch/x86/include/asm/page_32.h | 12 +-
8025 arch/x86/include/asm/page_64.h | 14 +-
8026 arch/x86/include/asm/paravirt.h | 46 +-
8027 arch/x86/include/asm/paravirt_types.h | 15 +-
8028 arch/x86/include/asm/pgalloc.h | 23 +
8029 arch/x86/include/asm/pgtable-2level.h | 2 +
8030 arch/x86/include/asm/pgtable-3level.h | 7 +
8031 arch/x86/include/asm/pgtable.h | 126 +-
8032 arch/x86/include/asm/pgtable_32.h | 14 +-
8033 arch/x86/include/asm/pgtable_32_types.h | 24 +-
8034 arch/x86/include/asm/pgtable_64.h | 23 +-
8035 arch/x86/include/asm/pgtable_64_types.h | 5 +
8036 arch/x86/include/asm/pgtable_types.h | 26 +-
8037 arch/x86/include/asm/pmem.h | 2 +-
8038 arch/x86/include/asm/preempt.h | 2 +-
8039 arch/x86/include/asm/processor.h | 57 +-
8040 arch/x86/include/asm/ptrace.h | 15 +-
8041 arch/x86/include/asm/realmode.h | 4 +-
8042 arch/x86/include/asm/reboot.h | 10 +-
8043 arch/x86/include/asm/rmwcc.h | 84 +-
8044 arch/x86/include/asm/rwsem.h | 60 +-
8045 arch/x86/include/asm/segment.h | 27 +-
8046 arch/x86/include/asm/smap.h | 43 +
8047 arch/x86/include/asm/smp.h | 14 +-
8048 arch/x86/include/asm/stackprotector.h | 4 +-
8049 arch/x86/include/asm/stacktrace.h | 34 +-
8050 arch/x86/include/asm/switch_to.h | 4 +-
8051 arch/x86/include/asm/sys_ia32.h | 6 +-
8052 arch/x86/include/asm/thread_info.h | 27 +-
8053 arch/x86/include/asm/tlbflush.h | 77 +-
8054 arch/x86/include/asm/uaccess.h | 210 +-
8055 arch/x86/include/asm/uaccess_32.h | 28 +-
8056 arch/x86/include/asm/uaccess_64.h | 169 +-
8057 arch/x86/include/asm/word-at-a-time.h | 2 +-
8058 arch/x86/include/asm/x86_init.h | 10 +-
8059 arch/x86/include/asm/xen/page.h | 2 +-
8060 arch/x86/include/uapi/asm/e820.h | 2 +-
8061 arch/x86/kernel/Makefile | 2 +-
8062 arch/x86/kernel/acpi/boot.c | 4 +-
8063 arch/x86/kernel/acpi/sleep.c | 4 +
8064 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
8065 arch/x86/kernel/alternative.c | 124 +-
8066 arch/x86/kernel/apic/apic.c | 4 +-
8067 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
8068 arch/x86/kernel/apic/apic_noop.c | 2 +-
8069 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
8070 arch/x86/kernel/apic/io_apic.c | 8 +-
8071 arch/x86/kernel/apic/msi.c | 2 +-
8072 arch/x86/kernel/apic/probe_32.c | 4 +-
8073 arch/x86/kernel/apic/vector.c | 2 +
8074 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
8075 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
8076 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
8077 arch/x86/kernel/apm_32.c | 21 +-
8078 arch/x86/kernel/asm-offsets.c | 20 +
8079 arch/x86/kernel/asm-offsets_64.c | 1 +
8080 arch/x86/kernel/cpu/Makefile | 4 -
8081 arch/x86/kernel/cpu/amd.c | 2 +-
8082 arch/x86/kernel/cpu/bugs_64.c | 2 +
8083 arch/x86/kernel/cpu/common.c | 202 +-
8084 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
8085 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
8086 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
8087 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
8088 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
8089 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
8090 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
8091 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
8092 arch/x86/kernel/cpu/perf_event.c | 10 +-
8093 arch/x86/kernel/cpu/perf_event.h | 2 +-
8094 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
8095 arch/x86/kernel/cpu/perf_event_intel.c | 34 +-
8096 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
8097 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
8098 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
8099 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
8100 arch/x86/kernel/cpu/perf_event_intel_pt.c | 42 +-
8101 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
8102 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
8103 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
8104 arch/x86/kernel/crash_dump_64.c | 2 +-
8105 arch/x86/kernel/doublefault.c | 8 +-
8106 arch/x86/kernel/dumpstack.c | 24 +-
8107 arch/x86/kernel/dumpstack_32.c | 25 +-
8108 arch/x86/kernel/dumpstack_64.c | 62 +-
8109 arch/x86/kernel/e820.c | 4 +-
8110 arch/x86/kernel/early_printk.c | 1 +
8111 arch/x86/kernel/espfix_64.c | 44 +-
8112 arch/x86/kernel/fpu/core.c | 24 +-
8113 arch/x86/kernel/fpu/init.c | 40 +-
8114 arch/x86/kernel/fpu/regset.c | 22 +-
8115 arch/x86/kernel/fpu/signal.c | 20 +-
8116 arch/x86/kernel/fpu/xstate.c | 6 +-
8117 arch/x86/kernel/ftrace.c | 18 +-
8118 arch/x86/kernel/head64.c | 14 +-
8119 arch/x86/kernel/head_32.S | 235 +-
8120 arch/x86/kernel/head_64.S | 173 +-
8121 arch/x86/kernel/i386_ksyms_32.c | 12 +
8122 arch/x86/kernel/i8259.c | 10 +-
8123 arch/x86/kernel/io_delay.c | 2 +-
8124 arch/x86/kernel/ioport.c | 2 +-
8125 arch/x86/kernel/irq.c | 8 +-
8126 arch/x86/kernel/irq_32.c | 45 +-
8127 arch/x86/kernel/jump_label.c | 10 +-
8128 arch/x86/kernel/kgdb.c | 21 +-
8129 arch/x86/kernel/kprobes/core.c | 28 +-
8130 arch/x86/kernel/kprobes/opt.c | 16 +-
8131 arch/x86/kernel/ksysfs.c | 2 +-
8132 arch/x86/kernel/kvmclock.c | 20 +-
8133 arch/x86/kernel/ldt.c | 25 +
8134 arch/x86/kernel/livepatch.c | 11 +-
8135 arch/x86/kernel/machine_kexec_32.c | 6 +-
8136 arch/x86/kernel/mcount_64.S | 19 +-
8137 arch/x86/kernel/module.c | 78 +-
8138 arch/x86/kernel/msr.c | 2 +-
8139 arch/x86/kernel/nmi.c | 34 +-
8140 arch/x86/kernel/nmi_selftest.c | 4 +-
8141 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
8142 arch/x86/kernel/paravirt.c | 45 +-
8143 arch/x86/kernel/paravirt_patch_64.c | 8 +
8144 arch/x86/kernel/pci-calgary_64.c | 2 +-
8145 arch/x86/kernel/pci-iommu_table.c | 2 +-
8146 arch/x86/kernel/pci-swiotlb.c | 2 +-
8147 arch/x86/kernel/process.c | 80 +-
8148 arch/x86/kernel/process_32.c | 29 +-
8149 arch/x86/kernel/process_64.c | 14 +-
8150 arch/x86/kernel/ptrace.c | 20 +-
8151 arch/x86/kernel/pvclock.c | 8 +-
8152 arch/x86/kernel/reboot.c | 44 +-
8153 arch/x86/kernel/reboot_fixups_32.c | 2 +-
8154 arch/x86/kernel/relocate_kernel_64.S | 3 +-
8155 arch/x86/kernel/setup.c | 29 +-
8156 arch/x86/kernel/setup_percpu.c | 29 +-
8157 arch/x86/kernel/signal.c | 17 +-
8158 arch/x86/kernel/smp.c | 2 +-
8159 arch/x86/kernel/smpboot.c | 29 +-
8160 arch/x86/kernel/step.c | 6 +-
8161 arch/x86/kernel/sys_i386_32.c | 184 +
8162 arch/x86/kernel/sys_x86_64.c | 22 +-
8163 arch/x86/kernel/tboot.c | 22 +-
8164 arch/x86/kernel/time.c | 8 +-
8165 arch/x86/kernel/tls.c | 7 +-
8166 arch/x86/kernel/tracepoint.c | 4 +-
8167 arch/x86/kernel/traps.c | 53 +-
8168 arch/x86/kernel/tsc.c | 2 +-
8169 arch/x86/kernel/uprobes.c | 4 +-
8170 arch/x86/kernel/vm86_32.c | 6 +-
8171 arch/x86/kernel/vmlinux.lds.S | 153 +-
8172 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
8173 arch/x86/kernel/x86_init.c | 6 +-
8174 arch/x86/kvm/cpuid.c | 21 +-
8175 arch/x86/kvm/emulate.c | 6 +-
8176 arch/x86/kvm/i8259.c | 10 +-
8177 arch/x86/kvm/ioapic.c | 2 +
8178 arch/x86/kvm/lapic.c | 2 +-
8179 arch/x86/kvm/paging_tmpl.h | 2 +-
8180 arch/x86/kvm/svm.c | 10 +-
8181 arch/x86/kvm/vmx.c | 62 +-
8182 arch/x86/kvm/x86.c | 44 +-
8183 arch/x86/lguest/boot.c | 3 +-
8184 arch/x86/lib/atomic64_386_32.S | 164 +
8185 arch/x86/lib/atomic64_cx8_32.S | 98 +-
8186 arch/x86/lib/checksum_32.S | 99 +-
8187 arch/x86/lib/clear_page_64.S | 3 +
8188 arch/x86/lib/cmpxchg16b_emu.S | 3 +
8189 arch/x86/lib/copy_page_64.S | 14 +-
8190 arch/x86/lib/copy_user_64.S | 66 +-
8191 arch/x86/lib/csum-copy_64.S | 14 +-
8192 arch/x86/lib/csum-wrappers_64.c | 8 +-
8193 arch/x86/lib/getuser.S | 74 +-
8194 arch/x86/lib/insn.c | 8 +-
8195 arch/x86/lib/iomap_copy_64.S | 2 +
8196 arch/x86/lib/memcpy_64.S | 6 +
8197 arch/x86/lib/memmove_64.S | 3 +-
8198 arch/x86/lib/memset_64.S | 3 +
8199 arch/x86/lib/mmx_32.c | 243 +-
8200 arch/x86/lib/msr-reg.S | 2 +
8201 arch/x86/lib/putuser.S | 87 +-
8202 arch/x86/lib/rwsem.S | 6 +-
8203 arch/x86/lib/usercopy_32.c | 359 +-
8204 arch/x86/lib/usercopy_64.c | 22 +-
8205 arch/x86/math-emu/fpu_aux.c | 2 +-
8206 arch/x86/math-emu/fpu_entry.c | 4 +-
8207 arch/x86/math-emu/fpu_system.h | 2 +-
8208 arch/x86/mm/Makefile | 4 +
8209 arch/x86/mm/extable.c | 26 +-
8210 arch/x86/mm/fault.c | 570 +-
8211 arch/x86/mm/gup.c | 6 +-
8212 arch/x86/mm/highmem_32.c | 6 +
8213 arch/x86/mm/hugetlbpage.c | 24 +-
8214 arch/x86/mm/init.c | 111 +-
8215 arch/x86/mm/init_32.c | 111 +-
8216 arch/x86/mm/init_64.c | 46 +-
8217 arch/x86/mm/iomap_32.c | 4 +
8218 arch/x86/mm/ioremap.c | 52 +-
8219 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
8220 arch/x86/mm/mmap.c | 40 +-
8221 arch/x86/mm/mmio-mod.c | 10 +-
8222 arch/x86/mm/mpx.c | 6 +-
8223 arch/x86/mm/numa.c | 4 +-
8224 arch/x86/mm/pageattr.c | 42 +-
8225 arch/x86/mm/pat.c | 12 +-
8226 arch/x86/mm/pat_rbtree.c | 2 +-
8227 arch/x86/mm/pf_in.c | 10 +-
8228 arch/x86/mm/pgtable.c | 214 +-
8229 arch/x86/mm/pgtable_32.c | 3 +
8230 arch/x86/mm/setup_nx.c | 7 +
8231 arch/x86/mm/tlb.c | 4 +
8232 arch/x86/mm/uderef_64.c | 37 +
8233 arch/x86/net/bpf_jit.S | 11 +
8234 arch/x86/net/bpf_jit_comp.c | 13 +-
8235 arch/x86/oprofile/backtrace.c | 6 +-
8236 arch/x86/oprofile/nmi_int.c | 8 +-
8237 arch/x86/oprofile/op_model_amd.c | 8 +-
8238 arch/x86/oprofile/op_model_ppro.c | 7 +-
8239 arch/x86/oprofile/op_x86_model.h | 2 +-
8240 arch/x86/pci/intel_mid_pci.c | 2 +-
8241 arch/x86/pci/irq.c | 8 +-
8242 arch/x86/pci/pcbios.c | 144 +-
8243 arch/x86/platform/efi/efi_32.c | 24 +
8244 arch/x86/platform/efi/efi_64.c | 26 +-
8245 arch/x86/platform/efi/efi_stub_32.S | 64 +-
8246 arch/x86/platform/efi/efi_stub_64.S | 2 +
8247 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
8248 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
8249 arch/x86/platform/intel-mid/mfld.c | 4 +-
8250 arch/x86/platform/intel-mid/mrfl.c | 2 +-
8251 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
8252 arch/x86/platform/olpc/olpc_dt.c | 2 +-
8253 arch/x86/power/cpu.c | 11 +-
8254 arch/x86/realmode/init.c | 10 +-
8255 arch/x86/realmode/rm/Makefile | 3 +
8256 arch/x86/realmode/rm/header.S | 4 +-
8257 arch/x86/realmode/rm/reboot.S | 4 +
8258 arch/x86/realmode/rm/trampoline_32.S | 12 +-
8259 arch/x86/realmode/rm/trampoline_64.S | 3 +-
8260 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
8261 arch/x86/tools/Makefile | 2 +-
8262 arch/x86/tools/relocs.c | 96 +-
8263 arch/x86/um/mem_32.c | 2 +-
8264 arch/x86/um/tls_32.c | 2 +-
8265 arch/x86/xen/enlighten.c | 50 +-
8266 arch/x86/xen/mmu.c | 19 +-
8267 arch/x86/xen/smp.c | 16 +-
8268 arch/x86/xen/xen-asm_32.S | 2 +-
8269 arch/x86/xen/xen-head.S | 11 +
8270 arch/x86/xen/xen-ops.h | 2 -
8271 block/bio.c | 4 +-
8272 block/blk-cgroup.c | 18 +-
8273 block/blk-iopoll.c | 2 +-
8274 block/blk-map.c | 2 +-
8275 block/blk-softirq.c | 2 +-
8276 block/bsg.c | 12 +-
8277 block/cfq-iosched.c | 4 +-
8278 block/compat_ioctl.c | 4 +-
8279 block/genhd.c | 9 +-
8280 block/partitions/efi.c | 8 +-
8281 block/scsi_ioctl.c | 29 +-
8282 crypto/cryptd.c | 4 +-
8283 crypto/crypto_user.c | 8 +-
8284 crypto/pcrypt.c | 2 +-
8285 crypto/zlib.c | 12 +-
8286 drivers/acpi/acpi_video.c | 2 +-
8287 drivers/acpi/apei/apei-internal.h | 2 +-
8288 drivers/acpi/apei/ghes.c | 10 +-
8289 drivers/acpi/bgrt.c | 6 +-
8290 drivers/acpi/blacklist.c | 4 +-
8291 drivers/acpi/bus.c | 4 +-
8292 drivers/acpi/device_pm.c | 4 +-
8293 drivers/acpi/ec.c | 2 +-
8294 drivers/acpi/pci_slot.c | 2 +-
8295 drivers/acpi/processor_idle.c | 2 +-
8296 drivers/acpi/processor_pdc.c | 2 +-
8297 drivers/acpi/sleep.c | 2 +-
8298 drivers/acpi/sysfs.c | 4 +-
8299 drivers/acpi/thermal.c | 2 +-
8300 drivers/acpi/video_detect.c | 7 +-
8301 drivers/ata/libata-core.c | 12 +-
8302 drivers/ata/libata-scsi.c | 2 +-
8303 drivers/ata/libata.h | 2 +-
8304 drivers/ata/pata_arasan_cf.c | 4 +-
8305 drivers/atm/adummy.c | 2 +-
8306 drivers/atm/ambassador.c | 8 +-
8307 drivers/atm/atmtcp.c | 14 +-
8308 drivers/atm/eni.c | 10 +-
8309 drivers/atm/firestream.c | 8 +-
8310 drivers/atm/fore200e.c | 14 +-
8311 drivers/atm/he.c | 18 +-
8312 drivers/atm/horizon.c | 4 +-
8313 drivers/atm/idt77252.c | 36 +-
8314 drivers/atm/iphase.c | 34 +-
8315 drivers/atm/lanai.c | 12 +-
8316 drivers/atm/nicstar.c | 46 +-
8317 drivers/atm/solos-pci.c | 4 +-
8318 drivers/atm/suni.c | 4 +-
8319 drivers/atm/uPD98402.c | 16 +-
8320 drivers/atm/zatm.c | 6 +-
8321 drivers/base/bus.c | 4 +-
8322 drivers/base/devres.c | 4 +-
8323 drivers/base/devtmpfs.c | 8 +-
8324 drivers/base/node.c | 2 +-
8325 drivers/base/platform-msi.c | 20 +-
8326 drivers/base/power/domain.c | 7 +-
8327 drivers/base/power/runtime.c | 6 +-
8328 drivers/base/power/sysfs.c | 2 +-
8329 drivers/base/power/wakeup.c | 8 +-
8330 drivers/base/regmap/regmap-debugfs.c | 4 +-
8331 drivers/base/regmap/regmap.c | 4 +-
8332 drivers/base/syscore.c | 4 +-
8333 drivers/block/cciss.c | 28 +-
8334 drivers/block/cciss.h | 2 +-
8335 drivers/block/cpqarray.c | 28 +-
8336 drivers/block/cpqarray.h | 2 +-
8337 drivers/block/drbd/drbd_bitmap.c | 2 +-
8338 drivers/block/drbd/drbd_int.h | 8 +-
8339 drivers/block/drbd/drbd_main.c | 12 +-
8340 drivers/block/drbd/drbd_nl.c | 4 +-
8341 drivers/block/drbd/drbd_receiver.c | 38 +-
8342 drivers/block/drbd/drbd_worker.c | 14 +-
8343 drivers/block/pktcdvd.c | 4 +-
8344 drivers/block/rbd.c | 2 +-
8345 drivers/bluetooth/btwilink.c | 2 +-
8346 drivers/bus/arm-cci.c | 12 +-
8347 drivers/cdrom/cdrom.c | 11 +-
8348 drivers/cdrom/gdrom.c | 1 -
8349 drivers/char/agp/compat_ioctl.c | 2 +-
8350 drivers/char/agp/frontend.c | 4 +-
8351 drivers/char/agp/intel-gtt.c | 4 +-
8352 drivers/char/hpet.c | 2 +-
8353 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
8354 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
8355 drivers/char/ipmi/ipmi_ssif.c | 12 +-
8356 drivers/char/mem.c | 47 +-
8357 drivers/char/nvram.c | 2 +-
8358 drivers/char/pcmcia/synclink_cs.c | 16 +-
8359 drivers/char/random.c | 12 +-
8360 drivers/char/sonypi.c | 11 +-
8361 drivers/char/tpm/tpm_acpi.c | 3 +-
8362 drivers/char/tpm/tpm_eventlog.c | 5 +-
8363 drivers/char/virtio_console.c | 6 +-
8364 drivers/clk/clk-composite.c | 2 +-
8365 drivers/clk/samsung/clk.h | 2 +-
8366 drivers/clk/socfpga/clk-gate.c | 9 +-
8367 drivers/clk/socfpga/clk-pll.c | 9 +-
8368 drivers/clk/ti/clk.c | 8 +-
8369 drivers/cpufreq/acpi-cpufreq.c | 17 +-
8370 drivers/cpufreq/cpufreq-dt.c | 4 +-
8371 drivers/cpufreq/cpufreq.c | 30 +-
8372 drivers/cpufreq/cpufreq_governor.c | 2 +-
8373 drivers/cpufreq/cpufreq_governor.h | 4 +-
8374 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
8375 drivers/cpufreq/intel_pstate.c | 38 +-
8376 drivers/cpufreq/p4-clockmod.c | 12 +-
8377 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
8378 drivers/cpufreq/speedstep-centrino.c | 7 +-
8379 drivers/cpuidle/driver.c | 2 +-
8380 drivers/cpuidle/dt_idle_states.c | 2 +-
8381 drivers/cpuidle/governor.c | 2 +-
8382 drivers/cpuidle/sysfs.c | 2 +-
8383 drivers/crypto/hifn_795x.c | 4 +-
8384 drivers/devfreq/devfreq.c | 4 +-
8385 drivers/dma/sh/shdma-base.c | 4 +-
8386 drivers/dma/sh/shdmac.c | 2 +-
8387 drivers/edac/edac_device.c | 4 +-
8388 drivers/edac/edac_mc_sysfs.c | 2 +-
8389 drivers/edac/edac_pci.c | 4 +-
8390 drivers/edac/edac_pci_sysfs.c | 22 +-
8391 drivers/edac/mce_amd.h | 2 +-
8392 drivers/firewire/core-card.c | 6 +-
8393 drivers/firewire/core-device.c | 2 +-
8394 drivers/firewire/core-transaction.c | 1 +
8395 drivers/firewire/core.h | 1 +
8396 drivers/firmware/dmi-id.c | 2 +-
8397 drivers/firmware/dmi_scan.c | 12 +-
8398 drivers/firmware/efi/cper.c | 8 +-
8399 drivers/firmware/efi/efi.c | 12 +-
8400 drivers/firmware/efi/efivars.c | 2 +-
8401 drivers/firmware/efi/runtime-map.c | 2 +-
8402 drivers/firmware/google/gsmi.c | 2 +-
8403 drivers/firmware/google/memconsole.c | 7 +-
8404 drivers/firmware/memmap.c | 2 +-
8405 drivers/firmware/psci.c | 2 +-
8406 drivers/gpio/gpio-davinci.c | 6 +-
8407 drivers/gpio/gpio-em.c | 2 +-
8408 drivers/gpio/gpio-ich.c | 2 +-
8409 drivers/gpio/gpio-omap.c | 4 +-
8410 drivers/gpio/gpio-rcar.c | 2 +-
8411 drivers/gpio/gpio-vr41xx.c | 2 +-
8412 drivers/gpio/gpiolib.c | 12 +-
8413 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
8414 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
8415 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 18 +-
8416 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
8417 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
8418 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
8419 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
8420 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
8421 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
8422 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
8423 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
8424 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
8425 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
8426 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
8427 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
8428 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
8429 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
8430 drivers/gpu/drm/armada/armada_drv.c | 3 +-
8431 drivers/gpu/drm/drm_crtc.c | 2 +-
8432 drivers/gpu/drm/drm_drv.c | 2 +-
8433 drivers/gpu/drm/drm_fops.c | 12 +-
8434 drivers/gpu/drm/drm_global.c | 14 +-
8435 drivers/gpu/drm/drm_info.c | 13 +-
8436 drivers/gpu/drm/drm_ioc32.c | 13 +-
8437 drivers/gpu/drm/drm_ioctl.c | 2 +-
8438 drivers/gpu/drm/drm_pci.c | 9 +-
8439 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
8440 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
8441 drivers/gpu/drm/gma500/psb_drv.c | 1 -
8442 drivers/gpu/drm/i810/i810_dma.c | 2 +-
8443 drivers/gpu/drm/i810/i810_drv.c | 6 +-
8444 drivers/gpu/drm/i810/i810_drv.h | 6 +-
8445 drivers/gpu/drm/i915/i915_dma.c | 4 +-
8446 drivers/gpu/drm/i915/i915_drv.c | 7 +-
8447 drivers/gpu/drm/i915/i915_drv.h | 2 +-
8448 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
8449 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
8450 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
8451 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
8452 drivers/gpu/drm/i915/i915_irq.c | 88 +-
8453 drivers/gpu/drm/i915/intel_display.c | 26 +-
8454 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
8455 drivers/gpu/drm/mga/mga_drv.c | 5 +-
8456 drivers/gpu/drm/mga/mga_drv.h | 6 +-
8457 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
8458 drivers/gpu/drm/mga/mga_irq.c | 8 +-
8459 drivers/gpu/drm/mga/mga_state.c | 2 +-
8460 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
8461 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 +-
8462 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
8463 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
8464 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
8465 drivers/gpu/drm/omapdrm/Makefile | 2 +-
8466 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
8467 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
8468 drivers/gpu/drm/qxl/qxl_drv.c | 8 +-
8469 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
8470 drivers/gpu/drm/qxl/qxl_ioctl.c | 12 +-
8471 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
8472 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
8473 drivers/gpu/drm/r128/r128_cce.c | 2 +-
8474 drivers/gpu/drm/r128/r128_drv.c | 4 +-
8475 drivers/gpu/drm/r128/r128_drv.h | 6 +-
8476 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
8477 drivers/gpu/drm/r128/r128_irq.c | 4 +-
8478 drivers/gpu/drm/r128/r128_state.c | 6 +-
8479 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
8480 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
8481 drivers/gpu/drm/radeon/radeon_drv.c | 17 +-
8482 drivers/gpu/drm/radeon/radeon_drv.h | 4 +-
8483 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
8484 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
8485 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
8486 drivers/gpu/drm/radeon/radeon_state.c | 6 +-
8487 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
8488 drivers/gpu/drm/savage/savage_bci.c | 2 +-
8489 drivers/gpu/drm/savage/savage_drv.c | 5 +-
8490 drivers/gpu/drm/savage/savage_drv.h | 2 +-
8491 drivers/gpu/drm/sis/sis_drv.c | 5 +-
8492 drivers/gpu/drm/sis/sis_drv.h | 2 +-
8493 drivers/gpu/drm/sis/sis_mm.c | 2 +-
8494 drivers/gpu/drm/tegra/dc.c | 2 +-
8495 drivers/gpu/drm/tegra/dsi.c | 2 +-
8496 drivers/gpu/drm/tegra/hdmi.c | 2 +-
8497 drivers/gpu/drm/tegra/sor.c | 7 +-
8498 drivers/gpu/drm/tilcdc/Makefile | 6 +-
8499 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
8500 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
8501 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
8502 drivers/gpu/drm/udl/udl_fb.c | 1 -
8503 drivers/gpu/drm/via/via_dma.c | 2 +-
8504 drivers/gpu/drm/via/via_drv.c | 5 +-
8505 drivers/gpu/drm/via/via_drv.h | 6 +-
8506 drivers/gpu/drm/via/via_irq.c | 18 +-
8507 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
8508 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
8509 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
8510 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
8511 drivers/gpu/vga/vga_switcheroo.c | 4 +-
8512 drivers/hid/hid-core.c | 4 +-
8513 drivers/hid/hid-sensor-custom.c | 2 +-
8514 drivers/hv/channel.c | 6 +-
8515 drivers/hv/hv.c | 4 +-
8516 drivers/hv/hv_balloon.c | 18 +-
8517 drivers/hv/hyperv_vmbus.h | 2 +-
8518 drivers/hwmon/acpi_power_meter.c | 6 +-
8519 drivers/hwmon/applesmc.c | 2 +-
8520 drivers/hwmon/asus_atk0110.c | 10 +-
8521 drivers/hwmon/coretemp.c | 2 +-
8522 drivers/hwmon/dell-smm-hwmon.c | 2 +-
8523 drivers/hwmon/ibmaem.c | 2 +-
8524 drivers/hwmon/iio_hwmon.c | 2 +-
8525 drivers/hwmon/nct6683.c | 6 +-
8526 drivers/hwmon/nct6775.c | 6 +-
8527 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
8528 drivers/hwmon/sht15.c | 12 +-
8529 drivers/hwmon/via-cputemp.c | 2 +-
8530 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
8531 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
8532 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
8533 drivers/i2c/i2c-dev.c | 2 +-
8534 drivers/ide/ide-cd.c | 2 +-
8535 drivers/ide/ide-disk.c | 2 +-
8536 drivers/iio/industrialio-core.c | 2 +-
8537 drivers/iio/magnetometer/ak8975.c | 2 +-
8538 drivers/infiniband/core/cm.c | 32 +-
8539 drivers/infiniband/core/fmr_pool.c | 20 +-
8540 drivers/infiniband/core/netlink.c | 5 +-
8541 drivers/infiniband/core/uverbs_cmd.c | 3 +
8542 drivers/infiniband/hw/cxgb4/device.c | 6 +-
8543 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
8544 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
8545 drivers/infiniband/hw/mlx4/mad.c | 2 +-
8546 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
8547 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
8548 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
8549 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
8550 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
8551 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
8552 drivers/infiniband/hw/nes/nes.c | 4 +-
8553 drivers/infiniband/hw/nes/nes.h | 40 +-
8554 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
8555 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
8556 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
8557 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
8558 drivers/infiniband/hw/qib/qib.h | 1 +
8559 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
8560 drivers/input/evdev.c | 2 +-
8561 drivers/input/gameport/gameport.c | 4 +-
8562 drivers/input/input.c | 4 +-
8563 drivers/input/joystick/sidewinder.c | 1 +
8564 drivers/input/misc/ims-pcu.c | 4 +-
8565 drivers/input/mouse/psmouse.h | 2 +-
8566 drivers/input/mousedev.c | 2 +-
8567 drivers/input/serio/serio.c | 4 +-
8568 drivers/input/serio/serio_raw.c | 4 +-
8569 drivers/input/touchscreen/htcpen.c | 2 +-
8570 drivers/iommu/arm-smmu-v3.c | 2 +-
8571 drivers/iommu/arm-smmu.c | 43 +-
8572 drivers/iommu/io-pgtable-arm.c | 101 +-
8573 drivers/iommu/io-pgtable.c | 11 +-
8574 drivers/iommu/io-pgtable.h | 19 +-
8575 drivers/iommu/iommu.c | 2 +-
8576 drivers/iommu/ipmmu-vmsa.c | 13 +-
8577 drivers/iommu/irq_remapping.c | 2 +-
8578 drivers/irqchip/irq-gic.c | 2 +-
8579 drivers/irqchip/irq-i8259.c | 2 +-
8580 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
8581 drivers/isdn/capi/capi.c | 10 +-
8582 drivers/isdn/gigaset/interface.c | 8 +-
8583 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
8584 drivers/isdn/hardware/avm/b1.c | 4 +-
8585 drivers/isdn/i4l/isdn_common.c | 2 +
8586 drivers/isdn/i4l/isdn_tty.c | 22 +-
8587 drivers/isdn/icn/icn.c | 2 +-
8588 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
8589 drivers/lguest/core.c | 10 +-
8590 drivers/lguest/page_tables.c | 2 +-
8591 drivers/lguest/x86/core.c | 12 +-
8592 drivers/lguest/x86/switcher_32.S | 27 +-
8593 drivers/md/bcache/alloc.c | 2 +-
8594 drivers/md/bcache/bcache.h | 10 +-
8595 drivers/md/bcache/btree.c | 2 +-
8596 drivers/md/bcache/closure.h | 2 +-
8597 drivers/md/bcache/io.c | 10 +-
8598 drivers/md/bcache/journal.c | 2 +-
8599 drivers/md/bcache/stats.c | 26 +-
8600 drivers/md/bcache/stats.h | 16 +-
8601 drivers/md/bcache/super.c | 2 +-
8602 drivers/md/bcache/sysfs.c | 20 +-
8603 drivers/md/bitmap.c | 2 +-
8604 drivers/md/dm-cache-target.c | 98 +-
8605 drivers/md/dm-ioctl.c | 2 +-
8606 drivers/md/dm-raid.c | 2 +-
8607 drivers/md/dm-raid1.c | 18 +-
8608 drivers/md/dm-stats.c | 6 +-
8609 drivers/md/dm-stripe.c | 10 +-
8610 drivers/md/dm-table.c | 2 +-
8611 drivers/md/dm-thin-metadata.c | 4 +-
8612 drivers/md/dm.c | 28 +-
8613 drivers/md/md.c | 37 +-
8614 drivers/md/md.h | 8 +-
8615 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
8616 drivers/md/persistent-data/dm-space-map.h | 1 +
8617 drivers/md/raid1.c | 8 +-
8618 drivers/md/raid10.c | 20 +-
8619 drivers/md/raid5.c | 26 +-
8620 drivers/media/dvb-core/dvbdev.c | 2 +-
8621 drivers/media/dvb-frontends/af9033.h | 2 +-
8622 drivers/media/dvb-frontends/dib3000.h | 2 +-
8623 drivers/media/dvb-frontends/dib7000p.h | 2 +-
8624 drivers/media/dvb-frontends/dib8000.h | 2 +-
8625 drivers/media/pci/cx88/cx88-video.c | 6 +-
8626 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
8627 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
8628 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
8629 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
8630 drivers/media/pci/tw68/tw68-core.c | 2 +-
8631 drivers/media/pci/zoran/zoran.h | 1 -
8632 drivers/media/pci/zoran/zoran_driver.c | 3 -
8633 drivers/media/platform/omap/omap_vout.c | 11 +-
8634 drivers/media/platform/s5p-tv/mixer.h | 2 +-
8635 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
8636 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
8637 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
8638 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
8639 drivers/media/radio/radio-cadet.c | 2 +
8640 drivers/media/radio/radio-maxiradio.c | 2 +-
8641 drivers/media/radio/radio-shark.c | 2 +-
8642 drivers/media/radio/radio-shark2.c | 2 +-
8643 drivers/media/radio/radio-si476x.c | 2 +-
8644 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
8645 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
8646 drivers/media/v4l2-core/v4l2-device.c | 4 +-
8647 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
8648 drivers/memory/omap-gpmc.c | 21 +-
8649 drivers/message/fusion/mptsas.c | 34 +-
8650 drivers/mfd/ab8500-debugfs.c | 2 +-
8651 drivers/mfd/kempld-core.c | 2 +-
8652 drivers/mfd/max8925-i2c.c | 2 +-
8653 drivers/mfd/tps65910.c | 2 +-
8654 drivers/mfd/twl4030-irq.c | 9 +-
8655 drivers/misc/c2port/core.c | 4 +-
8656 drivers/misc/kgdbts.c | 4 +-
8657 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
8658 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
8659 drivers/misc/mic/scif/scif_api.c | 10 +-
8660 drivers/misc/mic/scif/scif_rb.c | 8 +-
8661 drivers/misc/sgi-gru/gruhandles.c | 4 +-
8662 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
8663 drivers/misc/sgi-gru/grutables.h | 158 +-
8664 drivers/misc/sgi-xp/xp.h | 2 +-
8665 drivers/misc/sgi-xp/xpc.h | 3 +-
8666 drivers/misc/sgi-xp/xpc_main.c | 2 +-
8667 drivers/mmc/host/dw_mmc.h | 2 +-
8668 drivers/mmc/host/mmci.c | 4 +-
8669 drivers/mmc/host/omap_hsmmc.c | 4 +-
8670 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
8671 drivers/mmc/host/sdhci-s3c.c | 8 +-
8672 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
8673 drivers/mtd/nand/denali.c | 1 +
8674 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
8675 drivers/mtd/nftlmount.c | 1 +
8676 drivers/mtd/sm_ftl.c | 2 +-
8677 drivers/net/bonding/bond_netlink.c | 2 +-
8678 drivers/net/caif/caif_hsi.c | 2 +-
8679 drivers/net/can/Kconfig | 2 +-
8680 drivers/net/can/dev.c | 2 +-
8681 drivers/net/can/vcan.c | 2 +-
8682 drivers/net/dummy.c | 2 +-
8683 drivers/net/ethernet/8390/ax88796.c | 4 +-
8684 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
8685 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
8686 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
8687 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
8688 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
8689 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
8690 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
8691 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
8692 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
8693 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
8694 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
8695 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
8696 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
8697 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
8698 drivers/net/ethernet/broadcom/tg3.h | 1 +
8699 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
8700 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
8701 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
8702 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
8703 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
8704 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
8705 drivers/net/ethernet/faraday/ftmac100.c | 2 +
8706 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
8707 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
8708 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
8709 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
8710 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
8711 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
8712 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
8713 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
8714 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
8715 drivers/net/ethernet/realtek/r8169.c | 8 +-
8716 drivers/net/ethernet/sfc/ptp.c | 2 +-
8717 drivers/net/ethernet/sfc/selftest.c | 20 +-
8718 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
8719 drivers/net/ethernet/via/via-rhine.c | 2 +-
8720 drivers/net/geneve.c | 2 +-
8721 drivers/net/hyperv/hyperv_net.h | 2 +-
8722 drivers/net/hyperv/rndis_filter.c | 7 +-
8723 drivers/net/ifb.c | 2 +-
8724 drivers/net/ipvlan/ipvlan_core.c | 2 +-
8725 drivers/net/irda/vlsi_ir.c | 18 +-
8726 drivers/net/irda/vlsi_ir.h | 14 +-
8727 drivers/net/macvlan.c | 20 +-
8728 drivers/net/macvtap.c | 10 +-
8729 drivers/net/nlmon.c | 2 +-
8730 drivers/net/phy/phy_device.c | 6 +-
8731 drivers/net/ppp/ppp_generic.c | 4 +-
8732 drivers/net/slip/slhc.c | 2 +-
8733 drivers/net/team/team.c | 4 +-
8734 drivers/net/tun.c | 7 +-
8735 drivers/net/usb/hso.c | 23 +-
8736 drivers/net/usb/r8152.c | 2 +-
8737 drivers/net/usb/sierra_net.c | 4 +-
8738 drivers/net/virtio_net.c | 2 +-
8739 drivers/net/vrf.c | 2 +-
8740 drivers/net/vxlan.c | 4 +-
8741 drivers/net/wimax/i2400m/rx.c | 2 +-
8742 drivers/net/wireless/airo.c | 2 +-
8743 drivers/net/wireless/at76c50x-usb.c | 2 +-
8744 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
8745 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
8746 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
8747 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
8748 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
8749 drivers/net/wireless/ath/ath9k/main.c | 22 +-
8750 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
8751 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
8752 drivers/net/wireless/ath/carl9170/main.c | 10 +-
8753 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
8754 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
8755 drivers/net/wireless/b43/phy_lp.c | 2 +-
8756 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
8757 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
8758 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
8759 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
8760 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
8761 drivers/net/wireless/mac80211_hwsim.c | 28 +-
8762 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
8763 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
8764 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
8765 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
8766 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
8767 drivers/of/fdt.c | 4 +-
8768 drivers/oprofile/buffer_sync.c | 8 +-
8769 drivers/oprofile/event_buffer.c | 2 +-
8770 drivers/oprofile/oprof.c | 2 +-
8771 drivers/oprofile/oprofile_stats.c | 10 +-
8772 drivers/oprofile/oprofile_stats.h | 10 +-
8773 drivers/oprofile/oprofilefs.c | 6 +-
8774 drivers/oprofile/timer_int.c | 2 +-
8775 drivers/parport/procfs.c | 4 +-
8776 drivers/pci/host/pci-host-generic.c | 2 +-
8777 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
8778 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
8779 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
8780 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
8781 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
8782 drivers/pci/hotplug/pciehp_core.c | 2 +-
8783 drivers/pci/msi.c | 22 +-
8784 drivers/pci/pci-sysfs.c | 6 +-
8785 drivers/pci/pci.h | 2 +-
8786 drivers/pci/pcie/aspm.c | 6 +-
8787 drivers/pci/pcie/portdrv_pci.c | 2 +-
8788 drivers/pci/probe.c | 2 +-
8789 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
8790 drivers/pinctrl/pinctrl-at91.c | 5 +-
8791 drivers/platform/chrome/chromeos_pstore.c | 2 +-
8792 drivers/platform/x86/alienware-wmi.c | 4 +-
8793 drivers/platform/x86/compal-laptop.c | 2 +-
8794 drivers/platform/x86/hdaps.c | 2 +-
8795 drivers/platform/x86/ibm_rtl.c | 2 +-
8796 drivers/platform/x86/intel_oaktrail.c | 2 +-
8797 drivers/platform/x86/msi-laptop.c | 16 +-
8798 drivers/platform/x86/msi-wmi.c | 2 +-
8799 drivers/platform/x86/samsung-laptop.c | 2 +-
8800 drivers/platform/x86/samsung-q10.c | 2 +-
8801 drivers/platform/x86/sony-laptop.c | 14 +-
8802 drivers/platform/x86/thinkpad_acpi.c | 2 +-
8803 drivers/pnp/pnpbios/bioscalls.c | 14 +-
8804 drivers/pnp/pnpbios/core.c | 2 +-
8805 drivers/power/pda_power.c | 7 +-
8806 drivers/power/power_supply.h | 4 +-
8807 drivers/power/power_supply_core.c | 7 +-
8808 drivers/power/power_supply_sysfs.c | 6 +-
8809 drivers/power/reset/at91-reset.c | 5 +-
8810 drivers/powercap/powercap_sys.c | 136 +-
8811 drivers/ptp/ptp_private.h | 2 +-
8812 drivers/ptp/ptp_sysfs.c | 2 +-
8813 drivers/regulator/core.c | 4 +-
8814 drivers/regulator/max8660.c | 6 +-
8815 drivers/regulator/max8973-regulator.c | 16 +-
8816 drivers/regulator/mc13892-regulator.c | 8 +-
8817 drivers/rtc/rtc-armada38x.c | 7 +-
8818 drivers/rtc/rtc-cmos.c | 4 +-
8819 drivers/rtc/rtc-ds1307.c | 2 +-
8820 drivers/rtc/rtc-m48t59.c | 4 +-
8821 drivers/rtc/rtc-rv8803.c | 15 +-
8822 drivers/rtc/rtc-test.c | 6 +-
8823 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
8824 drivers/scsi/bfa/bfa_ioc.h | 4 +-
8825 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
8826 drivers/scsi/hosts.c | 4 +-
8827 drivers/scsi/hpsa.c | 38 +-
8828 drivers/scsi/hpsa.h | 2 +-
8829 drivers/scsi/hptiop.c | 2 -
8830 drivers/scsi/hptiop.h | 1 -
8831 drivers/scsi/ipr.c | 6 +-
8832 drivers/scsi/ipr.h | 2 +-
8833 drivers/scsi/libfc/fc_exch.c | 50 +-
8834 drivers/scsi/libsas/sas_ata.c | 2 +-
8835 drivers/scsi/lpfc/lpfc.h | 8 +-
8836 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
8837 drivers/scsi/lpfc/lpfc_init.c | 6 +-
8838 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
8839 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
8840 drivers/scsi/pmcraid.c | 20 +-
8841 drivers/scsi/pmcraid.h | 8 +-
8842 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
8843 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
8844 drivers/scsi/qla2xxx/qla_os.c | 6 +-
8845 drivers/scsi/qla2xxx/qla_target.c | 10 +-
8846 drivers/scsi/qla2xxx/qla_target.h | 2 +-
8847 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
8848 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
8849 drivers/scsi/scsi.c | 2 +-
8850 drivers/scsi/scsi_lib.c | 8 +-
8851 drivers/scsi/scsi_sysfs.c | 2 +-
8852 drivers/scsi/scsi_transport_fc.c | 8 +-
8853 drivers/scsi/scsi_transport_iscsi.c | 6 +-
8854 drivers/scsi/scsi_transport_srp.c | 6 +-
8855 drivers/scsi/sd.c | 6 +-
8856 drivers/scsi/sg.c | 2 +-
8857 drivers/scsi/sr.c | 21 +-
8858 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
8859 drivers/spi/spi.c | 2 +-
8860 drivers/staging/android/timed_output.c | 6 +-
8861 drivers/staging/comedi/comedi_fops.c | 8 +-
8862 drivers/staging/fbtft/fbtft-core.c | 2 +-
8863 drivers/staging/fbtft/fbtft.h | 2 +-
8864 drivers/staging/gdm724x/gdm_tty.c | 2 +-
8865 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
8866 drivers/staging/iio/adc/ad7280a.c | 4 +-
8867 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
8868 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
8869 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
8870 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
8871 drivers/staging/lustre/lustre/include/obd.h | 2 +-
8872 drivers/staging/octeon/ethernet-rx.c | 20 +-
8873 drivers/staging/octeon/ethernet.c | 8 +-
8874 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
8875 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
8876 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
8877 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
8878 drivers/staging/sm750fb/sm750.c | 14 +-
8879 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
8880 drivers/target/sbp/sbp_target.c | 4 +-
8881 drivers/thermal/cpu_cooling.c | 9 +-
8882 drivers/thermal/devfreq_cooling.c | 19 +-
8883 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
8884 drivers/thermal/of-thermal.c | 17 +-
8885 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
8886 drivers/tty/cyclades.c | 6 +-
8887 drivers/tty/hvc/hvc_console.c | 14 +-
8888 drivers/tty/hvc/hvcs.c | 21 +-
8889 drivers/tty/hvc/hvsi.c | 22 +-
8890 drivers/tty/hvc/hvsi_lib.c | 4 +-
8891 drivers/tty/ipwireless/tty.c | 27 +-
8892 drivers/tty/moxa.c | 2 +-
8893 drivers/tty/n_gsm.c | 4 +-
8894 drivers/tty/n_tty.c | 19 +-
8895 drivers/tty/pty.c | 4 +-
8896 drivers/tty/rocket.c | 6 +-
8897 drivers/tty/serial/8250/8250_core.c | 10 +-
8898 drivers/tty/serial/ifx6x60.c | 2 +-
8899 drivers/tty/serial/ioc4_serial.c | 6 +-
8900 drivers/tty/serial/kgdb_nmi.c | 4 +-
8901 drivers/tty/serial/kgdboc.c | 32 +-
8902 drivers/tty/serial/msm_serial.c | 4 +-
8903 drivers/tty/serial/samsung.c | 9 +-
8904 drivers/tty/serial/serial_core.c | 8 +-
8905 drivers/tty/synclink.c | 34 +-
8906 drivers/tty/synclink_gt.c | 28 +-
8907 drivers/tty/synclinkmp.c | 34 +-
8908 drivers/tty/tty_io.c | 2 +-
8909 drivers/tty/tty_ldisc.c | 8 +-
8910 drivers/tty/tty_port.c | 22 +-
8911 drivers/uio/uio.c | 13 +-
8912 drivers/usb/atm/cxacru.c | 2 +-
8913 drivers/usb/atm/usbatm.c | 24 +-
8914 drivers/usb/class/cdc-acm.h | 2 +-
8915 drivers/usb/core/devices.c | 6 +-
8916 drivers/usb/core/devio.c | 12 +-
8917 drivers/usb/core/hcd.c | 4 +-
8918 drivers/usb/core/sysfs.c | 2 +-
8919 drivers/usb/core/usb.c | 2 +-
8920 drivers/usb/early/ehci-dbgp.c | 16 +-
8921 drivers/usb/gadget/function/u_serial.c | 22 +-
8922 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
8923 drivers/usb/host/ehci-hcd.c | 2 +-
8924 drivers/usb/host/ehci-hub.c | 4 +-
8925 drivers/usb/host/ehci-q.c | 4 +-
8926 drivers/usb/host/fotg210-hcd.c | 2 +-
8927 drivers/usb/host/hwa-hc.c | 2 +-
8928 drivers/usb/host/ohci-hcd.c | 2 +-
8929 drivers/usb/host/r8a66597.h | 2 +-
8930 drivers/usb/host/uhci-hcd.c | 2 +-
8931 drivers/usb/host/xhci-pci.c | 2 +-
8932 drivers/usb/host/xhci.c | 2 +-
8933 drivers/usb/misc/appledisplay.c | 4 +-
8934 drivers/usb/serial/console.c | 8 +-
8935 drivers/usb/storage/transport.c | 2 +-
8936 drivers/usb/storage/usb.c | 2 +-
8937 drivers/usb/storage/usb.h | 2 +-
8938 drivers/usb/usbip/vhci.h | 2 +-
8939 drivers/usb/usbip/vhci_hcd.c | 6 +-
8940 drivers/usb/usbip/vhci_rx.c | 2 +-
8941 drivers/usb/wusbcore/wa-hc.h | 4 +-
8942 drivers/usb/wusbcore/wa-xfer.c | 2 +-
8943 drivers/vhost/vringh.c | 20 +-
8944 drivers/video/backlight/kb3886_bl.c | 2 +-
8945 drivers/video/console/fbcon.c | 2 +-
8946 drivers/video/fbdev/aty/aty128fb.c | 2 +-
8947 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
8948 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
8949 drivers/video/fbdev/core/fb_defio.c | 6 +-
8950 drivers/video/fbdev/core/fbmem.c | 12 +-
8951 drivers/video/fbdev/hyperv_fb.c | 4 +-
8952 drivers/video/fbdev/i810/i810_accel.c | 1 +
8953 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
8954 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
8955 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
8956 drivers/video/fbdev/omap2/dss/display.c | 8 +-
8957 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
8958 drivers/video/fbdev/smscufx.c | 4 +-
8959 drivers/video/fbdev/udlfb.c | 36 +-
8960 drivers/video/fbdev/uvesafb.c | 52 +-
8961 drivers/video/fbdev/vesafb.c | 58 +-
8962 drivers/video/fbdev/via/via_clock.h | 2 +-
8963 drivers/xen/events/events_base.c | 6 +-
8964 fs/Kconfig.binfmt | 2 +-
8965 fs/afs/inode.c | 4 +-
8966 fs/aio.c | 2 +-
8967 fs/autofs4/waitq.c | 2 +-
8968 fs/befs/endian.h | 6 +-
8969 fs/binfmt_aout.c | 23 +-
8970 fs/binfmt_elf.c | 670 +-
8971 fs/binfmt_elf_fdpic.c | 4 +-
8972 fs/block_dev.c | 2 +-
8973 fs/btrfs/ctree.c | 11 +-
8974 fs/btrfs/ctree.h | 4 +-
8975 fs/btrfs/delayed-inode.c | 9 +-
8976 fs/btrfs/delayed-inode.h | 6 +-
8977 fs/btrfs/delayed-ref.c | 4 +-
8978 fs/btrfs/disk-io.c | 4 +-
8979 fs/btrfs/extent_map.c | 8 +-
8980 fs/btrfs/file.c | 4 +-
8981 fs/btrfs/inode.c | 14 +-
8982 fs/btrfs/raid56.c | 32 +-
8983 fs/btrfs/super.c | 2 +-
8984 fs/btrfs/sysfs.c | 2 +-
8985 fs/btrfs/tests/btrfs-tests.c | 2 +-
8986 fs/btrfs/tests/free-space-tests.c | 8 +-
8987 fs/btrfs/transaction.c | 2 +-
8988 fs/btrfs/tree-log.c | 8 +-
8989 fs/btrfs/tree-log.h | 2 +-
8990 fs/btrfs/volumes.c | 14 +-
8991 fs/btrfs/volumes.h | 22 +-
8992 fs/buffer.c | 2 +-
8993 fs/cachefiles/bind.c | 6 +-
8994 fs/cachefiles/daemon.c | 8 +-
8995 fs/cachefiles/internal.h | 12 +-
8996 fs/cachefiles/namei.c | 2 +-
8997 fs/cachefiles/proc.c | 12 +-
8998 fs/ceph/dir.c | 12 +-
8999 fs/ceph/super.c | 4 +-
9000 fs/cifs/cifs_debug.c | 12 +-
9001 fs/cifs/cifsfs.c | 8 +-
9002 fs/cifs/cifsglob.h | 54 +-
9003 fs/cifs/file.c | 12 +-
9004 fs/cifs/misc.c | 4 +-
9005 fs/cifs/smb1ops.c | 80 +-
9006 fs/cifs/smb2ops.c | 84 +-
9007 fs/cifs/smb2pdu.c | 3 +-
9008 fs/coda/cache.c | 10 +-
9009 fs/compat.c | 7 +-
9010 fs/compat_binfmt_elf.c | 2 +
9011 fs/compat_ioctl.c | 12 +-
9012 fs/configfs/dir.c | 10 +-
9013 fs/coredump.c | 18 +-
9014 fs/dcache.c | 64 +-
9015 fs/ecryptfs/inode.c | 2 +-
9016 fs/ecryptfs/miscdev.c | 2 +-
9017 fs/exec.c | 362 +-
9018 fs/ext2/xattr.c | 5 +-
9019 fs/ext4/ext4.h | 20 +-
9020 fs/ext4/mballoc.c | 44 +-
9021 fs/ext4/resize.c | 16 +-
9022 fs/ext4/super.c | 2 +-
9023 fs/ext4/sysfs.c | 2 +-
9024 fs/ext4/xattr.c | 5 +-
9025 fs/fhandle.c | 5 +-
9026 fs/file.c | 18 +-
9027 fs/fs-writeback.c | 11 +-
9028 fs/fs_struct.c | 8 +-
9029 fs/fscache/cookie.c | 40 +-
9030 fs/fscache/internal.h | 202 +-
9031 fs/fscache/object.c | 26 +-
9032 fs/fscache/operation.c | 38 +-
9033 fs/fscache/page.c | 110 +-
9034 fs/fscache/stats.c | 348 +-
9035 fs/fuse/cuse.c | 10 +-
9036 fs/fuse/dev.c | 4 +-
9037 fs/gfs2/file.c | 2 +-
9038 fs/gfs2/glock.c | 22 +-
9039 fs/gfs2/glops.c | 4 +-
9040 fs/gfs2/quota.c | 6 +-
9041 fs/hugetlbfs/inode.c | 13 +-
9042 fs/inode.c | 4 +-
9043 fs/jbd2/commit.c | 2 +-
9044 fs/jbd2/transaction.c | 4 +-
9045 fs/jffs2/erase.c | 3 +-
9046 fs/jffs2/wbuf.c | 3 +-
9047 fs/jfs/super.c | 2 +-
9048 fs/kernfs/dir.c | 2 +-
9049 fs/kernfs/file.c | 20 +-
9050 fs/libfs.c | 10 +-
9051 fs/lockd/clntproc.c | 4 +-
9052 fs/namei.c | 16 +-
9053 fs/namespace.c | 16 +-
9054 fs/nfs/callback_xdr.c | 2 +-
9055 fs/nfs/inode.c | 6 +-
9056 fs/nfsd/nfs4proc.c | 2 +-
9057 fs/nfsd/nfs4xdr.c | 2 +-
9058 fs/nfsd/nfscache.c | 11 +-
9059 fs/nfsd/vfs.c | 6 +-
9060 fs/nls/nls_base.c | 26 +-
9061 fs/nls/nls_euc-jp.c | 6 +-
9062 fs/nls/nls_koi8-ru.c | 6 +-
9063 fs/notify/fanotify/fanotify_user.c | 4 +-
9064 fs/notify/notification.c | 4 +-
9065 fs/ntfs/dir.c | 2 +-
9066 fs/ntfs/super.c | 6 +-
9067 fs/ocfs2/dlm/dlmcommon.h | 4 +-
9068 fs/ocfs2/dlm/dlmdebug.c | 10 +-
9069 fs/ocfs2/dlm/dlmdomain.c | 4 +-
9070 fs/ocfs2/dlm/dlmmaster.c | 4 +-
9071 fs/ocfs2/localalloc.c | 2 +-
9072 fs/ocfs2/ocfs2.h | 10 +-
9073 fs/ocfs2/suballoc.c | 12 +-
9074 fs/ocfs2/super.c | 20 +-
9075 fs/overlayfs/copy_up.c | 2 +-
9076 fs/pipe.c | 72 +-
9077 fs/posix_acl.c | 4 +-
9078 fs/proc/array.c | 20 +
9079 fs/proc/base.c | 4 +-
9080 fs/proc/kcore.c | 34 +-
9081 fs/proc/meminfo.c | 2 +-
9082 fs/proc/nommu.c | 2 +-
9083 fs/proc/proc_sysctl.c | 26 +-
9084 fs/proc/task_mmu.c | 42 +-
9085 fs/proc/task_nommu.c | 4 +-
9086 fs/proc/vmcore.c | 16 +-
9087 fs/qnx6/qnx6.h | 4 +-
9088 fs/quota/netlink.c | 4 +-
9089 fs/read_write.c | 2 +-
9090 fs/readdir.c | 3 +-
9091 fs/reiserfs/do_balan.c | 2 +-
9092 fs/reiserfs/procfs.c | 2 +-
9093 fs/reiserfs/reiserfs.h | 4 +-
9094 fs/seq_file.c | 4 +-
9095 fs/splice.c | 43 +-
9096 fs/squashfs/xattr.c | 12 +-
9097 fs/super.c | 3 +-
9098 fs/sysv/sysv.h | 2 +-
9099 fs/tracefs/inode.c | 8 +-
9100 fs/udf/misc.c | 2 +-
9101 fs/ufs/swab.h | 4 +-
9102 fs/userfaultfd.c | 2 +-
9103 fs/xattr.c | 21 +
9104 fs/xfs/libxfs/xfs_bmap.c | 2 +-
9105 fs/xfs/libxfs/xfs_da_btree.c | 4 +-
9106 fs/xfs/xfs_dir2_readdir.c | 7 +-
9107 fs/xfs/xfs_ioctl.c | 2 +-
9108 fs/xfs/xfs_linux.h | 4 +-
9109 include/acpi/ghes.h | 2 +-
9110 include/asm-generic/4level-fixup.h | 2 +
9111 include/asm-generic/atomic-long.h | 176 +-
9112 include/asm-generic/atomic64.h | 12 +
9113 include/asm-generic/bitops/__fls.h | 2 +-
9114 include/asm-generic/bitops/fls.h | 2 +-
9115 include/asm-generic/bitops/fls64.h | 4 +-
9116 include/asm-generic/bug.h | 6 +-
9117 include/asm-generic/cache.h | 4 +-
9118 include/asm-generic/emergency-restart.h | 2 +-
9119 include/asm-generic/kmap_types.h | 4 +-
9120 include/asm-generic/local.h | 13 +
9121 include/asm-generic/pgtable-nopmd.h | 18 +-
9122 include/asm-generic/pgtable-nopud.h | 15 +-
9123 include/asm-generic/pgtable.h | 16 +
9124 include/asm-generic/sections.h | 1 +
9125 include/asm-generic/uaccess.h | 16 +
9126 include/asm-generic/vmlinux.lds.h | 15 +-
9127 include/crypto/algapi.h | 2 +-
9128 include/drm/drmP.h | 19 +-
9129 include/drm/drm_crtc_helper.h | 2 +-
9130 include/drm/drm_mm.h | 2 +-
9131 include/drm/i915_pciids.h | 2 +-
9132 include/drm/intel-gtt.h | 4 +-
9133 include/drm/ttm/ttm_memory.h | 2 +-
9134 include/drm/ttm/ttm_page_alloc.h | 1 +
9135 include/keys/asymmetric-subtype.h | 2 +-
9136 include/linux/atmdev.h | 4 +-
9137 include/linux/atomic.h | 2 +-
9138 include/linux/audit.h | 2 +-
9139 include/linux/average.h | 2 +-
9140 include/linux/binfmts.h | 3 +-
9141 include/linux/bitmap.h | 2 +-
9142 include/linux/bitops.h | 8 +-
9143 include/linux/blk-cgroup.h | 24 +-
9144 include/linux/blkdev.h | 2 +-
9145 include/linux/blktrace_api.h | 2 +-
9146 include/linux/cache.h | 8 +
9147 include/linux/cdrom.h | 1 -
9148 include/linux/cleancache.h | 2 +-
9149 include/linux/clk-provider.h | 1 +
9150 include/linux/compat.h | 6 +-
9151 include/linux/compiler-gcc.h | 28 +-
9152 include/linux/compiler.h | 193 +-
9153 include/linux/configfs.h | 2 +-
9154 include/linux/cpufreq.h | 3 +-
9155 include/linux/cpuidle.h | 5 +-
9156 include/linux/cpumask.h | 14 +-
9157 include/linux/crypto.h | 4 +-
9158 include/linux/ctype.h | 2 +-
9159 include/linux/dcache.h | 4 +-
9160 include/linux/decompress/mm.h | 2 +-
9161 include/linux/devfreq.h | 2 +-
9162 include/linux/device.h | 7 +-
9163 include/linux/dma-mapping.h | 2 +-
9164 include/linux/efi.h | 1 +
9165 include/linux/elf.h | 2 +
9166 include/linux/err.h | 4 +-
9167 include/linux/extcon.h | 2 +-
9168 include/linux/fb.h | 3 +-
9169 include/linux/fdtable.h | 2 +-
9170 include/linux/fs.h | 5 +-
9171 include/linux/fs_struct.h | 2 +-
9172 include/linux/fscache-cache.h | 2 +-
9173 include/linux/fscache.h | 2 +-
9174 include/linux/fsnotify.h | 2 +-
9175 include/linux/genhd.h | 4 +-
9176 include/linux/genl_magic_func.h | 2 +-
9177 include/linux/gfp.h | 12 +-
9178 include/linux/highmem.h | 12 +
9179 include/linux/hwmon-sysfs.h | 6 +-
9180 include/linux/i2c.h | 1 +
9181 include/linux/if_pppox.h | 2 +-
9182 include/linux/init.h | 12 +-
9183 include/linux/init_task.h | 7 +
9184 include/linux/interrupt.h | 6 +-
9185 include/linux/iommu.h | 2 +-
9186 include/linux/ioport.h | 2 +-
9187 include/linux/ipc.h | 2 +-
9188 include/linux/irq.h | 5 +-
9189 include/linux/irqdesc.h | 2 +-
9190 include/linux/irqdomain.h | 3 +
9191 include/linux/jbd2.h | 2 +-
9192 include/linux/jiffies.h | 16 +-
9193 include/linux/key-type.h | 2 +-
9194 include/linux/kgdb.h | 6 +-
9195 include/linux/kmemleak.h | 4 +-
9196 include/linux/kobject.h | 3 +-
9197 include/linux/kobject_ns.h | 2 +-
9198 include/linux/kref.h | 2 +-
9199 include/linux/libata.h | 2 +-
9200 include/linux/linkage.h | 1 +
9201 include/linux/list.h | 15 +
9202 include/linux/lockref.h | 26 +-
9203 include/linux/math64.h | 10 +-
9204 include/linux/mempolicy.h | 7 +
9205 include/linux/mm.h | 102 +-
9206 include/linux/mm_types.h | 20 +
9207 include/linux/mmiotrace.h | 4 +-
9208 include/linux/mmzone.h | 2 +-
9209 include/linux/mod_devicetable.h | 4 +-
9210 include/linux/module.h | 69 +-
9211 include/linux/moduleloader.h | 16 +
9212 include/linux/moduleparam.h | 4 +-
9213 include/linux/net.h | 2 +-
9214 include/linux/netdevice.h | 7 +-
9215 include/linux/netfilter.h | 2 +-
9216 include/linux/netfilter/nfnetlink.h | 2 +-
9217 include/linux/netlink.h | 12 +-
9218 include/linux/nls.h | 4 +-
9219 include/linux/notifier.h | 3 +-
9220 include/linux/oprofile.h | 4 +-
9221 include/linux/padata.h | 2 +-
9222 include/linux/pci_hotplug.h | 3 +-
9223 include/linux/percpu.h | 2 +-
9224 include/linux/perf_event.h | 12 +-
9225 include/linux/pipe_fs_i.h | 8 +-
9226 include/linux/pm.h | 1 +
9227 include/linux/pm_domain.h | 2 +-
9228 include/linux/pm_runtime.h | 2 +-
9229 include/linux/pnp.h | 2 +-
9230 include/linux/poison.h | 4 +-
9231 include/linux/power/smartreflex.h | 2 +-
9232 include/linux/ppp-comp.h | 2 +-
9233 include/linux/preempt.h | 21 +
9234 include/linux/proc_ns.h | 2 +-
9235 include/linux/psci.h | 2 +-
9236 include/linux/quota.h | 2 +-
9237 include/linux/random.h | 19 +-
9238 include/linux/rculist.h | 16 +
9239 include/linux/rcupdate.h | 8 +
9240 include/linux/reboot.h | 14 +-
9241 include/linux/regset.h | 3 +-
9242 include/linux/relay.h | 2 +-
9243 include/linux/rio.h | 2 +-
9244 include/linux/rmap.h | 4 +-
9245 include/linux/sched.h | 76 +-
9246 include/linux/sched/sysctl.h | 1 +
9247 include/linux/scif.h | 2 +-
9248 include/linux/semaphore.h | 2 +-
9249 include/linux/seq_file.h | 1 +
9250 include/linux/seqlock.h | 10 +
9251 include/linux/signal.h | 2 +-
9252 include/linux/skbuff.h | 12 +-
9253 include/linux/slab.h | 47 +-
9254 include/linux/slab_def.h | 14 +-
9255 include/linux/slub_def.h | 2 +-
9256 include/linux/smp.h | 2 +
9257 include/linux/sock_diag.h | 2 +-
9258 include/linux/sonet.h | 2 +-
9259 include/linux/spinlock.h | 17 +-
9260 include/linux/srcu.h | 5 +-
9261 include/linux/sunrpc/addr.h | 8 +-
9262 include/linux/sunrpc/clnt.h | 2 +-
9263 include/linux/sunrpc/svc.h | 2 +-
9264 include/linux/sunrpc/svc_rdma.h | 18 +-
9265 include/linux/sunrpc/svcauth.h | 2 +-
9266 include/linux/swapops.h | 10 +-
9267 include/linux/swiotlb.h | 3 +-
9268 include/linux/syscalls.h | 23 +-
9269 include/linux/syscore_ops.h | 2 +-
9270 include/linux/sysctl.h | 3 +-
9271 include/linux/sysfs.h | 9 +-
9272 include/linux/sysrq.h | 3 +-
9273 include/linux/tcp.h | 14 +-
9274 include/linux/thread_info.h | 7 +
9275 include/linux/tty.h | 4 +-
9276 include/linux/tty_driver.h | 2 +-
9277 include/linux/tty_ldisc.h | 2 +-
9278 include/linux/types.h | 16 +
9279 include/linux/uaccess.h | 2 +-
9280 include/linux/uio_driver.h | 2 +-
9281 include/linux/unaligned/access_ok.h | 24 +-
9282 include/linux/usb.h | 12 +-
9283 include/linux/usb/hcd.h | 1 +
9284 include/linux/usb/renesas_usbhs.h | 2 +-
9285 include/linux/vermagic.h | 21 +-
9286 include/linux/vga_switcheroo.h | 8 +-
9287 include/linux/vmalloc.h | 7 +-
9288 include/linux/vmstat.h | 24 +-
9289 include/linux/writeback.h | 3 +-
9290 include/linux/xattr.h | 5 +-
9291 include/linux/zlib.h | 3 +-
9292 include/media/v4l2-dev.h | 2 +-
9293 include/media/v4l2-device.h | 2 +-
9294 include/net/9p/transport.h | 2 +-
9295 include/net/bluetooth/l2cap.h | 2 +-
9296 include/net/bonding.h | 2 +-
9297 include/net/caif/cfctrl.h | 6 +-
9298 include/net/cfg802154.h | 2 +-
9299 include/net/flow.h | 2 +-
9300 include/net/genetlink.h | 2 +-
9301 include/net/gro_cells.h | 2 +-
9302 include/net/inet_connection_sock.h | 2 +-
9303 include/net/inet_sock.h | 2 +-
9304 include/net/inetpeer.h | 2 +-
9305 include/net/ip_fib.h | 2 +-
9306 include/net/ip_vs.h | 8 +-
9307 include/net/ipv6.h | 2 +-
9308 include/net/irda/ircomm_tty.h | 1 +
9309 include/net/iucv/af_iucv.h | 2 +-
9310 include/net/llc_c_ac.h | 2 +-
9311 include/net/llc_c_ev.h | 4 +-
9312 include/net/llc_c_st.h | 2 +-
9313 include/net/llc_s_ac.h | 2 +-
9314 include/net/llc_s_st.h | 2 +-
9315 include/net/mac80211.h | 6 +-
9316 include/net/neighbour.h | 4 +-
9317 include/net/net_namespace.h | 18 +-
9318 include/net/netlink.h | 2 +-
9319 include/net/netns/conntrack.h | 6 +-
9320 include/net/netns/ipv4.h | 4 +-
9321 include/net/netns/ipv6.h | 4 +-
9322 include/net/netns/xfrm.h | 2 +-
9323 include/net/ping.h | 2 +-
9324 include/net/protocol.h | 4 +-
9325 include/net/rtnetlink.h | 2 +-
9326 include/net/sctp/checksum.h | 4 +-
9327 include/net/sctp/sm.h | 4 +-
9328 include/net/sctp/structs.h | 2 +-
9329 include/net/snmp.h | 10 +-
9330 include/net/sock.h | 12 +-
9331 include/net/tcp.h | 8 +-
9332 include/net/xfrm.h | 13 +-
9333 include/rdma/iw_cm.h | 2 +-
9334 include/scsi/libfc.h | 3 +-
9335 include/scsi/scsi_device.h | 6 +-
9336 include/scsi/scsi_driver.h | 2 +-
9337 include/scsi/scsi_transport_fc.h | 3 +-
9338 include/scsi/sg.h | 2 +-
9339 include/sound/compress_driver.h | 2 +-
9340 include/sound/soc.h | 4 +-
9341 include/trace/events/irq.h | 4 +-
9342 include/uapi/linux/a.out.h | 8 +
9343 include/uapi/linux/bcache.h | 5 +-
9344 include/uapi/linux/byteorder/little_endian.h | 28 +-
9345 include/uapi/linux/connector.h | 2 +-
9346 include/uapi/linux/elf.h | 28 +
9347 include/uapi/linux/screen_info.h | 2 +-
9348 include/uapi/linux/swab.h | 6 +-
9349 include/uapi/linux/xattr.h | 4 +
9350 include/video/udlfb.h | 8 +-
9351 include/video/uvesafb.h | 1 +
9352 init/Kconfig | 2 +-
9353 init/Makefile | 3 +
9354 init/do_mounts.c | 14 +-
9355 init/do_mounts.h | 8 +-
9356 init/do_mounts_initrd.c | 30 +-
9357 init/do_mounts_md.c | 6 +-
9358 init/init_task.c | 4 +
9359 init/initramfs.c | 38 +-
9360 init/main.c | 30 +-
9361 ipc/compat.c | 4 +-
9362 ipc/ipc_sysctl.c | 14 +-
9363 ipc/mq_sysctl.c | 4 +-
9364 ipc/sem.c | 4 +-
9365 ipc/shm.c | 6 +
9366 kernel/audit.c | 8 +-
9367 kernel/auditsc.c | 4 +-
9368 kernel/bpf/core.c | 7 +-
9369 kernel/capability.c | 3 +
9370 kernel/compat.c | 38 +-
9371 kernel/debug/debug_core.c | 16 +-
9372 kernel/debug/kdb/kdb_main.c | 4 +-
9373 kernel/events/core.c | 30 +-
9374 kernel/events/internal.h | 10 +-
9375 kernel/events/uprobes.c | 2 +-
9376 kernel/exit.c | 27 +-
9377 kernel/fork.c | 175 +-
9378 kernel/futex.c | 11 +-
9379 kernel/futex_compat.c | 2 +-
9380 kernel/gcov/base.c | 7 +-
9381 kernel/irq/manage.c | 2 +-
9382 kernel/irq/msi.c | 19 +-
9383 kernel/irq/spurious.c | 2 +-
9384 kernel/jump_label.c | 5 +
9385 kernel/kallsyms.c | 37 +-
9386 kernel/kexec.c | 3 +-
9387 kernel/kmod.c | 8 +-
9388 kernel/kprobes.c | 4 +-
9389 kernel/ksysfs.c | 2 +-
9390 kernel/locking/lockdep.c | 7 +-
9391 kernel/locking/mutex-debug.c | 12 +-
9392 kernel/locking/mutex-debug.h | 4 +-
9393 kernel/locking/mutex.c | 6 +-
9394 kernel/module.c | 422 +-
9395 kernel/notifier.c | 17 +-
9396 kernel/padata.c | 4 +-
9397 kernel/panic.c | 5 +-
9398 kernel/pid.c | 2 +-
9399 kernel/pid_namespace.c | 2 +-
9400 kernel/power/process.c | 12 +-
9401 kernel/profile.c | 14 +-
9402 kernel/ptrace.c | 8 +-
9403 kernel/rcu/rcutorture.c | 60 +-
9404 kernel/rcu/tiny.c | 4 +-
9405 kernel/rcu/tree.c | 42 +-
9406 kernel/rcu/tree.h | 16 +-
9407 kernel/rcu/tree_plugin.h | 18 +-
9408 kernel/rcu/tree_trace.c | 14 +-
9409 kernel/resource.c | 4 +-
9410 kernel/sched/auto_group.c | 4 +-
9411 kernel/sched/core.c | 45 +-
9412 kernel/sched/fair.c | 2 +-
9413 kernel/sched/sched.h | 2 +-
9414 kernel/signal.c | 24 +-
9415 kernel/smpboot.c | 4 +-
9416 kernel/softirq.c | 12 +-
9417 kernel/sys.c | 10 +-
9418 kernel/sysctl.c | 34 +-
9419 kernel/time/alarmtimer.c | 2 +-
9420 kernel/time/posix-cpu-timers.c | 4 +-
9421 kernel/time/posix-timers.c | 24 +-
9422 kernel/time/timer.c | 2 +-
9423 kernel/time/timer_stats.c | 10 +-
9424 kernel/trace/blktrace.c | 6 +-
9425 kernel/trace/ftrace.c | 15 +-
9426 kernel/trace/ring_buffer.c | 96 +-
9427 kernel/trace/trace.c | 2 +-
9428 kernel/trace/trace.h | 2 +-
9429 kernel/trace/trace_clock.c | 4 +-
9430 kernel/trace/trace_events.c | 1 -
9431 kernel/trace/trace_functions_graph.c | 4 +-
9432 kernel/trace/trace_mmiotrace.c | 8 +-
9433 kernel/trace/trace_output.c | 10 +-
9434 kernel/trace/trace_seq.c | 2 +-
9435 kernel/trace/trace_stack.c | 2 +-
9436 kernel/user.c | 2 +-
9437 kernel/user_namespace.c | 2 +-
9438 kernel/utsname_sysctl.c | 2 +-
9439 kernel/watchdog.c | 2 +-
9440 kernel/workqueue.c | 8 +-
9441 lib/Kconfig.debug | 8 +-
9442 lib/Makefile | 2 +-
9443 lib/bitmap.c | 8 +-
9444 lib/bug.c | 2 +
9445 lib/debugobjects.c | 2 +-
9446 lib/decompress_bunzip2.c | 3 +-
9447 lib/decompress_unlzma.c | 4 +-
9448 lib/div64.c | 4 +-
9449 lib/dma-debug.c | 4 +-
9450 lib/inflate.c | 2 +-
9451 lib/ioremap.c | 4 +-
9452 lib/kobject.c | 4 +-
9453 lib/list_debug.c | 126 +-
9454 lib/lockref.c | 44 +-
9455 lib/percpu-refcount.c | 2 +-
9456 lib/radix-tree.c | 2 +-
9457 lib/random32.c | 2 +-
9458 lib/rhashtable.c | 4 +-
9459 lib/show_mem.c | 2 +-
9460 lib/strncpy_from_user.c | 2 +-
9461 lib/strnlen_user.c | 2 +-
9462 lib/swiotlb.c | 2 +-
9463 lib/usercopy.c | 6 +
9464 lib/vsprintf.c | 12 +-
9465 mm/Kconfig | 6 +-
9466 mm/backing-dev.c | 4 +-
9467 mm/debug.c | 3 +
9468 mm/filemap.c | 2 +-
9469 mm/gup.c | 13 +-
9470 mm/highmem.c | 6 +-
9471 mm/hugetlb.c | 70 +-
9472 mm/internal.h | 1 +
9473 mm/maccess.c | 12 +-
9474 mm/madvise.c | 37 +
9475 mm/memory-failure.c | 6 +-
9476 mm/memory.c | 424 +-
9477 mm/mempolicy.c | 25 +
9478 mm/mlock.c | 18 +-
9479 mm/mm_init.c | 2 +-
9480 mm/mmap.c | 582 +-
9481 mm/mprotect.c | 137 +-
9482 mm/mremap.c | 39 +-
9483 mm/nommu.c | 21 +-
9484 mm/page-writeback.c | 2 +-
9485 mm/page_alloc.c | 50 +-
9486 mm/percpu.c | 2 +-
9487 mm/process_vm_access.c | 14 +-
9488 mm/rmap.c | 45 +-
9489 mm/shmem.c | 19 +-
9490 mm/slab.c | 111 +-
9491 mm/slab.h | 22 +-
9492 mm/slab_common.c | 86 +-
9493 mm/slob.c | 218 +-
9494 mm/slub.c | 109 +-
9495 mm/sparse-vmemmap.c | 4 +-
9496 mm/sparse.c | 2 +-
9497 mm/swap.c | 2 +
9498 mm/swapfile.c | 12 +-
9499 mm/util.c | 6 +
9500 mm/vmalloc.c | 114 +-
9501 mm/vmstat.c | 12 +-
9502 net/8021q/vlan.c | 5 +-
9503 net/8021q/vlan_netlink.c | 2 +-
9504 net/9p/mod.c | 4 +-
9505 net/9p/trans_fd.c | 2 +-
9506 net/atm/atm_misc.c | 8 +-
9507 net/atm/lec.h | 2 +-
9508 net/atm/proc.c | 6 +-
9509 net/atm/resources.c | 4 +-
9510 net/ax25/sysctl_net_ax25.c | 2 +-
9511 net/batman-adv/bat_iv_ogm.c | 8 +-
9512 net/batman-adv/fragmentation.c | 2 +-
9513 net/batman-adv/routing.c | 4 +-
9514 net/batman-adv/soft-interface.c | 10 +-
9515 net/batman-adv/translation-table.c | 14 +-
9516 net/batman-adv/types.h | 8 +-
9517 net/bluetooth/hci_sock.c | 2 +-
9518 net/bluetooth/l2cap_core.c | 6 +-
9519 net/bluetooth/l2cap_sock.c | 12 +-
9520 net/bluetooth/rfcomm/sock.c | 4 +-
9521 net/bluetooth/rfcomm/tty.c | 4 +-
9522 net/bridge/br_netlink.c | 2 +-
9523 net/bridge/netfilter/ebtables.c | 6 +-
9524 net/caif/cfctrl.c | 11 +-
9525 net/caif/chnl_net.c | 2 +-
9526 net/can/af_can.c | 2 +-
9527 net/can/gw.c | 6 +-
9528 net/ceph/messenger.c | 4 +-
9529 net/compat.c | 26 +-
9530 net/core/datagram.c | 2 +-
9531 net/core/dev.c | 16 +-
9532 net/core/filter.c | 2 +-
9533 net/core/flow.c | 6 +-
9534 net/core/neighbour.c | 18 +-
9535 net/core/net-sysfs.c | 2 +-
9536 net/core/net_namespace.c | 8 +-
9537 net/core/netpoll.c | 4 +-
9538 net/core/rtnetlink.c | 17 +-
9539 net/core/scm.c | 12 +-
9540 net/core/skbuff.c | 11 +-
9541 net/core/sock.c | 28 +-
9542 net/core/sock_diag.c | 15 +-
9543 net/core/sysctl_net_core.c | 22 +-
9544 net/decnet/af_decnet.c | 1 +
9545 net/decnet/sysctl_net_decnet.c | 4 +-
9546 net/dsa/dsa.c | 2 +-
9547 net/hsr/hsr_netlink.c | 2 +-
9548 net/ieee802154/6lowpan/core.c | 2 +-
9549 net/ieee802154/6lowpan/reassembly.c | 14 +-
9550 net/ipv4/af_inet.c | 2 +-
9551 net/ipv4/arp.c | 2 +-
9552 net/ipv4/devinet.c | 18 +-
9553 net/ipv4/fib_frontend.c | 6 +-
9554 net/ipv4/fib_semantics.c | 2 +-
9555 net/ipv4/inet_connection_sock.c | 4 +-
9556 net/ipv4/inet_diag.c | 4 +-
9557 net/ipv4/inet_timewait_sock.c | 2 +-
9558 net/ipv4/inetpeer.c | 2 +-
9559 net/ipv4/ip_fragment.c | 15 +-
9560 net/ipv4/ip_gre.c | 6 +-
9561 net/ipv4/ip_sockglue.c | 2 +-
9562 net/ipv4/ip_vti.c | 4 +-
9563 net/ipv4/ipconfig.c | 6 +-
9564 net/ipv4/ipip.c | 4 +-
9565 net/ipv4/netfilter/arp_tables.c | 12 +-
9566 net/ipv4/netfilter/ip_tables.c | 12 +-
9567 net/ipv4/ping.c | 14 +-
9568 net/ipv4/proc.c | 8 +-
9569 net/ipv4/raw.c | 14 +-
9570 net/ipv4/route.c | 32 +-
9571 net/ipv4/sysctl_net_ipv4.c | 22 +-
9572 net/ipv4/tcp_input.c | 6 +-
9573 net/ipv4/tcp_probe.c | 2 +-
9574 net/ipv4/udp.c | 10 +-
9575 net/ipv4/xfrm4_mode_transport.c | 2 +-
9576 net/ipv4/xfrm4_policy.c | 17 +-
9577 net/ipv4/xfrm4_state.c | 4 +-
9578 net/ipv6/addrconf.c | 22 +-
9579 net/ipv6/af_inet6.c | 2 +-
9580 net/ipv6/datagram.c | 2 +-
9581 net/ipv6/icmp.c | 2 +-
9582 net/ipv6/ip6_fib.c | 4 +-
9583 net/ipv6/ip6_gre.c | 10 +-
9584 net/ipv6/ip6_tunnel.c | 4 +-
9585 net/ipv6/ip6_vti.c | 4 +-
9586 net/ipv6/ipv6_sockglue.c | 2 +-
9587 net/ipv6/ndisc.c | 2 +-
9588 net/ipv6/netfilter/ip6_tables.c | 12 +-
9589 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
9590 net/ipv6/ping.c | 33 +-
9591 net/ipv6/proc.c | 10 +-
9592 net/ipv6/raw.c | 17 +-
9593 net/ipv6/reassembly.c | 13 +-
9594 net/ipv6/route.c | 2 +-
9595 net/ipv6/sit.c | 4 +-
9596 net/ipv6/sysctl_net_ipv6.c | 2 +-
9597 net/ipv6/udp.c | 6 +-
9598 net/ipv6/xfrm6_policy.c | 17 +-
9599 net/irda/ircomm/ircomm_tty.c | 18 +-
9600 net/iucv/af_iucv.c | 4 +-
9601 net/iucv/iucv.c | 2 +-
9602 net/key/af_key.c | 4 +-
9603 net/l2tp/l2tp_eth.c | 38 +-
9604 net/l2tp/l2tp_ip.c | 2 +-
9605 net/l2tp/l2tp_ip6.c | 2 +-
9606 net/mac80211/cfg.c | 10 +-
9607 net/mac80211/debugfs_key.c | 4 +-
9608 net/mac80211/ieee80211_i.h | 3 +-
9609 net/mac80211/iface.c | 20 +-
9610 net/mac80211/key.c | 4 +-
9611 net/mac80211/main.c | 2 +-
9612 net/mac80211/pm.c | 4 +-
9613 net/mac80211/rate.c | 2 +-
9614 net/mac80211/sta_info.c | 2 +-
9615 net/mac80211/tx.c | 2 +-
9616 net/mac80211/util.c | 8 +-
9617 net/mac80211/wpa.c | 10 +-
9618 net/mac802154/iface.c | 4 +-
9619 net/mpls/af_mpls.c | 6 +-
9620 net/netfilter/ipset/ip_set_core.c | 4 +-
9621 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
9622 net/netfilter/ipvs/ip_vs_core.c | 4 +-
9623 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
9624 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
9625 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
9626 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
9627 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
9628 net/netfilter/nf_conntrack_acct.c | 2 +-
9629 net/netfilter/nf_conntrack_ecache.c | 2 +-
9630 net/netfilter/nf_conntrack_helper.c | 2 +-
9631 net/netfilter/nf_conntrack_netlink.c | 22 +-
9632 net/netfilter/nf_conntrack_proto.c | 2 +-
9633 net/netfilter/nf_conntrack_standalone.c | 2 +-
9634 net/netfilter/nf_conntrack_timestamp.c | 2 +-
9635 net/netfilter/nf_log.c | 10 +-
9636 net/netfilter/nf_sockopt.c | 4 +-
9637 net/netfilter/nf_tables_api.c | 13 +-
9638 net/netfilter/nfnetlink_acct.c | 7 +-
9639 net/netfilter/nfnetlink_cthelper.c | 2 +-
9640 net/netfilter/nfnetlink_cttimeout.c | 2 +-
9641 net/netfilter/nfnetlink_log.c | 4 +-
9642 net/netfilter/nft_compat.c | 9 +-
9643 net/netfilter/xt_statistic.c | 8 +-
9644 net/netlink/af_netlink.c | 14 +-
9645 net/netlink/diag.c | 2 +-
9646 net/netlink/genetlink.c | 14 +-
9647 net/openvswitch/vport-internal_dev.c | 2 +-
9648 net/packet/af_packet.c | 26 +-
9649 net/packet/diag.c | 2 +-
9650 net/packet/internal.h | 6 +-
9651 net/phonet/pep.c | 6 +-
9652 net/phonet/socket.c | 2 +-
9653 net/phonet/sysctl.c | 2 +-
9654 net/rds/cong.c | 6 +-
9655 net/rds/ib.h | 2 +-
9656 net/rds/ib_cm.c | 2 +-
9657 net/rds/ib_recv.c | 4 +-
9658 net/rds/iw.h | 2 +-
9659 net/rds/iw_cm.c | 2 +-
9660 net/rds/iw_recv.c | 4 +-
9661 net/rds/rds.h | 2 +-
9662 net/rds/tcp.c | 2 +-
9663 net/rds/tcp_send.c | 2 +-
9664 net/rxrpc/af_rxrpc.c | 2 +-
9665 net/rxrpc/ar-ack.c | 14 +-
9666 net/rxrpc/ar-call.c | 2 +-
9667 net/rxrpc/ar-connection.c | 2 +-
9668 net/rxrpc/ar-connevent.c | 2 +-
9669 net/rxrpc/ar-input.c | 4 +-
9670 net/rxrpc/ar-internal.h | 8 +-
9671 net/rxrpc/ar-local.c | 2 +-
9672 net/rxrpc/ar-output.c | 4 +-
9673 net/rxrpc/ar-peer.c | 2 +-
9674 net/rxrpc/ar-proc.c | 4 +-
9675 net/rxrpc/ar-transport.c | 2 +-
9676 net/rxrpc/rxkad.c | 4 +-
9677 net/sched/sch_generic.c | 4 +-
9678 net/sctp/ipv6.c | 6 +-
9679 net/sctp/protocol.c | 10 +-
9680 net/sctp/sm_sideeffect.c | 2 +-
9681 net/sctp/socket.c | 21 +-
9682 net/sctp/sysctl.c | 10 +-
9683 net/socket.c | 18 +-
9684 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
9685 net/sunrpc/clnt.c | 4 +-
9686 net/sunrpc/sched.c | 4 +-
9687 net/sunrpc/svc.c | 4 +-
9688 net/sunrpc/svcauth_unix.c | 2 +-
9689 net/sunrpc/xprtrdma/svc_rdma.c | 44 +-
9690 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
9691 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
9692 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
9693 net/tipc/netlink_compat.c | 12 +-
9694 net/tipc/subscr.c | 2 +-
9695 net/unix/diag.c | 2 +-
9696 net/unix/sysctl_net_unix.c | 2 +-
9697 net/wireless/wext-core.c | 19 +-
9698 net/xfrm/xfrm_policy.c | 16 +-
9699 net/xfrm/xfrm_state.c | 33 +-
9700 net/xfrm/xfrm_sysctl.c | 2 +-
9701 net/xfrm/xfrm_user.c | 2 +-
9702 scripts/Kbuild.include | 2 +-
9703 scripts/Makefile.build | 2 +-
9704 scripts/Makefile.clean | 3 +-
9705 scripts/Makefile.host | 69 +-
9706 scripts/basic/fixdep.c | 12 +-
9707 scripts/dtc/checks.c | 14 +-
9708 scripts/dtc/data.c | 6 +-
9709 scripts/dtc/flattree.c | 8 +-
9710 scripts/dtc/livetree.c | 4 +-
9711 scripts/gcc-plugin.sh | 51 +
9712 scripts/headers_install.sh | 1 +
9713 scripts/kallsyms.c | 4 +-
9714 scripts/kconfig/lkc.h | 5 +-
9715 scripts/kconfig/menu.c | 2 +-
9716 scripts/kconfig/symbol.c | 6 +-
9717 scripts/link-vmlinux.sh | 2 +-
9718 scripts/mod/file2alias.c | 14 +-
9719 scripts/mod/modpost.c | 25 +-
9720 scripts/mod/modpost.h | 6 +-
9721 scripts/mod/sumversion.c | 2 +-
9722 scripts/module-common.lds | 4 +
9723 scripts/package/builddeb | 1 +
9724 scripts/pnmtologo.c | 6 +-
9725 scripts/sortextable.h | 6 +-
9726 scripts/tags.sh | 2 +-
9727 security/Kconfig | 691 +-
9728 security/apparmor/include/policy.h | 2 +-
9729 security/apparmor/policy.c | 4 +-
9730 security/integrity/ima/ima.h | 4 +-
9731 security/integrity/ima/ima_api.c | 2 +-
9732 security/integrity/ima/ima_fs.c | 4 +-
9733 security/integrity/ima/ima_queue.c | 2 +-
9734 security/keys/internal.h | 8 +-
9735 security/keys/key.c | 18 +-
9736 security/keys/keyring.c | 4 -
9737 security/selinux/avc.c | 6 +-
9738 security/selinux/include/xfrm.h | 2 +-
9739 security/yama/yama_lsm.c | 2 +-
9740 sound/aoa/codecs/onyx.c | 7 +-
9741 sound/aoa/codecs/onyx.h | 1 +
9742 sound/core/oss/pcm_oss.c | 18 +-
9743 sound/core/pcm_compat.c | 2 +-
9744 sound/core/pcm_native.c | 4 +-
9745 sound/core/seq/seq_clientmgr.c | 10 +-
9746 sound/core/seq/seq_compat.c | 2 +-
9747 sound/core/seq/seq_fifo.c | 6 +-
9748 sound/core/seq/seq_fifo.h | 2 +-
9749 sound/core/seq/seq_memory.c | 6 +-
9750 sound/core/sound.c | 2 +-
9751 sound/drivers/mts64.c | 14 +-
9752 sound/drivers/opl4/opl4_lib.c | 2 +-
9753 sound/drivers/portman2x4.c | 3 +-
9754 sound/firewire/amdtp-am824.c | 2 +-
9755 sound/firewire/amdtp-stream.c | 4 +-
9756 sound/firewire/amdtp-stream.h | 2 +-
9757 sound/firewire/digi00x/amdtp-dot.c | 2 +-
9758 sound/firewire/isight.c | 10 +-
9759 sound/firewire/scs1x.c | 8 +-
9760 sound/oss/sb_audio.c | 2 +-
9761 sound/oss/swarm_cs4297a.c | 6 +-
9762 sound/pci/hda/hda_codec.c | 2 +-
9763 sound/pci/ymfpci/ymfpci.h | 2 +-
9764 sound/pci/ymfpci/ymfpci_main.c | 12 +-
9765 sound/soc/codecs/sti-sas.c | 10 +-
9766 sound/soc/intel/skylake/skl-sst-dsp.h | 4 +-
9767 sound/soc/soc-ac97.c | 6 +-
9768 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
9769 tools/gcc/Makefile | 42 +
9770 tools/gcc/checker_plugin.c | 549 +
9771 tools/gcc/colorize_plugin.c | 215 +
9772 tools/gcc/constify_plugin.c | 571 +
9773 tools/gcc/gcc-common.h | 819 +
9774 tools/gcc/initify_plugin.c | 591 +
9775 tools/gcc/kallocstat_plugin.c | 188 +
9776 tools/gcc/kernexec_plugin.c | 549 +
9777 tools/gcc/latent_entropy_plugin.c | 474 +
9778 tools/gcc/randomize_layout_seed.h | 1 +
9779 tools/gcc/size_overflow_plugin/.gitignore | 2 +
9780 tools/gcc/size_overflow_plugin/Makefile | 28 +
9781 .../disable_size_overflow_hash.data | 12434 ++
9782 .../disable_size_overflow_hash.h | 152601 ++++++++++++++++++
9783 .../generate_size_overflow_hash.sh | 103 +
9784 .../insert_size_overflow_asm.c | 416 +
9785 .../size_overflow_plugin/intentional_overflow.c | 1116 +
9786 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
9787 tools/gcc/size_overflow_plugin/size_overflow.h | 325 +
9788 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
9789 .../size_overflow_plugin/size_overflow_hash.data | 21454 +++
9790 .../size_overflow_hash_aux.data | 92 +
9791 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 +
9792 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
9793 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
9794 .../size_overflow_plugin_hash.c | 352 +
9795 .../size_overflow_plugin/size_overflow_transform.c | 745 +
9796 .../size_overflow_transform_core.c | 1015 +
9797 tools/gcc/stackleak_plugin.c | 444 +
9798 tools/gcc/structleak_plugin.c | 290 +
9799 tools/include/linux/compiler.h | 8 +
9800 tools/perf/util/include/asm/alternative-asm.h | 3 +
9801 tools/virtio/linux/uaccess.h | 2 +-
9802 virt/kvm/kvm_main.c | 42 +-
9803 2088 files changed, 221599 insertions(+), 9618 deletions(-)
9804 commit 87790bbd0d8dc2bd7fd86cb947e32886db9e9766
9805 Author: Matthew Wilcox <willy@linux.intel.com>
9806 Date: Tue Feb 2 16:57:52 2016 -0800
9807
9808 radix-tree: fix race in gang lookup
9809
9810 If the indirect_ptr bit is set on a slot, that indicates we need to redo
9811 the lookup. Introduce a new function radix_tree_iter_retry() which
9812 forces the loop to retry the lookup by setting 'slot' to NULL and
9813 turning the iterator back to point at the problematic entry.
9814
9815 This is a pretty rare problem to hit at the moment; the lookup has to
9816 race with a grow of the radix tree from a height of 0. The consequences
9817 of hitting this race are that gang lookup could return a pointer to a
9818 radix_tree_node instead of a pointer to whatever the user had inserted
9819 in the tree.
9820
9821 Fixes: cebbd29e1c2f ("radix-tree: rewrite gang lookup using iterator")
9822 Signed-off-by: Matthew Wilcox <willy@linux.intel.com>
9823 Cc: Hugh Dickins <hughd@google.com>
9824 Cc: Ohad Ben-Cohen <ohad@wizery.com>
9825 Cc: Konstantin Khlebnikov <khlebnikov@openvz.org>
9826 Cc: <stable@vger.kernel.org>
9827 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9828 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9829
9830 include/linux/radix-tree.h | 16 ++++++++++++++++
9831 lib/radix-tree.c | 12 ++++++++++--
9832 2 files changed, 26 insertions(+), 2 deletions(-)
9833
9834 commit bf628043b4589c910919a0f221ae7f42aa8cea93
9835 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
9836 Date: Wed Feb 3 02:11:03 2016 +0100
9837
9838 unix: correctly track in-flight fds in sending process user_struct
9839
9840 The commit referenced in the Fixes tag incorrectly accounted the number
9841 of in-flight fds over a unix domain socket to the original opener
9842 of the file-descriptor. This allows another process to arbitrary
9843 deplete the original file-openers resource limit for the maximum of
9844 open files. Instead the sending processes and its struct cred should
9845 be credited.
9846
9847 To do so, we add a reference counted struct user_struct pointer to the
9848 scm_fp_list and use it to account for the number of inflight unix fds.
9849
9850 Fixes: 712f4aad406bb1 ("unix: properly account for FDs passed over unix sockets")
9851 Reported-by: David Herrmann <dh.herrmann@gmail.com>
9852 Cc: David Herrmann <dh.herrmann@gmail.com>
9853 Cc: Willy Tarreau <w@1wt.eu>
9854 Cc: Linus Torvalds <torvalds@linux-foundation.org>
9855 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
9856 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
9857 Signed-off-by: David S. Miller <davem@davemloft.net>
9858
9859 include/net/af_unix.h | 4 ++--
9860 include/net/scm.h | 1 +
9861 net/core/scm.c | 7 +++++++
9862 net/unix/af_unix.c | 4 ++--
9863 net/unix/garbage.c | 8 ++++----
9864 5 files changed, 16 insertions(+), 8 deletions(-)
9865
9866 commit e830db443ff78d70b7b63536e688d73907face0c
9867 Author: Mike Kravetz <mike.kravetz@oracle.com>
9868 Date: Fri Jan 15 16:57:37 2016 -0800
9869
9870 fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list()
9871
9872 Hillf Danton noticed bugs in the hugetlb_vmtruncate_list routine. The
9873 argument end is of type pgoff_t. It was being converted to a vaddr
9874 offset and passed to unmap_hugepage_range. However, end was also being
9875 used as an argument to the vma_interval_tree_foreach controlling loop.
9876 In addition, the conversion of end to vaddr offset was incorrect.
9877
9878 hugetlb_vmtruncate_list is called as part of a file truncate or
9879 fallocate hole punch operation.
9880
9881 When truncating a hugetlbfs file, this bug could prevent some pages from
9882 being unmapped. This is possible if there are multiple vmas mapping the
9883 file, and there is a sufficiently sized hole between the mappings. The
9884 size of the hole between two vmas (A,B) must be such that the starting
9885 virtual address of B is greater than (ending virtual address of A <<
9886 PAGE_SHIFT). In this case, the pages in B would not be unmapped. If
9887 pages are not properly unmapped during truncate, the following BUG is
9888 hit:
9889
9890 kernel BUG at fs/hugetlbfs/inode.c:428!
9891
9892 In the fallocate hole punch case, this bug could prevent pages from
9893 being unmapped as in the truncate case. However, for hole punch the
9894 result is that unmapped pages will not be removed during the operation.
9895 For hole punch, it is also possible that more pages than desired will be
9896 unmapped. This unnecessary unmapping will cause page faults to
9897 reestablish the mappings on subsequent page access.
9898
9899 Fixes: 1bfad99ab (" hugetlbfs: hugetlb_vmtruncate_list() needs to take a range")Reported-by: Hillf Danton <hillf.zj@alibaba-inc.com>
9900 Signed-off-by: Mike Kravetz <mike.kravetz@oracle.com>
9901 Cc: Hugh Dickins <hughd@google.com>
9902 Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
9903 Cc: Davidlohr Bueso <dave@stgolabs.net>
9904 Cc: Dave Hansen <dave.hansen@linux.intel.com>
9905 Cc: <stable@vger.kernel.org> [4.3]
9906 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9907 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9908
9909 fs/hugetlbfs/inode.c | 19 +++++++++++--------
9910 1 files changed, 11 insertions(+), 8 deletions(-)
9911
9912 commit cdb3ba4a9113b779347387f3b6c6ea72dd4db12f
9913 Author: Takashi Iwai <tiwai@suse.de>
9914 Date: Thu Feb 4 17:06:13 2016 +0100
9915
9916 ALSA: timer: Fix leftover link at closing
9917
9918 In ALSA timer core, the active timer instance is managed in
9919 active_list linked list. Each element is added / removed dynamically
9920 at timer start, stop and in timer interrupt. The problem is that
9921 snd_timer_interrupt() has a thinko and leaves the element in
9922 active_list when it's the last opened element. This eventually leads
9923 to list corruption or use-after-free error.
9924
9925 This hasn't been revealed because we used to delete the list forcibly
9926 in snd_timer_stop() in the past. However, the recent fix avoids the
9927 double-stop behavior (in commit [f784beb75ce8: ALSA: timer: Fix link
9928 corruption due to double start or stop]), and this leak hits reality.
9929
9930 This patch fixes the link management in snd_timer_interrupt(). Now it
9931 simply unlinks no matter which stream is.
9932
9933 BugLink: http://lkml.kernel.org/r/CACT4Y+Yy2aukHP-EDp8-ziNqNNmb-NTf=jDWXMP7jB8HDa2vng@mail.gmail.com
9934 Reported-by: Dmitry Vyukov <dvyukov@google.com>
9935 Cc: <stable@vger.kernel.org>
9936 Signed-off-by: Takashi Iwai <tiwai@suse.de>
9937
9938 sound/core/timer.c | 4 ++--
9939 1 files changed, 2 insertions(+), 2 deletions(-)
9940
9941 commit 47d9647902f6a2f46a2be1e0140ba0f6f8c06008
9942 Author: Konstantin Khlebnikov <koct9i@gmail.com>
9943 Date: Fri Feb 5 15:37:01 2016 -0800
9944
9945 radix-tree: fix oops after radix_tree_iter_retry
9946
9947 Helper radix_tree_iter_retry() resets next_index to the current index.
9948 In following radix_tree_next_slot current chunk size becomes zero. This
9949 isn't checked and it tries to dereference null pointer in slot.
9950
9951 Tagged iterator is fine because retry happens only at slot 0 where tag
9952 bitmask in iter->tags is filled with single bit.
9953
9954 Fixes: 46437f9a554f ("radix-tree: fix race in gang lookup")
9955 Signed-off-by: Konstantin Khlebnikov <koct9i@gmail.com>
9956 Cc: Matthew Wilcox <willy@linux.intel.com>
9957 Cc: Hugh Dickins <hughd@google.com>
9958 Cc: Ohad Ben-Cohen <ohad@wizery.com>
9959 Cc: Jeremiah Mahler <jmmahler@gmail.com>
9960 Cc: <stable@vger.kernel.org>
9961 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9962 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9963
9964 include/linux/radix-tree.h | 6 +++---
9965 1 files changed, 3 insertions(+), 3 deletions(-)
9966
9967 commit 95b5dcb3c01958502af00b0bc0da1d906aae11a2
9968 Merge: 438be0b 256aeaf
9969 Author: Brad Spengler <spender@grsecurity.net>
9970 Date: Sun Feb 7 08:29:33 2016 -0500
9971
9972 Merge branch 'pax-test' into grsec-test
9973
9974 commit 256aeaf87c22de8edf1f03682a572c590ae07771
9975 Author: Brad Spengler <spender@grsecurity.net>
9976 Date: Sun Feb 7 08:29:09 2016 -0500
9977
9978 Update to pax-linux-4.3.5-test28.patch:
9979 - fixed an integer truncation bug in numa_clear_kernel_node_hotplug caught by the size overflow plugin, reported by x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4374)
9980 - spender fixed UDEREF on arm
9981
9982 arch/arm/Kconfig | 1 +
9983 arch/arm/include/asm/domain.h | 21 ++++++++-
9984 arch/arm/include/asm/futex.h | 9 ----
9985 arch/arm/include/asm/thread_info.h | 3 +
9986 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
9987 arch/arm/kernel/entry-armv.S | 2 +-
9988 arch/arm/kernel/process.c | 2 +-
9989 arch/arm/mm/alignment.c | 8 ----
9990 arch/x86/mm/numa.c | 2 +-
9991 security/Kconfig | 1 -
9992 10 files changed, 60 insertions(+), 70 deletions(-)
9993
9994 commit 438be0bd112bd17942b2628c53054dc1007558a1
9995 Author: Brad Spengler <spender@grsecurity.net>
9996 Date: Sat Feb 6 19:50:31 2016 -0500
9997
9998 Fix a number of issues caused by the upstream merging of a UDEREF ripoff resulting in unbootable
9999 ARM systems reported on the forums
10000
10001 arch/arm/Kconfig | 1 +
10002 arch/arm/include/asm/domain.h | 21 ++++++++-
10003 arch/arm/include/asm/futex.h | 9 ----
10004 arch/arm/include/asm/thread_info.h | 3 +
10005 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
10006 arch/arm/kernel/entry-armv.S | 2 +-
10007 arch/arm/kernel/process.c | 2 +-
10008 arch/arm/mm/alignment.c | 8 ----
10009 security/Kconfig | 1 -
10010 9 files changed, 59 insertions(+), 69 deletions(-)
10011
10012 commit 4ffdd5ef1f87e611af1efb4f251ada92abe9f4c0
10013 Author: Brad Spengler <spender@grsecurity.net>
10014 Date: Sat Feb 6 11:21:53 2016 -0500
10015
10016 Fix another compiler warning
10017
10018 net/ipv4/tcp_input.c | 2 ++
10019 1 files changed, 2 insertions(+), 0 deletions(-)
10020
10021 commit 30b5b7bc0fd67d458bdd5ab35e4689769eabd2ed
10022 Author: Brad Spengler <spender@grsecurity.net>
10023 Date: Sat Feb 6 11:16:12 2016 -0500
10024
10025 Fix two compiler warnings
10026
10027 kernel/pid.c | 5 ++---
10028 kernel/ptrace.c | 3 ++-
10029 2 files changed, 4 insertions(+), 4 deletions(-)
10030
10031 commit dda4d2a21914c480750f10bd55c6e3203d415d8d
10032 Author: Brad Spengler <spender@grsecurity.net>
10033 Date: Wed Feb 3 21:22:40 2016 -0500
10034
10035 Apply fix for integer truncation in NUMA init code, reported by
10036 x14sg1 on the forums:
10037 https://forums.grsecurity.net/viewtopic.php?f=3&t=4374
10038
10039 arch/x86/mm/numa.c | 2 +-
10040 1 files changed, 1 insertions(+), 1 deletions(-)
10041
10042 commit 477505f7c893cb6a2c3e22f83eefd9c985d7b3ca
10043 Merge: a781740 016d0d8
10044 Author: Brad Spengler <spender@grsecurity.net>
10045 Date: Wed Feb 3 21:20:58 2016 -0500
10046
10047 Merge branch 'pax-test' into grsec-test
10048
10049 commit 016d0d81a8dd4be1304c82a68e0ccf425868f467
10050 Author: Brad Spengler <spender@grsecurity.net>
10051 Date: Wed Feb 3 21:20:10 2016 -0500
10052
10053 Update to pax-linux-4.3.5-test27.patch:
10054 - fixed a bunch of potential REFCOUNT false positives, reported by Emese
10055 - restored padding in fpregs_state for storing AVX-512 state in the future
10056 - constified netlink_dump_control
10057 - added const version of debug_gimple_stmt for gcc plugins, by Emese
10058 - Emese fixed a bug in initify that could have initified too much
10059 - Emese fixed a false positive intentional integer overflow in xfrm4_extract_header, reported by corsac
10060
10061 arch/x86/include/asm/fpu/types.h | 1 +
10062 arch/x86/include/asm/mmu_context.h | 2 +-
10063 block/blk-cgroup.c | 18 ++--
10064 block/cfq-iosched.c | 4 +-
10065 crypto/crypto_user.c | 8 ++-
10066 drivers/acpi/apei/ghes.c | 6 +-
10067 drivers/char/ipmi/ipmi_ssif.c | 12 ++--
10068 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
10069 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
10070 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
10071 drivers/infiniband/core/netlink.c | 5 +-
10072 drivers/infiniband/hw/cxgb4/device.c | 6 +-
10073 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
10074 drivers/md/bcache/alloc.c | 2 +-
10075 drivers/md/bcache/bcache.h | 10 +-
10076 drivers/md/bcache/btree.c | 2 +-
10077 drivers/md/bcache/io.c | 10 +-
10078 drivers/md/bcache/journal.c | 2 +-
10079 drivers/md/bcache/stats.c | 26 +++---
10080 drivers/md/bcache/stats.h | 16 ++--
10081 drivers/md/bcache/super.c | 2 +-
10082 drivers/md/bcache/sysfs.c | 20 +++---
10083 drivers/md/dm-cache-target.c | 98 ++++++++++++------------
10084 drivers/md/dm-raid.c | 2 +-
10085 drivers/md/md.c | 6 +-
10086 drivers/md/md.h | 2 +-
10087 drivers/md/raid1.c | 2 +-
10088 drivers/md/raid10.c | 2 +-
10089 drivers/md/raid5.c | 4 +-
10090 drivers/media/pci/zoran/zoran.h | 1 -
10091 drivers/media/pci/zoran/zoran_driver.c | 3 -
10092 drivers/net/ethernet/sfc/selftest.c | 20 +++---
10093 drivers/net/irda/vlsi_ir.c | 18 ++--
10094 drivers/net/irda/vlsi_ir.h | 14 ++--
10095 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
10096 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
10097 drivers/net/wireless/ath/carl9170/main.c | 10 +-
10098 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
10099 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
10100 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
10101 drivers/scsi/hptiop.c | 2 -
10102 drivers/scsi/hptiop.h | 1 -
10103 drivers/scsi/ipr.c | 6 +-
10104 drivers/scsi/ipr.h | 2 +-
10105 drivers/scsi/qla2xxx/qla_target.c | 10 +-
10106 drivers/scsi/qla2xxx/qla_target.h | 2 +-
10107 fs/btrfs/ctree.c | 2 +-
10108 fs/btrfs/ctree.h | 4 +-
10109 fs/btrfs/delayed-ref.c | 4 +-
10110 fs/btrfs/disk-io.c | 4 +-
10111 fs/btrfs/file.c | 4 +-
10112 fs/btrfs/raid56.c | 32 ++++----
10113 fs/btrfs/tests/btrfs-tests.c | 2 +-
10114 fs/btrfs/transaction.c | 2 +-
10115 fs/btrfs/tree-log.c | 8 +-
10116 fs/btrfs/volumes.c | 14 ++--
10117 fs/btrfs/volumes.h | 22 +++---
10118 fs/jbd2/commit.c | 2 +-
10119 fs/jbd2/transaction.c | 4 +-
10120 fs/ocfs2/dlm/dlmcommon.h | 4 +-
10121 fs/ocfs2/dlm/dlmdebug.c | 10 +-
10122 fs/ocfs2/dlm/dlmdomain.c | 4 +-
10123 fs/ocfs2/dlm/dlmmaster.c | 4 +-
10124 include/acpi/ghes.h | 2 +-
10125 include/linux/blk-cgroup.h | 24 +++---
10126 include/linux/jbd2.h | 2 +-
10127 include/linux/netlink.h | 12 ++--
10128 include/net/cfg802154.h | 2 +-
10129 include/net/mac80211.h | 2 +-
10130 include/net/neighbour.h | 2 +-
10131 kernel/rcu/tree_plugin.h | 4 +-
10132 net/batman-adv/routing.c | 4 +-
10133 net/batman-adv/soft-interface.c | 2 +-
10134 net/batman-adv/translation-table.c | 14 ++--
10135 net/batman-adv/types.h | 2 +-
10136 net/core/neighbour.c | 14 ++--
10137 net/core/rtnetlink.c | 2 +-
10138 net/ipv4/arp.c | 2 +-
10139 net/ipv4/inet_diag.c | 4 +-
10140 net/ipv4/xfrm4_state.c | 4 +-
10141 net/ipv6/ndisc.c | 2 +-
10142 net/mac80211/cfg.c | 2 +-
10143 net/mac80211/debugfs_key.c | 2 +-
10144 net/mac80211/key.c | 4 +-
10145 net/mac80211/tx.c | 2 +-
10146 net/mac80211/wpa.c | 10 +-
10147 net/mac802154/iface.c | 4 +-
10148 net/netfilter/ipset/ip_set_core.c | 2 +-
10149 net/netfilter/nf_conntrack_netlink.c | 22 +++---
10150 net/netfilter/nf_tables_api.c | 13 ++--
10151 net/netfilter/nfnetlink_acct.c | 7 +-
10152 net/netfilter/nfnetlink_cthelper.c | 2 +-
10153 net/netfilter/nfnetlink_cttimeout.c | 2 +-
10154 net/netlink/af_netlink.c | 10 ++-
10155 net/netlink/diag.c | 2 +-
10156 net/netlink/genetlink.c | 14 ++--
10157 net/packet/af_packet.c | 18 ++--
10158 net/packet/diag.c | 2 +-
10159 net/packet/internal.h | 6 +-
10160 net/unix/diag.c | 2 +-
10161 net/xfrm/xfrm_user.c | 2 +-
10162 security/apparmor/include/policy.h | 2 +-
10163 security/apparmor/policy.c | 4 +-
10164 sound/core/seq/seq_clientmgr.c | 2 +-
10165 sound/core/seq/seq_fifo.c | 6 +-
10166 sound/core/seq/seq_fifo.h | 2 +-
10167 tools/gcc/gcc-common.h | 24 ++++--
10168 tools/gcc/initify_plugin.c | 7 +-
10169 tools/lib/api/Makefile | 2 +-
10170 109 files changed, 399 insertions(+), 391 deletions(-)
10171
10172 commit a7817402ac837b1aee07fac42537a02097055098
10173 Author: Matt Fleming <matt@codeblueprint.co.uk>
10174 Date: Fri Jan 29 11:36:10 2016 +0000
10175
10176 x86/mm/pat: Avoid truncation when converting cpa->numpages to address
10177
10178 There are a couple of nasty truncation bugs lurking in the pageattr
10179 code that can be triggered when mapping EFI regions, e.g. when we pass
10180 a cpa->pgd pointer. Because cpa->numpages is a 32-bit value, shifting
10181 left by PAGE_SHIFT will truncate the resultant address to 32-bits.
10182
10183 Viorel-Cătălin managed to trigger this bug on his Dell machine that
10184 provides a ~5GB EFI region which requires 1236992 pages to be mapped.
10185 When calling populate_pud() the end of the region gets calculated
10186 incorrectly in the following buggy expression,
10187
10188 end = start + (cpa->numpages << PAGE_SHIFT);
10189
10190 And only 188416 pages are mapped. Next, populate_pud() gets invoked
10191 for a second time because of the loop in __change_page_attr_set_clr(),
10192 only this time no pages get mapped because shifting the remaining
10193 number of pages (1048576) by PAGE_SHIFT is zero. At which point the
10194 loop in __change_page_attr_set_clr() spins forever because we fail to
10195 map progress.
10196
10197 Hitting this bug depends very much on the virtual address we pick to
10198 map the large region at and how many pages we map on the initial run
10199 through the loop. This explains why this issue was only recently hit
10200 with the introduction of commit
10201
10202 a5caa209ba9c ("x86/efi: Fix boot crash by mapping EFI memmap
10203 entries bottom-up at runtime, instead of top-down")
10204
10205 It's interesting to note that safe uses of cpa->numpages do exist in
10206 the pageattr code. If instead of shifting ->numpages we multiply by
10207 PAGE_SIZE, no truncation occurs because PAGE_SIZE is a UL value, and
10208 so the result is unsigned long.
10209
10210 To avoid surprises when users try to convert very large cpa->numpages
10211 values to addresses, change the data type from 'int' to 'unsigned
10212 long', thereby making it suitable for shifting by PAGE_SHIFT without
10213 any type casting.
10214
10215 The alternative would be to make liberal use of casting, but that is
10216 far more likely to cause problems in the future when someone adds more
10217 code and fails to cast properly; this bug was difficult enough to
10218 track down in the first place.
10219
10220 Reported-and-tested-by: Viorel-Cătălin Răpițeanu <rapiteanu.catalin@gmail.com>
10221 Acked-by: Borislav Petkov <bp@alien8.de>
10222 Cc: Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com>
10223 Cc: <stable@vger.kernel.org>
10224 Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
10225 Link: https://bugzilla.kernel.org/show_bug.cgi?id=110131
10226 Link: http://lkml.kernel.org/r/1454067370-10374-1-git-send-email-matt@codeblueprint.co.uk
10227 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
10228
10229 arch/x86/mm/pageattr.c | 4 ++--
10230 1 files changed, 2 insertions(+), 2 deletions(-)
10231
10232 commit 64dd9d7a67a742fda257cdd16510c29e695c34b5
10233 Author: Jan Beulich <JBeulich@suse.com>
10234 Date: Tue Jan 26 04:15:18 2016 -0700
10235
10236 x86/mm: Fix types used in pgprot cacheability flags translations
10237
10238 For PAE kernels "unsigned long" is not suitable to hold page protection
10239 flags, since _PAGE_NX doesn't fit there. This is the reason for quite a
10240 few W+X pages getting reported as insecure during boot (observed namely
10241 for the entire initrd range).
10242
10243 Fixes: 281d4078be ("x86: Make page cache mode a real type")
10244 Signed-off-by: Jan Beulich <jbeulich@suse.com>
10245 Reviewed-by: Juergen Gross <JGross@suse.com>
10246 Cc: stable@vger.kernel.org
10247 Link: http://lkml.kernel.org/r/56A7635602000078000CAFF1@prv-mh.provo.novell.com
10248 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
10249
10250 arch/x86/include/asm/pgtable_types.h | 6 ++----
10251 1 files changed, 2 insertions(+), 4 deletions(-)
10252
10253 commit bb9a3a9df0d8dfc96d521676e64c42b37ba22aea
10254 Merge: 682d661 f74425b
10255 Author: Brad Spengler <spender@grsecurity.net>
10256 Date: Sun Jan 31 15:06:25 2016 -0500
10257
10258 Merge branch 'pax-test' into grsec-test
10259
10260 Conflicts:
10261 drivers/net/slip/slhc.c
10262 include/linux/sched.h
10263 net/unix/af_unix.c
10264 sound/core/timer.c
10265
10266 commit f74425b5705bfe52aff9e97659ef10c4a14176c3
10267 Merge: d14af1f 849a2d3
10268 Author: Brad Spengler <spender@grsecurity.net>
10269 Date: Sun Jan 31 15:02:55 2016 -0500
10270
10271 Merge branch 'linux-4.3.y' into pax-test
10272
10273 Conflicts:
10274 arch/x86/include/asm/mmu_context.h
10275
10276 commit 682d6611d75542e351c973c8dd74a99d3966c073
10277 Author: Brad Spengler <spender@grsecurity.net>
10278 Date: Sat Jan 30 13:05:03 2016 -0500
10279
10280 Based on a report from Mathias Krause, fix up a number of additional instances
10281 of ulong overflow when passing in values to gr_learn_resource by saturating
10282 to ULONG_MAX
10283
10284 mm/mlock.c | 11 ++++++++---
10285 mm/mmap.c | 16 +++++++++++++---
10286 2 files changed, 21 insertions(+), 6 deletions(-)
10287
10288 commit adb52e95fb9ad4ac9c56cd5d47bd668f47c33096
10289 Author: Jann Horn <jann@thejh.net>
10290 Date: Sat Dec 26 06:00:48 2015 +0100
10291
10292 seccomp: always propagate NO_NEW_PRIVS on tsync
10293
10294 Before this patch, a process with some permissive seccomp filter
10295 that was applied by root without NO_NEW_PRIVS was able to add
10296 more filters to itself without setting NO_NEW_PRIVS by setting
10297 the new filter from a throwaway thread with NO_NEW_PRIVS.
10298
10299 Signed-off-by: Jann Horn <jann@thejh.net>
10300 Cc: stable@vger.kernel.org
10301 Signed-off-by: Kees Cook <keescook@chromium.org>
10302
10303 kernel/seccomp.c | 22 +++++++++++-----------
10304 1 files changed, 11 insertions(+), 11 deletions(-)
10305
10306 commit b85450498a3bbf269441c8963d7574bb3079c838
10307 Merge: 59c216f d14af1f
10308 Author: Brad Spengler <spender@grsecurity.net>
10309 Date: Fri Jan 29 20:54:13 2016 -0500
10310
10311 Merge branch 'pax-test' into grsec-test
10312
10313 commit d14af1f1dd66511f3f0674deee2b572972012b39
10314 Author: Brad Spengler <spender@grsecurity.net>
10315 Date: Fri Jan 29 20:53:51 2016 -0500
10316
10317 Update to pax-linux-4.3.4-test26.patch:
10318 - Emese fixed a few intentional overflows introduced by gcc, reported by StalkR (https://forums.grsecurity.net/viewtopic.php?f=3&t=4370)
10319
10320 fs/cifs/file.c | 2 +-
10321 fs/gfs2/file.c | 2 +-
10322 .../size_overflow_plugin/intentional_overflow.c | 96 ++++++++++++++++++--
10323 tools/gcc/size_overflow_plugin/size_overflow.h | 2 +
10324 .../size_overflow_plugin/size_overflow_plugin.c | 4 +-
10325 .../size_overflow_plugin/size_overflow_transform.c | 6 +-
10326 .../size_overflow_transform_core.c | 5 +
10327 7 files changed, 102 insertions(+), 15 deletions(-)
10328
10329 commit 59c216f13587eacdd692386b7a403ae78ed84fb6
10330 Author: Brad Spengler <spender@grsecurity.net>
10331 Date: Wed Jan 27 17:57:21 2016 -0500
10332
10333 Fix a size_overflow report reported by Mathias Krause in our
10334 truncation of an loff_t to an unsigned long when being passed
10335 to gr_learn_resource() (as all resource checks are against unsigned long
10336 values)
10337
10338 fs/attr.c | 5 ++++-
10339 1 files changed, 4 insertions(+), 1 deletions(-)
10340
10341 commit 70636c6ad60fc1db3af764ecc789b827b7497a97
10342 Author: Yuchung Cheng <ycheng@google.com>
10343 Date: Wed Jan 6 12:42:38 2016 -0800
10344
10345 tcp: fix zero cwnd in tcp_cwnd_reduction
10346
10347 Patch 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode
10348 conditionally") introduced a bug that cwnd may become 0 when both
10349 inflight and sndcnt are 0 (cwnd = inflight + sndcnt). This may lead
10350 to a div-by-zero if the connection starts another cwnd reduction
10351 phase by setting tp->prior_cwnd to the current cwnd (0) in
10352 tcp_init_cwnd_reduction().
10353
10354 To prevent this we skip PRR operation when nothing is acked or
10355 sacked. Then cwnd must be positive in all cases as long as ssthresh
10356 is positive:
10357
10358 1) The proportional reduction mode
10359 inflight > ssthresh > 0
10360
10361 2) The reduction bound mode
10362 a) inflight == ssthresh > 0
10363
10364 b) inflight < ssthresh
10365 sndcnt > 0 since newly_acked_sacked > 0 and inflight < ssthresh
10366
10367 Therefore in all cases inflight and sndcnt can not both be 0.
10368 We check invalid tp->prior_cwnd to avoid potential div0 bugs.
10369
10370 In reality this bug is triggered only with a sequence of less common
10371 events. For example, the connection is terminating an ECN-triggered
10372 cwnd reduction with an inflight 0, then it receives reordered/old
10373 ACKs or DSACKs from prior transmission (which acks nothing). Or the
10374 connection is in fast recovery stage that marks everything lost,
10375 but fails to retransmit due to local issues, then receives data
10376 packets from other end which acks nothing.
10377
10378 Fixes: 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode conditionally")
10379 Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name>
10380 Signed-off-by: Yuchung Cheng <ycheng@google.com>
10381 Signed-off-by: Neal Cardwell <ncardwell@google.com>
10382 Signed-off-by: Eric Dumazet <edumazet@google.com>
10383 Signed-off-by: David S. Miller <davem@davemloft.net>
10384
10385 net/ipv4/tcp_input.c | 3 +++
10386 1 files changed, 3 insertions(+), 0 deletions(-)
10387
10388 commit dac1da2bedbb43195d371c7a192cfeeb45683df0
10389 Author: Eric Dumazet <edumazet@google.com>
10390 Date: Sun Jan 24 13:53:50 2016 -0800
10391
10392 af_unix: fix struct pid memory leak
10393
10394 Dmitry reported a struct pid leak detected by a syzkaller program.
10395
10396 Bug happens in unix_stream_recvmsg() when we break the loop when a
10397 signal is pending, without properly releasing scm.
10398
10399 Fixes: b3ca9b02b007 ("net: fix multithreaded signal handling in unix recv routines")
10400 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10401 Signed-off-by: Eric Dumazet <edumazet@google.com>
10402 Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com>
10403 Signed-off-by: David S. Miller <davem@davemloft.net>
10404
10405 net/unix/af_unix.c | 1 +
10406 1 files changed, 1 insertions(+), 0 deletions(-)
10407
10408 commit 15cc47f127520d1ac0c1fe76d993c2c27f0f2571
10409 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
10410 Date: Fri Jan 22 01:39:43 2016 +0100
10411
10412 pptp: fix illegal memory access caused by multiple bind()s
10413
10414 Several times already this has been reported as kasan reports caused by
10415 syzkaller and trinity and people always looked at RCU races, but it is
10416 much more simple. :)
10417
10418 In case we bind a pptp socket multiple times, we simply add it to
10419 the callid_sock list but don't remove the old binding. Thus the old
10420 socket stays in the bucket with unused call_id indexes and doesn't get
10421 cleaned up. This causes various forms of kasan reports which were hard
10422 to pinpoint.
10423
10424 Simply don't allow multiple binds and correct error handling in
10425 pptp_bind. Also keep sk_state bits in place in pptp_connect.
10426
10427 Fixes: 00959ade36acad ("PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)")
10428 Cc: Dmitry Kozlov <xeb@mail.ru>
10429 Cc: Sasha Levin <sasha.levin@oracle.com>
10430 Cc: Dmitry Vyukov <dvyukov@google.com>
10431 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10432 Cc: Dave Jones <davej@codemonkey.org.uk>
10433 Reported-by: Dave Jones <davej@codemonkey.org.uk>
10434 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
10435 Signed-off-by: David S. Miller <davem@davemloft.net>
10436
10437 drivers/net/ppp/pptp.c | 34 ++++++++++++++++++++++++----------
10438 1 files changed, 24 insertions(+), 10 deletions(-)
10439
10440 commit e2b7b8c66851c85188fa6dab2d2b2a6c85bc7332
10441 Author: Brad Spengler <spender@grsecurity.net>
10442 Date: Tue Jan 26 18:17:10 2016 -0500
10443
10444 Add info about cpupower/powertop to GRKERNSEC_KMEM, was present on our
10445 wiki but was removed from the config help at some point
10446
10447 grsecurity/Kconfig | 3 +++
10448 1 files changed, 3 insertions(+), 0 deletions(-)
10449
10450 commit ce2e88efa000fc32bfcd84098f57c8ed8310fefc
10451 Author: Thomas Egerer <hakke_007@gmx.de>
10452 Date: Mon Jan 25 12:58:44 2016 +0100
10453
10454 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV
10455
10456 The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
10457 to select CRYPTO_ECHAINIV in order to work properly. This solves the
10458 issues caused by a misconfiguration as described in [1].
10459 The original approach, patching crypto/Kconfig was turned down by
10460 Herbert Xu [2].
10461
10462 [1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
10463 [2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2
10464
10465 Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
10466 Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
10467 Signed-off-by: David S. Miller <davem@davemloft.net>
10468
10469 net/ipv4/Kconfig | 1 +
10470 net/ipv6/Kconfig | 1 +
10471 2 files changed, 2 insertions(+), 0 deletions(-)
10472
10473 commit fca5a303155ea67d28aece0caf2b03ffc3b2668d
10474 Merge: 904114c 6339c1f
10475 Author: Brad Spengler <spender@grsecurity.net>
10476 Date: Tue Jan 26 18:08:40 2016 -0500
10477
10478 Merge branch 'pax-test' into grsec-test
10479
10480 commit 6339c1f9a9beafd417bf9f04d4b257e62aeb45b7
10481 Author: Brad Spengler <spender@grsecurity.net>
10482 Date: Tue Jan 26 18:07:51 2016 -0500
10483
10484 Update to pax-linux-4.3.4-test25.patch:
10485 - fixed incorrect handling of VM_DONTCOPY during fork that would trigger a consistency check in the vma mirroring logic, reported by Mathias Krause <minipli@googlemail.com>
10486 - fixed init_new_context on !MODIFY_LDT_SYSCALL configs, reported by tjh (https://forums.grsecurity.net/viewtopic.php?f=3&t=4368)
10487 - fixed a few REFCOUNT false positives in SNMP related statistics
10488
10489 arch/x86/Kconfig | 2 +-
10490 arch/x86/include/asm/mmu_context.h | 17 +++++++++++++++++
10491 include/net/snmp.h | 10 +++++-----
10492 kernel/fork.c | 11 +++++++++--
10493 net/ipv4/proc.c | 8 ++++----
10494 net/ipv6/addrconf.c | 4 ++--
10495 net/ipv6/proc.c | 10 +++++-----
10496 7 files changed, 43 insertions(+), 19 deletions(-)
10497
10498 commit 904114c2fce3fdff5d57e763da56a78960db4e19
10499 Author: Al Viro <viro@zeniv.linux.org.uk>
10500 Date: Fri Jan 22 18:08:52 2016 -0500
10501
10502 make sure that freeing shmem fast symlinks is RCU-delayed
10503
10504 Cc: stable@vger.kernel.org # v4.2+
10505 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10506
10507 include/linux/shmem_fs.h | 5 +----
10508 mm/shmem.c | 9 ++++-----
10509 2 files changed, 5 insertions(+), 9 deletions(-)
10510
10511 commit ab86adee64312a2f827dd516cb199521327943ed
10512 Author: Sasha Levin <sasha.levin@oracle.com>
10513 Date: Mon Jan 18 19:23:51 2016 -0500
10514
10515 netfilter: nf_conntrack: use safer way to lock all buckets
10516
10517 When we need to lock all buckets in the connection hashtable we'd attempt to
10518 lock 1024 spinlocks, which is way more preemption levels than supported by
10519 the kernel. Furthermore, this behavior was hidden by checking if lockdep is
10520 enabled, and if it was - use only 8 buckets(!).
10521
10522 Fix this by using a global lock and synchronize all buckets on it when we
10523 need to lock them all. This is pretty heavyweight, but is only done when we
10524 need to resize the hashtable, and that doesn't happen often enough (or at all).
10525
10526 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
10527 Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
10528 Reviewed-by: Florian Westphal <fw@strlen.de>
10529 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
10530
10531 Conflicts:
10532
10533 net/netfilter/nfnetlink_cttimeout.c
10534
10535 include/net/netfilter/nf_conntrack_core.h | 8 ++----
10536 net/netfilter/nf_conntrack_core.c | 38 +++++++++++++++++++++-------
10537 net/netfilter/nf_conntrack_helper.c | 2 +-
10538 net/netfilter/nf_conntrack_netlink.c | 2 +-
10539 4 files changed, 33 insertions(+), 17 deletions(-)
10540
10541 commit 37014723527225481c720484bb788a1a6358072f
10542 Author: Willy Tarreau <w@1wt.eu>
10543 Date: Mon Jan 18 16:36:09 2016 +0100
10544
10545 pipe: limit the per-user amount of pages allocated in pipes
10546
10547 On no-so-small systems, it is possible for a single process to cause an
10548 OOM condition by filling large pipes with data that are never read. A
10549 typical process filling 4000 pipes with 1 MB of data will use 4 GB of
10550 memory. On small systems it may be tricky to set the pipe max size to
10551 prevent this from happening.
10552
10553 This patch makes it possible to enforce a per-user soft limit above
10554 which new pipes will be limited to a single page, effectively limiting
10555 them to 4 kB each, as well as a hard limit above which no new pipes may
10556 be created for this user. This has the effect of protecting the system
10557 against memory abuse without hurting other users, and still allowing
10558 pipes to work correctly though with less data at once.
10559
10560 The limit are controlled by two new sysctls : pipe-user-pages-soft, and
10561 pipe-user-pages-hard. Both may be disabled by setting them to zero. The
10562 default soft limit allows the default number of FDs per process (1024)
10563 to create pipes of the default size (64kB), thus reaching a limit of 64MB
10564 before starting to create only smaller pipes. With 256 processes limited
10565 to 1024 FDs each, this results in 1024*64kB + (256*1024 - 1024) * 4kB =
10566 1084 MB of memory allocated for a user. The hard limit is disabled by
10567 default to avoid breaking existing applications that make intensive use
10568 of pipes (eg: for splicing).
10569
10570 Reported-by: socketpair@gmail.com
10571 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
10572 Mitigates: CVE-2013-4312 (Linux 2.0+)
10573 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
10574 Signed-off-by: Willy Tarreau <w@1wt.eu>
10575 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10576
10577 Documentation/sysctl/fs.txt | 23 +++++++++++++++++++++
10578 fs/pipe.c | 47 +++++++++++++++++++++++++++++++++++++++++-
10579 include/linux/pipe_fs_i.h | 4 +++
10580 include/linux/sched.h | 1 +
10581 kernel/sysctl.c | 14 ++++++++++++
10582 5 files changed, 87 insertions(+), 2 deletions(-)
10583
10584 commit 51645fa198d194f746651dcfbc5f24a4cf8b9fb8
10585 Merge: 540f2af 7791ecb
10586 Author: Brad Spengler <spender@grsecurity.net>
10587 Date: Sat Jan 23 10:57:11 2016 -0500
10588
10589 Merge branch 'pax-test' into grsec-test
10590
10591 commit 7791ecb84f840343a5646236fd0d34e1fb450793
10592 Merge: 470069c 399588c
10593 Author: Brad Spengler <spender@grsecurity.net>
10594 Date: Sat Jan 23 10:56:47 2016 -0500
10595
10596 Merge branch 'linux-4.3.y' into pax-test
10597
10598 commit 540f2affebd42cdc26a699208ab4f1cb0cb75e33
10599 Author: Brad Spengler <spender@grsecurity.net>
10600 Date: Tue Jan 19 21:18:47 2016 -0500
10601
10602 Update size_overflow hash table
10603
10604 .../size_overflow_plugin/size_overflow_hash.data | 4 +++-
10605 1 files changed, 3 insertions(+), 1 deletions(-)
10606
10607 commit 7e649765626a28437f573f0fbe7a51a04615f041
10608 Author: Brad Spengler <spender@grsecurity.net>
10609 Date: Tue Jan 19 20:29:46 2016 -0500
10610
10611 Backport fix from: https://lkml.org/lkml/2015/12/13/187
10612
10613 fs/ext4/extents.c | 2 +-
10614 1 files changed, 1 insertions(+), 1 deletions(-)
10615
10616 commit 53b859cd0a5f5b6ad54fe0c879dfedaa3c5a3005
10617 Author: Jann Horn <jann@thejh.net>
10618 Date: Tue Jan 5 18:27:30 2016 +0100
10619
10620 compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)
10621
10622 This replaces all code in fs/compat_ioctl.c that translated
10623 ioctl arguments into a in-kernel structure, then performed
10624 do_ioctl under set_fs(KERNEL_DS), with code that allocates
10625 data on the user stack and can call the VFS ioctl handler
10626 under USER_DS.
10627
10628 This is done as a hardening measure because the caller
10629 does not know what kind of ioctl handler will be invoked,
10630 only that no corresponding compat_ioctl handler exists and
10631 what the ioctl command number is. The accidental
10632 invocation of an unlocked_ioctl handler that unexpectedly
10633 calls copy_to_user could be a severe security issue.
10634
10635 Signed-off-by: Jann Horn <jann@thejh.net>
10636 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10637
10638 Conflicts:
10639
10640 fs/compat_ioctl.c
10641
10642 fs/compat_ioctl.c | 130 ++++++++++++++++++++++++++++-------------------------
10643 1 files changed, 68 insertions(+), 62 deletions(-)
10644
10645 commit 3e89e770ae27e931cd1583f021abac41eeebc3e7
10646 Author: Al Viro <viro@zeniv.linux.org.uk>
10647 Date: Thu Jan 7 09:53:30 2016 -0500
10648
10649 compat_ioctl: don't pass fd around when not needed
10650
10651 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10652
10653 fs/compat_ioctl.c | 103 ++++++++++++++++++++++++++--------------------------
10654 fs/internal.h | 7 ++++
10655 fs/ioctl.c | 4 +-
10656 include/linux/fs.h | 2 -
10657 4 files changed, 61 insertions(+), 55 deletions(-)
10658
10659 commit 9d4e04082752d4d2d68445c4e6faf33a2613df55
10660 Author: Jann Horn <jann@thejh.net>
10661 Date: Tue Jan 5 18:27:29 2016 +0100
10662
10663 compat_ioctl: don't look up the fd twice
10664
10665 In code in fs/compat_ioctl.c that translates ioctl arguments
10666 into a in-kernel structure, then performs sys_ioctl, possibly
10667 under set_fs(KERNEL_DS), this commit changes the sys_ioctl
10668 calls to do_ioctl calls. do_ioctl is a new function that does
10669 the same thing as sys_ioctl, but doesn't look up the fd again.
10670
10671 This change is made to avoid (potential) security issues
10672 because of ioctl handlers that accept one of the ioctl
10673 commands I2C_FUNCS, VIDEO_GET_EVENT, MTIOCPOS, MTIOCGET,
10674 TIOCGSERIAL, TIOCSSERIAL, RTC_IRQP_READ, RTC_EPOCH_READ.
10675 This can happen for multiple reasons:
10676
10677 - The ioctl command number could be reused.
10678 - The ioctl handler might not check the full ioctl
10679 command. This is e.g. true for drm_ioctl.
10680 - The ioctl handler is very special, e.g. cuse_file_ioctl
10681
10682 The real issue is that set_fs(KERNEL_DS) is used here,
10683 but that's fixed in a separate commit
10684 "compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)".
10685
10686 This change mitigates potential security issues by
10687 preventing a race that permits invocation of
10688 unlocked_ioctl handlers under KERNEL_DS through compat
10689 code even if a corresponding compat_ioctl handler exists.
10690
10691 So far, no way has been identified to use this to damage
10692 kernel memory without having CAP_SYS_ADMIN in the init ns
10693 (with the capability, doing reads/writes at arbitrary
10694 kernel addresses should be easy through CUSE's ioctl
10695 handler with FUSE_IOCTL_UNRESTRICTED set).
10696
10697 [AV: two missed sys_ioctl() taken care of]
10698
10699 Signed-off-by: Jann Horn <jann@thejh.net>
10700 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10701
10702 fs/compat_ioctl.c | 122 +++++++++++++++++++++++++++++-----------------------
10703 1 files changed, 68 insertions(+), 54 deletions(-)
10704
10705 commit 5bf9e1ed4ebb278cd956ba142914fc04a024309c
10706 Author: Vasily Kulikov <segoon@openwall.com>
10707 Date: Fri Jan 15 16:57:55 2016 -0800
10708
10709 include/linux/poison.h: use POISON_POINTER_DELTA for poison pointers
10710
10711 TIMER_ENTRY_STATIC is defined as a poison pointers which
10712 should point to nowhere. Redefine them using POISON_POINTER_DELTA
10713 arithmetics to make sure they really point to non-mappable area declared
10714 by the target architecture.
10715
10716 Signed-off-by: Vasily Kulikov <segoon@openwall.com>
10717 Acked-by: Thomas Gleixner <tglx@linutronix.de>
10718 Cc: Solar Designer <solar@openwall.com>
10719 Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
10720 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
10721 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
10722
10723 Conflicts:
10724
10725 include/linux/poison.h
10726
10727 include/linux/poison.h | 2 +-
10728 1 files changed, 1 insertions(+), 1 deletions(-)
10729
10730 commit 60f2e0a05ab8f56c804a9334a23e2b446305d110
10731 Author: Brad Spengler <spender@grsecurity.net>
10732 Date: Tue Jan 19 19:41:44 2016 -0500
10733
10734 Fix ARM compilation, reported by Austin Sepp
10735
10736 grsecurity/grsec_sig.c | 1 +
10737 1 files changed, 1 insertions(+), 0 deletions(-)
10738
10739 commit e15383743443dc43460a2fd73e0db0b608610dca
10740 Author: Takashi Iwai <tiwai@suse.de>
10741 Date: Mon Jan 18 13:52:47 2016 +0100
10742
10743 ALSA: hrtimer: Fix stall by hrtimer_cancel()
10744
10745 hrtimer_cancel() waits for the completion from the callback, thus it
10746 must not be called inside the callback itself. This was already a
10747 problem in the past with ALSA hrtimer driver, and the early commit
10748 [fcfdebe70759: ALSA: hrtimer - Fix lock-up] tried to address it.
10749
10750 However, the previous fix is still insufficient: it may still cause a
10751 lockup when the ALSA timer instance reprograms itself in its callback.
10752 Then it invokes the start function even in snd_timer_interrupt() that
10753 is called in hrtimer callback itself, results in a CPU stall. This is
10754 no hypothetical problem but actually triggered by syzkaller fuzzer.
10755
10756 This patch tries to fix the issue again. Now we call
10757 hrtimer_try_to_cancel() at both start and stop functions so that it
10758 won't fall into a deadlock, yet giving some chance to cancel the queue
10759 if the functions have been called outside the callback. The proper
10760 hrtimer_cancel() is called in anyway at closing, so this should be
10761 enough.
10762
10763 Reported-and-tested-by: Dmitry Vyukov <dvyukov@google.com>
10764 Cc: <stable@vger.kernel.org>
10765 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10766
10767 sound/core/hrtimer.c | 3 ++-
10768 1 files changed, 2 insertions(+), 1 deletions(-)
10769
10770 commit 12d874daf706e6e7c1ae709141859c809599297e
10771 Author: Takashi Iwai <tiwai@suse.de>
10772 Date: Tue Jan 12 12:38:02 2016 +0100
10773
10774 ALSA: seq: Fix missing NULL check at remove_events ioctl
10775
10776 snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear()
10777 unconditionally even if there is no FIFO assigned, and this leads to
10778 an Oops due to NULL dereference. The fix is just to add a proper NULL
10779 check.
10780
10781 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10782 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10783 Cc: <stable@vger.kernel.org>
10784 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10785
10786 sound/core/seq/seq_clientmgr.c | 2 +-
10787 1 files changed, 1 insertions(+), 1 deletions(-)
10788
10789 commit 2eb0632df1351378946507e7ef7ba0682632a7b5
10790 Author: Takashi Iwai <tiwai@suse.de>
10791 Date: Tue Jan 12 15:36:27 2016 +0100
10792
10793 ALSA: seq: Fix race at timer setup and close
10794
10795 ALSA sequencer code has an open race between the timer setup ioctl and
10796 the close of the client. This was triggered by syzkaller fuzzer, and
10797 a use-after-free was caught there as a result.
10798
10799 This patch papers over it by adding a proper queue->timer_mutex lock
10800 around the timer-related calls in the relevant code path.
10801
10802 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10803 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10804 Cc: <stable@vger.kernel.org>
10805 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10806
10807 sound/core/seq/seq_queue.c | 2 ++
10808 1 files changed, 2 insertions(+), 0 deletions(-)
10809
10810 commit b9e55ab955e59b4a636d78a748be90334a48b485
10811 Author: Takashi Iwai <tiwai@suse.de>
10812 Date: Thu Jan 14 16:30:58 2016 +0100
10813
10814 ALSA: timer: Harden slave timer list handling
10815
10816 A slave timer instance might be still accessible in a racy way while
10817 operating the master instance as it lacks of locking. Since the
10818 master operation is mostly protected with timer->lock, we should cope
10819 with it while changing the slave instance, too. Also, some linked
10820 lists (active_list and ack_list) of slave instances aren't unlinked
10821 immediately at stopping or closing, and this may lead to unexpected
10822 accesses.
10823
10824 This patch tries to address these issues. It adds spin lock of
10825 timer->lock (either from master or slave, which is equivalent) in a
10826 few places. For avoiding a deadlock, we ensure that the global
10827 slave_active_lock is always locked at first before each timer lock.
10828
10829 Also, ack and active_list of slave instances are properly unlinked at
10830 snd_timer_stop() and snd_timer_close().
10831
10832 Last but not least, remove the superfluous call of _snd_timer_stop()
10833 at removing slave links. This is a noop, and calling it may confuse
10834 readers wrt locking. Further cleanup will follow in a later patch.
10835
10836 Actually we've got reports of use-after-free by syzkaller fuzzer, and
10837 this hopefully fixes these issues.
10838
10839 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10840 Cc: <stable@vger.kernel.org>
10841 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10842
10843 sound/core/timer.c | 18 ++++++++++++++----
10844 1 files changed, 14 insertions(+), 4 deletions(-)
10845
10846 commit f1ce0547bdfda1b42ae8a66c222f2a897cbe1586
10847 Author: Takashi Iwai <tiwai@suse.de>
10848 Date: Wed Jan 13 17:48:01 2016 +0100
10849
10850 ALSA: timer: Fix race among timer ioctls
10851
10852 ALSA timer ioctls have an open race and this may lead to a
10853 use-after-free of timer instance object. A simplistic fix is to make
10854 each ioctl exclusive. We have already tread_sem for controlling the
10855 tread, and extend this as a global mutex to be applied to each ioctl.
10856
10857 The downside is, of course, the worse concurrency. But these ioctls
10858 aren't to be parallel accessible, in anyway, so it should be fine to
10859 serialize there.
10860
10861 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10862 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10863 Cc: <stable@vger.kernel.org>
10864 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10865
10866 sound/core/timer.c | 32 +++++++++++++++++++-------------
10867 1 files changed, 19 insertions(+), 13 deletions(-)
10868
10869 commit 8347d8461ed48a98f9c76cc3cfcdad8217d314bc
10870 Author: Takashi Iwai <tiwai@suse.de>
10871 Date: Wed Jan 13 21:35:06 2016 +0100
10872
10873 ALSA: timer: Fix double unlink of active_list
10874
10875 ALSA timer instance object has a couple of linked lists and they are
10876 unlinked unconditionally at snd_timer_stop(). Meanwhile
10877 snd_timer_interrupt() unlinks it, but it calls list_del() which leaves
10878 the element list itself unchanged. This ends up with unlinking twice,
10879 and it was caught by syzkaller fuzzer.
10880
10881 The fix is to use list_del_init() variant properly there, too.
10882
10883 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10884 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10885 Cc: <stable@vger.kernel.org>
10886 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10887
10888 sound/core/timer.c | 2 +-
10889 1 files changed, 1 insertions(+), 1 deletions(-)
10890
10891 commit 243aebb7ae71d6e11ea9880faa893d1d0d60cd75
10892 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
10893 Date: Mon Jan 18 18:03:48 2016 +0100
10894
10895 ovs: limit ovs recursions in ovs_execute_actions to not corrupt stack
10896
10897 It was seen that defective configurations of openvswitch could overwrite
10898 the STACK_END_MAGIC and cause a hard crash of the kernel because of too
10899 many recursions within ovs.
10900
10901 This problem arises due to the high stack usage of openvswitch. The rest
10902 of the kernel is fine with the current limit of 10 (RECURSION_LIMIT).
10903
10904 We use the already existing recursion counter in ovs_execute_actions to
10905 implement an upper bound of 5 recursions.
10906
10907 Cc: Pravin Shelar <pshelar@ovn.org>
10908 Cc: Simon Horman <simon.horman@netronome.com>
10909 Cc: Eric Dumazet <eric.dumazet@gmail.com>
10910 Cc: Simon Horman <simon.horman@netronome.com>
10911 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
10912 Signed-off-by: David S. Miller <davem@davemloft.net>
10913
10914 net/openvswitch/actions.c | 19 ++++++++++++++-----
10915 1 files changed, 14 insertions(+), 5 deletions(-)
10916
10917 commit 8080793479c6d5befe37a67b1dbd9e4e0a61af96
10918 Author: Ursula Braun <ursula.braun@de.ibm.com>
10919 Date: Tue Jan 19 10:41:33 2016 +0100
10920
10921 af_iucv: Validate socket address length in iucv_sock_bind()
10922
10923 Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
10924 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10925 Reviewed-by: Evgeny Cherkashin <Eugene.Crosser@ru.ibm.com>
10926 Signed-off-by: David S. Miller <davem@davemloft.net>
10927
10928 net/iucv/af_iucv.c | 3 +++
10929 1 files changed, 3 insertions(+), 0 deletions(-)
10930
10931 commit 50a383c1c91ed7409c3cbdd41e662d6891463d1b
10932 Author: Brad Spengler <spender@grsecurity.net>
10933 Date: Tue Jan 19 19:32:54 2016 -0500
10934
10935 Apply the same fix as everyone else for the recent keys vulnerability that is
10936 unexploitable under PAX_REFCOUNT
10937
10938 Make a couple more changes that no one else can/will
10939
10940 include/linux/key-type.h | 4 ++--
10941 ipc/msgutil.c | 4 ++--
10942 security/keys/internal.h | 2 +-
10943 security/keys/process_keys.c | 1 +
10944 4 files changed, 6 insertions(+), 5 deletions(-)
10945
10946 commit b56c3a63f431c193400aee17543021950bd14bc4
10947 Merge: 38b1a3d 470069c
10948 Author: Brad Spengler <spender@grsecurity.net>
10949 Date: Sun Jan 17 18:30:19 2016 -0500
10950
10951 Merge branch 'pax-test' into grsec-test
10952
10953 commit 470069cfedef2180313233d275be5901bd6d1135
10954 Author: Brad Spengler <spender@grsecurity.net>
10955 Date: Sun Jan 17 18:29:59 2016 -0500
10956
10957 Update to pax-linux-4.3.3-test22.patch:
10958 - Emesed fixed a gcc induced intentional integer overflow in asix_rx_fixup_internal, reported by thomas callison caffrey
10959 - fixed some more fallout from the drm_drivers constification, reported by Colin Childs and Toralf Foerster
10960
10961 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++++----------
10962 drivers/gpu/drm/drm_pci.c | 3 +++
10963 drivers/gpu/drm/gma500/psb_drv.c | 4 ----
10964 drivers/gpu/drm/i915/i915_drv.c | 16 ++++++++--------
10965 drivers/gpu/drm/nouveau/nouveau_drm.c | 6 +++---
10966 drivers/gpu/drm/radeon/radeon_drv.c | 4 +---
10967 drivers/net/usb/asix_common.c | 3 ++-
10968 include/drm/drmP.h | 1 +
10969 8 files changed, 22 insertions(+), 29 deletions(-)
10970
10971 commit 38b1a3d676f407865c3d41840df8213c5ad639c1
10972 Author: Brad Spengler <spender@grsecurity.net>
10973 Date: Sun Jan 17 12:33:53 2016 -0500
10974
10975 As reported by Luis Ressel, the Kconfig help for GRKERNSEC_BRUTE
10976 mentioned banning execution of suid/sgid binaries, though the kernel
10977 source clearly only mentions banning execution of suid binaries. Since
10978 there's no reason for us to not ban execution of sgid binaries as well,
10979 make the implementation match the Kconfig description.
10980
10981 fs/exec.c | 4 ++--
10982 grsecurity/grsec_sig.c | 27 ++++++++++++++-------------
10983 include/linux/sched.h | 4 ++--
10984 3 files changed, 18 insertions(+), 17 deletions(-)
10985
10986 commit 8c3bcb7dbf7f606acfa0983e81f0f928da1f1ace
10987 Merge: d141a86 ea4a835
10988 Author: Brad Spengler <spender@grsecurity.net>
10989 Date: Sat Jan 16 14:12:22 2016 -0500
10990
10991 Merge branch 'pax-test' into grsec-test
10992
10993 Conflicts:
10994 drivers/gpu/drm/i810/i810_drv.c
10995
10996 commit ea4a835328ada6513ac013986764d6caea8cd348
10997 Author: Brad Spengler <spender@grsecurity.net>
10998 Date: Sat Jan 16 14:11:30 2016 -0500
10999
11000 Update to pax-linux-4.3.3-test21.patch:
11001 - fixed some fallout from the drm_drivers constification, reported by spender
11002
11003 drivers/gpu/drm/armada/armada_drv.c | 3 +--
11004 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
11005 drivers/gpu/drm/i810/i810_dma.c | 2 +-
11006 drivers/gpu/drm/i810/i810_drv.c | 6 +++++-
11007 drivers/gpu/drm/i810/i810_drv.h | 2 +-
11008 5 files changed, 8 insertions(+), 6 deletions(-)
11009
11010 commit d141a86fd66194bc3f896b6809b189e2f12a9a83
11011 Author: Brad Spengler <spender@grsecurity.net>
11012 Date: Sat Jan 16 13:16:36 2016 -0500
11013
11014 compile fix
11015
11016 drivers/gpu/drm/i810/i810_dma.c | 2 +-
11017 drivers/gpu/drm/i810/i810_drv.c | 4 +++-
11018 drivers/gpu/drm/i810/i810_drv.h | 2 +-
11019 3 files changed, 5 insertions(+), 3 deletions(-)
11020
11021 commit 0d9dc4b25ea32c14561bcfe6b5b24f1b00fe0270
11022 Merge: 5fa135d bbda879
11023 Author: Brad Spengler <spender@grsecurity.net>
11024 Date: Sat Jan 16 12:59:22 2016 -0500
11025
11026 Merge branch 'pax-test' into grsec-test
11027
11028 commit bbda87914edf63e27fb46670bf3a373f2b963c73
11029 Author: Brad Spengler <spender@grsecurity.net>
11030 Date: Sat Jan 16 12:58:04 2016 -0500
11031
11032 Update to pax-linux-4.3.3-test20.patch:
11033 - constified drm_driver
11034 - Emese fixed a special case in handling __func__ in the initify plugin
11035 - Emese fixed a false positive size overflow report in handling inbufBits, reported by Martin Filo (https://bugs.gentoo.org/show_bug.cgi?id=567048)
11036 - fixed regression that caused perf to not resolve kernel code addresses under KERNEXEC/i386, reported by minipli
11037
11038 arch/x86/kernel/cpu/perf_event.h | 2 +-
11039 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
11040 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
11041 arch/x86/kernel/uprobes.c | 2 +-
11042 arch/x86/mm/mpx.c | 2 +-
11043 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
11044 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 ++-
11045 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
11046 drivers/gpu/drm/drm_pci.c | 6 +-
11047 drivers/gpu/drm/gma500/psb_drv.c | 5 +-
11048 drivers/gpu/drm/i915/i915_dma.c | 2 +-
11049 drivers/gpu/drm/i915/i915_drv.c | 15 ++--
11050 drivers/gpu/drm/i915/i915_drv.h | 2 +-
11051 drivers/gpu/drm/i915/i915_irq.c | 88 ++++++++++----------
11052 drivers/gpu/drm/mga/mga_drv.c | 5 +-
11053 drivers/gpu/drm/mga/mga_drv.h | 2 +-
11054 drivers/gpu/drm/mga/mga_state.c | 2 +-
11055 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 ++--
11056 drivers/gpu/drm/qxl/qxl_drv.c | 8 ++-
11057 drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +-
11058 drivers/gpu/drm/r128/r128_drv.c | 4 +-
11059 drivers/gpu/drm/r128/r128_drv.h | 2 +-
11060 drivers/gpu/drm/r128/r128_state.c | 2 +-
11061 drivers/gpu/drm/radeon/radeon_drv.c | 17 +++-
11062 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
11063 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
11064 drivers/gpu/drm/radeon/radeon_state.c | 2 +-
11065 drivers/gpu/drm/savage/savage_bci.c | 2 +-
11066 drivers/gpu/drm/savage/savage_drv.c | 5 +-
11067 drivers/gpu/drm/savage/savage_drv.h | 2 +-
11068 drivers/gpu/drm/sis/sis_drv.c | 5 +-
11069 drivers/gpu/drm/sis/sis_drv.h | 2 +-
11070 drivers/gpu/drm/sis/sis_mm.c | 2 +-
11071 drivers/gpu/drm/via/via_dma.c | 2 +-
11072 drivers/gpu/drm/via/via_drv.c | 5 +-
11073 drivers/gpu/drm/via/via_drv.h | 2 +-
11074 include/drm/drmP.h | 2 +-
11075 mm/slab.c | 2 +-
11076 net/sunrpc/xprtrdma/svc_rdma.c | 6 +-
11077 tools/gcc/initify_plugin.c | 15 +++-
11078 .../disable_size_overflow_hash.data | 1 +
11079 .../size_overflow_plugin/size_overflow_hash.data | 3 +-
11080 42 files changed, 156 insertions(+), 110 deletions(-)
11081
11082 commit 5fa135dc116350e0205c39ef65eaf6496ed2748a
11083 Author: Brad Spengler <spender@grsecurity.net>
11084 Date: Sat Jan 16 12:19:23 2016 -0500
11085
11086 compile fix
11087
11088 grsecurity/grsec_sig.c | 3 +--
11089 1 files changed, 1 insertions(+), 2 deletions(-)
11090
11091 commit a9090fa58f33f75c7450fda5721a9b13625a47d9
11092 Author: Brad Spengler <spender@grsecurity.net>
11093 Date: Sat Jan 16 12:10:37 2016 -0500
11094
11095 As pointed out by Jann Horn, some distros are starting to circumvent
11096 previous assumptions about the attainability of a user to control
11097 multiple UIDs by handing out suid binaries that allow a user to run
11098 processes (including exploits) under a number of other pre-defined
11099 UIDs. As this could potentially be used to bypass GRKERNSEC_BRUTE
11100 (though it would have to involve some code path that doesn't involve
11101 locks) fix that here by ensuring no more than 8 users on a system can
11102 be banned before a reboot is required. If more are banned, a panic
11103 is triggered.
11104
11105 grsecurity/grsec_sig.c | 8 ++++++++
11106 1 files changed, 8 insertions(+), 0 deletions(-)
11107
11108 commit a8d37776e9521c567ebff6730d49312f72435f08
11109 Author: Eric Dumazet <edumazet@google.com>
11110 Date: Thu Dec 3 11:12:07 2015 -0800
11111
11112 proc: add a reschedule point in proc_readfd_common()
11113
11114 User can pass an arbitrary large buffer to getdents().
11115
11116 It is typically a 32KB buffer used by libc scandir() implementation.
11117
11118 When scanning /proc/{pid}/fd, we can hold cpu way too long,
11119 so add a cond_resched() to be kind with other tasks.
11120
11121 We've seen latencies of more than 50ms on real workloads.
11122
11123 Signed-off-by: Eric Dumazet <edumazet@google.com>
11124 Cc: Alexander Viro <viro@zeniv.linux.org.uk>
11125 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
11126
11127 fs/proc/fd.c | 1 +
11128 1 files changed, 1 insertions(+), 0 deletions(-)
11129
11130 commit 0adba75f8708f13b1f5d98ebe3fc2fb961e100c8
11131 Author: Rabin Vincent <rabin@rab.in>
11132 Date: Tue Jan 12 20:17:08 2016 +0100
11133
11134 net: bpf: reject invalid shifts
11135
11136 On ARM64, a BUG() is triggered in the eBPF JIT if a filter with a
11137 constant shift that can't be encoded in the immediate field of the
11138 UBFM/SBFM instructions is passed to the JIT. Since these shifts
11139 amounts, which are negative or >= regsize, are invalid, reject them in
11140 the eBPF verifier and the classic BPF filter checker, for all
11141 architectures.
11142
11143 Signed-off-by: Rabin Vincent <rabin@rab.in>
11144 Acked-by: Alexei Starovoitov <ast@kernel.org>
11145 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
11146 Signed-off-by: David S. Miller <davem@davemloft.net>
11147
11148 kernel/bpf/verifier.c | 10 ++++++++++
11149 net/core/filter.c | 5 +++++
11150 2 files changed, 15 insertions(+), 0 deletions(-)
11151
11152 commit c248e115a73496625a1c64660d0eeefd67e55cbf
11153 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
11154 Date: Fri Jan 8 11:00:54 2016 -0200
11155
11156 sctp: fix use-after-free in pr_debug statement
11157
11158 Dmitry Vyukov reported a use-after-free in the code expanded by the
11159 macro debug_post_sfx, which is caused by the use of the asoc pointer
11160 after it was freed within sctp_side_effect() scope.
11161
11162 This patch fixes it by allowing sctp_side_effect to clear that asoc
11163 pointer when the TCB is freed.
11164
11165 As Vlad explained, we also have to cover the SCTP_DISPOSITION_ABORT case
11166 because it will trigger DELETE_TCB too on that same loop.
11167
11168 Also, there were places issuing SCTP_CMD_INIT_FAILED and ASSOC_FAILED
11169 but returning SCTP_DISPOSITION_CONSUME, which would fool the scheme
11170 above. Fix it by returning SCTP_DISPOSITION_ABORT instead.
11171
11172 The macro is already prepared to handle such NULL pointer.
11173
11174 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11175 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
11176 Acked-by: Vlad Yasevich <vyasevich@gmail.com>
11177 Signed-off-by: David S. Miller <davem@davemloft.net>
11178
11179 net/sctp/sm_sideeffect.c | 11 ++++++-----
11180 net/sctp/sm_statefuns.c | 17 ++++-------------
11181 2 files changed, 10 insertions(+), 18 deletions(-)
11182
11183 commit 395ea8a9e73e184fc14153a033000bccf4213213
11184 Author: willy tarreau <w@1wt.eu>
11185 Date: Sun Jan 10 07:54:56 2016 +0100
11186
11187 unix: properly account for FDs passed over unix sockets
11188
11189 It is possible for a process to allocate and accumulate far more FDs than
11190 the process' limit by sending them over a unix socket then closing them
11191 to keep the process' fd count low.
11192
11193 This change addresses this problem by keeping track of the number of FDs
11194 in flight per user and preventing non-privileged processes from having
11195 more FDs in flight than their configured FD limit.
11196
11197 Reported-by: socketpair@gmail.com
11198 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
11199 Mitigates: CVE-2013-4312 (Linux 2.0+)
11200 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
11201 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11202 Signed-off-by: Willy Tarreau <w@1wt.eu>
11203 Signed-off-by: David S. Miller <davem@davemloft.net>
11204
11205 include/linux/sched.h | 1 +
11206 net/unix/af_unix.c | 24 ++++++++++++++++++++----
11207 net/unix/garbage.c | 13 ++++++++-----
11208 3 files changed, 29 insertions(+), 9 deletions(-)
11209
11210 commit cb207ab8fbd71dcfc4a49d533aba8085012543fd
11211 Author: Sasha Levin <sasha.levin@oracle.com>
11212 Date: Thu Jan 7 14:52:43 2016 -0500
11213
11214 net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
11215
11216 proc_dostring() needs an initialized destination string, while the one
11217 provided in proc_sctp_do_hmac_alg() contains stack garbage.
11218
11219 Thus, writing to cookie_hmac_alg would strlen() that garbage and end up
11220 accessing invalid memory.
11221
11222 Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic")
11223 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
11224 Signed-off-by: David S. Miller <davem@davemloft.net>
11225
11226 net/sctp/sysctl.c | 2 +-
11227 1 files changed, 1 insertions(+), 1 deletions(-)
11228
11229 commit 4014e09faf0fe9054119624ccfff1236e886b554
11230 Author: Quentin Casasnovas <quentin.casasnovas@oracle.com>
11231 Date: Tue Nov 24 17:13:21 2015 -0500
11232
11233 RDS: fix race condition when sending a message on unbound socket
11234
11235 commit 8c7188b23474cca017b3ef354c4a58456f68303a upstream.
11236
11237 Sasha's found a NULL pointer dereference in the RDS connection code when
11238 sending a message to an apparently unbound socket. The problem is caused
11239 by the code checking if the socket is bound in rds_sendmsg(), which checks
11240 the rs_bound_addr field without taking a lock on the socket. This opens a
11241 race where rs_bound_addr is temporarily set but where the transport is not
11242 in rds_bind(), leading to a NULL pointer dereference when trying to
11243 dereference 'trans' in __rds_conn_create().
11244
11245 Vegard wrote a reproducer for this issue, so kindly ask him to share if
11246 you're interested.
11247
11248 I cannot reproduce the NULL pointer dereference using Vegard's reproducer
11249 with this patch, whereas I could without.
11250
11251 Complete earlier incomplete fix to CVE-2015-6937:
11252
11253 74e98eb08588 ("RDS: verify the underlying transport exists before creating a connection")
11254
11255 Cc: David S. Miller <davem@davemloft.net>
11256
11257 Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
11258 Reviewed-by: Sasha Levin <sasha.levin@oracle.com>
11259 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
11260 Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com>
11261 Signed-off-by: David S. Miller <davem@davemloft.net>
11262 Signed-off-by: Jiri Slaby <jslaby@suse.cz>
11263
11264 Conflicts:
11265
11266 net/rds/send.c
11267
11268 net/rds/connection.c | 6 ------
11269 1 files changed, 0 insertions(+), 6 deletions(-)
11270
11271 commit 206df8d01104344d7588d801016a281a4cd25556
11272 Author: Sasha Levin <sasha.levin@oracle.com>
11273 Date: Tue Sep 8 10:53:40 2015 -0400
11274
11275 RDS: verify the underlying transport exists before creating a connection
11276
11277 There was no verification that an underlying transport exists when creating
11278 a connection, this would cause dereferencing a NULL ptr.
11279
11280 It might happen on sockets that weren't properly bound before attempting to
11281 send a message, which will cause a NULL ptr deref:
11282
11283 [135546.047719] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
11284 [135546.051270] Modules linked in:
11285 [135546.051781] CPU: 4 PID: 15650 Comm: trinity-c4 Not tainted 4.2.0-next-20150902-sasha-00041-gbaa1222-dirty #2527
11286 [135546.053217] task: ffff8800835bc000 ti: ffff8800bc708000 task.ti: ffff8800bc708000
11287 [135546.054291] RIP: __rds_conn_create (net/rds/connection.c:194)
11288 [135546.055666] RSP: 0018:ffff8800bc70fab0 EFLAGS: 00010202
11289 [135546.056457] RAX: dffffc0000000000 RBX: 0000000000000f2c RCX: ffff8800835bc000
11290 [135546.057494] RDX: 0000000000000007 RSI: ffff8800835bccd8 RDI: 0000000000000038
11291 [135546.058530] RBP: ffff8800bc70fb18 R08: 0000000000000001 R09: 0000000000000000
11292 [135546.059556] R10: ffffed014d7a3a23 R11: ffffed014d7a3a21 R12: 0000000000000000
11293 [135546.060614] R13: 0000000000000001 R14: ffff8801ec3d0000 R15: 0000000000000000
11294 [135546.061668] FS: 00007faad4ffb700(0000) GS:ffff880252000000(0000) knlGS:0000000000000000
11295 [135546.062836] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
11296 [135546.063682] CR2: 000000000000846a CR3: 000000009d137000 CR4: 00000000000006a0
11297 [135546.064723] Stack:
11298 [135546.065048] ffffffffafe2055c ffffffffafe23fc1 ffffed00493097bf ffff8801ec3d0008
11299 [135546.066247] 0000000000000000 00000000000000d0 0000000000000000 ac194a24c0586342
11300 [135546.067438] 1ffff100178e1f78 ffff880320581b00 ffff8800bc70fdd0 ffff880320581b00
11301 [135546.068629] Call Trace:
11302 [135546.069028] ? __rds_conn_create (include/linux/rcupdate.h:856 net/rds/connection.c:134)
11303 [135546.069989] ? rds_message_copy_from_user (net/rds/message.c:298)
11304 [135546.071021] rds_conn_create_outgoing (net/rds/connection.c:278)
11305 [135546.071981] rds_sendmsg (net/rds/send.c:1058)
11306 [135546.072858] ? perf_trace_lock (include/trace/events/lock.h:38)
11307 [135546.073744] ? lockdep_init (kernel/locking/lockdep.c:3298)
11308 [135546.074577] ? rds_send_drop_to (net/rds/send.c:976)
11309 [135546.075508] ? __might_fault (./arch/x86/include/asm/current.h:14 mm/memory.c:3795)
11310 [135546.076349] ? __might_fault (mm/memory.c:3795)
11311 [135546.077179] ? rds_send_drop_to (net/rds/send.c:976)
11312 [135546.078114] sock_sendmsg (net/socket.c:611 net/socket.c:620)
11313 [135546.078856] SYSC_sendto (net/socket.c:1657)
11314 [135546.079596] ? SYSC_connect (net/socket.c:1628)
11315 [135546.080510] ? trace_dump_stack (kernel/trace/trace.c:1926)
11316 [135546.081397] ? ring_buffer_unlock_commit (kernel/trace/ring_buffer.c:2479 kernel/trace/ring_buffer.c:2558 kernel/trace/ring_buffer.c:2674)
11317 [135546.082390] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
11318 [135546.083410] ? trace_event_raw_event_sys_enter (include/trace/events/syscalls.h:16)
11319 [135546.084481] ? do_audit_syscall_entry (include/trace/events/syscalls.h:16)
11320 [135546.085438] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
11321 [135546.085515] rds_ib_laddr_check(): addr 36.74.25.172 ret -99 node type -1
11322
11323 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
11324 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
11325 Signed-off-by: David S. Miller <davem@davemloft.net>
11326
11327 net/rds/connection.c | 6 ++++++
11328 1 files changed, 6 insertions(+), 0 deletions(-)
11329
11330 commit 173fa03f05cf0ad485d49a42cbdee8844d3a689a
11331 Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
11332 Date: Tue Jan 5 20:32:47 2016 -0500
11333
11334 ftrace/module: Call clean up function when module init fails early
11335
11336 If the module init code fails after calling ftrace_module_init() and before
11337 calling do_init_module(), we can suffer from a memory leak. This is because
11338 ftrace_module_init() allocates pages to store the locations that ftrace
11339 hooks are placed in the module text. If do_init_module() fails, it still
11340 calls the MODULE_GOING notifiers which will tell ftrace to do a clean up of
11341 the pages it allocated for the module. But if load_module() fails before
11342 then, the pages allocated by ftrace_module_init() will never be freed.
11343
11344 Call ftrace_release_mod() on the module if load_module() fails before
11345 getting to do_init_module().
11346
11347 Link: http://lkml.kernel.org/r/567CEA31.1070507@intel.com
11348
11349 Reported-by: "Qiu, PeiyangX" <peiyangx.qiu@intel.com>
11350 Fixes: a949ae560a511 "ftrace/module: Hardcode ftrace_module_init() call into load_module()"
11351 Cc: stable@vger.kernel.org # v2.6.38+
11352 Acked-by: Rusty Russell <rusty@rustcorp.com.au>
11353 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
11354
11355 include/linux/ftrace.h | 1 +
11356 kernel/module.c | 6 ++++++
11357 2 files changed, 7 insertions(+), 0 deletions(-)
11358
11359 commit 1e5a4a81a4c16c8ac2e264b88a02cc2f42ed0399
11360 Author: Francesco Ruggeri <fruggeri@aristanetworks.com>
11361 Date: Wed Jan 6 00:18:48 2016 -0800
11362
11363 net: possible use after free in dst_release
11364
11365 dst_release should not access dst->flags after decrementing
11366 __refcnt to 0. The dst_entry may be in dst_busy_list and
11367 dst_gc_task may dst_destroy it before dst_release gets a chance
11368 to access dst->flags.
11369
11370 Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()")
11371 Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
11372 Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
11373 Acked-by: Eric Dumazet <edumazet@google.com>
11374 Signed-off-by: David S. Miller <davem@davemloft.net>
11375
11376 net/core/dst.c | 3 ++-
11377 1 files changed, 2 insertions(+), 1 deletions(-)
11378
11379 commit bfb0455793dd4e0f0b49d34a68b3249ab55565cc
11380 Author: Alan <gnomes@lxorguk.ukuu.org.uk>
11381 Date: Wed Jan 6 14:55:02 2016 +0000
11382
11383 mkiss: fix scribble on freed memory
11384
11385 commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
11386 scribble on free memory but added a new one which allows the user to
11387 scribble even more and user controlled data into freed space.
11388
11389 As with 6pack we need to halt the queue before we free the buffers, because
11390 the transmit logic is not protected by the semaphore.
11391
11392 Signed-off-by: Alan Cox <alan@linux.intel.com>
11393 Signed-off-by: David S. Miller <davem@davemloft.net>
11394
11395 drivers/net/hamradio/mkiss.c | 5 +++++
11396 1 files changed, 5 insertions(+), 0 deletions(-)
11397
11398 commit 5cbbcbd32dc1949470f61d342503808fa9555276
11399 Author: David Miller <davem@davemloft.net>
11400 Date: Thu Dec 17 16:05:49 2015 -0500
11401
11402 mkiss: Fix use after free in mkiss_close().
11403
11404 Need to do the unregister_device() after all references to the driver
11405 private have been done.
11406
11407 Signed-off-by: David S. Miller <davem@davemloft.net>
11408
11409 drivers/net/hamradio/mkiss.c | 4 ++--
11410 1 files changed, 2 insertions(+), 2 deletions(-)
11411
11412 commit b00171576794a98068e069a660f0991a6a5190ff
11413 Author: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>
11414 Date: Tue Jan 5 11:51:25 2016 +0000
11415
11416 6pack: fix free memory scribbles
11417
11418 commit acf673a3187edf72068ee2f92f4dc47d66baed47 fixed a user triggerable free
11419 memory scribble but in doing so replaced it with a different one that allows
11420 the user to control the data and scribble even more.
11421
11422 sixpack_close is called by the tty layer in tty context. The tty context is
11423 protected by sp_get() and sp_put(). However network layer activity via
11424 sp_xmit() is not protected this way. We must therefore stop the queue
11425 otherwise the user gets to dump a buffer mostly of their choice into freed
11426 kernel pages.
11427
11428 Signed-off-by: Alan Cox <alan@linux.intel.com>
11429 Signed-off-by: David S. Miller <davem@davemloft.net>
11430
11431 drivers/net/hamradio/6pack.c | 6 ++++++
11432 1 files changed, 6 insertions(+), 0 deletions(-)
11433
11434 commit 5b64a833907cd230a3106aeba2304b2c1bcd116d
11435 Author: David Miller <davem@davemloft.net>
11436 Date: Thu Dec 17 16:05:32 2015 -0500
11437
11438 6pack: Fix use after free in sixpack_close().
11439
11440 Need to do the unregister_device() after all references to the driver
11441 private have been done.
11442
11443 Also we need to use del_timer_sync() for the timers so that we don't
11444 have any asynchronous references after the unregister.
11445
11446 Signed-off-by: David S. Miller <davem@davemloft.net>
11447
11448 drivers/net/hamradio/6pack.c | 8 ++++----
11449 1 files changed, 4 insertions(+), 4 deletions(-)
11450
11451 commit 4f9d532742656b3613d579220fd10c78f24ba37b
11452 Author: Rabin Vincent <rabin@rab.in>
11453 Date: Tue Jan 5 16:23:07 2016 +0100
11454
11455 net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
11456
11457 The SKF_AD_ALU_XOR_X ancillary is not like the other ancillary data
11458 instructions since it XORs A with X while all the others replace A with
11459 some loaded value. All the BPF JITs fail to clear A if this is used as
11460 the first instruction in a filter. This was found using american fuzzy
11461 lop.
11462
11463 Add a helper to determine if A needs to be cleared given the first
11464 instruction in a filter, and use this in the JITs. Except for ARM, the
11465 rest have only been compile-tested.
11466
11467 Fixes: 3480593131e0 ("net: filter: get rid of BPF_S_* enum")
11468 Signed-off-by: Rabin Vincent <rabin@rab.in>
11469 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
11470 Acked-by: Alexei Starovoitov <ast@kernel.org>
11471 Signed-off-by: David S. Miller <davem@davemloft.net>
11472
11473 arch/arm/net/bpf_jit_32.c | 16 +---------------
11474 arch/mips/net/bpf_jit.c | 16 +---------------
11475 arch/powerpc/net/bpf_jit_comp.c | 13 ++-----------
11476 arch/sparc/net/bpf_jit_comp.c | 17 ++---------------
11477 include/linux/filter.h | 19 +++++++++++++++++++
11478 5 files changed, 25 insertions(+), 56 deletions(-)
11479
11480 commit 570d88f8acfffda92b89ae2e1c47320d47256034
11481 Author: John Fastabend <john.fastabend@gmail.com>
11482 Date: Tue Jan 5 09:11:36 2016 -0800
11483
11484 net: sched: fix missing free per cpu on qstats
11485
11486 When a qdisc is using per cpu stats (currently just the ingress
11487 qdisc) only the bstats are being freed. This also free's the qstats.
11488
11489 Fixes: b0ab6f92752b9f9d8 ("net: sched: enable per cpu qstats")
11490 Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
11491 Acked-by: Eric Dumazet <edumazet@google.com>
11492 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
11493 Signed-off-by: David S. Miller <davem@davemloft.net>
11494
11495 net/sched/sch_generic.c | 4 +++-
11496 1 files changed, 3 insertions(+), 1 deletions(-)
11497
11498 commit 32c0ebc51857ee83470a10dcb234d308a0ed1881
11499 Author: Rabin Vincent <rabin@rab.in>
11500 Date: Tue Jan 5 18:34:04 2016 +0100
11501
11502 ARM: net: bpf: fix zero right shift
11503
11504 The LSR instruction cannot be used to perform a zero right shift since a
11505 0 as the immediate value (imm5) in the LSR instruction encoding means
11506 that a shift of 32 is perfomed. See DecodeIMMShift() in the ARM ARM.
11507
11508 Make the JIT skip generation of the LSR if a zero-shift is requested.
11509
11510 This was found using american fuzzy lop.
11511
11512 Signed-off-by: Rabin Vincent <rabin@rab.in>
11513 Acked-by: Alexei Starovoitov <ast@kernel.org>
11514 Signed-off-by: David S. Miller <davem@davemloft.net>
11515
11516 arch/arm/net/bpf_jit_32.c | 3 ++-
11517 1 files changed, 2 insertions(+), 1 deletions(-)
11518
11519 commit 51f5d291750285efa4d4bbe84e5ec23dc00c8d2d
11520 Author: Brad Spengler <spender@grsecurity.net>
11521 Date: Wed Jan 6 20:35:57 2016 -0500
11522
11523 Don't perform hidden lookups in RBAC against the directory of
11524 a file being opened with O_CREAT, reported by Karl Witt
11525
11526 Conflicts:
11527
11528 fs/namei.c
11529
11530 fs/namei.c | 3 ---
11531 1 files changed, 0 insertions(+), 3 deletions(-)
11532
11533 commit 5a8266a6b2769ccdb447256f95bc2577a73cccd1
11534 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
11535 Date: Tue Jan 5 10:46:00 2016 +0100
11536
11537 bridge: Only call /sbin/bridge-stp for the initial network namespace
11538
11539 [I stole this patch from Eric Biederman. He wrote:]
11540
11541 > There is no defined mechanism to pass network namespace information
11542 > into /sbin/bridge-stp therefore don't even try to invoke it except
11543 > for bridge devices in the initial network namespace.
11544 >
11545 > It is possible for unprivileged users to cause /sbin/bridge-stp to be
11546 > invoked for any network device name which if /sbin/bridge-stp does not
11547 > guard against unreasonable arguments or being invoked twice on the
11548 > same network device could cause problems.
11549
11550 [Hannes: changed patch using netns_eq]
11551
11552 Cc: Eric W. Biederman <ebiederm@xmission.com>
11553 Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
11554 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11555 Signed-off-by: David S. Miller <davem@davemloft.net>
11556
11557 net/bridge/br_stp_if.c | 5 ++++-
11558 1 files changed, 4 insertions(+), 1 deletions(-)
11559
11560 commit 650d535cc39f0aeff2f57e60b6617be25d3ef48b
11561 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
11562 Date: Wed Dec 23 16:28:40 2015 -0200
11563
11564 sctp: use GFP_USER for user-controlled kmalloc
11565
11566 Commit cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
11567 missed two other spots.
11568
11569 For connectx, as it's more likely to be used by kernel users of the API,
11570 it detects if GFP_USER should be used or not.
11571
11572 Fixes: cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
11573 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11574 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
11575 Signed-off-by: David S. Miller <davem@davemloft.net>
11576
11577 net/sctp/socket.c | 9 ++++++---
11578 1 files changed, 6 insertions(+), 3 deletions(-)
11579
11580 commit 5718a1f63c41fc156f729783423b002763779d04
11581 Author: Florian Westphal <fw@strlen.de>
11582 Date: Thu Dec 31 14:26:33 2015 +0100
11583
11584 connector: bump skb->users before callback invocation
11585
11586 Dmitry reports memleak with syskaller program.
11587 Problem is that connector bumps skb usecount but might not invoke callback.
11588
11589 So move skb_get to where we invoke the callback.
11590
11591 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11592 Signed-off-by: Florian Westphal <fw@strlen.de>
11593 Signed-off-by: David S. Miller <davem@davemloft.net>
11594
11595 drivers/connector/connector.c | 11 +++--------
11596 1 files changed, 3 insertions(+), 8 deletions(-)
11597
11598 commit 2e6372e6a97f8d642416899861f91777f44f13b7
11599 Author: Rainer Weikusat <rweikusat@mobileactivedefense.com>
11600 Date: Sun Jan 3 18:56:38 2016 +0000
11601
11602 af_unix: Fix splice-bind deadlock
11603
11604 On 2015/11/06, Dmitry Vyukov reported a deadlock involving the splice
11605 system call and AF_UNIX sockets,
11606
11607 http://lists.openwall.net/netdev/2015/11/06/24
11608
11609 The situation was analyzed as
11610
11611 (a while ago) A: socketpair()
11612 B: splice() from a pipe to /mnt/regular_file
11613 does sb_start_write() on /mnt
11614 C: try to freeze /mnt
11615 wait for B to finish with /mnt
11616 A: bind() try to bind our socket to /mnt/new_socket_name
11617 lock our socket, see it not bound yet
11618 decide that it needs to create something in /mnt
11619 try to do sb_start_write() on /mnt, block (it's
11620 waiting for C).
11621 D: splice() from the same pipe to our socket
11622 lock the pipe, see that socket is connected
11623 try to lock the socket, block waiting for A
11624 B: get around to actually feeding a chunk from
11625 pipe to file, try to lock the pipe. Deadlock.
11626
11627 on 2015/11/10 by Al Viro,
11628
11629 http://lists.openwall.net/netdev/2015/11/10/4
11630
11631 The patch fixes this by removing the kern_path_create related code from
11632 unix_mknod and executing it as part of unix_bind prior acquiring the
11633 readlock of the socket in question. This means that A (as used above)
11634 will sb_start_write on /mnt before it acquires the readlock, hence, it
11635 won't indirectly block B which first did a sb_start_write and then
11636 waited for a thread trying to acquire the readlock. Consequently, A
11637 being blocked by C waiting for B won't cause a deadlock anymore
11638 (effectively, both A and B acquire two locks in opposite order in the
11639 situation described above).
11640
11641 Dmitry Vyukov(<dvyukov@google.com>) tested the original patch.
11642
11643 Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
11644 Signed-off-by: David S. Miller <davem@davemloft.net>
11645
11646 Conflicts:
11647
11648 net/unix/af_unix.c
11649
11650 net/unix/af_unix.c | 70 +++++++++++++++++++++++++++++++--------------------
11651 1 files changed, 42 insertions(+), 28 deletions(-)
11652
11653 commit 2e729e557c571f3253e32472cd7d382ac16cf1c3
11654 Author: Qiu Peiyang <peiyangx.qiu@intel.com>
11655 Date: Thu Dec 31 13:11:28 2015 +0800
11656
11657 tracing: Fix setting of start_index in find_next()
11658
11659 When we do cat /sys/kernel/debug/tracing/printk_formats, we hit kernel
11660 panic at t_show.
11661
11662 general protection fault: 0000 [#1] PREEMPT SMP
11663 CPU: 0 PID: 2957 Comm: sh Tainted: G W O 3.14.55-x86_64-01062-gd4acdc7 #2
11664 RIP: 0010:[<ffffffff811375b2>]
11665 [<ffffffff811375b2>] t_show+0x22/0xe0
11666 RSP: 0000:ffff88002b4ebe80 EFLAGS: 00010246
11667 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004
11668 RDX: 0000000000000004 RSI: ffffffff81fd26a6 RDI: ffff880032f9f7b1
11669 RBP: ffff88002b4ebe98 R08: 0000000000001000 R09: 000000000000ffec
11670 R10: 0000000000000000 R11: 000000000000000f R12: ffff880004d9b6c0
11671 R13: 7365725f6d706400 R14: ffff880004d9b6c0 R15: ffffffff82020570
11672 FS: 0000000000000000(0000) GS:ffff88003aa00000(0063) knlGS:00000000f776bc40
11673 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
11674 CR2: 00000000f6c02ff0 CR3: 000000002c2b3000 CR4: 00000000001007f0
11675 Call Trace:
11676 [<ffffffff811dc076>] seq_read+0x2f6/0x3e0
11677 [<ffffffff811b749b>] vfs_read+0x9b/0x160
11678 [<ffffffff811b7f69>] SyS_read+0x49/0xb0
11679 [<ffffffff81a3a4b9>] ia32_do_call+0x13/0x13
11680 ---[ end trace 5bd9eb630614861e ]---
11681 Kernel panic - not syncing: Fatal exception
11682
11683 When the first time find_next calls find_next_mod_format, it should
11684 iterate the trace_bprintk_fmt_list to find the first print format of
11685 the module. However in current code, start_index is smaller than *pos
11686 at first, and code will not iterate the list. Latter container_of will
11687 get the wrong address with former v, which will cause mod_fmt be a
11688 meaningless object and so is the returned mod_fmt->fmt.
11689
11690 This patch will fix it by correcting the start_index. After fixed,
11691 when the first time calls find_next_mod_format, start_index will be
11692 equal to *pos, and code will iterate the trace_bprintk_fmt_list to
11693 get the right module printk format, so is the returned mod_fmt->fmt.
11694
11695 Link: http://lkml.kernel.org/r/5684B900.9000309@intel.com
11696
11697 Cc: stable@vger.kernel.org # 3.12+
11698 Fixes: 102c9323c35a8 "tracing: Add __tracepoint_string() to export string pointers"
11699 Signed-off-by: Qiu Peiyang <peiyangx.qiu@intel.com>
11700 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
11701
11702 kernel/trace/trace_printk.c | 1 +
11703 1 files changed, 1 insertions(+), 0 deletions(-)
11704
11705 commit 0994af4b1930f32aa493dc08145cd304f8bfc8f4
11706 Author: Al Viro <viro@zeniv.linux.org.uk>
11707 Date: Mon Dec 28 20:47:08 2015 -0500
11708
11709 [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
11710
11711 Cc: stable@vger.kernel.org # 3.15+
11712 Reviewed-by: Jeff Layton <jeff.layton@primarydata.com>
11713 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
11714
11715 arch/arm/kernel/sys_oabi-compat.c | 73 +++++++++++++++++++------------------
11716 1 files changed, 37 insertions(+), 36 deletions(-)
11717
11718 commit 4ed030f65dcf3e6b0128032a49a7d75f947fa351
11719 Merge: de243c2 3adc55a
11720 Author: Brad Spengler <spender@grsecurity.net>
11721 Date: Tue Jan 5 18:10:10 2016 -0500
11722
11723 Merge branch 'pax-test' into grsec-test
11724
11725 commit 3adc55a5acfa429c2a7cc883aef08b960c0079b0
11726 Author: Brad Spengler <spender@grsecurity.net>
11727 Date: Tue Jan 5 18:08:53 2016 -0500
11728
11729 Update to pax-linux-4.3.3-test16.patch:
11730 - small cleanup in entry_64.S on x86
11731 - Emese fixed the initify plugin to recursively check variable initializers, reported by Rasmus Villemoes
11732 - fixed an integer truncation of a partially uninitialized value bug in em_pop_sreg, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4354)
11733 - fixed alternatives patching of call insns under KERNEXEC/i386, reported by fly_a320 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4305) and TTgrsec (https://forums.grsecurity.net/viewtopic.php?f=3&t=4353)
11734 - fixed a size overflow false positive that triggered in tcp_parse_options on arm, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350&p=15917#p15916)
11735 - fixed a boot crash on amd64 with KERNEXEC/OR and CONTEXT_TRACKING, reported by Klaus Kusche (https://bugs.gentoo.org/show_bug.cgi?id=570420)
11736
11737 arch/x86/entry/entry_64.S | 60 +++++-----
11738 arch/x86/kernel/alternative.c | 2 +-
11739 arch/x86/kvm/emulate.c | 4 +-
11740 tools/gcc/initify_plugin.c | 123 +++++++++----------
11741 .../disable_size_overflow_hash.data | 4 +-
11742 .../size_overflow_plugin/size_overflow_hash.data | 2 -
11743 6 files changed, 93 insertions(+), 102 deletions(-)
11744
11745 commit de243c26efd0e423ca92db825af2c3f8eb1ca043
11746 Author: Brad Spengler <spender@grsecurity.net>
11747 Date: Tue Dec 29 18:01:24 2015 -0500
11748
11749 It was noticed during an internal audit that the code under GRKERNSEC_PROC_MEMMAP
11750 which aimed to enforce a 16MB minimum on RLIMIT_DATA for suid/sgid binaries only
11751 did so if RLIMIT_DATA was set lower than PAGE_SIZE.
11752
11753 This addition was only supplemental as GRKERNSEC_BRUTE is the main defense
11754 against suid/sgid attacks and the flaw above would only eliminate the extra
11755 entropy provided for the brk-managed heap, still leaving it with the minimum
11756 of 16-bit entropy for mmap on x86 and 28 on x64.
11757
11758 mm/mmap.c | 2 +-
11759 1 files changed, 1 insertions(+), 1 deletions(-)
11760
11761 commit 8e264cfe47e5f08cdc9ed009a630277206cd2534
11762 Merge: 436201b 2584340
11763 Author: Brad Spengler <spender@grsecurity.net>
11764 Date: Mon Dec 28 20:30:01 2015 -0500
11765
11766 Merge branch 'pax-test' into grsec-test
11767
11768 commit 2584340eab494e64ec1bf9eb5b0d1ae31f926306
11769 Author: Brad Spengler <spender@grsecurity.net>
11770 Date: Mon Dec 28 20:29:28 2015 -0500
11771
11772 Update to pax-linux-4.3.3-test14.patch:
11773 - fixed an integer sign conversion error in i2c_dw_pci_probe caught by the size overflow plugin, reported by Jean Lucas and ganymede (https://forums.grsecurity.net/viewtopic.php?f=3&t=4349)
11774 - fixed shutdown crash with tboot and KERNEXEC, reported by perfinion
11775 - fixed a few false positive and one real size overflow reports in hyperv, reported by hunger
11776 - fixed compile regressions on armv5, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350)
11777 - fixed an assert in the initify plugin that triggered in vic_register on arm
11778
11779 arch/arm/include/asm/atomic.h | 7 +++++--
11780 arch/arm/include/asm/domain.h | 5 ++---
11781 arch/x86/kernel/tboot.c | 14 +++++++++-----
11782 drivers/hv/channel.c | 4 +---
11783 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
11784 drivers/net/hyperv/rndis_filter.c | 3 +--
11785 fs/exec.c | 4 ++--
11786 include/linux/atomic.h | 15 ---------------
11787 net/core/skbuff.c | 3 ++-
11788 tools/gcc/initify_plugin.c | 4 +++-
11789 10 files changed, 26 insertions(+), 35 deletions(-)
11790
11791 commit 436201b6626b488d173c8076447000077c27b84a
11792 Author: David Howells <dhowells@redhat.com>
11793 Date: Fri Dec 18 01:34:26 2015 +0000
11794
11795 KEYS: Fix race between read and revoke
11796
11797 This fixes CVE-2015-7550.
11798
11799 There's a race between keyctl_read() and keyctl_revoke(). If the revoke
11800 happens between keyctl_read() checking the validity of a key and the key's
11801 semaphore being taken, then the key type read method will see a revoked key.
11802
11803 This causes a problem for the user-defined key type because it assumes in
11804 its read method that there will always be a payload in a non-revoked key
11805 and doesn't check for a NULL pointer.
11806
11807 Fix this by making keyctl_read() check the validity of a key after taking
11808 semaphore instead of before.
11809
11810 I think the bug was introduced with the original keyrings code.
11811
11812 This was discovered by a multithreaded test program generated by syzkaller
11813 (http://github.com/google/syzkaller). Here's a cleaned up version:
11814
11815 #include <sys/types.h>
11816 #include <keyutils.h>
11817 #include <pthread.h>
11818 void *thr0(void *arg)
11819 {
11820 key_serial_t key = (unsigned long)arg;
11821 keyctl_revoke(key);
11822 return 0;
11823 }
11824 void *thr1(void *arg)
11825 {
11826 key_serial_t key = (unsigned long)arg;
11827 char buffer[16];
11828 keyctl_read(key, buffer, 16);
11829 return 0;
11830 }
11831 int main()
11832 {
11833 key_serial_t key = add_key("user", "%", "foo", 3, KEY_SPEC_USER_KEYRING);
11834 pthread_t th[5];
11835 pthread_create(&th[0], 0, thr0, (void *)(unsigned long)key);
11836 pthread_create(&th[1], 0, thr1, (void *)(unsigned long)key);
11837 pthread_create(&th[2], 0, thr0, (void *)(unsigned long)key);
11838 pthread_create(&th[3], 0, thr1, (void *)(unsigned long)key);
11839 pthread_join(th[0], 0);
11840 pthread_join(th[1], 0);
11841 pthread_join(th[2], 0);
11842 pthread_join(th[3], 0);
11843 return 0;
11844 }
11845
11846 Build as:
11847
11848 cc -o keyctl-race keyctl-race.c -lkeyutils -lpthread
11849
11850 Run as:
11851
11852 while keyctl-race; do :; done
11853
11854 as it may need several iterations to crash the kernel. The crash can be
11855 summarised as:
11856
11857 BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
11858 IP: [<ffffffff81279b08>] user_read+0x56/0xa3
11859 ...
11860 Call Trace:
11861 [<ffffffff81276aa9>] keyctl_read_key+0xb6/0xd7
11862 [<ffffffff81277815>] SyS_keyctl+0x83/0xe0
11863 [<ffffffff815dbb97>] entry_SYSCALL_64_fastpath+0x12/0x6f
11864
11865 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11866 Signed-off-by: David Howells <dhowells@redhat.com>
11867 Tested-by: Dmitry Vyukov <dvyukov@google.com>
11868 Cc: stable@vger.kernel.org
11869 Signed-off-by: James Morris <james.l.morris@oracle.com>
11870
11871 security/keys/keyctl.c | 18 +++++++++---------
11872 1 files changed, 9 insertions(+), 9 deletions(-)
11873
11874 commit 195cea04477025da4a2078bd3e1fb7c4e11206c2
11875 Author: Brad Spengler <spender@grsecurity.net>
11876 Date: Tue Dec 22 20:44:01 2015 -0500
11877
11878 Add new kernel command-line param: pax_size_overflow_report_only
11879 If a user triggers a size_overflow violation that makes it difficult
11880 to obtain the call trace without serial console/net console, they can
11881 use this option to provide that information to us
11882
11883 Documentation/kernel-parameters.txt | 5 +++++
11884 fs/exec.c | 12 +++++++++---
11885 init/main.c | 11 +++++++++++
11886 3 files changed, 25 insertions(+), 3 deletions(-)
11887
11888 commit 4254a8da5851df8c08cdca5c392916e8c105408d
11889 Author: WANG Cong <xiyou.wangcong@gmail.com>
11890 Date: Mon Dec 21 10:55:45 2015 -0800
11891
11892 addrconf: always initialize sysctl table data
11893
11894 When sysctl performs restrict writes, it allows to write from
11895 a middle position of a sysctl file, which requires us to initialize
11896 the table data before calling proc_dostring() for the write case.
11897
11898 Fixes: 3d1bec99320d ("ipv6: introduce secret_stable to ipv6_devconf")
11899 Reported-by: Sasha Levin <sasha.levin@oracle.com>
11900 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11901 Tested-by: Sasha Levin <sasha.levin@oracle.com>
11902 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
11903 Signed-off-by: David S. Miller <davem@davemloft.net>
11904
11905 net/ipv6/addrconf.c | 11 ++++-------
11906 1 files changed, 4 insertions(+), 7 deletions(-)
11907
11908 commit f8002863fb06c363180637046947a78a6ccb3d33
11909 Author: WANG Cong <xiyou.wangcong@gmail.com>
11910 Date: Wed Dec 16 23:39:04 2015 -0800
11911
11912 net: check both type and procotol for tcp sockets
11913
11914 Dmitry reported the following out-of-bound access:
11915
11916 Call Trace:
11917 [<ffffffff816cec2e>] __asan_report_load4_noabort+0x3e/0x40
11918 mm/kasan/report.c:294
11919 [<ffffffff84affb14>] sock_setsockopt+0x1284/0x13d0 net/core/sock.c:880
11920 [< inline >] SYSC_setsockopt net/socket.c:1746
11921 [<ffffffff84aed7ee>] SyS_setsockopt+0x1fe/0x240 net/socket.c:1729
11922 [<ffffffff85c18c76>] entry_SYSCALL_64_fastpath+0x16/0x7a
11923 arch/x86/entry/entry_64.S:185
11924
11925 This is because we mistake a raw socket as a tcp socket.
11926 We should check both sk->sk_type and sk->sk_protocol to ensure
11927 it is a tcp socket.
11928
11929 Willem points out __skb_complete_tx_timestamp() needs to fix as well.
11930
11931 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11932 Cc: Willem de Bruijn <willemdebruijn.kernel@gmail.com>
11933 Cc: Eric Dumazet <eric.dumazet@gmail.com>
11934 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
11935 Acked-by: Willem de Bruijn <willemb@google.com>
11936 Signed-off-by: David S. Miller <davem@davemloft.net>
11937
11938 net/core/skbuff.c | 3 ++-
11939 net/core/sock.c | 3 ++-
11940 2 files changed, 4 insertions(+), 2 deletions(-)
11941
11942 commit bd6b3399804470a4ad8f34229469ca149dceba3d
11943 Author: Colin Ian King <colin.king@canonical.com>
11944 Date: Fri Dec 18 14:22:01 2015 -0800
11945
11946 proc: fix -ESRCH error when writing to /proc/$pid/coredump_filter
11947
11948 Writing to /proc/$pid/coredump_filter always returns -ESRCH because commit
11949 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") removed
11950 the setting of ret after the get_proc_task call and incorrectly left it as
11951 -ESRCH. Instead, return 0 when successful.
11952
11953 Example breakage:
11954
11955 echo 0 > /proc/self/coredump_filter
11956 bash: echo: write error: No such process
11957
11958 Fixes: 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()")
11959 Signed-off-by: Colin Ian King <colin.king@canonical.com>
11960 Acked-by: Kees Cook <keescook@chromium.org>
11961 Cc: <stable@vger.kernel.org> [4.3+]
11962 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
11963 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
11964
11965 fs/proc/base.c | 1 +
11966 1 files changed, 1 insertions(+), 0 deletions(-)
11967
11968 commit b28aca2b99ed08546778355fb9402c503ff9b29e
11969 Author: Junichi Nomura <j-nomura@ce.jp.nec.com>
11970 Date: Tue Dec 22 10:23:44 2015 -0700
11971
11972 block: ensure to split after potentially bouncing a bio
11973
11974 blk_queue_bio() does split then bounce, which makes the segment
11975 counting based on pages before bouncing and could go wrong. Move
11976 the split to after bouncing, like we do for blk-mq, and the we
11977 fix the issue of having the bio count for segments be wrong.
11978
11979 Fixes: 54efd50bfd87 ("block: make generic_make_request handle arbitrarily sized bios")
11980 Cc: stable@vger.kernel.org
11981 Tested-by: Artem S. Tashkinov <t.artem@lycos.com>
11982 Signed-off-by: Jens Axboe <axboe@fb.com>
11983
11984 block/blk-core.c | 4 ++--
11985 1 files changed, 2 insertions(+), 2 deletions(-)
11986
11987 commit e62a25e917a9e5b35ddd5b4f1b5e5e30fbd2e84c
11988 Merge: f6f63ae ec72fa5
11989 Author: Brad Spengler <spender@grsecurity.net>
11990 Date: Tue Dec 22 19:46:26 2015 -0500
11991
11992 Merge branch 'pax-test' into grsec-test
11993
11994 commit ec72fa5f8d9cb4e223bad1b8b5c2e1071c222f2a
11995 Author: Brad Spengler <spender@grsecurity.net>
11996 Date: Tue Dec 22 19:45:51 2015 -0500
11997
11998 Update to pax-linux-4.3.3-test13.patch:
11999 - Emese fixed a (probably) false positive integer truncation in xfs_da_grow_inode_int, reported by jdkbx (http://forums.grsecurity.net/viewtopic.php?f=3&t=4346)
12000 - fixed a size overflow in btrfs/try_merge_map, reported by Alex W (https://bugs.archlinux.org/task/47173) and mathias and dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4344)
12001
12002 arch/arm/mm/fault.c | 2 +-
12003 arch/x86/mm/fault.c | 2 +-
12004 fs/btrfs/extent_map.c | 8 ++++++--
12005 fs/xfs/libxfs/xfs_da_btree.c | 4 +++-
12006 4 files changed, 11 insertions(+), 5 deletions(-)
12007
12008 commit f6f63ae154cd45028add1dc41957878060d77fbf
12009 Author: Brad Spengler <spender@grsecurity.net>
12010 Date: Thu Dec 17 18:43:44 2015 -0500
12011
12012 ptrace_has_cap() checks whether the current process should be
12013 treated as having a certain capability for ptrace checks
12014 against another process. Until now, this was equivalent to
12015 has_ns_capability(current, target_ns, CAP_SYS_PTRACE).
12016
12017 However, if a root-owned process wants to enter a user
12018 namespace for some reason without knowing who owns it and
12019 therefore can't change to the namespace owner's uid and gid
12020 before entering, as soon as it has entered the namespace,
12021 the namespace owner can attach to it via ptrace and thereby
12022 gain access to its uid and gid.
12023
12024 While it is possible for the entering process to switch to
12025 the uid of a claimed namespace owner before entering,
12026 causing the attempt to enter to fail if the claimed uid is
12027 wrong, this doesn't solve the problem of determining an
12028 appropriate gid.
12029
12030 With this change, the entering process can first enter the
12031 namespace and then safely inspect the namespace's
12032 properties, e.g. through /proc/self/{uid_map,gid_map},
12033 assuming that the namespace owner doesn't have access to
12034 uid 0.
12035 Signed-off-by: Jann Horn <jann@thejh.net>
12036
12037 kernel/ptrace.c | 30 +++++++++++++++++++++++++-----
12038 1 files changed, 25 insertions(+), 5 deletions(-)
12039
12040 commit e314f0fb63020f61543b401ff594e953c2c304e5
12041 Author: tadeusz.struk@intel.com <tadeusz.struk@intel.com>
12042 Date: Tue Dec 15 10:46:17 2015 -0800
12043
12044 net: fix uninitialized variable issue
12045
12046 msg_iocb needs to be initialized on the recv/recvfrom path.
12047 Otherwise afalg will wrongly interpret it as an async call.
12048
12049 Cc: stable@vger.kernel.org
12050 Reported-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
12051 Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com>
12052 Signed-off-by: David S. Miller <davem@davemloft.net>
12053
12054 net/socket.c | 1 +
12055 1 files changed, 1 insertions(+), 0 deletions(-)
12056
12057 commit a3f56a43ad56b8fcaf04f6327636ed2f5970de3b
12058 Merge: dfa764c 142edcf
12059 Author: Brad Spengler <spender@grsecurity.net>
12060 Date: Wed Dec 16 21:01:17 2015 -0500
12061
12062 Merge branch 'pax-test' into grsec-test
12063
12064 commit 142edcf1005a57fb8887823565cf0bafad2f313c
12065 Author: Brad Spengler <spender@grsecurity.net>
12066 Date: Wed Dec 16 21:00:57 2015 -0500
12067
12068 Update to pax-linux-4.3.3-test12.patch:
12069 - Emese fixed a size overflow false positive in reiserfs/leaf_paste_entries, reported by Christian Apeltauer (https://bugs.gentoo.org/show_bug.cgi?id=568046)
12070 - fixed a bunch of int/size_t mismatches in the drivers/tty/n_tty.c code causing size overflow false positives, reported by Toralf Förster, mathias (https://forums.grsecurity.net/viewtopic.php?f=3&t=4342), N8Fear (https://forums.grsecurity.net/viewtopic.php?f=3&t=4341)
12071
12072 drivers/tty/n_tty.c | 16 ++++++++--------
12073 .../disable_size_overflow_hash.data | 2 ++
12074 .../size_overflow_plugin/size_overflow_hash.data | 6 ++----
12075 3 files changed, 12 insertions(+), 12 deletions(-)
12076
12077 commit dfa764cc549892a5bfc1083cac78b99032cae577
12078 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
12079 Date: Tue Dec 15 22:59:12 2015 +0100
12080
12081 ipv6: automatically enable stable privacy mode if stable_secret set
12082
12083 Bjørn reported that while we switch all interfaces to privacy stable mode
12084 when setting the secret, we don't set this mode for new interfaces. This
12085 does not make sense, so change this behaviour.
12086
12087 Fixes: 622c81d57b392cc ("ipv6: generation of stable privacy addresses for link-local and autoconf")
12088 Reported-by: Bjørn Mork <bjorn@mork.no>
12089 Cc: Bjørn Mork <bjorn@mork.no>
12090 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
12091 Signed-off-by: David S. Miller <davem@davemloft.net>
12092
12093 net/ipv6/addrconf.c | 6 ++++++
12094 1 files changed, 6 insertions(+), 0 deletions(-)
12095
12096 commit c2815a1fee03f222273e77c14e43f960da06f35a
12097 Author: Brad Spengler <spender@grsecurity.net>
12098 Date: Wed Dec 16 13:03:38 2015 -0500
12099
12100 Work around upstream limitation on the number of thread info flags causing a compilation error
12101 Reported by fabled at http://forums.grsecurity.net/viewtopic.php?f=3&t=4339
12102
12103 arch/arm/kernel/entry-common.S | 8 ++++++--
12104 1 files changed, 6 insertions(+), 2 deletions(-)
12105
12106 commit 8c9ae168e09ae49324d709d76d73d9fc4ca477e1
12107 Author: Brad Spengler <spender@grsecurity.net>
12108 Date: Tue Dec 15 19:03:41 2015 -0500
12109
12110 Initial import of grsecurity 3.1 for Linux 4.3.3
12111
12112 Documentation/dontdiff | 2 +
12113 Documentation/kernel-parameters.txt | 7 +
12114 Documentation/sysctl/kernel.txt | 15 +
12115 Makefile | 18 +-
12116 arch/alpha/include/asm/cache.h | 4 +-
12117 arch/alpha/kernel/osf_sys.c | 12 +-
12118 arch/arc/Kconfig | 1 +
12119 arch/arm/Kconfig | 1 +
12120 arch/arm/Kconfig.debug | 1 +
12121 arch/arm/include/asm/thread_info.h | 7 +-
12122 arch/arm/kernel/process.c | 4 +-
12123 arch/arm/kernel/ptrace.c | 9 +
12124 arch/arm/kernel/traps.c | 7 +-
12125 arch/arm/mm/Kconfig | 2 +-
12126 arch/arm/mm/fault.c | 40 +-
12127 arch/arm/mm/mmap.c | 8 +-
12128 arch/arm/net/bpf_jit_32.c | 51 +-
12129 arch/arm64/Kconfig.debug | 1 +
12130 arch/avr32/include/asm/cache.h | 4 +-
12131 arch/blackfin/Kconfig.debug | 1 +
12132 arch/blackfin/include/asm/cache.h | 3 +-
12133 arch/cris/include/arch-v10/arch/cache.h | 3 +-
12134 arch/cris/include/arch-v32/arch/cache.h | 3 +-
12135 arch/frv/include/asm/cache.h | 3 +-
12136 arch/frv/mm/elf-fdpic.c | 4 +-
12137 arch/hexagon/include/asm/cache.h | 6 +-
12138 arch/ia64/Kconfig | 1 +
12139 arch/ia64/include/asm/cache.h | 3 +-
12140 arch/ia64/kernel/sys_ia64.c | 2 +
12141 arch/ia64/mm/hugetlbpage.c | 2 +
12142 arch/m32r/include/asm/cache.h | 4 +-
12143 arch/m68k/include/asm/cache.h | 4 +-
12144 arch/metag/mm/hugetlbpage.c | 1 +
12145 arch/microblaze/include/asm/cache.h | 3 +-
12146 arch/mips/Kconfig | 1 +
12147 arch/mips/include/asm/cache.h | 3 +-
12148 arch/mips/include/asm/thread_info.h | 11 +-
12149 arch/mips/kernel/irq.c | 3 +
12150 arch/mips/kernel/ptrace.c | 9 +
12151 arch/mips/mm/mmap.c | 4 +-
12152 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
12153 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
12154 arch/openrisc/include/asm/cache.h | 4 +-
12155 arch/parisc/include/asm/cache.h | 5 +-
12156 arch/parisc/kernel/sys_parisc.c | 4 +
12157 arch/powerpc/Kconfig | 1 +
12158 arch/powerpc/include/asm/cache.h | 4 +-
12159 arch/powerpc/include/asm/thread_info.h | 5 +-
12160 arch/powerpc/kernel/Makefile | 2 +
12161 arch/powerpc/kernel/irq.c | 3 +
12162 arch/powerpc/kernel/process.c | 10 +-
12163 arch/powerpc/kernel/ptrace.c | 14 +
12164 arch/powerpc/kernel/traps.c | 5 +
12165 arch/powerpc/mm/slice.c | 2 +-
12166 arch/s390/Kconfig.debug | 1 +
12167 arch/s390/include/asm/cache.h | 4 +-
12168 arch/score/include/asm/cache.h | 4 +-
12169 arch/sh/include/asm/cache.h | 3 +-
12170 arch/sh/mm/mmap.c | 6 +-
12171 arch/sparc/include/asm/cache.h | 4 +-
12172 arch/sparc/include/asm/pgalloc_64.h | 1 +
12173 arch/sparc/include/asm/thread_info_64.h | 8 +-
12174 arch/sparc/kernel/process_32.c | 6 +-
12175 arch/sparc/kernel/process_64.c | 8 +-
12176 arch/sparc/kernel/ptrace_64.c | 14 +
12177 arch/sparc/kernel/sys_sparc_64.c | 8 +-
12178 arch/sparc/kernel/syscalls.S | 8 +-
12179 arch/sparc/kernel/traps_32.c | 8 +-
12180 arch/sparc/kernel/traps_64.c | 28 +-
12181 arch/sparc/kernel/unaligned_64.c | 2 +-
12182 arch/sparc/mm/fault_64.c | 2 +-
12183 arch/sparc/mm/hugetlbpage.c | 15 +-
12184 arch/tile/Kconfig | 1 +
12185 arch/tile/include/asm/cache.h | 3 +-
12186 arch/tile/mm/hugetlbpage.c | 2 +
12187 arch/um/include/asm/cache.h | 3 +-
12188 arch/unicore32/include/asm/cache.h | 6 +-
12189 arch/x86/Kconfig | 21 +
12190 arch/x86/Kconfig.debug | 2 +
12191 arch/x86/entry/common.c | 14 +
12192 arch/x86/entry/entry_32.S | 2 +-
12193 arch/x86/entry/entry_64.S | 2 +-
12194 arch/x86/ia32/ia32_aout.c | 2 +
12195 arch/x86/include/asm/floppy.h | 20 +-
12196 arch/x86/include/asm/fpu/types.h | 69 +-
12197 arch/x86/include/asm/io.h | 2 +-
12198 arch/x86/include/asm/page.h | 12 +-
12199 arch/x86/include/asm/paravirt_types.h | 23 +-
12200 arch/x86/include/asm/processor.h | 12 +-
12201 arch/x86/include/asm/thread_info.h | 6 +-
12202 arch/x86/include/asm/uaccess.h | 2 +-
12203 arch/x86/kernel/dumpstack.c | 10 +-
12204 arch/x86/kernel/dumpstack_32.c | 2 +-
12205 arch/x86/kernel/dumpstack_64.c | 2 +-
12206 arch/x86/kernel/ioport.c | 13 +
12207 arch/x86/kernel/irq_32.c | 3 +
12208 arch/x86/kernel/irq_64.c | 4 +
12209 arch/x86/kernel/ldt.c | 18 +
12210 arch/x86/kernel/msr.c | 10 +
12211 arch/x86/kernel/ptrace.c | 14 +
12212 arch/x86/kernel/signal.c | 9 +-
12213 arch/x86/kernel/sys_i386_32.c | 9 +-
12214 arch/x86/kernel/sys_x86_64.c | 8 +-
12215 arch/x86/kernel/traps.c | 5 +
12216 arch/x86/kernel/verify_cpu.S | 1 +
12217 arch/x86/kernel/vm86_32.c | 15 +
12218 arch/x86/kvm/svm.c | 14 +-
12219 arch/x86/mm/fault.c | 12 +-
12220 arch/x86/mm/hugetlbpage.c | 15 +-
12221 arch/x86/mm/init.c | 66 +-
12222 arch/x86/mm/init_32.c | 6 +-
12223 arch/x86/net/bpf_jit_comp.c | 4 +
12224 arch/x86/platform/efi/efi_64.c | 2 +-
12225 arch/x86/xen/Kconfig | 1 +
12226 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
12227 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
12228 crypto/ablkcipher.c | 2 +-
12229 crypto/blkcipher.c | 2 +-
12230 crypto/scatterwalk.c | 10 +-
12231 drivers/acpi/acpica/hwxfsleep.c | 11 +-
12232 drivers/acpi/custom_method.c | 4 +
12233 drivers/block/cciss.h | 30 +-
12234 drivers/block/smart1,2.h | 40 +-
12235 drivers/cdrom/cdrom.c | 2 +-
12236 drivers/char/Kconfig | 4 +-
12237 drivers/char/genrtc.c | 1 +
12238 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
12239 drivers/char/mem.c | 17 +
12240 drivers/char/random.c | 5 +-
12241 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
12242 drivers/crypto/nx/nx-aes-ccm.c | 2 +-
12243 drivers/crypto/nx/nx-aes-gcm.c | 2 +-
12244 drivers/crypto/talitos.c | 2 +-
12245 drivers/firewire/ohci.c | 4 +
12246 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
12247 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
12248 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
12249 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
12250 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
12251 drivers/hid/hid-wiimote-debug.c | 2 +-
12252 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
12253 drivers/iommu/Kconfig | 1 +
12254 drivers/iommu/amd_iommu.c | 14 +-
12255 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
12256 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
12257 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
12258 drivers/isdn/hisax/config.c | 2 +-
12259 drivers/isdn/hisax/hfc_pci.c | 2 +-
12260 drivers/isdn/hisax/hfc_sx.c | 2 +-
12261 drivers/isdn/hisax/q931.c | 6 +-
12262 drivers/isdn/i4l/isdn_concap.c | 6 +-
12263 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
12264 drivers/md/bcache/Kconfig | 1 +
12265 drivers/md/raid5.c | 8 +
12266 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
12267 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
12268 drivers/media/platform/vivid/vivid-osd.c | 1 +
12269 drivers/media/radio/radio-cadet.c | 5 +-
12270 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
12271 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
12272 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
12273 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
12274 drivers/message/fusion/mptbase.c | 9 +
12275 drivers/misc/sgi-xp/xp_main.c | 12 +-
12276 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
12277 drivers/net/ppp/pppoe.c | 14 +-
12278 drivers/net/ppp/pptp.c | 6 +
12279 drivers/net/slip/slhc.c | 3 +
12280 drivers/net/wan/lmc/lmc_media.c | 97 +-
12281 drivers/net/wan/x25_asy.c | 6 +-
12282 drivers/net/wan/z85230.c | 24 +-
12283 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
12284 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
12285 drivers/pci/pci-sysfs.c | 2 +-
12286 drivers/pci/proc.c | 9 +
12287 drivers/platform/x86/asus-wmi.c | 12 +
12288 drivers/rtc/rtc-dev.c | 3 +
12289 drivers/scsi/bfa/bfa_fcs.c | 19 +-
12290 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
12291 drivers/scsi/bfa/bfa_modules.h | 12 +-
12292 drivers/scsi/hpsa.h | 40 +-
12293 drivers/staging/dgnc/dgnc_mgmt.c | 1 +
12294 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
12295 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
12296 drivers/target/target_core_sbc.c | 17 +-
12297 drivers/target/target_core_transport.c | 14 +-
12298 drivers/tty/serial/uartlite.c | 4 +-
12299 drivers/tty/sysrq.c | 2 +-
12300 drivers/tty/vt/keyboard.c | 22 +-
12301 drivers/uio/uio.c | 6 +-
12302 drivers/usb/core/hub.c | 5 +
12303 drivers/usb/gadget/function/f_uac1.c | 1 +
12304 drivers/usb/gadget/function/u_uac1.c | 1 +
12305 drivers/usb/host/hwa-hc.c | 9 +-
12306 drivers/usb/usbip/vhci_sysfs.c | 2 +-
12307 drivers/video/fbdev/arcfb.c | 2 +-
12308 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
12309 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
12310 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
12311 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++-----
12312 drivers/xen/xenfs/xenstored.c | 5 +
12313 firmware/Makefile | 2 +
12314 firmware/WHENCE | 20 +-
12315 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
12316 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
12317 fs/9p/vfs_inode.c | 4 +-
12318 fs/attr.c | 1 +
12319 fs/autofs4/waitq.c | 9 +
12320 fs/binfmt_aout.c | 7 +
12321 fs/binfmt_elf.c | 50 +-
12322 fs/compat.c | 20 +-
12323 fs/coredump.c | 17 +-
12324 fs/dcache.c | 3 +
12325 fs/debugfs/inode.c | 11 +-
12326 fs/exec.c | 219 +-
12327 fs/ext2/balloc.c | 4 +-
12328 fs/ext2/super.c | 8 +-
12329 fs/ext4/balloc.c | 4 +-
12330 fs/fcntl.c | 4 +
12331 fs/fhandle.c | 3 +-
12332 fs/file.c | 4 +
12333 fs/filesystems.c | 4 +
12334 fs/fs_struct.c | 20 +-
12335 fs/hugetlbfs/inode.c | 5 +-
12336 fs/inode.c | 8 +-
12337 fs/kernfs/dir.c | 6 +
12338 fs/mount.h | 4 +-
12339 fs/namei.c | 286 +-
12340 fs/namespace.c | 24 +
12341 fs/nfsd/nfscache.c | 2 +-
12342 fs/open.c | 38 +
12343 fs/overlayfs/inode.c | 11 +-
12344 fs/overlayfs/super.c | 6 +-
12345 fs/pipe.c | 2 +-
12346 fs/posix_acl.c | 15 +-
12347 fs/proc/Kconfig | 10 +-
12348 fs/proc/array.c | 69 +-
12349 fs/proc/base.c | 186 +-
12350 fs/proc/cmdline.c | 4 +
12351 fs/proc/devices.c | 4 +
12352 fs/proc/fd.c | 17 +-
12353 fs/proc/generic.c | 64 +
12354 fs/proc/inode.c | 17 +
12355 fs/proc/internal.h | 11 +-
12356 fs/proc/interrupts.c | 4 +
12357 fs/proc/kcore.c | 3 +
12358 fs/proc/meminfo.c | 7 +-
12359 fs/proc/namespaces.c | 4 +-
12360 fs/proc/proc_net.c | 31 +
12361 fs/proc/proc_sysctl.c | 52 +-
12362 fs/proc/root.c | 8 +
12363 fs/proc/stat.c | 69 +-
12364 fs/proc/task_mmu.c | 66 +-
12365 fs/readdir.c | 19 +
12366 fs/reiserfs/item_ops.c | 24 +-
12367 fs/reiserfs/super.c | 4 +
12368 fs/select.c | 2 +
12369 fs/seq_file.c | 30 +-
12370 fs/splice.c | 8 +
12371 fs/stat.c | 20 +-
12372 fs/sysfs/dir.c | 30 +-
12373 fs/sysv/inode.c | 11 +-
12374 fs/utimes.c | 7 +
12375 fs/xattr.c | 26 +-
12376 grsecurity/Kconfig | 1182 ++++
12377 grsecurity/Makefile | 54 +
12378 grsecurity/gracl.c | 2757 +++++++++
12379 grsecurity/gracl_alloc.c | 105 +
12380 grsecurity/gracl_cap.c | 127 +
12381 grsecurity/gracl_compat.c | 269 +
12382 grsecurity/gracl_fs.c | 448 ++
12383 grsecurity/gracl_ip.c | 386 ++
12384 grsecurity/gracl_learn.c | 207 +
12385 grsecurity/gracl_policy.c | 1786 ++++++
12386 grsecurity/gracl_res.c | 68 +
12387 grsecurity/gracl_segv.c | 304 +
12388 grsecurity/gracl_shm.c | 40 +
12389 grsecurity/grsec_chdir.c | 19 +
12390 grsecurity/grsec_chroot.c | 467 ++
12391 grsecurity/grsec_disabled.c | 445 ++
12392 grsecurity/grsec_exec.c | 189 +
12393 grsecurity/grsec_fifo.c | 26 +
12394 grsecurity/grsec_fork.c | 23 +
12395 grsecurity/grsec_init.c | 290 +
12396 grsecurity/grsec_ipc.c | 48 +
12397 grsecurity/grsec_link.c | 65 +
12398 grsecurity/grsec_log.c | 340 +
12399 grsecurity/grsec_mem.c | 48 +
12400 grsecurity/grsec_mount.c | 65 +
12401 grsecurity/grsec_pax.c | 47 +
12402 grsecurity/grsec_proc.c | 20 +
12403 grsecurity/grsec_ptrace.c | 30 +
12404 grsecurity/grsec_sig.c | 236 +
12405 grsecurity/grsec_sock.c | 244 +
12406 grsecurity/grsec_sysctl.c | 488 ++
12407 grsecurity/grsec_time.c | 16 +
12408 grsecurity/grsec_tpe.c | 78 +
12409 grsecurity/grsec_usb.c | 15 +
12410 grsecurity/grsum.c | 64 +
12411 include/linux/binfmts.h | 5 +-
12412 include/linux/bitops.h | 2 +-
12413 include/linux/capability.h | 13 +
12414 include/linux/compiler-gcc.h | 5 +
12415 include/linux/compiler.h | 8 +
12416 include/linux/cred.h | 8 +-
12417 include/linux/dcache.h | 5 +-
12418 include/linux/fs.h | 24 +-
12419 include/linux/fs_struct.h | 2 +-
12420 include/linux/fsnotify.h | 6 +
12421 include/linux/gracl.h | 342 +
12422 include/linux/gracl_compat.h | 156 +
12423 include/linux/gralloc.h | 9 +
12424 include/linux/grdefs.h | 140 +
12425 include/linux/grinternal.h | 230 +
12426 include/linux/grmsg.h | 118 +
12427 include/linux/grsecurity.h | 255 +
12428 include/linux/grsock.h | 19 +
12429 include/linux/ipc.h | 2 +-
12430 include/linux/ipc_namespace.h | 2 +-
12431 include/linux/kallsyms.h | 18 +-
12432 include/linux/kmod.h | 5 +
12433 include/linux/kobject.h | 2 +-
12434 include/linux/lsm_hooks.h | 4 +-
12435 include/linux/mm.h | 12 +
12436 include/linux/mm_types.h | 4 +-
12437 include/linux/module.h | 5 +-
12438 include/linux/mount.h | 2 +-
12439 include/linux/msg.h | 2 +-
12440 include/linux/netfilter/xt_gradm.h | 9 +
12441 include/linux/path.h | 4 +-
12442 include/linux/perf_event.h | 13 +-
12443 include/linux/pid_namespace.h | 2 +-
12444 include/linux/printk.h | 2 +-
12445 include/linux/proc_fs.h | 22 +-
12446 include/linux/proc_ns.h | 2 +-
12447 include/linux/ptrace.h | 24 +-
12448 include/linux/random.h | 2 +-
12449 include/linux/rbtree_augmented.h | 4 +-
12450 include/linux/scatterlist.h | 12 +-
12451 include/linux/sched.h | 114 +-
12452 include/linux/security.h | 1 +
12453 include/linux/sem.h | 2 +-
12454 include/linux/seq_file.h | 5 +
12455 include/linux/shm.h | 6 +-
12456 include/linux/skbuff.h | 3 +
12457 include/linux/slab.h | 9 -
12458 include/linux/sysctl.h | 8 +-
12459 include/linux/thread_info.h | 6 +-
12460 include/linux/tty.h | 2 +-
12461 include/linux/tty_driver.h | 4 +-
12462 include/linux/uidgid.h | 5 +
12463 include/linux/user_namespace.h | 2 +-
12464 include/linux/utsname.h | 2 +-
12465 include/linux/vermagic.h | 16 +-
12466 include/linux/vmalloc.h | 20 +-
12467 include/net/af_unix.h | 2 +-
12468 include/net/dst.h | 33 +
12469 include/net/ip.h | 2 +-
12470 include/net/neighbour.h | 2 +-
12471 include/net/net_namespace.h | 2 +-
12472 include/net/sock.h | 4 +-
12473 include/target/target_core_base.h | 2 +-
12474 include/trace/events/fs.h | 53 +
12475 include/uapi/linux/personality.h | 1 +
12476 init/Kconfig | 4 +-
12477 init/main.c | 35 +-
12478 ipc/mqueue.c | 1 +
12479 ipc/msg.c | 3 +-
12480 ipc/sem.c | 3 +-
12481 ipc/shm.c | 26 +-
12482 ipc/util.c | 6 +
12483 kernel/auditsc.c | 2 +-
12484 kernel/bpf/syscall.c | 8 +-
12485 kernel/capability.c | 41 +-
12486 kernel/cgroup.c | 5 +-
12487 kernel/compat.c | 1 +
12488 kernel/configs.c | 11 +
12489 kernel/cred.c | 112 +-
12490 kernel/events/core.c | 16 +-
12491 kernel/exit.c | 10 +-
12492 kernel/fork.c | 86 +-
12493 kernel/futex.c | 6 +-
12494 kernel/futex_compat.c | 2 +-
12495 kernel/kallsyms.c | 9 +
12496 kernel/kcmp.c | 8 +-
12497 kernel/kexec_core.c | 2 +-
12498 kernel/kmod.c | 95 +-
12499 kernel/kprobes.c | 7 +-
12500 kernel/ksysfs.c | 2 +
12501 kernel/locking/lockdep_proc.c | 10 +-
12502 kernel/module.c | 108 +-
12503 kernel/panic.c | 4 +-
12504 kernel/pid.c | 23 +-
12505 kernel/power/Kconfig | 2 +
12506 kernel/printk/printk.c | 20 +-
12507 kernel/ptrace.c | 56 +-
12508 kernel/resource.c | 10 +
12509 kernel/sched/core.c | 11 +-
12510 kernel/signal.c | 37 +-
12511 kernel/sys.c | 64 +-
12512 kernel/sysctl.c | 172 +-
12513 kernel/taskstats.c | 6 +
12514 kernel/time/posix-timers.c | 8 +
12515 kernel/time/time.c | 5 +
12516 kernel/time/timekeeping.c | 3 +
12517 kernel/time/timer_list.c | 13 +-
12518 kernel/time/timer_stats.c | 10 +-
12519 kernel/trace/Kconfig | 2 +
12520 kernel/trace/trace_syscalls.c | 8 +
12521 kernel/user_namespace.c | 15 +
12522 lib/Kconfig.debug | 13 +-
12523 lib/Kconfig.kasan | 2 +-
12524 lib/is_single_threaded.c | 3 +
12525 lib/list_debug.c | 65 +-
12526 lib/nlattr.c | 2 +
12527 lib/rbtree.c | 4 +-
12528 lib/vsprintf.c | 39 +-
12529 localversion-grsec | 1 +
12530 mm/Kconfig | 8 +-
12531 mm/Kconfig.debug | 1 +
12532 mm/filemap.c | 1 +
12533 mm/kmemleak.c | 4 +-
12534 mm/memory.c | 2 +-
12535 mm/mempolicy.c | 12 +-
12536 mm/migrate.c | 3 +-
12537 mm/mlock.c | 6 +-
12538 mm/mmap.c | 93 +-
12539 mm/mprotect.c | 8 +
12540 mm/oom_kill.c | 28 +-
12541 mm/page_alloc.c | 2 +-
12542 mm/process_vm_access.c | 8 +-
12543 mm/shmem.c | 36 +-
12544 mm/slab.c | 14 +-
12545 mm/slab_common.c | 2 +-
12546 mm/slob.c | 12 +
12547 mm/slub.c | 33 +-
12548 mm/util.c | 3 +
12549 mm/vmalloc.c | 129 +-
12550 mm/vmstat.c | 29 +-
12551 net/appletalk/atalk_proc.c | 2 +-
12552 net/atm/lec.c | 6 +-
12553 net/atm/mpoa_caches.c | 42 +-
12554 net/bluetooth/sco.c | 3 +
12555 net/can/bcm.c | 2 +-
12556 net/can/proc.c | 2 +-
12557 net/core/dev_ioctl.c | 7 +-
12558 net/core/filter.c | 8 +-
12559 net/core/net-procfs.c | 17 +-
12560 net/core/pktgen.c | 2 +-
12561 net/core/sock.c | 3 +-
12562 net/core/sysctl_net_core.c | 2 +-
12563 net/decnet/dn_dev.c | 2 +-
12564 net/ipv4/devinet.c | 6 +-
12565 net/ipv4/inet_hashtables.c | 4 +
12566 net/ipv4/ip_input.c | 7 +
12567 net/ipv4/ip_sockglue.c | 3 +-
12568 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
12569 net/ipv4/netfilter/nf_nat_pptp.c | 2 +-
12570 net/ipv4/route.c | 6 +-
12571 net/ipv4/tcp_input.c | 4 +-
12572 net/ipv4/tcp_ipv4.c | 29 +-
12573 net/ipv4/tcp_minisocks.c | 9 +-
12574 net/ipv4/tcp_timer.c | 11 +
12575 net/ipv4/udp.c | 24 +
12576 net/ipv6/addrconf.c | 13 +-
12577 net/ipv6/proc.c | 2 +-
12578 net/ipv6/tcp_ipv6.c | 26 +-
12579 net/ipv6/udp.c | 7 +
12580 net/ipx/ipx_proc.c | 2 +-
12581 net/irda/irproc.c | 2 +-
12582 net/llc/llc_proc.c | 2 +-
12583 net/netfilter/Kconfig | 10 +
12584 net/netfilter/Makefile | 1 +
12585 net/netfilter/nf_conntrack_core.c | 8 +
12586 net/netfilter/xt_gradm.c | 51 +
12587 net/netfilter/xt_hashlimit.c | 4 +-
12588 net/netfilter/xt_recent.c | 2 +-
12589 net/sched/sch_api.c | 2 +-
12590 net/sctp/socket.c | 4 +-
12591 net/socket.c | 75 +-
12592 net/sunrpc/Kconfig | 1 +
12593 net/sunrpc/cache.c | 2 +-
12594 net/sunrpc/stats.c | 2 +-
12595 net/sysctl_net.c | 2 +-
12596 net/unix/af_unix.c | 52 +-
12597 net/vmw_vsock/vmci_transport_notify.c | 30 +-
12598 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
12599 net/x25/sysctl_net_x25.c | 2 +-
12600 net/x25/x25_proc.c | 2 +-
12601 scripts/package/Makefile | 2 +-
12602 scripts/package/mkspec | 41 +-
12603 security/Kconfig | 369 +-
12604 security/apparmor/file.c | 4 +-
12605 security/apparmor/lsm.c | 8 +-
12606 security/commoncap.c | 36 +-
12607 security/min_addr.c | 2 +
12608 security/smack/smack_lsm.c | 8 +-
12609 security/tomoyo/file.c | 12 +-
12610 security/tomoyo/mount.c | 4 +
12611 security/tomoyo/tomoyo.c | 20 +-
12612 security/yama/Kconfig | 2 +-
12613 security/yama/yama_lsm.c | 4 +-
12614 sound/synth/emux/emux_seq.c | 14 +-
12615 sound/usb/line6/driver.c | 40 +-
12616 sound/usb/line6/toneport.c | 12 +-
12617 tools/gcc/.gitignore | 1 +
12618 tools/gcc/Makefile | 12 +
12619 tools/gcc/gen-random-seed.sh | 8 +
12620 tools/gcc/randomize_layout_plugin.c | 930 +++
12621 tools/gcc/size_overflow_plugin/.gitignore | 1 +
12622 .../size_overflow_plugin/size_overflow_hash.data | 459 ++-
12623 511 files changed, 32631 insertions(+), 3196 deletions(-)
12624
12625 commit a76adb92ce39aee8eec5a025c828030ad6135c6d
12626 Author: Brad Spengler <spender@grsecurity.net>
12627 Date: Tue Dec 15 14:31:49 2015 -0500
12628
12629 Update to pax-linux-4.3.3-test11.patch:
12630 - fixed a few compile regressions with the recent plugin changes, reported by spender
12631 - updated the size overflow hash table
12632
12633 tools/gcc/latent_entropy_plugin.c | 2 +-
12634 .../size_overflow_plugin/size_overflow_hash.data | 66 +++++++++++++++++---
12635 tools/gcc/stackleak_plugin.c | 2 +-
12636 tools/gcc/structleak_plugin.c | 6 +--
12637 4 files changed, 60 insertions(+), 16 deletions(-)
12638
12639 commit f7284b1fc06628fcb2d35d2beecdea5454d46af9
12640 Author: Brad Spengler <spender@grsecurity.net>
12641 Date: Tue Dec 15 11:50:24 2015 -0500
12642
12643 Apply structleak ICE fix for gcc < 4.9
12644
12645 tools/gcc/structleak_plugin.c | 4 ++++
12646 1 files changed, 4 insertions(+), 0 deletions(-)
12647
12648 commit 92fe3eb9fd10ec7f7334decab1526989669b0287
12649 Author: Brad Spengler <spender@grsecurity.net>
12650 Date: Tue Dec 15 07:57:06 2015 -0500
12651
12652 Update to pax-linux-4.3.1-test10.patch:
12653 - Emese fixed INDIRECT_REF and TARGET_MEM_REF handling in the initify plugin
12654 - Emese regenerated the size overflow hash tables for 4.3
12655 - fixed some compat syscall exit paths to restore r12 under KERNEXEC/or
12656 - the latent entropy, stackleak and structleak plugins no longer split the entry block unnecessarily
12657
12658 arch/x86/entry/entry_64.S | 2 +-
12659 arch/x86/entry/entry_64_compat.S | 15 +-
12660 scripts/package/builddeb | 2 +-
12661 tools/gcc/initify_plugin.c | 11 +-
12662 tools/gcc/latent_entropy_plugin.c | 20 +-
12663 .../disable_size_overflow_hash.data | 4 +
12664 .../size_overflow_plugin/size_overflow_hash.data | 5345 +++++++++++---------
12665 tools/gcc/stackleak_plugin.c | 26 +-
12666 tools/gcc/structleak_plugin.c | 21 +-
12667 9 files changed, 3079 insertions(+), 2367 deletions(-)
12668
12669 commit 5bd245cb687319079c2f1c0d6a1170791ed1ed2c
12670 Merge: b5847e6 3548341
12671 Author: Brad Spengler <spender@grsecurity.net>
12672 Date: Tue Dec 15 07:47:56 2015 -0500
12673
12674 Merge branch 'linux-4.3.y' into pax-4_3
12675
12676 Conflicts:
12677 net/unix/af_unix.c
12678
12679 commit b5847e6a896c5d99191135ca4d7c3b6be8f116ff
12680 Author: Brad Spengler <spender@grsecurity.net>
12681 Date: Wed Dec 9 23:11:36 2015 -0500
12682
12683 Update to pax-linux-4.3.1-test9.patch:
12684 - fixed __get_user on x86 to lie less about the size of the load, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4332)
12685 - Emese fixed an intentional overflow caused by gcc, reported by saironiq (https://forums.grsecurity.net/viewtopic.php?f=3&t=4333)
12686 - Emese fixed a false positive overflow report in the forcedeth driver, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?t=4334)
12687 - Emese fixed a false positive overflow report in KVM's emulator, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4336)
12688 - Emese fixed the initify plugin to detect some captured use of __func__, reported by Rasmus Villemoes <linux@rasmusvillemoes.dk>
12689 - constrained shmmax and shmall to avoid triggering size overflow checks, reported by Mathias Krause <minipli@ld-linux.so>
12690 - the checker plugin can partially handle sparse's locking context annotations, it's context insensitive and thus not exactly useful for now, also see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59856
12691
12692 Makefile | 6 +
12693 arch/x86/include/asm/compat.h | 4 +
12694 arch/x86/include/asm/dma.h | 2 +
12695 arch/x86/include/asm/pmem.h | 2 +-
12696 arch/x86/include/asm/uaccess.h | 20 +-
12697 arch/x86/kernel/apic/vector.c | 6 +-
12698 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
12699 arch/x86/kernel/cpu/perf_event_intel.c | 28 +-
12700 arch/x86/kernel/head_64.S | 1 -
12701 arch/x86/kvm/i8259.c | 10 +-
12702 arch/x86/kvm/ioapic.c | 2 +
12703 arch/x86/kvm/x86.c | 2 +
12704 arch/x86/lib/usercopy_64.c | 2 +-
12705 arch/x86/mm/mpx.c | 4 +-
12706 arch/x86/mm/pageattr.c | 7 +
12707 drivers/base/devres.c | 4 +-
12708 drivers/base/power/runtime.c | 6 +-
12709 drivers/base/regmap/regmap.c | 4 +-
12710 drivers/block/drbd/drbd_receiver.c | 4 +-
12711 drivers/block/drbd/drbd_worker.c | 6 +-
12712 drivers/char/virtio_console.c | 6 +-
12713 drivers/md/dm.c | 12 +-
12714 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
12715 drivers/net/macvtap.c | 4 +-
12716 drivers/video/fbdev/core/fbmem.c | 10 +-
12717 fs/compat.c | 3 +-
12718 fs/coredump.c | 2 +-
12719 fs/dcache.c | 13 +-
12720 fs/fhandle.c | 2 +-
12721 fs/file.c | 14 +-
12722 fs/fs-writeback.c | 11 +-
12723 fs/overlayfs/copy_up.c | 2 +-
12724 fs/readdir.c | 3 +-
12725 fs/super.c | 3 +-
12726 include/linux/compiler.h | 36 ++-
12727 include/linux/rcupdate.h | 8 +
12728 include/linux/sched.h | 4 +-
12729 include/linux/seqlock.h | 10 +
12730 include/linux/spinlock.h | 17 +-
12731 include/linux/srcu.h | 5 +-
12732 include/linux/syscalls.h | 2 +-
12733 include/linux/writeback.h | 3 +-
12734 include/uapi/linux/swab.h | 6 +-
12735 ipc/ipc_sysctl.c | 6 +
12736 kernel/exit.c | 25 +-
12737 kernel/resource.c | 4 +-
12738 kernel/signal.c | 12 +-
12739 kernel/user.c | 2 +-
12740 kernel/workqueue.c | 6 +-
12741 lib/rhashtable.c | 4 +-
12742 net/compat.c | 2 +-
12743 net/ipv4/xfrm4_mode_transport.c | 2 +-
12744 security/keys/internal.h | 8 +-
12745 security/keys/keyring.c | 4 -
12746 sound/core/seq/seq_clientmgr.c | 8 +-
12747 sound/core/seq/seq_compat.c | 2 +-
12748 sound/core/seq/seq_memory.c | 6 +-
12749 tools/gcc/checker_plugin.c | 415 +++++++++++++++++++-
12750 tools/gcc/gcc-common.h | 1 +
12751 tools/gcc/initify_plugin.c | 33 ++-
12752 .../disable_size_overflow_hash.data | 1 +
12753 .../size_overflow_plugin/size_overflow_hash.data | 1 -
12754 62 files changed, 708 insertions(+), 140 deletions(-)
12755
12756 commit f2634c2f6995f4231616f24ed016f890c701f939
12757 Merge: 1241bff 5f8b236
12758 Author: Brad Spengler <spender@grsecurity.net>
12759 Date: Wed Dec 9 21:50:47 2015 -0500
12760
12761 Merge branch 'linux-4.3.y' into pax-4_3
12762
12763 Conflicts:
12764 arch/x86/kernel/fpu/xstate.c
12765 arch/x86/kernel/head_64.S
12766
12767 commit 1241bff82e3d7dadb05de0a60b8d2822afc6547c
12768 Author: Brad Spengler <spender@grsecurity.net>
12769 Date: Sun Dec 6 08:44:56 2015 -0500
12770
12771 Update to pax-linux-4.3-test8.patch:
12772 - fixed integer truncation check in md introduced by upstream commits 284ae7cab0f7335c9e0aa8992b28415ef1a54c7c and 58c0fed400603a802968b23ddf78f029c5a84e41, reported by BeiKed9o (https://forums.grsecurity.net/viewtopic.php?f=3&t=4328)
12773 - gcc plugin compilation problems will now also produce the output of the checking script to make diagnosis easier, reported by hunger
12774 - Emese fixed a false positive size overflow report in __vhost_add_used_n, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4329)
12775 - fixed a potential integer truncation error in the raid1 code caught by the size overflow plugin, reported by d1b (https://forums.grsecurity.net/viewtopic.php?f=3&t=4331)
12776
12777 Makefile | 5 +++
12778 drivers/md/md.c | 5 ++-
12779 drivers/md/raid1.c | 2 +-
12780 fs/proc/task_mmu.c | 3 ++
12781 .../disable_size_overflow_hash.data | 4 ++-
12782 .../size_overflow_plugin/intentional_overflow.c | 32 ++++++++++++++++---
12783 .../size_overflow_plugin/size_overflow_hash.data | 2 -
12784 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
12785 8 files changed, 43 insertions(+), 12 deletions(-)
12786
12787 commit cce6a9f9bdd27096632ca1c0246dcc07f2eb1a18
12788 Author: Brad Spengler <spender@grsecurity.net>
12789 Date: Fri Dec 4 14:24:12 2015 -0500
12790
12791 Initial import of pax-linux-4.3-test7.patch
12792
12793 Documentation/dontdiff | 47 +-
12794 Documentation/kbuild/makefiles.txt | 39 +-
12795 Documentation/kernel-parameters.txt | 28 +
12796 Makefile | 108 +-
12797 arch/alpha/include/asm/atomic.h | 10 +
12798 arch/alpha/include/asm/elf.h | 7 +
12799 arch/alpha/include/asm/pgalloc.h | 6 +
12800 arch/alpha/include/asm/pgtable.h | 11 +
12801 arch/alpha/kernel/module.c | 2 +-
12802 arch/alpha/kernel/osf_sys.c | 8 +-
12803 arch/alpha/mm/fault.c | 141 +-
12804 arch/arm/Kconfig | 2 +-
12805 arch/arm/include/asm/atomic.h | 320 +-
12806 arch/arm/include/asm/cache.h | 5 +-
12807 arch/arm/include/asm/cacheflush.h | 2 +-
12808 arch/arm/include/asm/checksum.h | 14 +-
12809 arch/arm/include/asm/cmpxchg.h | 4 +
12810 arch/arm/include/asm/cpuidle.h | 2 +-
12811 arch/arm/include/asm/domain.h | 22 +-
12812 arch/arm/include/asm/elf.h | 9 +-
12813 arch/arm/include/asm/fncpy.h | 2 +
12814 arch/arm/include/asm/futex.h | 10 +
12815 arch/arm/include/asm/kmap_types.h | 2 +-
12816 arch/arm/include/asm/mach/dma.h | 2 +-
12817 arch/arm/include/asm/mach/map.h | 16 +-
12818 arch/arm/include/asm/outercache.h | 2 +-
12819 arch/arm/include/asm/page.h | 3 +-
12820 arch/arm/include/asm/pgalloc.h | 20 +
12821 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
12822 arch/arm/include/asm/pgtable-2level.h | 3 +
12823 arch/arm/include/asm/pgtable-3level.h | 3 +
12824 arch/arm/include/asm/pgtable.h | 54 +-
12825 arch/arm/include/asm/smp.h | 2 +-
12826 arch/arm/include/asm/tls.h | 3 +
12827 arch/arm/include/asm/uaccess.h | 79 +-
12828 arch/arm/include/uapi/asm/ptrace.h | 2 +-
12829 arch/arm/kernel/armksyms.c | 2 +-
12830 arch/arm/kernel/cpuidle.c | 2 +-
12831 arch/arm/kernel/entry-armv.S | 109 +-
12832 arch/arm/kernel/entry-common.S | 40 +-
12833 arch/arm/kernel/entry-header.S | 55 +
12834 arch/arm/kernel/fiq.c | 3 +
12835 arch/arm/kernel/module-plts.c | 7 +-
12836 arch/arm/kernel/module.c | 38 +-
12837 arch/arm/kernel/patch.c | 2 +
12838 arch/arm/kernel/process.c | 90 +-
12839 arch/arm/kernel/reboot.c | 1 +
12840 arch/arm/kernel/setup.c | 20 +-
12841 arch/arm/kernel/signal.c | 35 +-
12842 arch/arm/kernel/smp.c | 2 +-
12843 arch/arm/kernel/tcm.c | 4 +-
12844 arch/arm/kernel/vmlinux.lds.S | 6 +-
12845 arch/arm/kvm/arm.c | 8 +-
12846 arch/arm/lib/copy_page.S | 1 +
12847 arch/arm/lib/csumpartialcopyuser.S | 4 +-
12848 arch/arm/lib/delay.c | 2 +-
12849 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
12850 arch/arm/mach-exynos/suspend.c | 6 +-
12851 arch/arm/mach-mvebu/coherency.c | 4 +-
12852 arch/arm/mach-omap2/board-n8x0.c | 2 +-
12853 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
12854 arch/arm/mach-omap2/omap-smp.c | 1 +
12855 arch/arm/mach-omap2/omap-wakeupgen.c | 2 +-
12856 arch/arm/mach-omap2/omap_device.c | 4 +-
12857 arch/arm/mach-omap2/omap_device.h | 4 +-
12858 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
12859 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
12860 arch/arm/mach-omap2/wd_timer.c | 6 +-
12861 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
12862 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
12863 arch/arm/mach-tegra/irq.c | 1 +
12864 arch/arm/mach-ux500/pm.c | 1 +
12865 arch/arm/mach-zynq/platsmp.c | 1 +
12866 arch/arm/mm/Kconfig | 6 +-
12867 arch/arm/mm/alignment.c | 8 +
12868 arch/arm/mm/cache-l2x0.c | 2 +-
12869 arch/arm/mm/context.c | 10 +-
12870 arch/arm/mm/fault.c | 146 +
12871 arch/arm/mm/fault.h | 12 +
12872 arch/arm/mm/init.c | 39 +
12873 arch/arm/mm/ioremap.c | 4 +-
12874 arch/arm/mm/mmap.c | 30 +-
12875 arch/arm/mm/mmu.c | 162 +-
12876 arch/arm/net/bpf_jit_32.c | 3 +
12877 arch/arm/plat-iop/setup.c | 2 +-
12878 arch/arm/plat-omap/sram.c | 2 +
12879 arch/arm64/include/asm/atomic.h | 10 +
12880 arch/arm64/include/asm/percpu.h | 8 +-
12881 arch/arm64/include/asm/pgalloc.h | 5 +
12882 arch/arm64/include/asm/uaccess.h | 1 +
12883 arch/arm64/mm/dma-mapping.c | 2 +-
12884 arch/avr32/include/asm/elf.h | 8 +-
12885 arch/avr32/include/asm/kmap_types.h | 4 +-
12886 arch/avr32/mm/fault.c | 27 +
12887 arch/frv/include/asm/atomic.h | 10 +
12888 arch/frv/include/asm/kmap_types.h | 2 +-
12889 arch/frv/mm/elf-fdpic.c | 3 +-
12890 arch/ia64/Makefile | 1 +
12891 arch/ia64/include/asm/atomic.h | 10 +
12892 arch/ia64/include/asm/elf.h | 7 +
12893 arch/ia64/include/asm/pgalloc.h | 12 +
12894 arch/ia64/include/asm/pgtable.h | 13 +-
12895 arch/ia64/include/asm/spinlock.h | 2 +-
12896 arch/ia64/include/asm/uaccess.h | 27 +-
12897 arch/ia64/kernel/module.c | 45 +-
12898 arch/ia64/kernel/palinfo.c | 2 +-
12899 arch/ia64/kernel/sys_ia64.c | 7 +
12900 arch/ia64/kernel/vmlinux.lds.S | 2 +-
12901 arch/ia64/mm/fault.c | 32 +-
12902 arch/ia64/mm/init.c | 15 +-
12903 arch/m32r/lib/usercopy.c | 6 +
12904 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
12905 arch/mips/include/asm/atomic.h | 368 +-
12906 arch/mips/include/asm/elf.h | 7 +
12907 arch/mips/include/asm/exec.h | 2 +-
12908 arch/mips/include/asm/hw_irq.h | 2 +-
12909 arch/mips/include/asm/local.h | 57 +
12910 arch/mips/include/asm/page.h | 2 +-
12911 arch/mips/include/asm/pgalloc.h | 5 +
12912 arch/mips/include/asm/pgtable.h | 3 +
12913 arch/mips/include/asm/uaccess.h | 1 +
12914 arch/mips/kernel/binfmt_elfn32.c | 7 +
12915 arch/mips/kernel/binfmt_elfo32.c | 7 +
12916 arch/mips/kernel/irq-gt641xx.c | 2 +-
12917 arch/mips/kernel/irq.c | 6 +-
12918 arch/mips/kernel/pm-cps.c | 2 +-
12919 arch/mips/kernel/process.c | 12 -
12920 arch/mips/kernel/sync-r4k.c | 24 +-
12921 arch/mips/kernel/traps.c | 13 +-
12922 arch/mips/mm/fault.c | 25 +
12923 arch/mips/mm/mmap.c | 51 +-
12924 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
12925 arch/mips/sni/rm200.c | 2 +-
12926 arch/mips/vr41xx/common/icu.c | 2 +-
12927 arch/mips/vr41xx/common/irq.c | 4 +-
12928 arch/parisc/include/asm/atomic.h | 10 +
12929 arch/parisc/include/asm/elf.h | 7 +
12930 arch/parisc/include/asm/pgalloc.h | 6 +
12931 arch/parisc/include/asm/pgtable.h | 11 +
12932 arch/parisc/include/asm/uaccess.h | 4 +-
12933 arch/parisc/kernel/module.c | 50 +-
12934 arch/parisc/kernel/sys_parisc.c | 15 +
12935 arch/parisc/kernel/traps.c | 4 +-
12936 arch/parisc/mm/fault.c | 140 +-
12937 arch/powerpc/include/asm/atomic.h | 329 +-
12938 arch/powerpc/include/asm/elf.h | 12 +
12939 arch/powerpc/include/asm/exec.h | 2 +-
12940 arch/powerpc/include/asm/kmap_types.h | 2 +-
12941 arch/powerpc/include/asm/local.h | 46 +
12942 arch/powerpc/include/asm/mman.h | 2 +-
12943 arch/powerpc/include/asm/page.h | 8 +-
12944 arch/powerpc/include/asm/page_64.h | 7 +-
12945 arch/powerpc/include/asm/pgalloc-64.h | 7 +
12946 arch/powerpc/include/asm/pgtable.h | 1 +
12947 arch/powerpc/include/asm/pte-hash32.h | 1 +
12948 arch/powerpc/include/asm/reg.h | 1 +
12949 arch/powerpc/include/asm/smp.h | 2 +-
12950 arch/powerpc/include/asm/spinlock.h | 42 +-
12951 arch/powerpc/include/asm/uaccess.h | 141 +-
12952 arch/powerpc/kernel/Makefile | 5 +
12953 arch/powerpc/kernel/exceptions-64e.S | 4 +-
12954 arch/powerpc/kernel/exceptions-64s.S | 2 +-
12955 arch/powerpc/kernel/module_32.c | 15 +-
12956 arch/powerpc/kernel/process.c | 46 -
12957 arch/powerpc/kernel/signal_32.c | 2 +-
12958 arch/powerpc/kernel/signal_64.c | 2 +-
12959 arch/powerpc/kernel/traps.c | 21 +
12960 arch/powerpc/kernel/vdso.c | 5 +-
12961 arch/powerpc/lib/usercopy_64.c | 18 -
12962 arch/powerpc/mm/fault.c | 56 +-
12963 arch/powerpc/mm/mmap.c | 16 +
12964 arch/powerpc/mm/slice.c | 13 +-
12965 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
12966 arch/s390/include/asm/atomic.h | 10 +
12967 arch/s390/include/asm/elf.h | 7 +
12968 arch/s390/include/asm/exec.h | 2 +-
12969 arch/s390/include/asm/uaccess.h | 13 +-
12970 arch/s390/kernel/module.c | 22 +-
12971 arch/s390/kernel/process.c | 24 -
12972 arch/s390/mm/mmap.c | 16 +
12973 arch/score/include/asm/exec.h | 2 +-
12974 arch/score/kernel/process.c | 5 -
12975 arch/sh/mm/mmap.c | 22 +-
12976 arch/sparc/include/asm/atomic_64.h | 110 +-
12977 arch/sparc/include/asm/cache.h | 2 +-
12978 arch/sparc/include/asm/elf_32.h | 7 +
12979 arch/sparc/include/asm/elf_64.h | 7 +
12980 arch/sparc/include/asm/pgalloc_32.h | 1 +
12981 arch/sparc/include/asm/pgalloc_64.h | 1 +
12982 arch/sparc/include/asm/pgtable.h | 4 +
12983 arch/sparc/include/asm/pgtable_32.h | 15 +-
12984 arch/sparc/include/asm/pgtsrmmu.h | 5 +
12985 arch/sparc/include/asm/setup.h | 4 +-
12986 arch/sparc/include/asm/spinlock_64.h | 35 +-
12987 arch/sparc/include/asm/thread_info_32.h | 1 +
12988 arch/sparc/include/asm/thread_info_64.h | 2 +
12989 arch/sparc/include/asm/uaccess.h | 1 +
12990 arch/sparc/include/asm/uaccess_32.h | 28 +-
12991 arch/sparc/include/asm/uaccess_64.h | 24 +-
12992 arch/sparc/kernel/Makefile | 2 +-
12993 arch/sparc/kernel/prom_common.c | 2 +-
12994 arch/sparc/kernel/smp_64.c | 8 +-
12995 arch/sparc/kernel/sys_sparc_32.c | 2 +-
12996 arch/sparc/kernel/sys_sparc_64.c | 52 +-
12997 arch/sparc/kernel/traps_64.c | 27 +-
12998 arch/sparc/lib/Makefile | 2 +-
12999 arch/sparc/lib/atomic_64.S | 57 +-
13000 arch/sparc/lib/ksyms.c | 6 +-
13001 arch/sparc/mm/Makefile | 2 +-
13002 arch/sparc/mm/fault_32.c | 292 +
13003 arch/sparc/mm/fault_64.c | 486 +
13004 arch/sparc/mm/hugetlbpage.c | 22 +-
13005 arch/sparc/mm/init_64.c | 10 +-
13006 arch/tile/include/asm/atomic_64.h | 10 +
13007 arch/tile/include/asm/uaccess.h | 4 +-
13008 arch/um/Makefile | 4 +
13009 arch/um/include/asm/kmap_types.h | 2 +-
13010 arch/um/include/asm/page.h | 3 +
13011 arch/um/include/asm/pgtable-3level.h | 1 +
13012 arch/um/kernel/process.c | 16 -
13013 arch/x86/Kconfig | 15 +-
13014 arch/x86/Kconfig.cpu | 6 +-
13015 arch/x86/Kconfig.debug | 4 +-
13016 arch/x86/Makefile | 13 +-
13017 arch/x86/boot/Makefile | 3 +
13018 arch/x86/boot/bitops.h | 4 +-
13019 arch/x86/boot/boot.h | 2 +-
13020 arch/x86/boot/compressed/Makefile | 3 +
13021 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
13022 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
13023 arch/x86/boot/compressed/head_32.S | 4 +-
13024 arch/x86/boot/compressed/head_64.S | 12 +-
13025 arch/x86/boot/compressed/misc.c | 11 +-
13026 arch/x86/boot/cpucheck.c | 16 +-
13027 arch/x86/boot/header.S | 6 +-
13028 arch/x86/boot/memory.c | 2 +-
13029 arch/x86/boot/video-vesa.c | 1 +
13030 arch/x86/boot/video.c | 2 +-
13031 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
13032 arch/x86/crypto/aesni-intel_asm.S | 106 +-
13033 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
13034 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
13035 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
13036 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
13037 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
13038 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
13039 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +-
13040 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
13041 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
13042 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
13043 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
13044 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
13045 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
13046 arch/x86/crypto/sha256-avx-asm.S | 2 +
13047 arch/x86/crypto/sha256-avx2-asm.S | 2 +
13048 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
13049 arch/x86/crypto/sha512-avx-asm.S | 2 +
13050 arch/x86/crypto/sha512-avx2-asm.S | 2 +
13051 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
13052 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
13053 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
13054 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
13055 arch/x86/entry/calling.h | 86 +-
13056 arch/x86/entry/common.c | 13 +-
13057 arch/x86/entry/entry_32.S | 351 +-
13058 arch/x86/entry/entry_64.S | 619 +-
13059 arch/x86/entry/entry_64_compat.S | 159 +-
13060 arch/x86/entry/thunk_64.S | 2 +
13061 arch/x86/entry/vdso/Makefile | 2 +-
13062 arch/x86/entry/vdso/vdso2c.h | 8 +-
13063 arch/x86/entry/vdso/vma.c | 41 +-
13064 arch/x86/entry/vsyscall/vsyscall_64.c | 16 +-
13065 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
13066 arch/x86/ia32/ia32_signal.c | 23 +-
13067 arch/x86/ia32/sys_ia32.c | 42 +-
13068 arch/x86/include/asm/alternative-asm.h | 43 +-
13069 arch/x86/include/asm/alternative.h | 4 +-
13070 arch/x86/include/asm/apic.h | 2 +-
13071 arch/x86/include/asm/apm.h | 4 +-
13072 arch/x86/include/asm/atomic.h | 230 +-
13073 arch/x86/include/asm/atomic64_32.h | 100 +
13074 arch/x86/include/asm/atomic64_64.h | 164 +-
13075 arch/x86/include/asm/bitops.h | 18 +-
13076 arch/x86/include/asm/boot.h | 2 +-
13077 arch/x86/include/asm/cache.h | 5 +-
13078 arch/x86/include/asm/checksum_32.h | 12 +-
13079 arch/x86/include/asm/cmpxchg.h | 39 +
13080 arch/x86/include/asm/compat.h | 2 +-
13081 arch/x86/include/asm/cpufeature.h | 17 +-
13082 arch/x86/include/asm/desc.h | 78 +-
13083 arch/x86/include/asm/desc_defs.h | 6 +
13084 arch/x86/include/asm/div64.h | 2 +-
13085 arch/x86/include/asm/elf.h | 33 +-
13086 arch/x86/include/asm/emergency-restart.h | 2 +-
13087 arch/x86/include/asm/fpu/internal.h | 42 +-
13088 arch/x86/include/asm/fpu/types.h | 6 +-
13089 arch/x86/include/asm/futex.h | 14 +-
13090 arch/x86/include/asm/hw_irq.h | 4 +-
13091 arch/x86/include/asm/i8259.h | 2 +-
13092 arch/x86/include/asm/io.h | 22 +-
13093 arch/x86/include/asm/irqflags.h | 5 +
13094 arch/x86/include/asm/kprobes.h | 9 +-
13095 arch/x86/include/asm/local.h | 106 +-
13096 arch/x86/include/asm/mman.h | 15 +
13097 arch/x86/include/asm/mmu.h | 14 +-
13098 arch/x86/include/asm/mmu_context.h | 114 +-
13099 arch/x86/include/asm/module.h | 17 +-
13100 arch/x86/include/asm/nmi.h | 19 +-
13101 arch/x86/include/asm/page.h | 1 +
13102 arch/x86/include/asm/page_32.h | 12 +-
13103 arch/x86/include/asm/page_64.h | 14 +-
13104 arch/x86/include/asm/paravirt.h | 46 +-
13105 arch/x86/include/asm/paravirt_types.h | 15 +-
13106 arch/x86/include/asm/pgalloc.h | 23 +
13107 arch/x86/include/asm/pgtable-2level.h | 2 +
13108 arch/x86/include/asm/pgtable-3level.h | 7 +
13109 arch/x86/include/asm/pgtable.h | 128 +-
13110 arch/x86/include/asm/pgtable_32.h | 14 +-
13111 arch/x86/include/asm/pgtable_32_types.h | 24 +-
13112 arch/x86/include/asm/pgtable_64.h | 23 +-
13113 arch/x86/include/asm/pgtable_64_types.h | 5 +
13114 arch/x86/include/asm/pgtable_types.h | 26 +-
13115 arch/x86/include/asm/preempt.h | 2 +-
13116 arch/x86/include/asm/processor.h | 57 +-
13117 arch/x86/include/asm/ptrace.h | 13 +-
13118 arch/x86/include/asm/realmode.h | 4 +-
13119 arch/x86/include/asm/reboot.h | 10 +-
13120 arch/x86/include/asm/rmwcc.h | 84 +-
13121 arch/x86/include/asm/rwsem.h | 60 +-
13122 arch/x86/include/asm/segment.h | 27 +-
13123 arch/x86/include/asm/smap.h | 43 +
13124 arch/x86/include/asm/smp.h | 14 +-
13125 arch/x86/include/asm/stackprotector.h | 4 +-
13126 arch/x86/include/asm/stacktrace.h | 32 +-
13127 arch/x86/include/asm/switch_to.h | 4 +-
13128 arch/x86/include/asm/sys_ia32.h | 6 +-
13129 arch/x86/include/asm/thread_info.h | 27 +-
13130 arch/x86/include/asm/tlbflush.h | 77 +-
13131 arch/x86/include/asm/uaccess.h | 192 +-
13132 arch/x86/include/asm/uaccess_32.h | 28 +-
13133 arch/x86/include/asm/uaccess_64.h | 169 +-
13134 arch/x86/include/asm/word-at-a-time.h | 2 +-
13135 arch/x86/include/asm/x86_init.h | 10 +-
13136 arch/x86/include/asm/xen/page.h | 2 +-
13137 arch/x86/include/uapi/asm/e820.h | 2 +-
13138 arch/x86/kernel/Makefile | 2 +-
13139 arch/x86/kernel/acpi/boot.c | 4 +-
13140 arch/x86/kernel/acpi/sleep.c | 4 +
13141 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
13142 arch/x86/kernel/alternative.c | 124 +-
13143 arch/x86/kernel/apic/apic.c | 4 +-
13144 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
13145 arch/x86/kernel/apic/apic_noop.c | 2 +-
13146 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
13147 arch/x86/kernel/apic/io_apic.c | 8 +-
13148 arch/x86/kernel/apic/msi.c | 2 +-
13149 arch/x86/kernel/apic/probe_32.c | 4 +-
13150 arch/x86/kernel/apic/vector.c | 4 +-
13151 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
13152 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
13153 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
13154 arch/x86/kernel/apm_32.c | 21 +-
13155 arch/x86/kernel/asm-offsets.c | 20 +
13156 arch/x86/kernel/asm-offsets_64.c | 1 +
13157 arch/x86/kernel/cpu/Makefile | 4 -
13158 arch/x86/kernel/cpu/amd.c | 2 +-
13159 arch/x86/kernel/cpu/bugs_64.c | 2 +
13160 arch/x86/kernel/cpu/common.c | 202 +-
13161 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
13162 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
13163 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
13164 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
13165 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
13166 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
13167 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
13168 arch/x86/kernel/cpu/perf_event.c | 10 +-
13169 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
13170 arch/x86/kernel/cpu/perf_event_intel.c | 6 +-
13171 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
13172 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
13173 arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +-
13174 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
13175 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
13176 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
13177 arch/x86/kernel/crash_dump_64.c | 2 +-
13178 arch/x86/kernel/doublefault.c | 8 +-
13179 arch/x86/kernel/dumpstack.c | 24 +-
13180 arch/x86/kernel/dumpstack_32.c | 25 +-
13181 arch/x86/kernel/dumpstack_64.c | 62 +-
13182 arch/x86/kernel/e820.c | 4 +-
13183 arch/x86/kernel/early_printk.c | 1 +
13184 arch/x86/kernel/espfix_64.c | 44 +-
13185 arch/x86/kernel/fpu/core.c | 24 +-
13186 arch/x86/kernel/fpu/init.c | 40 +-
13187 arch/x86/kernel/fpu/regset.c | 22 +-
13188 arch/x86/kernel/fpu/signal.c | 20 +-
13189 arch/x86/kernel/fpu/xstate.c | 8 +-
13190 arch/x86/kernel/ftrace.c | 18 +-
13191 arch/x86/kernel/head64.c | 14 +-
13192 arch/x86/kernel/head_32.S | 235 +-
13193 arch/x86/kernel/head_64.S | 173 +-
13194 arch/x86/kernel/i386_ksyms_32.c | 12 +
13195 arch/x86/kernel/i8259.c | 10 +-
13196 arch/x86/kernel/io_delay.c | 2 +-
13197 arch/x86/kernel/ioport.c | 2 +-
13198 arch/x86/kernel/irq.c | 8 +-
13199 arch/x86/kernel/irq_32.c | 45 +-
13200 arch/x86/kernel/jump_label.c | 10 +-
13201 arch/x86/kernel/kgdb.c | 21 +-
13202 arch/x86/kernel/kprobes/core.c | 28 +-
13203 arch/x86/kernel/kprobes/opt.c | 16 +-
13204 arch/x86/kernel/ksysfs.c | 2 +-
13205 arch/x86/kernel/kvmclock.c | 20 +-
13206 arch/x86/kernel/ldt.c | 25 +
13207 arch/x86/kernel/livepatch.c | 12 +-
13208 arch/x86/kernel/machine_kexec_32.c | 6 +-
13209 arch/x86/kernel/mcount_64.S | 19 +-
13210 arch/x86/kernel/module.c | 78 +-
13211 arch/x86/kernel/msr.c | 2 +-
13212 arch/x86/kernel/nmi.c | 34 +-
13213 arch/x86/kernel/nmi_selftest.c | 4 +-
13214 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
13215 arch/x86/kernel/paravirt.c | 45 +-
13216 arch/x86/kernel/paravirt_patch_64.c | 8 +
13217 arch/x86/kernel/pci-calgary_64.c | 2 +-
13218 arch/x86/kernel/pci-iommu_table.c | 2 +-
13219 arch/x86/kernel/pci-swiotlb.c | 2 +-
13220 arch/x86/kernel/process.c | 80 +-
13221 arch/x86/kernel/process_32.c | 29 +-
13222 arch/x86/kernel/process_64.c | 14 +-
13223 arch/x86/kernel/ptrace.c | 20 +-
13224 arch/x86/kernel/pvclock.c | 8 +-
13225 arch/x86/kernel/reboot.c | 44 +-
13226 arch/x86/kernel/reboot_fixups_32.c | 2 +-
13227 arch/x86/kernel/relocate_kernel_64.S | 3 +-
13228 arch/x86/kernel/setup.c | 29 +-
13229 arch/x86/kernel/setup_percpu.c | 29 +-
13230 arch/x86/kernel/signal.c | 17 +-
13231 arch/x86/kernel/smp.c | 2 +-
13232 arch/x86/kernel/smpboot.c | 29 +-
13233 arch/x86/kernel/step.c | 6 +-
13234 arch/x86/kernel/sys_i386_32.c | 184 +
13235 arch/x86/kernel/sys_x86_64.c | 22 +-
13236 arch/x86/kernel/tboot.c | 14 +-
13237 arch/x86/kernel/time.c | 8 +-
13238 arch/x86/kernel/tls.c | 7 +-
13239 arch/x86/kernel/tracepoint.c | 4 +-
13240 arch/x86/kernel/traps.c | 53 +-
13241 arch/x86/kernel/tsc.c | 2 +-
13242 arch/x86/kernel/uprobes.c | 2 +-
13243 arch/x86/kernel/vm86_32.c | 6 +-
13244 arch/x86/kernel/vmlinux.lds.S | 153 +-
13245 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
13246 arch/x86/kernel/x86_init.c | 6 +-
13247 arch/x86/kvm/cpuid.c | 21 +-
13248 arch/x86/kvm/emulate.c | 2 +-
13249 arch/x86/kvm/lapic.c | 2 +-
13250 arch/x86/kvm/paging_tmpl.h | 2 +-
13251 arch/x86/kvm/svm.c | 10 +-
13252 arch/x86/kvm/vmx.c | 62 +-
13253 arch/x86/kvm/x86.c | 42 +-
13254 arch/x86/lguest/boot.c | 3 +-
13255 arch/x86/lib/atomic64_386_32.S | 164 +
13256 arch/x86/lib/atomic64_cx8_32.S | 98 +-
13257 arch/x86/lib/checksum_32.S | 99 +-
13258 arch/x86/lib/clear_page_64.S | 3 +
13259 arch/x86/lib/cmpxchg16b_emu.S | 3 +
13260 arch/x86/lib/copy_page_64.S | 14 +-
13261 arch/x86/lib/copy_user_64.S | 66 +-
13262 arch/x86/lib/csum-copy_64.S | 14 +-
13263 arch/x86/lib/csum-wrappers_64.c | 8 +-
13264 arch/x86/lib/getuser.S | 74 +-
13265 arch/x86/lib/insn.c | 8 +-
13266 arch/x86/lib/iomap_copy_64.S | 2 +
13267 arch/x86/lib/memcpy_64.S | 6 +
13268 arch/x86/lib/memmove_64.S | 3 +-
13269 arch/x86/lib/memset_64.S | 3 +
13270 arch/x86/lib/mmx_32.c | 243 +-
13271 arch/x86/lib/msr-reg.S | 2 +
13272 arch/x86/lib/putuser.S | 87 +-
13273 arch/x86/lib/rwsem.S | 6 +-
13274 arch/x86/lib/usercopy_32.c | 359 +-
13275 arch/x86/lib/usercopy_64.c | 20 +-
13276 arch/x86/math-emu/fpu_aux.c | 2 +-
13277 arch/x86/math-emu/fpu_entry.c | 4 +-
13278 arch/x86/math-emu/fpu_system.h | 2 +-
13279 arch/x86/mm/Makefile | 4 +
13280 arch/x86/mm/extable.c | 26 +-
13281 arch/x86/mm/fault.c | 570 +-
13282 arch/x86/mm/gup.c | 6 +-
13283 arch/x86/mm/highmem_32.c | 6 +
13284 arch/x86/mm/hugetlbpage.c | 24 +-
13285 arch/x86/mm/init.c | 111 +-
13286 arch/x86/mm/init_32.c | 111 +-
13287 arch/x86/mm/init_64.c | 46 +-
13288 arch/x86/mm/iomap_32.c | 4 +
13289 arch/x86/mm/ioremap.c | 52 +-
13290 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
13291 arch/x86/mm/mmap.c | 40 +-
13292 arch/x86/mm/mmio-mod.c | 10 +-
13293 arch/x86/mm/numa.c | 2 +-
13294 arch/x86/mm/pageattr.c | 38 +-
13295 arch/x86/mm/pat.c | 12 +-
13296 arch/x86/mm/pat_rbtree.c | 2 +-
13297 arch/x86/mm/pf_in.c | 10 +-
13298 arch/x86/mm/pgtable.c | 214 +-
13299 arch/x86/mm/pgtable_32.c | 3 +
13300 arch/x86/mm/setup_nx.c | 7 +
13301 arch/x86/mm/tlb.c | 4 +
13302 arch/x86/mm/uderef_64.c | 37 +
13303 arch/x86/net/bpf_jit.S | 11 +
13304 arch/x86/net/bpf_jit_comp.c | 13 +-
13305 arch/x86/oprofile/backtrace.c | 6 +-
13306 arch/x86/oprofile/nmi_int.c | 8 +-
13307 arch/x86/oprofile/op_model_amd.c | 8 +-
13308 arch/x86/oprofile/op_model_ppro.c | 7 +-
13309 arch/x86/oprofile/op_x86_model.h | 2 +-
13310 arch/x86/pci/intel_mid_pci.c | 2 +-
13311 arch/x86/pci/irq.c | 8 +-
13312 arch/x86/pci/pcbios.c | 144 +-
13313 arch/x86/platform/efi/efi_32.c | 24 +
13314 arch/x86/platform/efi/efi_64.c | 26 +-
13315 arch/x86/platform/efi/efi_stub_32.S | 64 +-
13316 arch/x86/platform/efi/efi_stub_64.S | 2 +
13317 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
13318 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
13319 arch/x86/platform/intel-mid/mfld.c | 4 +-
13320 arch/x86/platform/intel-mid/mrfl.c | 2 +-
13321 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
13322 arch/x86/platform/olpc/olpc_dt.c | 2 +-
13323 arch/x86/power/cpu.c | 11 +-
13324 arch/x86/realmode/init.c | 10 +-
13325 arch/x86/realmode/rm/Makefile | 3 +
13326 arch/x86/realmode/rm/header.S | 4 +-
13327 arch/x86/realmode/rm/reboot.S | 4 +
13328 arch/x86/realmode/rm/trampoline_32.S | 12 +-
13329 arch/x86/realmode/rm/trampoline_64.S | 3 +-
13330 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
13331 arch/x86/tools/Makefile | 2 +-
13332 arch/x86/tools/relocs.c | 96 +-
13333 arch/x86/um/mem_32.c | 2 +-
13334 arch/x86/um/tls_32.c | 2 +-
13335 arch/x86/xen/enlighten.c | 50 +-
13336 arch/x86/xen/mmu.c | 19 +-
13337 arch/x86/xen/smp.c | 16 +-
13338 arch/x86/xen/xen-asm_32.S | 2 +-
13339 arch/x86/xen/xen-head.S | 11 +
13340 arch/x86/xen/xen-ops.h | 2 -
13341 block/bio.c | 4 +-
13342 block/blk-iopoll.c | 2 +-
13343 block/blk-map.c | 2 +-
13344 block/blk-softirq.c | 2 +-
13345 block/bsg.c | 12 +-
13346 block/compat_ioctl.c | 4 +-
13347 block/genhd.c | 9 +-
13348 block/partitions/efi.c | 8 +-
13349 block/scsi_ioctl.c | 29 +-
13350 crypto/cryptd.c | 4 +-
13351 crypto/pcrypt.c | 2 +-
13352 crypto/zlib.c | 12 +-
13353 drivers/acpi/acpi_video.c | 2 +-
13354 drivers/acpi/apei/apei-internal.h | 2 +-
13355 drivers/acpi/apei/ghes.c | 4 +-
13356 drivers/acpi/bgrt.c | 6 +-
13357 drivers/acpi/blacklist.c | 4 +-
13358 drivers/acpi/bus.c | 4 +-
13359 drivers/acpi/device_pm.c | 4 +-
13360 drivers/acpi/ec.c | 2 +-
13361 drivers/acpi/pci_slot.c | 2 +-
13362 drivers/acpi/processor_idle.c | 2 +-
13363 drivers/acpi/processor_pdc.c | 2 +-
13364 drivers/acpi/sleep.c | 2 +-
13365 drivers/acpi/sysfs.c | 4 +-
13366 drivers/acpi/thermal.c | 2 +-
13367 drivers/acpi/video_detect.c | 7 +-
13368 drivers/ata/libata-core.c | 12 +-
13369 drivers/ata/libata-scsi.c | 2 +-
13370 drivers/ata/libata.h | 2 +-
13371 drivers/ata/pata_arasan_cf.c | 4 +-
13372 drivers/atm/adummy.c | 2 +-
13373 drivers/atm/ambassador.c | 8 +-
13374 drivers/atm/atmtcp.c | 14 +-
13375 drivers/atm/eni.c | 10 +-
13376 drivers/atm/firestream.c | 8 +-
13377 drivers/atm/fore200e.c | 14 +-
13378 drivers/atm/he.c | 18 +-
13379 drivers/atm/horizon.c | 4 +-
13380 drivers/atm/idt77252.c | 36 +-
13381 drivers/atm/iphase.c | 34 +-
13382 drivers/atm/lanai.c | 12 +-
13383 drivers/atm/nicstar.c | 46 +-
13384 drivers/atm/solos-pci.c | 4 +-
13385 drivers/atm/suni.c | 4 +-
13386 drivers/atm/uPD98402.c | 16 +-
13387 drivers/atm/zatm.c | 6 +-
13388 drivers/base/bus.c | 4 +-
13389 drivers/base/devtmpfs.c | 8 +-
13390 drivers/base/node.c | 2 +-
13391 drivers/base/platform-msi.c | 20 +-
13392 drivers/base/power/domain.c | 11 +-
13393 drivers/base/power/sysfs.c | 2 +-
13394 drivers/base/power/wakeup.c | 8 +-
13395 drivers/base/regmap/regmap-debugfs.c | 11 +-
13396 drivers/base/syscore.c | 4 +-
13397 drivers/block/cciss.c | 28 +-
13398 drivers/block/cciss.h | 2 +-
13399 drivers/block/cpqarray.c | 28 +-
13400 drivers/block/cpqarray.h | 2 +-
13401 drivers/block/drbd/drbd_bitmap.c | 2 +-
13402 drivers/block/drbd/drbd_int.h | 8 +-
13403 drivers/block/drbd/drbd_main.c | 12 +-
13404 drivers/block/drbd/drbd_nl.c | 4 +-
13405 drivers/block/drbd/drbd_receiver.c | 34 +-
13406 drivers/block/drbd/drbd_worker.c | 8 +-
13407 drivers/block/pktcdvd.c | 4 +-
13408 drivers/block/rbd.c | 2 +-
13409 drivers/bluetooth/btwilink.c | 2 +-
13410 drivers/bus/arm-cci.c | 12 +-
13411 drivers/cdrom/cdrom.c | 11 +-
13412 drivers/cdrom/gdrom.c | 1 -
13413 drivers/char/agp/compat_ioctl.c | 2 +-
13414 drivers/char/agp/frontend.c | 4 +-
13415 drivers/char/agp/intel-gtt.c | 4 +-
13416 drivers/char/hpet.c | 2 +-
13417 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
13418 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
13419 drivers/char/mem.c | 47 +-
13420 drivers/char/nvram.c | 2 +-
13421 drivers/char/pcmcia/synclink_cs.c | 16 +-
13422 drivers/char/random.c | 12 +-
13423 drivers/char/sonypi.c | 11 +-
13424 drivers/char/tpm/tpm_acpi.c | 3 +-
13425 drivers/char/tpm/tpm_eventlog.c | 4 +-
13426 drivers/char/virtio_console.c | 4 +-
13427 drivers/clk/clk-composite.c | 2 +-
13428 drivers/clk/samsung/clk.h | 2 +-
13429 drivers/clk/socfpga/clk-gate.c | 9 +-
13430 drivers/clk/socfpga/clk-pll.c | 9 +-
13431 drivers/clk/ti/clk.c | 8 +-
13432 drivers/cpufreq/acpi-cpufreq.c | 17 +-
13433 drivers/cpufreq/cpufreq-dt.c | 4 +-
13434 drivers/cpufreq/cpufreq.c | 30 +-
13435 drivers/cpufreq/cpufreq_governor.c | 2 +-
13436 drivers/cpufreq/cpufreq_governor.h | 4 +-
13437 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
13438 drivers/cpufreq/intel_pstate.c | 33 +-
13439 drivers/cpufreq/p4-clockmod.c | 12 +-
13440 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
13441 drivers/cpufreq/speedstep-centrino.c | 7 +-
13442 drivers/cpuidle/driver.c | 2 +-
13443 drivers/cpuidle/dt_idle_states.c | 2 +-
13444 drivers/cpuidle/governor.c | 2 +-
13445 drivers/cpuidle/sysfs.c | 2 +-
13446 drivers/crypto/hifn_795x.c | 4 +-
13447 drivers/devfreq/devfreq.c | 4 +-
13448 drivers/dma/sh/shdma-base.c | 4 +-
13449 drivers/dma/sh/shdmac.c | 2 +-
13450 drivers/edac/edac_device.c | 4 +-
13451 drivers/edac/edac_mc_sysfs.c | 2 +-
13452 drivers/edac/edac_pci.c | 4 +-
13453 drivers/edac/edac_pci_sysfs.c | 22 +-
13454 drivers/edac/mce_amd.h | 2 +-
13455 drivers/firewire/core-card.c | 6 +-
13456 drivers/firewire/core-device.c | 2 +-
13457 drivers/firewire/core-transaction.c | 1 +
13458 drivers/firewire/core.h | 1 +
13459 drivers/firmware/dmi-id.c | 2 +-
13460 drivers/firmware/dmi_scan.c | 12 +-
13461 drivers/firmware/efi/cper.c | 8 +-
13462 drivers/firmware/efi/efi.c | 12 +-
13463 drivers/firmware/efi/efivars.c | 2 +-
13464 drivers/firmware/efi/runtime-map.c | 2 +-
13465 drivers/firmware/google/gsmi.c | 2 +-
13466 drivers/firmware/google/memconsole.c | 7 +-
13467 drivers/firmware/memmap.c | 2 +-
13468 drivers/firmware/psci.c | 2 +-
13469 drivers/gpio/gpio-davinci.c | 6 +-
13470 drivers/gpio/gpio-em.c | 2 +-
13471 drivers/gpio/gpio-ich.c | 2 +-
13472 drivers/gpio/gpio-omap.c | 4 +-
13473 drivers/gpio/gpio-rcar.c | 2 +-
13474 drivers/gpio/gpio-vr41xx.c | 2 +-
13475 drivers/gpio/gpiolib.c | 12 +-
13476 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
13477 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
13478 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
13479 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
13480 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
13481 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
13482 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
13483 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
13484 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
13485 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
13486 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
13487 drivers/gpu/drm/drm_crtc.c | 2 +-
13488 drivers/gpu/drm/drm_drv.c | 2 +-
13489 drivers/gpu/drm/drm_fops.c | 12 +-
13490 drivers/gpu/drm/drm_global.c | 14 +-
13491 drivers/gpu/drm/drm_info.c | 13 +-
13492 drivers/gpu/drm/drm_ioc32.c | 13 +-
13493 drivers/gpu/drm/drm_ioctl.c | 2 +-
13494 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
13495 drivers/gpu/drm/i810/i810_drv.h | 4 +-
13496 drivers/gpu/drm/i915/i915_dma.c | 2 +-
13497 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
13498 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
13499 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
13500 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
13501 drivers/gpu/drm/i915/intel_display.c | 26 +-
13502 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
13503 drivers/gpu/drm/mga/mga_drv.h | 4 +-
13504 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
13505 drivers/gpu/drm/mga/mga_irq.c | 8 +-
13506 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
13507 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
13508 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
13509 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
13510 drivers/gpu/drm/omapdrm/Makefile | 2 +-
13511 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
13512 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
13513 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
13514 drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +-
13515 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
13516 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
13517 drivers/gpu/drm/r128/r128_cce.c | 2 +-
13518 drivers/gpu/drm/r128/r128_drv.h | 4 +-
13519 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
13520 drivers/gpu/drm/r128/r128_irq.c | 4 +-
13521 drivers/gpu/drm/r128/r128_state.c | 4 +-
13522 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
13523 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
13524 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
13525 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
13526 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
13527 drivers/gpu/drm/radeon/radeon_state.c | 4 +-
13528 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
13529 drivers/gpu/drm/tegra/dc.c | 2 +-
13530 drivers/gpu/drm/tegra/dsi.c | 2 +-
13531 drivers/gpu/drm/tegra/hdmi.c | 2 +-
13532 drivers/gpu/drm/tegra/sor.c | 7 +-
13533 drivers/gpu/drm/tilcdc/Makefile | 6 +-
13534 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
13535 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
13536 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
13537 drivers/gpu/drm/udl/udl_fb.c | 1 -
13538 drivers/gpu/drm/via/via_drv.h | 4 +-
13539 drivers/gpu/drm/via/via_irq.c | 18 +-
13540 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
13541 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
13542 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
13543 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
13544 drivers/gpu/vga/vga_switcheroo.c | 4 +-
13545 drivers/hid/hid-core.c | 4 +-
13546 drivers/hid/hid-sensor-custom.c | 2 +-
13547 drivers/hv/channel.c | 2 +-
13548 drivers/hv/hv.c | 4 +-
13549 drivers/hv/hv_balloon.c | 18 +-
13550 drivers/hv/hyperv_vmbus.h | 2 +-
13551 drivers/hwmon/acpi_power_meter.c | 6 +-
13552 drivers/hwmon/applesmc.c | 2 +-
13553 drivers/hwmon/asus_atk0110.c | 10 +-
13554 drivers/hwmon/coretemp.c | 2 +-
13555 drivers/hwmon/dell-smm-hwmon.c | 2 +-
13556 drivers/hwmon/ibmaem.c | 2 +-
13557 drivers/hwmon/iio_hwmon.c | 2 +-
13558 drivers/hwmon/nct6683.c | 6 +-
13559 drivers/hwmon/nct6775.c | 6 +-
13560 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
13561 drivers/hwmon/sht15.c | 12 +-
13562 drivers/hwmon/via-cputemp.c | 2 +-
13563 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
13564 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
13565 drivers/i2c/i2c-dev.c | 2 +-
13566 drivers/ide/ide-cd.c | 2 +-
13567 drivers/ide/ide-disk.c | 2 +-
13568 drivers/iio/industrialio-core.c | 2 +-
13569 drivers/iio/magnetometer/ak8975.c | 2 +-
13570 drivers/infiniband/core/cm.c | 32 +-
13571 drivers/infiniband/core/fmr_pool.c | 20 +-
13572 drivers/infiniband/core/uverbs_cmd.c | 3 +
13573 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
13574 drivers/infiniband/hw/mlx4/mad.c | 2 +-
13575 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
13576 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
13577 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
13578 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
13579 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
13580 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
13581 drivers/infiniband/hw/nes/nes.c | 4 +-
13582 drivers/infiniband/hw/nes/nes.h | 40 +-
13583 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
13584 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
13585 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
13586 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
13587 drivers/infiniband/hw/qib/qib.h | 1 +
13588 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
13589 drivers/input/gameport/gameport.c | 4 +-
13590 drivers/input/input.c | 4 +-
13591 drivers/input/joystick/sidewinder.c | 1 +
13592 drivers/input/joystick/xpad.c | 4 +-
13593 drivers/input/misc/ims-pcu.c | 4 +-
13594 drivers/input/mouse/psmouse.h | 2 +-
13595 drivers/input/mousedev.c | 2 +-
13596 drivers/input/serio/serio.c | 4 +-
13597 drivers/input/serio/serio_raw.c | 4 +-
13598 drivers/input/touchscreen/htcpen.c | 2 +-
13599 drivers/iommu/arm-smmu-v3.c | 2 +-
13600 drivers/iommu/arm-smmu.c | 43 +-
13601 drivers/iommu/io-pgtable-arm.c | 101 +-
13602 drivers/iommu/io-pgtable.c | 11 +-
13603 drivers/iommu/io-pgtable.h | 19 +-
13604 drivers/iommu/iommu.c | 2 +-
13605 drivers/iommu/ipmmu-vmsa.c | 13 +-
13606 drivers/iommu/irq_remapping.c | 2 +-
13607 drivers/irqchip/irq-gic.c | 2 +-
13608 drivers/irqchip/irq-i8259.c | 2 +-
13609 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
13610 drivers/irqchip/irq-renesas-irqc.c | 2 +-
13611 drivers/isdn/capi/capi.c | 10 +-
13612 drivers/isdn/gigaset/interface.c | 8 +-
13613 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
13614 drivers/isdn/hardware/avm/b1.c | 4 +-
13615 drivers/isdn/i4l/isdn_common.c | 2 +
13616 drivers/isdn/i4l/isdn_tty.c | 22 +-
13617 drivers/isdn/icn/icn.c | 2 +-
13618 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
13619 drivers/lguest/core.c | 10 +-
13620 drivers/lguest/page_tables.c | 2 +-
13621 drivers/lguest/x86/core.c | 12 +-
13622 drivers/lguest/x86/switcher_32.S | 27 +-
13623 drivers/md/bcache/closure.h | 2 +-
13624 drivers/md/bitmap.c | 2 +-
13625 drivers/md/dm-ioctl.c | 2 +-
13626 drivers/md/dm-raid1.c | 18 +-
13627 drivers/md/dm-stats.c | 6 +-
13628 drivers/md/dm-stripe.c | 10 +-
13629 drivers/md/dm-table.c | 2 +-
13630 drivers/md/dm-thin-metadata.c | 4 +-
13631 drivers/md/dm.c | 16 +-
13632 drivers/md/md.c | 26 +-
13633 drivers/md/md.h | 6 +-
13634 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
13635 drivers/md/persistent-data/dm-space-map.h | 1 +
13636 drivers/md/raid1.c | 4 +-
13637 drivers/md/raid10.c | 18 +-
13638 drivers/md/raid5.c | 22 +-
13639 drivers/media/dvb-core/dvbdev.c | 2 +-
13640 drivers/media/dvb-frontends/af9033.h | 2 +-
13641 drivers/media/dvb-frontends/dib3000.h | 2 +-
13642 drivers/media/dvb-frontends/dib7000p.h | 2 +-
13643 drivers/media/dvb-frontends/dib8000.h | 2 +-
13644 drivers/media/pci/cx88/cx88-video.c | 6 +-
13645 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
13646 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
13647 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
13648 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
13649 drivers/media/pci/tw68/tw68-core.c | 2 +-
13650 drivers/media/platform/omap/omap_vout.c | 11 +-
13651 drivers/media/platform/s5p-tv/mixer.h | 2 +-
13652 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
13653 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
13654 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
13655 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
13656 drivers/media/radio/radio-cadet.c | 2 +
13657 drivers/media/radio/radio-maxiradio.c | 2 +-
13658 drivers/media/radio/radio-shark.c | 2 +-
13659 drivers/media/radio/radio-shark2.c | 2 +-
13660 drivers/media/radio/radio-si476x.c | 2 +-
13661 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
13662 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
13663 drivers/media/v4l2-core/v4l2-device.c | 4 +-
13664 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
13665 drivers/memory/omap-gpmc.c | 21 +-
13666 drivers/message/fusion/mptsas.c | 34 +-
13667 drivers/mfd/ab8500-debugfs.c | 2 +-
13668 drivers/mfd/kempld-core.c | 2 +-
13669 drivers/mfd/max8925-i2c.c | 2 +-
13670 drivers/mfd/tps65910.c | 2 +-
13671 drivers/mfd/twl4030-irq.c | 9 +-
13672 drivers/mfd/wm5110-tables.c | 2 +-
13673 drivers/mfd/wm8998-tables.c | 2 +-
13674 drivers/misc/c2port/core.c | 4 +-
13675 drivers/misc/kgdbts.c | 4 +-
13676 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
13677 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
13678 drivers/misc/mic/scif/scif_rb.c | 8 +-
13679 drivers/misc/sgi-gru/gruhandles.c | 4 +-
13680 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
13681 drivers/misc/sgi-gru/grutables.h | 154 +-
13682 drivers/misc/sgi-xp/xp.h | 2 +-
13683 drivers/misc/sgi-xp/xpc.h | 3 +-
13684 drivers/misc/sgi-xp/xpc_main.c | 2 +-
13685 drivers/mmc/card/block.c | 2 +-
13686 drivers/mmc/host/dw_mmc.h | 2 +-
13687 drivers/mmc/host/mmci.c | 4 +-
13688 drivers/mmc/host/omap_hsmmc.c | 4 +-
13689 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
13690 drivers/mmc/host/sdhci-s3c.c | 8 +-
13691 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
13692 drivers/mtd/nand/denali.c | 1 +
13693 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
13694 drivers/mtd/nftlmount.c | 1 +
13695 drivers/mtd/sm_ftl.c | 2 +-
13696 drivers/net/bonding/bond_netlink.c | 2 +-
13697 drivers/net/caif/caif_hsi.c | 2 +-
13698 drivers/net/can/Kconfig | 2 +-
13699 drivers/net/can/dev.c | 2 +-
13700 drivers/net/can/vcan.c | 2 +-
13701 drivers/net/dummy.c | 2 +-
13702 drivers/net/ethernet/8390/ax88796.c | 4 +-
13703 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
13704 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
13705 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
13706 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
13707 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
13708 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
13709 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
13710 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
13711 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
13712 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
13713 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
13714 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
13715 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
13716 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
13717 drivers/net/ethernet/broadcom/tg3.h | 1 +
13718 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
13719 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
13720 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
13721 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
13722 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
13723 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
13724 drivers/net/ethernet/faraday/ftmac100.c | 2 +
13725 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
13726 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
13727 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
13728 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
13729 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
13730 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
13731 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
13732 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
13733 drivers/net/ethernet/realtek/r8169.c | 8 +-
13734 drivers/net/ethernet/sfc/ptp.c | 2 +-
13735 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
13736 drivers/net/ethernet/via/via-rhine.c | 2 +-
13737 drivers/net/geneve.c | 2 +-
13738 drivers/net/hyperv/hyperv_net.h | 2 +-
13739 drivers/net/hyperv/rndis_filter.c | 4 +-
13740 drivers/net/ifb.c | 2 +-
13741 drivers/net/ipvlan/ipvlan_core.c | 2 +-
13742 drivers/net/macvlan.c | 20 +-
13743 drivers/net/macvtap.c | 6 +-
13744 drivers/net/nlmon.c | 2 +-
13745 drivers/net/phy/phy_device.c | 6 +-
13746 drivers/net/ppp/ppp_generic.c | 4 +-
13747 drivers/net/slip/slhc.c | 2 +-
13748 drivers/net/team/team.c | 4 +-
13749 drivers/net/tun.c | 7 +-
13750 drivers/net/usb/hso.c | 23 +-
13751 drivers/net/usb/r8152.c | 2 +-
13752 drivers/net/usb/sierra_net.c | 4 +-
13753 drivers/net/virtio_net.c | 2 +-
13754 drivers/net/vrf.c | 2 +-
13755 drivers/net/vxlan.c | 4 +-
13756 drivers/net/wimax/i2400m/rx.c | 2 +-
13757 drivers/net/wireless/airo.c | 2 +-
13758 drivers/net/wireless/at76c50x-usb.c | 2 +-
13759 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
13760 drivers/net/wireless/ath/ath10k/htc.c | 7 +-
13761 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
13762 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
13763 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
13764 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
13765 drivers/net/wireless/ath/ath9k/main.c | 22 +-
13766 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
13767 drivers/net/wireless/b43/phy_lp.c | 2 +-
13768 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
13769 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
13770 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
13771 drivers/net/wireless/mac80211_hwsim.c | 28 +-
13772 drivers/net/wireless/rndis_wlan.c | 2 +-
13773 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
13774 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
13775 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
13776 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
13777 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
13778 drivers/nfc/nfcwilink.c | 2 +-
13779 drivers/of/fdt.c | 4 +-
13780 drivers/oprofile/buffer_sync.c | 8 +-
13781 drivers/oprofile/event_buffer.c | 2 +-
13782 drivers/oprofile/oprof.c | 2 +-
13783 drivers/oprofile/oprofile_stats.c | 10 +-
13784 drivers/oprofile/oprofile_stats.h | 10 +-
13785 drivers/oprofile/oprofilefs.c | 6 +-
13786 drivers/oprofile/timer_int.c | 2 +-
13787 drivers/parport/procfs.c | 4 +-
13788 drivers/pci/host/pci-host-generic.c | 24 +-
13789 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
13790 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
13791 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
13792 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
13793 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
13794 drivers/pci/hotplug/pciehp_core.c | 2 +-
13795 drivers/pci/msi.c | 22 +-
13796 drivers/pci/pci-sysfs.c | 6 +-
13797 drivers/pci/pci.h | 2 +-
13798 drivers/pci/pcie/aspm.c | 6 +-
13799 drivers/pci/pcie/portdrv_pci.c | 2 +-
13800 drivers/pci/probe.c | 2 +-
13801 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
13802 drivers/pinctrl/pinctrl-at91.c | 5 +-
13803 drivers/platform/chrome/chromeos_pstore.c | 2 +-
13804 drivers/platform/x86/alienware-wmi.c | 4 +-
13805 drivers/platform/x86/compal-laptop.c | 2 +-
13806 drivers/platform/x86/hdaps.c | 2 +-
13807 drivers/platform/x86/ibm_rtl.c | 2 +-
13808 drivers/platform/x86/intel_oaktrail.c | 2 +-
13809 drivers/platform/x86/msi-laptop.c | 16 +-
13810 drivers/platform/x86/msi-wmi.c | 2 +-
13811 drivers/platform/x86/samsung-laptop.c | 2 +-
13812 drivers/platform/x86/samsung-q10.c | 2 +-
13813 drivers/platform/x86/sony-laptop.c | 14 +-
13814 drivers/platform/x86/thinkpad_acpi.c | 2 +-
13815 drivers/pnp/pnpbios/bioscalls.c | 14 +-
13816 drivers/pnp/pnpbios/core.c | 2 +-
13817 drivers/power/pda_power.c | 7 +-
13818 drivers/power/power_supply.h | 4 +-
13819 drivers/power/power_supply_core.c | 7 +-
13820 drivers/power/power_supply_sysfs.c | 6 +-
13821 drivers/power/reset/at91-reset.c | 9 +-
13822 drivers/powercap/powercap_sys.c | 136 +-
13823 drivers/ptp/ptp_private.h | 2 +-
13824 drivers/ptp/ptp_sysfs.c | 2 +-
13825 drivers/regulator/core.c | 4 +-
13826 drivers/regulator/max8660.c | 6 +-
13827 drivers/regulator/max8973-regulator.c | 16 +-
13828 drivers/regulator/mc13892-regulator.c | 8 +-
13829 drivers/rtc/rtc-armada38x.c | 7 +-
13830 drivers/rtc/rtc-cmos.c | 4 +-
13831 drivers/rtc/rtc-ds1307.c | 2 +-
13832 drivers/rtc/rtc-m48t59.c | 4 +-
13833 drivers/rtc/rtc-test.c | 6 +-
13834 drivers/scsi/be2iscsi/be_main.c | 2 +-
13835 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
13836 drivers/scsi/bfa/bfa_ioc.h | 4 +-
13837 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
13838 drivers/scsi/hosts.c | 4 +-
13839 drivers/scsi/hpsa.c | 38 +-
13840 drivers/scsi/hpsa.h | 2 +-
13841 drivers/scsi/libfc/fc_exch.c | 50 +-
13842 drivers/scsi/libsas/sas_ata.c | 2 +-
13843 drivers/scsi/lpfc/lpfc.h | 8 +-
13844 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
13845 drivers/scsi/lpfc/lpfc_init.c | 6 +-
13846 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
13847 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
13848 drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +-
13849 drivers/scsi/pmcraid.c | 20 +-
13850 drivers/scsi/pmcraid.h | 8 +-
13851 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
13852 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
13853 drivers/scsi/qla2xxx/qla_os.c | 6 +-
13854 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
13855 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
13856 drivers/scsi/scsi.c | 2 +-
13857 drivers/scsi/scsi_lib.c | 8 +-
13858 drivers/scsi/scsi_sysfs.c | 2 +-
13859 drivers/scsi/scsi_transport_fc.c | 8 +-
13860 drivers/scsi/scsi_transport_iscsi.c | 6 +-
13861 drivers/scsi/scsi_transport_srp.c | 6 +-
13862 drivers/scsi/sd.c | 6 +-
13863 drivers/scsi/sg.c | 2 +-
13864 drivers/scsi/sr.c | 21 +-
13865 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
13866 drivers/spi/spi.c | 2 +-
13867 drivers/staging/android/timed_output.c | 6 +-
13868 drivers/staging/comedi/comedi_fops.c | 8 +-
13869 drivers/staging/fbtft/fbtft-core.c | 2 +-
13870 drivers/staging/fbtft/fbtft.h | 2 +-
13871 drivers/staging/gdm724x/gdm_tty.c | 2 +-
13872 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
13873 drivers/staging/iio/adc/ad7280a.c | 4 +-
13874 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
13875 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
13876 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
13877 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
13878 drivers/staging/lustre/lustre/include/obd.h | 2 +-
13879 drivers/staging/octeon/ethernet-rx.c | 20 +-
13880 drivers/staging/octeon/ethernet.c | 8 +-
13881 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
13882 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
13883 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
13884 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
13885 drivers/staging/sm750fb/sm750.c | 14 +-
13886 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
13887 drivers/target/sbp/sbp_target.c | 4 +-
13888 drivers/thermal/cpu_cooling.c | 9 +-
13889 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
13890 drivers/thermal/of-thermal.c | 17 +-
13891 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
13892 drivers/tty/cyclades.c | 6 +-
13893 drivers/tty/hvc/hvc_console.c | 14 +-
13894 drivers/tty/hvc/hvcs.c | 21 +-
13895 drivers/tty/hvc/hvsi.c | 22 +-
13896 drivers/tty/hvc/hvsi_lib.c | 4 +-
13897 drivers/tty/ipwireless/tty.c | 27 +-
13898 drivers/tty/moxa.c | 2 +-
13899 drivers/tty/n_gsm.c | 4 +-
13900 drivers/tty/n_tty.c | 3 +-
13901 drivers/tty/pty.c | 4 +-
13902 drivers/tty/rocket.c | 6 +-
13903 drivers/tty/serial/8250/8250_core.c | 10 +-
13904 drivers/tty/serial/ifx6x60.c | 2 +-
13905 drivers/tty/serial/ioc4_serial.c | 6 +-
13906 drivers/tty/serial/kgdb_nmi.c | 4 +-
13907 drivers/tty/serial/kgdboc.c | 32 +-
13908 drivers/tty/serial/msm_serial.c | 4 +-
13909 drivers/tty/serial/samsung.c | 9 +-
13910 drivers/tty/serial/serial_core.c | 8 +-
13911 drivers/tty/synclink.c | 34 +-
13912 drivers/tty/synclink_gt.c | 28 +-
13913 drivers/tty/synclinkmp.c | 34 +-
13914 drivers/tty/tty_io.c | 2 +-
13915 drivers/tty/tty_ldisc.c | 8 +-
13916 drivers/tty/tty_port.c | 22 +-
13917 drivers/uio/uio.c | 13 +-
13918 drivers/usb/atm/cxacru.c | 2 +-
13919 drivers/usb/atm/usbatm.c | 24 +-
13920 drivers/usb/class/cdc-acm.h | 2 +-
13921 drivers/usb/core/devices.c | 6 +-
13922 drivers/usb/core/devio.c | 12 +-
13923 drivers/usb/core/hcd.c | 4 +-
13924 drivers/usb/core/sysfs.c | 2 +-
13925 drivers/usb/core/usb.c | 2 +-
13926 drivers/usb/early/ehci-dbgp.c | 16 +-
13927 drivers/usb/gadget/function/u_serial.c | 22 +-
13928 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
13929 drivers/usb/host/ehci-hcd.c | 2 +-
13930 drivers/usb/host/ehci-hub.c | 4 +-
13931 drivers/usb/host/ehci-q.c | 4 +-
13932 drivers/usb/host/fotg210-hcd.c | 2 +-
13933 drivers/usb/host/fusbh200-hcd.c | 2 +-
13934 drivers/usb/host/hwa-hc.c | 2 +-
13935 drivers/usb/host/ohci-hcd.c | 2 +-
13936 drivers/usb/host/r8a66597.h | 2 +-
13937 drivers/usb/host/uhci-hcd.c | 2 +-
13938 drivers/usb/host/xhci-pci.c | 2 +-
13939 drivers/usb/host/xhci.c | 2 +-
13940 drivers/usb/misc/appledisplay.c | 4 +-
13941 drivers/usb/serial/console.c | 8 +-
13942 drivers/usb/storage/transport.c | 2 +-
13943 drivers/usb/storage/usb.c | 2 +-
13944 drivers/usb/storage/usb.h | 2 +-
13945 drivers/usb/usbip/vhci.h | 2 +-
13946 drivers/usb/usbip/vhci_hcd.c | 6 +-
13947 drivers/usb/usbip/vhci_rx.c | 2 +-
13948 drivers/usb/wusbcore/wa-hc.h | 4 +-
13949 drivers/usb/wusbcore/wa-xfer.c | 2 +-
13950 drivers/vfio/vfio.c | 2 +-
13951 drivers/vhost/vringh.c | 20 +-
13952 drivers/video/backlight/kb3886_bl.c | 2 +-
13953 drivers/video/console/fbcon.c | 2 +-
13954 drivers/video/fbdev/aty/aty128fb.c | 2 +-
13955 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
13956 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
13957 drivers/video/fbdev/core/fb_defio.c | 6 +-
13958 drivers/video/fbdev/core/fbmem.c | 2 +-
13959 drivers/video/fbdev/hyperv_fb.c | 4 +-
13960 drivers/video/fbdev/i810/i810_accel.c | 1 +
13961 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
13962 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
13963 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
13964 drivers/video/fbdev/omap2/dss/display.c | 8 +-
13965 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
13966 drivers/video/fbdev/smscufx.c | 4 +-
13967 drivers/video/fbdev/udlfb.c | 36 +-
13968 drivers/video/fbdev/uvesafb.c | 52 +-
13969 drivers/video/fbdev/vesafb.c | 58 +-
13970 drivers/video/fbdev/via/via_clock.h | 2 +-
13971 drivers/xen/events/events_base.c | 6 +-
13972 drivers/xen/evtchn.c | 4 +-
13973 fs/Kconfig.binfmt | 2 +-
13974 fs/afs/inode.c | 4 +-
13975 fs/aio.c | 2 +-
13976 fs/autofs4/waitq.c | 2 +-
13977 fs/befs/endian.h | 6 +-
13978 fs/binfmt_aout.c | 23 +-
13979 fs/binfmt_elf.c | 670 +-
13980 fs/binfmt_elf_fdpic.c | 4 +-
13981 fs/block_dev.c | 2 +-
13982 fs/btrfs/ctree.c | 9 +-
13983 fs/btrfs/delayed-inode.c | 9 +-
13984 fs/btrfs/delayed-inode.h | 6 +-
13985 fs/btrfs/file.c | 10 +-
13986 fs/btrfs/inode.c | 14 +-
13987 fs/btrfs/super.c | 2 +-
13988 fs/btrfs/sysfs.c | 2 +-
13989 fs/btrfs/tests/free-space-tests.c | 8 +-
13990 fs/btrfs/tree-log.h | 2 +-
13991 fs/buffer.c | 2 +-
13992 fs/cachefiles/bind.c | 6 +-
13993 fs/cachefiles/daemon.c | 8 +-
13994 fs/cachefiles/internal.h | 12 +-
13995 fs/cachefiles/namei.c | 2 +-
13996 fs/cachefiles/proc.c | 12 +-
13997 fs/ceph/dir.c | 12 +-
13998 fs/ceph/super.c | 4 +-
13999 fs/cifs/cifs_debug.c | 12 +-
14000 fs/cifs/cifsfs.c | 8 +-
14001 fs/cifs/cifsglob.h | 54 +-
14002 fs/cifs/file.c | 10 +-
14003 fs/cifs/misc.c | 4 +-
14004 fs/cifs/smb1ops.c | 80 +-
14005 fs/cifs/smb2ops.c | 84 +-
14006 fs/cifs/smb2pdu.c | 3 +-
14007 fs/coda/cache.c | 10 +-
14008 fs/compat.c | 4 +-
14009 fs/compat_binfmt_elf.c | 2 +
14010 fs/compat_ioctl.c | 12 +-
14011 fs/configfs/dir.c | 10 +-
14012 fs/coredump.c | 16 +-
14013 fs/dcache.c | 51 +-
14014 fs/ecryptfs/inode.c | 2 +-
14015 fs/ecryptfs/miscdev.c | 2 +-
14016 fs/exec.c | 362 +-
14017 fs/ext2/xattr.c | 5 +-
14018 fs/ext4/ext4.h | 20 +-
14019 fs/ext4/mballoc.c | 44 +-
14020 fs/ext4/resize.c | 16 +-
14021 fs/ext4/super.c | 4 +-
14022 fs/ext4/xattr.c | 5 +-
14023 fs/fhandle.c | 3 +-
14024 fs/file.c | 4 +-
14025 fs/fs_struct.c | 8 +-
14026 fs/fscache/cookie.c | 40 +-
14027 fs/fscache/internal.h | 202 +-
14028 fs/fscache/object.c | 26 +-
14029 fs/fscache/operation.c | 38 +-
14030 fs/fscache/page.c | 110 +-
14031 fs/fscache/stats.c | 348 +-
14032 fs/fuse/cuse.c | 10 +-
14033 fs/fuse/dev.c | 4 +-
14034 fs/gfs2/glock.c | 22 +-
14035 fs/gfs2/glops.c | 4 +-
14036 fs/gfs2/quota.c | 6 +-
14037 fs/hugetlbfs/inode.c | 13 +-
14038 fs/inode.c | 4 +-
14039 fs/jffs2/erase.c | 3 +-
14040 fs/jffs2/wbuf.c | 3 +-
14041 fs/jfs/super.c | 2 +-
14042 fs/kernfs/dir.c | 2 +-
14043 fs/kernfs/file.c | 20 +-
14044 fs/libfs.c | 10 +-
14045 fs/lockd/clntproc.c | 4 +-
14046 fs/namei.c | 16 +-
14047 fs/namespace.c | 16 +-
14048 fs/nfs/callback_xdr.c | 2 +-
14049 fs/nfs/inode.c | 6 +-
14050 fs/nfsd/nfs4proc.c | 2 +-
14051 fs/nfsd/nfs4xdr.c | 2 +-
14052 fs/nfsd/nfscache.c | 11 +-
14053 fs/nfsd/vfs.c | 6 +-
14054 fs/nls/nls_base.c | 26 +-
14055 fs/nls/nls_euc-jp.c | 6 +-
14056 fs/nls/nls_koi8-ru.c | 6 +-
14057 fs/notify/fanotify/fanotify_user.c | 4 +-
14058 fs/notify/notification.c | 4 +-
14059 fs/ntfs/dir.c | 2 +-
14060 fs/ntfs/super.c | 6 +-
14061 fs/ocfs2/localalloc.c | 2 +-
14062 fs/ocfs2/ocfs2.h | 10 +-
14063 fs/ocfs2/suballoc.c | 12 +-
14064 fs/ocfs2/super.c | 20 +-
14065 fs/pipe.c | 72 +-
14066 fs/posix_acl.c | 4 +-
14067 fs/proc/array.c | 20 +
14068 fs/proc/base.c | 4 +-
14069 fs/proc/kcore.c | 34 +-
14070 fs/proc/meminfo.c | 2 +-
14071 fs/proc/nommu.c | 2 +-
14072 fs/proc/proc_sysctl.c | 26 +-
14073 fs/proc/task_mmu.c | 39 +-
14074 fs/proc/task_nommu.c | 4 +-
14075 fs/proc/vmcore.c | 16 +-
14076 fs/qnx6/qnx6.h | 4 +-
14077 fs/quota/netlink.c | 4 +-
14078 fs/read_write.c | 2 +-
14079 fs/reiserfs/do_balan.c | 2 +-
14080 fs/reiserfs/procfs.c | 2 +-
14081 fs/reiserfs/reiserfs.h | 4 +-
14082 fs/seq_file.c | 4 +-
14083 fs/splice.c | 43 +-
14084 fs/squashfs/xattr.c | 12 +-
14085 fs/sysv/sysv.h | 2 +-
14086 fs/tracefs/inode.c | 8 +-
14087 fs/udf/misc.c | 2 +-
14088 fs/ufs/swab.h | 4 +-
14089 fs/userfaultfd.c | 2 +-
14090 fs/xattr.c | 21 +
14091 fs/xfs/libxfs/xfs_bmap.c | 2 +-
14092 fs/xfs/xfs_dir2_readdir.c | 7 +-
14093 fs/xfs/xfs_ioctl.c | 2 +-
14094 fs/xfs/xfs_linux.h | 4 +-
14095 include/asm-generic/4level-fixup.h | 2 +
14096 include/asm-generic/atomic-long.h | 156 +-
14097 include/asm-generic/atomic64.h | 12 +
14098 include/asm-generic/bitops/__fls.h | 2 +-
14099 include/asm-generic/bitops/fls.h | 2 +-
14100 include/asm-generic/bitops/fls64.h | 4 +-
14101 include/asm-generic/bug.h | 6 +-
14102 include/asm-generic/cache.h | 4 +-
14103 include/asm-generic/emergency-restart.h | 2 +-
14104 include/asm-generic/kmap_types.h | 4 +-
14105 include/asm-generic/local.h | 13 +
14106 include/asm-generic/pgtable-nopmd.h | 18 +-
14107 include/asm-generic/pgtable-nopud.h | 15 +-
14108 include/asm-generic/pgtable.h | 16 +
14109 include/asm-generic/sections.h | 1 +
14110 include/asm-generic/uaccess.h | 16 +
14111 include/asm-generic/vmlinux.lds.h | 15 +-
14112 include/crypto/algapi.h | 2 +-
14113 include/drm/drmP.h | 16 +-
14114 include/drm/drm_crtc_helper.h | 2 +-
14115 include/drm/drm_mm.h | 2 +-
14116 include/drm/i915_pciids.h | 2 +-
14117 include/drm/intel-gtt.h | 4 +-
14118 include/drm/ttm/ttm_memory.h | 2 +-
14119 include/drm/ttm/ttm_page_alloc.h | 1 +
14120 include/keys/asymmetric-subtype.h | 2 +-
14121 include/linux/atmdev.h | 4 +-
14122 include/linux/atomic.h | 17 +-
14123 include/linux/audit.h | 2 +-
14124 include/linux/average.h | 2 +-
14125 include/linux/binfmts.h | 3 +-
14126 include/linux/bitmap.h | 2 +-
14127 include/linux/bitops.h | 8 +-
14128 include/linux/blkdev.h | 2 +-
14129 include/linux/blktrace_api.h | 2 +-
14130 include/linux/cache.h | 8 +
14131 include/linux/cdrom.h | 1 -
14132 include/linux/cleancache.h | 2 +-
14133 include/linux/clk-provider.h | 1 +
14134 include/linux/compat.h | 6 +-
14135 include/linux/compiler-gcc.h | 28 +-
14136 include/linux/compiler.h | 157 +-
14137 include/linux/configfs.h | 2 +-
14138 include/linux/cpufreq.h | 3 +-
14139 include/linux/cpuidle.h | 5 +-
14140 include/linux/cpumask.h | 14 +-
14141 include/linux/crypto.h | 4 +-
14142 include/linux/ctype.h | 2 +-
14143 include/linux/dcache.h | 4 +-
14144 include/linux/decompress/mm.h | 2 +-
14145 include/linux/devfreq.h | 2 +-
14146 include/linux/device.h | 7 +-
14147 include/linux/dma-mapping.h | 2 +-
14148 include/linux/efi.h | 1 +
14149 include/linux/elf.h | 2 +
14150 include/linux/err.h | 4 +-
14151 include/linux/extcon.h | 2 +-
14152 include/linux/fb.h | 3 +-
14153 include/linux/fdtable.h | 2 +-
14154 include/linux/fs.h | 5 +-
14155 include/linux/fs_struct.h | 2 +-
14156 include/linux/fscache-cache.h | 2 +-
14157 include/linux/fscache.h | 2 +-
14158 include/linux/fsnotify.h | 2 +-
14159 include/linux/genhd.h | 4 +-
14160 include/linux/genl_magic_func.h | 2 +-
14161 include/linux/gfp.h | 12 +-
14162 include/linux/highmem.h | 12 +
14163 include/linux/hwmon-sysfs.h | 6 +-
14164 include/linux/i2c.h | 1 +
14165 include/linux/if_pppox.h | 2 +-
14166 include/linux/init.h | 12 +-
14167 include/linux/init_task.h | 7 +
14168 include/linux/interrupt.h | 6 +-
14169 include/linux/iommu.h | 2 +-
14170 include/linux/ioport.h | 2 +-
14171 include/linux/ipc.h | 2 +-
14172 include/linux/irq.h | 5 +-
14173 include/linux/irqdesc.h | 2 +-
14174 include/linux/irqdomain.h | 3 +
14175 include/linux/jiffies.h | 16 +-
14176 include/linux/key-type.h | 2 +-
14177 include/linux/kgdb.h | 6 +-
14178 include/linux/kmemleak.h | 4 +-
14179 include/linux/kobject.h | 3 +-
14180 include/linux/kobject_ns.h | 2 +-
14181 include/linux/kref.h | 2 +-
14182 include/linux/libata.h | 2 +-
14183 include/linux/linkage.h | 1 +
14184 include/linux/list.h | 15 +
14185 include/linux/lockref.h | 26 +-
14186 include/linux/math64.h | 10 +-
14187 include/linux/mempolicy.h | 7 +
14188 include/linux/mm.h | 102 +-
14189 include/linux/mm_types.h | 20 +
14190 include/linux/mmiotrace.h | 4 +-
14191 include/linux/mmzone.h | 2 +-
14192 include/linux/mod_devicetable.h | 4 +-
14193 include/linux/module.h | 69 +-
14194 include/linux/moduleloader.h | 16 +
14195 include/linux/moduleparam.h | 4 +-
14196 include/linux/net.h | 2 +-
14197 include/linux/netdevice.h | 7 +-
14198 include/linux/netfilter.h | 2 +-
14199 include/linux/netfilter/nfnetlink.h | 2 +-
14200 include/linux/nls.h | 4 +-
14201 include/linux/notifier.h | 3 +-
14202 include/linux/oprofile.h | 4 +-
14203 include/linux/padata.h | 2 +-
14204 include/linux/pci_hotplug.h | 3 +-
14205 include/linux/percpu.h | 2 +-
14206 include/linux/perf_event.h | 12 +-
14207 include/linux/pipe_fs_i.h | 8 +-
14208 include/linux/pm.h | 1 +
14209 include/linux/pm_domain.h | 4 +-
14210 include/linux/pm_runtime.h | 2 +-
14211 include/linux/pnp.h | 2 +-
14212 include/linux/poison.h | 4 +-
14213 include/linux/power/smartreflex.h | 2 +-
14214 include/linux/ppp-comp.h | 2 +-
14215 include/linux/preempt.h | 21 +
14216 include/linux/proc_ns.h | 2 +-
14217 include/linux/psci.h | 2 +-
14218 include/linux/quota.h | 2 +-
14219 include/linux/random.h | 19 +-
14220 include/linux/rculist.h | 16 +
14221 include/linux/reboot.h | 14 +-
14222 include/linux/regset.h | 3 +-
14223 include/linux/relay.h | 2 +-
14224 include/linux/rio.h | 2 +-
14225 include/linux/rmap.h | 4 +-
14226 include/linux/sched.h | 72 +-
14227 include/linux/sched/sysctl.h | 1 +
14228 include/linux/semaphore.h | 2 +-
14229 include/linux/seq_file.h | 1 +
14230 include/linux/signal.h | 2 +-
14231 include/linux/skbuff.h | 12 +-
14232 include/linux/slab.h | 47 +-
14233 include/linux/slab_def.h | 14 +-
14234 include/linux/slub_def.h | 2 +-
14235 include/linux/smp.h | 2 +
14236 include/linux/sock_diag.h | 2 +-
14237 include/linux/sonet.h | 2 +-
14238 include/linux/sunrpc/addr.h | 8 +-
14239 include/linux/sunrpc/clnt.h | 2 +-
14240 include/linux/sunrpc/svc.h | 2 +-
14241 include/linux/sunrpc/svc_rdma.h | 18 +-
14242 include/linux/sunrpc/svcauth.h | 2 +-
14243 include/linux/swapops.h | 10 +-
14244 include/linux/swiotlb.h | 3 +-
14245 include/linux/syscalls.h | 21 +-
14246 include/linux/syscore_ops.h | 2 +-
14247 include/linux/sysctl.h | 3 +-
14248 include/linux/sysfs.h | 9 +-
14249 include/linux/sysrq.h | 3 +-
14250 include/linux/tcp.h | 14 +-
14251 include/linux/thread_info.h | 7 +
14252 include/linux/tty.h | 4 +-
14253 include/linux/tty_driver.h | 2 +-
14254 include/linux/tty_ldisc.h | 2 +-
14255 include/linux/types.h | 16 +
14256 include/linux/uaccess.h | 6 +-
14257 include/linux/uio_driver.h | 2 +-
14258 include/linux/unaligned/access_ok.h | 24 +-
14259 include/linux/usb.h | 12 +-
14260 include/linux/usb/hcd.h | 1 +
14261 include/linux/usb/renesas_usbhs.h | 2 +-
14262 include/linux/vermagic.h | 21 +-
14263 include/linux/vga_switcheroo.h | 8 +-
14264 include/linux/vmalloc.h | 7 +-
14265 include/linux/vmstat.h | 24 +-
14266 include/linux/xattr.h | 5 +-
14267 include/linux/zlib.h | 3 +-
14268 include/media/v4l2-dev.h | 2 +-
14269 include/media/v4l2-device.h | 2 +-
14270 include/net/9p/transport.h | 2 +-
14271 include/net/bluetooth/l2cap.h | 2 +-
14272 include/net/bonding.h | 2 +-
14273 include/net/caif/cfctrl.h | 6 +-
14274 include/net/flow.h | 2 +-
14275 include/net/genetlink.h | 2 +-
14276 include/net/gro_cells.h | 2 +-
14277 include/net/inet_connection_sock.h | 2 +-
14278 include/net/inet_sock.h | 2 +-
14279 include/net/inetpeer.h | 2 +-
14280 include/net/ip_fib.h | 2 +-
14281 include/net/ip_vs.h | 8 +-
14282 include/net/ipv6.h | 2 +-
14283 include/net/irda/ircomm_tty.h | 1 +
14284 include/net/iucv/af_iucv.h | 2 +-
14285 include/net/llc_c_ac.h | 2 +-
14286 include/net/llc_c_ev.h | 4 +-
14287 include/net/llc_c_st.h | 2 +-
14288 include/net/llc_s_ac.h | 2 +-
14289 include/net/llc_s_st.h | 2 +-
14290 include/net/mac80211.h | 4 +-
14291 include/net/neighbour.h | 2 +-
14292 include/net/net_namespace.h | 18 +-
14293 include/net/netlink.h | 2 +-
14294 include/net/netns/conntrack.h | 6 +-
14295 include/net/netns/ipv4.h | 4 +-
14296 include/net/netns/ipv6.h | 4 +-
14297 include/net/netns/xfrm.h | 2 +-
14298 include/net/ping.h | 2 +-
14299 include/net/protocol.h | 4 +-
14300 include/net/rtnetlink.h | 2 +-
14301 include/net/sctp/checksum.h | 4 +-
14302 include/net/sctp/sm.h | 4 +-
14303 include/net/sctp/structs.h | 2 +-
14304 include/net/sock.h | 12 +-
14305 include/net/tcp.h | 8 +-
14306 include/net/xfrm.h | 13 +-
14307 include/rdma/iw_cm.h | 2 +-
14308 include/scsi/libfc.h | 3 +-
14309 include/scsi/scsi_device.h | 6 +-
14310 include/scsi/scsi_driver.h | 2 +-
14311 include/scsi/scsi_transport_fc.h | 3 +-
14312 include/scsi/sg.h | 2 +-
14313 include/sound/compress_driver.h | 2 +-
14314 include/sound/soc.h | 4 +-
14315 include/trace/events/irq.h | 4 +-
14316 include/uapi/linux/a.out.h | 8 +
14317 include/uapi/linux/bcache.h | 5 +-
14318 include/uapi/linux/byteorder/little_endian.h | 28 +-
14319 include/uapi/linux/connector.h | 2 +-
14320 include/uapi/linux/elf.h | 28 +
14321 include/uapi/linux/screen_info.h | 3 +-
14322 include/uapi/linux/swab.h | 6 +-
14323 include/uapi/linux/xattr.h | 4 +
14324 include/video/udlfb.h | 8 +-
14325 include/video/uvesafb.h | 1 +
14326 init/Kconfig | 2 +-
14327 init/Makefile | 3 +
14328 init/do_mounts.c | 14 +-
14329 init/do_mounts.h | 8 +-
14330 init/do_mounts_initrd.c | 30 +-
14331 init/do_mounts_md.c | 6 +-
14332 init/init_task.c | 4 +
14333 init/initramfs.c | 38 +-
14334 init/main.c | 30 +-
14335 ipc/compat.c | 4 +-
14336 ipc/ipc_sysctl.c | 8 +-
14337 ipc/mq_sysctl.c | 4 +-
14338 ipc/sem.c | 4 +-
14339 ipc/shm.c | 6 +
14340 kernel/audit.c | 8 +-
14341 kernel/auditsc.c | 4 +-
14342 kernel/bpf/core.c | 7 +-
14343 kernel/capability.c | 3 +
14344 kernel/compat.c | 38 +-
14345 kernel/debug/debug_core.c | 16 +-
14346 kernel/debug/kdb/kdb_main.c | 4 +-
14347 kernel/events/core.c | 26 +-
14348 kernel/events/internal.h | 10 +-
14349 kernel/events/uprobes.c | 2 +-
14350 kernel/exit.c | 2 +-
14351 kernel/fork.c | 167 +-
14352 kernel/futex.c | 11 +-
14353 kernel/futex_compat.c | 2 +-
14354 kernel/gcov/base.c | 7 +-
14355 kernel/irq/manage.c | 2 +-
14356 kernel/irq/msi.c | 19 +-
14357 kernel/irq/spurious.c | 2 +-
14358 kernel/jump_label.c | 5 +
14359 kernel/kallsyms.c | 37 +-
14360 kernel/kexec.c | 3 +-
14361 kernel/kmod.c | 8 +-
14362 kernel/kprobes.c | 4 +-
14363 kernel/ksysfs.c | 2 +-
14364 kernel/locking/lockdep.c | 7 +-
14365 kernel/locking/mutex-debug.c | 12 +-
14366 kernel/locking/mutex-debug.h | 4 +-
14367 kernel/locking/mutex.c | 6 +-
14368 kernel/module.c | 422 +-
14369 kernel/notifier.c | 17 +-
14370 kernel/padata.c | 4 +-
14371 kernel/panic.c | 5 +-
14372 kernel/pid.c | 2 +-
14373 kernel/pid_namespace.c | 2 +-
14374 kernel/power/process.c | 12 +-
14375 kernel/profile.c | 14 +-
14376 kernel/ptrace.c | 8 +-
14377 kernel/rcu/rcutorture.c | 60 +-
14378 kernel/rcu/tiny.c | 4 +-
14379 kernel/rcu/tree.c | 44 +-
14380 kernel/rcu/tree.h | 14 +-
14381 kernel/rcu/tree_plugin.h | 14 +-
14382 kernel/rcu/tree_trace.c | 12 +-
14383 kernel/sched/auto_group.c | 4 +-
14384 kernel/sched/core.c | 45 +-
14385 kernel/sched/fair.c | 2 +-
14386 kernel/sched/sched.h | 2 +-
14387 kernel/signal.c | 12 +-
14388 kernel/smpboot.c | 4 +-
14389 kernel/softirq.c | 12 +-
14390 kernel/sys.c | 10 +-
14391 kernel/sysctl.c | 34 +-
14392 kernel/time/alarmtimer.c | 2 +-
14393 kernel/time/posix-cpu-timers.c | 4 +-
14394 kernel/time/posix-timers.c | 24 +-
14395 kernel/time/timer.c | 2 +-
14396 kernel/time/timer_stats.c | 10 +-
14397 kernel/trace/blktrace.c | 6 +-
14398 kernel/trace/ftrace.c | 15 +-
14399 kernel/trace/ring_buffer.c | 96 +-
14400 kernel/trace/trace.c | 2 +-
14401 kernel/trace/trace.h | 2 +-
14402 kernel/trace/trace_clock.c | 4 +-
14403 kernel/trace/trace_events.c | 1 -
14404 kernel/trace/trace_functions_graph.c | 4 +-
14405 kernel/trace/trace_mmiotrace.c | 8 +-
14406 kernel/trace/trace_output.c | 10 +-
14407 kernel/trace/trace_seq.c | 2 +-
14408 kernel/trace/trace_stack.c | 2 +-
14409 kernel/user_namespace.c | 2 +-
14410 kernel/utsname_sysctl.c | 2 +-
14411 kernel/watchdog.c | 2 +-
14412 kernel/workqueue.c | 2 +-
14413 lib/Kconfig.debug | 8 +-
14414 lib/Makefile | 2 +-
14415 lib/bitmap.c | 8 +-
14416 lib/bug.c | 2 +
14417 lib/debugobjects.c | 2 +-
14418 lib/decompress_bunzip2.c | 3 +-
14419 lib/decompress_unlzma.c | 4 +-
14420 lib/div64.c | 4 +-
14421 lib/dma-debug.c | 4 +-
14422 lib/inflate.c | 2 +-
14423 lib/ioremap.c | 4 +-
14424 lib/kobject.c | 4 +-
14425 lib/list_debug.c | 126 +-
14426 lib/lockref.c | 44 +-
14427 lib/percpu-refcount.c | 2 +-
14428 lib/radix-tree.c | 2 +-
14429 lib/random32.c | 2 +-
14430 lib/show_mem.c | 2 +-
14431 lib/strncpy_from_user.c | 2 +-
14432 lib/strnlen_user.c | 2 +-
14433 lib/swiotlb.c | 2 +-
14434 lib/usercopy.c | 6 +
14435 lib/vsprintf.c | 12 +-
14436 mm/Kconfig | 6 +-
14437 mm/backing-dev.c | 4 +-
14438 mm/debug.c | 3 +
14439 mm/filemap.c | 2 +-
14440 mm/gup.c | 13 +-
14441 mm/highmem.c | 6 +-
14442 mm/hugetlb.c | 70 +-
14443 mm/internal.h | 1 +
14444 mm/maccess.c | 4 +-
14445 mm/madvise.c | 37 +
14446 mm/memory-failure.c | 6 +-
14447 mm/memory.c | 424 +-
14448 mm/mempolicy.c | 25 +
14449 mm/mlock.c | 15 +-
14450 mm/mm_init.c | 2 +-
14451 mm/mmap.c | 582 +-
14452 mm/mprotect.c | 137 +-
14453 mm/mremap.c | 39 +-
14454 mm/nommu.c | 21 +-
14455 mm/page-writeback.c | 2 +-
14456 mm/page_alloc.c | 49 +-
14457 mm/percpu.c | 2 +-
14458 mm/process_vm_access.c | 14 +-
14459 mm/rmap.c | 45 +-
14460 mm/shmem.c | 19 +-
14461 mm/slab.c | 109 +-
14462 mm/slab.h | 22 +-
14463 mm/slab_common.c | 86 +-
14464 mm/slob.c | 218 +-
14465 mm/slub.c | 102 +-
14466 mm/sparse-vmemmap.c | 4 +-
14467 mm/sparse.c | 2 +-
14468 mm/swap.c | 2 +
14469 mm/swapfile.c | 12 +-
14470 mm/util.c | 6 +
14471 mm/vmalloc.c | 114 +-
14472 mm/vmstat.c | 12 +-
14473 net/8021q/vlan.c | 5 +-
14474 net/8021q/vlan_netlink.c | 2 +-
14475 net/9p/mod.c | 4 +-
14476 net/9p/trans_fd.c | 2 +-
14477 net/atm/atm_misc.c | 8 +-
14478 net/atm/lec.h | 2 +-
14479 net/atm/proc.c | 6 +-
14480 net/atm/resources.c | 4 +-
14481 net/ax25/sysctl_net_ax25.c | 2 +-
14482 net/batman-adv/bat_iv_ogm.c | 8 +-
14483 net/batman-adv/fragmentation.c | 2 +-
14484 net/batman-adv/soft-interface.c | 8 +-
14485 net/batman-adv/types.h | 6 +-
14486 net/bluetooth/hci_sock.c | 2 +-
14487 net/bluetooth/l2cap_core.c | 6 +-
14488 net/bluetooth/l2cap_sock.c | 12 +-
14489 net/bluetooth/rfcomm/sock.c | 4 +-
14490 net/bluetooth/rfcomm/tty.c | 4 +-
14491 net/bridge/br_netlink.c | 2 +-
14492 net/bridge/netfilter/ebtables.c | 6 +-
14493 net/caif/cfctrl.c | 11 +-
14494 net/caif/chnl_net.c | 2 +-
14495 net/can/af_can.c | 2 +-
14496 net/can/gw.c | 6 +-
14497 net/ceph/messenger.c | 4 +-
14498 net/compat.c | 24 +-
14499 net/core/datagram.c | 2 +-
14500 net/core/dev.c | 16 +-
14501 net/core/filter.c | 2 +-
14502 net/core/flow.c | 6 +-
14503 net/core/neighbour.c | 4 +-
14504 net/core/net-sysfs.c | 2 +-
14505 net/core/net_namespace.c | 8 +-
14506 net/core/netpoll.c | 4 +-
14507 net/core/rtnetlink.c | 15 +-
14508 net/core/scm.c | 14 +-
14509 net/core/skbuff.c | 8 +-
14510 net/core/sock.c | 28 +-
14511 net/core/sock_diag.c | 15 +-
14512 net/core/sysctl_net_core.c | 22 +-
14513 net/decnet/af_decnet.c | 1 +
14514 net/decnet/sysctl_net_decnet.c | 4 +-
14515 net/dsa/dsa.c | 2 +-
14516 net/hsr/hsr_netlink.c | 2 +-
14517 net/ieee802154/6lowpan/core.c | 2 +-
14518 net/ieee802154/6lowpan/reassembly.c | 14 +-
14519 net/ipv4/af_inet.c | 2 +-
14520 net/ipv4/devinet.c | 18 +-
14521 net/ipv4/fib_frontend.c | 6 +-
14522 net/ipv4/fib_semantics.c | 2 +-
14523 net/ipv4/inet_connection_sock.c | 4 +-
14524 net/ipv4/inet_timewait_sock.c | 2 +-
14525 net/ipv4/inetpeer.c | 2 +-
14526 net/ipv4/ip_fragment.c | 15 +-
14527 net/ipv4/ip_gre.c | 6 +-
14528 net/ipv4/ip_sockglue.c | 2 +-
14529 net/ipv4/ip_vti.c | 4 +-
14530 net/ipv4/ipconfig.c | 6 +-
14531 net/ipv4/ipip.c | 4 +-
14532 net/ipv4/netfilter/arp_tables.c | 12 +-
14533 net/ipv4/netfilter/ip_tables.c | 12 +-
14534 net/ipv4/ping.c | 14 +-
14535 net/ipv4/raw.c | 14 +-
14536 net/ipv4/route.c | 32 +-
14537 net/ipv4/sysctl_net_ipv4.c | 22 +-
14538 net/ipv4/tcp_input.c | 6 +-
14539 net/ipv4/tcp_probe.c | 2 +-
14540 net/ipv4/udp.c | 10 +-
14541 net/ipv4/xfrm4_policy.c | 18 +-
14542 net/ipv6/addrconf.c | 18 +-
14543 net/ipv6/af_inet6.c | 2 +-
14544 net/ipv6/datagram.c | 2 +-
14545 net/ipv6/icmp.c | 2 +-
14546 net/ipv6/ip6_fib.c | 4 +-
14547 net/ipv6/ip6_gre.c | 10 +-
14548 net/ipv6/ip6_tunnel.c | 4 +-
14549 net/ipv6/ip6_vti.c | 4 +-
14550 net/ipv6/ipv6_sockglue.c | 2 +-
14551 net/ipv6/netfilter/ip6_tables.c | 12 +-
14552 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
14553 net/ipv6/ping.c | 33 +-
14554 net/ipv6/raw.c | 17 +-
14555 net/ipv6/reassembly.c | 13 +-
14556 net/ipv6/route.c | 2 +-
14557 net/ipv6/sit.c | 4 +-
14558 net/ipv6/sysctl_net_ipv6.c | 2 +-
14559 net/ipv6/udp.c | 6 +-
14560 net/ipv6/xfrm6_policy.c | 17 +-
14561 net/irda/ircomm/ircomm_tty.c | 18 +-
14562 net/iucv/af_iucv.c | 4 +-
14563 net/iucv/iucv.c | 2 +-
14564 net/key/af_key.c | 4 +-
14565 net/l2tp/l2tp_eth.c | 38 +-
14566 net/l2tp/l2tp_ip.c | 2 +-
14567 net/l2tp/l2tp_ip6.c | 2 +-
14568 net/mac80211/cfg.c | 8 +-
14569 net/mac80211/ieee80211_i.h | 3 +-
14570 net/mac80211/iface.c | 20 +-
14571 net/mac80211/main.c | 2 +-
14572 net/mac80211/pm.c | 4 +-
14573 net/mac80211/rate.c | 2 +-
14574 net/mac80211/sta_info.c | 2 +-
14575 net/mac80211/util.c | 8 +-
14576 net/mpls/af_mpls.c | 6 +-
14577 net/netfilter/ipset/ip_set_core.c | 2 +-
14578 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
14579 net/netfilter/ipvs/ip_vs_core.c | 4 +-
14580 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
14581 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
14582 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
14583 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
14584 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
14585 net/netfilter/nf_conntrack_acct.c | 2 +-
14586 net/netfilter/nf_conntrack_ecache.c | 2 +-
14587 net/netfilter/nf_conntrack_helper.c | 2 +-
14588 net/netfilter/nf_conntrack_proto.c | 2 +-
14589 net/netfilter/nf_conntrack_standalone.c | 2 +-
14590 net/netfilter/nf_conntrack_timestamp.c | 2 +-
14591 net/netfilter/nf_log.c | 10 +-
14592 net/netfilter/nf_sockopt.c | 4 +-
14593 net/netfilter/nfnetlink_log.c | 4 +-
14594 net/netfilter/nft_compat.c | 9 +-
14595 net/netfilter/xt_statistic.c | 8 +-
14596 net/netlink/af_netlink.c | 4 +-
14597 net/openvswitch/vport-internal_dev.c | 2 +-
14598 net/packet/af_packet.c | 8 +-
14599 net/phonet/pep.c | 6 +-
14600 net/phonet/socket.c | 2 +-
14601 net/phonet/sysctl.c | 2 +-
14602 net/rds/cong.c | 6 +-
14603 net/rds/ib.h | 2 +-
14604 net/rds/ib_cm.c | 2 +-
14605 net/rds/ib_recv.c | 4 +-
14606 net/rds/iw.h | 2 +-
14607 net/rds/iw_cm.c | 2 +-
14608 net/rds/iw_recv.c | 4 +-
14609 net/rds/rds.h | 2 +-
14610 net/rds/tcp.c | 2 +-
14611 net/rds/tcp_send.c | 2 +-
14612 net/rxrpc/af_rxrpc.c | 2 +-
14613 net/rxrpc/ar-ack.c | 14 +-
14614 net/rxrpc/ar-call.c | 2 +-
14615 net/rxrpc/ar-connection.c | 2 +-
14616 net/rxrpc/ar-connevent.c | 2 +-
14617 net/rxrpc/ar-input.c | 4 +-
14618 net/rxrpc/ar-internal.h | 8 +-
14619 net/rxrpc/ar-local.c | 2 +-
14620 net/rxrpc/ar-output.c | 4 +-
14621 net/rxrpc/ar-peer.c | 2 +-
14622 net/rxrpc/ar-proc.c | 4 +-
14623 net/rxrpc/ar-transport.c | 2 +-
14624 net/rxrpc/rxkad.c | 4 +-
14625 net/sched/sch_generic.c | 4 +-
14626 net/sctp/ipv6.c | 6 +-
14627 net/sctp/protocol.c | 10 +-
14628 net/sctp/sm_sideeffect.c | 2 +-
14629 net/sctp/socket.c | 21 +-
14630 net/sctp/sysctl.c | 10 +-
14631 net/socket.c | 18 +-
14632 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
14633 net/sunrpc/clnt.c | 4 +-
14634 net/sunrpc/sched.c | 4 +-
14635 net/sunrpc/svc.c | 4 +-
14636 net/sunrpc/svcauth_unix.c | 2 +-
14637 net/sunrpc/xprtrdma/svc_rdma.c | 38 +-
14638 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
14639 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
14640 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
14641 net/tipc/netlink_compat.c | 12 +-
14642 net/tipc/subscr.c | 2 +-
14643 net/unix/af_unix.c | 7 +-
14644 net/unix/sysctl_net_unix.c | 2 +-
14645 net/wireless/wext-core.c | 19 +-
14646 net/xfrm/xfrm_policy.c | 16 +-
14647 net/xfrm/xfrm_state.c | 33 +-
14648 net/xfrm/xfrm_sysctl.c | 2 +-
14649 scripts/Kbuild.include | 2 +-
14650 scripts/Makefile.build | 2 +-
14651 scripts/Makefile.clean | 3 +-
14652 scripts/Makefile.host | 69 +-
14653 scripts/basic/fixdep.c | 12 +-
14654 scripts/dtc/checks.c | 14 +-
14655 scripts/dtc/data.c | 6 +-
14656 scripts/dtc/flattree.c | 8 +-
14657 scripts/dtc/livetree.c | 4 +-
14658 scripts/gcc-plugin.sh | 51 +
14659 scripts/headers_install.sh | 1 +
14660 scripts/kallsyms.c | 4 +-
14661 scripts/kconfig/lkc.h | 5 +-
14662 scripts/kconfig/menu.c | 2 +-
14663 scripts/kconfig/symbol.c | 6 +-
14664 scripts/link-vmlinux.sh | 2 +-
14665 scripts/mod/file2alias.c | 14 +-
14666 scripts/mod/modpost.c | 25 +-
14667 scripts/mod/modpost.h | 6 +-
14668 scripts/mod/sumversion.c | 2 +-
14669 scripts/module-common.lds | 4 +
14670 scripts/package/builddeb | 1 +
14671 scripts/pnmtologo.c | 6 +-
14672 scripts/sortextable.h | 6 +-
14673 scripts/tags.sh | 2 +-
14674 security/Kconfig | 692 +-
14675 security/integrity/ima/ima.h | 4 +-
14676 security/integrity/ima/ima_api.c | 2 +-
14677 security/integrity/ima/ima_fs.c | 4 +-
14678 security/integrity/ima/ima_queue.c | 2 +-
14679 security/keys/key.c | 18 +-
14680 security/selinux/avc.c | 6 +-
14681 security/selinux/include/xfrm.h | 2 +-
14682 security/yama/yama_lsm.c | 2 +-
14683 sound/aoa/codecs/onyx.c | 7 +-
14684 sound/aoa/codecs/onyx.h | 1 +
14685 sound/core/oss/pcm_oss.c | 18 +-
14686 sound/core/pcm_compat.c | 2 +-
14687 sound/core/pcm_native.c | 4 +-
14688 sound/core/sound.c | 2 +-
14689 sound/drivers/mts64.c | 14 +-
14690 sound/drivers/opl4/opl4_lib.c | 2 +-
14691 sound/drivers/portman2x4.c | 3 +-
14692 sound/firewire/amdtp.c | 4 +-
14693 sound/firewire/amdtp.h | 4 +-
14694 sound/firewire/isight.c | 10 +-
14695 sound/firewire/scs1x.c | 8 +-
14696 sound/oss/sb_audio.c | 2 +-
14697 sound/oss/swarm_cs4297a.c | 6 +-
14698 sound/pci/hda/hda_codec.c | 2 +-
14699 sound/pci/ymfpci/ymfpci.h | 2 +-
14700 sound/pci/ymfpci/ymfpci_main.c | 12 +-
14701 sound/soc/codecs/sti-sas.c | 10 +-
14702 sound/soc/soc-ac97.c | 6 +-
14703 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
14704 tools/gcc/Makefile | 42 +
14705 tools/gcc/checker_plugin.c | 150 +
14706 tools/gcc/colorize_plugin.c | 215 +
14707 tools/gcc/constify_plugin.c | 571 +
14708 tools/gcc/gcc-common.h | 812 +
14709 tools/gcc/initify_plugin.c | 552 +
14710 tools/gcc/kallocstat_plugin.c | 188 +
14711 tools/gcc/kernexec_plugin.c | 549 +
14712 tools/gcc/latent_entropy_plugin.c | 470 +
14713 tools/gcc/size_overflow_plugin/.gitignore | 2 +
14714 tools/gcc/size_overflow_plugin/Makefile | 28 +
14715 .../disable_size_overflow_hash.data |12422 ++++++++++++
14716 .../generate_size_overflow_hash.sh | 103 +
14717 .../insert_size_overflow_asm.c | 416 +
14718 .../size_overflow_plugin/intentional_overflow.c | 1010 +
14719 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
14720 tools/gcc/size_overflow_plugin/size_overflow.h | 323 +
14721 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
14722 .../size_overflow_plugin/size_overflow_hash.data |20735 ++++++++++++++++++++
14723 .../size_overflow_hash_aux.data | 92 +
14724 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 ++
14725 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
14726 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
14727 .../size_overflow_plugin_hash.c | 352 +
14728 .../size_overflow_plugin/size_overflow_transform.c | 749 +
14729 .../size_overflow_transform_core.c | 1010 +
14730 tools/gcc/stackleak_plugin.c | 436 +
14731 tools/gcc/structleak_plugin.c | 287 +
14732 tools/include/linux/compiler.h | 8 +
14733 tools/lib/api/Makefile | 2 +-
14734 tools/perf/util/include/asm/alternative-asm.h | 3 +
14735 tools/virtio/linux/uaccess.h | 2 +-
14736 virt/kvm/kvm_main.c | 42 +-
14737 1944 files changed, 66925 insertions(+), 8949 deletions(-)
14738 commit 87790bbd0d8dc2bd7fd86cb947e32886db9e9766
14739 Author: Matthew Wilcox <willy@linux.intel.com>
14740 Date: Tue Feb 2 16:57:52 2016 -0800
14741
14742 radix-tree: fix race in gang lookup
14743
14744 If the indirect_ptr bit is set on a slot, that indicates we need to redo
14745 the lookup. Introduce a new function radix_tree_iter_retry() which
14746 forces the loop to retry the lookup by setting 'slot' to NULL and
14747 turning the iterator back to point at the problematic entry.
14748
14749 This is a pretty rare problem to hit at the moment; the lookup has to
14750 race with a grow of the radix tree from a height of 0. The consequences
14751 of hitting this race are that gang lookup could return a pointer to a
14752 radix_tree_node instead of a pointer to whatever the user had inserted
14753 in the tree.
14754
14755 Fixes: cebbd29e1c2f ("radix-tree: rewrite gang lookup using iterator")
14756 Signed-off-by: Matthew Wilcox <willy@linux.intel.com>
14757 Cc: Hugh Dickins <hughd@google.com>
14758 Cc: Ohad Ben-Cohen <ohad@wizery.com>
14759 Cc: Konstantin Khlebnikov <khlebnikov@openvz.org>
14760 Cc: <stable@vger.kernel.org>
14761 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14762 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14763
14764 include/linux/radix-tree.h | 16 ++++++++++++++++
14765 lib/radix-tree.c | 12 ++++++++++--
14766 2 files changed, 26 insertions(+), 2 deletions(-)
14767
14768 commit bf628043b4589c910919a0f221ae7f42aa8cea93
14769 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
14770 Date: Wed Feb 3 02:11:03 2016 +0100
14771
14772 unix: correctly track in-flight fds in sending process user_struct
14773
14774 The commit referenced in the Fixes tag incorrectly accounted the number
14775 of in-flight fds over a unix domain socket to the original opener
14776 of the file-descriptor. This allows another process to arbitrary
14777 deplete the original file-openers resource limit for the maximum of
14778 open files. Instead the sending processes and its struct cred should
14779 be credited.
14780
14781 To do so, we add a reference counted struct user_struct pointer to the
14782 scm_fp_list and use it to account for the number of inflight unix fds.
14783
14784 Fixes: 712f4aad406bb1 ("unix: properly account for FDs passed over unix sockets")
14785 Reported-by: David Herrmann <dh.herrmann@gmail.com>
14786 Cc: David Herrmann <dh.herrmann@gmail.com>
14787 Cc: Willy Tarreau <w@1wt.eu>
14788 Cc: Linus Torvalds <torvalds@linux-foundation.org>
14789 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
14790 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
14791 Signed-off-by: David S. Miller <davem@davemloft.net>
14792
14793 include/net/af_unix.h | 4 ++--
14794 include/net/scm.h | 1 +
14795 net/core/scm.c | 7 +++++++
14796 net/unix/af_unix.c | 4 ++--
14797 net/unix/garbage.c | 8 ++++----
14798 5 files changed, 16 insertions(+), 8 deletions(-)
14799
14800 commit e830db443ff78d70b7b63536e688d73907face0c
14801 Author: Mike Kravetz <mike.kravetz@oracle.com>
14802 Date: Fri Jan 15 16:57:37 2016 -0800
14803
14804 fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list()
14805
14806 Hillf Danton noticed bugs in the hugetlb_vmtruncate_list routine. The
14807 argument end is of type pgoff_t. It was being converted to a vaddr
14808 offset and passed to unmap_hugepage_range. However, end was also being
14809 used as an argument to the vma_interval_tree_foreach controlling loop.
14810 In addition, the conversion of end to vaddr offset was incorrect.
14811
14812 hugetlb_vmtruncate_list is called as part of a file truncate or
14813 fallocate hole punch operation.
14814
14815 When truncating a hugetlbfs file, this bug could prevent some pages from
14816 being unmapped. This is possible if there are multiple vmas mapping the
14817 file, and there is a sufficiently sized hole between the mappings. The
14818 size of the hole between two vmas (A,B) must be such that the starting
14819 virtual address of B is greater than (ending virtual address of A <<
14820 PAGE_SHIFT). In this case, the pages in B would not be unmapped. If
14821 pages are not properly unmapped during truncate, the following BUG is
14822 hit:
14823
14824 kernel BUG at fs/hugetlbfs/inode.c:428!
14825
14826 In the fallocate hole punch case, this bug could prevent pages from
14827 being unmapped as in the truncate case. However, for hole punch the
14828 result is that unmapped pages will not be removed during the operation.
14829 For hole punch, it is also possible that more pages than desired will be
14830 unmapped. This unnecessary unmapping will cause page faults to
14831 reestablish the mappings on subsequent page access.
14832
14833 Fixes: 1bfad99ab (" hugetlbfs: hugetlb_vmtruncate_list() needs to take a range")Reported-by: Hillf Danton <hillf.zj@alibaba-inc.com>
14834 Signed-off-by: Mike Kravetz <mike.kravetz@oracle.com>
14835 Cc: Hugh Dickins <hughd@google.com>
14836 Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
14837 Cc: Davidlohr Bueso <dave@stgolabs.net>
14838 Cc: Dave Hansen <dave.hansen@linux.intel.com>
14839 Cc: <stable@vger.kernel.org> [4.3]
14840 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14841 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14842
14843 fs/hugetlbfs/inode.c | 19 +++++++++++--------
14844 1 files changed, 11 insertions(+), 8 deletions(-)
14845
14846 commit cdb3ba4a9113b779347387f3b6c6ea72dd4db12f
14847 Author: Takashi Iwai <tiwai@suse.de>
14848 Date: Thu Feb 4 17:06:13 2016 +0100
14849
14850 ALSA: timer: Fix leftover link at closing
14851
14852 In ALSA timer core, the active timer instance is managed in
14853 active_list linked list. Each element is added / removed dynamically
14854 at timer start, stop and in timer interrupt. The problem is that
14855 snd_timer_interrupt() has a thinko and leaves the element in
14856 active_list when it's the last opened element. This eventually leads
14857 to list corruption or use-after-free error.
14858
14859 This hasn't been revealed because we used to delete the list forcibly
14860 in snd_timer_stop() in the past. However, the recent fix avoids the
14861 double-stop behavior (in commit [f784beb75ce8: ALSA: timer: Fix link
14862 corruption due to double start or stop]), and this leak hits reality.
14863
14864 This patch fixes the link management in snd_timer_interrupt(). Now it
14865 simply unlinks no matter which stream is.
14866
14867 BugLink: http://lkml.kernel.org/r/CACT4Y+Yy2aukHP-EDp8-ziNqNNmb-NTf=jDWXMP7jB8HDa2vng@mail.gmail.com
14868 Reported-by: Dmitry Vyukov <dvyukov@google.com>
14869 Cc: <stable@vger.kernel.org>
14870 Signed-off-by: Takashi Iwai <tiwai@suse.de>
14871
14872 sound/core/timer.c | 4 ++--
14873 1 files changed, 2 insertions(+), 2 deletions(-)
14874
14875 commit 47d9647902f6a2f46a2be1e0140ba0f6f8c06008
14876 Author: Konstantin Khlebnikov <koct9i@gmail.com>
14877 Date: Fri Feb 5 15:37:01 2016 -0800
14878
14879 radix-tree: fix oops after radix_tree_iter_retry
14880
14881 Helper radix_tree_iter_retry() resets next_index to the current index.
14882 In following radix_tree_next_slot current chunk size becomes zero. This
14883 isn't checked and it tries to dereference null pointer in slot.
14884
14885 Tagged iterator is fine because retry happens only at slot 0 where tag
14886 bitmask in iter->tags is filled with single bit.
14887
14888 Fixes: 46437f9a554f ("radix-tree: fix race in gang lookup")
14889 Signed-off-by: Konstantin Khlebnikov <koct9i@gmail.com>
14890 Cc: Matthew Wilcox <willy@linux.intel.com>
14891 Cc: Hugh Dickins <hughd@google.com>
14892 Cc: Ohad Ben-Cohen <ohad@wizery.com>
14893 Cc: Jeremiah Mahler <jmmahler@gmail.com>
14894 Cc: <stable@vger.kernel.org>
14895 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14896 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14897
14898 include/linux/radix-tree.h | 6 +++---
14899 1 files changed, 3 insertions(+), 3 deletions(-)
14900
14901 commit 95b5dcb3c01958502af00b0bc0da1d906aae11a2
14902 Merge: 438be0b 256aeaf
14903 Author: Brad Spengler <spender@grsecurity.net>
14904 Date: Sun Feb 7 08:29:33 2016 -0500
14905
14906 Merge branch 'pax-test' into grsec-test
14907
14908 commit 256aeaf87c22de8edf1f03682a572c590ae07771
14909 Author: Brad Spengler <spender@grsecurity.net>
14910 Date: Sun Feb 7 08:29:09 2016 -0500
14911
14912 Update to pax-linux-4.3.5-test28.patch:
14913 - fixed an integer truncation bug in numa_clear_kernel_node_hotplug caught by the size overflow plugin, reported by x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4374)
14914 - spender fixed UDEREF on arm
14915
14916 arch/arm/Kconfig | 1 +
14917 arch/arm/include/asm/domain.h | 21 ++++++++-
14918 arch/arm/include/asm/futex.h | 9 ----
14919 arch/arm/include/asm/thread_info.h | 3 +
14920 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
14921 arch/arm/kernel/entry-armv.S | 2 +-
14922 arch/arm/kernel/process.c | 2 +-
14923 arch/arm/mm/alignment.c | 8 ----
14924 arch/x86/mm/numa.c | 2 +-
14925 security/Kconfig | 1 -
14926 10 files changed, 60 insertions(+), 70 deletions(-)
14927
14928 commit 438be0bd112bd17942b2628c53054dc1007558a1
14929 Author: Brad Spengler <spender@grsecurity.net>
14930 Date: Sat Feb 6 19:50:31 2016 -0500
14931
14932 Fix a number of issues caused by the upstream merging of a UDEREF ripoff resulting in unbootable
14933 ARM systems reported on the forums
14934
14935 arch/arm/Kconfig | 1 +
14936 arch/arm/include/asm/domain.h | 21 ++++++++-
14937 arch/arm/include/asm/futex.h | 9 ----
14938 arch/arm/include/asm/thread_info.h | 3 +
14939 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
14940 arch/arm/kernel/entry-armv.S | 2 +-
14941 arch/arm/kernel/process.c | 2 +-
14942 arch/arm/mm/alignment.c | 8 ----
14943 security/Kconfig | 1 -
14944 9 files changed, 59 insertions(+), 69 deletions(-)
14945
14946 commit 4ffdd5ef1f87e611af1efb4f251ada92abe9f4c0
14947 Author: Brad Spengler <spender@grsecurity.net>
14948 Date: Sat Feb 6 11:21:53 2016 -0500
14949
14950 Fix another compiler warning
14951
14952 net/ipv4/tcp_input.c | 2 ++
14953 1 files changed, 2 insertions(+), 0 deletions(-)
14954
14955 commit 30b5b7bc0fd67d458bdd5ab35e4689769eabd2ed
14956 Author: Brad Spengler <spender@grsecurity.net>
14957 Date: Sat Feb 6 11:16:12 2016 -0500
14958
14959 Fix two compiler warnings
14960
14961 kernel/pid.c | 5 ++---
14962 kernel/ptrace.c | 3 ++-
14963 2 files changed, 4 insertions(+), 4 deletions(-)
14964
14965 commit dda4d2a21914c480750f10bd55c6e3203d415d8d
14966 Author: Brad Spengler <spender@grsecurity.net>
14967 Date: Wed Feb 3 21:22:40 2016 -0500
14968
14969 Apply fix for integer truncation in NUMA init code, reported by
14970 x14sg1 on the forums:
14971 https://forums.grsecurity.net/viewtopic.php?f=3&t=4374
14972
14973 arch/x86/mm/numa.c | 2 +-
14974 1 files changed, 1 insertions(+), 1 deletions(-)
14975
14976 commit 477505f7c893cb6a2c3e22f83eefd9c985d7b3ca
14977 Merge: a781740 016d0d8
14978 Author: Brad Spengler <spender@grsecurity.net>
14979 Date: Wed Feb 3 21:20:58 2016 -0500
14980
14981 Merge branch 'pax-test' into grsec-test
14982
14983 commit 016d0d81a8dd4be1304c82a68e0ccf425868f467
14984 Author: Brad Spengler <spender@grsecurity.net>
14985 Date: Wed Feb 3 21:20:10 2016 -0500
14986
14987 Update to pax-linux-4.3.5-test27.patch:
14988 - fixed a bunch of potential REFCOUNT false positives, reported by Emese
14989 - restored padding in fpregs_state for storing AVX-512 state in the future
14990 - constified netlink_dump_control
14991 - added const version of debug_gimple_stmt for gcc plugins, by Emese
14992 - Emese fixed a bug in initify that could have initified too much
14993 - Emese fixed a false positive intentional integer overflow in xfrm4_extract_header, reported by corsac
14994
14995 arch/x86/include/asm/fpu/types.h | 1 +
14996 arch/x86/include/asm/mmu_context.h | 2 +-
14997 block/blk-cgroup.c | 18 ++--
14998 block/cfq-iosched.c | 4 +-
14999 crypto/crypto_user.c | 8 ++-
15000 drivers/acpi/apei/ghes.c | 6 +-
15001 drivers/char/ipmi/ipmi_ssif.c | 12 ++--
15002 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
15003 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
15004 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
15005 drivers/infiniband/core/netlink.c | 5 +-
15006 drivers/infiniband/hw/cxgb4/device.c | 6 +-
15007 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
15008 drivers/md/bcache/alloc.c | 2 +-
15009 drivers/md/bcache/bcache.h | 10 +-
15010 drivers/md/bcache/btree.c | 2 +-
15011 drivers/md/bcache/io.c | 10 +-
15012 drivers/md/bcache/journal.c | 2 +-
15013 drivers/md/bcache/stats.c | 26 +++---
15014 drivers/md/bcache/stats.h | 16 ++--
15015 drivers/md/bcache/super.c | 2 +-
15016 drivers/md/bcache/sysfs.c | 20 +++---
15017 drivers/md/dm-cache-target.c | 98 ++++++++++++------------
15018 drivers/md/dm-raid.c | 2 +-
15019 drivers/md/md.c | 6 +-
15020 drivers/md/md.h | 2 +-
15021 drivers/md/raid1.c | 2 +-
15022 drivers/md/raid10.c | 2 +-
15023 drivers/md/raid5.c | 4 +-
15024 drivers/media/pci/zoran/zoran.h | 1 -
15025 drivers/media/pci/zoran/zoran_driver.c | 3 -
15026 drivers/net/ethernet/sfc/selftest.c | 20 +++---
15027 drivers/net/irda/vlsi_ir.c | 18 ++--
15028 drivers/net/irda/vlsi_ir.h | 14 ++--
15029 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
15030 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
15031 drivers/net/wireless/ath/carl9170/main.c | 10 +-
15032 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
15033 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
15034 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
15035 drivers/scsi/hptiop.c | 2 -
15036 drivers/scsi/hptiop.h | 1 -
15037 drivers/scsi/ipr.c | 6 +-
15038 drivers/scsi/ipr.h | 2 +-
15039 drivers/scsi/qla2xxx/qla_target.c | 10 +-
15040 drivers/scsi/qla2xxx/qla_target.h | 2 +-
15041 fs/btrfs/ctree.c | 2 +-
15042 fs/btrfs/ctree.h | 4 +-
15043 fs/btrfs/delayed-ref.c | 4 +-
15044 fs/btrfs/disk-io.c | 4 +-
15045 fs/btrfs/file.c | 4 +-
15046 fs/btrfs/raid56.c | 32 ++++----
15047 fs/btrfs/tests/btrfs-tests.c | 2 +-
15048 fs/btrfs/transaction.c | 2 +-
15049 fs/btrfs/tree-log.c | 8 +-
15050 fs/btrfs/volumes.c | 14 ++--
15051 fs/btrfs/volumes.h | 22 +++---
15052 fs/jbd2/commit.c | 2 +-
15053 fs/jbd2/transaction.c | 4 +-
15054 fs/ocfs2/dlm/dlmcommon.h | 4 +-
15055 fs/ocfs2/dlm/dlmdebug.c | 10 +-
15056 fs/ocfs2/dlm/dlmdomain.c | 4 +-
15057 fs/ocfs2/dlm/dlmmaster.c | 4 +-
15058 include/acpi/ghes.h | 2 +-
15059 include/linux/blk-cgroup.h | 24 +++---
15060 include/linux/jbd2.h | 2 +-
15061 include/linux/netlink.h | 12 ++--
15062 include/net/cfg802154.h | 2 +-
15063 include/net/mac80211.h | 2 +-
15064 include/net/neighbour.h | 2 +-
15065 kernel/rcu/tree_plugin.h | 4 +-
15066 net/batman-adv/routing.c | 4 +-
15067 net/batman-adv/soft-interface.c | 2 +-
15068 net/batman-adv/translation-table.c | 14 ++--
15069 net/batman-adv/types.h | 2 +-
15070 net/core/neighbour.c | 14 ++--
15071 net/core/rtnetlink.c | 2 +-
15072 net/ipv4/arp.c | 2 +-
15073 net/ipv4/inet_diag.c | 4 +-
15074 net/ipv4/xfrm4_state.c | 4 +-
15075 net/ipv6/ndisc.c | 2 +-
15076 net/mac80211/cfg.c | 2 +-
15077 net/mac80211/debugfs_key.c | 2 +-
15078 net/mac80211/key.c | 4 +-
15079 net/mac80211/tx.c | 2 +-
15080 net/mac80211/wpa.c | 10 +-
15081 net/mac802154/iface.c | 4 +-
15082 net/netfilter/ipset/ip_set_core.c | 2 +-
15083 net/netfilter/nf_conntrack_netlink.c | 22 +++---
15084 net/netfilter/nf_tables_api.c | 13 ++--
15085 net/netfilter/nfnetlink_acct.c | 7 +-
15086 net/netfilter/nfnetlink_cthelper.c | 2 +-
15087 net/netfilter/nfnetlink_cttimeout.c | 2 +-
15088 net/netlink/af_netlink.c | 10 ++-
15089 net/netlink/diag.c | 2 +-
15090 net/netlink/genetlink.c | 14 ++--
15091 net/packet/af_packet.c | 18 ++--
15092 net/packet/diag.c | 2 +-
15093 net/packet/internal.h | 6 +-
15094 net/unix/diag.c | 2 +-
15095 net/xfrm/xfrm_user.c | 2 +-
15096 security/apparmor/include/policy.h | 2 +-
15097 security/apparmor/policy.c | 4 +-
15098 sound/core/seq/seq_clientmgr.c | 2 +-
15099 sound/core/seq/seq_fifo.c | 6 +-
15100 sound/core/seq/seq_fifo.h | 2 +-
15101 tools/gcc/gcc-common.h | 24 ++++--
15102 tools/gcc/initify_plugin.c | 7 +-
15103 tools/lib/api/Makefile | 2 +-
15104 109 files changed, 399 insertions(+), 391 deletions(-)
15105
15106 commit a7817402ac837b1aee07fac42537a02097055098
15107 Author: Matt Fleming <matt@codeblueprint.co.uk>
15108 Date: Fri Jan 29 11:36:10 2016 +0000
15109
15110 x86/mm/pat: Avoid truncation when converting cpa->numpages to address
15111
15112 There are a couple of nasty truncation bugs lurking in the pageattr
15113 code that can be triggered when mapping EFI regions, e.g. when we pass
15114 a cpa->pgd pointer. Because cpa->numpages is a 32-bit value, shifting
15115 left by PAGE_SHIFT will truncate the resultant address to 32-bits.
15116
15117 Viorel-Cătălin managed to trigger this bug on his Dell machine that
15118 provides a ~5GB EFI region which requires 1236992 pages to be mapped.
15119 When calling populate_pud() the end of the region gets calculated
15120 incorrectly in the following buggy expression,
15121
15122 end = start + (cpa->numpages << PAGE_SHIFT);
15123
15124 And only 188416 pages are mapped. Next, populate_pud() gets invoked
15125 for a second time because of the loop in __change_page_attr_set_clr(),
15126 only this time no pages get mapped because shifting the remaining
15127 number of pages (1048576) by PAGE_SHIFT is zero. At which point the
15128 loop in __change_page_attr_set_clr() spins forever because we fail to
15129 map progress.
15130
15131 Hitting this bug depends very much on the virtual address we pick to
15132 map the large region at and how many pages we map on the initial run
15133 through the loop. This explains why this issue was only recently hit
15134 with the introduction of commit
15135
15136 a5caa209ba9c ("x86/efi: Fix boot crash by mapping EFI memmap
15137 entries bottom-up at runtime, instead of top-down")
15138
15139 It's interesting to note that safe uses of cpa->numpages do exist in
15140 the pageattr code. If instead of shifting ->numpages we multiply by
15141 PAGE_SIZE, no truncation occurs because PAGE_SIZE is a UL value, and
15142 so the result is unsigned long.
15143
15144 To avoid surprises when users try to convert very large cpa->numpages
15145 values to addresses, change the data type from 'int' to 'unsigned
15146 long', thereby making it suitable for shifting by PAGE_SHIFT without
15147 any type casting.
15148
15149 The alternative would be to make liberal use of casting, but that is
15150 far more likely to cause problems in the future when someone adds more
15151 code and fails to cast properly; this bug was difficult enough to
15152 track down in the first place.
15153
15154 Reported-and-tested-by: Viorel-Cătălin Răpițeanu <rapiteanu.catalin@gmail.com>
15155 Acked-by: Borislav Petkov <bp@alien8.de>
15156 Cc: Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com>
15157 Cc: <stable@vger.kernel.org>
15158 Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
15159 Link: https://bugzilla.kernel.org/show_bug.cgi?id=110131
15160 Link: http://lkml.kernel.org/r/1454067370-10374-1-git-send-email-matt@codeblueprint.co.uk
15161 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
15162
15163 arch/x86/mm/pageattr.c | 4 ++--
15164 1 files changed, 2 insertions(+), 2 deletions(-)
15165
15166 commit 64dd9d7a67a742fda257cdd16510c29e695c34b5
15167 Author: Jan Beulich <JBeulich@suse.com>
15168 Date: Tue Jan 26 04:15:18 2016 -0700
15169
15170 x86/mm: Fix types used in pgprot cacheability flags translations
15171
15172 For PAE kernels "unsigned long" is not suitable to hold page protection
15173 flags, since _PAGE_NX doesn't fit there. This is the reason for quite a
15174 few W+X pages getting reported as insecure during boot (observed namely
15175 for the entire initrd range).
15176
15177 Fixes: 281d4078be ("x86: Make page cache mode a real type")
15178 Signed-off-by: Jan Beulich <jbeulich@suse.com>
15179 Reviewed-by: Juergen Gross <JGross@suse.com>
15180 Cc: stable@vger.kernel.org
15181 Link: http://lkml.kernel.org/r/56A7635602000078000CAFF1@prv-mh.provo.novell.com
15182 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
15183
15184 arch/x86/include/asm/pgtable_types.h | 6 ++----
15185 1 files changed, 2 insertions(+), 4 deletions(-)
15186
15187 commit bb9a3a9df0d8dfc96d521676e64c42b37ba22aea
15188 Merge: 682d661 f74425b
15189 Author: Brad Spengler <spender@grsecurity.net>
15190 Date: Sun Jan 31 15:06:25 2016 -0500
15191
15192 Merge branch 'pax-test' into grsec-test
15193
15194 Conflicts:
15195 drivers/net/slip/slhc.c
15196 include/linux/sched.h
15197 net/unix/af_unix.c
15198 sound/core/timer.c
15199
15200 commit f74425b5705bfe52aff9e97659ef10c4a14176c3
15201 Merge: d14af1f 849a2d3
15202 Author: Brad Spengler <spender@grsecurity.net>
15203 Date: Sun Jan 31 15:02:55 2016 -0500
15204
15205 Merge branch 'linux-4.3.y' into pax-test
15206
15207 Conflicts:
15208 arch/x86/include/asm/mmu_context.h
15209
15210 commit 682d6611d75542e351c973c8dd74a99d3966c073
15211 Author: Brad Spengler <spender@grsecurity.net>
15212 Date: Sat Jan 30 13:05:03 2016 -0500
15213
15214 Based on a report from Mathias Krause, fix up a number of additional instances
15215 of ulong overflow when passing in values to gr_learn_resource by saturating
15216 to ULONG_MAX
15217
15218 mm/mlock.c | 11 ++++++++---
15219 mm/mmap.c | 16 +++++++++++++---
15220 2 files changed, 21 insertions(+), 6 deletions(-)
15221
15222 commit adb52e95fb9ad4ac9c56cd5d47bd668f47c33096
15223 Author: Jann Horn <jann@thejh.net>
15224 Date: Sat Dec 26 06:00:48 2015 +0100
15225
15226 seccomp: always propagate NO_NEW_PRIVS on tsync
15227
15228 Before this patch, a process with some permissive seccomp filter
15229 that was applied by root without NO_NEW_PRIVS was able to add
15230 more filters to itself without setting NO_NEW_PRIVS by setting
15231 the new filter from a throwaway thread with NO_NEW_PRIVS.
15232
15233 Signed-off-by: Jann Horn <jann@thejh.net>
15234 Cc: stable@vger.kernel.org
15235 Signed-off-by: Kees Cook <keescook@chromium.org>
15236
15237 kernel/seccomp.c | 22 +++++++++++-----------
15238 1 files changed, 11 insertions(+), 11 deletions(-)
15239
15240 commit b85450498a3bbf269441c8963d7574bb3079c838
15241 Merge: 59c216f d14af1f
15242 Author: Brad Spengler <spender@grsecurity.net>
15243 Date: Fri Jan 29 20:54:13 2016 -0500
15244
15245 Merge branch 'pax-test' into grsec-test
15246
15247 commit d14af1f1dd66511f3f0674deee2b572972012b39
15248 Author: Brad Spengler <spender@grsecurity.net>
15249 Date: Fri Jan 29 20:53:51 2016 -0500
15250
15251 Update to pax-linux-4.3.4-test26.patch:
15252 - Emese fixed a few intentional overflows introduced by gcc, reported by StalkR (https://forums.grsecurity.net/viewtopic.php?f=3&t=4370)
15253
15254 fs/cifs/file.c | 2 +-
15255 fs/gfs2/file.c | 2 +-
15256 .../size_overflow_plugin/intentional_overflow.c | 96 ++++++++++++++++++--
15257 tools/gcc/size_overflow_plugin/size_overflow.h | 2 +
15258 .../size_overflow_plugin/size_overflow_plugin.c | 4 +-
15259 .../size_overflow_plugin/size_overflow_transform.c | 6 +-
15260 .../size_overflow_transform_core.c | 5 +
15261 7 files changed, 102 insertions(+), 15 deletions(-)
15262
15263 commit 59c216f13587eacdd692386b7a403ae78ed84fb6
15264 Author: Brad Spengler <spender@grsecurity.net>
15265 Date: Wed Jan 27 17:57:21 2016 -0500
15266
15267 Fix a size_overflow report reported by Mathias Krause in our
15268 truncation of an loff_t to an unsigned long when being passed
15269 to gr_learn_resource() (as all resource checks are against unsigned long
15270 values)
15271
15272 fs/attr.c | 5 ++++-
15273 1 files changed, 4 insertions(+), 1 deletions(-)
15274
15275 commit 70636c6ad60fc1db3af764ecc789b827b7497a97
15276 Author: Yuchung Cheng <ycheng@google.com>
15277 Date: Wed Jan 6 12:42:38 2016 -0800
15278
15279 tcp: fix zero cwnd in tcp_cwnd_reduction
15280
15281 Patch 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode
15282 conditionally") introduced a bug that cwnd may become 0 when both
15283 inflight and sndcnt are 0 (cwnd = inflight + sndcnt). This may lead
15284 to a div-by-zero if the connection starts another cwnd reduction
15285 phase by setting tp->prior_cwnd to the current cwnd (0) in
15286 tcp_init_cwnd_reduction().
15287
15288 To prevent this we skip PRR operation when nothing is acked or
15289 sacked. Then cwnd must be positive in all cases as long as ssthresh
15290 is positive:
15291
15292 1) The proportional reduction mode
15293 inflight > ssthresh > 0
15294
15295 2) The reduction bound mode
15296 a) inflight == ssthresh > 0
15297
15298 b) inflight < ssthresh
15299 sndcnt > 0 since newly_acked_sacked > 0 and inflight < ssthresh
15300
15301 Therefore in all cases inflight and sndcnt can not both be 0.
15302 We check invalid tp->prior_cwnd to avoid potential div0 bugs.
15303
15304 In reality this bug is triggered only with a sequence of less common
15305 events. For example, the connection is terminating an ECN-triggered
15306 cwnd reduction with an inflight 0, then it receives reordered/old
15307 ACKs or DSACKs from prior transmission (which acks nothing). Or the
15308 connection is in fast recovery stage that marks everything lost,
15309 but fails to retransmit due to local issues, then receives data
15310 packets from other end which acks nothing.
15311
15312 Fixes: 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode conditionally")
15313 Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name>
15314 Signed-off-by: Yuchung Cheng <ycheng@google.com>
15315 Signed-off-by: Neal Cardwell <ncardwell@google.com>
15316 Signed-off-by: Eric Dumazet <edumazet@google.com>
15317 Signed-off-by: David S. Miller <davem@davemloft.net>
15318
15319 net/ipv4/tcp_input.c | 3 +++
15320 1 files changed, 3 insertions(+), 0 deletions(-)
15321
15322 commit dac1da2bedbb43195d371c7a192cfeeb45683df0
15323 Author: Eric Dumazet <edumazet@google.com>
15324 Date: Sun Jan 24 13:53:50 2016 -0800
15325
15326 af_unix: fix struct pid memory leak
15327
15328 Dmitry reported a struct pid leak detected by a syzkaller program.
15329
15330 Bug happens in unix_stream_recvmsg() when we break the loop when a
15331 signal is pending, without properly releasing scm.
15332
15333 Fixes: b3ca9b02b007 ("net: fix multithreaded signal handling in unix recv routines")
15334 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15335 Signed-off-by: Eric Dumazet <edumazet@google.com>
15336 Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com>
15337 Signed-off-by: David S. Miller <davem@davemloft.net>
15338
15339 net/unix/af_unix.c | 1 +
15340 1 files changed, 1 insertions(+), 0 deletions(-)
15341
15342 commit 15cc47f127520d1ac0c1fe76d993c2c27f0f2571
15343 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
15344 Date: Fri Jan 22 01:39:43 2016 +0100
15345
15346 pptp: fix illegal memory access caused by multiple bind()s
15347
15348 Several times already this has been reported as kasan reports caused by
15349 syzkaller and trinity and people always looked at RCU races, but it is
15350 much more simple. :)
15351
15352 In case we bind a pptp socket multiple times, we simply add it to
15353 the callid_sock list but don't remove the old binding. Thus the old
15354 socket stays in the bucket with unused call_id indexes and doesn't get
15355 cleaned up. This causes various forms of kasan reports which were hard
15356 to pinpoint.
15357
15358 Simply don't allow multiple binds and correct error handling in
15359 pptp_bind. Also keep sk_state bits in place in pptp_connect.
15360
15361 Fixes: 00959ade36acad ("PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)")
15362 Cc: Dmitry Kozlov <xeb@mail.ru>
15363 Cc: Sasha Levin <sasha.levin@oracle.com>
15364 Cc: Dmitry Vyukov <dvyukov@google.com>
15365 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15366 Cc: Dave Jones <davej@codemonkey.org.uk>
15367 Reported-by: Dave Jones <davej@codemonkey.org.uk>
15368 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
15369 Signed-off-by: David S. Miller <davem@davemloft.net>
15370
15371 drivers/net/ppp/pptp.c | 34 ++++++++++++++++++++++++----------
15372 1 files changed, 24 insertions(+), 10 deletions(-)
15373
15374 commit e2b7b8c66851c85188fa6dab2d2b2a6c85bc7332
15375 Author: Brad Spengler <spender@grsecurity.net>
15376 Date: Tue Jan 26 18:17:10 2016 -0500
15377
15378 Add info about cpupower/powertop to GRKERNSEC_KMEM, was present on our
15379 wiki but was removed from the config help at some point
15380
15381 grsecurity/Kconfig | 3 +++
15382 1 files changed, 3 insertions(+), 0 deletions(-)
15383
15384 commit ce2e88efa000fc32bfcd84098f57c8ed8310fefc
15385 Author: Thomas Egerer <hakke_007@gmx.de>
15386 Date: Mon Jan 25 12:58:44 2016 +0100
15387
15388 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV
15389
15390 The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
15391 to select CRYPTO_ECHAINIV in order to work properly. This solves the
15392 issues caused by a misconfiguration as described in [1].
15393 The original approach, patching crypto/Kconfig was turned down by
15394 Herbert Xu [2].
15395
15396 [1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
15397 [2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2
15398
15399 Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
15400 Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
15401 Signed-off-by: David S. Miller <davem@davemloft.net>
15402
15403 net/ipv4/Kconfig | 1 +
15404 net/ipv6/Kconfig | 1 +
15405 2 files changed, 2 insertions(+), 0 deletions(-)
15406
15407 commit fca5a303155ea67d28aece0caf2b03ffc3b2668d
15408 Merge: 904114c 6339c1f
15409 Author: Brad Spengler <spender@grsecurity.net>
15410 Date: Tue Jan 26 18:08:40 2016 -0500
15411
15412 Merge branch 'pax-test' into grsec-test
15413
15414 commit 6339c1f9a9beafd417bf9f04d4b257e62aeb45b7
15415 Author: Brad Spengler <spender@grsecurity.net>
15416 Date: Tue Jan 26 18:07:51 2016 -0500
15417
15418 Update to pax-linux-4.3.4-test25.patch:
15419 - fixed incorrect handling of VM_DONTCOPY during fork that would trigger a consistency check in the vma mirroring logic, reported by Mathias Krause <minipli@googlemail.com>
15420 - fixed init_new_context on !MODIFY_LDT_SYSCALL configs, reported by tjh (https://forums.grsecurity.net/viewtopic.php?f=3&t=4368)
15421 - fixed a few REFCOUNT false positives in SNMP related statistics
15422
15423 arch/x86/Kconfig | 2 +-
15424 arch/x86/include/asm/mmu_context.h | 17 +++++++++++++++++
15425 include/net/snmp.h | 10 +++++-----
15426 kernel/fork.c | 11 +++++++++--
15427 net/ipv4/proc.c | 8 ++++----
15428 net/ipv6/addrconf.c | 4 ++--
15429 net/ipv6/proc.c | 10 +++++-----
15430 7 files changed, 43 insertions(+), 19 deletions(-)
15431
15432 commit 904114c2fce3fdff5d57e763da56a78960db4e19
15433 Author: Al Viro <viro@zeniv.linux.org.uk>
15434 Date: Fri Jan 22 18:08:52 2016 -0500
15435
15436 make sure that freeing shmem fast symlinks is RCU-delayed
15437
15438 Cc: stable@vger.kernel.org # v4.2+
15439 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15440
15441 include/linux/shmem_fs.h | 5 +----
15442 mm/shmem.c | 9 ++++-----
15443 2 files changed, 5 insertions(+), 9 deletions(-)
15444
15445 commit ab86adee64312a2f827dd516cb199521327943ed
15446 Author: Sasha Levin <sasha.levin@oracle.com>
15447 Date: Mon Jan 18 19:23:51 2016 -0500
15448
15449 netfilter: nf_conntrack: use safer way to lock all buckets
15450
15451 When we need to lock all buckets in the connection hashtable we'd attempt to
15452 lock 1024 spinlocks, which is way more preemption levels than supported by
15453 the kernel. Furthermore, this behavior was hidden by checking if lockdep is
15454 enabled, and if it was - use only 8 buckets(!).
15455
15456 Fix this by using a global lock and synchronize all buckets on it when we
15457 need to lock them all. This is pretty heavyweight, but is only done when we
15458 need to resize the hashtable, and that doesn't happen often enough (or at all).
15459
15460 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
15461 Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
15462 Reviewed-by: Florian Westphal <fw@strlen.de>
15463 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
15464
15465 Conflicts:
15466
15467 net/netfilter/nfnetlink_cttimeout.c
15468
15469 include/net/netfilter/nf_conntrack_core.h | 8 ++----
15470 net/netfilter/nf_conntrack_core.c | 38 +++++++++++++++++++++-------
15471 net/netfilter/nf_conntrack_helper.c | 2 +-
15472 net/netfilter/nf_conntrack_netlink.c | 2 +-
15473 4 files changed, 33 insertions(+), 17 deletions(-)
15474
15475 commit 37014723527225481c720484bb788a1a6358072f
15476 Author: Willy Tarreau <w@1wt.eu>
15477 Date: Mon Jan 18 16:36:09 2016 +0100
15478
15479 pipe: limit the per-user amount of pages allocated in pipes
15480
15481 On no-so-small systems, it is possible for a single process to cause an
15482 OOM condition by filling large pipes with data that are never read. A
15483 typical process filling 4000 pipes with 1 MB of data will use 4 GB of
15484 memory. On small systems it may be tricky to set the pipe max size to
15485 prevent this from happening.
15486
15487 This patch makes it possible to enforce a per-user soft limit above
15488 which new pipes will be limited to a single page, effectively limiting
15489 them to 4 kB each, as well as a hard limit above which no new pipes may
15490 be created for this user. This has the effect of protecting the system
15491 against memory abuse without hurting other users, and still allowing
15492 pipes to work correctly though with less data at once.
15493
15494 The limit are controlled by two new sysctls : pipe-user-pages-soft, and
15495 pipe-user-pages-hard. Both may be disabled by setting them to zero. The
15496 default soft limit allows the default number of FDs per process (1024)
15497 to create pipes of the default size (64kB), thus reaching a limit of 64MB
15498 before starting to create only smaller pipes. With 256 processes limited
15499 to 1024 FDs each, this results in 1024*64kB + (256*1024 - 1024) * 4kB =
15500 1084 MB of memory allocated for a user. The hard limit is disabled by
15501 default to avoid breaking existing applications that make intensive use
15502 of pipes (eg: for splicing).
15503
15504 Reported-by: socketpair@gmail.com
15505 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
15506 Mitigates: CVE-2013-4312 (Linux 2.0+)
15507 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
15508 Signed-off-by: Willy Tarreau <w@1wt.eu>
15509 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15510
15511 Documentation/sysctl/fs.txt | 23 +++++++++++++++++++++
15512 fs/pipe.c | 47 +++++++++++++++++++++++++++++++++++++++++-
15513 include/linux/pipe_fs_i.h | 4 +++
15514 include/linux/sched.h | 1 +
15515 kernel/sysctl.c | 14 ++++++++++++
15516 5 files changed, 87 insertions(+), 2 deletions(-)
15517
15518 commit 51645fa198d194f746651dcfbc5f24a4cf8b9fb8
15519 Merge: 540f2af 7791ecb
15520 Author: Brad Spengler <spender@grsecurity.net>
15521 Date: Sat Jan 23 10:57:11 2016 -0500
15522
15523 Merge branch 'pax-test' into grsec-test
15524
15525 commit 7791ecb84f840343a5646236fd0d34e1fb450793
15526 Merge: 470069c 399588c
15527 Author: Brad Spengler <spender@grsecurity.net>
15528 Date: Sat Jan 23 10:56:47 2016 -0500
15529
15530 Merge branch 'linux-4.3.y' into pax-test
15531
15532 commit 540f2affebd42cdc26a699208ab4f1cb0cb75e33
15533 Author: Brad Spengler <spender@grsecurity.net>
15534 Date: Tue Jan 19 21:18:47 2016 -0500
15535
15536 Update size_overflow hash table
15537
15538 .../size_overflow_plugin/size_overflow_hash.data | 4 +++-
15539 1 files changed, 3 insertions(+), 1 deletions(-)
15540
15541 commit 7e649765626a28437f573f0fbe7a51a04615f041
15542 Author: Brad Spengler <spender@grsecurity.net>
15543 Date: Tue Jan 19 20:29:46 2016 -0500
15544
15545 Backport fix from: https://lkml.org/lkml/2015/12/13/187
15546
15547 fs/ext4/extents.c | 2 +-
15548 1 files changed, 1 insertions(+), 1 deletions(-)
15549
15550 commit 53b859cd0a5f5b6ad54fe0c879dfedaa3c5a3005
15551 Author: Jann Horn <jann@thejh.net>
15552 Date: Tue Jan 5 18:27:30 2016 +0100
15553
15554 compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)
15555
15556 This replaces all code in fs/compat_ioctl.c that translated
15557 ioctl arguments into a in-kernel structure, then performed
15558 do_ioctl under set_fs(KERNEL_DS), with code that allocates
15559 data on the user stack and can call the VFS ioctl handler
15560 under USER_DS.
15561
15562 This is done as a hardening measure because the caller
15563 does not know what kind of ioctl handler will be invoked,
15564 only that no corresponding compat_ioctl handler exists and
15565 what the ioctl command number is. The accidental
15566 invocation of an unlocked_ioctl handler that unexpectedly
15567 calls copy_to_user could be a severe security issue.
15568
15569 Signed-off-by: Jann Horn <jann@thejh.net>
15570 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15571
15572 Conflicts:
15573
15574 fs/compat_ioctl.c
15575
15576 fs/compat_ioctl.c | 130 ++++++++++++++++++++++++++++-------------------------
15577 1 files changed, 68 insertions(+), 62 deletions(-)
15578
15579 commit 3e89e770ae27e931cd1583f021abac41eeebc3e7
15580 Author: Al Viro <viro@zeniv.linux.org.uk>
15581 Date: Thu Jan 7 09:53:30 2016 -0500
15582
15583 compat_ioctl: don't pass fd around when not needed
15584
15585 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15586
15587 fs/compat_ioctl.c | 103 ++++++++++++++++++++++++++--------------------------
15588 fs/internal.h | 7 ++++
15589 fs/ioctl.c | 4 +-
15590 include/linux/fs.h | 2 -
15591 4 files changed, 61 insertions(+), 55 deletions(-)
15592
15593 commit 9d4e04082752d4d2d68445c4e6faf33a2613df55
15594 Author: Jann Horn <jann@thejh.net>
15595 Date: Tue Jan 5 18:27:29 2016 +0100
15596
15597 compat_ioctl: don't look up the fd twice
15598
15599 In code in fs/compat_ioctl.c that translates ioctl arguments
15600 into a in-kernel structure, then performs sys_ioctl, possibly
15601 under set_fs(KERNEL_DS), this commit changes the sys_ioctl
15602 calls to do_ioctl calls. do_ioctl is a new function that does
15603 the same thing as sys_ioctl, but doesn't look up the fd again.
15604
15605 This change is made to avoid (potential) security issues
15606 because of ioctl handlers that accept one of the ioctl
15607 commands I2C_FUNCS, VIDEO_GET_EVENT, MTIOCPOS, MTIOCGET,
15608 TIOCGSERIAL, TIOCSSERIAL, RTC_IRQP_READ, RTC_EPOCH_READ.
15609 This can happen for multiple reasons:
15610
15611 - The ioctl command number could be reused.
15612 - The ioctl handler might not check the full ioctl
15613 command. This is e.g. true for drm_ioctl.
15614 - The ioctl handler is very special, e.g. cuse_file_ioctl
15615
15616 The real issue is that set_fs(KERNEL_DS) is used here,
15617 but that's fixed in a separate commit
15618 "compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)".
15619
15620 This change mitigates potential security issues by
15621 preventing a race that permits invocation of
15622 unlocked_ioctl handlers under KERNEL_DS through compat
15623 code even if a corresponding compat_ioctl handler exists.
15624
15625 So far, no way has been identified to use this to damage
15626 kernel memory without having CAP_SYS_ADMIN in the init ns
15627 (with the capability, doing reads/writes at arbitrary
15628 kernel addresses should be easy through CUSE's ioctl
15629 handler with FUSE_IOCTL_UNRESTRICTED set).
15630
15631 [AV: two missed sys_ioctl() taken care of]
15632
15633 Signed-off-by: Jann Horn <jann@thejh.net>
15634 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15635
15636 fs/compat_ioctl.c | 122 +++++++++++++++++++++++++++++-----------------------
15637 1 files changed, 68 insertions(+), 54 deletions(-)
15638
15639 commit 5bf9e1ed4ebb278cd956ba142914fc04a024309c
15640 Author: Vasily Kulikov <segoon@openwall.com>
15641 Date: Fri Jan 15 16:57:55 2016 -0800
15642
15643 include/linux/poison.h: use POISON_POINTER_DELTA for poison pointers
15644
15645 TIMER_ENTRY_STATIC is defined as a poison pointers which
15646 should point to nowhere. Redefine them using POISON_POINTER_DELTA
15647 arithmetics to make sure they really point to non-mappable area declared
15648 by the target architecture.
15649
15650 Signed-off-by: Vasily Kulikov <segoon@openwall.com>
15651 Acked-by: Thomas Gleixner <tglx@linutronix.de>
15652 Cc: Solar Designer <solar@openwall.com>
15653 Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
15654 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
15655 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
15656
15657 Conflicts:
15658
15659 include/linux/poison.h
15660
15661 include/linux/poison.h | 2 +-
15662 1 files changed, 1 insertions(+), 1 deletions(-)
15663
15664 commit 60f2e0a05ab8f56c804a9334a23e2b446305d110
15665 Author: Brad Spengler <spender@grsecurity.net>
15666 Date: Tue Jan 19 19:41:44 2016 -0500
15667
15668 Fix ARM compilation, reported by Austin Sepp
15669
15670 grsecurity/grsec_sig.c | 1 +
15671 1 files changed, 1 insertions(+), 0 deletions(-)
15672
15673 commit e15383743443dc43460a2fd73e0db0b608610dca
15674 Author: Takashi Iwai <tiwai@suse.de>
15675 Date: Mon Jan 18 13:52:47 2016 +0100
15676
15677 ALSA: hrtimer: Fix stall by hrtimer_cancel()
15678
15679 hrtimer_cancel() waits for the completion from the callback, thus it
15680 must not be called inside the callback itself. This was already a
15681 problem in the past with ALSA hrtimer driver, and the early commit
15682 [fcfdebe70759: ALSA: hrtimer - Fix lock-up] tried to address it.
15683
15684 However, the previous fix is still insufficient: it may still cause a
15685 lockup when the ALSA timer instance reprograms itself in its callback.
15686 Then it invokes the start function even in snd_timer_interrupt() that
15687 is called in hrtimer callback itself, results in a CPU stall. This is
15688 no hypothetical problem but actually triggered by syzkaller fuzzer.
15689
15690 This patch tries to fix the issue again. Now we call
15691 hrtimer_try_to_cancel() at both start and stop functions so that it
15692 won't fall into a deadlock, yet giving some chance to cancel the queue
15693 if the functions have been called outside the callback. The proper
15694 hrtimer_cancel() is called in anyway at closing, so this should be
15695 enough.
15696
15697 Reported-and-tested-by: Dmitry Vyukov <dvyukov@google.com>
15698 Cc: <stable@vger.kernel.org>
15699 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15700
15701 sound/core/hrtimer.c | 3 ++-
15702 1 files changed, 2 insertions(+), 1 deletions(-)
15703
15704 commit 12d874daf706e6e7c1ae709141859c809599297e
15705 Author: Takashi Iwai <tiwai@suse.de>
15706 Date: Tue Jan 12 12:38:02 2016 +0100
15707
15708 ALSA: seq: Fix missing NULL check at remove_events ioctl
15709
15710 snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear()
15711 unconditionally even if there is no FIFO assigned, and this leads to
15712 an Oops due to NULL dereference. The fix is just to add a proper NULL
15713 check.
15714
15715 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15716 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15717 Cc: <stable@vger.kernel.org>
15718 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15719
15720 sound/core/seq/seq_clientmgr.c | 2 +-
15721 1 files changed, 1 insertions(+), 1 deletions(-)
15722
15723 commit 2eb0632df1351378946507e7ef7ba0682632a7b5
15724 Author: Takashi Iwai <tiwai@suse.de>
15725 Date: Tue Jan 12 15:36:27 2016 +0100
15726
15727 ALSA: seq: Fix race at timer setup and close
15728
15729 ALSA sequencer code has an open race between the timer setup ioctl and
15730 the close of the client. This was triggered by syzkaller fuzzer, and
15731 a use-after-free was caught there as a result.
15732
15733 This patch papers over it by adding a proper queue->timer_mutex lock
15734 around the timer-related calls in the relevant code path.
15735
15736 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15737 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15738 Cc: <stable@vger.kernel.org>
15739 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15740
15741 sound/core/seq/seq_queue.c | 2 ++
15742 1 files changed, 2 insertions(+), 0 deletions(-)
15743
15744 commit b9e55ab955e59b4a636d78a748be90334a48b485
15745 Author: Takashi Iwai <tiwai@suse.de>
15746 Date: Thu Jan 14 16:30:58 2016 +0100
15747
15748 ALSA: timer: Harden slave timer list handling
15749
15750 A slave timer instance might be still accessible in a racy way while
15751 operating the master instance as it lacks of locking. Since the
15752 master operation is mostly protected with timer->lock, we should cope
15753 with it while changing the slave instance, too. Also, some linked
15754 lists (active_list and ack_list) of slave instances aren't unlinked
15755 immediately at stopping or closing, and this may lead to unexpected
15756 accesses.
15757
15758 This patch tries to address these issues. It adds spin lock of
15759 timer->lock (either from master or slave, which is equivalent) in a
15760 few places. For avoiding a deadlock, we ensure that the global
15761 slave_active_lock is always locked at first before each timer lock.
15762
15763 Also, ack and active_list of slave instances are properly unlinked at
15764 snd_timer_stop() and snd_timer_close().
15765
15766 Last but not least, remove the superfluous call of _snd_timer_stop()
15767 at removing slave links. This is a noop, and calling it may confuse
15768 readers wrt locking. Further cleanup will follow in a later patch.
15769
15770 Actually we've got reports of use-after-free by syzkaller fuzzer, and
15771 this hopefully fixes these issues.
15772
15773 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15774 Cc: <stable@vger.kernel.org>
15775 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15776
15777 sound/core/timer.c | 18 ++++++++++++++----
15778 1 files changed, 14 insertions(+), 4 deletions(-)
15779
15780 commit f1ce0547bdfda1b42ae8a66c222f2a897cbe1586
15781 Author: Takashi Iwai <tiwai@suse.de>
15782 Date: Wed Jan 13 17:48:01 2016 +0100
15783
15784 ALSA: timer: Fix race among timer ioctls
15785
15786 ALSA timer ioctls have an open race and this may lead to a
15787 use-after-free of timer instance object. A simplistic fix is to make
15788 each ioctl exclusive. We have already tread_sem for controlling the
15789 tread, and extend this as a global mutex to be applied to each ioctl.
15790
15791 The downside is, of course, the worse concurrency. But these ioctls
15792 aren't to be parallel accessible, in anyway, so it should be fine to
15793 serialize there.
15794
15795 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15796 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15797 Cc: <stable@vger.kernel.org>
15798 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15799
15800 sound/core/timer.c | 32 +++++++++++++++++++-------------
15801 1 files changed, 19 insertions(+), 13 deletions(-)
15802
15803 commit 8347d8461ed48a98f9c76cc3cfcdad8217d314bc
15804 Author: Takashi Iwai <tiwai@suse.de>
15805 Date: Wed Jan 13 21:35:06 2016 +0100
15806
15807 ALSA: timer: Fix double unlink of active_list
15808
15809 ALSA timer instance object has a couple of linked lists and they are
15810 unlinked unconditionally at snd_timer_stop(). Meanwhile
15811 snd_timer_interrupt() unlinks it, but it calls list_del() which leaves
15812 the element list itself unchanged. This ends up with unlinking twice,
15813 and it was caught by syzkaller fuzzer.
15814
15815 The fix is to use list_del_init() variant properly there, too.
15816
15817 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15818 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15819 Cc: <stable@vger.kernel.org>
15820 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15821
15822 sound/core/timer.c | 2 +-
15823 1 files changed, 1 insertions(+), 1 deletions(-)
15824
15825 commit 243aebb7ae71d6e11ea9880faa893d1d0d60cd75
15826 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
15827 Date: Mon Jan 18 18:03:48 2016 +0100
15828
15829 ovs: limit ovs recursions in ovs_execute_actions to not corrupt stack
15830
15831 It was seen that defective configurations of openvswitch could overwrite
15832 the STACK_END_MAGIC and cause a hard crash of the kernel because of too
15833 many recursions within ovs.
15834
15835 This problem arises due to the high stack usage of openvswitch. The rest
15836 of the kernel is fine with the current limit of 10 (RECURSION_LIMIT).
15837
15838 We use the already existing recursion counter in ovs_execute_actions to
15839 implement an upper bound of 5 recursions.
15840
15841 Cc: Pravin Shelar <pshelar@ovn.org>
15842 Cc: Simon Horman <simon.horman@netronome.com>
15843 Cc: Eric Dumazet <eric.dumazet@gmail.com>
15844 Cc: Simon Horman <simon.horman@netronome.com>
15845 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
15846 Signed-off-by: David S. Miller <davem@davemloft.net>
15847
15848 net/openvswitch/actions.c | 19 ++++++++++++++-----
15849 1 files changed, 14 insertions(+), 5 deletions(-)
15850
15851 commit 8080793479c6d5befe37a67b1dbd9e4e0a61af96
15852 Author: Ursula Braun <ursula.braun@de.ibm.com>
15853 Date: Tue Jan 19 10:41:33 2016 +0100
15854
15855 af_iucv: Validate socket address length in iucv_sock_bind()
15856
15857 Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
15858 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15859 Reviewed-by: Evgeny Cherkashin <Eugene.Crosser@ru.ibm.com>
15860 Signed-off-by: David S. Miller <davem@davemloft.net>
15861
15862 net/iucv/af_iucv.c | 3 +++
15863 1 files changed, 3 insertions(+), 0 deletions(-)
15864
15865 commit 50a383c1c91ed7409c3cbdd41e662d6891463d1b
15866 Author: Brad Spengler <spender@grsecurity.net>
15867 Date: Tue Jan 19 19:32:54 2016 -0500
15868
15869 Apply the same fix as everyone else for the recent keys vulnerability that is
15870 unexploitable under PAX_REFCOUNT
15871
15872 Make a couple more changes that no one else can/will
15873
15874 include/linux/key-type.h | 4 ++--
15875 ipc/msgutil.c | 4 ++--
15876 security/keys/internal.h | 2 +-
15877 security/keys/process_keys.c | 1 +
15878 4 files changed, 6 insertions(+), 5 deletions(-)
15879
15880 commit b56c3a63f431c193400aee17543021950bd14bc4
15881 Merge: 38b1a3d 470069c
15882 Author: Brad Spengler <spender@grsecurity.net>
15883 Date: Sun Jan 17 18:30:19 2016 -0500
15884
15885 Merge branch 'pax-test' into grsec-test
15886
15887 commit 470069cfedef2180313233d275be5901bd6d1135
15888 Author: Brad Spengler <spender@grsecurity.net>
15889 Date: Sun Jan 17 18:29:59 2016 -0500
15890
15891 Update to pax-linux-4.3.3-test22.patch:
15892 - Emesed fixed a gcc induced intentional integer overflow in asix_rx_fixup_internal, reported by thomas callison caffrey
15893 - fixed some more fallout from the drm_drivers constification, reported by Colin Childs and Toralf Foerster
15894
15895 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++++----------
15896 drivers/gpu/drm/drm_pci.c | 3 +++
15897 drivers/gpu/drm/gma500/psb_drv.c | 4 ----
15898 drivers/gpu/drm/i915/i915_drv.c | 16 ++++++++--------
15899 drivers/gpu/drm/nouveau/nouveau_drm.c | 6 +++---
15900 drivers/gpu/drm/radeon/radeon_drv.c | 4 +---
15901 drivers/net/usb/asix_common.c | 3 ++-
15902 include/drm/drmP.h | 1 +
15903 8 files changed, 22 insertions(+), 29 deletions(-)
15904
15905 commit 38b1a3d676f407865c3d41840df8213c5ad639c1
15906 Author: Brad Spengler <spender@grsecurity.net>
15907 Date: Sun Jan 17 12:33:53 2016 -0500
15908
15909 As reported by Luis Ressel, the Kconfig help for GRKERNSEC_BRUTE
15910 mentioned banning execution of suid/sgid binaries, though the kernel
15911 source clearly only mentions banning execution of suid binaries. Since
15912 there's no reason for us to not ban execution of sgid binaries as well,
15913 make the implementation match the Kconfig description.
15914
15915 fs/exec.c | 4 ++--
15916 grsecurity/grsec_sig.c | 27 ++++++++++++++-------------
15917 include/linux/sched.h | 4 ++--
15918 3 files changed, 18 insertions(+), 17 deletions(-)
15919
15920 commit 8c3bcb7dbf7f606acfa0983e81f0f928da1f1ace
15921 Merge: d141a86 ea4a835
15922 Author: Brad Spengler <spender@grsecurity.net>
15923 Date: Sat Jan 16 14:12:22 2016 -0500
15924
15925 Merge branch 'pax-test' into grsec-test
15926
15927 Conflicts:
15928 drivers/gpu/drm/i810/i810_drv.c
15929
15930 commit ea4a835328ada6513ac013986764d6caea8cd348
15931 Author: Brad Spengler <spender@grsecurity.net>
15932 Date: Sat Jan 16 14:11:30 2016 -0500
15933
15934 Update to pax-linux-4.3.3-test21.patch:
15935 - fixed some fallout from the drm_drivers constification, reported by spender
15936
15937 drivers/gpu/drm/armada/armada_drv.c | 3 +--
15938 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
15939 drivers/gpu/drm/i810/i810_dma.c | 2 +-
15940 drivers/gpu/drm/i810/i810_drv.c | 6 +++++-
15941 drivers/gpu/drm/i810/i810_drv.h | 2 +-
15942 5 files changed, 8 insertions(+), 6 deletions(-)
15943
15944 commit d141a86fd66194bc3f896b6809b189e2f12a9a83
15945 Author: Brad Spengler <spender@grsecurity.net>
15946 Date: Sat Jan 16 13:16:36 2016 -0500
15947
15948 compile fix
15949
15950 drivers/gpu/drm/i810/i810_dma.c | 2 +-
15951 drivers/gpu/drm/i810/i810_drv.c | 4 +++-
15952 drivers/gpu/drm/i810/i810_drv.h | 2 +-
15953 3 files changed, 5 insertions(+), 3 deletions(-)
15954
15955 commit 0d9dc4b25ea32c14561bcfe6b5b24f1b00fe0270
15956 Merge: 5fa135d bbda879
15957 Author: Brad Spengler <spender@grsecurity.net>
15958 Date: Sat Jan 16 12:59:22 2016 -0500
15959
15960 Merge branch 'pax-test' into grsec-test
15961
15962 commit bbda87914edf63e27fb46670bf3a373f2b963c73
15963 Author: Brad Spengler <spender@grsecurity.net>
15964 Date: Sat Jan 16 12:58:04 2016 -0500
15965
15966 Update to pax-linux-4.3.3-test20.patch:
15967 - constified drm_driver
15968 - Emese fixed a special case in handling __func__ in the initify plugin
15969 - Emese fixed a false positive size overflow report in handling inbufBits, reported by Martin Filo (https://bugs.gentoo.org/show_bug.cgi?id=567048)
15970 - fixed regression that caused perf to not resolve kernel code addresses under KERNEXEC/i386, reported by minipli
15971
15972 arch/x86/kernel/cpu/perf_event.h | 2 +-
15973 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
15974 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
15975 arch/x86/kernel/uprobes.c | 2 +-
15976 arch/x86/mm/mpx.c | 2 +-
15977 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
15978 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 ++-
15979 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
15980 drivers/gpu/drm/drm_pci.c | 6 +-
15981 drivers/gpu/drm/gma500/psb_drv.c | 5 +-
15982 drivers/gpu/drm/i915/i915_dma.c | 2 +-
15983 drivers/gpu/drm/i915/i915_drv.c | 15 ++--
15984 drivers/gpu/drm/i915/i915_drv.h | 2 +-
15985 drivers/gpu/drm/i915/i915_irq.c | 88 ++++++++++----------
15986 drivers/gpu/drm/mga/mga_drv.c | 5 +-
15987 drivers/gpu/drm/mga/mga_drv.h | 2 +-
15988 drivers/gpu/drm/mga/mga_state.c | 2 +-
15989 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 ++--
15990 drivers/gpu/drm/qxl/qxl_drv.c | 8 ++-
15991 drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +-
15992 drivers/gpu/drm/r128/r128_drv.c | 4 +-
15993 drivers/gpu/drm/r128/r128_drv.h | 2 +-
15994 drivers/gpu/drm/r128/r128_state.c | 2 +-
15995 drivers/gpu/drm/radeon/radeon_drv.c | 17 +++-
15996 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
15997 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
15998 drivers/gpu/drm/radeon/radeon_state.c | 2 +-
15999 drivers/gpu/drm/savage/savage_bci.c | 2 +-
16000 drivers/gpu/drm/savage/savage_drv.c | 5 +-
16001 drivers/gpu/drm/savage/savage_drv.h | 2 +-
16002 drivers/gpu/drm/sis/sis_drv.c | 5 +-
16003 drivers/gpu/drm/sis/sis_drv.h | 2 +-
16004 drivers/gpu/drm/sis/sis_mm.c | 2 +-
16005 drivers/gpu/drm/via/via_dma.c | 2 +-
16006 drivers/gpu/drm/via/via_drv.c | 5 +-
16007 drivers/gpu/drm/via/via_drv.h | 2 +-
16008 include/drm/drmP.h | 2 +-
16009 mm/slab.c | 2 +-
16010 net/sunrpc/xprtrdma/svc_rdma.c | 6 +-
16011 tools/gcc/initify_plugin.c | 15 +++-
16012 .../disable_size_overflow_hash.data | 1 +
16013 .../size_overflow_plugin/size_overflow_hash.data | 3 +-
16014 42 files changed, 156 insertions(+), 110 deletions(-)
16015
16016 commit 5fa135dc116350e0205c39ef65eaf6496ed2748a
16017 Author: Brad Spengler <spender@grsecurity.net>
16018 Date: Sat Jan 16 12:19:23 2016 -0500
16019
16020 compile fix
16021
16022 grsecurity/grsec_sig.c | 3 +--
16023 1 files changed, 1 insertions(+), 2 deletions(-)
16024
16025 commit a9090fa58f33f75c7450fda5721a9b13625a47d9
16026 Author: Brad Spengler <spender@grsecurity.net>
16027 Date: Sat Jan 16 12:10:37 2016 -0500
16028
16029 As pointed out by Jann Horn, some distros are starting to circumvent
16030 previous assumptions about the attainability of a user to control
16031 multiple UIDs by handing out suid binaries that allow a user to run
16032 processes (including exploits) under a number of other pre-defined
16033 UIDs. As this could potentially be used to bypass GRKERNSEC_BRUTE
16034 (though it would have to involve some code path that doesn't involve
16035 locks) fix that here by ensuring no more than 8 users on a system can
16036 be banned before a reboot is required. If more are banned, a panic
16037 is triggered.
16038
16039 grsecurity/grsec_sig.c | 8 ++++++++
16040 1 files changed, 8 insertions(+), 0 deletions(-)
16041
16042 commit a8d37776e9521c567ebff6730d49312f72435f08
16043 Author: Eric Dumazet <edumazet@google.com>
16044 Date: Thu Dec 3 11:12:07 2015 -0800
16045
16046 proc: add a reschedule point in proc_readfd_common()
16047
16048 User can pass an arbitrary large buffer to getdents().
16049
16050 It is typically a 32KB buffer used by libc scandir() implementation.
16051
16052 When scanning /proc/{pid}/fd, we can hold cpu way too long,
16053 so add a cond_resched() to be kind with other tasks.
16054
16055 We've seen latencies of more than 50ms on real workloads.
16056
16057 Signed-off-by: Eric Dumazet <edumazet@google.com>
16058 Cc: Alexander Viro <viro@zeniv.linux.org.uk>
16059 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
16060
16061 fs/proc/fd.c | 1 +
16062 1 files changed, 1 insertions(+), 0 deletions(-)
16063
16064 commit 0adba75f8708f13b1f5d98ebe3fc2fb961e100c8
16065 Author: Rabin Vincent <rabin@rab.in>
16066 Date: Tue Jan 12 20:17:08 2016 +0100
16067
16068 net: bpf: reject invalid shifts
16069
16070 On ARM64, a BUG() is triggered in the eBPF JIT if a filter with a
16071 constant shift that can't be encoded in the immediate field of the
16072 UBFM/SBFM instructions is passed to the JIT. Since these shifts
16073 amounts, which are negative or >= regsize, are invalid, reject them in
16074 the eBPF verifier and the classic BPF filter checker, for all
16075 architectures.
16076
16077 Signed-off-by: Rabin Vincent <rabin@rab.in>
16078 Acked-by: Alexei Starovoitov <ast@kernel.org>
16079 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
16080 Signed-off-by: David S. Miller <davem@davemloft.net>
16081
16082 kernel/bpf/verifier.c | 10 ++++++++++
16083 net/core/filter.c | 5 +++++
16084 2 files changed, 15 insertions(+), 0 deletions(-)
16085
16086 commit c248e115a73496625a1c64660d0eeefd67e55cbf
16087 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
16088 Date: Fri Jan 8 11:00:54 2016 -0200
16089
16090 sctp: fix use-after-free in pr_debug statement
16091
16092 Dmitry Vyukov reported a use-after-free in the code expanded by the
16093 macro debug_post_sfx, which is caused by the use of the asoc pointer
16094 after it was freed within sctp_side_effect() scope.
16095
16096 This patch fixes it by allowing sctp_side_effect to clear that asoc
16097 pointer when the TCB is freed.
16098
16099 As Vlad explained, we also have to cover the SCTP_DISPOSITION_ABORT case
16100 because it will trigger DELETE_TCB too on that same loop.
16101
16102 Also, there were places issuing SCTP_CMD_INIT_FAILED and ASSOC_FAILED
16103 but returning SCTP_DISPOSITION_CONSUME, which would fool the scheme
16104 above. Fix it by returning SCTP_DISPOSITION_ABORT instead.
16105
16106 The macro is already prepared to handle such NULL pointer.
16107
16108 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16109 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
16110 Acked-by: Vlad Yasevich <vyasevich@gmail.com>
16111 Signed-off-by: David S. Miller <davem@davemloft.net>
16112
16113 net/sctp/sm_sideeffect.c | 11 ++++++-----
16114 net/sctp/sm_statefuns.c | 17 ++++-------------
16115 2 files changed, 10 insertions(+), 18 deletions(-)
16116
16117 commit 395ea8a9e73e184fc14153a033000bccf4213213
16118 Author: willy tarreau <w@1wt.eu>
16119 Date: Sun Jan 10 07:54:56 2016 +0100
16120
16121 unix: properly account for FDs passed over unix sockets
16122
16123 It is possible for a process to allocate and accumulate far more FDs than
16124 the process' limit by sending them over a unix socket then closing them
16125 to keep the process' fd count low.
16126
16127 This change addresses this problem by keeping track of the number of FDs
16128 in flight per user and preventing non-privileged processes from having
16129 more FDs in flight than their configured FD limit.
16130
16131 Reported-by: socketpair@gmail.com
16132 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
16133 Mitigates: CVE-2013-4312 (Linux 2.0+)
16134 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
16135 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16136 Signed-off-by: Willy Tarreau <w@1wt.eu>
16137 Signed-off-by: David S. Miller <davem@davemloft.net>
16138
16139 include/linux/sched.h | 1 +
16140 net/unix/af_unix.c | 24 ++++++++++++++++++++----
16141 net/unix/garbage.c | 13 ++++++++-----
16142 3 files changed, 29 insertions(+), 9 deletions(-)
16143
16144 commit cb207ab8fbd71dcfc4a49d533aba8085012543fd
16145 Author: Sasha Levin <sasha.levin@oracle.com>
16146 Date: Thu Jan 7 14:52:43 2016 -0500
16147
16148 net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
16149
16150 proc_dostring() needs an initialized destination string, while the one
16151 provided in proc_sctp_do_hmac_alg() contains stack garbage.
16152
16153 Thus, writing to cookie_hmac_alg would strlen() that garbage and end up
16154 accessing invalid memory.
16155
16156 Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic")
16157 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
16158 Signed-off-by: David S. Miller <davem@davemloft.net>
16159
16160 net/sctp/sysctl.c | 2 +-
16161 1 files changed, 1 insertions(+), 1 deletions(-)
16162
16163 commit 4014e09faf0fe9054119624ccfff1236e886b554
16164 Author: Quentin Casasnovas <quentin.casasnovas@oracle.com>
16165 Date: Tue Nov 24 17:13:21 2015 -0500
16166
16167 RDS: fix race condition when sending a message on unbound socket
16168
16169 commit 8c7188b23474cca017b3ef354c4a58456f68303a upstream.
16170
16171 Sasha's found a NULL pointer dereference in the RDS connection code when
16172 sending a message to an apparently unbound socket. The problem is caused
16173 by the code checking if the socket is bound in rds_sendmsg(), which checks
16174 the rs_bound_addr field without taking a lock on the socket. This opens a
16175 race where rs_bound_addr is temporarily set but where the transport is not
16176 in rds_bind(), leading to a NULL pointer dereference when trying to
16177 dereference 'trans' in __rds_conn_create().
16178
16179 Vegard wrote a reproducer for this issue, so kindly ask him to share if
16180 you're interested.
16181
16182 I cannot reproduce the NULL pointer dereference using Vegard's reproducer
16183 with this patch, whereas I could without.
16184
16185 Complete earlier incomplete fix to CVE-2015-6937:
16186
16187 74e98eb08588 ("RDS: verify the underlying transport exists before creating a connection")
16188
16189 Cc: David S. Miller <davem@davemloft.net>
16190
16191 Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
16192 Reviewed-by: Sasha Levin <sasha.levin@oracle.com>
16193 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
16194 Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com>
16195 Signed-off-by: David S. Miller <davem@davemloft.net>
16196 Signed-off-by: Jiri Slaby <jslaby@suse.cz>
16197
16198 Conflicts:
16199
16200 net/rds/send.c
16201
16202 net/rds/connection.c | 6 ------
16203 1 files changed, 0 insertions(+), 6 deletions(-)
16204
16205 commit 206df8d01104344d7588d801016a281a4cd25556
16206 Author: Sasha Levin <sasha.levin@oracle.com>
16207 Date: Tue Sep 8 10:53:40 2015 -0400
16208
16209 RDS: verify the underlying transport exists before creating a connection
16210
16211 There was no verification that an underlying transport exists when creating
16212 a connection, this would cause dereferencing a NULL ptr.
16213
16214 It might happen on sockets that weren't properly bound before attempting to
16215 send a message, which will cause a NULL ptr deref:
16216
16217 [135546.047719] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
16218 [135546.051270] Modules linked in:
16219 [135546.051781] CPU: 4 PID: 15650 Comm: trinity-c4 Not tainted 4.2.0-next-20150902-sasha-00041-gbaa1222-dirty #2527
16220 [135546.053217] task: ffff8800835bc000 ti: ffff8800bc708000 task.ti: ffff8800bc708000
16221 [135546.054291] RIP: __rds_conn_create (net/rds/connection.c:194)
16222 [135546.055666] RSP: 0018:ffff8800bc70fab0 EFLAGS: 00010202
16223 [135546.056457] RAX: dffffc0000000000 RBX: 0000000000000f2c RCX: ffff8800835bc000
16224 [135546.057494] RDX: 0000000000000007 RSI: ffff8800835bccd8 RDI: 0000000000000038
16225 [135546.058530] RBP: ffff8800bc70fb18 R08: 0000000000000001 R09: 0000000000000000
16226 [135546.059556] R10: ffffed014d7a3a23 R11: ffffed014d7a3a21 R12: 0000000000000000
16227 [135546.060614] R13: 0000000000000001 R14: ffff8801ec3d0000 R15: 0000000000000000
16228 [135546.061668] FS: 00007faad4ffb700(0000) GS:ffff880252000000(0000) knlGS:0000000000000000
16229 [135546.062836] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
16230 [135546.063682] CR2: 000000000000846a CR3: 000000009d137000 CR4: 00000000000006a0
16231 [135546.064723] Stack:
16232 [135546.065048] ffffffffafe2055c ffffffffafe23fc1 ffffed00493097bf ffff8801ec3d0008
16233 [135546.066247] 0000000000000000 00000000000000d0 0000000000000000 ac194a24c0586342
16234 [135546.067438] 1ffff100178e1f78 ffff880320581b00 ffff8800bc70fdd0 ffff880320581b00
16235 [135546.068629] Call Trace:
16236 [135546.069028] ? __rds_conn_create (include/linux/rcupdate.h:856 net/rds/connection.c:134)
16237 [135546.069989] ? rds_message_copy_from_user (net/rds/message.c:298)
16238 [135546.071021] rds_conn_create_outgoing (net/rds/connection.c:278)
16239 [135546.071981] rds_sendmsg (net/rds/send.c:1058)
16240 [135546.072858] ? perf_trace_lock (include/trace/events/lock.h:38)
16241 [135546.073744] ? lockdep_init (kernel/locking/lockdep.c:3298)
16242 [135546.074577] ? rds_send_drop_to (net/rds/send.c:976)
16243 [135546.075508] ? __might_fault (./arch/x86/include/asm/current.h:14 mm/memory.c:3795)
16244 [135546.076349] ? __might_fault (mm/memory.c:3795)
16245 [135546.077179] ? rds_send_drop_to (net/rds/send.c:976)
16246 [135546.078114] sock_sendmsg (net/socket.c:611 net/socket.c:620)
16247 [135546.078856] SYSC_sendto (net/socket.c:1657)
16248 [135546.079596] ? SYSC_connect (net/socket.c:1628)
16249 [135546.080510] ? trace_dump_stack (kernel/trace/trace.c:1926)
16250 [135546.081397] ? ring_buffer_unlock_commit (kernel/trace/ring_buffer.c:2479 kernel/trace/ring_buffer.c:2558 kernel/trace/ring_buffer.c:2674)
16251 [135546.082390] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
16252 [135546.083410] ? trace_event_raw_event_sys_enter (include/trace/events/syscalls.h:16)
16253 [135546.084481] ? do_audit_syscall_entry (include/trace/events/syscalls.h:16)
16254 [135546.085438] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
16255 [135546.085515] rds_ib_laddr_check(): addr 36.74.25.172 ret -99 node type -1
16256
16257 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
16258 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
16259 Signed-off-by: David S. Miller <davem@davemloft.net>
16260
16261 net/rds/connection.c | 6 ++++++
16262 1 files changed, 6 insertions(+), 0 deletions(-)
16263
16264 commit 173fa03f05cf0ad485d49a42cbdee8844d3a689a
16265 Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
16266 Date: Tue Jan 5 20:32:47 2016 -0500
16267
16268 ftrace/module: Call clean up function when module init fails early
16269
16270 If the module init code fails after calling ftrace_module_init() and before
16271 calling do_init_module(), we can suffer from a memory leak. This is because
16272 ftrace_module_init() allocates pages to store the locations that ftrace
16273 hooks are placed in the module text. If do_init_module() fails, it still
16274 calls the MODULE_GOING notifiers which will tell ftrace to do a clean up of
16275 the pages it allocated for the module. But if load_module() fails before
16276 then, the pages allocated by ftrace_module_init() will never be freed.
16277
16278 Call ftrace_release_mod() on the module if load_module() fails before
16279 getting to do_init_module().
16280
16281 Link: http://lkml.kernel.org/r/567CEA31.1070507@intel.com
16282
16283 Reported-by: "Qiu, PeiyangX" <peiyangx.qiu@intel.com>
16284 Fixes: a949ae560a511 "ftrace/module: Hardcode ftrace_module_init() call into load_module()"
16285 Cc: stable@vger.kernel.org # v2.6.38+
16286 Acked-by: Rusty Russell <rusty@rustcorp.com.au>
16287 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
16288
16289 include/linux/ftrace.h | 1 +
16290 kernel/module.c | 6 ++++++
16291 2 files changed, 7 insertions(+), 0 deletions(-)
16292
16293 commit 1e5a4a81a4c16c8ac2e264b88a02cc2f42ed0399
16294 Author: Francesco Ruggeri <fruggeri@aristanetworks.com>
16295 Date: Wed Jan 6 00:18:48 2016 -0800
16296
16297 net: possible use after free in dst_release
16298
16299 dst_release should not access dst->flags after decrementing
16300 __refcnt to 0. The dst_entry may be in dst_busy_list and
16301 dst_gc_task may dst_destroy it before dst_release gets a chance
16302 to access dst->flags.
16303
16304 Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()")
16305 Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
16306 Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
16307 Acked-by: Eric Dumazet <edumazet@google.com>
16308 Signed-off-by: David S. Miller <davem@davemloft.net>
16309
16310 net/core/dst.c | 3 ++-
16311 1 files changed, 2 insertions(+), 1 deletions(-)
16312
16313 commit bfb0455793dd4e0f0b49d34a68b3249ab55565cc
16314 Author: Alan <gnomes@lxorguk.ukuu.org.uk>
16315 Date: Wed Jan 6 14:55:02 2016 +0000
16316
16317 mkiss: fix scribble on freed memory
16318
16319 commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
16320 scribble on free memory but added a new one which allows the user to
16321 scribble even more and user controlled data into freed space.
16322
16323 As with 6pack we need to halt the queue before we free the buffers, because
16324 the transmit logic is not protected by the semaphore.
16325
16326 Signed-off-by: Alan Cox <alan@linux.intel.com>
16327 Signed-off-by: David S. Miller <davem@davemloft.net>
16328
16329 drivers/net/hamradio/mkiss.c | 5 +++++
16330 1 files changed, 5 insertions(+), 0 deletions(-)
16331
16332 commit 5cbbcbd32dc1949470f61d342503808fa9555276
16333 Author: David Miller <davem@davemloft.net>
16334 Date: Thu Dec 17 16:05:49 2015 -0500
16335
16336 mkiss: Fix use after free in mkiss_close().
16337
16338 Need to do the unregister_device() after all references to the driver
16339 private have been done.
16340
16341 Signed-off-by: David S. Miller <davem@davemloft.net>
16342
16343 drivers/net/hamradio/mkiss.c | 4 ++--
16344 1 files changed, 2 insertions(+), 2 deletions(-)
16345
16346 commit b00171576794a98068e069a660f0991a6a5190ff
16347 Author: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>
16348 Date: Tue Jan 5 11:51:25 2016 +0000
16349
16350 6pack: fix free memory scribbles
16351
16352 commit acf673a3187edf72068ee2f92f4dc47d66baed47 fixed a user triggerable free
16353 memory scribble but in doing so replaced it with a different one that allows
16354 the user to control the data and scribble even more.
16355
16356 sixpack_close is called by the tty layer in tty context. The tty context is
16357 protected by sp_get() and sp_put(). However network layer activity via
16358 sp_xmit() is not protected this way. We must therefore stop the queue
16359 otherwise the user gets to dump a buffer mostly of their choice into freed
16360 kernel pages.
16361
16362 Signed-off-by: Alan Cox <alan@linux.intel.com>
16363 Signed-off-by: David S. Miller <davem@davemloft.net>
16364
16365 drivers/net/hamradio/6pack.c | 6 ++++++
16366 1 files changed, 6 insertions(+), 0 deletions(-)
16367
16368 commit 5b64a833907cd230a3106aeba2304b2c1bcd116d
16369 Author: David Miller <davem@davemloft.net>
16370 Date: Thu Dec 17 16:05:32 2015 -0500
16371
16372 6pack: Fix use after free in sixpack_close().
16373
16374 Need to do the unregister_device() after all references to the driver
16375 private have been done.
16376
16377 Also we need to use del_timer_sync() for the timers so that we don't
16378 have any asynchronous references after the unregister.
16379
16380 Signed-off-by: David S. Miller <davem@davemloft.net>
16381
16382 drivers/net/hamradio/6pack.c | 8 ++++----
16383 1 files changed, 4 insertions(+), 4 deletions(-)
16384
16385 commit 4f9d532742656b3613d579220fd10c78f24ba37b
16386 Author: Rabin Vincent <rabin@rab.in>
16387 Date: Tue Jan 5 16:23:07 2016 +0100
16388
16389 net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
16390
16391 The SKF_AD_ALU_XOR_X ancillary is not like the other ancillary data
16392 instructions since it XORs A with X while all the others replace A with
16393 some loaded value. All the BPF JITs fail to clear A if this is used as
16394 the first instruction in a filter. This was found using american fuzzy
16395 lop.
16396
16397 Add a helper to determine if A needs to be cleared given the first
16398 instruction in a filter, and use this in the JITs. Except for ARM, the
16399 rest have only been compile-tested.
16400
16401 Fixes: 3480593131e0 ("net: filter: get rid of BPF_S_* enum")
16402 Signed-off-by: Rabin Vincent <rabin@rab.in>
16403 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
16404 Acked-by: Alexei Starovoitov <ast@kernel.org>
16405 Signed-off-by: David S. Miller <davem@davemloft.net>
16406
16407 arch/arm/net/bpf_jit_32.c | 16 +---------------
16408 arch/mips/net/bpf_jit.c | 16 +---------------
16409 arch/powerpc/net/bpf_jit_comp.c | 13 ++-----------
16410 arch/sparc/net/bpf_jit_comp.c | 17 ++---------------
16411 include/linux/filter.h | 19 +++++++++++++++++++
16412 5 files changed, 25 insertions(+), 56 deletions(-)
16413
16414 commit 570d88f8acfffda92b89ae2e1c47320d47256034
16415 Author: John Fastabend <john.fastabend@gmail.com>
16416 Date: Tue Jan 5 09:11:36 2016 -0800
16417
16418 net: sched: fix missing free per cpu on qstats
16419
16420 When a qdisc is using per cpu stats (currently just the ingress
16421 qdisc) only the bstats are being freed. This also free's the qstats.
16422
16423 Fixes: b0ab6f92752b9f9d8 ("net: sched: enable per cpu qstats")
16424 Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
16425 Acked-by: Eric Dumazet <edumazet@google.com>
16426 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
16427 Signed-off-by: David S. Miller <davem@davemloft.net>
16428
16429 net/sched/sch_generic.c | 4 +++-
16430 1 files changed, 3 insertions(+), 1 deletions(-)
16431
16432 commit 32c0ebc51857ee83470a10dcb234d308a0ed1881
16433 Author: Rabin Vincent <rabin@rab.in>
16434 Date: Tue Jan 5 18:34:04 2016 +0100
16435
16436 ARM: net: bpf: fix zero right shift
16437
16438 The LSR instruction cannot be used to perform a zero right shift since a
16439 0 as the immediate value (imm5) in the LSR instruction encoding means
16440 that a shift of 32 is perfomed. See DecodeIMMShift() in the ARM ARM.
16441
16442 Make the JIT skip generation of the LSR if a zero-shift is requested.
16443
16444 This was found using american fuzzy lop.
16445
16446 Signed-off-by: Rabin Vincent <rabin@rab.in>
16447 Acked-by: Alexei Starovoitov <ast@kernel.org>
16448 Signed-off-by: David S. Miller <davem@davemloft.net>
16449
16450 arch/arm/net/bpf_jit_32.c | 3 ++-
16451 1 files changed, 2 insertions(+), 1 deletions(-)
16452
16453 commit 51f5d291750285efa4d4bbe84e5ec23dc00c8d2d
16454 Author: Brad Spengler <spender@grsecurity.net>
16455 Date: Wed Jan 6 20:35:57 2016 -0500
16456
16457 Don't perform hidden lookups in RBAC against the directory of
16458 a file being opened with O_CREAT, reported by Karl Witt
16459
16460 Conflicts:
16461
16462 fs/namei.c
16463
16464 fs/namei.c | 3 ---
16465 1 files changed, 0 insertions(+), 3 deletions(-)
16466
16467 commit 5a8266a6b2769ccdb447256f95bc2577a73cccd1
16468 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
16469 Date: Tue Jan 5 10:46:00 2016 +0100
16470
16471 bridge: Only call /sbin/bridge-stp for the initial network namespace
16472
16473 [I stole this patch from Eric Biederman. He wrote:]
16474
16475 > There is no defined mechanism to pass network namespace information
16476 > into /sbin/bridge-stp therefore don't even try to invoke it except
16477 > for bridge devices in the initial network namespace.
16478 >
16479 > It is possible for unprivileged users to cause /sbin/bridge-stp to be
16480 > invoked for any network device name which if /sbin/bridge-stp does not
16481 > guard against unreasonable arguments or being invoked twice on the
16482 > same network device could cause problems.
16483
16484 [Hannes: changed patch using netns_eq]
16485
16486 Cc: Eric W. Biederman <ebiederm@xmission.com>
16487 Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
16488 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16489 Signed-off-by: David S. Miller <davem@davemloft.net>
16490
16491 net/bridge/br_stp_if.c | 5 ++++-
16492 1 files changed, 4 insertions(+), 1 deletions(-)
16493
16494 commit 650d535cc39f0aeff2f57e60b6617be25d3ef48b
16495 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
16496 Date: Wed Dec 23 16:28:40 2015 -0200
16497
16498 sctp: use GFP_USER for user-controlled kmalloc
16499
16500 Commit cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
16501 missed two other spots.
16502
16503 For connectx, as it's more likely to be used by kernel users of the API,
16504 it detects if GFP_USER should be used or not.
16505
16506 Fixes: cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
16507 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16508 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
16509 Signed-off-by: David S. Miller <davem@davemloft.net>
16510
16511 net/sctp/socket.c | 9 ++++++---
16512 1 files changed, 6 insertions(+), 3 deletions(-)
16513
16514 commit 5718a1f63c41fc156f729783423b002763779d04
16515 Author: Florian Westphal <fw@strlen.de>
16516 Date: Thu Dec 31 14:26:33 2015 +0100
16517
16518 connector: bump skb->users before callback invocation
16519
16520 Dmitry reports memleak with syskaller program.
16521 Problem is that connector bumps skb usecount but might not invoke callback.
16522
16523 So move skb_get to where we invoke the callback.
16524
16525 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16526 Signed-off-by: Florian Westphal <fw@strlen.de>
16527 Signed-off-by: David S. Miller <davem@davemloft.net>
16528
16529 drivers/connector/connector.c | 11 +++--------
16530 1 files changed, 3 insertions(+), 8 deletions(-)
16531
16532 commit 2e6372e6a97f8d642416899861f91777f44f13b7
16533 Author: Rainer Weikusat <rweikusat@mobileactivedefense.com>
16534 Date: Sun Jan 3 18:56:38 2016 +0000
16535
16536 af_unix: Fix splice-bind deadlock
16537
16538 On 2015/11/06, Dmitry Vyukov reported a deadlock involving the splice
16539 system call and AF_UNIX sockets,
16540
16541 http://lists.openwall.net/netdev/2015/11/06/24
16542
16543 The situation was analyzed as
16544
16545 (a while ago) A: socketpair()
16546 B: splice() from a pipe to /mnt/regular_file
16547 does sb_start_write() on /mnt
16548 C: try to freeze /mnt
16549 wait for B to finish with /mnt
16550 A: bind() try to bind our socket to /mnt/new_socket_name
16551 lock our socket, see it not bound yet
16552 decide that it needs to create something in /mnt
16553 try to do sb_start_write() on /mnt, block (it's
16554 waiting for C).
16555 D: splice() from the same pipe to our socket
16556 lock the pipe, see that socket is connected
16557 try to lock the socket, block waiting for A
16558 B: get around to actually feeding a chunk from
16559 pipe to file, try to lock the pipe. Deadlock.
16560
16561 on 2015/11/10 by Al Viro,
16562
16563 http://lists.openwall.net/netdev/2015/11/10/4
16564
16565 The patch fixes this by removing the kern_path_create related code from
16566 unix_mknod and executing it as part of unix_bind prior acquiring the
16567 readlock of the socket in question. This means that A (as used above)
16568 will sb_start_write on /mnt before it acquires the readlock, hence, it
16569 won't indirectly block B which first did a sb_start_write and then
16570 waited for a thread trying to acquire the readlock. Consequently, A
16571 being blocked by C waiting for B won't cause a deadlock anymore
16572 (effectively, both A and B acquire two locks in opposite order in the
16573 situation described above).
16574
16575 Dmitry Vyukov(<dvyukov@google.com>) tested the original patch.
16576
16577 Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
16578 Signed-off-by: David S. Miller <davem@davemloft.net>
16579
16580 Conflicts:
16581
16582 net/unix/af_unix.c
16583
16584 net/unix/af_unix.c | 70 +++++++++++++++++++++++++++++++--------------------
16585 1 files changed, 42 insertions(+), 28 deletions(-)
16586
16587 commit 2e729e557c571f3253e32472cd7d382ac16cf1c3
16588 Author: Qiu Peiyang <peiyangx.qiu@intel.com>
16589 Date: Thu Dec 31 13:11:28 2015 +0800
16590
16591 tracing: Fix setting of start_index in find_next()
16592
16593 When we do cat /sys/kernel/debug/tracing/printk_formats, we hit kernel
16594 panic at t_show.
16595
16596 general protection fault: 0000 [#1] PREEMPT SMP
16597 CPU: 0 PID: 2957 Comm: sh Tainted: G W O 3.14.55-x86_64-01062-gd4acdc7 #2
16598 RIP: 0010:[<ffffffff811375b2>]
16599 [<ffffffff811375b2>] t_show+0x22/0xe0
16600 RSP: 0000:ffff88002b4ebe80 EFLAGS: 00010246
16601 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004
16602 RDX: 0000000000000004 RSI: ffffffff81fd26a6 RDI: ffff880032f9f7b1
16603 RBP: ffff88002b4ebe98 R08: 0000000000001000 R09: 000000000000ffec
16604 R10: 0000000000000000 R11: 000000000000000f R12: ffff880004d9b6c0
16605 R13: 7365725f6d706400 R14: ffff880004d9b6c0 R15: ffffffff82020570
16606 FS: 0000000000000000(0000) GS:ffff88003aa00000(0063) knlGS:00000000f776bc40
16607 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
16608 CR2: 00000000f6c02ff0 CR3: 000000002c2b3000 CR4: 00000000001007f0
16609 Call Trace:
16610 [<ffffffff811dc076>] seq_read+0x2f6/0x3e0
16611 [<ffffffff811b749b>] vfs_read+0x9b/0x160
16612 [<ffffffff811b7f69>] SyS_read+0x49/0xb0
16613 [<ffffffff81a3a4b9>] ia32_do_call+0x13/0x13
16614 ---[ end trace 5bd9eb630614861e ]---
16615 Kernel panic - not syncing: Fatal exception
16616
16617 When the first time find_next calls find_next_mod_format, it should
16618 iterate the trace_bprintk_fmt_list to find the first print format of
16619 the module. However in current code, start_index is smaller than *pos
16620 at first, and code will not iterate the list. Latter container_of will
16621 get the wrong address with former v, which will cause mod_fmt be a
16622 meaningless object and so is the returned mod_fmt->fmt.
16623
16624 This patch will fix it by correcting the start_index. After fixed,
16625 when the first time calls find_next_mod_format, start_index will be
16626 equal to *pos, and code will iterate the trace_bprintk_fmt_list to
16627 get the right module printk format, so is the returned mod_fmt->fmt.
16628
16629 Link: http://lkml.kernel.org/r/5684B900.9000309@intel.com
16630
16631 Cc: stable@vger.kernel.org # 3.12+
16632 Fixes: 102c9323c35a8 "tracing: Add __tracepoint_string() to export string pointers"
16633 Signed-off-by: Qiu Peiyang <peiyangx.qiu@intel.com>
16634 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
16635
16636 kernel/trace/trace_printk.c | 1 +
16637 1 files changed, 1 insertions(+), 0 deletions(-)
16638
16639 commit 0994af4b1930f32aa493dc08145cd304f8bfc8f4
16640 Author: Al Viro <viro@zeniv.linux.org.uk>
16641 Date: Mon Dec 28 20:47:08 2015 -0500
16642
16643 [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
16644
16645 Cc: stable@vger.kernel.org # 3.15+
16646 Reviewed-by: Jeff Layton <jeff.layton@primarydata.com>
16647 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
16648
16649 arch/arm/kernel/sys_oabi-compat.c | 73 +++++++++++++++++++------------------
16650 1 files changed, 37 insertions(+), 36 deletions(-)
16651
16652 commit 4ed030f65dcf3e6b0128032a49a7d75f947fa351
16653 Merge: de243c2 3adc55a
16654 Author: Brad Spengler <spender@grsecurity.net>
16655 Date: Tue Jan 5 18:10:10 2016 -0500
16656
16657 Merge branch 'pax-test' into grsec-test
16658
16659 commit 3adc55a5acfa429c2a7cc883aef08b960c0079b0
16660 Author: Brad Spengler <spender@grsecurity.net>
16661 Date: Tue Jan 5 18:08:53 2016 -0500
16662
16663 Update to pax-linux-4.3.3-test16.patch:
16664 - small cleanup in entry_64.S on x86
16665 - Emese fixed the initify plugin to recursively check variable initializers, reported by Rasmus Villemoes
16666 - fixed an integer truncation of a partially uninitialized value bug in em_pop_sreg, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4354)
16667 - fixed alternatives patching of call insns under KERNEXEC/i386, reported by fly_a320 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4305) and TTgrsec (https://forums.grsecurity.net/viewtopic.php?f=3&t=4353)
16668 - fixed a size overflow false positive that triggered in tcp_parse_options on arm, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350&p=15917#p15916)
16669 - fixed a boot crash on amd64 with KERNEXEC/OR and CONTEXT_TRACKING, reported by Klaus Kusche (https://bugs.gentoo.org/show_bug.cgi?id=570420)
16670
16671 arch/x86/entry/entry_64.S | 60 +++++-----
16672 arch/x86/kernel/alternative.c | 2 +-
16673 arch/x86/kvm/emulate.c | 4 +-
16674 tools/gcc/initify_plugin.c | 123 +++++++++----------
16675 .../disable_size_overflow_hash.data | 4 +-
16676 .../size_overflow_plugin/size_overflow_hash.data | 2 -
16677 6 files changed, 93 insertions(+), 102 deletions(-)
16678
16679 commit de243c26efd0e423ca92db825af2c3f8eb1ca043
16680 Author: Brad Spengler <spender@grsecurity.net>
16681 Date: Tue Dec 29 18:01:24 2015 -0500
16682
16683 It was noticed during an internal audit that the code under GRKERNSEC_PROC_MEMMAP
16684 which aimed to enforce a 16MB minimum on RLIMIT_DATA for suid/sgid binaries only
16685 did so if RLIMIT_DATA was set lower than PAGE_SIZE.
16686
16687 This addition was only supplemental as GRKERNSEC_BRUTE is the main defense
16688 against suid/sgid attacks and the flaw above would only eliminate the extra
16689 entropy provided for the brk-managed heap, still leaving it with the minimum
16690 of 16-bit entropy for mmap on x86 and 28 on x64.
16691
16692 mm/mmap.c | 2 +-
16693 1 files changed, 1 insertions(+), 1 deletions(-)
16694
16695 commit 8e264cfe47e5f08cdc9ed009a630277206cd2534
16696 Merge: 436201b 2584340
16697 Author: Brad Spengler <spender@grsecurity.net>
16698 Date: Mon Dec 28 20:30:01 2015 -0500
16699
16700 Merge branch 'pax-test' into grsec-test
16701
16702 commit 2584340eab494e64ec1bf9eb5b0d1ae31f926306
16703 Author: Brad Spengler <spender@grsecurity.net>
16704 Date: Mon Dec 28 20:29:28 2015 -0500
16705
16706 Update to pax-linux-4.3.3-test14.patch:
16707 - fixed an integer sign conversion error in i2c_dw_pci_probe caught by the size overflow plugin, reported by Jean Lucas and ganymede (https://forums.grsecurity.net/viewtopic.php?f=3&t=4349)
16708 - fixed shutdown crash with tboot and KERNEXEC, reported by perfinion
16709 - fixed a few false positive and one real size overflow reports in hyperv, reported by hunger
16710 - fixed compile regressions on armv5, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350)
16711 - fixed an assert in the initify plugin that triggered in vic_register on arm
16712
16713 arch/arm/include/asm/atomic.h | 7 +++++--
16714 arch/arm/include/asm/domain.h | 5 ++---
16715 arch/x86/kernel/tboot.c | 14 +++++++++-----
16716 drivers/hv/channel.c | 4 +---
16717 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
16718 drivers/net/hyperv/rndis_filter.c | 3 +--
16719 fs/exec.c | 4 ++--
16720 include/linux/atomic.h | 15 ---------------
16721 net/core/skbuff.c | 3 ++-
16722 tools/gcc/initify_plugin.c | 4 +++-
16723 10 files changed, 26 insertions(+), 35 deletions(-)
16724
16725 commit 436201b6626b488d173c8076447000077c27b84a
16726 Author: David Howells <dhowells@redhat.com>
16727 Date: Fri Dec 18 01:34:26 2015 +0000
16728
16729 KEYS: Fix race between read and revoke
16730
16731 This fixes CVE-2015-7550.
16732
16733 There's a race between keyctl_read() and keyctl_revoke(). If the revoke
16734 happens between keyctl_read() checking the validity of a key and the key's
16735 semaphore being taken, then the key type read method will see a revoked key.
16736
16737 This causes a problem for the user-defined key type because it assumes in
16738 its read method that there will always be a payload in a non-revoked key
16739 and doesn't check for a NULL pointer.
16740
16741 Fix this by making keyctl_read() check the validity of a key after taking
16742 semaphore instead of before.
16743
16744 I think the bug was introduced with the original keyrings code.
16745
16746 This was discovered by a multithreaded test program generated by syzkaller
16747 (http://github.com/google/syzkaller). Here's a cleaned up version:
16748
16749 #include <sys/types.h>
16750 #include <keyutils.h>
16751 #include <pthread.h>
16752 void *thr0(void *arg)
16753 {
16754 key_serial_t key = (unsigned long)arg;
16755 keyctl_revoke(key);
16756 return 0;
16757 }
16758 void *thr1(void *arg)
16759 {
16760 key_serial_t key = (unsigned long)arg;
16761 char buffer[16];
16762 keyctl_read(key, buffer, 16);
16763 return 0;
16764 }
16765 int main()
16766 {
16767 key_serial_t key = add_key("user", "%", "foo", 3, KEY_SPEC_USER_KEYRING);
16768 pthread_t th[5];
16769 pthread_create(&th[0], 0, thr0, (void *)(unsigned long)key);
16770 pthread_create(&th[1], 0, thr1, (void *)(unsigned long)key);
16771 pthread_create(&th[2], 0, thr0, (void *)(unsigned long)key);
16772 pthread_create(&th[3], 0, thr1, (void *)(unsigned long)key);
16773 pthread_join(th[0], 0);
16774 pthread_join(th[1], 0);
16775 pthread_join(th[2], 0);
16776 pthread_join(th[3], 0);
16777 return 0;
16778 }
16779
16780 Build as:
16781
16782 cc -o keyctl-race keyctl-race.c -lkeyutils -lpthread
16783
16784 Run as:
16785
16786 while keyctl-race; do :; done
16787
16788 as it may need several iterations to crash the kernel. The crash can be
16789 summarised as:
16790
16791 BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
16792 IP: [<ffffffff81279b08>] user_read+0x56/0xa3
16793 ...
16794 Call Trace:
16795 [<ffffffff81276aa9>] keyctl_read_key+0xb6/0xd7
16796 [<ffffffff81277815>] SyS_keyctl+0x83/0xe0
16797 [<ffffffff815dbb97>] entry_SYSCALL_64_fastpath+0x12/0x6f
16798
16799 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16800 Signed-off-by: David Howells <dhowells@redhat.com>
16801 Tested-by: Dmitry Vyukov <dvyukov@google.com>
16802 Cc: stable@vger.kernel.org
16803 Signed-off-by: James Morris <james.l.morris@oracle.com>
16804
16805 security/keys/keyctl.c | 18 +++++++++---------
16806 1 files changed, 9 insertions(+), 9 deletions(-)
16807
16808 commit 195cea04477025da4a2078bd3e1fb7c4e11206c2
16809 Author: Brad Spengler <spender@grsecurity.net>
16810 Date: Tue Dec 22 20:44:01 2015 -0500
16811
16812 Add new kernel command-line param: pax_size_overflow_report_only
16813 If a user triggers a size_overflow violation that makes it difficult
16814 to obtain the call trace without serial console/net console, they can
16815 use this option to provide that information to us
16816
16817 Documentation/kernel-parameters.txt | 5 +++++
16818 fs/exec.c | 12 +++++++++---
16819 init/main.c | 11 +++++++++++
16820 3 files changed, 25 insertions(+), 3 deletions(-)
16821
16822 commit 4254a8da5851df8c08cdca5c392916e8c105408d
16823 Author: WANG Cong <xiyou.wangcong@gmail.com>
16824 Date: Mon Dec 21 10:55:45 2015 -0800
16825
16826 addrconf: always initialize sysctl table data
16827
16828 When sysctl performs restrict writes, it allows to write from
16829 a middle position of a sysctl file, which requires us to initialize
16830 the table data before calling proc_dostring() for the write case.
16831
16832 Fixes: 3d1bec99320d ("ipv6: introduce secret_stable to ipv6_devconf")
16833 Reported-by: Sasha Levin <sasha.levin@oracle.com>
16834 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16835 Tested-by: Sasha Levin <sasha.levin@oracle.com>
16836 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
16837 Signed-off-by: David S. Miller <davem@davemloft.net>
16838
16839 net/ipv6/addrconf.c | 11 ++++-------
16840 1 files changed, 4 insertions(+), 7 deletions(-)
16841
16842 commit f8002863fb06c363180637046947a78a6ccb3d33
16843 Author: WANG Cong <xiyou.wangcong@gmail.com>
16844 Date: Wed Dec 16 23:39:04 2015 -0800
16845
16846 net: check both type and procotol for tcp sockets
16847
16848 Dmitry reported the following out-of-bound access:
16849
16850 Call Trace:
16851 [<ffffffff816cec2e>] __asan_report_load4_noabort+0x3e/0x40
16852 mm/kasan/report.c:294
16853 [<ffffffff84affb14>] sock_setsockopt+0x1284/0x13d0 net/core/sock.c:880
16854 [< inline >] SYSC_setsockopt net/socket.c:1746
16855 [<ffffffff84aed7ee>] SyS_setsockopt+0x1fe/0x240 net/socket.c:1729
16856 [<ffffffff85c18c76>] entry_SYSCALL_64_fastpath+0x16/0x7a
16857 arch/x86/entry/entry_64.S:185
16858
16859 This is because we mistake a raw socket as a tcp socket.
16860 We should check both sk->sk_type and sk->sk_protocol to ensure
16861 it is a tcp socket.
16862
16863 Willem points out __skb_complete_tx_timestamp() needs to fix as well.
16864
16865 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16866 Cc: Willem de Bruijn <willemdebruijn.kernel@gmail.com>
16867 Cc: Eric Dumazet <eric.dumazet@gmail.com>
16868 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
16869 Acked-by: Willem de Bruijn <willemb@google.com>
16870 Signed-off-by: David S. Miller <davem@davemloft.net>
16871
16872 net/core/skbuff.c | 3 ++-
16873 net/core/sock.c | 3 ++-
16874 2 files changed, 4 insertions(+), 2 deletions(-)
16875
16876 commit bd6b3399804470a4ad8f34229469ca149dceba3d
16877 Author: Colin Ian King <colin.king@canonical.com>
16878 Date: Fri Dec 18 14:22:01 2015 -0800
16879
16880 proc: fix -ESRCH error when writing to /proc/$pid/coredump_filter
16881
16882 Writing to /proc/$pid/coredump_filter always returns -ESRCH because commit
16883 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") removed
16884 the setting of ret after the get_proc_task call and incorrectly left it as
16885 -ESRCH. Instead, return 0 when successful.
16886
16887 Example breakage:
16888
16889 echo 0 > /proc/self/coredump_filter
16890 bash: echo: write error: No such process
16891
16892 Fixes: 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()")
16893 Signed-off-by: Colin Ian King <colin.king@canonical.com>
16894 Acked-by: Kees Cook <keescook@chromium.org>
16895 Cc: <stable@vger.kernel.org> [4.3+]
16896 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
16897 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
16898
16899 fs/proc/base.c | 1 +
16900 1 files changed, 1 insertions(+), 0 deletions(-)
16901
16902 commit b28aca2b99ed08546778355fb9402c503ff9b29e
16903 Author: Junichi Nomura <j-nomura@ce.jp.nec.com>
16904 Date: Tue Dec 22 10:23:44 2015 -0700
16905
16906 block: ensure to split after potentially bouncing a bio
16907
16908 blk_queue_bio() does split then bounce, which makes the segment
16909 counting based on pages before bouncing and could go wrong. Move
16910 the split to after bouncing, like we do for blk-mq, and the we
16911 fix the issue of having the bio count for segments be wrong.
16912
16913 Fixes: 54efd50bfd87 ("block: make generic_make_request handle arbitrarily sized bios")
16914 Cc: stable@vger.kernel.org
16915 Tested-by: Artem S. Tashkinov <t.artem@lycos.com>
16916 Signed-off-by: Jens Axboe <axboe@fb.com>
16917
16918 block/blk-core.c | 4 ++--
16919 1 files changed, 2 insertions(+), 2 deletions(-)
16920
16921 commit e62a25e917a9e5b35ddd5b4f1b5e5e30fbd2e84c
16922 Merge: f6f63ae ec72fa5
16923 Author: Brad Spengler <spender@grsecurity.net>
16924 Date: Tue Dec 22 19:46:26 2015 -0500
16925
16926 Merge branch 'pax-test' into grsec-test
16927
16928 commit ec72fa5f8d9cb4e223bad1b8b5c2e1071c222f2a
16929 Author: Brad Spengler <spender@grsecurity.net>
16930 Date: Tue Dec 22 19:45:51 2015 -0500
16931
16932 Update to pax-linux-4.3.3-test13.patch:
16933 - Emese fixed a (probably) false positive integer truncation in xfs_da_grow_inode_int, reported by jdkbx (http://forums.grsecurity.net/viewtopic.php?f=3&t=4346)
16934 - fixed a size overflow in btrfs/try_merge_map, reported by Alex W (https://bugs.archlinux.org/task/47173) and mathias and dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4344)
16935
16936 arch/arm/mm/fault.c | 2 +-
16937 arch/x86/mm/fault.c | 2 +-
16938 fs/btrfs/extent_map.c | 8 ++++++--
16939 fs/xfs/libxfs/xfs_da_btree.c | 4 +++-
16940 4 files changed, 11 insertions(+), 5 deletions(-)
16941
16942 commit f6f63ae154cd45028add1dc41957878060d77fbf
16943 Author: Brad Spengler <spender@grsecurity.net>
16944 Date: Thu Dec 17 18:43:44 2015 -0500
16945
16946 ptrace_has_cap() checks whether the current process should be
16947 treated as having a certain capability for ptrace checks
16948 against another process. Until now, this was equivalent to
16949 has_ns_capability(current, target_ns, CAP_SYS_PTRACE).
16950
16951 However, if a root-owned process wants to enter a user
16952 namespace for some reason without knowing who owns it and
16953 therefore can't change to the namespace owner's uid and gid
16954 before entering, as soon as it has entered the namespace,
16955 the namespace owner can attach to it via ptrace and thereby
16956 gain access to its uid and gid.
16957
16958 While it is possible for the entering process to switch to
16959 the uid of a claimed namespace owner before entering,
16960 causing the attempt to enter to fail if the claimed uid is
16961 wrong, this doesn't solve the problem of determining an
16962 appropriate gid.
16963
16964 With this change, the entering process can first enter the
16965 namespace and then safely inspect the namespace's
16966 properties, e.g. through /proc/self/{uid_map,gid_map},
16967 assuming that the namespace owner doesn't have access to
16968 uid 0.
16969 Signed-off-by: Jann Horn <jann@thejh.net>
16970
16971 kernel/ptrace.c | 30 +++++++++++++++++++++++++-----
16972 1 files changed, 25 insertions(+), 5 deletions(-)
16973
16974 commit e314f0fb63020f61543b401ff594e953c2c304e5
16975 Author: tadeusz.struk@intel.com <tadeusz.struk@intel.com>
16976 Date: Tue Dec 15 10:46:17 2015 -0800
16977
16978 net: fix uninitialized variable issue
16979
16980 msg_iocb needs to be initialized on the recv/recvfrom path.
16981 Otherwise afalg will wrongly interpret it as an async call.
16982
16983 Cc: stable@vger.kernel.org
16984 Reported-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
16985 Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com>
16986 Signed-off-by: David S. Miller <davem@davemloft.net>
16987
16988 net/socket.c | 1 +
16989 1 files changed, 1 insertions(+), 0 deletions(-)
16990
16991 commit a3f56a43ad56b8fcaf04f6327636ed2f5970de3b
16992 Merge: dfa764c 142edcf
16993 Author: Brad Spengler <spender@grsecurity.net>
16994 Date: Wed Dec 16 21:01:17 2015 -0500
16995
16996 Merge branch 'pax-test' into grsec-test
16997
16998 commit 142edcf1005a57fb8887823565cf0bafad2f313c
16999 Author: Brad Spengler <spender@grsecurity.net>
17000 Date: Wed Dec 16 21:00:57 2015 -0500
17001
17002 Update to pax-linux-4.3.3-test12.patch:
17003 - Emese fixed a size overflow false positive in reiserfs/leaf_paste_entries, reported by Christian Apeltauer (https://bugs.gentoo.org/show_bug.cgi?id=568046)
17004 - fixed a bunch of int/size_t mismatches in the drivers/tty/n_tty.c code causing size overflow false positives, reported by Toralf Förster, mathias (https://forums.grsecurity.net/viewtopic.php?f=3&t=4342), N8Fear (https://forums.grsecurity.net/viewtopic.php?f=3&t=4341)
17005
17006 drivers/tty/n_tty.c | 16 ++++++++--------
17007 .../disable_size_overflow_hash.data | 2 ++
17008 .../size_overflow_plugin/size_overflow_hash.data | 6 ++----
17009 3 files changed, 12 insertions(+), 12 deletions(-)
17010
17011 commit dfa764cc549892a5bfc1083cac78b99032cae577
17012 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
17013 Date: Tue Dec 15 22:59:12 2015 +0100
17014
17015 ipv6: automatically enable stable privacy mode if stable_secret set
17016
17017 Bjørn reported that while we switch all interfaces to privacy stable mode
17018 when setting the secret, we don't set this mode for new interfaces. This
17019 does not make sense, so change this behaviour.
17020
17021 Fixes: 622c81d57b392cc ("ipv6: generation of stable privacy addresses for link-local and autoconf")
17022 Reported-by: Bjørn Mork <bjorn@mork.no>
17023 Cc: Bjørn Mork <bjorn@mork.no>
17024 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
17025 Signed-off-by: David S. Miller <davem@davemloft.net>
17026
17027 net/ipv6/addrconf.c | 6 ++++++
17028 1 files changed, 6 insertions(+), 0 deletions(-)
17029
17030 commit c2815a1fee03f222273e77c14e43f960da06f35a
17031 Author: Brad Spengler <spender@grsecurity.net>
17032 Date: Wed Dec 16 13:03:38 2015 -0500
17033
17034 Work around upstream limitation on the number of thread info flags causing a compilation error
17035 Reported by fabled at http://forums.grsecurity.net/viewtopic.php?f=3&t=4339
17036
17037 arch/arm/kernel/entry-common.S | 8 ++++++--
17038 1 files changed, 6 insertions(+), 2 deletions(-)
17039
17040 commit 8c9ae168e09ae49324d709d76d73d9fc4ca477e1
17041 Author: Brad Spengler <spender@grsecurity.net>
17042 Date: Tue Dec 15 19:03:41 2015 -0500
17043
17044 Initial import of grsecurity 3.1 for Linux 4.3.3
17045
17046 Documentation/dontdiff | 2 +
17047 Documentation/kernel-parameters.txt | 7 +
17048 Documentation/sysctl/kernel.txt | 15 +
17049 Makefile | 18 +-
17050 arch/alpha/include/asm/cache.h | 4 +-
17051 arch/alpha/kernel/osf_sys.c | 12 +-
17052 arch/arc/Kconfig | 1 +
17053 arch/arm/Kconfig | 1 +
17054 arch/arm/Kconfig.debug | 1 +
17055 arch/arm/include/asm/thread_info.h | 7 +-
17056 arch/arm/kernel/process.c | 4 +-
17057 arch/arm/kernel/ptrace.c | 9 +
17058 arch/arm/kernel/traps.c | 7 +-
17059 arch/arm/mm/Kconfig | 2 +-
17060 arch/arm/mm/fault.c | 40 +-
17061 arch/arm/mm/mmap.c | 8 +-
17062 arch/arm/net/bpf_jit_32.c | 51 +-
17063 arch/arm64/Kconfig.debug | 1 +
17064 arch/avr32/include/asm/cache.h | 4 +-
17065 arch/blackfin/Kconfig.debug | 1 +
17066 arch/blackfin/include/asm/cache.h | 3 +-
17067 arch/cris/include/arch-v10/arch/cache.h | 3 +-
17068 arch/cris/include/arch-v32/arch/cache.h | 3 +-
17069 arch/frv/include/asm/cache.h | 3 +-
17070 arch/frv/mm/elf-fdpic.c | 4 +-
17071 arch/hexagon/include/asm/cache.h | 6 +-
17072 arch/ia64/Kconfig | 1 +
17073 arch/ia64/include/asm/cache.h | 3 +-
17074 arch/ia64/kernel/sys_ia64.c | 2 +
17075 arch/ia64/mm/hugetlbpage.c | 2 +
17076 arch/m32r/include/asm/cache.h | 4 +-
17077 arch/m68k/include/asm/cache.h | 4 +-
17078 arch/metag/mm/hugetlbpage.c | 1 +
17079 arch/microblaze/include/asm/cache.h | 3 +-
17080 arch/mips/Kconfig | 1 +
17081 arch/mips/include/asm/cache.h | 3 +-
17082 arch/mips/include/asm/thread_info.h | 11 +-
17083 arch/mips/kernel/irq.c | 3 +
17084 arch/mips/kernel/ptrace.c | 9 +
17085 arch/mips/mm/mmap.c | 4 +-
17086 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
17087 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
17088 arch/openrisc/include/asm/cache.h | 4 +-
17089 arch/parisc/include/asm/cache.h | 5 +-
17090 arch/parisc/kernel/sys_parisc.c | 4 +
17091 arch/powerpc/Kconfig | 1 +
17092 arch/powerpc/include/asm/cache.h | 4 +-
17093 arch/powerpc/include/asm/thread_info.h | 5 +-
17094 arch/powerpc/kernel/Makefile | 2 +
17095 arch/powerpc/kernel/irq.c | 3 +
17096 arch/powerpc/kernel/process.c | 10 +-
17097 arch/powerpc/kernel/ptrace.c | 14 +
17098 arch/powerpc/kernel/traps.c | 5 +
17099 arch/powerpc/mm/slice.c | 2 +-
17100 arch/s390/Kconfig.debug | 1 +
17101 arch/s390/include/asm/cache.h | 4 +-
17102 arch/score/include/asm/cache.h | 4 +-
17103 arch/sh/include/asm/cache.h | 3 +-
17104 arch/sh/mm/mmap.c | 6 +-
17105 arch/sparc/include/asm/cache.h | 4 +-
17106 arch/sparc/include/asm/pgalloc_64.h | 1 +
17107 arch/sparc/include/asm/thread_info_64.h | 8 +-
17108 arch/sparc/kernel/process_32.c | 6 +-
17109 arch/sparc/kernel/process_64.c | 8 +-
17110 arch/sparc/kernel/ptrace_64.c | 14 +
17111 arch/sparc/kernel/sys_sparc_64.c | 8 +-
17112 arch/sparc/kernel/syscalls.S | 8 +-
17113 arch/sparc/kernel/traps_32.c | 8 +-
17114 arch/sparc/kernel/traps_64.c | 28 +-
17115 arch/sparc/kernel/unaligned_64.c | 2 +-
17116 arch/sparc/mm/fault_64.c | 2 +-
17117 arch/sparc/mm/hugetlbpage.c | 15 +-
17118 arch/tile/Kconfig | 1 +
17119 arch/tile/include/asm/cache.h | 3 +-
17120 arch/tile/mm/hugetlbpage.c | 2 +
17121 arch/um/include/asm/cache.h | 3 +-
17122 arch/unicore32/include/asm/cache.h | 6 +-
17123 arch/x86/Kconfig | 21 +
17124 arch/x86/Kconfig.debug | 2 +
17125 arch/x86/entry/common.c | 14 +
17126 arch/x86/entry/entry_32.S | 2 +-
17127 arch/x86/entry/entry_64.S | 2 +-
17128 arch/x86/ia32/ia32_aout.c | 2 +
17129 arch/x86/include/asm/floppy.h | 20 +-
17130 arch/x86/include/asm/fpu/types.h | 69 +-
17131 arch/x86/include/asm/io.h | 2 +-
17132 arch/x86/include/asm/page.h | 12 +-
17133 arch/x86/include/asm/paravirt_types.h | 23 +-
17134 arch/x86/include/asm/processor.h | 12 +-
17135 arch/x86/include/asm/thread_info.h | 6 +-
17136 arch/x86/include/asm/uaccess.h | 2 +-
17137 arch/x86/kernel/dumpstack.c | 10 +-
17138 arch/x86/kernel/dumpstack_32.c | 2 +-
17139 arch/x86/kernel/dumpstack_64.c | 2 +-
17140 arch/x86/kernel/ioport.c | 13 +
17141 arch/x86/kernel/irq_32.c | 3 +
17142 arch/x86/kernel/irq_64.c | 4 +
17143 arch/x86/kernel/ldt.c | 18 +
17144 arch/x86/kernel/msr.c | 10 +
17145 arch/x86/kernel/ptrace.c | 14 +
17146 arch/x86/kernel/signal.c | 9 +-
17147 arch/x86/kernel/sys_i386_32.c | 9 +-
17148 arch/x86/kernel/sys_x86_64.c | 8 +-
17149 arch/x86/kernel/traps.c | 5 +
17150 arch/x86/kernel/verify_cpu.S | 1 +
17151 arch/x86/kernel/vm86_32.c | 15 +
17152 arch/x86/kvm/svm.c | 14 +-
17153 arch/x86/mm/fault.c | 12 +-
17154 arch/x86/mm/hugetlbpage.c | 15 +-
17155 arch/x86/mm/init.c | 66 +-
17156 arch/x86/mm/init_32.c | 6 +-
17157 arch/x86/net/bpf_jit_comp.c | 4 +
17158 arch/x86/platform/efi/efi_64.c | 2 +-
17159 arch/x86/xen/Kconfig | 1 +
17160 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
17161 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
17162 crypto/ablkcipher.c | 2 +-
17163 crypto/blkcipher.c | 2 +-
17164 crypto/scatterwalk.c | 10 +-
17165 drivers/acpi/acpica/hwxfsleep.c | 11 +-
17166 drivers/acpi/custom_method.c | 4 +
17167 drivers/block/cciss.h | 30 +-
17168 drivers/block/smart1,2.h | 40 +-
17169 drivers/cdrom/cdrom.c | 2 +-
17170 drivers/char/Kconfig | 4 +-
17171 drivers/char/genrtc.c | 1 +
17172 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
17173 drivers/char/mem.c | 17 +
17174 drivers/char/random.c | 5 +-
17175 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
17176 drivers/crypto/nx/nx-aes-ccm.c | 2 +-
17177 drivers/crypto/nx/nx-aes-gcm.c | 2 +-
17178 drivers/crypto/talitos.c | 2 +-
17179 drivers/firewire/ohci.c | 4 +
17180 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
17181 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
17182 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
17183 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
17184 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
17185 drivers/hid/hid-wiimote-debug.c | 2 +-
17186 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
17187 drivers/iommu/Kconfig | 1 +
17188 drivers/iommu/amd_iommu.c | 14 +-
17189 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
17190 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
17191 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
17192 drivers/isdn/hisax/config.c | 2 +-
17193 drivers/isdn/hisax/hfc_pci.c | 2 +-
17194 drivers/isdn/hisax/hfc_sx.c | 2 +-
17195 drivers/isdn/hisax/q931.c | 6 +-
17196 drivers/isdn/i4l/isdn_concap.c | 6 +-
17197 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
17198 drivers/md/bcache/Kconfig | 1 +
17199 drivers/md/raid5.c | 8 +
17200 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
17201 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
17202 drivers/media/platform/vivid/vivid-osd.c | 1 +
17203 drivers/media/radio/radio-cadet.c | 5 +-
17204 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
17205 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
17206 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
17207 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
17208 drivers/message/fusion/mptbase.c | 9 +
17209 drivers/misc/sgi-xp/xp_main.c | 12 +-
17210 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
17211 drivers/net/ppp/pppoe.c | 14 +-
17212 drivers/net/ppp/pptp.c | 6 +
17213 drivers/net/slip/slhc.c | 3 +
17214 drivers/net/wan/lmc/lmc_media.c | 97 +-
17215 drivers/net/wan/x25_asy.c | 6 +-
17216 drivers/net/wan/z85230.c | 24 +-
17217 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
17218 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
17219 drivers/pci/pci-sysfs.c | 2 +-
17220 drivers/pci/proc.c | 9 +
17221 drivers/platform/x86/asus-wmi.c | 12 +
17222 drivers/rtc/rtc-dev.c | 3 +
17223 drivers/scsi/bfa/bfa_fcs.c | 19 +-
17224 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
17225 drivers/scsi/bfa/bfa_modules.h | 12 +-
17226 drivers/scsi/hpsa.h | 40 +-
17227 drivers/staging/dgnc/dgnc_mgmt.c | 1 +
17228 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
17229 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
17230 drivers/target/target_core_sbc.c | 17 +-
17231 drivers/target/target_core_transport.c | 14 +-
17232 drivers/tty/serial/uartlite.c | 4 +-
17233 drivers/tty/sysrq.c | 2 +-
17234 drivers/tty/vt/keyboard.c | 22 +-
17235 drivers/uio/uio.c | 6 +-
17236 drivers/usb/core/hub.c | 5 +
17237 drivers/usb/gadget/function/f_uac1.c | 1 +
17238 drivers/usb/gadget/function/u_uac1.c | 1 +
17239 drivers/usb/host/hwa-hc.c | 9 +-
17240 drivers/usb/usbip/vhci_sysfs.c | 2 +-
17241 drivers/video/fbdev/arcfb.c | 2 +-
17242 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
17243 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
17244 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
17245 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++-----
17246 drivers/xen/xenfs/xenstored.c | 5 +
17247 firmware/Makefile | 2 +
17248 firmware/WHENCE | 20 +-
17249 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
17250 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
17251 fs/9p/vfs_inode.c | 4 +-
17252 fs/attr.c | 1 +
17253 fs/autofs4/waitq.c | 9 +
17254 fs/binfmt_aout.c | 7 +
17255 fs/binfmt_elf.c | 50 +-
17256 fs/compat.c | 20 +-
17257 fs/coredump.c | 17 +-
17258 fs/dcache.c | 3 +
17259 fs/debugfs/inode.c | 11 +-
17260 fs/exec.c | 219 +-
17261 fs/ext2/balloc.c | 4 +-
17262 fs/ext2/super.c | 8 +-
17263 fs/ext4/balloc.c | 4 +-
17264 fs/fcntl.c | 4 +
17265 fs/fhandle.c | 3 +-
17266 fs/file.c | 4 +
17267 fs/filesystems.c | 4 +
17268 fs/fs_struct.c | 20 +-
17269 fs/hugetlbfs/inode.c | 5 +-
17270 fs/inode.c | 8 +-
17271 fs/kernfs/dir.c | 6 +
17272 fs/mount.h | 4 +-
17273 fs/namei.c | 286 +-
17274 fs/namespace.c | 24 +
17275 fs/nfsd/nfscache.c | 2 +-
17276 fs/open.c | 38 +
17277 fs/overlayfs/inode.c | 11 +-
17278 fs/overlayfs/super.c | 6 +-
17279 fs/pipe.c | 2 +-
17280 fs/posix_acl.c | 15 +-
17281 fs/proc/Kconfig | 10 +-
17282 fs/proc/array.c | 69 +-
17283 fs/proc/base.c | 186 +-
17284 fs/proc/cmdline.c | 4 +
17285 fs/proc/devices.c | 4 +
17286 fs/proc/fd.c | 17 +-
17287 fs/proc/generic.c | 64 +
17288 fs/proc/inode.c | 17 +
17289 fs/proc/internal.h | 11 +-
17290 fs/proc/interrupts.c | 4 +
17291 fs/proc/kcore.c | 3 +
17292 fs/proc/meminfo.c | 7 +-
17293 fs/proc/namespaces.c | 4 +-
17294 fs/proc/proc_net.c | 31 +
17295 fs/proc/proc_sysctl.c | 52 +-
17296 fs/proc/root.c | 8 +
17297 fs/proc/stat.c | 69 +-
17298 fs/proc/task_mmu.c | 66 +-
17299 fs/readdir.c | 19 +
17300 fs/reiserfs/item_ops.c | 24 +-
17301 fs/reiserfs/super.c | 4 +
17302 fs/select.c | 2 +
17303 fs/seq_file.c | 30 +-
17304 fs/splice.c | 8 +
17305 fs/stat.c | 20 +-
17306 fs/sysfs/dir.c | 30 +-
17307 fs/sysv/inode.c | 11 +-
17308 fs/utimes.c | 7 +
17309 fs/xattr.c | 26 +-
17310 grsecurity/Kconfig | 1182 ++++
17311 grsecurity/Makefile | 54 +
17312 grsecurity/gracl.c | 2757 +++++++++
17313 grsecurity/gracl_alloc.c | 105 +
17314 grsecurity/gracl_cap.c | 127 +
17315 grsecurity/gracl_compat.c | 269 +
17316 grsecurity/gracl_fs.c | 448 ++
17317 grsecurity/gracl_ip.c | 386 ++
17318 grsecurity/gracl_learn.c | 207 +
17319 grsecurity/gracl_policy.c | 1786 ++++++
17320 grsecurity/gracl_res.c | 68 +
17321 grsecurity/gracl_segv.c | 304 +
17322 grsecurity/gracl_shm.c | 40 +
17323 grsecurity/grsec_chdir.c | 19 +
17324 grsecurity/grsec_chroot.c | 467 ++
17325 grsecurity/grsec_disabled.c | 445 ++
17326 grsecurity/grsec_exec.c | 189 +
17327 grsecurity/grsec_fifo.c | 26 +
17328 grsecurity/grsec_fork.c | 23 +
17329 grsecurity/grsec_init.c | 290 +
17330 grsecurity/grsec_ipc.c | 48 +
17331 grsecurity/grsec_link.c | 65 +
17332 grsecurity/grsec_log.c | 340 +
17333 grsecurity/grsec_mem.c | 48 +
17334 grsecurity/grsec_mount.c | 65 +
17335 grsecurity/grsec_pax.c | 47 +
17336 grsecurity/grsec_proc.c | 20 +
17337 grsecurity/grsec_ptrace.c | 30 +
17338 grsecurity/grsec_sig.c | 236 +
17339 grsecurity/grsec_sock.c | 244 +
17340 grsecurity/grsec_sysctl.c | 488 ++
17341 grsecurity/grsec_time.c | 16 +
17342 grsecurity/grsec_tpe.c | 78 +
17343 grsecurity/grsec_usb.c | 15 +
17344 grsecurity/grsum.c | 64 +
17345 include/linux/binfmts.h | 5 +-
17346 include/linux/bitops.h | 2 +-
17347 include/linux/capability.h | 13 +
17348 include/linux/compiler-gcc.h | 5 +
17349 include/linux/compiler.h | 8 +
17350 include/linux/cred.h | 8 +-
17351 include/linux/dcache.h | 5 +-
17352 include/linux/fs.h | 24 +-
17353 include/linux/fs_struct.h | 2 +-
17354 include/linux/fsnotify.h | 6 +
17355 include/linux/gracl.h | 342 +
17356 include/linux/gracl_compat.h | 156 +
17357 include/linux/gralloc.h | 9 +
17358 include/linux/grdefs.h | 140 +
17359 include/linux/grinternal.h | 230 +
17360 include/linux/grmsg.h | 118 +
17361 include/linux/grsecurity.h | 255 +
17362 include/linux/grsock.h | 19 +
17363 include/linux/ipc.h | 2 +-
17364 include/linux/ipc_namespace.h | 2 +-
17365 include/linux/kallsyms.h | 18 +-
17366 include/linux/kmod.h | 5 +
17367 include/linux/kobject.h | 2 +-
17368 include/linux/lsm_hooks.h | 4 +-
17369 include/linux/mm.h | 12 +
17370 include/linux/mm_types.h | 4 +-
17371 include/linux/module.h | 5 +-
17372 include/linux/mount.h | 2 +-
17373 include/linux/msg.h | 2 +-
17374 include/linux/netfilter/xt_gradm.h | 9 +
17375 include/linux/path.h | 4 +-
17376 include/linux/perf_event.h | 13 +-
17377 include/linux/pid_namespace.h | 2 +-
17378 include/linux/printk.h | 2 +-
17379 include/linux/proc_fs.h | 22 +-
17380 include/linux/proc_ns.h | 2 +-
17381 include/linux/ptrace.h | 24 +-
17382 include/linux/random.h | 2 +-
17383 include/linux/rbtree_augmented.h | 4 +-
17384 include/linux/scatterlist.h | 12 +-
17385 include/linux/sched.h | 114 +-
17386 include/linux/security.h | 1 +
17387 include/linux/sem.h | 2 +-
17388 include/linux/seq_file.h | 5 +
17389 include/linux/shm.h | 6 +-
17390 include/linux/skbuff.h | 3 +
17391 include/linux/slab.h | 9 -
17392 include/linux/sysctl.h | 8 +-
17393 include/linux/thread_info.h | 6 +-
17394 include/linux/tty.h | 2 +-
17395 include/linux/tty_driver.h | 4 +-
17396 include/linux/uidgid.h | 5 +
17397 include/linux/user_namespace.h | 2 +-
17398 include/linux/utsname.h | 2 +-
17399 include/linux/vermagic.h | 16 +-
17400 include/linux/vmalloc.h | 20 +-
17401 include/net/af_unix.h | 2 +-
17402 include/net/dst.h | 33 +
17403 include/net/ip.h | 2 +-
17404 include/net/neighbour.h | 2 +-
17405 include/net/net_namespace.h | 2 +-
17406 include/net/sock.h | 4 +-
17407 include/target/target_core_base.h | 2 +-
17408 include/trace/events/fs.h | 53 +
17409 include/uapi/linux/personality.h | 1 +
17410 init/Kconfig | 4 +-
17411 init/main.c | 35 +-
17412 ipc/mqueue.c | 1 +
17413 ipc/msg.c | 3 +-
17414 ipc/sem.c | 3 +-
17415 ipc/shm.c | 26 +-
17416 ipc/util.c | 6 +
17417 kernel/auditsc.c | 2 +-
17418 kernel/bpf/syscall.c | 8 +-
17419 kernel/capability.c | 41 +-
17420 kernel/cgroup.c | 5 +-
17421 kernel/compat.c | 1 +
17422 kernel/configs.c | 11 +
17423 kernel/cred.c | 112 +-
17424 kernel/events/core.c | 16 +-
17425 kernel/exit.c | 10 +-
17426 kernel/fork.c | 86 +-
17427 kernel/futex.c | 6 +-
17428 kernel/futex_compat.c | 2 +-
17429 kernel/kallsyms.c | 9 +
17430 kernel/kcmp.c | 8 +-
17431 kernel/kexec_core.c | 2 +-
17432 kernel/kmod.c | 95 +-
17433 kernel/kprobes.c | 7 +-
17434 kernel/ksysfs.c | 2 +
17435 kernel/locking/lockdep_proc.c | 10 +-
17436 kernel/module.c | 108 +-
17437 kernel/panic.c | 4 +-
17438 kernel/pid.c | 23 +-
17439 kernel/power/Kconfig | 2 +
17440 kernel/printk/printk.c | 20 +-
17441 kernel/ptrace.c | 56 +-
17442 kernel/resource.c | 10 +
17443 kernel/sched/core.c | 11 +-
17444 kernel/signal.c | 37 +-
17445 kernel/sys.c | 64 +-
17446 kernel/sysctl.c | 172 +-
17447 kernel/taskstats.c | 6 +
17448 kernel/time/posix-timers.c | 8 +
17449 kernel/time/time.c | 5 +
17450 kernel/time/timekeeping.c | 3 +
17451 kernel/time/timer_list.c | 13 +-
17452 kernel/time/timer_stats.c | 10 +-
17453 kernel/trace/Kconfig | 2 +
17454 kernel/trace/trace_syscalls.c | 8 +
17455 kernel/user_namespace.c | 15 +
17456 lib/Kconfig.debug | 13 +-
17457 lib/Kconfig.kasan | 2 +-
17458 lib/is_single_threaded.c | 3 +
17459 lib/list_debug.c | 65 +-
17460 lib/nlattr.c | 2 +
17461 lib/rbtree.c | 4 +-
17462 lib/vsprintf.c | 39 +-
17463 localversion-grsec | 1 +
17464 mm/Kconfig | 8 +-
17465 mm/Kconfig.debug | 1 +
17466 mm/filemap.c | 1 +
17467 mm/kmemleak.c | 4 +-
17468 mm/memory.c | 2 +-
17469 mm/mempolicy.c | 12 +-
17470 mm/migrate.c | 3 +-
17471 mm/mlock.c | 6 +-
17472 mm/mmap.c | 93 +-
17473 mm/mprotect.c | 8 +
17474 mm/oom_kill.c | 28 +-
17475 mm/page_alloc.c | 2 +-
17476 mm/process_vm_access.c | 8 +-
17477 mm/shmem.c | 36 +-
17478 mm/slab.c | 14 +-
17479 mm/slab_common.c | 2 +-
17480 mm/slob.c | 12 +
17481 mm/slub.c | 33 +-
17482 mm/util.c | 3 +
17483 mm/vmalloc.c | 129 +-
17484 mm/vmstat.c | 29 +-
17485 net/appletalk/atalk_proc.c | 2 +-
17486 net/atm/lec.c | 6 +-
17487 net/atm/mpoa_caches.c | 42 +-
17488 net/bluetooth/sco.c | 3 +
17489 net/can/bcm.c | 2 +-
17490 net/can/proc.c | 2 +-
17491 net/core/dev_ioctl.c | 7 +-
17492 net/core/filter.c | 8 +-
17493 net/core/net-procfs.c | 17 +-
17494 net/core/pktgen.c | 2 +-
17495 net/core/sock.c | 3 +-
17496 net/core/sysctl_net_core.c | 2 +-
17497 net/decnet/dn_dev.c | 2 +-
17498 net/ipv4/devinet.c | 6 +-
17499 net/ipv4/inet_hashtables.c | 4 +
17500 net/ipv4/ip_input.c | 7 +
17501 net/ipv4/ip_sockglue.c | 3 +-
17502 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
17503 net/ipv4/netfilter/nf_nat_pptp.c | 2 +-
17504 net/ipv4/route.c | 6 +-
17505 net/ipv4/tcp_input.c | 4 +-
17506 net/ipv4/tcp_ipv4.c | 29 +-
17507 net/ipv4/tcp_minisocks.c | 9 +-
17508 net/ipv4/tcp_timer.c | 11 +
17509 net/ipv4/udp.c | 24 +
17510 net/ipv6/addrconf.c | 13 +-
17511 net/ipv6/proc.c | 2 +-
17512 net/ipv6/tcp_ipv6.c | 26 +-
17513 net/ipv6/udp.c | 7 +
17514 net/ipx/ipx_proc.c | 2 +-
17515 net/irda/irproc.c | 2 +-
17516 net/llc/llc_proc.c | 2 +-
17517 net/netfilter/Kconfig | 10 +
17518 net/netfilter/Makefile | 1 +
17519 net/netfilter/nf_conntrack_core.c | 8 +
17520 net/netfilter/xt_gradm.c | 51 +
17521 net/netfilter/xt_hashlimit.c | 4 +-
17522 net/netfilter/xt_recent.c | 2 +-
17523 net/sched/sch_api.c | 2 +-
17524 net/sctp/socket.c | 4 +-
17525 net/socket.c | 75 +-
17526 net/sunrpc/Kconfig | 1 +
17527 net/sunrpc/cache.c | 2 +-
17528 net/sunrpc/stats.c | 2 +-
17529 net/sysctl_net.c | 2 +-
17530 net/unix/af_unix.c | 52 +-
17531 net/vmw_vsock/vmci_transport_notify.c | 30 +-
17532 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
17533 net/x25/sysctl_net_x25.c | 2 +-
17534 net/x25/x25_proc.c | 2 +-
17535 scripts/package/Makefile | 2 +-
17536 scripts/package/mkspec | 41 +-
17537 security/Kconfig | 369 +-
17538 security/apparmor/file.c | 4 +-
17539 security/apparmor/lsm.c | 8 +-
17540 security/commoncap.c | 36 +-
17541 security/min_addr.c | 2 +
17542 security/smack/smack_lsm.c | 8 +-
17543 security/tomoyo/file.c | 12 +-
17544 security/tomoyo/mount.c | 4 +
17545 security/tomoyo/tomoyo.c | 20 +-
17546 security/yama/Kconfig | 2 +-
17547 security/yama/yama_lsm.c | 4 +-
17548 sound/synth/emux/emux_seq.c | 14 +-
17549 sound/usb/line6/driver.c | 40 +-
17550 sound/usb/line6/toneport.c | 12 +-
17551 tools/gcc/.gitignore | 1 +
17552 tools/gcc/Makefile | 12 +
17553 tools/gcc/gen-random-seed.sh | 8 +
17554 tools/gcc/randomize_layout_plugin.c | 930 +++
17555 tools/gcc/size_overflow_plugin/.gitignore | 1 +
17556 .../size_overflow_plugin/size_overflow_hash.data | 459 ++-
17557 511 files changed, 32631 insertions(+), 3196 deletions(-)
17558
17559 commit a76adb92ce39aee8eec5a025c828030ad6135c6d
17560 Author: Brad Spengler <spender@grsecurity.net>
17561 Date: Tue Dec 15 14:31:49 2015 -0500
17562
17563 Update to pax-linux-4.3.3-test11.patch:
17564 - fixed a few compile regressions with the recent plugin changes, reported by spender
17565 - updated the size overflow hash table
17566
17567 tools/gcc/latent_entropy_plugin.c | 2 +-
17568 .../size_overflow_plugin/size_overflow_hash.data | 66 +++++++++++++++++---
17569 tools/gcc/stackleak_plugin.c | 2 +-
17570 tools/gcc/structleak_plugin.c | 6 +--
17571 4 files changed, 60 insertions(+), 16 deletions(-)
17572
17573 commit f7284b1fc06628fcb2d35d2beecdea5454d46af9
17574 Author: Brad Spengler <spender@grsecurity.net>
17575 Date: Tue Dec 15 11:50:24 2015 -0500
17576
17577 Apply structleak ICE fix for gcc < 4.9
17578
17579 tools/gcc/structleak_plugin.c | 4 ++++
17580 1 files changed, 4 insertions(+), 0 deletions(-)
17581
17582 commit 92fe3eb9fd10ec7f7334decab1526989669b0287
17583 Author: Brad Spengler <spender@grsecurity.net>
17584 Date: Tue Dec 15 07:57:06 2015 -0500
17585
17586 Update to pax-linux-4.3.1-test10.patch:
17587 - Emese fixed INDIRECT_REF and TARGET_MEM_REF handling in the initify plugin
17588 - Emese regenerated the size overflow hash tables for 4.3
17589 - fixed some compat syscall exit paths to restore r12 under KERNEXEC/or
17590 - the latent entropy, stackleak and structleak plugins no longer split the entry block unnecessarily
17591
17592 arch/x86/entry/entry_64.S | 2 +-
17593 arch/x86/entry/entry_64_compat.S | 15 +-
17594 scripts/package/builddeb | 2 +-
17595 tools/gcc/initify_plugin.c | 11 +-
17596 tools/gcc/latent_entropy_plugin.c | 20 +-
17597 .../disable_size_overflow_hash.data | 4 +
17598 .../size_overflow_plugin/size_overflow_hash.data | 5345 +++++++++++---------
17599 tools/gcc/stackleak_plugin.c | 26 +-
17600 tools/gcc/structleak_plugin.c | 21 +-
17601 9 files changed, 3079 insertions(+), 2367 deletions(-)
17602
17603 commit 5bd245cb687319079c2f1c0d6a1170791ed1ed2c
17604 Merge: b5847e6 3548341
17605 Author: Brad Spengler <spender@grsecurity.net>
17606 Date: Tue Dec 15 07:47:56 2015 -0500
17607
17608 Merge branch 'linux-4.3.y' into pax-4_3
17609
17610 Conflicts:
17611 net/unix/af_unix.c
17612
17613 commit b5847e6a896c5d99191135ca4d7c3b6be8f116ff
17614 Author: Brad Spengler <spender@grsecurity.net>
17615 Date: Wed Dec 9 23:11:36 2015 -0500
17616
17617 Update to pax-linux-4.3.1-test9.patch:
17618 - fixed __get_user on x86 to lie less about the size of the load, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4332)
17619 - Emese fixed an intentional overflow caused by gcc, reported by saironiq (https://forums.grsecurity.net/viewtopic.php?f=3&t=4333)
17620 - Emese fixed a false positive overflow report in the forcedeth driver, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?t=4334)
17621 - Emese fixed a false positive overflow report in KVM's emulator, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4336)
17622 - Emese fixed the initify plugin to detect some captured use of __func__, reported by Rasmus Villemoes <linux@rasmusvillemoes.dk>
17623 - constrained shmmax and shmall to avoid triggering size overflow checks, reported by Mathias Krause <minipli@ld-linux.so>
17624 - the checker plugin can partially handle sparse's locking context annotations, it's context insensitive and thus not exactly useful for now, also see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59856
17625
17626 Makefile | 6 +
17627 arch/x86/include/asm/compat.h | 4 +
17628 arch/x86/include/asm/dma.h | 2 +
17629 arch/x86/include/asm/pmem.h | 2 +-
17630 arch/x86/include/asm/uaccess.h | 20 +-
17631 arch/x86/kernel/apic/vector.c | 6 +-
17632 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
17633 arch/x86/kernel/cpu/perf_event_intel.c | 28 +-
17634 arch/x86/kernel/head_64.S | 1 -
17635 arch/x86/kvm/i8259.c | 10 +-
17636 arch/x86/kvm/ioapic.c | 2 +
17637 arch/x86/kvm/x86.c | 2 +
17638 arch/x86/lib/usercopy_64.c | 2 +-
17639 arch/x86/mm/mpx.c | 4 +-
17640 arch/x86/mm/pageattr.c | 7 +
17641 drivers/base/devres.c | 4 +-
17642 drivers/base/power/runtime.c | 6 +-
17643 drivers/base/regmap/regmap.c | 4 +-
17644 drivers/block/drbd/drbd_receiver.c | 4 +-
17645 drivers/block/drbd/drbd_worker.c | 6 +-
17646 drivers/char/virtio_console.c | 6 +-
17647 drivers/md/dm.c | 12 +-
17648 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
17649 drivers/net/macvtap.c | 4 +-
17650 drivers/video/fbdev/core/fbmem.c | 10 +-
17651 fs/compat.c | 3 +-
17652 fs/coredump.c | 2 +-
17653 fs/dcache.c | 13 +-
17654 fs/fhandle.c | 2 +-
17655 fs/file.c | 14 +-
17656 fs/fs-writeback.c | 11 +-
17657 fs/overlayfs/copy_up.c | 2 +-
17658 fs/readdir.c | 3 +-
17659 fs/super.c | 3 +-
17660 include/linux/compiler.h | 36 ++-
17661 include/linux/rcupdate.h | 8 +
17662 include/linux/sched.h | 4 +-
17663 include/linux/seqlock.h | 10 +
17664 include/linux/spinlock.h | 17 +-
17665 include/linux/srcu.h | 5 +-
17666 include/linux/syscalls.h | 2 +-
17667 include/linux/writeback.h | 3 +-
17668 include/uapi/linux/swab.h | 6 +-
17669 ipc/ipc_sysctl.c | 6 +
17670 kernel/exit.c | 25 +-
17671 kernel/resource.c | 4 +-
17672 kernel/signal.c | 12 +-
17673 kernel/user.c | 2 +-
17674 kernel/workqueue.c | 6 +-
17675 lib/rhashtable.c | 4 +-
17676 net/compat.c | 2 +-
17677 net/ipv4/xfrm4_mode_transport.c | 2 +-
17678 security/keys/internal.h | 8 +-
17679 security/keys/keyring.c | 4 -
17680 sound/core/seq/seq_clientmgr.c | 8 +-
17681 sound/core/seq/seq_compat.c | 2 +-
17682 sound/core/seq/seq_memory.c | 6 +-
17683 tools/gcc/checker_plugin.c | 415 +++++++++++++++++++-
17684 tools/gcc/gcc-common.h | 1 +
17685 tools/gcc/initify_plugin.c | 33 ++-
17686 .../disable_size_overflow_hash.data | 1 +
17687 .../size_overflow_plugin/size_overflow_hash.data | 1 -
17688 62 files changed, 708 insertions(+), 140 deletions(-)
17689
17690 commit f2634c2f6995f4231616f24ed016f890c701f939
17691 Merge: 1241bff 5f8b236
17692 Author: Brad Spengler <spender@grsecurity.net>
17693 Date: Wed Dec 9 21:50:47 2015 -0500
17694
17695 Merge branch 'linux-4.3.y' into pax-4_3
17696
17697 Conflicts:
17698 arch/x86/kernel/fpu/xstate.c
17699 arch/x86/kernel/head_64.S
17700
17701 commit 1241bff82e3d7dadb05de0a60b8d2822afc6547c
17702 Author: Brad Spengler <spender@grsecurity.net>
17703 Date: Sun Dec 6 08:44:56 2015 -0500
17704
17705 Update to pax-linux-4.3-test8.patch:
17706 - fixed integer truncation check in md introduced by upstream commits 284ae7cab0f7335c9e0aa8992b28415ef1a54c7c and 58c0fed400603a802968b23ddf78f029c5a84e41, reported by BeiKed9o (https://forums.grsecurity.net/viewtopic.php?f=3&t=4328)
17707 - gcc plugin compilation problems will now also produce the output of the checking script to make diagnosis easier, reported by hunger
17708 - Emese fixed a false positive size overflow report in __vhost_add_used_n, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4329)
17709 - fixed a potential integer truncation error in the raid1 code caught by the size overflow plugin, reported by d1b (https://forums.grsecurity.net/viewtopic.php?f=3&t=4331)
17710
17711 Makefile | 5 +++
17712 drivers/md/md.c | 5 ++-
17713 drivers/md/raid1.c | 2 +-
17714 fs/proc/task_mmu.c | 3 ++
17715 .../disable_size_overflow_hash.data | 4 ++-
17716 .../size_overflow_plugin/intentional_overflow.c | 32 ++++++++++++++++---
17717 .../size_overflow_plugin/size_overflow_hash.data | 2 -
17718 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
17719 8 files changed, 43 insertions(+), 12 deletions(-)
17720
17721 commit cce6a9f9bdd27096632ca1c0246dcc07f2eb1a18
17722 Author: Brad Spengler <spender@grsecurity.net>
17723 Date: Fri Dec 4 14:24:12 2015 -0500
17724
17725 Initial import of pax-linux-4.3-test7.patch
17726
17727 Documentation/dontdiff | 47 +-
17728 Documentation/kbuild/makefiles.txt | 39 +-
17729 Documentation/kernel-parameters.txt | 28 +
17730 Makefile | 108 +-
17731 arch/alpha/include/asm/atomic.h | 10 +
17732 arch/alpha/include/asm/elf.h | 7 +
17733 arch/alpha/include/asm/pgalloc.h | 6 +
17734 arch/alpha/include/asm/pgtable.h | 11 +
17735 arch/alpha/kernel/module.c | 2 +-
17736 arch/alpha/kernel/osf_sys.c | 8 +-
17737 arch/alpha/mm/fault.c | 141 +-
17738 arch/arm/Kconfig | 2 +-
17739 arch/arm/include/asm/atomic.h | 320 +-
17740 arch/arm/include/asm/cache.h | 5 +-
17741 arch/arm/include/asm/cacheflush.h | 2 +-
17742 arch/arm/include/asm/checksum.h | 14 +-
17743 arch/arm/include/asm/cmpxchg.h | 4 +
17744 arch/arm/include/asm/cpuidle.h | 2 +-
17745 arch/arm/include/asm/domain.h | 22 +-
17746 arch/arm/include/asm/elf.h | 9 +-
17747 arch/arm/include/asm/fncpy.h | 2 +
17748 arch/arm/include/asm/futex.h | 10 +
17749 arch/arm/include/asm/kmap_types.h | 2 +-
17750 arch/arm/include/asm/mach/dma.h | 2 +-
17751 arch/arm/include/asm/mach/map.h | 16 +-
17752 arch/arm/include/asm/outercache.h | 2 +-
17753 arch/arm/include/asm/page.h | 3 +-
17754 arch/arm/include/asm/pgalloc.h | 20 +
17755 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
17756 arch/arm/include/asm/pgtable-2level.h | 3 +
17757 arch/arm/include/asm/pgtable-3level.h | 3 +
17758 arch/arm/include/asm/pgtable.h | 54 +-
17759 arch/arm/include/asm/smp.h | 2 +-
17760 arch/arm/include/asm/tls.h | 3 +
17761 arch/arm/include/asm/uaccess.h | 79 +-
17762 arch/arm/include/uapi/asm/ptrace.h | 2 +-
17763 arch/arm/kernel/armksyms.c | 2 +-
17764 arch/arm/kernel/cpuidle.c | 2 +-
17765 arch/arm/kernel/entry-armv.S | 109 +-
17766 arch/arm/kernel/entry-common.S | 40 +-
17767 arch/arm/kernel/entry-header.S | 55 +
17768 arch/arm/kernel/fiq.c | 3 +
17769 arch/arm/kernel/module-plts.c | 7 +-
17770 arch/arm/kernel/module.c | 38 +-
17771 arch/arm/kernel/patch.c | 2 +
17772 arch/arm/kernel/process.c | 90 +-
17773 arch/arm/kernel/reboot.c | 1 +
17774 arch/arm/kernel/setup.c | 20 +-
17775 arch/arm/kernel/signal.c | 35 +-
17776 arch/arm/kernel/smp.c | 2 +-
17777 arch/arm/kernel/tcm.c | 4 +-
17778 arch/arm/kernel/vmlinux.lds.S | 6 +-
17779 arch/arm/kvm/arm.c | 8 +-
17780 arch/arm/lib/copy_page.S | 1 +
17781 arch/arm/lib/csumpartialcopyuser.S | 4 +-
17782 arch/arm/lib/delay.c | 2 +-
17783 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
17784 arch/arm/mach-exynos/suspend.c | 6 +-
17785 arch/arm/mach-mvebu/coherency.c | 4 +-
17786 arch/arm/mach-omap2/board-n8x0.c | 2 +-
17787 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
17788 arch/arm/mach-omap2/omap-smp.c | 1 +
17789 arch/arm/mach-omap2/omap-wakeupgen.c | 2 +-
17790 arch/arm/mach-omap2/omap_device.c | 4 +-
17791 arch/arm/mach-omap2/omap_device.h | 4 +-
17792 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
17793 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
17794 arch/arm/mach-omap2/wd_timer.c | 6 +-
17795 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
17796 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
17797 arch/arm/mach-tegra/irq.c | 1 +
17798 arch/arm/mach-ux500/pm.c | 1 +
17799 arch/arm/mach-zynq/platsmp.c | 1 +
17800 arch/arm/mm/Kconfig | 6 +-
17801 arch/arm/mm/alignment.c | 8 +
17802 arch/arm/mm/cache-l2x0.c | 2 +-
17803 arch/arm/mm/context.c | 10 +-
17804 arch/arm/mm/fault.c | 146 +
17805 arch/arm/mm/fault.h | 12 +
17806 arch/arm/mm/init.c | 39 +
17807 arch/arm/mm/ioremap.c | 4 +-
17808 arch/arm/mm/mmap.c | 30 +-
17809 arch/arm/mm/mmu.c | 162 +-
17810 arch/arm/net/bpf_jit_32.c | 3 +
17811 arch/arm/plat-iop/setup.c | 2 +-
17812 arch/arm/plat-omap/sram.c | 2 +
17813 arch/arm64/include/asm/atomic.h | 10 +
17814 arch/arm64/include/asm/percpu.h | 8 +-
17815 arch/arm64/include/asm/pgalloc.h | 5 +
17816 arch/arm64/include/asm/uaccess.h | 1 +
17817 arch/arm64/mm/dma-mapping.c | 2 +-
17818 arch/avr32/include/asm/elf.h | 8 +-
17819 arch/avr32/include/asm/kmap_types.h | 4 +-
17820 arch/avr32/mm/fault.c | 27 +
17821 arch/frv/include/asm/atomic.h | 10 +
17822 arch/frv/include/asm/kmap_types.h | 2 +-
17823 arch/frv/mm/elf-fdpic.c | 3 +-
17824 arch/ia64/Makefile | 1 +
17825 arch/ia64/include/asm/atomic.h | 10 +
17826 arch/ia64/include/asm/elf.h | 7 +
17827 arch/ia64/include/asm/pgalloc.h | 12 +
17828 arch/ia64/include/asm/pgtable.h | 13 +-
17829 arch/ia64/include/asm/spinlock.h | 2 +-
17830 arch/ia64/include/asm/uaccess.h | 27 +-
17831 arch/ia64/kernel/module.c | 45 +-
17832 arch/ia64/kernel/palinfo.c | 2 +-
17833 arch/ia64/kernel/sys_ia64.c | 7 +
17834 arch/ia64/kernel/vmlinux.lds.S | 2 +-
17835 arch/ia64/mm/fault.c | 32 +-
17836 arch/ia64/mm/init.c | 15 +-
17837 arch/m32r/lib/usercopy.c | 6 +
17838 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
17839 arch/mips/include/asm/atomic.h | 368 +-
17840 arch/mips/include/asm/elf.h | 7 +
17841 arch/mips/include/asm/exec.h | 2 +-
17842 arch/mips/include/asm/hw_irq.h | 2 +-
17843 arch/mips/include/asm/local.h | 57 +
17844 arch/mips/include/asm/page.h | 2 +-
17845 arch/mips/include/asm/pgalloc.h | 5 +
17846 arch/mips/include/asm/pgtable.h | 3 +
17847 arch/mips/include/asm/uaccess.h | 1 +
17848 arch/mips/kernel/binfmt_elfn32.c | 7 +
17849 arch/mips/kernel/binfmt_elfo32.c | 7 +
17850 arch/mips/kernel/irq-gt641xx.c | 2 +-
17851 arch/mips/kernel/irq.c | 6 +-
17852 arch/mips/kernel/pm-cps.c | 2 +-
17853 arch/mips/kernel/process.c | 12 -
17854 arch/mips/kernel/sync-r4k.c | 24 +-
17855 arch/mips/kernel/traps.c | 13 +-
17856 arch/mips/mm/fault.c | 25 +
17857 arch/mips/mm/mmap.c | 51 +-
17858 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
17859 arch/mips/sni/rm200.c | 2 +-
17860 arch/mips/vr41xx/common/icu.c | 2 +-
17861 arch/mips/vr41xx/common/irq.c | 4 +-
17862 arch/parisc/include/asm/atomic.h | 10 +
17863 arch/parisc/include/asm/elf.h | 7 +
17864 arch/parisc/include/asm/pgalloc.h | 6 +
17865 arch/parisc/include/asm/pgtable.h | 11 +
17866 arch/parisc/include/asm/uaccess.h | 4 +-
17867 arch/parisc/kernel/module.c | 50 +-
17868 arch/parisc/kernel/sys_parisc.c | 15 +
17869 arch/parisc/kernel/traps.c | 4 +-
17870 arch/parisc/mm/fault.c | 140 +-
17871 arch/powerpc/include/asm/atomic.h | 329 +-
17872 arch/powerpc/include/asm/elf.h | 12 +
17873 arch/powerpc/include/asm/exec.h | 2 +-
17874 arch/powerpc/include/asm/kmap_types.h | 2 +-
17875 arch/powerpc/include/asm/local.h | 46 +
17876 arch/powerpc/include/asm/mman.h | 2 +-
17877 arch/powerpc/include/asm/page.h | 8 +-
17878 arch/powerpc/include/asm/page_64.h | 7 +-
17879 arch/powerpc/include/asm/pgalloc-64.h | 7 +
17880 arch/powerpc/include/asm/pgtable.h | 1 +
17881 arch/powerpc/include/asm/pte-hash32.h | 1 +
17882 arch/powerpc/include/asm/reg.h | 1 +
17883 arch/powerpc/include/asm/smp.h | 2 +-
17884 arch/powerpc/include/asm/spinlock.h | 42 +-
17885 arch/powerpc/include/asm/uaccess.h | 141 +-
17886 arch/powerpc/kernel/Makefile | 5 +
17887 arch/powerpc/kernel/exceptions-64e.S | 4 +-
17888 arch/powerpc/kernel/exceptions-64s.S | 2 +-
17889 arch/powerpc/kernel/module_32.c | 15 +-
17890 arch/powerpc/kernel/process.c | 46 -
17891 arch/powerpc/kernel/signal_32.c | 2 +-
17892 arch/powerpc/kernel/signal_64.c | 2 +-
17893 arch/powerpc/kernel/traps.c | 21 +
17894 arch/powerpc/kernel/vdso.c | 5 +-
17895 arch/powerpc/lib/usercopy_64.c | 18 -
17896 arch/powerpc/mm/fault.c | 56 +-
17897 arch/powerpc/mm/mmap.c | 16 +
17898 arch/powerpc/mm/slice.c | 13 +-
17899 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
17900 arch/s390/include/asm/atomic.h | 10 +
17901 arch/s390/include/asm/elf.h | 7 +
17902 arch/s390/include/asm/exec.h | 2 +-
17903 arch/s390/include/asm/uaccess.h | 13 +-
17904 arch/s390/kernel/module.c | 22 +-
17905 arch/s390/kernel/process.c | 24 -
17906 arch/s390/mm/mmap.c | 16 +
17907 arch/score/include/asm/exec.h | 2 +-
17908 arch/score/kernel/process.c | 5 -
17909 arch/sh/mm/mmap.c | 22 +-
17910 arch/sparc/include/asm/atomic_64.h | 110 +-
17911 arch/sparc/include/asm/cache.h | 2 +-
17912 arch/sparc/include/asm/elf_32.h | 7 +
17913 arch/sparc/include/asm/elf_64.h | 7 +
17914 arch/sparc/include/asm/pgalloc_32.h | 1 +
17915 arch/sparc/include/asm/pgalloc_64.h | 1 +
17916 arch/sparc/include/asm/pgtable.h | 4 +
17917 arch/sparc/include/asm/pgtable_32.h | 15 +-
17918 arch/sparc/include/asm/pgtsrmmu.h | 5 +
17919 arch/sparc/include/asm/setup.h | 4 +-
17920 arch/sparc/include/asm/spinlock_64.h | 35 +-
17921 arch/sparc/include/asm/thread_info_32.h | 1 +
17922 arch/sparc/include/asm/thread_info_64.h | 2 +
17923 arch/sparc/include/asm/uaccess.h | 1 +
17924 arch/sparc/include/asm/uaccess_32.h | 28 +-
17925 arch/sparc/include/asm/uaccess_64.h | 24 +-
17926 arch/sparc/kernel/Makefile | 2 +-
17927 arch/sparc/kernel/prom_common.c | 2 +-
17928 arch/sparc/kernel/smp_64.c | 8 +-
17929 arch/sparc/kernel/sys_sparc_32.c | 2 +-
17930 arch/sparc/kernel/sys_sparc_64.c | 52 +-
17931 arch/sparc/kernel/traps_64.c | 27 +-
17932 arch/sparc/lib/Makefile | 2 +-
17933 arch/sparc/lib/atomic_64.S | 57 +-
17934 arch/sparc/lib/ksyms.c | 6 +-
17935 arch/sparc/mm/Makefile | 2 +-
17936 arch/sparc/mm/fault_32.c | 292 +
17937 arch/sparc/mm/fault_64.c | 486 +
17938 arch/sparc/mm/hugetlbpage.c | 22 +-
17939 arch/sparc/mm/init_64.c | 10 +-
17940 arch/tile/include/asm/atomic_64.h | 10 +
17941 arch/tile/include/asm/uaccess.h | 4 +-
17942 arch/um/Makefile | 4 +
17943 arch/um/include/asm/kmap_types.h | 2 +-
17944 arch/um/include/asm/page.h | 3 +
17945 arch/um/include/asm/pgtable-3level.h | 1 +
17946 arch/um/kernel/process.c | 16 -
17947 arch/x86/Kconfig | 15 +-
17948 arch/x86/Kconfig.cpu | 6 +-
17949 arch/x86/Kconfig.debug | 4 +-
17950 arch/x86/Makefile | 13 +-
17951 arch/x86/boot/Makefile | 3 +
17952 arch/x86/boot/bitops.h | 4 +-
17953 arch/x86/boot/boot.h | 2 +-
17954 arch/x86/boot/compressed/Makefile | 3 +
17955 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
17956 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
17957 arch/x86/boot/compressed/head_32.S | 4 +-
17958 arch/x86/boot/compressed/head_64.S | 12 +-
17959 arch/x86/boot/compressed/misc.c | 11 +-
17960 arch/x86/boot/cpucheck.c | 16 +-
17961 arch/x86/boot/header.S | 6 +-
17962 arch/x86/boot/memory.c | 2 +-
17963 arch/x86/boot/video-vesa.c | 1 +
17964 arch/x86/boot/video.c | 2 +-
17965 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
17966 arch/x86/crypto/aesni-intel_asm.S | 106 +-
17967 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
17968 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
17969 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
17970 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
17971 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
17972 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
17973 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +-
17974 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
17975 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
17976 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
17977 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
17978 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
17979 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
17980 arch/x86/crypto/sha256-avx-asm.S | 2 +
17981 arch/x86/crypto/sha256-avx2-asm.S | 2 +
17982 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
17983 arch/x86/crypto/sha512-avx-asm.S | 2 +
17984 arch/x86/crypto/sha512-avx2-asm.S | 2 +
17985 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
17986 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
17987 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
17988 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
17989 arch/x86/entry/calling.h | 86 +-
17990 arch/x86/entry/common.c | 13 +-
17991 arch/x86/entry/entry_32.S | 351 +-
17992 arch/x86/entry/entry_64.S | 619 +-
17993 arch/x86/entry/entry_64_compat.S | 159 +-
17994 arch/x86/entry/thunk_64.S | 2 +
17995 arch/x86/entry/vdso/Makefile | 2 +-
17996 arch/x86/entry/vdso/vdso2c.h | 8 +-
17997 arch/x86/entry/vdso/vma.c | 41 +-
17998 arch/x86/entry/vsyscall/vsyscall_64.c | 16 +-
17999 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
18000 arch/x86/ia32/ia32_signal.c | 23 +-
18001 arch/x86/ia32/sys_ia32.c | 42 +-
18002 arch/x86/include/asm/alternative-asm.h | 43 +-
18003 arch/x86/include/asm/alternative.h | 4 +-
18004 arch/x86/include/asm/apic.h | 2 +-
18005 arch/x86/include/asm/apm.h | 4 +-
18006 arch/x86/include/asm/atomic.h | 230 +-
18007 arch/x86/include/asm/atomic64_32.h | 100 +
18008 arch/x86/include/asm/atomic64_64.h | 164 +-
18009 arch/x86/include/asm/bitops.h | 18 +-
18010 arch/x86/include/asm/boot.h | 2 +-
18011 arch/x86/include/asm/cache.h | 5 +-
18012 arch/x86/include/asm/checksum_32.h | 12 +-
18013 arch/x86/include/asm/cmpxchg.h | 39 +
18014 arch/x86/include/asm/compat.h | 2 +-
18015 arch/x86/include/asm/cpufeature.h | 17 +-
18016 arch/x86/include/asm/desc.h | 78 +-
18017 arch/x86/include/asm/desc_defs.h | 6 +
18018 arch/x86/include/asm/div64.h | 2 +-
18019 arch/x86/include/asm/elf.h | 33 +-
18020 arch/x86/include/asm/emergency-restart.h | 2 +-
18021 arch/x86/include/asm/fpu/internal.h | 42 +-
18022 arch/x86/include/asm/fpu/types.h | 6 +-
18023 arch/x86/include/asm/futex.h | 14 +-
18024 arch/x86/include/asm/hw_irq.h | 4 +-
18025 arch/x86/include/asm/i8259.h | 2 +-
18026 arch/x86/include/asm/io.h | 22 +-
18027 arch/x86/include/asm/irqflags.h | 5 +
18028 arch/x86/include/asm/kprobes.h | 9 +-
18029 arch/x86/include/asm/local.h | 106 +-
18030 arch/x86/include/asm/mman.h | 15 +
18031 arch/x86/include/asm/mmu.h | 14 +-
18032 arch/x86/include/asm/mmu_context.h | 114 +-
18033 arch/x86/include/asm/module.h | 17 +-
18034 arch/x86/include/asm/nmi.h | 19 +-
18035 arch/x86/include/asm/page.h | 1 +
18036 arch/x86/include/asm/page_32.h | 12 +-
18037 arch/x86/include/asm/page_64.h | 14 +-
18038 arch/x86/include/asm/paravirt.h | 46 +-
18039 arch/x86/include/asm/paravirt_types.h | 15 +-
18040 arch/x86/include/asm/pgalloc.h | 23 +
18041 arch/x86/include/asm/pgtable-2level.h | 2 +
18042 arch/x86/include/asm/pgtable-3level.h | 7 +
18043 arch/x86/include/asm/pgtable.h | 128 +-
18044 arch/x86/include/asm/pgtable_32.h | 14 +-
18045 arch/x86/include/asm/pgtable_32_types.h | 24 +-
18046 arch/x86/include/asm/pgtable_64.h | 23 +-
18047 arch/x86/include/asm/pgtable_64_types.h | 5 +
18048 arch/x86/include/asm/pgtable_types.h | 26 +-
18049 arch/x86/include/asm/preempt.h | 2 +-
18050 arch/x86/include/asm/processor.h | 57 +-
18051 arch/x86/include/asm/ptrace.h | 13 +-
18052 arch/x86/include/asm/realmode.h | 4 +-
18053 arch/x86/include/asm/reboot.h | 10 +-
18054 arch/x86/include/asm/rmwcc.h | 84 +-
18055 arch/x86/include/asm/rwsem.h | 60 +-
18056 arch/x86/include/asm/segment.h | 27 +-
18057 arch/x86/include/asm/smap.h | 43 +
18058 arch/x86/include/asm/smp.h | 14 +-
18059 arch/x86/include/asm/stackprotector.h | 4 +-
18060 arch/x86/include/asm/stacktrace.h | 32 +-
18061 arch/x86/include/asm/switch_to.h | 4 +-
18062 arch/x86/include/asm/sys_ia32.h | 6 +-
18063 arch/x86/include/asm/thread_info.h | 27 +-
18064 arch/x86/include/asm/tlbflush.h | 77 +-
18065 arch/x86/include/asm/uaccess.h | 192 +-
18066 arch/x86/include/asm/uaccess_32.h | 28 +-
18067 arch/x86/include/asm/uaccess_64.h | 169 +-
18068 arch/x86/include/asm/word-at-a-time.h | 2 +-
18069 arch/x86/include/asm/x86_init.h | 10 +-
18070 arch/x86/include/asm/xen/page.h | 2 +-
18071 arch/x86/include/uapi/asm/e820.h | 2 +-
18072 arch/x86/kernel/Makefile | 2 +-
18073 arch/x86/kernel/acpi/boot.c | 4 +-
18074 arch/x86/kernel/acpi/sleep.c | 4 +
18075 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
18076 arch/x86/kernel/alternative.c | 124 +-
18077 arch/x86/kernel/apic/apic.c | 4 +-
18078 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
18079 arch/x86/kernel/apic/apic_noop.c | 2 +-
18080 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
18081 arch/x86/kernel/apic/io_apic.c | 8 +-
18082 arch/x86/kernel/apic/msi.c | 2 +-
18083 arch/x86/kernel/apic/probe_32.c | 4 +-
18084 arch/x86/kernel/apic/vector.c | 4 +-
18085 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
18086 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
18087 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
18088 arch/x86/kernel/apm_32.c | 21 +-
18089 arch/x86/kernel/asm-offsets.c | 20 +
18090 arch/x86/kernel/asm-offsets_64.c | 1 +
18091 arch/x86/kernel/cpu/Makefile | 4 -
18092 arch/x86/kernel/cpu/amd.c | 2 +-
18093 arch/x86/kernel/cpu/bugs_64.c | 2 +
18094 arch/x86/kernel/cpu/common.c | 202 +-
18095 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
18096 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
18097 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
18098 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
18099 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
18100 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
18101 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
18102 arch/x86/kernel/cpu/perf_event.c | 10 +-
18103 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
18104 arch/x86/kernel/cpu/perf_event_intel.c | 6 +-
18105 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
18106 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
18107 arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +-
18108 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
18109 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
18110 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
18111 arch/x86/kernel/crash_dump_64.c | 2 +-
18112 arch/x86/kernel/doublefault.c | 8 +-
18113 arch/x86/kernel/dumpstack.c | 24 +-
18114 arch/x86/kernel/dumpstack_32.c | 25 +-
18115 arch/x86/kernel/dumpstack_64.c | 62 +-
18116 arch/x86/kernel/e820.c | 4 +-
18117 arch/x86/kernel/early_printk.c | 1 +
18118 arch/x86/kernel/espfix_64.c | 44 +-
18119 arch/x86/kernel/fpu/core.c | 24 +-
18120 arch/x86/kernel/fpu/init.c | 40 +-
18121 arch/x86/kernel/fpu/regset.c | 22 +-
18122 arch/x86/kernel/fpu/signal.c | 20 +-
18123 arch/x86/kernel/fpu/xstate.c | 8 +-
18124 arch/x86/kernel/ftrace.c | 18 +-
18125 arch/x86/kernel/head64.c | 14 +-
18126 arch/x86/kernel/head_32.S | 235 +-
18127 arch/x86/kernel/head_64.S | 173 +-
18128 arch/x86/kernel/i386_ksyms_32.c | 12 +
18129 arch/x86/kernel/i8259.c | 10 +-
18130 arch/x86/kernel/io_delay.c | 2 +-
18131 arch/x86/kernel/ioport.c | 2 +-
18132 arch/x86/kernel/irq.c | 8 +-
18133 arch/x86/kernel/irq_32.c | 45 +-
18134 arch/x86/kernel/jump_label.c | 10 +-
18135 arch/x86/kernel/kgdb.c | 21 +-
18136 arch/x86/kernel/kprobes/core.c | 28 +-
18137 arch/x86/kernel/kprobes/opt.c | 16 +-
18138 arch/x86/kernel/ksysfs.c | 2 +-
18139 arch/x86/kernel/kvmclock.c | 20 +-
18140 arch/x86/kernel/ldt.c | 25 +
18141 arch/x86/kernel/livepatch.c | 12 +-
18142 arch/x86/kernel/machine_kexec_32.c | 6 +-
18143 arch/x86/kernel/mcount_64.S | 19 +-
18144 arch/x86/kernel/module.c | 78 +-
18145 arch/x86/kernel/msr.c | 2 +-
18146 arch/x86/kernel/nmi.c | 34 +-
18147 arch/x86/kernel/nmi_selftest.c | 4 +-
18148 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
18149 arch/x86/kernel/paravirt.c | 45 +-
18150 arch/x86/kernel/paravirt_patch_64.c | 8 +
18151 arch/x86/kernel/pci-calgary_64.c | 2 +-
18152 arch/x86/kernel/pci-iommu_table.c | 2 +-
18153 arch/x86/kernel/pci-swiotlb.c | 2 +-
18154 arch/x86/kernel/process.c | 80 +-
18155 arch/x86/kernel/process_32.c | 29 +-
18156 arch/x86/kernel/process_64.c | 14 +-
18157 arch/x86/kernel/ptrace.c | 20 +-
18158 arch/x86/kernel/pvclock.c | 8 +-
18159 arch/x86/kernel/reboot.c | 44 +-
18160 arch/x86/kernel/reboot_fixups_32.c | 2 +-
18161 arch/x86/kernel/relocate_kernel_64.S | 3 +-
18162 arch/x86/kernel/setup.c | 29 +-
18163 arch/x86/kernel/setup_percpu.c | 29 +-
18164 arch/x86/kernel/signal.c | 17 +-
18165 arch/x86/kernel/smp.c | 2 +-
18166 arch/x86/kernel/smpboot.c | 29 +-
18167 arch/x86/kernel/step.c | 6 +-
18168 arch/x86/kernel/sys_i386_32.c | 184 +
18169 arch/x86/kernel/sys_x86_64.c | 22 +-
18170 arch/x86/kernel/tboot.c | 14 +-
18171 arch/x86/kernel/time.c | 8 +-
18172 arch/x86/kernel/tls.c | 7 +-
18173 arch/x86/kernel/tracepoint.c | 4 +-
18174 arch/x86/kernel/traps.c | 53 +-
18175 arch/x86/kernel/tsc.c | 2 +-
18176 arch/x86/kernel/uprobes.c | 2 +-
18177 arch/x86/kernel/vm86_32.c | 6 +-
18178 arch/x86/kernel/vmlinux.lds.S | 153 +-
18179 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
18180 arch/x86/kernel/x86_init.c | 6 +-
18181 arch/x86/kvm/cpuid.c | 21 +-
18182 arch/x86/kvm/emulate.c | 2 +-
18183 arch/x86/kvm/lapic.c | 2 +-
18184 arch/x86/kvm/paging_tmpl.h | 2 +-
18185 arch/x86/kvm/svm.c | 10 +-
18186 arch/x86/kvm/vmx.c | 62 +-
18187 arch/x86/kvm/x86.c | 42 +-
18188 arch/x86/lguest/boot.c | 3 +-
18189 arch/x86/lib/atomic64_386_32.S | 164 +
18190 arch/x86/lib/atomic64_cx8_32.S | 98 +-
18191 arch/x86/lib/checksum_32.S | 99 +-
18192 arch/x86/lib/clear_page_64.S | 3 +
18193 arch/x86/lib/cmpxchg16b_emu.S | 3 +
18194 arch/x86/lib/copy_page_64.S | 14 +-
18195 arch/x86/lib/copy_user_64.S | 66 +-
18196 arch/x86/lib/csum-copy_64.S | 14 +-
18197 arch/x86/lib/csum-wrappers_64.c | 8 +-
18198 arch/x86/lib/getuser.S | 74 +-
18199 arch/x86/lib/insn.c | 8 +-
18200 arch/x86/lib/iomap_copy_64.S | 2 +
18201 arch/x86/lib/memcpy_64.S | 6 +
18202 arch/x86/lib/memmove_64.S | 3 +-
18203 arch/x86/lib/memset_64.S | 3 +
18204 arch/x86/lib/mmx_32.c | 243 +-
18205 arch/x86/lib/msr-reg.S | 2 +
18206 arch/x86/lib/putuser.S | 87 +-
18207 arch/x86/lib/rwsem.S | 6 +-
18208 arch/x86/lib/usercopy_32.c | 359 +-
18209 arch/x86/lib/usercopy_64.c | 20 +-
18210 arch/x86/math-emu/fpu_aux.c | 2 +-
18211 arch/x86/math-emu/fpu_entry.c | 4 +-
18212 arch/x86/math-emu/fpu_system.h | 2 +-
18213 arch/x86/mm/Makefile | 4 +
18214 arch/x86/mm/extable.c | 26 +-
18215 arch/x86/mm/fault.c | 570 +-
18216 arch/x86/mm/gup.c | 6 +-
18217 arch/x86/mm/highmem_32.c | 6 +
18218 arch/x86/mm/hugetlbpage.c | 24 +-
18219 arch/x86/mm/init.c | 111 +-
18220 arch/x86/mm/init_32.c | 111 +-
18221 arch/x86/mm/init_64.c | 46 +-
18222 arch/x86/mm/iomap_32.c | 4 +
18223 arch/x86/mm/ioremap.c | 52 +-
18224 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
18225 arch/x86/mm/mmap.c | 40 +-
18226 arch/x86/mm/mmio-mod.c | 10 +-
18227 arch/x86/mm/numa.c | 2 +-
18228 arch/x86/mm/pageattr.c | 38 +-
18229 arch/x86/mm/pat.c | 12 +-
18230 arch/x86/mm/pat_rbtree.c | 2 +-
18231 arch/x86/mm/pf_in.c | 10 +-
18232 arch/x86/mm/pgtable.c | 214 +-
18233 arch/x86/mm/pgtable_32.c | 3 +
18234 arch/x86/mm/setup_nx.c | 7 +
18235 arch/x86/mm/tlb.c | 4 +
18236 arch/x86/mm/uderef_64.c | 37 +
18237 arch/x86/net/bpf_jit.S | 11 +
18238 arch/x86/net/bpf_jit_comp.c | 13 +-
18239 arch/x86/oprofile/backtrace.c | 6 +-
18240 arch/x86/oprofile/nmi_int.c | 8 +-
18241 arch/x86/oprofile/op_model_amd.c | 8 +-
18242 arch/x86/oprofile/op_model_ppro.c | 7 +-
18243 arch/x86/oprofile/op_x86_model.h | 2 +-
18244 arch/x86/pci/intel_mid_pci.c | 2 +-
18245 arch/x86/pci/irq.c | 8 +-
18246 arch/x86/pci/pcbios.c | 144 +-
18247 arch/x86/platform/efi/efi_32.c | 24 +
18248 arch/x86/platform/efi/efi_64.c | 26 +-
18249 arch/x86/platform/efi/efi_stub_32.S | 64 +-
18250 arch/x86/platform/efi/efi_stub_64.S | 2 +
18251 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
18252 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
18253 arch/x86/platform/intel-mid/mfld.c | 4 +-
18254 arch/x86/platform/intel-mid/mrfl.c | 2 +-
18255 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
18256 arch/x86/platform/olpc/olpc_dt.c | 2 +-
18257 arch/x86/power/cpu.c | 11 +-
18258 arch/x86/realmode/init.c | 10 +-
18259 arch/x86/realmode/rm/Makefile | 3 +
18260 arch/x86/realmode/rm/header.S | 4 +-
18261 arch/x86/realmode/rm/reboot.S | 4 +
18262 arch/x86/realmode/rm/trampoline_32.S | 12 +-
18263 arch/x86/realmode/rm/trampoline_64.S | 3 +-
18264 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
18265 arch/x86/tools/Makefile | 2 +-
18266 arch/x86/tools/relocs.c | 96 +-
18267 arch/x86/um/mem_32.c | 2 +-
18268 arch/x86/um/tls_32.c | 2 +-
18269 arch/x86/xen/enlighten.c | 50 +-
18270 arch/x86/xen/mmu.c | 19 +-
18271 arch/x86/xen/smp.c | 16 +-
18272 arch/x86/xen/xen-asm_32.S | 2 +-
18273 arch/x86/xen/xen-head.S | 11 +
18274 arch/x86/xen/xen-ops.h | 2 -
18275 block/bio.c | 4 +-
18276 block/blk-iopoll.c | 2 +-
18277 block/blk-map.c | 2 +-
18278 block/blk-softirq.c | 2 +-
18279 block/bsg.c | 12 +-
18280 block/compat_ioctl.c | 4 +-
18281 block/genhd.c | 9 +-
18282 block/partitions/efi.c | 8 +-
18283 block/scsi_ioctl.c | 29 +-
18284 crypto/cryptd.c | 4 +-
18285 crypto/pcrypt.c | 2 +-
18286 crypto/zlib.c | 12 +-
18287 drivers/acpi/acpi_video.c | 2 +-
18288 drivers/acpi/apei/apei-internal.h | 2 +-
18289 drivers/acpi/apei/ghes.c | 4 +-
18290 drivers/acpi/bgrt.c | 6 +-
18291 drivers/acpi/blacklist.c | 4 +-
18292 drivers/acpi/bus.c | 4 +-
18293 drivers/acpi/device_pm.c | 4 +-
18294 drivers/acpi/ec.c | 2 +-
18295 drivers/acpi/pci_slot.c | 2 +-
18296 drivers/acpi/processor_idle.c | 2 +-
18297 drivers/acpi/processor_pdc.c | 2 +-
18298 drivers/acpi/sleep.c | 2 +-
18299 drivers/acpi/sysfs.c | 4 +-
18300 drivers/acpi/thermal.c | 2 +-
18301 drivers/acpi/video_detect.c | 7 +-
18302 drivers/ata/libata-core.c | 12 +-
18303 drivers/ata/libata-scsi.c | 2 +-
18304 drivers/ata/libata.h | 2 +-
18305 drivers/ata/pata_arasan_cf.c | 4 +-
18306 drivers/atm/adummy.c | 2 +-
18307 drivers/atm/ambassador.c | 8 +-
18308 drivers/atm/atmtcp.c | 14 +-
18309 drivers/atm/eni.c | 10 +-
18310 drivers/atm/firestream.c | 8 +-
18311 drivers/atm/fore200e.c | 14 +-
18312 drivers/atm/he.c | 18 +-
18313 drivers/atm/horizon.c | 4 +-
18314 drivers/atm/idt77252.c | 36 +-
18315 drivers/atm/iphase.c | 34 +-
18316 drivers/atm/lanai.c | 12 +-
18317 drivers/atm/nicstar.c | 46 +-
18318 drivers/atm/solos-pci.c | 4 +-
18319 drivers/atm/suni.c | 4 +-
18320 drivers/atm/uPD98402.c | 16 +-
18321 drivers/atm/zatm.c | 6 +-
18322 drivers/base/bus.c | 4 +-
18323 drivers/base/devtmpfs.c | 8 +-
18324 drivers/base/node.c | 2 +-
18325 drivers/base/platform-msi.c | 20 +-
18326 drivers/base/power/domain.c | 11 +-
18327 drivers/base/power/sysfs.c | 2 +-
18328 drivers/base/power/wakeup.c | 8 +-
18329 drivers/base/regmap/regmap-debugfs.c | 11 +-
18330 drivers/base/syscore.c | 4 +-
18331 drivers/block/cciss.c | 28 +-
18332 drivers/block/cciss.h | 2 +-
18333 drivers/block/cpqarray.c | 28 +-
18334 drivers/block/cpqarray.h | 2 +-
18335 drivers/block/drbd/drbd_bitmap.c | 2 +-
18336 drivers/block/drbd/drbd_int.h | 8 +-
18337 drivers/block/drbd/drbd_main.c | 12 +-
18338 drivers/block/drbd/drbd_nl.c | 4 +-
18339 drivers/block/drbd/drbd_receiver.c | 34 +-
18340 drivers/block/drbd/drbd_worker.c | 8 +-
18341 drivers/block/pktcdvd.c | 4 +-
18342 drivers/block/rbd.c | 2 +-
18343 drivers/bluetooth/btwilink.c | 2 +-
18344 drivers/bus/arm-cci.c | 12 +-
18345 drivers/cdrom/cdrom.c | 11 +-
18346 drivers/cdrom/gdrom.c | 1 -
18347 drivers/char/agp/compat_ioctl.c | 2 +-
18348 drivers/char/agp/frontend.c | 4 +-
18349 drivers/char/agp/intel-gtt.c | 4 +-
18350 drivers/char/hpet.c | 2 +-
18351 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
18352 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
18353 drivers/char/mem.c | 47 +-
18354 drivers/char/nvram.c | 2 +-
18355 drivers/char/pcmcia/synclink_cs.c | 16 +-
18356 drivers/char/random.c | 12 +-
18357 drivers/char/sonypi.c | 11 +-
18358 drivers/char/tpm/tpm_acpi.c | 3 +-
18359 drivers/char/tpm/tpm_eventlog.c | 4 +-
18360 drivers/char/virtio_console.c | 4 +-
18361 drivers/clk/clk-composite.c | 2 +-
18362 drivers/clk/samsung/clk.h | 2 +-
18363 drivers/clk/socfpga/clk-gate.c | 9 +-
18364 drivers/clk/socfpga/clk-pll.c | 9 +-
18365 drivers/clk/ti/clk.c | 8 +-
18366 drivers/cpufreq/acpi-cpufreq.c | 17 +-
18367 drivers/cpufreq/cpufreq-dt.c | 4 +-
18368 drivers/cpufreq/cpufreq.c | 30 +-
18369 drivers/cpufreq/cpufreq_governor.c | 2 +-
18370 drivers/cpufreq/cpufreq_governor.h | 4 +-
18371 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
18372 drivers/cpufreq/intel_pstate.c | 33 +-
18373 drivers/cpufreq/p4-clockmod.c | 12 +-
18374 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
18375 drivers/cpufreq/speedstep-centrino.c | 7 +-
18376 drivers/cpuidle/driver.c | 2 +-
18377 drivers/cpuidle/dt_idle_states.c | 2 +-
18378 drivers/cpuidle/governor.c | 2 +-
18379 drivers/cpuidle/sysfs.c | 2 +-
18380 drivers/crypto/hifn_795x.c | 4 +-
18381 drivers/devfreq/devfreq.c | 4 +-
18382 drivers/dma/sh/shdma-base.c | 4 +-
18383 drivers/dma/sh/shdmac.c | 2 +-
18384 drivers/edac/edac_device.c | 4 +-
18385 drivers/edac/edac_mc_sysfs.c | 2 +-
18386 drivers/edac/edac_pci.c | 4 +-
18387 drivers/edac/edac_pci_sysfs.c | 22 +-
18388 drivers/edac/mce_amd.h | 2 +-
18389 drivers/firewire/core-card.c | 6 +-
18390 drivers/firewire/core-device.c | 2 +-
18391 drivers/firewire/core-transaction.c | 1 +
18392 drivers/firewire/core.h | 1 +
18393 drivers/firmware/dmi-id.c | 2 +-
18394 drivers/firmware/dmi_scan.c | 12 +-
18395 drivers/firmware/efi/cper.c | 8 +-
18396 drivers/firmware/efi/efi.c | 12 +-
18397 drivers/firmware/efi/efivars.c | 2 +-
18398 drivers/firmware/efi/runtime-map.c | 2 +-
18399 drivers/firmware/google/gsmi.c | 2 +-
18400 drivers/firmware/google/memconsole.c | 7 +-
18401 drivers/firmware/memmap.c | 2 +-
18402 drivers/firmware/psci.c | 2 +-
18403 drivers/gpio/gpio-davinci.c | 6 +-
18404 drivers/gpio/gpio-em.c | 2 +-
18405 drivers/gpio/gpio-ich.c | 2 +-
18406 drivers/gpio/gpio-omap.c | 4 +-
18407 drivers/gpio/gpio-rcar.c | 2 +-
18408 drivers/gpio/gpio-vr41xx.c | 2 +-
18409 drivers/gpio/gpiolib.c | 12 +-
18410 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
18411 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
18412 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
18413 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
18414 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
18415 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
18416 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
18417 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
18418 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
18419 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
18420 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
18421 drivers/gpu/drm/drm_crtc.c | 2 +-
18422 drivers/gpu/drm/drm_drv.c | 2 +-
18423 drivers/gpu/drm/drm_fops.c | 12 +-
18424 drivers/gpu/drm/drm_global.c | 14 +-
18425 drivers/gpu/drm/drm_info.c | 13 +-
18426 drivers/gpu/drm/drm_ioc32.c | 13 +-
18427 drivers/gpu/drm/drm_ioctl.c | 2 +-
18428 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
18429 drivers/gpu/drm/i810/i810_drv.h | 4 +-
18430 drivers/gpu/drm/i915/i915_dma.c | 2 +-
18431 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
18432 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
18433 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
18434 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
18435 drivers/gpu/drm/i915/intel_display.c | 26 +-
18436 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
18437 drivers/gpu/drm/mga/mga_drv.h | 4 +-
18438 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
18439 drivers/gpu/drm/mga/mga_irq.c | 8 +-
18440 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
18441 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
18442 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
18443 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
18444 drivers/gpu/drm/omapdrm/Makefile | 2 +-
18445 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
18446 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
18447 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
18448 drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +-
18449 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
18450 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
18451 drivers/gpu/drm/r128/r128_cce.c | 2 +-
18452 drivers/gpu/drm/r128/r128_drv.h | 4 +-
18453 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
18454 drivers/gpu/drm/r128/r128_irq.c | 4 +-
18455 drivers/gpu/drm/r128/r128_state.c | 4 +-
18456 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
18457 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
18458 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
18459 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
18460 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
18461 drivers/gpu/drm/radeon/radeon_state.c | 4 +-
18462 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
18463 drivers/gpu/drm/tegra/dc.c | 2 +-
18464 drivers/gpu/drm/tegra/dsi.c | 2 +-
18465 drivers/gpu/drm/tegra/hdmi.c | 2 +-
18466 drivers/gpu/drm/tegra/sor.c | 7 +-
18467 drivers/gpu/drm/tilcdc/Makefile | 6 +-
18468 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
18469 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
18470 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
18471 drivers/gpu/drm/udl/udl_fb.c | 1 -
18472 drivers/gpu/drm/via/via_drv.h | 4 +-
18473 drivers/gpu/drm/via/via_irq.c | 18 +-
18474 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
18475 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
18476 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
18477 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
18478 drivers/gpu/vga/vga_switcheroo.c | 4 +-
18479 drivers/hid/hid-core.c | 4 +-
18480 drivers/hid/hid-sensor-custom.c | 2 +-
18481 drivers/hv/channel.c | 2 +-
18482 drivers/hv/hv.c | 4 +-
18483 drivers/hv/hv_balloon.c | 18 +-
18484 drivers/hv/hyperv_vmbus.h | 2 +-
18485 drivers/hwmon/acpi_power_meter.c | 6 +-
18486 drivers/hwmon/applesmc.c | 2 +-
18487 drivers/hwmon/asus_atk0110.c | 10 +-
18488 drivers/hwmon/coretemp.c | 2 +-
18489 drivers/hwmon/dell-smm-hwmon.c | 2 +-
18490 drivers/hwmon/ibmaem.c | 2 +-
18491 drivers/hwmon/iio_hwmon.c | 2 +-
18492 drivers/hwmon/nct6683.c | 6 +-
18493 drivers/hwmon/nct6775.c | 6 +-
18494 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
18495 drivers/hwmon/sht15.c | 12 +-
18496 drivers/hwmon/via-cputemp.c | 2 +-
18497 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
18498 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
18499 drivers/i2c/i2c-dev.c | 2 +-
18500 drivers/ide/ide-cd.c | 2 +-
18501 drivers/ide/ide-disk.c | 2 +-
18502 drivers/iio/industrialio-core.c | 2 +-
18503 drivers/iio/magnetometer/ak8975.c | 2 +-
18504 drivers/infiniband/core/cm.c | 32 +-
18505 drivers/infiniband/core/fmr_pool.c | 20 +-
18506 drivers/infiniband/core/uverbs_cmd.c | 3 +
18507 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
18508 drivers/infiniband/hw/mlx4/mad.c | 2 +-
18509 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
18510 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
18511 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
18512 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
18513 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
18514 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
18515 drivers/infiniband/hw/nes/nes.c | 4 +-
18516 drivers/infiniband/hw/nes/nes.h | 40 +-
18517 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
18518 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
18519 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
18520 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
18521 drivers/infiniband/hw/qib/qib.h | 1 +
18522 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
18523 drivers/input/gameport/gameport.c | 4 +-
18524 drivers/input/input.c | 4 +-
18525 drivers/input/joystick/sidewinder.c | 1 +
18526 drivers/input/joystick/xpad.c | 4 +-
18527 drivers/input/misc/ims-pcu.c | 4 +-
18528 drivers/input/mouse/psmouse.h | 2 +-
18529 drivers/input/mousedev.c | 2 +-
18530 drivers/input/serio/serio.c | 4 +-
18531 drivers/input/serio/serio_raw.c | 4 +-
18532 drivers/input/touchscreen/htcpen.c | 2 +-
18533 drivers/iommu/arm-smmu-v3.c | 2 +-
18534 drivers/iommu/arm-smmu.c | 43 +-
18535 drivers/iommu/io-pgtable-arm.c | 101 +-
18536 drivers/iommu/io-pgtable.c | 11 +-
18537 drivers/iommu/io-pgtable.h | 19 +-
18538 drivers/iommu/iommu.c | 2 +-
18539 drivers/iommu/ipmmu-vmsa.c | 13 +-
18540 drivers/iommu/irq_remapping.c | 2 +-
18541 drivers/irqchip/irq-gic.c | 2 +-
18542 drivers/irqchip/irq-i8259.c | 2 +-
18543 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
18544 drivers/irqchip/irq-renesas-irqc.c | 2 +-
18545 drivers/isdn/capi/capi.c | 10 +-
18546 drivers/isdn/gigaset/interface.c | 8 +-
18547 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
18548 drivers/isdn/hardware/avm/b1.c | 4 +-
18549 drivers/isdn/i4l/isdn_common.c | 2 +
18550 drivers/isdn/i4l/isdn_tty.c | 22 +-
18551 drivers/isdn/icn/icn.c | 2 +-
18552 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
18553 drivers/lguest/core.c | 10 +-
18554 drivers/lguest/page_tables.c | 2 +-
18555 drivers/lguest/x86/core.c | 12 +-
18556 drivers/lguest/x86/switcher_32.S | 27 +-
18557 drivers/md/bcache/closure.h | 2 +-
18558 drivers/md/bitmap.c | 2 +-
18559 drivers/md/dm-ioctl.c | 2 +-
18560 drivers/md/dm-raid1.c | 18 +-
18561 drivers/md/dm-stats.c | 6 +-
18562 drivers/md/dm-stripe.c | 10 +-
18563 drivers/md/dm-table.c | 2 +-
18564 drivers/md/dm-thin-metadata.c | 4 +-
18565 drivers/md/dm.c | 16 +-
18566 drivers/md/md.c | 26 +-
18567 drivers/md/md.h | 6 +-
18568 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
18569 drivers/md/persistent-data/dm-space-map.h | 1 +
18570 drivers/md/raid1.c | 4 +-
18571 drivers/md/raid10.c | 18 +-
18572 drivers/md/raid5.c | 22 +-
18573 drivers/media/dvb-core/dvbdev.c | 2 +-
18574 drivers/media/dvb-frontends/af9033.h | 2 +-
18575 drivers/media/dvb-frontends/dib3000.h | 2 +-
18576 drivers/media/dvb-frontends/dib7000p.h | 2 +-
18577 drivers/media/dvb-frontends/dib8000.h | 2 +-
18578 drivers/media/pci/cx88/cx88-video.c | 6 +-
18579 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
18580 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
18581 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
18582 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
18583 drivers/media/pci/tw68/tw68-core.c | 2 +-
18584 drivers/media/platform/omap/omap_vout.c | 11 +-
18585 drivers/media/platform/s5p-tv/mixer.h | 2 +-
18586 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
18587 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
18588 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
18589 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
18590 drivers/media/radio/radio-cadet.c | 2 +
18591 drivers/media/radio/radio-maxiradio.c | 2 +-
18592 drivers/media/radio/radio-shark.c | 2 +-
18593 drivers/media/radio/radio-shark2.c | 2 +-
18594 drivers/media/radio/radio-si476x.c | 2 +-
18595 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
18596 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
18597 drivers/media/v4l2-core/v4l2-device.c | 4 +-
18598 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
18599 drivers/memory/omap-gpmc.c | 21 +-
18600 drivers/message/fusion/mptsas.c | 34 +-
18601 drivers/mfd/ab8500-debugfs.c | 2 +-
18602 drivers/mfd/kempld-core.c | 2 +-
18603 drivers/mfd/max8925-i2c.c | 2 +-
18604 drivers/mfd/tps65910.c | 2 +-
18605 drivers/mfd/twl4030-irq.c | 9 +-
18606 drivers/mfd/wm5110-tables.c | 2 +-
18607 drivers/mfd/wm8998-tables.c | 2 +-
18608 drivers/misc/c2port/core.c | 4 +-
18609 drivers/misc/kgdbts.c | 4 +-
18610 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
18611 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
18612 drivers/misc/mic/scif/scif_rb.c | 8 +-
18613 drivers/misc/sgi-gru/gruhandles.c | 4 +-
18614 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
18615 drivers/misc/sgi-gru/grutables.h | 154 +-
18616 drivers/misc/sgi-xp/xp.h | 2 +-
18617 drivers/misc/sgi-xp/xpc.h | 3 +-
18618 drivers/misc/sgi-xp/xpc_main.c | 2 +-
18619 drivers/mmc/card/block.c | 2 +-
18620 drivers/mmc/host/dw_mmc.h | 2 +-
18621 drivers/mmc/host/mmci.c | 4 +-
18622 drivers/mmc/host/omap_hsmmc.c | 4 +-
18623 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
18624 drivers/mmc/host/sdhci-s3c.c | 8 +-
18625 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
18626 drivers/mtd/nand/denali.c | 1 +
18627 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
18628 drivers/mtd/nftlmount.c | 1 +
18629 drivers/mtd/sm_ftl.c | 2 +-
18630 drivers/net/bonding/bond_netlink.c | 2 +-
18631 drivers/net/caif/caif_hsi.c | 2 +-
18632 drivers/net/can/Kconfig | 2 +-
18633 drivers/net/can/dev.c | 2 +-
18634 drivers/net/can/vcan.c | 2 +-
18635 drivers/net/dummy.c | 2 +-
18636 drivers/net/ethernet/8390/ax88796.c | 4 +-
18637 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
18638 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
18639 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
18640 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
18641 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
18642 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
18643 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
18644 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
18645 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
18646 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
18647 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
18648 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
18649 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
18650 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
18651 drivers/net/ethernet/broadcom/tg3.h | 1 +
18652 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
18653 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
18654 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
18655 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
18656 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
18657 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
18658 drivers/net/ethernet/faraday/ftmac100.c | 2 +
18659 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
18660 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
18661 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
18662 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
18663 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
18664 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
18665 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
18666 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
18667 drivers/net/ethernet/realtek/r8169.c | 8 +-
18668 drivers/net/ethernet/sfc/ptp.c | 2 +-
18669 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
18670 drivers/net/ethernet/via/via-rhine.c | 2 +-
18671 drivers/net/geneve.c | 2 +-
18672 drivers/net/hyperv/hyperv_net.h | 2 +-
18673 drivers/net/hyperv/rndis_filter.c | 4 +-
18674 drivers/net/ifb.c | 2 +-
18675 drivers/net/ipvlan/ipvlan_core.c | 2 +-
18676 drivers/net/macvlan.c | 20 +-
18677 drivers/net/macvtap.c | 6 +-
18678 drivers/net/nlmon.c | 2 +-
18679 drivers/net/phy/phy_device.c | 6 +-
18680 drivers/net/ppp/ppp_generic.c | 4 +-
18681 drivers/net/slip/slhc.c | 2 +-
18682 drivers/net/team/team.c | 4 +-
18683 drivers/net/tun.c | 7 +-
18684 drivers/net/usb/hso.c | 23 +-
18685 drivers/net/usb/r8152.c | 2 +-
18686 drivers/net/usb/sierra_net.c | 4 +-
18687 drivers/net/virtio_net.c | 2 +-
18688 drivers/net/vrf.c | 2 +-
18689 drivers/net/vxlan.c | 4 +-
18690 drivers/net/wimax/i2400m/rx.c | 2 +-
18691 drivers/net/wireless/airo.c | 2 +-
18692 drivers/net/wireless/at76c50x-usb.c | 2 +-
18693 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
18694 drivers/net/wireless/ath/ath10k/htc.c | 7 +-
18695 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
18696 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
18697 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
18698 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
18699 drivers/net/wireless/ath/ath9k/main.c | 22 +-
18700 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
18701 drivers/net/wireless/b43/phy_lp.c | 2 +-
18702 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
18703 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
18704 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
18705 drivers/net/wireless/mac80211_hwsim.c | 28 +-
18706 drivers/net/wireless/rndis_wlan.c | 2 +-
18707 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
18708 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
18709 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
18710 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
18711 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
18712 drivers/nfc/nfcwilink.c | 2 +-
18713 drivers/of/fdt.c | 4 +-
18714 drivers/oprofile/buffer_sync.c | 8 +-
18715 drivers/oprofile/event_buffer.c | 2 +-
18716 drivers/oprofile/oprof.c | 2 +-
18717 drivers/oprofile/oprofile_stats.c | 10 +-
18718 drivers/oprofile/oprofile_stats.h | 10 +-
18719 drivers/oprofile/oprofilefs.c | 6 +-
18720 drivers/oprofile/timer_int.c | 2 +-
18721 drivers/parport/procfs.c | 4 +-
18722 drivers/pci/host/pci-host-generic.c | 24 +-
18723 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
18724 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
18725 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
18726 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
18727 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
18728 drivers/pci/hotplug/pciehp_core.c | 2 +-
18729 drivers/pci/msi.c | 22 +-
18730 drivers/pci/pci-sysfs.c | 6 +-
18731 drivers/pci/pci.h | 2 +-
18732 drivers/pci/pcie/aspm.c | 6 +-
18733 drivers/pci/pcie/portdrv_pci.c | 2 +-
18734 drivers/pci/probe.c | 2 +-
18735 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
18736 drivers/pinctrl/pinctrl-at91.c | 5 +-
18737 drivers/platform/chrome/chromeos_pstore.c | 2 +-
18738 drivers/platform/x86/alienware-wmi.c | 4 +-
18739 drivers/platform/x86/compal-laptop.c | 2 +-
18740 drivers/platform/x86/hdaps.c | 2 +-
18741 drivers/platform/x86/ibm_rtl.c | 2 +-
18742 drivers/platform/x86/intel_oaktrail.c | 2 +-
18743 drivers/platform/x86/msi-laptop.c | 16 +-
18744 drivers/platform/x86/msi-wmi.c | 2 +-
18745 drivers/platform/x86/samsung-laptop.c | 2 +-
18746 drivers/platform/x86/samsung-q10.c | 2 +-
18747 drivers/platform/x86/sony-laptop.c | 14 +-
18748 drivers/platform/x86/thinkpad_acpi.c | 2 +-
18749 drivers/pnp/pnpbios/bioscalls.c | 14 +-
18750 drivers/pnp/pnpbios/core.c | 2 +-
18751 drivers/power/pda_power.c | 7 +-
18752 drivers/power/power_supply.h | 4 +-
18753 drivers/power/power_supply_core.c | 7 +-
18754 drivers/power/power_supply_sysfs.c | 6 +-
18755 drivers/power/reset/at91-reset.c | 9 +-
18756 drivers/powercap/powercap_sys.c | 136 +-
18757 drivers/ptp/ptp_private.h | 2 +-
18758 drivers/ptp/ptp_sysfs.c | 2 +-
18759 drivers/regulator/core.c | 4 +-
18760 drivers/regulator/max8660.c | 6 +-
18761 drivers/regulator/max8973-regulator.c | 16 +-
18762 drivers/regulator/mc13892-regulator.c | 8 +-
18763 drivers/rtc/rtc-armada38x.c | 7 +-
18764 drivers/rtc/rtc-cmos.c | 4 +-
18765 drivers/rtc/rtc-ds1307.c | 2 +-
18766 drivers/rtc/rtc-m48t59.c | 4 +-
18767 drivers/rtc/rtc-test.c | 6 +-
18768 drivers/scsi/be2iscsi/be_main.c | 2 +-
18769 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
18770 drivers/scsi/bfa/bfa_ioc.h | 4 +-
18771 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
18772 drivers/scsi/hosts.c | 4 +-
18773 drivers/scsi/hpsa.c | 38 +-
18774 drivers/scsi/hpsa.h | 2 +-
18775 drivers/scsi/libfc/fc_exch.c | 50 +-
18776 drivers/scsi/libsas/sas_ata.c | 2 +-
18777 drivers/scsi/lpfc/lpfc.h | 8 +-
18778 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
18779 drivers/scsi/lpfc/lpfc_init.c | 6 +-
18780 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
18781 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
18782 drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +-
18783 drivers/scsi/pmcraid.c | 20 +-
18784 drivers/scsi/pmcraid.h | 8 +-
18785 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
18786 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
18787 drivers/scsi/qla2xxx/qla_os.c | 6 +-
18788 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
18789 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
18790 drivers/scsi/scsi.c | 2 +-
18791 drivers/scsi/scsi_lib.c | 8 +-
18792 drivers/scsi/scsi_sysfs.c | 2 +-
18793 drivers/scsi/scsi_transport_fc.c | 8 +-
18794 drivers/scsi/scsi_transport_iscsi.c | 6 +-
18795 drivers/scsi/scsi_transport_srp.c | 6 +-
18796 drivers/scsi/sd.c | 6 +-
18797 drivers/scsi/sg.c | 2 +-
18798 drivers/scsi/sr.c | 21 +-
18799 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
18800 drivers/spi/spi.c | 2 +-
18801 drivers/staging/android/timed_output.c | 6 +-
18802 drivers/staging/comedi/comedi_fops.c | 8 +-
18803 drivers/staging/fbtft/fbtft-core.c | 2 +-
18804 drivers/staging/fbtft/fbtft.h | 2 +-
18805 drivers/staging/gdm724x/gdm_tty.c | 2 +-
18806 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
18807 drivers/staging/iio/adc/ad7280a.c | 4 +-
18808 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
18809 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
18810 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
18811 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
18812 drivers/staging/lustre/lustre/include/obd.h | 2 +-
18813 drivers/staging/octeon/ethernet-rx.c | 20 +-
18814 drivers/staging/octeon/ethernet.c | 8 +-
18815 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
18816 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
18817 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
18818 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
18819 drivers/staging/sm750fb/sm750.c | 14 +-
18820 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
18821 drivers/target/sbp/sbp_target.c | 4 +-
18822 drivers/thermal/cpu_cooling.c | 9 +-
18823 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
18824 drivers/thermal/of-thermal.c | 17 +-
18825 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
18826 drivers/tty/cyclades.c | 6 +-
18827 drivers/tty/hvc/hvc_console.c | 14 +-
18828 drivers/tty/hvc/hvcs.c | 21 +-
18829 drivers/tty/hvc/hvsi.c | 22 +-
18830 drivers/tty/hvc/hvsi_lib.c | 4 +-
18831 drivers/tty/ipwireless/tty.c | 27 +-
18832 drivers/tty/moxa.c | 2 +-
18833 drivers/tty/n_gsm.c | 4 +-
18834 drivers/tty/n_tty.c | 3 +-
18835 drivers/tty/pty.c | 4 +-
18836 drivers/tty/rocket.c | 6 +-
18837 drivers/tty/serial/8250/8250_core.c | 10 +-
18838 drivers/tty/serial/ifx6x60.c | 2 +-
18839 drivers/tty/serial/ioc4_serial.c | 6 +-
18840 drivers/tty/serial/kgdb_nmi.c | 4 +-
18841 drivers/tty/serial/kgdboc.c | 32 +-
18842 drivers/tty/serial/msm_serial.c | 4 +-
18843 drivers/tty/serial/samsung.c | 9 +-
18844 drivers/tty/serial/serial_core.c | 8 +-
18845 drivers/tty/synclink.c | 34 +-
18846 drivers/tty/synclink_gt.c | 28 +-
18847 drivers/tty/synclinkmp.c | 34 +-
18848 drivers/tty/tty_io.c | 2 +-
18849 drivers/tty/tty_ldisc.c | 8 +-
18850 drivers/tty/tty_port.c | 22 +-
18851 drivers/uio/uio.c | 13 +-
18852 drivers/usb/atm/cxacru.c | 2 +-
18853 drivers/usb/atm/usbatm.c | 24 +-
18854 drivers/usb/class/cdc-acm.h | 2 +-
18855 drivers/usb/core/devices.c | 6 +-
18856 drivers/usb/core/devio.c | 12 +-
18857 drivers/usb/core/hcd.c | 4 +-
18858 drivers/usb/core/sysfs.c | 2 +-
18859 drivers/usb/core/usb.c | 2 +-
18860 drivers/usb/early/ehci-dbgp.c | 16 +-
18861 drivers/usb/gadget/function/u_serial.c | 22 +-
18862 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
18863 drivers/usb/host/ehci-hcd.c | 2 +-
18864 drivers/usb/host/ehci-hub.c | 4 +-
18865 drivers/usb/host/ehci-q.c | 4 +-
18866 drivers/usb/host/fotg210-hcd.c | 2 +-
18867 drivers/usb/host/fusbh200-hcd.c | 2 +-
18868 drivers/usb/host/hwa-hc.c | 2 +-
18869 drivers/usb/host/ohci-hcd.c | 2 +-
18870 drivers/usb/host/r8a66597.h | 2 +-
18871 drivers/usb/host/uhci-hcd.c | 2 +-
18872 drivers/usb/host/xhci-pci.c | 2 +-
18873 drivers/usb/host/xhci.c | 2 +-
18874 drivers/usb/misc/appledisplay.c | 4 +-
18875 drivers/usb/serial/console.c | 8 +-
18876 drivers/usb/storage/transport.c | 2 +-
18877 drivers/usb/storage/usb.c | 2 +-
18878 drivers/usb/storage/usb.h | 2 +-
18879 drivers/usb/usbip/vhci.h | 2 +-
18880 drivers/usb/usbip/vhci_hcd.c | 6 +-
18881 drivers/usb/usbip/vhci_rx.c | 2 +-
18882 drivers/usb/wusbcore/wa-hc.h | 4 +-
18883 drivers/usb/wusbcore/wa-xfer.c | 2 +-
18884 drivers/vfio/vfio.c | 2 +-
18885 drivers/vhost/vringh.c | 20 +-
18886 drivers/video/backlight/kb3886_bl.c | 2 +-
18887 drivers/video/console/fbcon.c | 2 +-
18888 drivers/video/fbdev/aty/aty128fb.c | 2 +-
18889 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
18890 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
18891 drivers/video/fbdev/core/fb_defio.c | 6 +-
18892 drivers/video/fbdev/core/fbmem.c | 2 +-
18893 drivers/video/fbdev/hyperv_fb.c | 4 +-
18894 drivers/video/fbdev/i810/i810_accel.c | 1 +
18895 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
18896 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
18897 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
18898 drivers/video/fbdev/omap2/dss/display.c | 8 +-
18899 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
18900 drivers/video/fbdev/smscufx.c | 4 +-
18901 drivers/video/fbdev/udlfb.c | 36 +-
18902 drivers/video/fbdev/uvesafb.c | 52 +-
18903 drivers/video/fbdev/vesafb.c | 58 +-
18904 drivers/video/fbdev/via/via_clock.h | 2 +-
18905 drivers/xen/events/events_base.c | 6 +-
18906 drivers/xen/evtchn.c | 4 +-
18907 fs/Kconfig.binfmt | 2 +-
18908 fs/afs/inode.c | 4 +-
18909 fs/aio.c | 2 +-
18910 fs/autofs4/waitq.c | 2 +-
18911 fs/befs/endian.h | 6 +-
18912 fs/binfmt_aout.c | 23 +-
18913 fs/binfmt_elf.c | 670 +-
18914 fs/binfmt_elf_fdpic.c | 4 +-
18915 fs/block_dev.c | 2 +-
18916 fs/btrfs/ctree.c | 9 +-
18917 fs/btrfs/delayed-inode.c | 9 +-
18918 fs/btrfs/delayed-inode.h | 6 +-
18919 fs/btrfs/file.c | 10 +-
18920 fs/btrfs/inode.c | 14 +-
18921 fs/btrfs/super.c | 2 +-
18922 fs/btrfs/sysfs.c | 2 +-
18923 fs/btrfs/tests/free-space-tests.c | 8 +-
18924 fs/btrfs/tree-log.h | 2 +-
18925 fs/buffer.c | 2 +-
18926 fs/cachefiles/bind.c | 6 +-
18927 fs/cachefiles/daemon.c | 8 +-
18928 fs/cachefiles/internal.h | 12 +-
18929 fs/cachefiles/namei.c | 2 +-
18930 fs/cachefiles/proc.c | 12 +-
18931 fs/ceph/dir.c | 12 +-
18932 fs/ceph/super.c | 4 +-
18933 fs/cifs/cifs_debug.c | 12 +-
18934 fs/cifs/cifsfs.c | 8 +-
18935 fs/cifs/cifsglob.h | 54 +-
18936 fs/cifs/file.c | 10 +-
18937 fs/cifs/misc.c | 4 +-
18938 fs/cifs/smb1ops.c | 80 +-
18939 fs/cifs/smb2ops.c | 84 +-
18940 fs/cifs/smb2pdu.c | 3 +-
18941 fs/coda/cache.c | 10 +-
18942 fs/compat.c | 4 +-
18943 fs/compat_binfmt_elf.c | 2 +
18944 fs/compat_ioctl.c | 12 +-
18945 fs/configfs/dir.c | 10 +-
18946 fs/coredump.c | 16 +-
18947 fs/dcache.c | 51 +-
18948 fs/ecryptfs/inode.c | 2 +-
18949 fs/ecryptfs/miscdev.c | 2 +-
18950 fs/exec.c | 362 +-
18951 fs/ext2/xattr.c | 5 +-
18952 fs/ext4/ext4.h | 20 +-
18953 fs/ext4/mballoc.c | 44 +-
18954 fs/ext4/resize.c | 16 +-
18955 fs/ext4/super.c | 4 +-
18956 fs/ext4/xattr.c | 5 +-
18957 fs/fhandle.c | 3 +-
18958 fs/file.c | 4 +-
18959 fs/fs_struct.c | 8 +-
18960 fs/fscache/cookie.c | 40 +-
18961 fs/fscache/internal.h | 202 +-
18962 fs/fscache/object.c | 26 +-
18963 fs/fscache/operation.c | 38 +-
18964 fs/fscache/page.c | 110 +-
18965 fs/fscache/stats.c | 348 +-
18966 fs/fuse/cuse.c | 10 +-
18967 fs/fuse/dev.c | 4 +-
18968 fs/gfs2/glock.c | 22 +-
18969 fs/gfs2/glops.c | 4 +-
18970 fs/gfs2/quota.c | 6 +-
18971 fs/hugetlbfs/inode.c | 13 +-
18972 fs/inode.c | 4 +-
18973 fs/jffs2/erase.c | 3 +-
18974 fs/jffs2/wbuf.c | 3 +-
18975 fs/jfs/super.c | 2 +-
18976 fs/kernfs/dir.c | 2 +-
18977 fs/kernfs/file.c | 20 +-
18978 fs/libfs.c | 10 +-
18979 fs/lockd/clntproc.c | 4 +-
18980 fs/namei.c | 16 +-
18981 fs/namespace.c | 16 +-
18982 fs/nfs/callback_xdr.c | 2 +-
18983 fs/nfs/inode.c | 6 +-
18984 fs/nfsd/nfs4proc.c | 2 +-
18985 fs/nfsd/nfs4xdr.c | 2 +-
18986 fs/nfsd/nfscache.c | 11 +-
18987 fs/nfsd/vfs.c | 6 +-
18988 fs/nls/nls_base.c | 26 +-
18989 fs/nls/nls_euc-jp.c | 6 +-
18990 fs/nls/nls_koi8-ru.c | 6 +-
18991 fs/notify/fanotify/fanotify_user.c | 4 +-
18992 fs/notify/notification.c | 4 +-
18993 fs/ntfs/dir.c | 2 +-
18994 fs/ntfs/super.c | 6 +-
18995 fs/ocfs2/localalloc.c | 2 +-
18996 fs/ocfs2/ocfs2.h | 10 +-
18997 fs/ocfs2/suballoc.c | 12 +-
18998 fs/ocfs2/super.c | 20 +-
18999 fs/pipe.c | 72 +-
19000 fs/posix_acl.c | 4 +-
19001 fs/proc/array.c | 20 +
19002 fs/proc/base.c | 4 +-
19003 fs/proc/kcore.c | 34 +-
19004 fs/proc/meminfo.c | 2 +-
19005 fs/proc/nommu.c | 2 +-
19006 fs/proc/proc_sysctl.c | 26 +-
19007 fs/proc/task_mmu.c | 39 +-
19008 fs/proc/task_nommu.c | 4 +-
19009 fs/proc/vmcore.c | 16 +-
19010 fs/qnx6/qnx6.h | 4 +-
19011 fs/quota/netlink.c | 4 +-
19012 fs/read_write.c | 2 +-
19013 fs/reiserfs/do_balan.c | 2 +-
19014 fs/reiserfs/procfs.c | 2 +-
19015 fs/reiserfs/reiserfs.h | 4 +-
19016 fs/seq_file.c | 4 +-
19017 fs/splice.c | 43 +-
19018 fs/squashfs/xattr.c | 12 +-
19019 fs/sysv/sysv.h | 2 +-
19020 fs/tracefs/inode.c | 8 +-
19021 fs/udf/misc.c | 2 +-
19022 fs/ufs/swab.h | 4 +-
19023 fs/userfaultfd.c | 2 +-
19024 fs/xattr.c | 21 +
19025 fs/xfs/libxfs/xfs_bmap.c | 2 +-
19026 fs/xfs/xfs_dir2_readdir.c | 7 +-
19027 fs/xfs/xfs_ioctl.c | 2 +-
19028 fs/xfs/xfs_linux.h | 4 +-
19029 include/asm-generic/4level-fixup.h | 2 +
19030 include/asm-generic/atomic-long.h | 156 +-
19031 include/asm-generic/atomic64.h | 12 +
19032 include/asm-generic/bitops/__fls.h | 2 +-
19033 include/asm-generic/bitops/fls.h | 2 +-
19034 include/asm-generic/bitops/fls64.h | 4 +-
19035 include/asm-generic/bug.h | 6 +-
19036 include/asm-generic/cache.h | 4 +-
19037 include/asm-generic/emergency-restart.h | 2 +-
19038 include/asm-generic/kmap_types.h | 4 +-
19039 include/asm-generic/local.h | 13 +
19040 include/asm-generic/pgtable-nopmd.h | 18 +-
19041 include/asm-generic/pgtable-nopud.h | 15 +-
19042 include/asm-generic/pgtable.h | 16 +
19043 include/asm-generic/sections.h | 1 +
19044 include/asm-generic/uaccess.h | 16 +
19045 include/asm-generic/vmlinux.lds.h | 15 +-
19046 include/crypto/algapi.h | 2 +-
19047 include/drm/drmP.h | 16 +-
19048 include/drm/drm_crtc_helper.h | 2 +-
19049 include/drm/drm_mm.h | 2 +-
19050 include/drm/i915_pciids.h | 2 +-
19051 include/drm/intel-gtt.h | 4 +-
19052 include/drm/ttm/ttm_memory.h | 2 +-
19053 include/drm/ttm/ttm_page_alloc.h | 1 +
19054 include/keys/asymmetric-subtype.h | 2 +-
19055 include/linux/atmdev.h | 4 +-
19056 include/linux/atomic.h | 17 +-
19057 include/linux/audit.h | 2 +-
19058 include/linux/average.h | 2 +-
19059 include/linux/binfmts.h | 3 +-
19060 include/linux/bitmap.h | 2 +-
19061 include/linux/bitops.h | 8 +-
19062 include/linux/blkdev.h | 2 +-
19063 include/linux/blktrace_api.h | 2 +-
19064 include/linux/cache.h | 8 +
19065 include/linux/cdrom.h | 1 -
19066 include/linux/cleancache.h | 2 +-
19067 include/linux/clk-provider.h | 1 +
19068 include/linux/compat.h | 6 +-
19069 include/linux/compiler-gcc.h | 28 +-
19070 include/linux/compiler.h | 157 +-
19071 include/linux/configfs.h | 2 +-
19072 include/linux/cpufreq.h | 3 +-
19073 include/linux/cpuidle.h | 5 +-
19074 include/linux/cpumask.h | 14 +-
19075 include/linux/crypto.h | 4 +-
19076 include/linux/ctype.h | 2 +-
19077 include/linux/dcache.h | 4 +-
19078 include/linux/decompress/mm.h | 2 +-
19079 include/linux/devfreq.h | 2 +-
19080 include/linux/device.h | 7 +-
19081 include/linux/dma-mapping.h | 2 +-
19082 include/linux/efi.h | 1 +
19083 include/linux/elf.h | 2 +
19084 include/linux/err.h | 4 +-
19085 include/linux/extcon.h | 2 +-
19086 include/linux/fb.h | 3 +-
19087 include/linux/fdtable.h | 2 +-
19088 include/linux/fs.h | 5 +-
19089 include/linux/fs_struct.h | 2 +-
19090 include/linux/fscache-cache.h | 2 +-
19091 include/linux/fscache.h | 2 +-
19092 include/linux/fsnotify.h | 2 +-
19093 include/linux/genhd.h | 4 +-
19094 include/linux/genl_magic_func.h | 2 +-
19095 include/linux/gfp.h | 12 +-
19096 include/linux/highmem.h | 12 +
19097 include/linux/hwmon-sysfs.h | 6 +-
19098 include/linux/i2c.h | 1 +
19099 include/linux/if_pppox.h | 2 +-
19100 include/linux/init.h | 12 +-
19101 include/linux/init_task.h | 7 +
19102 include/linux/interrupt.h | 6 +-
19103 include/linux/iommu.h | 2 +-
19104 include/linux/ioport.h | 2 +-
19105 include/linux/ipc.h | 2 +-
19106 include/linux/irq.h | 5 +-
19107 include/linux/irqdesc.h | 2 +-
19108 include/linux/irqdomain.h | 3 +
19109 include/linux/jiffies.h | 16 +-
19110 include/linux/key-type.h | 2 +-
19111 include/linux/kgdb.h | 6 +-
19112 include/linux/kmemleak.h | 4 +-
19113 include/linux/kobject.h | 3 +-
19114 include/linux/kobject_ns.h | 2 +-
19115 include/linux/kref.h | 2 +-
19116 include/linux/libata.h | 2 +-
19117 include/linux/linkage.h | 1 +
19118 include/linux/list.h | 15 +
19119 include/linux/lockref.h | 26 +-
19120 include/linux/math64.h | 10 +-
19121 include/linux/mempolicy.h | 7 +
19122 include/linux/mm.h | 102 +-
19123 include/linux/mm_types.h | 20 +
19124 include/linux/mmiotrace.h | 4 +-
19125 include/linux/mmzone.h | 2 +-
19126 include/linux/mod_devicetable.h | 4 +-
19127 include/linux/module.h | 69 +-
19128 include/linux/moduleloader.h | 16 +
19129 include/linux/moduleparam.h | 4 +-
19130 include/linux/net.h | 2 +-
19131 include/linux/netdevice.h | 7 +-
19132 include/linux/netfilter.h | 2 +-
19133 include/linux/netfilter/nfnetlink.h | 2 +-
19134 include/linux/nls.h | 4 +-
19135 include/linux/notifier.h | 3 +-
19136 include/linux/oprofile.h | 4 +-
19137 include/linux/padata.h | 2 +-
19138 include/linux/pci_hotplug.h | 3 +-
19139 include/linux/percpu.h | 2 +-
19140 include/linux/perf_event.h | 12 +-
19141 include/linux/pipe_fs_i.h | 8 +-
19142 include/linux/pm.h | 1 +
19143 include/linux/pm_domain.h | 4 +-
19144 include/linux/pm_runtime.h | 2 +-
19145 include/linux/pnp.h | 2 +-
19146 include/linux/poison.h | 4 +-
19147 include/linux/power/smartreflex.h | 2 +-
19148 include/linux/ppp-comp.h | 2 +-
19149 include/linux/preempt.h | 21 +
19150 include/linux/proc_ns.h | 2 +-
19151 include/linux/psci.h | 2 +-
19152 include/linux/quota.h | 2 +-
19153 include/linux/random.h | 19 +-
19154 include/linux/rculist.h | 16 +
19155 include/linux/reboot.h | 14 +-
19156 include/linux/regset.h | 3 +-
19157 include/linux/relay.h | 2 +-
19158 include/linux/rio.h | 2 +-
19159 include/linux/rmap.h | 4 +-
19160 include/linux/sched.h | 72 +-
19161 include/linux/sched/sysctl.h | 1 +
19162 include/linux/semaphore.h | 2 +-
19163 include/linux/seq_file.h | 1 +
19164 include/linux/signal.h | 2 +-
19165 include/linux/skbuff.h | 12 +-
19166 include/linux/slab.h | 47 +-
19167 include/linux/slab_def.h | 14 +-
19168 include/linux/slub_def.h | 2 +-
19169 include/linux/smp.h | 2 +
19170 include/linux/sock_diag.h | 2 +-
19171 include/linux/sonet.h | 2 +-
19172 include/linux/sunrpc/addr.h | 8 +-
19173 include/linux/sunrpc/clnt.h | 2 +-
19174 include/linux/sunrpc/svc.h | 2 +-
19175 include/linux/sunrpc/svc_rdma.h | 18 +-
19176 include/linux/sunrpc/svcauth.h | 2 +-
19177 include/linux/swapops.h | 10 +-
19178 include/linux/swiotlb.h | 3 +-
19179 include/linux/syscalls.h | 21 +-
19180 include/linux/syscore_ops.h | 2 +-
19181 include/linux/sysctl.h | 3 +-
19182 include/linux/sysfs.h | 9 +-
19183 include/linux/sysrq.h | 3 +-
19184 include/linux/tcp.h | 14 +-
19185 include/linux/thread_info.h | 7 +
19186 include/linux/tty.h | 4 +-
19187 include/linux/tty_driver.h | 2 +-
19188 include/linux/tty_ldisc.h | 2 +-
19189 include/linux/types.h | 16 +
19190 include/linux/uaccess.h | 6 +-
19191 include/linux/uio_driver.h | 2 +-
19192 include/linux/unaligned/access_ok.h | 24 +-
19193 include/linux/usb.h | 12 +-
19194 include/linux/usb/hcd.h | 1 +
19195 include/linux/usb/renesas_usbhs.h | 2 +-
19196 include/linux/vermagic.h | 21 +-
19197 include/linux/vga_switcheroo.h | 8 +-
19198 include/linux/vmalloc.h | 7 +-
19199 include/linux/vmstat.h | 24 +-
19200 include/linux/xattr.h | 5 +-
19201 include/linux/zlib.h | 3 +-
19202 include/media/v4l2-dev.h | 2 +-
19203 include/media/v4l2-device.h | 2 +-
19204 include/net/9p/transport.h | 2 +-
19205 include/net/bluetooth/l2cap.h | 2 +-
19206 include/net/bonding.h | 2 +-
19207 include/net/caif/cfctrl.h | 6 +-
19208 include/net/flow.h | 2 +-
19209 include/net/genetlink.h | 2 +-
19210 include/net/gro_cells.h | 2 +-
19211 include/net/inet_connection_sock.h | 2 +-
19212 include/net/inet_sock.h | 2 +-
19213 include/net/inetpeer.h | 2 +-
19214 include/net/ip_fib.h | 2 +-
19215 include/net/ip_vs.h | 8 +-
19216 include/net/ipv6.h | 2 +-
19217 include/net/irda/ircomm_tty.h | 1 +
19218 include/net/iucv/af_iucv.h | 2 +-
19219 include/net/llc_c_ac.h | 2 +-
19220 include/net/llc_c_ev.h | 4 +-
19221 include/net/llc_c_st.h | 2 +-
19222 include/net/llc_s_ac.h | 2 +-
19223 include/net/llc_s_st.h | 2 +-
19224 include/net/mac80211.h | 4 +-
19225 include/net/neighbour.h | 2 +-
19226 include/net/net_namespace.h | 18 +-
19227 include/net/netlink.h | 2 +-
19228 include/net/netns/conntrack.h | 6 +-
19229 include/net/netns/ipv4.h | 4 +-
19230 include/net/netns/ipv6.h | 4 +-
19231 include/net/netns/xfrm.h | 2 +-
19232 include/net/ping.h | 2 +-
19233 include/net/protocol.h | 4 +-
19234 include/net/rtnetlink.h | 2 +-
19235 include/net/sctp/checksum.h | 4 +-
19236 include/net/sctp/sm.h | 4 +-
19237 include/net/sctp/structs.h | 2 +-
19238 include/net/sock.h | 12 +-
19239 include/net/tcp.h | 8 +-
19240 include/net/xfrm.h | 13 +-
19241 include/rdma/iw_cm.h | 2 +-
19242 include/scsi/libfc.h | 3 +-
19243 include/scsi/scsi_device.h | 6 +-
19244 include/scsi/scsi_driver.h | 2 +-
19245 include/scsi/scsi_transport_fc.h | 3 +-
19246 include/scsi/sg.h | 2 +-
19247 include/sound/compress_driver.h | 2 +-
19248 include/sound/soc.h | 4 +-
19249 include/trace/events/irq.h | 4 +-
19250 include/uapi/linux/a.out.h | 8 +
19251 include/uapi/linux/bcache.h | 5 +-
19252 include/uapi/linux/byteorder/little_endian.h | 28 +-
19253 include/uapi/linux/connector.h | 2 +-
19254 include/uapi/linux/elf.h | 28 +
19255 include/uapi/linux/screen_info.h | 3 +-
19256 include/uapi/linux/swab.h | 6 +-
19257 include/uapi/linux/xattr.h | 4 +
19258 include/video/udlfb.h | 8 +-
19259 include/video/uvesafb.h | 1 +
19260 init/Kconfig | 2 +-
19261 init/Makefile | 3 +
19262 init/do_mounts.c | 14 +-
19263 init/do_mounts.h | 8 +-
19264 init/do_mounts_initrd.c | 30 +-
19265 init/do_mounts_md.c | 6 +-
19266 init/init_task.c | 4 +
19267 init/initramfs.c | 38 +-
19268 init/main.c | 30 +-
19269 ipc/compat.c | 4 +-
19270 ipc/ipc_sysctl.c | 8 +-
19271 ipc/mq_sysctl.c | 4 +-
19272 ipc/sem.c | 4 +-
19273 ipc/shm.c | 6 +
19274 kernel/audit.c | 8 +-
19275 kernel/auditsc.c | 4 +-
19276 kernel/bpf/core.c | 7 +-
19277 kernel/capability.c | 3 +
19278 kernel/compat.c | 38 +-
19279 kernel/debug/debug_core.c | 16 +-
19280 kernel/debug/kdb/kdb_main.c | 4 +-
19281 kernel/events/core.c | 26 +-
19282 kernel/events/internal.h | 10 +-
19283 kernel/events/uprobes.c | 2 +-
19284 kernel/exit.c | 2 +-
19285 kernel/fork.c | 167 +-
19286 kernel/futex.c | 11 +-
19287 kernel/futex_compat.c | 2 +-
19288 kernel/gcov/base.c | 7 +-
19289 kernel/irq/manage.c | 2 +-
19290 kernel/irq/msi.c | 19 +-
19291 kernel/irq/spurious.c | 2 +-
19292 kernel/jump_label.c | 5 +
19293 kernel/kallsyms.c | 37 +-
19294 kernel/kexec.c | 3 +-
19295 kernel/kmod.c | 8 +-
19296 kernel/kprobes.c | 4 +-
19297 kernel/ksysfs.c | 2 +-
19298 kernel/locking/lockdep.c | 7 +-
19299 kernel/locking/mutex-debug.c | 12 +-
19300 kernel/locking/mutex-debug.h | 4 +-
19301 kernel/locking/mutex.c | 6 +-
19302 kernel/module.c | 422 +-
19303 kernel/notifier.c | 17 +-
19304 kernel/padata.c | 4 +-
19305 kernel/panic.c | 5 +-
19306 kernel/pid.c | 2 +-
19307 kernel/pid_namespace.c | 2 +-
19308 kernel/power/process.c | 12 +-
19309 kernel/profile.c | 14 +-
19310 kernel/ptrace.c | 8 +-
19311 kernel/rcu/rcutorture.c | 60 +-
19312 kernel/rcu/tiny.c | 4 +-
19313 kernel/rcu/tree.c | 44 +-
19314 kernel/rcu/tree.h | 14 +-
19315 kernel/rcu/tree_plugin.h | 14 +-
19316 kernel/rcu/tree_trace.c | 12 +-
19317 kernel/sched/auto_group.c | 4 +-
19318 kernel/sched/core.c | 45 +-
19319 kernel/sched/fair.c | 2 +-
19320 kernel/sched/sched.h | 2 +-
19321 kernel/signal.c | 12 +-
19322 kernel/smpboot.c | 4 +-
19323 kernel/softirq.c | 12 +-
19324 kernel/sys.c | 10 +-
19325 kernel/sysctl.c | 34 +-
19326 kernel/time/alarmtimer.c | 2 +-
19327 kernel/time/posix-cpu-timers.c | 4 +-
19328 kernel/time/posix-timers.c | 24 +-
19329 kernel/time/timer.c | 2 +-
19330 kernel/time/timer_stats.c | 10 +-
19331 kernel/trace/blktrace.c | 6 +-
19332 kernel/trace/ftrace.c | 15 +-
19333 kernel/trace/ring_buffer.c | 96 +-
19334 kernel/trace/trace.c | 2 +-
19335 kernel/trace/trace.h | 2 +-
19336 kernel/trace/trace_clock.c | 4 +-
19337 kernel/trace/trace_events.c | 1 -
19338 kernel/trace/trace_functions_graph.c | 4 +-
19339 kernel/trace/trace_mmiotrace.c | 8 +-
19340 kernel/trace/trace_output.c | 10 +-
19341 kernel/trace/trace_seq.c | 2 +-
19342 kernel/trace/trace_stack.c | 2 +-
19343 kernel/user_namespace.c | 2 +-
19344 kernel/utsname_sysctl.c | 2 +-
19345 kernel/watchdog.c | 2 +-
19346 kernel/workqueue.c | 2 +-
19347 lib/Kconfig.debug | 8 +-
19348 lib/Makefile | 2 +-
19349 lib/bitmap.c | 8 +-
19350 lib/bug.c | 2 +
19351 lib/debugobjects.c | 2 +-
19352 lib/decompress_bunzip2.c | 3 +-
19353 lib/decompress_unlzma.c | 4 +-
19354 lib/div64.c | 4 +-
19355 lib/dma-debug.c | 4 +-
19356 lib/inflate.c | 2 +-
19357 lib/ioremap.c | 4 +-
19358 lib/kobject.c | 4 +-
19359 lib/list_debug.c | 126 +-
19360 lib/lockref.c | 44 +-
19361 lib/percpu-refcount.c | 2 +-
19362 lib/radix-tree.c | 2 +-
19363 lib/random32.c | 2 +-
19364 lib/show_mem.c | 2 +-
19365 lib/strncpy_from_user.c | 2 +-
19366 lib/strnlen_user.c | 2 +-
19367 lib/swiotlb.c | 2 +-
19368 lib/usercopy.c | 6 +
19369 lib/vsprintf.c | 12 +-
19370 mm/Kconfig | 6 +-
19371 mm/backing-dev.c | 4 +-
19372 mm/debug.c | 3 +
19373 mm/filemap.c | 2 +-
19374 mm/gup.c | 13 +-
19375 mm/highmem.c | 6 +-
19376 mm/hugetlb.c | 70 +-
19377 mm/internal.h | 1 +
19378 mm/maccess.c | 4 +-
19379 mm/madvise.c | 37 +
19380 mm/memory-failure.c | 6 +-
19381 mm/memory.c | 424 +-
19382 mm/mempolicy.c | 25 +
19383 mm/mlock.c | 15 +-
19384 mm/mm_init.c | 2 +-
19385 mm/mmap.c | 582 +-
19386 mm/mprotect.c | 137 +-
19387 mm/mremap.c | 39 +-
19388 mm/nommu.c | 21 +-
19389 mm/page-writeback.c | 2 +-
19390 mm/page_alloc.c | 49 +-
19391 mm/percpu.c | 2 +-
19392 mm/process_vm_access.c | 14 +-
19393 mm/rmap.c | 45 +-
19394 mm/shmem.c | 19 +-
19395 mm/slab.c | 109 +-
19396 mm/slab.h | 22 +-
19397 mm/slab_common.c | 86 +-
19398 mm/slob.c | 218 +-
19399 mm/slub.c | 102 +-
19400 mm/sparse-vmemmap.c | 4 +-
19401 mm/sparse.c | 2 +-
19402 mm/swap.c | 2 +
19403 mm/swapfile.c | 12 +-
19404 mm/util.c | 6 +
19405 mm/vmalloc.c | 114 +-
19406 mm/vmstat.c | 12 +-
19407 net/8021q/vlan.c | 5 +-
19408 net/8021q/vlan_netlink.c | 2 +-
19409 net/9p/mod.c | 4 +-
19410 net/9p/trans_fd.c | 2 +-
19411 net/atm/atm_misc.c | 8 +-
19412 net/atm/lec.h | 2 +-
19413 net/atm/proc.c | 6 +-
19414 net/atm/resources.c | 4 +-
19415 net/ax25/sysctl_net_ax25.c | 2 +-
19416 net/batman-adv/bat_iv_ogm.c | 8 +-
19417 net/batman-adv/fragmentation.c | 2 +-
19418 net/batman-adv/soft-interface.c | 8 +-
19419 net/batman-adv/types.h | 6 +-
19420 net/bluetooth/hci_sock.c | 2 +-
19421 net/bluetooth/l2cap_core.c | 6 +-
19422 net/bluetooth/l2cap_sock.c | 12 +-
19423 net/bluetooth/rfcomm/sock.c | 4 +-
19424 net/bluetooth/rfcomm/tty.c | 4 +-
19425 net/bridge/br_netlink.c | 2 +-
19426 net/bridge/netfilter/ebtables.c | 6 +-
19427 net/caif/cfctrl.c | 11 +-
19428 net/caif/chnl_net.c | 2 +-
19429 net/can/af_can.c | 2 +-
19430 net/can/gw.c | 6 +-
19431 net/ceph/messenger.c | 4 +-
19432 net/compat.c | 24 +-
19433 net/core/datagram.c | 2 +-
19434 net/core/dev.c | 16 +-
19435 net/core/filter.c | 2 +-
19436 net/core/flow.c | 6 +-
19437 net/core/neighbour.c | 4 +-
19438 net/core/net-sysfs.c | 2 +-
19439 net/core/net_namespace.c | 8 +-
19440 net/core/netpoll.c | 4 +-
19441 net/core/rtnetlink.c | 15 +-
19442 net/core/scm.c | 14 +-
19443 net/core/skbuff.c | 8 +-
19444 net/core/sock.c | 28 +-
19445 net/core/sock_diag.c | 15 +-
19446 net/core/sysctl_net_core.c | 22 +-
19447 net/decnet/af_decnet.c | 1 +
19448 net/decnet/sysctl_net_decnet.c | 4 +-
19449 net/dsa/dsa.c | 2 +-
19450 net/hsr/hsr_netlink.c | 2 +-
19451 net/ieee802154/6lowpan/core.c | 2 +-
19452 net/ieee802154/6lowpan/reassembly.c | 14 +-
19453 net/ipv4/af_inet.c | 2 +-
19454 net/ipv4/devinet.c | 18 +-
19455 net/ipv4/fib_frontend.c | 6 +-
19456 net/ipv4/fib_semantics.c | 2 +-
19457 net/ipv4/inet_connection_sock.c | 4 +-
19458 net/ipv4/inet_timewait_sock.c | 2 +-
19459 net/ipv4/inetpeer.c | 2 +-
19460 net/ipv4/ip_fragment.c | 15 +-
19461 net/ipv4/ip_gre.c | 6 +-
19462 net/ipv4/ip_sockglue.c | 2 +-
19463 net/ipv4/ip_vti.c | 4 +-
19464 net/ipv4/ipconfig.c | 6 +-
19465 net/ipv4/ipip.c | 4 +-
19466 net/ipv4/netfilter/arp_tables.c | 12 +-
19467 net/ipv4/netfilter/ip_tables.c | 12 +-
19468 net/ipv4/ping.c | 14 +-
19469 net/ipv4/raw.c | 14 +-
19470 net/ipv4/route.c | 32 +-
19471 net/ipv4/sysctl_net_ipv4.c | 22 +-
19472 net/ipv4/tcp_input.c | 6 +-
19473 net/ipv4/tcp_probe.c | 2 +-
19474 net/ipv4/udp.c | 10 +-
19475 net/ipv4/xfrm4_policy.c | 18 +-
19476 net/ipv6/addrconf.c | 18 +-
19477 net/ipv6/af_inet6.c | 2 +-
19478 net/ipv6/datagram.c | 2 +-
19479 net/ipv6/icmp.c | 2 +-
19480 net/ipv6/ip6_fib.c | 4 +-
19481 net/ipv6/ip6_gre.c | 10 +-
19482 net/ipv6/ip6_tunnel.c | 4 +-
19483 net/ipv6/ip6_vti.c | 4 +-
19484 net/ipv6/ipv6_sockglue.c | 2 +-
19485 net/ipv6/netfilter/ip6_tables.c | 12 +-
19486 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
19487 net/ipv6/ping.c | 33 +-
19488 net/ipv6/raw.c | 17 +-
19489 net/ipv6/reassembly.c | 13 +-
19490 net/ipv6/route.c | 2 +-
19491 net/ipv6/sit.c | 4 +-
19492 net/ipv6/sysctl_net_ipv6.c | 2 +-
19493 net/ipv6/udp.c | 6 +-
19494 net/ipv6/xfrm6_policy.c | 17 +-
19495 net/irda/ircomm/ircomm_tty.c | 18 +-
19496 net/iucv/af_iucv.c | 4 +-
19497 net/iucv/iucv.c | 2 +-
19498 net/key/af_key.c | 4 +-
19499 net/l2tp/l2tp_eth.c | 38 +-
19500 net/l2tp/l2tp_ip.c | 2 +-
19501 net/l2tp/l2tp_ip6.c | 2 +-
19502 net/mac80211/cfg.c | 8 +-
19503 net/mac80211/ieee80211_i.h | 3 +-
19504 net/mac80211/iface.c | 20 +-
19505 net/mac80211/main.c | 2 +-
19506 net/mac80211/pm.c | 4 +-
19507 net/mac80211/rate.c | 2 +-
19508 net/mac80211/sta_info.c | 2 +-
19509 net/mac80211/util.c | 8 +-
19510 net/mpls/af_mpls.c | 6 +-
19511 net/netfilter/ipset/ip_set_core.c | 2 +-
19512 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
19513 net/netfilter/ipvs/ip_vs_core.c | 4 +-
19514 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
19515 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
19516 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
19517 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
19518 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
19519 net/netfilter/nf_conntrack_acct.c | 2 +-
19520 net/netfilter/nf_conntrack_ecache.c | 2 +-
19521 net/netfilter/nf_conntrack_helper.c | 2 +-
19522 net/netfilter/nf_conntrack_proto.c | 2 +-
19523 net/netfilter/nf_conntrack_standalone.c | 2 +-
19524 net/netfilter/nf_conntrack_timestamp.c | 2 +-
19525 net/netfilter/nf_log.c | 10 +-
19526 net/netfilter/nf_sockopt.c | 4 +-
19527 net/netfilter/nfnetlink_log.c | 4 +-
19528 net/netfilter/nft_compat.c | 9 +-
19529 net/netfilter/xt_statistic.c | 8 +-
19530 net/netlink/af_netlink.c | 4 +-
19531 net/openvswitch/vport-internal_dev.c | 2 +-
19532 net/packet/af_packet.c | 8 +-
19533 net/phonet/pep.c | 6 +-
19534 net/phonet/socket.c | 2 +-
19535 net/phonet/sysctl.c | 2 +-
19536 net/rds/cong.c | 6 +-
19537 net/rds/ib.h | 2 +-
19538 net/rds/ib_cm.c | 2 +-
19539 net/rds/ib_recv.c | 4 +-
19540 net/rds/iw.h | 2 +-
19541 net/rds/iw_cm.c | 2 +-
19542 net/rds/iw_recv.c | 4 +-
19543 net/rds/rds.h | 2 +-
19544 net/rds/tcp.c | 2 +-
19545 net/rds/tcp_send.c | 2 +-
19546 net/rxrpc/af_rxrpc.c | 2 +-
19547 net/rxrpc/ar-ack.c | 14 +-
19548 net/rxrpc/ar-call.c | 2 +-
19549 net/rxrpc/ar-connection.c | 2 +-
19550 net/rxrpc/ar-connevent.c | 2 +-
19551 net/rxrpc/ar-input.c | 4 +-
19552 net/rxrpc/ar-internal.h | 8 +-
19553 net/rxrpc/ar-local.c | 2 +-
19554 net/rxrpc/ar-output.c | 4 +-
19555 net/rxrpc/ar-peer.c | 2 +-
19556 net/rxrpc/ar-proc.c | 4 +-
19557 net/rxrpc/ar-transport.c | 2 +-
19558 net/rxrpc/rxkad.c | 4 +-
19559 net/sched/sch_generic.c | 4 +-
19560 net/sctp/ipv6.c | 6 +-
19561 net/sctp/protocol.c | 10 +-
19562 net/sctp/sm_sideeffect.c | 2 +-
19563 net/sctp/socket.c | 21 +-
19564 net/sctp/sysctl.c | 10 +-
19565 net/socket.c | 18 +-
19566 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
19567 net/sunrpc/clnt.c | 4 +-
19568 net/sunrpc/sched.c | 4 +-
19569 net/sunrpc/svc.c | 4 +-
19570 net/sunrpc/svcauth_unix.c | 2 +-
19571 net/sunrpc/xprtrdma/svc_rdma.c | 38 +-
19572 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
19573 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
19574 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
19575 net/tipc/netlink_compat.c | 12 +-
19576 net/tipc/subscr.c | 2 +-
19577 net/unix/af_unix.c | 7 +-
19578 net/unix/sysctl_net_unix.c | 2 +-
19579 net/wireless/wext-core.c | 19 +-
19580 net/xfrm/xfrm_policy.c | 16 +-
19581 net/xfrm/xfrm_state.c | 33 +-
19582 net/xfrm/xfrm_sysctl.c | 2 +-
19583 scripts/Kbuild.include | 2 +-
19584 scripts/Makefile.build | 2 +-
19585 scripts/Makefile.clean | 3 +-
19586 scripts/Makefile.host | 69 +-
19587 scripts/basic/fixdep.c | 12 +-
19588 scripts/dtc/checks.c | 14 +-
19589 scripts/dtc/data.c | 6 +-
19590 scripts/dtc/flattree.c | 8 +-
19591 scripts/dtc/livetree.c | 4 +-
19592 scripts/gcc-plugin.sh | 51 +
19593 scripts/headers_install.sh | 1 +
19594 scripts/kallsyms.c | 4 +-
19595 scripts/kconfig/lkc.h | 5 +-
19596 scripts/kconfig/menu.c | 2 +-
19597 scripts/kconfig/symbol.c | 6 +-
19598 scripts/link-vmlinux.sh | 2 +-
19599 scripts/mod/file2alias.c | 14 +-
19600 scripts/mod/modpost.c | 25 +-
19601 scripts/mod/modpost.h | 6 +-
19602 scripts/mod/sumversion.c | 2 +-
19603 scripts/module-common.lds | 4 +
19604 scripts/package/builddeb | 1 +
19605 scripts/pnmtologo.c | 6 +-
19606 scripts/sortextable.h | 6 +-
19607 scripts/tags.sh | 2 +-
19608 security/Kconfig | 692 +-
19609 security/integrity/ima/ima.h | 4 +-
19610 security/integrity/ima/ima_api.c | 2 +-
19611 security/integrity/ima/ima_fs.c | 4 +-
19612 security/integrity/ima/ima_queue.c | 2 +-
19613 security/keys/key.c | 18 +-
19614 security/selinux/avc.c | 6 +-
19615 security/selinux/include/xfrm.h | 2 +-
19616 security/yama/yama_lsm.c | 2 +-
19617 sound/aoa/codecs/onyx.c | 7 +-
19618 sound/aoa/codecs/onyx.h | 1 +
19619 sound/core/oss/pcm_oss.c | 18 +-
19620 sound/core/pcm_compat.c | 2 +-
19621 sound/core/pcm_native.c | 4 +-
19622 sound/core/sound.c | 2 +-
19623 sound/drivers/mts64.c | 14 +-
19624 sound/drivers/opl4/opl4_lib.c | 2 +-
19625 sound/drivers/portman2x4.c | 3 +-
19626 sound/firewire/amdtp.c | 4 +-
19627 sound/firewire/amdtp.h | 4 +-
19628 sound/firewire/isight.c | 10 +-
19629 sound/firewire/scs1x.c | 8 +-
19630 sound/oss/sb_audio.c | 2 +-
19631 sound/oss/swarm_cs4297a.c | 6 +-
19632 sound/pci/hda/hda_codec.c | 2 +-
19633 sound/pci/ymfpci/ymfpci.h | 2 +-
19634 sound/pci/ymfpci/ymfpci_main.c | 12 +-
19635 sound/soc/codecs/sti-sas.c | 10 +-
19636 sound/soc/soc-ac97.c | 6 +-
19637 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
19638 tools/gcc/Makefile | 42 +
19639 tools/gcc/checker_plugin.c | 150 +
19640 tools/gcc/colorize_plugin.c | 215 +
19641 tools/gcc/constify_plugin.c | 571 +
19642 tools/gcc/gcc-common.h | 812 +
19643 tools/gcc/initify_plugin.c | 552 +
19644 tools/gcc/kallocstat_plugin.c | 188 +
19645 tools/gcc/kernexec_plugin.c | 549 +
19646 tools/gcc/latent_entropy_plugin.c | 470 +
19647 tools/gcc/size_overflow_plugin/.gitignore | 2 +
19648 tools/gcc/size_overflow_plugin/Makefile | 28 +
19649 .../disable_size_overflow_hash.data |12422 ++++++++++++
19650 .../generate_size_overflow_hash.sh | 103 +
19651 .../insert_size_overflow_asm.c | 416 +
19652 .../size_overflow_plugin/intentional_overflow.c | 1010 +
19653 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
19654 tools/gcc/size_overflow_plugin/size_overflow.h | 323 +
19655 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
19656 .../size_overflow_plugin/size_overflow_hash.data |20735 ++++++++++++++++++++
19657 .../size_overflow_hash_aux.data | 92 +
19658 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 ++
19659 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
19660 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
19661 .../size_overflow_plugin_hash.c | 352 +
19662 .../size_overflow_plugin/size_overflow_transform.c | 749 +
19663 .../size_overflow_transform_core.c | 1010 +
19664 tools/gcc/stackleak_plugin.c | 436 +
19665 tools/gcc/structleak_plugin.c | 287 +
19666 tools/include/linux/compiler.h | 8 +
19667 tools/lib/api/Makefile | 2 +-
19668 tools/perf/util/include/asm/alternative-asm.h | 3 +
19669 tools/virtio/linux/uaccess.h | 2 +-
19670 virt/kvm/kvm_main.c | 42 +-
19671 1944 files changed, 66925 insertions(+), 8949 deletions(-)