]> git.ipfire.org Git - thirdparty/grsecurity-scrape.git/blob - test/changelog-test.txt
f4b6cee0dd55f63d5fc75e3bc442af71e3df4533
[thirdparty/grsecurity-scrape.git] / test / changelog-test.txt
1 commit 489fa0be1ea2ce2665611bc315f229486c64dbc5
2 Author: Brad Spengler <spender@grsecurity.net>
3 Date: Mon Jun 27 23:19:52 2016 -0400
4
5 Historically we did not trigger a BUG() on REFCOUNT violations due to the risk
6 of false positives, some of which took months or longer to exhibit themselves.
7 Initially, in fact, there was no task killing at all involved due to the risk of
8 a legitimate increment following a full set of intentional "leaky" increments
9 causing the wrong process to be killed and the wrong user to be banned (or a
10 panic ensuing). These risks were also weighed against the risk documented in
11 the REFCOUNT blog and elsewhere of a race on x86 where the refcount could
12 surpass INT_MAX. Regardless of whether the race is practical or not (and ways
13 of addressing that race are already mentioned in the REFCOUNT blog) given the
14 recent development of a GCC plugin to proactively tease out false positives
15 mentioned above, it's safe enough now to simply BUG() on refcount overflow
16 attempts. This handles both the race case as well as the case of atomic_t being
17 used when atomic64_t is really necessary to be able to express the full amount
18 of object references (when grsecurity's kernel bruteforce defense is enabled as
19 it is by default).
20
21 Suggested by Jann Horn at: http://www.openwall.com/lists/kernel-hardening/2016/06/25/2
22
23 fs/exec.c | 5 +----
24 1 file changed, 1 insertion(+), 4 deletions(-)
25
26 commit 0fb349e90e9de1d35ab4e7cd33b0f230b30c340f
27 Author: Brad Spengler <spender@grsecurity.net>
28 Date: Mon Jun 27 17:14:06 2016 -0400
29
30 Fix a UAF only triggerable by privileged root processes on the
31 short-lived delayed_cred pointer by grabbing a reference where
32 applicable at fork time -- not a security issue
33 Thanks to Jann Horn for the report
34
35 kernel/fork.c | 5 +++++
36 1 file changed, 5 insertions(+)
37
38 commit 6eb392861c72839f7af44d0e57927f362a2a0df5
39 Author: Brad Spengler <spender@grsecurity.net>
40 Date: Sun Jun 26 18:07:05 2016 -0400
41
42 compile fix
43
44 fs/posix_acl.c | 2 +-
45 1 file changed, 1 insertion(+), 1 deletion(-)
46
47 commit 1eed3a4206abdd68b35537dcff1b1832b28d4617
48 Author: Ben Hutchings <ben@decadent.org.uk>
49 Date: Wed Jun 22 19:43:35 2016 +0100
50
51 nfsd: check permissions when setting ACLs
52
53 Use set_posix_acl, which includes proper permission checks, instead of
54 calling ->set_acl directly. Without this anyone may be able to grant
55 themselves permissions to a file by setting the ACL.
56
57 Lock the inode to make the new checks atomic with respect to set_acl.
58 (Also, nfsd was the only caller of set_acl not locking the inode, so I
59 suspect this may fix other races.)
60
61 This also simplifies the code, and ensures our ACLs are checked by
62 posix_acl_valid.
63
64 The permission checks and the inode locking were lost with commit
65 4ac7249e, which changed nfsd to use the set_acl inode operation directly
66 instead of going through xattr handlers.
67
68 Reported-by: David Sinquin <david@sinquin.eu>
69 [agreunba@redhat.com: use set_posix_acl]
70 Fixes: 4ac7249e
71 Cc: Christoph Hellwig <hch@infradead.org>
72 Cc: Al Viro <viro@zeniv.linux.org.uk>
73 Cc: stable@vger.kernel.org
74 Signed-off-by: J. Bruce Fields <bfields@redhat.com>
75
76 fs/nfsd/nfs2acl.c | 20 ++++++++++----------
77 fs/nfsd/nfs3acl.c | 16 +++++++---------
78 fs/nfsd/nfs4acl.c | 16 ++++++++--------
79 3 files changed, 25 insertions(+), 27 deletions(-)
80
81 commit d5be7c0c7a8e0408e9faf62dcaaf2471fe19d3a0
82 Author: Andreas Gruenbacher <agruenba@redhat.com>
83 Date: Wed Jun 22 23:57:25 2016 +0200
84
85 posix_acl: Add set_posix_acl
86
87 Factor out part of posix_acl_xattr_set into a common function that takes
88 a posix_acl, which nfsd can also call.
89
90 The prototype already exists in include/linux/posix_acl.h.
91
92 Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com>
93 Cc: stable@vger.kernel.org
94 Cc: Christoph Hellwig <hch@infradead.org>
95 Cc: Al Viro <viro@zeniv.linux.org.uk>
96 Signed-off-by: J. Bruce Fields <bfields@redhat.com>
97
98 fs/posix_acl.c | 46 +++++++++++++++++++++++++++-------------------
99 1 file changed, 27 insertions(+), 19 deletions(-)
100
101 commit 5d722e6ce47a1c1987e862c84c4b56ddbc4423de
102 Author: Brad Spengler <spender@grsecurity.net>
103 Date: Sun Jun 26 17:33:38 2016 -0400
104
105 Fix ICE caused by duplicate plugin loads from the recent plugin
106 infrastructure changes
107
108 init/Makefile | 3 ---
109 1 file changed, 3 deletions(-)
110
111 commit 278d24df4f61ab171288187e6952ace4a82d42dc
112 Merge: 0c59418 83e55cb
113 Author: Brad Spengler <spender@grsecurity.net>
114 Date: Sun Jun 26 12:40:25 2016 -0400
115
116 Merge branch 'pax-test' into grsec-test
117
118 commit 83e55cbeedfb0b8712de995457c395b1ba8fe936
119 Author: Brad Spengler <spender@grsecurity.net>
120 Date: Sun Jun 26 12:11:40 2016 -0400
121
122 Update to pax-linux-4.5.7-test16.patch:
123 - imported a few more gcc plugin infrastructure changes from Emese's upstreaming work
124
125 .gitignore | 1 +
126 Makefile | 1 +
127 drivers/hv/hv.c | 2 +-
128 fs/namespace.c | 3 +-
129 include/linux/init.h | 4 +-
130 scripts/Makefile | 3 +-
131 scripts/Makefile.clean | 3 +-
132 scripts/Makefile.gcc-plugins | 5 ++-
133 scripts/Makefile.host | 7 ++-
134 scripts/gcc-plugins/Makefile | 54 +++++++----------------
135 scripts/gcc-plugins/rap_plugin/Makefile | 2 +
136 scripts/gcc-plugins/size_overflow_plugin/Makefile | 2 +
137 12 files changed, 39 insertions(+), 48 deletions(-)
138
139 commit 0c59418c05aa82cc46806b2b9b324d44ad5f043b
140 Author: Scott Bauer <sbauer@plzdonthack.me>
141 Date: Thu Jun 23 08:59:47 2016 -0600
142
143 HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands
144
145 This patch validates the num_values parameter from userland during the
146 HIDIOCGUSAGES and HIDIOCSUSAGES commands. Previously, if the report id was set
147 to HID_REPORT_ID_UNKNOWN, we would fail to validate the num_values parameter
148 leading to a heap overflow.
149
150 Cc: stable@vger.kernel.org
151 Signed-off-by: Scott Bauer <sbauer@plzdonthack.me>
152 Signed-off-by: Jiri Kosina <jkosina@suse.cz>
153
154 drivers/hid/usbhid/hiddev.c | 10 +++++-----
155 1 file changed, 5 insertions(+), 5 deletions(-)
156
157 commit 6c4919ead98c7342acecbd28f781dd2c3a37be4e
158 Author: Brad Spengler <spender@grsecurity.net>
159 Date: Sat Jun 25 07:22:44 2016 -0400
160
161 fix typo
162
163 scripts/Makefile.gcc-plugins | 2 +-
164 1 file changed, 1 insertion(+), 1 deletion(-)
165
166 commit 44fc4dd89969440d883528361bf65e6e82e35b49
167 Author: Brad Spengler <spender@grsecurity.net>
168 Date: Fri Jun 24 19:37:20 2016 -0400
169
170 RANDSTRUCT compile fix
171
172 drivers/gpu/drm/amd/powerplay/hwmgr/fiji_thermal.c | 20 ++++++++++----------
173 drivers/gpu/drm/amd/powerplay/hwmgr/tonga_thermal.c | 20 ++++++++++----------
174 2 files changed, 20 insertions(+), 20 deletions(-)
175
176 commit 08022b387ddd8856d39ace5d6f92636c7d1b422a
177 Author: Brad Spengler <spender@grsecurity.net>
178 Date: Fri Jun 24 19:22:39 2016 -0400
179
180 RANDSTRUCT compile fix
181
182 .../drm/amd/powerplay/hwmgr/cz_clockpowergating.c | 12 +++--
183 drivers/gpu/drm/amd/powerplay/hwmgr/cz_hwmgr.c | 58 +++++++++++-----------
184 2 files changed, 38 insertions(+), 32 deletions(-)
185
186 commit f48aea278530eb71ce2f9a24dc9e245f29d530ba
187 Author: Brad Spengler <spender@grsecurity.net>
188 Date: Fri Jun 24 18:52:19 2016 -0400
189
190 compile fix
191
192 drivers/hv/hv.c | 2 +-
193 1 file changed, 1 insertion(+), 1 deletion(-)
194
195 commit 1ce67be0c2ccf325fc5110ee052a8d0b08f09959
196 Author: Brad Spengler <spender@grsecurity.net>
197 Date: Fri Jun 24 17:45:26 2016 -0400
198
199 Add missing entries for RANDSTRUCT to scripts/Makefile.gcc-plugins
200 Bug introduced during 4.5 port during merging with upstream bikeshedding
201 scripts/gcc-plugins/Makefile was updated properly, but scripts/Makefile.gcc-plugins was not
202 This unfortunately means RANDSTRUCT was silently not enabled for all of the 4.5 patches to date
203
204 scripts/Makefile.gcc-plugins | 5 +++++
205 1 file changed, 5 insertions(+)
206
207 commit 6bf5265035d4617a1ef7845e7915389e1c65647b
208 Merge: c881b58 542e9e9
209 Author: Brad Spengler <spender@grsecurity.net>
210 Date: Fri Jun 24 17:01:33 2016 -0400
211
212 Merge branch 'pax-test' into grsec-test
213
214 commit 542e9e9a75e654b7e352025ecc67c6a2f98d8ea2
215 Author: Brad Spengler <spender@grsecurity.net>
216 Date: Fri Jun 24 17:00:25 2016 -0400
217
218 Update to pax-linux-4.5.7-test14.patch:
219 - synchronized with Emese's gcc plugin related changes headed upstream
220 - fixed a REFCOUNT false positive in nf_conntrack_init_net, reported by minipli
221 - fixed a regression in the recent Hyper-V support under !KERNEXEC
222
223 Makefile | 9 ---------
224 arch/x86/entry/vdso/vma.c | 2 +-
225 drivers/hv/hv.c | 2 +-
226 include/linux/compiler-gcc.h | 2 ++
227 include/linux/init.h | 8 +-------
228 include/linux/random.h | 8 ++++----
229 mm/page_alloc.c | 8 +++++---
230 net/netfilter/nf_conntrack_core.c | 4 ++--
231 scripts/Kbuild.include | 10 +++++++---
232 scripts/Makefile.gcc-plugins | 31 ++++++++++++++++++++++++-------
233 scripts/gcc-plugin.sh | 14 ++++++++++++++
234 security/Kconfig | 3 ++-
235 12 files changed, 63 insertions(+), 38 deletions(-)
236
237 commit c881b58ba51680e30758c1ea12058cd76c578672
238 Author: Brad Spengler <spender@grsecurity.net>
239 Date: Wed Jun 22 19:27:11 2016 -0400
240
241 compile fix
242
243 arch/x86/mm/init.c | 2 +-
244 1 file changed, 1 insertion(+), 1 deletion(-)
245
246 commit 6f889875e9f23d3d5a4751d09cc47f6e39eb9e1b
247 Author: Brad Spengler <spender@grsecurity.net>
248 Date: Wed Jun 22 17:37:53 2016 -0400
249
250 Don't bother further restricting /dev/mem when GRKERNSEC_KMEM is disabled,
251 fixes tboot use
252 Reported by Mark van Dijk
253 Previous MSR problem was also reported by Mark van Dijk
254
255 arch/x86/mm/init.c | 16 +++++-----------
256 1 file changed, 5 insertions(+), 11 deletions(-)
257
258 commit 1b99e76b8f41a8495ff085ffccab0e1bc8abed59
259 Author: Brad Spengler <spender@grsecurity.net>
260 Date: Wed Jun 22 17:22:14 2016 -0400
261
262 Whitelist writes to MSR_IA32_ENERGY_PERF_BIAS
263
264 arch/x86/kernel/msr.c | 6 ++++--
265 1 file changed, 4 insertions(+), 2 deletions(-)
266
267 commit 8c013d99d311850cade58ed5f9da05fb7f2c2873
268 Merge: 33e588f 9b2decf
269 Author: Brad Spengler <spender@grsecurity.net>
270 Date: Wed Jun 22 07:46:27 2016 -0400
271
272 Merge branch 'pax-test' into grsec-test
273
274 commit 9b2decf0bccddae6e630a2548d53d2a9718891a3
275 Author: Brad Spengler <spender@grsecurity.net>
276 Date: Wed Jun 22 07:46:03 2016 -0400
277
278 Update to pax-linux-4.5.7-test13.patch:
279 - fixed a bad function pointer cast in dma_buf_show caught by RAP, by Mathias Krause <minipli@googlemail.com>
280 - fixed a bad function type in the intel cstate sysfs code caught by RAP, reported by sth0R (https://forums.grsecurity.net/viewtopic.php?f=3&t=4497)
281 - worked around an intentional integer overflow in the PCI resource sizing code caught by the size overflow plugin, reported by kysse/Ville Vuorinen
282 - fixed an integer underflow in the ELF coredump code caught by the size overflow plugin, reported by Dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4495)
283 - fixed Hyper-V's hypercall page allocation to work under !KERNEXEC as well, reported by btnet (https://forums.grsecurity.net/viewtopic.php?f=3&t=3911), based on an idea by Pablo Sole (https://bugs.alpinelinux.org/issues/1021#note-27)
284 - fixed a REFCOUNT false positive in wpan_phy_new
285
286 arch/x86/include/asm/pgtable_64.h | 2 +-
287 arch/x86/kernel/cpu/perf_event_intel_cstate.c | 6 +++---
288 arch/x86/kernel/head_64.S | 10 ++++++++--
289 arch/x86/xen/mmu.c | 10 ++++++++--
290 drivers/dma-buf/dma-buf.c | 5 ++---
291 drivers/hv/hv.c | 23 +++++++----------------
292 drivers/pci/setup-bus.c | 8 ++++++--
293 fs/exec.c | 4 ++--
294 include/linux/types.h | 2 ++
295 net/ieee802154/core.c | 6 +++---
296 10 files changed, 42 insertions(+), 34 deletions(-)
297
298 commit 33e588f130c19cac089c2b0d70c939bee84ba812
299 Author: Brad Spengler <spender@grsecurity.net>
300 Date: Fri Jun 17 20:15:46 2016 -0400
301
302 Update KSTACKOVERFLOW dependency, update documentation
303
304 grsecurity/Kconfig | 8 ++++----
305 1 file changed, 4 insertions(+), 4 deletions(-)
306
307 commit d877624a8034129afc61dcc0f6127d69ee7a08d5
308 Author: Brad Spengler <spender@grsecurity.net>
309 Date: Wed Jun 15 06:28:18 2016 -0400
310
311 Backport fix for http://seclists.org/oss-sec/2016/q2/553
312
313 security/keys/key.c | 2 +-
314 1 file changed, 1 insertion(+), 1 deletion(-)
315
316 commit 39c61be367e5f1e1e0a08592ab3b23e71779ac9f
317 Merge: c63d655 66f9687
318 Author: Brad Spengler <spender@grsecurity.net>
319 Date: Tue Jun 14 18:19:37 2016 -0400
320
321 Merge branch 'pax-test' into grsec-test
322
323 commit 66f968756cfcc3ab040ad99deb570fb445108fb9
324 Author: Brad Spengler <spender@grsecurity.net>
325 Date: Tue Jun 14 18:19:04 2016 -0400
326
327 Update to pax-linux-4.5.5-test12.patch:
328 - fixed a KERNEXEC regression when writing to /proc/sys/kernel/watchdog_cpumask, reported by shadowdaemon
329 - Emese worked around a gcc induced intentional integer overflow in jfs that triggered a size overflow report, reported by g66 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4486)
330 - Emese relicensed the size overflow plugin to GPLv2 only
331 - Emese added size overflow coverage for vmnet in the hash tables, reported by Shawn <citypw@gmail.com>
332 - Emese enhanced the latent entropy in various ways (https://github.com/ephox-gcc-plugins/latent_entropy/commits/master)
333 - fixed pax_sanitize_slab=off for kmalloc and boot caches, by Mathias Krause <minipli@ld-linux.so>
334 - eliminated the memory overhead of SLUB sanitization, by Mathias Krause <minipli@ld-linux.so>
335
336 kernel/smpboot.c | 3 +
337 mm/slab.c | 2 +
338 mm/slab.h | 15 +
339 mm/slab_common.c | 7 -
340 mm/slob.c | 2 +
341 mm/slub.c | 8 +-
342 scripts/gcc-plugins/latent_entropy_plugin.c | 361 +++++++++++++++------
343 .../disable_size_overflow_hash.data | 1 +
344 .../insert_size_overflow_asm.c | 2 +-
345 .../size_overflow_plugin/intentional_overflow.c | 2 +-
346 .../size_overflow_plugin/remove_unnecessary_dup.c | 2 +-
347 .../size_overflow_plugin/size_overflow_debug.c | 2 +-
348 .../size_overflow_plugin/size_overflow_hash.data | 1 -
349 .../size_overflow_hash_aux.data | 5 +
350 .../size_overflow_plugin/size_overflow_ipa.c | 2 +-
351 .../size_overflow_plugin/size_overflow_misc.c | 2 +-
352 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
353 .../size_overflow_plugin_hash.c | 2 +-
354 .../size_overflow_plugin/size_overflow_transform.c | 2 +-
355 .../size_overflow_transform_core.c | 2 +-
356 20 files changed, 310 insertions(+), 115 deletions(-)
357
358 commit c63d655907910533ed9d50671e98774b4b797578
359 Author: Tejun Heo <tj@kernel.org>
360 Date: Wed May 25 11:48:25 2016 -0400
361
362 percpu: fix synchronization between synchronous map extension and chunk destruction
363
364 For non-atomic allocations, pcpu_alloc() can try to extend the area
365 map synchronously after dropping pcpu_lock; however, the extension
366 wasn't synchronized against chunk destruction and the chunk might get
367 freed while extension is in progress.
368
369 This patch fixes the bug by putting most of non-atomic allocations
370 under pcpu_alloc_mutex to synchronize against pcpu_balance_work which
371 is responsible for async chunk management including destruction.
372
373 Signed-off-by: Tejun Heo <tj@kernel.org>
374 Reported-and-tested-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
375 Reported-by: Vlastimil Babka <vbabka@suse.cz>
376 Reported-by: Sasha Levin <sasha.levin@oracle.com>
377 Cc: stable@vger.kernel.org # v3.18+
378 Fixes: 1a4d76076cda ("percpu: implement asynchronous chunk population")
379
380 mm/percpu.c | 16 ++++++++--------
381 1 file changed, 8 insertions(+), 8 deletions(-)
382
383 commit 63442a31da7b33c5d6ab80254a2af78616b91aa8
384 Author: Tejun Heo <tj@kernel.org>
385 Date: Wed May 25 11:48:25 2016 -0400
386
387 percpu: fix synchronization between chunk->map_extend_work and chunk destruction
388
389 Atomic allocations can trigger async map extensions which is serviced
390 by chunk->map_extend_work. pcpu_balance_work which is responsible for
391 destroying idle chunks wasn't synchronizing properly against
392 chunk->map_extend_work and may end up freeing the chunk while the work
393 item is still in flight.
394
395 This patch fixes the bug by rolling async map extension operations
396 into pcpu_balance_work.
397
398 Signed-off-by: Tejun Heo <tj@kernel.org>
399 Reported-and-tested-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
400 Reported-by: Vlastimil Babka <vbabka@suse.cz>
401 Reported-by: Sasha Levin <sasha.levin@oracle.com>
402 Cc: stable@vger.kernel.org # v3.18+
403 Fixes: 9c824b6a172c ("percpu: make sure chunk->map array has available space")
404
405 mm/percpu.c | 57 ++++++++++++++++++++++++++++++++++++---------------------
406 1 file changed, 36 insertions(+), 21 deletions(-)
407
408 commit 7187611ba0d834ec7db27904c0cdf07bc9bc7d8f
409 Author: Brad Spengler <spender@grsecurity.net>
410 Date: Sat Jun 11 19:54:40 2016 -0400
411
412 Only bother establishing the PTEs for the vmap'd stack on creation
413
414 fs/exec.c | 1 -
415 include/linux/sched.h | 9 ++++-----
416 kernel/fork.c | 3 ++-
417 kernel/sched/core.c | 2 --
418 4 files changed, 6 insertions(+), 9 deletions(-)
419
420 commit a6e150dfb383fcb4c8d5294c59f2d21425ff9f72
421 Author: Brad Spengler <spender@grsecurity.net>
422 Date: Sat Jun 11 13:18:33 2016 -0400
423
424 Work around upstream's use of probe_kernel_address in alignment handling
425 which uses KERNEL_DS but wants to access userland memory directly --
426 not allowed by PaX. Reported by jotik
427
428 arch/arm/mm/alignment.c | 24 ++++++++++++++++++++----
429 1 file changed, 20 insertions(+), 4 deletions(-)
430
431 commit 1646af929d2465bc7a21a3c180de677e0b0b7950
432 Author: Dave Chinner <dchinner@redhat.com>
433 Date: Wed May 18 14:09:12 2016 +1000
434
435 xfs: mark reclaimed inodes invalid earlier
436
437 The last thing we do before using call_rcu() on an xfs_inode to be
438 freed is mark it as invalid. This means there is a window between
439 when we know for certain that the inode is going to be freed and
440 when we do actually mark it as "freed".
441
442 This is important in the context of RCU lookups - we can look up the
443 inode, find that it is valid, and then use it as such not realising
444 that it is in the final stages of being freed.
445
446 As such, mark the inode as being invalid the moment we know it is
447 going to be reclaimed. This can be done while we still hold the
448 XFS_ILOCK_EXCL and the flush lock in xfs_inode_reclaim, meaning that
449 it occurs well before we remove it from the radix tree, and that
450 the i_flags_lock, the XFS_ILOCK and the inode flush lock all act as
451 synchronisation points for detecting that an inode is about to go
452 away.
453
454 For defensive purposes, this allows us to add a further check to
455 xfs_iflush_cluster to ensure we skip inodes that are being freed
456 after we grab the XFS_ILOCK_SHARED and the flush lock - we know that
457 if the inode number if valid while we have these locks held we know
458 that it has not progressed through reclaim to the point where it is
459 clean and is about to be freed.
460
461 [bfoster: fixed __xfs_inode_clear_reclaim() using ip->i_ino after it
462 had already been zeroed.]
463
464 Signed-off-by: Dave Chinner <dchinner@redhat.com>
465 Reviewed-by: Brian Foster <bfoster@redhat.com>
466 Signed-off-by: Dave Chinner <david@fromorbit.com>
467
468 fs/xfs/xfs_icache.c | 46 ++++++++++++++++++++++++++++++++++------------
469 fs/xfs/xfs_inode.c | 13 +++++++++++++
470 2 files changed, 47 insertions(+), 12 deletions(-)
471
472 commit 096f3d24e77f4cd8fe50008623b26c89cb00ccda
473 Author: Dave Chinner <dchinner@redhat.com>
474 Date: Wed May 18 14:01:53 2016 +1000
475
476 xfs: xfs_inode_free() isn't RCU safe
477
478 The xfs_inode freed in xfs_inode_free() has multiple allocated
479 structures attached to it. We free these in xfs_inode_free() before
480 we mark the inode as invalid, and before we run call_rcu() to queue
481 the structure for freeing.
482
483 Unfortunately, this freeing can race with other accesses that are in
484 the RCU current grace period that have found the inode in the radix
485 tree with a valid state. This includes xfs_iflush_cluster(), which
486 calls xfs_inode_clean(), and that accesses the inode log item on the
487 xfs_inode.
488
489 The log item structure is freed in xfs_inode_free(), so there is the
490 possibility we can be accessing freed memory in xfs_iflush_cluster()
491 after validating the xfs_inode structure as being valid for this RCU
492 context. Hence we can get spuriously incorrect clean state returned
493 from such checks. This can lead to use thinking the inode is dirty
494 when it is, in fact, clean, and so incorrectly attaching it to the
495 buffer for IO and completion processing.
496
497 This then leads to use-after-free situations on the xfs_inode itself
498 if the IO completes after the current RCU grace period expires. The
499 buffer callbacks will access the xfs_inode and try to do all sorts
500 of things it shouldn't with freed memory.
501
502 IOWs, xfs_iflush_cluster() only works correctly when racing with
503 inode reclaim if the inode log item is present and correctly stating
504 the inode is clean. If the inode is being freed, then reclaim has
505 already made sure the inode is clean, and hence xfs_iflush_cluster
506 can skip it. However, we are accessing the inode inode under RCU
507 read lock protection and so also must ensure that all dynamically
508 allocated memory we reference in this context is not freed until the
509 RCU grace period expires.
510
511 To fix this, move all the potential memory freeing into
512 xfs_inode_free_callback() so that we are guarantee RCU protected
513 lookup code will always have the memory structures it needs
514 available during the RCU grace period that lookup races can occur
515 in.
516
517 Discovered-by: Brain Foster <bfoster@redhat.com>
518 Signed-off-by: Dave Chinner <dchinner@redhat.com>
519 Reviewed-by: Christoph Hellwig <hch@lst.de>
520 Signed-off-by: Dave Chinner <david@fromorbit.com>
521
522 fs/xfs/xfs_icache.c | 14 +++++++-------
523 1 file changed, 7 insertions(+), 7 deletions(-)
524
525 commit eaec09dbc18fe0ae7905b33b4c819a467a0e801d
526 Author: Jann Horn <jannh@google.com>
527 Date: Wed Jun 1 11:55:07 2016 +0200
528
529 sched: panic on corrupted stack end
530
531 Until now, hitting this BUG_ON caused a recursive oops (because oops
532 handling involves do_exit(), which calls into the scheduler, which in
533 turn raises an oops), which caused stuff below the stack to be
534 overwritten until a panic happened (e.g. via an oops in interrupt
535 context, caused by the overwritten CPU index in the thread_info).
536
537 Just panic directly.
538
539 Signed-off-by: Jann Horn <jannh@google.com>
540 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
541
542 kernel/sched/core.c | 3 ++-
543 1 file changed, 2 insertions(+), 1 deletion(-)
544
545 commit 96894afd3cbd735ed9230f058a32865dec270da2
546 Author: Jann Horn <jannh@google.com>
547 Date: Wed Jun 1 11:55:06 2016 +0200
548
549 ecryptfs: forbid opening files without mmap handler
550
551 This prevents users from triggering a stack overflow through a recursive
552 invocation of pagefault handling that involves mapping procfs files into
553 virtual memory.
554
555 Signed-off-by: Jann Horn <jannh@google.com>
556 Acked-by: Tyler Hicks <tyhicks@canonical.com>
557 Cc: stable@vger.kernel.org
558 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
559
560 fs/ecryptfs/kthread.c | 13 +++++++++++--
561 1 file changed, 11 insertions(+), 2 deletions(-)
562
563 commit 06608cb36ab8329c7cf03fdabc86fb7f64a2656d
564 Author: Jann Horn <jannh@google.com>
565 Date: Wed Jun 1 11:55:05 2016 +0200
566
567 proc: prevent stacking filesystems on top
568
569 This prevents stacking filesystems (ecryptfs and overlayfs) from using
570 procfs as lower filesystem. There is too much magic going on inside
571 procfs, and there is no good reason to stack stuff on top of procfs.
572
573 (For example, procfs does access checks in VFS open handlers, and
574 ecryptfs by design calls open handlers from a kernel thread that doesn't
575 drop privileges or so.)
576
577 Signed-off-by: Jann Horn <jannh@google.com>
578 Cc: stable@vger.kernel.org
579 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
580
581 fs/proc/root.c | 7 +++++++
582 1 file changed, 7 insertions(+)
583
584 commit 7cff8ffababda8d77e7e3a3f2621b26269279b9a
585 Author: Al Viro <viro@zeniv.linux.org.uk>
586 Date: Wed May 4 14:04:13 2016 -0400
587
588 ecryptfs: fix handling of directory opening
589
590 First of all, trying to open them r/w is idiocy; it's guaranteed to fail.
591 Moreover, assigning ->f_pos and assuming that everything will work is
592 blatantly broken - try that with e.g. tmpfs as underlying layer and watch
593 the fireworks. There may be a non-trivial amount of state associated with
594 current IO position, well beyond the numeric offset. Using the single
595 struct file associated with underlying inode is really not a good idea;
596 we ought to open one for each ecryptfs directory struct file.
597
598 Additionally, file_operations both for directories and non-directories are
599 full of pointless methods; non-directories should *not* have ->iterate(),
600 directories should not have ->flush(), ->fasync() and ->splice_read().
601
602 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
603
604 fs/ecryptfs/file.c | 71 ++++++++++++++++++++++++++++++++++++++++++------------
605 1 file changed, 55 insertions(+), 16 deletions(-)
606
607 commit b690dcd62ad1433e69d391a267ce01534c19d20a
608 Author: Brad Spengler <spender@grsecurity.net>
609 Date: Wed Jun 8 20:59:28 2016 -0400
610
611 fix compiler warnings
612
613 fs/exec.c | 4 ++--
614 1 file changed, 2 insertions(+), 2 deletions(-)
615
616 commit 5d43ec1fb9c94f0c2644e0d09a8257442134a0ce
617 Author: Brad Spengler <spender@grsecurity.net>
618 Date: Wed Jun 8 20:52:00 2016 -0400
619
620 Avoid some UB
621
622 fs/exec.c | 8 ++++----
623 1 file changed, 4 insertions(+), 4 deletions(-)
624
625 commit d34347de1cae1f7bd8ea4223d5baca5da8ea4529
626 Author: Brad Spengler <spender@grsecurity.net>
627 Date: Wed Jun 8 20:23:27 2016 -0400
628
629 compile fix
630
631 kernel/smpboot.c | 1 +
632 1 file changed, 1 insertion(+)
633
634 commit 4dfdd6b803d58fec94306a4ff437d500a9c80908
635 Author: Brad Spengler <spender@grsecurity.net>
636 Date: Wed Jun 8 20:13:34 2016 -0400
637
638 Add open/close around cpumask modification, reported by shadowdaemon
639 Triggered by writing to /proc/sys/kernel/watchdog_cpumask
640
641 kernel/smpboot.c | 2 ++
642 1 file changed, 2 insertions(+)
643
644 commit 1ee24693e22a535dbede927beba7b90cd8559eb4
645 Merge: 11150b9 dec4686
646 Author: Brad Spengler <spender@grsecurity.net>
647 Date: Wed Jun 8 07:39:26 2016 -0400
648
649 Merge branch 'pax-test' into grsec-test
650
651 commit dec468678ead461fc786adfbb2505b6ef66a371a
652 Merge: 85a5882 8c596d1
653 Author: Brad Spengler <spender@grsecurity.net>
654 Date: Wed Jun 8 07:39:18 2016 -0400
655
656 Merge branch 'linux-4.5.y' into pax-test
657
658 commit 11150b92c4cd78ec6a22ad0ff682faf2354b4445
659 Author: Brad Spengler <spender@grsecurity.net>
660 Date: Sun Jun 5 14:18:34 2016 -0400
661
662 compile fix
663
664 grsecurity/grsec_tpe.c | 4 ++--
665 include/linux/uidgid.h | 1 +
666 2 files changed, 3 insertions(+), 2 deletions(-)
667
668 commit 6e548aad3425733ed443e4a3232205935f0d4939
669 Author: Brad Spengler <spender@grsecurity.net>
670 Date: Sun Jun 5 08:19:09 2016 -0400
671
672 Workaround some Debian bike-shedding so that group-writable /bin dirs
673 (with group ownership of root) don't trigger TPE violations
674 Reported by jvoisin
675
676 grsecurity/grsec_tpe.c | 4 ++--
677 1 file changed, 2 insertions(+), 2 deletions(-)
678
679 commit 735ea2028ce017246358d22ec81dc6db73499770
680 Author: Brad Spengler <spender@grsecurity.net>
681 Date: Sun Jun 5 04:23:15 2016 -0400
682
683 move another instance of is_privileged_binary outside of atomic
684
685 grsecurity/gracl_segv.c | 4 +++-
686 1 file changed, 3 insertions(+), 1 deletion(-)
687
688 commit e08a7bcc7b7a1e423b5346bcef85d9a92185f65f
689 Merge: d094457 85a5882
690 Author: Brad Spengler <spender@grsecurity.net>
691 Date: Sun Jun 5 04:09:29 2016 -0400
692
693 Merge branch 'pax-test' into grsec-test
694
695 commit 85a588299f41d6a116b8d07d902de986968a84b0
696 Merge: 89f00c3 ec2a755
697 Author: Brad Spengler <spender@grsecurity.net>
698 Date: Sun Jun 5 04:08:42 2016 -0400
699
700 Merge branch 'linux-4.5.y' into pax-test
701
702 commit d094457eb90a693f7007b7f4b26c2132137c7ed2
703 Author: Brad Spengler <spender@grsecurity.net>
704 Date: Mon May 30 10:15:11 2016 -0400
705
706 move privilege/xattr check outside of locks to prevent warning, reported by shadowdaemon
707
708 grsecurity/grsec_sig.c | 7 +++++--
709 1 file changed, 5 insertions(+), 2 deletions(-)
710
711 commit 2fad2bb3392409d98498b3af53cf39f2475e4b70
712 Author: Brad Spengler <spender@grsecurity.net>
713 Date: Sun May 29 10:11:27 2016 -0400
714
715 Fix another harmless warning
716
717 fs/proc/proc_sysctl.c | 2 +-
718 1 file changed, 1 insertion(+), 1 deletion(-)
719
720 commit d62f996e40c87e46b20f45e16819f92d49f3e926
721 Author: Brad Spengler <spender@grsecurity.net>
722 Date: Sun May 29 09:56:32 2016 -0400
723
724 Fix more harmless compiler warnings
725
726 grsecurity/gracl_policy.c | 8 ++++----
727 1 file changed, 4 insertions(+), 4 deletions(-)
728
729 commit 558b784a2b87e337d12bae07d60f435c2f06d849
730 Author: Brad Spengler <spender@grsecurity.net>
731 Date: Sun May 29 09:47:50 2016 -0400
732
733 Fix more harmless warnings
734
735 grsecurity/gracl.c | 6 +++---
736 1 file changed, 3 insertions(+), 3 deletions(-)
737
738 commit 32ec63339ab130758e6941d7f1d8993e41956980
739 Author: Brad Spengler <spender@grsecurity.net>
740 Date: Sun May 29 09:41:23 2016 -0400
741
742 Fix another warning
743
744 include/linux/sched.h | 1 +
745 1 file changed, 1 insertion(+)
746
747 commit 789369de0dbde1fedd2d5cb0ee3474e160af187c
748 Author: Brad Spengler <spender@grsecurity.net>
749 Date: Sun May 29 09:22:05 2016 -0400
750
751 Fix some harmless compiler warnings
752
753 grsecurity/grsum.c | 4 ++--
754 1 file changed, 2 insertions(+), 2 deletions(-)
755
756 commit ed18543a205c206d0aa8ee6b04c606579823b7b3
757 Merge: b0b4143 89f00c3
758 Author: Brad Spengler <spender@grsecurity.net>
759 Date: Sun May 29 08:34:18 2016 -0400
760
761 Merge branch 'pax-test' into grsec-test
762
763 commit 89f00c3b596a62ae5bcfe4920e9d05b9a94be7fa
764 Author: Brad Spengler <spender@grsecurity.net>
765 Date: Sun May 29 08:26:37 2016 -0400
766
767 Update to pax-linux-4.5.5-test11.patch:
768 - fixed arm kuser helper emulation for thumb mode userland, reported by Wizzup(https://forums.grsecurity.net/viewtopic.php?f=3&t=4479)
769 - fixed incorrect function pointer casts in bcache caught by RAP, reported by torsten (https://forums.grsecurity.net/viewtopic.php?f=3&t=4482)
770 - worked around a few intentional integer underflows in the xhci driver caught by the size overflow plugin, reported by Dennis Wassenberg <dennis.wassenberg@secunet.com>
771 - moved gcc plugins from tools/gcc to scripts/gcc-plugins and simplified the plugin build system, by Emese
772 - changed the constify and latent entropy plugins to use a consistent command line switch for compile-time disabling
773 - cleaned up a few unusued macros, whitespace, inline asm constraints, etc
774 - hid the lvalue casts needed for constify behind the const_cast macro, by Mathias Krause <minipli@ld-linux.so>
775
776 Makefile | 50 +-
777 arch/Kconfig | 14 +
778 arch/arm/Kconfig | 1 +
779 arch/arm/boot/compressed/Makefile | 2 +
780 arch/arm/mach-exynos/suspend.c | 4 +-
781 arch/arm/mach-omap2/powerdomains43xx_data.c | 2 +-
782 arch/arm/mach-shmobile/platsmp-apmu.c | 2 +-
783 arch/arm/mm/fault.c | 14 +
784 arch/arm64/Kconfig | 1 +
785 arch/mips/Kconfig | 1 +
786 arch/powerpc/Kconfig | 1 +
787 arch/powerpc/include/asm/atomic.h | 7 +-
788 arch/powerpc/kernel/Makefile | 8 +-
789 arch/sparc/Kconfig | 1 +
790 arch/um/Makefile | 4 +-
791 arch/x86/Kconfig | 1 +
792 arch/x86/boot/Makefile | 3 -
793 arch/x86/boot/compressed/Makefile | 3 -
794 arch/x86/entry/common.c | 2 +-
795 arch/x86/include/asm/thread_info.h | 27 -
796 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 2 +-
797 arch/x86/kernel/cpu/perf_event_intel_pt.c | 10 +-
798 arch/x86/kernel/i8259.c | 4 +-
799 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
800 arch/x86/oprofile/nmi_int.c | 2 +-
801 arch/x86/oprofile/op_model_amd.c | 6 +-
802 arch/x86/oprofile/op_model_ppro.c | 4 +-
803 arch/x86/pci/vmd.c | 2 +-
804 arch/x86/realmode/rm/Makefile | 3 -
805 drivers/acpi/bgrt.c | 4 +-
806 drivers/ata/libata-core.c | 2 +-
807 drivers/ata/pata_arasan_cf.c | 2 +-
808 drivers/base/platform-msi.c | 14 +-
809 drivers/base/power/domain.c | 4 +-
810 drivers/bus/arm-cci.c | 6 +-
811 drivers/cdrom/cdrom.c | 2 +-
812 drivers/clk/socfpga/clk-gate.c | 4 +-
813 drivers/clk/socfpga/clk-pll.c | 4 +-
814 drivers/clk/ti/clk.c | 4 +-
815 drivers/cpufreq/acpi-cpufreq.c | 8 +-
816 drivers/cpufreq/cpufreq-dt.c | 2 +-
817 drivers/cpufreq/cpufreq.c | 8 +-
818 drivers/cpufreq/cpufreq_ondemand.c | 4 +-
819 drivers/cpufreq/p4-clockmod.c | 6 +-
820 drivers/cpufreq/speedstep-centrino.c | 2 +-
821 drivers/firmware/dmi_scan.c | 8 +-
822 drivers/firmware/efi/efi.c | 10 +-
823 drivers/firmware/google/memconsole.c | 2 +-
824 drivers/gpio/gpiolib.c | 8 +-
825 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 2 +-
826 drivers/gpu/drm/i810/i810_drv.c | 2 +-
827 drivers/gpu/drm/i915/i915_irq.c | 86 +-
828 drivers/gpu/drm/i915/intel_display.c | 6 +-
829 drivers/gpu/drm/mga/mga_drv.c | 2 +-
830 drivers/gpu/drm/omapdrm/dss/display.c | 6 +-
831 drivers/gpu/drm/qxl/qxl_drv.c | 2 +-
832 drivers/gpu/drm/qxl/qxl_ttm.c | 4 +-
833 drivers/gpu/drm/r128/r128_drv.c | 2 +-
834 drivers/gpu/drm/radeon/radeon_drv.c | 2 +-
835 drivers/gpu/drm/savage/savage_drv.c | 2 +-
836 drivers/gpu/drm/sis/sis_drv.c | 2 +-
837 drivers/gpu/drm/tegra/dc.c | 2 +-
838 drivers/gpu/drm/tegra/sor.c | 2 +-
839 drivers/gpu/drm/via/via_drv.c | 2 +-
840 drivers/idle/intel_idle.c | 4 +-
841 drivers/infiniband/hw/qib/qib.h | 1 -
842 drivers/iommu/arm-smmu.c | 4 +-
843 drivers/isdn/hardware/eicon/mntfunc.c | 2 +-
844 drivers/md/bcache/btree.c | 11 +-
845 drivers/md/bcache/closure.c | 4 +-
846 drivers/md/bcache/closure.h | 8 +-
847 drivers/md/bcache/journal.c | 16 +-
848 drivers/md/bcache/movinggc.c | 12 +-
849 drivers/md/bcache/request.c | 54 +-
850 drivers/md/bcache/request.h | 2 +-
851 drivers/md/bcache/super.c | 30 +-
852 drivers/md/bcache/writeback.c | 12 +-
853 drivers/media/platform/am437x/am437x-vpfe.c | 2 +-
854 drivers/mfd/twl4030-irq.c | 4 +-
855 drivers/misc/c2port/core.c | 2 +-
856 drivers/misc/mic/scif/scif_api.c | 8 +-
857 drivers/mmc/host/mmci.c | 2 +-
858 drivers/mmc/host/omap_hsmmc.c | 2 +-
859 drivers/mmc/host/sdhci-esdhc-imx.c | 2 +-
860 drivers/mmc/host/sdhci-s3c.c | 6 +-
861 drivers/net/ethernet/cavium/liquidio/lio_main.c | 2 +-
862 drivers/net/ethernet/hisilicon/hns/hns_ae_adapt.c | 4 +-
863 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 2 +-
864 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 6 +-
865 drivers/net/macvlan.c | 14 +-
866 drivers/net/wireless/ath/ath9k/main.c | 20 +-
867 drivers/net/wireless/intel/iwlegacy/3945-mac.c | 2 +-
868 drivers/net/wireless/mac80211_hwsim.c | 22 +-
869 drivers/net/wireless/ti/wl1251/sdio.c | 8 +-
870 drivers/net/wireless/ti/wl12xx/main.c | 4 +-
871 drivers/net/wireless/ti/wl18xx/main.c | 4 +-
872 drivers/of/fdt.c | 2 +-
873 drivers/pci/hotplug/acpiphp_ibm.c | 2 +-
874 drivers/pci/hotplug/cpcihp_zt5550.c | 6 +-
875 drivers/pci/hotplug/pci_hotplug_core.c | 4 +-
876 drivers/pci/msi.c | 12 +-
877 drivers/pinctrl/pinctrl-at91.c | 2 +-
878 drivers/platform/x86/msi-laptop.c | 12 +-
879 drivers/power/reset/at91-reset.c | 2 +-
880 drivers/powercap/powercap_sys.c | 6 +-
881 drivers/regulator/max8660.c | 4 +-
882 drivers/regulator/max8973-regulator.c | 12 +-
883 drivers/regulator/mc13892-regulator.c | 4 +-
884 drivers/rtc/rtc-armada38x.c | 4 +-
885 drivers/rtc/rtc-cmos.c | 2 +-
886 drivers/rtc/rtc-m48t59.c | 2 +-
887 drivers/rtc/rtc-rx8010.c | 6 +-
888 drivers/rtc/rtc-test.c | 4 +-
889 drivers/scsi/aacraid/aachba.c | 4 +-
890 drivers/scsi/lpfc/lpfc_init.c | 4 +-
891 drivers/scsi/qla2xxx/qla_os.c | 4 +-
892 drivers/staging/sm750fb/sm750.c | 8 +-
893 drivers/thermal/cpu_cooling.c | 6 +-
894 drivers/thermal/int340x_thermal/int3400_thermal.c | 4 +-
895 drivers/thermal/of-thermal.c | 12 +-
896 drivers/tty/pty.c | 2 +-
897 drivers/tty/serial/8250/8250_core.c | 6 +-
898 drivers/tty/serial/kgdb_nmi.c | 2 +-
899 drivers/usb/host/xhci-ring.c | 52 +-
900 drivers/video/fbdev/aty/atyfb_base.c | 4 +-
901 drivers/video/fbdev/aty/mach64_cursor.c | 2 +-
902 drivers/video/fbdev/core/fb_defio.c | 6 +-
903 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 12 +-
904 drivers/video/fbdev/nvidia/nvidia.c | 18 +-
905 drivers/video/fbdev/omap2/omapfb/dss/display.c | 6 +-
906 drivers/video/fbdev/s1d13xxxfb.c | 4 +-
907 drivers/video/fbdev/smscufx.c | 2 +-
908 drivers/video/fbdev/udlfb.c | 2 +-
909 drivers/video/fbdev/uvesafb.c | 4 +-
910 drivers/video/fbdev/vesafb.c | 2 +-
911 fs/fuse/cuse.c | 6 +-
912 fs/jffs2/file.c | 2 +-
913 fs/nls/nls_base.c | 4 +-
914 fs/nls/nls_euc-jp.c | 4 +-
915 fs/nls/nls_koi8-ru.c | 4 +-
916 fs/proc/proc_sysctl.c | 4 +-
917 fs/tracefs/inode.c | 4 +-
918 include/linux/compiler-gcc.h | 1 +
919 include/linux/compiler.h | 4 +
920 include/linux/seq_buf.h | 2 +-
921 include/linux/sysfs.h | 2 +-
922 kernel/cgroup.c | 14 +-
923 kernel/irq/msi.c | 12 +-
924 kernel/notifier.c | 4 +-
925 kernel/pid.c | 2 +-
926 kernel/trace/trace_output.c | 8 +-
927 net/core/rtnetlink.c | 2 +-
928 net/xfrm/xfrm_state.c | 2 +-
929 scripts/Makefile | 1 +
930 scripts/Makefile.gcc-plugins | 138 +-
931 scripts/Makefile.host | 6 +-
932 scripts/gcc-plugin.sh | 4 +-
933 scripts/gcc-plugins/Makefile | 45 +
934 scripts/gcc-plugins/checker_plugin.c | 496 +
935 scripts/gcc-plugins/colorize_plugin.c | 162 +
936 scripts/gcc-plugins/constify_plugin.c | 521 +
937 scripts/gcc-plugins/gcc-common.h | 879 +
938 scripts/gcc-plugins/gcc-generate-gimple-pass.h | 175 +
939 scripts/gcc-plugins/gcc-generate-ipa-pass.h | 289 +
940 scripts/gcc-plugins/gcc-generate-rtl-pass.h | 175 +
941 scripts/gcc-plugins/gcc-generate-simple_ipa-pass.h | 175 +
942 scripts/gcc-plugins/initify_plugin.c | 536 +
943 scripts/gcc-plugins/kallocstat_plugin.c | 135 +
944 scripts/gcc-plugins/kernexec_plugin.c | 407 +
945 scripts/gcc-plugins/latent_entropy_plugin.c | 438 +
946 scripts/gcc-plugins/rap_plugin/Makefile | 4 +
947 scripts/gcc-plugins/rap_plugin/rap.h | 36 +
948 scripts/gcc-plugins/rap_plugin/rap_fptr_pass.c | 220 +
949 scripts/gcc-plugins/rap_plugin/rap_hash.c | 382 +
950 scripts/gcc-plugins/rap_plugin/rap_plugin.c | 511 +
951 scripts/gcc-plugins/rap_plugin/sip.c | 96 +
952 .../gcc-plugins/size_overflow_plugin/.gitignore | 3 +
953 scripts/gcc-plugins/size_overflow_plugin/Makefile | 28 +
954 .../disable_size_overflow_hash.data | 12444 +++++++++++
955 .../generate_size_overflow_hash.sh | 103 +
956 .../insert_size_overflow_asm.c | 369 +
957 .../size_overflow_plugin/intentional_overflow.c | 1166 +
958 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
959 .../size_overflow_plugin/size_overflow.h | 331 +
960 .../size_overflow_plugin/size_overflow_debug.c | 194 +
961 .../size_overflow_plugin/size_overflow_hash.data | 21504 +++++++++++++++++++
962 .../size_overflow_hash_aux.data | 92 +
963 .../size_overflow_plugin/size_overflow_ipa.c | 1163 +
964 .../size_overflow_plugin/size_overflow_misc.c | 505 +
965 .../size_overflow_plugin/size_overflow_plugin.c | 290 +
966 .../size_overflow_plugin_hash.c | 352 +
967 .../size_overflow_plugin/size_overflow_transform.c | 743 +
968 .../size_overflow_transform_core.c | 1025 +
969 scripts/gcc-plugins/stackleak_plugin.c | 350 +
970 scripts/gcc-plugins/structleak_plugin.c | 239 +
971 scripts/package/builddeb | 2 +-
972 security/Kconfig | 8 +-
973 sound/soc/codecs/sti-sas.c | 8 +-
974 sound/soc/soc-ac97.c | 4 +-
975 tools/gcc/Makefile | 46 -
976 tools/gcc/checker_plugin.c | 496 -
977 tools/gcc/colorize_plugin.c | 162 -
978 tools/gcc/constify_plugin.c | 521 -
979 tools/gcc/gcc-common.h | 879 -
980 tools/gcc/gcc-generate-gimple-pass.h | 175 -
981 tools/gcc/gcc-generate-ipa-pass.h | 289 -
982 tools/gcc/gcc-generate-rtl-pass.h | 175 -
983 tools/gcc/gcc-generate-simple_ipa-pass.h | 175 -
984 tools/gcc/initify_plugin.c | 536 -
985 tools/gcc/kallocstat_plugin.c | 135 -
986 tools/gcc/kernexec_plugin.c | 407 -
987 tools/gcc/latent_entropy_plugin.c | 422 -
988 tools/gcc/rap_plugin/Makefile | 4 -
989 tools/gcc/rap_plugin/rap.h | 36 -
990 tools/gcc/rap_plugin/rap_fptr_pass.c | 220 -
991 tools/gcc/rap_plugin/rap_hash.c | 382 -
992 tools/gcc/rap_plugin/rap_plugin.c | 511 -
993 tools/gcc/rap_plugin/sip.c | 96 -
994 tools/gcc/size_overflow_plugin/.gitignore | 3 -
995 tools/gcc/size_overflow_plugin/Makefile | 28 -
996 .../disable_size_overflow_hash.data | 12444 -----------
997 .../generate_size_overflow_hash.sh | 103 -
998 .../insert_size_overflow_asm.c | 369 -
999 .../size_overflow_plugin/intentional_overflow.c | 1166 -
1000 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 -
1001 tools/gcc/size_overflow_plugin/size_overflow.h | 331 -
1002 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 -
1003 .../size_overflow_plugin/size_overflow_hash.data | 21504 -------------------
1004 .../size_overflow_hash_aux.data | 92 -
1005 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1163 -
1006 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 -
1007 .../size_overflow_plugin/size_overflow_plugin.c | 290 -
1008 .../size_overflow_plugin_hash.c | 352 -
1009 .../size_overflow_plugin/size_overflow_transform.c | 743 -
1010 .../size_overflow_transform_core.c | 1025 -
1011 tools/gcc/stackleak_plugin.c | 350 -
1012 tools/gcc/structleak_plugin.c | 239 -
1013 237 files changed, 47340 insertions(+), 47276 deletions(-)
1014
1015 commit b0b41430a8c9e6e5067c896c07d361e527e298e8
1016 Author: Brad Spengler <spender@grsecurity.net>
1017 Date: Sat May 21 13:59:19 2016 -0400
1018
1019 Fix gcc assert properly, from Emese Revfy
1020
1021 tools/gcc/size_overflow_plugin/intentional_overflow.c | 2 +-
1022 tools/gcc/size_overflow_plugin/size_overflow_plugin.c | 2 +-
1023 2 files changed, 2 insertions(+), 2 deletions(-)
1024
1025 commit 5e7a47f06420603b0f26f1b45fe2ab02838795c9
1026 Merge: f844209 5929595
1027 Author: Brad Spengler <spender@grsecurity.net>
1028 Date: Fri May 20 20:19:27 2016 -0400
1029
1030 Merge branch 'pax-test' into grsec-test
1031
1032 commit 5929595ec558e9282901842bdf9e4a981751fb08
1033 Author: Brad Spengler <spender@grsecurity.net>
1034 Date: Fri May 20 20:18:58 2016 -0400
1035
1036 Update to pax-linux-4.5.5-test9.patch:
1037 - fixed a few more incorrect fptr casts for RAP
1038
1039 arch/x86/math-emu/fpu_etc.c | 9 +++++++--
1040 arch/x86/math-emu/fpu_trig.c | 13 +++++++++----
1041 arch/x86/math-emu/reg_constant.c | 7 ++++++-
1042 drivers/isdn/hisax/hfc_2bds0.c | 4 ++--
1043 drivers/isdn/hisax/hfcscard.c | 6 ++++--
1044 drivers/isdn/hisax/saphir.c | 5 +++--
1045 drivers/isdn/hisax/teleint.c | 5 +++--
1046 drivers/media/pci/sta2x11/sta2x11_vip.c | 5 +++--
1047 drivers/net/hamradio/baycom_epp.c | 2 +-
1048 9 files changed, 38 insertions(+), 18 deletions(-)
1049
1050 commit f84420916698cdf33a81f046206d050e2c3e6966
1051 Merge: fa18ce2 445754e
1052 Author: Brad Spengler <spender@grsecurity.net>
1053 Date: Fri May 20 18:52:20 2016 -0400
1054
1055 Merge branch 'pax-test' into grsec-test
1056
1057 commit 445754e5717176c2b3431a0cde1e90df51cc43e2
1058 Author: Brad Spengler <spender@grsecurity.net>
1059 Date: Fri May 20 18:51:52 2016 -0400
1060
1061 Update to pax-linux-4.5.4-test8.patch:
1062 - fixed a USERCOPY report in the mwifiex driver, by Dennis Wassenberg <dennis.wassenberg@secunet.com> and Mathias Krause <minipli@ld-linux.so>
1063
1064 drivers/net/wireless/marvell/mwifiex/11n_aggr.c | 2 +-
1065 drivers/net/wireless/marvell/mwifiex/pcie.c | 4 ++--
1066 drivers/net/wireless/marvell/mwifiex/sdio.c | 10 ++++------
1067 3 files changed, 7 insertions(+), 9 deletions(-)
1068
1069 commit fa18ce2d37a92442162fb72b8f85ee86120ffacb
1070 Author: Brad Spengler <spender@grsecurity.net>
1071 Date: Thu May 19 18:30:08 2016 -0400
1072
1073 Update size_overflow hash, from Dr. Toth
1074
1075 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
1076 1 file changed, 1 insertion(+)
1077
1078 commit 61c487965dbc34618fe292663759d6fa0515bcad
1079 Merge: fbc84d2 a734dbd
1080 Author: Brad Spengler <spender@grsecurity.net>
1081 Date: Thu May 19 06:26:52 2016 -0400
1082
1083 Merge branch 'pax-test' into grsec-test
1084
1085 commit a734dbda8b785c38baa1858df2bffc89b45d070a
1086 Merge: 238dfca 3b41b7e
1087 Author: Brad Spengler <spender@grsecurity.net>
1088 Date: Thu May 19 06:24:25 2016 -0400
1089
1090 Merge branch 'linux-4.5.y' into pax-test
1091
1092 commit fbc84d202d311b4dc09bcc922678df60b6e76614
1093 Merge: 84fa82c 238dfca
1094 Author: Brad Spengler <spender@grsecurity.net>
1095 Date: Fri May 13 18:00:06 2016 -0400
1096
1097 Merge branch 'pax-test' into grsec-test
1098
1099 commit 238dfca3ffe87f4410e67c8ceb554b9ce4f3132b
1100 Author: Brad Spengler <spender@grsecurity.net>
1101 Date: Fri May 13 17:59:42 2016 -0400
1102
1103 Compile fix for older gcc
1104
1105 tools/gcc/size_overflow_plugin/intentional_overflow.c | 2 +-
1106 1 file changed, 1 insertion(+), 1 deletion(-)
1107
1108 commit 84fa82c59fa5051e1485a3dcc857b87b70dbc18d
1109 Merge: 2cece8e 4654023
1110 Author: Brad Spengler <spender@grsecurity.net>
1111 Date: Fri May 13 17:31:49 2016 -0400
1112
1113 Merge branch 'pax-test' into grsec-test
1114
1115 commit 4654023e72b0834142594eee879e657664498443
1116 Author: Brad Spengler <spender@grsecurity.net>
1117 Date: Fri May 13 17:29:38 2016 -0400
1118
1119 Update to pax-linux-4.5.4-test7.patch:
1120 - changed the RAP hash emission code to accomodate x86 disassemblers, suggested by Mathias Krause <minipli@ld-linux.so>
1121 - fixed a few size overflow false positives in JFS due to the lack of endian conversion macros for signed types, reported by ryonaloli via hunger
1122 - fixed a compiler assert triggered by the size overflow plugin
1123
1124 tools/gcc/rap_plugin/rap_plugin.c | 39 ++++++++++++++++++----
1125 .../disable_size_overflow_hash.data | 3 ++
1126 .../size_overflow_plugin/intentional_overflow.c | 2 +-
1127 .../size_overflow_plugin/size_overflow_hash.data | 3 --
1128 4 files changed, 36 insertions(+), 11 deletions(-)
1129
1130 commit 2cece8e8e0e2fce9943345c0ebebd7436929868e
1131 Merge: 6df0471 ea68d2e
1132 Author: Brad Spengler <spender@grsecurity.net>
1133 Date: Thu May 12 18:41:15 2016 -0400
1134
1135 Merge branch 'pax-test' into grsec-test
1136
1137 commit ea68d2e7123a83aba24db99d5ef487b1397fd6d0
1138 Author: Brad Spengler <spender@grsecurity.net>
1139 Date: Thu May 12 18:40:50 2016 -0400
1140
1141 Update to pax-linux-4.5.3-test6.patch:
1142 - really fixed https://forums.grsecurity.net/viewtopic.php?f=3&t=4473
1143 - the nfsd_proc_read fix for RAP had a typo causing an oops, reported by Carlos Carvalho (https://forums.grsecurity.net/viewtopic.php?f=3&t=4471)
1144 - fixed a few format string warnings in the RAP hash emission code, reported by Dwokfur
1145
1146 drivers/net/ppp/pptp.c | 1 -
1147 fs/nfsd/nfsproc.c | 2 +-
1148 tools/gcc/rap_plugin/rap_fptr_pass.c | 2 +-
1149 tools/gcc/rap_plugin/rap_plugin.c | 14 ++++++++++----
1150 4 files changed, 12 insertions(+), 7 deletions(-)
1151
1152 commit 6df04719a7cf4d3f60c9e6190f8eb4b986ce2b1b
1153 Author: David Howells <dhowells@redhat.com>
1154 Date: Tue Feb 23 11:03:12 2016 +0000
1155
1156 KEYS: Fix ASN.1 indefinite length object parsing
1157
1158 This fixes CVE-2016-0758.
1159
1160 In the ASN.1 decoder, when the length field of an ASN.1 value is extracted,
1161 it isn't validated against the remaining amount of data before being added
1162 to the cursor. With a sufficiently large size indicated, the check:
1163
1164 datalen - dp < 2
1165
1166 may then fail due to integer overflow.
1167
1168 Fix this by checking the length indicated against the amount of remaining
1169 data in both places a definite length is determined.
1170
1171 Whilst we're at it, make the following changes:
1172
1173 (1) Check the maximum size of extended length does not exceed the capacity
1174 of the variable it's being stored in (len) rather than the type that
1175 variable is assumed to be (size_t).
1176
1177 (2) Compare the EOC tag to the symbolic constant ASN1_EOC rather than the
1178 integer 0.
1179
1180 (3) To reduce confusion, move the initialisation of len outside of:
1181
1182 for (len = 0; n > 0; n--) {
1183
1184 since it doesn't have anything to do with the loop counter n.
1185
1186 Signed-off-by: David Howells <dhowells@redhat.com>
1187 Reviewed-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
1188 Acked-by: David Woodhouse <David.Woodhouse@intel.com>
1189 Acked-by: Peter Jones <pjones@redhat.com>
1190
1191 lib/asn1_decoder.c | 16 +++++++++-------
1192 1 file changed, 9 insertions(+), 7 deletions(-)
1193
1194 commit acb6cef8047476b8afc3ff3f07286b9e36de1b77
1195 Merge: 735f14a a7c9bec
1196 Author: Brad Spengler <spender@grsecurity.net>
1197 Date: Wed May 11 17:05:21 2016 -0400
1198
1199 Merge branch 'pax-test' into grsec-test
1200
1201 commit a7c9bec57dea73ceee1246a64df55038ea840be9
1202 Merge: f5bd134 a29ab35
1203 Author: Brad Spengler <spender@grsecurity.net>
1204 Date: Wed May 11 17:04:48 2016 -0400
1205
1206 Merge branch 'linux-4.5.y' into pax-test
1207
1208 commit 735f14a2b5562cd1329b263a81781d59dacffd3e
1209 Author: Brad Spengler <spender@grsecurity.net>
1210 Date: Wed May 11 06:57:40 2016 -0400
1211
1212 Fix typo in nfsd RAP changes causing oops reported by Carlos Carvalho
1213 at: https://forums.grsecurity.net/viewtopic.php?f=3&t=4471
1214
1215 fs/nfsd/nfsproc.c | 2 +-
1216 1 file changed, 1 insertion(+), 1 deletion(-)
1217
1218 commit 35e1e615072d0bb885b38ee1b2ada7a0a6a91f9d
1219 Merge: 9e3e5ae3e f5bd134
1220 Author: Brad Spengler <spender@grsecurity.net>
1221 Date: Tue May 10 20:56:54 2016 -0400
1222
1223 Merge branch 'pax-test' into grsec-test
1224
1225 commit f5bd1342fa631bb3b69a2e8919785c827c4edf74
1226 Author: Brad Spengler <spender@grsecurity.net>
1227 Date: Tue May 10 20:55:57 2016 -0400
1228
1229 Update to pax-linux-4.5.3-test5.patch:
1230 - marked all indirectly callable x86 asm crypto functions, reported by Dwokfur and minipli (https://forums.grsecurity.net/viewtopic.php?f=3&t=4468)
1231 - worked around an intentional integer overflow introduced by gcc-6 that triggered a size overflow false positive, reported by hooruD, chron and Fen (https://forums.grsecurity.net/viewtopic.php?f=3&t=4469)
1232 - made some preparations for enabling RAP on i386 as well, will have to wait due to KERNEXEC
1233
1234 arch/x86/crypto/aesni-intel_asm.S | 6 +++---
1235 arch/x86/crypto/sha-mb/sha1_mb_mgr_flush_avx2.S | 4 ++--
1236 arch/x86/crypto/sha-mb/sha1_mb_mgr_submit_avx2.S | 2 +-
1237 arch/x86/crypto/sha256_ni_asm.S | 2 +-
1238 arch/x86/crypto/twofish-i586-asm_32.S | 2 +-
1239 arch/x86/entry/common.c | 1 -
1240 include/linux/linkage.h | 22 +++++++++++++++-------
1241 tools/gcc/rap_plugin/rap_fptr_pass.c | 2 +-
1242 tools/gcc/rap_plugin/rap_hash.c | 1 +
1243 tools/gcc/rap_plugin/rap_plugin.c | 18 +++++++++---------
1244 .../disable_size_overflow_hash.data | 1 +
1245 .../size_overflow_plugin/size_overflow_hash.data | 1 -
1246 12 files changed, 35 insertions(+), 27 deletions(-)
1247
1248 commit 9e3e5ae3e9ed69452d4133490dd1831376b9a1e8
1249 Merge: e5983fd cfcaa03
1250 Author: Brad Spengler <spender@grsecurity.net>
1251 Date: Sun May 8 08:04:18 2016 -0400
1252
1253 Merge branch 'pax-test' into grsec-test
1254
1255 commit cfcaa036dd3756fc32e083a7c486c1143d93fd22
1256 Author: Brad Spengler <spender@grsecurity.net>
1257 Date: Sun May 8 08:03:53 2016 -0400
1258
1259 Update to pax-linux-4.5.3-test4.patch:
1260 - fixed a few incorrect function types (mostly start_xmit callbacks) found by RAP, reported by cinder (https://forums.grsecurity.net/viewtopic.php?f=3&t=4466)
1261
1262 drivers/char/tpm/tpm-chip.c | 7 ++++++-
1263 drivers/net/can/bfin_can.c | 2 +-
1264 drivers/net/can/flexcan.c | 2 +-
1265 drivers/net/ethernet/adi/bfin_mac.c | 2 +-
1266 drivers/net/ethernet/allwinner/sun4i-emac.c | 2 +-
1267 drivers/net/ethernet/amd/7990.c | 2 +-
1268 drivers/net/ethernet/amd/7990.h | 2 +-
1269 drivers/net/ethernet/amd/atarilance.c | 4 ++--
1270 drivers/net/ethernet/amd/declance.c | 2 +-
1271 drivers/net/ethernet/amd/sun3lance.c | 4 ++--
1272 drivers/net/ethernet/amd/sunlance.c | 2 +-
1273 drivers/net/ethernet/broadcom/bcm63xx_enet.c | 2 +-
1274 drivers/net/ethernet/davicom/dm9000.c | 2 +-
1275 drivers/net/ethernet/faraday/ftgmac100.c | 2 +-
1276 drivers/net/ethernet/faraday/ftmac100.c | 2 +-
1277 drivers/net/ethernet/freescale/fec_mpc52xx.c | 2 +-
1278 drivers/net/ethernet/freescale/fs_enet/fs_enet-main.c | 2 +-
1279 drivers/net/ethernet/freescale/gianfar.c | 4 ++--
1280 drivers/net/ethernet/freescale/ucc_geth.c | 2 +-
1281 drivers/net/ethernet/i825xx/lib82596.c | 4 ++--
1282 drivers/net/ethernet/ibm/ehea/ehea_main.c | 2 +-
1283 drivers/net/ethernet/ibm/emac/core.c | 4 ++--
1284 drivers/net/ethernet/micrel/ks8695net.c | 2 +-
1285 drivers/net/ethernet/moxa/moxart_ether.c | 2 +-
1286 drivers/net/ethernet/netx-eth.c | 2 +-
1287 drivers/net/ethernet/nuvoton/w90p910_ether.c | 2 +-
1288 drivers/net/ethernet/nxp/lpc_eth.c | 2 +-
1289 drivers/net/ethernet/seeq/sgiseeq.c | 2 +-
1290 drivers/net/ethernet/sgi/ioc3-eth.c | 4 ++--
1291 drivers/net/ethernet/smsc/smc911x.c | 2 +-
1292 drivers/net/ethernet/smsc/smc91x.c | 2 +-
1293 drivers/net/ethernet/sun/sunbmac.c | 2 +-
1294 drivers/net/ethernet/sun/sunqe.c | 2 +-
1295 drivers/net/ethernet/sun/sunvnet.c | 10 +++++-----
1296 drivers/net/ethernet/ti/cpmac.c | 2 +-
1297 drivers/net/ethernet/ti/netcp_core.c | 2 +-
1298 drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
1299 drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 2 +-
1300 drivers/net/xen-netback/interface.c | 2 +-
1301 drivers/net/xen-netfront.c | 2 +-
1302 40 files changed, 55 insertions(+), 50 deletions(-)
1303
1304 commit e5983fd19799feb3bf947cd0dc2b5435deee3332
1305 Merge: 5ecb84f a235ecd
1306 Author: Brad Spengler <spender@grsecurity.net>
1307 Date: Sat May 7 00:00:42 2016 -0400
1308
1309 Merge branch 'pax-test' into grsec-test
1310
1311 commit a235ecd8bdece417e83f9cf89c76607bf15955dc
1312 Author: Brad Spengler <spender@grsecurity.net>
1313 Date: Fri May 6 23:59:34 2016 -0400
1314
1315 Update to pax-linux-4.5.3-test3.patch:
1316 - fixed some more of PARAVIRT for RAP, reported by hunger
1317 - Emese increased the coverage of initify by marking up str* and mem* functions
1318 - added error reporting for refusing to load modules incompatible with KERNEXEC's 'or' method, reported by Martin Väth (https://bugs.gentoo.org/show_bug.cgi?id=581726)
1319
1320 arch/arm/include/asm/string.h | 10 ++---
1321 arch/arm64/include/asm/string.h | 22 +++++------
1322 arch/x86/boot/string.h | 4 +-
1323 arch/x86/include/asm/string_32.h | 20 +++++-----
1324 arch/x86/include/asm/string_64.h | 16 ++++----
1325 arch/x86/kernel/paravirt-spinlocks.c | 22 +++++++++--
1326 arch/x86/xen/mmu.c | 6 ++-
1327 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 ++---
1328 include/linux/string.h | 70 +++++++++++++++++-----------------
1329 include/linux/syscalls.h | 2 +-
1330 kernel/module.c | 4 +-
1331 mm/fadvise.c | 2 +-
1332 tools/gcc/randomize_layout_seed.h | 1 -
1333 tools/gcc/rap_plugin/rap_plugin.c | 7 +++-
1334 14 files changed, 109 insertions(+), 87 deletions(-)
1335
1336 commit 5ecb84f55a9bdf8b39054c23d90646ba0591ce1c
1337 Author: Brad Spengler <spender@grsecurity.net>
1338 Date: Fri May 6 08:51:58 2016 -0400
1339
1340 Remove !PARAVIRT dependency on RAP
1341
1342 security/Kconfig | 2 +-
1343 1 file changed, 1 insertion(+), 1 deletion(-)
1344
1345 commit eecd10d7c579d2601c384c1e9e0f062a8dda40e7
1346 Author: Brad Spengler <spender@grsecurity.net>
1347 Date: Fri May 6 06:34:48 2016 -0400
1348
1349 Update copyright year
1350
1351 tools/gcc/randomize_layout_plugin.c | 2 +-
1352 1 file changed, 1 insertion(+), 1 deletion(-)
1353
1354 commit 7d7e01439c2601abcae2ecfc66a883be258a2691
1355 Merge: 3315e83 c2aa83b
1356 Author: Brad Spengler <spender@grsecurity.net>
1357 Date: Fri May 6 06:34:25 2016 -0400
1358
1359 Merge branch 'pax-test' into grsec-test
1360
1361 commit c2aa83bf2d65989c262ff33312874ee7fe38606a
1362 Author: Brad Spengler <spender@grsecurity.net>
1363 Date: Fri May 6 06:34:04 2016 -0400
1364
1365 Update to pax-linux-4.5.2-test2.patch:
1366 - minipli fixed a few missing hunks left out from the 4.5 port
1367 - fixed a regression in handling user.pax.flags on tmpfs, reported by blueness and Stebalien (https://forums.grsecurity.net/viewtopic.php?f=3&t=4462)
1368 - fixed a few compile regressions on arm, reported by Wizzup
1369 - fixed PARAVIRT for RAP, reported by spender
1370 - fixed the very old PAGEEXEC/i386 TLB reload code for SMAP (not that it could work there), reported by spender
1371 - Emese fixed a false positive size overflow report caused by gcc-5 and newer, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4455)
1372
1373 arch/arm/Kconfig | 2 +-
1374 arch/arm/include/asm/domain.h | 2 +-
1375 arch/arm/kernel/process.c | 6 +
1376 arch/mips/mm/mmap.c | 27 ++++
1377 arch/powerpc/kernel/process.c | 39 +++++
1378 arch/s390/kernel/process.c | 13 ++
1379 arch/x86/entry/entry_32.S | 2 +-
1380 arch/x86/include/asm/fixmap.h | 2 +-
1381 arch/x86/kernel/paravirt.c | 90 +++++++++--
1382 arch/x86/mm/fault.c | 2 +
1383 arch/x86/mm/pgtable.c | 2 +-
1384 drivers/cpufreq/intel_pstate.c | 2 +-
1385 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 7 +-
1386 drivers/net/ethernet/8390/ax88796.c | 4 +-
1387 drivers/oprofile/oprofilefs.c | 4 +-
1388 drivers/platform/x86/thinkpad_acpi.c | 1 -
1389 fs/xattr.c | 2 +-
1390 include/asm-generic/atomic-long.h | 4 +
1391 include/uapi/linux/xattr.h | 3 +-
1392 kernel/module.c | 2 +-
1393 mm/shmem.c | 2 -
1394 security/Kconfig | 2 +
1395 .../insert_size_overflow_asm.c | 2 +-
1396 .../size_overflow_plugin/intentional_overflow.c | 80 ++++++++--
1397 .../size_overflow_plugin/remove_unnecessary_dup.c | 2 +-
1398 tools/gcc/size_overflow_plugin/size_overflow.h | 8 +-
1399 .../gcc/size_overflow_plugin/size_overflow_debug.c | 2 +-
1400 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 2 +-
1401 .../gcc/size_overflow_plugin/size_overflow_misc.c | 2 +-
1402 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
1403 .../size_overflow_plugin_hash.c | 2 +-
1404 .../size_overflow_plugin/size_overflow_transform.c | 34 ++---
1405 .../size_overflow_transform_core.c | 170 +++++++++++----------
1406 33 files changed, 370 insertions(+), 156 deletions(-)
1407
1408 commit 3315e83c1e9738784da3c1c5836dd13b7593a8f1
1409 Author: Brad Spengler <spender@grsecurity.net>
1410 Date: Wed May 4 21:03:36 2016 -0400
1411
1412 Add PAGEEXEC support for i386 !PAE on SMAP-capable processors
1413 (won't be used by anyone, just for correctness sake)
1414
1415 arch/x86/mm/fault.c | 2 ++
1416 1 file changed, 2 insertions(+)
1417
1418 commit b9e96108d2092c12e42e1810a62aec85f6ddc501
1419 Merge: 6d98323 a3273aa
1420 Author: Brad Spengler <spender@grsecurity.net>
1421 Date: Wed May 4 19:06:44 2016 -0400
1422
1423 Merge branch 'pax-test' into grsec-test
1424
1425 commit a3273aa2488f9e201620ee53af1acfd99c58650a
1426 Merge: e0e4c2c fbc310e
1427 Author: Brad Spengler <spender@grsecurity.net>
1428 Date: Wed May 4 19:06:36 2016 -0400
1429
1430 Merge branch 'linux-4.5.y' into pax-test
1431
1432 commit 6d98323e0b511bdb77b9ef11d84207219331ac69
1433 Author: Brad Spengler <spender@grsecurity.net>
1434 Date: Tue May 3 21:58:09 2016 -0400
1435
1436 Backport fix from http://www.spinics.net/lists/linux-usb/msg140243.html
1437
1438 drivers/usb/core/devio.c | 9 +++++----
1439 1 file changed, 5 insertions(+), 4 deletions(-)
1440
1441 commit b003c68f96dd6a483b515290756816b6c909f34f
1442 Author: Brad Spengler <spender@grsecurity.net>
1443 Date: Sun May 1 12:06:48 2016 -0400
1444
1445 Add note about RANDSTRUCT and the gcc runtime library exception
1446
1447 tools/gcc/randomize_layout_plugin.c | 5 +++++
1448 1 file changed, 5 insertions(+)
1449
1450 commit fe375f07d31c5d561fcca4016f7c33e885fa3586
1451 Author: Brad Spengler <spender@grsecurity.net>
1452 Date: Fri Apr 29 06:22:29 2016 -0400
1453
1454 Revert change to regmap_access_show()
1455
1456 drivers/base/regmap/regmap-debugfs.c | 3 +--
1457 1 file changed, 1 insertion(+), 2 deletions(-)
1458
1459 commit 3f5df6e7cf9716b4854fb282b6eb22cb1e52e92a
1460 Author: Brad Spengler <spender@grsecurity.net>
1461 Date: Fri Apr 29 06:20:12 2016 -0400
1462
1463 Merge a number of fixes from Mathias Krause
1464
1465 arch/x86/entry/entry_32.S | 2 +-
1466 drivers/base/regmap/regmap-debugfs.c | 3 ++-
1467 drivers/cpufreq/intel_pstate.c | 2 +-
1468 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 7 ++++++-
1469 drivers/oprofile/oprofilefs.c | 4 ++--
1470 drivers/platform/x86/thinkpad_acpi.c | 1 -
1471 init/Kconfig | 1 -
1472 kernel/module.c | 4 +---
1473 8 files changed, 13 insertions(+), 11 deletions(-)
1474
1475 commit 127927d7e57793eca299226cb31ecd9d235bbd62
1476 Author: Brad Spengler <spender@grsecurity.net>
1477 Date: Thu Apr 28 20:58:04 2016 -0400
1478
1479 Add temporary dependency on !PARAVIRT for RAP until some fallout can be fixed
1480
1481 security/Kconfig | 2 +-
1482 1 file changed, 1 insertion(+), 1 deletion(-)
1483
1484 commit d37fff4904eee095ce50ea522efbfaf2a4bcb47e
1485 Author: Brad Spengler <spender@grsecurity.net>
1486 Date: Thu Apr 28 18:44:18 2016 -0400
1487
1488 Update to pax-linux-4.5.2-test1y.patch
1489
1490 tools/gcc/rap_plugin/rap_plugin.c | 6 ++++--
1491 1 file changed, 4 insertions(+), 2 deletions(-)
1492
1493 commit 5e309719b190a24dccd73c8b6ae388bd7f34660b
1494 Merge: ac01f5e e0e4c2c
1495 Author: Brad Spengler <spender@grsecurity.net>
1496 Date: Thu Apr 28 17:37:37 2016 -0400
1497
1498 Merge branch 'pax-test' into grsec-test
1499
1500 commit e0e4c2ce05e0cd594b716a1e12d91928a0d083fd
1501 Author: Brad Spengler <spender@grsecurity.net>
1502 Date: Thu Apr 28 17:36:23 2016 -0400
1503
1504 Update to pax-linux-4.5.2-test1x.patch
1505
1506 arch/x86/include/asm/alternative-asm.h | 8 --------
1507 drivers/lguest/core.c | 2 +-
1508 kernel/sched/deadline.c | 4 ++--
1509 mm/swap.c | 7 ++++++-
1510 tools/gcc/colorize_plugin.c | 2 +-
1511 tools/gcc/gcc-common.h | 21 +++++++++++++++++++++
1512 6 files changed, 31 insertions(+), 13 deletions(-)
1513
1514 commit ac01f5eb279d93b10d63f87c9d851e039ab1bc3e
1515 Author: Brad Spengler <spender@grsecurity.net>
1516 Date: Thu Apr 28 17:35:14 2016 -0400
1517
1518 Initial import of grsecurity 3.1 for 4.5.2 with limited RAP support
1519
1520 Documentation/dontdiff | 2 +
1521 Documentation/kernel-parameters.txt | 11 +
1522 Documentation/sysctl/kernel.txt | 15 +
1523 Makefile | 5 +-
1524 arch/alpha/include/asm/cache.h | 4 +-
1525 arch/alpha/kernel/osf_sys.c | 12 +-
1526 arch/arc/Kconfig | 1 +
1527 arch/arm/Kconfig | 1 +
1528 arch/arm/Kconfig.debug | 1 +
1529 arch/arm/include/asm/thread_info.h | 7 +-
1530 arch/arm/kernel/entry-common.S | 8 +-
1531 arch/arm/kernel/process.c | 4 +-
1532 arch/arm/kernel/ptrace.c | 9 +
1533 arch/arm/kernel/traps.c | 7 +-
1534 arch/arm/mm/Kconfig | 4 +-
1535 arch/arm/mm/fault.c | 40 +-
1536 arch/arm/mm/mmap.c | 8 +-
1537 arch/arm/net/bpf_jit_32.c | 51 +-
1538 arch/arm64/Kconfig.debug | 1 +
1539 arch/avr32/include/asm/cache.h | 4 +-
1540 arch/blackfin/Kconfig.debug | 1 +
1541 arch/blackfin/include/asm/cache.h | 3 +-
1542 arch/cris/include/arch-v10/arch/cache.h | 3 +-
1543 arch/cris/include/arch-v32/arch/cache.h | 3 +-
1544 arch/frv/include/asm/cache.h | 3 +-
1545 arch/frv/mm/elf-fdpic.c | 4 +-
1546 arch/hexagon/include/asm/cache.h | 6 +-
1547 arch/ia64/Kconfig | 1 +
1548 arch/ia64/include/asm/cache.h | 3 +-
1549 arch/ia64/kernel/sys_ia64.c | 2 +
1550 arch/ia64/mm/hugetlbpage.c | 2 +
1551 arch/m32r/include/asm/cache.h | 4 +-
1552 arch/m68k/include/asm/cache.h | 4 +-
1553 arch/metag/mm/hugetlbpage.c | 1 +
1554 arch/microblaze/include/asm/cache.h | 3 +-
1555 arch/mips/Kconfig | 1 +
1556 arch/mips/include/asm/thread_info.h | 11 +-
1557 arch/mips/kernel/irq.c | 3 +
1558 arch/mips/kernel/ptrace.c | 9 +
1559 arch/mips/mm/mmap.c | 4 +-
1560 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
1561 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
1562 arch/nios2/lib/memset.c | 2 +-
1563 arch/openrisc/include/asm/cache.h | 4 +-
1564 arch/parisc/include/asm/cache.h | 3 +
1565 arch/parisc/kernel/sys_parisc.c | 4 +
1566 arch/powerpc/Kconfig | 1 +
1567 arch/powerpc/include/asm/cache.h | 4 +-
1568 arch/powerpc/include/asm/thread_info.h | 5 +-
1569 arch/powerpc/kernel/Makefile | 2 +
1570 arch/powerpc/kernel/irq.c | 3 +
1571 arch/powerpc/kernel/process.c | 10 +-
1572 arch/powerpc/kernel/ptrace.c | 14 +
1573 arch/powerpc/kernel/traps.c | 5 +
1574 arch/powerpc/mm/slice.c | 2 +-
1575 arch/s390/Kconfig.debug | 1 +
1576 arch/s390/include/asm/cache.h | 4 +-
1577 arch/score/include/asm/cache.h | 4 +-
1578 arch/sh/include/asm/cache.h | 3 +-
1579 arch/sh/mm/mmap.c | 6 +-
1580 arch/sparc/include/asm/cache.h | 4 +-
1581 arch/sparc/include/asm/pgalloc_64.h | 1 +
1582 arch/sparc/include/asm/thread_info_64.h | 8 +-
1583 arch/sparc/kernel/process_32.c | 6 +-
1584 arch/sparc/kernel/process_64.c | 8 +-
1585 arch/sparc/kernel/ptrace_64.c | 14 +
1586 arch/sparc/kernel/sys_sparc_64.c | 8 +-
1587 arch/sparc/kernel/syscalls.S | 8 +-
1588 arch/sparc/kernel/traps_32.c | 8 +-
1589 arch/sparc/kernel/traps_64.c | 28 +-
1590 arch/sparc/kernel/unaligned_64.c | 2 +-
1591 arch/sparc/mm/fault_64.c | 2 +-
1592 arch/sparc/mm/hugetlbpage.c | 15 +-
1593 arch/tile/Kconfig | 1 +
1594 arch/tile/include/asm/cache.h | 3 +-
1595 arch/tile/mm/hugetlbpage.c | 2 +
1596 arch/um/include/asm/cache.h | 3 +-
1597 arch/unicore32/include/asm/cache.h | 6 +-
1598 arch/x86/Kconfig | 21 +
1599 arch/x86/Kconfig.debug | 2 +
1600 arch/x86/crypto/sha-mb/sha1_mb.c | 4 +-
1601 arch/x86/entry/common.c | 14 +
1602 arch/x86/entry/entry_32.S | 2 +-
1603 arch/x86/entry/entry_64.S | 2 +-
1604 arch/x86/ia32/ia32_aout.c | 2 +
1605 arch/x86/include/asm/floppy.h | 20 +-
1606 arch/x86/include/asm/fpu/types.h | 69 +-
1607 arch/x86/include/asm/io.h | 2 +-
1608 arch/x86/include/asm/page.h | 12 +-
1609 arch/x86/include/asm/paravirt_types.h | 21 +-
1610 arch/x86/include/asm/processor.h | 12 +-
1611 arch/x86/include/asm/thread_info.h | 6 +-
1612 arch/x86/kernel/dumpstack.c | 10 +-
1613 arch/x86/kernel/dumpstack_32.c | 2 +-
1614 arch/x86/kernel/dumpstack_64.c | 2 +-
1615 arch/x86/kernel/ioport.c | 13 +
1616 arch/x86/kernel/irq_32.c | 3 +
1617 arch/x86/kernel/irq_64.c | 4 +
1618 arch/x86/kernel/ldt.c | 18 +
1619 arch/x86/kernel/msr.c | 10 +
1620 arch/x86/kernel/ptrace.c | 14 +
1621 arch/x86/kernel/signal.c | 9 +-
1622 arch/x86/kernel/sys_i386_32.c | 9 +-
1623 arch/x86/kernel/sys_x86_64.c | 8 +-
1624 arch/x86/kernel/traps.c | 5 +
1625 arch/x86/kernel/verify_cpu.S | 1 +
1626 arch/x86/kernel/vm86_32.c | 15 +
1627 arch/x86/mm/fault.c | 12 +-
1628 arch/x86/mm/hugetlbpage.c | 15 +-
1629 arch/x86/mm/init.c | 66 +-
1630 arch/x86/mm/init_32.c | 6 +-
1631 arch/x86/net/bpf_jit_comp.c | 4 +
1632 arch/x86/platform/efi/efi_64.c | 2 +-
1633 arch/x86/xen/Kconfig | 1 +
1634 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
1635 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
1636 crypto/scatterwalk.c | 10 +-
1637 drivers/acpi/acpica/hwxfsleep.c | 11 +-
1638 drivers/acpi/custom_method.c | 4 +
1639 drivers/block/cciss.h | 30 +-
1640 drivers/block/smart1,2.h | 40 +-
1641 drivers/cdrom/cdrom.c | 2 +-
1642 drivers/char/Kconfig | 4 +-
1643 drivers/char/genrtc.c | 1 +
1644 drivers/char/mem.c | 17 +
1645 drivers/char/random.c | 5 +-
1646 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
1647 drivers/crypto/ccp/ccp-crypto-aes-cmac.c | 3 +
1648 drivers/crypto/ccp/ccp-crypto-sha.c | 3 +
1649 drivers/crypto/marvell/cesa.h | 3 +-
1650 drivers/crypto/marvell/hash.c | 106 +-
1651 drivers/firewire/ohci.c | 4 +
1652 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 78 +-
1653 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
1654 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
1655 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
1656 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
1657 drivers/hid/hid-wiimote-debug.c | 2 +-
1658 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
1659 drivers/input/touchscreen/sur40.c | 21 +-
1660 drivers/iommu/Kconfig | 1 +
1661 drivers/iommu/amd_iommu.c | 14 +-
1662 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
1663 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
1664 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
1665 drivers/isdn/i4l/isdn_concap.c | 6 +-
1666 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
1667 drivers/lguest/core.c | 2 +-
1668 drivers/md/bcache/Kconfig | 1 +
1669 drivers/md/raid5.c | 8 +
1670 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
1671 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
1672 drivers/media/radio/radio-cadet.c | 5 +-
1673 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
1674 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
1675 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
1676 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
1677 drivers/message/fusion/mptbase.c | 9 +
1678 drivers/misc/sgi-xp/xp_main.c | 12 +-
1679 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
1680 drivers/net/ethernet/mellanox/mlx4/en_rx.c | 2 +-
1681 drivers/net/hyperv/hyperv_net.h | 7 +-
1682 drivers/net/hyperv/netvsc_drv.c | 5 +-
1683 drivers/net/hyperv/rndis_filter.c | 4 +-
1684 drivers/net/wan/lmc/lmc_media.c | 97 +-
1685 drivers/net/wan/z85230.c | 24 +-
1686 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
1687 drivers/net/wireless/zydas/zd1211rw/zd_usb.c | 2 +-
1688 drivers/pci/proc.c | 9 +
1689 drivers/platform/x86/asus-wmi.c | 12 +
1690 drivers/rtc/rtc-dev.c | 3 +
1691 drivers/scsi/bfa/bfa_fcs.c | 19 +-
1692 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
1693 drivers/scsi/bfa/bfa_modules.h | 12 +-
1694 drivers/scsi/cxgbi/libcxgbi.c | 1 +
1695 drivers/scsi/hpsa.h | 40 +-
1696 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
1697 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
1698 drivers/staging/wilc1000/host_interface.h | 1 +
1699 drivers/staging/wilc1000/wilc_spi.c | 1 +
1700 drivers/tty/serial/uartlite.c | 4 +-
1701 drivers/tty/sysrq.c | 2 +-
1702 drivers/tty/tty_io.c | 4 +
1703 drivers/tty/vt/keyboard.c | 22 +-
1704 drivers/uio/uio.c | 6 +-
1705 drivers/usb/core/hub.c | 5 +
1706 drivers/usb/gadget/function/f_uac1.c | 1 +
1707 drivers/usb/gadget/function/u_uac1.c | 1 +
1708 drivers/usb/host/hwa-hc.c | 9 +-
1709 drivers/usb/usbip/usbip_common.c | 11 +
1710 drivers/usb/usbip/vhci_sysfs.c | 2 +-
1711 drivers/video/fbdev/arcfb.c | 2 +-
1712 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
1713 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
1714 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
1715 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++----
1716 drivers/xen/xenfs/xenstored.c | 5 +
1717 firmware/Makefile | 2 +
1718 firmware/WHENCE | 20 +-
1719 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
1720 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
1721 fs/attr.c | 4 +
1722 fs/autofs4/waitq.c | 9 +
1723 fs/binfmt_aout.c | 7 +
1724 fs/binfmt_elf.c | 40 +-
1725 fs/compat.c | 20 +-
1726 fs/coredump.c | 17 +-
1727 fs/dcache.c | 3 +
1728 fs/debugfs/inode.c | 19 +-
1729 fs/ecryptfs/keystore.c | 6 +-
1730 fs/exec.c | 235 +-
1731 fs/ext2/balloc.c | 4 +-
1732 fs/ext2/super.c | 8 +-
1733 fs/ext4/balloc.c | 4 +-
1734 fs/ext4/extents.c | 2 +-
1735 fs/fcntl.c | 4 +
1736 fs/fhandle.c | 3 +-
1737 fs/file.c | 4 +
1738 fs/filesystems.c | 4 +
1739 fs/fs_struct.c | 20 +-
1740 fs/hugetlbfs/inode.c | 5 +-
1741 fs/inode.c | 8 +-
1742 fs/kernfs/dir.c | 6 +
1743 fs/mount.h | 4 +-
1744 fs/namei.c | 295 +-
1745 fs/namespace.c | 24 +
1746 fs/nfsd/nfscache.c | 2 +-
1747 fs/open.c | 38 +
1748 fs/overlayfs/inode.c | 3 +
1749 fs/overlayfs/super.c | 6 +-
1750 fs/pipe.c | 2 +-
1751 fs/posix_acl.c | 15 +-
1752 fs/proc/Kconfig | 10 +-
1753 fs/proc/array.c | 67 +-
1754 fs/proc/base.c | 175 +-
1755 fs/proc/cmdline.c | 4 +
1756 fs/proc/devices.c | 4 +
1757 fs/proc/fd.c | 13 +-
1758 fs/proc/generic.c | 64 +
1759 fs/proc/inode.c | 17 +
1760 fs/proc/internal.h | 11 +-
1761 fs/proc/interrupts.c | 4 +
1762 fs/proc/kcore.c | 3 +
1763 fs/proc/proc_net.c | 31 +
1764 fs/proc/proc_sysctl.c | 52 +-
1765 fs/proc/root.c | 8 +
1766 fs/proc/stat.c | 69 +-
1767 fs/proc/task_mmu.c | 66 +-
1768 fs/readdir.c | 19 +
1769 fs/reiserfs/item_ops.c | 24 +-
1770 fs/reiserfs/super.c | 4 +
1771 fs/select.c | 2 +
1772 fs/seq_file.c | 30 +-
1773 fs/stat.c | 20 +-
1774 fs/sysfs/dir.c | 30 +-
1775 fs/utimes.c | 7 +
1776 fs/xattr.c | 26 +-
1777 grsecurity/Kconfig | 1205 ++++
1778 grsecurity/Makefile | 54 +
1779 grsecurity/gracl.c | 2757 +++++++++
1780 grsecurity/gracl_alloc.c | 105 +
1781 grsecurity/gracl_cap.c | 127 +
1782 grsecurity/gracl_compat.c | 269 +
1783 grsecurity/gracl_fs.c | 448 ++
1784 grsecurity/gracl_ip.c | 386 ++
1785 grsecurity/gracl_learn.c | 207 +
1786 grsecurity/gracl_policy.c | 1784 ++++++
1787 grsecurity/gracl_res.c | 68 +
1788 grsecurity/gracl_segv.c | 304 +
1789 grsecurity/gracl_shm.c | 40 +
1790 grsecurity/grsec_chdir.c | 19 +
1791 grsecurity/grsec_chroot.c | 506 ++
1792 grsecurity/grsec_disabled.c | 445 ++
1793 grsecurity/grsec_exec.c | 189 +
1794 grsecurity/grsec_fifo.c | 26 +
1795 grsecurity/grsec_fork.c | 23 +
1796 grsecurity/grsec_init.c | 294 +
1797 grsecurity/grsec_ipc.c | 48 +
1798 grsecurity/grsec_link.c | 65 +
1799 grsecurity/grsec_log.c | 340 +
1800 grsecurity/grsec_mem.c | 48 +
1801 grsecurity/grsec_mount.c | 65 +
1802 grsecurity/grsec_pax.c | 47 +
1803 grsecurity/grsec_proc.c | 20 +
1804 grsecurity/grsec_ptrace.c | 30 +
1805 grsecurity/grsec_sig.c | 245 +
1806 grsecurity/grsec_sock.c | 244 +
1807 grsecurity/grsec_sysctl.c | 497 ++
1808 grsecurity/grsec_time.c | 16 +
1809 grsecurity/grsec_tpe.c | 78 +
1810 grsecurity/grsec_tty.c | 18 +
1811 grsecurity/grsec_usb.c | 15 +
1812 grsecurity/grsum.c | 54 +
1813 include/linux/binfmts.h | 5 +-
1814 include/linux/capability.h | 13 +
1815 include/linux/compiler-gcc.h | 5 +
1816 include/linux/compiler.h | 8 +
1817 include/linux/cred.h | 8 +-
1818 include/linux/dcache.h | 5 +-
1819 include/linux/fs.h | 24 +-
1820 include/linux/fs_struct.h | 2 +-
1821 include/linux/fsnotify.h | 6 +
1822 include/linux/gracl.h | 342 ++
1823 include/linux/gracl_compat.h | 156 +
1824 include/linux/gralloc.h | 9 +
1825 include/linux/grdefs.h | 140 +
1826 include/linux/grinternal.h | 231 +
1827 include/linux/grmsg.h | 120 +
1828 include/linux/grsecurity.h | 259 +
1829 include/linux/grsock.h | 19 +
1830 include/linux/ipc.h | 2 +-
1831 include/linux/ipc_namespace.h | 2 +-
1832 include/linux/kallsyms.h | 18 +-
1833 include/linux/key-type.h | 4 +-
1834 include/linux/kmod.h | 5 +
1835 include/linux/kobject.h | 2 +-
1836 include/linux/lsm_hooks.h | 4 +-
1837 include/linux/mm.h | 12 +
1838 include/linux/mm_types.h | 4 +-
1839 include/linux/module.h | 5 +-
1840 include/linux/mount.h | 2 +-
1841 include/linux/msg.h | 2 +-
1842 include/linux/netfilter/xt_gradm.h | 9 +
1843 include/linux/path.h | 4 +-
1844 include/linux/perf_event.h | 13 +-
1845 include/linux/pid_namespace.h | 2 +-
1846 include/linux/printk.h | 2 +-
1847 include/linux/proc_fs.h | 22 +-
1848 include/linux/proc_ns.h | 2 +-
1849 include/linux/random.h | 2 +-
1850 include/linux/rbtree_augmented.h | 4 +-
1851 include/linux/scatterlist.h | 12 +-
1852 include/linux/sched.h | 114 +-
1853 include/linux/security.h | 1 +
1854 include/linux/sem.h | 2 +-
1855 include/linux/seq_file.h | 5 +
1856 include/linux/shm.h | 6 +-
1857 include/linux/skbuff.h | 3 +
1858 include/linux/slab.h | 9 -
1859 include/linux/sysctl.h | 8 +-
1860 include/linux/thread_info.h | 6 +-
1861 include/linux/tty.h | 2 +-
1862 include/linux/tty_driver.h | 4 +-
1863 include/linux/uidgid.h | 5 +
1864 include/linux/user_namespace.h | 2 +-
1865 include/linux/utsname.h | 2 +-
1866 include/linux/vermagic.h | 16 +-
1867 include/linux/vmalloc.h | 8 +
1868 include/net/af_unix.h | 2 +-
1869 include/net/ip.h | 2 +-
1870 include/net/neighbour.h | 2 +-
1871 include/net/net_namespace.h | 2 +-
1872 include/net/sctp/structs.h | 2 +-
1873 include/net/sock.h | 2 +-
1874 include/trace/events/fs.h | 53 +
1875 include/uapi/linux/personality.h | 1 +
1876 init/Kconfig | 4 +
1877 init/main.c | 46 +-
1878 ipc/mqueue.c | 1 +
1879 ipc/msg.c | 3 +-
1880 ipc/msgutil.c | 4 +-
1881 ipc/sem.c | 3 +-
1882 ipc/shm.c | 26 +-
1883 ipc/util.c | 6 +
1884 kernel/auditsc.c | 2 +-
1885 kernel/bpf/syscall.c | 10 +-
1886 kernel/bpf/verifier.c | 1 -
1887 kernel/capability.c | 41 +-
1888 kernel/cgroup.c | 5 +-
1889 kernel/compat.c | 1 +
1890 kernel/configs.c | 11 +
1891 kernel/cred.c | 112 +-
1892 kernel/events/core.c | 14 +-
1893 kernel/exit.c | 10 +-
1894 kernel/fork.c | 86 +-
1895 kernel/futex.c | 4 +-
1896 kernel/kallsyms.c | 9 +
1897 kernel/kcmp.c | 4 +
1898 kernel/kexec_core.c | 2 +-
1899 kernel/kmod.c | 96 +-
1900 kernel/kprobes.c | 9 +-
1901 kernel/ksysfs.c | 2 +
1902 kernel/locking/lockdep_proc.c | 10 +-
1903 kernel/module.c | 110 +-
1904 kernel/panic.c | 4 +-
1905 kernel/pid.c | 18 +-
1906 kernel/power/Kconfig | 2 +
1907 kernel/printk/printk.c | 7 +-
1908 kernel/ptrace.c | 50 +-
1909 kernel/resource.c | 10 +
1910 kernel/sched/core.c | 11 +-
1911 kernel/sched/debug.c | 4 +
1912 kernel/signal.c | 37 +-
1913 kernel/sys.c | 64 +-
1914 kernel/sysctl.c | 172 +-
1915 kernel/taskstats.c | 6 +
1916 kernel/time/posix-timers.c | 8 +
1917 kernel/time/time.c | 5 +
1918 kernel/time/timekeeping.c | 3 +
1919 kernel/time/timer_list.c | 13 +-
1920 kernel/time/timer_stats.c | 10 +-
1921 kernel/trace/Kconfig | 2 +
1922 kernel/trace/trace_syscalls.c | 8 +
1923 kernel/user_namespace.c | 15 +
1924 kernel/workqueue.c | 29 +
1925 lib/Kconfig.debug | 12 +-
1926 lib/Kconfig.kasan | 2 +-
1927 lib/is_single_threaded.c | 3 +
1928 lib/list_debug.c | 65 +-
1929 lib/nlattr.c | 2 +
1930 lib/rbtree.c | 4 +-
1931 lib/vsprintf.c | 39 +-
1932 localversion-grsec | 1 +
1933 mm/Kconfig | 8 +-
1934 mm/Kconfig.debug | 1 +
1935 mm/filemap.c | 8 +-
1936 mm/kmemleak.c | 4 +-
1937 mm/memory.c | 2 +-
1938 mm/mempolicy.c | 12 +-
1939 mm/migrate.c | 3 +-
1940 mm/mlock.c | 11 +-
1941 mm/mmap.c | 127 +-
1942 mm/mprotect.c | 8 +
1943 mm/oom_kill.c | 4 +
1944 mm/page_alloc.c | 2 +-
1945 mm/process_vm_access.c | 6 +
1946 mm/shmem.c | 2 +-
1947 mm/slab.c | 14 +-
1948 mm/slab_common.c | 2 +-
1949 mm/slob.c | 12 +
1950 mm/slub.c | 33 +-
1951 mm/swap.c | 6 +-
1952 mm/util.c | 3 +
1953 mm/vmalloc.c | 82 +-
1954 mm/vmstat.c | 29 +-
1955 net/appletalk/atalk_proc.c | 2 +-
1956 net/atm/lec.c | 6 +-
1957 net/atm/mpoa_caches.c | 43 +-
1958 net/bridge/netfilter/ebtables.c | 4 +
1959 net/can/bcm.c | 2 +-
1960 net/can/proc.c | 2 +-
1961 net/core/dev_ioctl.c | 7 +-
1962 net/core/filter.c | 8 +-
1963 net/core/net-procfs.c | 17 +-
1964 net/core/pktgen.c | 2 +-
1965 net/core/sock.c | 23 +-
1966 net/core/sysctl_net_core.c | 2 +-
1967 net/decnet/dn_dev.c | 2 +-
1968 net/ipv4/devinet.c | 6 +-
1969 net/ipv4/inet_hashtables.c | 4 +
1970 net/ipv4/ip_input.c | 7 +
1971 net/ipv4/ip_sockglue.c | 3 +-
1972 net/ipv4/netfilter/arp_tables.c | 43 +-
1973 net/ipv4/netfilter/ip_tables.c | 48 +-
1974 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
1975 net/ipv4/route.c | 6 +-
1976 net/ipv4/tcp_input.c | 6 +-
1977 net/ipv4/tcp_ipv4.c | 24 +-
1978 net/ipv4/tcp_minisocks.c | 9 +-
1979 net/ipv4/tcp_timer.c | 11 +
1980 net/ipv4/udp.c | 24 +
1981 net/ipv6/addrconf.c | 13 +-
1982 net/ipv6/netfilter/ip6_tables.c | 48 +-
1983 net/ipv6/proc.c | 2 +-
1984 net/ipv6/tcp_ipv6.c | 23 +-
1985 net/ipv6/udp.c | 7 +
1986 net/ipx/ipx_proc.c | 2 +-
1987 net/irda/irproc.c | 2 +-
1988 net/llc/llc_proc.c | 2 +-
1989 net/netfilter/Kconfig | 10 +
1990 net/netfilter/Makefile | 1 +
1991 net/netfilter/nf_conntrack_core.c | 8 +
1992 net/netfilter/xt_gradm.c | 51 +
1993 net/netfilter/xt_hashlimit.c | 4 +-
1994 net/netfilter/xt_recent.c | 2 +-
1995 net/packet/af_packet.c | 1 +
1996 net/sctp/bind_addr.c | 14 +-
1997 net/sctp/protocol.c | 1 +
1998 net/sctp/sm_make_chunk.c | 3 +-
1999 net/sctp/socket.c | 4 +-
2000 net/socket.c | 75 +-
2001 net/sunrpc/Kconfig | 1 +
2002 net/sunrpc/cache.c | 2 +-
2003 net/sunrpc/stats.c | 2 +-
2004 net/sysctl_net.c | 2 +-
2005 net/unix/af_unix.c | 52 +-
2006 net/vmw_vsock/vmci_transport_notify.c | 30 +-
2007 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
2008 net/x25/sysctl_net_x25.c | 2 +-
2009 net/x25/x25_proc.c | 2 +-
2010 scripts/package/Makefile | 2 +-
2011 scripts/package/mkspec | 41 +-
2012 security/Kconfig | 364 +-
2013 security/apparmor/file.c | 4 +-
2014 security/apparmor/lsm.c | 8 +-
2015 security/commoncap.c | 29 +
2016 security/keys/internal.h | 2 +-
2017 security/min_addr.c | 2 +
2018 security/tomoyo/file.c | 12 +-
2019 security/tomoyo/mount.c | 4 +
2020 security/tomoyo/tomoyo.c | 20 +-
2021 security/yama/Kconfig | 2 +-
2022 sound/synth/emux/emux_seq.c | 14 +-
2023 sound/usb/line6/driver.c | 40 +-
2024 sound/usb/line6/toneport.c | 12 +-
2025 tools/gcc/.gitignore | 1 +
2026 tools/gcc/Makefile | 12 +
2027 tools/gcc/gen-random-seed.sh | 8 +
2028 tools/gcc/randomize_layout_plugin.c | 935 +++
2029 tools/gcc/randomize_layout_seed.h | 1 -
2030 .../size_overflow_plugin/size_overflow_hash.data | 202 +-
2031 511 files changed, 32630 insertions(+), 3134 deletions(-)
2032
2033 commit a89837d0fc99aab94b5c8b975215de260271c1f7
2034 Author: Brad Spengler <spender@grsecurity.net>
2035 Date: Wed Apr 27 20:43:37 2016 -0400
2036
2037 Initial port of PaX to 4.5.2 with a limited form of RAP
2038 (< 1/5th the total size of the full developed RAP plugin)
2039 No retaddr protection via XOR canary
2040 No C++ support
2041 No LTO support
2042 Removal of a few optimization passes
2043 No compile time reporting of bad fptr casts
2044
2045 The RAP plugin should therefore be used only to compile an
2046 appropriate vanilla kernel with this patch.
2047
2048 Documentation/dontdiff | 46 +-
2049 Documentation/kbuild/makefiles.txt | 39 +-
2050 Documentation/kernel-parameters.txt | 28 +
2051 Makefile | 52 +-
2052 arch/alpha/include/asm/atomic.h | 10 +
2053 arch/alpha/include/asm/elf.h | 7 +
2054 arch/alpha/include/asm/pgalloc.h | 6 +
2055 arch/alpha/include/asm/pgtable.h | 11 +
2056 arch/alpha/kernel/module.c | 2 +-
2057 arch/alpha/kernel/osf_sys.c | 8 +-
2058 arch/alpha/mm/fault.c | 141 +-
2059 arch/arm/Kconfig | 3 +-
2060 arch/arm/include/asm/atomic.h | 323 +-
2061 arch/arm/include/asm/cache.h | 5 +-
2062 arch/arm/include/asm/cacheflush.h | 2 +-
2063 arch/arm/include/asm/checksum.h | 14 +-
2064 arch/arm/include/asm/cmpxchg.h | 4 +
2065 arch/arm/include/asm/cpuidle.h | 2 +-
2066 arch/arm/include/asm/domain.h | 42 +-
2067 arch/arm/include/asm/elf.h | 9 +-
2068 arch/arm/include/asm/fncpy.h | 2 +
2069 arch/arm/include/asm/futex.h | 1 +
2070 arch/arm/include/asm/kmap_types.h | 2 +-
2071 arch/arm/include/asm/mach/dma.h | 2 +-
2072 arch/arm/include/asm/mach/map.h | 16 +-
2073 arch/arm/include/asm/outercache.h | 2 +-
2074 arch/arm/include/asm/page.h | 3 +-
2075 arch/arm/include/asm/pgalloc.h | 20 +
2076 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
2077 arch/arm/include/asm/pgtable-2level.h | 3 +
2078 arch/arm/include/asm/pgtable-3level.h | 3 +
2079 arch/arm/include/asm/pgtable.h | 54 +-
2080 arch/arm/include/asm/smp.h | 2 +-
2081 arch/arm/include/asm/thread_info.h | 3 +
2082 arch/arm/include/asm/tls.h | 3 +
2083 arch/arm/include/asm/uaccess.h | 113 +-
2084 arch/arm/include/uapi/asm/ptrace.h | 2 +-
2085 arch/arm/kernel/armksyms.c | 2 +-
2086 arch/arm/kernel/cpuidle.c | 2 +-
2087 arch/arm/kernel/entry-armv.S | 109 +-
2088 arch/arm/kernel/entry-common.S | 40 +-
2089 arch/arm/kernel/entry-header.S | 55 +
2090 arch/arm/kernel/fiq.c | 3 +
2091 arch/arm/kernel/module-plts.c | 7 +-
2092 arch/arm/kernel/module.c | 38 +-
2093 arch/arm/kernel/patch.c | 2 +
2094 arch/arm/kernel/process.c | 92 +-
2095 arch/arm/kernel/reboot.c | 1 +
2096 arch/arm/kernel/setup.c | 20 +-
2097 arch/arm/kernel/signal.c | 35 +-
2098 arch/arm/kernel/smp.c | 2 +-
2099 arch/arm/kernel/tcm.c | 4 +-
2100 arch/arm/kernel/vmlinux.lds.S | 6 +-
2101 arch/arm/kvm/arm.c | 8 +-
2102 arch/arm/lib/copy_page.S | 1 +
2103 arch/arm/lib/csumpartialcopyuser.S | 4 +-
2104 arch/arm/lib/delay.c | 2 +-
2105 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
2106 arch/arm/mach-exynos/suspend.c | 6 +-
2107 arch/arm/mach-mvebu/coherency.c | 4 +-
2108 arch/arm/mach-omap2/board-n8x0.c | 2 +-
2109 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
2110 arch/arm/mach-omap2/omap-smp.c | 1 +
2111 arch/arm/mach-omap2/omap_device.c | 4 +-
2112 arch/arm/mach-omap2/omap_device.h | 4 +-
2113 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
2114 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
2115 arch/arm/mach-omap2/wd_timer.c | 6 +-
2116 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
2117 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
2118 arch/arm/mach-tegra/irq.c | 1 +
2119 arch/arm/mach-ux500/pm.c | 1 +
2120 arch/arm/mach-zynq/platsmp.c | 1 +
2121 arch/arm/mm/Kconfig | 6 +-
2122 arch/arm/mm/cache-l2x0.c | 2 +-
2123 arch/arm/mm/context.c | 10 +-
2124 arch/arm/mm/fault.c | 146 +
2125 arch/arm/mm/fault.h | 12 +
2126 arch/arm/mm/init.c | 39 +
2127 arch/arm/mm/ioremap.c | 4 +-
2128 arch/arm/mm/mmap.c | 36 +-
2129 arch/arm/mm/mmu.c | 162 +-
2130 arch/arm/net/bpf_jit_32.c | 3 +
2131 arch/arm/plat-iop/setup.c | 2 +-
2132 arch/arm/plat-omap/sram.c | 2 +
2133 arch/arm64/include/asm/atomic.h | 10 +
2134 arch/arm64/include/asm/percpu.h | 8 +-
2135 arch/arm64/include/asm/pgalloc.h | 5 +
2136 arch/arm64/include/asm/uaccess.h | 1 +
2137 arch/arm64/mm/dma-mapping.c | 2 +-
2138 arch/avr32/include/asm/elf.h | 8 +-
2139 arch/avr32/include/asm/kmap_types.h | 4 +-
2140 arch/avr32/mm/fault.c | 27 +
2141 arch/frv/include/asm/atomic.h | 10 +
2142 arch/frv/include/asm/kmap_types.h | 2 +-
2143 arch/frv/mm/elf-fdpic.c | 3 +-
2144 arch/ia64/Makefile | 1 +
2145 arch/ia64/include/asm/atomic.h | 10 +
2146 arch/ia64/include/asm/elf.h | 7 +
2147 arch/ia64/include/asm/pgalloc.h | 12 +
2148 arch/ia64/include/asm/pgtable.h | 13 +-
2149 arch/ia64/include/asm/spinlock.h | 2 +-
2150 arch/ia64/include/asm/uaccess.h | 27 +-
2151 arch/ia64/kernel/module.c | 20 +-
2152 arch/ia64/kernel/palinfo.c | 2 +-
2153 arch/ia64/kernel/sys_ia64.c | 7 +
2154 arch/ia64/kernel/vmlinux.lds.S | 2 +-
2155 arch/ia64/mm/fault.c | 32 +-
2156 arch/ia64/mm/init.c | 15 +-
2157 arch/m32r/lib/usercopy.c | 6 +
2158 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
2159 arch/mips/include/asm/atomic.h | 372 +-
2160 arch/mips/include/asm/cache.h | 3 +-
2161 arch/mips/include/asm/elf.h | 7 +
2162 arch/mips/include/asm/exec.h | 2 +-
2163 arch/mips/include/asm/hw_irq.h | 2 +-
2164 arch/mips/include/asm/local.h | 57 +
2165 arch/mips/include/asm/page.h | 2 +-
2166 arch/mips/include/asm/pgalloc.h | 5 +
2167 arch/mips/include/asm/pgtable.h | 3 +
2168 arch/mips/include/asm/uaccess.h | 1 +
2169 arch/mips/kernel/binfmt_elfn32.c | 7 +
2170 arch/mips/kernel/binfmt_elfo32.c | 7 +
2171 arch/mips/kernel/irq-gt641xx.c | 2 +-
2172 arch/mips/kernel/irq.c | 6 +-
2173 arch/mips/kernel/pm-cps.c | 2 +-
2174 arch/mips/kernel/process.c | 12 -
2175 arch/mips/kernel/sync-r4k.c | 24 +-
2176 arch/mips/kernel/traps.c | 13 +-
2177 arch/mips/lib/ashldi3.c | 21 +-
2178 arch/mips/lib/ashrdi3.c | 19 +-
2179 arch/mips/lib/libgcc.h | 12 +-
2180 arch/mips/mm/fault.c | 25 +
2181 arch/mips/mm/init.c | 4 +-
2182 arch/mips/mm/mmap.c | 51 +-
2183 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
2184 arch/mips/sni/rm200.c | 2 +-
2185 arch/mips/vr41xx/common/icu.c | 2 +-
2186 arch/mips/vr41xx/common/irq.c | 4 +-
2187 arch/parisc/include/asm/atomic.h | 10 +
2188 arch/parisc/include/asm/elf.h | 7 +
2189 arch/parisc/include/asm/pgalloc.h | 6 +
2190 arch/parisc/include/asm/pgtable.h | 11 +
2191 arch/parisc/include/asm/uaccess.h | 4 +-
2192 arch/parisc/kernel/module.c | 26 +-
2193 arch/parisc/kernel/sys_parisc.c | 15 +
2194 arch/parisc/kernel/traps.c | 4 +-
2195 arch/parisc/mm/fault.c | 140 +-
2196 arch/powerpc/include/asm/atomic.h | 329 +-
2197 arch/powerpc/include/asm/book3s/32/hash.h | 1 +
2198 arch/powerpc/include/asm/elf.h | 12 +
2199 arch/powerpc/include/asm/exec.h | 2 +-
2200 arch/powerpc/include/asm/kmap_types.h | 2 +-
2201 arch/powerpc/include/asm/local.h | 46 +
2202 arch/powerpc/include/asm/mman.h | 2 +-
2203 arch/powerpc/include/asm/page.h | 8 +-
2204 arch/powerpc/include/asm/page_64.h | 7 +-
2205 arch/powerpc/include/asm/pgalloc-64.h | 7 +
2206 arch/powerpc/include/asm/pgtable.h | 1 +
2207 arch/powerpc/include/asm/reg.h | 1 +
2208 arch/powerpc/include/asm/smp.h | 2 +-
2209 arch/powerpc/include/asm/spinlock.h | 42 +-
2210 arch/powerpc/include/asm/uaccess.h | 141 +-
2211 arch/powerpc/kernel/Makefile | 5 +
2212 arch/powerpc/kernel/exceptions-64e.S | 4 +-
2213 arch/powerpc/kernel/exceptions-64s.S | 2 +-
2214 arch/powerpc/kernel/module_32.c | 15 +-
2215 arch/powerpc/kernel/process.c | 46 -
2216 arch/powerpc/kernel/signal_32.c | 2 +-
2217 arch/powerpc/kernel/signal_64.c | 2 +-
2218 arch/powerpc/kernel/traps.c | 21 +
2219 arch/powerpc/kernel/vdso.c | 5 +-
2220 arch/powerpc/lib/usercopy_64.c | 18 -
2221 arch/powerpc/mm/fault.c | 56 +-
2222 arch/powerpc/mm/mmap.c | 16 +
2223 arch/powerpc/mm/slice.c | 21 +-
2224 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
2225 arch/s390/include/asm/atomic.h | 10 +
2226 arch/s390/include/asm/elf.h | 7 +
2227 arch/s390/include/asm/exec.h | 2 +-
2228 arch/s390/include/asm/uaccess.h | 13 +-
2229 arch/s390/kernel/module.c | 22 +-
2230 arch/s390/kernel/process.c | 20 -
2231 arch/s390/mm/mmap.c | 22 +-
2232 arch/score/include/asm/exec.h | 2 +-
2233 arch/score/kernel/process.c | 5 -
2234 arch/sh/mm/mmap.c | 28 +-
2235 arch/sparc/include/asm/atomic_64.h | 110 +-
2236 arch/sparc/include/asm/cache.h | 2 +-
2237 arch/sparc/include/asm/elf_32.h | 7 +
2238 arch/sparc/include/asm/elf_64.h | 7 +
2239 arch/sparc/include/asm/pgalloc_32.h | 1 +
2240 arch/sparc/include/asm/pgalloc_64.h | 1 +
2241 arch/sparc/include/asm/pgtable.h | 4 +
2242 arch/sparc/include/asm/pgtable_32.h | 15 +-
2243 arch/sparc/include/asm/pgtsrmmu.h | 5 +
2244 arch/sparc/include/asm/setup.h | 4 +-
2245 arch/sparc/include/asm/spinlock_64.h | 35 +-
2246 arch/sparc/include/asm/thread_info_32.h | 1 +
2247 arch/sparc/include/asm/thread_info_64.h | 2 +
2248 arch/sparc/include/asm/uaccess.h | 1 +
2249 arch/sparc/include/asm/uaccess_32.h | 28 +-
2250 arch/sparc/include/asm/uaccess_64.h | 24 +-
2251 arch/sparc/kernel/Makefile | 2 +-
2252 arch/sparc/kernel/prom_common.c | 2 +-
2253 arch/sparc/kernel/smp_64.c | 8 +-
2254 arch/sparc/kernel/sys_sparc_32.c | 2 +-
2255 arch/sparc/kernel/sys_sparc_64.c | 58 +-
2256 arch/sparc/kernel/traps_64.c | 27 +-
2257 arch/sparc/lib/Makefile | 2 +-
2258 arch/sparc/lib/atomic_64.S | 57 +-
2259 arch/sparc/lib/ksyms.c | 6 +-
2260 arch/sparc/mm/Makefile | 2 +-
2261 arch/sparc/mm/fault_32.c | 292 +
2262 arch/sparc/mm/fault_64.c | 486 +
2263 arch/sparc/mm/hugetlbpage.c | 30 +-
2264 arch/sparc/mm/init_64.c | 10 +-
2265 arch/tile/include/asm/atomic_64.h | 10 +
2266 arch/tile/include/asm/uaccess.h | 4 +-
2267 arch/um/Makefile | 4 +
2268 arch/um/include/asm/kmap_types.h | 2 +-
2269 arch/um/include/asm/page.h | 3 +
2270 arch/um/include/asm/pgtable-3level.h | 1 +
2271 arch/um/kernel/process.c | 16 -
2272 arch/x86/Kconfig | 26 +-
2273 arch/x86/Kconfig.cpu | 6 +-
2274 arch/x86/Kconfig.debug | 4 +-
2275 arch/x86/Makefile | 13 +-
2276 arch/x86/boot/Makefile | 3 +
2277 arch/x86/boot/bitops.h | 4 +-
2278 arch/x86/boot/boot.h | 2 +-
2279 arch/x86/boot/compressed/Makefile | 20 +
2280 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
2281 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
2282 arch/x86/boot/compressed/head_32.S | 4 +-
2283 arch/x86/boot/compressed/head_64.S | 12 +-
2284 arch/x86/boot/compressed/misc.c | 11 +-
2285 arch/x86/boot/cpucheck.c | 16 +-
2286 arch/x86/boot/header.S | 6 +-
2287 arch/x86/boot/memory.c | 2 +-
2288 arch/x86/boot/video-vesa.c | 1 +
2289 arch/x86/boot/video.c | 2 +-
2290 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
2291 arch/x86/crypto/aesni-intel_asm.S | 110 +-
2292 arch/x86/crypto/aesni-intel_glue.c | 4 +-
2293 arch/x86/crypto/blowfish-x86_64-asm_64.S | 11 +-
2294 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 22 +-
2295 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 22 +-
2296 arch/x86/crypto/camellia-x86_64-asm_64.S | 11 +-
2297 arch/x86/crypto/camellia_aesni_avx2_glue.c | 18 +-
2298 arch/x86/crypto/camellia_aesni_avx_glue.c | 18 +-
2299 arch/x86/crypto/camellia_glue.c | 8 +-
2300 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 55 +-
2301 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 37 +-
2302 arch/x86/crypto/cast6_avx_glue.c | 16 +-
2303 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 2 +
2304 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
2305 arch/x86/crypto/glue_helper.c | 2 +-
2306 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
2307 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 21 +-
2308 arch/x86/crypto/serpent-avx2-asm_64.S | 21 +-
2309 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
2310 arch/x86/crypto/serpent_avx2_glue.c | 14 +-
2311 arch/x86/crypto/serpent_avx_glue.c | 18 +-
2312 arch/x86/crypto/serpent_sse2_glue.c | 4 +-
2313 arch/x86/crypto/sha1_ssse3_asm.S | 13 +-
2314 arch/x86/crypto/sha1_ssse3_glue.c | 56 +-
2315 arch/x86/crypto/sha256-avx-asm.S | 5 +-
2316 arch/x86/crypto/sha256-avx2-asm.S | 5 +-
2317 arch/x86/crypto/sha256-ssse3-asm.S | 6 +-
2318 arch/x86/crypto/sha256_ssse3_glue.c | 26 +-
2319 arch/x86/crypto/sha512-avx-asm.S | 5 +-
2320 arch/x86/crypto/sha512-avx2-asm.S | 5 +-
2321 arch/x86/crypto/sha512-ssse3-asm.S | 5 +-
2322 arch/x86/crypto/sha512_ssse3_glue.c | 22 +-
2323 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 37 +-
2324 arch/x86/crypto/twofish-i586-asm_32.S | 2 +-
2325 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 6 +-
2326 arch/x86/crypto/twofish-x86_64-asm_64.S | 7 +-
2327 arch/x86/crypto/twofish_avx_glue.c | 21 +-
2328 arch/x86/crypto/twofish_glue.c | 4 +-
2329 arch/x86/crypto/twofish_glue_3way.c | 12 +-
2330 arch/x86/entry/Makefile | 2 +
2331 arch/x86/entry/calling.h | 86 +-
2332 arch/x86/entry/common.c | 70 +-
2333 arch/x86/entry/entry_32.S | 311 +-
2334 arch/x86/entry/entry_64.S | 629 +-
2335 arch/x86/entry/entry_64_compat.S | 115 +-
2336 arch/x86/entry/thunk_64.S | 2 +
2337 arch/x86/entry/vdso/Makefile | 5 +-
2338 arch/x86/entry/vdso/vclock_gettime.c | 2 +-
2339 arch/x86/entry/vdso/vdso2c.h | 8 +-
2340 arch/x86/entry/vdso/vma.c | 37 +-
2341 arch/x86/entry/vsyscall/vsyscall_64.c | 20 +-
2342 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
2343 arch/x86/ia32/ia32_signal.c | 23 +-
2344 arch/x86/ia32/sys_ia32.c | 42 +-
2345 arch/x86/include/asm/alternative-asm.h | 51 +-
2346 arch/x86/include/asm/alternative.h | 4 +-
2347 arch/x86/include/asm/apic.h | 2 +-
2348 arch/x86/include/asm/apm.h | 4 +-
2349 arch/x86/include/asm/atomic.h | 230 +-
2350 arch/x86/include/asm/atomic64_32.h | 100 +
2351 arch/x86/include/asm/atomic64_64.h | 164 +-
2352 arch/x86/include/asm/bitops.h | 18 +-
2353 arch/x86/include/asm/boot.h | 2 +-
2354 arch/x86/include/asm/cache.h | 5 +-
2355 arch/x86/include/asm/checksum_32.h | 12 +-
2356 arch/x86/include/asm/cmpxchg.h | 39 +
2357 arch/x86/include/asm/compat.h | 4 +
2358 arch/x86/include/asm/cpufeature.h | 16 +-
2359 arch/x86/include/asm/crypto/camellia.h | 30 +-
2360 arch/x86/include/asm/crypto/glue_helper.h | 10 +-
2361 arch/x86/include/asm/crypto/serpent-avx.h | 18 +-
2362 arch/x86/include/asm/crypto/serpent-sse2.h | 8 +-
2363 arch/x86/include/asm/crypto/twofish.h | 10 +-
2364 arch/x86/include/asm/desc.h | 78 +-
2365 arch/x86/include/asm/desc_defs.h | 6 +
2366 arch/x86/include/asm/div64.h | 2 +-
2367 arch/x86/include/asm/dma.h | 2 +
2368 arch/x86/include/asm/elf.h | 33 +-
2369 arch/x86/include/asm/emergency-restart.h | 2 +-
2370 arch/x86/include/asm/fpu/internal.h | 38 +-
2371 arch/x86/include/asm/fpu/types.h | 5 +-
2372 arch/x86/include/asm/futex.h | 14 +-
2373 arch/x86/include/asm/hw_irq.h | 4 +-
2374 arch/x86/include/asm/hypervisor.h | 2 +-
2375 arch/x86/include/asm/i8259.h | 2 +-
2376 arch/x86/include/asm/io.h | 22 +-
2377 arch/x86/include/asm/irqflags.h | 5 +
2378 arch/x86/include/asm/kprobes.h | 9 +-
2379 arch/x86/include/asm/kvm_emulate.h | 7 +-
2380 arch/x86/include/asm/local.h | 106 +-
2381 arch/x86/include/asm/mman.h | 15 +
2382 arch/x86/include/asm/mmu.h | 14 +-
2383 arch/x86/include/asm/mmu_context.h | 133 +-
2384 arch/x86/include/asm/module.h | 23 +-
2385 arch/x86/include/asm/nmi.h | 19 +-
2386 arch/x86/include/asm/page.h | 1 +
2387 arch/x86/include/asm/page_32.h | 12 +-
2388 arch/x86/include/asm/page_64.h | 14 +-
2389 arch/x86/include/asm/paravirt.h | 46 +-
2390 arch/x86/include/asm/paravirt_types.h | 13 +-
2391 arch/x86/include/asm/pgalloc.h | 23 +
2392 arch/x86/include/asm/pgtable-2level.h | 2 +
2393 arch/x86/include/asm/pgtable-3level.h | 7 +
2394 arch/x86/include/asm/pgtable.h | 126 +-
2395 arch/x86/include/asm/pgtable_32.h | 14 +-
2396 arch/x86/include/asm/pgtable_32_types.h | 24 +-
2397 arch/x86/include/asm/pgtable_64.h | 23 +-
2398 arch/x86/include/asm/pgtable_64_types.h | 5 +
2399 arch/x86/include/asm/pgtable_types.h | 27 +-
2400 arch/x86/include/asm/pmem.h | 2 +-
2401 arch/x86/include/asm/preempt.h | 2 +-
2402 arch/x86/include/asm/processor.h | 57 +-
2403 arch/x86/include/asm/ptrace.h | 15 +-
2404 arch/x86/include/asm/realmode.h | 4 +-
2405 arch/x86/include/asm/reboot.h | 10 +-
2406 arch/x86/include/asm/rmwcc.h | 84 +-
2407 arch/x86/include/asm/rwsem.h | 60 +-
2408 arch/x86/include/asm/segment.h | 27 +-
2409 arch/x86/include/asm/smap.h | 43 +
2410 arch/x86/include/asm/smp.h | 14 +-
2411 arch/x86/include/asm/stackprotector.h | 4 +-
2412 arch/x86/include/asm/stacktrace.h | 34 +-
2413 arch/x86/include/asm/switch_to.h | 4 +-
2414 arch/x86/include/asm/sys_ia32.h | 6 +-
2415 arch/x86/include/asm/thread_info.h | 27 +-
2416 arch/x86/include/asm/tlbflush.h | 77 +-
2417 arch/x86/include/asm/traps.h | 4 +-
2418 arch/x86/include/asm/uaccess.h | 210 +-
2419 arch/x86/include/asm/uaccess_32.h | 28 +-
2420 arch/x86/include/asm/uaccess_64.h | 169 +-
2421 arch/x86/include/asm/word-at-a-time.h | 2 +-
2422 arch/x86/include/asm/x86_init.h | 10 +-
2423 arch/x86/include/asm/xen/page.h | 2 +-
2424 arch/x86/include/uapi/asm/e820.h | 2 +-
2425 arch/x86/kernel/Makefile | 2 +-
2426 arch/x86/kernel/acpi/boot.c | 4 +-
2427 arch/x86/kernel/acpi/sleep.c | 4 +
2428 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
2429 arch/x86/kernel/alternative.c | 124 +-
2430 arch/x86/kernel/apic/apic.c | 4 +-
2431 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
2432 arch/x86/kernel/apic/apic_noop.c | 2 +-
2433 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
2434 arch/x86/kernel/apic/io_apic.c | 10 +-
2435 arch/x86/kernel/apic/msi.c | 2 +-
2436 arch/x86/kernel/apic/probe_32.c | 4 +-
2437 arch/x86/kernel/apic/vector.c | 2 +
2438 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
2439 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
2440 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
2441 arch/x86/kernel/apm_32.c | 21 +-
2442 arch/x86/kernel/asm-offsets.c | 20 +
2443 arch/x86/kernel/asm-offsets_64.c | 1 +
2444 arch/x86/kernel/cpu/Makefile | 4 -
2445 arch/x86/kernel/cpu/amd.c | 2 +-
2446 arch/x86/kernel/cpu/bugs_64.c | 2 +
2447 arch/x86/kernel/cpu/common.c | 202 +-
2448 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
2449 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
2450 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
2451 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
2452 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
2453 arch/x86/kernel/cpu/mshyperv.c | 2 +-
2454 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
2455 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
2456 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
2457 arch/x86/kernel/cpu/perf_event.c | 10 +-
2458 arch/x86/kernel/cpu/perf_event.h | 2 +-
2459 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 8 +-
2460 arch/x86/kernel/cpu/perf_event_intel.c | 34 +-
2461 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
2462 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
2463 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
2464 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
2465 arch/x86/kernel/cpu/perf_event_intel_pt.c | 42 +-
2466 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 8 +-
2467 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 6 +-
2468 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 14 +-
2469 arch/x86/kernel/cpu/vmware.c | 2 +-
2470 arch/x86/kernel/crash_dump_64.c | 2 +-
2471 arch/x86/kernel/doublefault.c | 8 +-
2472 arch/x86/kernel/dumpstack.c | 24 +-
2473 arch/x86/kernel/dumpstack_32.c | 25 +-
2474 arch/x86/kernel/dumpstack_64.c | 72 +-
2475 arch/x86/kernel/e820.c | 4 +-
2476 arch/x86/kernel/early_printk.c | 1 +
2477 arch/x86/kernel/espfix_64.c | 44 +-
2478 arch/x86/kernel/fpu/core.c | 24 +-
2479 arch/x86/kernel/fpu/init.c | 49 +-
2480 arch/x86/kernel/fpu/regset.c | 22 +-
2481 arch/x86/kernel/fpu/signal.c | 20 +-
2482 arch/x86/kernel/fpu/xstate.c | 6 +-
2483 arch/x86/kernel/ftrace.c | 18 +-
2484 arch/x86/kernel/head64.c | 14 +-
2485 arch/x86/kernel/head_32.S | 237 +-
2486 arch/x86/kernel/head_64.S | 173 +-
2487 arch/x86/kernel/i386_ksyms_32.c | 12 +
2488 arch/x86/kernel/i8259.c | 10 +-
2489 arch/x86/kernel/io_delay.c | 2 +-
2490 arch/x86/kernel/ioport.c | 2 +-
2491 arch/x86/kernel/irq.c | 8 +-
2492 arch/x86/kernel/irq_32.c | 45 +-
2493 arch/x86/kernel/jump_label.c | 10 +-
2494 arch/x86/kernel/kgdb.c | 21 +-
2495 arch/x86/kernel/kprobes/core.c | 28 +-
2496 arch/x86/kernel/kprobes/opt.c | 16 +-
2497 arch/x86/kernel/ksysfs.c | 2 +-
2498 arch/x86/kernel/kvm.c | 2 +-
2499 arch/x86/kernel/kvmclock.c | 20 +-
2500 arch/x86/kernel/ldt.c | 25 +
2501 arch/x86/kernel/livepatch.c | 9 +-
2502 arch/x86/kernel/machine_kexec_32.c | 6 +-
2503 arch/x86/kernel/mcount_64.S | 21 +-
2504 arch/x86/kernel/module.c | 78 +-
2505 arch/x86/kernel/msr.c | 2 +-
2506 arch/x86/kernel/nmi.c | 34 +-
2507 arch/x86/kernel/nmi_selftest.c | 4 +-
2508 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
2509 arch/x86/kernel/paravirt.c | 43 +-
2510 arch/x86/kernel/paravirt_patch_64.c | 8 +
2511 arch/x86/kernel/pci-calgary_64.c | 2 +-
2512 arch/x86/kernel/pci-iommu_table.c | 2 +-
2513 arch/x86/kernel/pci-swiotlb.c | 2 +-
2514 arch/x86/kernel/process.c | 80 +-
2515 arch/x86/kernel/process_32.c | 29 +-
2516 arch/x86/kernel/process_64.c | 14 +-
2517 arch/x86/kernel/ptrace.c | 20 +-
2518 arch/x86/kernel/pvclock.c | 8 +-
2519 arch/x86/kernel/reboot.c | 44 +-
2520 arch/x86/kernel/reboot_fixups_32.c | 2 +-
2521 arch/x86/kernel/relocate_kernel_64.S | 3 +-
2522 arch/x86/kernel/setup.c | 29 +-
2523 arch/x86/kernel/setup_percpu.c | 29 +-
2524 arch/x86/kernel/signal.c | 17 +-
2525 arch/x86/kernel/smp.c | 2 +-
2526 arch/x86/kernel/smpboot.c | 29 +-
2527 arch/x86/kernel/step.c | 6 +-
2528 arch/x86/kernel/sys_i386_32.c | 184 +
2529 arch/x86/kernel/sys_x86_64.c | 28 +-
2530 arch/x86/kernel/tboot.c | 22 +-
2531 arch/x86/kernel/time.c | 8 +-
2532 arch/x86/kernel/tls.c | 7 +-
2533 arch/x86/kernel/tracepoint.c | 4 +-
2534 arch/x86/kernel/traps.c | 64 +-
2535 arch/x86/kernel/tsc.c | 2 +-
2536 arch/x86/kernel/uprobes.c | 4 +-
2537 arch/x86/kernel/vm86_32.c | 6 +-
2538 arch/x86/kernel/vmlinux.lds.S | 153 +-
2539 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
2540 arch/x86/kernel/x86_init.c | 6 +-
2541 arch/x86/kvm/cpuid.c | 21 +-
2542 arch/x86/kvm/emulate.c | 20 +-
2543 arch/x86/kvm/i8259.c | 10 +-
2544 arch/x86/kvm/ioapic.c | 2 +
2545 arch/x86/kvm/lapic.c | 2 +-
2546 arch/x86/kvm/paging_tmpl.h | 2 +-
2547 arch/x86/kvm/svm.c | 10 +-
2548 arch/x86/kvm/vmx.c | 60 +-
2549 arch/x86/kvm/x86.c | 44 +-
2550 arch/x86/lguest/boot.c | 3 +-
2551 arch/x86/lib/atomic64_386_32.S | 164 +
2552 arch/x86/lib/atomic64_cx8_32.S | 98 +-
2553 arch/x86/lib/checksum_32.S | 99 +-
2554 arch/x86/lib/clear_page_64.S | 3 +
2555 arch/x86/lib/cmpxchg16b_emu.S | 3 +
2556 arch/x86/lib/copy_page_64.S | 14 +-
2557 arch/x86/lib/copy_user_64.S | 66 +-
2558 arch/x86/lib/csum-copy_64.S | 14 +-
2559 arch/x86/lib/csum-wrappers_64.c | 8 +-
2560 arch/x86/lib/getuser.S | 74 +-
2561 arch/x86/lib/insn.c | 8 +-
2562 arch/x86/lib/iomap_copy_64.S | 2 +
2563 arch/x86/lib/memcpy_64.S | 6 +
2564 arch/x86/lib/memmove_64.S | 3 +-
2565 arch/x86/lib/memset_64.S | 3 +
2566 arch/x86/lib/mmx_32.c | 243 +-
2567 arch/x86/lib/msr-reg.S | 2 +
2568 arch/x86/lib/putuser.S | 87 +-
2569 arch/x86/lib/rwsem.S | 6 +-
2570 arch/x86/lib/usercopy_32.c | 359 +-
2571 arch/x86/lib/usercopy_64.c | 22 +-
2572 arch/x86/math-emu/fpu_aux.c | 2 +-
2573 arch/x86/math-emu/fpu_entry.c | 4 +-
2574 arch/x86/math-emu/fpu_system.h | 2 +-
2575 arch/x86/mm/Makefile | 4 +
2576 arch/x86/mm/extable.c | 26 +-
2577 arch/x86/mm/fault.c | 570 +-
2578 arch/x86/mm/gup.c | 6 +-
2579 arch/x86/mm/highmem_32.c | 6 +
2580 arch/x86/mm/hugetlbpage.c | 24 +-
2581 arch/x86/mm/init.c | 111 +-
2582 arch/x86/mm/init_32.c | 111 +-
2583 arch/x86/mm/init_64.c | 46 +-
2584 arch/x86/mm/iomap_32.c | 4 +
2585 arch/x86/mm/ioremap.c | 52 +-
2586 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
2587 arch/x86/mm/mmap.c | 40 +-
2588 arch/x86/mm/mmio-mod.c | 10 +-
2589 arch/x86/mm/mpx.c | 6 +-
2590 arch/x86/mm/numa.c | 2 +-
2591 arch/x86/mm/pageattr.c | 42 +-
2592 arch/x86/mm/pat.c | 12 +-
2593 arch/x86/mm/pat_rbtree.c | 2 +-
2594 arch/x86/mm/pf_in.c | 10 +-
2595 arch/x86/mm/pgtable.c | 209 +-
2596 arch/x86/mm/pgtable_32.c | 3 +
2597 arch/x86/mm/setup_nx.c | 7 +
2598 arch/x86/mm/tlb.c | 4 +
2599 arch/x86/mm/uderef_64.c | 37 +
2600 arch/x86/net/bpf_jit.S | 11 +
2601 arch/x86/net/bpf_jit_comp.c | 13 +-
2602 arch/x86/oprofile/backtrace.c | 6 +-
2603 arch/x86/oprofile/nmi_int.c | 10 +-
2604 arch/x86/oprofile/op_model_amd.c | 8 +-
2605 arch/x86/oprofile/op_model_ppro.c | 7 +-
2606 arch/x86/oprofile/op_x86_model.h | 2 +-
2607 arch/x86/pci/intel_mid_pci.c | 2 +-
2608 arch/x86/pci/irq.c | 8 +-
2609 arch/x86/pci/pcbios.c | 112 +-
2610 arch/x86/pci/vmd.c | 4 +-
2611 arch/x86/platform/efi/efi_32.c | 24 +
2612 arch/x86/platform/efi/efi_64.c | 26 +-
2613 arch/x86/platform/efi/efi_stub_32.S | 64 +-
2614 arch/x86/platform/efi/efi_stub_64.S | 2 +
2615 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
2616 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
2617 arch/x86/platform/intel-mid/mfld.c | 4 +-
2618 arch/x86/platform/intel-mid/mrfl.c | 2 +-
2619 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
2620 arch/x86/platform/olpc/olpc_dt.c | 2 +-
2621 arch/x86/power/cpu.c | 11 +-
2622 arch/x86/realmode/init.c | 10 +-
2623 arch/x86/realmode/rm/Makefile | 3 +
2624 arch/x86/realmode/rm/header.S | 4 +-
2625 arch/x86/realmode/rm/reboot.S | 4 +
2626 arch/x86/realmode/rm/trampoline_32.S | 12 +-
2627 arch/x86/realmode/rm/trampoline_64.S | 3 +-
2628 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
2629 arch/x86/tools/Makefile | 2 +-
2630 arch/x86/tools/relocs.c | 97 +-
2631 arch/x86/um/mem_32.c | 2 +-
2632 arch/x86/um/tls_32.c | 2 +-
2633 arch/x86/xen/enlighten.c | 52 +-
2634 arch/x86/xen/mmu.c | 19 +-
2635 arch/x86/xen/smp.c | 16 +-
2636 arch/x86/xen/xen-asm_32.S | 2 +-
2637 arch/x86/xen/xen-head.S | 11 +
2638 arch/x86/xen/xen-ops.h | 2 -
2639 block/bio.c | 4 +-
2640 block/blk-cgroup.c | 18 +-
2641 block/blk-map.c | 2 +-
2642 block/blk-softirq.c | 2 +-
2643 block/bsg.c | 12 +-
2644 block/cfq-iosched.c | 4 +-
2645 block/compat_ioctl.c | 4 +-
2646 block/genhd.c | 9 +-
2647 block/partitions/efi.c | 8 +-
2648 block/scsi_ioctl.c | 29 +-
2649 crypto/cast6_generic.c | 6 +-
2650 crypto/cryptd.c | 4 +-
2651 crypto/crypto_user.c | 2 +-
2652 crypto/pcrypt.c | 2 +-
2653 crypto/salsa20_generic.c | 16 +-
2654 crypto/serpent_generic.c | 6 +-
2655 crypto/zlib.c | 12 +-
2656 drivers/acpi/ac.c | 2 +-
2657 drivers/acpi/acpi_video.c | 2 +-
2658 drivers/acpi/apei/apei-internal.h | 2 +-
2659 drivers/acpi/apei/ghes.c | 10 +-
2660 drivers/acpi/battery.c | 2 +-
2661 drivers/acpi/bgrt.c | 6 +-
2662 drivers/acpi/blacklist.c | 4 +-
2663 drivers/acpi/bus.c | 4 +-
2664 drivers/acpi/device_pm.c | 4 +-
2665 drivers/acpi/ec.c | 6 +-
2666 drivers/acpi/pci_slot.c | 2 +-
2667 drivers/acpi/processor_idle.c | 2 +-
2668 drivers/acpi/processor_pdc.c | 2 +-
2669 drivers/acpi/sleep.c | 2 +-
2670 drivers/acpi/sysfs.c | 14 +-
2671 drivers/acpi/thermal.c | 2 +-
2672 drivers/acpi/video_detect.c | 7 +-
2673 drivers/android/binder.c | 2 +-
2674 drivers/ata/libata-core.c | 12 +-
2675 drivers/ata/libata-scsi.c | 2 +-
2676 drivers/ata/libata.h | 2 +-
2677 drivers/ata/pata_arasan_cf.c | 4 +-
2678 drivers/atm/adummy.c | 2 +-
2679 drivers/atm/ambassador.c | 8 +-
2680 drivers/atm/atmtcp.c | 14 +-
2681 drivers/atm/eni.c | 10 +-
2682 drivers/atm/firestream.c | 8 +-
2683 drivers/atm/fore200e.c | 14 +-
2684 drivers/atm/he.c | 18 +-
2685 drivers/atm/horizon.c | 4 +-
2686 drivers/atm/idt77252.c | 36 +-
2687 drivers/atm/iphase.c | 34 +-
2688 drivers/atm/lanai.c | 12 +-
2689 drivers/atm/nicstar.c | 46 +-
2690 drivers/atm/solos-pci.c | 4 +-
2691 drivers/atm/suni.c | 4 +-
2692 drivers/atm/uPD98402.c | 16 +-
2693 drivers/atm/zatm.c | 6 +-
2694 drivers/base/bus.c | 4 +-
2695 drivers/base/devres.c | 4 +-
2696 drivers/base/devtmpfs.c | 8 +-
2697 drivers/base/node.c | 2 +-
2698 drivers/base/platform-msi.c | 20 +-
2699 drivers/base/power/domain.c | 6 +-
2700 drivers/base/power/runtime.c | 61 +-
2701 drivers/base/power/sysfs.c | 2 +-
2702 drivers/base/power/wakeup.c | 8 +-
2703 drivers/base/regmap/regmap-debugfs.c | 4 +-
2704 drivers/base/regmap/regmap.c | 4 +-
2705 drivers/base/syscore.c | 4 +-
2706 drivers/block/cciss.c | 28 +-
2707 drivers/block/cciss.h | 2 +-
2708 drivers/block/cpqarray.c | 28 +-
2709 drivers/block/cpqarray.h | 2 +-
2710 drivers/block/drbd/drbd_bitmap.c | 2 +-
2711 drivers/block/drbd/drbd_int.h | 8 +-
2712 drivers/block/drbd/drbd_main.c | 12 +-
2713 drivers/block/drbd/drbd_nl.c | 16 +-
2714 drivers/block/drbd/drbd_receiver.c | 38 +-
2715 drivers/block/drbd/drbd_state.c | 12 +-
2716 drivers/block/drbd/drbd_state.h | 2 +-
2717 drivers/block/drbd/drbd_state_change.h | 8 +-
2718 drivers/block/drbd/drbd_worker.c | 14 +-
2719 drivers/block/floppy.c | 8 +-
2720 drivers/block/pktcdvd.c | 4 +-
2721 drivers/block/rbd.c | 2 +-
2722 drivers/bluetooth/btwilink.c | 2 +-
2723 drivers/bus/arm-cci.c | 12 +-
2724 drivers/cdrom/cdrom.c | 11 +-
2725 drivers/cdrom/gdrom.c | 1 -
2726 drivers/char/agp/compat_ioctl.c | 2 +-
2727 drivers/char/agp/frontend.c | 4 +-
2728 drivers/char/agp/intel-gtt.c | 4 +-
2729 drivers/char/hpet.c | 2 +-
2730 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
2731 drivers/char/ipmi/ipmi_poweroff.c | 2 +-
2732 drivers/char/ipmi/ipmi_si_intf.c | 12 +-
2733 drivers/char/ipmi/ipmi_ssif.c | 12 +-
2734 drivers/char/mem.c | 47 +-
2735 drivers/char/nvram.c | 2 +-
2736 drivers/char/pcmcia/synclink_cs.c | 16 +-
2737 drivers/char/random.c | 12 +-
2738 drivers/char/sonypi.c | 11 +-
2739 drivers/char/tpm/tpm_acpi.c | 3 +-
2740 drivers/char/tpm/tpm_eventlog.c | 5 +-
2741 drivers/char/virtio_console.c | 6 +-
2742 drivers/clk/clk-composite.c | 2 +-
2743 drivers/clk/samsung/clk.h | 2 +-
2744 drivers/clk/socfpga/clk-gate.c | 9 +-
2745 drivers/clk/socfpga/clk-pll.c | 9 +-
2746 drivers/clk/ti/clk.c | 8 +-
2747 drivers/cpufreq/acpi-cpufreq.c | 17 +-
2748 drivers/cpufreq/cpufreq-dt.c | 4 +-
2749 drivers/cpufreq/cpufreq.c | 27 +-
2750 drivers/cpufreq/cpufreq_governor.c | 2 +-
2751 drivers/cpufreq/cpufreq_governor.h | 10 +-
2752 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
2753 drivers/cpufreq/intel_pstate.c | 54 +-
2754 drivers/cpufreq/p4-clockmod.c | 12 +-
2755 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
2756 drivers/cpufreq/speedstep-centrino.c | 7 +-
2757 drivers/cpuidle/driver.c | 2 +-
2758 drivers/cpuidle/dt_idle_states.c | 2 +-
2759 drivers/cpuidle/governor.c | 2 +-
2760 drivers/cpuidle/governors/ladder.c | 13 +-
2761 drivers/cpuidle/sysfs.c | 2 +-
2762 drivers/crypto/hifn_795x.c | 4 +-
2763 drivers/crypto/qat/qat_common/adf_aer.c | 2 +-
2764 drivers/crypto/qat/qat_common/adf_sriov.c | 4 +-
2765 drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +-
2766 drivers/devfreq/devfreq.c | 4 +-
2767 drivers/dma/sh/shdma-base.c | 4 +-
2768 drivers/dma/sh/shdmac.c | 2 +-
2769 drivers/edac/edac_device.c | 4 +-
2770 drivers/edac/edac_device_sysfs.c | 2 +-
2771 drivers/edac/edac_mc_sysfs.c | 4 +-
2772 drivers/edac/edac_module.c | 2 +-
2773 drivers/edac/edac_pci.c | 4 +-
2774 drivers/edac/edac_pci_sysfs.c | 22 +-
2775 drivers/edac/mce_amd.h | 2 +-
2776 drivers/firewire/core-card.c | 6 +-
2777 drivers/firewire/core-cdev.c | 4 +-
2778 drivers/firewire/core-device.c | 2 +-
2779 drivers/firewire/core-iso.c | 2 +-
2780 drivers/firewire/core-transaction.c | 1 +
2781 drivers/firewire/core.h | 1 +
2782 drivers/firmware/dmi-id.c | 9 +-
2783 drivers/firmware/dmi_scan.c | 12 +-
2784 drivers/firmware/efi/cper.c | 8 +-
2785 drivers/firmware/efi/efi.c | 12 +-
2786 drivers/firmware/efi/efivars.c | 2 +-
2787 drivers/firmware/efi/runtime-map.c | 2 +-
2788 drivers/firmware/google/gsmi.c | 2 +-
2789 drivers/firmware/google/memconsole.c | 7 +-
2790 drivers/firmware/memmap.c | 2 +-
2791 drivers/firmware/psci.c | 2 +-
2792 drivers/gpio/gpio-davinci.c | 6 +-
2793 drivers/gpio/gpio-em.c | 2 +-
2794 drivers/gpio/gpio-ich.c | 2 +-
2795 drivers/gpio/gpio-omap.c | 4 +-
2796 drivers/gpio/gpio-rcar.c | 2 +-
2797 drivers/gpio/gpio-vr41xx.c | 2 +-
2798 drivers/gpio/gpiolib.c | 12 +-
2799 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 4 +-
2800 drivers/gpu/drm/amd/amdgpu/amdgpu_atpx_handler.c | 2 +-
2801 drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 8 +-
2802 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
2803 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 18 +-
2804 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
2805 drivers/gpu/drm/amd/amdgpu/fiji_smc.c | 4 +-
2806 drivers/gpu/drm/amd/amdgpu/iceland_smc.c | 4 +-
2807 drivers/gpu/drm/amd/amdgpu/tonga_smc.c | 4 +-
2808 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
2809 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
2810 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
2811 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
2812 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
2813 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
2814 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
2815 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
2816 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
2817 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
2818 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
2819 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
2820 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
2821 drivers/gpu/drm/armada/armada_drv.c | 3 +-
2822 drivers/gpu/drm/ast/ast_mode.c | 2 +-
2823 drivers/gpu/drm/bochs/bochs_kms.c | 2 +-
2824 drivers/gpu/drm/drm_atomic.c | 7 +-
2825 drivers/gpu/drm/drm_crtc.c | 10 +-
2826 drivers/gpu/drm/drm_drv.c | 2 +-
2827 drivers/gpu/drm/drm_fops.c | 12 +-
2828 drivers/gpu/drm/drm_global.c | 14 +-
2829 drivers/gpu/drm/drm_info.c | 13 +-
2830 drivers/gpu/drm/drm_ioc32.c | 13 +-
2831 drivers/gpu/drm/drm_ioctl.c | 2 +-
2832 drivers/gpu/drm/drm_irq.c | 7 +-
2833 drivers/gpu/drm/drm_pci.c | 9 +-
2834 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
2835 drivers/gpu/drm/exynos/exynos_drm_g2d.c | 7 +-
2836 drivers/gpu/drm/gma500/cdv_intel_crt.c | 2 +-
2837 drivers/gpu/drm/gma500/cdv_intel_dp.c | 2 +-
2838 drivers/gpu/drm/gma500/cdv_intel_hdmi.c | 2 +-
2839 drivers/gpu/drm/gma500/cdv_intel_lvds.c | 2 +-
2840 drivers/gpu/drm/gma500/mdfld_dsi_output.c | 8 +-
2841 drivers/gpu/drm/gma500/oaktrail_hdmi.c | 2 +-
2842 drivers/gpu/drm/gma500/psb_drv.c | 1 -
2843 drivers/gpu/drm/gma500/psb_intel_drv.h | 2 +-
2844 drivers/gpu/drm/gma500/psb_intel_lvds.c | 2 +-
2845 drivers/gpu/drm/gma500/psb_intel_sdvo.c | 2 +-
2846 drivers/gpu/drm/i2c/tda998x_drv.c | 2 +-
2847 drivers/gpu/drm/i810/i810_dma.c | 2 +-
2848 drivers/gpu/drm/i810/i810_drv.c | 6 +-
2849 drivers/gpu/drm/i810/i810_drv.h | 6 +-
2850 drivers/gpu/drm/i915/dvo.h | 2 +-
2851 drivers/gpu/drm/i915/i915_dma.c | 4 +-
2852 drivers/gpu/drm/i915/i915_drv.c | 7 +-
2853 drivers/gpu/drm/i915/i915_drv.h | 2 +-
2854 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
2855 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
2856 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
2857 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
2858 drivers/gpu/drm/i915/i915_irq.c | 88 +-
2859 drivers/gpu/drm/i915/intel_display.c | 26 +-
2860 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
2861 drivers/gpu/drm/mga/mga_drv.c | 5 +-
2862 drivers/gpu/drm/mga/mga_drv.h | 6 +-
2863 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
2864 drivers/gpu/drm/mga/mga_irq.c | 8 +-
2865 drivers/gpu/drm/mga/mga_state.c | 2 +-
2866 drivers/gpu/drm/mgag200/mgag200_mode.c | 2 +-
2867 drivers/gpu/drm/nouveau/nouveau_acpi.c | 2 +-
2868 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
2869 drivers/gpu/drm/nouveau/nouveau_connector.c | 2 +-
2870 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 +-
2871 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
2872 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
2873 drivers/gpu/drm/nouveau/nouveau_usif.c | 7 +-
2874 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
2875 drivers/gpu/drm/nouveau/nvkm/subdev/bios/shadow.c | 7 +-
2876 .../gpu/drm/nouveau/nvkm/subdev/bios/shadowpci.c | 7 +-
2877 drivers/gpu/drm/omapdrm/Makefile | 2 +-
2878 drivers/gpu/drm/omapdrm/dss/display.c | 8 +-
2879 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
2880 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
2881 drivers/gpu/drm/qxl/qxl_display.c | 2 +-
2882 drivers/gpu/drm/qxl/qxl_drv.c | 8 +-
2883 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
2884 drivers/gpu/drm/qxl/qxl_ioctl.c | 12 +-
2885 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
2886 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
2887 drivers/gpu/drm/r128/r128_cce.c | 2 +-
2888 drivers/gpu/drm/r128/r128_drv.c | 4 +-
2889 drivers/gpu/drm/r128/r128_drv.h | 6 +-
2890 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
2891 drivers/gpu/drm/r128/r128_irq.c | 4 +-
2892 drivers/gpu/drm/r128/r128_state.c | 6 +-
2893 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
2894 drivers/gpu/drm/radeon/radeon_atpx_handler.c | 2 +-
2895 drivers/gpu/drm/radeon/radeon_connectors.c | 10 +-
2896 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
2897 drivers/gpu/drm/radeon/radeon_drv.c | 11 +-
2898 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
2899 drivers/gpu/drm/radeon/radeon_kms.c | 8 +-
2900 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
2901 drivers/gpu/drm/savage/savage_bci.c | 2 +-
2902 drivers/gpu/drm/savage/savage_drv.c | 5 +-
2903 drivers/gpu/drm/savage/savage_drv.h | 2 +-
2904 drivers/gpu/drm/sis/sis_drv.c | 5 +-
2905 drivers/gpu/drm/sis/sis_drv.h | 2 +-
2906 drivers/gpu/drm/sis/sis_mm.c | 2 +-
2907 drivers/gpu/drm/tegra/dc.c | 2 +-
2908 drivers/gpu/drm/tegra/dsi.c | 2 +-
2909 drivers/gpu/drm/tegra/hdmi.c | 2 +-
2910 drivers/gpu/drm/tegra/sor.c | 7 +-
2911 drivers/gpu/drm/tilcdc/Makefile | 6 +-
2912 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
2913 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
2914 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
2915 drivers/gpu/drm/udl/udl_connector.c | 2 +-
2916 drivers/gpu/drm/udl/udl_fb.c | 1 -
2917 drivers/gpu/drm/vc4/vc4_drv.c | 8 +-
2918 drivers/gpu/drm/via/via_dma.c | 2 +-
2919 drivers/gpu/drm/via/via_drv.c | 5 +-
2920 drivers/gpu/drm/via/via_drv.h | 6 +-
2921 drivers/gpu/drm/via/via_irq.c | 18 +-
2922 drivers/gpu/drm/virtio/virtgpu_display.c | 2 +-
2923 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
2924 drivers/gpu/drm/vmwgfx/vmwgfx_fence.c | 7 +-
2925 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
2926 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
2927 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
2928 drivers/gpu/vga/vga_switcheroo.c | 4 +-
2929 drivers/hid/hid-core.c | 4 +-
2930 drivers/hid/hid-magicmouse.c | 2 +-
2931 drivers/hid/hid-sensor-custom.c | 2 +-
2932 drivers/hv/channel.c | 6 +-
2933 drivers/hv/hv.c | 4 +-
2934 drivers/hv/hv_balloon.c | 18 +-
2935 drivers/hv/hyperv_vmbus.h | 2 +-
2936 drivers/hwmon/acpi_power_meter.c | 6 +-
2937 drivers/hwmon/applesmc.c | 2 +-
2938 drivers/hwmon/asus_atk0110.c | 10 +-
2939 drivers/hwmon/coretemp.c | 2 +-
2940 drivers/hwmon/dell-smm-hwmon.c | 2 +-
2941 drivers/hwmon/ibmaem.c | 2 +-
2942 drivers/hwmon/iio_hwmon.c | 2 +-
2943 drivers/hwmon/nct6683.c | 6 +-
2944 drivers/hwmon/nct6775.c | 6 +-
2945 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
2946 drivers/hwmon/sht15.c | 12 +-
2947 drivers/hwmon/via-cputemp.c | 2 +-
2948 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
2949 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
2950 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
2951 drivers/i2c/i2c-dev.c | 2 +-
2952 drivers/ide/ide-cd.c | 2 +-
2953 drivers/ide/ide-disk.c | 2 +-
2954 drivers/ide/ide.c | 4 +-
2955 drivers/idle/intel_idle.c | 6 +-
2956 drivers/iio/industrialio-core.c | 2 +-
2957 drivers/iio/magnetometer/ak8975.c | 2 +-
2958 drivers/infiniband/core/cm.c | 46 +-
2959 drivers/infiniband/core/fmr_pool.c | 20 +-
2960 drivers/infiniband/core/netlink.c | 5 +-
2961 drivers/infiniband/core/ucm.c | 4 +-
2962 drivers/infiniband/core/uverbs_cmd.c | 3 +
2963 drivers/infiniband/hw/cxgb4/device.c | 6 +-
2964 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
2965 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
2966 drivers/infiniband/hw/mlx4/mad.c | 2 +-
2967 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
2968 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
2969 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
2970 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
2971 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
2972 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
2973 drivers/infiniband/hw/nes/nes.c | 4 +-
2974 drivers/infiniband/hw/nes/nes.h | 40 +-
2975 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
2976 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
2977 drivers/infiniband/hw/nes/nes_nic.c | 42 +-
2978 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
2979 drivers/infiniband/hw/qib/qib.h | 1 +
2980 drivers/infiniband/hw/qib/qib_iba7322.c | 4 +-
2981 drivers/infiniband/hw/qib/qib_pcie.c | 2 +-
2982 drivers/infiniband/ulp/ipoib/ipoib_main.c | 2 +-
2983 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
2984 drivers/infiniband/ulp/srpt/ib_srpt.c | 8 +-
2985 drivers/input/evdev.c | 2 +-
2986 drivers/input/gameport/gameport.c | 4 +-
2987 drivers/input/input.c | 4 +-
2988 drivers/input/joystick/sidewinder.c | 1 +
2989 drivers/input/misc/ims-pcu.c | 4 +-
2990 drivers/input/mouse/psmouse.h | 2 +-
2991 drivers/input/mousedev.c | 2 +-
2992 drivers/input/serio/serio.c | 4 +-
2993 drivers/input/serio/serio_raw.c | 4 +-
2994 drivers/input/touchscreen/htcpen.c | 2 +-
2995 drivers/iommu/arm-smmu-v3.c | 2 +-
2996 drivers/iommu/arm-smmu.c | 42 +-
2997 drivers/iommu/io-pgtable-arm.c | 98 +-
2998 drivers/iommu/io-pgtable.c | 11 +-
2999 drivers/iommu/io-pgtable.h | 21 +-
3000 drivers/iommu/iommu.c | 2 +-
3001 drivers/iommu/ipmmu-vmsa.c | 13 +-
3002 drivers/iommu/irq_remapping.c | 2 +-
3003 drivers/irqchip/irq-gic.c | 2 +-
3004 drivers/irqchip/irq-i8259.c | 2 +-
3005 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
3006 drivers/irqchip/irq-ts4800.c | 2 +-
3007 drivers/isdn/capi/capi.c | 10 +-
3008 drivers/isdn/gigaset/interface.c | 8 +-
3009 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
3010 drivers/isdn/hardware/avm/b1.c | 4 +-
3011 drivers/isdn/hardware/eicon/capifunc.c | 6 +-
3012 drivers/isdn/hardware/eicon/dadapter.c | 18 +-
3013 drivers/isdn/hardware/eicon/diddfunc.c | 7 +-
3014 drivers/isdn/hardware/eicon/divasfunc.c | 9 +-
3015 drivers/isdn/hardware/eicon/divasync.h | 2 +-
3016 drivers/isdn/hardware/eicon/idifunc.c | 9 +-
3017 drivers/isdn/hardware/eicon/mntfunc.c | 13 +-
3018 drivers/isdn/hardware/mISDN/avmfritz.c | 2 +-
3019 drivers/isdn/hardware/mISDN/hfcmulti.c | 7 +-
3020 drivers/isdn/hardware/mISDN/hfcpci.c | 16 +-
3021 drivers/isdn/hardware/mISDN/mISDNinfineon.c | 7 +-
3022 drivers/isdn/hardware/mISDN/mISDNipac.c | 5 +-
3023 drivers/isdn/hardware/mISDN/netjet.c | 2 +-
3024 drivers/isdn/hardware/mISDN/speedfax.c | 7 +-
3025 drivers/isdn/hardware/mISDN/w6692.c | 7 +-
3026 drivers/isdn/hisax/amd7930_fn.c | 5 +-
3027 drivers/isdn/hisax/arcofi.c | 5 +-
3028 drivers/isdn/hisax/diva.c | 7 +-
3029 drivers/isdn/hisax/elsa.c | 9 +-
3030 drivers/isdn/hisax/fsm.c | 5 +-
3031 drivers/isdn/hisax/hfc4s8s_l1.c | 14 +-
3032 drivers/isdn/hisax/hfc_pci.c | 10 +-
3033 drivers/isdn/hisax/hfc_sx.c | 10 +-
3034 drivers/isdn/hisax/hfc_usb.c | 12 +-
3035 drivers/isdn/hisax/icc.c | 5 +-
3036 drivers/isdn/hisax/ipacx.c | 7 +-
3037 drivers/isdn/hisax/isac.c | 5 +-
3038 drivers/isdn/hisax/isar.c | 5 +-
3039 drivers/isdn/hisax/isdnl3.c | 5 +-
3040 drivers/isdn/hisax/w6692.c | 5 +-
3041 drivers/isdn/i4l/isdn_common.c | 2 +
3042 drivers/isdn/i4l/isdn_tty.c | 22 +-
3043 drivers/isdn/icn/icn.c | 2 +-
3044 drivers/isdn/mISDN/dsp.h | 4 +-
3045 drivers/isdn/mISDN/dsp_cmx.c | 4 +-
3046 drivers/isdn/mISDN/dsp_core.c | 4 +-
3047 drivers/isdn/mISDN/dsp_tones.c | 4 +-
3048 drivers/isdn/mISDN/fsm.c | 5 +-
3049 drivers/isdn/mISDN/l1oip_core.c | 8 +-
3050 drivers/lguest/core.c | 9 +-
3051 drivers/lguest/page_tables.c | 2 +-
3052 drivers/lguest/x86/core.c | 12 +-
3053 drivers/lguest/x86/switcher_32.S | 27 +-
3054 drivers/lightnvm/rrpc.c | 4 +-
3055 drivers/lightnvm/rrpc.h | 2 +-
3056 drivers/md/bcache/alloc.c | 2 +-
3057 drivers/md/bcache/bcache.h | 10 +-
3058 drivers/md/bcache/btree.c | 2 +-
3059 drivers/md/bcache/closure.h | 2 +-
3060 drivers/md/bcache/io.c | 10 +-
3061 drivers/md/bcache/journal.c | 2 +-
3062 drivers/md/bcache/stats.c | 26 +-
3063 drivers/md/bcache/stats.h | 16 +-
3064 drivers/md/bcache/super.c | 2 +-
3065 drivers/md/bcache/sysfs.c | 20 +-
3066 drivers/md/bitmap.c | 2 +-
3067 drivers/md/dm-cache-target.c | 116 +-
3068 drivers/md/dm-ioctl.c | 2 +-
3069 drivers/md/dm-raid.c | 2 +-
3070 drivers/md/dm-raid1.c | 18 +-
3071 drivers/md/dm-stats.c | 6 +-
3072 drivers/md/dm-stripe.c | 10 +-
3073 drivers/md/dm-table.c | 2 +-
3074 drivers/md/dm-thin-metadata.c | 4 +-
3075 drivers/md/dm.c | 28 +-
3076 drivers/md/md.c | 41 +-
3077 drivers/md/md.h | 8 +-
3078 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
3079 drivers/md/persistent-data/dm-space-map.h | 1 +
3080 drivers/md/raid1.c | 8 +-
3081 drivers/md/raid10.c | 20 +-
3082 drivers/md/raid5.c | 26 +-
3083 drivers/media/dvb-core/dvb_net.c | 2 +-
3084 drivers/media/dvb-core/dvbdev.c | 2 +-
3085 drivers/media/dvb-frontends/af9033.h | 2 +-
3086 drivers/media/dvb-frontends/cx24116.c | 2 +-
3087 drivers/media/dvb-frontends/cx24117.c | 2 +-
3088 drivers/media/dvb-frontends/cx24120.c | 2 +-
3089 drivers/media/dvb-frontends/cx24123.c | 2 +-
3090 drivers/media/dvb-frontends/cxd2820r_core.c | 2 +-
3091 drivers/media/dvb-frontends/dib3000.h | 2 +-
3092 drivers/media/dvb-frontends/dib7000p.h | 2 +-
3093 drivers/media/dvb-frontends/dib8000.h | 2 +-
3094 drivers/media/dvb-frontends/hd29l2.c | 2 +-
3095 drivers/media/dvb-frontends/lgdt3306a.c | 2 +-
3096 drivers/media/dvb-frontends/mt312.c | 6 +-
3097 drivers/media/dvb-frontends/s921.c | 2 +-
3098 drivers/media/pci/bt8xx/dst.c | 2 +-
3099 drivers/media/pci/cx88/cx88-video.c | 6 +-
3100 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
3101 drivers/media/pci/pt1/va1j5jf8007s.c | 2 +-
3102 drivers/media/pci/pt1/va1j5jf8007t.c | 2 +-
3103 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
3104 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
3105 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
3106 drivers/media/pci/tw68/tw68-core.c | 2 +-
3107 drivers/media/pci/zoran/zoran.h | 1 -
3108 drivers/media/pci/zoran/zoran_card.c | 4 +-
3109 drivers/media/pci/zoran/zoran_driver.c | 3 -
3110 drivers/media/platform/omap/omap_vout.c | 11 +-
3111 drivers/media/platform/s5p-tv/mixer.h | 2 +-
3112 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
3113 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
3114 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
3115 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
3116 drivers/media/platform/soc_camera/soc_camera.c | 2 +-
3117 drivers/media/radio/radio-cadet.c | 2 +
3118 drivers/media/radio/radio-maxiradio.c | 2 +-
3119 drivers/media/radio/radio-shark.c | 2 +-
3120 drivers/media/radio/radio-shark2.c | 2 +-
3121 drivers/media/radio/radio-si476x.c | 2 +-
3122 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
3123 drivers/media/usb/pvrusb2/pvrusb2-context.c | 8 +-
3124 drivers/media/usb/pvrusb2/pvrusb2-dvb.c | 7 +-
3125 drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 2 +-
3126 drivers/media/usb/pvrusb2/pvrusb2-std.c | 2 +-
3127 drivers/media/usb/pvrusb2/pvrusb2-v4l2.c | 6 +-
3128 drivers/media/usb/uvc/uvc_driver.c | 4 +-
3129 drivers/media/v4l2-core/v4l2-common.c | 2 +-
3130 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
3131 drivers/media/v4l2-core/v4l2-device.c | 4 +-
3132 drivers/media/v4l2-core/v4l2-ioctl.c | 293 +-
3133 drivers/memory/omap-gpmc.c | 21 +-
3134 drivers/message/fusion/mptbase.c | 4 +-
3135 drivers/message/fusion/mptlan.c | 2 +-
3136 drivers/message/fusion/mptsas.c | 34 +-
3137 drivers/mfd/ab8500-debugfs.c | 2 +-
3138 drivers/mfd/kempld-core.c | 2 +-
3139 drivers/mfd/max8925-i2c.c | 2 +-
3140 drivers/mfd/tps65910.c | 2 +-
3141 drivers/mfd/twl4030-irq.c | 9 +-
3142 drivers/misc/c2port/core.c | 4 +-
3143 drivers/misc/kgdbts.c | 6 +-
3144 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
3145 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
3146 drivers/misc/mic/scif/scif_api.c | 10 +-
3147 drivers/misc/mic/scif/scif_rb.c | 8 +-
3148 drivers/misc/sgi-gru/gruhandles.c | 4 +-
3149 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
3150 drivers/misc/sgi-gru/grutables.h | 158 +-
3151 drivers/misc/sgi-xp/xp.h | 2 +-
3152 drivers/misc/sgi-xp/xp_main.c | 57 +-
3153 drivers/misc/sgi-xp/xpc.h | 3 +-
3154 drivers/misc/sgi-xp/xpc_main.c | 2 +-
3155 drivers/misc/sgi-xp/xpnet.c | 2 +-
3156 drivers/misc/ti-st/st_kim.c | 32 +-
3157 drivers/mmc/card/mmc_test.c | 4 +-
3158 drivers/mmc/host/dw_mmc.h | 2 +-
3159 drivers/mmc/host/mmci.c | 4 +-
3160 drivers/mmc/host/omap_hsmmc.c | 4 +-
3161 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
3162 drivers/mmc/host/sdhci-s3c.c | 8 +-
3163 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
3164 drivers/mtd/devices/block2mtd.c | 2 +-
3165 drivers/mtd/devices/phram.c | 2 +-
3166 drivers/mtd/maps/gpio-addr-flash.c | 2 +-
3167 drivers/mtd/maps/latch-addr-flash.c | 2 +-
3168 drivers/mtd/maps/pci.c | 4 +-
3169 drivers/mtd/maps/pcmciamtd.c | 8 +-
3170 drivers/mtd/maps/sbc_gxx.c | 2 +-
3171 drivers/mtd/nand/cafe_nand.c | 18 +-
3172 drivers/mtd/nand/denali.c | 1 +
3173 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
3174 drivers/mtd/nftlmount.c | 1 +
3175 drivers/mtd/sm_ftl.c | 2 +-
3176 drivers/mtd/ubi/build.c | 2 +-
3177 drivers/net/bonding/bond_netlink.c | 2 +-
3178 drivers/net/caif/caif_hsi.c | 4 +-
3179 drivers/net/caif/caif_serial.c | 2 +-
3180 drivers/net/caif/caif_spi.c | 2 +-
3181 drivers/net/caif/caif_virtio.c | 2 +-
3182 drivers/net/can/Kconfig | 2 +-
3183 drivers/net/can/dev.c | 2 +-
3184 drivers/net/can/janz-ican3.c | 2 +-
3185 drivers/net/can/led.c | 2 +-
3186 drivers/net/can/sun4i_can.c | 2 +-
3187 drivers/net/can/vcan.c | 2 +-
3188 drivers/net/can/xilinx_can.c | 2 +-
3189 drivers/net/dummy.c | 2 +-
3190 drivers/net/ethernet/8390/ax88796.c | 4 +-
3191 drivers/net/ethernet/8390/axnet_cs.c | 4 +-
3192 drivers/net/ethernet/8390/ne2k-pci.c | 6 +-
3193 drivers/net/ethernet/8390/pcnet_cs.c | 4 +-
3194 drivers/net/ethernet/altera/altera_tse_main.c | 6 +-
3195 drivers/net/ethernet/amd/amd8111e.c | 5 +-
3196 drivers/net/ethernet/amd/pcnet32.c | 7 +-
3197 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
3198 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
3199 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
3200 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
3201 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 66 +-
3202 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
3203 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
3204 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
3205 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
3206 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
3207 drivers/net/ethernet/apm/xgene/xgene_enet_main.c | 4 +-
3208 drivers/net/ethernet/arc/emac_main.c | 2 +-
3209 drivers/net/ethernet/atheros/alx/main.c | 2 +-
3210 drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 2 +-
3211 drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 2 +-
3212 drivers/net/ethernet/aurora/nb8800.c | 2 +-
3213 drivers/net/ethernet/broadcom/bnx2.c | 2 +-
3214 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
3215 drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.c | 216 +-
3216 drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.h | 4 +-
3217 drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 2 +-
3218 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
3219 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
3220 drivers/net/ethernet/broadcom/tg3.c | 2 +-
3221 drivers/net/ethernet/broadcom/tg3.h | 1 +
3222 drivers/net/ethernet/brocade/bna/bfa_cs.h | 42 +-
3223 drivers/net/ethernet/brocade/bna/bfa_ioc.c | 10 +-
3224 drivers/net/ethernet/brocade/bna/bfa_ioc.h | 4 +-
3225 drivers/net/ethernet/brocade/bna/bfa_msgq.h | 8 +-
3226 drivers/net/ethernet/brocade/bna/bna_enet.c | 6 +-
3227 drivers/net/ethernet/brocade/bna/bna_tx_rx.c | 6 +-
3228 drivers/net/ethernet/brocade/bna/bna_types.h | 24 +-
3229 drivers/net/ethernet/brocade/bna/bnad.c | 11 +-
3230 drivers/net/ethernet/cadence/macb.c | 4 +-
3231 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
3232 drivers/net/ethernet/cavium/liquidio/lio_main.c | 15 +-
3233 drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c | 2 +-
3234 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
3235 drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 2 +-
3236 drivers/net/ethernet/chelsio/cxgb4vf/adapter.h | 2 +-
3237 drivers/net/ethernet/chelsio/cxgb4vf/sge.c | 2 +-
3238 drivers/net/ethernet/dec/tulip/de4x5.c | 13 +-
3239 drivers/net/ethernet/emulex/benet/be_main.c | 4 +-
3240 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
3241 drivers/net/ethernet/faraday/ftmac100.c | 2 +
3242 drivers/net/ethernet/hisilicon/hip04_eth.c | 2 +-
3243 drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 2 +-
3244 drivers/net/ethernet/hisilicon/hns/hns_ae_adapt.c | 6 +-
3245 drivers/net/ethernet/intel/e100.c | 2 +-
3246 drivers/net/ethernet/intel/e1000/e1000_main.c | 2 +-
3247 drivers/net/ethernet/intel/e1000e/netdev.c | 2 +-
3248 drivers/net/ethernet/intel/fm10k/fm10k_pci.c | 2 +-
3249 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
3250 drivers/net/ethernet/intel/igb/igb_main.c | 2 +-
3251 drivers/net/ethernet/intel/igbvf/netdev.c | 2 +-
3252 drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 2 +-
3253 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
3254 drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 4 +-
3255 drivers/net/ethernet/marvell/pxa168_eth.c | 2 +-
3256 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
3257 drivers/net/ethernet/mellanox/mlx4/main.c | 2 +-
3258 drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 +-
3259 drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +-
3260 drivers/net/ethernet/micrel/ks8851_mll.c | 2 +-
3261 drivers/net/ethernet/neterion/s2io.c | 2 +-
3262 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
3263 drivers/net/ethernet/neterion/vxge/vxge-main.c | 2 +-
3264 .../net/ethernet/netronome/nfp/nfp_net_common.c | 2 +-
3265 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
3266 .../net/ethernet/oki-semi/pch_gbe/pch_gbe_main.c | 4 +-
3267 .../net/ethernet/qlogic/netxen/netxen_nic_main.c | 2 +-
3268 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
3269 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
3270 drivers/net/ethernet/qlogic/qlcnic/qlcnic_main.c | 2 +-
3271 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
3272 drivers/net/ethernet/realtek/r8169.c | 8 +-
3273 drivers/net/ethernet/renesas/sh_eth.c | 2 +-
3274 drivers/net/ethernet/rocker/rocker.c | 4 +-
3275 drivers/net/ethernet/sfc/ptp.c | 2 +-
3276 drivers/net/ethernet/sfc/selftest.c | 20 +-
3277 drivers/net/ethernet/smsc/smsc911x.c | 2 +-
3278 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
3279 drivers/net/ethernet/synopsys/dwc_eth_qos.c | 2 +-
3280 drivers/net/ethernet/via/via-rhine.c | 2 +-
3281 drivers/net/ethernet/wiznet/w5100.c | 2 +-
3282 drivers/net/ethernet/wiznet/w5300.c | 2 +-
3283 drivers/net/geneve.c | 2 +-
3284 drivers/net/hyperv/hyperv_net.h | 2 +-
3285 drivers/net/hyperv/netvsc_drv.c | 2 +-
3286 drivers/net/hyperv/rndis_filter.c | 7 +-
3287 drivers/net/ifb.c | 2 +-
3288 drivers/net/ipvlan/ipvlan_core.c | 2 +-
3289 drivers/net/ipvlan/ipvlan_main.c | 6 +-
3290 drivers/net/irda/sh_irda.c | 2 +-
3291 drivers/net/irda/vlsi_ir.c | 18 +-
3292 drivers/net/irda/vlsi_ir.h | 14 +-
3293 drivers/net/macvlan.c | 20 +-
3294 drivers/net/macvtap.c | 10 +-
3295 drivers/net/nlmon.c | 2 +-
3296 drivers/net/phy/phy_device.c | 6 +-
3297 drivers/net/plip/plip.c | 2 +-
3298 drivers/net/ppp/ppp_generic.c | 4 +-
3299 drivers/net/ppp/pptp.c | 1 +
3300 drivers/net/rionet.c | 2 +-
3301 drivers/net/slip/slhc.c | 2 +-
3302 drivers/net/team/team.c | 4 +-
3303 drivers/net/tun.c | 7 +-
3304 drivers/net/usb/hso.c | 28 +-
3305 drivers/net/usb/ipheth.c | 2 +-
3306 drivers/net/usb/r8152.c | 2 +-
3307 drivers/net/usb/sierra_net.c | 4 +-
3308 drivers/net/virtio_net.c | 2 +-
3309 drivers/net/vrf.c | 4 +-
3310 drivers/net/vxlan.c | 4 +-
3311 drivers/net/wimax/i2400m/rx.c | 2 +-
3312 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
3313 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
3314 drivers/net/wireless/ath/ath6kl/core.h | 2 +-
3315 drivers/net/wireless/ath/ath6kl/txrx.c | 2 +-
3316 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
3317 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
3318 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
3319 drivers/net/wireless/ath/ath9k/main.c | 22 +-
3320 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
3321 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
3322 drivers/net/wireless/ath/carl9170/main.c | 10 +-
3323 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
3324 drivers/net/wireless/ath/wil6210/pcie_bus.c | 2 +-
3325 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
3326 drivers/net/wireless/atmel/at76c50x-usb.c | 2 +-
3327 drivers/net/wireless/atmel/atmel.c | 183 +-
3328 drivers/net/wireless/broadcom/b43/phy_lp.c | 2 +-
3329 drivers/net/wireless/broadcom/b43legacy/main.c | 5 +-
3330 .../broadcom/brcm80211/brcmsmac/phy/phy_cmn.c | 3 +-
3331 .../broadcom/brcm80211/brcmsmac/phy_shim.c | 5 +-
3332 .../broadcom/brcm80211/brcmsmac/phy_shim.h | 2 +-
3333 drivers/net/wireless/cisco/airo.c | 201 +-
3334 drivers/net/wireless/intel/ipw2x00/ipw2100.c | 8 +-
3335 drivers/net/wireless/intel/ipw2x00/ipw2200.c | 6 +-
3336 drivers/net/wireless/intel/iwlegacy/3945-mac.c | 11 +-
3337 drivers/net/wireless/intel/iwlegacy/4965-mac.c | 7 +-
3338 drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c | 34 +-
3339 drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 4 +-
3340 drivers/net/wireless/intel/iwlwifi/mvm/tx.c | 2 +-
3341 drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 4 +-
3342 .../net/wireless/intersil/hostap/hostap_ioctl.c | 134 +-
3343 drivers/net/wireless/intersil/orinoco/wext.c | 131 +-
3344 drivers/net/wireless/intersil/prism54/isl_ioctl.c | 292 +-
3345 drivers/net/wireless/mac80211_hwsim.c | 28 +-
3346 drivers/net/wireless/marvell/mwifiex/main.c | 2 +-
3347 drivers/net/wireless/ralink/rt2x00/rt2400pci.c | 4 +-
3348 drivers/net/wireless/ralink/rt2x00/rt2500pci.c | 4 +-
3349 drivers/net/wireless/ralink/rt2x00/rt2500usb.c | 4 +-
3350 drivers/net/wireless/ralink/rt2x00/rt2800lib.c | 6 +-
3351 drivers/net/wireless/ralink/rt2x00/rt2x00.h | 2 +-
3352 drivers/net/wireless/ralink/rt2x00/rt2x00queue.c | 4 +-
3353 drivers/net/wireless/ralink/rt2x00/rt61pci.c | 4 +-
3354 drivers/net/wireless/ralink/rt2x00/rt73usb.c | 4 +-
3355 drivers/net/wireless/realtek/rtlwifi/base.c | 14 +-
3356 drivers/net/wireless/realtek/rtlwifi/base.h | 4 +-
3357 drivers/net/wireless/realtek/rtlwifi/pci.c | 15 +-
3358 drivers/net/wireless/realtek/rtlwifi/ps.c | 6 +-
3359 drivers/net/wireless/realtek/rtlwifi/ps.h | 6 +-
3360 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
3361 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
3362 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
3363 drivers/net/wireless/zydas/zd1201.c | 192 +-
3364 drivers/nvme/host/pci.c | 2 +-
3365 drivers/of/fdt.c | 4 +-
3366 drivers/oprofile/buffer_sync.c | 8 +-
3367 drivers/oprofile/event_buffer.c | 2 +-
3368 drivers/oprofile/oprof.c | 2 +-
3369 drivers/oprofile/oprofile_stats.c | 10 +-
3370 drivers/oprofile/oprofile_stats.h | 10 +-
3371 drivers/oprofile/oprofilefs.c | 2 +-
3372 drivers/oprofile/timer_int.c | 2 +-
3373 drivers/parport/procfs.c | 4 +-
3374 drivers/pci/host/pci-host-generic.c | 2 +-
3375 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
3376 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
3377 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
3378 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
3379 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
3380 drivers/pci/hotplug/pciehp_core.c | 2 +-
3381 drivers/pci/msi.c | 22 +-
3382 drivers/pci/pci-sysfs.c | 6 +-
3383 drivers/pci/pci.h | 4 +-
3384 drivers/pci/pcie/aspm.c | 10 +-
3385 drivers/pci/pcie/portdrv_pci.c | 2 +-
3386 drivers/pci/probe.c | 2 +-
3387 drivers/pci/setup-bus.c | 2 +-
3388 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
3389 drivers/pinctrl/pinctrl-at91.c | 5 +-
3390 drivers/platform/chrome/chromeos_pstore.c | 2 +-
3391 drivers/platform/x86/alienware-wmi.c | 4 +-
3392 drivers/platform/x86/apple-gmux.c | 2 +-
3393 drivers/platform/x86/compal-laptop.c | 2 +-
3394 drivers/platform/x86/hdaps.c | 2 +-
3395 drivers/platform/x86/ibm_rtl.c | 2 +-
3396 drivers/platform/x86/intel_oaktrail.c | 2 +-
3397 drivers/platform/x86/msi-laptop.c | 16 +-
3398 drivers/platform/x86/msi-wmi.c | 2 +-
3399 drivers/platform/x86/samsung-laptop.c | 2 +-
3400 drivers/platform/x86/samsung-q10.c | 2 +-
3401 drivers/platform/x86/sony-laptop.c | 14 +-
3402 drivers/platform/x86/thinkpad_acpi.c | 11 +-
3403 drivers/pnp/pnpbios/bioscalls.c | 14 +-
3404 drivers/pnp/pnpbios/core.c | 2 +-
3405 drivers/power/pda_power.c | 7 +-
3406 drivers/power/power_supply.h | 4 +-
3407 drivers/power/power_supply_core.c | 7 +-
3408 drivers/power/power_supply_sysfs.c | 6 +-
3409 drivers/power/reset/at91-reset.c | 5 +-
3410 drivers/powercap/powercap_sys.c | 136 +-
3411 drivers/ptp/ptp_private.h | 2 +-
3412 drivers/ptp/ptp_sysfs.c | 2 +-
3413 drivers/regulator/core.c | 4 +-
3414 drivers/regulator/max8660.c | 6 +-
3415 drivers/regulator/max8973-regulator.c | 16 +-
3416 drivers/regulator/mc13892-regulator.c | 8 +-
3417 drivers/remoteproc/remoteproc_core.c | 26 +-
3418 drivers/rtc/rtc-armada38x.c | 7 +-
3419 drivers/rtc/rtc-cmos.c | 4 +-
3420 drivers/rtc/rtc-ds1307.c | 2 +-
3421 drivers/rtc/rtc-m48t59.c | 4 +-
3422 drivers/rtc/rtc-rv8803.c | 15 +-
3423 drivers/rtc/rtc-rx8010.c | 8 +-
3424 drivers/rtc/rtc-test.c | 6 +-
3425 drivers/scsi/aacraid/aachba.c | 11 +-
3426 drivers/scsi/aic7xxx/aic79xx.h | 2 +-
3427 drivers/scsi/aic7xxx/aic79xx_core.c | 11 +-
3428 drivers/scsi/be2iscsi/be_main.c | 2 +-
3429 drivers/scsi/bfa/bfa.h | 4 +-
3430 drivers/scsi/bfa/bfa_core.c | 4 +-
3431 drivers/scsi/bfa/bfa_cs.h | 124 +-
3432 drivers/scsi/bfa/bfa_fcpim.h | 14 +-
3433 drivers/scsi/bfa/bfa_fcs.h | 34 +-
3434 drivers/scsi/bfa/bfa_fcs_fcpim.c | 6 +-
3435 drivers/scsi/bfa/bfa_fcs_lport.c | 4 +-
3436 drivers/scsi/bfa/bfa_fcs_rport.c | 4 +-
3437 drivers/scsi/bfa/bfa_ioc.c | 8 +-
3438 drivers/scsi/bfa/bfa_ioc.h | 16 +-
3439 drivers/scsi/bfa/bfa_svc.c | 12 +-
3440 drivers/scsi/bfa/bfa_svc.h | 20 +-
3441 drivers/scsi/bfa/bfad.c | 12 +-
3442 drivers/scsi/bfa/bfad_bsg.c | 8 +-
3443 drivers/scsi/bfa/bfad_drv.h | 5 +-
3444 drivers/scsi/csiostor/csio_defs.h | 19 +-
3445 drivers/scsi/csiostor/csio_hw.c | 67 +-
3446 drivers/scsi/csiostor/csio_init.c | 2 +-
3447 drivers/scsi/csiostor/csio_lnode.c | 32 +-
3448 drivers/scsi/csiostor/csio_rnode.c | 28 +-
3449 drivers/scsi/csiostor/csio_scsi.c | 37 +-
3450 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
3451 drivers/scsi/fcoe/fcoe_transport.c | 16 +-
3452 drivers/scsi/hosts.c | 4 +-
3453 drivers/scsi/hpsa.c | 38 +-
3454 drivers/scsi/hpsa.h | 2 +-
3455 drivers/scsi/hptiop.c | 2 -
3456 drivers/scsi/hptiop.h | 1 -
3457 drivers/scsi/ipr.c | 32 +-
3458 drivers/scsi/ipr.h | 2 +-
3459 drivers/scsi/libfc/fc_exch.c | 50 +-
3460 drivers/scsi/libsas/sas_ata.c | 2 +-
3461 drivers/scsi/lpfc/lpfc.h | 8 +-
3462 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
3463 drivers/scsi/lpfc/lpfc_init.c | 8 +-
3464 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
3465 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
3466 drivers/scsi/mpt3sas/mpt3sas_base.c | 2 +-
3467 drivers/scsi/mpt3sas/mpt3sas_scsih.c | 4 +-
3468 drivers/scsi/pmcraid.c | 46 +-
3469 drivers/scsi/pmcraid.h | 8 +-
3470 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
3471 drivers/scsi/qla2xxx/qla_gbl.h | 8 +-
3472 drivers/scsi/qla2xxx/qla_os.c | 15 +-
3473 drivers/scsi/qla2xxx/qla_target.c | 16 +-
3474 drivers/scsi/qla2xxx/qla_target.h | 2 +-
3475 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
3476 drivers/scsi/qla4xxx/ql4_os.c | 15 +-
3477 drivers/scsi/scsi.c | 2 +-
3478 drivers/scsi/scsi_lib.c | 8 +-
3479 drivers/scsi/scsi_sysfs.c | 2 +-
3480 drivers/scsi/scsi_transport_fc.c | 8 +-
3481 drivers/scsi/scsi_transport_iscsi.c | 6 +-
3482 drivers/scsi/scsi_transport_spi.c | 2 +-
3483 drivers/scsi/scsi_transport_srp.c | 8 +-
3484 drivers/scsi/sd.c | 6 +-
3485 drivers/scsi/sg.c | 2 +-
3486 drivers/scsi/sr.c | 21 +-
3487 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
3488 drivers/spi/spi.c | 2 +-
3489 drivers/staging/android/timed_output.c | 6 +-
3490 drivers/staging/comedi/comedi_fops.c | 8 +-
3491 drivers/staging/fbtft/fbtft-core.c | 2 +-
3492 drivers/staging/fbtft/fbtft.h | 2 +-
3493 drivers/staging/gdm724x/gdm_lte.c | 2 +-
3494 drivers/staging/gdm724x/gdm_tty.c | 2 +-
3495 drivers/staging/gdm72xx/gdm_wimax.c | 2 +-
3496 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
3497 drivers/staging/iio/adc/ad7280a.c | 4 +-
3498 .../staging/lustre/lnet/klnds/socklnd/socklnd.h | 6 +-
3499 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
3500 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
3501 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
3502 .../lustre/lustre/include/lustre/lustre_idl.h | 92 +-
3503 drivers/staging/lustre/lustre/include/lustre_dlm.h | 8 +-
3504 drivers/staging/lustre/lustre/include/lustre_net.h | 2 +-
3505 drivers/staging/lustre/lustre/include/obd.h | 2 +-
3506 drivers/staging/lustre/lustre/ldlm/ldlm_request.c | 5 +-
3507 drivers/staging/lustre/lustre/llite/dir.c | 2 +-
3508 drivers/staging/lustre/lustre/lov/lov_io.c | 62 +-
3509 drivers/staging/lustre/lustre/obdclass/llog_swab.c | 24 +-
3510 drivers/staging/lustre/lustre/osc/osc_request.c | 24 +-
3511 drivers/staging/lustre/lustre/ptlrpc/layout.c | 7 +-
3512 .../staging/lustre/lustre/ptlrpc/pack_generic.c | 151 +-
3513 drivers/staging/octeon/ethernet-rx.c | 24 +-
3514 drivers/staging/octeon/ethernet.c | 8 +-
3515 drivers/staging/panel/panel.c | 4 +-
3516 drivers/staging/rdma/hfi1/pcie.c | 2 +-
3517 drivers/staging/rtl8188eu/core/rtw_mlme_ext.c | 18 +-
3518 drivers/staging/rtl8188eu/hal/rtl8188eu_recv.c | 2 +-
3519 drivers/staging/rtl8188eu/hal/rtl8188eu_xmit.c | 2 +-
3520 drivers/staging/rtl8188eu/include/Hal8188EPhyCfg.h | 8 -
3521 drivers/staging/rtl8188eu/include/hal_intf.h | 5 +-
3522 drivers/staging/rtl8188eu/include/odm_precomp.h | 2 +-
3523 drivers/staging/rtl8188eu/include/recv_osdep.h | 1 -
3524 drivers/staging/rtl8188eu/include/rtl8188e_recv.h | 2 +-
3525 drivers/staging/rtl8188eu/include/rtl8188e_xmit.h | 2 +-
3526 drivers/staging/rtl8188eu/include/rtw_cmd.h | 1 -
3527 drivers/staging/rtl8188eu/include/rtw_eeprom.h | 6 -
3528 drivers/staging/rtl8188eu/include/rtw_ioctl.h | 9 -
3529 drivers/staging/rtl8188eu/include/rtw_mlme_ext.h | 12 +-
3530 drivers/staging/rtl8188eu/include/xmit_osdep.h | 2 +-
3531 drivers/staging/rtl8188eu/os_dep/usb_ops_linux.c | 4 +-
3532 drivers/staging/rtl8188eu/os_dep/xmit_linux.c | 2 +-
3533 drivers/staging/rtl8192e/rtl8192e/rtl_core.c | 49 +-
3534 drivers/staging/rtl8192e/rtl8192e/rtl_core.h | 4 +-
3535 drivers/staging/rtl8192e/rtl8192e/rtl_dm.c | 10 +-
3536 drivers/staging/rtl8192e/rtl8192e/rtl_dm.h | 4 +-
3537 drivers/staging/rtl8192e/rtl8192e/rtl_ps.c | 6 +-
3538 drivers/staging/rtl8192e/rtl8192e/rtl_ps.h | 3 +-
3539 drivers/staging/rtl8192e/rtl8192e/rtl_wx.c | 48 +-
3540 drivers/staging/rtl8192e/rtllib.h | 4 +-
3541 drivers/staging/rtl8192e/rtllib_softmac.c | 32 +-
3542 drivers/staging/rtl8192e/rtllib_softmac_wx.c | 2 +-
3543 drivers/staging/rtl8192e/rtllib_tx.c | 2 +-
3544 drivers/staging/rtl8192u/ieee80211/ieee80211.h | 2 +-
3545 .../staging/rtl8192u/ieee80211/ieee80211_softmac.c | 6 +-
3546 drivers/staging/rtl8192u/ieee80211/ieee80211_tx.c | 2 +-
3547 drivers/staging/rtl8192u/r8192U_core.c | 7 +-
3548 drivers/staging/rtl8712/rtl8712_recv.c | 6 +-
3549 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
3550 drivers/staging/rtl8712/rtl871x_ioctl.h | 14 -
3551 drivers/staging/rtl8712/rtl871x_xmit.c | 2 +-
3552 drivers/staging/rtl8712/rtl871x_xmit.h | 2 +-
3553 drivers/staging/rtl8712/usb_ops_linux.c | 2 +-
3554 drivers/staging/rtl8712/xmit_linux.c | 2 +-
3555 drivers/staging/rtl8712/xmit_osdep.h | 2 +-
3556 drivers/staging/rtl8723au/core/rtw_mlme_ext.c | 12 +-
3557 drivers/staging/rtl8723au/core/rtw_xmit.c | 2 +-
3558 drivers/staging/rtl8723au/hal/rtl8723au_recv.c | 2 +-
3559 drivers/staging/rtl8723au/hal/usb_ops_linux.c | 4 +-
3560 drivers/staging/rtl8723au/include/Hal8723APhyCfg.h | 8 -
3561 drivers/staging/rtl8723au/include/drv_types.h | 2 +-
3562 drivers/staging/rtl8723au/include/hal_intf.h | 2 -
3563 drivers/staging/rtl8723au/include/recv_osdep.h | 1 -
3564 drivers/staging/rtl8723au/include/rtw_ap.h | 2 -
3565 drivers/staging/rtl8723au/include/rtw_cmd.h | 1 -
3566 drivers/staging/rtl8723au/include/rtw_eeprom.h | 7 -
3567 drivers/staging/rtl8723au/include/rtw_mlme_ext.h | 14 +-
3568 drivers/staging/rtl8723au/include/usb_ops.h | 8 +-
3569 drivers/staging/rtl8723au/include/xmit_osdep.h | 2 +-
3570 drivers/staging/rtl8723au/os_dep/ioctl_cfg80211.c | 2 +-
3571 drivers/staging/rtl8723au/os_dep/xmit_linux.c | 2 +-
3572 drivers/staging/sm750fb/sm750.c | 14 +-
3573 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
3574 drivers/staging/unisys/visornic/visornic_main.c | 2 +-
3575 drivers/staging/wilc1000/linux_wlan.c | 2 +-
3576 drivers/staging/wilc1000/wilc_spi.c | 2 -
3577 drivers/staging/wilc1000/wilc_wlan.h | 2 +-
3578 drivers/staging/wlan-ng/p80211netdev.c | 2 +-
3579 drivers/target/sbp/sbp_target.c | 4 +-
3580 drivers/thermal/cpu_cooling.c | 9 +-
3581 drivers/thermal/devfreq_cooling.c | 19 +-
3582 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
3583 drivers/thermal/of-thermal.c | 17 +-
3584 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
3585 drivers/tty/cyclades.c | 6 +-
3586 drivers/tty/hvc/hvc_console.c | 14 +-
3587 drivers/tty/hvc/hvcs.c | 21 +-
3588 drivers/tty/hvc/hvsi.c | 22 +-
3589 drivers/tty/hvc/hvsi_lib.c | 4 +-
3590 drivers/tty/ipwireless/tty.c | 27 +-
3591 drivers/tty/moxa.c | 2 +-
3592 drivers/tty/n_gsm.c | 6 +-
3593 drivers/tty/n_tty.c | 28 +-
3594 drivers/tty/pty.c | 4 +-
3595 drivers/tty/rocket.c | 6 +-
3596 drivers/tty/serial/8250/8250_core.c | 10 +-
3597 drivers/tty/serial/8250/8250_pci.c | 2 +-
3598 drivers/tty/serial/ifx6x60.c | 2 +-
3599 drivers/tty/serial/ioc4_serial.c | 6 +-
3600 drivers/tty/serial/jsm/jsm_driver.c | 2 +-
3601 drivers/tty/serial/kgdb_nmi.c | 4 +-
3602 drivers/tty/serial/kgdboc.c | 34 +-
3603 drivers/tty/serial/msm_serial.c | 4 +-
3604 drivers/tty/serial/samsung.c | 9 +-
3605 drivers/tty/serial/serial_core.c | 8 +-
3606 drivers/tty/synclink.c | 34 +-
3607 drivers/tty/synclink_gt.c | 28 +-
3608 drivers/tty/synclinkmp.c | 34 +-
3609 drivers/tty/tty_io.c | 2 +-
3610 drivers/tty/tty_ldisc.c | 8 +-
3611 drivers/tty/tty_port.c | 22 +-
3612 drivers/uio/uio.c | 13 +-
3613 drivers/usb/atm/cxacru.c | 2 +-
3614 drivers/usb/atm/usbatm.c | 24 +-
3615 drivers/usb/class/cdc-acm.h | 2 +-
3616 drivers/usb/core/devices.c | 6 +-
3617 drivers/usb/core/devio.c | 12 +-
3618 drivers/usb/core/hcd.c | 4 +-
3619 drivers/usb/core/sysfs.c | 2 +-
3620 drivers/usb/core/usb.c | 2 +-
3621 drivers/usb/early/ehci-dbgp.c | 16 +-
3622 drivers/usb/gadget/function/f_phonet.c | 2 +-
3623 drivers/usb/gadget/function/u_serial.c | 22 +-
3624 drivers/usb/gadget/legacy/inode.c | 4 +-
3625 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
3626 drivers/usb/host/ehci-hcd.c | 2 +-
3627 drivers/usb/host/ehci-hub.c | 4 +-
3628 drivers/usb/host/ehci-q.c | 4 +-
3629 drivers/usb/host/fotg210-hcd.c | 2 +-
3630 drivers/usb/host/hwa-hc.c | 2 +-
3631 drivers/usb/host/ohci-hcd.c | 2 +-
3632 drivers/usb/host/r8a66597.h | 2 +-
3633 drivers/usb/host/uhci-hcd.c | 2 +-
3634 drivers/usb/host/xhci-pci.c | 2 +-
3635 drivers/usb/host/xhci.c | 2 +-
3636 drivers/usb/misc/appledisplay.c | 4 +-
3637 drivers/usb/misc/sisusbvga/sisusb_con.c | 98 +-
3638 drivers/usb/serial/console.c | 8 +-
3639 drivers/usb/storage/transport.c | 2 +-
3640 drivers/usb/storage/usb.c | 2 +-
3641 drivers/usb/storage/usb.h | 2 +-
3642 drivers/usb/usbip/vhci.h | 2 +-
3643 drivers/usb/usbip/vhci_hcd.c | 6 +-
3644 drivers/usb/usbip/vhci_rx.c | 2 +-
3645 drivers/usb/wusbcore/wa-hc.h | 4 +-
3646 drivers/usb/wusbcore/wa-xfer.c | 2 +-
3647 drivers/vfio/pci/vfio_pci.c | 2 +-
3648 drivers/vhost/vringh.c | 20 +-
3649 drivers/video/backlight/kb3886_bl.c | 2 +-
3650 drivers/video/console/dummycon.c | 96 +-
3651 drivers/video/console/fbcon.c | 2 +-
3652 drivers/video/console/vgacon.c | 23 +-
3653 drivers/video/fbdev/aty/aty128fb.c | 2 +-
3654 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
3655 drivers/video/fbdev/aty/mach64_ct.c | 5 +-
3656 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
3657 drivers/video/fbdev/aty/mach64_gx.c | 17 +-
3658 drivers/video/fbdev/core/fb_defio.c | 6 +-
3659 drivers/video/fbdev/core/fbmem.c | 12 +-
3660 drivers/video/fbdev/hyperv_fb.c | 4 +-
3661 drivers/video/fbdev/i810/i810_accel.c | 1 +
3662 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
3663 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
3664 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
3665 drivers/video/fbdev/omap2/omapfb/dss/display.c | 8 +-
3666 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
3667 drivers/video/fbdev/sis/sis_main.h | 2 +-
3668 drivers/video/fbdev/smscufx.c | 4 +-
3669 drivers/video/fbdev/udlfb.c | 36 +-
3670 drivers/video/fbdev/uvesafb.c | 52 +-
3671 drivers/video/fbdev/vesafb.c | 58 +-
3672 drivers/video/fbdev/via/via_clock.h | 2 +-
3673 drivers/xen/events/events_base.c | 6 +-
3674 drivers/xen/xen-pciback/pci_stub.c | 2 +-
3675 fs/9p/vfs_addr.c | 2 +-
3676 fs/9p/vfs_inode_dotl.c | 4 +-
3677 fs/Kconfig.binfmt | 2 +-
3678 fs/afs/file.c | 8 +-
3679 fs/afs/inode.c | 4 +-
3680 fs/afs/internal.h | 4 +-
3681 fs/aio.c | 2 +-
3682 fs/autofs4/waitq.c | 2 +-
3683 fs/befs/endian.h | 6 +-
3684 fs/binfmt_aout.c | 23 +-
3685 fs/binfmt_elf.c | 670 +-
3686 fs/binfmt_elf_fdpic.c | 4 +-
3687 fs/block_dev.c | 2 +-
3688 fs/btrfs/ctree.c | 11 +-
3689 fs/btrfs/ctree.h | 4 +-
3690 fs/btrfs/delayed-inode.c | 6 +-
3691 fs/btrfs/delayed-inode.h | 4 +-
3692 fs/btrfs/delayed-ref.c | 4 +-
3693 fs/btrfs/disk-io.c | 4 +-
3694 fs/btrfs/extent_map.c | 8 +-
3695 fs/btrfs/file.c | 4 +-
3696 fs/btrfs/free-space-cache.h | 1 +
3697 fs/btrfs/raid56.c | 30 +-
3698 fs/btrfs/super.c | 2 +-
3699 fs/btrfs/sysfs.c | 2 +-
3700 fs/btrfs/tests/btrfs-tests.c | 2 +-
3701 fs/btrfs/tests/free-space-tests.c | 2 +-
3702 fs/btrfs/transaction.c | 2 +-
3703 fs/btrfs/tree-log.c | 8 +-
3704 fs/btrfs/tree-log.h | 2 +-
3705 fs/btrfs/volumes.c | 14 +-
3706 fs/btrfs/volumes.h | 22 +-
3707 fs/buffer.c | 2 +-
3708 fs/cachefiles/bind.c | 6 +-
3709 fs/cachefiles/daemon.c | 8 +-
3710 fs/cachefiles/internal.h | 12 +-
3711 fs/cachefiles/namei.c | 2 +-
3712 fs/cachefiles/proc.c | 12 +-
3713 fs/ceph/dir.c | 12 +-
3714 fs/ceph/super.c | 4 +-
3715 fs/cifs/cifs_debug.c | 12 +-
3716 fs/cifs/cifsfs.c | 8 +-
3717 fs/cifs/cifsglob.h | 54 +-
3718 fs/cifs/file.c | 14 +-
3719 fs/cifs/misc.c | 4 +-
3720 fs/cifs/smb1ops.c | 80 +-
3721 fs/cifs/smb2ops.c | 84 +-
3722 fs/cifs/smb2pdu.c | 3 +-
3723 fs/coda/cache.c | 10 +-
3724 fs/coda/dir.c | 5 +-
3725 fs/compat.c | 9 +-
3726 fs/compat_binfmt_elf.c | 2 +
3727 fs/compat_ioctl.c | 12 +-
3728 fs/configfs/dir.c | 10 +-
3729 fs/coredump.c | 18 +-
3730 fs/dcache.c | 64 +-
3731 fs/ecryptfs/inode.c | 2 +-
3732 fs/ecryptfs/miscdev.c | 2 +-
3733 fs/exec.c | 365 +-
3734 fs/exofs/inode.c | 7 +-
3735 fs/ext2/xattr.c | 5 +-
3736 fs/ext4/ext4.h | 20 +-
3737 fs/ext4/mballoc.c | 44 +-
3738 fs/ext4/resize.c | 16 +-
3739 fs/ext4/super.c | 2 +-
3740 fs/ext4/sysfs.c | 2 +-
3741 fs/ext4/xattr.c | 5 +-
3742 fs/fhandle.c | 5 +-
3743 fs/file.c | 18 +-
3744 fs/freevxfs/vxfs_inode.c | 8 +-
3745 fs/freevxfs/vxfs_inode.h | 4 +-
3746 fs/fs-writeback.c | 11 +-
3747 fs/fs_struct.c | 8 +-
3748 fs/fscache/cookie.c | 40 +-
3749 fs/fscache/internal.h | 202 +-
3750 fs/fscache/object.c | 26 +-
3751 fs/fscache/operation.c | 38 +-
3752 fs/fscache/page.c | 110 +-
3753 fs/fscache/stats.c | 348 +-
3754 fs/fuse/cuse.c | 10 +-
3755 fs/fuse/dev.c | 4 +-
3756 fs/fuse/file.c | 4 +-
3757 fs/fuse/inode.c | 4 +-
3758 fs/gfs2/aops.c | 2 +-
3759 fs/gfs2/file.c | 2 +-
3760 fs/gfs2/glock.c | 22 +-
3761 fs/gfs2/glops.c | 4 +-
3762 fs/gfs2/quota.c | 6 +-
3763 fs/hugetlbfs/inode.c | 13 +-
3764 fs/inode.c | 4 +-
3765 fs/jbd2/commit.c | 2 +-
3766 fs/jbd2/transaction.c | 4 +-
3767 fs/jffs2/erase.c | 3 +-
3768 fs/jffs2/file.c | 3 +-
3769 fs/jffs2/fs.c | 2 +-
3770 fs/jffs2/os-linux.h | 2 +-
3771 fs/jffs2/wbuf.c | 3 +-
3772 fs/jfs/super.c | 2 +-
3773 fs/kernfs/dir.c | 2 +-
3774 fs/kernfs/file.c | 20 +-
3775 fs/libfs.c | 10 +-
3776 fs/lockd/clnt4xdr.c | 46 +-
3777 fs/lockd/clntproc.c | 4 +-
3778 fs/lockd/clntxdr.c | 44 +-
3779 fs/lockd/mon.c | 24 +-
3780 fs/lockd/svc.c | 2 +-
3781 fs/lockd/svc4proc.c | 69 +-
3782 fs/lockd/svcproc.c | 75 +-
3783 fs/lockd/xdr.c | 44 +-
3784 fs/lockd/xdr4.c | 41 +-
3785 fs/logfs/dev_bdev.c | 13 +-
3786 fs/logfs/dev_mtd.c | 13 +-
3787 fs/logfs/dir.c | 4 +-
3788 fs/logfs/logfs.h | 5 +-
3789 fs/logfs/readwrite.c | 2 +-
3790 fs/logfs/segment.c | 2 +-
3791 fs/logfs/super.c | 39 -
3792 fs/namei.c | 16 +-
3793 fs/namespace.c | 16 +-
3794 fs/nfs/callback.h | 18 +-
3795 fs/nfs/callback_proc.c | 26 +-
3796 fs/nfs/callback_xdr.c | 73 +-
3797 fs/nfs/dir.c | 5 +-
3798 fs/nfs/inode.c | 6 +-
3799 fs/nfs/internal.h | 5 +-
3800 fs/nfs/mount_clnt.c | 26 +-
3801 fs/nfs/nfs2xdr.c | 101 +-
3802 fs/nfs/nfs3xdr.c | 201 +-
3803 fs/nfs/nfs42xdr.c | 60 +-
3804 fs/nfs/nfs4xdr.c | 507 +-
3805 fs/nfs/read.c | 2 +-
3806 fs/nfs/symlink.c | 6 +-
3807 fs/nfsd/current_stateid.h | 24 +-
3808 fs/nfsd/nfs2acl.c | 85 +-
3809 fs/nfsd/nfs3acl.c | 44 +-
3810 fs/nfsd/nfs3proc.c | 271 +-
3811 fs/nfsd/nfs3xdr.c | 171 +-
3812 fs/nfsd/nfs4callback.c | 31 +-
3813 fs/nfsd/nfs4proc.c | 320 +-
3814 fs/nfsd/nfs4state.c | 111 +-
3815 fs/nfsd/nfs4xdr.c | 564 +-
3816 fs/nfsd/nfscache.c | 11 +-
3817 fs/nfsd/nfsproc.c | 193 +-
3818 fs/nfsd/nfsxdr.c | 96 +-
3819 fs/nfsd/vfs.c | 6 +-
3820 fs/nfsd/xdr.h | 50 +-
3821 fs/nfsd/xdr3.h | 100 +-
3822 fs/nfsd/xdr4.h | 50 +-
3823 fs/nls/nls_base.c | 26 +-
3824 fs/nls/nls_cp932.c | 2 +-
3825 fs/nls/nls_cp936.c | 2 +-
3826 fs/nls/nls_cp949.c | 2 +-
3827 fs/nls/nls_cp950.c | 2 +-
3828 fs/nls/nls_euc-jp.c | 8 +-
3829 fs/nls/nls_koi8-ru.c | 8 +-
3830 fs/notify/fanotify/fanotify_user.c | 4 +-
3831 fs/notify/notification.c | 4 +-
3832 fs/ntfs/dir.c | 4 +-
3833 fs/ntfs/inode.c | 19 +-
3834 fs/ntfs/inode.h | 4 +-
3835 fs/ntfs/mft.c | 4 +-
3836 fs/ntfs/super.c | 8 +-
3837 fs/ocfs2/dlm/dlmcommon.h | 4 +-
3838 fs/ocfs2/dlm/dlmdebug.c | 10 +-
3839 fs/ocfs2/dlm/dlmdomain.c | 4 +-
3840 fs/ocfs2/dlm/dlmmaster.c | 4 +-
3841 fs/ocfs2/dlmfs/dlmfs.c | 4 +-
3842 fs/ocfs2/localalloc.c | 2 +-
3843 fs/ocfs2/ocfs2.h | 10 +-
3844 fs/ocfs2/suballoc.c | 12 +-
3845 fs/ocfs2/super.c | 20 +-
3846 fs/overlayfs/copy_up.c | 2 +-
3847 fs/pipe.c | 72 +-
3848 fs/posix_acl.c | 4 +-
3849 fs/proc/array.c | 20 +
3850 fs/proc/base.c | 7 +-
3851 fs/proc/kcore.c | 36 +-
3852 fs/proc/meminfo.c | 2 +-
3853 fs/proc/nommu.c | 2 +-
3854 fs/proc/proc_sysctl.c | 26 +-
3855 fs/proc/task_mmu.c | 39 +-
3856 fs/proc/task_nommu.c | 6 +-
3857 fs/proc/vmcore.c | 16 +-
3858 fs/qnx6/qnx6.h | 4 +-
3859 fs/quota/netlink.c | 4 +-
3860 fs/read_write.c | 34 +-
3861 fs/readdir.c | 3 +-
3862 fs/reiserfs/do_balan.c | 2 +-
3863 fs/reiserfs/procfs.c | 2 +-
3864 fs/reiserfs/reiserfs.h | 4 +-
3865 fs/select.c | 2 +-
3866 fs/seq_file.c | 4 +-
3867 fs/splice.c | 43 +-
3868 fs/squashfs/xattr.c | 10 +-
3869 fs/super.c | 3 +-
3870 fs/sysv/sysv.h | 2 +-
3871 fs/tracefs/inode.c | 8 +-
3872 fs/ubifs/find.c | 34 +-
3873 fs/ubifs/lprops.c | 5 +-
3874 fs/udf/misc.c | 2 +-
3875 fs/ufs/swab.h | 4 +-
3876 fs/userfaultfd.c | 2 +-
3877 fs/xattr.c | 21 +
3878 fs/xfs/libxfs/xfs_bmap.c | 2 +-
3879 fs/xfs/libxfs/xfs_da_btree.c | 4 +-
3880 fs/xfs/xfs_dir2_readdir.c | 7 +-
3881 fs/xfs/xfs_ioctl.c | 2 +-
3882 fs/xfs/xfs_linux.h | 4 +-
3883 include/acpi/ghes.h | 2 +-
3884 include/asm-generic/4level-fixup.h | 2 +
3885 include/asm-generic/atomic-long.h | 176 +-
3886 include/asm-generic/atomic64.h | 12 +
3887 include/asm-generic/bitops/__fls.h | 2 +-
3888 include/asm-generic/bitops/fls.h | 2 +-
3889 include/asm-generic/bitops/fls64.h | 4 +-
3890 include/asm-generic/bug.h | 6 +-
3891 include/asm-generic/cache.h | 4 +-
3892 include/asm-generic/emergency-restart.h | 2 +-
3893 include/asm-generic/kmap_types.h | 4 +-
3894 include/asm-generic/local.h | 13 +
3895 include/asm-generic/pgtable-nopmd.h | 18 +-
3896 include/asm-generic/pgtable-nopud.h | 15 +-
3897 include/asm-generic/pgtable.h | 16 +
3898 include/asm-generic/sections.h | 1 +
3899 include/asm-generic/uaccess.h | 16 +
3900 include/asm-generic/vmlinux.lds.h | 15 +-
3901 include/crypto/algapi.h | 2 +-
3902 include/crypto/cast6.h | 4 +-
3903 include/crypto/serpent.h | 4 +-
3904 include/crypto/xts.h | 2 +-
3905 include/drm/drmP.h | 19 +-
3906 include/drm/drm_mm.h | 2 +-
3907 include/drm/drm_modeset_helper_vtables.h | 2 +-
3908 include/drm/i915_pciids.h | 2 +-
3909 include/drm/intel-gtt.h | 4 +-
3910 include/drm/ttm/ttm_memory.h | 2 +-
3911 include/drm/ttm/ttm_page_alloc.h | 1 +
3912 include/keys/asymmetric-subtype.h | 2 +-
3913 include/keys/encrypted-type.h | 2 +-
3914 include/keys/rxrpc-type.h | 2 +-
3915 include/keys/user-type.h | 2 +-
3916 include/linux/atmdev.h | 4 +-
3917 include/linux/atomic.h | 12 +-
3918 include/linux/audit.h | 2 +-
3919 include/linux/average.h | 2 +-
3920 include/linux/binfmts.h | 3 +-
3921 include/linux/bitmap.h | 2 +-
3922 include/linux/bitops.h | 8 +-
3923 include/linux/blk-cgroup.h | 24 +-
3924 include/linux/blkdev.h | 2 +-
3925 include/linux/blktrace_api.h | 2 +-
3926 include/linux/cache.h | 8 +
3927 include/linux/cdrom.h | 1 -
3928 include/linux/cgroup-defs.h | 2 +-
3929 include/linux/cleancache.h | 2 +-
3930 include/linux/clk-provider.h | 1 +
3931 include/linux/compat.h | 15 +-
3932 include/linux/compiler-gcc.h | 30 +-
3933 include/linux/compiler.h | 193 +-
3934 include/linux/configfs.h | 2 +-
3935 include/linux/cpufreq.h | 7 +-
3936 include/linux/cpuidle.h | 5 +-
3937 include/linux/cpumask.h | 14 +-
3938 include/linux/crypto.h | 4 +-
3939 include/linux/ctype.h | 2 +-
3940 include/linux/dcache.h | 4 +-
3941 include/linux/decompress/mm.h | 2 +-
3942 include/linux/devfreq.h | 2 +-
3943 include/linux/device.h | 7 +-
3944 include/linux/dma-mapping.h | 2 +-
3945 include/linux/efi.h | 1 +
3946 include/linux/elf.h | 2 +
3947 include/linux/err.h | 4 +-
3948 include/linux/extcon.h | 2 +-
3949 include/linux/fb.h | 3 +-
3950 include/linux/fdtable.h | 2 +-
3951 include/linux/firewire.h | 2 +-
3952 include/linux/fs.h | 5 +-
3953 include/linux/fs_struct.h | 2 +-
3954 include/linux/fscache-cache.h | 2 +-
3955 include/linux/fscache.h | 2 +-
3956 include/linux/fsnotify.h | 2 +-
3957 include/linux/genhd.h | 4 +-
3958 include/linux/genl_magic_func.h | 2 +-
3959 include/linux/genl_magic_struct.h | 4 +-
3960 include/linux/gfp.h | 14 +-
3961 include/linux/highmem.h | 12 +
3962 include/linux/hugetlb.h | 2 +-
3963 include/linux/hugetlb_cgroup.h | 11 +
3964 include/linux/hwmon-sysfs.h | 6 +-
3965 include/linux/i2c.h | 1 +
3966 include/linux/if_pppox.h | 2 +-
3967 include/linux/init.h | 12 +-
3968 include/linux/init_task.h | 7 +
3969 include/linux/interrupt.h | 6 +-
3970 include/linux/iommu.h | 2 +-
3971 include/linux/ioport.h | 2 +-
3972 include/linux/ipc.h | 2 +-
3973 include/linux/irq.h | 5 +-
3974 include/linux/irqdesc.h | 2 +-
3975 include/linux/irqdomain.h | 3 +
3976 include/linux/jbd2.h | 2 +-
3977 include/linux/jiffies.h | 16 +-
3978 include/linux/kallsyms.h | 18 +-
3979 include/linux/key-type.h | 2 +-
3980 include/linux/kgdb.h | 6 +-
3981 include/linux/kmemleak.h | 4 +-
3982 include/linux/kobject.h | 3 +-
3983 include/linux/kobject_ns.h | 2 +-
3984 include/linux/kref.h | 2 +-
3985 include/linux/libata.h | 2 +-
3986 include/linux/linkage.h | 12 +
3987 include/linux/list.h | 15 +
3988 include/linux/lockd/xdr.h | 34 +-
3989 include/linux/lockd/xdr4.h | 34 +-
3990 include/linux/lockref.h | 26 +-
3991 include/linux/math64.h | 10 +-
3992 include/linux/memcontrol.h | 2 +-
3993 include/linux/mempolicy.h | 7 +
3994 include/linux/mm.h | 97 +-
3995 include/linux/mm_types.h | 20 +
3996 include/linux/mmiotrace.h | 4 +-
3997 include/linux/mmzone.h | 2 +-
3998 include/linux/mod_devicetable.h | 4 +-
3999 include/linux/module.h | 58 +-
4000 include/linux/moduleloader.h | 16 +
4001 include/linux/moduleparam.h | 12 +-
4002 include/linux/net.h | 2 +-
4003 include/linux/netdevice.h | 7 +-
4004 include/linux/netfilter.h | 2 +-
4005 include/linux/netfilter/ipset/ip_set_comment.h | 3 +-
4006 include/linux/netfilter/nfnetlink.h | 2 +-
4007 include/linux/netlink.h | 12 +-
4008 include/linux/nls.h | 4 +-
4009 include/linux/notifier.h | 3 +-
4010 include/linux/oprofile.h | 4 +-
4011 include/linux/padata.h | 2 +-
4012 include/linux/pagemap.h | 4 +-
4013 include/linux/pci_hotplug.h | 3 +-
4014 include/linux/percpu.h | 2 +-
4015 include/linux/perf_event.h | 12 +-
4016 include/linux/pid.h | 4 +-
4017 include/linux/pipe_fs_i.h | 8 +-
4018 include/linux/pm.h | 1 +
4019 include/linux/pm_domain.h | 2 +-
4020 include/linux/pm_runtime.h | 2 +-
4021 include/linux/pnp.h | 2 +-
4022 include/linux/poison.h | 4 +-
4023 include/linux/power/smartreflex.h | 2 +-
4024 include/linux/ppp-comp.h | 2 +-
4025 include/linux/preempt.h | 21 +
4026 include/linux/printk.h | 2 +-
4027 include/linux/proc_ns.h | 2 +-
4028 include/linux/psci.h | 2 +-
4029 include/linux/quota.h | 2 +-
4030 include/linux/random.h | 19 +-
4031 include/linux/rculist.h | 16 +
4032 include/linux/rcupdate.h | 8 +
4033 include/linux/reboot.h | 14 +-
4034 include/linux/regset.h | 3 +-
4035 include/linux/relay.h | 2 +-
4036 include/linux/rio.h | 2 +-
4037 include/linux/rmap.h | 4 +-
4038 include/linux/sched.h | 76 +-
4039 include/linux/sched/sysctl.h | 1 +
4040 include/linux/scif.h | 2 +-
4041 include/linux/semaphore.h | 2 +-
4042 include/linux/seq_file.h | 1 +
4043 include/linux/seqlock.h | 10 +
4044 include/linux/signal.h | 2 +-
4045 include/linux/skbuff.h | 12 +-
4046 include/linux/slab.h | 47 +-
4047 include/linux/slab_def.h | 14 +-
4048 include/linux/slub_def.h | 2 +-
4049 include/linux/smp.h | 2 +
4050 include/linux/sock_diag.h | 2 +-
4051 include/linux/sonet.h | 2 +-
4052 include/linux/spinlock.h | 17 +-
4053 include/linux/srcu.h | 5 +-
4054 include/linux/sunrpc/addr.h | 8 +-
4055 include/linux/sunrpc/clnt.h | 2 +-
4056 include/linux/sunrpc/svc.h | 2 +-
4057 include/linux/sunrpc/svc_rdma.h | 18 +-
4058 include/linux/sunrpc/svcauth.h | 2 +-
4059 include/linux/swapops.h | 10 +-
4060 include/linux/swiotlb.h | 3 +-
4061 include/linux/syscalls.h | 34 +-
4062 include/linux/syscore_ops.h | 2 +-
4063 include/linux/sysctl.h | 3 +-
4064 include/linux/sysfs.h | 9 +-
4065 include/linux/sysrq.h | 3 +-
4066 include/linux/tcp.h | 14 +-
4067 include/linux/thread_info.h | 7 +
4068 include/linux/tty.h | 4 +-
4069 include/linux/tty_driver.h | 2 +-
4070 include/linux/tty_ldisc.h | 2 +-
4071 include/linux/types.h | 16 +
4072 include/linux/uaccess.h | 2 +-
4073 include/linux/uio_driver.h | 2 +-
4074 include/linux/unaligned/access_ok.h | 24 +-
4075 include/linux/usb.h | 12 +-
4076 include/linux/usb/hcd.h | 1 +
4077 include/linux/usb/renesas_usbhs.h | 2 +-
4078 include/linux/vermagic.h | 21 +-
4079 include/linux/vga_switcheroo.h | 8 +-
4080 include/linux/vmalloc.h | 7 +-
4081 include/linux/vmstat.h | 24 +-
4082 include/linux/writeback.h | 3 +-
4083 include/linux/xattr.h | 5 +-
4084 include/linux/zlib.h | 3 +-
4085 include/media/v4l2-dev.h | 2 +-
4086 include/media/v4l2-device.h | 2 +-
4087 include/net/9p/transport.h | 2 +-
4088 include/net/bluetooth/l2cap.h | 2 +-
4089 include/net/bonding.h | 2 +-
4090 include/net/caif/cfctrl.h | 6 +-
4091 include/net/cfg80211-wext.h | 20 +-
4092 include/net/cfg802154.h | 2 +-
4093 include/net/fib_rules.h | 3 +-
4094 include/net/flow.h | 2 +-
4095 include/net/genetlink.h | 2 +-
4096 include/net/gro_cells.h | 2 +-
4097 include/net/inet_connection_sock.h | 2 +-
4098 include/net/inet_sock.h | 2 +-
4099 include/net/inetpeer.h | 2 +-
4100 include/net/ip_fib.h | 2 +-
4101 include/net/ip_vs.h | 8 +-
4102 include/net/ipv6.h | 2 +-
4103 include/net/irda/ircomm_tty.h | 1 +
4104 include/net/irda/irias_object.h | 2 +-
4105 include/net/irda/irlmp.h | 1 +
4106 include/net/irda/irlmp_event.h | 6 +-
4107 include/net/irda/timer.h | 6 +-
4108 include/net/iucv/af_iucv.h | 2 +-
4109 include/net/llc_c_ac.h | 2 +-
4110 include/net/llc_c_ev.h | 4 +-
4111 include/net/llc_c_st.h | 2 +-
4112 include/net/llc_s_ac.h | 2 +-
4113 include/net/llc_s_st.h | 2 +-
4114 include/net/mac80211.h | 6 +-
4115 include/net/neighbour.h | 4 +-
4116 include/net/net_namespace.h | 18 +-
4117 include/net/netfilter/nf_conntrack.h | 2 +-
4118 include/net/netlink.h | 2 +-
4119 include/net/netns/conntrack.h | 6 +-
4120 include/net/netns/ipv4.h | 4 +-
4121 include/net/netns/ipv6.h | 4 +-
4122 include/net/netns/xfrm.h | 2 +-
4123 include/net/ping.h | 2 +-
4124 include/net/protocol.h | 4 +-
4125 include/net/rtnetlink.h | 2 +-
4126 include/net/sctp/checksum.h | 4 +-
4127 include/net/sctp/sm.h | 4 +-
4128 include/net/sctp/structs.h | 2 +-
4129 include/net/snmp.h | 10 +-
4130 include/net/sock.h | 12 +-
4131 include/net/tcp.h | 8 +-
4132 include/net/xfrm.h | 15 +-
4133 include/rdma/ib_cm.h | 8 +-
4134 include/rdma/iw_cm.h | 2 +-
4135 include/scsi/libfc.h | 3 +-
4136 include/scsi/scsi_device.h | 6 +-
4137 include/scsi/scsi_driver.h | 2 +-
4138 include/scsi/scsi_transport_fc.h | 3 +-
4139 include/scsi/sg.h | 2 +-
4140 include/sound/compress_driver.h | 2 +-
4141 include/sound/control.h | 4 +-
4142 include/sound/pcm.h | 2 +-
4143 include/sound/rawmidi.h | 3 +-
4144 include/sound/seq_kernel.h | 2 +-
4145 include/sound/soc.h | 4 +-
4146 include/trace/events/irq.h | 4 +-
4147 include/uapi/linux/a.out.h | 8 +
4148 include/uapi/linux/bcache.h | 5 +-
4149 include/uapi/linux/byteorder/little_endian.h | 28 +-
4150 include/uapi/linux/connector.h | 2 +-
4151 include/uapi/linux/elf.h | 28 +
4152 include/uapi/linux/screen_info.h | 2 +-
4153 include/uapi/linux/swab.h | 6 +-
4154 include/uapi/linux/xattr.h | 4 +
4155 include/video/udlfb.h | 8 +-
4156 include/video/uvesafb.h | 1 +
4157 init/Kconfig | 2 +-
4158 init/Makefile | 3 +
4159 init/do_mounts.c | 16 +-
4160 init/do_mounts.h | 8 +-
4161 init/do_mounts_initrd.c | 30 +-
4162 init/do_mounts_md.c | 6 +-
4163 init/init_task.c | 4 +
4164 init/initramfs.c | 38 +-
4165 init/main.c | 30 +-
4166 ipc/compat.c | 4 +-
4167 ipc/ipc_sysctl.c | 14 +-
4168 ipc/mq_sysctl.c | 4 +-
4169 ipc/sem.c | 4 +-
4170 ipc/shm.c | 8 +-
4171 kernel/audit.c | 8 +-
4172 kernel/auditsc.c | 4 +-
4173 kernel/bpf/core.c | 28 +-
4174 kernel/capability.c | 3 +
4175 kernel/cgroup.c | 29 +-
4176 kernel/compat.c | 38 +-
4177 kernel/debug/debug_core.c | 16 +-
4178 kernel/debug/kdb/kdb_main.c | 4 +-
4179 kernel/events/core.c | 38 +-
4180 kernel/events/internal.h | 10 +-
4181 kernel/events/uprobes.c | 2 +-
4182 kernel/exit.c | 27 +-
4183 kernel/fork.c | 175 +-
4184 kernel/futex.c | 11 +-
4185 kernel/futex_compat.c | 2 +-
4186 kernel/irq/manage.c | 2 +-
4187 kernel/irq/msi.c | 19 +-
4188 kernel/irq/spurious.c | 2 +-
4189 kernel/jump_label.c | 5 +
4190 kernel/kallsyms.c | 40 +-
4191 kernel/kexec.c | 3 +-
4192 kernel/kmod.c | 8 +-
4193 kernel/kprobes.c | 4 +-
4194 kernel/ksysfs.c | 2 +-
4195 kernel/locking/lockdep.c | 7 +-
4196 kernel/locking/mutex-debug.c | 12 +-
4197 kernel/locking/mutex-debug.h | 4 +-
4198 kernel/locking/mutex.c | 6 +-
4199 kernel/module.c | 403 +-
4200 kernel/notifier.c | 17 +-
4201 kernel/padata.c | 4 +-
4202 kernel/panic.c | 11 +-
4203 kernel/pid.c | 6 +-
4204 kernel/pid_namespace.c | 2 +-
4205 kernel/power/process.c | 12 +-
4206 kernel/profile.c | 14 +-
4207 kernel/ptrace.c | 8 +-
4208 kernel/rcu/rcutorture.c | 60 +-
4209 kernel/rcu/tiny.c | 4 +-
4210 kernel/rcu/tree.c | 42 +-
4211 kernel/rcu/tree.h | 16 +-
4212 kernel/rcu/tree_plugin.h | 18 +-
4213 kernel/rcu/tree_trace.c | 14 +-
4214 kernel/resource.c | 4 +-
4215 kernel/sched/auto_group.c | 4 +-
4216 kernel/sched/core.c | 49 +-
4217 kernel/sched/fair.c | 2 +-
4218 kernel/sched/rt.c | 4 +-
4219 kernel/sched/sched.h | 13 +-
4220 kernel/signal.c | 28 +-
4221 kernel/smp.c | 2 +-
4222 kernel/smpboot.c | 4 +-
4223 kernel/softirq.c | 12 +-
4224 kernel/stop_machine.c | 2 +-
4225 kernel/sys.c | 10 +-
4226 kernel/sys_ni.c | 4 +-
4227 kernel/sysctl.c | 34 +-
4228 kernel/time/alarmtimer.c | 4 +-
4229 kernel/time/posix-clock.c | 8 +-
4230 kernel/time/posix-cpu-timers.c | 4 +-
4231 kernel/time/posix-timers.c | 36 +-
4232 kernel/time/timer.c | 2 +-
4233 kernel/time/timer_stats.c | 10 +-
4234 kernel/trace/blktrace.c | 6 +-
4235 kernel/trace/ftrace.c | 33 +-
4236 kernel/trace/ring_buffer.c | 96 +-
4237 kernel/trace/trace.c | 2 +-
4238 kernel/trace/trace.h | 2 +-
4239 kernel/trace/trace_clock.c | 4 +-
4240 kernel/trace/trace_events.c | 1 -
4241 kernel/trace/trace_functions_graph.c | 4 +-
4242 kernel/trace/trace_mmiotrace.c | 8 +-
4243 kernel/trace/trace_output.c | 10 +-
4244 kernel/trace/trace_seq.c | 2 +-
4245 kernel/trace/trace_stack.c | 2 +-
4246 kernel/user.c | 2 +-
4247 kernel/user_namespace.c | 2 +-
4248 kernel/utsname_sysctl.c | 2 +-
4249 kernel/watchdog.c | 2 +-
4250 kernel/workqueue.c | 8 +-
4251 lib/Kconfig.debug | 8 +-
4252 lib/Makefile | 2 +-
4253 lib/bitmap.c | 8 +-
4254 lib/bug.c | 2 +
4255 lib/debugobjects.c | 2 +-
4256 lib/decompress_bunzip2.c | 3 +-
4257 lib/decompress_unlzma.c | 4 +-
4258 lib/div64.c | 4 +-
4259 lib/dma-debug.c | 4 +-
4260 lib/inflate.c | 2 +-
4261 lib/ioremap.c | 4 +-
4262 lib/irq_poll.c | 2 +-
4263 lib/kobject.c | 4 +-
4264 lib/list_debug.c | 126 +-
4265 lib/lockref.c | 44 +-
4266 lib/percpu-refcount.c | 2 +-
4267 lib/radix-tree.c | 2 +-
4268 lib/random32.c | 2 +-
4269 lib/rhashtable.c | 4 +-
4270 lib/show_mem.c | 2 +-
4271 lib/strncpy_from_user.c | 2 +-
4272 lib/strnlen_user.c | 2 +-
4273 lib/swiotlb.c | 2 +-
4274 lib/usercopy.c | 6 +
4275 lib/vsprintf.c | 12 +-
4276 mm/Kconfig | 6 +-
4277 mm/backing-dev.c | 4 +-
4278 mm/debug.c | 3 +
4279 mm/filemap.c | 10 +-
4280 mm/gup.c | 13 +-
4281 mm/highmem.c | 6 +-
4282 mm/hugetlb.c | 125 +-
4283 mm/hugetlb_cgroup.c | 60 +-
4284 mm/internal.h | 3 +-
4285 mm/maccess.c | 12 +-
4286 mm/madvise.c | 37 +
4287 mm/memcontrol.c | 6 +-
4288 mm/memory-failure.c | 6 +-
4289 mm/memory.c | 424 +-
4290 mm/mempolicy.c | 25 +
4291 mm/mlock.c | 18 +-
4292 mm/mm_init.c | 2 +-
4293 mm/mmap.c | 573 +-
4294 mm/mprotect.c | 137 +-
4295 mm/mremap.c | 39 +-
4296 mm/nommu.c | 21 +-
4297 mm/page-writeback.c | 2 +-
4298 mm/page_alloc.c | 53 +-
4299 mm/percpu.c | 2 +-
4300 mm/process_vm_access.c | 14 +-
4301 mm/readahead.c | 2 +-
4302 mm/rmap.c | 43 +-
4303 mm/shmem.c | 37 +-
4304 mm/slab.c | 111 +-
4305 mm/slab.h | 22 +-
4306 mm/slab_common.c | 86 +-
4307 mm/slob.c | 218 +-
4308 mm/slub.c | 111 +-
4309 mm/sparse-vmemmap.c | 4 +-
4310 mm/sparse.c | 2 +-
4311 mm/swap.c | 2 +
4312 mm/swapfile.c | 12 +-
4313 mm/util.c | 6 +
4314 mm/vmalloc.c | 116 +-
4315 mm/vmstat.c | 12 +-
4316 net/8021q/vlan.c | 5 +-
4317 net/8021q/vlan_netlink.c | 2 +-
4318 net/9p/mod.c | 4 +-
4319 net/9p/trans_fd.c | 2 +-
4320 net/atm/atm_misc.c | 8 +-
4321 net/atm/lec.h | 2 +-
4322 net/atm/proc.c | 6 +-
4323 net/atm/resources.c | 4 +-
4324 net/ax25/sysctl_net_ax25.c | 2 +-
4325 net/batman-adv/bat_iv_ogm.c | 8 +-
4326 net/batman-adv/fragmentation.c | 2 +-
4327 net/batman-adv/routing.c | 4 +-
4328 net/batman-adv/soft-interface.c | 12 +-
4329 net/batman-adv/sysfs.c | 40 +-
4330 net/batman-adv/sysfs.h | 4 +-
4331 net/batman-adv/translation-table.c | 14 +-
4332 net/batman-adv/types.h | 8 +-
4333 net/bluetooth/hci_sock.c | 2 +-
4334 net/bluetooth/l2cap_core.c | 6 +-
4335 net/bluetooth/l2cap_sock.c | 12 +-
4336 net/bluetooth/rfcomm/sock.c | 4 +-
4337 net/bluetooth/rfcomm/tty.c | 4 +-
4338 net/bridge/br_netlink.c | 2 +-
4339 net/bridge/netfilter/ebtables.c | 6 +-
4340 net/caif/cfctrl.c | 11 +-
4341 net/caif/chnl_net.c | 4 +-
4342 net/can/af_can.c | 2 +-
4343 net/can/gw.c | 6 +-
4344 net/ceph/ceph_common.c | 2 +-
4345 net/ceph/messenger.c | 4 +-
4346 net/compat.c | 26 +-
4347 net/core/datagram.c | 2 +-
4348 net/core/dev.c | 16 +-
4349 net/core/filter.c | 2 +-
4350 net/core/flow.c | 6 +-
4351 net/core/neighbour.c | 18 +-
4352 net/core/net-sysfs.c | 2 +-
4353 net/core/net_namespace.c | 8 +-
4354 net/core/netpoll.c | 4 +-
4355 net/core/rtnetlink.c | 17 +-
4356 net/core/scm.c | 12 +-
4357 net/core/skbuff.c | 11 +-
4358 net/core/sock.c | 28 +-
4359 net/core/sock_diag.c | 15 +-
4360 net/core/sysctl_net_core.c | 22 +-
4361 net/decnet/af_decnet.c | 1 +
4362 net/decnet/sysctl_net_decnet.c | 4 +-
4363 net/dsa/dsa.c | 2 +-
4364 net/hsr/hsr_device.c | 2 +-
4365 net/hsr/hsr_netlink.c | 2 +-
4366 net/ieee802154/6lowpan/core.c | 2 +-
4367 net/ieee802154/6lowpan/reassembly.c | 14 +-
4368 net/ipv4/af_inet.c | 2 +-
4369 net/ipv4/arp.c | 2 +-
4370 net/ipv4/devinet.c | 18 +-
4371 net/ipv4/fib_frontend.c | 6 +-
4372 net/ipv4/fib_semantics.c | 2 +-
4373 net/ipv4/inet_connection_sock.c | 4 +-
4374 net/ipv4/inet_diag.c | 4 +-
4375 net/ipv4/inet_timewait_sock.c | 2 +-
4376 net/ipv4/inetpeer.c | 2 +-
4377 net/ipv4/ip_fragment.c | 15 +-
4378 net/ipv4/ip_gre.c | 6 +-
4379 net/ipv4/ip_sockglue.c | 2 +-
4380 net/ipv4/ip_vti.c | 4 +-
4381 net/ipv4/ipconfig.c | 6 +-
4382 net/ipv4/ipip.c | 4 +-
4383 net/ipv4/netfilter/arp_tables.c | 12 +-
4384 net/ipv4/netfilter/ip_tables.c | 12 +-
4385 net/ipv4/ping.c | 14 +-
4386 net/ipv4/proc.c | 8 +-
4387 net/ipv4/raw.c | 14 +-
4388 net/ipv4/route.c | 32 +-
4389 net/ipv4/sysctl_net_ipv4.c | 22 +-
4390 net/ipv4/tcp_input.c | 6 +-
4391 net/ipv4/tcp_probe.c | 2 +-
4392 net/ipv4/udp.c | 10 +-
4393 net/ipv4/xfrm4_mode_transport.c | 2 +-
4394 net/ipv4/xfrm4_policy.c | 17 +-
4395 net/ipv4/xfrm4_state.c | 4 +-
4396 net/ipv6/addrconf.c | 24 +-
4397 net/ipv6/af_inet6.c | 2 +-
4398 net/ipv6/datagram.c | 2 +-
4399 net/ipv6/icmp.c | 2 +-
4400 net/ipv6/inet6_hashtables.c | 2 +-
4401 net/ipv6/ip6_fib.c | 4 +-
4402 net/ipv6/ip6_gre.c | 10 +-
4403 net/ipv6/ip6_tunnel.c | 4 +-
4404 net/ipv6/ip6_vti.c | 4 +-
4405 net/ipv6/ipv6_sockglue.c | 2 +-
4406 net/ipv6/ndisc.c | 2 +-
4407 net/ipv6/netfilter/ip6_tables.c | 12 +-
4408 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
4409 net/ipv6/ping.c | 33 +-
4410 net/ipv6/proc.c | 10 +-
4411 net/ipv6/raw.c | 17 +-
4412 net/ipv6/reassembly.c | 13 +-
4413 net/ipv6/route.c | 2 +-
4414 net/ipv6/sit.c | 4 +-
4415 net/ipv6/sysctl_net_ipv6.c | 2 +-
4416 net/ipv6/udp.c | 6 +-
4417 net/ipv6/xfrm6_mode_transport.c | 2 +-
4418 net/ipv6/xfrm6_policy.c | 17 +-
4419 net/irda/discovery.c | 2 +-
4420 net/irda/ircomm/ircomm_core.c | 13 +-
4421 net/irda/ircomm/ircomm_tty.c | 24 +-
4422 net/irda/ircomm/ircomm_tty_attach.c | 4 +-
4423 net/irda/irda_device.c | 14 +-
4424 net/irda/iriap.c | 14 +-
4425 net/irda/irias_object.c | 10 +-
4426 net/irda/irlan/irlan_client.c | 2 +-
4427 net/irda/irlap.c | 15 +-
4428 net/irda/irlap_event.c | 2 +-
4429 net/irda/irlmp.c | 21 +-
4430 net/irda/irlmp_event.c | 6 +-
4431 net/irda/irnet/irnet.h | 2 +-
4432 net/irda/irnet/irnet_irda.c | 6 +-
4433 net/irda/irttp.c | 8 +-
4434 net/irda/timer.c | 24 +-
4435 net/iucv/af_iucv.c | 4 +-
4436 net/iucv/iucv.c | 2 +-
4437 net/key/af_key.c | 4 +-
4438 net/l2tp/l2tp_eth.c | 40 +-
4439 net/l2tp/l2tp_ip.c | 2 +-
4440 net/l2tp/l2tp_ip6.c | 2 +-
4441 net/mac80211/cfg.c | 10 +-
4442 net/mac80211/debugfs.c | 2 +-
4443 net/mac80211/debugfs_key.c | 4 +-
4444 net/mac80211/ieee80211_i.h | 3 +-
4445 net/mac80211/iface.c | 20 +-
4446 net/mac80211/key.c | 4 +-
4447 net/mac80211/main.c | 2 +-
4448 net/mac80211/pm.c | 4 +-
4449 net/mac80211/rate.c | 2 +-
4450 net/mac80211/sta_info.c | 2 +-
4451 net/mac80211/tx.c | 2 +-
4452 net/mac80211/util.c | 8 +-
4453 net/mac80211/wpa.c | 10 +-
4454 net/mac802154/iface.c | 6 +-
4455 net/mpls/af_mpls.c | 10 +-
4456 net/netfilter/ipset/ip_set_core.c | 7 +-
4457 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
4458 net/netfilter/ipvs/ip_vs_core.c | 4 +-
4459 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
4460 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
4461 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
4462 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
4463 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
4464 net/netfilter/nf_conntrack_acct.c | 2 +-
4465 net/netfilter/nf_conntrack_core.c | 2 +-
4466 net/netfilter/nf_conntrack_ecache.c | 2 +-
4467 net/netfilter/nf_conntrack_helper.c | 2 +-
4468 net/netfilter/nf_conntrack_netlink.c | 22 +-
4469 net/netfilter/nf_conntrack_proto.c | 2 +-
4470 net/netfilter/nf_conntrack_standalone.c | 2 +-
4471 net/netfilter/nf_conntrack_timestamp.c | 2 +-
4472 net/netfilter/nf_log.c | 10 +-
4473 net/netfilter/nf_nat_ftp.c | 2 +-
4474 net/netfilter/nf_nat_irc.c | 2 +-
4475 net/netfilter/nf_sockopt.c | 4 +-
4476 net/netfilter/nf_tables_api.c | 13 +-
4477 net/netfilter/nfnetlink_acct.c | 7 +-
4478 net/netfilter/nfnetlink_cthelper.c | 2 +-
4479 net/netfilter/nfnetlink_cttimeout.c | 2 +-
4480 net/netfilter/nfnetlink_log.c | 4 +-
4481 net/netfilter/nft_compat.c | 9 +-
4482 net/netfilter/xt_IDLETIMER.c | 12 +-
4483 net/netfilter/xt_statistic.c | 8 +-
4484 net/netlink/af_netlink.c | 14 +-
4485 net/netlink/diag.c | 2 +-
4486 net/netlink/genetlink.c | 14 +-
4487 net/openvswitch/vport-geneve.c | 7 +-
4488 net/openvswitch/vport-gre.c | 7 +-
4489 net/openvswitch/vport-internal_dev.c | 4 +-
4490 net/openvswitch/vport-netdev.c | 7 +-
4491 net/openvswitch/vport-vxlan.c | 7 +-
4492 net/packet/af_packet.c | 26 +-
4493 net/packet/diag.c | 2 +-
4494 net/packet/internal.h | 6 +-
4495 net/phonet/pep.c | 6 +-
4496 net/phonet/socket.c | 2 +-
4497 net/phonet/sysctl.c | 2 +-
4498 net/rds/cong.c | 6 +-
4499 net/rds/ib.h | 2 +-
4500 net/rds/ib_cm.c | 2 +-
4501 net/rds/ib_recv.c | 4 +-
4502 net/rds/iw.h | 2 +-
4503 net/rds/iw_cm.c | 2 +-
4504 net/rds/iw_recv.c | 4 +-
4505 net/rds/rds.h | 2 +-
4506 net/rds/tcp.c | 2 +-
4507 net/rds/tcp.h | 6 +-
4508 net/rds/tcp_send.c | 2 +-
4509 net/rxrpc/af_rxrpc.c | 2 +-
4510 net/rxrpc/ar-ack.c | 14 +-
4511 net/rxrpc/ar-call.c | 2 +-
4512 net/rxrpc/ar-connection.c | 2 +-
4513 net/rxrpc/ar-connevent.c | 2 +-
4514 net/rxrpc/ar-input.c | 4 +-
4515 net/rxrpc/ar-internal.h | 8 +-
4516 net/rxrpc/ar-local.c | 2 +-
4517 net/rxrpc/ar-output.c | 4 +-
4518 net/rxrpc/ar-peer.c | 2 +-
4519 net/rxrpc/ar-proc.c | 4 +-
4520 net/rxrpc/ar-transport.c | 2 +-
4521 net/rxrpc/rxkad.c | 4 +-
4522 net/sched/sch_generic.c | 4 +-
4523 net/sched/sch_tbf.c | 9 +-
4524 net/sctp/ipv6.c | 6 +-
4525 net/sctp/protocol.c | 10 +-
4526 net/sctp/sm_sideeffect.c | 4 +-
4527 net/sctp/socket.c | 21 +-
4528 net/sctp/sysctl.c | 10 +-
4529 net/socket.c | 18 +-
4530 net/sunrpc/auth_gss/gss_rpc_upcall.c | 4 +-
4531 net/sunrpc/auth_gss/gss_rpc_xdr.c | 11 +-
4532 net/sunrpc/auth_gss/gss_rpc_xdr.h | 8 +-
4533 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
4534 net/sunrpc/clnt.c | 4 +-
4535 net/sunrpc/rpcb_clnt.c | 66 +-
4536 net/sunrpc/sched.c | 4 +-
4537 net/sunrpc/svc.c | 8 +-
4538 net/sunrpc/svcauth_unix.c | 2 +-
4539 net/sunrpc/xprtrdma/svc_rdma.c | 44 +-
4540 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
4541 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
4542 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
4543 net/tipc/netlink_compat.c | 12 +-
4544 net/tipc/subscr.c | 2 +-
4545 net/unix/diag.c | 2 +-
4546 net/unix/sysctl_net_unix.c | 2 +-
4547 net/wireless/scan.c | 3 +-
4548 net/wireless/wext-compat.c | 140 +-
4549 net/wireless/wext-compat.h | 8 +-
4550 net/wireless/wext-core.c | 19 +-
4551 net/wireless/wext-sme.c | 5 +-
4552 net/xfrm/xfrm_policy.c | 16 +-
4553 net/xfrm/xfrm_state.c | 37 +-
4554 net/xfrm/xfrm_sysctl.c | 2 +-
4555 net/xfrm/xfrm_user.c | 2 +-
4556 scripts/Kbuild.include | 2 +-
4557 scripts/Makefile.build | 2 +-
4558 scripts/Makefile.clean | 3 +-
4559 scripts/Makefile.extrawarn | 4 +
4560 scripts/Makefile.gcc-plugins | 69 +
4561 scripts/Makefile.host | 68 +-
4562 scripts/basic/fixdep.c | 12 +-
4563 scripts/dtc/checks.c | 14 +-
4564 scripts/dtc/data.c | 6 +-
4565 scripts/dtc/flattree.c | 8 +-
4566 scripts/dtc/livetree.c | 4 +-
4567 scripts/gcc-plugin.sh | 51 +
4568 scripts/headers_install.sh | 1 +
4569 scripts/kallsyms.c | 4 +-
4570 scripts/kconfig/lkc.h | 5 +-
4571 scripts/kconfig/menu.c | 2 +-
4572 scripts/kconfig/symbol.c | 6 +-
4573 scripts/link-vmlinux.sh | 2 +-
4574 scripts/mod/file2alias.c | 14 +-
4575 scripts/mod/modpost.c | 40 +-
4576 scripts/mod/modpost.h | 6 +-
4577 scripts/mod/sumversion.c | 2 +-
4578 scripts/module-common.lds | 4 +
4579 scripts/package/builddeb | 1 +
4580 scripts/pnmtologo.c | 6 +-
4581 scripts/sortextable.h | 6 +-
4582 scripts/tags.sh | 2 +-
4583 security/Kconfig | 703 +-
4584 security/apparmor/include/policy.h | 2 +-
4585 security/apparmor/lsm.c | 16 +-
4586 security/apparmor/policy.c | 4 +-
4587 security/integrity/ima/ima.h | 4 +-
4588 security/integrity/ima/ima_api.c | 2 +-
4589 security/integrity/ima/ima_fs.c | 4 +-
4590 security/integrity/ima/ima_queue.c | 2 +-
4591 security/keys/internal.h | 8 +-
4592 security/keys/key.c | 18 +-
4593 security/keys/keyring.c | 4 -
4594 security/selinux/avc.c | 6 +-
4595 security/selinux/include/xfrm.h | 2 +-
4596 security/yama/yama_lsm.c | 2 +-
4597 sound/aoa/codecs/onyx.c | 7 +-
4598 sound/aoa/codecs/onyx.h | 1 +
4599 sound/core/oss/pcm_oss.c | 18 +-
4600 sound/core/pcm_compat.c | 2 +-
4601 sound/core/pcm_lib.c | 3 +-
4602 sound/core/pcm_native.c | 4 +-
4603 sound/core/rawmidi.c | 5 +-
4604 sound/core/seq/oss/seq_oss_synth.c | 4 +-
4605 sound/core/seq/seq_clientmgr.c | 10 +-
4606 sound/core/seq/seq_compat.c | 2 +-
4607 sound/core/seq/seq_fifo.c | 6 +-
4608 sound/core/seq/seq_fifo.h | 2 +-
4609 sound/core/seq/seq_memory.c | 18 +-
4610 sound/core/seq/seq_midi.c | 5 +-
4611 sound/core/seq/seq_virmidi.c | 2 +-
4612 sound/core/sound.c | 2 +-
4613 sound/drivers/mts64.c | 14 +-
4614 sound/drivers/opl4/opl4_lib.c | 2 +-
4615 sound/drivers/portman2x4.c | 3 +-
4616 sound/firewire/amdtp-am824.c | 2 +-
4617 sound/firewire/amdtp-stream.c | 4 +-
4618 sound/firewire/amdtp-stream.h | 2 +-
4619 sound/firewire/digi00x/amdtp-dot.c | 2 +-
4620 sound/firewire/isight.c | 10 +-
4621 sound/firewire/oxfw/oxfw-scs1x.c | 8 +-
4622 sound/oss/sb_audio.c | 2 +-
4623 sound/oss/swarm_cs4297a.c | 6 +-
4624 sound/pci/als300.c | 2 +-
4625 sound/pci/aw2/aw2-alsa.c | 2 -
4626 sound/pci/aw2/aw2-saa7146.c | 4 +-
4627 sound/pci/ctxfi/ctamixer.c | 14 +-
4628 sound/pci/ctxfi/ctamixer.h | 8 +-
4629 sound/pci/ctxfi/ctatc.c | 20 +-
4630 sound/pci/ctxfi/ctdaio.c | 6 +-
4631 sound/pci/ctxfi/ctdaio.h | 4 +-
4632 sound/pci/ctxfi/ctsrc.c | 13 +-
4633 sound/pci/ctxfi/ctsrc.h | 8 +-
4634 sound/pci/hda/hda_codec.c | 2 +-
4635 sound/pci/ymfpci/ymfpci.h | 2 +-
4636 sound/pci/ymfpci/ymfpci_main.c | 12 +-
4637 sound/soc/codecs/cx20442.c | 8 +-
4638 sound/soc/codecs/sti-sas.c | 10 +-
4639 sound/soc/codecs/tlv320dac33.c | 7 +-
4640 sound/soc/codecs/uda1380.c | 7 +-
4641 sound/soc/intel/skylake/skl-sst-dsp.h | 4 +-
4642 sound/soc/soc-ac97.c | 6 +-
4643 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
4644 tools/gcc/Makefile | 46 +
4645 tools/gcc/checker_plugin.c | 496 +
4646 tools/gcc/colorize_plugin.c | 162 +
4647 tools/gcc/constify_plugin.c | 521 +
4648 tools/gcc/gcc-common.h | 858 +
4649 tools/gcc/gcc-generate-gimple-pass.h | 175 +
4650 tools/gcc/gcc-generate-ipa-pass.h | 289 +
4651 tools/gcc/gcc-generate-rtl-pass.h | 175 +
4652 tools/gcc/gcc-generate-simple_ipa-pass.h | 175 +
4653 tools/gcc/initify_plugin.c | 536 +
4654 tools/gcc/kallocstat_plugin.c | 135 +
4655 tools/gcc/kernexec_plugin.c | 407 +
4656 tools/gcc/latent_entropy_plugin.c | 422 +
4657 tools/gcc/randomize_layout_seed.h | 1 +
4658 tools/gcc/rap_plugin/Makefile | 4 +
4659 tools/gcc/rap_plugin/rap.h | 36 +
4660 tools/gcc/rap_plugin/rap_fptr_pass.c | 220 +
4661 tools/gcc/rap_plugin/rap_hash.c | 381 +
4662 tools/gcc/rap_plugin/rap_plugin.c | 477 +
4663 tools/gcc/rap_plugin/sip.c | 96 +
4664 tools/gcc/size_overflow_plugin/.gitignore | 3 +
4665 tools/gcc/size_overflow_plugin/Makefile | 28 +
4666 .../disable_size_overflow_hash.data | 12440 +++++++++++
4667 .../generate_size_overflow_hash.sh | 103 +
4668 .../insert_size_overflow_asm.c | 369 +
4669 .../size_overflow_plugin/intentional_overflow.c | 1118 +
4670 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
4671 tools/gcc/size_overflow_plugin/size_overflow.h | 329 +
4672 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
4673 .../size_overflow_plugin/size_overflow_hash.data | 21508 +++++++++++++++++++
4674 .../size_overflow_hash_aux.data | 92 +
4675 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1163 +
4676 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
4677 .../size_overflow_plugin/size_overflow_plugin.c | 290 +
4678 .../size_overflow_plugin_hash.c | 352 +
4679 .../size_overflow_plugin/size_overflow_transform.c | 745 +
4680 .../size_overflow_transform_core.c | 1015 +
4681 tools/gcc/stackleak_plugin.c | 350 +
4682 tools/gcc/structleak_plugin.c | 239 +
4683 tools/include/linux/compiler.h | 8 +
4684 tools/perf/util/include/asm/alternative-asm.h | 3 +
4685 tools/virtio/linux/uaccess.h | 2 +-
4686 virt/kvm/kvm_main.c | 42 +-
4687 2639 files changed, 76327 insertions(+), 13888 deletions(-)
4688 commit 5988c8dba8a5da45e35d71f4a8fec34c267258c5
4689 Author: Brad Spengler <spender@grsecurity.net>
4690 Date: Mon Apr 25 20:40:53 2016 -0400
4691
4692 Fix DoS in n_tty_receive_buf_common reported by marcan at:
4693 https://forums.grsecurity.net/viewtopic.php?t=4342&p=16222
4694 and via lengthy diatribe on Twitter:
4695 https://twitter.com/marcan42/status/724740708104474626
4696 https://twitter.com/marcan42/status/724740985146609664
4697 https://twitter.com/marcan42/status/724741270325760000
4698 https://twitter.com/marcan42/status/724742465199050752
4699 https://twitter.com/marcan42/status/724745886794833920
4700 https://twitter.com/marcan42/status/724749571495075840
4701 https://twitter.com/marcan42/status/724746427285409796
4702 https://twitter.com/marcan42/status/724743150263095296
4703 https://twitter.com/marcan42/status/724757473433808896
4704
4705 Fix it correctly instead of using the incorrect fix suggested
4706 by marcan (aka "try reading the code next time")
4707 The original code was meant to fix an integer truncation issue
4708 that would also have caused a SIZE_OVERFLOW "DoS".
4709
4710 drivers/tty/n_tty.c | 9 +++++----
4711 1 file changed, 5 insertions(+), 4 deletions(-)
4712
4713 commit 5459ff57d8987389fa17d5d6f55b70a789347c2f
4714 Author: Brad Spengler <spender@grsecurity.net>
4715 Date: Mon Apr 25 19:52:33 2016 -0400
4716
4717 Avoid overflow in environ_read() caught by SIZE_OVERFLOW,
4718 reported by jotik at:
4719 https://forums.grsecurity.net/viewtopic.php?t=4363&p=16217
4720 patch from Mathias Krause
4721
4722 fs/proc/base.c | 2 +-
4723 1 file changed, 1 insertion(+), 1 deletion(-)
4724
4725 commit 24a5c92e147af1e739e9eeca020c61ad2674e784
4726 Author: Jiri Benc <jbenc@redhat.com>
4727 Date: Fri Apr 22 13:09:13 2016 +0200
4728
4729 cxgbi: fix uninitialized flowi6
4730
4731 ip6_route_output looks into different fields in the passed flowi6 structure,
4732 yet cxgbi passes garbage in nearly all those fields. Zero the structure out
4733 first.
4734
4735 Fixes: fc8d0590d9142 ("libcxgbi: Add ipv6 api to driver")
4736 Signed-off-by: Jiri Benc <jbenc@redhat.com>
4737 Signed-off-by: David S. Miller <davem@davemloft.net>
4738
4739 drivers/scsi/cxgbi/libcxgbi.c | 1 +
4740 1 file changed, 1 insertion(+)
4741
4742 commit ec65caa32652841a5be21d6e73146921af16d7a8
4743 Author: Brad Spengler <spender@grsecurity.net>
4744 Date: Wed Apr 20 20:59:43 2016 -0400
4745
4746 Make /proc/sched_debug only readable by root, mentioned in
4747 recent NCC Group paper on Linux containers
4748
4749 kernel/sched/debug.c | 4 ++++
4750 1 file changed, 4 insertions(+)
4751
4752 commit 7957d30730bb26a4aef54ab484dc3b4108f1fdb1
4753 Merge: 463149f ff26083
4754 Author: Brad Spengler <spender@grsecurity.net>
4755 Date: Wed Apr 20 17:55:53 2016 -0400
4756
4757 Merge branch 'pax-test' into grsec-test
4758
4759 commit ff260839e610d2bc1b0c579edd7deb0028198f01
4760 Author: Brad Spengler <spender@grsecurity.net>
4761 Date: Wed Apr 20 17:55:24 2016 -0400
4762
4763 Update to pax-linux-4.4.8-test14.patch:
4764 - Emese fixed some CodingStyle issues in the latent entropy plugin
4765 - fixed some build problems on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394)
4766
4767 arch/mips/include/asm/cache.h | 3 ++-
4768 arch/mips/lib/ashldi3.c | 21 ++++++++++++++-------
4769 arch/mips/lib/ashrdi3.c | 19 +++++++++++++------
4770 arch/mips/lib/libgcc.h | 12 +++++++++---
4771 drivers/idle/intel_idle.c | 6 ++++--
4772 tools/gcc/latent_entropy_plugin.c | 29 +++++++++++++++--------------
4773 6 files changed, 57 insertions(+), 33 deletions(-)
4774
4775 commit 463149f47a64db4b26a13009f83ed73d393a209c
4776 Author: Xiaodong Liu <xiaodong.liu@intel.com>
4777 Date: Tue Apr 12 09:45:51 2016 +0000
4778
4779 crypto: sha1-mb - use corrcet pointer while completing jobs
4780
4781 In sha_complete_job, incorrect mcryptd_hash_request_ctx pointer is used
4782 when check and complete other jobs. If the memory of first completed req
4783 is freed, while still completing other jobs in the func, kernel will
4784 crash since NULL pointer is assigned to RIP.
4785
4786 Cc: <stable@vger.kernel.org>
4787 Signed-off-by: Xiaodong Liu <xiaodong.liu@intel.com>
4788 Acked-by: Tim Chen <tim.c.chen@linux.intel.com>
4789 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
4790
4791 arch/x86/crypto/sha-mb/sha1_mb.c | 4 ++--
4792 1 file changed, 2 insertions(+), 2 deletions(-)
4793
4794 commit b4e6484e67b917afb77478cab1260f41dbbc92fc
4795 Author: Tom Lendacky <thomas.lendacky@amd.com>
4796 Date: Wed Apr 13 10:52:25 2016 -0500
4797
4798 crypto: ccp - Prevent information leakage on export
4799
4800 Prevent information from leaking to userspace by doing a memset to 0 of
4801 the export state structure before setting the structure values and copying
4802 it. This prevents un-initialized padding areas from being copied into the
4803 export area.
4804
4805 Cc: <stable@vger.kernel.org> # 3.14.x-
4806 Reported-by: Ben Hutchings <ben@decadent.org.uk>
4807 Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
4808 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
4809
4810 drivers/crypto/ccp/ccp-crypto-aes-cmac.c | 3 +++
4811 drivers/crypto/ccp/ccp-crypto-sha.c | 3 +++
4812 2 files changed, 6 insertions(+)
4813
4814 commit 7d7e961d3f4e4614b22518d8e410e6cf4108f1b0
4815 Author: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
4816 Date: Mon Apr 18 14:33:54 2016 +0300
4817
4818 net/mlx4_en: allocate non 0-order pages for RX ring with __GFP_NOMEMALLOC
4819
4820 High order pages are optional here since commit 51151a16a60f ("mlx4: allow
4821 order-0 memory allocations in RX path"), so here is no reason for depleting
4822 reserves. Generic __netdev_alloc_frag() implements the same logic.
4823
4824 Signed-off-by: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
4825 Acked-by: Eric Dumazet <edumazet@google.com>
4826 Signed-off-by: David S. Miller <davem@davemloft.net>
4827
4828 drivers/net/ethernet/mellanox/mlx4/en_rx.c | 2 +-
4829 1 file changed, 1 insertion(+), 1 deletion(-)
4830
4831 commit 6b80edde2edc7fd055f9be8ec42b88abbe328639
4832 Author: Ignat Korchagin <ignat.korchagin@gmail.com>
4833 Date: Thu Mar 17 18:00:29 2016 +0000
4834
4835 USB: usbip: fix potential out-of-bounds write
4836
4837 Fix potential out-of-bounds write to urb->transfer_buffer
4838 usbip handles network communication directly in the kernel. When receiving a
4839 packet from its peer, usbip code parses headers according to protocol. As
4840 part of this parsing urb->actual_length is filled. Since the input for
4841 urb->actual_length comes from the network, it should be treated as untrusted.
4842 Any entity controlling the network may put any value in the input and the
4843 preallocated urb->transfer_buffer may not be large enough to hold the data.
4844 Thus, the malicious entity is able to write arbitrary data to kernel memory.
4845
4846 Signed-off-by: Ignat Korchagin <ignat.korchagin@gmail.com>
4847 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
4848
4849 drivers/usb/usbip/usbip_common.c | 11 +++++++++++
4850 1 file changed, 11 insertions(+)
4851
4852 commit 0ce101ec9e74c2cfcd28cbcd18b0626e3d9a2482
4853 Merge: d60a24d f5fe5fd
4854 Author: Brad Spengler <spender@grsecurity.net>
4855 Date: Wed Apr 20 17:35:58 2016 -0400
4856
4857 Merge branch 'pax-test' into grsec-test
4858
4859 commit f5fe5fddf49f1b81a2a3bb43b1e0a8c087aba438
4860 Merge: a107ba2 8c9aef0
4861 Author: Brad Spengler <spender@grsecurity.net>
4862 Date: Wed Apr 20 17:35:29 2016 -0400
4863
4864 Merge branch 'linux-4.4.y' into pax-test
4865
4866 commit d60a24d6e4f61072d0bd1dc12be1177181fa8c2b
4867 Author: Brad Spengler <spender@grsecurity.net>
4868 Date: Mon Apr 18 17:48:10 2016 -0400
4869
4870 fix cast for constify change, reported by pipacs
4871
4872 drivers/idle/intel_idle.c | 4 ++--
4873 1 file changed, 2 insertions(+), 2 deletions(-)
4874
4875 commit 1d376287aeba7a53c91d5ee49ef0a11d02193964
4876 Author: Brad Spengler <spender@grsecurity.net>
4877 Date: Fri Apr 15 21:31:07 2016 -0400
4878
4879 Use proper type for function pointer
4880
4881 drivers/gpu/drm/gma500/mdfld_dsi_output.c | 6 +++---
4882 1 file changed, 3 insertions(+), 3 deletions(-)
4883
4884 commit 0a4104a2fa32904102fac07245426d78a1e9dfab
4885 Author: Brad Spengler <spender@grsecurity.net>
4886 Date: Fri Apr 15 21:24:04 2016 -0400
4887
4888 Fix skylake cstates compat with constify
4889
4890 drivers/idle/intel_idle.c | 6 ++++--
4891 1 file changed, 4 insertions(+), 2 deletions(-)
4892
4893 commit f433f8fd372253c9e78e307afe5b800c5ab0ea61
4894 Author: Brad Spengler <spender@grsecurity.net>
4895 Date: Fri Apr 15 21:10:44 2016 -0400
4896
4897 Update size_overflow hash table
4898
4899 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 3 ++-
4900 1 file changed, 2 insertions(+), 1 deletion(-)
4901
4902 commit ef7804da81cb3c6b6a4c985a3c14ee230a03f26a
4903 Author: Brad Spengler <spender@grsecurity.net>
4904 Date: Fri Apr 15 20:52:37 2016 -0400
4905
4906 compile fix
4907
4908 fs/coredump.c | 3 ---
4909 1 file changed, 3 deletions(-)
4910
4911 commit 967224da52bd98d078b1237aea5ec9e622238fba
4912 Merge: 92771d6 a107ba2
4913 Author: Brad Spengler <spender@grsecurity.net>
4914 Date: Fri Apr 15 20:30:23 2016 -0400
4915
4916 Merge branch 'pax-test' into grsec-test
4917
4918 commit a107ba25214d9694eb836fb04c782ad694977b91
4919 Merge: 4d8fc00 b40108b
4920 Author: Brad Spengler <spender@grsecurity.net>
4921 Date: Fri Apr 15 20:18:26 2016 -0400
4922
4923 Merge branch 'linux-4.4.y' into pax-test
4924
4925 commit 92771d60677d68e8f6ea7a91ff34dd6e24b6d4cf
4926 Author: Brad Spengler <spender@grsecurity.net>
4927 Date: Sun Apr 10 07:18:03 2016 -0400
4928
4929 From: Mathias Krause <minipli@googlemail.com>
4930 To: "David S. Miller" <davem@davemloft.net>
4931 Cc: netdev@vger.kernel.org, "Eric W. Biederman" <ebiederm@xmission.com>, Pavel
4932 Emelyanov <xemul@parallels.com>
4933 Subject: [PATCH net] packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag
4934 interface
4935
4936 Because we miss to wipe the remainder of i->addr[] in packet_mc_add(),
4937 pdiag_put_mclist() leaks uninitialized heap bytes via the
4938 PACKET_DIAG_MCLIST netlink attribute.
4939
4940 Fix this by explicitly memset(0)ing the remaining bytes in i->addr[].
4941
4942 Fixes: eea68e2f1a00 ("packet: Report socket mclist info via diag module")
4943 Signed-off-by: Mathias Krause <minipli@googlemail.com>
4944 Cc: Eric W. Biederman <ebiederm@xmission.com>
4945 Cc: Pavel Emelyanov <xemul@parallels.com>
4946 ---
4947 The bug itself precedes commit eea68e2f1a00 but the list wasn't exposed
4948 to userland before the introduction of the packet_diag interface.
4949 Therefore the "Fixes:" line on that commit.
4950
4951 net/packet/af_packet.c | 1 +
4952 1 file changed, 1 insertion(+)
4953
4954 commit 4286ce3f9e9db4d68870af46ae1d5f9b90b920dd
4955 Author: Jakub Sitnicki <jkbs@redhat.com>
4956 Date: Tue Apr 5 18:41:08 2016 +0200
4957
4958 ipv6: Count in extension headers in skb->network_header
4959
4960 When sending a UDPv6 message longer than MTU, account for the length
4961 of fragmentable IPv6 extension headers in skb->network_header offset.
4962 Same as we do in alloc_new_skb path in __ip6_append_data().
4963
4964 This ensures that later on __ip6_make_skb() will make space in
4965 headroom for fragmentable extension headers:
4966
4967 /* move skb->data to ip header from ext header */
4968 if (skb->data < skb_network_header(skb))
4969 __skb_pull(skb, skb_network_offset(skb));
4970
4971 Prevents a splat due to skb_under_panic:
4972
4973 skbuff: skb_under_panic: text:ffffffff8143397b len:2126 put:14 \
4974 head:ffff880005bacf50 data:ffff880005bacf4a tail:0x48 end:0xc0 dev:lo
4975 ------------[ cut here ]------------
4976 kernel BUG at net/core/skbuff.c:104!
4977 invalid opcode: 0000 [#1] KASAN
4978 CPU: 0 PID: 160 Comm: reproducer Not tainted 4.6.0-rc2 #65
4979 [...]
4980 Call Trace:
4981 [<ffffffff813eb7b9>] skb_push+0x79/0x80
4982 [<ffffffff8143397b>] eth_header+0x2b/0x100
4983 [<ffffffff8141e0d0>] neigh_resolve_output+0x210/0x310
4984 [<ffffffff814eab77>] ip6_finish_output2+0x4a7/0x7c0
4985 [<ffffffff814efe3a>] ip6_output+0x16a/0x280
4986 [<ffffffff815440c1>] ip6_local_out+0xb1/0xf0
4987 [<ffffffff814f1115>] ip6_send_skb+0x45/0xd0
4988 [<ffffffff81518836>] udp_v6_send_skb+0x246/0x5d0
4989 [<ffffffff8151985e>] udpv6_sendmsg+0xa6e/0x1090
4990 [...]
4991
4992 Reported-by: Ji Jianwen <jiji@redhat.com>
4993 Signed-off-by: Jakub Sitnicki <jkbs@redhat.com>
4994 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
4995 Signed-off-by: David S. Miller <davem@davemloft.net>
4996
4997 net/ipv6/ip6_output.c | 8 ++++----
4998 1 file changed, 4 insertions(+), 4 deletions(-)
4999
5000 commit 638dad49a9ba3d86f627adb58b2f4636ed253685
5001 Author: Thadeu Lima de Souza Cascardo <cascardo@redhat.com>
5002 Date: Fri Apr 1 17:17:50 2016 -0300
5003
5004 ip6_tunnel: set rtnl_link_ops before calling register_netdevice
5005
5006 When creating an ip6tnl tunnel with ip tunnel, rtnl_link_ops is not set
5007 before ip6_tnl_create2 is called. When register_netdevice is called, there
5008 is no linkinfo attribute in the NEWLINK message because of that.
5009
5010 Setting rtnl_link_ops before calling register_netdevice fixes that.
5011
5012 Fixes: 0b112457229d ("ip6tnl: add support of link creation via rtnl")
5013 Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@redhat.com>
5014 Acked-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
5015 Signed-off-by: David S. Miller <davem@davemloft.net>
5016
5017 net/ipv6/ip6_tunnel.c | 2 +-
5018 1 file changed, 1 insertion(+), 1 deletion(-)
5019
5020 commit 14146a0bfaf2ced0055fe549c8fa0941c61e2457
5021 Author: Brad Spengler <spender@grsecurity.net>
5022 Date: Tue Apr 5 21:12:44 2016 -0400
5023
5024 Code cleanups to RANDSTRUCT based on feedback from the PaX Team
5025
5026 tools/gcc/randomize_layout_plugin.c | 18 ++++++++++++------
5027 1 file changed, 12 insertions(+), 6 deletions(-)
5028
5029 commit 3f7dea5e59b0bb34f6bdb628c87251f0105b3d57
5030 Author: Brad Spengler <spender@grsecurity.net>
5031 Date: Sun Apr 3 20:10:10 2016 -0400
5032
5033 Fix RANDSTRUCT support on ARM
5034
5035 tools/gcc/randomize_layout_plugin.c | 54 +++++++++++++++++++++++++++++++++++--
5036 1 file changed, 52 insertions(+), 2 deletions(-)
5037
5038 commit bd893a75ab49f6ea5a216eb334471507337118ba
5039 Merge: 87b7f1d 4d8fc00
5040 Author: Brad Spengler <spender@grsecurity.net>
5041 Date: Sat Apr 2 11:54:20 2016 -0400
5042
5043 Merge branch 'pax-test' into grsec-test
5044
5045 commit 4d8fc00c0066b1921e233123b346efe6ffb27691
5046 Author: Brad Spengler <spender@grsecurity.net>
5047 Date: Sat Apr 2 11:53:53 2016 -0400
5048
5049 Update to pax-linux-4.4.6-test13.patch:
5050 - fixed a REFCOUNT related compile regression on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394)
5051 - worked around an integer signedness mixup in md causing a size overflow false positive, reported by Étienne Buira (https://bugs.gentoo.org/show_bug.cgi?id=578502)
5052
5053 arch/mips/include/asm/atomic.h | 4 ----
5054 tools/gcc/size_overflow_plugin/disable_size_overflow_hash.data | 1 +
5055 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 -
5056 3 files changed, 1 insertion(+), 5 deletions(-)
5057
5058 commit 87b7f1d200023ba826b9d552834a2ee85e67526c
5059 Merge: 3335266 3abdad0
5060 Author: Brad Spengler <spender@grsecurity.net>
5061 Date: Sat Apr 2 11:19:17 2016 -0400
5062
5063 Merge branch 'pax-test' into grsec-test
5064
5065 commit 3abdad0c3b436c076c88289f07a250b811d6f79d
5066 Author: Brad Spengler <spender@grsecurity.net>
5067 Date: Sat Apr 2 11:12:56 2016 -0400
5068
5069 Update to pax-linux-4.4.6-test12.patch:
5070 - fixed vmalloc_fault on i386/PAE to use the correct percpu userland pgd table/entry
5071 - fixed a size overflow false positive report in pptp, reported by Pinkbyte (https://forums.grsecurity.net/viewtopic.php?f=3&t=4437)
5072 - fixed a size overflow false positive report in tbf_segment, reported by audiocricket (https://forums.grsecurity.net/viewtopic.php?f=3&t=4438)
5073 - Emese fixed the x86 vdso32 CFLAGS to omit the gcc plugins
5074 - Emese simplified the gcc plugin related make rules, suggested by Masahiro Yamada
5075 - André Fabian Silva Delgado fixed a compile regression on arm, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4435)
5076 - fixed an integer sign conversion error in nfs_super_set_maxbytes caught by the size overflow plugin, reported by Alexey Dvoichenkov <xale@hyperplane.net>
5077 - fixed a size overflow false positive in squashfs, reported by Mathias Krause <minipli@ld-linux.so>
5078 - fixed a size overflow false positive in xfrm6_transport_output, reported by marcan (https://forums.grsecurity.net/viewtopic.php?f=3&t=4426)
5079 - fixed an integer truncation bug in elf_kcore_store_hdr caught by the size overflow plugin
5080 - fixed a gratuitous userland dereference in the amd64 stack walker
5081 - added latent entropy gathering to a few more functions
5082 - constified a few smp_hotplug_thread instances
5083
5084 arch/x86/entry/vdso/Makefile | 1 +
5085 arch/x86/include/asm/cpufeature.h | 1 -
5086 arch/x86/kernel/dumpstack_64.c | 17 ++++++-----------
5087 arch/x86/kernel/head_32.S | 6 +++---
5088 arch/x86/mm/fault.c | 2 +-
5089 drivers/iommu/arm-smmu.c | 2 +-
5090 drivers/net/ppp/pptp.c | 1 +
5091 drivers/staging/rdma/ehca/ehca_irq.c | 2 +-
5092 fs/nfs/internal.h | 5 +++--
5093 fs/proc/kcore.c | 2 +-
5094 kernel/module.c | 6 +++---
5095 kernel/rcu/tree.c | 2 +-
5096 kernel/softirq.c | 2 +-
5097 kernel/stop_machine.c | 2 +-
5098 net/ipv6/xfrm6_mode_transport.c | 2 +-
5099 net/sched/sch_tbf.c | 9 ++++++---
5100 scripts/Makefile.gcc-plugins | 13 +++----------
5101 scripts/Makefile.host | 3 +--
5102 .../disable_size_overflow_hash.data | 4 +++-
5103 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 6 ++----
5104 20 files changed, 40 insertions(+), 48 deletions(-)
5105
5106 commit 3335266d5bec9bc01580736c0a7026ed96cf25e5
5107 Author: Mika Penttilä <mika.penttila@nextfour.com>
5108 Date: Mon Feb 22 17:56:52 2016 +0100
5109
5110 ARM: 8544/1: set_memory_xx fixes
5111
5112 Allow zero size updates. This makes set_memory_xx() consistent with x86, s390 and arm64 and makes apply_to_page_range() not to BUG() when loading modules.
5113
5114 Signed-off-by: Mika Penttilä mika.penttila@nextfour.com
5115 Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
5116
5117 arch/arm/mm/pageattr.c | 3 +++
5118 1 file changed, 3 insertions(+)
5119
5120 commit d6d6499b22c0e5593a16f41c516041b23fbf9eeb
5121 Author: Josh Boyer <jwboyer@fedoraproject.org>
5122 Date: Mon Mar 14 10:42:38 2016 -0400
5123
5124 USB: iowarrior: fix oops with malicious USB descriptors
5125
5126 The iowarrior driver expects at least one valid endpoint. If given
5127 malicious descriptors that specify 0 for the number of endpoints,
5128 it will crash in the probe function. Ensure there is at least
5129 one endpoint on the interface before using it.
5130
5131 The full report of this issue can be found here:
5132 http://seclists.org/bugtraq/2016/Mar/87
5133
5134 Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
5135 Cc: stable <stable@vger.kernel.org>
5136 Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org>
5137 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
5138
5139 drivers/usb/misc/iowarrior.c | 6 ++++++
5140 1 file changed, 6 insertions(+)
5141
5142 commit 79a1fb47ab1245e81040bcd45b3e44e65d282684
5143 Author: Oliver Neukum <oneukum@suse.com>
5144 Date: Tue Mar 15 10:14:04 2016 +0100
5145
5146 USB: cdc-acm: more sanity checking
5147
5148 An attack has become available which pretends to be a quirky
5149 device circumventing normal sanity checks and crashes the kernel
5150 by an insufficient number of interfaces. This patch adds a check
5151 to the code path for quirky devices.
5152
5153 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5154 CC: stable@vger.kernel.org
5155 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
5156
5157 drivers/usb/class/cdc-acm.c | 3 +++
5158 1 file changed, 3 insertions(+)
5159
5160 commit 6ee21acdf0da6602671cb50edeca0abfba3955f7
5161 Author: Oliver Neukum <oneukum@suse.com>
5162 Date: Wed Mar 16 13:26:17 2016 +0100
5163
5164 USB: usb_driver_claim_interface: add sanity checking
5165
5166 Attacks that trick drivers into passing a NULL pointer
5167 to usb_driver_claim_interface() using forged descriptors are
5168 known. This thwarts them by sanity checking.
5169
5170 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5171 CC: stable@vger.kernel.org
5172 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
5173
5174 drivers/usb/core/driver.c | 6 +++++-
5175 1 file changed, 5 insertions(+), 1 deletion(-)
5176
5177 commit 44247834ddab762509eaaf5c742e15bfadcd9d94
5178 Author: Paolo Bonzini <pbonzini@redhat.com>
5179 Date: Mon Mar 21 10:15:25 2016 +0100
5180
5181 KVM: fix spin_lock_init order on x86
5182
5183 Moving the initialization earlier is needed in 4.6 because
5184 kvm_arch_init_vm is now using mmu_lock, causing lockdep to
5185 complain:
5186
5187 [ 284.440294] INFO: trying to register non-static key.
5188 [ 284.445259] the code is fine but needs lockdep annotation.
5189 [ 284.450736] turning off the locking correctness validator.
5190 ...
5191 [ 284.528318] [<ffffffff810aecc3>] lock_acquire+0xd3/0x240
5192 [ 284.533733] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm]
5193 [ 284.541467] [<ffffffff81715581>] _raw_spin_lock+0x41/0x80
5194 [ 284.546960] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm]
5195 [ 284.554707] [<ffffffffa0305aa0>] kvm_page_track_register_notifier+0x20/0x60 [kvm]
5196 [ 284.562281] [<ffffffffa02ece70>] kvm_mmu_init_vm+0x20/0x30 [kvm]
5197 [ 284.568381] [<ffffffffa02dbf7a>] kvm_arch_init_vm+0x1ea/0x200 [kvm]
5198 [ 284.574740] [<ffffffffa02bff3f>] kvm_dev_ioctl+0xbf/0x4d0 [kvm]
5199
5200 However, it also helps fixing a preexisting problem, which is why this
5201 patch is also good for stable kernels: kvm_create_vm was incrementing
5202 current->mm->mm_count but not decrementing it at the out_err label (in
5203 case kvm_init_mmu_notifier failed). The new initialization order makes
5204 it possible to add the required mmdrop without adding a new error label.
5205
5206 Cc: stable@vger.kernel.org
5207 Reported-by: Borislav Petkov <bp@alien8.de>
5208 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5209
5210 virt/kvm/kvm_main.c | 21 +++++++++++----------
5211 1 file changed, 11 insertions(+), 10 deletions(-)
5212
5213 commit 9d0cf281d74a9fe490f3ba5ca3d0e57eac066e1c
5214 Author: Paolo Bonzini <pbonzini@redhat.com>
5215 Date: Fri Mar 18 16:53:42 2016 +0100
5216
5217 KVM: VMX: avoid guest hang on invalid invvpid instruction
5218
5219 A guest executing an invalid invvpid instruction would hang
5220 because the instruction pointer was not updated.
5221
5222 Reported-by: jmontleo@redhat.com
5223 Tested-by: jmontleo@redhat.com
5224 Cc: stable@vger.kernel.org
5225 Fixes: 99b83ac893b84ed1a62ad6d1f2b6cc32026b9e85
5226 Reviewed-by: David Matlack <dmatlack@google.com>
5227 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5228
5229 arch/x86/kvm/vmx.c | 1 +
5230 1 file changed, 1 insertion(+)
5231
5232 commit 602caaece277e5e21ae43771398bbf7778061beb
5233 Author: Paolo Bonzini <pbonzini@redhat.com>
5234 Date: Fri Mar 18 16:53:29 2016 +0100
5235
5236 KVM: VMX: avoid guest hang on invalid invept instruction
5237
5238 A guest executing an invalid invept instruction would hang
5239 because the instruction pointer was not updated.
5240
5241 Cc: stable@vger.kernel.org
5242 Fixes: bfd0a56b90005f8c8a004baf407ad90045c2b11e
5243 Reviewed-by: David Matlack <dmatlack@google.com>
5244 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5245
5246 arch/x86/kvm/vmx.c | 1 +
5247 1 file changed, 1 insertion(+)
5248
5249 commit 3309ac82d6596de8abc6ea51dd0a942416da1cc1
5250 Author: Jann Horn <jann@thejh.net>
5251 Date: Tue Mar 22 14:25:36 2016 -0700
5252
5253 fs/coredump: prevent fsuid=0 dumps into user-controlled directories
5254
5255 This commit fixes the following security hole affecting systems where
5256 all of the following conditions are fulfilled:
5257
5258 - The fs.suid_dumpable sysctl is set to 2.
5259 - The kernel.core_pattern sysctl's value starts with "/". (Systems
5260 where kernel.core_pattern starts with "|/" are not affected.)
5261 - Unprivileged user namespace creation is permitted. (This is
5262 true on Linux >=3.8, but some distributions disallow it by
5263 default using a distro patch.)
5264
5265 Under these conditions, if a program executes under secure exec rules,
5266 causing it to run with the SUID_DUMP_ROOT flag, then unshares its user
5267 namespace, changes its root directory and crashes, the coredump will be
5268 written using fsuid=0 and a path derived from kernel.core_pattern - but
5269 this path is interpreted relative to the root directory of the process,
5270 allowing the attacker to control where a coredump will be written with
5271 root privileges.
5272
5273 To fix the security issue, always interpret core_pattern for dumps that
5274 are written under SUID_DUMP_ROOT relative to the root directory of init.
5275
5276 Signed-off-by: Jann Horn <jann@thejh.net>
5277 Acked-by: Kees Cook <keescook@chromium.org>
5278 Cc: Al Viro <viro@zeniv.linux.org.uk>
5279 Cc: "Eric W. Biederman" <ebiederm@xmission.com>
5280 Cc: Andy Lutomirski <luto@kernel.org>
5281 Cc: Oleg Nesterov <oleg@redhat.com>
5282 Cc: <stable@vger.kernel.org>
5283 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
5284 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
5285
5286 arch/um/drivers/mconsole_kern.c | 2 +-
5287 fs/coredump.c | 31 +++++++++++++++++++++++++++----
5288 fs/fhandle.c | 2 +-
5289 fs/open.c | 6 ++----
5290 include/linux/fs.h | 2 +-
5291 kernel/sysctl_binary.c | 2 +-
5292 6 files changed, 33 insertions(+), 12 deletions(-)
5293
5294 commit a7c8d3c91a3e50d0873942f09afbb5071382d5e7
5295 Author: Takashi Iwai <tiwai@suse.de>
5296 Date: Fri Apr 1 12:28:16 2016 +0200
5297
5298 ALSA: timer: Use mod_timer() for rearming the system timer
5299
5300 ALSA system timer backend stops the timer via del_timer() without sync
5301 and leaves del_timer_sync() at the close instead. This is because of
5302 the restriction by the design of ALSA timer: namely, the stop callback
5303 may be called from the timer handler, and calling the sync shall lead
5304 to a hangup. However, this also triggers a kernel BUG() when the
5305 timer is rearmed immediately after stopping without sync:
5306 kernel BUG at kernel/time/timer.c:966!
5307 Call Trace:
5308 <IRQ>
5309 [<ffffffff8239c94e>] snd_timer_s_start+0x13e/0x1a0
5310 [<ffffffff8239e1f4>] snd_timer_interrupt+0x504/0xec0
5311 [<ffffffff8122fca0>] ? debug_check_no_locks_freed+0x290/0x290
5312 [<ffffffff8239ec64>] snd_timer_s_function+0xb4/0x120
5313 [<ffffffff81296b72>] call_timer_fn+0x162/0x520
5314 [<ffffffff81296add>] ? call_timer_fn+0xcd/0x520
5315 [<ffffffff8239ebb0>] ? snd_timer_interrupt+0xec0/0xec0
5316 ....
5317
5318 It's the place where add_timer() checks the pending timer. It's clear
5319 that this may happen after the immediate restart without sync in our
5320 cases.
5321
5322 So, the workaround here is just to use mod_timer() instead of
5323 add_timer(). This looks like a band-aid fix, but it's a right move,
5324 as snd_timer_interrupt() takes care of the continuous rearm of timer.
5325
5326 Reported-by: Jiri Slaby <jslaby@suse.cz>
5327 Cc: <stable@vger.kernel.org>
5328 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5329
5330 sound/core/timer.c | 4 ++--
5331 1 file changed, 2 insertions(+), 2 deletions(-)
5332
5333 commit 2de05c5fc90b461d78a54a7240b664a068844c8c
5334 Author: Daniel Vetter <daniel.vetter@ffwll.ch>
5335 Date: Wed Mar 30 11:40:43 2016 +0200
5336
5337 drm/udl: Use unlocked gem unreferencing
5338
5339 For drm_gem_object_unreference callers are required to hold
5340 dev->struct_mutex, which these paths don't. Enforcing this requirement
5341 has become a bit more strict with
5342
5343 commit ef4c6270bf2867e2f8032e9614d1a8cfc6c71663
5344 Author: Daniel Vetter <daniel.vetter@ffwll.ch>
5345 Date: Thu Oct 15 09:36:25 2015 +0200
5346
5347 drm/gem: Check locking in drm_gem_object_unreference
5348
5349 Cc: stable@vger.kernel.org
5350 Signed-off-by: Daniel Vetter <daniel.vetter@intel.com>
5351 Signed-off-by: Dave Airlie <airlied@redhat.com>
5352
5353 drivers/gpu/drm/udl/udl_fb.c | 2 +-
5354 drivers/gpu/drm/udl/udl_gem.c | 2 +-
5355 2 files changed, 2 insertions(+), 2 deletions(-)
5356
5357 commit c8153b6b1731b8fee33966dd8d148643240f1dc0
5358 Author: Jan Kara <jack@suse.com>
5359 Date: Mon Dec 7 14:34:49 2015 -0500
5360
5361 ext4: fix races of writeback with punch hole and zero range
5362
5363 When doing delayed allocation, update of on-disk inode size is postponed
5364 until IO submission time. However hole punch or zero range fallocate
5365 calls can end up discarding the tail page cache page and thus on-disk
5366 inode size would never be properly updated.
5367
5368 Make sure the on-disk inode size is updated before truncating page
5369 cache.
5370
5371 Signed-off-by: Jan Kara <jack@suse.com>
5372 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5373
5374 fs/ext4/ext4.h | 3 +++
5375 fs/ext4/extents.c | 5 +++++
5376 fs/ext4/inode.c | 35 ++++++++++++++++++++++++++++++++++-
5377 3 files changed, 42 insertions(+), 1 deletion(-)
5378
5379 commit d64beb441579f2667e99eb9d4d6e83deb88bf59b
5380 Author: Jan Kara <jack@suse.com>
5381 Date: Mon Dec 7 14:31:11 2015 -0500
5382
5383 ext4: fix races between buffered IO and collapse / insert range
5384
5385 Current code implementing FALLOC_FL_COLLAPSE_RANGE and
5386 FALLOC_FL_INSERT_RANGE is prone to races with buffered writes and page
5387 faults. If buffered write or write via mmap manages to squeeze between
5388 filemap_write_and_wait_range() and truncate_pagecache() in the fallocate
5389 implementations, the written data is simply discarded by
5390 truncate_pagecache() although it should have been shifted.
5391
5392 Fix the problem by moving filemap_write_and_wait_range() call inside
5393 i_mutex and i_mmap_sem. That way we are protected against races with
5394 both buffered writes and page faults.
5395
5396 Signed-off-by: Jan Kara <jack@suse.com>
5397 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5398
5399 fs/ext4/extents.c | 59 +++++++++++++++++++++++++++++--------------------------
5400 1 file changed, 31 insertions(+), 28 deletions(-)
5401
5402 commit b1ae49aa4dad39233b16456e0765a23ba4e0546c
5403 Author: Jan Kara <jack@suse.com>
5404 Date: Mon Dec 7 14:29:17 2015 -0500
5405
5406 ext4: move unlocked dio protection from ext4_alloc_file_blocks()
5407
5408 Currently ext4_alloc_file_blocks() was handling protection against
5409 unlocked DIO. However we now need to sometimes call it under i_mmap_sem
5410 and sometimes not and DIO protection ranks above it (although strictly
5411 speaking this cannot currently create any deadlocks). Also
5412 ext4_zero_range() was actually getting & releasing unlocked DIO
5413 protection twice in some cases. Luckily it didn't introduce any real bug
5414 but it was a land mine waiting to be stepped on. So move DIO protection
5415 out from ext4_alloc_file_blocks() into the two callsites.
5416
5417 Signed-off-by: Jan Kara <jack@suse.com>
5418 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5419
5420 fs/ext4/extents.c | 21 ++++++++++-----------
5421 1 file changed, 10 insertions(+), 11 deletions(-)
5422
5423 commit f9329a4ec30a26f0fababf809c5f1a3ef851b625
5424 Author: Jan Kara <jack@suse.com>
5425 Date: Mon Dec 7 14:28:03 2015 -0500
5426
5427 ext4: fix races between page faults and hole punching
5428
5429 Currently, page faults and hole punching are completely unsynchronized.
5430 This can result in page fault faulting in a page into a range that we
5431 are punching after truncate_pagecache_range() has been called and thus
5432 we can end up with a page mapped to disk blocks that will be shortly
5433 freed. Filesystem corruption will shortly follow. Note that the same
5434 race is avoided for truncate by checking page fault offset against
5435 i_size but there isn't similar mechanism available for punching holes.
5436
5437 Fix the problem by creating new rw semaphore i_mmap_sem in inode and
5438 grab it for writing over truncate, hole punching, and other functions
5439 removing blocks from extent tree and for read over page faults. We
5440 cannot easily use i_data_sem for this since that ranks below transaction
5441 start and we need something ranking above it so that it can be held over
5442 the whole truncate / hole punching operation. Also remove various
5443 workarounds we had in the code to reduce race window when page fault
5444 could have created pages with stale mapping information.
5445
5446 Signed-off-by: Jan Kara <jack@suse.com>
5447 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5448
5449 fs/ext4/ext4.h | 10 +++++++++
5450 fs/ext4/extents.c | 54 ++++++++++++++++++++++++--------------------
5451 fs/ext4/file.c | 66 ++++++++++++++++++++++++++++++++++++++++++++++--------
5452 fs/ext4/inode.c | 36 +++++++++++++++++++++--------
5453 fs/ext4/super.c | 1 +
5454 fs/ext4/truncate.h | 2 ++
5455 6 files changed, 127 insertions(+), 42 deletions(-)
5456
5457 commit 572a615b85c1d5c8aeea4ffd24ab428775a1cca9
5458 Author: Guenter Roeck <linux@roeck-us.net>
5459 Date: Sat Mar 26 12:28:05 2016 -0700
5460
5461 hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiated
5462
5463 arm:pxa_defconfig can result in the following crash if the max1111 driver
5464 is not instantiated.
5465
5466 Unhandled fault: page domain fault (0x01b) at 0x00000000
5467 pgd = c0004000
5468 [00000000] *pgd=00000000
5469 Internal error: : 1b [#1] PREEMPT ARM
5470 Modules linked in:
5471 CPU: 0 PID: 300 Comm: kworker/0:1 Not tainted 4.5.0-01301-g1701f680407c #10
5472 Hardware name: SHARP Akita
5473 Workqueue: events sharpsl_charge_toggle
5474 task: c390a000 ti: c391e000 task.ti: c391e000
5475 PC is at max1111_read_channel+0x20/0x30
5476 LR is at sharpsl_pm_pxa_read_max1111+0x2c/0x3c
5477 pc : [<c03aaab0>] lr : [<c0024b50>] psr: 20000013
5478 ...
5479 [<c03aaab0>] (max1111_read_channel) from [<c0024b50>]
5480 (sharpsl_pm_pxa_read_max1111+0x2c/0x3c)
5481 [<c0024b50>] (sharpsl_pm_pxa_read_max1111) from [<c00262e0>]
5482 (spitzpm_read_devdata+0x5c/0xc4)
5483 [<c00262e0>] (spitzpm_read_devdata) from [<c0024094>]
5484 (sharpsl_check_battery_temp+0x78/0x110)
5485 [<c0024094>] (sharpsl_check_battery_temp) from [<c0024f9c>]
5486 (sharpsl_charge_toggle+0x48/0x110)
5487 [<c0024f9c>] (sharpsl_charge_toggle) from [<c004429c>]
5488 (process_one_work+0x14c/0x48c)
5489 [<c004429c>] (process_one_work) from [<c0044618>] (worker_thread+0x3c/0x5d4)
5490 [<c0044618>] (worker_thread) from [<c004a238>] (kthread+0xd0/0xec)
5491 [<c004a238>] (kthread) from [<c000a670>] (ret_from_fork+0x14/0x24)
5492
5493 This can occur because the SPI controller driver (SPI_PXA2XX) is built as
5494 module and thus not necessarily loaded. While building SPI_PXA2XX into the
5495 kernel would make the problem disappear, it appears prudent to ensure that
5496 the driver is instantiated before accessing its data structures.
5497
5498 Cc: Arnd Bergmann <arnd@arndb.de>
5499 Cc: stable@vger.kernel.org
5500 Signed-off-by: Guenter Roeck <linux@roeck-us.net>
5501
5502 drivers/hwmon/max1111.c | 6 ++++++
5503 1 file changed, 6 insertions(+)
5504
5505 commit f75f1af7a0b4be055855ca5120ee78174f3370f2
5506 Author: Nicolai Stange <nicstange@gmail.com>
5507 Date: Sun Mar 20 23:23:46 2016 +0100
5508
5509 PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument
5510
5511 Despite what the DocBook comment to pkcs7_validate_trust() says, the
5512 *_trusted argument is never set to false.
5513
5514 pkcs7_validate_trust() only positively sets *_trusted upon encountering
5515 a trusted PKCS#7 SignedInfo block.
5516
5517 This is quite unfortunate since its callers, system_verify_data() for
5518 example, depend on pkcs7_validate_trust() clearing *_trusted on non-trust.
5519
5520 Indeed, UBSAN splats when attempting to load the uninitialized local
5521 variable 'trusted' from system_verify_data() in pkcs7_validate_trust():
5522
5523 UBSAN: Undefined behaviour in crypto/asymmetric_keys/pkcs7_trust.c:194:14
5524 load of value 82 is not a valid value for type '_Bool'
5525 [...]
5526 Call Trace:
5527 [<ffffffff818c4d35>] dump_stack+0xbc/0x117
5528 [<ffffffff818c4c79>] ? _atomic_dec_and_lock+0x169/0x169
5529 [<ffffffff8194113b>] ubsan_epilogue+0xd/0x4e
5530 [<ffffffff819419fa>] __ubsan_handle_load_invalid_value+0x111/0x158
5531 [<ffffffff819418e9>] ? val_to_string.constprop.12+0xcf/0xcf
5532 [<ffffffff818334a4>] ? x509_request_asymmetric_key+0x114/0x370
5533 [<ffffffff814b83f0>] ? kfree+0x220/0x370
5534 [<ffffffff818312c2>] ? public_key_verify_signature_2+0x32/0x50
5535 [<ffffffff81835e04>] pkcs7_validate_trust+0x524/0x5f0
5536 [<ffffffff813c391a>] system_verify_data+0xca/0x170
5537 [<ffffffff813c3850>] ? top_trace_array+0x9b/0x9b
5538 [<ffffffff81510b29>] ? __vfs_read+0x279/0x3d0
5539 [<ffffffff8129372f>] mod_verify_sig+0x1ff/0x290
5540 [...]
5541
5542 The implication is that pkcs7_validate_trust() effectively grants trust
5543 when it really shouldn't have.
5544
5545 Fix this by explicitly setting *_trusted to false at the very beginning
5546 of pkcs7_validate_trust().
5547
5548 Cc: <stable@vger.kernel.org>
5549 Signed-off-by: Nicolai Stange <nicstange@gmail.com>
5550 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
5551
5552 crypto/asymmetric_keys/pkcs7_trust.c | 2 ++
5553 1 file changed, 2 insertions(+)
5554
5555 commit 1052826f7352ccc98167129b0b83222f45d50046
5556 Author: Florian Westphal <fw@strlen.de>
5557 Date: Tue Mar 22 18:02:49 2016 +0100
5558
5559 netfilter: x_tables: validate e->target_offset early
5560
5561 We should check that e->target_offset is sane before
5562 mark_source_chains gets called since it will fetch the target entry
5563 for loop detection.
5564
5565 Signed-off-by: Florian Westphal <fw@strlen.de>
5566 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5567
5568 net/ipv4/netfilter/arp_tables.c | 17 ++++++++---------
5569 net/ipv4/netfilter/ip_tables.c | 17 ++++++++---------
5570 net/ipv6/netfilter/ip6_tables.c | 17 ++++++++---------
5571 3 files changed, 24 insertions(+), 27 deletions(-)
5572
5573 commit b35d19509e8dab157214e46dd24314663ccf554f
5574 Author: Florian Westphal <fw@strlen.de>
5575 Date: Tue Mar 22 18:02:50 2016 +0100
5576
5577 netfilter: x_tables: make sure e->next_offset covers remaining blob size
5578
5579 Otherwise this function may read data beyond the ruleset blob.
5580
5581 Signed-off-by: Florian Westphal <fw@strlen.de>
5582 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5583
5584 net/ipv4/netfilter/arp_tables.c | 6 ++++--
5585 net/ipv4/netfilter/ip_tables.c | 6 ++++--
5586 net/ipv6/netfilter/ip6_tables.c | 6 ++++--
5587 3 files changed, 12 insertions(+), 6 deletions(-)
5588
5589 commit 4d7642ed66b69140733a7b51fcd6d37ce4d4514c
5590 Author: Florian Westphal <fw@strlen.de>
5591 Date: Tue Mar 22 18:02:52 2016 +0100
5592
5593 netfilter: x_tables: fix unconditional helper
5594
5595 Ben Hawkes says:
5596
5597 In the mark_source_chains function (net/ipv4/netfilter/ip_tables.c) it
5598 is possible for a user-supplied ipt_entry structure to have a large
5599 next_offset field. This field is not bounds checked prior to writing a
5600 counter value at the supplied offset.
5601
5602 Problem is that mark_source_chains should not have been called --
5603 the rule doesn't have a next entry, so its supposed to return
5604 an absolute verdict of either ACCEPT or DROP.
5605
5606 However, the function conditional() doesn't work as the name implies.
5607 It only checks that the rule is using wildcard address matching.
5608
5609 However, an unconditional rule must also not be using any matches
5610 (no -m args).
5611
5612 The underflow validator only checked the addresses, therefore
5613 passing the 'unconditional absolute verdict' test, while
5614 mark_source_chains also tested for presence of matches, and thus
5615 proceeeded to the next (not-existent) rule.
5616
5617 Unify this so that all the callers have same idea of 'unconditional rule'.
5618
5619 Reported-by: Ben Hawkes <hawkes@google.com>
5620 Signed-off-by: Florian Westphal <fw@strlen.de>
5621 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5622
5623 net/ipv4/netfilter/arp_tables.c | 18 +++++++++---------
5624 net/ipv4/netfilter/ip_tables.c | 23 +++++++++++------------
5625 net/ipv6/netfilter/ip6_tables.c | 23 +++++++++++------------
5626 3 files changed, 31 insertions(+), 33 deletions(-)
5627
5628 commit e3e51682563f1453dfc4b9ef88b29af4d1a78e78
5629 Author: Pablo Neira Ayuso <pablo@netfilter.org>
5630 Date: Thu Mar 24 21:29:53 2016 +0100
5631
5632 netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES
5633
5634 Make sure the table names via getsockopt GET_ENTRIES is nul-terminated
5635 in ebtables and all the x_tables variants and their respective compat
5636 code. Uncovered by KASAN.
5637
5638 Reported-by: Baozeng Ding <sploving1@gmail.com>
5639 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5640
5641 net/bridge/netfilter/ebtables.c | 4 ++++
5642 net/ipv4/netfilter/arp_tables.c | 2 ++
5643 net/ipv4/netfilter/ip_tables.c | 2 ++
5644 net/ipv6/netfilter/ip6_tables.c | 2 ++
5645 4 files changed, 10 insertions(+)
5646
5647 commit 7742471b674597627f8f608f6a89c6e5bbd6533d
5648 Author: Nicolai Stange <nicstange@gmail.com>
5649 Date: Fri Mar 25 14:22:14 2016 -0700
5650
5651 mm/filemap: generic_file_read_iter(): check for zero reads unconditionally
5652
5653 If
5654 - generic_file_read_iter() gets called with a zero read length,
5655 - the read offset is at a page boundary,
5656 - IOCB_DIRECT is not set
5657 - and the page in question hasn't made it into the page cache yet,
5658 then do_generic_file_read() will trigger a readahead with a req_size hint
5659 of zero.
5660
5661 Since roundup_pow_of_two(0) is undefined, UBSAN reports
5662
5663 UBSAN: Undefined behaviour in include/linux/log2.h:63:13
5664 shift exponent 64 is too large for 64-bit type 'long unsigned int'
5665 CPU: 3 PID: 1017 Comm: sa1 Tainted: G L 4.5.0-next-20160318+ #14
5666 [...]
5667 Call Trace:
5668 [...]
5669 [<ffffffff813ef61a>] ondemand_readahead+0x3aa/0x3d0
5670 [<ffffffff813ef61a>] ? ondemand_readahead+0x3aa/0x3d0
5671 [<ffffffff813c73bd>] ? find_get_entry+0x2d/0x210
5672 [<ffffffff813ef9c3>] page_cache_sync_readahead+0x63/0xa0
5673 [<ffffffff813cc04d>] do_generic_file_read+0x80d/0xf90
5674 [<ffffffff813cc955>] generic_file_read_iter+0x185/0x420
5675 [...]
5676 [<ffffffff81510b06>] __vfs_read+0x256/0x3d0
5677 [...]
5678
5679 when get_init_ra_size() gets called from ondemand_readahead().
5680
5681 The net effect is that the initial readahead size is arch dependent for
5682 requested read lengths of zero: for example, since
5683
5684 1UL << (sizeof(unsigned long) * 8)
5685
5686 evaluates to 1 on x86 while its result is 0 on ARMv7, the initial readahead
5687 size becomes 4 on the former and 0 on the latter.
5688
5689 What's more, whether or not the file access timestamp is updated for zero
5690 length reads is decided differently for the two cases of IOCB_DIRECT
5691 being set or cleared: in the first case, generic_file_read_iter()
5692 explicitly skips updating that timestamp while in the latter case, it is
5693 always updated through the call to do_generic_file_read().
5694
5695 According to POSIX, zero length reads "do not modify the last data access
5696 timestamp" and thus, the IOCB_DIRECT behaviour is POSIXly correct.
5697
5698 Let generic_file_read_iter() unconditionally check the requested read
5699 length at its entry and return immediately with success if it is zero.
5700
5701 Signed-off-by: Nicolai Stange <nicstange@gmail.com>
5702 Cc: Al Viro <viro@zeniv.linux.org.uk>
5703 Reviewed-by: Jan Kara <jack@suse.cz>
5704 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
5705 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
5706
5707 mm/filemap.c | 7 ++++---
5708 1 file changed, 4 insertions(+), 3 deletions(-)
5709
5710 commit 604785419da498d7e876a0191b2e11626db706bb
5711 Author: Oliver Neukum <oneukum@suse.com>
5712 Date: Thu Mar 17 14:00:17 2016 -0700
5713
5714 Input: ims-pcu - sanity check against missing interfaces
5715
5716 A malicious device missing interface can make the driver oops.
5717 Add sanity checking.
5718
5719 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5720 CC: stable@vger.kernel.org
5721 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
5722
5723 drivers/input/misc/ims-pcu.c | 4 ++++
5724 1 file changed, 4 insertions(+)
5725
5726 commit 24c3f4f6652f07eb2c3deea1488ff4de00592e80
5727 Author: Vladis Dronov <vdronov@redhat.com>
5728 Date: Wed Mar 23 11:53:46 2016 -0700
5729
5730 Input: ati_remote2 - fix crashes on detecting device with invalid descriptor
5731
5732 The ati_remote2 driver expects at least two interfaces with one
5733 endpoint each. If given malicious descriptor that specify one
5734 interface or no endpoints, it will crash in the probe function.
5735 Ensure there is at least two interfaces and one endpoint for each
5736 interface before using it.
5737
5738 The full disclosure: http://seclists.org/bugtraq/2016/Mar/90
5739
5740 Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
5741 Signed-off-by: Vladis Dronov <vdronov@redhat.com>
5742 Cc: stable@vger.kernel.org
5743 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
5744
5745 drivers/input/misc/ati_remote2.c | 36 ++++++++++++++++++++++++++++++------
5746 1 file changed, 30 insertions(+), 6 deletions(-)
5747
5748 commit 262df604d00e72a4b930fbf7fe3a770f0196a5a5
5749 Author: Oliver Neukum <oneukum@suse.com>
5750 Date: Wed Mar 23 14:36:56 2016 -0700
5751
5752 Input: sur40 - fix DMA on stack
5753
5754 During the initialisation the driver uses a buffer on the stack for DMA.
5755 That violates the cache coherency rules. The fix is to allocate the buffer
5756 with kmalloc().
5757
5758 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5759 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
5760
5761 drivers/input/touchscreen/sur40.c | 21 ++++++++++++++-------
5762 1 file changed, 14 insertions(+), 7 deletions(-)
5763
5764 commit 015dd03669b2ab646723f6b123377e4ef5694a10
5765 Author: Haiyang Zhang <haiyangz@microsoft.com>
5766 Date: Wed Mar 23 09:43:10 2016 -0700
5767
5768 hv_netvsc: Fix the array sizes to be max supported channels
5769
5770 The VRSS_CHANNEL_MAX is the max number of channels supported by Hyper-V
5771 hosts. We use it for the related array sizes instead of using NR_CPUS,
5772 which may be set to several thousands.
5773 This patch reduces possible memory allocation failures.
5774
5775 Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
5776 Reviewed-by: K. Y. Srinivasan <kys@microsoft.com>
5777 Signed-off-by: David S. Miller <davem@davemloft.net>
5778
5779 drivers/net/hyperv/hyperv_net.h | 7 ++++---
5780 drivers/net/hyperv/rndis_filter.c | 4 ++--
5781 2 files changed, 6 insertions(+), 5 deletions(-)
5782
5783 commit a850a78d6393ef22a970266cbbefdf3dba0267b5
5784 Author: Haiyang Zhang <haiyangz@microsoft.com>
5785 Date: Wed Mar 23 09:43:09 2016 -0700
5786
5787 hv_netvsc: Fix accessing freed memory in netvsc_change_mtu()
5788
5789 struct netvsc_device is freed in rndis_filter_device_remove(). So we save
5790 the nvdev->num_chn into a temp variable for later usage.
5791
5792 (Please also include this patch into stable branch.)
5793
5794 Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
5795 Reviewed-by: K. Y. Srinivasan <kys@microsoft.com>
5796 Signed-off-by: David S. Miller <davem@davemloft.net>
5797
5798 drivers/net/hyperv/netvsc_drv.c | 5 ++++-
5799 1 file changed, 4 insertions(+), 1 deletion(-)
5800
5801 commit 7409626e43fe871cede30ac926425938f3ccddaf
5802 Author: Guillaume Nault <g.nault@alphalink.fr>
5803 Date: Wed Mar 23 16:38:55 2016 +0100
5804
5805 ppp: take reference on channels netns
5806
5807 Let channels hold a reference on their network namespace.
5808 Some channel types, like ppp_async and ppp_synctty, can have their
5809 userspace controller running in a different namespace. Therefore they
5810 can't rely on them to preclude their netns from being removed from
5811 under them.
5812
5813 ==================================================================
5814 BUG: KASAN: use-after-free in ppp_unregister_channel+0x372/0x3a0 at
5815 addr ffff880064e217e0
5816 Read of size 8 by task syz-executor/11581
5817 =============================================================================
5818 BUG net_namespace (Not tainted): kasan: bad access detected
5819 -----------------------------------------------------------------------------
5820
5821 Disabling lock debugging due to kernel taint
5822 INFO: Allocated in copy_net_ns+0x6b/0x1a0 age=92569 cpu=3 pid=6906
5823 [< none >] ___slab_alloc+0x4c7/0x500 kernel/mm/slub.c:2440
5824 [< none >] __slab_alloc+0x4c/0x90 kernel/mm/slub.c:2469
5825 [< inline >] slab_alloc_node kernel/mm/slub.c:2532
5826 [< inline >] slab_alloc kernel/mm/slub.c:2574
5827 [< none >] kmem_cache_alloc+0x23a/0x2b0 kernel/mm/slub.c:2579
5828 [< inline >] kmem_cache_zalloc kernel/include/linux/slab.h:597
5829 [< inline >] net_alloc kernel/net/core/net_namespace.c:325
5830 [< none >] copy_net_ns+0x6b/0x1a0 kernel/net/core/net_namespace.c:360
5831 [< none >] create_new_namespaces+0x2f6/0x610 kernel/kernel/nsproxy.c:95
5832 [< none >] copy_namespaces+0x297/0x320 kernel/kernel/nsproxy.c:150
5833 [< none >] copy_process.part.35+0x1bf4/0x5760 kernel/kernel/fork.c:1451
5834 [< inline >] copy_process kernel/kernel/fork.c:1274
5835 [< none >] _do_fork+0x1bc/0xcb0 kernel/kernel/fork.c:1723
5836 [< inline >] SYSC_clone kernel/kernel/fork.c:1832
5837 [< none >] SyS_clone+0x37/0x50 kernel/kernel/fork.c:1826
5838 [< none >] entry_SYSCALL_64_fastpath+0x16/0x7a kernel/arch/x86/entry/entry_64.S:185
5839
5840 INFO: Freed in net_drop_ns+0x67/0x80 age=575 cpu=2 pid=2631
5841 [< none >] __slab_free+0x1fc/0x320 kernel/mm/slub.c:2650
5842 [< inline >] slab_free kernel/mm/slub.c:2805
5843 [< none >] kmem_cache_free+0x2a0/0x330 kernel/mm/slub.c:2814
5844 [< inline >] net_free kernel/net/core/net_namespace.c:341
5845 [< none >] net_drop_ns+0x67/0x80 kernel/net/core/net_namespace.c:348
5846 [< none >] cleanup_net+0x4e5/0x600 kernel/net/core/net_namespace.c:448
5847 [< none >] process_one_work+0x794/0x1440 kernel/kernel/workqueue.c:2036
5848 [< none >] worker_thread+0xdb/0xfc0 kernel/kernel/workqueue.c:2170
5849 [< none >] kthread+0x23f/0x2d0 kernel/drivers/block/aoe/aoecmd.c:1303
5850 [< none >] ret_from_fork+0x3f/0x70 kernel/arch/x86/entry/entry_64.S:468
5851 INFO: Slab 0xffffea0001938800 objects=3 used=0 fp=0xffff880064e20000
5852 flags=0x5fffc0000004080
5853 INFO: Object 0xffff880064e20000 @offset=0 fp=0xffff880064e24200
5854
5855 CPU: 1 PID: 11581 Comm: syz-executor Tainted: G B 4.4.0+
5856 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
5857 rel-1.8.2-0-g33fbe13 by qemu-project.org 04/01/2014
5858 00000000ffffffff ffff8800662c7790 ffffffff8292049d ffff88003e36a300
5859 ffff880064e20000 ffff880064e20000 ffff8800662c77c0 ffffffff816f2054
5860 ffff88003e36a300 ffffea0001938800 ffff880064e20000 0000000000000000
5861 Call Trace:
5862 [< inline >] __dump_stack kernel/lib/dump_stack.c:15
5863 [<ffffffff8292049d>] dump_stack+0x6f/0xa2 kernel/lib/dump_stack.c:50
5864 [<ffffffff816f2054>] print_trailer+0xf4/0x150 kernel/mm/slub.c:654
5865 [<ffffffff816f875f>] object_err+0x2f/0x40 kernel/mm/slub.c:661
5866 [< inline >] print_address_description kernel/mm/kasan/report.c:138
5867 [<ffffffff816fb0c5>] kasan_report_error+0x215/0x530 kernel/mm/kasan/report.c:236
5868 [< inline >] kasan_report kernel/mm/kasan/report.c:259
5869 [<ffffffff816fb4de>] __asan_report_load8_noabort+0x3e/0x40 kernel/mm/kasan/report.c:280
5870 [< inline >] ? ppp_pernet kernel/include/linux/compiler.h:218
5871 [<ffffffff83ad71b2>] ? ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
5872 [< inline >] ppp_pernet kernel/include/linux/compiler.h:218
5873 [<ffffffff83ad71b2>] ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
5874 [< inline >] ? ppp_pernet kernel/drivers/net/ppp/ppp_generic.c:293
5875 [<ffffffff83ad6f26>] ? ppp_unregister_channel+0xe6/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
5876 [<ffffffff83ae18f3>] ppp_asynctty_close+0xa3/0x130 kernel/drivers/net/ppp/ppp_async.c:241
5877 [<ffffffff83ae1850>] ? async_lcp_peek+0x5b0/0x5b0 kernel/drivers/net/ppp/ppp_async.c:1000
5878 [<ffffffff82c33239>] tty_ldisc_close.isra.1+0x99/0xe0 kernel/drivers/tty/tty_ldisc.c:478
5879 [<ffffffff82c332c0>] tty_ldisc_kill+0x40/0x170 kernel/drivers/tty/tty_ldisc.c:744
5880 [<ffffffff82c34943>] tty_ldisc_release+0x1b3/0x260 kernel/drivers/tty/tty_ldisc.c:772
5881 [<ffffffff82c1ef21>] tty_release+0xac1/0x13e0 kernel/drivers/tty/tty_io.c:1901
5882 [<ffffffff82c1e460>] ? release_tty+0x320/0x320 kernel/drivers/tty/tty_io.c:1688
5883 [<ffffffff8174de36>] __fput+0x236/0x780 kernel/fs/file_table.c:208
5884 [<ffffffff8174e405>] ____fput+0x15/0x20 kernel/fs/file_table.c:244
5885 [<ffffffff813595ab>] task_work_run+0x16b/0x200 kernel/kernel/task_work.c:115
5886 [< inline >] exit_task_work kernel/include/linux/task_work.h:21
5887 [<ffffffff81307105>] do_exit+0x8b5/0x2c60 kernel/kernel/exit.c:750
5888 [<ffffffff813fdd20>] ? debug_check_no_locks_freed+0x290/0x290 kernel/kernel/locking/lockdep.c:4123
5889 [<ffffffff81306850>] ? mm_update_next_owner+0x6f0/0x6f0 kernel/kernel/exit.c:357
5890 [<ffffffff813215e6>] ? __dequeue_signal+0x136/0x470 kernel/kernel/signal.c:550
5891 [<ffffffff8132067b>] ? recalc_sigpending_tsk+0x13b/0x180 kernel/kernel/signal.c:145
5892 [<ffffffff81309628>] do_group_exit+0x108/0x330 kernel/kernel/exit.c:880
5893 [<ffffffff8132b9d4>] get_signal+0x5e4/0x14f0 kernel/kernel/signal.c:2307
5894 [< inline >] ? kretprobe_table_lock kernel/kernel/kprobes.c:1113
5895 [<ffffffff8151d355>] ? kprobe_flush_task+0xb5/0x450 kernel/kernel/kprobes.c:1158
5896 [<ffffffff8115f7d3>] do_signal+0x83/0x1c90 kernel/arch/x86/kernel/signal.c:712
5897 [<ffffffff8151d2a0>] ? recycle_rp_inst+0x310/0x310 kernel/include/linux/list.h:655
5898 [<ffffffff8115f750>] ? setup_sigcontext+0x780/0x780 kernel/arch/x86/kernel/signal.c:165
5899 [<ffffffff81380864>] ? finish_task_switch+0x424/0x5f0 kernel/kernel/sched/core.c:2692
5900 [< inline >] ? finish_lock_switch kernel/kernel/sched/sched.h:1099
5901 [<ffffffff81380560>] ? finish_task_switch+0x120/0x5f0 kernel/kernel/sched/core.c:2678
5902 [< inline >] ? context_switch kernel/kernel/sched/core.c:2807
5903 [<ffffffff85d794e9>] ? __schedule+0x919/0x1bd0 kernel/kernel/sched/core.c:3283
5904 [<ffffffff81003901>] exit_to_usermode_loop+0xf1/0x1a0 kernel/arch/x86/entry/common.c:247
5905 [< inline >] prepare_exit_to_usermode kernel/arch/x86/entry/common.c:282
5906 [<ffffffff810062ef>] syscall_return_slowpath+0x19f/0x210 kernel/arch/x86/entry/common.c:344
5907 [<ffffffff85d88022>] int_ret_from_sys_call+0x25/0x9f kernel/arch/x86/entry/entry_64.S:281
5908 Memory state around the buggy address:
5909 ffff880064e21680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
5910 ffff880064e21700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
5911 >ffff880064e21780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
5912 ^
5913 ffff880064e21800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
5914 ffff880064e21880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
5915 ==================================================================
5916
5917 Fixes: 273ec51dd7ce ("net: ppp_generic - introduce net-namespace functionality v2")
5918 Reported-by: Baozeng Ding <sploving1@gmail.com>
5919 Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
5920 Reviewed-by: Cyrill Gorcunov <gorcunov@openvz.org>
5921 Signed-off-by: David S. Miller <davem@davemloft.net>
5922
5923 drivers/net/ppp/ppp_generic.c | 4 +++-
5924 1 file changed, 3 insertions(+), 1 deletion(-)
5925
5926 commit bfb890c1ac9d29b377f6bec4a5aab51d053114c4
5927 Author: Herbert Xu <herbert@gondor.apana.org.au>
5928 Date: Wed Mar 16 17:06:01 2016 +0800
5929
5930 eCryptfs: Use skcipher and shash
5931
5932 eCryptfs: Fix null pointer dereference on kzalloc error path
5933
5934 The conversion to skcipher and shash added a couple of null pointer
5935 dereference bugs on the kzalloc failure path. This patch fixes them.
5936
5937 Fixes: 3095e8e366b4 ("eCryptfs: Use skcipher and shash")
5938 Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
5939 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
5940
5941 fs/ecryptfs/keystore.c | 6 ++----
5942 1 file changed, 2 insertions(+), 4 deletions(-)
5943
5944 commit 58a8421ae537e0609c4ff59bf6b11be869a43cc6
5945 Author: Boris BREZILLON <boris.brezillon@free-electrons.com>
5946 Date: Thu Mar 17 10:21:34 2016 +0100
5947
5948 crypto: marvell/cesa - fix memory leak
5949
5950 Crypto requests are not guaranteed to be finalized (->final() call),
5951 and can be freed at any moment, without getting any notification from
5952 the core. This can lead to memory leaks of the ->cache buffer.
5953
5954 Make this buffer part of the request object, and allocate an extra buffer
5955 from the DMA cache pool when doing DMA operations.
5956
5957 As a side effect, this patch also fixes another bug related to cache
5958 allocation and DMA operations. When the core allocates a new request and
5959 import an existing state, a cache buffer can be allocated (depending
5960 on the state). The problem is, at that very moment, we don't know yet
5961 whether the request will use DMA or not, and since everything is
5962 likely to be initialized to zero, mv_cesa_ahash_alloc_cache() thinks it
5963 should allocate a buffer for standard operation. But when
5964 mv_cesa_ahash_free_cache() is called, req->type has been set to
5965 CESA_DMA_REQ in the meantime, thus leading to an invalind dma_pool_free()
5966 call (the buffer passed in argument has not been allocated from the pool).
5967
5968 Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
5969 Reported-by: Gregory CLEMENT <gregory.clement@free-electrons.com>
5970 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
5971
5972 drivers/crypto/marvell/cesa.h | 3 +-
5973 drivers/crypto/marvell/hash.c | 86 +++++++++----------------------------------
5974 2 files changed, 20 insertions(+), 69 deletions(-)
5975
5976 commit 1ec604f99895b9c37f26a692ff83a7da02d667fd
5977 Author: Boris BREZILLON <boris.brezillon@free-electrons.com>
5978 Date: Thu Mar 17 10:21:35 2016 +0100
5979
5980 crypto: marvell/cesa - initialize hash states
5981
5982 ->export() might be called before we have done an update operation,
5983 and in this case the ->state field is left uninitialized.
5984 Put the correct default value when initializing the request.
5985
5986 Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
5987 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
5988
5989 drivers/crypto/marvell/hash.c | 20 ++++++++++++++++++++
5990 1 file changed, 20 insertions(+)
5991
5992 commit 23879f055d23e82c2f78cceca22c33e631973977
5993 Author: David S. Miller <davem@davemloft.net>
5994 Date: Sun Mar 13 23:28:00 2016 -0400
5995
5996 ipv4: Don't do expensive useless work during inetdev destroy.
5997
5998 When an inetdev is destroyed, every address assigned to the interface
5999 is removed. And in this scenerio we do two pointless things which can
6000 be very expensive if the number of assigned interfaces is large:
6001
6002 1) Address promotion. We are deleting all addresses, so there is no
6003 point in doing this.
6004
6005 2) A full nf conntrack table purge for every address. We only need to
6006 do this once, as is already caught by the existing
6007 masq_dev_notifier so masq_inet_event() can skip this.
6008
6009 Reported-by: Solar Designer <solar@openwall.com>
6010 Signed-off-by: David S. Miller <davem@davemloft.net>
6011 Tested-by: Cyrill Gorcunov <gorcunov@openvz.org>
6012
6013 net/ipv4/devinet.c | 4 ++++
6014 net/ipv4/fib_frontend.c | 4 ++++
6015 net/ipv4/netfilter/nf_nat_masquerade_ipv4.c | 12 ++++++++++--
6016 3 files changed, 18 insertions(+), 2 deletions(-)
6017
6018 commit 60394231e840e884024592a76a6c5612433d3756
6019 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
6020 Date: Tue Mar 8 10:34:28 2016 -0300
6021
6022 sctp: fix copying more bytes than expected in sctp_add_bind_addr
6023
6024 Dmitry reported that sctp_add_bind_addr may read more bytes than
6025 expected in case the parameter is a IPv4 addr supplied by the user
6026 through calls such as sctp_bindx_add(), because it always copies
6027 sizeof(union sctp_addr) while the buffer may be just a struct
6028 sockaddr_in, which is smaller.
6029
6030 This patch then fixes it by limiting the memcpy to the min between the
6031 union size and a (new parameter) provided addr size. Where possible this
6032 parameter still is the size of that union, except for reading from
6033 user-provided buffers, which then it accounts for protocol type.
6034
6035 Reported-by: Dmitry Vyukov <dvyukov@google.com>
6036 Tested-by: Dmitry Vyukov <dvyukov@google.com>
6037 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
6038 Signed-off-by: David S. Miller <davem@davemloft.net>
6039
6040 include/net/sctp/structs.h | 2 +-
6041 net/sctp/bind_addr.c | 14 ++++++++------
6042 net/sctp/protocol.c | 1 +
6043 net/sctp/sm_make_chunk.c | 3 ++-
6044 net/sctp/socket.c | 4 +++-
6045 5 files changed, 15 insertions(+), 9 deletions(-)
6046
6047 commit 9831caa50e1453818c5ec618890291f028b7992f
6048 Author: Brad Spengler <spender@grsecurity.net>
6049 Date: Mon Mar 28 19:20:28 2016 -0400
6050
6051 Also allow /bin/false as needed by systemd
6052
6053 kernel/kmod.c | 2 +-
6054 1 file changed, 1 insertion(+), 1 deletion(-)
6055
6056 commit bb38a61b496a3f09f4d7b93d2f0fe15476918147
6057 Author: Brad Spengler <spender@grsecurity.net>
6058 Date: Tue Mar 22 16:59:43 2016 -0400
6059
6060 Fix size_overflow FP reported by marcan at:
6061 https://forums.grsecurity.net/viewtopic.php?f=3&t=4426
6062
6063 net/ipv6/xfrm6_mode_transport.c | 2 +-
6064 1 file changed, 1 insertion(+), 1 deletion(-)
6065
6066 commit 523a36a9c845da3051e58c6767c2e1a0f640998a
6067 Merge: 0d0ec9e c0b77a7
6068 Author: Brad Spengler <spender@grsecurity.net>
6069 Date: Wed Mar 16 20:20:40 2016 -0400
6070
6071 Merge branch 'pax-test' into grsec-test
6072
6073 commit c0b77a7cb578199f0b7dc90768a13ca6c044aba9
6074 Merge: 10d57c1 0d19123
6075 Author: Brad Spengler <spender@grsecurity.net>
6076 Date: Wed Mar 16 20:20:27 2016 -0400
6077
6078 Merge branch 'linux-4.4.y' into pax-test
6079
6080 commit 0d0ec9ee83144ab839710a01cfd746bd78257394
6081 Author: Brad Spengler <spender@grsecurity.net>
6082 Date: Mon Mar 14 20:15:47 2016 -0400
6083
6084 Invert logic to clean up code
6085
6086 fs/namei.c | 32 +++++++-------------------------
6087 grsecurity/grsec_chroot.c | 10 +++++-----
6088 2 files changed, 12 insertions(+), 30 deletions(-)
6089
6090 commit 39e0e623c84863af7b3ace759b583ff938fde2b7
6091 Author: Brad Spengler <spender@grsecurity.net>
6092 Date: Mon Mar 14 19:59:36 2016 -0400
6093
6094 compile fix
6095
6096 fs/namei.c | 5 ++---
6097 1 file changed, 2 insertions(+), 3 deletions(-)
6098
6099 commit 2b3ad8bc095fea829275b7fcc7e5671677b8ed33
6100 Author: Brad Spengler <spender@grsecurity.net>
6101 Date: Mon Mar 14 19:57:53 2016 -0400
6102
6103 Also handle renames
6104
6105 fs/namei.c | 9 +++++++++
6106 1 file changed, 9 insertions(+)
6107
6108 commit 54dfd13b19743d4a340de0cd5683b5bde44e7d9c
6109 Author: Brad Spengler <spender@grsecurity.net>
6110 Date: Mon Mar 14 19:45:56 2016 -0400
6111
6112 Add additional check to cover lookup family of functions
6113
6114 fs/namei.c | 9 +++++++++
6115 1 file changed, 9 insertions(+)
6116
6117 commit c3df846baa7873fb99401136f220676b87452918
6118 Author: Brad Spengler <spender@grsecurity.net>
6119 Date: Mon Mar 14 18:42:37 2016 -0400
6120
6121 compile fix
6122
6123 fs/namei.c | 2 +-
6124 1 file changed, 1 insertion(+), 1 deletion(-)
6125
6126 commit 384ea9c0ef9df4298dfa3a71948c08e70f1092bf
6127 Author: Brad Spengler <spender@grsecurity.net>
6128 Date: Mon Mar 14 18:34:40 2016 -0400
6129
6130 Fix recent chroot check on the create side, as reported by
6131 Toralf Foerster
6132
6133 fs/namei.c | 26 ++++++++++++++++----------
6134 1 file changed, 16 insertions(+), 10 deletions(-)
6135
6136 commit 82e7dc61a626c47887d392ff9cd35b104f01fd25
6137 Author: Paolo Bonzini <pbonzini@redhat.com>
6138 Date: Tue Mar 8 12:13:39 2016 +0100
6139
6140 KVM: MMU: fix ept=0/pte.u=1/pte.w=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0 combo
6141
6142 Yes, all of these are needed. :) This is admittedly a bit odd, but
6143 kvm-unit-tests access.flat tests this if you run it with "-cpu host"
6144 and of course ept=0.
6145
6146 KVM runs the guest with CR0.WP=1, so it must handle supervisor writes
6147 specially when pte.u=1/pte.w=0/CR0.WP=0. Such writes cause a fault
6148 when U=1 and W=0 in the SPTE, but they must succeed because CR0.WP=0.
6149 When KVM gets the fault, it sets U=0 and W=1 in the shadow PTE and
6150 restarts execution. This will still cause a user write to fault, while
6151 supervisor writes will succeed. User reads will fault spuriously now,
6152 and KVM will then flip U and W again in the SPTE (U=1, W=0). User reads
6153 will be enabled and supervisor writes disabled, going back to the
6154 originary situation where supervisor writes fault spuriously.
6155
6156 When SMEP is in effect, however, U=0 will enable kernel execution of
6157 this page. To avoid this, KVM also sets NX=1 in the shadow PTE together
6158 with U=0. If the guest has not enabled NX, the result is a continuous
6159 stream of page faults due to the NX bit being reserved.
6160
6161 The fix is to force EFER.NX=1 even if the CPU is taking care of the EFER
6162 switch. (All machines with SMEP have the CPU_LOAD_IA32_EFER vm-entry
6163 control, so they do not use user-return notifiers for EFER---if they did,
6164 EFER.NX would be forced to the same value as the host).
6165
6166 There is another bug in the reserved bit check, which I've split to a
6167 separate patch for easier application to stable kernels.
6168
6169 Cc: stable@vger.kernel.org
6170 Cc: Andy Lutomirski <luto@amacapital.net>
6171 Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.intel.com>
6172 Fixes: f6577a5fa15d82217ca73c74cd2dcbc0f6c781dd
6173 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
6174
6175 Documentation/virtual/kvm/mmu.txt | 3 ++-
6176 arch/x86/kvm/vmx.c | 36 +++++++++++++++++++++++-------------
6177 2 files changed, 25 insertions(+), 14 deletions(-)
6178
6179 commit 802a88e57b141e9643e93afb7805813ad8da22f3
6180 Author: Paolo Bonzini <pbonzini@redhat.com>
6181 Date: Wed Mar 9 14:28:02 2016 +0100
6182
6183 KVM: MMU: fix reserved bit check for ept=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0
6184
6185 KVM has special logic to handle pages with pte.u=1 and pte.w=0 when
6186 CR0.WP=1. These pages' SPTEs flip continuously between two states:
6187 U=1/W=0 (user and supervisor reads allowed, supervisor writes not allowed)
6188 and U=0/W=1 (supervisor reads and writes allowed, user writes not allowed).
6189
6190 When SMEP is in effect, however, U=0 will enable kernel execution of
6191 this page. To avoid this, KVM also sets NX=1 in the shadow PTE together
6192 with U=0, making the two states U=1/W=0/NX=gpte.NX and U=0/W=1/NX=1.
6193 When guest EFER has the NX bit cleared, the reserved bit check thinks
6194 that the latter state is invalid; teach it that the smep_andnot_wp case
6195 will also use the NX bit of SPTEs.
6196
6197 Cc: stable@vger.kernel.org
6198 Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.inel.com>
6199 Fixes: c258b62b264fdc469b6d3610a907708068145e3b
6200 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
6201
6202 arch/x86/kvm/mmu.c | 4 +++-
6203 1 file changed, 3 insertions(+), 1 deletion(-)
6204
6205 commit 3925851224428c1d2bca32cf33821befb947c4f3
6206 Author: Ming Lei <ming.lei@canonical.com>
6207 Date: Sat Mar 12 22:56:19 2016 +0800
6208
6209 block: don't optimize for non-cloned bio in bio_get_last_bvec()
6210
6211 For !BIO_CLONED bio, we can use .bi_vcnt safely, but it
6212 doesn't mean we can just simply return .bi_io_vec[.bi_vcnt - 1]
6213 because the start postion may have been moved in the middle of
6214 the bvec, such as splitting in the middle of bvec.
6215
6216 Fixes: 7bcd79ac50d9(block: bio: introduce helpers to get the 1st and last bvec)
6217 Cc: stable@vger.kernel.org
6218 Reported-by: Kent Overstreet <kent.overstreet@gmail.com>
6219 Signed-off-by: Ming Lei <ming.lei@canonical.com>
6220 Signed-off-by: Jens Axboe <axboe@fb.com>
6221
6222 include/linux/bio.h | 5 -----
6223 1 file changed, 5 deletions(-)
6224
6225 commit db541463b4a0926bebdbac743c8736fb9e903d58
6226 Author: Borislav Petkov <bp@alien8.de>
6227 Date: Fri Mar 11 12:32:06 2016 +0100
6228
6229 x86/fpu: Fix eager-FPU handling on legacy FPU machines
6230
6231 i486 derived cores like Intel Quark support only the very old,
6232 legacy x87 FPU (FSAVE/FRSTOR, CPUID bit FXSR is not set), and
6233 our FPU code wasn't handling the saving and restoring there
6234 properly in the 'eagerfpu' case.
6235
6236 So after we made eagerfpu the default for all CPU types:
6237
6238 58122bf1d856 x86/fpu: Default eagerfpu=on on all CPUs
6239
6240 these old FPU designs broke. First, Andy Shevchenko reported a splat:
6241
6242 WARNING: CPU: 0 PID: 823 at arch/x86/include/asm/fpu/internal.h:163 fpu__clear+0x8c/0x160
6243
6244 which was us trying to execute FXRSTOR on those machines even though
6245 they don't support it.
6246
6247 After taking care of that, Bryan O'Donoghue reported that a simple FPU
6248 test still failed because we weren't initializing the FPU state properly
6249 on those machines.
6250
6251 Take care of all that.
6252
6253 Reported-and-tested-by: Bryan O'Donoghue <pure.logic@nexus-software.ie>
6254 Reported-by: Andy Shevchenko <andy.shevchenko@gmail.com>
6255 Signed-off-by: Borislav Petkov <bp@suse.de>
6256 Acked-by: Linus Torvalds <torvalds@linux-foundation.org>
6257 Cc: Andrew Morton <akpm@linux-foundation.org>
6258 Cc: Andy Lutomirski <luto@amacapital.net>
6259 Cc: Borislav Petkov <bp@alien8.de>
6260 Cc: Brian Gerst <brgerst@gmail.com>
6261 Cc: Dave Hansen <dave.hansen@linux.intel.com>
6262 Cc: Denys Vlasenko <dvlasenk@redhat.com>
6263 Cc: Fenghua Yu <fenghua.yu@intel.com>
6264 Cc: H. Peter Anvin <hpa@zytor.com>
6265 Cc: Oleg Nesterov <oleg@redhat.com>
6266 Cc: Peter Zijlstra <peterz@infradead.org>
6267 Cc: Quentin Casasnovas <quentin.casasnovas@oracle.com>
6268 Cc: Thomas Gleixner <tglx@linutronix.de>
6269 Cc: Yu-cheng <yu-cheng.yu@intel.com>
6270 Link: http://lkml.kernel.org/r/20160311113206.GD4312@pd.tnic
6271 Signed-off-by: Ingo Molnar <mingo@kernel.org>
6272
6273 arch/x86/kernel/fpu/core.c | 4 +++-
6274 arch/x86/kernel/fpu/init.c | 2 +-
6275 2 files changed, 4 insertions(+), 2 deletions(-)
6276
6277 commit 8fed14e935cb62d2d46e99793d728dc7760dcc87
6278 Author: Brad Spengler <spender@grsecurity.net>
6279 Date: Sun Mar 13 11:35:56 2016 -0400
6280
6281 Compile fixes
6282
6283 fs/namei.c | 2 +-
6284 grsecurity/grsec_chroot.c | 2 +-
6285 include/linux/grsecurity.h | 2 +-
6286 3 files changed, 3 insertions(+), 3 deletions(-)
6287
6288 commit aab25a3496c4683c5858056960010119fb7d9a5a
6289 Author: Brad Spengler <spender@grsecurity.net>
6290 Date: Sun Mar 13 10:53:59 2016 -0400
6291
6292 Use fput instead of put_filp()
6293
6294 fs/namei.c | 4 ++--
6295 1 file changed, 2 insertions(+), 2 deletions(-)
6296
6297 commit 928ddec9dfe5415dff82d941c3b3e76ee6f48761
6298 Author: Brad Spengler <spender@grsecurity.net>
6299 Date: Sun Mar 13 10:30:54 2016 -0400
6300
6301 Update MPROTECT_COMPAT config description, disable by default
6302
6303 security/Kconfig | 18 ++++++------------
6304 1 file changed, 6 insertions(+), 12 deletions(-)
6305
6306 commit 4cc29af2e81e7a4bdfab1afedfdedca6e23362d5
6307 Author: Brad Spengler <spender@grsecurity.net>
6308 Date: Sun Mar 13 10:35:55 2016 -0400
6309
6310 As reported by Jann Horn, chroot scenarios where the chrooting application
6311 brings in a directory fd can be used to access any file outside of the chroot
6312 via *at syscalls. To maintain compatibility with Chromium and other apps,
6313 we specifically only disallow relative accesses off a directory fd when the
6314 final path is not located under that directory described by the fd and exists
6315 outside of the chroot. This additional restriction will exist under the
6316 current GRKERNSEC_CHROOT_FCHDIR option.
6317
6318 fs/namei.c | 9 +++++++++
6319 grsecurity/Kconfig | 10 ++++++----
6320 grsecurity/grsec_chroot.c | 39 +++++++++++++++++++++++++++++++++++++++
6321 include/linux/grmsg.h | 1 +
6322 include/linux/grsecurity.h | 1 +
6323 5 files changed, 56 insertions(+), 4 deletions(-)
6324
6325 commit 7d02a991213f0b07a3677dcc93cdafc3ac309142
6326 Author: Brad Spengler <spender@grsecurity.net>
6327 Date: Thu Mar 10 22:17:16 2016 -0500
6328
6329 Update size_overflow hash table
6330
6331 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
6332 1 file changed, 1 insertion(+)
6333
6334 commit 29f25ddda6a5625340df26beb394279fefea2b49
6335 Author: Brad Spengler <spender@grsecurity.net>
6336 Date: Thu Mar 10 22:16:04 2016 -0500
6337
6338 Fix module support
6339
6340 kernel/module.c | 3 ++-
6341 1 file changed, 2 insertions(+), 1 deletion(-)
6342
6343 commit b057a45636b626e7eaf03077ed0916b95fea054c
6344 Merge: ba5ee94 10d57c1
6345 Author: Brad Spengler <spender@grsecurity.net>
6346 Date: Thu Mar 10 21:36:10 2016 -0500
6347
6348 Merge branch 'pax-test' into grsec-test
6349
6350 commit 10d57c107e7fabffbe616b14efab73df585576c2
6351 Merge: 1cbae46 62e2195
6352 Author: Brad Spengler <spender@grsecurity.net>
6353 Date: Thu Mar 10 21:34:58 2016 -0500
6354
6355 Update to pax-linux-4.4.5-test9.patch:
6356 - fixed an integer signedness mixup in the old select syscall caught by the size overflow plugin, by Mathias Krause <minipli@ld-linux.so>
6357 - Emese cleaned up a few unnecessary type casts in the size overflow plugin
6358 - fixed the initify plugin to not trigger a compiler assert with gcc 6 in LTO mode
6359 - compile the x86 vdso without plugins, reported by Emese
6360 - fixed a REFCOUNT/arm compile error, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4410)
6361 - fixed gcc-common.h for gcc 6, reported by psturm (https://forums.grsecurity.net/viewtopic.php?f=3&t=4394)
6362
6363 Merge branch 'linux-4.4.y' into pax-test
6364
6365 commit ba5ee94199b11c1429559a08c2158677dd8f1761
6366 Author: Brad Spengler <spender@grsecurity.net>
6367 Date: Thu Mar 3 20:20:19 2016 -0500
6368
6369 Update size_overflow hash table
6370
6371 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
6372 1 file changed, 1 insertion(+)
6373
6374 commit 50a5cd726362f0988b81a54d4c962acf8fd34a70
6375 Merge: 335c04c 1cbae46
6376 Author: Brad Spengler <spender@grsecurity.net>
6377 Date: Thu Mar 3 20:04:00 2016 -0500
6378
6379 Merge branch 'pax-test' into grsec-test
6380
6381 commit 1cbae46efa0b111ef2d46502f8d34c4c572a0e00
6382 Merge: a51cdb8 c252409
6383 Author: Brad Spengler <spender@grsecurity.net>
6384 Date: Thu Mar 3 19:57:43 2016 -0500
6385
6386 Merge branch 'linux-4.4.y' into pax-test
6387
6388 commit 335c04c8146a696a6101a9c69dbd47f11383549e
6389 Merge: 897877e a51cdb8
6390 Author: Brad Spengler <spender@grsecurity.net>
6391 Date: Tue Mar 1 17:57:24 2016 -0500
6392
6393 Merge branch 'pax-test' into grsec-test
6394
6395 commit a51cdb83569b450858737a30d2be043d87d7ddc1
6396 Author: Brad Spengler <spender@grsecurity.net>
6397 Date: Tue Mar 1 17:56:43 2016 -0500
6398
6399 Update to pax-linux-4.4.3-test6.patch:
6400 - spender fixed the cftype constification fallout, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4391)
6401 - fixed a few section mismatches on notifier_block variables
6402 - fixed a few REFCOUNT false positives found by Emese's plugin
6403 - constified hypervisor_x86
6404
6405 arch/x86/include/asm/hypervisor.h | 2 +-
6406 arch/x86/kernel/cpu/mshyperv.c | 2 +-
6407 arch/x86/kernel/cpu/vmware.c | 2 +-
6408 arch/x86/kernel/kvm.c | 2 +-
6409 drivers/lightnvm/rrpc.c | 4 ++--
6410 drivers/lightnvm/rrpc.h | 2 +-
6411 drivers/net/can/led.c | 2 +-
6412 drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +-
6413 drivers/net/ethernet/rocker/rocker.c | 4 ++--
6414 drivers/net/ipvlan/ipvlan_main.c | 6 +++---
6415 drivers/net/vrf.c | 2 +-
6416 drivers/staging/rtl8188eu/core/rtw_mlme_ext.c | 12 ++++++------
6417 drivers/staging/rtl8188eu/include/rtw_mlme_ext.h | 2 +-
6418 drivers/staging/rtl8723au/core/rtw_mlme_ext.c | 12 ++++++------
6419 drivers/staging/rtl8723au/include/drv_types.h | 2 +-
6420 drivers/staging/rtl8723au/include/rtw_mlme_ext.h | 2 +-
6421 drivers/staging/rtl8723au/include/usb_ops.h | 4 ++--
6422 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
6423 fs/proc/kcore.c | 2 +-
6424 mm/hugetlb_cgroup.c | 8 ++++----
6425 mm/mm_init.c | 2 +-
6426 mm/slub.c | 2 +-
6427 net/mac802154/iface.c | 2 +-
6428 23 files changed, 41 insertions(+), 41 deletions(-)
6429
6430 commit 897877e79629a0b854e98cb666a9d898256d45a7
6431 Merge: 1ffa5d5 4f4b213
6432 Author: Brad Spengler <spender@grsecurity.net>
6433 Date: Sun Feb 28 20:54:59 2016 -0500
6434
6435 Merge branch 'pax-test' into grsec-test
6436
6437 commit 4f4b21342a4a4f87c01f7909406e6b5f4c9dadbf
6438 Author: Brad Spengler <spender@grsecurity.net>
6439 Date: Sun Feb 28 20:54:06 2016 -0500
6440
6441 Update to pax-linux-4.4.3-test5.patch:
6442 - constified xfrm_mgr and cftype, by Mathias Krause <minipli@ld-linux.so>
6443 - Emese fixed a few checkpatch reports on the gcc plugin generator headers
6444 - Emese fixed a false positive size overflow report in get_next_ino, reported by KARBOWSKI Piotr <piotr.karbowski@gmail.com>
6445 - added a generator for SIMPLE_IPA passes as well
6446
6447 include/linux/cgroup-defs.h | 2 +-
6448 include/linux/hugetlb.h | 2 +-
6449 include/linux/hugetlb_cgroup.h | 11 ++
6450 include/net/xfrm.h | 2 +-
6451 kernel/cgroup.c | 29 ++--
6452 mm/hugetlb.c | 55 ++++++-
6453 mm/hugetlb_cgroup.c | 60 ++-----
6454 mm/mmap.c | 38 ++---
6455 net/xfrm/xfrm_state.c | 4 +-
6456 tools/gcc/constify_plugin.c | 5 +-
6457 tools/gcc/gcc-common.h | 42 +++--
6458 tools/gcc/gcc-generate-gimple-pass.h | 27 ++--
6459 tools/gcc/gcc-generate-ipa-pass.h | 43 ++---
6460 tools/gcc/gcc-generate-rtl-pass.h | 27 ++--
6461 tools/gcc/gcc-generate-simple_ipa-pass.h | 173 +++++++++++++++++++++
6462 tools/gcc/size_overflow_plugin/.gitignore | 1 +
6463 .../disable_size_overflow_hash.data | 7 +-
6464 .../size_overflow_plugin/size_overflow_hash.data | 3 -
6465 18 files changed, 385 insertions(+), 146 deletions(-)
6466
6467 commit 1ffa5d50a2161311d46b56fdef734f309503cb80
6468 Author: Brad Spengler <spender@grsecurity.net>
6469 Date: Sun Feb 28 20:43:02 2016 -0500
6470
6471 Make suid/sgid bruteforce prevention also apply to binaries with fscaps
6472 enabled
6473
6474 grsecurity/grsec_sig.c | 3 +--
6475 1 file changed, 1 insertion(+), 2 deletions(-)
6476
6477 commit cfdb373a77c88d01c1539e605e28143af5981571
6478 Author: Brad Spengler <spender@grsecurity.net>
6479 Date: Sun Feb 28 19:12:39 2016 -0500
6480
6481 compile fix
6482
6483 grsecurity/gracl_segv.c | 2 +-
6484 grsecurity/grsec_sig.c | 2 +-
6485 2 files changed, 2 insertions(+), 2 deletions(-)
6486
6487 commit 67d5160f8c1ee12ee4da1e7ad57f8688fcc77b53
6488 Author: Brad Spengler <spender@grsecurity.net>
6489 Date: Sun Feb 28 18:24:50 2016 -0500
6490
6491 Update the daemon check in handling of anti-bruteforcing of suid binaries
6492 by GRKERNSEC_BRUTE to prevent a bypass reported by Jann Horn where one
6493 could create unprivileged copies of the suid binary via ptrace, inject
6494 code into them, and fork+exec a privileged copy. A crash then in the
6495 privileged copy would trigger the daemon detection which could be avoided
6496 by simply terminating the original process. Defeat this by using our
6497 is_privileged_binary() function against the task's mm->binfmt->file to detect
6498 an fscaps-enabled or suid/sgid binary being involved.
6499
6500 Also update the RBAC RES_CRASH code to use is_privileged_binary().
6501
6502 grsecurity/gracl_segv.c | 15 +--------------
6503 grsecurity/grsec_sig.c | 3 ++-
6504 2 files changed, 3 insertions(+), 15 deletions(-)
6505
6506 commit 7382ec22b0c9627c674ccbb00210276d26f219e3
6507 Author: Brad Spengler <spender@grsecurity.net>
6508 Date: Sun Feb 28 15:06:32 2016 -0500
6509
6510 Fix a GRKERNSEC_PTRACE_READEXEC bypass reported by Jann Horn where one
6511 could dump out an unreadable suid binary by creating a script that used
6512 that binary as an interpreter.
6513
6514 fs/exec.c | 14 +++++++++-----
6515 1 file changed, 9 insertions(+), 5 deletions(-)
6516
6517 commit 3e60eddebe1c59b97c0b5432506bf8e13d84e8e6
6518 Merge: 2d35d52 8327ee6
6519 Author: Brad Spengler <spender@grsecurity.net>
6520 Date: Thu Feb 25 18:44:11 2016 -0500
6521
6522 Merge branch 'pax-test' into grsec-test
6523
6524 Conflicts:
6525 fs/proc/base.c
6526 kernel/ptrace.c
6527 mm/process_vm_access.c
6528
6529 commit 8327ee64e5e24ae6a3446dd96b95d5185f70e1f6
6530 Merge: 09d53c7 2134d97
6531 Author: Brad Spengler <spender@grsecurity.net>
6532 Date: Thu Feb 25 18:36:46 2016 -0500
6533
6534 Merge branch 'linux-4.4.y' into pax-test
6535
6536 Conflicts:
6537 mm/mmap.c
6538
6539 commit 2d35d5276f3feb0c053209f8c3a77b1f55f9d96b
6540 Author: Brad Spengler <spender@grsecurity.net>
6541 Date: Wed Feb 24 07:59:12 2016 -0500
6542
6543 Remove /proc/pid/map_files which we had previously prevented via
6544 an inverted dependency on checkpoint/restart, but clearly should have
6545 guarded independently as upstream in 4.3 enabled it regardless of checkpoint/
6546 restart support. It can be used since 4.3 as an ASLR leak under RBAC to
6547 processes of the same UID. Thanks to Mathias Krause for the report!
6548
6549 fs/proc/base.c | 2 ++
6550 1 file changed, 2 insertions(+)
6551
6552 commit e4f1e517092222aa28179b20e14c0ddfb2796049
6553 Author: Brad Spengler <spender@grsecurity.net>
6554 Date: Thu Feb 18 19:32:39 2016 -0500
6555
6556 Update size_overflow hash table
6557
6558 .../size_overflow_plugin/size_overflow_hash.data | 158 +++++++++++++++++----
6559 1 file changed, 131 insertions(+), 27 deletions(-)
6560
6561 commit d5f895ddfa903d0d70425b8c3d7ef649c7e6943b
6562 Author: Brad Spengler <spender@grsecurity.net>
6563 Date: Thu Feb 18 18:52:37 2016 -0500
6564
6565 Update size_overflow hash table
6566
6567 .../size_overflow_plugin/size_overflow_hash.data | 293 +++++++++++++++++----
6568 1 file changed, 237 insertions(+), 56 deletions(-)
6569
6570 commit 9d198df724c306c36e254fe19d0957fb608c3fa2
6571 Author: Brad Spengler <spender@grsecurity.net>
6572 Date: Thu Feb 18 18:23:03 2016 -0500
6573
6574 compile fix
6575
6576 tools/gcc/randomize_layout_plugin.c | 2 +-
6577 1 file changed, 1 insertion(+), 1 deletion(-)
6578
6579 commit 024d2af98b755712daff6ed7c49af921da4e8883
6580 Author: Brad Spengler <spender@grsecurity.net>
6581 Date: Thu Feb 18 18:19:47 2016 -0500
6582
6583 compile fix
6584
6585 tools/gcc/randomize_layout_plugin.c | 2 +-
6586 1 file changed, 1 insertion(+), 1 deletion(-)
6587
6588 commit 14a7b3bb5c3d8c6ef70c3e0842a5adc7f0f3e2c8
6589 Author: Brad Spengler <spender@grsecurity.net>
6590 Date: Thu Feb 18 18:16:32 2016 -0500
6591
6592 compile fix
6593
6594 tools/gcc/randomize_layout_plugin.c | 9 +++++----
6595 1 file changed, 5 insertions(+), 4 deletions(-)
6596
6597 commit 9b2d0ee62bc66858c274f256c0502cbcbd34b2bf
6598 Author: Brad Spengler <spender@grsecurity.net>
6599 Date: Thu Feb 18 17:54:51 2016 -0500
6600
6601 Compile fix
6602
6603 tools/gcc/randomize_layout_plugin.c | 2 +-
6604 1 file changed, 1 insertion(+), 1 deletion(-)
6605
6606 commit 13823395101c4228ecded4b624583389ee13bfb3
6607 Author: Brad Spengler <spender@grsecurity.net>
6608 Date: Thu Feb 18 17:35:21 2016 -0500
6609
6610 compile fix
6611
6612 Makefile | 5 +----
6613 1 file changed, 1 insertion(+), 4 deletions(-)
6614
6615 commit 0316a42a37e67b0bc8a545c7a8b63db2d25f1ab0
6616 Merge: 45cbb7e 09d53c7
6617 Author: Brad Spengler <spender@grsecurity.net>
6618 Date: Thu Feb 18 16:40:51 2016 -0500
6619
6620 Merge branch 'pax-test' into grsec-test
6621
6622 Conflicts:
6623 Makefile
6624 include/linux/genl_magic_struct.h
6625 scripts/mod/modpost.c
6626 tools/gcc/size_overflow_plugin/size_overflow_hash.data
6627
6628 commit 09d53c74140e87e886a28980cedbb7e771f2a356
6629 Author: Brad Spengler <spender@grsecurity.net>
6630 Date: Thu Feb 18 16:24:02 2016 -0500
6631
6632 Update to pax-linux-4.4.2-test4.patch:
6633 - fixed the initialization of ipc_namespace.shm_ctlmax to prevent the size overflow plugin from catching an integer truncation when calling shmem_kernel_file_setup, reported by Mathias Krause <minipli@ld-linux.so>
6634 - moved gcc plugin related makefile bits into a separate file, by Emese
6635 - changed modpost to report writable function pointers separately
6636 - increased the size of mem_cgroup.numainfo_events to avoid a wraparound caught by REFCOUNT, reported by alexey vlasov
6637 - reduced the size of the compat syscall entry points on amd64
6638 - fixed an integer signedness mixup in drbd caught by the size overflow plugin, reported by iamb and gaima (https://forums.grsecurity.net/viewtopic.php?f=3&t=4366)
6639 - Emese regenerated the size overflow hash table for 4.4
6640 - all plugins now use the new pass generator headers
6641
6642 Makefile | 73 +-
6643 arch/x86/entry/entry_64.S | 2 +-
6644 arch/x86/entry/entry_64_compat.S | 48 +-
6645 fs/exec.c | 3 +
6646 include/linux/genl_magic_struct.h | 4 +-
6647 include/linux/memcontrol.h | 2 +-
6648 ipc/shm.c | 2 +-
6649 mm/memcontrol.c | 6 +-
6650 scripts/Makefile.extrawarn | 4 +
6651 scripts/Makefile.gcc-plugins | 69 +
6652 scripts/mod/modpost.c | 15 +-
6653 tools/gcc/checker_plugin.c | 71 +-
6654 tools/gcc/colorize_plugin.c | 65 +-
6655 tools/gcc/constify_plugin.c | 65 +-
6656 tools/gcc/gcc-generate-gimple-pass.h | 172 +
6657 tools/gcc/gcc-generate-ipa-pass.h | 286 +
6658 tools/gcc/gcc-generate-rtl-pass.h | 172 +
6659 tools/gcc/initify_plugin.c | 74 +-
6660 tools/gcc/kallocstat_plugin.c | 65 +-
6661 tools/gcc/kernexec_plugin.c | 184 +-
6662 tools/gcc/latent_entropy_plugin.c | 71 +-
6663 tools/gcc/randomize_layout_seed.h | 1 -
6664 .../disable_size_overflow_hash.h | 152601 ------------------
6665 .../insert_size_overflow_asm.c | 71 +-
6666 .../size_overflow_plugin/intentional_overflow.c | 6 +-
6667 tools/gcc/size_overflow_plugin/size_overflow.h | 20 +-
6668 .../size_overflow_plugin/size_overflow_hash.data | 2898 +-
6669 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 94 +-
6670 .../size_overflow_plugin/size_overflow_plugin.c | 14 +-
6671 .../size_overflow_plugin/size_overflow_transform.c | 2 +-
6672 .../size_overflow_transform_core.c | 2 +-
6673 tools/gcc/stackleak_plugin.c | 132 +-
6674 tools/gcc/structleak_plugin.c | 67 +-
6675 33 files changed, 2238 insertions(+), 155123 deletions(-)
6676
6677 commit 45cbb7e015a18625dafb019246e13e8cf3a18ace
6678 Merge: 3b5448b 0c85110
6679 Author: Brad Spengler <spender@grsecurity.net>
6680 Date: Wed Feb 17 19:11:25 2016 -0500
6681
6682 Merge branch 'pax-test' into grsec-test
6683
6684 commit 0c851109f683896aaff8a310bbfa943272b47516
6685 Merge: 6cb4f49 1cb8570
6686 Author: Brad Spengler <spender@grsecurity.net>
6687 Date: Wed Feb 17 19:11:21 2016 -0500
6688
6689 Merge branch 'linux-4.4.y' into pax-test
6690
6691 commit 3b5448bd1d85025d19b2587902e4264eb212a0a3
6692 Author: Brad Spengler <spender@grsecurity.net>
6693 Date: Mon Feb 15 18:02:40 2016 -0500
6694
6695 Fix a drbd bug reported by iamb on the forums:
6696 https://forums.grsecurity.net/viewtopic.php?f=3&t=4366#p16032
6697 which caused a size_overflow report
6698
6699 include/linux/genl_magic_struct.h | 4 ++--
6700 1 file changed, 2 insertions(+), 2 deletions(-)
6701
6702 commit 061fcd0e74441189a87bfe13b55fb02b98f7d7c0
6703 Author: Brad Spengler <spender@grsecurity.net>
6704 Date: Mon Feb 15 13:20:38 2016 -0500
6705
6706 compile fix
6707
6708 drivers/staging/wilc1000/host_interface.h | 1 +
6709 1 file changed, 1 insertion(+)
6710
6711 commit 675f2dcbdd4ea3293eea9c42f0cc427b1c903fc8
6712 Author: Brad Spengler <spender@grsecurity.net>
6713 Date: Mon Feb 15 12:54:52 2016 -0500
6714
6715 Update size_overflow hash table
6716
6717 .../size_overflow_plugin/size_overflow_hash.data | 21 +++++++++++++++++----
6718 1 file changed, 17 insertions(+), 4 deletions(-)
6719
6720 commit c8c50394f0c9f2e9baaeb884a29be2057cadbf7b
6721 Author: Brad Spengler <spender@grsecurity.net>
6722 Date: Mon Feb 15 12:53:54 2016 -0500
6723
6724 compile fix
6725
6726 drivers/staging/wilc1000/wilc_spi.c | 1 -
6727 drivers/staging/wilc1000/wilc_wlan.h | 2 +-
6728 2 files changed, 1 insertion(+), 2 deletions(-)
6729
6730 commit a9dd4481db099082967585be8e153899e5fd24c7
6731 Author: Brad Spengler <spender@grsecurity.net>
6732 Date: Mon Feb 15 12:52:32 2016 -0500
6733
6734 compile fix
6735
6736 fs/proc/fd.c | 2 --
6737 1 file changed, 2 deletions(-)
6738
6739 commit 5acb4fa0063460807096429f073181d1c5a3e566
6740 Author: Brad Spengler <spender@grsecurity.net>
6741 Date: Mon Feb 15 12:32:13 2016 -0500
6742
6743 Update size_overflow hash table
6744
6745 .../size_overflow_plugin/size_overflow_hash.data | 224 +++++++++++++++++----
6746 1 file changed, 182 insertions(+), 42 deletions(-)
6747
6748 commit c0bac9ff9af7ef753740622b5736684a32b49a9f
6749 Author: Brad Spengler <spender@grsecurity.net>
6750 Date: Mon Feb 15 12:31:16 2016 -0500
6751
6752 compile fix
6753
6754 drivers/staging/wilc1000/wilc_spi.c | 1 +
6755 1 file changed, 1 insertion(+)
6756
6757 commit 2f89ebdee131f6a6c85e611e5b993d4b19bc2673
6758 Author: Brad Spengler <spender@grsecurity.net>
6759 Date: Mon Feb 15 12:28:36 2016 -0500
6760
6761 RANDSTRUCT compile fix
6762
6763 drivers/staging/wilc1000/wilc_spi.c | 32 ++++++++++++++++----------------
6764 1 file changed, 16 insertions(+), 16 deletions(-)
6765
6766 commit 693be5d7f5b783f451499bbe83162aeb0f27a09f
6767 Author: Brad Spengler <spender@grsecurity.net>
6768 Date: Mon Feb 15 12:24:49 2016 -0500
6769
6770 RANDSTRUCT compile fix
6771
6772 drivers/staging/wilc1000/wilc_sdio.c | 34 +++++++++++++++++-----------------
6773 1 file changed, 17 insertions(+), 17 deletions(-)
6774
6775 commit bdf3dcd665c1a8ef9b69ad6525760c5160ec19a2
6776 Author: Hariprasad S <hariprasad@chelsio.com>
6777 Date: Fri Dec 11 13:59:17 2015 +0530
6778
6779 iw_cxgb3: Fix incorrectly returning error on success
6780
6781 The cxgb3_*_send() functions return NET_XMIT_ values, which are
6782 positive integers values. So don't treat positive return values
6783 as an error.
6784
6785 Signed-off-by: Steve Wise <swise@opengridcomputing.com>
6786 Signed-off-by: Hariprasad Shenai <hariprasad@chelsio.com>
6787 Signed-off-by: Doug Ledford <dledford@redhat.com>
6788
6789 drivers/infiniband/hw/cxgb3/iwch_cm.c | 4 ++--
6790 1 file changed, 2 insertions(+), 2 deletions(-)
6791
6792 commit 8705fe372dc21046ca3fc55381b70cffb4c60207
6793 Author: Daniel Borkmann <daniel@iogearbox.net>
6794 Date: Wed Feb 10 16:47:11 2016 +0100
6795
6796 bpf: fix branch offset adjustment on backjumps after patching ctx expansion
6797
6798 When ctx access is used, the kernel often needs to expand/rewrite
6799 instructions, so after that patching, branch offsets have to be
6800 adjusted for both forward and backward jumps in the new eBPF program,
6801 but for backward jumps it fails to account the delta. Meaning, for
6802 example, if the expansion happens exactly on the insn that sits at
6803 the jump target, it doesn't fix up the back jump offset.
6804
6805 Analysis on what the check in adjust_branches() is currently doing:
6806
6807 /* adjust offset of jmps if necessary */
6808 if (i < pos && i + insn->off + 1 > pos)
6809 insn->off += delta;
6810 else if (i > pos && i + insn->off + 1 < pos)
6811 insn->off -= delta;
6812
6813 First condition (forward jumps):
6814
6815 Before: After:
6816
6817 insns[0] insns[0]
6818 insns[1] <--- i/insn insns[1] <--- i/insn
6819 insns[2] <--- pos insns[P] <--- pos
6820 insns[3] insns[P] `------| delta
6821 insns[4] <--- target_X insns[P] `-----|
6822 insns[5] insns[3]
6823 insns[4] <--- target_X
6824 insns[5]
6825
6826 First case is if we cross pos-boundary and the jump instruction was
6827 before pos. This is handeled correctly. I.e. if i == pos, then this
6828 would mean our jump that we currently check was the patchlet itself
6829 that we just injected. Since such patchlets are self-contained and
6830 have no awareness of any insns before or after the patched one, the
6831 delta is correctly not adjusted. Also, for the second condition in
6832 case of i + insn->off + 1 == pos, means we jump to that newly patched
6833 instruction, so no offset adjustment are needed. That part is correct.
6834
6835 Second condition (backward jumps):
6836
6837 Before: After:
6838
6839 insns[0] insns[0]
6840 insns[1] <--- target_X insns[1] <--- target_X
6841 insns[2] <--- pos <-- target_Y insns[P] <--- pos <-- target_Y
6842 insns[3] insns[P] `------| delta
6843 insns[4] <--- i/insn insns[P] `-----|
6844 insns[5] insns[3]
6845 insns[4] <--- i/insn
6846 insns[5]
6847
6848 Second interesting case is where we cross pos-boundary and the jump
6849 instruction was after pos. Backward jump with i == pos would be
6850 impossible and pose a bug somewhere in the patchlet, so the first
6851 condition checking i > pos is okay only by itself. However, i +
6852 insn->off + 1 < pos does not always work as intended to trigger the
6853 adjustment. It works when jump targets would be far off where the
6854 delta wouldn't matter. But, for example, where the fixed insn->off
6855 before pointed to pos (target_Y), it now points to pos + delta, so
6856 that additional room needs to be taken into account for the check.
6857 This means that i) both tests here need to be adjusted into pos + delta,
6858 and ii) for the second condition, the test needs to be <= as pos
6859 itself can be a target in the backjump, too.
6860
6861 Fixes: 9bac3d6d548e ("bpf: allow extended BPF programs access skb fields")
6862 Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
6863 Signed-off-by: David S. Miller <davem@davemloft.net>
6864
6865 kernel/bpf/verifier.c | 2 +-
6866 1 file changed, 1 insertion(+), 1 deletion(-)
6867
6868 commit 61b513b644116e77313addf65970db58f4981608
6869 Author: Ryan Ware <ware@linux.intel.com>
6870 Date: Thu Feb 11 15:58:44 2016 -0800
6871
6872 EVM: Use crypto_memneq() for digest comparisons
6873
6874 This patch fixes vulnerability CVE-2016-2085. The problem exists
6875 because the vm_verify_hmac() function includes a use of memcmp().
6876 Unfortunately, this allows timing side channel attacks; specifically
6877 a MAC forgery complexity drop from 2^128 to 2^12. This patch changes
6878 the memcmp() to the cryptographically safe crypto_memneq().
6879
6880 Reported-by: Xiaofei Rex Guo <xiaofei.rex.guo@intel.com>
6881 Signed-off-by: Ryan Ware <ware@linux.intel.com>
6882 Cc: stable@vger.kernel.org
6883 Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
6884 Signed-off-by: James Morris <james.l.morris@oracle.com>
6885
6886 security/integrity/evm/evm_main.c | 3 ++-
6887 1 file changed, 2 insertions(+), 1 deletion(-)
6888
6889 commit 970b961e7d0684624f9c69f0b4367d5c76b65a63
6890 Author: Michael McConville <mmcco@mykolab.com>
6891 Date: Fri Feb 5 20:46:25 2016 -0500
6892
6893 dscc4: Undefined signed int shift
6894
6895 My analysis in the below mail applies, although the second part is
6896 unnecessary because i isn't used in arithmetic operations here:
6897
6898 https://marc.info/?l=openbsd-tech&m=145377854103866&w=2
6899
6900 Thanks for your time.
6901
6902 Signed-off-by: Michael McConville <mmcco@mykolab.com>
6903 Acked-by: Francois Romieu <romieu@fr.zoreil.com>
6904 Signed-off-by: David S. Miller <davem@davemloft.net>
6905
6906 drivers/net/wan/dscc4.c | 2 +-
6907 1 file changed, 1 insertion(+), 1 deletion(-)
6908
6909 commit d843df24b6680b600e87ebfea3b7b198b90b5a2a
6910 Author: Andrey Konovalov <andreyknvl@gmail.com>
6911 Date: Sat Feb 13 11:08:06 2016 +0300
6912
6913 ALSA: usb-audio: avoid freeing umidi object twice
6914
6915 The 'umidi' object will be free'd on the error path by snd_usbmidi_free()
6916 when tearing down the rawmidi interface. So we shouldn't try to free it
6917 in snd_usbmidi_create() after having registered the rawmidi interface.
6918
6919 Found by KASAN.
6920
6921 Signed-off-by: Andrey Konovalov <andreyknvl@gmail.com>
6922 Acked-by: Clemens Ladisch <clemens@ladisch.de>
6923 Cc: <stable@vger.kernel.org>
6924 Signed-off-by: Takashi Iwai <tiwai@suse.de>
6925
6926 sound/usb/midi.c | 1 -
6927 1 file changed, 1 deletion(-)
6928
6929 commit ed3a8ab1976674d56e258da93639e61f1446e703
6930 Author: zengtao <prime.zeng@huawei.com>
6931 Date: Tue Feb 2 11:38:34 2016 +0800
6932
6933 cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
6934
6935 The datatype __kernel_time_t is u32 on 32bit platform, so its subject to
6936 overflows in the timeval/timespec to cputime conversion.
6937
6938 Currently the following functions are affected:
6939 1. setitimer()
6940 2. timer_create/timer_settime()
6941 3. sys_clock_nanosleep
6942
6943 This can happen on MIPS32 and ARM32 with "Full dynticks CPU time accounting"
6944 enabled, which is required for CONFIG_NO_HZ_FULL.
6945
6946 Enforce u64 conversion to prevent the overflow.
6947
6948 Fixes: 31c1fc818715 ("ARM: Kconfig: allow full nohz CPU accounting")
6949 Signed-off-by: zengtao <prime.zeng@huawei.com>
6950 Reviewed-by: Arnd Bergmann <arnd@arndb.de>
6951 Cc: <fweisbec@gmail.com>
6952 Cc: stable@vger.kernel.org
6953 Link: http://lkml.kernel.org/r/1454384314-154784-1-git-send-email-prime.zeng@huawei.com
6954 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
6955
6956 include/asm-generic/cputime_nsecs.h | 5 +++--
6957 1 file changed, 3 insertions(+), 2 deletions(-)
6958
6959 commit bf8a2de485da37d73850e7cfa31967b7798b6ce0
6960 Author: Brad Spengler <spender@grsecurity.net>
6961 Date: Mon Feb 15 11:55:18 2016 -0500
6962
6963 Fix building with allnoconfig, don't make our added DATA_TO_TEXT mismatch warnings
6964 count as actual mismatches
6965
6966 scripts/mod/modpost.c | 3 ++-
6967 1 file changed, 2 insertions(+), 1 deletion(-)
6968
6969 commit c9d82b6d0f1a2484fea0a516989dbdc6c55e5693
6970 Author: Brad Spengler <spender@grsecurity.net>
6971 Date: Mon Feb 15 11:44:36 2016 -0500
6972
6973 Compile fix
6974
6975 tools/gcc/randomize_layout_seed.h | 1 -
6976 1 file changed, 1 deletion(-)
6977
6978 commit fb68cbb98732e6801e8fc8d1da1f1195e51ff077
6979 Author: Brad Spengler <spender@grsecurity.net>
6980 Date: Mon Feb 15 11:27:32 2016 -0500
6981
6982 disable USELIB
6983
6984 init/Kconfig | 3 ++-
6985 1 file changed, 2 insertions(+), 1 deletion(-)
6986
6987 commit cbda9a44b7f92161eb1e444bf7fe2bbcbedaae65
6988 Author: Brad Spengler <spender@grsecurity.net>
6989 Date: Mon Feb 15 11:23:56 2016 -0500
6990
6991 compile fix
6992
6993 fs/proc/fd.c | 2 +-
6994 1 file changed, 1 insertion(+), 1 deletion(-)
6995
6996 commit 5cf0a2e87ab7105d1ba01f55f7636fa2e1fa4bb4
6997 Author: Brad Spengler <spender@grsecurity.net>
6998 Date: Mon Feb 15 11:19:26 2016 -0500
6999
7000 Initial import of grsecurity for Linux 4.4.1
7001
7002 Documentation/dontdiff | 2 +
7003 Documentation/kernel-parameters.txt | 11 +
7004 Documentation/sysctl/fs.txt | 23 +
7005 Documentation/sysctl/kernel.txt | 15 +
7006 Makefile | 18 +-
7007 arch/alpha/include/asm/cache.h | 4 +-
7008 arch/alpha/kernel/osf_sys.c | 12 +-
7009 arch/arc/Kconfig | 1 +
7010 arch/arm/Kconfig | 1 +
7011 arch/arm/Kconfig.debug | 1 +
7012 arch/arm/include/asm/thread_info.h | 7 +-
7013 arch/arm/kernel/entry-common.S | 8 +-
7014 arch/arm/kernel/process.c | 4 +-
7015 arch/arm/kernel/ptrace.c | 9 +
7016 arch/arm/kernel/traps.c | 7 +-
7017 arch/arm/mm/Kconfig | 4 +-
7018 arch/arm/mm/fault.c | 40 +-
7019 arch/arm/mm/mmap.c | 8 +-
7020 arch/arm/net/bpf_jit_32.c | 51 +-
7021 arch/arm64/Kconfig.debug | 1 +
7022 arch/avr32/include/asm/cache.h | 4 +-
7023 arch/blackfin/Kconfig.debug | 1 +
7024 arch/blackfin/include/asm/cache.h | 3 +-
7025 arch/cris/include/arch-v10/arch/cache.h | 3 +-
7026 arch/cris/include/arch-v32/arch/cache.h | 3 +-
7027 arch/frv/include/asm/cache.h | 3 +-
7028 arch/frv/mm/elf-fdpic.c | 4 +-
7029 arch/hexagon/include/asm/cache.h | 6 +-
7030 arch/ia64/Kconfig | 1 +
7031 arch/ia64/include/asm/cache.h | 3 +-
7032 arch/ia64/kernel/sys_ia64.c | 2 +
7033 arch/ia64/mm/hugetlbpage.c | 2 +
7034 arch/m32r/include/asm/cache.h | 4 +-
7035 arch/m68k/include/asm/cache.h | 4 +-
7036 arch/metag/mm/hugetlbpage.c | 1 +
7037 arch/microblaze/include/asm/cache.h | 3 +-
7038 arch/mips/Kconfig | 1 +
7039 arch/mips/include/asm/cache.h | 3 +-
7040 arch/mips/include/asm/thread_info.h | 11 +-
7041 arch/mips/kernel/irq.c | 3 +
7042 arch/mips/kernel/ptrace.c | 9 +
7043 arch/mips/mm/mmap.c | 4 +-
7044 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
7045 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
7046 arch/openrisc/include/asm/cache.h | 4 +-
7047 arch/parisc/include/asm/cache.h | 3 +
7048 arch/parisc/kernel/sys_parisc.c | 4 +
7049 arch/powerpc/Kconfig | 1 +
7050 arch/powerpc/include/asm/cache.h | 4 +-
7051 arch/powerpc/include/asm/thread_info.h | 5 +-
7052 arch/powerpc/kernel/Makefile | 2 +
7053 arch/powerpc/kernel/irq.c | 3 +
7054 arch/powerpc/kernel/process.c | 10 +-
7055 arch/powerpc/kernel/ptrace.c | 14 +
7056 arch/powerpc/kernel/traps.c | 5 +
7057 arch/powerpc/mm/slice.c | 2 +-
7058 arch/s390/Kconfig.debug | 1 +
7059 arch/s390/include/asm/cache.h | 4 +-
7060 arch/score/include/asm/cache.h | 4 +-
7061 arch/sh/include/asm/cache.h | 3 +-
7062 arch/sh/mm/mmap.c | 6 +-
7063 arch/sparc/include/asm/cache.h | 4 +-
7064 arch/sparc/include/asm/pgalloc_64.h | 1 +
7065 arch/sparc/include/asm/thread_info_64.h | 8 +-
7066 arch/sparc/kernel/process_32.c | 6 +-
7067 arch/sparc/kernel/process_64.c | 8 +-
7068 arch/sparc/kernel/ptrace_64.c | 14 +
7069 arch/sparc/kernel/sys_sparc_64.c | 8 +-
7070 arch/sparc/kernel/syscalls.S | 8 +-
7071 arch/sparc/kernel/traps_32.c | 8 +-
7072 arch/sparc/kernel/traps_64.c | 28 +-
7073 arch/sparc/kernel/unaligned_64.c | 2 +-
7074 arch/sparc/mm/fault_64.c | 2 +-
7075 arch/sparc/mm/hugetlbpage.c | 15 +-
7076 arch/tile/Kconfig | 1 +
7077 arch/tile/include/asm/cache.h | 3 +-
7078 arch/tile/mm/hugetlbpage.c | 2 +
7079 arch/um/include/asm/cache.h | 3 +-
7080 arch/unicore32/include/asm/cache.h | 6 +-
7081 arch/x86/Kconfig | 21 +
7082 arch/x86/Kconfig.debug | 2 +
7083 arch/x86/entry/common.c | 14 +
7084 arch/x86/entry/entry_32.S | 2 +-
7085 arch/x86/entry/entry_64.S | 2 +-
7086 arch/x86/ia32/ia32_aout.c | 2 +
7087 arch/x86/include/asm/floppy.h | 20 +-
7088 arch/x86/include/asm/fpu/types.h | 69 +-
7089 arch/x86/include/asm/io.h | 2 +-
7090 arch/x86/include/asm/page.h | 12 +-
7091 arch/x86/include/asm/paravirt_types.h | 23 +-
7092 arch/x86/include/asm/pgtable_types.h | 6 +-
7093 arch/x86/include/asm/processor.h | 12 +-
7094 arch/x86/include/asm/thread_info.h | 6 +-
7095 arch/x86/include/asm/uaccess.h | 2 +-
7096 arch/x86/kernel/dumpstack.c | 10 +-
7097 arch/x86/kernel/dumpstack_32.c | 2 +-
7098 arch/x86/kernel/dumpstack_64.c | 2 +-
7099 arch/x86/kernel/ioport.c | 13 +
7100 arch/x86/kernel/irq_32.c | 3 +
7101 arch/x86/kernel/irq_64.c | 4 +
7102 arch/x86/kernel/ldt.c | 18 +
7103 arch/x86/kernel/msr.c | 10 +
7104 arch/x86/kernel/ptrace.c | 14 +
7105 arch/x86/kernel/signal.c | 9 +-
7106 arch/x86/kernel/sys_i386_32.c | 9 +-
7107 arch/x86/kernel/sys_x86_64.c | 8 +-
7108 arch/x86/kernel/traps.c | 5 +
7109 arch/x86/kernel/verify_cpu.S | 1 +
7110 arch/x86/kernel/vm86_32.c | 15 +
7111 arch/x86/mm/fault.c | 12 +-
7112 arch/x86/mm/hugetlbpage.c | 15 +-
7113 arch/x86/mm/init.c | 66 +-
7114 arch/x86/mm/init_32.c | 6 +-
7115 arch/x86/mm/pageattr.c | 4 +-
7116 arch/x86/net/bpf_jit_comp.c | 4 +
7117 arch/x86/platform/efi/efi_64.c | 2 +-
7118 arch/x86/xen/Kconfig | 1 +
7119 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
7120 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
7121 crypto/scatterwalk.c | 10 +-
7122 drivers/acpi/acpica/hwxfsleep.c | 11 +-
7123 drivers/acpi/custom_method.c | 4 +
7124 drivers/block/cciss.h | 30 +-
7125 drivers/block/smart1,2.h | 40 +-
7126 drivers/cdrom/cdrom.c | 2 +-
7127 drivers/char/Kconfig | 4 +-
7128 drivers/char/genrtc.c | 1 +
7129 drivers/char/mem.c | 17 +
7130 drivers/char/random.c | 5 +-
7131 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
7132 drivers/firewire/ohci.c | 4 +
7133 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
7134 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
7135 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
7136 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
7137 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
7138 drivers/hid/hid-wiimote-debug.c | 2 +-
7139 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
7140 drivers/iommu/Kconfig | 1 +
7141 drivers/iommu/amd_iommu.c | 14 +-
7142 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
7143 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
7144 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
7145 drivers/isdn/i4l/isdn_concap.c | 6 +-
7146 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
7147 drivers/md/bcache/Kconfig | 1 +
7148 drivers/md/raid5.c | 8 +
7149 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
7150 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
7151 drivers/media/radio/radio-cadet.c | 5 +-
7152 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
7153 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
7154 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
7155 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
7156 drivers/message/fusion/mptbase.c | 9 +
7157 drivers/misc/sgi-xp/xp_main.c | 12 +-
7158 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
7159 drivers/net/ppp/pptp.c | 34 +-
7160 drivers/net/wan/lmc/lmc_media.c | 97 +-
7161 drivers/net/wan/z85230.c | 24 +-
7162 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
7163 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
7164 drivers/pci/proc.c | 9 +
7165 drivers/platform/x86/asus-wmi.c | 12 +
7166 drivers/rtc/rtc-dev.c | 3 +
7167 drivers/scsi/bfa/bfa_fcs.c | 19 +-
7168 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
7169 drivers/scsi/bfa/bfa_modules.h | 12 +-
7170 drivers/scsi/hpsa.h | 40 +-
7171 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
7172 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
7173 drivers/tty/serial/uartlite.c | 4 +-
7174 drivers/tty/sysrq.c | 2 +-
7175 drivers/tty/tty_io.c | 4 +
7176 drivers/tty/vt/keyboard.c | 22 +-
7177 drivers/uio/uio.c | 6 +-
7178 drivers/usb/core/hub.c | 5 +
7179 drivers/usb/gadget/function/f_uac1.c | 1 +
7180 drivers/usb/gadget/function/u_uac1.c | 1 +
7181 drivers/usb/host/hwa-hc.c | 9 +-
7182 drivers/usb/usbip/vhci_sysfs.c | 2 +-
7183 drivers/video/fbdev/arcfb.c | 2 +-
7184 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
7185 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
7186 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
7187 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++----
7188 drivers/xen/xenfs/xenstored.c | 5 +
7189 firmware/Makefile | 2 +
7190 firmware/WHENCE | 20 +-
7191 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
7192 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
7193 fs/attr.c | 4 +
7194 fs/autofs4/waitq.c | 9 +
7195 fs/binfmt_aout.c | 7 +
7196 fs/binfmt_elf.c | 40 +-
7197 fs/compat.c | 20 +-
7198 fs/compat_ioctl.c | 253 +-
7199 fs/coredump.c | 17 +-
7200 fs/dcache.c | 3 +
7201 fs/debugfs/inode.c | 11 +-
7202 fs/exec.c | 231 +-
7203 fs/ext2/balloc.c | 4 +-
7204 fs/ext2/super.c | 8 +-
7205 fs/ext4/balloc.c | 4 +-
7206 fs/ext4/extents.c | 2 +-
7207 fs/fcntl.c | 4 +
7208 fs/fhandle.c | 3 +-
7209 fs/file.c | 4 +
7210 fs/filesystems.c | 4 +
7211 fs/fs_struct.c | 20 +-
7212 fs/hugetlbfs/inode.c | 24 +-
7213 fs/inode.c | 8 +-
7214 fs/internal.h | 7 +
7215 fs/ioctl.c | 4 +-
7216 fs/kernfs/dir.c | 6 +
7217 fs/mount.h | 4 +-
7218 fs/namei.c | 283 +-
7219 fs/namespace.c | 24 +
7220 fs/nfsd/nfscache.c | 2 +-
7221 fs/open.c | 38 +
7222 fs/overlayfs/inode.c | 3 +
7223 fs/overlayfs/super.c | 6 +-
7224 fs/pipe.c | 49 +-
7225 fs/posix_acl.c | 15 +-
7226 fs/proc/Kconfig | 10 +-
7227 fs/proc/array.c | 69 +-
7228 fs/proc/base.c | 186 +-
7229 fs/proc/cmdline.c | 4 +
7230 fs/proc/devices.c | 4 +
7231 fs/proc/fd.c | 12 +-
7232 fs/proc/generic.c | 64 +
7233 fs/proc/inode.c | 17 +
7234 fs/proc/internal.h | 11 +-
7235 fs/proc/interrupts.c | 4 +
7236 fs/proc/kcore.c | 3 +
7237 fs/proc/namespaces.c | 4 +-
7238 fs/proc/proc_net.c | 31 +
7239 fs/proc/proc_sysctl.c | 52 +-
7240 fs/proc/root.c | 8 +
7241 fs/proc/stat.c | 69 +-
7242 fs/proc/task_mmu.c | 66 +-
7243 fs/readdir.c | 19 +
7244 fs/reiserfs/item_ops.c | 24 +-
7245 fs/reiserfs/super.c | 4 +
7246 fs/select.c | 2 +
7247 fs/seq_file.c | 30 +-
7248 fs/stat.c | 20 +-
7249 fs/sysfs/dir.c | 30 +-
7250 fs/utimes.c | 7 +
7251 fs/xattr.c | 26 +-
7252 grsecurity/Kconfig | 1203 ++++
7253 grsecurity/Makefile | 54 +
7254 grsecurity/gracl.c | 2757 +++++++++
7255 grsecurity/gracl_alloc.c | 105 +
7256 grsecurity/gracl_cap.c | 127 +
7257 grsecurity/gracl_compat.c | 269 +
7258 grsecurity/gracl_fs.c | 448 ++
7259 grsecurity/gracl_ip.c | 386 ++
7260 grsecurity/gracl_learn.c | 207 +
7261 grsecurity/gracl_policy.c | 1786 ++++++
7262 grsecurity/gracl_res.c | 68 +
7263 grsecurity/gracl_segv.c | 304 +
7264 grsecurity/gracl_shm.c | 40 +
7265 grsecurity/grsec_chdir.c | 19 +
7266 grsecurity/grsec_chroot.c | 467 ++
7267 grsecurity/grsec_disabled.c | 445 ++
7268 grsecurity/grsec_exec.c | 189 +
7269 grsecurity/grsec_fifo.c | 26 +
7270 grsecurity/grsec_fork.c | 23 +
7271 grsecurity/grsec_init.c | 294 +
7272 grsecurity/grsec_ipc.c | 48 +
7273 grsecurity/grsec_link.c | 65 +
7274 grsecurity/grsec_log.c | 340 +
7275 grsecurity/grsec_mem.c | 48 +
7276 grsecurity/grsec_mount.c | 65 +
7277 grsecurity/grsec_pax.c | 47 +
7278 grsecurity/grsec_proc.c | 20 +
7279 grsecurity/grsec_ptrace.c | 30 +
7280 grsecurity/grsec_sig.c | 245 +
7281 grsecurity/grsec_sock.c | 244 +
7282 grsecurity/grsec_sysctl.c | 497 ++
7283 grsecurity/grsec_time.c | 16 +
7284 grsecurity/grsec_tpe.c | 78 +
7285 grsecurity/grsec_tty.c | 18 +
7286 grsecurity/grsec_usb.c | 15 +
7287 grsecurity/grsum.c | 54 +
7288 include/linux/binfmts.h | 5 +-
7289 include/linux/capability.h | 13 +
7290 include/linux/compiler-gcc.h | 5 +
7291 include/linux/compiler.h | 8 +
7292 include/linux/cred.h | 8 +-
7293 include/linux/dcache.h | 5 +-
7294 include/linux/fs.h | 26 +-
7295 include/linux/fs_struct.h | 2 +-
7296 include/linux/fsnotify.h | 6 +
7297 include/linux/gracl.h | 342 ++
7298 include/linux/gracl_compat.h | 156 +
7299 include/linux/gralloc.h | 9 +
7300 include/linux/grdefs.h | 140 +
7301 include/linux/grinternal.h | 231 +
7302 include/linux/grmsg.h | 119 +
7303 include/linux/grsecurity.h | 258 +
7304 include/linux/grsock.h | 19 +
7305 include/linux/ipc.h | 2 +-
7306 include/linux/ipc_namespace.h | 2 +-
7307 include/linux/kallsyms.h | 18 +-
7308 include/linux/key-type.h | 4 +-
7309 include/linux/kmod.h | 5 +
7310 include/linux/kobject.h | 2 +-
7311 include/linux/lsm_hooks.h | 4 +-
7312 include/linux/mm.h | 12 +
7313 include/linux/mm_types.h | 4 +-
7314 include/linux/module.h | 5 +-
7315 include/linux/mount.h | 2 +-
7316 include/linux/msg.h | 2 +-
7317 include/linux/netfilter/xt_gradm.h | 9 +
7318 include/linux/path.h | 4 +-
7319 include/linux/perf_event.h | 13 +-
7320 include/linux/pid_namespace.h | 2 +-
7321 include/linux/pipe_fs_i.h | 4 +
7322 include/linux/poison.h | 2 +-
7323 include/linux/printk.h | 2 +-
7324 include/linux/proc_fs.h | 22 +-
7325 include/linux/proc_ns.h | 2 +-
7326 include/linux/ptrace.h | 24 +-
7327 include/linux/radix-tree.h | 22 +-
7328 include/linux/random.h | 2 +-
7329 include/linux/rbtree_augmented.h | 4 +-
7330 include/linux/scatterlist.h | 12 +-
7331 include/linux/sched.h | 115 +-
7332 include/linux/security.h | 1 +
7333 include/linux/sem.h | 2 +-
7334 include/linux/seq_file.h | 5 +
7335 include/linux/shm.h | 6 +-
7336 include/linux/shmem_fs.h | 5 +-
7337 include/linux/skbuff.h | 3 +
7338 include/linux/slab.h | 9 -
7339 include/linux/sysctl.h | 8 +-
7340 include/linux/thread_info.h | 6 +-
7341 include/linux/tty.h | 2 +-
7342 include/linux/tty_driver.h | 4 +-
7343 include/linux/uidgid.h | 5 +
7344 include/linux/user_namespace.h | 2 +-
7345 include/linux/utsname.h | 2 +-
7346 include/linux/vermagic.h | 16 +-
7347 include/linux/vmalloc.h | 8 +
7348 include/net/af_unix.h | 6 +-
7349 include/net/ip.h | 2 +-
7350 include/net/neighbour.h | 2 +-
7351 include/net/net_namespace.h | 2 +-
7352 include/net/netfilter/nf_conntrack_core.h | 8 +-
7353 include/net/scm.h | 1 +
7354 include/net/sock.h | 2 +-
7355 include/trace/events/fs.h | 53 +
7356 include/uapi/linux/personality.h | 1 +
7357 init/Kconfig | 2 +
7358 init/main.c | 46 +-
7359 ipc/mqueue.c | 1 +
7360 ipc/msg.c | 3 +-
7361 ipc/msgutil.c | 4 +-
7362 ipc/sem.c | 3 +-
7363 ipc/shm.c | 26 +-
7364 ipc/util.c | 6 +
7365 kernel/auditsc.c | 2 +-
7366 kernel/bpf/syscall.c | 10 +-
7367 kernel/capability.c | 41 +-
7368 kernel/cgroup.c | 5 +-
7369 kernel/compat.c | 1 +
7370 kernel/configs.c | 11 +
7371 kernel/cred.c | 112 +-
7372 kernel/events/core.c | 16 +-
7373 kernel/exit.c | 10 +-
7374 kernel/fork.c | 86 +-
7375 kernel/futex.c | 6 +-
7376 kernel/futex_compat.c | 2 +-
7377 kernel/kallsyms.c | 9 +
7378 kernel/kcmp.c | 8 +-
7379 kernel/kexec_core.c | 2 +-
7380 kernel/kmod.c | 96 +-
7381 kernel/kprobes.c | 9 +-
7382 kernel/ksysfs.c | 2 +
7383 kernel/locking/lockdep_proc.c | 10 +-
7384 kernel/module.c | 108 +-
7385 kernel/panic.c | 4 +-
7386 kernel/pid.c | 18 +-
7387 kernel/power/Kconfig | 2 +
7388 kernel/printk/printk.c | 7 +-
7389 kernel/ptrace.c | 89 +-
7390 kernel/resource.c | 10 +
7391 kernel/sched/core.c | 11 +-
7392 kernel/seccomp.c | 22 +-
7393 kernel/signal.c | 37 +-
7394 kernel/sys.c | 64 +-
7395 kernel/sysctl.c | 186 +-
7396 kernel/taskstats.c | 6 +
7397 kernel/time/posix-timers.c | 8 +
7398 kernel/time/time.c | 5 +
7399 kernel/time/timekeeping.c | 3 +
7400 kernel/time/timer_list.c | 13 +-
7401 kernel/time/timer_stats.c | 10 +-
7402 kernel/trace/Kconfig | 2 +
7403 kernel/trace/trace_syscalls.c | 8 +
7404 kernel/user_namespace.c | 15 +
7405 lib/Kconfig.debug | 13 +-
7406 lib/Kconfig.kasan | 2 +-
7407 lib/is_single_threaded.c | 3 +
7408 lib/list_debug.c | 65 +-
7409 lib/nlattr.c | 2 +
7410 lib/radix-tree.c | 12 +-
7411 lib/rbtree.c | 4 +-
7412 lib/vsprintf.c | 39 +-
7413 localversion-grsec | 1 +
7414 mm/Kconfig | 8 +-
7415 mm/Kconfig.debug | 1 +
7416 mm/filemap.c | 1 +
7417 mm/kmemleak.c | 4 +-
7418 mm/memory.c | 2 +-
7419 mm/mempolicy.c | 12 +-
7420 mm/migrate.c | 3 +-
7421 mm/mlock.c | 11 +-
7422 mm/mmap.c | 103 +-
7423 mm/mprotect.c | 8 +
7424 mm/oom_kill.c | 4 +
7425 mm/page_alloc.c | 2 +-
7426 mm/process_vm_access.c | 8 +-
7427 mm/shmem.c | 11 +-
7428 mm/slab.c | 14 +-
7429 mm/slab_common.c | 2 +-
7430 mm/slob.c | 12 +
7431 mm/slub.c | 33 +-
7432 mm/util.c | 3 +
7433 mm/vmalloc.c | 82 +-
7434 mm/vmstat.c | 29 +-
7435 net/appletalk/atalk_proc.c | 2 +-
7436 net/atm/lec.c | 6 +-
7437 net/atm/mpoa_caches.c | 42 +-
7438 net/can/bcm.c | 2 +-
7439 net/can/proc.c | 2 +-
7440 net/core/dev_ioctl.c | 7 +-
7441 net/core/filter.c | 8 +-
7442 net/core/net-procfs.c | 17 +-
7443 net/core/pktgen.c | 2 +-
7444 net/core/scm.c | 7 +
7445 net/core/sock.c | 3 +-
7446 net/core/sysctl_net_core.c | 2 +-
7447 net/decnet/dn_dev.c | 2 +-
7448 net/ipv4/Kconfig | 1 +
7449 net/ipv4/devinet.c | 6 +-
7450 net/ipv4/inet_hashtables.c | 4 +
7451 net/ipv4/ip_input.c | 7 +
7452 net/ipv4/ip_sockglue.c | 3 +-
7453 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
7454 net/ipv4/route.c | 6 +-
7455 net/ipv4/tcp_input.c | 6 +-
7456 net/ipv4/tcp_ipv4.c | 24 +-
7457 net/ipv4/tcp_minisocks.c | 9 +-
7458 net/ipv4/tcp_timer.c | 11 +
7459 net/ipv4/udp.c | 24 +
7460 net/ipv6/Kconfig | 1 +
7461 net/ipv6/addrconf.c | 13 +-
7462 net/ipv6/proc.c | 2 +-
7463 net/ipv6/tcp_ipv6.c | 23 +-
7464 net/ipv6/udp.c | 7 +
7465 net/ipx/ipx_proc.c | 2 +-
7466 net/irda/irproc.c | 2 +-
7467 net/iucv/af_iucv.c | 3 +
7468 net/llc/llc_proc.c | 2 +-
7469 net/netfilter/Kconfig | 10 +
7470 net/netfilter/Makefile | 1 +
7471 net/netfilter/nf_conntrack_core.c | 46 +-
7472 net/netfilter/nf_conntrack_helper.c | 2 +-
7473 net/netfilter/nf_conntrack_netlink.c | 2 +-
7474 net/netfilter/xt_gradm.c | 51 +
7475 net/netfilter/xt_hashlimit.c | 4 +-
7476 net/netfilter/xt_recent.c | 2 +-
7477 net/openvswitch/actions.c | 19 +-
7478 net/sctp/sm_sideeffect.c | 11 +-
7479 net/sctp/sm_statefuns.c | 17 +-
7480 net/socket.c | 75 +-
7481 net/sunrpc/Kconfig | 1 +
7482 net/sunrpc/cache.c | 2 +-
7483 net/sunrpc/stats.c | 2 +-
7484 net/sysctl_net.c | 2 +-
7485 net/unix/af_unix.c | 57 +-
7486 net/unix/garbage.c | 8 +-
7487 net/vmw_vsock/vmci_transport_notify.c | 30 +-
7488 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
7489 net/x25/sysctl_net_x25.c | 2 +-
7490 net/x25/x25_proc.c | 2 +-
7491 scripts/package/Makefile | 2 +-
7492 scripts/package/mkspec | 41 +-
7493 security/Kconfig | 369 +-
7494 security/apparmor/file.c | 4 +-
7495 security/apparmor/lsm.c | 8 +-
7496 security/commoncap.c | 36 +-
7497 security/keys/internal.h | 2 +-
7498 security/min_addr.c | 2 +
7499 security/smack/smack_lsm.c | 8 +-
7500 security/tomoyo/file.c | 12 +-
7501 security/tomoyo/mount.c | 4 +
7502 security/tomoyo/tomoyo.c | 20 +-
7503 security/yama/Kconfig | 2 +-
7504 security/yama/yama_lsm.c | 4 +-
7505 sound/core/timer.c | 4 +-
7506 sound/synth/emux/emux_seq.c | 14 +-
7507 sound/usb/line6/driver.c | 40 +-
7508 sound/usb/line6/toneport.c | 12 +-
7509 tools/gcc/.gitignore | 1 +
7510 tools/gcc/Makefile | 12 +
7511 tools/gcc/gen-random-seed.sh | 8 +
7512 tools/gcc/randomize_layout_plugin.c | 930 +++
7513 tools/gcc/size_overflow_plugin/.gitignore | 1 +
7514 .../size_overflow_plugin/size_overflow_hash.data | 463 +-
7515 513 files changed, 33007 insertions(+), 3251 deletions(-)
7516
7517 commit 6cb4f49b6a55cf16ae82685e1ab9b74c95b2f743
7518 Author: Brad Spengler <spender@grsecurity.net>
7519 Date: Mon Feb 15 10:51:41 2016 -0500
7520
7521 Initial import of pax-linux-4.4.1-test3.patch
7522
7523 Documentation/dontdiff | 46 +-
7524 Documentation/kbuild/makefiles.txt | 39 +-
7525 Documentation/kernel-parameters.txt | 28 +
7526 Makefile | 119 +-
7527 arch/alpha/include/asm/atomic.h | 10 +
7528 arch/alpha/include/asm/elf.h | 7 +
7529 arch/alpha/include/asm/pgalloc.h | 6 +
7530 arch/alpha/include/asm/pgtable.h | 11 +
7531 arch/alpha/kernel/module.c | 2 +-
7532 arch/alpha/kernel/osf_sys.c | 8 +-
7533 arch/alpha/mm/fault.c | 141 +-
7534 arch/arm/Kconfig | 3 +-
7535 arch/arm/include/asm/atomic.h | 323 +-
7536 arch/arm/include/asm/cache.h | 5 +-
7537 arch/arm/include/asm/cacheflush.h | 2 +-
7538 arch/arm/include/asm/checksum.h | 14 +-
7539 arch/arm/include/asm/cmpxchg.h | 4 +
7540 arch/arm/include/asm/cpuidle.h | 2 +-
7541 arch/arm/include/asm/domain.h | 42 +-
7542 arch/arm/include/asm/elf.h | 9 +-
7543 arch/arm/include/asm/fncpy.h | 2 +
7544 arch/arm/include/asm/futex.h | 1 +
7545 arch/arm/include/asm/kmap_types.h | 2 +-
7546 arch/arm/include/asm/mach/dma.h | 2 +-
7547 arch/arm/include/asm/mach/map.h | 16 +-
7548 arch/arm/include/asm/outercache.h | 2 +-
7549 arch/arm/include/asm/page.h | 3 +-
7550 arch/arm/include/asm/pgalloc.h | 20 +
7551 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
7552 arch/arm/include/asm/pgtable-2level.h | 3 +
7553 arch/arm/include/asm/pgtable-3level.h | 3 +
7554 arch/arm/include/asm/pgtable.h | 54 +-
7555 arch/arm/include/asm/smp.h | 2 +-
7556 arch/arm/include/asm/thread_info.h | 3 +
7557 arch/arm/include/asm/tls.h | 3 +
7558 arch/arm/include/asm/uaccess.h | 113 +-
7559 arch/arm/include/uapi/asm/ptrace.h | 2 +-
7560 arch/arm/kernel/armksyms.c | 2 +-
7561 arch/arm/kernel/cpuidle.c | 2 +-
7562 arch/arm/kernel/entry-armv.S | 109 +-
7563 arch/arm/kernel/entry-common.S | 40 +-
7564 arch/arm/kernel/entry-header.S | 55 +
7565 arch/arm/kernel/fiq.c | 3 +
7566 arch/arm/kernel/module-plts.c | 7 +-
7567 arch/arm/kernel/module.c | 38 +-
7568 arch/arm/kernel/patch.c | 2 +
7569 arch/arm/kernel/process.c | 92 +-
7570 arch/arm/kernel/reboot.c | 1 +
7571 arch/arm/kernel/setup.c | 20 +-
7572 arch/arm/kernel/signal.c | 35 +-
7573 arch/arm/kernel/smp.c | 2 +-
7574 arch/arm/kernel/tcm.c | 4 +-
7575 arch/arm/kernel/vmlinux.lds.S | 6 +-
7576 arch/arm/kvm/arm.c | 8 +-
7577 arch/arm/lib/copy_page.S | 1 +
7578 arch/arm/lib/csumpartialcopyuser.S | 4 +-
7579 arch/arm/lib/delay.c | 2 +-
7580 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
7581 arch/arm/mach-exynos/suspend.c | 6 +-
7582 arch/arm/mach-mvebu/coherency.c | 4 +-
7583 arch/arm/mach-omap2/board-n8x0.c | 2 +-
7584 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
7585 arch/arm/mach-omap2/omap-smp.c | 1 +
7586 arch/arm/mach-omap2/omap_device.c | 4 +-
7587 arch/arm/mach-omap2/omap_device.h | 4 +-
7588 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
7589 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
7590 arch/arm/mach-omap2/wd_timer.c | 6 +-
7591 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
7592 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
7593 arch/arm/mach-tegra/irq.c | 1 +
7594 arch/arm/mach-ux500/pm.c | 1 +
7595 arch/arm/mach-zynq/platsmp.c | 1 +
7596 arch/arm/mm/Kconfig | 6 +-
7597 arch/arm/mm/cache-l2x0.c | 2 +-
7598 arch/arm/mm/context.c | 10 +-
7599 arch/arm/mm/fault.c | 146 +
7600 arch/arm/mm/fault.h | 12 +
7601 arch/arm/mm/init.c | 39 +
7602 arch/arm/mm/ioremap.c | 4 +-
7603 arch/arm/mm/mmap.c | 30 +-
7604 arch/arm/mm/mmu.c | 162 +-
7605 arch/arm/net/bpf_jit_32.c | 3 +
7606 arch/arm/plat-iop/setup.c | 2 +-
7607 arch/arm/plat-omap/sram.c | 2 +
7608 arch/arm64/include/asm/atomic.h | 10 +
7609 arch/arm64/include/asm/percpu.h | 8 +-
7610 arch/arm64/include/asm/pgalloc.h | 5 +
7611 arch/arm64/include/asm/uaccess.h | 1 +
7612 arch/arm64/mm/dma-mapping.c | 2 +-
7613 arch/avr32/include/asm/elf.h | 8 +-
7614 arch/avr32/include/asm/kmap_types.h | 4 +-
7615 arch/avr32/mm/fault.c | 27 +
7616 arch/frv/include/asm/atomic.h | 10 +
7617 arch/frv/include/asm/kmap_types.h | 2 +-
7618 arch/frv/mm/elf-fdpic.c | 3 +-
7619 arch/ia64/Makefile | 1 +
7620 arch/ia64/include/asm/atomic.h | 10 +
7621 arch/ia64/include/asm/elf.h | 7 +
7622 arch/ia64/include/asm/pgalloc.h | 12 +
7623 arch/ia64/include/asm/pgtable.h | 13 +-
7624 arch/ia64/include/asm/spinlock.h | 2 +-
7625 arch/ia64/include/asm/uaccess.h | 27 +-
7626 arch/ia64/kernel/module.c | 45 +-
7627 arch/ia64/kernel/palinfo.c | 2 +-
7628 arch/ia64/kernel/sys_ia64.c | 7 +
7629 arch/ia64/kernel/vmlinux.lds.S | 2 +-
7630 arch/ia64/mm/fault.c | 32 +-
7631 arch/ia64/mm/init.c | 15 +-
7632 arch/m32r/lib/usercopy.c | 6 +
7633 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
7634 arch/mips/include/asm/atomic.h | 368 +-
7635 arch/mips/include/asm/elf.h | 7 +
7636 arch/mips/include/asm/exec.h | 2 +-
7637 arch/mips/include/asm/hw_irq.h | 2 +-
7638 arch/mips/include/asm/local.h | 57 +
7639 arch/mips/include/asm/page.h | 2 +-
7640 arch/mips/include/asm/pgalloc.h | 5 +
7641 arch/mips/include/asm/pgtable.h | 3 +
7642 arch/mips/include/asm/uaccess.h | 1 +
7643 arch/mips/kernel/binfmt_elfn32.c | 7 +
7644 arch/mips/kernel/binfmt_elfo32.c | 7 +
7645 arch/mips/kernel/irq-gt641xx.c | 2 +-
7646 arch/mips/kernel/irq.c | 6 +-
7647 arch/mips/kernel/pm-cps.c | 2 +-
7648 arch/mips/kernel/process.c | 12 -
7649 arch/mips/kernel/sync-r4k.c | 24 +-
7650 arch/mips/kernel/traps.c | 13 +-
7651 arch/mips/mm/fault.c | 25 +
7652 arch/mips/mm/mmap.c | 51 +-
7653 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
7654 arch/mips/sni/rm200.c | 2 +-
7655 arch/mips/vr41xx/common/icu.c | 2 +-
7656 arch/mips/vr41xx/common/irq.c | 4 +-
7657 arch/parisc/include/asm/atomic.h | 10 +
7658 arch/parisc/include/asm/elf.h | 7 +
7659 arch/parisc/include/asm/pgalloc.h | 6 +
7660 arch/parisc/include/asm/pgtable.h | 11 +
7661 arch/parisc/include/asm/uaccess.h | 4 +-
7662 arch/parisc/kernel/module.c | 50 +-
7663 arch/parisc/kernel/sys_parisc.c | 15 +
7664 arch/parisc/kernel/traps.c | 4 +-
7665 arch/parisc/mm/fault.c | 140 +-
7666 arch/powerpc/include/asm/atomic.h | 329 +-
7667 arch/powerpc/include/asm/elf.h | 12 +
7668 arch/powerpc/include/asm/exec.h | 2 +-
7669 arch/powerpc/include/asm/kmap_types.h | 2 +-
7670 arch/powerpc/include/asm/local.h | 46 +
7671 arch/powerpc/include/asm/mman.h | 2 +-
7672 arch/powerpc/include/asm/page.h | 8 +-
7673 arch/powerpc/include/asm/page_64.h | 7 +-
7674 arch/powerpc/include/asm/pgalloc-64.h | 7 +
7675 arch/powerpc/include/asm/pgtable.h | 1 +
7676 arch/powerpc/include/asm/pte-hash32.h | 1 +
7677 arch/powerpc/include/asm/reg.h | 1 +
7678 arch/powerpc/include/asm/smp.h | 2 +-
7679 arch/powerpc/include/asm/spinlock.h | 42 +-
7680 arch/powerpc/include/asm/uaccess.h | 141 +-
7681 arch/powerpc/kernel/Makefile | 5 +
7682 arch/powerpc/kernel/exceptions-64e.S | 4 +-
7683 arch/powerpc/kernel/exceptions-64s.S | 2 +-
7684 arch/powerpc/kernel/module_32.c | 15 +-
7685 arch/powerpc/kernel/process.c | 46 -
7686 arch/powerpc/kernel/signal_32.c | 2 +-
7687 arch/powerpc/kernel/signal_64.c | 2 +-
7688 arch/powerpc/kernel/traps.c | 21 +
7689 arch/powerpc/kernel/vdso.c | 5 +-
7690 arch/powerpc/lib/usercopy_64.c | 18 -
7691 arch/powerpc/mm/fault.c | 56 +-
7692 arch/powerpc/mm/mmap.c | 16 +
7693 arch/powerpc/mm/slice.c | 13 +-
7694 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
7695 arch/s390/include/asm/atomic.h | 10 +
7696 arch/s390/include/asm/elf.h | 7 +
7697 arch/s390/include/asm/exec.h | 2 +-
7698 arch/s390/include/asm/uaccess.h | 13 +-
7699 arch/s390/kernel/module.c | 22 +-
7700 arch/s390/kernel/process.c | 20 -
7701 arch/s390/mm/mmap.c | 16 +
7702 arch/score/include/asm/exec.h | 2 +-
7703 arch/score/kernel/process.c | 5 -
7704 arch/sh/mm/mmap.c | 22 +-
7705 arch/sparc/include/asm/atomic_64.h | 110 +-
7706 arch/sparc/include/asm/cache.h | 2 +-
7707 arch/sparc/include/asm/elf_32.h | 7 +
7708 arch/sparc/include/asm/elf_64.h | 7 +
7709 arch/sparc/include/asm/pgalloc_32.h | 1 +
7710 arch/sparc/include/asm/pgalloc_64.h | 1 +
7711 arch/sparc/include/asm/pgtable.h | 4 +
7712 arch/sparc/include/asm/pgtable_32.h | 15 +-
7713 arch/sparc/include/asm/pgtsrmmu.h | 5 +
7714 arch/sparc/include/asm/setup.h | 4 +-
7715 arch/sparc/include/asm/spinlock_64.h | 35 +-
7716 arch/sparc/include/asm/thread_info_32.h | 1 +
7717 arch/sparc/include/asm/thread_info_64.h | 2 +
7718 arch/sparc/include/asm/uaccess.h | 1 +
7719 arch/sparc/include/asm/uaccess_32.h | 28 +-
7720 arch/sparc/include/asm/uaccess_64.h | 24 +-
7721 arch/sparc/kernel/Makefile | 2 +-
7722 arch/sparc/kernel/prom_common.c | 2 +-
7723 arch/sparc/kernel/smp_64.c | 8 +-
7724 arch/sparc/kernel/sys_sparc_32.c | 2 +-
7725 arch/sparc/kernel/sys_sparc_64.c | 52 +-
7726 arch/sparc/kernel/traps_64.c | 27 +-
7727 arch/sparc/lib/Makefile | 2 +-
7728 arch/sparc/lib/atomic_64.S | 57 +-
7729 arch/sparc/lib/ksyms.c | 6 +-
7730 arch/sparc/mm/Makefile | 2 +-
7731 arch/sparc/mm/fault_32.c | 292 +
7732 arch/sparc/mm/fault_64.c | 486 +
7733 arch/sparc/mm/hugetlbpage.c | 22 +-
7734 arch/sparc/mm/init_64.c | 10 +-
7735 arch/tile/include/asm/atomic_64.h | 10 +
7736 arch/tile/include/asm/uaccess.h | 4 +-
7737 arch/um/Makefile | 4 +
7738 arch/um/include/asm/kmap_types.h | 2 +-
7739 arch/um/include/asm/page.h | 3 +
7740 arch/um/include/asm/pgtable-3level.h | 1 +
7741 arch/um/kernel/process.c | 16 -
7742 arch/x86/Kconfig | 26 +-
7743 arch/x86/Kconfig.cpu | 6 +-
7744 arch/x86/Kconfig.debug | 4 +-
7745 arch/x86/Makefile | 13 +-
7746 arch/x86/boot/Makefile | 3 +
7747 arch/x86/boot/bitops.h | 4 +-
7748 arch/x86/boot/boot.h | 2 +-
7749 arch/x86/boot/compressed/Makefile | 3 +
7750 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
7751 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
7752 arch/x86/boot/compressed/head_32.S | 4 +-
7753 arch/x86/boot/compressed/head_64.S | 12 +-
7754 arch/x86/boot/compressed/misc.c | 11 +-
7755 arch/x86/boot/cpucheck.c | 16 +-
7756 arch/x86/boot/header.S | 6 +-
7757 arch/x86/boot/memory.c | 2 +-
7758 arch/x86/boot/video-vesa.c | 1 +
7759 arch/x86/boot/video.c | 2 +-
7760 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
7761 arch/x86/crypto/aesni-intel_asm.S | 106 +-
7762 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
7763 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
7764 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
7765 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
7766 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
7767 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
7768 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 2 +
7769 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
7770 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
7771 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
7772 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
7773 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
7774 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
7775 arch/x86/crypto/sha256-avx-asm.S | 2 +
7776 arch/x86/crypto/sha256-avx2-asm.S | 2 +
7777 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
7778 arch/x86/crypto/sha512-avx-asm.S | 2 +
7779 arch/x86/crypto/sha512-avx2-asm.S | 2 +
7780 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
7781 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
7782 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
7783 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
7784 arch/x86/entry/calling.h | 86 +-
7785 arch/x86/entry/common.c | 28 +-
7786 arch/x86/entry/entry_32.S | 311 +-
7787 arch/x86/entry/entry_64.S | 625 +-
7788 arch/x86/entry/entry_64_compat.S | 67 +-
7789 arch/x86/entry/thunk_64.S | 2 +
7790 arch/x86/entry/vdso/Makefile | 2 +-
7791 arch/x86/entry/vdso/vdso2c.h | 8 +-
7792 arch/x86/entry/vdso/vma.c | 37 +-
7793 arch/x86/entry/vsyscall/vsyscall_64.c | 20 +-
7794 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
7795 arch/x86/ia32/ia32_signal.c | 23 +-
7796 arch/x86/ia32/sys_ia32.c | 42 +-
7797 arch/x86/include/asm/alternative-asm.h | 43 +-
7798 arch/x86/include/asm/alternative.h | 4 +-
7799 arch/x86/include/asm/apic.h | 2 +-
7800 arch/x86/include/asm/apm.h | 4 +-
7801 arch/x86/include/asm/atomic.h | 230 +-
7802 arch/x86/include/asm/atomic64_32.h | 100 +
7803 arch/x86/include/asm/atomic64_64.h | 164 +-
7804 arch/x86/include/asm/bitops.h | 18 +-
7805 arch/x86/include/asm/boot.h | 2 +-
7806 arch/x86/include/asm/cache.h | 5 +-
7807 arch/x86/include/asm/checksum_32.h | 12 +-
7808 arch/x86/include/asm/cmpxchg.h | 39 +
7809 arch/x86/include/asm/compat.h | 4 +
7810 arch/x86/include/asm/cpufeature.h | 17 +-
7811 arch/x86/include/asm/desc.h | 78 +-
7812 arch/x86/include/asm/desc_defs.h | 6 +
7813 arch/x86/include/asm/div64.h | 2 +-
7814 arch/x86/include/asm/dma.h | 2 +
7815 arch/x86/include/asm/elf.h | 33 +-
7816 arch/x86/include/asm/emergency-restart.h | 2 +-
7817 arch/x86/include/asm/fpu/internal.h | 42 +-
7818 arch/x86/include/asm/fpu/types.h | 5 +-
7819 arch/x86/include/asm/futex.h | 14 +-
7820 arch/x86/include/asm/hw_irq.h | 4 +-
7821 arch/x86/include/asm/i8259.h | 2 +-
7822 arch/x86/include/asm/io.h | 22 +-
7823 arch/x86/include/asm/irqflags.h | 5 +
7824 arch/x86/include/asm/kprobes.h | 9 +-
7825 arch/x86/include/asm/local.h | 106 +-
7826 arch/x86/include/asm/mman.h | 15 +
7827 arch/x86/include/asm/mmu.h | 14 +-
7828 arch/x86/include/asm/mmu_context.h | 133 +-
7829 arch/x86/include/asm/module.h | 17 +-
7830 arch/x86/include/asm/nmi.h | 19 +-
7831 arch/x86/include/asm/page.h | 1 +
7832 arch/x86/include/asm/page_32.h | 12 +-
7833 arch/x86/include/asm/page_64.h | 14 +-
7834 arch/x86/include/asm/paravirt.h | 46 +-
7835 arch/x86/include/asm/paravirt_types.h | 15 +-
7836 arch/x86/include/asm/pgalloc.h | 23 +
7837 arch/x86/include/asm/pgtable-2level.h | 2 +
7838 arch/x86/include/asm/pgtable-3level.h | 7 +
7839 arch/x86/include/asm/pgtable.h | 126 +-
7840 arch/x86/include/asm/pgtable_32.h | 14 +-
7841 arch/x86/include/asm/pgtable_32_types.h | 24 +-
7842 arch/x86/include/asm/pgtable_64.h | 23 +-
7843 arch/x86/include/asm/pgtable_64_types.h | 5 +
7844 arch/x86/include/asm/pgtable_types.h | 26 +-
7845 arch/x86/include/asm/pmem.h | 2 +-
7846 arch/x86/include/asm/preempt.h | 2 +-
7847 arch/x86/include/asm/processor.h | 57 +-
7848 arch/x86/include/asm/ptrace.h | 15 +-
7849 arch/x86/include/asm/realmode.h | 4 +-
7850 arch/x86/include/asm/reboot.h | 10 +-
7851 arch/x86/include/asm/rmwcc.h | 84 +-
7852 arch/x86/include/asm/rwsem.h | 60 +-
7853 arch/x86/include/asm/segment.h | 27 +-
7854 arch/x86/include/asm/smap.h | 43 +
7855 arch/x86/include/asm/smp.h | 14 +-
7856 arch/x86/include/asm/stackprotector.h | 4 +-
7857 arch/x86/include/asm/stacktrace.h | 34 +-
7858 arch/x86/include/asm/switch_to.h | 4 +-
7859 arch/x86/include/asm/sys_ia32.h | 6 +-
7860 arch/x86/include/asm/thread_info.h | 27 +-
7861 arch/x86/include/asm/tlbflush.h | 77 +-
7862 arch/x86/include/asm/uaccess.h | 210 +-
7863 arch/x86/include/asm/uaccess_32.h | 28 +-
7864 arch/x86/include/asm/uaccess_64.h | 169 +-
7865 arch/x86/include/asm/word-at-a-time.h | 2 +-
7866 arch/x86/include/asm/x86_init.h | 10 +-
7867 arch/x86/include/asm/xen/page.h | 2 +-
7868 arch/x86/include/uapi/asm/e820.h | 2 +-
7869 arch/x86/kernel/Makefile | 2 +-
7870 arch/x86/kernel/acpi/boot.c | 4 +-
7871 arch/x86/kernel/acpi/sleep.c | 4 +
7872 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
7873 arch/x86/kernel/alternative.c | 124 +-
7874 arch/x86/kernel/apic/apic.c | 4 +-
7875 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
7876 arch/x86/kernel/apic/apic_noop.c | 2 +-
7877 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
7878 arch/x86/kernel/apic/io_apic.c | 8 +-
7879 arch/x86/kernel/apic/msi.c | 2 +-
7880 arch/x86/kernel/apic/probe_32.c | 4 +-
7881 arch/x86/kernel/apic/vector.c | 2 +
7882 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
7883 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
7884 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
7885 arch/x86/kernel/apm_32.c | 21 +-
7886 arch/x86/kernel/asm-offsets.c | 20 +
7887 arch/x86/kernel/asm-offsets_64.c | 1 +
7888 arch/x86/kernel/cpu/Makefile | 4 -
7889 arch/x86/kernel/cpu/amd.c | 2 +-
7890 arch/x86/kernel/cpu/bugs_64.c | 2 +
7891 arch/x86/kernel/cpu/common.c | 202 +-
7892 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
7893 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
7894 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
7895 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
7896 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
7897 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
7898 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
7899 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
7900 arch/x86/kernel/cpu/perf_event.c | 10 +-
7901 arch/x86/kernel/cpu/perf_event.h | 2 +-
7902 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
7903 arch/x86/kernel/cpu/perf_event_intel.c | 34 +-
7904 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
7905 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
7906 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
7907 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
7908 arch/x86/kernel/cpu/perf_event_intel_pt.c | 42 +-
7909 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
7910 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
7911 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
7912 arch/x86/kernel/crash_dump_64.c | 2 +-
7913 arch/x86/kernel/doublefault.c | 8 +-
7914 arch/x86/kernel/dumpstack.c | 24 +-
7915 arch/x86/kernel/dumpstack_32.c | 25 +-
7916 arch/x86/kernel/dumpstack_64.c | 62 +-
7917 arch/x86/kernel/e820.c | 4 +-
7918 arch/x86/kernel/early_printk.c | 1 +
7919 arch/x86/kernel/espfix_64.c | 44 +-
7920 arch/x86/kernel/fpu/core.c | 24 +-
7921 arch/x86/kernel/fpu/init.c | 40 +-
7922 arch/x86/kernel/fpu/regset.c | 22 +-
7923 arch/x86/kernel/fpu/signal.c | 20 +-
7924 arch/x86/kernel/fpu/xstate.c | 6 +-
7925 arch/x86/kernel/ftrace.c | 18 +-
7926 arch/x86/kernel/head64.c | 14 +-
7927 arch/x86/kernel/head_32.S | 235 +-
7928 arch/x86/kernel/head_64.S | 173 +-
7929 arch/x86/kernel/i386_ksyms_32.c | 12 +
7930 arch/x86/kernel/i8259.c | 10 +-
7931 arch/x86/kernel/io_delay.c | 2 +-
7932 arch/x86/kernel/ioport.c | 2 +-
7933 arch/x86/kernel/irq.c | 8 +-
7934 arch/x86/kernel/irq_32.c | 45 +-
7935 arch/x86/kernel/jump_label.c | 10 +-
7936 arch/x86/kernel/kgdb.c | 21 +-
7937 arch/x86/kernel/kprobes/core.c | 28 +-
7938 arch/x86/kernel/kprobes/opt.c | 16 +-
7939 arch/x86/kernel/ksysfs.c | 2 +-
7940 arch/x86/kernel/kvmclock.c | 20 +-
7941 arch/x86/kernel/ldt.c | 25 +
7942 arch/x86/kernel/livepatch.c | 11 +-
7943 arch/x86/kernel/machine_kexec_32.c | 6 +-
7944 arch/x86/kernel/mcount_64.S | 19 +-
7945 arch/x86/kernel/module.c | 78 +-
7946 arch/x86/kernel/msr.c | 2 +-
7947 arch/x86/kernel/nmi.c | 34 +-
7948 arch/x86/kernel/nmi_selftest.c | 4 +-
7949 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
7950 arch/x86/kernel/paravirt.c | 45 +-
7951 arch/x86/kernel/paravirt_patch_64.c | 8 +
7952 arch/x86/kernel/pci-calgary_64.c | 2 +-
7953 arch/x86/kernel/pci-iommu_table.c | 2 +-
7954 arch/x86/kernel/pci-swiotlb.c | 2 +-
7955 arch/x86/kernel/process.c | 80 +-
7956 arch/x86/kernel/process_32.c | 29 +-
7957 arch/x86/kernel/process_64.c | 14 +-
7958 arch/x86/kernel/ptrace.c | 20 +-
7959 arch/x86/kernel/pvclock.c | 8 +-
7960 arch/x86/kernel/reboot.c | 44 +-
7961 arch/x86/kernel/reboot_fixups_32.c | 2 +-
7962 arch/x86/kernel/relocate_kernel_64.S | 3 +-
7963 arch/x86/kernel/setup.c | 29 +-
7964 arch/x86/kernel/setup_percpu.c | 29 +-
7965 arch/x86/kernel/signal.c | 17 +-
7966 arch/x86/kernel/smp.c | 2 +-
7967 arch/x86/kernel/smpboot.c | 29 +-
7968 arch/x86/kernel/step.c | 6 +-
7969 arch/x86/kernel/sys_i386_32.c | 184 +
7970 arch/x86/kernel/sys_x86_64.c | 22 +-
7971 arch/x86/kernel/tboot.c | 22 +-
7972 arch/x86/kernel/time.c | 8 +-
7973 arch/x86/kernel/tls.c | 7 +-
7974 arch/x86/kernel/tracepoint.c | 4 +-
7975 arch/x86/kernel/traps.c | 53 +-
7976 arch/x86/kernel/tsc.c | 2 +-
7977 arch/x86/kernel/uprobes.c | 4 +-
7978 arch/x86/kernel/vm86_32.c | 6 +-
7979 arch/x86/kernel/vmlinux.lds.S | 153 +-
7980 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
7981 arch/x86/kernel/x86_init.c | 6 +-
7982 arch/x86/kvm/cpuid.c | 21 +-
7983 arch/x86/kvm/emulate.c | 6 +-
7984 arch/x86/kvm/i8259.c | 10 +-
7985 arch/x86/kvm/ioapic.c | 2 +
7986 arch/x86/kvm/lapic.c | 2 +-
7987 arch/x86/kvm/paging_tmpl.h | 2 +-
7988 arch/x86/kvm/svm.c | 10 +-
7989 arch/x86/kvm/vmx.c | 62 +-
7990 arch/x86/kvm/x86.c | 44 +-
7991 arch/x86/lguest/boot.c | 3 +-
7992 arch/x86/lib/atomic64_386_32.S | 164 +
7993 arch/x86/lib/atomic64_cx8_32.S | 98 +-
7994 arch/x86/lib/checksum_32.S | 99 +-
7995 arch/x86/lib/clear_page_64.S | 3 +
7996 arch/x86/lib/cmpxchg16b_emu.S | 3 +
7997 arch/x86/lib/copy_page_64.S | 14 +-
7998 arch/x86/lib/copy_user_64.S | 66 +-
7999 arch/x86/lib/csum-copy_64.S | 14 +-
8000 arch/x86/lib/csum-wrappers_64.c | 8 +-
8001 arch/x86/lib/getuser.S | 74 +-
8002 arch/x86/lib/insn.c | 8 +-
8003 arch/x86/lib/iomap_copy_64.S | 2 +
8004 arch/x86/lib/memcpy_64.S | 6 +
8005 arch/x86/lib/memmove_64.S | 3 +-
8006 arch/x86/lib/memset_64.S | 3 +
8007 arch/x86/lib/mmx_32.c | 243 +-
8008 arch/x86/lib/msr-reg.S | 2 +
8009 arch/x86/lib/putuser.S | 87 +-
8010 arch/x86/lib/rwsem.S | 6 +-
8011 arch/x86/lib/usercopy_32.c | 359 +-
8012 arch/x86/lib/usercopy_64.c | 22 +-
8013 arch/x86/math-emu/fpu_aux.c | 2 +-
8014 arch/x86/math-emu/fpu_entry.c | 4 +-
8015 arch/x86/math-emu/fpu_system.h | 2 +-
8016 arch/x86/mm/Makefile | 4 +
8017 arch/x86/mm/extable.c | 26 +-
8018 arch/x86/mm/fault.c | 570 +-
8019 arch/x86/mm/gup.c | 6 +-
8020 arch/x86/mm/highmem_32.c | 6 +
8021 arch/x86/mm/hugetlbpage.c | 24 +-
8022 arch/x86/mm/init.c | 111 +-
8023 arch/x86/mm/init_32.c | 111 +-
8024 arch/x86/mm/init_64.c | 46 +-
8025 arch/x86/mm/iomap_32.c | 4 +
8026 arch/x86/mm/ioremap.c | 52 +-
8027 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
8028 arch/x86/mm/mmap.c | 40 +-
8029 arch/x86/mm/mmio-mod.c | 10 +-
8030 arch/x86/mm/mpx.c | 6 +-
8031 arch/x86/mm/numa.c | 4 +-
8032 arch/x86/mm/pageattr.c | 42 +-
8033 arch/x86/mm/pat.c | 12 +-
8034 arch/x86/mm/pat_rbtree.c | 2 +-
8035 arch/x86/mm/pf_in.c | 10 +-
8036 arch/x86/mm/pgtable.c | 214 +-
8037 arch/x86/mm/pgtable_32.c | 3 +
8038 arch/x86/mm/setup_nx.c | 7 +
8039 arch/x86/mm/tlb.c | 4 +
8040 arch/x86/mm/uderef_64.c | 37 +
8041 arch/x86/net/bpf_jit.S | 11 +
8042 arch/x86/net/bpf_jit_comp.c | 13 +-
8043 arch/x86/oprofile/backtrace.c | 6 +-
8044 arch/x86/oprofile/nmi_int.c | 8 +-
8045 arch/x86/oprofile/op_model_amd.c | 8 +-
8046 arch/x86/oprofile/op_model_ppro.c | 7 +-
8047 arch/x86/oprofile/op_x86_model.h | 2 +-
8048 arch/x86/pci/intel_mid_pci.c | 2 +-
8049 arch/x86/pci/irq.c | 8 +-
8050 arch/x86/pci/pcbios.c | 144 +-
8051 arch/x86/platform/efi/efi_32.c | 24 +
8052 arch/x86/platform/efi/efi_64.c | 26 +-
8053 arch/x86/platform/efi/efi_stub_32.S | 64 +-
8054 arch/x86/platform/efi/efi_stub_64.S | 2 +
8055 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
8056 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
8057 arch/x86/platform/intel-mid/mfld.c | 4 +-
8058 arch/x86/platform/intel-mid/mrfl.c | 2 +-
8059 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
8060 arch/x86/platform/olpc/olpc_dt.c | 2 +-
8061 arch/x86/power/cpu.c | 11 +-
8062 arch/x86/realmode/init.c | 10 +-
8063 arch/x86/realmode/rm/Makefile | 3 +
8064 arch/x86/realmode/rm/header.S | 4 +-
8065 arch/x86/realmode/rm/reboot.S | 4 +
8066 arch/x86/realmode/rm/trampoline_32.S | 12 +-
8067 arch/x86/realmode/rm/trampoline_64.S | 3 +-
8068 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
8069 arch/x86/tools/Makefile | 2 +-
8070 arch/x86/tools/relocs.c | 96 +-
8071 arch/x86/um/mem_32.c | 2 +-
8072 arch/x86/um/tls_32.c | 2 +-
8073 arch/x86/xen/enlighten.c | 50 +-
8074 arch/x86/xen/mmu.c | 19 +-
8075 arch/x86/xen/smp.c | 16 +-
8076 arch/x86/xen/xen-asm_32.S | 2 +-
8077 arch/x86/xen/xen-head.S | 11 +
8078 arch/x86/xen/xen-ops.h | 2 -
8079 block/bio.c | 4 +-
8080 block/blk-cgroup.c | 18 +-
8081 block/blk-iopoll.c | 2 +-
8082 block/blk-map.c | 2 +-
8083 block/blk-softirq.c | 2 +-
8084 block/bsg.c | 12 +-
8085 block/cfq-iosched.c | 4 +-
8086 block/compat_ioctl.c | 4 +-
8087 block/genhd.c | 9 +-
8088 block/partitions/efi.c | 8 +-
8089 block/scsi_ioctl.c | 29 +-
8090 crypto/cryptd.c | 4 +-
8091 crypto/crypto_user.c | 8 +-
8092 crypto/pcrypt.c | 2 +-
8093 crypto/zlib.c | 12 +-
8094 drivers/acpi/acpi_video.c | 2 +-
8095 drivers/acpi/apei/apei-internal.h | 2 +-
8096 drivers/acpi/apei/ghes.c | 10 +-
8097 drivers/acpi/bgrt.c | 6 +-
8098 drivers/acpi/blacklist.c | 4 +-
8099 drivers/acpi/bus.c | 4 +-
8100 drivers/acpi/device_pm.c | 4 +-
8101 drivers/acpi/ec.c | 2 +-
8102 drivers/acpi/pci_slot.c | 2 +-
8103 drivers/acpi/processor_idle.c | 2 +-
8104 drivers/acpi/processor_pdc.c | 2 +-
8105 drivers/acpi/sleep.c | 2 +-
8106 drivers/acpi/sysfs.c | 4 +-
8107 drivers/acpi/thermal.c | 2 +-
8108 drivers/acpi/video_detect.c | 7 +-
8109 drivers/ata/libata-core.c | 12 +-
8110 drivers/ata/libata-scsi.c | 2 +-
8111 drivers/ata/libata.h | 2 +-
8112 drivers/ata/pata_arasan_cf.c | 4 +-
8113 drivers/atm/adummy.c | 2 +-
8114 drivers/atm/ambassador.c | 8 +-
8115 drivers/atm/atmtcp.c | 14 +-
8116 drivers/atm/eni.c | 10 +-
8117 drivers/atm/firestream.c | 8 +-
8118 drivers/atm/fore200e.c | 14 +-
8119 drivers/atm/he.c | 18 +-
8120 drivers/atm/horizon.c | 4 +-
8121 drivers/atm/idt77252.c | 36 +-
8122 drivers/atm/iphase.c | 34 +-
8123 drivers/atm/lanai.c | 12 +-
8124 drivers/atm/nicstar.c | 46 +-
8125 drivers/atm/solos-pci.c | 4 +-
8126 drivers/atm/suni.c | 4 +-
8127 drivers/atm/uPD98402.c | 16 +-
8128 drivers/atm/zatm.c | 6 +-
8129 drivers/base/bus.c | 4 +-
8130 drivers/base/devres.c | 4 +-
8131 drivers/base/devtmpfs.c | 8 +-
8132 drivers/base/node.c | 2 +-
8133 drivers/base/platform-msi.c | 20 +-
8134 drivers/base/power/domain.c | 7 +-
8135 drivers/base/power/runtime.c | 6 +-
8136 drivers/base/power/sysfs.c | 2 +-
8137 drivers/base/power/wakeup.c | 8 +-
8138 drivers/base/regmap/regmap-debugfs.c | 4 +-
8139 drivers/base/regmap/regmap.c | 4 +-
8140 drivers/base/syscore.c | 4 +-
8141 drivers/block/cciss.c | 28 +-
8142 drivers/block/cciss.h | 2 +-
8143 drivers/block/cpqarray.c | 28 +-
8144 drivers/block/cpqarray.h | 2 +-
8145 drivers/block/drbd/drbd_bitmap.c | 2 +-
8146 drivers/block/drbd/drbd_int.h | 8 +-
8147 drivers/block/drbd/drbd_main.c | 12 +-
8148 drivers/block/drbd/drbd_nl.c | 4 +-
8149 drivers/block/drbd/drbd_receiver.c | 38 +-
8150 drivers/block/drbd/drbd_worker.c | 14 +-
8151 drivers/block/pktcdvd.c | 4 +-
8152 drivers/block/rbd.c | 2 +-
8153 drivers/bluetooth/btwilink.c | 2 +-
8154 drivers/bus/arm-cci.c | 12 +-
8155 drivers/cdrom/cdrom.c | 11 +-
8156 drivers/cdrom/gdrom.c | 1 -
8157 drivers/char/agp/compat_ioctl.c | 2 +-
8158 drivers/char/agp/frontend.c | 4 +-
8159 drivers/char/agp/intel-gtt.c | 4 +-
8160 drivers/char/hpet.c | 2 +-
8161 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
8162 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
8163 drivers/char/ipmi/ipmi_ssif.c | 12 +-
8164 drivers/char/mem.c | 47 +-
8165 drivers/char/nvram.c | 2 +-
8166 drivers/char/pcmcia/synclink_cs.c | 16 +-
8167 drivers/char/random.c | 12 +-
8168 drivers/char/sonypi.c | 11 +-
8169 drivers/char/tpm/tpm_acpi.c | 3 +-
8170 drivers/char/tpm/tpm_eventlog.c | 5 +-
8171 drivers/char/virtio_console.c | 6 +-
8172 drivers/clk/clk-composite.c | 2 +-
8173 drivers/clk/samsung/clk.h | 2 +-
8174 drivers/clk/socfpga/clk-gate.c | 9 +-
8175 drivers/clk/socfpga/clk-pll.c | 9 +-
8176 drivers/clk/ti/clk.c | 8 +-
8177 drivers/cpufreq/acpi-cpufreq.c | 17 +-
8178 drivers/cpufreq/cpufreq-dt.c | 4 +-
8179 drivers/cpufreq/cpufreq.c | 30 +-
8180 drivers/cpufreq/cpufreq_governor.c | 2 +-
8181 drivers/cpufreq/cpufreq_governor.h | 4 +-
8182 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
8183 drivers/cpufreq/intel_pstate.c | 38 +-
8184 drivers/cpufreq/p4-clockmod.c | 12 +-
8185 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
8186 drivers/cpufreq/speedstep-centrino.c | 7 +-
8187 drivers/cpuidle/driver.c | 2 +-
8188 drivers/cpuidle/dt_idle_states.c | 2 +-
8189 drivers/cpuidle/governor.c | 2 +-
8190 drivers/cpuidle/sysfs.c | 2 +-
8191 drivers/crypto/hifn_795x.c | 4 +-
8192 drivers/devfreq/devfreq.c | 4 +-
8193 drivers/dma/sh/shdma-base.c | 4 +-
8194 drivers/dma/sh/shdmac.c | 2 +-
8195 drivers/edac/edac_device.c | 4 +-
8196 drivers/edac/edac_mc_sysfs.c | 2 +-
8197 drivers/edac/edac_pci.c | 4 +-
8198 drivers/edac/edac_pci_sysfs.c | 22 +-
8199 drivers/edac/mce_amd.h | 2 +-
8200 drivers/firewire/core-card.c | 6 +-
8201 drivers/firewire/core-device.c | 2 +-
8202 drivers/firewire/core-transaction.c | 1 +
8203 drivers/firewire/core.h | 1 +
8204 drivers/firmware/dmi-id.c | 2 +-
8205 drivers/firmware/dmi_scan.c | 12 +-
8206 drivers/firmware/efi/cper.c | 8 +-
8207 drivers/firmware/efi/efi.c | 12 +-
8208 drivers/firmware/efi/efivars.c | 2 +-
8209 drivers/firmware/efi/runtime-map.c | 2 +-
8210 drivers/firmware/google/gsmi.c | 2 +-
8211 drivers/firmware/google/memconsole.c | 7 +-
8212 drivers/firmware/memmap.c | 2 +-
8213 drivers/firmware/psci.c | 2 +-
8214 drivers/gpio/gpio-davinci.c | 6 +-
8215 drivers/gpio/gpio-em.c | 2 +-
8216 drivers/gpio/gpio-ich.c | 2 +-
8217 drivers/gpio/gpio-omap.c | 4 +-
8218 drivers/gpio/gpio-rcar.c | 2 +-
8219 drivers/gpio/gpio-vr41xx.c | 2 +-
8220 drivers/gpio/gpiolib.c | 12 +-
8221 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
8222 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
8223 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 18 +-
8224 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
8225 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
8226 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
8227 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
8228 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
8229 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
8230 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
8231 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
8232 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
8233 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
8234 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
8235 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
8236 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
8237 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
8238 drivers/gpu/drm/armada/armada_drv.c | 3 +-
8239 drivers/gpu/drm/drm_crtc.c | 2 +-
8240 drivers/gpu/drm/drm_drv.c | 2 +-
8241 drivers/gpu/drm/drm_fops.c | 12 +-
8242 drivers/gpu/drm/drm_global.c | 14 +-
8243 drivers/gpu/drm/drm_info.c | 13 +-
8244 drivers/gpu/drm/drm_ioc32.c | 13 +-
8245 drivers/gpu/drm/drm_ioctl.c | 2 +-
8246 drivers/gpu/drm/drm_pci.c | 9 +-
8247 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
8248 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
8249 drivers/gpu/drm/gma500/psb_drv.c | 1 -
8250 drivers/gpu/drm/i810/i810_dma.c | 2 +-
8251 drivers/gpu/drm/i810/i810_drv.c | 6 +-
8252 drivers/gpu/drm/i810/i810_drv.h | 6 +-
8253 drivers/gpu/drm/i915/i915_dma.c | 4 +-
8254 drivers/gpu/drm/i915/i915_drv.c | 7 +-
8255 drivers/gpu/drm/i915/i915_drv.h | 2 +-
8256 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
8257 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
8258 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
8259 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
8260 drivers/gpu/drm/i915/i915_irq.c | 88 +-
8261 drivers/gpu/drm/i915/intel_display.c | 26 +-
8262 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
8263 drivers/gpu/drm/mga/mga_drv.c | 5 +-
8264 drivers/gpu/drm/mga/mga_drv.h | 6 +-
8265 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
8266 drivers/gpu/drm/mga/mga_irq.c | 8 +-
8267 drivers/gpu/drm/mga/mga_state.c | 2 +-
8268 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
8269 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 +-
8270 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
8271 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
8272 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
8273 drivers/gpu/drm/omapdrm/Makefile | 2 +-
8274 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
8275 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
8276 drivers/gpu/drm/qxl/qxl_drv.c | 8 +-
8277 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
8278 drivers/gpu/drm/qxl/qxl_ioctl.c | 12 +-
8279 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
8280 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
8281 drivers/gpu/drm/r128/r128_cce.c | 2 +-
8282 drivers/gpu/drm/r128/r128_drv.c | 4 +-
8283 drivers/gpu/drm/r128/r128_drv.h | 6 +-
8284 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
8285 drivers/gpu/drm/r128/r128_irq.c | 4 +-
8286 drivers/gpu/drm/r128/r128_state.c | 6 +-
8287 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
8288 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
8289 drivers/gpu/drm/radeon/radeon_drv.c | 17 +-
8290 drivers/gpu/drm/radeon/radeon_drv.h | 4 +-
8291 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
8292 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
8293 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
8294 drivers/gpu/drm/radeon/radeon_state.c | 6 +-
8295 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
8296 drivers/gpu/drm/savage/savage_bci.c | 2 +-
8297 drivers/gpu/drm/savage/savage_drv.c | 5 +-
8298 drivers/gpu/drm/savage/savage_drv.h | 2 +-
8299 drivers/gpu/drm/sis/sis_drv.c | 5 +-
8300 drivers/gpu/drm/sis/sis_drv.h | 2 +-
8301 drivers/gpu/drm/sis/sis_mm.c | 2 +-
8302 drivers/gpu/drm/tegra/dc.c | 2 +-
8303 drivers/gpu/drm/tegra/dsi.c | 2 +-
8304 drivers/gpu/drm/tegra/hdmi.c | 2 +-
8305 drivers/gpu/drm/tegra/sor.c | 7 +-
8306 drivers/gpu/drm/tilcdc/Makefile | 6 +-
8307 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
8308 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
8309 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
8310 drivers/gpu/drm/udl/udl_fb.c | 1 -
8311 drivers/gpu/drm/via/via_dma.c | 2 +-
8312 drivers/gpu/drm/via/via_drv.c | 5 +-
8313 drivers/gpu/drm/via/via_drv.h | 6 +-
8314 drivers/gpu/drm/via/via_irq.c | 18 +-
8315 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
8316 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
8317 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
8318 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
8319 drivers/gpu/vga/vga_switcheroo.c | 4 +-
8320 drivers/hid/hid-core.c | 4 +-
8321 drivers/hid/hid-sensor-custom.c | 2 +-
8322 drivers/hv/channel.c | 6 +-
8323 drivers/hv/hv.c | 4 +-
8324 drivers/hv/hv_balloon.c | 18 +-
8325 drivers/hv/hyperv_vmbus.h | 2 +-
8326 drivers/hwmon/acpi_power_meter.c | 6 +-
8327 drivers/hwmon/applesmc.c | 2 +-
8328 drivers/hwmon/asus_atk0110.c | 10 +-
8329 drivers/hwmon/coretemp.c | 2 +-
8330 drivers/hwmon/dell-smm-hwmon.c | 2 +-
8331 drivers/hwmon/ibmaem.c | 2 +-
8332 drivers/hwmon/iio_hwmon.c | 2 +-
8333 drivers/hwmon/nct6683.c | 6 +-
8334 drivers/hwmon/nct6775.c | 6 +-
8335 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
8336 drivers/hwmon/sht15.c | 12 +-
8337 drivers/hwmon/via-cputemp.c | 2 +-
8338 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
8339 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
8340 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
8341 drivers/i2c/i2c-dev.c | 2 +-
8342 drivers/ide/ide-cd.c | 2 +-
8343 drivers/ide/ide-disk.c | 2 +-
8344 drivers/iio/industrialio-core.c | 2 +-
8345 drivers/iio/magnetometer/ak8975.c | 2 +-
8346 drivers/infiniband/core/cm.c | 32 +-
8347 drivers/infiniband/core/fmr_pool.c | 20 +-
8348 drivers/infiniband/core/netlink.c | 5 +-
8349 drivers/infiniband/core/uverbs_cmd.c | 3 +
8350 drivers/infiniband/hw/cxgb4/device.c | 6 +-
8351 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
8352 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
8353 drivers/infiniband/hw/mlx4/mad.c | 2 +-
8354 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
8355 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
8356 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
8357 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
8358 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
8359 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
8360 drivers/infiniband/hw/nes/nes.c | 4 +-
8361 drivers/infiniband/hw/nes/nes.h | 40 +-
8362 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
8363 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
8364 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
8365 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
8366 drivers/infiniband/hw/qib/qib.h | 1 +
8367 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
8368 drivers/input/evdev.c | 2 +-
8369 drivers/input/gameport/gameport.c | 4 +-
8370 drivers/input/input.c | 4 +-
8371 drivers/input/joystick/sidewinder.c | 1 +
8372 drivers/input/misc/ims-pcu.c | 4 +-
8373 drivers/input/mouse/psmouse.h | 2 +-
8374 drivers/input/mousedev.c | 2 +-
8375 drivers/input/serio/serio.c | 4 +-
8376 drivers/input/serio/serio_raw.c | 4 +-
8377 drivers/input/touchscreen/htcpen.c | 2 +-
8378 drivers/iommu/arm-smmu-v3.c | 2 +-
8379 drivers/iommu/arm-smmu.c | 43 +-
8380 drivers/iommu/io-pgtable-arm.c | 101 +-
8381 drivers/iommu/io-pgtable.c | 11 +-
8382 drivers/iommu/io-pgtable.h | 19 +-
8383 drivers/iommu/iommu.c | 2 +-
8384 drivers/iommu/ipmmu-vmsa.c | 13 +-
8385 drivers/iommu/irq_remapping.c | 2 +-
8386 drivers/irqchip/irq-gic.c | 2 +-
8387 drivers/irqchip/irq-i8259.c | 2 +-
8388 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
8389 drivers/isdn/capi/capi.c | 10 +-
8390 drivers/isdn/gigaset/interface.c | 8 +-
8391 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
8392 drivers/isdn/hardware/avm/b1.c | 4 +-
8393 drivers/isdn/i4l/isdn_common.c | 2 +
8394 drivers/isdn/i4l/isdn_tty.c | 22 +-
8395 drivers/isdn/icn/icn.c | 2 +-
8396 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
8397 drivers/lguest/core.c | 10 +-
8398 drivers/lguest/page_tables.c | 2 +-
8399 drivers/lguest/x86/core.c | 12 +-
8400 drivers/lguest/x86/switcher_32.S | 27 +-
8401 drivers/md/bcache/alloc.c | 2 +-
8402 drivers/md/bcache/bcache.h | 10 +-
8403 drivers/md/bcache/btree.c | 2 +-
8404 drivers/md/bcache/closure.h | 2 +-
8405 drivers/md/bcache/io.c | 10 +-
8406 drivers/md/bcache/journal.c | 2 +-
8407 drivers/md/bcache/stats.c | 26 +-
8408 drivers/md/bcache/stats.h | 16 +-
8409 drivers/md/bcache/super.c | 2 +-
8410 drivers/md/bcache/sysfs.c | 20 +-
8411 drivers/md/bitmap.c | 2 +-
8412 drivers/md/dm-cache-target.c | 98 +-
8413 drivers/md/dm-ioctl.c | 2 +-
8414 drivers/md/dm-raid.c | 2 +-
8415 drivers/md/dm-raid1.c | 18 +-
8416 drivers/md/dm-stats.c | 6 +-
8417 drivers/md/dm-stripe.c | 10 +-
8418 drivers/md/dm-table.c | 2 +-
8419 drivers/md/dm-thin-metadata.c | 4 +-
8420 drivers/md/dm.c | 28 +-
8421 drivers/md/md.c | 37 +-
8422 drivers/md/md.h | 8 +-
8423 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
8424 drivers/md/persistent-data/dm-space-map.h | 1 +
8425 drivers/md/raid1.c | 8 +-
8426 drivers/md/raid10.c | 20 +-
8427 drivers/md/raid5.c | 26 +-
8428 drivers/media/dvb-core/dvbdev.c | 2 +-
8429 drivers/media/dvb-frontends/af9033.h | 2 +-
8430 drivers/media/dvb-frontends/dib3000.h | 2 +-
8431 drivers/media/dvb-frontends/dib7000p.h | 2 +-
8432 drivers/media/dvb-frontends/dib8000.h | 2 +-
8433 drivers/media/pci/cx88/cx88-video.c | 6 +-
8434 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
8435 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
8436 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
8437 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
8438 drivers/media/pci/tw68/tw68-core.c | 2 +-
8439 drivers/media/pci/zoran/zoran.h | 1 -
8440 drivers/media/pci/zoran/zoran_driver.c | 3 -
8441 drivers/media/platform/omap/omap_vout.c | 11 +-
8442 drivers/media/platform/s5p-tv/mixer.h | 2 +-
8443 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
8444 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
8445 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
8446 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
8447 drivers/media/radio/radio-cadet.c | 2 +
8448 drivers/media/radio/radio-maxiradio.c | 2 +-
8449 drivers/media/radio/radio-shark.c | 2 +-
8450 drivers/media/radio/radio-shark2.c | 2 +-
8451 drivers/media/radio/radio-si476x.c | 2 +-
8452 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
8453 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
8454 drivers/media/v4l2-core/v4l2-device.c | 4 +-
8455 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
8456 drivers/memory/omap-gpmc.c | 21 +-
8457 drivers/message/fusion/mptsas.c | 34 +-
8458 drivers/mfd/ab8500-debugfs.c | 2 +-
8459 drivers/mfd/kempld-core.c | 2 +-
8460 drivers/mfd/max8925-i2c.c | 2 +-
8461 drivers/mfd/tps65910.c | 2 +-
8462 drivers/mfd/twl4030-irq.c | 9 +-
8463 drivers/misc/c2port/core.c | 4 +-
8464 drivers/misc/kgdbts.c | 4 +-
8465 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
8466 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
8467 drivers/misc/mic/scif/scif_api.c | 10 +-
8468 drivers/misc/mic/scif/scif_rb.c | 8 +-
8469 drivers/misc/sgi-gru/gruhandles.c | 4 +-
8470 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
8471 drivers/misc/sgi-gru/grutables.h | 158 +-
8472 drivers/misc/sgi-xp/xp.h | 2 +-
8473 drivers/misc/sgi-xp/xpc.h | 3 +-
8474 drivers/misc/sgi-xp/xpc_main.c | 2 +-
8475 drivers/mmc/host/dw_mmc.h | 2 +-
8476 drivers/mmc/host/mmci.c | 4 +-
8477 drivers/mmc/host/omap_hsmmc.c | 4 +-
8478 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
8479 drivers/mmc/host/sdhci-s3c.c | 8 +-
8480 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
8481 drivers/mtd/nand/denali.c | 1 +
8482 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
8483 drivers/mtd/nftlmount.c | 1 +
8484 drivers/mtd/sm_ftl.c | 2 +-
8485 drivers/net/bonding/bond_netlink.c | 2 +-
8486 drivers/net/caif/caif_hsi.c | 2 +-
8487 drivers/net/can/Kconfig | 2 +-
8488 drivers/net/can/dev.c | 2 +-
8489 drivers/net/can/vcan.c | 2 +-
8490 drivers/net/dummy.c | 2 +-
8491 drivers/net/ethernet/8390/ax88796.c | 4 +-
8492 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
8493 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
8494 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
8495 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
8496 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
8497 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
8498 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
8499 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
8500 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
8501 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
8502 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
8503 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
8504 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
8505 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
8506 drivers/net/ethernet/broadcom/tg3.h | 1 +
8507 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
8508 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
8509 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
8510 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
8511 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
8512 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
8513 drivers/net/ethernet/faraday/ftmac100.c | 2 +
8514 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
8515 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
8516 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
8517 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
8518 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
8519 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
8520 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
8521 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
8522 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
8523 drivers/net/ethernet/realtek/r8169.c | 8 +-
8524 drivers/net/ethernet/sfc/ptp.c | 2 +-
8525 drivers/net/ethernet/sfc/selftest.c | 20 +-
8526 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
8527 drivers/net/ethernet/via/via-rhine.c | 2 +-
8528 drivers/net/geneve.c | 2 +-
8529 drivers/net/hyperv/hyperv_net.h | 2 +-
8530 drivers/net/hyperv/rndis_filter.c | 7 +-
8531 drivers/net/ifb.c | 2 +-
8532 drivers/net/ipvlan/ipvlan_core.c | 2 +-
8533 drivers/net/irda/vlsi_ir.c | 18 +-
8534 drivers/net/irda/vlsi_ir.h | 14 +-
8535 drivers/net/macvlan.c | 20 +-
8536 drivers/net/macvtap.c | 10 +-
8537 drivers/net/nlmon.c | 2 +-
8538 drivers/net/phy/phy_device.c | 6 +-
8539 drivers/net/ppp/ppp_generic.c | 4 +-
8540 drivers/net/slip/slhc.c | 2 +-
8541 drivers/net/team/team.c | 4 +-
8542 drivers/net/tun.c | 7 +-
8543 drivers/net/usb/hso.c | 23 +-
8544 drivers/net/usb/r8152.c | 2 +-
8545 drivers/net/usb/sierra_net.c | 4 +-
8546 drivers/net/virtio_net.c | 2 +-
8547 drivers/net/vrf.c | 2 +-
8548 drivers/net/vxlan.c | 4 +-
8549 drivers/net/wimax/i2400m/rx.c | 2 +-
8550 drivers/net/wireless/airo.c | 2 +-
8551 drivers/net/wireless/at76c50x-usb.c | 2 +-
8552 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
8553 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
8554 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
8555 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
8556 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
8557 drivers/net/wireless/ath/ath9k/main.c | 22 +-
8558 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
8559 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
8560 drivers/net/wireless/ath/carl9170/main.c | 10 +-
8561 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
8562 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
8563 drivers/net/wireless/b43/phy_lp.c | 2 +-
8564 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
8565 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
8566 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
8567 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
8568 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
8569 drivers/net/wireless/mac80211_hwsim.c | 28 +-
8570 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
8571 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
8572 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
8573 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
8574 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
8575 drivers/of/fdt.c | 4 +-
8576 drivers/oprofile/buffer_sync.c | 8 +-
8577 drivers/oprofile/event_buffer.c | 2 +-
8578 drivers/oprofile/oprof.c | 2 +-
8579 drivers/oprofile/oprofile_stats.c | 10 +-
8580 drivers/oprofile/oprofile_stats.h | 10 +-
8581 drivers/oprofile/oprofilefs.c | 6 +-
8582 drivers/oprofile/timer_int.c | 2 +-
8583 drivers/parport/procfs.c | 4 +-
8584 drivers/pci/host/pci-host-generic.c | 2 +-
8585 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
8586 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
8587 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
8588 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
8589 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
8590 drivers/pci/hotplug/pciehp_core.c | 2 +-
8591 drivers/pci/msi.c | 22 +-
8592 drivers/pci/pci-sysfs.c | 6 +-
8593 drivers/pci/pci.h | 2 +-
8594 drivers/pci/pcie/aspm.c | 6 +-
8595 drivers/pci/pcie/portdrv_pci.c | 2 +-
8596 drivers/pci/probe.c | 2 +-
8597 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
8598 drivers/pinctrl/pinctrl-at91.c | 5 +-
8599 drivers/platform/chrome/chromeos_pstore.c | 2 +-
8600 drivers/platform/x86/alienware-wmi.c | 4 +-
8601 drivers/platform/x86/compal-laptop.c | 2 +-
8602 drivers/platform/x86/hdaps.c | 2 +-
8603 drivers/platform/x86/ibm_rtl.c | 2 +-
8604 drivers/platform/x86/intel_oaktrail.c | 2 +-
8605 drivers/platform/x86/msi-laptop.c | 16 +-
8606 drivers/platform/x86/msi-wmi.c | 2 +-
8607 drivers/platform/x86/samsung-laptop.c | 2 +-
8608 drivers/platform/x86/samsung-q10.c | 2 +-
8609 drivers/platform/x86/sony-laptop.c | 14 +-
8610 drivers/platform/x86/thinkpad_acpi.c | 2 +-
8611 drivers/pnp/pnpbios/bioscalls.c | 14 +-
8612 drivers/pnp/pnpbios/core.c | 2 +-
8613 drivers/power/pda_power.c | 7 +-
8614 drivers/power/power_supply.h | 4 +-
8615 drivers/power/power_supply_core.c | 7 +-
8616 drivers/power/power_supply_sysfs.c | 6 +-
8617 drivers/power/reset/at91-reset.c | 5 +-
8618 drivers/powercap/powercap_sys.c | 136 +-
8619 drivers/ptp/ptp_private.h | 2 +-
8620 drivers/ptp/ptp_sysfs.c | 2 +-
8621 drivers/regulator/core.c | 4 +-
8622 drivers/regulator/max8660.c | 6 +-
8623 drivers/regulator/max8973-regulator.c | 16 +-
8624 drivers/regulator/mc13892-regulator.c | 8 +-
8625 drivers/rtc/rtc-armada38x.c | 7 +-
8626 drivers/rtc/rtc-cmos.c | 4 +-
8627 drivers/rtc/rtc-ds1307.c | 2 +-
8628 drivers/rtc/rtc-m48t59.c | 4 +-
8629 drivers/rtc/rtc-rv8803.c | 15 +-
8630 drivers/rtc/rtc-test.c | 6 +-
8631 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
8632 drivers/scsi/bfa/bfa_ioc.h | 4 +-
8633 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
8634 drivers/scsi/hosts.c | 4 +-
8635 drivers/scsi/hpsa.c | 38 +-
8636 drivers/scsi/hpsa.h | 2 +-
8637 drivers/scsi/hptiop.c | 2 -
8638 drivers/scsi/hptiop.h | 1 -
8639 drivers/scsi/ipr.c | 6 +-
8640 drivers/scsi/ipr.h | 2 +-
8641 drivers/scsi/libfc/fc_exch.c | 50 +-
8642 drivers/scsi/libsas/sas_ata.c | 2 +-
8643 drivers/scsi/lpfc/lpfc.h | 8 +-
8644 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
8645 drivers/scsi/lpfc/lpfc_init.c | 6 +-
8646 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
8647 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
8648 drivers/scsi/pmcraid.c | 20 +-
8649 drivers/scsi/pmcraid.h | 8 +-
8650 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
8651 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
8652 drivers/scsi/qla2xxx/qla_os.c | 6 +-
8653 drivers/scsi/qla2xxx/qla_target.c | 10 +-
8654 drivers/scsi/qla2xxx/qla_target.h | 2 +-
8655 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
8656 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
8657 drivers/scsi/scsi.c | 2 +-
8658 drivers/scsi/scsi_lib.c | 8 +-
8659 drivers/scsi/scsi_sysfs.c | 2 +-
8660 drivers/scsi/scsi_transport_fc.c | 8 +-
8661 drivers/scsi/scsi_transport_iscsi.c | 6 +-
8662 drivers/scsi/scsi_transport_srp.c | 6 +-
8663 drivers/scsi/sd.c | 6 +-
8664 drivers/scsi/sg.c | 2 +-
8665 drivers/scsi/sr.c | 21 +-
8666 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
8667 drivers/spi/spi.c | 2 +-
8668 drivers/staging/android/timed_output.c | 6 +-
8669 drivers/staging/comedi/comedi_fops.c | 8 +-
8670 drivers/staging/fbtft/fbtft-core.c | 2 +-
8671 drivers/staging/fbtft/fbtft.h | 2 +-
8672 drivers/staging/gdm724x/gdm_tty.c | 2 +-
8673 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
8674 drivers/staging/iio/adc/ad7280a.c | 4 +-
8675 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
8676 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
8677 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
8678 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
8679 drivers/staging/lustre/lustre/include/obd.h | 2 +-
8680 drivers/staging/octeon/ethernet-rx.c | 20 +-
8681 drivers/staging/octeon/ethernet.c | 8 +-
8682 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
8683 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
8684 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
8685 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
8686 drivers/staging/sm750fb/sm750.c | 14 +-
8687 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
8688 drivers/target/sbp/sbp_target.c | 4 +-
8689 drivers/thermal/cpu_cooling.c | 9 +-
8690 drivers/thermal/devfreq_cooling.c | 19 +-
8691 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
8692 drivers/thermal/of-thermal.c | 17 +-
8693 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
8694 drivers/tty/cyclades.c | 6 +-
8695 drivers/tty/hvc/hvc_console.c | 14 +-
8696 drivers/tty/hvc/hvcs.c | 21 +-
8697 drivers/tty/hvc/hvsi.c | 22 +-
8698 drivers/tty/hvc/hvsi_lib.c | 4 +-
8699 drivers/tty/ipwireless/tty.c | 27 +-
8700 drivers/tty/moxa.c | 2 +-
8701 drivers/tty/n_gsm.c | 4 +-
8702 drivers/tty/n_tty.c | 19 +-
8703 drivers/tty/pty.c | 4 +-
8704 drivers/tty/rocket.c | 6 +-
8705 drivers/tty/serial/8250/8250_core.c | 10 +-
8706 drivers/tty/serial/ifx6x60.c | 2 +-
8707 drivers/tty/serial/ioc4_serial.c | 6 +-
8708 drivers/tty/serial/kgdb_nmi.c | 4 +-
8709 drivers/tty/serial/kgdboc.c | 32 +-
8710 drivers/tty/serial/msm_serial.c | 4 +-
8711 drivers/tty/serial/samsung.c | 9 +-
8712 drivers/tty/serial/serial_core.c | 8 +-
8713 drivers/tty/synclink.c | 34 +-
8714 drivers/tty/synclink_gt.c | 28 +-
8715 drivers/tty/synclinkmp.c | 34 +-
8716 drivers/tty/tty_io.c | 2 +-
8717 drivers/tty/tty_ldisc.c | 8 +-
8718 drivers/tty/tty_port.c | 22 +-
8719 drivers/uio/uio.c | 13 +-
8720 drivers/usb/atm/cxacru.c | 2 +-
8721 drivers/usb/atm/usbatm.c | 24 +-
8722 drivers/usb/class/cdc-acm.h | 2 +-
8723 drivers/usb/core/devices.c | 6 +-
8724 drivers/usb/core/devio.c | 12 +-
8725 drivers/usb/core/hcd.c | 4 +-
8726 drivers/usb/core/sysfs.c | 2 +-
8727 drivers/usb/core/usb.c | 2 +-
8728 drivers/usb/early/ehci-dbgp.c | 16 +-
8729 drivers/usb/gadget/function/u_serial.c | 22 +-
8730 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
8731 drivers/usb/host/ehci-hcd.c | 2 +-
8732 drivers/usb/host/ehci-hub.c | 4 +-
8733 drivers/usb/host/ehci-q.c | 4 +-
8734 drivers/usb/host/fotg210-hcd.c | 2 +-
8735 drivers/usb/host/hwa-hc.c | 2 +-
8736 drivers/usb/host/ohci-hcd.c | 2 +-
8737 drivers/usb/host/r8a66597.h | 2 +-
8738 drivers/usb/host/uhci-hcd.c | 2 +-
8739 drivers/usb/host/xhci-pci.c | 2 +-
8740 drivers/usb/host/xhci.c | 2 +-
8741 drivers/usb/misc/appledisplay.c | 4 +-
8742 drivers/usb/serial/console.c | 8 +-
8743 drivers/usb/storage/transport.c | 2 +-
8744 drivers/usb/storage/usb.c | 2 +-
8745 drivers/usb/storage/usb.h | 2 +-
8746 drivers/usb/usbip/vhci.h | 2 +-
8747 drivers/usb/usbip/vhci_hcd.c | 6 +-
8748 drivers/usb/usbip/vhci_rx.c | 2 +-
8749 drivers/usb/wusbcore/wa-hc.h | 4 +-
8750 drivers/usb/wusbcore/wa-xfer.c | 2 +-
8751 drivers/vhost/vringh.c | 20 +-
8752 drivers/video/backlight/kb3886_bl.c | 2 +-
8753 drivers/video/console/fbcon.c | 2 +-
8754 drivers/video/fbdev/aty/aty128fb.c | 2 +-
8755 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
8756 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
8757 drivers/video/fbdev/core/fb_defio.c | 6 +-
8758 drivers/video/fbdev/core/fbmem.c | 12 +-
8759 drivers/video/fbdev/hyperv_fb.c | 4 +-
8760 drivers/video/fbdev/i810/i810_accel.c | 1 +
8761 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
8762 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
8763 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
8764 drivers/video/fbdev/omap2/dss/display.c | 8 +-
8765 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
8766 drivers/video/fbdev/smscufx.c | 4 +-
8767 drivers/video/fbdev/udlfb.c | 36 +-
8768 drivers/video/fbdev/uvesafb.c | 52 +-
8769 drivers/video/fbdev/vesafb.c | 58 +-
8770 drivers/video/fbdev/via/via_clock.h | 2 +-
8771 drivers/xen/events/events_base.c | 6 +-
8772 fs/Kconfig.binfmt | 2 +-
8773 fs/afs/inode.c | 4 +-
8774 fs/aio.c | 2 +-
8775 fs/autofs4/waitq.c | 2 +-
8776 fs/befs/endian.h | 6 +-
8777 fs/binfmt_aout.c | 23 +-
8778 fs/binfmt_elf.c | 670 +-
8779 fs/binfmt_elf_fdpic.c | 4 +-
8780 fs/block_dev.c | 2 +-
8781 fs/btrfs/ctree.c | 11 +-
8782 fs/btrfs/ctree.h | 4 +-
8783 fs/btrfs/delayed-inode.c | 9 +-
8784 fs/btrfs/delayed-inode.h | 6 +-
8785 fs/btrfs/delayed-ref.c | 4 +-
8786 fs/btrfs/disk-io.c | 4 +-
8787 fs/btrfs/extent_map.c | 8 +-
8788 fs/btrfs/file.c | 4 +-
8789 fs/btrfs/inode.c | 14 +-
8790 fs/btrfs/raid56.c | 32 +-
8791 fs/btrfs/super.c | 2 +-
8792 fs/btrfs/sysfs.c | 2 +-
8793 fs/btrfs/tests/btrfs-tests.c | 2 +-
8794 fs/btrfs/tests/free-space-tests.c | 8 +-
8795 fs/btrfs/transaction.c | 2 +-
8796 fs/btrfs/tree-log.c | 8 +-
8797 fs/btrfs/tree-log.h | 2 +-
8798 fs/btrfs/volumes.c | 14 +-
8799 fs/btrfs/volumes.h | 22 +-
8800 fs/buffer.c | 2 +-
8801 fs/cachefiles/bind.c | 6 +-
8802 fs/cachefiles/daemon.c | 8 +-
8803 fs/cachefiles/internal.h | 12 +-
8804 fs/cachefiles/namei.c | 2 +-
8805 fs/cachefiles/proc.c | 12 +-
8806 fs/ceph/dir.c | 12 +-
8807 fs/ceph/super.c | 4 +-
8808 fs/cifs/cifs_debug.c | 12 +-
8809 fs/cifs/cifsfs.c | 8 +-
8810 fs/cifs/cifsglob.h | 54 +-
8811 fs/cifs/file.c | 12 +-
8812 fs/cifs/misc.c | 4 +-
8813 fs/cifs/smb1ops.c | 80 +-
8814 fs/cifs/smb2ops.c | 84 +-
8815 fs/cifs/smb2pdu.c | 3 +-
8816 fs/coda/cache.c | 10 +-
8817 fs/compat.c | 7 +-
8818 fs/compat_binfmt_elf.c | 2 +
8819 fs/compat_ioctl.c | 12 +-
8820 fs/configfs/dir.c | 10 +-
8821 fs/coredump.c | 18 +-
8822 fs/dcache.c | 64 +-
8823 fs/ecryptfs/inode.c | 2 +-
8824 fs/ecryptfs/miscdev.c | 2 +-
8825 fs/exec.c | 362 +-
8826 fs/ext2/xattr.c | 5 +-
8827 fs/ext4/ext4.h | 20 +-
8828 fs/ext4/mballoc.c | 44 +-
8829 fs/ext4/resize.c | 16 +-
8830 fs/ext4/super.c | 2 +-
8831 fs/ext4/sysfs.c | 2 +-
8832 fs/ext4/xattr.c | 5 +-
8833 fs/fhandle.c | 5 +-
8834 fs/file.c | 18 +-
8835 fs/fs-writeback.c | 11 +-
8836 fs/fs_struct.c | 8 +-
8837 fs/fscache/cookie.c | 40 +-
8838 fs/fscache/internal.h | 202 +-
8839 fs/fscache/object.c | 26 +-
8840 fs/fscache/operation.c | 38 +-
8841 fs/fscache/page.c | 110 +-
8842 fs/fscache/stats.c | 348 +-
8843 fs/fuse/cuse.c | 10 +-
8844 fs/fuse/dev.c | 4 +-
8845 fs/gfs2/file.c | 2 +-
8846 fs/gfs2/glock.c | 22 +-
8847 fs/gfs2/glops.c | 4 +-
8848 fs/gfs2/quota.c | 6 +-
8849 fs/hugetlbfs/inode.c | 13 +-
8850 fs/inode.c | 4 +-
8851 fs/jbd2/commit.c | 2 +-
8852 fs/jbd2/transaction.c | 4 +-
8853 fs/jffs2/erase.c | 3 +-
8854 fs/jffs2/wbuf.c | 3 +-
8855 fs/jfs/super.c | 2 +-
8856 fs/kernfs/dir.c | 2 +-
8857 fs/kernfs/file.c | 20 +-
8858 fs/libfs.c | 10 +-
8859 fs/lockd/clntproc.c | 4 +-
8860 fs/namei.c | 16 +-
8861 fs/namespace.c | 16 +-
8862 fs/nfs/callback_xdr.c | 2 +-
8863 fs/nfs/inode.c | 6 +-
8864 fs/nfsd/nfs4proc.c | 2 +-
8865 fs/nfsd/nfs4xdr.c | 2 +-
8866 fs/nfsd/nfscache.c | 11 +-
8867 fs/nfsd/vfs.c | 6 +-
8868 fs/nls/nls_base.c | 26 +-
8869 fs/nls/nls_euc-jp.c | 6 +-
8870 fs/nls/nls_koi8-ru.c | 6 +-
8871 fs/notify/fanotify/fanotify_user.c | 4 +-
8872 fs/notify/notification.c | 4 +-
8873 fs/ntfs/dir.c | 2 +-
8874 fs/ntfs/super.c | 6 +-
8875 fs/ocfs2/dlm/dlmcommon.h | 4 +-
8876 fs/ocfs2/dlm/dlmdebug.c | 10 +-
8877 fs/ocfs2/dlm/dlmdomain.c | 4 +-
8878 fs/ocfs2/dlm/dlmmaster.c | 4 +-
8879 fs/ocfs2/localalloc.c | 2 +-
8880 fs/ocfs2/ocfs2.h | 10 +-
8881 fs/ocfs2/suballoc.c | 12 +-
8882 fs/ocfs2/super.c | 20 +-
8883 fs/overlayfs/copy_up.c | 2 +-
8884 fs/pipe.c | 72 +-
8885 fs/posix_acl.c | 4 +-
8886 fs/proc/array.c | 20 +
8887 fs/proc/base.c | 4 +-
8888 fs/proc/kcore.c | 34 +-
8889 fs/proc/meminfo.c | 2 +-
8890 fs/proc/nommu.c | 2 +-
8891 fs/proc/proc_sysctl.c | 26 +-
8892 fs/proc/task_mmu.c | 42 +-
8893 fs/proc/task_nommu.c | 4 +-
8894 fs/proc/vmcore.c | 16 +-
8895 fs/qnx6/qnx6.h | 4 +-
8896 fs/quota/netlink.c | 4 +-
8897 fs/read_write.c | 2 +-
8898 fs/readdir.c | 3 +-
8899 fs/reiserfs/do_balan.c | 2 +-
8900 fs/reiserfs/procfs.c | 2 +-
8901 fs/reiserfs/reiserfs.h | 4 +-
8902 fs/seq_file.c | 4 +-
8903 fs/splice.c | 43 +-
8904 fs/squashfs/xattr.c | 12 +-
8905 fs/super.c | 3 +-
8906 fs/sysv/sysv.h | 2 +-
8907 fs/tracefs/inode.c | 8 +-
8908 fs/udf/misc.c | 2 +-
8909 fs/ufs/swab.h | 4 +-
8910 fs/userfaultfd.c | 2 +-
8911 fs/xattr.c | 21 +
8912 fs/xfs/libxfs/xfs_bmap.c | 2 +-
8913 fs/xfs/libxfs/xfs_da_btree.c | 4 +-
8914 fs/xfs/xfs_dir2_readdir.c | 7 +-
8915 fs/xfs/xfs_ioctl.c | 2 +-
8916 fs/xfs/xfs_linux.h | 4 +-
8917 include/acpi/ghes.h | 2 +-
8918 include/asm-generic/4level-fixup.h | 2 +
8919 include/asm-generic/atomic-long.h | 176 +-
8920 include/asm-generic/atomic64.h | 12 +
8921 include/asm-generic/bitops/__fls.h | 2 +-
8922 include/asm-generic/bitops/fls.h | 2 +-
8923 include/asm-generic/bitops/fls64.h | 4 +-
8924 include/asm-generic/bug.h | 6 +-
8925 include/asm-generic/cache.h | 4 +-
8926 include/asm-generic/emergency-restart.h | 2 +-
8927 include/asm-generic/kmap_types.h | 4 +-
8928 include/asm-generic/local.h | 13 +
8929 include/asm-generic/pgtable-nopmd.h | 18 +-
8930 include/asm-generic/pgtable-nopud.h | 15 +-
8931 include/asm-generic/pgtable.h | 16 +
8932 include/asm-generic/sections.h | 1 +
8933 include/asm-generic/uaccess.h | 16 +
8934 include/asm-generic/vmlinux.lds.h | 15 +-
8935 include/crypto/algapi.h | 2 +-
8936 include/drm/drmP.h | 19 +-
8937 include/drm/drm_crtc_helper.h | 2 +-
8938 include/drm/drm_mm.h | 2 +-
8939 include/drm/i915_pciids.h | 2 +-
8940 include/drm/intel-gtt.h | 4 +-
8941 include/drm/ttm/ttm_memory.h | 2 +-
8942 include/drm/ttm/ttm_page_alloc.h | 1 +
8943 include/keys/asymmetric-subtype.h | 2 +-
8944 include/linux/atmdev.h | 4 +-
8945 include/linux/atomic.h | 2 +-
8946 include/linux/audit.h | 2 +-
8947 include/linux/average.h | 2 +-
8948 include/linux/binfmts.h | 3 +-
8949 include/linux/bitmap.h | 2 +-
8950 include/linux/bitops.h | 8 +-
8951 include/linux/blk-cgroup.h | 24 +-
8952 include/linux/blkdev.h | 2 +-
8953 include/linux/blktrace_api.h | 2 +-
8954 include/linux/cache.h | 8 +
8955 include/linux/cdrom.h | 1 -
8956 include/linux/cleancache.h | 2 +-
8957 include/linux/clk-provider.h | 1 +
8958 include/linux/compat.h | 6 +-
8959 include/linux/compiler-gcc.h | 28 +-
8960 include/linux/compiler.h | 193 +-
8961 include/linux/configfs.h | 2 +-
8962 include/linux/cpufreq.h | 3 +-
8963 include/linux/cpuidle.h | 5 +-
8964 include/linux/cpumask.h | 14 +-
8965 include/linux/crypto.h | 4 +-
8966 include/linux/ctype.h | 2 +-
8967 include/linux/dcache.h | 4 +-
8968 include/linux/decompress/mm.h | 2 +-
8969 include/linux/devfreq.h | 2 +-
8970 include/linux/device.h | 7 +-
8971 include/linux/dma-mapping.h | 2 +-
8972 include/linux/efi.h | 1 +
8973 include/linux/elf.h | 2 +
8974 include/linux/err.h | 4 +-
8975 include/linux/extcon.h | 2 +-
8976 include/linux/fb.h | 3 +-
8977 include/linux/fdtable.h | 2 +-
8978 include/linux/fs.h | 5 +-
8979 include/linux/fs_struct.h | 2 +-
8980 include/linux/fscache-cache.h | 2 +-
8981 include/linux/fscache.h | 2 +-
8982 include/linux/fsnotify.h | 2 +-
8983 include/linux/genhd.h | 4 +-
8984 include/linux/genl_magic_func.h | 2 +-
8985 include/linux/gfp.h | 12 +-
8986 include/linux/highmem.h | 12 +
8987 include/linux/hwmon-sysfs.h | 6 +-
8988 include/linux/i2c.h | 1 +
8989 include/linux/if_pppox.h | 2 +-
8990 include/linux/init.h | 12 +-
8991 include/linux/init_task.h | 7 +
8992 include/linux/interrupt.h | 6 +-
8993 include/linux/iommu.h | 2 +-
8994 include/linux/ioport.h | 2 +-
8995 include/linux/ipc.h | 2 +-
8996 include/linux/irq.h | 5 +-
8997 include/linux/irqdesc.h | 2 +-
8998 include/linux/irqdomain.h | 3 +
8999 include/linux/jbd2.h | 2 +-
9000 include/linux/jiffies.h | 16 +-
9001 include/linux/key-type.h | 2 +-
9002 include/linux/kgdb.h | 6 +-
9003 include/linux/kmemleak.h | 4 +-
9004 include/linux/kobject.h | 3 +-
9005 include/linux/kobject_ns.h | 2 +-
9006 include/linux/kref.h | 2 +-
9007 include/linux/libata.h | 2 +-
9008 include/linux/linkage.h | 1 +
9009 include/linux/list.h | 15 +
9010 include/linux/lockref.h | 26 +-
9011 include/linux/math64.h | 10 +-
9012 include/linux/mempolicy.h | 7 +
9013 include/linux/mm.h | 102 +-
9014 include/linux/mm_types.h | 20 +
9015 include/linux/mmiotrace.h | 4 +-
9016 include/linux/mmzone.h | 2 +-
9017 include/linux/mod_devicetable.h | 4 +-
9018 include/linux/module.h | 69 +-
9019 include/linux/moduleloader.h | 16 +
9020 include/linux/moduleparam.h | 4 +-
9021 include/linux/net.h | 2 +-
9022 include/linux/netdevice.h | 7 +-
9023 include/linux/netfilter.h | 2 +-
9024 include/linux/netfilter/nfnetlink.h | 2 +-
9025 include/linux/netlink.h | 12 +-
9026 include/linux/nls.h | 4 +-
9027 include/linux/notifier.h | 3 +-
9028 include/linux/oprofile.h | 4 +-
9029 include/linux/padata.h | 2 +-
9030 include/linux/pci_hotplug.h | 3 +-
9031 include/linux/percpu.h | 2 +-
9032 include/linux/perf_event.h | 12 +-
9033 include/linux/pipe_fs_i.h | 8 +-
9034 include/linux/pm.h | 1 +
9035 include/linux/pm_domain.h | 2 +-
9036 include/linux/pm_runtime.h | 2 +-
9037 include/linux/pnp.h | 2 +-
9038 include/linux/poison.h | 4 +-
9039 include/linux/power/smartreflex.h | 2 +-
9040 include/linux/ppp-comp.h | 2 +-
9041 include/linux/preempt.h | 21 +
9042 include/linux/proc_ns.h | 2 +-
9043 include/linux/psci.h | 2 +-
9044 include/linux/quota.h | 2 +-
9045 include/linux/random.h | 19 +-
9046 include/linux/rculist.h | 16 +
9047 include/linux/rcupdate.h | 8 +
9048 include/linux/reboot.h | 14 +-
9049 include/linux/regset.h | 3 +-
9050 include/linux/relay.h | 2 +-
9051 include/linux/rio.h | 2 +-
9052 include/linux/rmap.h | 4 +-
9053 include/linux/sched.h | 76 +-
9054 include/linux/sched/sysctl.h | 1 +
9055 include/linux/scif.h | 2 +-
9056 include/linux/semaphore.h | 2 +-
9057 include/linux/seq_file.h | 1 +
9058 include/linux/seqlock.h | 10 +
9059 include/linux/signal.h | 2 +-
9060 include/linux/skbuff.h | 12 +-
9061 include/linux/slab.h | 47 +-
9062 include/linux/slab_def.h | 14 +-
9063 include/linux/slub_def.h | 2 +-
9064 include/linux/smp.h | 2 +
9065 include/linux/sock_diag.h | 2 +-
9066 include/linux/sonet.h | 2 +-
9067 include/linux/spinlock.h | 17 +-
9068 include/linux/srcu.h | 5 +-
9069 include/linux/sunrpc/addr.h | 8 +-
9070 include/linux/sunrpc/clnt.h | 2 +-
9071 include/linux/sunrpc/svc.h | 2 +-
9072 include/linux/sunrpc/svc_rdma.h | 18 +-
9073 include/linux/sunrpc/svcauth.h | 2 +-
9074 include/linux/swapops.h | 10 +-
9075 include/linux/swiotlb.h | 3 +-
9076 include/linux/syscalls.h | 23 +-
9077 include/linux/syscore_ops.h | 2 +-
9078 include/linux/sysctl.h | 3 +-
9079 include/linux/sysfs.h | 9 +-
9080 include/linux/sysrq.h | 3 +-
9081 include/linux/tcp.h | 14 +-
9082 include/linux/thread_info.h | 7 +
9083 include/linux/tty.h | 4 +-
9084 include/linux/tty_driver.h | 2 +-
9085 include/linux/tty_ldisc.h | 2 +-
9086 include/linux/types.h | 16 +
9087 include/linux/uaccess.h | 2 +-
9088 include/linux/uio_driver.h | 2 +-
9089 include/linux/unaligned/access_ok.h | 24 +-
9090 include/linux/usb.h | 12 +-
9091 include/linux/usb/hcd.h | 1 +
9092 include/linux/usb/renesas_usbhs.h | 2 +-
9093 include/linux/vermagic.h | 21 +-
9094 include/linux/vga_switcheroo.h | 8 +-
9095 include/linux/vmalloc.h | 7 +-
9096 include/linux/vmstat.h | 24 +-
9097 include/linux/writeback.h | 3 +-
9098 include/linux/xattr.h | 5 +-
9099 include/linux/zlib.h | 3 +-
9100 include/media/v4l2-dev.h | 2 +-
9101 include/media/v4l2-device.h | 2 +-
9102 include/net/9p/transport.h | 2 +-
9103 include/net/bluetooth/l2cap.h | 2 +-
9104 include/net/bonding.h | 2 +-
9105 include/net/caif/cfctrl.h | 6 +-
9106 include/net/cfg802154.h | 2 +-
9107 include/net/flow.h | 2 +-
9108 include/net/genetlink.h | 2 +-
9109 include/net/gro_cells.h | 2 +-
9110 include/net/inet_connection_sock.h | 2 +-
9111 include/net/inet_sock.h | 2 +-
9112 include/net/inetpeer.h | 2 +-
9113 include/net/ip_fib.h | 2 +-
9114 include/net/ip_vs.h | 8 +-
9115 include/net/ipv6.h | 2 +-
9116 include/net/irda/ircomm_tty.h | 1 +
9117 include/net/iucv/af_iucv.h | 2 +-
9118 include/net/llc_c_ac.h | 2 +-
9119 include/net/llc_c_ev.h | 4 +-
9120 include/net/llc_c_st.h | 2 +-
9121 include/net/llc_s_ac.h | 2 +-
9122 include/net/llc_s_st.h | 2 +-
9123 include/net/mac80211.h | 6 +-
9124 include/net/neighbour.h | 4 +-
9125 include/net/net_namespace.h | 18 +-
9126 include/net/netlink.h | 2 +-
9127 include/net/netns/conntrack.h | 6 +-
9128 include/net/netns/ipv4.h | 4 +-
9129 include/net/netns/ipv6.h | 4 +-
9130 include/net/netns/xfrm.h | 2 +-
9131 include/net/ping.h | 2 +-
9132 include/net/protocol.h | 4 +-
9133 include/net/rtnetlink.h | 2 +-
9134 include/net/sctp/checksum.h | 4 +-
9135 include/net/sctp/sm.h | 4 +-
9136 include/net/sctp/structs.h | 2 +-
9137 include/net/snmp.h | 10 +-
9138 include/net/sock.h | 12 +-
9139 include/net/tcp.h | 8 +-
9140 include/net/xfrm.h | 13 +-
9141 include/rdma/iw_cm.h | 2 +-
9142 include/scsi/libfc.h | 3 +-
9143 include/scsi/scsi_device.h | 6 +-
9144 include/scsi/scsi_driver.h | 2 +-
9145 include/scsi/scsi_transport_fc.h | 3 +-
9146 include/scsi/sg.h | 2 +-
9147 include/sound/compress_driver.h | 2 +-
9148 include/sound/soc.h | 4 +-
9149 include/trace/events/irq.h | 4 +-
9150 include/uapi/linux/a.out.h | 8 +
9151 include/uapi/linux/bcache.h | 5 +-
9152 include/uapi/linux/byteorder/little_endian.h | 28 +-
9153 include/uapi/linux/connector.h | 2 +-
9154 include/uapi/linux/elf.h | 28 +
9155 include/uapi/linux/screen_info.h | 2 +-
9156 include/uapi/linux/swab.h | 6 +-
9157 include/uapi/linux/xattr.h | 4 +
9158 include/video/udlfb.h | 8 +-
9159 include/video/uvesafb.h | 1 +
9160 init/Kconfig | 2 +-
9161 init/Makefile | 3 +
9162 init/do_mounts.c | 14 +-
9163 init/do_mounts.h | 8 +-
9164 init/do_mounts_initrd.c | 30 +-
9165 init/do_mounts_md.c | 6 +-
9166 init/init_task.c | 4 +
9167 init/initramfs.c | 38 +-
9168 init/main.c | 30 +-
9169 ipc/compat.c | 4 +-
9170 ipc/ipc_sysctl.c | 14 +-
9171 ipc/mq_sysctl.c | 4 +-
9172 ipc/sem.c | 4 +-
9173 ipc/shm.c | 6 +
9174 kernel/audit.c | 8 +-
9175 kernel/auditsc.c | 4 +-
9176 kernel/bpf/core.c | 7 +-
9177 kernel/capability.c | 3 +
9178 kernel/compat.c | 38 +-
9179 kernel/debug/debug_core.c | 16 +-
9180 kernel/debug/kdb/kdb_main.c | 4 +-
9181 kernel/events/core.c | 30 +-
9182 kernel/events/internal.h | 10 +-
9183 kernel/events/uprobes.c | 2 +-
9184 kernel/exit.c | 27 +-
9185 kernel/fork.c | 175 +-
9186 kernel/futex.c | 11 +-
9187 kernel/futex_compat.c | 2 +-
9188 kernel/gcov/base.c | 7 +-
9189 kernel/irq/manage.c | 2 +-
9190 kernel/irq/msi.c | 19 +-
9191 kernel/irq/spurious.c | 2 +-
9192 kernel/jump_label.c | 5 +
9193 kernel/kallsyms.c | 37 +-
9194 kernel/kexec.c | 3 +-
9195 kernel/kmod.c | 8 +-
9196 kernel/kprobes.c | 4 +-
9197 kernel/ksysfs.c | 2 +-
9198 kernel/locking/lockdep.c | 7 +-
9199 kernel/locking/mutex-debug.c | 12 +-
9200 kernel/locking/mutex-debug.h | 4 +-
9201 kernel/locking/mutex.c | 6 +-
9202 kernel/module.c | 422 +-
9203 kernel/notifier.c | 17 +-
9204 kernel/padata.c | 4 +-
9205 kernel/panic.c | 5 +-
9206 kernel/pid.c | 2 +-
9207 kernel/pid_namespace.c | 2 +-
9208 kernel/power/process.c | 12 +-
9209 kernel/profile.c | 14 +-
9210 kernel/ptrace.c | 8 +-
9211 kernel/rcu/rcutorture.c | 60 +-
9212 kernel/rcu/tiny.c | 4 +-
9213 kernel/rcu/tree.c | 42 +-
9214 kernel/rcu/tree.h | 16 +-
9215 kernel/rcu/tree_plugin.h | 18 +-
9216 kernel/rcu/tree_trace.c | 14 +-
9217 kernel/resource.c | 4 +-
9218 kernel/sched/auto_group.c | 4 +-
9219 kernel/sched/core.c | 45 +-
9220 kernel/sched/fair.c | 2 +-
9221 kernel/sched/sched.h | 2 +-
9222 kernel/signal.c | 24 +-
9223 kernel/smpboot.c | 4 +-
9224 kernel/softirq.c | 12 +-
9225 kernel/sys.c | 10 +-
9226 kernel/sysctl.c | 34 +-
9227 kernel/time/alarmtimer.c | 2 +-
9228 kernel/time/posix-cpu-timers.c | 4 +-
9229 kernel/time/posix-timers.c | 24 +-
9230 kernel/time/timer.c | 2 +-
9231 kernel/time/timer_stats.c | 10 +-
9232 kernel/trace/blktrace.c | 6 +-
9233 kernel/trace/ftrace.c | 15 +-
9234 kernel/trace/ring_buffer.c | 96 +-
9235 kernel/trace/trace.c | 2 +-
9236 kernel/trace/trace.h | 2 +-
9237 kernel/trace/trace_clock.c | 4 +-
9238 kernel/trace/trace_events.c | 1 -
9239 kernel/trace/trace_functions_graph.c | 4 +-
9240 kernel/trace/trace_mmiotrace.c | 8 +-
9241 kernel/trace/trace_output.c | 10 +-
9242 kernel/trace/trace_seq.c | 2 +-
9243 kernel/trace/trace_stack.c | 2 +-
9244 kernel/user.c | 2 +-
9245 kernel/user_namespace.c | 2 +-
9246 kernel/utsname_sysctl.c | 2 +-
9247 kernel/watchdog.c | 2 +-
9248 kernel/workqueue.c | 8 +-
9249 lib/Kconfig.debug | 8 +-
9250 lib/Makefile | 2 +-
9251 lib/bitmap.c | 8 +-
9252 lib/bug.c | 2 +
9253 lib/debugobjects.c | 2 +-
9254 lib/decompress_bunzip2.c | 3 +-
9255 lib/decompress_unlzma.c | 4 +-
9256 lib/div64.c | 4 +-
9257 lib/dma-debug.c | 4 +-
9258 lib/inflate.c | 2 +-
9259 lib/ioremap.c | 4 +-
9260 lib/kobject.c | 4 +-
9261 lib/list_debug.c | 126 +-
9262 lib/lockref.c | 44 +-
9263 lib/percpu-refcount.c | 2 +-
9264 lib/radix-tree.c | 2 +-
9265 lib/random32.c | 2 +-
9266 lib/rhashtable.c | 4 +-
9267 lib/show_mem.c | 2 +-
9268 lib/strncpy_from_user.c | 2 +-
9269 lib/strnlen_user.c | 2 +-
9270 lib/swiotlb.c | 2 +-
9271 lib/usercopy.c | 6 +
9272 lib/vsprintf.c | 12 +-
9273 mm/Kconfig | 6 +-
9274 mm/backing-dev.c | 4 +-
9275 mm/debug.c | 3 +
9276 mm/filemap.c | 2 +-
9277 mm/gup.c | 13 +-
9278 mm/highmem.c | 6 +-
9279 mm/hugetlb.c | 70 +-
9280 mm/internal.h | 1 +
9281 mm/maccess.c | 12 +-
9282 mm/madvise.c | 37 +
9283 mm/memory-failure.c | 6 +-
9284 mm/memory.c | 424 +-
9285 mm/mempolicy.c | 25 +
9286 mm/mlock.c | 18 +-
9287 mm/mm_init.c | 2 +-
9288 mm/mmap.c | 582 +-
9289 mm/mprotect.c | 137 +-
9290 mm/mremap.c | 39 +-
9291 mm/nommu.c | 21 +-
9292 mm/page-writeback.c | 2 +-
9293 mm/page_alloc.c | 50 +-
9294 mm/percpu.c | 2 +-
9295 mm/process_vm_access.c | 14 +-
9296 mm/rmap.c | 45 +-
9297 mm/shmem.c | 19 +-
9298 mm/slab.c | 111 +-
9299 mm/slab.h | 22 +-
9300 mm/slab_common.c | 86 +-
9301 mm/slob.c | 218 +-
9302 mm/slub.c | 109 +-
9303 mm/sparse-vmemmap.c | 4 +-
9304 mm/sparse.c | 2 +-
9305 mm/swap.c | 2 +
9306 mm/swapfile.c | 12 +-
9307 mm/util.c | 6 +
9308 mm/vmalloc.c | 114 +-
9309 mm/vmstat.c | 12 +-
9310 net/8021q/vlan.c | 5 +-
9311 net/8021q/vlan_netlink.c | 2 +-
9312 net/9p/mod.c | 4 +-
9313 net/9p/trans_fd.c | 2 +-
9314 net/atm/atm_misc.c | 8 +-
9315 net/atm/lec.h | 2 +-
9316 net/atm/proc.c | 6 +-
9317 net/atm/resources.c | 4 +-
9318 net/ax25/sysctl_net_ax25.c | 2 +-
9319 net/batman-adv/bat_iv_ogm.c | 8 +-
9320 net/batman-adv/fragmentation.c | 2 +-
9321 net/batman-adv/routing.c | 4 +-
9322 net/batman-adv/soft-interface.c | 10 +-
9323 net/batman-adv/translation-table.c | 14 +-
9324 net/batman-adv/types.h | 8 +-
9325 net/bluetooth/hci_sock.c | 2 +-
9326 net/bluetooth/l2cap_core.c | 6 +-
9327 net/bluetooth/l2cap_sock.c | 12 +-
9328 net/bluetooth/rfcomm/sock.c | 4 +-
9329 net/bluetooth/rfcomm/tty.c | 4 +-
9330 net/bridge/br_netlink.c | 2 +-
9331 net/bridge/netfilter/ebtables.c | 6 +-
9332 net/caif/cfctrl.c | 11 +-
9333 net/caif/chnl_net.c | 2 +-
9334 net/can/af_can.c | 2 +-
9335 net/can/gw.c | 6 +-
9336 net/ceph/messenger.c | 4 +-
9337 net/compat.c | 26 +-
9338 net/core/datagram.c | 2 +-
9339 net/core/dev.c | 16 +-
9340 net/core/filter.c | 2 +-
9341 net/core/flow.c | 6 +-
9342 net/core/neighbour.c | 18 +-
9343 net/core/net-sysfs.c | 2 +-
9344 net/core/net_namespace.c | 8 +-
9345 net/core/netpoll.c | 4 +-
9346 net/core/rtnetlink.c | 17 +-
9347 net/core/scm.c | 12 +-
9348 net/core/skbuff.c | 11 +-
9349 net/core/sock.c | 28 +-
9350 net/core/sock_diag.c | 15 +-
9351 net/core/sysctl_net_core.c | 22 +-
9352 net/decnet/af_decnet.c | 1 +
9353 net/decnet/sysctl_net_decnet.c | 4 +-
9354 net/dsa/dsa.c | 2 +-
9355 net/hsr/hsr_netlink.c | 2 +-
9356 net/ieee802154/6lowpan/core.c | 2 +-
9357 net/ieee802154/6lowpan/reassembly.c | 14 +-
9358 net/ipv4/af_inet.c | 2 +-
9359 net/ipv4/arp.c | 2 +-
9360 net/ipv4/devinet.c | 18 +-
9361 net/ipv4/fib_frontend.c | 6 +-
9362 net/ipv4/fib_semantics.c | 2 +-
9363 net/ipv4/inet_connection_sock.c | 4 +-
9364 net/ipv4/inet_diag.c | 4 +-
9365 net/ipv4/inet_timewait_sock.c | 2 +-
9366 net/ipv4/inetpeer.c | 2 +-
9367 net/ipv4/ip_fragment.c | 15 +-
9368 net/ipv4/ip_gre.c | 6 +-
9369 net/ipv4/ip_sockglue.c | 2 +-
9370 net/ipv4/ip_vti.c | 4 +-
9371 net/ipv4/ipconfig.c | 6 +-
9372 net/ipv4/ipip.c | 4 +-
9373 net/ipv4/netfilter/arp_tables.c | 12 +-
9374 net/ipv4/netfilter/ip_tables.c | 12 +-
9375 net/ipv4/ping.c | 14 +-
9376 net/ipv4/proc.c | 8 +-
9377 net/ipv4/raw.c | 14 +-
9378 net/ipv4/route.c | 32 +-
9379 net/ipv4/sysctl_net_ipv4.c | 22 +-
9380 net/ipv4/tcp_input.c | 6 +-
9381 net/ipv4/tcp_probe.c | 2 +-
9382 net/ipv4/udp.c | 10 +-
9383 net/ipv4/xfrm4_mode_transport.c | 2 +-
9384 net/ipv4/xfrm4_policy.c | 17 +-
9385 net/ipv4/xfrm4_state.c | 4 +-
9386 net/ipv6/addrconf.c | 22 +-
9387 net/ipv6/af_inet6.c | 2 +-
9388 net/ipv6/datagram.c | 2 +-
9389 net/ipv6/icmp.c | 2 +-
9390 net/ipv6/ip6_fib.c | 4 +-
9391 net/ipv6/ip6_gre.c | 10 +-
9392 net/ipv6/ip6_tunnel.c | 4 +-
9393 net/ipv6/ip6_vti.c | 4 +-
9394 net/ipv6/ipv6_sockglue.c | 2 +-
9395 net/ipv6/ndisc.c | 2 +-
9396 net/ipv6/netfilter/ip6_tables.c | 12 +-
9397 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
9398 net/ipv6/ping.c | 33 +-
9399 net/ipv6/proc.c | 10 +-
9400 net/ipv6/raw.c | 17 +-
9401 net/ipv6/reassembly.c | 13 +-
9402 net/ipv6/route.c | 2 +-
9403 net/ipv6/sit.c | 4 +-
9404 net/ipv6/sysctl_net_ipv6.c | 2 +-
9405 net/ipv6/udp.c | 6 +-
9406 net/ipv6/xfrm6_policy.c | 17 +-
9407 net/irda/ircomm/ircomm_tty.c | 18 +-
9408 net/iucv/af_iucv.c | 4 +-
9409 net/iucv/iucv.c | 2 +-
9410 net/key/af_key.c | 4 +-
9411 net/l2tp/l2tp_eth.c | 38 +-
9412 net/l2tp/l2tp_ip.c | 2 +-
9413 net/l2tp/l2tp_ip6.c | 2 +-
9414 net/mac80211/cfg.c | 10 +-
9415 net/mac80211/debugfs_key.c | 4 +-
9416 net/mac80211/ieee80211_i.h | 3 +-
9417 net/mac80211/iface.c | 20 +-
9418 net/mac80211/key.c | 4 +-
9419 net/mac80211/main.c | 2 +-
9420 net/mac80211/pm.c | 4 +-
9421 net/mac80211/rate.c | 2 +-
9422 net/mac80211/sta_info.c | 2 +-
9423 net/mac80211/tx.c | 2 +-
9424 net/mac80211/util.c | 8 +-
9425 net/mac80211/wpa.c | 10 +-
9426 net/mac802154/iface.c | 4 +-
9427 net/mpls/af_mpls.c | 6 +-
9428 net/netfilter/ipset/ip_set_core.c | 4 +-
9429 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
9430 net/netfilter/ipvs/ip_vs_core.c | 4 +-
9431 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
9432 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
9433 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
9434 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
9435 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
9436 net/netfilter/nf_conntrack_acct.c | 2 +-
9437 net/netfilter/nf_conntrack_ecache.c | 2 +-
9438 net/netfilter/nf_conntrack_helper.c | 2 +-
9439 net/netfilter/nf_conntrack_netlink.c | 22 +-
9440 net/netfilter/nf_conntrack_proto.c | 2 +-
9441 net/netfilter/nf_conntrack_standalone.c | 2 +-
9442 net/netfilter/nf_conntrack_timestamp.c | 2 +-
9443 net/netfilter/nf_log.c | 10 +-
9444 net/netfilter/nf_sockopt.c | 4 +-
9445 net/netfilter/nf_tables_api.c | 13 +-
9446 net/netfilter/nfnetlink_acct.c | 7 +-
9447 net/netfilter/nfnetlink_cthelper.c | 2 +-
9448 net/netfilter/nfnetlink_cttimeout.c | 2 +-
9449 net/netfilter/nfnetlink_log.c | 4 +-
9450 net/netfilter/nft_compat.c | 9 +-
9451 net/netfilter/xt_statistic.c | 8 +-
9452 net/netlink/af_netlink.c | 14 +-
9453 net/netlink/diag.c | 2 +-
9454 net/netlink/genetlink.c | 14 +-
9455 net/openvswitch/vport-internal_dev.c | 2 +-
9456 net/packet/af_packet.c | 26 +-
9457 net/packet/diag.c | 2 +-
9458 net/packet/internal.h | 6 +-
9459 net/phonet/pep.c | 6 +-
9460 net/phonet/socket.c | 2 +-
9461 net/phonet/sysctl.c | 2 +-
9462 net/rds/cong.c | 6 +-
9463 net/rds/ib.h | 2 +-
9464 net/rds/ib_cm.c | 2 +-
9465 net/rds/ib_recv.c | 4 +-
9466 net/rds/iw.h | 2 +-
9467 net/rds/iw_cm.c | 2 +-
9468 net/rds/iw_recv.c | 4 +-
9469 net/rds/rds.h | 2 +-
9470 net/rds/tcp.c | 2 +-
9471 net/rds/tcp_send.c | 2 +-
9472 net/rxrpc/af_rxrpc.c | 2 +-
9473 net/rxrpc/ar-ack.c | 14 +-
9474 net/rxrpc/ar-call.c | 2 +-
9475 net/rxrpc/ar-connection.c | 2 +-
9476 net/rxrpc/ar-connevent.c | 2 +-
9477 net/rxrpc/ar-input.c | 4 +-
9478 net/rxrpc/ar-internal.h | 8 +-
9479 net/rxrpc/ar-local.c | 2 +-
9480 net/rxrpc/ar-output.c | 4 +-
9481 net/rxrpc/ar-peer.c | 2 +-
9482 net/rxrpc/ar-proc.c | 4 +-
9483 net/rxrpc/ar-transport.c | 2 +-
9484 net/rxrpc/rxkad.c | 4 +-
9485 net/sched/sch_generic.c | 4 +-
9486 net/sctp/ipv6.c | 6 +-
9487 net/sctp/protocol.c | 10 +-
9488 net/sctp/sm_sideeffect.c | 2 +-
9489 net/sctp/socket.c | 21 +-
9490 net/sctp/sysctl.c | 10 +-
9491 net/socket.c | 18 +-
9492 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
9493 net/sunrpc/clnt.c | 4 +-
9494 net/sunrpc/sched.c | 4 +-
9495 net/sunrpc/svc.c | 4 +-
9496 net/sunrpc/svcauth_unix.c | 2 +-
9497 net/sunrpc/xprtrdma/svc_rdma.c | 44 +-
9498 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
9499 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
9500 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
9501 net/tipc/netlink_compat.c | 12 +-
9502 net/tipc/subscr.c | 2 +-
9503 net/unix/diag.c | 2 +-
9504 net/unix/sysctl_net_unix.c | 2 +-
9505 net/wireless/wext-core.c | 19 +-
9506 net/xfrm/xfrm_policy.c | 16 +-
9507 net/xfrm/xfrm_state.c | 33 +-
9508 net/xfrm/xfrm_sysctl.c | 2 +-
9509 net/xfrm/xfrm_user.c | 2 +-
9510 scripts/Kbuild.include | 2 +-
9511 scripts/Makefile.build | 2 +-
9512 scripts/Makefile.clean | 3 +-
9513 scripts/Makefile.host | 69 +-
9514 scripts/basic/fixdep.c | 12 +-
9515 scripts/dtc/checks.c | 14 +-
9516 scripts/dtc/data.c | 6 +-
9517 scripts/dtc/flattree.c | 8 +-
9518 scripts/dtc/livetree.c | 4 +-
9519 scripts/gcc-plugin.sh | 51 +
9520 scripts/headers_install.sh | 1 +
9521 scripts/kallsyms.c | 4 +-
9522 scripts/kconfig/lkc.h | 5 +-
9523 scripts/kconfig/menu.c | 2 +-
9524 scripts/kconfig/symbol.c | 6 +-
9525 scripts/link-vmlinux.sh | 2 +-
9526 scripts/mod/file2alias.c | 14 +-
9527 scripts/mod/modpost.c | 25 +-
9528 scripts/mod/modpost.h | 6 +-
9529 scripts/mod/sumversion.c | 2 +-
9530 scripts/module-common.lds | 4 +
9531 scripts/package/builddeb | 1 +
9532 scripts/pnmtologo.c | 6 +-
9533 scripts/sortextable.h | 6 +-
9534 scripts/tags.sh | 2 +-
9535 security/Kconfig | 691 +-
9536 security/apparmor/include/policy.h | 2 +-
9537 security/apparmor/policy.c | 4 +-
9538 security/integrity/ima/ima.h | 4 +-
9539 security/integrity/ima/ima_api.c | 2 +-
9540 security/integrity/ima/ima_fs.c | 4 +-
9541 security/integrity/ima/ima_queue.c | 2 +-
9542 security/keys/internal.h | 8 +-
9543 security/keys/key.c | 18 +-
9544 security/keys/keyring.c | 4 -
9545 security/selinux/avc.c | 6 +-
9546 security/selinux/include/xfrm.h | 2 +-
9547 security/yama/yama_lsm.c | 2 +-
9548 sound/aoa/codecs/onyx.c | 7 +-
9549 sound/aoa/codecs/onyx.h | 1 +
9550 sound/core/oss/pcm_oss.c | 18 +-
9551 sound/core/pcm_compat.c | 2 +-
9552 sound/core/pcm_native.c | 4 +-
9553 sound/core/seq/seq_clientmgr.c | 10 +-
9554 sound/core/seq/seq_compat.c | 2 +-
9555 sound/core/seq/seq_fifo.c | 6 +-
9556 sound/core/seq/seq_fifo.h | 2 +-
9557 sound/core/seq/seq_memory.c | 6 +-
9558 sound/core/sound.c | 2 +-
9559 sound/drivers/mts64.c | 14 +-
9560 sound/drivers/opl4/opl4_lib.c | 2 +-
9561 sound/drivers/portman2x4.c | 3 +-
9562 sound/firewire/amdtp-am824.c | 2 +-
9563 sound/firewire/amdtp-stream.c | 4 +-
9564 sound/firewire/amdtp-stream.h | 2 +-
9565 sound/firewire/digi00x/amdtp-dot.c | 2 +-
9566 sound/firewire/isight.c | 10 +-
9567 sound/firewire/scs1x.c | 8 +-
9568 sound/oss/sb_audio.c | 2 +-
9569 sound/oss/swarm_cs4297a.c | 6 +-
9570 sound/pci/hda/hda_codec.c | 2 +-
9571 sound/pci/ymfpci/ymfpci.h | 2 +-
9572 sound/pci/ymfpci/ymfpci_main.c | 12 +-
9573 sound/soc/codecs/sti-sas.c | 10 +-
9574 sound/soc/intel/skylake/skl-sst-dsp.h | 4 +-
9575 sound/soc/soc-ac97.c | 6 +-
9576 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
9577 tools/gcc/Makefile | 42 +
9578 tools/gcc/checker_plugin.c | 549 +
9579 tools/gcc/colorize_plugin.c | 215 +
9580 tools/gcc/constify_plugin.c | 571 +
9581 tools/gcc/gcc-common.h | 819 +
9582 tools/gcc/initify_plugin.c | 591 +
9583 tools/gcc/kallocstat_plugin.c | 188 +
9584 tools/gcc/kernexec_plugin.c | 549 +
9585 tools/gcc/latent_entropy_plugin.c | 474 +
9586 tools/gcc/randomize_layout_seed.h | 1 +
9587 tools/gcc/size_overflow_plugin/.gitignore | 2 +
9588 tools/gcc/size_overflow_plugin/Makefile | 28 +
9589 .../disable_size_overflow_hash.data | 12434 ++
9590 .../disable_size_overflow_hash.h | 152601 ++++++++++++++++++
9591 .../generate_size_overflow_hash.sh | 103 +
9592 .../insert_size_overflow_asm.c | 416 +
9593 .../size_overflow_plugin/intentional_overflow.c | 1116 +
9594 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
9595 tools/gcc/size_overflow_plugin/size_overflow.h | 325 +
9596 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
9597 .../size_overflow_plugin/size_overflow_hash.data | 21454 +++
9598 .../size_overflow_hash_aux.data | 92 +
9599 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 +
9600 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
9601 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
9602 .../size_overflow_plugin_hash.c | 352 +
9603 .../size_overflow_plugin/size_overflow_transform.c | 745 +
9604 .../size_overflow_transform_core.c | 1015 +
9605 tools/gcc/stackleak_plugin.c | 444 +
9606 tools/gcc/structleak_plugin.c | 290 +
9607 tools/include/linux/compiler.h | 8 +
9608 tools/perf/util/include/asm/alternative-asm.h | 3 +
9609 tools/virtio/linux/uaccess.h | 2 +-
9610 virt/kvm/kvm_main.c | 42 +-
9611 2088 files changed, 221599 insertions(+), 9618 deletions(-)
9612 commit 87790bbd0d8dc2bd7fd86cb947e32886db9e9766
9613 Author: Matthew Wilcox <willy@linux.intel.com>
9614 Date: Tue Feb 2 16:57:52 2016 -0800
9615
9616 radix-tree: fix race in gang lookup
9617
9618 If the indirect_ptr bit is set on a slot, that indicates we need to redo
9619 the lookup. Introduce a new function radix_tree_iter_retry() which
9620 forces the loop to retry the lookup by setting 'slot' to NULL and
9621 turning the iterator back to point at the problematic entry.
9622
9623 This is a pretty rare problem to hit at the moment; the lookup has to
9624 race with a grow of the radix tree from a height of 0. The consequences
9625 of hitting this race are that gang lookup could return a pointer to a
9626 radix_tree_node instead of a pointer to whatever the user had inserted
9627 in the tree.
9628
9629 Fixes: cebbd29e1c2f ("radix-tree: rewrite gang lookup using iterator")
9630 Signed-off-by: Matthew Wilcox <willy@linux.intel.com>
9631 Cc: Hugh Dickins <hughd@google.com>
9632 Cc: Ohad Ben-Cohen <ohad@wizery.com>
9633 Cc: Konstantin Khlebnikov <khlebnikov@openvz.org>
9634 Cc: <stable@vger.kernel.org>
9635 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9636 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9637
9638 include/linux/radix-tree.h | 16 ++++++++++++++++
9639 lib/radix-tree.c | 12 ++++++++++--
9640 2 files changed, 26 insertions(+), 2 deletions(-)
9641
9642 commit bf628043b4589c910919a0f221ae7f42aa8cea93
9643 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
9644 Date: Wed Feb 3 02:11:03 2016 +0100
9645
9646 unix: correctly track in-flight fds in sending process user_struct
9647
9648 The commit referenced in the Fixes tag incorrectly accounted the number
9649 of in-flight fds over a unix domain socket to the original opener
9650 of the file-descriptor. This allows another process to arbitrary
9651 deplete the original file-openers resource limit for the maximum of
9652 open files. Instead the sending processes and its struct cred should
9653 be credited.
9654
9655 To do so, we add a reference counted struct user_struct pointer to the
9656 scm_fp_list and use it to account for the number of inflight unix fds.
9657
9658 Fixes: 712f4aad406bb1 ("unix: properly account for FDs passed over unix sockets")
9659 Reported-by: David Herrmann <dh.herrmann@gmail.com>
9660 Cc: David Herrmann <dh.herrmann@gmail.com>
9661 Cc: Willy Tarreau <w@1wt.eu>
9662 Cc: Linus Torvalds <torvalds@linux-foundation.org>
9663 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
9664 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
9665 Signed-off-by: David S. Miller <davem@davemloft.net>
9666
9667 include/net/af_unix.h | 4 ++--
9668 include/net/scm.h | 1 +
9669 net/core/scm.c | 7 +++++++
9670 net/unix/af_unix.c | 4 ++--
9671 net/unix/garbage.c | 8 ++++----
9672 5 files changed, 16 insertions(+), 8 deletions(-)
9673
9674 commit e830db443ff78d70b7b63536e688d73907face0c
9675 Author: Mike Kravetz <mike.kravetz@oracle.com>
9676 Date: Fri Jan 15 16:57:37 2016 -0800
9677
9678 fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list()
9679
9680 Hillf Danton noticed bugs in the hugetlb_vmtruncate_list routine. The
9681 argument end is of type pgoff_t. It was being converted to a vaddr
9682 offset and passed to unmap_hugepage_range. However, end was also being
9683 used as an argument to the vma_interval_tree_foreach controlling loop.
9684 In addition, the conversion of end to vaddr offset was incorrect.
9685
9686 hugetlb_vmtruncate_list is called as part of a file truncate or
9687 fallocate hole punch operation.
9688
9689 When truncating a hugetlbfs file, this bug could prevent some pages from
9690 being unmapped. This is possible if there are multiple vmas mapping the
9691 file, and there is a sufficiently sized hole between the mappings. The
9692 size of the hole between two vmas (A,B) must be such that the starting
9693 virtual address of B is greater than (ending virtual address of A <<
9694 PAGE_SHIFT). In this case, the pages in B would not be unmapped. If
9695 pages are not properly unmapped during truncate, the following BUG is
9696 hit:
9697
9698 kernel BUG at fs/hugetlbfs/inode.c:428!
9699
9700 In the fallocate hole punch case, this bug could prevent pages from
9701 being unmapped as in the truncate case. However, for hole punch the
9702 result is that unmapped pages will not be removed during the operation.
9703 For hole punch, it is also possible that more pages than desired will be
9704 unmapped. This unnecessary unmapping will cause page faults to
9705 reestablish the mappings on subsequent page access.
9706
9707 Fixes: 1bfad99ab (" hugetlbfs: hugetlb_vmtruncate_list() needs to take a range")Reported-by: Hillf Danton <hillf.zj@alibaba-inc.com>
9708 Signed-off-by: Mike Kravetz <mike.kravetz@oracle.com>
9709 Cc: Hugh Dickins <hughd@google.com>
9710 Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
9711 Cc: Davidlohr Bueso <dave@stgolabs.net>
9712 Cc: Dave Hansen <dave.hansen@linux.intel.com>
9713 Cc: <stable@vger.kernel.org> [4.3]
9714 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9715 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9716
9717 fs/hugetlbfs/inode.c | 19 +++++++++++--------
9718 1 files changed, 11 insertions(+), 8 deletions(-)
9719
9720 commit cdb3ba4a9113b779347387f3b6c6ea72dd4db12f
9721 Author: Takashi Iwai <tiwai@suse.de>
9722 Date: Thu Feb 4 17:06:13 2016 +0100
9723
9724 ALSA: timer: Fix leftover link at closing
9725
9726 In ALSA timer core, the active timer instance is managed in
9727 active_list linked list. Each element is added / removed dynamically
9728 at timer start, stop and in timer interrupt. The problem is that
9729 snd_timer_interrupt() has a thinko and leaves the element in
9730 active_list when it's the last opened element. This eventually leads
9731 to list corruption or use-after-free error.
9732
9733 This hasn't been revealed because we used to delete the list forcibly
9734 in snd_timer_stop() in the past. However, the recent fix avoids the
9735 double-stop behavior (in commit [f784beb75ce8: ALSA: timer: Fix link
9736 corruption due to double start or stop]), and this leak hits reality.
9737
9738 This patch fixes the link management in snd_timer_interrupt(). Now it
9739 simply unlinks no matter which stream is.
9740
9741 BugLink: http://lkml.kernel.org/r/CACT4Y+Yy2aukHP-EDp8-ziNqNNmb-NTf=jDWXMP7jB8HDa2vng@mail.gmail.com
9742 Reported-by: Dmitry Vyukov <dvyukov@google.com>
9743 Cc: <stable@vger.kernel.org>
9744 Signed-off-by: Takashi Iwai <tiwai@suse.de>
9745
9746 sound/core/timer.c | 4 ++--
9747 1 files changed, 2 insertions(+), 2 deletions(-)
9748
9749 commit 47d9647902f6a2f46a2be1e0140ba0f6f8c06008
9750 Author: Konstantin Khlebnikov <koct9i@gmail.com>
9751 Date: Fri Feb 5 15:37:01 2016 -0800
9752
9753 radix-tree: fix oops after radix_tree_iter_retry
9754
9755 Helper radix_tree_iter_retry() resets next_index to the current index.
9756 In following radix_tree_next_slot current chunk size becomes zero. This
9757 isn't checked and it tries to dereference null pointer in slot.
9758
9759 Tagged iterator is fine because retry happens only at slot 0 where tag
9760 bitmask in iter->tags is filled with single bit.
9761
9762 Fixes: 46437f9a554f ("radix-tree: fix race in gang lookup")
9763 Signed-off-by: Konstantin Khlebnikov <koct9i@gmail.com>
9764 Cc: Matthew Wilcox <willy@linux.intel.com>
9765 Cc: Hugh Dickins <hughd@google.com>
9766 Cc: Ohad Ben-Cohen <ohad@wizery.com>
9767 Cc: Jeremiah Mahler <jmmahler@gmail.com>
9768 Cc: <stable@vger.kernel.org>
9769 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9770 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9771
9772 include/linux/radix-tree.h | 6 +++---
9773 1 files changed, 3 insertions(+), 3 deletions(-)
9774
9775 commit 95b5dcb3c01958502af00b0bc0da1d906aae11a2
9776 Merge: 438be0b 256aeaf
9777 Author: Brad Spengler <spender@grsecurity.net>
9778 Date: Sun Feb 7 08:29:33 2016 -0500
9779
9780 Merge branch 'pax-test' into grsec-test
9781
9782 commit 256aeaf87c22de8edf1f03682a572c590ae07771
9783 Author: Brad Spengler <spender@grsecurity.net>
9784 Date: Sun Feb 7 08:29:09 2016 -0500
9785
9786 Update to pax-linux-4.3.5-test28.patch:
9787 - fixed an integer truncation bug in numa_clear_kernel_node_hotplug caught by the size overflow plugin, reported by x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4374)
9788 - spender fixed UDEREF on arm
9789
9790 arch/arm/Kconfig | 1 +
9791 arch/arm/include/asm/domain.h | 21 ++++++++-
9792 arch/arm/include/asm/futex.h | 9 ----
9793 arch/arm/include/asm/thread_info.h | 3 +
9794 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
9795 arch/arm/kernel/entry-armv.S | 2 +-
9796 arch/arm/kernel/process.c | 2 +-
9797 arch/arm/mm/alignment.c | 8 ----
9798 arch/x86/mm/numa.c | 2 +-
9799 security/Kconfig | 1 -
9800 10 files changed, 60 insertions(+), 70 deletions(-)
9801
9802 commit 438be0bd112bd17942b2628c53054dc1007558a1
9803 Author: Brad Spengler <spender@grsecurity.net>
9804 Date: Sat Feb 6 19:50:31 2016 -0500
9805
9806 Fix a number of issues caused by the upstream merging of a UDEREF ripoff resulting in unbootable
9807 ARM systems reported on the forums
9808
9809 arch/arm/Kconfig | 1 +
9810 arch/arm/include/asm/domain.h | 21 ++++++++-
9811 arch/arm/include/asm/futex.h | 9 ----
9812 arch/arm/include/asm/thread_info.h | 3 +
9813 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
9814 arch/arm/kernel/entry-armv.S | 2 +-
9815 arch/arm/kernel/process.c | 2 +-
9816 arch/arm/mm/alignment.c | 8 ----
9817 security/Kconfig | 1 -
9818 9 files changed, 59 insertions(+), 69 deletions(-)
9819
9820 commit 4ffdd5ef1f87e611af1efb4f251ada92abe9f4c0
9821 Author: Brad Spengler <spender@grsecurity.net>
9822 Date: Sat Feb 6 11:21:53 2016 -0500
9823
9824 Fix another compiler warning
9825
9826 net/ipv4/tcp_input.c | 2 ++
9827 1 files changed, 2 insertions(+), 0 deletions(-)
9828
9829 commit 30b5b7bc0fd67d458bdd5ab35e4689769eabd2ed
9830 Author: Brad Spengler <spender@grsecurity.net>
9831 Date: Sat Feb 6 11:16:12 2016 -0500
9832
9833 Fix two compiler warnings
9834
9835 kernel/pid.c | 5 ++---
9836 kernel/ptrace.c | 3 ++-
9837 2 files changed, 4 insertions(+), 4 deletions(-)
9838
9839 commit dda4d2a21914c480750f10bd55c6e3203d415d8d
9840 Author: Brad Spengler <spender@grsecurity.net>
9841 Date: Wed Feb 3 21:22:40 2016 -0500
9842
9843 Apply fix for integer truncation in NUMA init code, reported by
9844 x14sg1 on the forums:
9845 https://forums.grsecurity.net/viewtopic.php?f=3&t=4374
9846
9847 arch/x86/mm/numa.c | 2 +-
9848 1 files changed, 1 insertions(+), 1 deletions(-)
9849
9850 commit 477505f7c893cb6a2c3e22f83eefd9c985d7b3ca
9851 Merge: a781740 016d0d8
9852 Author: Brad Spengler <spender@grsecurity.net>
9853 Date: Wed Feb 3 21:20:58 2016 -0500
9854
9855 Merge branch 'pax-test' into grsec-test
9856
9857 commit 016d0d81a8dd4be1304c82a68e0ccf425868f467
9858 Author: Brad Spengler <spender@grsecurity.net>
9859 Date: Wed Feb 3 21:20:10 2016 -0500
9860
9861 Update to pax-linux-4.3.5-test27.patch:
9862 - fixed a bunch of potential REFCOUNT false positives, reported by Emese
9863 - restored padding in fpregs_state for storing AVX-512 state in the future
9864 - constified netlink_dump_control
9865 - added const version of debug_gimple_stmt for gcc plugins, by Emese
9866 - Emese fixed a bug in initify that could have initified too much
9867 - Emese fixed a false positive intentional integer overflow in xfrm4_extract_header, reported by corsac
9868
9869 arch/x86/include/asm/fpu/types.h | 1 +
9870 arch/x86/include/asm/mmu_context.h | 2 +-
9871 block/blk-cgroup.c | 18 ++--
9872 block/cfq-iosched.c | 4 +-
9873 crypto/crypto_user.c | 8 ++-
9874 drivers/acpi/apei/ghes.c | 6 +-
9875 drivers/char/ipmi/ipmi_ssif.c | 12 ++--
9876 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
9877 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
9878 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
9879 drivers/infiniband/core/netlink.c | 5 +-
9880 drivers/infiniband/hw/cxgb4/device.c | 6 +-
9881 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
9882 drivers/md/bcache/alloc.c | 2 +-
9883 drivers/md/bcache/bcache.h | 10 +-
9884 drivers/md/bcache/btree.c | 2 +-
9885 drivers/md/bcache/io.c | 10 +-
9886 drivers/md/bcache/journal.c | 2 +-
9887 drivers/md/bcache/stats.c | 26 +++---
9888 drivers/md/bcache/stats.h | 16 ++--
9889 drivers/md/bcache/super.c | 2 +-
9890 drivers/md/bcache/sysfs.c | 20 +++---
9891 drivers/md/dm-cache-target.c | 98 ++++++++++++------------
9892 drivers/md/dm-raid.c | 2 +-
9893 drivers/md/md.c | 6 +-
9894 drivers/md/md.h | 2 +-
9895 drivers/md/raid1.c | 2 +-
9896 drivers/md/raid10.c | 2 +-
9897 drivers/md/raid5.c | 4 +-
9898 drivers/media/pci/zoran/zoran.h | 1 -
9899 drivers/media/pci/zoran/zoran_driver.c | 3 -
9900 drivers/net/ethernet/sfc/selftest.c | 20 +++---
9901 drivers/net/irda/vlsi_ir.c | 18 ++--
9902 drivers/net/irda/vlsi_ir.h | 14 ++--
9903 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
9904 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
9905 drivers/net/wireless/ath/carl9170/main.c | 10 +-
9906 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
9907 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
9908 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
9909 drivers/scsi/hptiop.c | 2 -
9910 drivers/scsi/hptiop.h | 1 -
9911 drivers/scsi/ipr.c | 6 +-
9912 drivers/scsi/ipr.h | 2 +-
9913 drivers/scsi/qla2xxx/qla_target.c | 10 +-
9914 drivers/scsi/qla2xxx/qla_target.h | 2 +-
9915 fs/btrfs/ctree.c | 2 +-
9916 fs/btrfs/ctree.h | 4 +-
9917 fs/btrfs/delayed-ref.c | 4 +-
9918 fs/btrfs/disk-io.c | 4 +-
9919 fs/btrfs/file.c | 4 +-
9920 fs/btrfs/raid56.c | 32 ++++----
9921 fs/btrfs/tests/btrfs-tests.c | 2 +-
9922 fs/btrfs/transaction.c | 2 +-
9923 fs/btrfs/tree-log.c | 8 +-
9924 fs/btrfs/volumes.c | 14 ++--
9925 fs/btrfs/volumes.h | 22 +++---
9926 fs/jbd2/commit.c | 2 +-
9927 fs/jbd2/transaction.c | 4 +-
9928 fs/ocfs2/dlm/dlmcommon.h | 4 +-
9929 fs/ocfs2/dlm/dlmdebug.c | 10 +-
9930 fs/ocfs2/dlm/dlmdomain.c | 4 +-
9931 fs/ocfs2/dlm/dlmmaster.c | 4 +-
9932 include/acpi/ghes.h | 2 +-
9933 include/linux/blk-cgroup.h | 24 +++---
9934 include/linux/jbd2.h | 2 +-
9935 include/linux/netlink.h | 12 ++--
9936 include/net/cfg802154.h | 2 +-
9937 include/net/mac80211.h | 2 +-
9938 include/net/neighbour.h | 2 +-
9939 kernel/rcu/tree_plugin.h | 4 +-
9940 net/batman-adv/routing.c | 4 +-
9941 net/batman-adv/soft-interface.c | 2 +-
9942 net/batman-adv/translation-table.c | 14 ++--
9943 net/batman-adv/types.h | 2 +-
9944 net/core/neighbour.c | 14 ++--
9945 net/core/rtnetlink.c | 2 +-
9946 net/ipv4/arp.c | 2 +-
9947 net/ipv4/inet_diag.c | 4 +-
9948 net/ipv4/xfrm4_state.c | 4 +-
9949 net/ipv6/ndisc.c | 2 +-
9950 net/mac80211/cfg.c | 2 +-
9951 net/mac80211/debugfs_key.c | 2 +-
9952 net/mac80211/key.c | 4 +-
9953 net/mac80211/tx.c | 2 +-
9954 net/mac80211/wpa.c | 10 +-
9955 net/mac802154/iface.c | 4 +-
9956 net/netfilter/ipset/ip_set_core.c | 2 +-
9957 net/netfilter/nf_conntrack_netlink.c | 22 +++---
9958 net/netfilter/nf_tables_api.c | 13 ++--
9959 net/netfilter/nfnetlink_acct.c | 7 +-
9960 net/netfilter/nfnetlink_cthelper.c | 2 +-
9961 net/netfilter/nfnetlink_cttimeout.c | 2 +-
9962 net/netlink/af_netlink.c | 10 ++-
9963 net/netlink/diag.c | 2 +-
9964 net/netlink/genetlink.c | 14 ++--
9965 net/packet/af_packet.c | 18 ++--
9966 net/packet/diag.c | 2 +-
9967 net/packet/internal.h | 6 +-
9968 net/unix/diag.c | 2 +-
9969 net/xfrm/xfrm_user.c | 2 +-
9970 security/apparmor/include/policy.h | 2 +-
9971 security/apparmor/policy.c | 4 +-
9972 sound/core/seq/seq_clientmgr.c | 2 +-
9973 sound/core/seq/seq_fifo.c | 6 +-
9974 sound/core/seq/seq_fifo.h | 2 +-
9975 tools/gcc/gcc-common.h | 24 ++++--
9976 tools/gcc/initify_plugin.c | 7 +-
9977 tools/lib/api/Makefile | 2 +-
9978 109 files changed, 399 insertions(+), 391 deletions(-)
9979
9980 commit a7817402ac837b1aee07fac42537a02097055098
9981 Author: Matt Fleming <matt@codeblueprint.co.uk>
9982 Date: Fri Jan 29 11:36:10 2016 +0000
9983
9984 x86/mm/pat: Avoid truncation when converting cpa->numpages to address
9985
9986 There are a couple of nasty truncation bugs lurking in the pageattr
9987 code that can be triggered when mapping EFI regions, e.g. when we pass
9988 a cpa->pgd pointer. Because cpa->numpages is a 32-bit value, shifting
9989 left by PAGE_SHIFT will truncate the resultant address to 32-bits.
9990
9991 Viorel-Cătălin managed to trigger this bug on his Dell machine that
9992 provides a ~5GB EFI region which requires 1236992 pages to be mapped.
9993 When calling populate_pud() the end of the region gets calculated
9994 incorrectly in the following buggy expression,
9995
9996 end = start + (cpa->numpages << PAGE_SHIFT);
9997
9998 And only 188416 pages are mapped. Next, populate_pud() gets invoked
9999 for a second time because of the loop in __change_page_attr_set_clr(),
10000 only this time no pages get mapped because shifting the remaining
10001 number of pages (1048576) by PAGE_SHIFT is zero. At which point the
10002 loop in __change_page_attr_set_clr() spins forever because we fail to
10003 map progress.
10004
10005 Hitting this bug depends very much on the virtual address we pick to
10006 map the large region at and how many pages we map on the initial run
10007 through the loop. This explains why this issue was only recently hit
10008 with the introduction of commit
10009
10010 a5caa209ba9c ("x86/efi: Fix boot crash by mapping EFI memmap
10011 entries bottom-up at runtime, instead of top-down")
10012
10013 It's interesting to note that safe uses of cpa->numpages do exist in
10014 the pageattr code. If instead of shifting ->numpages we multiply by
10015 PAGE_SIZE, no truncation occurs because PAGE_SIZE is a UL value, and
10016 so the result is unsigned long.
10017
10018 To avoid surprises when users try to convert very large cpa->numpages
10019 values to addresses, change the data type from 'int' to 'unsigned
10020 long', thereby making it suitable for shifting by PAGE_SHIFT without
10021 any type casting.
10022
10023 The alternative would be to make liberal use of casting, but that is
10024 far more likely to cause problems in the future when someone adds more
10025 code and fails to cast properly; this bug was difficult enough to
10026 track down in the first place.
10027
10028 Reported-and-tested-by: Viorel-Cătălin Răpițeanu <rapiteanu.catalin@gmail.com>
10029 Acked-by: Borislav Petkov <bp@alien8.de>
10030 Cc: Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com>
10031 Cc: <stable@vger.kernel.org>
10032 Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
10033 Link: https://bugzilla.kernel.org/show_bug.cgi?id=110131
10034 Link: http://lkml.kernel.org/r/1454067370-10374-1-git-send-email-matt@codeblueprint.co.uk
10035 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
10036
10037 arch/x86/mm/pageattr.c | 4 ++--
10038 1 files changed, 2 insertions(+), 2 deletions(-)
10039
10040 commit 64dd9d7a67a742fda257cdd16510c29e695c34b5
10041 Author: Jan Beulich <JBeulich@suse.com>
10042 Date: Tue Jan 26 04:15:18 2016 -0700
10043
10044 x86/mm: Fix types used in pgprot cacheability flags translations
10045
10046 For PAE kernels "unsigned long" is not suitable to hold page protection
10047 flags, since _PAGE_NX doesn't fit there. This is the reason for quite a
10048 few W+X pages getting reported as insecure during boot (observed namely
10049 for the entire initrd range).
10050
10051 Fixes: 281d4078be ("x86: Make page cache mode a real type")
10052 Signed-off-by: Jan Beulich <jbeulich@suse.com>
10053 Reviewed-by: Juergen Gross <JGross@suse.com>
10054 Cc: stable@vger.kernel.org
10055 Link: http://lkml.kernel.org/r/56A7635602000078000CAFF1@prv-mh.provo.novell.com
10056 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
10057
10058 arch/x86/include/asm/pgtable_types.h | 6 ++----
10059 1 files changed, 2 insertions(+), 4 deletions(-)
10060
10061 commit bb9a3a9df0d8dfc96d521676e64c42b37ba22aea
10062 Merge: 682d661 f74425b
10063 Author: Brad Spengler <spender@grsecurity.net>
10064 Date: Sun Jan 31 15:06:25 2016 -0500
10065
10066 Merge branch 'pax-test' into grsec-test
10067
10068 Conflicts:
10069 drivers/net/slip/slhc.c
10070 include/linux/sched.h
10071 net/unix/af_unix.c
10072 sound/core/timer.c
10073
10074 commit f74425b5705bfe52aff9e97659ef10c4a14176c3
10075 Merge: d14af1f 849a2d3
10076 Author: Brad Spengler <spender@grsecurity.net>
10077 Date: Sun Jan 31 15:02:55 2016 -0500
10078
10079 Merge branch 'linux-4.3.y' into pax-test
10080
10081 Conflicts:
10082 arch/x86/include/asm/mmu_context.h
10083
10084 commit 682d6611d75542e351c973c8dd74a99d3966c073
10085 Author: Brad Spengler <spender@grsecurity.net>
10086 Date: Sat Jan 30 13:05:03 2016 -0500
10087
10088 Based on a report from Mathias Krause, fix up a number of additional instances
10089 of ulong overflow when passing in values to gr_learn_resource by saturating
10090 to ULONG_MAX
10091
10092 mm/mlock.c | 11 ++++++++---
10093 mm/mmap.c | 16 +++++++++++++---
10094 2 files changed, 21 insertions(+), 6 deletions(-)
10095
10096 commit adb52e95fb9ad4ac9c56cd5d47bd668f47c33096
10097 Author: Jann Horn <jann@thejh.net>
10098 Date: Sat Dec 26 06:00:48 2015 +0100
10099
10100 seccomp: always propagate NO_NEW_PRIVS on tsync
10101
10102 Before this patch, a process with some permissive seccomp filter
10103 that was applied by root without NO_NEW_PRIVS was able to add
10104 more filters to itself without setting NO_NEW_PRIVS by setting
10105 the new filter from a throwaway thread with NO_NEW_PRIVS.
10106
10107 Signed-off-by: Jann Horn <jann@thejh.net>
10108 Cc: stable@vger.kernel.org
10109 Signed-off-by: Kees Cook <keescook@chromium.org>
10110
10111 kernel/seccomp.c | 22 +++++++++++-----------
10112 1 files changed, 11 insertions(+), 11 deletions(-)
10113
10114 commit b85450498a3bbf269441c8963d7574bb3079c838
10115 Merge: 59c216f d14af1f
10116 Author: Brad Spengler <spender@grsecurity.net>
10117 Date: Fri Jan 29 20:54:13 2016 -0500
10118
10119 Merge branch 'pax-test' into grsec-test
10120
10121 commit d14af1f1dd66511f3f0674deee2b572972012b39
10122 Author: Brad Spengler <spender@grsecurity.net>
10123 Date: Fri Jan 29 20:53:51 2016 -0500
10124
10125 Update to pax-linux-4.3.4-test26.patch:
10126 - Emese fixed a few intentional overflows introduced by gcc, reported by StalkR (https://forums.grsecurity.net/viewtopic.php?f=3&t=4370)
10127
10128 fs/cifs/file.c | 2 +-
10129 fs/gfs2/file.c | 2 +-
10130 .../size_overflow_plugin/intentional_overflow.c | 96 ++++++++++++++++++--
10131 tools/gcc/size_overflow_plugin/size_overflow.h | 2 +
10132 .../size_overflow_plugin/size_overflow_plugin.c | 4 +-
10133 .../size_overflow_plugin/size_overflow_transform.c | 6 +-
10134 .../size_overflow_transform_core.c | 5 +
10135 7 files changed, 102 insertions(+), 15 deletions(-)
10136
10137 commit 59c216f13587eacdd692386b7a403ae78ed84fb6
10138 Author: Brad Spengler <spender@grsecurity.net>
10139 Date: Wed Jan 27 17:57:21 2016 -0500
10140
10141 Fix a size_overflow report reported by Mathias Krause in our
10142 truncation of an loff_t to an unsigned long when being passed
10143 to gr_learn_resource() (as all resource checks are against unsigned long
10144 values)
10145
10146 fs/attr.c | 5 ++++-
10147 1 files changed, 4 insertions(+), 1 deletions(-)
10148
10149 commit 70636c6ad60fc1db3af764ecc789b827b7497a97
10150 Author: Yuchung Cheng <ycheng@google.com>
10151 Date: Wed Jan 6 12:42:38 2016 -0800
10152
10153 tcp: fix zero cwnd in tcp_cwnd_reduction
10154
10155 Patch 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode
10156 conditionally") introduced a bug that cwnd may become 0 when both
10157 inflight and sndcnt are 0 (cwnd = inflight + sndcnt). This may lead
10158 to a div-by-zero if the connection starts another cwnd reduction
10159 phase by setting tp->prior_cwnd to the current cwnd (0) in
10160 tcp_init_cwnd_reduction().
10161
10162 To prevent this we skip PRR operation when nothing is acked or
10163 sacked. Then cwnd must be positive in all cases as long as ssthresh
10164 is positive:
10165
10166 1) The proportional reduction mode
10167 inflight > ssthresh > 0
10168
10169 2) The reduction bound mode
10170 a) inflight == ssthresh > 0
10171
10172 b) inflight < ssthresh
10173 sndcnt > 0 since newly_acked_sacked > 0 and inflight < ssthresh
10174
10175 Therefore in all cases inflight and sndcnt can not both be 0.
10176 We check invalid tp->prior_cwnd to avoid potential div0 bugs.
10177
10178 In reality this bug is triggered only with a sequence of less common
10179 events. For example, the connection is terminating an ECN-triggered
10180 cwnd reduction with an inflight 0, then it receives reordered/old
10181 ACKs or DSACKs from prior transmission (which acks nothing). Or the
10182 connection is in fast recovery stage that marks everything lost,
10183 but fails to retransmit due to local issues, then receives data
10184 packets from other end which acks nothing.
10185
10186 Fixes: 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode conditionally")
10187 Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name>
10188 Signed-off-by: Yuchung Cheng <ycheng@google.com>
10189 Signed-off-by: Neal Cardwell <ncardwell@google.com>
10190 Signed-off-by: Eric Dumazet <edumazet@google.com>
10191 Signed-off-by: David S. Miller <davem@davemloft.net>
10192
10193 net/ipv4/tcp_input.c | 3 +++
10194 1 files changed, 3 insertions(+), 0 deletions(-)
10195
10196 commit dac1da2bedbb43195d371c7a192cfeeb45683df0
10197 Author: Eric Dumazet <edumazet@google.com>
10198 Date: Sun Jan 24 13:53:50 2016 -0800
10199
10200 af_unix: fix struct pid memory leak
10201
10202 Dmitry reported a struct pid leak detected by a syzkaller program.
10203
10204 Bug happens in unix_stream_recvmsg() when we break the loop when a
10205 signal is pending, without properly releasing scm.
10206
10207 Fixes: b3ca9b02b007 ("net: fix multithreaded signal handling in unix recv routines")
10208 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10209 Signed-off-by: Eric Dumazet <edumazet@google.com>
10210 Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com>
10211 Signed-off-by: David S. Miller <davem@davemloft.net>
10212
10213 net/unix/af_unix.c | 1 +
10214 1 files changed, 1 insertions(+), 0 deletions(-)
10215
10216 commit 15cc47f127520d1ac0c1fe76d993c2c27f0f2571
10217 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
10218 Date: Fri Jan 22 01:39:43 2016 +0100
10219
10220 pptp: fix illegal memory access caused by multiple bind()s
10221
10222 Several times already this has been reported as kasan reports caused by
10223 syzkaller and trinity and people always looked at RCU races, but it is
10224 much more simple. :)
10225
10226 In case we bind a pptp socket multiple times, we simply add it to
10227 the callid_sock list but don't remove the old binding. Thus the old
10228 socket stays in the bucket with unused call_id indexes and doesn't get
10229 cleaned up. This causes various forms of kasan reports which were hard
10230 to pinpoint.
10231
10232 Simply don't allow multiple binds and correct error handling in
10233 pptp_bind. Also keep sk_state bits in place in pptp_connect.
10234
10235 Fixes: 00959ade36acad ("PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)")
10236 Cc: Dmitry Kozlov <xeb@mail.ru>
10237 Cc: Sasha Levin <sasha.levin@oracle.com>
10238 Cc: Dmitry Vyukov <dvyukov@google.com>
10239 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10240 Cc: Dave Jones <davej@codemonkey.org.uk>
10241 Reported-by: Dave Jones <davej@codemonkey.org.uk>
10242 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
10243 Signed-off-by: David S. Miller <davem@davemloft.net>
10244
10245 drivers/net/ppp/pptp.c | 34 ++++++++++++++++++++++++----------
10246 1 files changed, 24 insertions(+), 10 deletions(-)
10247
10248 commit e2b7b8c66851c85188fa6dab2d2b2a6c85bc7332
10249 Author: Brad Spengler <spender@grsecurity.net>
10250 Date: Tue Jan 26 18:17:10 2016 -0500
10251
10252 Add info about cpupower/powertop to GRKERNSEC_KMEM, was present on our
10253 wiki but was removed from the config help at some point
10254
10255 grsecurity/Kconfig | 3 +++
10256 1 files changed, 3 insertions(+), 0 deletions(-)
10257
10258 commit ce2e88efa000fc32bfcd84098f57c8ed8310fefc
10259 Author: Thomas Egerer <hakke_007@gmx.de>
10260 Date: Mon Jan 25 12:58:44 2016 +0100
10261
10262 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV
10263
10264 The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
10265 to select CRYPTO_ECHAINIV in order to work properly. This solves the
10266 issues caused by a misconfiguration as described in [1].
10267 The original approach, patching crypto/Kconfig was turned down by
10268 Herbert Xu [2].
10269
10270 [1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
10271 [2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2
10272
10273 Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
10274 Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
10275 Signed-off-by: David S. Miller <davem@davemloft.net>
10276
10277 net/ipv4/Kconfig | 1 +
10278 net/ipv6/Kconfig | 1 +
10279 2 files changed, 2 insertions(+), 0 deletions(-)
10280
10281 commit fca5a303155ea67d28aece0caf2b03ffc3b2668d
10282 Merge: 904114c 6339c1f
10283 Author: Brad Spengler <spender@grsecurity.net>
10284 Date: Tue Jan 26 18:08:40 2016 -0500
10285
10286 Merge branch 'pax-test' into grsec-test
10287
10288 commit 6339c1f9a9beafd417bf9f04d4b257e62aeb45b7
10289 Author: Brad Spengler <spender@grsecurity.net>
10290 Date: Tue Jan 26 18:07:51 2016 -0500
10291
10292 Update to pax-linux-4.3.4-test25.patch:
10293 - fixed incorrect handling of VM_DONTCOPY during fork that would trigger a consistency check in the vma mirroring logic, reported by Mathias Krause <minipli@googlemail.com>
10294 - fixed init_new_context on !MODIFY_LDT_SYSCALL configs, reported by tjh (https://forums.grsecurity.net/viewtopic.php?f=3&t=4368)
10295 - fixed a few REFCOUNT false positives in SNMP related statistics
10296
10297 arch/x86/Kconfig | 2 +-
10298 arch/x86/include/asm/mmu_context.h | 17 +++++++++++++++++
10299 include/net/snmp.h | 10 +++++-----
10300 kernel/fork.c | 11 +++++++++--
10301 net/ipv4/proc.c | 8 ++++----
10302 net/ipv6/addrconf.c | 4 ++--
10303 net/ipv6/proc.c | 10 +++++-----
10304 7 files changed, 43 insertions(+), 19 deletions(-)
10305
10306 commit 904114c2fce3fdff5d57e763da56a78960db4e19
10307 Author: Al Viro <viro@zeniv.linux.org.uk>
10308 Date: Fri Jan 22 18:08:52 2016 -0500
10309
10310 make sure that freeing shmem fast symlinks is RCU-delayed
10311
10312 Cc: stable@vger.kernel.org # v4.2+
10313 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10314
10315 include/linux/shmem_fs.h | 5 +----
10316 mm/shmem.c | 9 ++++-----
10317 2 files changed, 5 insertions(+), 9 deletions(-)
10318
10319 commit ab86adee64312a2f827dd516cb199521327943ed
10320 Author: Sasha Levin <sasha.levin@oracle.com>
10321 Date: Mon Jan 18 19:23:51 2016 -0500
10322
10323 netfilter: nf_conntrack: use safer way to lock all buckets
10324
10325 When we need to lock all buckets in the connection hashtable we'd attempt to
10326 lock 1024 spinlocks, which is way more preemption levels than supported by
10327 the kernel. Furthermore, this behavior was hidden by checking if lockdep is
10328 enabled, and if it was - use only 8 buckets(!).
10329
10330 Fix this by using a global lock and synchronize all buckets on it when we
10331 need to lock them all. This is pretty heavyweight, but is only done when we
10332 need to resize the hashtable, and that doesn't happen often enough (or at all).
10333
10334 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
10335 Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
10336 Reviewed-by: Florian Westphal <fw@strlen.de>
10337 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
10338
10339 Conflicts:
10340
10341 net/netfilter/nfnetlink_cttimeout.c
10342
10343 include/net/netfilter/nf_conntrack_core.h | 8 ++----
10344 net/netfilter/nf_conntrack_core.c | 38 +++++++++++++++++++++-------
10345 net/netfilter/nf_conntrack_helper.c | 2 +-
10346 net/netfilter/nf_conntrack_netlink.c | 2 +-
10347 4 files changed, 33 insertions(+), 17 deletions(-)
10348
10349 commit 37014723527225481c720484bb788a1a6358072f
10350 Author: Willy Tarreau <w@1wt.eu>
10351 Date: Mon Jan 18 16:36:09 2016 +0100
10352
10353 pipe: limit the per-user amount of pages allocated in pipes
10354
10355 On no-so-small systems, it is possible for a single process to cause an
10356 OOM condition by filling large pipes with data that are never read. A
10357 typical process filling 4000 pipes with 1 MB of data will use 4 GB of
10358 memory. On small systems it may be tricky to set the pipe max size to
10359 prevent this from happening.
10360
10361 This patch makes it possible to enforce a per-user soft limit above
10362 which new pipes will be limited to a single page, effectively limiting
10363 them to 4 kB each, as well as a hard limit above which no new pipes may
10364 be created for this user. This has the effect of protecting the system
10365 against memory abuse without hurting other users, and still allowing
10366 pipes to work correctly though with less data at once.
10367
10368 The limit are controlled by two new sysctls : pipe-user-pages-soft, and
10369 pipe-user-pages-hard. Both may be disabled by setting them to zero. The
10370 default soft limit allows the default number of FDs per process (1024)
10371 to create pipes of the default size (64kB), thus reaching a limit of 64MB
10372 before starting to create only smaller pipes. With 256 processes limited
10373 to 1024 FDs each, this results in 1024*64kB + (256*1024 - 1024) * 4kB =
10374 1084 MB of memory allocated for a user. The hard limit is disabled by
10375 default to avoid breaking existing applications that make intensive use
10376 of pipes (eg: for splicing).
10377
10378 Reported-by: socketpair@gmail.com
10379 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
10380 Mitigates: CVE-2013-4312 (Linux 2.0+)
10381 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
10382 Signed-off-by: Willy Tarreau <w@1wt.eu>
10383 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10384
10385 Documentation/sysctl/fs.txt | 23 +++++++++++++++++++++
10386 fs/pipe.c | 47 +++++++++++++++++++++++++++++++++++++++++-
10387 include/linux/pipe_fs_i.h | 4 +++
10388 include/linux/sched.h | 1 +
10389 kernel/sysctl.c | 14 ++++++++++++
10390 5 files changed, 87 insertions(+), 2 deletions(-)
10391
10392 commit 51645fa198d194f746651dcfbc5f24a4cf8b9fb8
10393 Merge: 540f2af 7791ecb
10394 Author: Brad Spengler <spender@grsecurity.net>
10395 Date: Sat Jan 23 10:57:11 2016 -0500
10396
10397 Merge branch 'pax-test' into grsec-test
10398
10399 commit 7791ecb84f840343a5646236fd0d34e1fb450793
10400 Merge: 470069c 399588c
10401 Author: Brad Spengler <spender@grsecurity.net>
10402 Date: Sat Jan 23 10:56:47 2016 -0500
10403
10404 Merge branch 'linux-4.3.y' into pax-test
10405
10406 commit 540f2affebd42cdc26a699208ab4f1cb0cb75e33
10407 Author: Brad Spengler <spender@grsecurity.net>
10408 Date: Tue Jan 19 21:18:47 2016 -0500
10409
10410 Update size_overflow hash table
10411
10412 .../size_overflow_plugin/size_overflow_hash.data | 4 +++-
10413 1 files changed, 3 insertions(+), 1 deletions(-)
10414
10415 commit 7e649765626a28437f573f0fbe7a51a04615f041
10416 Author: Brad Spengler <spender@grsecurity.net>
10417 Date: Tue Jan 19 20:29:46 2016 -0500
10418
10419 Backport fix from: https://lkml.org/lkml/2015/12/13/187
10420
10421 fs/ext4/extents.c | 2 +-
10422 1 files changed, 1 insertions(+), 1 deletions(-)
10423
10424 commit 53b859cd0a5f5b6ad54fe0c879dfedaa3c5a3005
10425 Author: Jann Horn <jann@thejh.net>
10426 Date: Tue Jan 5 18:27:30 2016 +0100
10427
10428 compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)
10429
10430 This replaces all code in fs/compat_ioctl.c that translated
10431 ioctl arguments into a in-kernel structure, then performed
10432 do_ioctl under set_fs(KERNEL_DS), with code that allocates
10433 data on the user stack and can call the VFS ioctl handler
10434 under USER_DS.
10435
10436 This is done as a hardening measure because the caller
10437 does not know what kind of ioctl handler will be invoked,
10438 only that no corresponding compat_ioctl handler exists and
10439 what the ioctl command number is. The accidental
10440 invocation of an unlocked_ioctl handler that unexpectedly
10441 calls copy_to_user could be a severe security issue.
10442
10443 Signed-off-by: Jann Horn <jann@thejh.net>
10444 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10445
10446 Conflicts:
10447
10448 fs/compat_ioctl.c
10449
10450 fs/compat_ioctl.c | 130 ++++++++++++++++++++++++++++-------------------------
10451 1 files changed, 68 insertions(+), 62 deletions(-)
10452
10453 commit 3e89e770ae27e931cd1583f021abac41eeebc3e7
10454 Author: Al Viro <viro@zeniv.linux.org.uk>
10455 Date: Thu Jan 7 09:53:30 2016 -0500
10456
10457 compat_ioctl: don't pass fd around when not needed
10458
10459 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10460
10461 fs/compat_ioctl.c | 103 ++++++++++++++++++++++++++--------------------------
10462 fs/internal.h | 7 ++++
10463 fs/ioctl.c | 4 +-
10464 include/linux/fs.h | 2 -
10465 4 files changed, 61 insertions(+), 55 deletions(-)
10466
10467 commit 9d4e04082752d4d2d68445c4e6faf33a2613df55
10468 Author: Jann Horn <jann@thejh.net>
10469 Date: Tue Jan 5 18:27:29 2016 +0100
10470
10471 compat_ioctl: don't look up the fd twice
10472
10473 In code in fs/compat_ioctl.c that translates ioctl arguments
10474 into a in-kernel structure, then performs sys_ioctl, possibly
10475 under set_fs(KERNEL_DS), this commit changes the sys_ioctl
10476 calls to do_ioctl calls. do_ioctl is a new function that does
10477 the same thing as sys_ioctl, but doesn't look up the fd again.
10478
10479 This change is made to avoid (potential) security issues
10480 because of ioctl handlers that accept one of the ioctl
10481 commands I2C_FUNCS, VIDEO_GET_EVENT, MTIOCPOS, MTIOCGET,
10482 TIOCGSERIAL, TIOCSSERIAL, RTC_IRQP_READ, RTC_EPOCH_READ.
10483 This can happen for multiple reasons:
10484
10485 - The ioctl command number could be reused.
10486 - The ioctl handler might not check the full ioctl
10487 command. This is e.g. true for drm_ioctl.
10488 - The ioctl handler is very special, e.g. cuse_file_ioctl
10489
10490 The real issue is that set_fs(KERNEL_DS) is used here,
10491 but that's fixed in a separate commit
10492 "compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)".
10493
10494 This change mitigates potential security issues by
10495 preventing a race that permits invocation of
10496 unlocked_ioctl handlers under KERNEL_DS through compat
10497 code even if a corresponding compat_ioctl handler exists.
10498
10499 So far, no way has been identified to use this to damage
10500 kernel memory without having CAP_SYS_ADMIN in the init ns
10501 (with the capability, doing reads/writes at arbitrary
10502 kernel addresses should be easy through CUSE's ioctl
10503 handler with FUSE_IOCTL_UNRESTRICTED set).
10504
10505 [AV: two missed sys_ioctl() taken care of]
10506
10507 Signed-off-by: Jann Horn <jann@thejh.net>
10508 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10509
10510 fs/compat_ioctl.c | 122 +++++++++++++++++++++++++++++-----------------------
10511 1 files changed, 68 insertions(+), 54 deletions(-)
10512
10513 commit 5bf9e1ed4ebb278cd956ba142914fc04a024309c
10514 Author: Vasily Kulikov <segoon@openwall.com>
10515 Date: Fri Jan 15 16:57:55 2016 -0800
10516
10517 include/linux/poison.h: use POISON_POINTER_DELTA for poison pointers
10518
10519 TIMER_ENTRY_STATIC is defined as a poison pointers which
10520 should point to nowhere. Redefine them using POISON_POINTER_DELTA
10521 arithmetics to make sure they really point to non-mappable area declared
10522 by the target architecture.
10523
10524 Signed-off-by: Vasily Kulikov <segoon@openwall.com>
10525 Acked-by: Thomas Gleixner <tglx@linutronix.de>
10526 Cc: Solar Designer <solar@openwall.com>
10527 Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
10528 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
10529 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
10530
10531 Conflicts:
10532
10533 include/linux/poison.h
10534
10535 include/linux/poison.h | 2 +-
10536 1 files changed, 1 insertions(+), 1 deletions(-)
10537
10538 commit 60f2e0a05ab8f56c804a9334a23e2b446305d110
10539 Author: Brad Spengler <spender@grsecurity.net>
10540 Date: Tue Jan 19 19:41:44 2016 -0500
10541
10542 Fix ARM compilation, reported by Austin Sepp
10543
10544 grsecurity/grsec_sig.c | 1 +
10545 1 files changed, 1 insertions(+), 0 deletions(-)
10546
10547 commit e15383743443dc43460a2fd73e0db0b608610dca
10548 Author: Takashi Iwai <tiwai@suse.de>
10549 Date: Mon Jan 18 13:52:47 2016 +0100
10550
10551 ALSA: hrtimer: Fix stall by hrtimer_cancel()
10552
10553 hrtimer_cancel() waits for the completion from the callback, thus it
10554 must not be called inside the callback itself. This was already a
10555 problem in the past with ALSA hrtimer driver, and the early commit
10556 [fcfdebe70759: ALSA: hrtimer - Fix lock-up] tried to address it.
10557
10558 However, the previous fix is still insufficient: it may still cause a
10559 lockup when the ALSA timer instance reprograms itself in its callback.
10560 Then it invokes the start function even in snd_timer_interrupt() that
10561 is called in hrtimer callback itself, results in a CPU stall. This is
10562 no hypothetical problem but actually triggered by syzkaller fuzzer.
10563
10564 This patch tries to fix the issue again. Now we call
10565 hrtimer_try_to_cancel() at both start and stop functions so that it
10566 won't fall into a deadlock, yet giving some chance to cancel the queue
10567 if the functions have been called outside the callback. The proper
10568 hrtimer_cancel() is called in anyway at closing, so this should be
10569 enough.
10570
10571 Reported-and-tested-by: Dmitry Vyukov <dvyukov@google.com>
10572 Cc: <stable@vger.kernel.org>
10573 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10574
10575 sound/core/hrtimer.c | 3 ++-
10576 1 files changed, 2 insertions(+), 1 deletions(-)
10577
10578 commit 12d874daf706e6e7c1ae709141859c809599297e
10579 Author: Takashi Iwai <tiwai@suse.de>
10580 Date: Tue Jan 12 12:38:02 2016 +0100
10581
10582 ALSA: seq: Fix missing NULL check at remove_events ioctl
10583
10584 snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear()
10585 unconditionally even if there is no FIFO assigned, and this leads to
10586 an Oops due to NULL dereference. The fix is just to add a proper NULL
10587 check.
10588
10589 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10590 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10591 Cc: <stable@vger.kernel.org>
10592 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10593
10594 sound/core/seq/seq_clientmgr.c | 2 +-
10595 1 files changed, 1 insertions(+), 1 deletions(-)
10596
10597 commit 2eb0632df1351378946507e7ef7ba0682632a7b5
10598 Author: Takashi Iwai <tiwai@suse.de>
10599 Date: Tue Jan 12 15:36:27 2016 +0100
10600
10601 ALSA: seq: Fix race at timer setup and close
10602
10603 ALSA sequencer code has an open race between the timer setup ioctl and
10604 the close of the client. This was triggered by syzkaller fuzzer, and
10605 a use-after-free was caught there as a result.
10606
10607 This patch papers over it by adding a proper queue->timer_mutex lock
10608 around the timer-related calls in the relevant code path.
10609
10610 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10611 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10612 Cc: <stable@vger.kernel.org>
10613 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10614
10615 sound/core/seq/seq_queue.c | 2 ++
10616 1 files changed, 2 insertions(+), 0 deletions(-)
10617
10618 commit b9e55ab955e59b4a636d78a748be90334a48b485
10619 Author: Takashi Iwai <tiwai@suse.de>
10620 Date: Thu Jan 14 16:30:58 2016 +0100
10621
10622 ALSA: timer: Harden slave timer list handling
10623
10624 A slave timer instance might be still accessible in a racy way while
10625 operating the master instance as it lacks of locking. Since the
10626 master operation is mostly protected with timer->lock, we should cope
10627 with it while changing the slave instance, too. Also, some linked
10628 lists (active_list and ack_list) of slave instances aren't unlinked
10629 immediately at stopping or closing, and this may lead to unexpected
10630 accesses.
10631
10632 This patch tries to address these issues. It adds spin lock of
10633 timer->lock (either from master or slave, which is equivalent) in a
10634 few places. For avoiding a deadlock, we ensure that the global
10635 slave_active_lock is always locked at first before each timer lock.
10636
10637 Also, ack and active_list of slave instances are properly unlinked at
10638 snd_timer_stop() and snd_timer_close().
10639
10640 Last but not least, remove the superfluous call of _snd_timer_stop()
10641 at removing slave links. This is a noop, and calling it may confuse
10642 readers wrt locking. Further cleanup will follow in a later patch.
10643
10644 Actually we've got reports of use-after-free by syzkaller fuzzer, and
10645 this hopefully fixes these issues.
10646
10647 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10648 Cc: <stable@vger.kernel.org>
10649 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10650
10651 sound/core/timer.c | 18 ++++++++++++++----
10652 1 files changed, 14 insertions(+), 4 deletions(-)
10653
10654 commit f1ce0547bdfda1b42ae8a66c222f2a897cbe1586
10655 Author: Takashi Iwai <tiwai@suse.de>
10656 Date: Wed Jan 13 17:48:01 2016 +0100
10657
10658 ALSA: timer: Fix race among timer ioctls
10659
10660 ALSA timer ioctls have an open race and this may lead to a
10661 use-after-free of timer instance object. A simplistic fix is to make
10662 each ioctl exclusive. We have already tread_sem for controlling the
10663 tread, and extend this as a global mutex to be applied to each ioctl.
10664
10665 The downside is, of course, the worse concurrency. But these ioctls
10666 aren't to be parallel accessible, in anyway, so it should be fine to
10667 serialize there.
10668
10669 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10670 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10671 Cc: <stable@vger.kernel.org>
10672 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10673
10674 sound/core/timer.c | 32 +++++++++++++++++++-------------
10675 1 files changed, 19 insertions(+), 13 deletions(-)
10676
10677 commit 8347d8461ed48a98f9c76cc3cfcdad8217d314bc
10678 Author: Takashi Iwai <tiwai@suse.de>
10679 Date: Wed Jan 13 21:35:06 2016 +0100
10680
10681 ALSA: timer: Fix double unlink of active_list
10682
10683 ALSA timer instance object has a couple of linked lists and they are
10684 unlinked unconditionally at snd_timer_stop(). Meanwhile
10685 snd_timer_interrupt() unlinks it, but it calls list_del() which leaves
10686 the element list itself unchanged. This ends up with unlinking twice,
10687 and it was caught by syzkaller fuzzer.
10688
10689 The fix is to use list_del_init() variant properly there, too.
10690
10691 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10692 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10693 Cc: <stable@vger.kernel.org>
10694 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10695
10696 sound/core/timer.c | 2 +-
10697 1 files changed, 1 insertions(+), 1 deletions(-)
10698
10699 commit 243aebb7ae71d6e11ea9880faa893d1d0d60cd75
10700 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
10701 Date: Mon Jan 18 18:03:48 2016 +0100
10702
10703 ovs: limit ovs recursions in ovs_execute_actions to not corrupt stack
10704
10705 It was seen that defective configurations of openvswitch could overwrite
10706 the STACK_END_MAGIC and cause a hard crash of the kernel because of too
10707 many recursions within ovs.
10708
10709 This problem arises due to the high stack usage of openvswitch. The rest
10710 of the kernel is fine with the current limit of 10 (RECURSION_LIMIT).
10711
10712 We use the already existing recursion counter in ovs_execute_actions to
10713 implement an upper bound of 5 recursions.
10714
10715 Cc: Pravin Shelar <pshelar@ovn.org>
10716 Cc: Simon Horman <simon.horman@netronome.com>
10717 Cc: Eric Dumazet <eric.dumazet@gmail.com>
10718 Cc: Simon Horman <simon.horman@netronome.com>
10719 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
10720 Signed-off-by: David S. Miller <davem@davemloft.net>
10721
10722 net/openvswitch/actions.c | 19 ++++++++++++++-----
10723 1 files changed, 14 insertions(+), 5 deletions(-)
10724
10725 commit 8080793479c6d5befe37a67b1dbd9e4e0a61af96
10726 Author: Ursula Braun <ursula.braun@de.ibm.com>
10727 Date: Tue Jan 19 10:41:33 2016 +0100
10728
10729 af_iucv: Validate socket address length in iucv_sock_bind()
10730
10731 Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
10732 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10733 Reviewed-by: Evgeny Cherkashin <Eugene.Crosser@ru.ibm.com>
10734 Signed-off-by: David S. Miller <davem@davemloft.net>
10735
10736 net/iucv/af_iucv.c | 3 +++
10737 1 files changed, 3 insertions(+), 0 deletions(-)
10738
10739 commit 50a383c1c91ed7409c3cbdd41e662d6891463d1b
10740 Author: Brad Spengler <spender@grsecurity.net>
10741 Date: Tue Jan 19 19:32:54 2016 -0500
10742
10743 Apply the same fix as everyone else for the recent keys vulnerability that is
10744 unexploitable under PAX_REFCOUNT
10745
10746 Make a couple more changes that no one else can/will
10747
10748 include/linux/key-type.h | 4 ++--
10749 ipc/msgutil.c | 4 ++--
10750 security/keys/internal.h | 2 +-
10751 security/keys/process_keys.c | 1 +
10752 4 files changed, 6 insertions(+), 5 deletions(-)
10753
10754 commit b56c3a63f431c193400aee17543021950bd14bc4
10755 Merge: 38b1a3d 470069c
10756 Author: Brad Spengler <spender@grsecurity.net>
10757 Date: Sun Jan 17 18:30:19 2016 -0500
10758
10759 Merge branch 'pax-test' into grsec-test
10760
10761 commit 470069cfedef2180313233d275be5901bd6d1135
10762 Author: Brad Spengler <spender@grsecurity.net>
10763 Date: Sun Jan 17 18:29:59 2016 -0500
10764
10765 Update to pax-linux-4.3.3-test22.patch:
10766 - Emesed fixed a gcc induced intentional integer overflow in asix_rx_fixup_internal, reported by thomas callison caffrey
10767 - fixed some more fallout from the drm_drivers constification, reported by Colin Childs and Toralf Foerster
10768
10769 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++++----------
10770 drivers/gpu/drm/drm_pci.c | 3 +++
10771 drivers/gpu/drm/gma500/psb_drv.c | 4 ----
10772 drivers/gpu/drm/i915/i915_drv.c | 16 ++++++++--------
10773 drivers/gpu/drm/nouveau/nouveau_drm.c | 6 +++---
10774 drivers/gpu/drm/radeon/radeon_drv.c | 4 +---
10775 drivers/net/usb/asix_common.c | 3 ++-
10776 include/drm/drmP.h | 1 +
10777 8 files changed, 22 insertions(+), 29 deletions(-)
10778
10779 commit 38b1a3d676f407865c3d41840df8213c5ad639c1
10780 Author: Brad Spengler <spender@grsecurity.net>
10781 Date: Sun Jan 17 12:33:53 2016 -0500
10782
10783 As reported by Luis Ressel, the Kconfig help for GRKERNSEC_BRUTE
10784 mentioned banning execution of suid/sgid binaries, though the kernel
10785 source clearly only mentions banning execution of suid binaries. Since
10786 there's no reason for us to not ban execution of sgid binaries as well,
10787 make the implementation match the Kconfig description.
10788
10789 fs/exec.c | 4 ++--
10790 grsecurity/grsec_sig.c | 27 ++++++++++++++-------------
10791 include/linux/sched.h | 4 ++--
10792 3 files changed, 18 insertions(+), 17 deletions(-)
10793
10794 commit 8c3bcb7dbf7f606acfa0983e81f0f928da1f1ace
10795 Merge: d141a86 ea4a835
10796 Author: Brad Spengler <spender@grsecurity.net>
10797 Date: Sat Jan 16 14:12:22 2016 -0500
10798
10799 Merge branch 'pax-test' into grsec-test
10800
10801 Conflicts:
10802 drivers/gpu/drm/i810/i810_drv.c
10803
10804 commit ea4a835328ada6513ac013986764d6caea8cd348
10805 Author: Brad Spengler <spender@grsecurity.net>
10806 Date: Sat Jan 16 14:11:30 2016 -0500
10807
10808 Update to pax-linux-4.3.3-test21.patch:
10809 - fixed some fallout from the drm_drivers constification, reported by spender
10810
10811 drivers/gpu/drm/armada/armada_drv.c | 3 +--
10812 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
10813 drivers/gpu/drm/i810/i810_dma.c | 2 +-
10814 drivers/gpu/drm/i810/i810_drv.c | 6 +++++-
10815 drivers/gpu/drm/i810/i810_drv.h | 2 +-
10816 5 files changed, 8 insertions(+), 6 deletions(-)
10817
10818 commit d141a86fd66194bc3f896b6809b189e2f12a9a83
10819 Author: Brad Spengler <spender@grsecurity.net>
10820 Date: Sat Jan 16 13:16:36 2016 -0500
10821
10822 compile fix
10823
10824 drivers/gpu/drm/i810/i810_dma.c | 2 +-
10825 drivers/gpu/drm/i810/i810_drv.c | 4 +++-
10826 drivers/gpu/drm/i810/i810_drv.h | 2 +-
10827 3 files changed, 5 insertions(+), 3 deletions(-)
10828
10829 commit 0d9dc4b25ea32c14561bcfe6b5b24f1b00fe0270
10830 Merge: 5fa135d bbda879
10831 Author: Brad Spengler <spender@grsecurity.net>
10832 Date: Sat Jan 16 12:59:22 2016 -0500
10833
10834 Merge branch 'pax-test' into grsec-test
10835
10836 commit bbda87914edf63e27fb46670bf3a373f2b963c73
10837 Author: Brad Spengler <spender@grsecurity.net>
10838 Date: Sat Jan 16 12:58:04 2016 -0500
10839
10840 Update to pax-linux-4.3.3-test20.patch:
10841 - constified drm_driver
10842 - Emese fixed a special case in handling __func__ in the initify plugin
10843 - Emese fixed a false positive size overflow report in handling inbufBits, reported by Martin Filo (https://bugs.gentoo.org/show_bug.cgi?id=567048)
10844 - fixed regression that caused perf to not resolve kernel code addresses under KERNEXEC/i386, reported by minipli
10845
10846 arch/x86/kernel/cpu/perf_event.h | 2 +-
10847 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
10848 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
10849 arch/x86/kernel/uprobes.c | 2 +-
10850 arch/x86/mm/mpx.c | 2 +-
10851 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
10852 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 ++-
10853 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
10854 drivers/gpu/drm/drm_pci.c | 6 +-
10855 drivers/gpu/drm/gma500/psb_drv.c | 5 +-
10856 drivers/gpu/drm/i915/i915_dma.c | 2 +-
10857 drivers/gpu/drm/i915/i915_drv.c | 15 ++--
10858 drivers/gpu/drm/i915/i915_drv.h | 2 +-
10859 drivers/gpu/drm/i915/i915_irq.c | 88 ++++++++++----------
10860 drivers/gpu/drm/mga/mga_drv.c | 5 +-
10861 drivers/gpu/drm/mga/mga_drv.h | 2 +-
10862 drivers/gpu/drm/mga/mga_state.c | 2 +-
10863 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 ++--
10864 drivers/gpu/drm/qxl/qxl_drv.c | 8 ++-
10865 drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +-
10866 drivers/gpu/drm/r128/r128_drv.c | 4 +-
10867 drivers/gpu/drm/r128/r128_drv.h | 2 +-
10868 drivers/gpu/drm/r128/r128_state.c | 2 +-
10869 drivers/gpu/drm/radeon/radeon_drv.c | 17 +++-
10870 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
10871 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
10872 drivers/gpu/drm/radeon/radeon_state.c | 2 +-
10873 drivers/gpu/drm/savage/savage_bci.c | 2 +-
10874 drivers/gpu/drm/savage/savage_drv.c | 5 +-
10875 drivers/gpu/drm/savage/savage_drv.h | 2 +-
10876 drivers/gpu/drm/sis/sis_drv.c | 5 +-
10877 drivers/gpu/drm/sis/sis_drv.h | 2 +-
10878 drivers/gpu/drm/sis/sis_mm.c | 2 +-
10879 drivers/gpu/drm/via/via_dma.c | 2 +-
10880 drivers/gpu/drm/via/via_drv.c | 5 +-
10881 drivers/gpu/drm/via/via_drv.h | 2 +-
10882 include/drm/drmP.h | 2 +-
10883 mm/slab.c | 2 +-
10884 net/sunrpc/xprtrdma/svc_rdma.c | 6 +-
10885 tools/gcc/initify_plugin.c | 15 +++-
10886 .../disable_size_overflow_hash.data | 1 +
10887 .../size_overflow_plugin/size_overflow_hash.data | 3 +-
10888 42 files changed, 156 insertions(+), 110 deletions(-)
10889
10890 commit 5fa135dc116350e0205c39ef65eaf6496ed2748a
10891 Author: Brad Spengler <spender@grsecurity.net>
10892 Date: Sat Jan 16 12:19:23 2016 -0500
10893
10894 compile fix
10895
10896 grsecurity/grsec_sig.c | 3 +--
10897 1 files changed, 1 insertions(+), 2 deletions(-)
10898
10899 commit a9090fa58f33f75c7450fda5721a9b13625a47d9
10900 Author: Brad Spengler <spender@grsecurity.net>
10901 Date: Sat Jan 16 12:10:37 2016 -0500
10902
10903 As pointed out by Jann Horn, some distros are starting to circumvent
10904 previous assumptions about the attainability of a user to control
10905 multiple UIDs by handing out suid binaries that allow a user to run
10906 processes (including exploits) under a number of other pre-defined
10907 UIDs. As this could potentially be used to bypass GRKERNSEC_BRUTE
10908 (though it would have to involve some code path that doesn't involve
10909 locks) fix that here by ensuring no more than 8 users on a system can
10910 be banned before a reboot is required. If more are banned, a panic
10911 is triggered.
10912
10913 grsecurity/grsec_sig.c | 8 ++++++++
10914 1 files changed, 8 insertions(+), 0 deletions(-)
10915
10916 commit a8d37776e9521c567ebff6730d49312f72435f08
10917 Author: Eric Dumazet <edumazet@google.com>
10918 Date: Thu Dec 3 11:12:07 2015 -0800
10919
10920 proc: add a reschedule point in proc_readfd_common()
10921
10922 User can pass an arbitrary large buffer to getdents().
10923
10924 It is typically a 32KB buffer used by libc scandir() implementation.
10925
10926 When scanning /proc/{pid}/fd, we can hold cpu way too long,
10927 so add a cond_resched() to be kind with other tasks.
10928
10929 We've seen latencies of more than 50ms on real workloads.
10930
10931 Signed-off-by: Eric Dumazet <edumazet@google.com>
10932 Cc: Alexander Viro <viro@zeniv.linux.org.uk>
10933 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10934
10935 fs/proc/fd.c | 1 +
10936 1 files changed, 1 insertions(+), 0 deletions(-)
10937
10938 commit 0adba75f8708f13b1f5d98ebe3fc2fb961e100c8
10939 Author: Rabin Vincent <rabin@rab.in>
10940 Date: Tue Jan 12 20:17:08 2016 +0100
10941
10942 net: bpf: reject invalid shifts
10943
10944 On ARM64, a BUG() is triggered in the eBPF JIT if a filter with a
10945 constant shift that can't be encoded in the immediate field of the
10946 UBFM/SBFM instructions is passed to the JIT. Since these shifts
10947 amounts, which are negative or >= regsize, are invalid, reject them in
10948 the eBPF verifier and the classic BPF filter checker, for all
10949 architectures.
10950
10951 Signed-off-by: Rabin Vincent <rabin@rab.in>
10952 Acked-by: Alexei Starovoitov <ast@kernel.org>
10953 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
10954 Signed-off-by: David S. Miller <davem@davemloft.net>
10955
10956 kernel/bpf/verifier.c | 10 ++++++++++
10957 net/core/filter.c | 5 +++++
10958 2 files changed, 15 insertions(+), 0 deletions(-)
10959
10960 commit c248e115a73496625a1c64660d0eeefd67e55cbf
10961 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
10962 Date: Fri Jan 8 11:00:54 2016 -0200
10963
10964 sctp: fix use-after-free in pr_debug statement
10965
10966 Dmitry Vyukov reported a use-after-free in the code expanded by the
10967 macro debug_post_sfx, which is caused by the use of the asoc pointer
10968 after it was freed within sctp_side_effect() scope.
10969
10970 This patch fixes it by allowing sctp_side_effect to clear that asoc
10971 pointer when the TCB is freed.
10972
10973 As Vlad explained, we also have to cover the SCTP_DISPOSITION_ABORT case
10974 because it will trigger DELETE_TCB too on that same loop.
10975
10976 Also, there were places issuing SCTP_CMD_INIT_FAILED and ASSOC_FAILED
10977 but returning SCTP_DISPOSITION_CONSUME, which would fool the scheme
10978 above. Fix it by returning SCTP_DISPOSITION_ABORT instead.
10979
10980 The macro is already prepared to handle such NULL pointer.
10981
10982 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10983 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
10984 Acked-by: Vlad Yasevich <vyasevich@gmail.com>
10985 Signed-off-by: David S. Miller <davem@davemloft.net>
10986
10987 net/sctp/sm_sideeffect.c | 11 ++++++-----
10988 net/sctp/sm_statefuns.c | 17 ++++-------------
10989 2 files changed, 10 insertions(+), 18 deletions(-)
10990
10991 commit 395ea8a9e73e184fc14153a033000bccf4213213
10992 Author: willy tarreau <w@1wt.eu>
10993 Date: Sun Jan 10 07:54:56 2016 +0100
10994
10995 unix: properly account for FDs passed over unix sockets
10996
10997 It is possible for a process to allocate and accumulate far more FDs than
10998 the process' limit by sending them over a unix socket then closing them
10999 to keep the process' fd count low.
11000
11001 This change addresses this problem by keeping track of the number of FDs
11002 in flight per user and preventing non-privileged processes from having
11003 more FDs in flight than their configured FD limit.
11004
11005 Reported-by: socketpair@gmail.com
11006 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
11007 Mitigates: CVE-2013-4312 (Linux 2.0+)
11008 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
11009 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11010 Signed-off-by: Willy Tarreau <w@1wt.eu>
11011 Signed-off-by: David S. Miller <davem@davemloft.net>
11012
11013 include/linux/sched.h | 1 +
11014 net/unix/af_unix.c | 24 ++++++++++++++++++++----
11015 net/unix/garbage.c | 13 ++++++++-----
11016 3 files changed, 29 insertions(+), 9 deletions(-)
11017
11018 commit cb207ab8fbd71dcfc4a49d533aba8085012543fd
11019 Author: Sasha Levin <sasha.levin@oracle.com>
11020 Date: Thu Jan 7 14:52:43 2016 -0500
11021
11022 net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
11023
11024 proc_dostring() needs an initialized destination string, while the one
11025 provided in proc_sctp_do_hmac_alg() contains stack garbage.
11026
11027 Thus, writing to cookie_hmac_alg would strlen() that garbage and end up
11028 accessing invalid memory.
11029
11030 Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic")
11031 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
11032 Signed-off-by: David S. Miller <davem@davemloft.net>
11033
11034 net/sctp/sysctl.c | 2 +-
11035 1 files changed, 1 insertions(+), 1 deletions(-)
11036
11037 commit 4014e09faf0fe9054119624ccfff1236e886b554
11038 Author: Quentin Casasnovas <quentin.casasnovas@oracle.com>
11039 Date: Tue Nov 24 17:13:21 2015 -0500
11040
11041 RDS: fix race condition when sending a message on unbound socket
11042
11043 commit 8c7188b23474cca017b3ef354c4a58456f68303a upstream.
11044
11045 Sasha's found a NULL pointer dereference in the RDS connection code when
11046 sending a message to an apparently unbound socket. The problem is caused
11047 by the code checking if the socket is bound in rds_sendmsg(), which checks
11048 the rs_bound_addr field without taking a lock on the socket. This opens a
11049 race where rs_bound_addr is temporarily set but where the transport is not
11050 in rds_bind(), leading to a NULL pointer dereference when trying to
11051 dereference 'trans' in __rds_conn_create().
11052
11053 Vegard wrote a reproducer for this issue, so kindly ask him to share if
11054 you're interested.
11055
11056 I cannot reproduce the NULL pointer dereference using Vegard's reproducer
11057 with this patch, whereas I could without.
11058
11059 Complete earlier incomplete fix to CVE-2015-6937:
11060
11061 74e98eb08588 ("RDS: verify the underlying transport exists before creating a connection")
11062
11063 Cc: David S. Miller <davem@davemloft.net>
11064
11065 Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
11066 Reviewed-by: Sasha Levin <sasha.levin@oracle.com>
11067 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
11068 Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com>
11069 Signed-off-by: David S. Miller <davem@davemloft.net>
11070 Signed-off-by: Jiri Slaby <jslaby@suse.cz>
11071
11072 Conflicts:
11073
11074 net/rds/send.c
11075
11076 net/rds/connection.c | 6 ------
11077 1 files changed, 0 insertions(+), 6 deletions(-)
11078
11079 commit 206df8d01104344d7588d801016a281a4cd25556
11080 Author: Sasha Levin <sasha.levin@oracle.com>
11081 Date: Tue Sep 8 10:53:40 2015 -0400
11082
11083 RDS: verify the underlying transport exists before creating a connection
11084
11085 There was no verification that an underlying transport exists when creating
11086 a connection, this would cause dereferencing a NULL ptr.
11087
11088 It might happen on sockets that weren't properly bound before attempting to
11089 send a message, which will cause a NULL ptr deref:
11090
11091 [135546.047719] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
11092 [135546.051270] Modules linked in:
11093 [135546.051781] CPU: 4 PID: 15650 Comm: trinity-c4 Not tainted 4.2.0-next-20150902-sasha-00041-gbaa1222-dirty #2527
11094 [135546.053217] task: ffff8800835bc000 ti: ffff8800bc708000 task.ti: ffff8800bc708000
11095 [135546.054291] RIP: __rds_conn_create (net/rds/connection.c:194)
11096 [135546.055666] RSP: 0018:ffff8800bc70fab0 EFLAGS: 00010202
11097 [135546.056457] RAX: dffffc0000000000 RBX: 0000000000000f2c RCX: ffff8800835bc000
11098 [135546.057494] RDX: 0000000000000007 RSI: ffff8800835bccd8 RDI: 0000000000000038
11099 [135546.058530] RBP: ffff8800bc70fb18 R08: 0000000000000001 R09: 0000000000000000
11100 [135546.059556] R10: ffffed014d7a3a23 R11: ffffed014d7a3a21 R12: 0000000000000000
11101 [135546.060614] R13: 0000000000000001 R14: ffff8801ec3d0000 R15: 0000000000000000
11102 [135546.061668] FS: 00007faad4ffb700(0000) GS:ffff880252000000(0000) knlGS:0000000000000000
11103 [135546.062836] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
11104 [135546.063682] CR2: 000000000000846a CR3: 000000009d137000 CR4: 00000000000006a0
11105 [135546.064723] Stack:
11106 [135546.065048] ffffffffafe2055c ffffffffafe23fc1 ffffed00493097bf ffff8801ec3d0008
11107 [135546.066247] 0000000000000000 00000000000000d0 0000000000000000 ac194a24c0586342
11108 [135546.067438] 1ffff100178e1f78 ffff880320581b00 ffff8800bc70fdd0 ffff880320581b00
11109 [135546.068629] Call Trace:
11110 [135546.069028] ? __rds_conn_create (include/linux/rcupdate.h:856 net/rds/connection.c:134)
11111 [135546.069989] ? rds_message_copy_from_user (net/rds/message.c:298)
11112 [135546.071021] rds_conn_create_outgoing (net/rds/connection.c:278)
11113 [135546.071981] rds_sendmsg (net/rds/send.c:1058)
11114 [135546.072858] ? perf_trace_lock (include/trace/events/lock.h:38)
11115 [135546.073744] ? lockdep_init (kernel/locking/lockdep.c:3298)
11116 [135546.074577] ? rds_send_drop_to (net/rds/send.c:976)
11117 [135546.075508] ? __might_fault (./arch/x86/include/asm/current.h:14 mm/memory.c:3795)
11118 [135546.076349] ? __might_fault (mm/memory.c:3795)
11119 [135546.077179] ? rds_send_drop_to (net/rds/send.c:976)
11120 [135546.078114] sock_sendmsg (net/socket.c:611 net/socket.c:620)
11121 [135546.078856] SYSC_sendto (net/socket.c:1657)
11122 [135546.079596] ? SYSC_connect (net/socket.c:1628)
11123 [135546.080510] ? trace_dump_stack (kernel/trace/trace.c:1926)
11124 [135546.081397] ? ring_buffer_unlock_commit (kernel/trace/ring_buffer.c:2479 kernel/trace/ring_buffer.c:2558 kernel/trace/ring_buffer.c:2674)
11125 [135546.082390] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
11126 [135546.083410] ? trace_event_raw_event_sys_enter (include/trace/events/syscalls.h:16)
11127 [135546.084481] ? do_audit_syscall_entry (include/trace/events/syscalls.h:16)
11128 [135546.085438] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
11129 [135546.085515] rds_ib_laddr_check(): addr 36.74.25.172 ret -99 node type -1
11130
11131 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
11132 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
11133 Signed-off-by: David S. Miller <davem@davemloft.net>
11134
11135 net/rds/connection.c | 6 ++++++
11136 1 files changed, 6 insertions(+), 0 deletions(-)
11137
11138 commit 173fa03f05cf0ad485d49a42cbdee8844d3a689a
11139 Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
11140 Date: Tue Jan 5 20:32:47 2016 -0500
11141
11142 ftrace/module: Call clean up function when module init fails early
11143
11144 If the module init code fails after calling ftrace_module_init() and before
11145 calling do_init_module(), we can suffer from a memory leak. This is because
11146 ftrace_module_init() allocates pages to store the locations that ftrace
11147 hooks are placed in the module text. If do_init_module() fails, it still
11148 calls the MODULE_GOING notifiers which will tell ftrace to do a clean up of
11149 the pages it allocated for the module. But if load_module() fails before
11150 then, the pages allocated by ftrace_module_init() will never be freed.
11151
11152 Call ftrace_release_mod() on the module if load_module() fails before
11153 getting to do_init_module().
11154
11155 Link: http://lkml.kernel.org/r/567CEA31.1070507@intel.com
11156
11157 Reported-by: "Qiu, PeiyangX" <peiyangx.qiu@intel.com>
11158 Fixes: a949ae560a511 "ftrace/module: Hardcode ftrace_module_init() call into load_module()"
11159 Cc: stable@vger.kernel.org # v2.6.38+
11160 Acked-by: Rusty Russell <rusty@rustcorp.com.au>
11161 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
11162
11163 include/linux/ftrace.h | 1 +
11164 kernel/module.c | 6 ++++++
11165 2 files changed, 7 insertions(+), 0 deletions(-)
11166
11167 commit 1e5a4a81a4c16c8ac2e264b88a02cc2f42ed0399
11168 Author: Francesco Ruggeri <fruggeri@aristanetworks.com>
11169 Date: Wed Jan 6 00:18:48 2016 -0800
11170
11171 net: possible use after free in dst_release
11172
11173 dst_release should not access dst->flags after decrementing
11174 __refcnt to 0. The dst_entry may be in dst_busy_list and
11175 dst_gc_task may dst_destroy it before dst_release gets a chance
11176 to access dst->flags.
11177
11178 Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()")
11179 Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
11180 Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
11181 Acked-by: Eric Dumazet <edumazet@google.com>
11182 Signed-off-by: David S. Miller <davem@davemloft.net>
11183
11184 net/core/dst.c | 3 ++-
11185 1 files changed, 2 insertions(+), 1 deletions(-)
11186
11187 commit bfb0455793dd4e0f0b49d34a68b3249ab55565cc
11188 Author: Alan <gnomes@lxorguk.ukuu.org.uk>
11189 Date: Wed Jan 6 14:55:02 2016 +0000
11190
11191 mkiss: fix scribble on freed memory
11192
11193 commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
11194 scribble on free memory but added a new one which allows the user to
11195 scribble even more and user controlled data into freed space.
11196
11197 As with 6pack we need to halt the queue before we free the buffers, because
11198 the transmit logic is not protected by the semaphore.
11199
11200 Signed-off-by: Alan Cox <alan@linux.intel.com>
11201 Signed-off-by: David S. Miller <davem@davemloft.net>
11202
11203 drivers/net/hamradio/mkiss.c | 5 +++++
11204 1 files changed, 5 insertions(+), 0 deletions(-)
11205
11206 commit 5cbbcbd32dc1949470f61d342503808fa9555276
11207 Author: David Miller <davem@davemloft.net>
11208 Date: Thu Dec 17 16:05:49 2015 -0500
11209
11210 mkiss: Fix use after free in mkiss_close().
11211
11212 Need to do the unregister_device() after all references to the driver
11213 private have been done.
11214
11215 Signed-off-by: David S. Miller <davem@davemloft.net>
11216
11217 drivers/net/hamradio/mkiss.c | 4 ++--
11218 1 files changed, 2 insertions(+), 2 deletions(-)
11219
11220 commit b00171576794a98068e069a660f0991a6a5190ff
11221 Author: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>
11222 Date: Tue Jan 5 11:51:25 2016 +0000
11223
11224 6pack: fix free memory scribbles
11225
11226 commit acf673a3187edf72068ee2f92f4dc47d66baed47 fixed a user triggerable free
11227 memory scribble but in doing so replaced it with a different one that allows
11228 the user to control the data and scribble even more.
11229
11230 sixpack_close is called by the tty layer in tty context. The tty context is
11231 protected by sp_get() and sp_put(). However network layer activity via
11232 sp_xmit() is not protected this way. We must therefore stop the queue
11233 otherwise the user gets to dump a buffer mostly of their choice into freed
11234 kernel pages.
11235
11236 Signed-off-by: Alan Cox <alan@linux.intel.com>
11237 Signed-off-by: David S. Miller <davem@davemloft.net>
11238
11239 drivers/net/hamradio/6pack.c | 6 ++++++
11240 1 files changed, 6 insertions(+), 0 deletions(-)
11241
11242 commit 5b64a833907cd230a3106aeba2304b2c1bcd116d
11243 Author: David Miller <davem@davemloft.net>
11244 Date: Thu Dec 17 16:05:32 2015 -0500
11245
11246 6pack: Fix use after free in sixpack_close().
11247
11248 Need to do the unregister_device() after all references to the driver
11249 private have been done.
11250
11251 Also we need to use del_timer_sync() for the timers so that we don't
11252 have any asynchronous references after the unregister.
11253
11254 Signed-off-by: David S. Miller <davem@davemloft.net>
11255
11256 drivers/net/hamradio/6pack.c | 8 ++++----
11257 1 files changed, 4 insertions(+), 4 deletions(-)
11258
11259 commit 4f9d532742656b3613d579220fd10c78f24ba37b
11260 Author: Rabin Vincent <rabin@rab.in>
11261 Date: Tue Jan 5 16:23:07 2016 +0100
11262
11263 net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
11264
11265 The SKF_AD_ALU_XOR_X ancillary is not like the other ancillary data
11266 instructions since it XORs A with X while all the others replace A with
11267 some loaded value. All the BPF JITs fail to clear A if this is used as
11268 the first instruction in a filter. This was found using american fuzzy
11269 lop.
11270
11271 Add a helper to determine if A needs to be cleared given the first
11272 instruction in a filter, and use this in the JITs. Except for ARM, the
11273 rest have only been compile-tested.
11274
11275 Fixes: 3480593131e0 ("net: filter: get rid of BPF_S_* enum")
11276 Signed-off-by: Rabin Vincent <rabin@rab.in>
11277 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
11278 Acked-by: Alexei Starovoitov <ast@kernel.org>
11279 Signed-off-by: David S. Miller <davem@davemloft.net>
11280
11281 arch/arm/net/bpf_jit_32.c | 16 +---------------
11282 arch/mips/net/bpf_jit.c | 16 +---------------
11283 arch/powerpc/net/bpf_jit_comp.c | 13 ++-----------
11284 arch/sparc/net/bpf_jit_comp.c | 17 ++---------------
11285 include/linux/filter.h | 19 +++++++++++++++++++
11286 5 files changed, 25 insertions(+), 56 deletions(-)
11287
11288 commit 570d88f8acfffda92b89ae2e1c47320d47256034
11289 Author: John Fastabend <john.fastabend@gmail.com>
11290 Date: Tue Jan 5 09:11:36 2016 -0800
11291
11292 net: sched: fix missing free per cpu on qstats
11293
11294 When a qdisc is using per cpu stats (currently just the ingress
11295 qdisc) only the bstats are being freed. This also free's the qstats.
11296
11297 Fixes: b0ab6f92752b9f9d8 ("net: sched: enable per cpu qstats")
11298 Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
11299 Acked-by: Eric Dumazet <edumazet@google.com>
11300 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
11301 Signed-off-by: David S. Miller <davem@davemloft.net>
11302
11303 net/sched/sch_generic.c | 4 +++-
11304 1 files changed, 3 insertions(+), 1 deletions(-)
11305
11306 commit 32c0ebc51857ee83470a10dcb234d308a0ed1881
11307 Author: Rabin Vincent <rabin@rab.in>
11308 Date: Tue Jan 5 18:34:04 2016 +0100
11309
11310 ARM: net: bpf: fix zero right shift
11311
11312 The LSR instruction cannot be used to perform a zero right shift since a
11313 0 as the immediate value (imm5) in the LSR instruction encoding means
11314 that a shift of 32 is perfomed. See DecodeIMMShift() in the ARM ARM.
11315
11316 Make the JIT skip generation of the LSR if a zero-shift is requested.
11317
11318 This was found using american fuzzy lop.
11319
11320 Signed-off-by: Rabin Vincent <rabin@rab.in>
11321 Acked-by: Alexei Starovoitov <ast@kernel.org>
11322 Signed-off-by: David S. Miller <davem@davemloft.net>
11323
11324 arch/arm/net/bpf_jit_32.c | 3 ++-
11325 1 files changed, 2 insertions(+), 1 deletions(-)
11326
11327 commit 51f5d291750285efa4d4bbe84e5ec23dc00c8d2d
11328 Author: Brad Spengler <spender@grsecurity.net>
11329 Date: Wed Jan 6 20:35:57 2016 -0500
11330
11331 Don't perform hidden lookups in RBAC against the directory of
11332 a file being opened with O_CREAT, reported by Karl Witt
11333
11334 Conflicts:
11335
11336 fs/namei.c
11337
11338 fs/namei.c | 3 ---
11339 1 files changed, 0 insertions(+), 3 deletions(-)
11340
11341 commit 5a8266a6b2769ccdb447256f95bc2577a73cccd1
11342 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
11343 Date: Tue Jan 5 10:46:00 2016 +0100
11344
11345 bridge: Only call /sbin/bridge-stp for the initial network namespace
11346
11347 [I stole this patch from Eric Biederman. He wrote:]
11348
11349 > There is no defined mechanism to pass network namespace information
11350 > into /sbin/bridge-stp therefore don't even try to invoke it except
11351 > for bridge devices in the initial network namespace.
11352 >
11353 > It is possible for unprivileged users to cause /sbin/bridge-stp to be
11354 > invoked for any network device name which if /sbin/bridge-stp does not
11355 > guard against unreasonable arguments or being invoked twice on the
11356 > same network device could cause problems.
11357
11358 [Hannes: changed patch using netns_eq]
11359
11360 Cc: Eric W. Biederman <ebiederm@xmission.com>
11361 Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
11362 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11363 Signed-off-by: David S. Miller <davem@davemloft.net>
11364
11365 net/bridge/br_stp_if.c | 5 ++++-
11366 1 files changed, 4 insertions(+), 1 deletions(-)
11367
11368 commit 650d535cc39f0aeff2f57e60b6617be25d3ef48b
11369 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
11370 Date: Wed Dec 23 16:28:40 2015 -0200
11371
11372 sctp: use GFP_USER for user-controlled kmalloc
11373
11374 Commit cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
11375 missed two other spots.
11376
11377 For connectx, as it's more likely to be used by kernel users of the API,
11378 it detects if GFP_USER should be used or not.
11379
11380 Fixes: cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
11381 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11382 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
11383 Signed-off-by: David S. Miller <davem@davemloft.net>
11384
11385 net/sctp/socket.c | 9 ++++++---
11386 1 files changed, 6 insertions(+), 3 deletions(-)
11387
11388 commit 5718a1f63c41fc156f729783423b002763779d04
11389 Author: Florian Westphal <fw@strlen.de>
11390 Date: Thu Dec 31 14:26:33 2015 +0100
11391
11392 connector: bump skb->users before callback invocation
11393
11394 Dmitry reports memleak with syskaller program.
11395 Problem is that connector bumps skb usecount but might not invoke callback.
11396
11397 So move skb_get to where we invoke the callback.
11398
11399 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11400 Signed-off-by: Florian Westphal <fw@strlen.de>
11401 Signed-off-by: David S. Miller <davem@davemloft.net>
11402
11403 drivers/connector/connector.c | 11 +++--------
11404 1 files changed, 3 insertions(+), 8 deletions(-)
11405
11406 commit 2e6372e6a97f8d642416899861f91777f44f13b7
11407 Author: Rainer Weikusat <rweikusat@mobileactivedefense.com>
11408 Date: Sun Jan 3 18:56:38 2016 +0000
11409
11410 af_unix: Fix splice-bind deadlock
11411
11412 On 2015/11/06, Dmitry Vyukov reported a deadlock involving the splice
11413 system call and AF_UNIX sockets,
11414
11415 http://lists.openwall.net/netdev/2015/11/06/24
11416
11417 The situation was analyzed as
11418
11419 (a while ago) A: socketpair()
11420 B: splice() from a pipe to /mnt/regular_file
11421 does sb_start_write() on /mnt
11422 C: try to freeze /mnt
11423 wait for B to finish with /mnt
11424 A: bind() try to bind our socket to /mnt/new_socket_name
11425 lock our socket, see it not bound yet
11426 decide that it needs to create something in /mnt
11427 try to do sb_start_write() on /mnt, block (it's
11428 waiting for C).
11429 D: splice() from the same pipe to our socket
11430 lock the pipe, see that socket is connected
11431 try to lock the socket, block waiting for A
11432 B: get around to actually feeding a chunk from
11433 pipe to file, try to lock the pipe. Deadlock.
11434
11435 on 2015/11/10 by Al Viro,
11436
11437 http://lists.openwall.net/netdev/2015/11/10/4
11438
11439 The patch fixes this by removing the kern_path_create related code from
11440 unix_mknod and executing it as part of unix_bind prior acquiring the
11441 readlock of the socket in question. This means that A (as used above)
11442 will sb_start_write on /mnt before it acquires the readlock, hence, it
11443 won't indirectly block B which first did a sb_start_write and then
11444 waited for a thread trying to acquire the readlock. Consequently, A
11445 being blocked by C waiting for B won't cause a deadlock anymore
11446 (effectively, both A and B acquire two locks in opposite order in the
11447 situation described above).
11448
11449 Dmitry Vyukov(<dvyukov@google.com>) tested the original patch.
11450
11451 Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
11452 Signed-off-by: David S. Miller <davem@davemloft.net>
11453
11454 Conflicts:
11455
11456 net/unix/af_unix.c
11457
11458 net/unix/af_unix.c | 70 +++++++++++++++++++++++++++++++--------------------
11459 1 files changed, 42 insertions(+), 28 deletions(-)
11460
11461 commit 2e729e557c571f3253e32472cd7d382ac16cf1c3
11462 Author: Qiu Peiyang <peiyangx.qiu@intel.com>
11463 Date: Thu Dec 31 13:11:28 2015 +0800
11464
11465 tracing: Fix setting of start_index in find_next()
11466
11467 When we do cat /sys/kernel/debug/tracing/printk_formats, we hit kernel
11468 panic at t_show.
11469
11470 general protection fault: 0000 [#1] PREEMPT SMP
11471 CPU: 0 PID: 2957 Comm: sh Tainted: G W O 3.14.55-x86_64-01062-gd4acdc7 #2
11472 RIP: 0010:[<ffffffff811375b2>]
11473 [<ffffffff811375b2>] t_show+0x22/0xe0
11474 RSP: 0000:ffff88002b4ebe80 EFLAGS: 00010246
11475 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004
11476 RDX: 0000000000000004 RSI: ffffffff81fd26a6 RDI: ffff880032f9f7b1
11477 RBP: ffff88002b4ebe98 R08: 0000000000001000 R09: 000000000000ffec
11478 R10: 0000000000000000 R11: 000000000000000f R12: ffff880004d9b6c0
11479 R13: 7365725f6d706400 R14: ffff880004d9b6c0 R15: ffffffff82020570
11480 FS: 0000000000000000(0000) GS:ffff88003aa00000(0063) knlGS:00000000f776bc40
11481 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
11482 CR2: 00000000f6c02ff0 CR3: 000000002c2b3000 CR4: 00000000001007f0
11483 Call Trace:
11484 [<ffffffff811dc076>] seq_read+0x2f6/0x3e0
11485 [<ffffffff811b749b>] vfs_read+0x9b/0x160
11486 [<ffffffff811b7f69>] SyS_read+0x49/0xb0
11487 [<ffffffff81a3a4b9>] ia32_do_call+0x13/0x13
11488 ---[ end trace 5bd9eb630614861e ]---
11489 Kernel panic - not syncing: Fatal exception
11490
11491 When the first time find_next calls find_next_mod_format, it should
11492 iterate the trace_bprintk_fmt_list to find the first print format of
11493 the module. However in current code, start_index is smaller than *pos
11494 at first, and code will not iterate the list. Latter container_of will
11495 get the wrong address with former v, which will cause mod_fmt be a
11496 meaningless object and so is the returned mod_fmt->fmt.
11497
11498 This patch will fix it by correcting the start_index. After fixed,
11499 when the first time calls find_next_mod_format, start_index will be
11500 equal to *pos, and code will iterate the trace_bprintk_fmt_list to
11501 get the right module printk format, so is the returned mod_fmt->fmt.
11502
11503 Link: http://lkml.kernel.org/r/5684B900.9000309@intel.com
11504
11505 Cc: stable@vger.kernel.org # 3.12+
11506 Fixes: 102c9323c35a8 "tracing: Add __tracepoint_string() to export string pointers"
11507 Signed-off-by: Qiu Peiyang <peiyangx.qiu@intel.com>
11508 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
11509
11510 kernel/trace/trace_printk.c | 1 +
11511 1 files changed, 1 insertions(+), 0 deletions(-)
11512
11513 commit 0994af4b1930f32aa493dc08145cd304f8bfc8f4
11514 Author: Al Viro <viro@zeniv.linux.org.uk>
11515 Date: Mon Dec 28 20:47:08 2015 -0500
11516
11517 [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
11518
11519 Cc: stable@vger.kernel.org # 3.15+
11520 Reviewed-by: Jeff Layton <jeff.layton@primarydata.com>
11521 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
11522
11523 arch/arm/kernel/sys_oabi-compat.c | 73 +++++++++++++++++++------------------
11524 1 files changed, 37 insertions(+), 36 deletions(-)
11525
11526 commit 4ed030f65dcf3e6b0128032a49a7d75f947fa351
11527 Merge: de243c2 3adc55a
11528 Author: Brad Spengler <spender@grsecurity.net>
11529 Date: Tue Jan 5 18:10:10 2016 -0500
11530
11531 Merge branch 'pax-test' into grsec-test
11532
11533 commit 3adc55a5acfa429c2a7cc883aef08b960c0079b0
11534 Author: Brad Spengler <spender@grsecurity.net>
11535 Date: Tue Jan 5 18:08:53 2016 -0500
11536
11537 Update to pax-linux-4.3.3-test16.patch:
11538 - small cleanup in entry_64.S on x86
11539 - Emese fixed the initify plugin to recursively check variable initializers, reported by Rasmus Villemoes
11540 - fixed an integer truncation of a partially uninitialized value bug in em_pop_sreg, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4354)
11541 - fixed alternatives patching of call insns under KERNEXEC/i386, reported by fly_a320 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4305) and TTgrsec (https://forums.grsecurity.net/viewtopic.php?f=3&t=4353)
11542 - fixed a size overflow false positive that triggered in tcp_parse_options on arm, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350&p=15917#p15916)
11543 - fixed a boot crash on amd64 with KERNEXEC/OR and CONTEXT_TRACKING, reported by Klaus Kusche (https://bugs.gentoo.org/show_bug.cgi?id=570420)
11544
11545 arch/x86/entry/entry_64.S | 60 +++++-----
11546 arch/x86/kernel/alternative.c | 2 +-
11547 arch/x86/kvm/emulate.c | 4 +-
11548 tools/gcc/initify_plugin.c | 123 +++++++++----------
11549 .../disable_size_overflow_hash.data | 4 +-
11550 .../size_overflow_plugin/size_overflow_hash.data | 2 -
11551 6 files changed, 93 insertions(+), 102 deletions(-)
11552
11553 commit de243c26efd0e423ca92db825af2c3f8eb1ca043
11554 Author: Brad Spengler <spender@grsecurity.net>
11555 Date: Tue Dec 29 18:01:24 2015 -0500
11556
11557 It was noticed during an internal audit that the code under GRKERNSEC_PROC_MEMMAP
11558 which aimed to enforce a 16MB minimum on RLIMIT_DATA for suid/sgid binaries only
11559 did so if RLIMIT_DATA was set lower than PAGE_SIZE.
11560
11561 This addition was only supplemental as GRKERNSEC_BRUTE is the main defense
11562 against suid/sgid attacks and the flaw above would only eliminate the extra
11563 entropy provided for the brk-managed heap, still leaving it with the minimum
11564 of 16-bit entropy for mmap on x86 and 28 on x64.
11565
11566 mm/mmap.c | 2 +-
11567 1 files changed, 1 insertions(+), 1 deletions(-)
11568
11569 commit 8e264cfe47e5f08cdc9ed009a630277206cd2534
11570 Merge: 436201b 2584340
11571 Author: Brad Spengler <spender@grsecurity.net>
11572 Date: Mon Dec 28 20:30:01 2015 -0500
11573
11574 Merge branch 'pax-test' into grsec-test
11575
11576 commit 2584340eab494e64ec1bf9eb5b0d1ae31f926306
11577 Author: Brad Spengler <spender@grsecurity.net>
11578 Date: Mon Dec 28 20:29:28 2015 -0500
11579
11580 Update to pax-linux-4.3.3-test14.patch:
11581 - fixed an integer sign conversion error in i2c_dw_pci_probe caught by the size overflow plugin, reported by Jean Lucas and ganymede (https://forums.grsecurity.net/viewtopic.php?f=3&t=4349)
11582 - fixed shutdown crash with tboot and KERNEXEC, reported by perfinion
11583 - fixed a few false positive and one real size overflow reports in hyperv, reported by hunger
11584 - fixed compile regressions on armv5, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350)
11585 - fixed an assert in the initify plugin that triggered in vic_register on arm
11586
11587 arch/arm/include/asm/atomic.h | 7 +++++--
11588 arch/arm/include/asm/domain.h | 5 ++---
11589 arch/x86/kernel/tboot.c | 14 +++++++++-----
11590 drivers/hv/channel.c | 4 +---
11591 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
11592 drivers/net/hyperv/rndis_filter.c | 3 +--
11593 fs/exec.c | 4 ++--
11594 include/linux/atomic.h | 15 ---------------
11595 net/core/skbuff.c | 3 ++-
11596 tools/gcc/initify_plugin.c | 4 +++-
11597 10 files changed, 26 insertions(+), 35 deletions(-)
11598
11599 commit 436201b6626b488d173c8076447000077c27b84a
11600 Author: David Howells <dhowells@redhat.com>
11601 Date: Fri Dec 18 01:34:26 2015 +0000
11602
11603 KEYS: Fix race between read and revoke
11604
11605 This fixes CVE-2015-7550.
11606
11607 There's a race between keyctl_read() and keyctl_revoke(). If the revoke
11608 happens between keyctl_read() checking the validity of a key and the key's
11609 semaphore being taken, then the key type read method will see a revoked key.
11610
11611 This causes a problem for the user-defined key type because it assumes in
11612 its read method that there will always be a payload in a non-revoked key
11613 and doesn't check for a NULL pointer.
11614
11615 Fix this by making keyctl_read() check the validity of a key after taking
11616 semaphore instead of before.
11617
11618 I think the bug was introduced with the original keyrings code.
11619
11620 This was discovered by a multithreaded test program generated by syzkaller
11621 (http://github.com/google/syzkaller). Here's a cleaned up version:
11622
11623 #include <sys/types.h>
11624 #include <keyutils.h>
11625 #include <pthread.h>
11626 void *thr0(void *arg)
11627 {
11628 key_serial_t key = (unsigned long)arg;
11629 keyctl_revoke(key);
11630 return 0;
11631 }
11632 void *thr1(void *arg)
11633 {
11634 key_serial_t key = (unsigned long)arg;
11635 char buffer[16];
11636 keyctl_read(key, buffer, 16);
11637 return 0;
11638 }
11639 int main()
11640 {
11641 key_serial_t key = add_key("user", "%", "foo", 3, KEY_SPEC_USER_KEYRING);
11642 pthread_t th[5];
11643 pthread_create(&th[0], 0, thr0, (void *)(unsigned long)key);
11644 pthread_create(&th[1], 0, thr1, (void *)(unsigned long)key);
11645 pthread_create(&th[2], 0, thr0, (void *)(unsigned long)key);
11646 pthread_create(&th[3], 0, thr1, (void *)(unsigned long)key);
11647 pthread_join(th[0], 0);
11648 pthread_join(th[1], 0);
11649 pthread_join(th[2], 0);
11650 pthread_join(th[3], 0);
11651 return 0;
11652 }
11653
11654 Build as:
11655
11656 cc -o keyctl-race keyctl-race.c -lkeyutils -lpthread
11657
11658 Run as:
11659
11660 while keyctl-race; do :; done
11661
11662 as it may need several iterations to crash the kernel. The crash can be
11663 summarised as:
11664
11665 BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
11666 IP: [<ffffffff81279b08>] user_read+0x56/0xa3
11667 ...
11668 Call Trace:
11669 [<ffffffff81276aa9>] keyctl_read_key+0xb6/0xd7
11670 [<ffffffff81277815>] SyS_keyctl+0x83/0xe0
11671 [<ffffffff815dbb97>] entry_SYSCALL_64_fastpath+0x12/0x6f
11672
11673 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11674 Signed-off-by: David Howells <dhowells@redhat.com>
11675 Tested-by: Dmitry Vyukov <dvyukov@google.com>
11676 Cc: stable@vger.kernel.org
11677 Signed-off-by: James Morris <james.l.morris@oracle.com>
11678
11679 security/keys/keyctl.c | 18 +++++++++---------
11680 1 files changed, 9 insertions(+), 9 deletions(-)
11681
11682 commit 195cea04477025da4a2078bd3e1fb7c4e11206c2
11683 Author: Brad Spengler <spender@grsecurity.net>
11684 Date: Tue Dec 22 20:44:01 2015 -0500
11685
11686 Add new kernel command-line param: pax_size_overflow_report_only
11687 If a user triggers a size_overflow violation that makes it difficult
11688 to obtain the call trace without serial console/net console, they can
11689 use this option to provide that information to us
11690
11691 Documentation/kernel-parameters.txt | 5 +++++
11692 fs/exec.c | 12 +++++++++---
11693 init/main.c | 11 +++++++++++
11694 3 files changed, 25 insertions(+), 3 deletions(-)
11695
11696 commit 4254a8da5851df8c08cdca5c392916e8c105408d
11697 Author: WANG Cong <xiyou.wangcong@gmail.com>
11698 Date: Mon Dec 21 10:55:45 2015 -0800
11699
11700 addrconf: always initialize sysctl table data
11701
11702 When sysctl performs restrict writes, it allows to write from
11703 a middle position of a sysctl file, which requires us to initialize
11704 the table data before calling proc_dostring() for the write case.
11705
11706 Fixes: 3d1bec99320d ("ipv6: introduce secret_stable to ipv6_devconf")
11707 Reported-by: Sasha Levin <sasha.levin@oracle.com>
11708 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11709 Tested-by: Sasha Levin <sasha.levin@oracle.com>
11710 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
11711 Signed-off-by: David S. Miller <davem@davemloft.net>
11712
11713 net/ipv6/addrconf.c | 11 ++++-------
11714 1 files changed, 4 insertions(+), 7 deletions(-)
11715
11716 commit f8002863fb06c363180637046947a78a6ccb3d33
11717 Author: WANG Cong <xiyou.wangcong@gmail.com>
11718 Date: Wed Dec 16 23:39:04 2015 -0800
11719
11720 net: check both type and procotol for tcp sockets
11721
11722 Dmitry reported the following out-of-bound access:
11723
11724 Call Trace:
11725 [<ffffffff816cec2e>] __asan_report_load4_noabort+0x3e/0x40
11726 mm/kasan/report.c:294
11727 [<ffffffff84affb14>] sock_setsockopt+0x1284/0x13d0 net/core/sock.c:880
11728 [< inline >] SYSC_setsockopt net/socket.c:1746
11729 [<ffffffff84aed7ee>] SyS_setsockopt+0x1fe/0x240 net/socket.c:1729
11730 [<ffffffff85c18c76>] entry_SYSCALL_64_fastpath+0x16/0x7a
11731 arch/x86/entry/entry_64.S:185
11732
11733 This is because we mistake a raw socket as a tcp socket.
11734 We should check both sk->sk_type and sk->sk_protocol to ensure
11735 it is a tcp socket.
11736
11737 Willem points out __skb_complete_tx_timestamp() needs to fix as well.
11738
11739 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11740 Cc: Willem de Bruijn <willemdebruijn.kernel@gmail.com>
11741 Cc: Eric Dumazet <eric.dumazet@gmail.com>
11742 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
11743 Acked-by: Willem de Bruijn <willemb@google.com>
11744 Signed-off-by: David S. Miller <davem@davemloft.net>
11745
11746 net/core/skbuff.c | 3 ++-
11747 net/core/sock.c | 3 ++-
11748 2 files changed, 4 insertions(+), 2 deletions(-)
11749
11750 commit bd6b3399804470a4ad8f34229469ca149dceba3d
11751 Author: Colin Ian King <colin.king@canonical.com>
11752 Date: Fri Dec 18 14:22:01 2015 -0800
11753
11754 proc: fix -ESRCH error when writing to /proc/$pid/coredump_filter
11755
11756 Writing to /proc/$pid/coredump_filter always returns -ESRCH because commit
11757 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") removed
11758 the setting of ret after the get_proc_task call and incorrectly left it as
11759 -ESRCH. Instead, return 0 when successful.
11760
11761 Example breakage:
11762
11763 echo 0 > /proc/self/coredump_filter
11764 bash: echo: write error: No such process
11765
11766 Fixes: 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()")
11767 Signed-off-by: Colin Ian King <colin.king@canonical.com>
11768 Acked-by: Kees Cook <keescook@chromium.org>
11769 Cc: <stable@vger.kernel.org> [4.3+]
11770 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
11771 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
11772
11773 fs/proc/base.c | 1 +
11774 1 files changed, 1 insertions(+), 0 deletions(-)
11775
11776 commit b28aca2b99ed08546778355fb9402c503ff9b29e
11777 Author: Junichi Nomura <j-nomura@ce.jp.nec.com>
11778 Date: Tue Dec 22 10:23:44 2015 -0700
11779
11780 block: ensure to split after potentially bouncing a bio
11781
11782 blk_queue_bio() does split then bounce, which makes the segment
11783 counting based on pages before bouncing and could go wrong. Move
11784 the split to after bouncing, like we do for blk-mq, and the we
11785 fix the issue of having the bio count for segments be wrong.
11786
11787 Fixes: 54efd50bfd87 ("block: make generic_make_request handle arbitrarily sized bios")
11788 Cc: stable@vger.kernel.org
11789 Tested-by: Artem S. Tashkinov <t.artem@lycos.com>
11790 Signed-off-by: Jens Axboe <axboe@fb.com>
11791
11792 block/blk-core.c | 4 ++--
11793 1 files changed, 2 insertions(+), 2 deletions(-)
11794
11795 commit e62a25e917a9e5b35ddd5b4f1b5e5e30fbd2e84c
11796 Merge: f6f63ae ec72fa5
11797 Author: Brad Spengler <spender@grsecurity.net>
11798 Date: Tue Dec 22 19:46:26 2015 -0500
11799
11800 Merge branch 'pax-test' into grsec-test
11801
11802 commit ec72fa5f8d9cb4e223bad1b8b5c2e1071c222f2a
11803 Author: Brad Spengler <spender@grsecurity.net>
11804 Date: Tue Dec 22 19:45:51 2015 -0500
11805
11806 Update to pax-linux-4.3.3-test13.patch:
11807 - Emese fixed a (probably) false positive integer truncation in xfs_da_grow_inode_int, reported by jdkbx (http://forums.grsecurity.net/viewtopic.php?f=3&t=4346)
11808 - fixed a size overflow in btrfs/try_merge_map, reported by Alex W (https://bugs.archlinux.org/task/47173) and mathias and dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4344)
11809
11810 arch/arm/mm/fault.c | 2 +-
11811 arch/x86/mm/fault.c | 2 +-
11812 fs/btrfs/extent_map.c | 8 ++++++--
11813 fs/xfs/libxfs/xfs_da_btree.c | 4 +++-
11814 4 files changed, 11 insertions(+), 5 deletions(-)
11815
11816 commit f6f63ae154cd45028add1dc41957878060d77fbf
11817 Author: Brad Spengler <spender@grsecurity.net>
11818 Date: Thu Dec 17 18:43:44 2015 -0500
11819
11820 ptrace_has_cap() checks whether the current process should be
11821 treated as having a certain capability for ptrace checks
11822 against another process. Until now, this was equivalent to
11823 has_ns_capability(current, target_ns, CAP_SYS_PTRACE).
11824
11825 However, if a root-owned process wants to enter a user
11826 namespace for some reason without knowing who owns it and
11827 therefore can't change to the namespace owner's uid and gid
11828 before entering, as soon as it has entered the namespace,
11829 the namespace owner can attach to it via ptrace and thereby
11830 gain access to its uid and gid.
11831
11832 While it is possible for the entering process to switch to
11833 the uid of a claimed namespace owner before entering,
11834 causing the attempt to enter to fail if the claimed uid is
11835 wrong, this doesn't solve the problem of determining an
11836 appropriate gid.
11837
11838 With this change, the entering process can first enter the
11839 namespace and then safely inspect the namespace's
11840 properties, e.g. through /proc/self/{uid_map,gid_map},
11841 assuming that the namespace owner doesn't have access to
11842 uid 0.
11843 Signed-off-by: Jann Horn <jann@thejh.net>
11844
11845 kernel/ptrace.c | 30 +++++++++++++++++++++++++-----
11846 1 files changed, 25 insertions(+), 5 deletions(-)
11847
11848 commit e314f0fb63020f61543b401ff594e953c2c304e5
11849 Author: tadeusz.struk@intel.com <tadeusz.struk@intel.com>
11850 Date: Tue Dec 15 10:46:17 2015 -0800
11851
11852 net: fix uninitialized variable issue
11853
11854 msg_iocb needs to be initialized on the recv/recvfrom path.
11855 Otherwise afalg will wrongly interpret it as an async call.
11856
11857 Cc: stable@vger.kernel.org
11858 Reported-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
11859 Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com>
11860 Signed-off-by: David S. Miller <davem@davemloft.net>
11861
11862 net/socket.c | 1 +
11863 1 files changed, 1 insertions(+), 0 deletions(-)
11864
11865 commit a3f56a43ad56b8fcaf04f6327636ed2f5970de3b
11866 Merge: dfa764c 142edcf
11867 Author: Brad Spengler <spender@grsecurity.net>
11868 Date: Wed Dec 16 21:01:17 2015 -0500
11869
11870 Merge branch 'pax-test' into grsec-test
11871
11872 commit 142edcf1005a57fb8887823565cf0bafad2f313c
11873 Author: Brad Spengler <spender@grsecurity.net>
11874 Date: Wed Dec 16 21:00:57 2015 -0500
11875
11876 Update to pax-linux-4.3.3-test12.patch:
11877 - Emese fixed a size overflow false positive in reiserfs/leaf_paste_entries, reported by Christian Apeltauer (https://bugs.gentoo.org/show_bug.cgi?id=568046)
11878 - fixed a bunch of int/size_t mismatches in the drivers/tty/n_tty.c code causing size overflow false positives, reported by Toralf Förster, mathias (https://forums.grsecurity.net/viewtopic.php?f=3&t=4342), N8Fear (https://forums.grsecurity.net/viewtopic.php?f=3&t=4341)
11879
11880 drivers/tty/n_tty.c | 16 ++++++++--------
11881 .../disable_size_overflow_hash.data | 2 ++
11882 .../size_overflow_plugin/size_overflow_hash.data | 6 ++----
11883 3 files changed, 12 insertions(+), 12 deletions(-)
11884
11885 commit dfa764cc549892a5bfc1083cac78b99032cae577
11886 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
11887 Date: Tue Dec 15 22:59:12 2015 +0100
11888
11889 ipv6: automatically enable stable privacy mode if stable_secret set
11890
11891 Bjørn reported that while we switch all interfaces to privacy stable mode
11892 when setting the secret, we don't set this mode for new interfaces. This
11893 does not make sense, so change this behaviour.
11894
11895 Fixes: 622c81d57b392cc ("ipv6: generation of stable privacy addresses for link-local and autoconf")
11896 Reported-by: Bjørn Mork <bjorn@mork.no>
11897 Cc: Bjørn Mork <bjorn@mork.no>
11898 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11899 Signed-off-by: David S. Miller <davem@davemloft.net>
11900
11901 net/ipv6/addrconf.c | 6 ++++++
11902 1 files changed, 6 insertions(+), 0 deletions(-)
11903
11904 commit c2815a1fee03f222273e77c14e43f960da06f35a
11905 Author: Brad Spengler <spender@grsecurity.net>
11906 Date: Wed Dec 16 13:03:38 2015 -0500
11907
11908 Work around upstream limitation on the number of thread info flags causing a compilation error
11909 Reported by fabled at http://forums.grsecurity.net/viewtopic.php?f=3&t=4339
11910
11911 arch/arm/kernel/entry-common.S | 8 ++++++--
11912 1 files changed, 6 insertions(+), 2 deletions(-)
11913
11914 commit 8c9ae168e09ae49324d709d76d73d9fc4ca477e1
11915 Author: Brad Spengler <spender@grsecurity.net>
11916 Date: Tue Dec 15 19:03:41 2015 -0500
11917
11918 Initial import of grsecurity 3.1 for Linux 4.3.3
11919
11920 Documentation/dontdiff | 2 +
11921 Documentation/kernel-parameters.txt | 7 +
11922 Documentation/sysctl/kernel.txt | 15 +
11923 Makefile | 18 +-
11924 arch/alpha/include/asm/cache.h | 4 +-
11925 arch/alpha/kernel/osf_sys.c | 12 +-
11926 arch/arc/Kconfig | 1 +
11927 arch/arm/Kconfig | 1 +
11928 arch/arm/Kconfig.debug | 1 +
11929 arch/arm/include/asm/thread_info.h | 7 +-
11930 arch/arm/kernel/process.c | 4 +-
11931 arch/arm/kernel/ptrace.c | 9 +
11932 arch/arm/kernel/traps.c | 7 +-
11933 arch/arm/mm/Kconfig | 2 +-
11934 arch/arm/mm/fault.c | 40 +-
11935 arch/arm/mm/mmap.c | 8 +-
11936 arch/arm/net/bpf_jit_32.c | 51 +-
11937 arch/arm64/Kconfig.debug | 1 +
11938 arch/avr32/include/asm/cache.h | 4 +-
11939 arch/blackfin/Kconfig.debug | 1 +
11940 arch/blackfin/include/asm/cache.h | 3 +-
11941 arch/cris/include/arch-v10/arch/cache.h | 3 +-
11942 arch/cris/include/arch-v32/arch/cache.h | 3 +-
11943 arch/frv/include/asm/cache.h | 3 +-
11944 arch/frv/mm/elf-fdpic.c | 4 +-
11945 arch/hexagon/include/asm/cache.h | 6 +-
11946 arch/ia64/Kconfig | 1 +
11947 arch/ia64/include/asm/cache.h | 3 +-
11948 arch/ia64/kernel/sys_ia64.c | 2 +
11949 arch/ia64/mm/hugetlbpage.c | 2 +
11950 arch/m32r/include/asm/cache.h | 4 +-
11951 arch/m68k/include/asm/cache.h | 4 +-
11952 arch/metag/mm/hugetlbpage.c | 1 +
11953 arch/microblaze/include/asm/cache.h | 3 +-
11954 arch/mips/Kconfig | 1 +
11955 arch/mips/include/asm/cache.h | 3 +-
11956 arch/mips/include/asm/thread_info.h | 11 +-
11957 arch/mips/kernel/irq.c | 3 +
11958 arch/mips/kernel/ptrace.c | 9 +
11959 arch/mips/mm/mmap.c | 4 +-
11960 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
11961 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
11962 arch/openrisc/include/asm/cache.h | 4 +-
11963 arch/parisc/include/asm/cache.h | 5 +-
11964 arch/parisc/kernel/sys_parisc.c | 4 +
11965 arch/powerpc/Kconfig | 1 +
11966 arch/powerpc/include/asm/cache.h | 4 +-
11967 arch/powerpc/include/asm/thread_info.h | 5 +-
11968 arch/powerpc/kernel/Makefile | 2 +
11969 arch/powerpc/kernel/irq.c | 3 +
11970 arch/powerpc/kernel/process.c | 10 +-
11971 arch/powerpc/kernel/ptrace.c | 14 +
11972 arch/powerpc/kernel/traps.c | 5 +
11973 arch/powerpc/mm/slice.c | 2 +-
11974 arch/s390/Kconfig.debug | 1 +
11975 arch/s390/include/asm/cache.h | 4 +-
11976 arch/score/include/asm/cache.h | 4 +-
11977 arch/sh/include/asm/cache.h | 3 +-
11978 arch/sh/mm/mmap.c | 6 +-
11979 arch/sparc/include/asm/cache.h | 4 +-
11980 arch/sparc/include/asm/pgalloc_64.h | 1 +
11981 arch/sparc/include/asm/thread_info_64.h | 8 +-
11982 arch/sparc/kernel/process_32.c | 6 +-
11983 arch/sparc/kernel/process_64.c | 8 +-
11984 arch/sparc/kernel/ptrace_64.c | 14 +
11985 arch/sparc/kernel/sys_sparc_64.c | 8 +-
11986 arch/sparc/kernel/syscalls.S | 8 +-
11987 arch/sparc/kernel/traps_32.c | 8 +-
11988 arch/sparc/kernel/traps_64.c | 28 +-
11989 arch/sparc/kernel/unaligned_64.c | 2 +-
11990 arch/sparc/mm/fault_64.c | 2 +-
11991 arch/sparc/mm/hugetlbpage.c | 15 +-
11992 arch/tile/Kconfig | 1 +
11993 arch/tile/include/asm/cache.h | 3 +-
11994 arch/tile/mm/hugetlbpage.c | 2 +
11995 arch/um/include/asm/cache.h | 3 +-
11996 arch/unicore32/include/asm/cache.h | 6 +-
11997 arch/x86/Kconfig | 21 +
11998 arch/x86/Kconfig.debug | 2 +
11999 arch/x86/entry/common.c | 14 +
12000 arch/x86/entry/entry_32.S | 2 +-
12001 arch/x86/entry/entry_64.S | 2 +-
12002 arch/x86/ia32/ia32_aout.c | 2 +
12003 arch/x86/include/asm/floppy.h | 20 +-
12004 arch/x86/include/asm/fpu/types.h | 69 +-
12005 arch/x86/include/asm/io.h | 2 +-
12006 arch/x86/include/asm/page.h | 12 +-
12007 arch/x86/include/asm/paravirt_types.h | 23 +-
12008 arch/x86/include/asm/processor.h | 12 +-
12009 arch/x86/include/asm/thread_info.h | 6 +-
12010 arch/x86/include/asm/uaccess.h | 2 +-
12011 arch/x86/kernel/dumpstack.c | 10 +-
12012 arch/x86/kernel/dumpstack_32.c | 2 +-
12013 arch/x86/kernel/dumpstack_64.c | 2 +-
12014 arch/x86/kernel/ioport.c | 13 +
12015 arch/x86/kernel/irq_32.c | 3 +
12016 arch/x86/kernel/irq_64.c | 4 +
12017 arch/x86/kernel/ldt.c | 18 +
12018 arch/x86/kernel/msr.c | 10 +
12019 arch/x86/kernel/ptrace.c | 14 +
12020 arch/x86/kernel/signal.c | 9 +-
12021 arch/x86/kernel/sys_i386_32.c | 9 +-
12022 arch/x86/kernel/sys_x86_64.c | 8 +-
12023 arch/x86/kernel/traps.c | 5 +
12024 arch/x86/kernel/verify_cpu.S | 1 +
12025 arch/x86/kernel/vm86_32.c | 15 +
12026 arch/x86/kvm/svm.c | 14 +-
12027 arch/x86/mm/fault.c | 12 +-
12028 arch/x86/mm/hugetlbpage.c | 15 +-
12029 arch/x86/mm/init.c | 66 +-
12030 arch/x86/mm/init_32.c | 6 +-
12031 arch/x86/net/bpf_jit_comp.c | 4 +
12032 arch/x86/platform/efi/efi_64.c | 2 +-
12033 arch/x86/xen/Kconfig | 1 +
12034 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
12035 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
12036 crypto/ablkcipher.c | 2 +-
12037 crypto/blkcipher.c | 2 +-
12038 crypto/scatterwalk.c | 10 +-
12039 drivers/acpi/acpica/hwxfsleep.c | 11 +-
12040 drivers/acpi/custom_method.c | 4 +
12041 drivers/block/cciss.h | 30 +-
12042 drivers/block/smart1,2.h | 40 +-
12043 drivers/cdrom/cdrom.c | 2 +-
12044 drivers/char/Kconfig | 4 +-
12045 drivers/char/genrtc.c | 1 +
12046 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
12047 drivers/char/mem.c | 17 +
12048 drivers/char/random.c | 5 +-
12049 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
12050 drivers/crypto/nx/nx-aes-ccm.c | 2 +-
12051 drivers/crypto/nx/nx-aes-gcm.c | 2 +-
12052 drivers/crypto/talitos.c | 2 +-
12053 drivers/firewire/ohci.c | 4 +
12054 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
12055 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
12056 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
12057 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
12058 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
12059 drivers/hid/hid-wiimote-debug.c | 2 +-
12060 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
12061 drivers/iommu/Kconfig | 1 +
12062 drivers/iommu/amd_iommu.c | 14 +-
12063 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
12064 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
12065 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
12066 drivers/isdn/hisax/config.c | 2 +-
12067 drivers/isdn/hisax/hfc_pci.c | 2 +-
12068 drivers/isdn/hisax/hfc_sx.c | 2 +-
12069 drivers/isdn/hisax/q931.c | 6 +-
12070 drivers/isdn/i4l/isdn_concap.c | 6 +-
12071 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
12072 drivers/md/bcache/Kconfig | 1 +
12073 drivers/md/raid5.c | 8 +
12074 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
12075 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
12076 drivers/media/platform/vivid/vivid-osd.c | 1 +
12077 drivers/media/radio/radio-cadet.c | 5 +-
12078 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
12079 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
12080 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
12081 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
12082 drivers/message/fusion/mptbase.c | 9 +
12083 drivers/misc/sgi-xp/xp_main.c | 12 +-
12084 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
12085 drivers/net/ppp/pppoe.c | 14 +-
12086 drivers/net/ppp/pptp.c | 6 +
12087 drivers/net/slip/slhc.c | 3 +
12088 drivers/net/wan/lmc/lmc_media.c | 97 +-
12089 drivers/net/wan/x25_asy.c | 6 +-
12090 drivers/net/wan/z85230.c | 24 +-
12091 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
12092 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
12093 drivers/pci/pci-sysfs.c | 2 +-
12094 drivers/pci/proc.c | 9 +
12095 drivers/platform/x86/asus-wmi.c | 12 +
12096 drivers/rtc/rtc-dev.c | 3 +
12097 drivers/scsi/bfa/bfa_fcs.c | 19 +-
12098 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
12099 drivers/scsi/bfa/bfa_modules.h | 12 +-
12100 drivers/scsi/hpsa.h | 40 +-
12101 drivers/staging/dgnc/dgnc_mgmt.c | 1 +
12102 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
12103 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
12104 drivers/target/target_core_sbc.c | 17 +-
12105 drivers/target/target_core_transport.c | 14 +-
12106 drivers/tty/serial/uartlite.c | 4 +-
12107 drivers/tty/sysrq.c | 2 +-
12108 drivers/tty/vt/keyboard.c | 22 +-
12109 drivers/uio/uio.c | 6 +-
12110 drivers/usb/core/hub.c | 5 +
12111 drivers/usb/gadget/function/f_uac1.c | 1 +
12112 drivers/usb/gadget/function/u_uac1.c | 1 +
12113 drivers/usb/host/hwa-hc.c | 9 +-
12114 drivers/usb/usbip/vhci_sysfs.c | 2 +-
12115 drivers/video/fbdev/arcfb.c | 2 +-
12116 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
12117 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
12118 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
12119 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++-----
12120 drivers/xen/xenfs/xenstored.c | 5 +
12121 firmware/Makefile | 2 +
12122 firmware/WHENCE | 20 +-
12123 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
12124 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
12125 fs/9p/vfs_inode.c | 4 +-
12126 fs/attr.c | 1 +
12127 fs/autofs4/waitq.c | 9 +
12128 fs/binfmt_aout.c | 7 +
12129 fs/binfmt_elf.c | 50 +-
12130 fs/compat.c | 20 +-
12131 fs/coredump.c | 17 +-
12132 fs/dcache.c | 3 +
12133 fs/debugfs/inode.c | 11 +-
12134 fs/exec.c | 219 +-
12135 fs/ext2/balloc.c | 4 +-
12136 fs/ext2/super.c | 8 +-
12137 fs/ext4/balloc.c | 4 +-
12138 fs/fcntl.c | 4 +
12139 fs/fhandle.c | 3 +-
12140 fs/file.c | 4 +
12141 fs/filesystems.c | 4 +
12142 fs/fs_struct.c | 20 +-
12143 fs/hugetlbfs/inode.c | 5 +-
12144 fs/inode.c | 8 +-
12145 fs/kernfs/dir.c | 6 +
12146 fs/mount.h | 4 +-
12147 fs/namei.c | 286 +-
12148 fs/namespace.c | 24 +
12149 fs/nfsd/nfscache.c | 2 +-
12150 fs/open.c | 38 +
12151 fs/overlayfs/inode.c | 11 +-
12152 fs/overlayfs/super.c | 6 +-
12153 fs/pipe.c | 2 +-
12154 fs/posix_acl.c | 15 +-
12155 fs/proc/Kconfig | 10 +-
12156 fs/proc/array.c | 69 +-
12157 fs/proc/base.c | 186 +-
12158 fs/proc/cmdline.c | 4 +
12159 fs/proc/devices.c | 4 +
12160 fs/proc/fd.c | 17 +-
12161 fs/proc/generic.c | 64 +
12162 fs/proc/inode.c | 17 +
12163 fs/proc/internal.h | 11 +-
12164 fs/proc/interrupts.c | 4 +
12165 fs/proc/kcore.c | 3 +
12166 fs/proc/meminfo.c | 7 +-
12167 fs/proc/namespaces.c | 4 +-
12168 fs/proc/proc_net.c | 31 +
12169 fs/proc/proc_sysctl.c | 52 +-
12170 fs/proc/root.c | 8 +
12171 fs/proc/stat.c | 69 +-
12172 fs/proc/task_mmu.c | 66 +-
12173 fs/readdir.c | 19 +
12174 fs/reiserfs/item_ops.c | 24 +-
12175 fs/reiserfs/super.c | 4 +
12176 fs/select.c | 2 +
12177 fs/seq_file.c | 30 +-
12178 fs/splice.c | 8 +
12179 fs/stat.c | 20 +-
12180 fs/sysfs/dir.c | 30 +-
12181 fs/sysv/inode.c | 11 +-
12182 fs/utimes.c | 7 +
12183 fs/xattr.c | 26 +-
12184 grsecurity/Kconfig | 1182 ++++
12185 grsecurity/Makefile | 54 +
12186 grsecurity/gracl.c | 2757 +++++++++
12187 grsecurity/gracl_alloc.c | 105 +
12188 grsecurity/gracl_cap.c | 127 +
12189 grsecurity/gracl_compat.c | 269 +
12190 grsecurity/gracl_fs.c | 448 ++
12191 grsecurity/gracl_ip.c | 386 ++
12192 grsecurity/gracl_learn.c | 207 +
12193 grsecurity/gracl_policy.c | 1786 ++++++
12194 grsecurity/gracl_res.c | 68 +
12195 grsecurity/gracl_segv.c | 304 +
12196 grsecurity/gracl_shm.c | 40 +
12197 grsecurity/grsec_chdir.c | 19 +
12198 grsecurity/grsec_chroot.c | 467 ++
12199 grsecurity/grsec_disabled.c | 445 ++
12200 grsecurity/grsec_exec.c | 189 +
12201 grsecurity/grsec_fifo.c | 26 +
12202 grsecurity/grsec_fork.c | 23 +
12203 grsecurity/grsec_init.c | 290 +
12204 grsecurity/grsec_ipc.c | 48 +
12205 grsecurity/grsec_link.c | 65 +
12206 grsecurity/grsec_log.c | 340 +
12207 grsecurity/grsec_mem.c | 48 +
12208 grsecurity/grsec_mount.c | 65 +
12209 grsecurity/grsec_pax.c | 47 +
12210 grsecurity/grsec_proc.c | 20 +
12211 grsecurity/grsec_ptrace.c | 30 +
12212 grsecurity/grsec_sig.c | 236 +
12213 grsecurity/grsec_sock.c | 244 +
12214 grsecurity/grsec_sysctl.c | 488 ++
12215 grsecurity/grsec_time.c | 16 +
12216 grsecurity/grsec_tpe.c | 78 +
12217 grsecurity/grsec_usb.c | 15 +
12218 grsecurity/grsum.c | 64 +
12219 include/linux/binfmts.h | 5 +-
12220 include/linux/bitops.h | 2 +-
12221 include/linux/capability.h | 13 +
12222 include/linux/compiler-gcc.h | 5 +
12223 include/linux/compiler.h | 8 +
12224 include/linux/cred.h | 8 +-
12225 include/linux/dcache.h | 5 +-
12226 include/linux/fs.h | 24 +-
12227 include/linux/fs_struct.h | 2 +-
12228 include/linux/fsnotify.h | 6 +
12229 include/linux/gracl.h | 342 +
12230 include/linux/gracl_compat.h | 156 +
12231 include/linux/gralloc.h | 9 +
12232 include/linux/grdefs.h | 140 +
12233 include/linux/grinternal.h | 230 +
12234 include/linux/grmsg.h | 118 +
12235 include/linux/grsecurity.h | 255 +
12236 include/linux/grsock.h | 19 +
12237 include/linux/ipc.h | 2 +-
12238 include/linux/ipc_namespace.h | 2 +-
12239 include/linux/kallsyms.h | 18 +-
12240 include/linux/kmod.h | 5 +
12241 include/linux/kobject.h | 2 +-
12242 include/linux/lsm_hooks.h | 4 +-
12243 include/linux/mm.h | 12 +
12244 include/linux/mm_types.h | 4 +-
12245 include/linux/module.h | 5 +-
12246 include/linux/mount.h | 2 +-
12247 include/linux/msg.h | 2 +-
12248 include/linux/netfilter/xt_gradm.h | 9 +
12249 include/linux/path.h | 4 +-
12250 include/linux/perf_event.h | 13 +-
12251 include/linux/pid_namespace.h | 2 +-
12252 include/linux/printk.h | 2 +-
12253 include/linux/proc_fs.h | 22 +-
12254 include/linux/proc_ns.h | 2 +-
12255 include/linux/ptrace.h | 24 +-
12256 include/linux/random.h | 2 +-
12257 include/linux/rbtree_augmented.h | 4 +-
12258 include/linux/scatterlist.h | 12 +-
12259 include/linux/sched.h | 114 +-
12260 include/linux/security.h | 1 +
12261 include/linux/sem.h | 2 +-
12262 include/linux/seq_file.h | 5 +
12263 include/linux/shm.h | 6 +-
12264 include/linux/skbuff.h | 3 +
12265 include/linux/slab.h | 9 -
12266 include/linux/sysctl.h | 8 +-
12267 include/linux/thread_info.h | 6 +-
12268 include/linux/tty.h | 2 +-
12269 include/linux/tty_driver.h | 4 +-
12270 include/linux/uidgid.h | 5 +
12271 include/linux/user_namespace.h | 2 +-
12272 include/linux/utsname.h | 2 +-
12273 include/linux/vermagic.h | 16 +-
12274 include/linux/vmalloc.h | 20 +-
12275 include/net/af_unix.h | 2 +-
12276 include/net/dst.h | 33 +
12277 include/net/ip.h | 2 +-
12278 include/net/neighbour.h | 2 +-
12279 include/net/net_namespace.h | 2 +-
12280 include/net/sock.h | 4 +-
12281 include/target/target_core_base.h | 2 +-
12282 include/trace/events/fs.h | 53 +
12283 include/uapi/linux/personality.h | 1 +
12284 init/Kconfig | 4 +-
12285 init/main.c | 35 +-
12286 ipc/mqueue.c | 1 +
12287 ipc/msg.c | 3 +-
12288 ipc/sem.c | 3 +-
12289 ipc/shm.c | 26 +-
12290 ipc/util.c | 6 +
12291 kernel/auditsc.c | 2 +-
12292 kernel/bpf/syscall.c | 8 +-
12293 kernel/capability.c | 41 +-
12294 kernel/cgroup.c | 5 +-
12295 kernel/compat.c | 1 +
12296 kernel/configs.c | 11 +
12297 kernel/cred.c | 112 +-
12298 kernel/events/core.c | 16 +-
12299 kernel/exit.c | 10 +-
12300 kernel/fork.c | 86 +-
12301 kernel/futex.c | 6 +-
12302 kernel/futex_compat.c | 2 +-
12303 kernel/kallsyms.c | 9 +
12304 kernel/kcmp.c | 8 +-
12305 kernel/kexec_core.c | 2 +-
12306 kernel/kmod.c | 95 +-
12307 kernel/kprobes.c | 7 +-
12308 kernel/ksysfs.c | 2 +
12309 kernel/locking/lockdep_proc.c | 10 +-
12310 kernel/module.c | 108 +-
12311 kernel/panic.c | 4 +-
12312 kernel/pid.c | 23 +-
12313 kernel/power/Kconfig | 2 +
12314 kernel/printk/printk.c | 20 +-
12315 kernel/ptrace.c | 56 +-
12316 kernel/resource.c | 10 +
12317 kernel/sched/core.c | 11 +-
12318 kernel/signal.c | 37 +-
12319 kernel/sys.c | 64 +-
12320 kernel/sysctl.c | 172 +-
12321 kernel/taskstats.c | 6 +
12322 kernel/time/posix-timers.c | 8 +
12323 kernel/time/time.c | 5 +
12324 kernel/time/timekeeping.c | 3 +
12325 kernel/time/timer_list.c | 13 +-
12326 kernel/time/timer_stats.c | 10 +-
12327 kernel/trace/Kconfig | 2 +
12328 kernel/trace/trace_syscalls.c | 8 +
12329 kernel/user_namespace.c | 15 +
12330 lib/Kconfig.debug | 13 +-
12331 lib/Kconfig.kasan | 2 +-
12332 lib/is_single_threaded.c | 3 +
12333 lib/list_debug.c | 65 +-
12334 lib/nlattr.c | 2 +
12335 lib/rbtree.c | 4 +-
12336 lib/vsprintf.c | 39 +-
12337 localversion-grsec | 1 +
12338 mm/Kconfig | 8 +-
12339 mm/Kconfig.debug | 1 +
12340 mm/filemap.c | 1 +
12341 mm/kmemleak.c | 4 +-
12342 mm/memory.c | 2 +-
12343 mm/mempolicy.c | 12 +-
12344 mm/migrate.c | 3 +-
12345 mm/mlock.c | 6 +-
12346 mm/mmap.c | 93 +-
12347 mm/mprotect.c | 8 +
12348 mm/oom_kill.c | 28 +-
12349 mm/page_alloc.c | 2 +-
12350 mm/process_vm_access.c | 8 +-
12351 mm/shmem.c | 36 +-
12352 mm/slab.c | 14 +-
12353 mm/slab_common.c | 2 +-
12354 mm/slob.c | 12 +
12355 mm/slub.c | 33 +-
12356 mm/util.c | 3 +
12357 mm/vmalloc.c | 129 +-
12358 mm/vmstat.c | 29 +-
12359 net/appletalk/atalk_proc.c | 2 +-
12360 net/atm/lec.c | 6 +-
12361 net/atm/mpoa_caches.c | 42 +-
12362 net/bluetooth/sco.c | 3 +
12363 net/can/bcm.c | 2 +-
12364 net/can/proc.c | 2 +-
12365 net/core/dev_ioctl.c | 7 +-
12366 net/core/filter.c | 8 +-
12367 net/core/net-procfs.c | 17 +-
12368 net/core/pktgen.c | 2 +-
12369 net/core/sock.c | 3 +-
12370 net/core/sysctl_net_core.c | 2 +-
12371 net/decnet/dn_dev.c | 2 +-
12372 net/ipv4/devinet.c | 6 +-
12373 net/ipv4/inet_hashtables.c | 4 +
12374 net/ipv4/ip_input.c | 7 +
12375 net/ipv4/ip_sockglue.c | 3 +-
12376 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
12377 net/ipv4/netfilter/nf_nat_pptp.c | 2 +-
12378 net/ipv4/route.c | 6 +-
12379 net/ipv4/tcp_input.c | 4 +-
12380 net/ipv4/tcp_ipv4.c | 29 +-
12381 net/ipv4/tcp_minisocks.c | 9 +-
12382 net/ipv4/tcp_timer.c | 11 +
12383 net/ipv4/udp.c | 24 +
12384 net/ipv6/addrconf.c | 13 +-
12385 net/ipv6/proc.c | 2 +-
12386 net/ipv6/tcp_ipv6.c | 26 +-
12387 net/ipv6/udp.c | 7 +
12388 net/ipx/ipx_proc.c | 2 +-
12389 net/irda/irproc.c | 2 +-
12390 net/llc/llc_proc.c | 2 +-
12391 net/netfilter/Kconfig | 10 +
12392 net/netfilter/Makefile | 1 +
12393 net/netfilter/nf_conntrack_core.c | 8 +
12394 net/netfilter/xt_gradm.c | 51 +
12395 net/netfilter/xt_hashlimit.c | 4 +-
12396 net/netfilter/xt_recent.c | 2 +-
12397 net/sched/sch_api.c | 2 +-
12398 net/sctp/socket.c | 4 +-
12399 net/socket.c | 75 +-
12400 net/sunrpc/Kconfig | 1 +
12401 net/sunrpc/cache.c | 2 +-
12402 net/sunrpc/stats.c | 2 +-
12403 net/sysctl_net.c | 2 +-
12404 net/unix/af_unix.c | 52 +-
12405 net/vmw_vsock/vmci_transport_notify.c | 30 +-
12406 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
12407 net/x25/sysctl_net_x25.c | 2 +-
12408 net/x25/x25_proc.c | 2 +-
12409 scripts/package/Makefile | 2 +-
12410 scripts/package/mkspec | 41 +-
12411 security/Kconfig | 369 +-
12412 security/apparmor/file.c | 4 +-
12413 security/apparmor/lsm.c | 8 +-
12414 security/commoncap.c | 36 +-
12415 security/min_addr.c | 2 +
12416 security/smack/smack_lsm.c | 8 +-
12417 security/tomoyo/file.c | 12 +-
12418 security/tomoyo/mount.c | 4 +
12419 security/tomoyo/tomoyo.c | 20 +-
12420 security/yama/Kconfig | 2 +-
12421 security/yama/yama_lsm.c | 4 +-
12422 sound/synth/emux/emux_seq.c | 14 +-
12423 sound/usb/line6/driver.c | 40 +-
12424 sound/usb/line6/toneport.c | 12 +-
12425 tools/gcc/.gitignore | 1 +
12426 tools/gcc/Makefile | 12 +
12427 tools/gcc/gen-random-seed.sh | 8 +
12428 tools/gcc/randomize_layout_plugin.c | 930 +++
12429 tools/gcc/size_overflow_plugin/.gitignore | 1 +
12430 .../size_overflow_plugin/size_overflow_hash.data | 459 ++-
12431 511 files changed, 32631 insertions(+), 3196 deletions(-)
12432
12433 commit a76adb92ce39aee8eec5a025c828030ad6135c6d
12434 Author: Brad Spengler <spender@grsecurity.net>
12435 Date: Tue Dec 15 14:31:49 2015 -0500
12436
12437 Update to pax-linux-4.3.3-test11.patch:
12438 - fixed a few compile regressions with the recent plugin changes, reported by spender
12439 - updated the size overflow hash table
12440
12441 tools/gcc/latent_entropy_plugin.c | 2 +-
12442 .../size_overflow_plugin/size_overflow_hash.data | 66 +++++++++++++++++---
12443 tools/gcc/stackleak_plugin.c | 2 +-
12444 tools/gcc/structleak_plugin.c | 6 +--
12445 4 files changed, 60 insertions(+), 16 deletions(-)
12446
12447 commit f7284b1fc06628fcb2d35d2beecdea5454d46af9
12448 Author: Brad Spengler <spender@grsecurity.net>
12449 Date: Tue Dec 15 11:50:24 2015 -0500
12450
12451 Apply structleak ICE fix for gcc < 4.9
12452
12453 tools/gcc/structleak_plugin.c | 4 ++++
12454 1 files changed, 4 insertions(+), 0 deletions(-)
12455
12456 commit 92fe3eb9fd10ec7f7334decab1526989669b0287
12457 Author: Brad Spengler <spender@grsecurity.net>
12458 Date: Tue Dec 15 07:57:06 2015 -0500
12459
12460 Update to pax-linux-4.3.1-test10.patch:
12461 - Emese fixed INDIRECT_REF and TARGET_MEM_REF handling in the initify plugin
12462 - Emese regenerated the size overflow hash tables for 4.3
12463 - fixed some compat syscall exit paths to restore r12 under KERNEXEC/or
12464 - the latent entropy, stackleak and structleak plugins no longer split the entry block unnecessarily
12465
12466 arch/x86/entry/entry_64.S | 2 +-
12467 arch/x86/entry/entry_64_compat.S | 15 +-
12468 scripts/package/builddeb | 2 +-
12469 tools/gcc/initify_plugin.c | 11 +-
12470 tools/gcc/latent_entropy_plugin.c | 20 +-
12471 .../disable_size_overflow_hash.data | 4 +
12472 .../size_overflow_plugin/size_overflow_hash.data | 5345 +++++++++++---------
12473 tools/gcc/stackleak_plugin.c | 26 +-
12474 tools/gcc/structleak_plugin.c | 21 +-
12475 9 files changed, 3079 insertions(+), 2367 deletions(-)
12476
12477 commit 5bd245cb687319079c2f1c0d6a1170791ed1ed2c
12478 Merge: b5847e6 3548341
12479 Author: Brad Spengler <spender@grsecurity.net>
12480 Date: Tue Dec 15 07:47:56 2015 -0500
12481
12482 Merge branch 'linux-4.3.y' into pax-4_3
12483
12484 Conflicts:
12485 net/unix/af_unix.c
12486
12487 commit b5847e6a896c5d99191135ca4d7c3b6be8f116ff
12488 Author: Brad Spengler <spender@grsecurity.net>
12489 Date: Wed Dec 9 23:11:36 2015 -0500
12490
12491 Update to pax-linux-4.3.1-test9.patch:
12492 - fixed __get_user on x86 to lie less about the size of the load, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4332)
12493 - Emese fixed an intentional overflow caused by gcc, reported by saironiq (https://forums.grsecurity.net/viewtopic.php?f=3&t=4333)
12494 - Emese fixed a false positive overflow report in the forcedeth driver, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?t=4334)
12495 - Emese fixed a false positive overflow report in KVM's emulator, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4336)
12496 - Emese fixed the initify plugin to detect some captured use of __func__, reported by Rasmus Villemoes <linux@rasmusvillemoes.dk>
12497 - constrained shmmax and shmall to avoid triggering size overflow checks, reported by Mathias Krause <minipli@ld-linux.so>
12498 - the checker plugin can partially handle sparse's locking context annotations, it's context insensitive and thus not exactly useful for now, also see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59856
12499
12500 Makefile | 6 +
12501 arch/x86/include/asm/compat.h | 4 +
12502 arch/x86/include/asm/dma.h | 2 +
12503 arch/x86/include/asm/pmem.h | 2 +-
12504 arch/x86/include/asm/uaccess.h | 20 +-
12505 arch/x86/kernel/apic/vector.c | 6 +-
12506 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
12507 arch/x86/kernel/cpu/perf_event_intel.c | 28 +-
12508 arch/x86/kernel/head_64.S | 1 -
12509 arch/x86/kvm/i8259.c | 10 +-
12510 arch/x86/kvm/ioapic.c | 2 +
12511 arch/x86/kvm/x86.c | 2 +
12512 arch/x86/lib/usercopy_64.c | 2 +-
12513 arch/x86/mm/mpx.c | 4 +-
12514 arch/x86/mm/pageattr.c | 7 +
12515 drivers/base/devres.c | 4 +-
12516 drivers/base/power/runtime.c | 6 +-
12517 drivers/base/regmap/regmap.c | 4 +-
12518 drivers/block/drbd/drbd_receiver.c | 4 +-
12519 drivers/block/drbd/drbd_worker.c | 6 +-
12520 drivers/char/virtio_console.c | 6 +-
12521 drivers/md/dm.c | 12 +-
12522 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
12523 drivers/net/macvtap.c | 4 +-
12524 drivers/video/fbdev/core/fbmem.c | 10 +-
12525 fs/compat.c | 3 +-
12526 fs/coredump.c | 2 +-
12527 fs/dcache.c | 13 +-
12528 fs/fhandle.c | 2 +-
12529 fs/file.c | 14 +-
12530 fs/fs-writeback.c | 11 +-
12531 fs/overlayfs/copy_up.c | 2 +-
12532 fs/readdir.c | 3 +-
12533 fs/super.c | 3 +-
12534 include/linux/compiler.h | 36 ++-
12535 include/linux/rcupdate.h | 8 +
12536 include/linux/sched.h | 4 +-
12537 include/linux/seqlock.h | 10 +
12538 include/linux/spinlock.h | 17 +-
12539 include/linux/srcu.h | 5 +-
12540 include/linux/syscalls.h | 2 +-
12541 include/linux/writeback.h | 3 +-
12542 include/uapi/linux/swab.h | 6 +-
12543 ipc/ipc_sysctl.c | 6 +
12544 kernel/exit.c | 25 +-
12545 kernel/resource.c | 4 +-
12546 kernel/signal.c | 12 +-
12547 kernel/user.c | 2 +-
12548 kernel/workqueue.c | 6 +-
12549 lib/rhashtable.c | 4 +-
12550 net/compat.c | 2 +-
12551 net/ipv4/xfrm4_mode_transport.c | 2 +-
12552 security/keys/internal.h | 8 +-
12553 security/keys/keyring.c | 4 -
12554 sound/core/seq/seq_clientmgr.c | 8 +-
12555 sound/core/seq/seq_compat.c | 2 +-
12556 sound/core/seq/seq_memory.c | 6 +-
12557 tools/gcc/checker_plugin.c | 415 +++++++++++++++++++-
12558 tools/gcc/gcc-common.h | 1 +
12559 tools/gcc/initify_plugin.c | 33 ++-
12560 .../disable_size_overflow_hash.data | 1 +
12561 .../size_overflow_plugin/size_overflow_hash.data | 1 -
12562 62 files changed, 708 insertions(+), 140 deletions(-)
12563
12564 commit f2634c2f6995f4231616f24ed016f890c701f939
12565 Merge: 1241bff 5f8b236
12566 Author: Brad Spengler <spender@grsecurity.net>
12567 Date: Wed Dec 9 21:50:47 2015 -0500
12568
12569 Merge branch 'linux-4.3.y' into pax-4_3
12570
12571 Conflicts:
12572 arch/x86/kernel/fpu/xstate.c
12573 arch/x86/kernel/head_64.S
12574
12575 commit 1241bff82e3d7dadb05de0a60b8d2822afc6547c
12576 Author: Brad Spengler <spender@grsecurity.net>
12577 Date: Sun Dec 6 08:44:56 2015 -0500
12578
12579 Update to pax-linux-4.3-test8.patch:
12580 - fixed integer truncation check in md introduced by upstream commits 284ae7cab0f7335c9e0aa8992b28415ef1a54c7c and 58c0fed400603a802968b23ddf78f029c5a84e41, reported by BeiKed9o (https://forums.grsecurity.net/viewtopic.php?f=3&t=4328)
12581 - gcc plugin compilation problems will now also produce the output of the checking script to make diagnosis easier, reported by hunger
12582 - Emese fixed a false positive size overflow report in __vhost_add_used_n, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4329)
12583 - fixed a potential integer truncation error in the raid1 code caught by the size overflow plugin, reported by d1b (https://forums.grsecurity.net/viewtopic.php?f=3&t=4331)
12584
12585 Makefile | 5 +++
12586 drivers/md/md.c | 5 ++-
12587 drivers/md/raid1.c | 2 +-
12588 fs/proc/task_mmu.c | 3 ++
12589 .../disable_size_overflow_hash.data | 4 ++-
12590 .../size_overflow_plugin/intentional_overflow.c | 32 ++++++++++++++++---
12591 .../size_overflow_plugin/size_overflow_hash.data | 2 -
12592 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
12593 8 files changed, 43 insertions(+), 12 deletions(-)
12594
12595 commit cce6a9f9bdd27096632ca1c0246dcc07f2eb1a18
12596 Author: Brad Spengler <spender@grsecurity.net>
12597 Date: Fri Dec 4 14:24:12 2015 -0500
12598
12599 Initial import of pax-linux-4.3-test7.patch
12600
12601 Documentation/dontdiff | 47 +-
12602 Documentation/kbuild/makefiles.txt | 39 +-
12603 Documentation/kernel-parameters.txt | 28 +
12604 Makefile | 108 +-
12605 arch/alpha/include/asm/atomic.h | 10 +
12606 arch/alpha/include/asm/elf.h | 7 +
12607 arch/alpha/include/asm/pgalloc.h | 6 +
12608 arch/alpha/include/asm/pgtable.h | 11 +
12609 arch/alpha/kernel/module.c | 2 +-
12610 arch/alpha/kernel/osf_sys.c | 8 +-
12611 arch/alpha/mm/fault.c | 141 +-
12612 arch/arm/Kconfig | 2 +-
12613 arch/arm/include/asm/atomic.h | 320 +-
12614 arch/arm/include/asm/cache.h | 5 +-
12615 arch/arm/include/asm/cacheflush.h | 2 +-
12616 arch/arm/include/asm/checksum.h | 14 +-
12617 arch/arm/include/asm/cmpxchg.h | 4 +
12618 arch/arm/include/asm/cpuidle.h | 2 +-
12619 arch/arm/include/asm/domain.h | 22 +-
12620 arch/arm/include/asm/elf.h | 9 +-
12621 arch/arm/include/asm/fncpy.h | 2 +
12622 arch/arm/include/asm/futex.h | 10 +
12623 arch/arm/include/asm/kmap_types.h | 2 +-
12624 arch/arm/include/asm/mach/dma.h | 2 +-
12625 arch/arm/include/asm/mach/map.h | 16 +-
12626 arch/arm/include/asm/outercache.h | 2 +-
12627 arch/arm/include/asm/page.h | 3 +-
12628 arch/arm/include/asm/pgalloc.h | 20 +
12629 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
12630 arch/arm/include/asm/pgtable-2level.h | 3 +
12631 arch/arm/include/asm/pgtable-3level.h | 3 +
12632 arch/arm/include/asm/pgtable.h | 54 +-
12633 arch/arm/include/asm/smp.h | 2 +-
12634 arch/arm/include/asm/tls.h | 3 +
12635 arch/arm/include/asm/uaccess.h | 79 +-
12636 arch/arm/include/uapi/asm/ptrace.h | 2 +-
12637 arch/arm/kernel/armksyms.c | 2 +-
12638 arch/arm/kernel/cpuidle.c | 2 +-
12639 arch/arm/kernel/entry-armv.S | 109 +-
12640 arch/arm/kernel/entry-common.S | 40 +-
12641 arch/arm/kernel/entry-header.S | 55 +
12642 arch/arm/kernel/fiq.c | 3 +
12643 arch/arm/kernel/module-plts.c | 7 +-
12644 arch/arm/kernel/module.c | 38 +-
12645 arch/arm/kernel/patch.c | 2 +
12646 arch/arm/kernel/process.c | 90 +-
12647 arch/arm/kernel/reboot.c | 1 +
12648 arch/arm/kernel/setup.c | 20 +-
12649 arch/arm/kernel/signal.c | 35 +-
12650 arch/arm/kernel/smp.c | 2 +-
12651 arch/arm/kernel/tcm.c | 4 +-
12652 arch/arm/kernel/vmlinux.lds.S | 6 +-
12653 arch/arm/kvm/arm.c | 8 +-
12654 arch/arm/lib/copy_page.S | 1 +
12655 arch/arm/lib/csumpartialcopyuser.S | 4 +-
12656 arch/arm/lib/delay.c | 2 +-
12657 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
12658 arch/arm/mach-exynos/suspend.c | 6 +-
12659 arch/arm/mach-mvebu/coherency.c | 4 +-
12660 arch/arm/mach-omap2/board-n8x0.c | 2 +-
12661 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
12662 arch/arm/mach-omap2/omap-smp.c | 1 +
12663 arch/arm/mach-omap2/omap-wakeupgen.c | 2 +-
12664 arch/arm/mach-omap2/omap_device.c | 4 +-
12665 arch/arm/mach-omap2/omap_device.h | 4 +-
12666 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
12667 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
12668 arch/arm/mach-omap2/wd_timer.c | 6 +-
12669 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
12670 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
12671 arch/arm/mach-tegra/irq.c | 1 +
12672 arch/arm/mach-ux500/pm.c | 1 +
12673 arch/arm/mach-zynq/platsmp.c | 1 +
12674 arch/arm/mm/Kconfig | 6 +-
12675 arch/arm/mm/alignment.c | 8 +
12676 arch/arm/mm/cache-l2x0.c | 2 +-
12677 arch/arm/mm/context.c | 10 +-
12678 arch/arm/mm/fault.c | 146 +
12679 arch/arm/mm/fault.h | 12 +
12680 arch/arm/mm/init.c | 39 +
12681 arch/arm/mm/ioremap.c | 4 +-
12682 arch/arm/mm/mmap.c | 30 +-
12683 arch/arm/mm/mmu.c | 162 +-
12684 arch/arm/net/bpf_jit_32.c | 3 +
12685 arch/arm/plat-iop/setup.c | 2 +-
12686 arch/arm/plat-omap/sram.c | 2 +
12687 arch/arm64/include/asm/atomic.h | 10 +
12688 arch/arm64/include/asm/percpu.h | 8 +-
12689 arch/arm64/include/asm/pgalloc.h | 5 +
12690 arch/arm64/include/asm/uaccess.h | 1 +
12691 arch/arm64/mm/dma-mapping.c | 2 +-
12692 arch/avr32/include/asm/elf.h | 8 +-
12693 arch/avr32/include/asm/kmap_types.h | 4 +-
12694 arch/avr32/mm/fault.c | 27 +
12695 arch/frv/include/asm/atomic.h | 10 +
12696 arch/frv/include/asm/kmap_types.h | 2 +-
12697 arch/frv/mm/elf-fdpic.c | 3 +-
12698 arch/ia64/Makefile | 1 +
12699 arch/ia64/include/asm/atomic.h | 10 +
12700 arch/ia64/include/asm/elf.h | 7 +
12701 arch/ia64/include/asm/pgalloc.h | 12 +
12702 arch/ia64/include/asm/pgtable.h | 13 +-
12703 arch/ia64/include/asm/spinlock.h | 2 +-
12704 arch/ia64/include/asm/uaccess.h | 27 +-
12705 arch/ia64/kernel/module.c | 45 +-
12706 arch/ia64/kernel/palinfo.c | 2 +-
12707 arch/ia64/kernel/sys_ia64.c | 7 +
12708 arch/ia64/kernel/vmlinux.lds.S | 2 +-
12709 arch/ia64/mm/fault.c | 32 +-
12710 arch/ia64/mm/init.c | 15 +-
12711 arch/m32r/lib/usercopy.c | 6 +
12712 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
12713 arch/mips/include/asm/atomic.h | 368 +-
12714 arch/mips/include/asm/elf.h | 7 +
12715 arch/mips/include/asm/exec.h | 2 +-
12716 arch/mips/include/asm/hw_irq.h | 2 +-
12717 arch/mips/include/asm/local.h | 57 +
12718 arch/mips/include/asm/page.h | 2 +-
12719 arch/mips/include/asm/pgalloc.h | 5 +
12720 arch/mips/include/asm/pgtable.h | 3 +
12721 arch/mips/include/asm/uaccess.h | 1 +
12722 arch/mips/kernel/binfmt_elfn32.c | 7 +
12723 arch/mips/kernel/binfmt_elfo32.c | 7 +
12724 arch/mips/kernel/irq-gt641xx.c | 2 +-
12725 arch/mips/kernel/irq.c | 6 +-
12726 arch/mips/kernel/pm-cps.c | 2 +-
12727 arch/mips/kernel/process.c | 12 -
12728 arch/mips/kernel/sync-r4k.c | 24 +-
12729 arch/mips/kernel/traps.c | 13 +-
12730 arch/mips/mm/fault.c | 25 +
12731 arch/mips/mm/mmap.c | 51 +-
12732 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
12733 arch/mips/sni/rm200.c | 2 +-
12734 arch/mips/vr41xx/common/icu.c | 2 +-
12735 arch/mips/vr41xx/common/irq.c | 4 +-
12736 arch/parisc/include/asm/atomic.h | 10 +
12737 arch/parisc/include/asm/elf.h | 7 +
12738 arch/parisc/include/asm/pgalloc.h | 6 +
12739 arch/parisc/include/asm/pgtable.h | 11 +
12740 arch/parisc/include/asm/uaccess.h | 4 +-
12741 arch/parisc/kernel/module.c | 50 +-
12742 arch/parisc/kernel/sys_parisc.c | 15 +
12743 arch/parisc/kernel/traps.c | 4 +-
12744 arch/parisc/mm/fault.c | 140 +-
12745 arch/powerpc/include/asm/atomic.h | 329 +-
12746 arch/powerpc/include/asm/elf.h | 12 +
12747 arch/powerpc/include/asm/exec.h | 2 +-
12748 arch/powerpc/include/asm/kmap_types.h | 2 +-
12749 arch/powerpc/include/asm/local.h | 46 +
12750 arch/powerpc/include/asm/mman.h | 2 +-
12751 arch/powerpc/include/asm/page.h | 8 +-
12752 arch/powerpc/include/asm/page_64.h | 7 +-
12753 arch/powerpc/include/asm/pgalloc-64.h | 7 +
12754 arch/powerpc/include/asm/pgtable.h | 1 +
12755 arch/powerpc/include/asm/pte-hash32.h | 1 +
12756 arch/powerpc/include/asm/reg.h | 1 +
12757 arch/powerpc/include/asm/smp.h | 2 +-
12758 arch/powerpc/include/asm/spinlock.h | 42 +-
12759 arch/powerpc/include/asm/uaccess.h | 141 +-
12760 arch/powerpc/kernel/Makefile | 5 +
12761 arch/powerpc/kernel/exceptions-64e.S | 4 +-
12762 arch/powerpc/kernel/exceptions-64s.S | 2 +-
12763 arch/powerpc/kernel/module_32.c | 15 +-
12764 arch/powerpc/kernel/process.c | 46 -
12765 arch/powerpc/kernel/signal_32.c | 2 +-
12766 arch/powerpc/kernel/signal_64.c | 2 +-
12767 arch/powerpc/kernel/traps.c | 21 +
12768 arch/powerpc/kernel/vdso.c | 5 +-
12769 arch/powerpc/lib/usercopy_64.c | 18 -
12770 arch/powerpc/mm/fault.c | 56 +-
12771 arch/powerpc/mm/mmap.c | 16 +
12772 arch/powerpc/mm/slice.c | 13 +-
12773 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
12774 arch/s390/include/asm/atomic.h | 10 +
12775 arch/s390/include/asm/elf.h | 7 +
12776 arch/s390/include/asm/exec.h | 2 +-
12777 arch/s390/include/asm/uaccess.h | 13 +-
12778 arch/s390/kernel/module.c | 22 +-
12779 arch/s390/kernel/process.c | 24 -
12780 arch/s390/mm/mmap.c | 16 +
12781 arch/score/include/asm/exec.h | 2 +-
12782 arch/score/kernel/process.c | 5 -
12783 arch/sh/mm/mmap.c | 22 +-
12784 arch/sparc/include/asm/atomic_64.h | 110 +-
12785 arch/sparc/include/asm/cache.h | 2 +-
12786 arch/sparc/include/asm/elf_32.h | 7 +
12787 arch/sparc/include/asm/elf_64.h | 7 +
12788 arch/sparc/include/asm/pgalloc_32.h | 1 +
12789 arch/sparc/include/asm/pgalloc_64.h | 1 +
12790 arch/sparc/include/asm/pgtable.h | 4 +
12791 arch/sparc/include/asm/pgtable_32.h | 15 +-
12792 arch/sparc/include/asm/pgtsrmmu.h | 5 +
12793 arch/sparc/include/asm/setup.h | 4 +-
12794 arch/sparc/include/asm/spinlock_64.h | 35 +-
12795 arch/sparc/include/asm/thread_info_32.h | 1 +
12796 arch/sparc/include/asm/thread_info_64.h | 2 +
12797 arch/sparc/include/asm/uaccess.h | 1 +
12798 arch/sparc/include/asm/uaccess_32.h | 28 +-
12799 arch/sparc/include/asm/uaccess_64.h | 24 +-
12800 arch/sparc/kernel/Makefile | 2 +-
12801 arch/sparc/kernel/prom_common.c | 2 +-
12802 arch/sparc/kernel/smp_64.c | 8 +-
12803 arch/sparc/kernel/sys_sparc_32.c | 2 +-
12804 arch/sparc/kernel/sys_sparc_64.c | 52 +-
12805 arch/sparc/kernel/traps_64.c | 27 +-
12806 arch/sparc/lib/Makefile | 2 +-
12807 arch/sparc/lib/atomic_64.S | 57 +-
12808 arch/sparc/lib/ksyms.c | 6 +-
12809 arch/sparc/mm/Makefile | 2 +-
12810 arch/sparc/mm/fault_32.c | 292 +
12811 arch/sparc/mm/fault_64.c | 486 +
12812 arch/sparc/mm/hugetlbpage.c | 22 +-
12813 arch/sparc/mm/init_64.c | 10 +-
12814 arch/tile/include/asm/atomic_64.h | 10 +
12815 arch/tile/include/asm/uaccess.h | 4 +-
12816 arch/um/Makefile | 4 +
12817 arch/um/include/asm/kmap_types.h | 2 +-
12818 arch/um/include/asm/page.h | 3 +
12819 arch/um/include/asm/pgtable-3level.h | 1 +
12820 arch/um/kernel/process.c | 16 -
12821 arch/x86/Kconfig | 15 +-
12822 arch/x86/Kconfig.cpu | 6 +-
12823 arch/x86/Kconfig.debug | 4 +-
12824 arch/x86/Makefile | 13 +-
12825 arch/x86/boot/Makefile | 3 +
12826 arch/x86/boot/bitops.h | 4 +-
12827 arch/x86/boot/boot.h | 2 +-
12828 arch/x86/boot/compressed/Makefile | 3 +
12829 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
12830 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
12831 arch/x86/boot/compressed/head_32.S | 4 +-
12832 arch/x86/boot/compressed/head_64.S | 12 +-
12833 arch/x86/boot/compressed/misc.c | 11 +-
12834 arch/x86/boot/cpucheck.c | 16 +-
12835 arch/x86/boot/header.S | 6 +-
12836 arch/x86/boot/memory.c | 2 +-
12837 arch/x86/boot/video-vesa.c | 1 +
12838 arch/x86/boot/video.c | 2 +-
12839 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
12840 arch/x86/crypto/aesni-intel_asm.S | 106 +-
12841 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
12842 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
12843 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
12844 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
12845 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
12846 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
12847 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +-
12848 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
12849 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
12850 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
12851 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
12852 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
12853 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
12854 arch/x86/crypto/sha256-avx-asm.S | 2 +
12855 arch/x86/crypto/sha256-avx2-asm.S | 2 +
12856 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
12857 arch/x86/crypto/sha512-avx-asm.S | 2 +
12858 arch/x86/crypto/sha512-avx2-asm.S | 2 +
12859 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
12860 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
12861 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
12862 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
12863 arch/x86/entry/calling.h | 86 +-
12864 arch/x86/entry/common.c | 13 +-
12865 arch/x86/entry/entry_32.S | 351 +-
12866 arch/x86/entry/entry_64.S | 619 +-
12867 arch/x86/entry/entry_64_compat.S | 159 +-
12868 arch/x86/entry/thunk_64.S | 2 +
12869 arch/x86/entry/vdso/Makefile | 2 +-
12870 arch/x86/entry/vdso/vdso2c.h | 8 +-
12871 arch/x86/entry/vdso/vma.c | 41 +-
12872 arch/x86/entry/vsyscall/vsyscall_64.c | 16 +-
12873 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
12874 arch/x86/ia32/ia32_signal.c | 23 +-
12875 arch/x86/ia32/sys_ia32.c | 42 +-
12876 arch/x86/include/asm/alternative-asm.h | 43 +-
12877 arch/x86/include/asm/alternative.h | 4 +-
12878 arch/x86/include/asm/apic.h | 2 +-
12879 arch/x86/include/asm/apm.h | 4 +-
12880 arch/x86/include/asm/atomic.h | 230 +-
12881 arch/x86/include/asm/atomic64_32.h | 100 +
12882 arch/x86/include/asm/atomic64_64.h | 164 +-
12883 arch/x86/include/asm/bitops.h | 18 +-
12884 arch/x86/include/asm/boot.h | 2 +-
12885 arch/x86/include/asm/cache.h | 5 +-
12886 arch/x86/include/asm/checksum_32.h | 12 +-
12887 arch/x86/include/asm/cmpxchg.h | 39 +
12888 arch/x86/include/asm/compat.h | 2 +-
12889 arch/x86/include/asm/cpufeature.h | 17 +-
12890 arch/x86/include/asm/desc.h | 78 +-
12891 arch/x86/include/asm/desc_defs.h | 6 +
12892 arch/x86/include/asm/div64.h | 2 +-
12893 arch/x86/include/asm/elf.h | 33 +-
12894 arch/x86/include/asm/emergency-restart.h | 2 +-
12895 arch/x86/include/asm/fpu/internal.h | 42 +-
12896 arch/x86/include/asm/fpu/types.h | 6 +-
12897 arch/x86/include/asm/futex.h | 14 +-
12898 arch/x86/include/asm/hw_irq.h | 4 +-
12899 arch/x86/include/asm/i8259.h | 2 +-
12900 arch/x86/include/asm/io.h | 22 +-
12901 arch/x86/include/asm/irqflags.h | 5 +
12902 arch/x86/include/asm/kprobes.h | 9 +-
12903 arch/x86/include/asm/local.h | 106 +-
12904 arch/x86/include/asm/mman.h | 15 +
12905 arch/x86/include/asm/mmu.h | 14 +-
12906 arch/x86/include/asm/mmu_context.h | 114 +-
12907 arch/x86/include/asm/module.h | 17 +-
12908 arch/x86/include/asm/nmi.h | 19 +-
12909 arch/x86/include/asm/page.h | 1 +
12910 arch/x86/include/asm/page_32.h | 12 +-
12911 arch/x86/include/asm/page_64.h | 14 +-
12912 arch/x86/include/asm/paravirt.h | 46 +-
12913 arch/x86/include/asm/paravirt_types.h | 15 +-
12914 arch/x86/include/asm/pgalloc.h | 23 +
12915 arch/x86/include/asm/pgtable-2level.h | 2 +
12916 arch/x86/include/asm/pgtable-3level.h | 7 +
12917 arch/x86/include/asm/pgtable.h | 128 +-
12918 arch/x86/include/asm/pgtable_32.h | 14 +-
12919 arch/x86/include/asm/pgtable_32_types.h | 24 +-
12920 arch/x86/include/asm/pgtable_64.h | 23 +-
12921 arch/x86/include/asm/pgtable_64_types.h | 5 +
12922 arch/x86/include/asm/pgtable_types.h | 26 +-
12923 arch/x86/include/asm/preempt.h | 2 +-
12924 arch/x86/include/asm/processor.h | 57 +-
12925 arch/x86/include/asm/ptrace.h | 13 +-
12926 arch/x86/include/asm/realmode.h | 4 +-
12927 arch/x86/include/asm/reboot.h | 10 +-
12928 arch/x86/include/asm/rmwcc.h | 84 +-
12929 arch/x86/include/asm/rwsem.h | 60 +-
12930 arch/x86/include/asm/segment.h | 27 +-
12931 arch/x86/include/asm/smap.h | 43 +
12932 arch/x86/include/asm/smp.h | 14 +-
12933 arch/x86/include/asm/stackprotector.h | 4 +-
12934 arch/x86/include/asm/stacktrace.h | 32 +-
12935 arch/x86/include/asm/switch_to.h | 4 +-
12936 arch/x86/include/asm/sys_ia32.h | 6 +-
12937 arch/x86/include/asm/thread_info.h | 27 +-
12938 arch/x86/include/asm/tlbflush.h | 77 +-
12939 arch/x86/include/asm/uaccess.h | 192 +-
12940 arch/x86/include/asm/uaccess_32.h | 28 +-
12941 arch/x86/include/asm/uaccess_64.h | 169 +-
12942 arch/x86/include/asm/word-at-a-time.h | 2 +-
12943 arch/x86/include/asm/x86_init.h | 10 +-
12944 arch/x86/include/asm/xen/page.h | 2 +-
12945 arch/x86/include/uapi/asm/e820.h | 2 +-
12946 arch/x86/kernel/Makefile | 2 +-
12947 arch/x86/kernel/acpi/boot.c | 4 +-
12948 arch/x86/kernel/acpi/sleep.c | 4 +
12949 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
12950 arch/x86/kernel/alternative.c | 124 +-
12951 arch/x86/kernel/apic/apic.c | 4 +-
12952 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
12953 arch/x86/kernel/apic/apic_noop.c | 2 +-
12954 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
12955 arch/x86/kernel/apic/io_apic.c | 8 +-
12956 arch/x86/kernel/apic/msi.c | 2 +-
12957 arch/x86/kernel/apic/probe_32.c | 4 +-
12958 arch/x86/kernel/apic/vector.c | 4 +-
12959 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
12960 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
12961 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
12962 arch/x86/kernel/apm_32.c | 21 +-
12963 arch/x86/kernel/asm-offsets.c | 20 +
12964 arch/x86/kernel/asm-offsets_64.c | 1 +
12965 arch/x86/kernel/cpu/Makefile | 4 -
12966 arch/x86/kernel/cpu/amd.c | 2 +-
12967 arch/x86/kernel/cpu/bugs_64.c | 2 +
12968 arch/x86/kernel/cpu/common.c | 202 +-
12969 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
12970 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
12971 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
12972 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
12973 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
12974 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
12975 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
12976 arch/x86/kernel/cpu/perf_event.c | 10 +-
12977 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
12978 arch/x86/kernel/cpu/perf_event_intel.c | 6 +-
12979 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
12980 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
12981 arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +-
12982 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
12983 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
12984 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
12985 arch/x86/kernel/crash_dump_64.c | 2 +-
12986 arch/x86/kernel/doublefault.c | 8 +-
12987 arch/x86/kernel/dumpstack.c | 24 +-
12988 arch/x86/kernel/dumpstack_32.c | 25 +-
12989 arch/x86/kernel/dumpstack_64.c | 62 +-
12990 arch/x86/kernel/e820.c | 4 +-
12991 arch/x86/kernel/early_printk.c | 1 +
12992 arch/x86/kernel/espfix_64.c | 44 +-
12993 arch/x86/kernel/fpu/core.c | 24 +-
12994 arch/x86/kernel/fpu/init.c | 40 +-
12995 arch/x86/kernel/fpu/regset.c | 22 +-
12996 arch/x86/kernel/fpu/signal.c | 20 +-
12997 arch/x86/kernel/fpu/xstate.c | 8 +-
12998 arch/x86/kernel/ftrace.c | 18 +-
12999 arch/x86/kernel/head64.c | 14 +-
13000 arch/x86/kernel/head_32.S | 235 +-
13001 arch/x86/kernel/head_64.S | 173 +-
13002 arch/x86/kernel/i386_ksyms_32.c | 12 +
13003 arch/x86/kernel/i8259.c | 10 +-
13004 arch/x86/kernel/io_delay.c | 2 +-
13005 arch/x86/kernel/ioport.c | 2 +-
13006 arch/x86/kernel/irq.c | 8 +-
13007 arch/x86/kernel/irq_32.c | 45 +-
13008 arch/x86/kernel/jump_label.c | 10 +-
13009 arch/x86/kernel/kgdb.c | 21 +-
13010 arch/x86/kernel/kprobes/core.c | 28 +-
13011 arch/x86/kernel/kprobes/opt.c | 16 +-
13012 arch/x86/kernel/ksysfs.c | 2 +-
13013 arch/x86/kernel/kvmclock.c | 20 +-
13014 arch/x86/kernel/ldt.c | 25 +
13015 arch/x86/kernel/livepatch.c | 12 +-
13016 arch/x86/kernel/machine_kexec_32.c | 6 +-
13017 arch/x86/kernel/mcount_64.S | 19 +-
13018 arch/x86/kernel/module.c | 78 +-
13019 arch/x86/kernel/msr.c | 2 +-
13020 arch/x86/kernel/nmi.c | 34 +-
13021 arch/x86/kernel/nmi_selftest.c | 4 +-
13022 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
13023 arch/x86/kernel/paravirt.c | 45 +-
13024 arch/x86/kernel/paravirt_patch_64.c | 8 +
13025 arch/x86/kernel/pci-calgary_64.c | 2 +-
13026 arch/x86/kernel/pci-iommu_table.c | 2 +-
13027 arch/x86/kernel/pci-swiotlb.c | 2 +-
13028 arch/x86/kernel/process.c | 80 +-
13029 arch/x86/kernel/process_32.c | 29 +-
13030 arch/x86/kernel/process_64.c | 14 +-
13031 arch/x86/kernel/ptrace.c | 20 +-
13032 arch/x86/kernel/pvclock.c | 8 +-
13033 arch/x86/kernel/reboot.c | 44 +-
13034 arch/x86/kernel/reboot_fixups_32.c | 2 +-
13035 arch/x86/kernel/relocate_kernel_64.S | 3 +-
13036 arch/x86/kernel/setup.c | 29 +-
13037 arch/x86/kernel/setup_percpu.c | 29 +-
13038 arch/x86/kernel/signal.c | 17 +-
13039 arch/x86/kernel/smp.c | 2 +-
13040 arch/x86/kernel/smpboot.c | 29 +-
13041 arch/x86/kernel/step.c | 6 +-
13042 arch/x86/kernel/sys_i386_32.c | 184 +
13043 arch/x86/kernel/sys_x86_64.c | 22 +-
13044 arch/x86/kernel/tboot.c | 14 +-
13045 arch/x86/kernel/time.c | 8 +-
13046 arch/x86/kernel/tls.c | 7 +-
13047 arch/x86/kernel/tracepoint.c | 4 +-
13048 arch/x86/kernel/traps.c | 53 +-
13049 arch/x86/kernel/tsc.c | 2 +-
13050 arch/x86/kernel/uprobes.c | 2 +-
13051 arch/x86/kernel/vm86_32.c | 6 +-
13052 arch/x86/kernel/vmlinux.lds.S | 153 +-
13053 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
13054 arch/x86/kernel/x86_init.c | 6 +-
13055 arch/x86/kvm/cpuid.c | 21 +-
13056 arch/x86/kvm/emulate.c | 2 +-
13057 arch/x86/kvm/lapic.c | 2 +-
13058 arch/x86/kvm/paging_tmpl.h | 2 +-
13059 arch/x86/kvm/svm.c | 10 +-
13060 arch/x86/kvm/vmx.c | 62 +-
13061 arch/x86/kvm/x86.c | 42 +-
13062 arch/x86/lguest/boot.c | 3 +-
13063 arch/x86/lib/atomic64_386_32.S | 164 +
13064 arch/x86/lib/atomic64_cx8_32.S | 98 +-
13065 arch/x86/lib/checksum_32.S | 99 +-
13066 arch/x86/lib/clear_page_64.S | 3 +
13067 arch/x86/lib/cmpxchg16b_emu.S | 3 +
13068 arch/x86/lib/copy_page_64.S | 14 +-
13069 arch/x86/lib/copy_user_64.S | 66 +-
13070 arch/x86/lib/csum-copy_64.S | 14 +-
13071 arch/x86/lib/csum-wrappers_64.c | 8 +-
13072 arch/x86/lib/getuser.S | 74 +-
13073 arch/x86/lib/insn.c | 8 +-
13074 arch/x86/lib/iomap_copy_64.S | 2 +
13075 arch/x86/lib/memcpy_64.S | 6 +
13076 arch/x86/lib/memmove_64.S | 3 +-
13077 arch/x86/lib/memset_64.S | 3 +
13078 arch/x86/lib/mmx_32.c | 243 +-
13079 arch/x86/lib/msr-reg.S | 2 +
13080 arch/x86/lib/putuser.S | 87 +-
13081 arch/x86/lib/rwsem.S | 6 +-
13082 arch/x86/lib/usercopy_32.c | 359 +-
13083 arch/x86/lib/usercopy_64.c | 20 +-
13084 arch/x86/math-emu/fpu_aux.c | 2 +-
13085 arch/x86/math-emu/fpu_entry.c | 4 +-
13086 arch/x86/math-emu/fpu_system.h | 2 +-
13087 arch/x86/mm/Makefile | 4 +
13088 arch/x86/mm/extable.c | 26 +-
13089 arch/x86/mm/fault.c | 570 +-
13090 arch/x86/mm/gup.c | 6 +-
13091 arch/x86/mm/highmem_32.c | 6 +
13092 arch/x86/mm/hugetlbpage.c | 24 +-
13093 arch/x86/mm/init.c | 111 +-
13094 arch/x86/mm/init_32.c | 111 +-
13095 arch/x86/mm/init_64.c | 46 +-
13096 arch/x86/mm/iomap_32.c | 4 +
13097 arch/x86/mm/ioremap.c | 52 +-
13098 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
13099 arch/x86/mm/mmap.c | 40 +-
13100 arch/x86/mm/mmio-mod.c | 10 +-
13101 arch/x86/mm/numa.c | 2 +-
13102 arch/x86/mm/pageattr.c | 38 +-
13103 arch/x86/mm/pat.c | 12 +-
13104 arch/x86/mm/pat_rbtree.c | 2 +-
13105 arch/x86/mm/pf_in.c | 10 +-
13106 arch/x86/mm/pgtable.c | 214 +-
13107 arch/x86/mm/pgtable_32.c | 3 +
13108 arch/x86/mm/setup_nx.c | 7 +
13109 arch/x86/mm/tlb.c | 4 +
13110 arch/x86/mm/uderef_64.c | 37 +
13111 arch/x86/net/bpf_jit.S | 11 +
13112 arch/x86/net/bpf_jit_comp.c | 13 +-
13113 arch/x86/oprofile/backtrace.c | 6 +-
13114 arch/x86/oprofile/nmi_int.c | 8 +-
13115 arch/x86/oprofile/op_model_amd.c | 8 +-
13116 arch/x86/oprofile/op_model_ppro.c | 7 +-
13117 arch/x86/oprofile/op_x86_model.h | 2 +-
13118 arch/x86/pci/intel_mid_pci.c | 2 +-
13119 arch/x86/pci/irq.c | 8 +-
13120 arch/x86/pci/pcbios.c | 144 +-
13121 arch/x86/platform/efi/efi_32.c | 24 +
13122 arch/x86/platform/efi/efi_64.c | 26 +-
13123 arch/x86/platform/efi/efi_stub_32.S | 64 +-
13124 arch/x86/platform/efi/efi_stub_64.S | 2 +
13125 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
13126 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
13127 arch/x86/platform/intel-mid/mfld.c | 4 +-
13128 arch/x86/platform/intel-mid/mrfl.c | 2 +-
13129 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
13130 arch/x86/platform/olpc/olpc_dt.c | 2 +-
13131 arch/x86/power/cpu.c | 11 +-
13132 arch/x86/realmode/init.c | 10 +-
13133 arch/x86/realmode/rm/Makefile | 3 +
13134 arch/x86/realmode/rm/header.S | 4 +-
13135 arch/x86/realmode/rm/reboot.S | 4 +
13136 arch/x86/realmode/rm/trampoline_32.S | 12 +-
13137 arch/x86/realmode/rm/trampoline_64.S | 3 +-
13138 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
13139 arch/x86/tools/Makefile | 2 +-
13140 arch/x86/tools/relocs.c | 96 +-
13141 arch/x86/um/mem_32.c | 2 +-
13142 arch/x86/um/tls_32.c | 2 +-
13143 arch/x86/xen/enlighten.c | 50 +-
13144 arch/x86/xen/mmu.c | 19 +-
13145 arch/x86/xen/smp.c | 16 +-
13146 arch/x86/xen/xen-asm_32.S | 2 +-
13147 arch/x86/xen/xen-head.S | 11 +
13148 arch/x86/xen/xen-ops.h | 2 -
13149 block/bio.c | 4 +-
13150 block/blk-iopoll.c | 2 +-
13151 block/blk-map.c | 2 +-
13152 block/blk-softirq.c | 2 +-
13153 block/bsg.c | 12 +-
13154 block/compat_ioctl.c | 4 +-
13155 block/genhd.c | 9 +-
13156 block/partitions/efi.c | 8 +-
13157 block/scsi_ioctl.c | 29 +-
13158 crypto/cryptd.c | 4 +-
13159 crypto/pcrypt.c | 2 +-
13160 crypto/zlib.c | 12 +-
13161 drivers/acpi/acpi_video.c | 2 +-
13162 drivers/acpi/apei/apei-internal.h | 2 +-
13163 drivers/acpi/apei/ghes.c | 4 +-
13164 drivers/acpi/bgrt.c | 6 +-
13165 drivers/acpi/blacklist.c | 4 +-
13166 drivers/acpi/bus.c | 4 +-
13167 drivers/acpi/device_pm.c | 4 +-
13168 drivers/acpi/ec.c | 2 +-
13169 drivers/acpi/pci_slot.c | 2 +-
13170 drivers/acpi/processor_idle.c | 2 +-
13171 drivers/acpi/processor_pdc.c | 2 +-
13172 drivers/acpi/sleep.c | 2 +-
13173 drivers/acpi/sysfs.c | 4 +-
13174 drivers/acpi/thermal.c | 2 +-
13175 drivers/acpi/video_detect.c | 7 +-
13176 drivers/ata/libata-core.c | 12 +-
13177 drivers/ata/libata-scsi.c | 2 +-
13178 drivers/ata/libata.h | 2 +-
13179 drivers/ata/pata_arasan_cf.c | 4 +-
13180 drivers/atm/adummy.c | 2 +-
13181 drivers/atm/ambassador.c | 8 +-
13182 drivers/atm/atmtcp.c | 14 +-
13183 drivers/atm/eni.c | 10 +-
13184 drivers/atm/firestream.c | 8 +-
13185 drivers/atm/fore200e.c | 14 +-
13186 drivers/atm/he.c | 18 +-
13187 drivers/atm/horizon.c | 4 +-
13188 drivers/atm/idt77252.c | 36 +-
13189 drivers/atm/iphase.c | 34 +-
13190 drivers/atm/lanai.c | 12 +-
13191 drivers/atm/nicstar.c | 46 +-
13192 drivers/atm/solos-pci.c | 4 +-
13193 drivers/atm/suni.c | 4 +-
13194 drivers/atm/uPD98402.c | 16 +-
13195 drivers/atm/zatm.c | 6 +-
13196 drivers/base/bus.c | 4 +-
13197 drivers/base/devtmpfs.c | 8 +-
13198 drivers/base/node.c | 2 +-
13199 drivers/base/platform-msi.c | 20 +-
13200 drivers/base/power/domain.c | 11 +-
13201 drivers/base/power/sysfs.c | 2 +-
13202 drivers/base/power/wakeup.c | 8 +-
13203 drivers/base/regmap/regmap-debugfs.c | 11 +-
13204 drivers/base/syscore.c | 4 +-
13205 drivers/block/cciss.c | 28 +-
13206 drivers/block/cciss.h | 2 +-
13207 drivers/block/cpqarray.c | 28 +-
13208 drivers/block/cpqarray.h | 2 +-
13209 drivers/block/drbd/drbd_bitmap.c | 2 +-
13210 drivers/block/drbd/drbd_int.h | 8 +-
13211 drivers/block/drbd/drbd_main.c | 12 +-
13212 drivers/block/drbd/drbd_nl.c | 4 +-
13213 drivers/block/drbd/drbd_receiver.c | 34 +-
13214 drivers/block/drbd/drbd_worker.c | 8 +-
13215 drivers/block/pktcdvd.c | 4 +-
13216 drivers/block/rbd.c | 2 +-
13217 drivers/bluetooth/btwilink.c | 2 +-
13218 drivers/bus/arm-cci.c | 12 +-
13219 drivers/cdrom/cdrom.c | 11 +-
13220 drivers/cdrom/gdrom.c | 1 -
13221 drivers/char/agp/compat_ioctl.c | 2 +-
13222 drivers/char/agp/frontend.c | 4 +-
13223 drivers/char/agp/intel-gtt.c | 4 +-
13224 drivers/char/hpet.c | 2 +-
13225 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
13226 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
13227 drivers/char/mem.c | 47 +-
13228 drivers/char/nvram.c | 2 +-
13229 drivers/char/pcmcia/synclink_cs.c | 16 +-
13230 drivers/char/random.c | 12 +-
13231 drivers/char/sonypi.c | 11 +-
13232 drivers/char/tpm/tpm_acpi.c | 3 +-
13233 drivers/char/tpm/tpm_eventlog.c | 4 +-
13234 drivers/char/virtio_console.c | 4 +-
13235 drivers/clk/clk-composite.c | 2 +-
13236 drivers/clk/samsung/clk.h | 2 +-
13237 drivers/clk/socfpga/clk-gate.c | 9 +-
13238 drivers/clk/socfpga/clk-pll.c | 9 +-
13239 drivers/clk/ti/clk.c | 8 +-
13240 drivers/cpufreq/acpi-cpufreq.c | 17 +-
13241 drivers/cpufreq/cpufreq-dt.c | 4 +-
13242 drivers/cpufreq/cpufreq.c | 30 +-
13243 drivers/cpufreq/cpufreq_governor.c | 2 +-
13244 drivers/cpufreq/cpufreq_governor.h | 4 +-
13245 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
13246 drivers/cpufreq/intel_pstate.c | 33 +-
13247 drivers/cpufreq/p4-clockmod.c | 12 +-
13248 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
13249 drivers/cpufreq/speedstep-centrino.c | 7 +-
13250 drivers/cpuidle/driver.c | 2 +-
13251 drivers/cpuidle/dt_idle_states.c | 2 +-
13252 drivers/cpuidle/governor.c | 2 +-
13253 drivers/cpuidle/sysfs.c | 2 +-
13254 drivers/crypto/hifn_795x.c | 4 +-
13255 drivers/devfreq/devfreq.c | 4 +-
13256 drivers/dma/sh/shdma-base.c | 4 +-
13257 drivers/dma/sh/shdmac.c | 2 +-
13258 drivers/edac/edac_device.c | 4 +-
13259 drivers/edac/edac_mc_sysfs.c | 2 +-
13260 drivers/edac/edac_pci.c | 4 +-
13261 drivers/edac/edac_pci_sysfs.c | 22 +-
13262 drivers/edac/mce_amd.h | 2 +-
13263 drivers/firewire/core-card.c | 6 +-
13264 drivers/firewire/core-device.c | 2 +-
13265 drivers/firewire/core-transaction.c | 1 +
13266 drivers/firewire/core.h | 1 +
13267 drivers/firmware/dmi-id.c | 2 +-
13268 drivers/firmware/dmi_scan.c | 12 +-
13269 drivers/firmware/efi/cper.c | 8 +-
13270 drivers/firmware/efi/efi.c | 12 +-
13271 drivers/firmware/efi/efivars.c | 2 +-
13272 drivers/firmware/efi/runtime-map.c | 2 +-
13273 drivers/firmware/google/gsmi.c | 2 +-
13274 drivers/firmware/google/memconsole.c | 7 +-
13275 drivers/firmware/memmap.c | 2 +-
13276 drivers/firmware/psci.c | 2 +-
13277 drivers/gpio/gpio-davinci.c | 6 +-
13278 drivers/gpio/gpio-em.c | 2 +-
13279 drivers/gpio/gpio-ich.c | 2 +-
13280 drivers/gpio/gpio-omap.c | 4 +-
13281 drivers/gpio/gpio-rcar.c | 2 +-
13282 drivers/gpio/gpio-vr41xx.c | 2 +-
13283 drivers/gpio/gpiolib.c | 12 +-
13284 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
13285 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
13286 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
13287 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
13288 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
13289 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
13290 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
13291 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
13292 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
13293 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
13294 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
13295 drivers/gpu/drm/drm_crtc.c | 2 +-
13296 drivers/gpu/drm/drm_drv.c | 2 +-
13297 drivers/gpu/drm/drm_fops.c | 12 +-
13298 drivers/gpu/drm/drm_global.c | 14 +-
13299 drivers/gpu/drm/drm_info.c | 13 +-
13300 drivers/gpu/drm/drm_ioc32.c | 13 +-
13301 drivers/gpu/drm/drm_ioctl.c | 2 +-
13302 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
13303 drivers/gpu/drm/i810/i810_drv.h | 4 +-
13304 drivers/gpu/drm/i915/i915_dma.c | 2 +-
13305 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
13306 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
13307 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
13308 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
13309 drivers/gpu/drm/i915/intel_display.c | 26 +-
13310 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
13311 drivers/gpu/drm/mga/mga_drv.h | 4 +-
13312 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
13313 drivers/gpu/drm/mga/mga_irq.c | 8 +-
13314 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
13315 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
13316 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
13317 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
13318 drivers/gpu/drm/omapdrm/Makefile | 2 +-
13319 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
13320 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
13321 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
13322 drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +-
13323 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
13324 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
13325 drivers/gpu/drm/r128/r128_cce.c | 2 +-
13326 drivers/gpu/drm/r128/r128_drv.h | 4 +-
13327 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
13328 drivers/gpu/drm/r128/r128_irq.c | 4 +-
13329 drivers/gpu/drm/r128/r128_state.c | 4 +-
13330 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
13331 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
13332 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
13333 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
13334 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
13335 drivers/gpu/drm/radeon/radeon_state.c | 4 +-
13336 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
13337 drivers/gpu/drm/tegra/dc.c | 2 +-
13338 drivers/gpu/drm/tegra/dsi.c | 2 +-
13339 drivers/gpu/drm/tegra/hdmi.c | 2 +-
13340 drivers/gpu/drm/tegra/sor.c | 7 +-
13341 drivers/gpu/drm/tilcdc/Makefile | 6 +-
13342 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
13343 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
13344 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
13345 drivers/gpu/drm/udl/udl_fb.c | 1 -
13346 drivers/gpu/drm/via/via_drv.h | 4 +-
13347 drivers/gpu/drm/via/via_irq.c | 18 +-
13348 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
13349 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
13350 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
13351 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
13352 drivers/gpu/vga/vga_switcheroo.c | 4 +-
13353 drivers/hid/hid-core.c | 4 +-
13354 drivers/hid/hid-sensor-custom.c | 2 +-
13355 drivers/hv/channel.c | 2 +-
13356 drivers/hv/hv.c | 4 +-
13357 drivers/hv/hv_balloon.c | 18 +-
13358 drivers/hv/hyperv_vmbus.h | 2 +-
13359 drivers/hwmon/acpi_power_meter.c | 6 +-
13360 drivers/hwmon/applesmc.c | 2 +-
13361 drivers/hwmon/asus_atk0110.c | 10 +-
13362 drivers/hwmon/coretemp.c | 2 +-
13363 drivers/hwmon/dell-smm-hwmon.c | 2 +-
13364 drivers/hwmon/ibmaem.c | 2 +-
13365 drivers/hwmon/iio_hwmon.c | 2 +-
13366 drivers/hwmon/nct6683.c | 6 +-
13367 drivers/hwmon/nct6775.c | 6 +-
13368 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
13369 drivers/hwmon/sht15.c | 12 +-
13370 drivers/hwmon/via-cputemp.c | 2 +-
13371 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
13372 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
13373 drivers/i2c/i2c-dev.c | 2 +-
13374 drivers/ide/ide-cd.c | 2 +-
13375 drivers/ide/ide-disk.c | 2 +-
13376 drivers/iio/industrialio-core.c | 2 +-
13377 drivers/iio/magnetometer/ak8975.c | 2 +-
13378 drivers/infiniband/core/cm.c | 32 +-
13379 drivers/infiniband/core/fmr_pool.c | 20 +-
13380 drivers/infiniband/core/uverbs_cmd.c | 3 +
13381 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
13382 drivers/infiniband/hw/mlx4/mad.c | 2 +-
13383 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
13384 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
13385 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
13386 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
13387 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
13388 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
13389 drivers/infiniband/hw/nes/nes.c | 4 +-
13390 drivers/infiniband/hw/nes/nes.h | 40 +-
13391 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
13392 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
13393 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
13394 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
13395 drivers/infiniband/hw/qib/qib.h | 1 +
13396 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
13397 drivers/input/gameport/gameport.c | 4 +-
13398 drivers/input/input.c | 4 +-
13399 drivers/input/joystick/sidewinder.c | 1 +
13400 drivers/input/joystick/xpad.c | 4 +-
13401 drivers/input/misc/ims-pcu.c | 4 +-
13402 drivers/input/mouse/psmouse.h | 2 +-
13403 drivers/input/mousedev.c | 2 +-
13404 drivers/input/serio/serio.c | 4 +-
13405 drivers/input/serio/serio_raw.c | 4 +-
13406 drivers/input/touchscreen/htcpen.c | 2 +-
13407 drivers/iommu/arm-smmu-v3.c | 2 +-
13408 drivers/iommu/arm-smmu.c | 43 +-
13409 drivers/iommu/io-pgtable-arm.c | 101 +-
13410 drivers/iommu/io-pgtable.c | 11 +-
13411 drivers/iommu/io-pgtable.h | 19 +-
13412 drivers/iommu/iommu.c | 2 +-
13413 drivers/iommu/ipmmu-vmsa.c | 13 +-
13414 drivers/iommu/irq_remapping.c | 2 +-
13415 drivers/irqchip/irq-gic.c | 2 +-
13416 drivers/irqchip/irq-i8259.c | 2 +-
13417 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
13418 drivers/irqchip/irq-renesas-irqc.c | 2 +-
13419 drivers/isdn/capi/capi.c | 10 +-
13420 drivers/isdn/gigaset/interface.c | 8 +-
13421 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
13422 drivers/isdn/hardware/avm/b1.c | 4 +-
13423 drivers/isdn/i4l/isdn_common.c | 2 +
13424 drivers/isdn/i4l/isdn_tty.c | 22 +-
13425 drivers/isdn/icn/icn.c | 2 +-
13426 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
13427 drivers/lguest/core.c | 10 +-
13428 drivers/lguest/page_tables.c | 2 +-
13429 drivers/lguest/x86/core.c | 12 +-
13430 drivers/lguest/x86/switcher_32.S | 27 +-
13431 drivers/md/bcache/closure.h | 2 +-
13432 drivers/md/bitmap.c | 2 +-
13433 drivers/md/dm-ioctl.c | 2 +-
13434 drivers/md/dm-raid1.c | 18 +-
13435 drivers/md/dm-stats.c | 6 +-
13436 drivers/md/dm-stripe.c | 10 +-
13437 drivers/md/dm-table.c | 2 +-
13438 drivers/md/dm-thin-metadata.c | 4 +-
13439 drivers/md/dm.c | 16 +-
13440 drivers/md/md.c | 26 +-
13441 drivers/md/md.h | 6 +-
13442 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
13443 drivers/md/persistent-data/dm-space-map.h | 1 +
13444 drivers/md/raid1.c | 4 +-
13445 drivers/md/raid10.c | 18 +-
13446 drivers/md/raid5.c | 22 +-
13447 drivers/media/dvb-core/dvbdev.c | 2 +-
13448 drivers/media/dvb-frontends/af9033.h | 2 +-
13449 drivers/media/dvb-frontends/dib3000.h | 2 +-
13450 drivers/media/dvb-frontends/dib7000p.h | 2 +-
13451 drivers/media/dvb-frontends/dib8000.h | 2 +-
13452 drivers/media/pci/cx88/cx88-video.c | 6 +-
13453 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
13454 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
13455 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
13456 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
13457 drivers/media/pci/tw68/tw68-core.c | 2 +-
13458 drivers/media/platform/omap/omap_vout.c | 11 +-
13459 drivers/media/platform/s5p-tv/mixer.h | 2 +-
13460 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
13461 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
13462 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
13463 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
13464 drivers/media/radio/radio-cadet.c | 2 +
13465 drivers/media/radio/radio-maxiradio.c | 2 +-
13466 drivers/media/radio/radio-shark.c | 2 +-
13467 drivers/media/radio/radio-shark2.c | 2 +-
13468 drivers/media/radio/radio-si476x.c | 2 +-
13469 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
13470 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
13471 drivers/media/v4l2-core/v4l2-device.c | 4 +-
13472 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
13473 drivers/memory/omap-gpmc.c | 21 +-
13474 drivers/message/fusion/mptsas.c | 34 +-
13475 drivers/mfd/ab8500-debugfs.c | 2 +-
13476 drivers/mfd/kempld-core.c | 2 +-
13477 drivers/mfd/max8925-i2c.c | 2 +-
13478 drivers/mfd/tps65910.c | 2 +-
13479 drivers/mfd/twl4030-irq.c | 9 +-
13480 drivers/mfd/wm5110-tables.c | 2 +-
13481 drivers/mfd/wm8998-tables.c | 2 +-
13482 drivers/misc/c2port/core.c | 4 +-
13483 drivers/misc/kgdbts.c | 4 +-
13484 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
13485 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
13486 drivers/misc/mic/scif/scif_rb.c | 8 +-
13487 drivers/misc/sgi-gru/gruhandles.c | 4 +-
13488 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
13489 drivers/misc/sgi-gru/grutables.h | 154 +-
13490 drivers/misc/sgi-xp/xp.h | 2 +-
13491 drivers/misc/sgi-xp/xpc.h | 3 +-
13492 drivers/misc/sgi-xp/xpc_main.c | 2 +-
13493 drivers/mmc/card/block.c | 2 +-
13494 drivers/mmc/host/dw_mmc.h | 2 +-
13495 drivers/mmc/host/mmci.c | 4 +-
13496 drivers/mmc/host/omap_hsmmc.c | 4 +-
13497 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
13498 drivers/mmc/host/sdhci-s3c.c | 8 +-
13499 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
13500 drivers/mtd/nand/denali.c | 1 +
13501 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
13502 drivers/mtd/nftlmount.c | 1 +
13503 drivers/mtd/sm_ftl.c | 2 +-
13504 drivers/net/bonding/bond_netlink.c | 2 +-
13505 drivers/net/caif/caif_hsi.c | 2 +-
13506 drivers/net/can/Kconfig | 2 +-
13507 drivers/net/can/dev.c | 2 +-
13508 drivers/net/can/vcan.c | 2 +-
13509 drivers/net/dummy.c | 2 +-
13510 drivers/net/ethernet/8390/ax88796.c | 4 +-
13511 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
13512 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
13513 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
13514 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
13515 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
13516 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
13517 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
13518 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
13519 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
13520 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
13521 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
13522 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
13523 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
13524 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
13525 drivers/net/ethernet/broadcom/tg3.h | 1 +
13526 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
13527 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
13528 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
13529 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
13530 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
13531 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
13532 drivers/net/ethernet/faraday/ftmac100.c | 2 +
13533 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
13534 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
13535 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
13536 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
13537 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
13538 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
13539 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
13540 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
13541 drivers/net/ethernet/realtek/r8169.c | 8 +-
13542 drivers/net/ethernet/sfc/ptp.c | 2 +-
13543 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
13544 drivers/net/ethernet/via/via-rhine.c | 2 +-
13545 drivers/net/geneve.c | 2 +-
13546 drivers/net/hyperv/hyperv_net.h | 2 +-
13547 drivers/net/hyperv/rndis_filter.c | 4 +-
13548 drivers/net/ifb.c | 2 +-
13549 drivers/net/ipvlan/ipvlan_core.c | 2 +-
13550 drivers/net/macvlan.c | 20 +-
13551 drivers/net/macvtap.c | 6 +-
13552 drivers/net/nlmon.c | 2 +-
13553 drivers/net/phy/phy_device.c | 6 +-
13554 drivers/net/ppp/ppp_generic.c | 4 +-
13555 drivers/net/slip/slhc.c | 2 +-
13556 drivers/net/team/team.c | 4 +-
13557 drivers/net/tun.c | 7 +-
13558 drivers/net/usb/hso.c | 23 +-
13559 drivers/net/usb/r8152.c | 2 +-
13560 drivers/net/usb/sierra_net.c | 4 +-
13561 drivers/net/virtio_net.c | 2 +-
13562 drivers/net/vrf.c | 2 +-
13563 drivers/net/vxlan.c | 4 +-
13564 drivers/net/wimax/i2400m/rx.c | 2 +-
13565 drivers/net/wireless/airo.c | 2 +-
13566 drivers/net/wireless/at76c50x-usb.c | 2 +-
13567 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
13568 drivers/net/wireless/ath/ath10k/htc.c | 7 +-
13569 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
13570 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
13571 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
13572 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
13573 drivers/net/wireless/ath/ath9k/main.c | 22 +-
13574 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
13575 drivers/net/wireless/b43/phy_lp.c | 2 +-
13576 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
13577 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
13578 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
13579 drivers/net/wireless/mac80211_hwsim.c | 28 +-
13580 drivers/net/wireless/rndis_wlan.c | 2 +-
13581 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
13582 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
13583 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
13584 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
13585 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
13586 drivers/nfc/nfcwilink.c | 2 +-
13587 drivers/of/fdt.c | 4 +-
13588 drivers/oprofile/buffer_sync.c | 8 +-
13589 drivers/oprofile/event_buffer.c | 2 +-
13590 drivers/oprofile/oprof.c | 2 +-
13591 drivers/oprofile/oprofile_stats.c | 10 +-
13592 drivers/oprofile/oprofile_stats.h | 10 +-
13593 drivers/oprofile/oprofilefs.c | 6 +-
13594 drivers/oprofile/timer_int.c | 2 +-
13595 drivers/parport/procfs.c | 4 +-
13596 drivers/pci/host/pci-host-generic.c | 24 +-
13597 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
13598 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
13599 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
13600 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
13601 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
13602 drivers/pci/hotplug/pciehp_core.c | 2 +-
13603 drivers/pci/msi.c | 22 +-
13604 drivers/pci/pci-sysfs.c | 6 +-
13605 drivers/pci/pci.h | 2 +-
13606 drivers/pci/pcie/aspm.c | 6 +-
13607 drivers/pci/pcie/portdrv_pci.c | 2 +-
13608 drivers/pci/probe.c | 2 +-
13609 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
13610 drivers/pinctrl/pinctrl-at91.c | 5 +-
13611 drivers/platform/chrome/chromeos_pstore.c | 2 +-
13612 drivers/platform/x86/alienware-wmi.c | 4 +-
13613 drivers/platform/x86/compal-laptop.c | 2 +-
13614 drivers/platform/x86/hdaps.c | 2 +-
13615 drivers/platform/x86/ibm_rtl.c | 2 +-
13616 drivers/platform/x86/intel_oaktrail.c | 2 +-
13617 drivers/platform/x86/msi-laptop.c | 16 +-
13618 drivers/platform/x86/msi-wmi.c | 2 +-
13619 drivers/platform/x86/samsung-laptop.c | 2 +-
13620 drivers/platform/x86/samsung-q10.c | 2 +-
13621 drivers/platform/x86/sony-laptop.c | 14 +-
13622 drivers/platform/x86/thinkpad_acpi.c | 2 +-
13623 drivers/pnp/pnpbios/bioscalls.c | 14 +-
13624 drivers/pnp/pnpbios/core.c | 2 +-
13625 drivers/power/pda_power.c | 7 +-
13626 drivers/power/power_supply.h | 4 +-
13627 drivers/power/power_supply_core.c | 7 +-
13628 drivers/power/power_supply_sysfs.c | 6 +-
13629 drivers/power/reset/at91-reset.c | 9 +-
13630 drivers/powercap/powercap_sys.c | 136 +-
13631 drivers/ptp/ptp_private.h | 2 +-
13632 drivers/ptp/ptp_sysfs.c | 2 +-
13633 drivers/regulator/core.c | 4 +-
13634 drivers/regulator/max8660.c | 6 +-
13635 drivers/regulator/max8973-regulator.c | 16 +-
13636 drivers/regulator/mc13892-regulator.c | 8 +-
13637 drivers/rtc/rtc-armada38x.c | 7 +-
13638 drivers/rtc/rtc-cmos.c | 4 +-
13639 drivers/rtc/rtc-ds1307.c | 2 +-
13640 drivers/rtc/rtc-m48t59.c | 4 +-
13641 drivers/rtc/rtc-test.c | 6 +-
13642 drivers/scsi/be2iscsi/be_main.c | 2 +-
13643 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
13644 drivers/scsi/bfa/bfa_ioc.h | 4 +-
13645 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
13646 drivers/scsi/hosts.c | 4 +-
13647 drivers/scsi/hpsa.c | 38 +-
13648 drivers/scsi/hpsa.h | 2 +-
13649 drivers/scsi/libfc/fc_exch.c | 50 +-
13650 drivers/scsi/libsas/sas_ata.c | 2 +-
13651 drivers/scsi/lpfc/lpfc.h | 8 +-
13652 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
13653 drivers/scsi/lpfc/lpfc_init.c | 6 +-
13654 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
13655 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
13656 drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +-
13657 drivers/scsi/pmcraid.c | 20 +-
13658 drivers/scsi/pmcraid.h | 8 +-
13659 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
13660 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
13661 drivers/scsi/qla2xxx/qla_os.c | 6 +-
13662 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
13663 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
13664 drivers/scsi/scsi.c | 2 +-
13665 drivers/scsi/scsi_lib.c | 8 +-
13666 drivers/scsi/scsi_sysfs.c | 2 +-
13667 drivers/scsi/scsi_transport_fc.c | 8 +-
13668 drivers/scsi/scsi_transport_iscsi.c | 6 +-
13669 drivers/scsi/scsi_transport_srp.c | 6 +-
13670 drivers/scsi/sd.c | 6 +-
13671 drivers/scsi/sg.c | 2 +-
13672 drivers/scsi/sr.c | 21 +-
13673 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
13674 drivers/spi/spi.c | 2 +-
13675 drivers/staging/android/timed_output.c | 6 +-
13676 drivers/staging/comedi/comedi_fops.c | 8 +-
13677 drivers/staging/fbtft/fbtft-core.c | 2 +-
13678 drivers/staging/fbtft/fbtft.h | 2 +-
13679 drivers/staging/gdm724x/gdm_tty.c | 2 +-
13680 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
13681 drivers/staging/iio/adc/ad7280a.c | 4 +-
13682 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
13683 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
13684 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
13685 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
13686 drivers/staging/lustre/lustre/include/obd.h | 2 +-
13687 drivers/staging/octeon/ethernet-rx.c | 20 +-
13688 drivers/staging/octeon/ethernet.c | 8 +-
13689 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
13690 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
13691 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
13692 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
13693 drivers/staging/sm750fb/sm750.c | 14 +-
13694 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
13695 drivers/target/sbp/sbp_target.c | 4 +-
13696 drivers/thermal/cpu_cooling.c | 9 +-
13697 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
13698 drivers/thermal/of-thermal.c | 17 +-
13699 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
13700 drivers/tty/cyclades.c | 6 +-
13701 drivers/tty/hvc/hvc_console.c | 14 +-
13702 drivers/tty/hvc/hvcs.c | 21 +-
13703 drivers/tty/hvc/hvsi.c | 22 +-
13704 drivers/tty/hvc/hvsi_lib.c | 4 +-
13705 drivers/tty/ipwireless/tty.c | 27 +-
13706 drivers/tty/moxa.c | 2 +-
13707 drivers/tty/n_gsm.c | 4 +-
13708 drivers/tty/n_tty.c | 3 +-
13709 drivers/tty/pty.c | 4 +-
13710 drivers/tty/rocket.c | 6 +-
13711 drivers/tty/serial/8250/8250_core.c | 10 +-
13712 drivers/tty/serial/ifx6x60.c | 2 +-
13713 drivers/tty/serial/ioc4_serial.c | 6 +-
13714 drivers/tty/serial/kgdb_nmi.c | 4 +-
13715 drivers/tty/serial/kgdboc.c | 32 +-
13716 drivers/tty/serial/msm_serial.c | 4 +-
13717 drivers/tty/serial/samsung.c | 9 +-
13718 drivers/tty/serial/serial_core.c | 8 +-
13719 drivers/tty/synclink.c | 34 +-
13720 drivers/tty/synclink_gt.c | 28 +-
13721 drivers/tty/synclinkmp.c | 34 +-
13722 drivers/tty/tty_io.c | 2 +-
13723 drivers/tty/tty_ldisc.c | 8 +-
13724 drivers/tty/tty_port.c | 22 +-
13725 drivers/uio/uio.c | 13 +-
13726 drivers/usb/atm/cxacru.c | 2 +-
13727 drivers/usb/atm/usbatm.c | 24 +-
13728 drivers/usb/class/cdc-acm.h | 2 +-
13729 drivers/usb/core/devices.c | 6 +-
13730 drivers/usb/core/devio.c | 12 +-
13731 drivers/usb/core/hcd.c | 4 +-
13732 drivers/usb/core/sysfs.c | 2 +-
13733 drivers/usb/core/usb.c | 2 +-
13734 drivers/usb/early/ehci-dbgp.c | 16 +-
13735 drivers/usb/gadget/function/u_serial.c | 22 +-
13736 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
13737 drivers/usb/host/ehci-hcd.c | 2 +-
13738 drivers/usb/host/ehci-hub.c | 4 +-
13739 drivers/usb/host/ehci-q.c | 4 +-
13740 drivers/usb/host/fotg210-hcd.c | 2 +-
13741 drivers/usb/host/fusbh200-hcd.c | 2 +-
13742 drivers/usb/host/hwa-hc.c | 2 +-
13743 drivers/usb/host/ohci-hcd.c | 2 +-
13744 drivers/usb/host/r8a66597.h | 2 +-
13745 drivers/usb/host/uhci-hcd.c | 2 +-
13746 drivers/usb/host/xhci-pci.c | 2 +-
13747 drivers/usb/host/xhci.c | 2 +-
13748 drivers/usb/misc/appledisplay.c | 4 +-
13749 drivers/usb/serial/console.c | 8 +-
13750 drivers/usb/storage/transport.c | 2 +-
13751 drivers/usb/storage/usb.c | 2 +-
13752 drivers/usb/storage/usb.h | 2 +-
13753 drivers/usb/usbip/vhci.h | 2 +-
13754 drivers/usb/usbip/vhci_hcd.c | 6 +-
13755 drivers/usb/usbip/vhci_rx.c | 2 +-
13756 drivers/usb/wusbcore/wa-hc.h | 4 +-
13757 drivers/usb/wusbcore/wa-xfer.c | 2 +-
13758 drivers/vfio/vfio.c | 2 +-
13759 drivers/vhost/vringh.c | 20 +-
13760 drivers/video/backlight/kb3886_bl.c | 2 +-
13761 drivers/video/console/fbcon.c | 2 +-
13762 drivers/video/fbdev/aty/aty128fb.c | 2 +-
13763 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
13764 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
13765 drivers/video/fbdev/core/fb_defio.c | 6 +-
13766 drivers/video/fbdev/core/fbmem.c | 2 +-
13767 drivers/video/fbdev/hyperv_fb.c | 4 +-
13768 drivers/video/fbdev/i810/i810_accel.c | 1 +
13769 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
13770 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
13771 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
13772 drivers/video/fbdev/omap2/dss/display.c | 8 +-
13773 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
13774 drivers/video/fbdev/smscufx.c | 4 +-
13775 drivers/video/fbdev/udlfb.c | 36 +-
13776 drivers/video/fbdev/uvesafb.c | 52 +-
13777 drivers/video/fbdev/vesafb.c | 58 +-
13778 drivers/video/fbdev/via/via_clock.h | 2 +-
13779 drivers/xen/events/events_base.c | 6 +-
13780 drivers/xen/evtchn.c | 4 +-
13781 fs/Kconfig.binfmt | 2 +-
13782 fs/afs/inode.c | 4 +-
13783 fs/aio.c | 2 +-
13784 fs/autofs4/waitq.c | 2 +-
13785 fs/befs/endian.h | 6 +-
13786 fs/binfmt_aout.c | 23 +-
13787 fs/binfmt_elf.c | 670 +-
13788 fs/binfmt_elf_fdpic.c | 4 +-
13789 fs/block_dev.c | 2 +-
13790 fs/btrfs/ctree.c | 9 +-
13791 fs/btrfs/delayed-inode.c | 9 +-
13792 fs/btrfs/delayed-inode.h | 6 +-
13793 fs/btrfs/file.c | 10 +-
13794 fs/btrfs/inode.c | 14 +-
13795 fs/btrfs/super.c | 2 +-
13796 fs/btrfs/sysfs.c | 2 +-
13797 fs/btrfs/tests/free-space-tests.c | 8 +-
13798 fs/btrfs/tree-log.h | 2 +-
13799 fs/buffer.c | 2 +-
13800 fs/cachefiles/bind.c | 6 +-
13801 fs/cachefiles/daemon.c | 8 +-
13802 fs/cachefiles/internal.h | 12 +-
13803 fs/cachefiles/namei.c | 2 +-
13804 fs/cachefiles/proc.c | 12 +-
13805 fs/ceph/dir.c | 12 +-
13806 fs/ceph/super.c | 4 +-
13807 fs/cifs/cifs_debug.c | 12 +-
13808 fs/cifs/cifsfs.c | 8 +-
13809 fs/cifs/cifsglob.h | 54 +-
13810 fs/cifs/file.c | 10 +-
13811 fs/cifs/misc.c | 4 +-
13812 fs/cifs/smb1ops.c | 80 +-
13813 fs/cifs/smb2ops.c | 84 +-
13814 fs/cifs/smb2pdu.c | 3 +-
13815 fs/coda/cache.c | 10 +-
13816 fs/compat.c | 4 +-
13817 fs/compat_binfmt_elf.c | 2 +
13818 fs/compat_ioctl.c | 12 +-
13819 fs/configfs/dir.c | 10 +-
13820 fs/coredump.c | 16 +-
13821 fs/dcache.c | 51 +-
13822 fs/ecryptfs/inode.c | 2 +-
13823 fs/ecryptfs/miscdev.c | 2 +-
13824 fs/exec.c | 362 +-
13825 fs/ext2/xattr.c | 5 +-
13826 fs/ext4/ext4.h | 20 +-
13827 fs/ext4/mballoc.c | 44 +-
13828 fs/ext4/resize.c | 16 +-
13829 fs/ext4/super.c | 4 +-
13830 fs/ext4/xattr.c | 5 +-
13831 fs/fhandle.c | 3 +-
13832 fs/file.c | 4 +-
13833 fs/fs_struct.c | 8 +-
13834 fs/fscache/cookie.c | 40 +-
13835 fs/fscache/internal.h | 202 +-
13836 fs/fscache/object.c | 26 +-
13837 fs/fscache/operation.c | 38 +-
13838 fs/fscache/page.c | 110 +-
13839 fs/fscache/stats.c | 348 +-
13840 fs/fuse/cuse.c | 10 +-
13841 fs/fuse/dev.c | 4 +-
13842 fs/gfs2/glock.c | 22 +-
13843 fs/gfs2/glops.c | 4 +-
13844 fs/gfs2/quota.c | 6 +-
13845 fs/hugetlbfs/inode.c | 13 +-
13846 fs/inode.c | 4 +-
13847 fs/jffs2/erase.c | 3 +-
13848 fs/jffs2/wbuf.c | 3 +-
13849 fs/jfs/super.c | 2 +-
13850 fs/kernfs/dir.c | 2 +-
13851 fs/kernfs/file.c | 20 +-
13852 fs/libfs.c | 10 +-
13853 fs/lockd/clntproc.c | 4 +-
13854 fs/namei.c | 16 +-
13855 fs/namespace.c | 16 +-
13856 fs/nfs/callback_xdr.c | 2 +-
13857 fs/nfs/inode.c | 6 +-
13858 fs/nfsd/nfs4proc.c | 2 +-
13859 fs/nfsd/nfs4xdr.c | 2 +-
13860 fs/nfsd/nfscache.c | 11 +-
13861 fs/nfsd/vfs.c | 6 +-
13862 fs/nls/nls_base.c | 26 +-
13863 fs/nls/nls_euc-jp.c | 6 +-
13864 fs/nls/nls_koi8-ru.c | 6 +-
13865 fs/notify/fanotify/fanotify_user.c | 4 +-
13866 fs/notify/notification.c | 4 +-
13867 fs/ntfs/dir.c | 2 +-
13868 fs/ntfs/super.c | 6 +-
13869 fs/ocfs2/localalloc.c | 2 +-
13870 fs/ocfs2/ocfs2.h | 10 +-
13871 fs/ocfs2/suballoc.c | 12 +-
13872 fs/ocfs2/super.c | 20 +-
13873 fs/pipe.c | 72 +-
13874 fs/posix_acl.c | 4 +-
13875 fs/proc/array.c | 20 +
13876 fs/proc/base.c | 4 +-
13877 fs/proc/kcore.c | 34 +-
13878 fs/proc/meminfo.c | 2 +-
13879 fs/proc/nommu.c | 2 +-
13880 fs/proc/proc_sysctl.c | 26 +-
13881 fs/proc/task_mmu.c | 39 +-
13882 fs/proc/task_nommu.c | 4 +-
13883 fs/proc/vmcore.c | 16 +-
13884 fs/qnx6/qnx6.h | 4 +-
13885 fs/quota/netlink.c | 4 +-
13886 fs/read_write.c | 2 +-
13887 fs/reiserfs/do_balan.c | 2 +-
13888 fs/reiserfs/procfs.c | 2 +-
13889 fs/reiserfs/reiserfs.h | 4 +-
13890 fs/seq_file.c | 4 +-
13891 fs/splice.c | 43 +-
13892 fs/squashfs/xattr.c | 12 +-
13893 fs/sysv/sysv.h | 2 +-
13894 fs/tracefs/inode.c | 8 +-
13895 fs/udf/misc.c | 2 +-
13896 fs/ufs/swab.h | 4 +-
13897 fs/userfaultfd.c | 2 +-
13898 fs/xattr.c | 21 +
13899 fs/xfs/libxfs/xfs_bmap.c | 2 +-
13900 fs/xfs/xfs_dir2_readdir.c | 7 +-
13901 fs/xfs/xfs_ioctl.c | 2 +-
13902 fs/xfs/xfs_linux.h | 4 +-
13903 include/asm-generic/4level-fixup.h | 2 +
13904 include/asm-generic/atomic-long.h | 156 +-
13905 include/asm-generic/atomic64.h | 12 +
13906 include/asm-generic/bitops/__fls.h | 2 +-
13907 include/asm-generic/bitops/fls.h | 2 +-
13908 include/asm-generic/bitops/fls64.h | 4 +-
13909 include/asm-generic/bug.h | 6 +-
13910 include/asm-generic/cache.h | 4 +-
13911 include/asm-generic/emergency-restart.h | 2 +-
13912 include/asm-generic/kmap_types.h | 4 +-
13913 include/asm-generic/local.h | 13 +
13914 include/asm-generic/pgtable-nopmd.h | 18 +-
13915 include/asm-generic/pgtable-nopud.h | 15 +-
13916 include/asm-generic/pgtable.h | 16 +
13917 include/asm-generic/sections.h | 1 +
13918 include/asm-generic/uaccess.h | 16 +
13919 include/asm-generic/vmlinux.lds.h | 15 +-
13920 include/crypto/algapi.h | 2 +-
13921 include/drm/drmP.h | 16 +-
13922 include/drm/drm_crtc_helper.h | 2 +-
13923 include/drm/drm_mm.h | 2 +-
13924 include/drm/i915_pciids.h | 2 +-
13925 include/drm/intel-gtt.h | 4 +-
13926 include/drm/ttm/ttm_memory.h | 2 +-
13927 include/drm/ttm/ttm_page_alloc.h | 1 +
13928 include/keys/asymmetric-subtype.h | 2 +-
13929 include/linux/atmdev.h | 4 +-
13930 include/linux/atomic.h | 17 +-
13931 include/linux/audit.h | 2 +-
13932 include/linux/average.h | 2 +-
13933 include/linux/binfmts.h | 3 +-
13934 include/linux/bitmap.h | 2 +-
13935 include/linux/bitops.h | 8 +-
13936 include/linux/blkdev.h | 2 +-
13937 include/linux/blktrace_api.h | 2 +-
13938 include/linux/cache.h | 8 +
13939 include/linux/cdrom.h | 1 -
13940 include/linux/cleancache.h | 2 +-
13941 include/linux/clk-provider.h | 1 +
13942 include/linux/compat.h | 6 +-
13943 include/linux/compiler-gcc.h | 28 +-
13944 include/linux/compiler.h | 157 +-
13945 include/linux/configfs.h | 2 +-
13946 include/linux/cpufreq.h | 3 +-
13947 include/linux/cpuidle.h | 5 +-
13948 include/linux/cpumask.h | 14 +-
13949 include/linux/crypto.h | 4 +-
13950 include/linux/ctype.h | 2 +-
13951 include/linux/dcache.h | 4 +-
13952 include/linux/decompress/mm.h | 2 +-
13953 include/linux/devfreq.h | 2 +-
13954 include/linux/device.h | 7 +-
13955 include/linux/dma-mapping.h | 2 +-
13956 include/linux/efi.h | 1 +
13957 include/linux/elf.h | 2 +
13958 include/linux/err.h | 4 +-
13959 include/linux/extcon.h | 2 +-
13960 include/linux/fb.h | 3 +-
13961 include/linux/fdtable.h | 2 +-
13962 include/linux/fs.h | 5 +-
13963 include/linux/fs_struct.h | 2 +-
13964 include/linux/fscache-cache.h | 2 +-
13965 include/linux/fscache.h | 2 +-
13966 include/linux/fsnotify.h | 2 +-
13967 include/linux/genhd.h | 4 +-
13968 include/linux/genl_magic_func.h | 2 +-
13969 include/linux/gfp.h | 12 +-
13970 include/linux/highmem.h | 12 +
13971 include/linux/hwmon-sysfs.h | 6 +-
13972 include/linux/i2c.h | 1 +
13973 include/linux/if_pppox.h | 2 +-
13974 include/linux/init.h | 12 +-
13975 include/linux/init_task.h | 7 +
13976 include/linux/interrupt.h | 6 +-
13977 include/linux/iommu.h | 2 +-
13978 include/linux/ioport.h | 2 +-
13979 include/linux/ipc.h | 2 +-
13980 include/linux/irq.h | 5 +-
13981 include/linux/irqdesc.h | 2 +-
13982 include/linux/irqdomain.h | 3 +
13983 include/linux/jiffies.h | 16 +-
13984 include/linux/key-type.h | 2 +-
13985 include/linux/kgdb.h | 6 +-
13986 include/linux/kmemleak.h | 4 +-
13987 include/linux/kobject.h | 3 +-
13988 include/linux/kobject_ns.h | 2 +-
13989 include/linux/kref.h | 2 +-
13990 include/linux/libata.h | 2 +-
13991 include/linux/linkage.h | 1 +
13992 include/linux/list.h | 15 +
13993 include/linux/lockref.h | 26 +-
13994 include/linux/math64.h | 10 +-
13995 include/linux/mempolicy.h | 7 +
13996 include/linux/mm.h | 102 +-
13997 include/linux/mm_types.h | 20 +
13998 include/linux/mmiotrace.h | 4 +-
13999 include/linux/mmzone.h | 2 +-
14000 include/linux/mod_devicetable.h | 4 +-
14001 include/linux/module.h | 69 +-
14002 include/linux/moduleloader.h | 16 +
14003 include/linux/moduleparam.h | 4 +-
14004 include/linux/net.h | 2 +-
14005 include/linux/netdevice.h | 7 +-
14006 include/linux/netfilter.h | 2 +-
14007 include/linux/netfilter/nfnetlink.h | 2 +-
14008 include/linux/nls.h | 4 +-
14009 include/linux/notifier.h | 3 +-
14010 include/linux/oprofile.h | 4 +-
14011 include/linux/padata.h | 2 +-
14012 include/linux/pci_hotplug.h | 3 +-
14013 include/linux/percpu.h | 2 +-
14014 include/linux/perf_event.h | 12 +-
14015 include/linux/pipe_fs_i.h | 8 +-
14016 include/linux/pm.h | 1 +
14017 include/linux/pm_domain.h | 4 +-
14018 include/linux/pm_runtime.h | 2 +-
14019 include/linux/pnp.h | 2 +-
14020 include/linux/poison.h | 4 +-
14021 include/linux/power/smartreflex.h | 2 +-
14022 include/linux/ppp-comp.h | 2 +-
14023 include/linux/preempt.h | 21 +
14024 include/linux/proc_ns.h | 2 +-
14025 include/linux/psci.h | 2 +-
14026 include/linux/quota.h | 2 +-
14027 include/linux/random.h | 19 +-
14028 include/linux/rculist.h | 16 +
14029 include/linux/reboot.h | 14 +-
14030 include/linux/regset.h | 3 +-
14031 include/linux/relay.h | 2 +-
14032 include/linux/rio.h | 2 +-
14033 include/linux/rmap.h | 4 +-
14034 include/linux/sched.h | 72 +-
14035 include/linux/sched/sysctl.h | 1 +
14036 include/linux/semaphore.h | 2 +-
14037 include/linux/seq_file.h | 1 +
14038 include/linux/signal.h | 2 +-
14039 include/linux/skbuff.h | 12 +-
14040 include/linux/slab.h | 47 +-
14041 include/linux/slab_def.h | 14 +-
14042 include/linux/slub_def.h | 2 +-
14043 include/linux/smp.h | 2 +
14044 include/linux/sock_diag.h | 2 +-
14045 include/linux/sonet.h | 2 +-
14046 include/linux/sunrpc/addr.h | 8 +-
14047 include/linux/sunrpc/clnt.h | 2 +-
14048 include/linux/sunrpc/svc.h | 2 +-
14049 include/linux/sunrpc/svc_rdma.h | 18 +-
14050 include/linux/sunrpc/svcauth.h | 2 +-
14051 include/linux/swapops.h | 10 +-
14052 include/linux/swiotlb.h | 3 +-
14053 include/linux/syscalls.h | 21 +-
14054 include/linux/syscore_ops.h | 2 +-
14055 include/linux/sysctl.h | 3 +-
14056 include/linux/sysfs.h | 9 +-
14057 include/linux/sysrq.h | 3 +-
14058 include/linux/tcp.h | 14 +-
14059 include/linux/thread_info.h | 7 +
14060 include/linux/tty.h | 4 +-
14061 include/linux/tty_driver.h | 2 +-
14062 include/linux/tty_ldisc.h | 2 +-
14063 include/linux/types.h | 16 +
14064 include/linux/uaccess.h | 6 +-
14065 include/linux/uio_driver.h | 2 +-
14066 include/linux/unaligned/access_ok.h | 24 +-
14067 include/linux/usb.h | 12 +-
14068 include/linux/usb/hcd.h | 1 +
14069 include/linux/usb/renesas_usbhs.h | 2 +-
14070 include/linux/vermagic.h | 21 +-
14071 include/linux/vga_switcheroo.h | 8 +-
14072 include/linux/vmalloc.h | 7 +-
14073 include/linux/vmstat.h | 24 +-
14074 include/linux/xattr.h | 5 +-
14075 include/linux/zlib.h | 3 +-
14076 include/media/v4l2-dev.h | 2 +-
14077 include/media/v4l2-device.h | 2 +-
14078 include/net/9p/transport.h | 2 +-
14079 include/net/bluetooth/l2cap.h | 2 +-
14080 include/net/bonding.h | 2 +-
14081 include/net/caif/cfctrl.h | 6 +-
14082 include/net/flow.h | 2 +-
14083 include/net/genetlink.h | 2 +-
14084 include/net/gro_cells.h | 2 +-
14085 include/net/inet_connection_sock.h | 2 +-
14086 include/net/inet_sock.h | 2 +-
14087 include/net/inetpeer.h | 2 +-
14088 include/net/ip_fib.h | 2 +-
14089 include/net/ip_vs.h | 8 +-
14090 include/net/ipv6.h | 2 +-
14091 include/net/irda/ircomm_tty.h | 1 +
14092 include/net/iucv/af_iucv.h | 2 +-
14093 include/net/llc_c_ac.h | 2 +-
14094 include/net/llc_c_ev.h | 4 +-
14095 include/net/llc_c_st.h | 2 +-
14096 include/net/llc_s_ac.h | 2 +-
14097 include/net/llc_s_st.h | 2 +-
14098 include/net/mac80211.h | 4 +-
14099 include/net/neighbour.h | 2 +-
14100 include/net/net_namespace.h | 18 +-
14101 include/net/netlink.h | 2 +-
14102 include/net/netns/conntrack.h | 6 +-
14103 include/net/netns/ipv4.h | 4 +-
14104 include/net/netns/ipv6.h | 4 +-
14105 include/net/netns/xfrm.h | 2 +-
14106 include/net/ping.h | 2 +-
14107 include/net/protocol.h | 4 +-
14108 include/net/rtnetlink.h | 2 +-
14109 include/net/sctp/checksum.h | 4 +-
14110 include/net/sctp/sm.h | 4 +-
14111 include/net/sctp/structs.h | 2 +-
14112 include/net/sock.h | 12 +-
14113 include/net/tcp.h | 8 +-
14114 include/net/xfrm.h | 13 +-
14115 include/rdma/iw_cm.h | 2 +-
14116 include/scsi/libfc.h | 3 +-
14117 include/scsi/scsi_device.h | 6 +-
14118 include/scsi/scsi_driver.h | 2 +-
14119 include/scsi/scsi_transport_fc.h | 3 +-
14120 include/scsi/sg.h | 2 +-
14121 include/sound/compress_driver.h | 2 +-
14122 include/sound/soc.h | 4 +-
14123 include/trace/events/irq.h | 4 +-
14124 include/uapi/linux/a.out.h | 8 +
14125 include/uapi/linux/bcache.h | 5 +-
14126 include/uapi/linux/byteorder/little_endian.h | 28 +-
14127 include/uapi/linux/connector.h | 2 +-
14128 include/uapi/linux/elf.h | 28 +
14129 include/uapi/linux/screen_info.h | 3 +-
14130 include/uapi/linux/swab.h | 6 +-
14131 include/uapi/linux/xattr.h | 4 +
14132 include/video/udlfb.h | 8 +-
14133 include/video/uvesafb.h | 1 +
14134 init/Kconfig | 2 +-
14135 init/Makefile | 3 +
14136 init/do_mounts.c | 14 +-
14137 init/do_mounts.h | 8 +-
14138 init/do_mounts_initrd.c | 30 +-
14139 init/do_mounts_md.c | 6 +-
14140 init/init_task.c | 4 +
14141 init/initramfs.c | 38 +-
14142 init/main.c | 30 +-
14143 ipc/compat.c | 4 +-
14144 ipc/ipc_sysctl.c | 8 +-
14145 ipc/mq_sysctl.c | 4 +-
14146 ipc/sem.c | 4 +-
14147 ipc/shm.c | 6 +
14148 kernel/audit.c | 8 +-
14149 kernel/auditsc.c | 4 +-
14150 kernel/bpf/core.c | 7 +-
14151 kernel/capability.c | 3 +
14152 kernel/compat.c | 38 +-
14153 kernel/debug/debug_core.c | 16 +-
14154 kernel/debug/kdb/kdb_main.c | 4 +-
14155 kernel/events/core.c | 26 +-
14156 kernel/events/internal.h | 10 +-
14157 kernel/events/uprobes.c | 2 +-
14158 kernel/exit.c | 2 +-
14159 kernel/fork.c | 167 +-
14160 kernel/futex.c | 11 +-
14161 kernel/futex_compat.c | 2 +-
14162 kernel/gcov/base.c | 7 +-
14163 kernel/irq/manage.c | 2 +-
14164 kernel/irq/msi.c | 19 +-
14165 kernel/irq/spurious.c | 2 +-
14166 kernel/jump_label.c | 5 +
14167 kernel/kallsyms.c | 37 +-
14168 kernel/kexec.c | 3 +-
14169 kernel/kmod.c | 8 +-
14170 kernel/kprobes.c | 4 +-
14171 kernel/ksysfs.c | 2 +-
14172 kernel/locking/lockdep.c | 7 +-
14173 kernel/locking/mutex-debug.c | 12 +-
14174 kernel/locking/mutex-debug.h | 4 +-
14175 kernel/locking/mutex.c | 6 +-
14176 kernel/module.c | 422 +-
14177 kernel/notifier.c | 17 +-
14178 kernel/padata.c | 4 +-
14179 kernel/panic.c | 5 +-
14180 kernel/pid.c | 2 +-
14181 kernel/pid_namespace.c | 2 +-
14182 kernel/power/process.c | 12 +-
14183 kernel/profile.c | 14 +-
14184 kernel/ptrace.c | 8 +-
14185 kernel/rcu/rcutorture.c | 60 +-
14186 kernel/rcu/tiny.c | 4 +-
14187 kernel/rcu/tree.c | 44 +-
14188 kernel/rcu/tree.h | 14 +-
14189 kernel/rcu/tree_plugin.h | 14 +-
14190 kernel/rcu/tree_trace.c | 12 +-
14191 kernel/sched/auto_group.c | 4 +-
14192 kernel/sched/core.c | 45 +-
14193 kernel/sched/fair.c | 2 +-
14194 kernel/sched/sched.h | 2 +-
14195 kernel/signal.c | 12 +-
14196 kernel/smpboot.c | 4 +-
14197 kernel/softirq.c | 12 +-
14198 kernel/sys.c | 10 +-
14199 kernel/sysctl.c | 34 +-
14200 kernel/time/alarmtimer.c | 2 +-
14201 kernel/time/posix-cpu-timers.c | 4 +-
14202 kernel/time/posix-timers.c | 24 +-
14203 kernel/time/timer.c | 2 +-
14204 kernel/time/timer_stats.c | 10 +-
14205 kernel/trace/blktrace.c | 6 +-
14206 kernel/trace/ftrace.c | 15 +-
14207 kernel/trace/ring_buffer.c | 96 +-
14208 kernel/trace/trace.c | 2 +-
14209 kernel/trace/trace.h | 2 +-
14210 kernel/trace/trace_clock.c | 4 +-
14211 kernel/trace/trace_events.c | 1 -
14212 kernel/trace/trace_functions_graph.c | 4 +-
14213 kernel/trace/trace_mmiotrace.c | 8 +-
14214 kernel/trace/trace_output.c | 10 +-
14215 kernel/trace/trace_seq.c | 2 +-
14216 kernel/trace/trace_stack.c | 2 +-
14217 kernel/user_namespace.c | 2 +-
14218 kernel/utsname_sysctl.c | 2 +-
14219 kernel/watchdog.c | 2 +-
14220 kernel/workqueue.c | 2 +-
14221 lib/Kconfig.debug | 8 +-
14222 lib/Makefile | 2 +-
14223 lib/bitmap.c | 8 +-
14224 lib/bug.c | 2 +
14225 lib/debugobjects.c | 2 +-
14226 lib/decompress_bunzip2.c | 3 +-
14227 lib/decompress_unlzma.c | 4 +-
14228 lib/div64.c | 4 +-
14229 lib/dma-debug.c | 4 +-
14230 lib/inflate.c | 2 +-
14231 lib/ioremap.c | 4 +-
14232 lib/kobject.c | 4 +-
14233 lib/list_debug.c | 126 +-
14234 lib/lockref.c | 44 +-
14235 lib/percpu-refcount.c | 2 +-
14236 lib/radix-tree.c | 2 +-
14237 lib/random32.c | 2 +-
14238 lib/show_mem.c | 2 +-
14239 lib/strncpy_from_user.c | 2 +-
14240 lib/strnlen_user.c | 2 +-
14241 lib/swiotlb.c | 2 +-
14242 lib/usercopy.c | 6 +
14243 lib/vsprintf.c | 12 +-
14244 mm/Kconfig | 6 +-
14245 mm/backing-dev.c | 4 +-
14246 mm/debug.c | 3 +
14247 mm/filemap.c | 2 +-
14248 mm/gup.c | 13 +-
14249 mm/highmem.c | 6 +-
14250 mm/hugetlb.c | 70 +-
14251 mm/internal.h | 1 +
14252 mm/maccess.c | 4 +-
14253 mm/madvise.c | 37 +
14254 mm/memory-failure.c | 6 +-
14255 mm/memory.c | 424 +-
14256 mm/mempolicy.c | 25 +
14257 mm/mlock.c | 15 +-
14258 mm/mm_init.c | 2 +-
14259 mm/mmap.c | 582 +-
14260 mm/mprotect.c | 137 +-
14261 mm/mremap.c | 39 +-
14262 mm/nommu.c | 21 +-
14263 mm/page-writeback.c | 2 +-
14264 mm/page_alloc.c | 49 +-
14265 mm/percpu.c | 2 +-
14266 mm/process_vm_access.c | 14 +-
14267 mm/rmap.c | 45 +-
14268 mm/shmem.c | 19 +-
14269 mm/slab.c | 109 +-
14270 mm/slab.h | 22 +-
14271 mm/slab_common.c | 86 +-
14272 mm/slob.c | 218 +-
14273 mm/slub.c | 102 +-
14274 mm/sparse-vmemmap.c | 4 +-
14275 mm/sparse.c | 2 +-
14276 mm/swap.c | 2 +
14277 mm/swapfile.c | 12 +-
14278 mm/util.c | 6 +
14279 mm/vmalloc.c | 114 +-
14280 mm/vmstat.c | 12 +-
14281 net/8021q/vlan.c | 5 +-
14282 net/8021q/vlan_netlink.c | 2 +-
14283 net/9p/mod.c | 4 +-
14284 net/9p/trans_fd.c | 2 +-
14285 net/atm/atm_misc.c | 8 +-
14286 net/atm/lec.h | 2 +-
14287 net/atm/proc.c | 6 +-
14288 net/atm/resources.c | 4 +-
14289 net/ax25/sysctl_net_ax25.c | 2 +-
14290 net/batman-adv/bat_iv_ogm.c | 8 +-
14291 net/batman-adv/fragmentation.c | 2 +-
14292 net/batman-adv/soft-interface.c | 8 +-
14293 net/batman-adv/types.h | 6 +-
14294 net/bluetooth/hci_sock.c | 2 +-
14295 net/bluetooth/l2cap_core.c | 6 +-
14296 net/bluetooth/l2cap_sock.c | 12 +-
14297 net/bluetooth/rfcomm/sock.c | 4 +-
14298 net/bluetooth/rfcomm/tty.c | 4 +-
14299 net/bridge/br_netlink.c | 2 +-
14300 net/bridge/netfilter/ebtables.c | 6 +-
14301 net/caif/cfctrl.c | 11 +-
14302 net/caif/chnl_net.c | 2 +-
14303 net/can/af_can.c | 2 +-
14304 net/can/gw.c | 6 +-
14305 net/ceph/messenger.c | 4 +-
14306 net/compat.c | 24 +-
14307 net/core/datagram.c | 2 +-
14308 net/core/dev.c | 16 +-
14309 net/core/filter.c | 2 +-
14310 net/core/flow.c | 6 +-
14311 net/core/neighbour.c | 4 +-
14312 net/core/net-sysfs.c | 2 +-
14313 net/core/net_namespace.c | 8 +-
14314 net/core/netpoll.c | 4 +-
14315 net/core/rtnetlink.c | 15 +-
14316 net/core/scm.c | 14 +-
14317 net/core/skbuff.c | 8 +-
14318 net/core/sock.c | 28 +-
14319 net/core/sock_diag.c | 15 +-
14320 net/core/sysctl_net_core.c | 22 +-
14321 net/decnet/af_decnet.c | 1 +
14322 net/decnet/sysctl_net_decnet.c | 4 +-
14323 net/dsa/dsa.c | 2 +-
14324 net/hsr/hsr_netlink.c | 2 +-
14325 net/ieee802154/6lowpan/core.c | 2 +-
14326 net/ieee802154/6lowpan/reassembly.c | 14 +-
14327 net/ipv4/af_inet.c | 2 +-
14328 net/ipv4/devinet.c | 18 +-
14329 net/ipv4/fib_frontend.c | 6 +-
14330 net/ipv4/fib_semantics.c | 2 +-
14331 net/ipv4/inet_connection_sock.c | 4 +-
14332 net/ipv4/inet_timewait_sock.c | 2 +-
14333 net/ipv4/inetpeer.c | 2 +-
14334 net/ipv4/ip_fragment.c | 15 +-
14335 net/ipv4/ip_gre.c | 6 +-
14336 net/ipv4/ip_sockglue.c | 2 +-
14337 net/ipv4/ip_vti.c | 4 +-
14338 net/ipv4/ipconfig.c | 6 +-
14339 net/ipv4/ipip.c | 4 +-
14340 net/ipv4/netfilter/arp_tables.c | 12 +-
14341 net/ipv4/netfilter/ip_tables.c | 12 +-
14342 net/ipv4/ping.c | 14 +-
14343 net/ipv4/raw.c | 14 +-
14344 net/ipv4/route.c | 32 +-
14345 net/ipv4/sysctl_net_ipv4.c | 22 +-
14346 net/ipv4/tcp_input.c | 6 +-
14347 net/ipv4/tcp_probe.c | 2 +-
14348 net/ipv4/udp.c | 10 +-
14349 net/ipv4/xfrm4_policy.c | 18 +-
14350 net/ipv6/addrconf.c | 18 +-
14351 net/ipv6/af_inet6.c | 2 +-
14352 net/ipv6/datagram.c | 2 +-
14353 net/ipv6/icmp.c | 2 +-
14354 net/ipv6/ip6_fib.c | 4 +-
14355 net/ipv6/ip6_gre.c | 10 +-
14356 net/ipv6/ip6_tunnel.c | 4 +-
14357 net/ipv6/ip6_vti.c | 4 +-
14358 net/ipv6/ipv6_sockglue.c | 2 +-
14359 net/ipv6/netfilter/ip6_tables.c | 12 +-
14360 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
14361 net/ipv6/ping.c | 33 +-
14362 net/ipv6/raw.c | 17 +-
14363 net/ipv6/reassembly.c | 13 +-
14364 net/ipv6/route.c | 2 +-
14365 net/ipv6/sit.c | 4 +-
14366 net/ipv6/sysctl_net_ipv6.c | 2 +-
14367 net/ipv6/udp.c | 6 +-
14368 net/ipv6/xfrm6_policy.c | 17 +-
14369 net/irda/ircomm/ircomm_tty.c | 18 +-
14370 net/iucv/af_iucv.c | 4 +-
14371 net/iucv/iucv.c | 2 +-
14372 net/key/af_key.c | 4 +-
14373 net/l2tp/l2tp_eth.c | 38 +-
14374 net/l2tp/l2tp_ip.c | 2 +-
14375 net/l2tp/l2tp_ip6.c | 2 +-
14376 net/mac80211/cfg.c | 8 +-
14377 net/mac80211/ieee80211_i.h | 3 +-
14378 net/mac80211/iface.c | 20 +-
14379 net/mac80211/main.c | 2 +-
14380 net/mac80211/pm.c | 4 +-
14381 net/mac80211/rate.c | 2 +-
14382 net/mac80211/sta_info.c | 2 +-
14383 net/mac80211/util.c | 8 +-
14384 net/mpls/af_mpls.c | 6 +-
14385 net/netfilter/ipset/ip_set_core.c | 2 +-
14386 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
14387 net/netfilter/ipvs/ip_vs_core.c | 4 +-
14388 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
14389 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
14390 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
14391 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
14392 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
14393 net/netfilter/nf_conntrack_acct.c | 2 +-
14394 net/netfilter/nf_conntrack_ecache.c | 2 +-
14395 net/netfilter/nf_conntrack_helper.c | 2 +-
14396 net/netfilter/nf_conntrack_proto.c | 2 +-
14397 net/netfilter/nf_conntrack_standalone.c | 2 +-
14398 net/netfilter/nf_conntrack_timestamp.c | 2 +-
14399 net/netfilter/nf_log.c | 10 +-
14400 net/netfilter/nf_sockopt.c | 4 +-
14401 net/netfilter/nfnetlink_log.c | 4 +-
14402 net/netfilter/nft_compat.c | 9 +-
14403 net/netfilter/xt_statistic.c | 8 +-
14404 net/netlink/af_netlink.c | 4 +-
14405 net/openvswitch/vport-internal_dev.c | 2 +-
14406 net/packet/af_packet.c | 8 +-
14407 net/phonet/pep.c | 6 +-
14408 net/phonet/socket.c | 2 +-
14409 net/phonet/sysctl.c | 2 +-
14410 net/rds/cong.c | 6 +-
14411 net/rds/ib.h | 2 +-
14412 net/rds/ib_cm.c | 2 +-
14413 net/rds/ib_recv.c | 4 +-
14414 net/rds/iw.h | 2 +-
14415 net/rds/iw_cm.c | 2 +-
14416 net/rds/iw_recv.c | 4 +-
14417 net/rds/rds.h | 2 +-
14418 net/rds/tcp.c | 2 +-
14419 net/rds/tcp_send.c | 2 +-
14420 net/rxrpc/af_rxrpc.c | 2 +-
14421 net/rxrpc/ar-ack.c | 14 +-
14422 net/rxrpc/ar-call.c | 2 +-
14423 net/rxrpc/ar-connection.c | 2 +-
14424 net/rxrpc/ar-connevent.c | 2 +-
14425 net/rxrpc/ar-input.c | 4 +-
14426 net/rxrpc/ar-internal.h | 8 +-
14427 net/rxrpc/ar-local.c | 2 +-
14428 net/rxrpc/ar-output.c | 4 +-
14429 net/rxrpc/ar-peer.c | 2 +-
14430 net/rxrpc/ar-proc.c | 4 +-
14431 net/rxrpc/ar-transport.c | 2 +-
14432 net/rxrpc/rxkad.c | 4 +-
14433 net/sched/sch_generic.c | 4 +-
14434 net/sctp/ipv6.c | 6 +-
14435 net/sctp/protocol.c | 10 +-
14436 net/sctp/sm_sideeffect.c | 2 +-
14437 net/sctp/socket.c | 21 +-
14438 net/sctp/sysctl.c | 10 +-
14439 net/socket.c | 18 +-
14440 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
14441 net/sunrpc/clnt.c | 4 +-
14442 net/sunrpc/sched.c | 4 +-
14443 net/sunrpc/svc.c | 4 +-
14444 net/sunrpc/svcauth_unix.c | 2 +-
14445 net/sunrpc/xprtrdma/svc_rdma.c | 38 +-
14446 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
14447 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
14448 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
14449 net/tipc/netlink_compat.c | 12 +-
14450 net/tipc/subscr.c | 2 +-
14451 net/unix/af_unix.c | 7 +-
14452 net/unix/sysctl_net_unix.c | 2 +-
14453 net/wireless/wext-core.c | 19 +-
14454 net/xfrm/xfrm_policy.c | 16 +-
14455 net/xfrm/xfrm_state.c | 33 +-
14456 net/xfrm/xfrm_sysctl.c | 2 +-
14457 scripts/Kbuild.include | 2 +-
14458 scripts/Makefile.build | 2 +-
14459 scripts/Makefile.clean | 3 +-
14460 scripts/Makefile.host | 69 +-
14461 scripts/basic/fixdep.c | 12 +-
14462 scripts/dtc/checks.c | 14 +-
14463 scripts/dtc/data.c | 6 +-
14464 scripts/dtc/flattree.c | 8 +-
14465 scripts/dtc/livetree.c | 4 +-
14466 scripts/gcc-plugin.sh | 51 +
14467 scripts/headers_install.sh | 1 +
14468 scripts/kallsyms.c | 4 +-
14469 scripts/kconfig/lkc.h | 5 +-
14470 scripts/kconfig/menu.c | 2 +-
14471 scripts/kconfig/symbol.c | 6 +-
14472 scripts/link-vmlinux.sh | 2 +-
14473 scripts/mod/file2alias.c | 14 +-
14474 scripts/mod/modpost.c | 25 +-
14475 scripts/mod/modpost.h | 6 +-
14476 scripts/mod/sumversion.c | 2 +-
14477 scripts/module-common.lds | 4 +
14478 scripts/package/builddeb | 1 +
14479 scripts/pnmtologo.c | 6 +-
14480 scripts/sortextable.h | 6 +-
14481 scripts/tags.sh | 2 +-
14482 security/Kconfig | 692 +-
14483 security/integrity/ima/ima.h | 4 +-
14484 security/integrity/ima/ima_api.c | 2 +-
14485 security/integrity/ima/ima_fs.c | 4 +-
14486 security/integrity/ima/ima_queue.c | 2 +-
14487 security/keys/key.c | 18 +-
14488 security/selinux/avc.c | 6 +-
14489 security/selinux/include/xfrm.h | 2 +-
14490 security/yama/yama_lsm.c | 2 +-
14491 sound/aoa/codecs/onyx.c | 7 +-
14492 sound/aoa/codecs/onyx.h | 1 +
14493 sound/core/oss/pcm_oss.c | 18 +-
14494 sound/core/pcm_compat.c | 2 +-
14495 sound/core/pcm_native.c | 4 +-
14496 sound/core/sound.c | 2 +-
14497 sound/drivers/mts64.c | 14 +-
14498 sound/drivers/opl4/opl4_lib.c | 2 +-
14499 sound/drivers/portman2x4.c | 3 +-
14500 sound/firewire/amdtp.c | 4 +-
14501 sound/firewire/amdtp.h | 4 +-
14502 sound/firewire/isight.c | 10 +-
14503 sound/firewire/scs1x.c | 8 +-
14504 sound/oss/sb_audio.c | 2 +-
14505 sound/oss/swarm_cs4297a.c | 6 +-
14506 sound/pci/hda/hda_codec.c | 2 +-
14507 sound/pci/ymfpci/ymfpci.h | 2 +-
14508 sound/pci/ymfpci/ymfpci_main.c | 12 +-
14509 sound/soc/codecs/sti-sas.c | 10 +-
14510 sound/soc/soc-ac97.c | 6 +-
14511 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
14512 tools/gcc/Makefile | 42 +
14513 tools/gcc/checker_plugin.c | 150 +
14514 tools/gcc/colorize_plugin.c | 215 +
14515 tools/gcc/constify_plugin.c | 571 +
14516 tools/gcc/gcc-common.h | 812 +
14517 tools/gcc/initify_plugin.c | 552 +
14518 tools/gcc/kallocstat_plugin.c | 188 +
14519 tools/gcc/kernexec_plugin.c | 549 +
14520 tools/gcc/latent_entropy_plugin.c | 470 +
14521 tools/gcc/size_overflow_plugin/.gitignore | 2 +
14522 tools/gcc/size_overflow_plugin/Makefile | 28 +
14523 .../disable_size_overflow_hash.data |12422 ++++++++++++
14524 .../generate_size_overflow_hash.sh | 103 +
14525 .../insert_size_overflow_asm.c | 416 +
14526 .../size_overflow_plugin/intentional_overflow.c | 1010 +
14527 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
14528 tools/gcc/size_overflow_plugin/size_overflow.h | 323 +
14529 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
14530 .../size_overflow_plugin/size_overflow_hash.data |20735 ++++++++++++++++++++
14531 .../size_overflow_hash_aux.data | 92 +
14532 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 ++
14533 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
14534 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
14535 .../size_overflow_plugin_hash.c | 352 +
14536 .../size_overflow_plugin/size_overflow_transform.c | 749 +
14537 .../size_overflow_transform_core.c | 1010 +
14538 tools/gcc/stackleak_plugin.c | 436 +
14539 tools/gcc/structleak_plugin.c | 287 +
14540 tools/include/linux/compiler.h | 8 +
14541 tools/lib/api/Makefile | 2 +-
14542 tools/perf/util/include/asm/alternative-asm.h | 3 +
14543 tools/virtio/linux/uaccess.h | 2 +-
14544 virt/kvm/kvm_main.c | 42 +-
14545 1944 files changed, 66925 insertions(+), 8949 deletions(-)
14546 commit 87790bbd0d8dc2bd7fd86cb947e32886db9e9766
14547 Author: Matthew Wilcox <willy@linux.intel.com>
14548 Date: Tue Feb 2 16:57:52 2016 -0800
14549
14550 radix-tree: fix race in gang lookup
14551
14552 If the indirect_ptr bit is set on a slot, that indicates we need to redo
14553 the lookup. Introduce a new function radix_tree_iter_retry() which
14554 forces the loop to retry the lookup by setting 'slot' to NULL and
14555 turning the iterator back to point at the problematic entry.
14556
14557 This is a pretty rare problem to hit at the moment; the lookup has to
14558 race with a grow of the radix tree from a height of 0. The consequences
14559 of hitting this race are that gang lookup could return a pointer to a
14560 radix_tree_node instead of a pointer to whatever the user had inserted
14561 in the tree.
14562
14563 Fixes: cebbd29e1c2f ("radix-tree: rewrite gang lookup using iterator")
14564 Signed-off-by: Matthew Wilcox <willy@linux.intel.com>
14565 Cc: Hugh Dickins <hughd@google.com>
14566 Cc: Ohad Ben-Cohen <ohad@wizery.com>
14567 Cc: Konstantin Khlebnikov <khlebnikov@openvz.org>
14568 Cc: <stable@vger.kernel.org>
14569 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14570 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14571
14572 include/linux/radix-tree.h | 16 ++++++++++++++++
14573 lib/radix-tree.c | 12 ++++++++++--
14574 2 files changed, 26 insertions(+), 2 deletions(-)
14575
14576 commit bf628043b4589c910919a0f221ae7f42aa8cea93
14577 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
14578 Date: Wed Feb 3 02:11:03 2016 +0100
14579
14580 unix: correctly track in-flight fds in sending process user_struct
14581
14582 The commit referenced in the Fixes tag incorrectly accounted the number
14583 of in-flight fds over a unix domain socket to the original opener
14584 of the file-descriptor. This allows another process to arbitrary
14585 deplete the original file-openers resource limit for the maximum of
14586 open files. Instead the sending processes and its struct cred should
14587 be credited.
14588
14589 To do so, we add a reference counted struct user_struct pointer to the
14590 scm_fp_list and use it to account for the number of inflight unix fds.
14591
14592 Fixes: 712f4aad406bb1 ("unix: properly account for FDs passed over unix sockets")
14593 Reported-by: David Herrmann <dh.herrmann@gmail.com>
14594 Cc: David Herrmann <dh.herrmann@gmail.com>
14595 Cc: Willy Tarreau <w@1wt.eu>
14596 Cc: Linus Torvalds <torvalds@linux-foundation.org>
14597 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
14598 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
14599 Signed-off-by: David S. Miller <davem@davemloft.net>
14600
14601 include/net/af_unix.h | 4 ++--
14602 include/net/scm.h | 1 +
14603 net/core/scm.c | 7 +++++++
14604 net/unix/af_unix.c | 4 ++--
14605 net/unix/garbage.c | 8 ++++----
14606 5 files changed, 16 insertions(+), 8 deletions(-)
14607
14608 commit e830db443ff78d70b7b63536e688d73907face0c
14609 Author: Mike Kravetz <mike.kravetz@oracle.com>
14610 Date: Fri Jan 15 16:57:37 2016 -0800
14611
14612 fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list()
14613
14614 Hillf Danton noticed bugs in the hugetlb_vmtruncate_list routine. The
14615 argument end is of type pgoff_t. It was being converted to a vaddr
14616 offset and passed to unmap_hugepage_range. However, end was also being
14617 used as an argument to the vma_interval_tree_foreach controlling loop.
14618 In addition, the conversion of end to vaddr offset was incorrect.
14619
14620 hugetlb_vmtruncate_list is called as part of a file truncate or
14621 fallocate hole punch operation.
14622
14623 When truncating a hugetlbfs file, this bug could prevent some pages from
14624 being unmapped. This is possible if there are multiple vmas mapping the
14625 file, and there is a sufficiently sized hole between the mappings. The
14626 size of the hole between two vmas (A,B) must be such that the starting
14627 virtual address of B is greater than (ending virtual address of A <<
14628 PAGE_SHIFT). In this case, the pages in B would not be unmapped. If
14629 pages are not properly unmapped during truncate, the following BUG is
14630 hit:
14631
14632 kernel BUG at fs/hugetlbfs/inode.c:428!
14633
14634 In the fallocate hole punch case, this bug could prevent pages from
14635 being unmapped as in the truncate case. However, for hole punch the
14636 result is that unmapped pages will not be removed during the operation.
14637 For hole punch, it is also possible that more pages than desired will be
14638 unmapped. This unnecessary unmapping will cause page faults to
14639 reestablish the mappings on subsequent page access.
14640
14641 Fixes: 1bfad99ab (" hugetlbfs: hugetlb_vmtruncate_list() needs to take a range")Reported-by: Hillf Danton <hillf.zj@alibaba-inc.com>
14642 Signed-off-by: Mike Kravetz <mike.kravetz@oracle.com>
14643 Cc: Hugh Dickins <hughd@google.com>
14644 Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
14645 Cc: Davidlohr Bueso <dave@stgolabs.net>
14646 Cc: Dave Hansen <dave.hansen@linux.intel.com>
14647 Cc: <stable@vger.kernel.org> [4.3]
14648 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14649 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14650
14651 fs/hugetlbfs/inode.c | 19 +++++++++++--------
14652 1 files changed, 11 insertions(+), 8 deletions(-)
14653
14654 commit cdb3ba4a9113b779347387f3b6c6ea72dd4db12f
14655 Author: Takashi Iwai <tiwai@suse.de>
14656 Date: Thu Feb 4 17:06:13 2016 +0100
14657
14658 ALSA: timer: Fix leftover link at closing
14659
14660 In ALSA timer core, the active timer instance is managed in
14661 active_list linked list. Each element is added / removed dynamically
14662 at timer start, stop and in timer interrupt. The problem is that
14663 snd_timer_interrupt() has a thinko and leaves the element in
14664 active_list when it's the last opened element. This eventually leads
14665 to list corruption or use-after-free error.
14666
14667 This hasn't been revealed because we used to delete the list forcibly
14668 in snd_timer_stop() in the past. However, the recent fix avoids the
14669 double-stop behavior (in commit [f784beb75ce8: ALSA: timer: Fix link
14670 corruption due to double start or stop]), and this leak hits reality.
14671
14672 This patch fixes the link management in snd_timer_interrupt(). Now it
14673 simply unlinks no matter which stream is.
14674
14675 BugLink: http://lkml.kernel.org/r/CACT4Y+Yy2aukHP-EDp8-ziNqNNmb-NTf=jDWXMP7jB8HDa2vng@mail.gmail.com
14676 Reported-by: Dmitry Vyukov <dvyukov@google.com>
14677 Cc: <stable@vger.kernel.org>
14678 Signed-off-by: Takashi Iwai <tiwai@suse.de>
14679
14680 sound/core/timer.c | 4 ++--
14681 1 files changed, 2 insertions(+), 2 deletions(-)
14682
14683 commit 47d9647902f6a2f46a2be1e0140ba0f6f8c06008
14684 Author: Konstantin Khlebnikov <koct9i@gmail.com>
14685 Date: Fri Feb 5 15:37:01 2016 -0800
14686
14687 radix-tree: fix oops after radix_tree_iter_retry
14688
14689 Helper radix_tree_iter_retry() resets next_index to the current index.
14690 In following radix_tree_next_slot current chunk size becomes zero. This
14691 isn't checked and it tries to dereference null pointer in slot.
14692
14693 Tagged iterator is fine because retry happens only at slot 0 where tag
14694 bitmask in iter->tags is filled with single bit.
14695
14696 Fixes: 46437f9a554f ("radix-tree: fix race in gang lookup")
14697 Signed-off-by: Konstantin Khlebnikov <koct9i@gmail.com>
14698 Cc: Matthew Wilcox <willy@linux.intel.com>
14699 Cc: Hugh Dickins <hughd@google.com>
14700 Cc: Ohad Ben-Cohen <ohad@wizery.com>
14701 Cc: Jeremiah Mahler <jmmahler@gmail.com>
14702 Cc: <stable@vger.kernel.org>
14703 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14704 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14705
14706 include/linux/radix-tree.h | 6 +++---
14707 1 files changed, 3 insertions(+), 3 deletions(-)
14708
14709 commit 95b5dcb3c01958502af00b0bc0da1d906aae11a2
14710 Merge: 438be0b 256aeaf
14711 Author: Brad Spengler <spender@grsecurity.net>
14712 Date: Sun Feb 7 08:29:33 2016 -0500
14713
14714 Merge branch 'pax-test' into grsec-test
14715
14716 commit 256aeaf87c22de8edf1f03682a572c590ae07771
14717 Author: Brad Spengler <spender@grsecurity.net>
14718 Date: Sun Feb 7 08:29:09 2016 -0500
14719
14720 Update to pax-linux-4.3.5-test28.patch:
14721 - fixed an integer truncation bug in numa_clear_kernel_node_hotplug caught by the size overflow plugin, reported by x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4374)
14722 - spender fixed UDEREF on arm
14723
14724 arch/arm/Kconfig | 1 +
14725 arch/arm/include/asm/domain.h | 21 ++++++++-
14726 arch/arm/include/asm/futex.h | 9 ----
14727 arch/arm/include/asm/thread_info.h | 3 +
14728 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
14729 arch/arm/kernel/entry-armv.S | 2 +-
14730 arch/arm/kernel/process.c | 2 +-
14731 arch/arm/mm/alignment.c | 8 ----
14732 arch/x86/mm/numa.c | 2 +-
14733 security/Kconfig | 1 -
14734 10 files changed, 60 insertions(+), 70 deletions(-)
14735
14736 commit 438be0bd112bd17942b2628c53054dc1007558a1
14737 Author: Brad Spengler <spender@grsecurity.net>
14738 Date: Sat Feb 6 19:50:31 2016 -0500
14739
14740 Fix a number of issues caused by the upstream merging of a UDEREF ripoff resulting in unbootable
14741 ARM systems reported on the forums
14742
14743 arch/arm/Kconfig | 1 +
14744 arch/arm/include/asm/domain.h | 21 ++++++++-
14745 arch/arm/include/asm/futex.h | 9 ----
14746 arch/arm/include/asm/thread_info.h | 3 +
14747 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
14748 arch/arm/kernel/entry-armv.S | 2 +-
14749 arch/arm/kernel/process.c | 2 +-
14750 arch/arm/mm/alignment.c | 8 ----
14751 security/Kconfig | 1 -
14752 9 files changed, 59 insertions(+), 69 deletions(-)
14753
14754 commit 4ffdd5ef1f87e611af1efb4f251ada92abe9f4c0
14755 Author: Brad Spengler <spender@grsecurity.net>
14756 Date: Sat Feb 6 11:21:53 2016 -0500
14757
14758 Fix another compiler warning
14759
14760 net/ipv4/tcp_input.c | 2 ++
14761 1 files changed, 2 insertions(+), 0 deletions(-)
14762
14763 commit 30b5b7bc0fd67d458bdd5ab35e4689769eabd2ed
14764 Author: Brad Spengler <spender@grsecurity.net>
14765 Date: Sat Feb 6 11:16:12 2016 -0500
14766
14767 Fix two compiler warnings
14768
14769 kernel/pid.c | 5 ++---
14770 kernel/ptrace.c | 3 ++-
14771 2 files changed, 4 insertions(+), 4 deletions(-)
14772
14773 commit dda4d2a21914c480750f10bd55c6e3203d415d8d
14774 Author: Brad Spengler <spender@grsecurity.net>
14775 Date: Wed Feb 3 21:22:40 2016 -0500
14776
14777 Apply fix for integer truncation in NUMA init code, reported by
14778 x14sg1 on the forums:
14779 https://forums.grsecurity.net/viewtopic.php?f=3&t=4374
14780
14781 arch/x86/mm/numa.c | 2 +-
14782 1 files changed, 1 insertions(+), 1 deletions(-)
14783
14784 commit 477505f7c893cb6a2c3e22f83eefd9c985d7b3ca
14785 Merge: a781740 016d0d8
14786 Author: Brad Spengler <spender@grsecurity.net>
14787 Date: Wed Feb 3 21:20:58 2016 -0500
14788
14789 Merge branch 'pax-test' into grsec-test
14790
14791 commit 016d0d81a8dd4be1304c82a68e0ccf425868f467
14792 Author: Brad Spengler <spender@grsecurity.net>
14793 Date: Wed Feb 3 21:20:10 2016 -0500
14794
14795 Update to pax-linux-4.3.5-test27.patch:
14796 - fixed a bunch of potential REFCOUNT false positives, reported by Emese
14797 - restored padding in fpregs_state for storing AVX-512 state in the future
14798 - constified netlink_dump_control
14799 - added const version of debug_gimple_stmt for gcc plugins, by Emese
14800 - Emese fixed a bug in initify that could have initified too much
14801 - Emese fixed a false positive intentional integer overflow in xfrm4_extract_header, reported by corsac
14802
14803 arch/x86/include/asm/fpu/types.h | 1 +
14804 arch/x86/include/asm/mmu_context.h | 2 +-
14805 block/blk-cgroup.c | 18 ++--
14806 block/cfq-iosched.c | 4 +-
14807 crypto/crypto_user.c | 8 ++-
14808 drivers/acpi/apei/ghes.c | 6 +-
14809 drivers/char/ipmi/ipmi_ssif.c | 12 ++--
14810 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
14811 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
14812 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
14813 drivers/infiniband/core/netlink.c | 5 +-
14814 drivers/infiniband/hw/cxgb4/device.c | 6 +-
14815 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
14816 drivers/md/bcache/alloc.c | 2 +-
14817 drivers/md/bcache/bcache.h | 10 +-
14818 drivers/md/bcache/btree.c | 2 +-
14819 drivers/md/bcache/io.c | 10 +-
14820 drivers/md/bcache/journal.c | 2 +-
14821 drivers/md/bcache/stats.c | 26 +++---
14822 drivers/md/bcache/stats.h | 16 ++--
14823 drivers/md/bcache/super.c | 2 +-
14824 drivers/md/bcache/sysfs.c | 20 +++---
14825 drivers/md/dm-cache-target.c | 98 ++++++++++++------------
14826 drivers/md/dm-raid.c | 2 +-
14827 drivers/md/md.c | 6 +-
14828 drivers/md/md.h | 2 +-
14829 drivers/md/raid1.c | 2 +-
14830 drivers/md/raid10.c | 2 +-
14831 drivers/md/raid5.c | 4 +-
14832 drivers/media/pci/zoran/zoran.h | 1 -
14833 drivers/media/pci/zoran/zoran_driver.c | 3 -
14834 drivers/net/ethernet/sfc/selftest.c | 20 +++---
14835 drivers/net/irda/vlsi_ir.c | 18 ++--
14836 drivers/net/irda/vlsi_ir.h | 14 ++--
14837 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
14838 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
14839 drivers/net/wireless/ath/carl9170/main.c | 10 +-
14840 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
14841 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
14842 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
14843 drivers/scsi/hptiop.c | 2 -
14844 drivers/scsi/hptiop.h | 1 -
14845 drivers/scsi/ipr.c | 6 +-
14846 drivers/scsi/ipr.h | 2 +-
14847 drivers/scsi/qla2xxx/qla_target.c | 10 +-
14848 drivers/scsi/qla2xxx/qla_target.h | 2 +-
14849 fs/btrfs/ctree.c | 2 +-
14850 fs/btrfs/ctree.h | 4 +-
14851 fs/btrfs/delayed-ref.c | 4 +-
14852 fs/btrfs/disk-io.c | 4 +-
14853 fs/btrfs/file.c | 4 +-
14854 fs/btrfs/raid56.c | 32 ++++----
14855 fs/btrfs/tests/btrfs-tests.c | 2 +-
14856 fs/btrfs/transaction.c | 2 +-
14857 fs/btrfs/tree-log.c | 8 +-
14858 fs/btrfs/volumes.c | 14 ++--
14859 fs/btrfs/volumes.h | 22 +++---
14860 fs/jbd2/commit.c | 2 +-
14861 fs/jbd2/transaction.c | 4 +-
14862 fs/ocfs2/dlm/dlmcommon.h | 4 +-
14863 fs/ocfs2/dlm/dlmdebug.c | 10 +-
14864 fs/ocfs2/dlm/dlmdomain.c | 4 +-
14865 fs/ocfs2/dlm/dlmmaster.c | 4 +-
14866 include/acpi/ghes.h | 2 +-
14867 include/linux/blk-cgroup.h | 24 +++---
14868 include/linux/jbd2.h | 2 +-
14869 include/linux/netlink.h | 12 ++--
14870 include/net/cfg802154.h | 2 +-
14871 include/net/mac80211.h | 2 +-
14872 include/net/neighbour.h | 2 +-
14873 kernel/rcu/tree_plugin.h | 4 +-
14874 net/batman-adv/routing.c | 4 +-
14875 net/batman-adv/soft-interface.c | 2 +-
14876 net/batman-adv/translation-table.c | 14 ++--
14877 net/batman-adv/types.h | 2 +-
14878 net/core/neighbour.c | 14 ++--
14879 net/core/rtnetlink.c | 2 +-
14880 net/ipv4/arp.c | 2 +-
14881 net/ipv4/inet_diag.c | 4 +-
14882 net/ipv4/xfrm4_state.c | 4 +-
14883 net/ipv6/ndisc.c | 2 +-
14884 net/mac80211/cfg.c | 2 +-
14885 net/mac80211/debugfs_key.c | 2 +-
14886 net/mac80211/key.c | 4 +-
14887 net/mac80211/tx.c | 2 +-
14888 net/mac80211/wpa.c | 10 +-
14889 net/mac802154/iface.c | 4 +-
14890 net/netfilter/ipset/ip_set_core.c | 2 +-
14891 net/netfilter/nf_conntrack_netlink.c | 22 +++---
14892 net/netfilter/nf_tables_api.c | 13 ++--
14893 net/netfilter/nfnetlink_acct.c | 7 +-
14894 net/netfilter/nfnetlink_cthelper.c | 2 +-
14895 net/netfilter/nfnetlink_cttimeout.c | 2 +-
14896 net/netlink/af_netlink.c | 10 ++-
14897 net/netlink/diag.c | 2 +-
14898 net/netlink/genetlink.c | 14 ++--
14899 net/packet/af_packet.c | 18 ++--
14900 net/packet/diag.c | 2 +-
14901 net/packet/internal.h | 6 +-
14902 net/unix/diag.c | 2 +-
14903 net/xfrm/xfrm_user.c | 2 +-
14904 security/apparmor/include/policy.h | 2 +-
14905 security/apparmor/policy.c | 4 +-
14906 sound/core/seq/seq_clientmgr.c | 2 +-
14907 sound/core/seq/seq_fifo.c | 6 +-
14908 sound/core/seq/seq_fifo.h | 2 +-
14909 tools/gcc/gcc-common.h | 24 ++++--
14910 tools/gcc/initify_plugin.c | 7 +-
14911 tools/lib/api/Makefile | 2 +-
14912 109 files changed, 399 insertions(+), 391 deletions(-)
14913
14914 commit a7817402ac837b1aee07fac42537a02097055098
14915 Author: Matt Fleming <matt@codeblueprint.co.uk>
14916 Date: Fri Jan 29 11:36:10 2016 +0000
14917
14918 x86/mm/pat: Avoid truncation when converting cpa->numpages to address
14919
14920 There are a couple of nasty truncation bugs lurking in the pageattr
14921 code that can be triggered when mapping EFI regions, e.g. when we pass
14922 a cpa->pgd pointer. Because cpa->numpages is a 32-bit value, shifting
14923 left by PAGE_SHIFT will truncate the resultant address to 32-bits.
14924
14925 Viorel-Cătălin managed to trigger this bug on his Dell machine that
14926 provides a ~5GB EFI region which requires 1236992 pages to be mapped.
14927 When calling populate_pud() the end of the region gets calculated
14928 incorrectly in the following buggy expression,
14929
14930 end = start + (cpa->numpages << PAGE_SHIFT);
14931
14932 And only 188416 pages are mapped. Next, populate_pud() gets invoked
14933 for a second time because of the loop in __change_page_attr_set_clr(),
14934 only this time no pages get mapped because shifting the remaining
14935 number of pages (1048576) by PAGE_SHIFT is zero. At which point the
14936 loop in __change_page_attr_set_clr() spins forever because we fail to
14937 map progress.
14938
14939 Hitting this bug depends very much on the virtual address we pick to
14940 map the large region at and how many pages we map on the initial run
14941 through the loop. This explains why this issue was only recently hit
14942 with the introduction of commit
14943
14944 a5caa209ba9c ("x86/efi: Fix boot crash by mapping EFI memmap
14945 entries bottom-up at runtime, instead of top-down")
14946
14947 It's interesting to note that safe uses of cpa->numpages do exist in
14948 the pageattr code. If instead of shifting ->numpages we multiply by
14949 PAGE_SIZE, no truncation occurs because PAGE_SIZE is a UL value, and
14950 so the result is unsigned long.
14951
14952 To avoid surprises when users try to convert very large cpa->numpages
14953 values to addresses, change the data type from 'int' to 'unsigned
14954 long', thereby making it suitable for shifting by PAGE_SHIFT without
14955 any type casting.
14956
14957 The alternative would be to make liberal use of casting, but that is
14958 far more likely to cause problems in the future when someone adds more
14959 code and fails to cast properly; this bug was difficult enough to
14960 track down in the first place.
14961
14962 Reported-and-tested-by: Viorel-Cătălin Răpițeanu <rapiteanu.catalin@gmail.com>
14963 Acked-by: Borislav Petkov <bp@alien8.de>
14964 Cc: Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com>
14965 Cc: <stable@vger.kernel.org>
14966 Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
14967 Link: https://bugzilla.kernel.org/show_bug.cgi?id=110131
14968 Link: http://lkml.kernel.org/r/1454067370-10374-1-git-send-email-matt@codeblueprint.co.uk
14969 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
14970
14971 arch/x86/mm/pageattr.c | 4 ++--
14972 1 files changed, 2 insertions(+), 2 deletions(-)
14973
14974 commit 64dd9d7a67a742fda257cdd16510c29e695c34b5
14975 Author: Jan Beulich <JBeulich@suse.com>
14976 Date: Tue Jan 26 04:15:18 2016 -0700
14977
14978 x86/mm: Fix types used in pgprot cacheability flags translations
14979
14980 For PAE kernels "unsigned long" is not suitable to hold page protection
14981 flags, since _PAGE_NX doesn't fit there. This is the reason for quite a
14982 few W+X pages getting reported as insecure during boot (observed namely
14983 for the entire initrd range).
14984
14985 Fixes: 281d4078be ("x86: Make page cache mode a real type")
14986 Signed-off-by: Jan Beulich <jbeulich@suse.com>
14987 Reviewed-by: Juergen Gross <JGross@suse.com>
14988 Cc: stable@vger.kernel.org
14989 Link: http://lkml.kernel.org/r/56A7635602000078000CAFF1@prv-mh.provo.novell.com
14990 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
14991
14992 arch/x86/include/asm/pgtable_types.h | 6 ++----
14993 1 files changed, 2 insertions(+), 4 deletions(-)
14994
14995 commit bb9a3a9df0d8dfc96d521676e64c42b37ba22aea
14996 Merge: 682d661 f74425b
14997 Author: Brad Spengler <spender@grsecurity.net>
14998 Date: Sun Jan 31 15:06:25 2016 -0500
14999
15000 Merge branch 'pax-test' into grsec-test
15001
15002 Conflicts:
15003 drivers/net/slip/slhc.c
15004 include/linux/sched.h
15005 net/unix/af_unix.c
15006 sound/core/timer.c
15007
15008 commit f74425b5705bfe52aff9e97659ef10c4a14176c3
15009 Merge: d14af1f 849a2d3
15010 Author: Brad Spengler <spender@grsecurity.net>
15011 Date: Sun Jan 31 15:02:55 2016 -0500
15012
15013 Merge branch 'linux-4.3.y' into pax-test
15014
15015 Conflicts:
15016 arch/x86/include/asm/mmu_context.h
15017
15018 commit 682d6611d75542e351c973c8dd74a99d3966c073
15019 Author: Brad Spengler <spender@grsecurity.net>
15020 Date: Sat Jan 30 13:05:03 2016 -0500
15021
15022 Based on a report from Mathias Krause, fix up a number of additional instances
15023 of ulong overflow when passing in values to gr_learn_resource by saturating
15024 to ULONG_MAX
15025
15026 mm/mlock.c | 11 ++++++++---
15027 mm/mmap.c | 16 +++++++++++++---
15028 2 files changed, 21 insertions(+), 6 deletions(-)
15029
15030 commit adb52e95fb9ad4ac9c56cd5d47bd668f47c33096
15031 Author: Jann Horn <jann@thejh.net>
15032 Date: Sat Dec 26 06:00:48 2015 +0100
15033
15034 seccomp: always propagate NO_NEW_PRIVS on tsync
15035
15036 Before this patch, a process with some permissive seccomp filter
15037 that was applied by root without NO_NEW_PRIVS was able to add
15038 more filters to itself without setting NO_NEW_PRIVS by setting
15039 the new filter from a throwaway thread with NO_NEW_PRIVS.
15040
15041 Signed-off-by: Jann Horn <jann@thejh.net>
15042 Cc: stable@vger.kernel.org
15043 Signed-off-by: Kees Cook <keescook@chromium.org>
15044
15045 kernel/seccomp.c | 22 +++++++++++-----------
15046 1 files changed, 11 insertions(+), 11 deletions(-)
15047
15048 commit b85450498a3bbf269441c8963d7574bb3079c838
15049 Merge: 59c216f d14af1f
15050 Author: Brad Spengler <spender@grsecurity.net>
15051 Date: Fri Jan 29 20:54:13 2016 -0500
15052
15053 Merge branch 'pax-test' into grsec-test
15054
15055 commit d14af1f1dd66511f3f0674deee2b572972012b39
15056 Author: Brad Spengler <spender@grsecurity.net>
15057 Date: Fri Jan 29 20:53:51 2016 -0500
15058
15059 Update to pax-linux-4.3.4-test26.patch:
15060 - Emese fixed a few intentional overflows introduced by gcc, reported by StalkR (https://forums.grsecurity.net/viewtopic.php?f=3&t=4370)
15061
15062 fs/cifs/file.c | 2 +-
15063 fs/gfs2/file.c | 2 +-
15064 .../size_overflow_plugin/intentional_overflow.c | 96 ++++++++++++++++++--
15065 tools/gcc/size_overflow_plugin/size_overflow.h | 2 +
15066 .../size_overflow_plugin/size_overflow_plugin.c | 4 +-
15067 .../size_overflow_plugin/size_overflow_transform.c | 6 +-
15068 .../size_overflow_transform_core.c | 5 +
15069 7 files changed, 102 insertions(+), 15 deletions(-)
15070
15071 commit 59c216f13587eacdd692386b7a403ae78ed84fb6
15072 Author: Brad Spengler <spender@grsecurity.net>
15073 Date: Wed Jan 27 17:57:21 2016 -0500
15074
15075 Fix a size_overflow report reported by Mathias Krause in our
15076 truncation of an loff_t to an unsigned long when being passed
15077 to gr_learn_resource() (as all resource checks are against unsigned long
15078 values)
15079
15080 fs/attr.c | 5 ++++-
15081 1 files changed, 4 insertions(+), 1 deletions(-)
15082
15083 commit 70636c6ad60fc1db3af764ecc789b827b7497a97
15084 Author: Yuchung Cheng <ycheng@google.com>
15085 Date: Wed Jan 6 12:42:38 2016 -0800
15086
15087 tcp: fix zero cwnd in tcp_cwnd_reduction
15088
15089 Patch 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode
15090 conditionally") introduced a bug that cwnd may become 0 when both
15091 inflight and sndcnt are 0 (cwnd = inflight + sndcnt). This may lead
15092 to a div-by-zero if the connection starts another cwnd reduction
15093 phase by setting tp->prior_cwnd to the current cwnd (0) in
15094 tcp_init_cwnd_reduction().
15095
15096 To prevent this we skip PRR operation when nothing is acked or
15097 sacked. Then cwnd must be positive in all cases as long as ssthresh
15098 is positive:
15099
15100 1) The proportional reduction mode
15101 inflight > ssthresh > 0
15102
15103 2) The reduction bound mode
15104 a) inflight == ssthresh > 0
15105
15106 b) inflight < ssthresh
15107 sndcnt > 0 since newly_acked_sacked > 0 and inflight < ssthresh
15108
15109 Therefore in all cases inflight and sndcnt can not both be 0.
15110 We check invalid tp->prior_cwnd to avoid potential div0 bugs.
15111
15112 In reality this bug is triggered only with a sequence of less common
15113 events. For example, the connection is terminating an ECN-triggered
15114 cwnd reduction with an inflight 0, then it receives reordered/old
15115 ACKs or DSACKs from prior transmission (which acks nothing). Or the
15116 connection is in fast recovery stage that marks everything lost,
15117 but fails to retransmit due to local issues, then receives data
15118 packets from other end which acks nothing.
15119
15120 Fixes: 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode conditionally")
15121 Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name>
15122 Signed-off-by: Yuchung Cheng <ycheng@google.com>
15123 Signed-off-by: Neal Cardwell <ncardwell@google.com>
15124 Signed-off-by: Eric Dumazet <edumazet@google.com>
15125 Signed-off-by: David S. Miller <davem@davemloft.net>
15126
15127 net/ipv4/tcp_input.c | 3 +++
15128 1 files changed, 3 insertions(+), 0 deletions(-)
15129
15130 commit dac1da2bedbb43195d371c7a192cfeeb45683df0
15131 Author: Eric Dumazet <edumazet@google.com>
15132 Date: Sun Jan 24 13:53:50 2016 -0800
15133
15134 af_unix: fix struct pid memory leak
15135
15136 Dmitry reported a struct pid leak detected by a syzkaller program.
15137
15138 Bug happens in unix_stream_recvmsg() when we break the loop when a
15139 signal is pending, without properly releasing scm.
15140
15141 Fixes: b3ca9b02b007 ("net: fix multithreaded signal handling in unix recv routines")
15142 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15143 Signed-off-by: Eric Dumazet <edumazet@google.com>
15144 Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com>
15145 Signed-off-by: David S. Miller <davem@davemloft.net>
15146
15147 net/unix/af_unix.c | 1 +
15148 1 files changed, 1 insertions(+), 0 deletions(-)
15149
15150 commit 15cc47f127520d1ac0c1fe76d993c2c27f0f2571
15151 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
15152 Date: Fri Jan 22 01:39:43 2016 +0100
15153
15154 pptp: fix illegal memory access caused by multiple bind()s
15155
15156 Several times already this has been reported as kasan reports caused by
15157 syzkaller and trinity and people always looked at RCU races, but it is
15158 much more simple. :)
15159
15160 In case we bind a pptp socket multiple times, we simply add it to
15161 the callid_sock list but don't remove the old binding. Thus the old
15162 socket stays in the bucket with unused call_id indexes and doesn't get
15163 cleaned up. This causes various forms of kasan reports which were hard
15164 to pinpoint.
15165
15166 Simply don't allow multiple binds and correct error handling in
15167 pptp_bind. Also keep sk_state bits in place in pptp_connect.
15168
15169 Fixes: 00959ade36acad ("PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)")
15170 Cc: Dmitry Kozlov <xeb@mail.ru>
15171 Cc: Sasha Levin <sasha.levin@oracle.com>
15172 Cc: Dmitry Vyukov <dvyukov@google.com>
15173 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15174 Cc: Dave Jones <davej@codemonkey.org.uk>
15175 Reported-by: Dave Jones <davej@codemonkey.org.uk>
15176 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
15177 Signed-off-by: David S. Miller <davem@davemloft.net>
15178
15179 drivers/net/ppp/pptp.c | 34 ++++++++++++++++++++++++----------
15180 1 files changed, 24 insertions(+), 10 deletions(-)
15181
15182 commit e2b7b8c66851c85188fa6dab2d2b2a6c85bc7332
15183 Author: Brad Spengler <spender@grsecurity.net>
15184 Date: Tue Jan 26 18:17:10 2016 -0500
15185
15186 Add info about cpupower/powertop to GRKERNSEC_KMEM, was present on our
15187 wiki but was removed from the config help at some point
15188
15189 grsecurity/Kconfig | 3 +++
15190 1 files changed, 3 insertions(+), 0 deletions(-)
15191
15192 commit ce2e88efa000fc32bfcd84098f57c8ed8310fefc
15193 Author: Thomas Egerer <hakke_007@gmx.de>
15194 Date: Mon Jan 25 12:58:44 2016 +0100
15195
15196 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV
15197
15198 The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
15199 to select CRYPTO_ECHAINIV in order to work properly. This solves the
15200 issues caused by a misconfiguration as described in [1].
15201 The original approach, patching crypto/Kconfig was turned down by
15202 Herbert Xu [2].
15203
15204 [1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
15205 [2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2
15206
15207 Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
15208 Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
15209 Signed-off-by: David S. Miller <davem@davemloft.net>
15210
15211 net/ipv4/Kconfig | 1 +
15212 net/ipv6/Kconfig | 1 +
15213 2 files changed, 2 insertions(+), 0 deletions(-)
15214
15215 commit fca5a303155ea67d28aece0caf2b03ffc3b2668d
15216 Merge: 904114c 6339c1f
15217 Author: Brad Spengler <spender@grsecurity.net>
15218 Date: Tue Jan 26 18:08:40 2016 -0500
15219
15220 Merge branch 'pax-test' into grsec-test
15221
15222 commit 6339c1f9a9beafd417bf9f04d4b257e62aeb45b7
15223 Author: Brad Spengler <spender@grsecurity.net>
15224 Date: Tue Jan 26 18:07:51 2016 -0500
15225
15226 Update to pax-linux-4.3.4-test25.patch:
15227 - fixed incorrect handling of VM_DONTCOPY during fork that would trigger a consistency check in the vma mirroring logic, reported by Mathias Krause <minipli@googlemail.com>
15228 - fixed init_new_context on !MODIFY_LDT_SYSCALL configs, reported by tjh (https://forums.grsecurity.net/viewtopic.php?f=3&t=4368)
15229 - fixed a few REFCOUNT false positives in SNMP related statistics
15230
15231 arch/x86/Kconfig | 2 +-
15232 arch/x86/include/asm/mmu_context.h | 17 +++++++++++++++++
15233 include/net/snmp.h | 10 +++++-----
15234 kernel/fork.c | 11 +++++++++--
15235 net/ipv4/proc.c | 8 ++++----
15236 net/ipv6/addrconf.c | 4 ++--
15237 net/ipv6/proc.c | 10 +++++-----
15238 7 files changed, 43 insertions(+), 19 deletions(-)
15239
15240 commit 904114c2fce3fdff5d57e763da56a78960db4e19
15241 Author: Al Viro <viro@zeniv.linux.org.uk>
15242 Date: Fri Jan 22 18:08:52 2016 -0500
15243
15244 make sure that freeing shmem fast symlinks is RCU-delayed
15245
15246 Cc: stable@vger.kernel.org # v4.2+
15247 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15248
15249 include/linux/shmem_fs.h | 5 +----
15250 mm/shmem.c | 9 ++++-----
15251 2 files changed, 5 insertions(+), 9 deletions(-)
15252
15253 commit ab86adee64312a2f827dd516cb199521327943ed
15254 Author: Sasha Levin <sasha.levin@oracle.com>
15255 Date: Mon Jan 18 19:23:51 2016 -0500
15256
15257 netfilter: nf_conntrack: use safer way to lock all buckets
15258
15259 When we need to lock all buckets in the connection hashtable we'd attempt to
15260 lock 1024 spinlocks, which is way more preemption levels than supported by
15261 the kernel. Furthermore, this behavior was hidden by checking if lockdep is
15262 enabled, and if it was - use only 8 buckets(!).
15263
15264 Fix this by using a global lock and synchronize all buckets on it when we
15265 need to lock them all. This is pretty heavyweight, but is only done when we
15266 need to resize the hashtable, and that doesn't happen often enough (or at all).
15267
15268 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
15269 Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
15270 Reviewed-by: Florian Westphal <fw@strlen.de>
15271 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
15272
15273 Conflicts:
15274
15275 net/netfilter/nfnetlink_cttimeout.c
15276
15277 include/net/netfilter/nf_conntrack_core.h | 8 ++----
15278 net/netfilter/nf_conntrack_core.c | 38 +++++++++++++++++++++-------
15279 net/netfilter/nf_conntrack_helper.c | 2 +-
15280 net/netfilter/nf_conntrack_netlink.c | 2 +-
15281 4 files changed, 33 insertions(+), 17 deletions(-)
15282
15283 commit 37014723527225481c720484bb788a1a6358072f
15284 Author: Willy Tarreau <w@1wt.eu>
15285 Date: Mon Jan 18 16:36:09 2016 +0100
15286
15287 pipe: limit the per-user amount of pages allocated in pipes
15288
15289 On no-so-small systems, it is possible for a single process to cause an
15290 OOM condition by filling large pipes with data that are never read. A
15291 typical process filling 4000 pipes with 1 MB of data will use 4 GB of
15292 memory. On small systems it may be tricky to set the pipe max size to
15293 prevent this from happening.
15294
15295 This patch makes it possible to enforce a per-user soft limit above
15296 which new pipes will be limited to a single page, effectively limiting
15297 them to 4 kB each, as well as a hard limit above which no new pipes may
15298 be created for this user. This has the effect of protecting the system
15299 against memory abuse without hurting other users, and still allowing
15300 pipes to work correctly though with less data at once.
15301
15302 The limit are controlled by two new sysctls : pipe-user-pages-soft, and
15303 pipe-user-pages-hard. Both may be disabled by setting them to zero. The
15304 default soft limit allows the default number of FDs per process (1024)
15305 to create pipes of the default size (64kB), thus reaching a limit of 64MB
15306 before starting to create only smaller pipes. With 256 processes limited
15307 to 1024 FDs each, this results in 1024*64kB + (256*1024 - 1024) * 4kB =
15308 1084 MB of memory allocated for a user. The hard limit is disabled by
15309 default to avoid breaking existing applications that make intensive use
15310 of pipes (eg: for splicing).
15311
15312 Reported-by: socketpair@gmail.com
15313 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
15314 Mitigates: CVE-2013-4312 (Linux 2.0+)
15315 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
15316 Signed-off-by: Willy Tarreau <w@1wt.eu>
15317 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15318
15319 Documentation/sysctl/fs.txt | 23 +++++++++++++++++++++
15320 fs/pipe.c | 47 +++++++++++++++++++++++++++++++++++++++++-
15321 include/linux/pipe_fs_i.h | 4 +++
15322 include/linux/sched.h | 1 +
15323 kernel/sysctl.c | 14 ++++++++++++
15324 5 files changed, 87 insertions(+), 2 deletions(-)
15325
15326 commit 51645fa198d194f746651dcfbc5f24a4cf8b9fb8
15327 Merge: 540f2af 7791ecb
15328 Author: Brad Spengler <spender@grsecurity.net>
15329 Date: Sat Jan 23 10:57:11 2016 -0500
15330
15331 Merge branch 'pax-test' into grsec-test
15332
15333 commit 7791ecb84f840343a5646236fd0d34e1fb450793
15334 Merge: 470069c 399588c
15335 Author: Brad Spengler <spender@grsecurity.net>
15336 Date: Sat Jan 23 10:56:47 2016 -0500
15337
15338 Merge branch 'linux-4.3.y' into pax-test
15339
15340 commit 540f2affebd42cdc26a699208ab4f1cb0cb75e33
15341 Author: Brad Spengler <spender@grsecurity.net>
15342 Date: Tue Jan 19 21:18:47 2016 -0500
15343
15344 Update size_overflow hash table
15345
15346 .../size_overflow_plugin/size_overflow_hash.data | 4 +++-
15347 1 files changed, 3 insertions(+), 1 deletions(-)
15348
15349 commit 7e649765626a28437f573f0fbe7a51a04615f041
15350 Author: Brad Spengler <spender@grsecurity.net>
15351 Date: Tue Jan 19 20:29:46 2016 -0500
15352
15353 Backport fix from: https://lkml.org/lkml/2015/12/13/187
15354
15355 fs/ext4/extents.c | 2 +-
15356 1 files changed, 1 insertions(+), 1 deletions(-)
15357
15358 commit 53b859cd0a5f5b6ad54fe0c879dfedaa3c5a3005
15359 Author: Jann Horn <jann@thejh.net>
15360 Date: Tue Jan 5 18:27:30 2016 +0100
15361
15362 compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)
15363
15364 This replaces all code in fs/compat_ioctl.c that translated
15365 ioctl arguments into a in-kernel structure, then performed
15366 do_ioctl under set_fs(KERNEL_DS), with code that allocates
15367 data on the user stack and can call the VFS ioctl handler
15368 under USER_DS.
15369
15370 This is done as a hardening measure because the caller
15371 does not know what kind of ioctl handler will be invoked,
15372 only that no corresponding compat_ioctl handler exists and
15373 what the ioctl command number is. The accidental
15374 invocation of an unlocked_ioctl handler that unexpectedly
15375 calls copy_to_user could be a severe security issue.
15376
15377 Signed-off-by: Jann Horn <jann@thejh.net>
15378 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15379
15380 Conflicts:
15381
15382 fs/compat_ioctl.c
15383
15384 fs/compat_ioctl.c | 130 ++++++++++++++++++++++++++++-------------------------
15385 1 files changed, 68 insertions(+), 62 deletions(-)
15386
15387 commit 3e89e770ae27e931cd1583f021abac41eeebc3e7
15388 Author: Al Viro <viro@zeniv.linux.org.uk>
15389 Date: Thu Jan 7 09:53:30 2016 -0500
15390
15391 compat_ioctl: don't pass fd around when not needed
15392
15393 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15394
15395 fs/compat_ioctl.c | 103 ++++++++++++++++++++++++++--------------------------
15396 fs/internal.h | 7 ++++
15397 fs/ioctl.c | 4 +-
15398 include/linux/fs.h | 2 -
15399 4 files changed, 61 insertions(+), 55 deletions(-)
15400
15401 commit 9d4e04082752d4d2d68445c4e6faf33a2613df55
15402 Author: Jann Horn <jann@thejh.net>
15403 Date: Tue Jan 5 18:27:29 2016 +0100
15404
15405 compat_ioctl: don't look up the fd twice
15406
15407 In code in fs/compat_ioctl.c that translates ioctl arguments
15408 into a in-kernel structure, then performs sys_ioctl, possibly
15409 under set_fs(KERNEL_DS), this commit changes the sys_ioctl
15410 calls to do_ioctl calls. do_ioctl is a new function that does
15411 the same thing as sys_ioctl, but doesn't look up the fd again.
15412
15413 This change is made to avoid (potential) security issues
15414 because of ioctl handlers that accept one of the ioctl
15415 commands I2C_FUNCS, VIDEO_GET_EVENT, MTIOCPOS, MTIOCGET,
15416 TIOCGSERIAL, TIOCSSERIAL, RTC_IRQP_READ, RTC_EPOCH_READ.
15417 This can happen for multiple reasons:
15418
15419 - The ioctl command number could be reused.
15420 - The ioctl handler might not check the full ioctl
15421 command. This is e.g. true for drm_ioctl.
15422 - The ioctl handler is very special, e.g. cuse_file_ioctl
15423
15424 The real issue is that set_fs(KERNEL_DS) is used here,
15425 but that's fixed in a separate commit
15426 "compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)".
15427
15428 This change mitigates potential security issues by
15429 preventing a race that permits invocation of
15430 unlocked_ioctl handlers under KERNEL_DS through compat
15431 code even if a corresponding compat_ioctl handler exists.
15432
15433 So far, no way has been identified to use this to damage
15434 kernel memory without having CAP_SYS_ADMIN in the init ns
15435 (with the capability, doing reads/writes at arbitrary
15436 kernel addresses should be easy through CUSE's ioctl
15437 handler with FUSE_IOCTL_UNRESTRICTED set).
15438
15439 [AV: two missed sys_ioctl() taken care of]
15440
15441 Signed-off-by: Jann Horn <jann@thejh.net>
15442 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15443
15444 fs/compat_ioctl.c | 122 +++++++++++++++++++++++++++++-----------------------
15445 1 files changed, 68 insertions(+), 54 deletions(-)
15446
15447 commit 5bf9e1ed4ebb278cd956ba142914fc04a024309c
15448 Author: Vasily Kulikov <segoon@openwall.com>
15449 Date: Fri Jan 15 16:57:55 2016 -0800
15450
15451 include/linux/poison.h: use POISON_POINTER_DELTA for poison pointers
15452
15453 TIMER_ENTRY_STATIC is defined as a poison pointers which
15454 should point to nowhere. Redefine them using POISON_POINTER_DELTA
15455 arithmetics to make sure they really point to non-mappable area declared
15456 by the target architecture.
15457
15458 Signed-off-by: Vasily Kulikov <segoon@openwall.com>
15459 Acked-by: Thomas Gleixner <tglx@linutronix.de>
15460 Cc: Solar Designer <solar@openwall.com>
15461 Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
15462 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
15463 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
15464
15465 Conflicts:
15466
15467 include/linux/poison.h
15468
15469 include/linux/poison.h | 2 +-
15470 1 files changed, 1 insertions(+), 1 deletions(-)
15471
15472 commit 60f2e0a05ab8f56c804a9334a23e2b446305d110
15473 Author: Brad Spengler <spender@grsecurity.net>
15474 Date: Tue Jan 19 19:41:44 2016 -0500
15475
15476 Fix ARM compilation, reported by Austin Sepp
15477
15478 grsecurity/grsec_sig.c | 1 +
15479 1 files changed, 1 insertions(+), 0 deletions(-)
15480
15481 commit e15383743443dc43460a2fd73e0db0b608610dca
15482 Author: Takashi Iwai <tiwai@suse.de>
15483 Date: Mon Jan 18 13:52:47 2016 +0100
15484
15485 ALSA: hrtimer: Fix stall by hrtimer_cancel()
15486
15487 hrtimer_cancel() waits for the completion from the callback, thus it
15488 must not be called inside the callback itself. This was already a
15489 problem in the past with ALSA hrtimer driver, and the early commit
15490 [fcfdebe70759: ALSA: hrtimer - Fix lock-up] tried to address it.
15491
15492 However, the previous fix is still insufficient: it may still cause a
15493 lockup when the ALSA timer instance reprograms itself in its callback.
15494 Then it invokes the start function even in snd_timer_interrupt() that
15495 is called in hrtimer callback itself, results in a CPU stall. This is
15496 no hypothetical problem but actually triggered by syzkaller fuzzer.
15497
15498 This patch tries to fix the issue again. Now we call
15499 hrtimer_try_to_cancel() at both start and stop functions so that it
15500 won't fall into a deadlock, yet giving some chance to cancel the queue
15501 if the functions have been called outside the callback. The proper
15502 hrtimer_cancel() is called in anyway at closing, so this should be
15503 enough.
15504
15505 Reported-and-tested-by: Dmitry Vyukov <dvyukov@google.com>
15506 Cc: <stable@vger.kernel.org>
15507 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15508
15509 sound/core/hrtimer.c | 3 ++-
15510 1 files changed, 2 insertions(+), 1 deletions(-)
15511
15512 commit 12d874daf706e6e7c1ae709141859c809599297e
15513 Author: Takashi Iwai <tiwai@suse.de>
15514 Date: Tue Jan 12 12:38:02 2016 +0100
15515
15516 ALSA: seq: Fix missing NULL check at remove_events ioctl
15517
15518 snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear()
15519 unconditionally even if there is no FIFO assigned, and this leads to
15520 an Oops due to NULL dereference. The fix is just to add a proper NULL
15521 check.
15522
15523 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15524 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15525 Cc: <stable@vger.kernel.org>
15526 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15527
15528 sound/core/seq/seq_clientmgr.c | 2 +-
15529 1 files changed, 1 insertions(+), 1 deletions(-)
15530
15531 commit 2eb0632df1351378946507e7ef7ba0682632a7b5
15532 Author: Takashi Iwai <tiwai@suse.de>
15533 Date: Tue Jan 12 15:36:27 2016 +0100
15534
15535 ALSA: seq: Fix race at timer setup and close
15536
15537 ALSA sequencer code has an open race between the timer setup ioctl and
15538 the close of the client. This was triggered by syzkaller fuzzer, and
15539 a use-after-free was caught there as a result.
15540
15541 This patch papers over it by adding a proper queue->timer_mutex lock
15542 around the timer-related calls in the relevant code path.
15543
15544 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15545 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15546 Cc: <stable@vger.kernel.org>
15547 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15548
15549 sound/core/seq/seq_queue.c | 2 ++
15550 1 files changed, 2 insertions(+), 0 deletions(-)
15551
15552 commit b9e55ab955e59b4a636d78a748be90334a48b485
15553 Author: Takashi Iwai <tiwai@suse.de>
15554 Date: Thu Jan 14 16:30:58 2016 +0100
15555
15556 ALSA: timer: Harden slave timer list handling
15557
15558 A slave timer instance might be still accessible in a racy way while
15559 operating the master instance as it lacks of locking. Since the
15560 master operation is mostly protected with timer->lock, we should cope
15561 with it while changing the slave instance, too. Also, some linked
15562 lists (active_list and ack_list) of slave instances aren't unlinked
15563 immediately at stopping or closing, and this may lead to unexpected
15564 accesses.
15565
15566 This patch tries to address these issues. It adds spin lock of
15567 timer->lock (either from master or slave, which is equivalent) in a
15568 few places. For avoiding a deadlock, we ensure that the global
15569 slave_active_lock is always locked at first before each timer lock.
15570
15571 Also, ack and active_list of slave instances are properly unlinked at
15572 snd_timer_stop() and snd_timer_close().
15573
15574 Last but not least, remove the superfluous call of _snd_timer_stop()
15575 at removing slave links. This is a noop, and calling it may confuse
15576 readers wrt locking. Further cleanup will follow in a later patch.
15577
15578 Actually we've got reports of use-after-free by syzkaller fuzzer, and
15579 this hopefully fixes these issues.
15580
15581 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15582 Cc: <stable@vger.kernel.org>
15583 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15584
15585 sound/core/timer.c | 18 ++++++++++++++----
15586 1 files changed, 14 insertions(+), 4 deletions(-)
15587
15588 commit f1ce0547bdfda1b42ae8a66c222f2a897cbe1586
15589 Author: Takashi Iwai <tiwai@suse.de>
15590 Date: Wed Jan 13 17:48:01 2016 +0100
15591
15592 ALSA: timer: Fix race among timer ioctls
15593
15594 ALSA timer ioctls have an open race and this may lead to a
15595 use-after-free of timer instance object. A simplistic fix is to make
15596 each ioctl exclusive. We have already tread_sem for controlling the
15597 tread, and extend this as a global mutex to be applied to each ioctl.
15598
15599 The downside is, of course, the worse concurrency. But these ioctls
15600 aren't to be parallel accessible, in anyway, so it should be fine to
15601 serialize there.
15602
15603 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15604 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15605 Cc: <stable@vger.kernel.org>
15606 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15607
15608 sound/core/timer.c | 32 +++++++++++++++++++-------------
15609 1 files changed, 19 insertions(+), 13 deletions(-)
15610
15611 commit 8347d8461ed48a98f9c76cc3cfcdad8217d314bc
15612 Author: Takashi Iwai <tiwai@suse.de>
15613 Date: Wed Jan 13 21:35:06 2016 +0100
15614
15615 ALSA: timer: Fix double unlink of active_list
15616
15617 ALSA timer instance object has a couple of linked lists and they are
15618 unlinked unconditionally at snd_timer_stop(). Meanwhile
15619 snd_timer_interrupt() unlinks it, but it calls list_del() which leaves
15620 the element list itself unchanged. This ends up with unlinking twice,
15621 and it was caught by syzkaller fuzzer.
15622
15623 The fix is to use list_del_init() variant properly there, too.
15624
15625 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15626 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15627 Cc: <stable@vger.kernel.org>
15628 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15629
15630 sound/core/timer.c | 2 +-
15631 1 files changed, 1 insertions(+), 1 deletions(-)
15632
15633 commit 243aebb7ae71d6e11ea9880faa893d1d0d60cd75
15634 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
15635 Date: Mon Jan 18 18:03:48 2016 +0100
15636
15637 ovs: limit ovs recursions in ovs_execute_actions to not corrupt stack
15638
15639 It was seen that defective configurations of openvswitch could overwrite
15640 the STACK_END_MAGIC and cause a hard crash of the kernel because of too
15641 many recursions within ovs.
15642
15643 This problem arises due to the high stack usage of openvswitch. The rest
15644 of the kernel is fine with the current limit of 10 (RECURSION_LIMIT).
15645
15646 We use the already existing recursion counter in ovs_execute_actions to
15647 implement an upper bound of 5 recursions.
15648
15649 Cc: Pravin Shelar <pshelar@ovn.org>
15650 Cc: Simon Horman <simon.horman@netronome.com>
15651 Cc: Eric Dumazet <eric.dumazet@gmail.com>
15652 Cc: Simon Horman <simon.horman@netronome.com>
15653 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
15654 Signed-off-by: David S. Miller <davem@davemloft.net>
15655
15656 net/openvswitch/actions.c | 19 ++++++++++++++-----
15657 1 files changed, 14 insertions(+), 5 deletions(-)
15658
15659 commit 8080793479c6d5befe37a67b1dbd9e4e0a61af96
15660 Author: Ursula Braun <ursula.braun@de.ibm.com>
15661 Date: Tue Jan 19 10:41:33 2016 +0100
15662
15663 af_iucv: Validate socket address length in iucv_sock_bind()
15664
15665 Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
15666 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15667 Reviewed-by: Evgeny Cherkashin <Eugene.Crosser@ru.ibm.com>
15668 Signed-off-by: David S. Miller <davem@davemloft.net>
15669
15670 net/iucv/af_iucv.c | 3 +++
15671 1 files changed, 3 insertions(+), 0 deletions(-)
15672
15673 commit 50a383c1c91ed7409c3cbdd41e662d6891463d1b
15674 Author: Brad Spengler <spender@grsecurity.net>
15675 Date: Tue Jan 19 19:32:54 2016 -0500
15676
15677 Apply the same fix as everyone else for the recent keys vulnerability that is
15678 unexploitable under PAX_REFCOUNT
15679
15680 Make a couple more changes that no one else can/will
15681
15682 include/linux/key-type.h | 4 ++--
15683 ipc/msgutil.c | 4 ++--
15684 security/keys/internal.h | 2 +-
15685 security/keys/process_keys.c | 1 +
15686 4 files changed, 6 insertions(+), 5 deletions(-)
15687
15688 commit b56c3a63f431c193400aee17543021950bd14bc4
15689 Merge: 38b1a3d 470069c
15690 Author: Brad Spengler <spender@grsecurity.net>
15691 Date: Sun Jan 17 18:30:19 2016 -0500
15692
15693 Merge branch 'pax-test' into grsec-test
15694
15695 commit 470069cfedef2180313233d275be5901bd6d1135
15696 Author: Brad Spengler <spender@grsecurity.net>
15697 Date: Sun Jan 17 18:29:59 2016 -0500
15698
15699 Update to pax-linux-4.3.3-test22.patch:
15700 - Emesed fixed a gcc induced intentional integer overflow in asix_rx_fixup_internal, reported by thomas callison caffrey
15701 - fixed some more fallout from the drm_drivers constification, reported by Colin Childs and Toralf Foerster
15702
15703 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++++----------
15704 drivers/gpu/drm/drm_pci.c | 3 +++
15705 drivers/gpu/drm/gma500/psb_drv.c | 4 ----
15706 drivers/gpu/drm/i915/i915_drv.c | 16 ++++++++--------
15707 drivers/gpu/drm/nouveau/nouveau_drm.c | 6 +++---
15708 drivers/gpu/drm/radeon/radeon_drv.c | 4 +---
15709 drivers/net/usb/asix_common.c | 3 ++-
15710 include/drm/drmP.h | 1 +
15711 8 files changed, 22 insertions(+), 29 deletions(-)
15712
15713 commit 38b1a3d676f407865c3d41840df8213c5ad639c1
15714 Author: Brad Spengler <spender@grsecurity.net>
15715 Date: Sun Jan 17 12:33:53 2016 -0500
15716
15717 As reported by Luis Ressel, the Kconfig help for GRKERNSEC_BRUTE
15718 mentioned banning execution of suid/sgid binaries, though the kernel
15719 source clearly only mentions banning execution of suid binaries. Since
15720 there's no reason for us to not ban execution of sgid binaries as well,
15721 make the implementation match the Kconfig description.
15722
15723 fs/exec.c | 4 ++--
15724 grsecurity/grsec_sig.c | 27 ++++++++++++++-------------
15725 include/linux/sched.h | 4 ++--
15726 3 files changed, 18 insertions(+), 17 deletions(-)
15727
15728 commit 8c3bcb7dbf7f606acfa0983e81f0f928da1f1ace
15729 Merge: d141a86 ea4a835
15730 Author: Brad Spengler <spender@grsecurity.net>
15731 Date: Sat Jan 16 14:12:22 2016 -0500
15732
15733 Merge branch 'pax-test' into grsec-test
15734
15735 Conflicts:
15736 drivers/gpu/drm/i810/i810_drv.c
15737
15738 commit ea4a835328ada6513ac013986764d6caea8cd348
15739 Author: Brad Spengler <spender@grsecurity.net>
15740 Date: Sat Jan 16 14:11:30 2016 -0500
15741
15742 Update to pax-linux-4.3.3-test21.patch:
15743 - fixed some fallout from the drm_drivers constification, reported by spender
15744
15745 drivers/gpu/drm/armada/armada_drv.c | 3 +--
15746 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
15747 drivers/gpu/drm/i810/i810_dma.c | 2 +-
15748 drivers/gpu/drm/i810/i810_drv.c | 6 +++++-
15749 drivers/gpu/drm/i810/i810_drv.h | 2 +-
15750 5 files changed, 8 insertions(+), 6 deletions(-)
15751
15752 commit d141a86fd66194bc3f896b6809b189e2f12a9a83
15753 Author: Brad Spengler <spender@grsecurity.net>
15754 Date: Sat Jan 16 13:16:36 2016 -0500
15755
15756 compile fix
15757
15758 drivers/gpu/drm/i810/i810_dma.c | 2 +-
15759 drivers/gpu/drm/i810/i810_drv.c | 4 +++-
15760 drivers/gpu/drm/i810/i810_drv.h | 2 +-
15761 3 files changed, 5 insertions(+), 3 deletions(-)
15762
15763 commit 0d9dc4b25ea32c14561bcfe6b5b24f1b00fe0270
15764 Merge: 5fa135d bbda879
15765 Author: Brad Spengler <spender@grsecurity.net>
15766 Date: Sat Jan 16 12:59:22 2016 -0500
15767
15768 Merge branch 'pax-test' into grsec-test
15769
15770 commit bbda87914edf63e27fb46670bf3a373f2b963c73
15771 Author: Brad Spengler <spender@grsecurity.net>
15772 Date: Sat Jan 16 12:58:04 2016 -0500
15773
15774 Update to pax-linux-4.3.3-test20.patch:
15775 - constified drm_driver
15776 - Emese fixed a special case in handling __func__ in the initify plugin
15777 - Emese fixed a false positive size overflow report in handling inbufBits, reported by Martin Filo (https://bugs.gentoo.org/show_bug.cgi?id=567048)
15778 - fixed regression that caused perf to not resolve kernel code addresses under KERNEXEC/i386, reported by minipli
15779
15780 arch/x86/kernel/cpu/perf_event.h | 2 +-
15781 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
15782 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
15783 arch/x86/kernel/uprobes.c | 2 +-
15784 arch/x86/mm/mpx.c | 2 +-
15785 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
15786 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 ++-
15787 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
15788 drivers/gpu/drm/drm_pci.c | 6 +-
15789 drivers/gpu/drm/gma500/psb_drv.c | 5 +-
15790 drivers/gpu/drm/i915/i915_dma.c | 2 +-
15791 drivers/gpu/drm/i915/i915_drv.c | 15 ++--
15792 drivers/gpu/drm/i915/i915_drv.h | 2 +-
15793 drivers/gpu/drm/i915/i915_irq.c | 88 ++++++++++----------
15794 drivers/gpu/drm/mga/mga_drv.c | 5 +-
15795 drivers/gpu/drm/mga/mga_drv.h | 2 +-
15796 drivers/gpu/drm/mga/mga_state.c | 2 +-
15797 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 ++--
15798 drivers/gpu/drm/qxl/qxl_drv.c | 8 ++-
15799 drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +-
15800 drivers/gpu/drm/r128/r128_drv.c | 4 +-
15801 drivers/gpu/drm/r128/r128_drv.h | 2 +-
15802 drivers/gpu/drm/r128/r128_state.c | 2 +-
15803 drivers/gpu/drm/radeon/radeon_drv.c | 17 +++-
15804 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
15805 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
15806 drivers/gpu/drm/radeon/radeon_state.c | 2 +-
15807 drivers/gpu/drm/savage/savage_bci.c | 2 +-
15808 drivers/gpu/drm/savage/savage_drv.c | 5 +-
15809 drivers/gpu/drm/savage/savage_drv.h | 2 +-
15810 drivers/gpu/drm/sis/sis_drv.c | 5 +-
15811 drivers/gpu/drm/sis/sis_drv.h | 2 +-
15812 drivers/gpu/drm/sis/sis_mm.c | 2 +-
15813 drivers/gpu/drm/via/via_dma.c | 2 +-
15814 drivers/gpu/drm/via/via_drv.c | 5 +-
15815 drivers/gpu/drm/via/via_drv.h | 2 +-
15816 include/drm/drmP.h | 2 +-
15817 mm/slab.c | 2 +-
15818 net/sunrpc/xprtrdma/svc_rdma.c | 6 +-
15819 tools/gcc/initify_plugin.c | 15 +++-
15820 .../disable_size_overflow_hash.data | 1 +
15821 .../size_overflow_plugin/size_overflow_hash.data | 3 +-
15822 42 files changed, 156 insertions(+), 110 deletions(-)
15823
15824 commit 5fa135dc116350e0205c39ef65eaf6496ed2748a
15825 Author: Brad Spengler <spender@grsecurity.net>
15826 Date: Sat Jan 16 12:19:23 2016 -0500
15827
15828 compile fix
15829
15830 grsecurity/grsec_sig.c | 3 +--
15831 1 files changed, 1 insertions(+), 2 deletions(-)
15832
15833 commit a9090fa58f33f75c7450fda5721a9b13625a47d9
15834 Author: Brad Spengler <spender@grsecurity.net>
15835 Date: Sat Jan 16 12:10:37 2016 -0500
15836
15837 As pointed out by Jann Horn, some distros are starting to circumvent
15838 previous assumptions about the attainability of a user to control
15839 multiple UIDs by handing out suid binaries that allow a user to run
15840 processes (including exploits) under a number of other pre-defined
15841 UIDs. As this could potentially be used to bypass GRKERNSEC_BRUTE
15842 (though it would have to involve some code path that doesn't involve
15843 locks) fix that here by ensuring no more than 8 users on a system can
15844 be banned before a reboot is required. If more are banned, a panic
15845 is triggered.
15846
15847 grsecurity/grsec_sig.c | 8 ++++++++
15848 1 files changed, 8 insertions(+), 0 deletions(-)
15849
15850 commit a8d37776e9521c567ebff6730d49312f72435f08
15851 Author: Eric Dumazet <edumazet@google.com>
15852 Date: Thu Dec 3 11:12:07 2015 -0800
15853
15854 proc: add a reschedule point in proc_readfd_common()
15855
15856 User can pass an arbitrary large buffer to getdents().
15857
15858 It is typically a 32KB buffer used by libc scandir() implementation.
15859
15860 When scanning /proc/{pid}/fd, we can hold cpu way too long,
15861 so add a cond_resched() to be kind with other tasks.
15862
15863 We've seen latencies of more than 50ms on real workloads.
15864
15865 Signed-off-by: Eric Dumazet <edumazet@google.com>
15866 Cc: Alexander Viro <viro@zeniv.linux.org.uk>
15867 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15868
15869 fs/proc/fd.c | 1 +
15870 1 files changed, 1 insertions(+), 0 deletions(-)
15871
15872 commit 0adba75f8708f13b1f5d98ebe3fc2fb961e100c8
15873 Author: Rabin Vincent <rabin@rab.in>
15874 Date: Tue Jan 12 20:17:08 2016 +0100
15875
15876 net: bpf: reject invalid shifts
15877
15878 On ARM64, a BUG() is triggered in the eBPF JIT if a filter with a
15879 constant shift that can't be encoded in the immediate field of the
15880 UBFM/SBFM instructions is passed to the JIT. Since these shifts
15881 amounts, which are negative or >= regsize, are invalid, reject them in
15882 the eBPF verifier and the classic BPF filter checker, for all
15883 architectures.
15884
15885 Signed-off-by: Rabin Vincent <rabin@rab.in>
15886 Acked-by: Alexei Starovoitov <ast@kernel.org>
15887 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
15888 Signed-off-by: David S. Miller <davem@davemloft.net>
15889
15890 kernel/bpf/verifier.c | 10 ++++++++++
15891 net/core/filter.c | 5 +++++
15892 2 files changed, 15 insertions(+), 0 deletions(-)
15893
15894 commit c248e115a73496625a1c64660d0eeefd67e55cbf
15895 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
15896 Date: Fri Jan 8 11:00:54 2016 -0200
15897
15898 sctp: fix use-after-free in pr_debug statement
15899
15900 Dmitry Vyukov reported a use-after-free in the code expanded by the
15901 macro debug_post_sfx, which is caused by the use of the asoc pointer
15902 after it was freed within sctp_side_effect() scope.
15903
15904 This patch fixes it by allowing sctp_side_effect to clear that asoc
15905 pointer when the TCB is freed.
15906
15907 As Vlad explained, we also have to cover the SCTP_DISPOSITION_ABORT case
15908 because it will trigger DELETE_TCB too on that same loop.
15909
15910 Also, there were places issuing SCTP_CMD_INIT_FAILED and ASSOC_FAILED
15911 but returning SCTP_DISPOSITION_CONSUME, which would fool the scheme
15912 above. Fix it by returning SCTP_DISPOSITION_ABORT instead.
15913
15914 The macro is already prepared to handle such NULL pointer.
15915
15916 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15917 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
15918 Acked-by: Vlad Yasevich <vyasevich@gmail.com>
15919 Signed-off-by: David S. Miller <davem@davemloft.net>
15920
15921 net/sctp/sm_sideeffect.c | 11 ++++++-----
15922 net/sctp/sm_statefuns.c | 17 ++++-------------
15923 2 files changed, 10 insertions(+), 18 deletions(-)
15924
15925 commit 395ea8a9e73e184fc14153a033000bccf4213213
15926 Author: willy tarreau <w@1wt.eu>
15927 Date: Sun Jan 10 07:54:56 2016 +0100
15928
15929 unix: properly account for FDs passed over unix sockets
15930
15931 It is possible for a process to allocate and accumulate far more FDs than
15932 the process' limit by sending them over a unix socket then closing them
15933 to keep the process' fd count low.
15934
15935 This change addresses this problem by keeping track of the number of FDs
15936 in flight per user and preventing non-privileged processes from having
15937 more FDs in flight than their configured FD limit.
15938
15939 Reported-by: socketpair@gmail.com
15940 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
15941 Mitigates: CVE-2013-4312 (Linux 2.0+)
15942 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
15943 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
15944 Signed-off-by: Willy Tarreau <w@1wt.eu>
15945 Signed-off-by: David S. Miller <davem@davemloft.net>
15946
15947 include/linux/sched.h | 1 +
15948 net/unix/af_unix.c | 24 ++++++++++++++++++++----
15949 net/unix/garbage.c | 13 ++++++++-----
15950 3 files changed, 29 insertions(+), 9 deletions(-)
15951
15952 commit cb207ab8fbd71dcfc4a49d533aba8085012543fd
15953 Author: Sasha Levin <sasha.levin@oracle.com>
15954 Date: Thu Jan 7 14:52:43 2016 -0500
15955
15956 net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
15957
15958 proc_dostring() needs an initialized destination string, while the one
15959 provided in proc_sctp_do_hmac_alg() contains stack garbage.
15960
15961 Thus, writing to cookie_hmac_alg would strlen() that garbage and end up
15962 accessing invalid memory.
15963
15964 Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic")
15965 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
15966 Signed-off-by: David S. Miller <davem@davemloft.net>
15967
15968 net/sctp/sysctl.c | 2 +-
15969 1 files changed, 1 insertions(+), 1 deletions(-)
15970
15971 commit 4014e09faf0fe9054119624ccfff1236e886b554
15972 Author: Quentin Casasnovas <quentin.casasnovas@oracle.com>
15973 Date: Tue Nov 24 17:13:21 2015 -0500
15974
15975 RDS: fix race condition when sending a message on unbound socket
15976
15977 commit 8c7188b23474cca017b3ef354c4a58456f68303a upstream.
15978
15979 Sasha's found a NULL pointer dereference in the RDS connection code when
15980 sending a message to an apparently unbound socket. The problem is caused
15981 by the code checking if the socket is bound in rds_sendmsg(), which checks
15982 the rs_bound_addr field without taking a lock on the socket. This opens a
15983 race where rs_bound_addr is temporarily set but where the transport is not
15984 in rds_bind(), leading to a NULL pointer dereference when trying to
15985 dereference 'trans' in __rds_conn_create().
15986
15987 Vegard wrote a reproducer for this issue, so kindly ask him to share if
15988 you're interested.
15989
15990 I cannot reproduce the NULL pointer dereference using Vegard's reproducer
15991 with this patch, whereas I could without.
15992
15993 Complete earlier incomplete fix to CVE-2015-6937:
15994
15995 74e98eb08588 ("RDS: verify the underlying transport exists before creating a connection")
15996
15997 Cc: David S. Miller <davem@davemloft.net>
15998
15999 Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
16000 Reviewed-by: Sasha Levin <sasha.levin@oracle.com>
16001 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
16002 Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com>
16003 Signed-off-by: David S. Miller <davem@davemloft.net>
16004 Signed-off-by: Jiri Slaby <jslaby@suse.cz>
16005
16006 Conflicts:
16007
16008 net/rds/send.c
16009
16010 net/rds/connection.c | 6 ------
16011 1 files changed, 0 insertions(+), 6 deletions(-)
16012
16013 commit 206df8d01104344d7588d801016a281a4cd25556
16014 Author: Sasha Levin <sasha.levin@oracle.com>
16015 Date: Tue Sep 8 10:53:40 2015 -0400
16016
16017 RDS: verify the underlying transport exists before creating a connection
16018
16019 There was no verification that an underlying transport exists when creating
16020 a connection, this would cause dereferencing a NULL ptr.
16021
16022 It might happen on sockets that weren't properly bound before attempting to
16023 send a message, which will cause a NULL ptr deref:
16024
16025 [135546.047719] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
16026 [135546.051270] Modules linked in:
16027 [135546.051781] CPU: 4 PID: 15650 Comm: trinity-c4 Not tainted 4.2.0-next-20150902-sasha-00041-gbaa1222-dirty #2527
16028 [135546.053217] task: ffff8800835bc000 ti: ffff8800bc708000 task.ti: ffff8800bc708000
16029 [135546.054291] RIP: __rds_conn_create (net/rds/connection.c:194)
16030 [135546.055666] RSP: 0018:ffff8800bc70fab0 EFLAGS: 00010202
16031 [135546.056457] RAX: dffffc0000000000 RBX: 0000000000000f2c RCX: ffff8800835bc000
16032 [135546.057494] RDX: 0000000000000007 RSI: ffff8800835bccd8 RDI: 0000000000000038
16033 [135546.058530] RBP: ffff8800bc70fb18 R08: 0000000000000001 R09: 0000000000000000
16034 [135546.059556] R10: ffffed014d7a3a23 R11: ffffed014d7a3a21 R12: 0000000000000000
16035 [135546.060614] R13: 0000000000000001 R14: ffff8801ec3d0000 R15: 0000000000000000
16036 [135546.061668] FS: 00007faad4ffb700(0000) GS:ffff880252000000(0000) knlGS:0000000000000000
16037 [135546.062836] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
16038 [135546.063682] CR2: 000000000000846a CR3: 000000009d137000 CR4: 00000000000006a0
16039 [135546.064723] Stack:
16040 [135546.065048] ffffffffafe2055c ffffffffafe23fc1 ffffed00493097bf ffff8801ec3d0008
16041 [135546.066247] 0000000000000000 00000000000000d0 0000000000000000 ac194a24c0586342
16042 [135546.067438] 1ffff100178e1f78 ffff880320581b00 ffff8800bc70fdd0 ffff880320581b00
16043 [135546.068629] Call Trace:
16044 [135546.069028] ? __rds_conn_create (include/linux/rcupdate.h:856 net/rds/connection.c:134)
16045 [135546.069989] ? rds_message_copy_from_user (net/rds/message.c:298)
16046 [135546.071021] rds_conn_create_outgoing (net/rds/connection.c:278)
16047 [135546.071981] rds_sendmsg (net/rds/send.c:1058)
16048 [135546.072858] ? perf_trace_lock (include/trace/events/lock.h:38)
16049 [135546.073744] ? lockdep_init (kernel/locking/lockdep.c:3298)
16050 [135546.074577] ? rds_send_drop_to (net/rds/send.c:976)
16051 [135546.075508] ? __might_fault (./arch/x86/include/asm/current.h:14 mm/memory.c:3795)
16052 [135546.076349] ? __might_fault (mm/memory.c:3795)
16053 [135546.077179] ? rds_send_drop_to (net/rds/send.c:976)
16054 [135546.078114] sock_sendmsg (net/socket.c:611 net/socket.c:620)
16055 [135546.078856] SYSC_sendto (net/socket.c:1657)
16056 [135546.079596] ? SYSC_connect (net/socket.c:1628)
16057 [135546.080510] ? trace_dump_stack (kernel/trace/trace.c:1926)
16058 [135546.081397] ? ring_buffer_unlock_commit (kernel/trace/ring_buffer.c:2479 kernel/trace/ring_buffer.c:2558 kernel/trace/ring_buffer.c:2674)
16059 [135546.082390] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
16060 [135546.083410] ? trace_event_raw_event_sys_enter (include/trace/events/syscalls.h:16)
16061 [135546.084481] ? do_audit_syscall_entry (include/trace/events/syscalls.h:16)
16062 [135546.085438] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
16063 [135546.085515] rds_ib_laddr_check(): addr 36.74.25.172 ret -99 node type -1
16064
16065 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
16066 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
16067 Signed-off-by: David S. Miller <davem@davemloft.net>
16068
16069 net/rds/connection.c | 6 ++++++
16070 1 files changed, 6 insertions(+), 0 deletions(-)
16071
16072 commit 173fa03f05cf0ad485d49a42cbdee8844d3a689a
16073 Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
16074 Date: Tue Jan 5 20:32:47 2016 -0500
16075
16076 ftrace/module: Call clean up function when module init fails early
16077
16078 If the module init code fails after calling ftrace_module_init() and before
16079 calling do_init_module(), we can suffer from a memory leak. This is because
16080 ftrace_module_init() allocates pages to store the locations that ftrace
16081 hooks are placed in the module text. If do_init_module() fails, it still
16082 calls the MODULE_GOING notifiers which will tell ftrace to do a clean up of
16083 the pages it allocated for the module. But if load_module() fails before
16084 then, the pages allocated by ftrace_module_init() will never be freed.
16085
16086 Call ftrace_release_mod() on the module if load_module() fails before
16087 getting to do_init_module().
16088
16089 Link: http://lkml.kernel.org/r/567CEA31.1070507@intel.com
16090
16091 Reported-by: "Qiu, PeiyangX" <peiyangx.qiu@intel.com>
16092 Fixes: a949ae560a511 "ftrace/module: Hardcode ftrace_module_init() call into load_module()"
16093 Cc: stable@vger.kernel.org # v2.6.38+
16094 Acked-by: Rusty Russell <rusty@rustcorp.com.au>
16095 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
16096
16097 include/linux/ftrace.h | 1 +
16098 kernel/module.c | 6 ++++++
16099 2 files changed, 7 insertions(+), 0 deletions(-)
16100
16101 commit 1e5a4a81a4c16c8ac2e264b88a02cc2f42ed0399
16102 Author: Francesco Ruggeri <fruggeri@aristanetworks.com>
16103 Date: Wed Jan 6 00:18:48 2016 -0800
16104
16105 net: possible use after free in dst_release
16106
16107 dst_release should not access dst->flags after decrementing
16108 __refcnt to 0. The dst_entry may be in dst_busy_list and
16109 dst_gc_task may dst_destroy it before dst_release gets a chance
16110 to access dst->flags.
16111
16112 Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()")
16113 Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
16114 Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
16115 Acked-by: Eric Dumazet <edumazet@google.com>
16116 Signed-off-by: David S. Miller <davem@davemloft.net>
16117
16118 net/core/dst.c | 3 ++-
16119 1 files changed, 2 insertions(+), 1 deletions(-)
16120
16121 commit bfb0455793dd4e0f0b49d34a68b3249ab55565cc
16122 Author: Alan <gnomes@lxorguk.ukuu.org.uk>
16123 Date: Wed Jan 6 14:55:02 2016 +0000
16124
16125 mkiss: fix scribble on freed memory
16126
16127 commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
16128 scribble on free memory but added a new one which allows the user to
16129 scribble even more and user controlled data into freed space.
16130
16131 As with 6pack we need to halt the queue before we free the buffers, because
16132 the transmit logic is not protected by the semaphore.
16133
16134 Signed-off-by: Alan Cox <alan@linux.intel.com>
16135 Signed-off-by: David S. Miller <davem@davemloft.net>
16136
16137 drivers/net/hamradio/mkiss.c | 5 +++++
16138 1 files changed, 5 insertions(+), 0 deletions(-)
16139
16140 commit 5cbbcbd32dc1949470f61d342503808fa9555276
16141 Author: David Miller <davem@davemloft.net>
16142 Date: Thu Dec 17 16:05:49 2015 -0500
16143
16144 mkiss: Fix use after free in mkiss_close().
16145
16146 Need to do the unregister_device() after all references to the driver
16147 private have been done.
16148
16149 Signed-off-by: David S. Miller <davem@davemloft.net>
16150
16151 drivers/net/hamradio/mkiss.c | 4 ++--
16152 1 files changed, 2 insertions(+), 2 deletions(-)
16153
16154 commit b00171576794a98068e069a660f0991a6a5190ff
16155 Author: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>
16156 Date: Tue Jan 5 11:51:25 2016 +0000
16157
16158 6pack: fix free memory scribbles
16159
16160 commit acf673a3187edf72068ee2f92f4dc47d66baed47 fixed a user triggerable free
16161 memory scribble but in doing so replaced it with a different one that allows
16162 the user to control the data and scribble even more.
16163
16164 sixpack_close is called by the tty layer in tty context. The tty context is
16165 protected by sp_get() and sp_put(). However network layer activity via
16166 sp_xmit() is not protected this way. We must therefore stop the queue
16167 otherwise the user gets to dump a buffer mostly of their choice into freed
16168 kernel pages.
16169
16170 Signed-off-by: Alan Cox <alan@linux.intel.com>
16171 Signed-off-by: David S. Miller <davem@davemloft.net>
16172
16173 drivers/net/hamradio/6pack.c | 6 ++++++
16174 1 files changed, 6 insertions(+), 0 deletions(-)
16175
16176 commit 5b64a833907cd230a3106aeba2304b2c1bcd116d
16177 Author: David Miller <davem@davemloft.net>
16178 Date: Thu Dec 17 16:05:32 2015 -0500
16179
16180 6pack: Fix use after free in sixpack_close().
16181
16182 Need to do the unregister_device() after all references to the driver
16183 private have been done.
16184
16185 Also we need to use del_timer_sync() for the timers so that we don't
16186 have any asynchronous references after the unregister.
16187
16188 Signed-off-by: David S. Miller <davem@davemloft.net>
16189
16190 drivers/net/hamradio/6pack.c | 8 ++++----
16191 1 files changed, 4 insertions(+), 4 deletions(-)
16192
16193 commit 4f9d532742656b3613d579220fd10c78f24ba37b
16194 Author: Rabin Vincent <rabin@rab.in>
16195 Date: Tue Jan 5 16:23:07 2016 +0100
16196
16197 net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
16198
16199 The SKF_AD_ALU_XOR_X ancillary is not like the other ancillary data
16200 instructions since it XORs A with X while all the others replace A with
16201 some loaded value. All the BPF JITs fail to clear A if this is used as
16202 the first instruction in a filter. This was found using american fuzzy
16203 lop.
16204
16205 Add a helper to determine if A needs to be cleared given the first
16206 instruction in a filter, and use this in the JITs. Except for ARM, the
16207 rest have only been compile-tested.
16208
16209 Fixes: 3480593131e0 ("net: filter: get rid of BPF_S_* enum")
16210 Signed-off-by: Rabin Vincent <rabin@rab.in>
16211 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
16212 Acked-by: Alexei Starovoitov <ast@kernel.org>
16213 Signed-off-by: David S. Miller <davem@davemloft.net>
16214
16215 arch/arm/net/bpf_jit_32.c | 16 +---------------
16216 arch/mips/net/bpf_jit.c | 16 +---------------
16217 arch/powerpc/net/bpf_jit_comp.c | 13 ++-----------
16218 arch/sparc/net/bpf_jit_comp.c | 17 ++---------------
16219 include/linux/filter.h | 19 +++++++++++++++++++
16220 5 files changed, 25 insertions(+), 56 deletions(-)
16221
16222 commit 570d88f8acfffda92b89ae2e1c47320d47256034
16223 Author: John Fastabend <john.fastabend@gmail.com>
16224 Date: Tue Jan 5 09:11:36 2016 -0800
16225
16226 net: sched: fix missing free per cpu on qstats
16227
16228 When a qdisc is using per cpu stats (currently just the ingress
16229 qdisc) only the bstats are being freed. This also free's the qstats.
16230
16231 Fixes: b0ab6f92752b9f9d8 ("net: sched: enable per cpu qstats")
16232 Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
16233 Acked-by: Eric Dumazet <edumazet@google.com>
16234 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
16235 Signed-off-by: David S. Miller <davem@davemloft.net>
16236
16237 net/sched/sch_generic.c | 4 +++-
16238 1 files changed, 3 insertions(+), 1 deletions(-)
16239
16240 commit 32c0ebc51857ee83470a10dcb234d308a0ed1881
16241 Author: Rabin Vincent <rabin@rab.in>
16242 Date: Tue Jan 5 18:34:04 2016 +0100
16243
16244 ARM: net: bpf: fix zero right shift
16245
16246 The LSR instruction cannot be used to perform a zero right shift since a
16247 0 as the immediate value (imm5) in the LSR instruction encoding means
16248 that a shift of 32 is perfomed. See DecodeIMMShift() in the ARM ARM.
16249
16250 Make the JIT skip generation of the LSR if a zero-shift is requested.
16251
16252 This was found using american fuzzy lop.
16253
16254 Signed-off-by: Rabin Vincent <rabin@rab.in>
16255 Acked-by: Alexei Starovoitov <ast@kernel.org>
16256 Signed-off-by: David S. Miller <davem@davemloft.net>
16257
16258 arch/arm/net/bpf_jit_32.c | 3 ++-
16259 1 files changed, 2 insertions(+), 1 deletions(-)
16260
16261 commit 51f5d291750285efa4d4bbe84e5ec23dc00c8d2d
16262 Author: Brad Spengler <spender@grsecurity.net>
16263 Date: Wed Jan 6 20:35:57 2016 -0500
16264
16265 Don't perform hidden lookups in RBAC against the directory of
16266 a file being opened with O_CREAT, reported by Karl Witt
16267
16268 Conflicts:
16269
16270 fs/namei.c
16271
16272 fs/namei.c | 3 ---
16273 1 files changed, 0 insertions(+), 3 deletions(-)
16274
16275 commit 5a8266a6b2769ccdb447256f95bc2577a73cccd1
16276 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
16277 Date: Tue Jan 5 10:46:00 2016 +0100
16278
16279 bridge: Only call /sbin/bridge-stp for the initial network namespace
16280
16281 [I stole this patch from Eric Biederman. He wrote:]
16282
16283 > There is no defined mechanism to pass network namespace information
16284 > into /sbin/bridge-stp therefore don't even try to invoke it except
16285 > for bridge devices in the initial network namespace.
16286 >
16287 > It is possible for unprivileged users to cause /sbin/bridge-stp to be
16288 > invoked for any network device name which if /sbin/bridge-stp does not
16289 > guard against unreasonable arguments or being invoked twice on the
16290 > same network device could cause problems.
16291
16292 [Hannes: changed patch using netns_eq]
16293
16294 Cc: Eric W. Biederman <ebiederm@xmission.com>
16295 Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
16296 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16297 Signed-off-by: David S. Miller <davem@davemloft.net>
16298
16299 net/bridge/br_stp_if.c | 5 ++++-
16300 1 files changed, 4 insertions(+), 1 deletions(-)
16301
16302 commit 650d535cc39f0aeff2f57e60b6617be25d3ef48b
16303 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
16304 Date: Wed Dec 23 16:28:40 2015 -0200
16305
16306 sctp: use GFP_USER for user-controlled kmalloc
16307
16308 Commit cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
16309 missed two other spots.
16310
16311 For connectx, as it's more likely to be used by kernel users of the API,
16312 it detects if GFP_USER should be used or not.
16313
16314 Fixes: cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
16315 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16316 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
16317 Signed-off-by: David S. Miller <davem@davemloft.net>
16318
16319 net/sctp/socket.c | 9 ++++++---
16320 1 files changed, 6 insertions(+), 3 deletions(-)
16321
16322 commit 5718a1f63c41fc156f729783423b002763779d04
16323 Author: Florian Westphal <fw@strlen.de>
16324 Date: Thu Dec 31 14:26:33 2015 +0100
16325
16326 connector: bump skb->users before callback invocation
16327
16328 Dmitry reports memleak with syskaller program.
16329 Problem is that connector bumps skb usecount but might not invoke callback.
16330
16331 So move skb_get to where we invoke the callback.
16332
16333 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16334 Signed-off-by: Florian Westphal <fw@strlen.de>
16335 Signed-off-by: David S. Miller <davem@davemloft.net>
16336
16337 drivers/connector/connector.c | 11 +++--------
16338 1 files changed, 3 insertions(+), 8 deletions(-)
16339
16340 commit 2e6372e6a97f8d642416899861f91777f44f13b7
16341 Author: Rainer Weikusat <rweikusat@mobileactivedefense.com>
16342 Date: Sun Jan 3 18:56:38 2016 +0000
16343
16344 af_unix: Fix splice-bind deadlock
16345
16346 On 2015/11/06, Dmitry Vyukov reported a deadlock involving the splice
16347 system call and AF_UNIX sockets,
16348
16349 http://lists.openwall.net/netdev/2015/11/06/24
16350
16351 The situation was analyzed as
16352
16353 (a while ago) A: socketpair()
16354 B: splice() from a pipe to /mnt/regular_file
16355 does sb_start_write() on /mnt
16356 C: try to freeze /mnt
16357 wait for B to finish with /mnt
16358 A: bind() try to bind our socket to /mnt/new_socket_name
16359 lock our socket, see it not bound yet
16360 decide that it needs to create something in /mnt
16361 try to do sb_start_write() on /mnt, block (it's
16362 waiting for C).
16363 D: splice() from the same pipe to our socket
16364 lock the pipe, see that socket is connected
16365 try to lock the socket, block waiting for A
16366 B: get around to actually feeding a chunk from
16367 pipe to file, try to lock the pipe. Deadlock.
16368
16369 on 2015/11/10 by Al Viro,
16370
16371 http://lists.openwall.net/netdev/2015/11/10/4
16372
16373 The patch fixes this by removing the kern_path_create related code from
16374 unix_mknod and executing it as part of unix_bind prior acquiring the
16375 readlock of the socket in question. This means that A (as used above)
16376 will sb_start_write on /mnt before it acquires the readlock, hence, it
16377 won't indirectly block B which first did a sb_start_write and then
16378 waited for a thread trying to acquire the readlock. Consequently, A
16379 being blocked by C waiting for B won't cause a deadlock anymore
16380 (effectively, both A and B acquire two locks in opposite order in the
16381 situation described above).
16382
16383 Dmitry Vyukov(<dvyukov@google.com>) tested the original patch.
16384
16385 Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
16386 Signed-off-by: David S. Miller <davem@davemloft.net>
16387
16388 Conflicts:
16389
16390 net/unix/af_unix.c
16391
16392 net/unix/af_unix.c | 70 +++++++++++++++++++++++++++++++--------------------
16393 1 files changed, 42 insertions(+), 28 deletions(-)
16394
16395 commit 2e729e557c571f3253e32472cd7d382ac16cf1c3
16396 Author: Qiu Peiyang <peiyangx.qiu@intel.com>
16397 Date: Thu Dec 31 13:11:28 2015 +0800
16398
16399 tracing: Fix setting of start_index in find_next()
16400
16401 When we do cat /sys/kernel/debug/tracing/printk_formats, we hit kernel
16402 panic at t_show.
16403
16404 general protection fault: 0000 [#1] PREEMPT SMP
16405 CPU: 0 PID: 2957 Comm: sh Tainted: G W O 3.14.55-x86_64-01062-gd4acdc7 #2
16406 RIP: 0010:[<ffffffff811375b2>]
16407 [<ffffffff811375b2>] t_show+0x22/0xe0
16408 RSP: 0000:ffff88002b4ebe80 EFLAGS: 00010246
16409 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004
16410 RDX: 0000000000000004 RSI: ffffffff81fd26a6 RDI: ffff880032f9f7b1
16411 RBP: ffff88002b4ebe98 R08: 0000000000001000 R09: 000000000000ffec
16412 R10: 0000000000000000 R11: 000000000000000f R12: ffff880004d9b6c0
16413 R13: 7365725f6d706400 R14: ffff880004d9b6c0 R15: ffffffff82020570
16414 FS: 0000000000000000(0000) GS:ffff88003aa00000(0063) knlGS:00000000f776bc40
16415 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
16416 CR2: 00000000f6c02ff0 CR3: 000000002c2b3000 CR4: 00000000001007f0
16417 Call Trace:
16418 [<ffffffff811dc076>] seq_read+0x2f6/0x3e0
16419 [<ffffffff811b749b>] vfs_read+0x9b/0x160
16420 [<ffffffff811b7f69>] SyS_read+0x49/0xb0
16421 [<ffffffff81a3a4b9>] ia32_do_call+0x13/0x13
16422 ---[ end trace 5bd9eb630614861e ]---
16423 Kernel panic - not syncing: Fatal exception
16424
16425 When the first time find_next calls find_next_mod_format, it should
16426 iterate the trace_bprintk_fmt_list to find the first print format of
16427 the module. However in current code, start_index is smaller than *pos
16428 at first, and code will not iterate the list. Latter container_of will
16429 get the wrong address with former v, which will cause mod_fmt be a
16430 meaningless object and so is the returned mod_fmt->fmt.
16431
16432 This patch will fix it by correcting the start_index. After fixed,
16433 when the first time calls find_next_mod_format, start_index will be
16434 equal to *pos, and code will iterate the trace_bprintk_fmt_list to
16435 get the right module printk format, so is the returned mod_fmt->fmt.
16436
16437 Link: http://lkml.kernel.org/r/5684B900.9000309@intel.com
16438
16439 Cc: stable@vger.kernel.org # 3.12+
16440 Fixes: 102c9323c35a8 "tracing: Add __tracepoint_string() to export string pointers"
16441 Signed-off-by: Qiu Peiyang <peiyangx.qiu@intel.com>
16442 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
16443
16444 kernel/trace/trace_printk.c | 1 +
16445 1 files changed, 1 insertions(+), 0 deletions(-)
16446
16447 commit 0994af4b1930f32aa493dc08145cd304f8bfc8f4
16448 Author: Al Viro <viro@zeniv.linux.org.uk>
16449 Date: Mon Dec 28 20:47:08 2015 -0500
16450
16451 [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
16452
16453 Cc: stable@vger.kernel.org # 3.15+
16454 Reviewed-by: Jeff Layton <jeff.layton@primarydata.com>
16455 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
16456
16457 arch/arm/kernel/sys_oabi-compat.c | 73 +++++++++++++++++++------------------
16458 1 files changed, 37 insertions(+), 36 deletions(-)
16459
16460 commit 4ed030f65dcf3e6b0128032a49a7d75f947fa351
16461 Merge: de243c2 3adc55a
16462 Author: Brad Spengler <spender@grsecurity.net>
16463 Date: Tue Jan 5 18:10:10 2016 -0500
16464
16465 Merge branch 'pax-test' into grsec-test
16466
16467 commit 3adc55a5acfa429c2a7cc883aef08b960c0079b0
16468 Author: Brad Spengler <spender@grsecurity.net>
16469 Date: Tue Jan 5 18:08:53 2016 -0500
16470
16471 Update to pax-linux-4.3.3-test16.patch:
16472 - small cleanup in entry_64.S on x86
16473 - Emese fixed the initify plugin to recursively check variable initializers, reported by Rasmus Villemoes
16474 - fixed an integer truncation of a partially uninitialized value bug in em_pop_sreg, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4354)
16475 - fixed alternatives patching of call insns under KERNEXEC/i386, reported by fly_a320 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4305) and TTgrsec (https://forums.grsecurity.net/viewtopic.php?f=3&t=4353)
16476 - fixed a size overflow false positive that triggered in tcp_parse_options on arm, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350&p=15917#p15916)
16477 - fixed a boot crash on amd64 with KERNEXEC/OR and CONTEXT_TRACKING, reported by Klaus Kusche (https://bugs.gentoo.org/show_bug.cgi?id=570420)
16478
16479 arch/x86/entry/entry_64.S | 60 +++++-----
16480 arch/x86/kernel/alternative.c | 2 +-
16481 arch/x86/kvm/emulate.c | 4 +-
16482 tools/gcc/initify_plugin.c | 123 +++++++++----------
16483 .../disable_size_overflow_hash.data | 4 +-
16484 .../size_overflow_plugin/size_overflow_hash.data | 2 -
16485 6 files changed, 93 insertions(+), 102 deletions(-)
16486
16487 commit de243c26efd0e423ca92db825af2c3f8eb1ca043
16488 Author: Brad Spengler <spender@grsecurity.net>
16489 Date: Tue Dec 29 18:01:24 2015 -0500
16490
16491 It was noticed during an internal audit that the code under GRKERNSEC_PROC_MEMMAP
16492 which aimed to enforce a 16MB minimum on RLIMIT_DATA for suid/sgid binaries only
16493 did so if RLIMIT_DATA was set lower than PAGE_SIZE.
16494
16495 This addition was only supplemental as GRKERNSEC_BRUTE is the main defense
16496 against suid/sgid attacks and the flaw above would only eliminate the extra
16497 entropy provided for the brk-managed heap, still leaving it with the minimum
16498 of 16-bit entropy for mmap on x86 and 28 on x64.
16499
16500 mm/mmap.c | 2 +-
16501 1 files changed, 1 insertions(+), 1 deletions(-)
16502
16503 commit 8e264cfe47e5f08cdc9ed009a630277206cd2534
16504 Merge: 436201b 2584340
16505 Author: Brad Spengler <spender@grsecurity.net>
16506 Date: Mon Dec 28 20:30:01 2015 -0500
16507
16508 Merge branch 'pax-test' into grsec-test
16509
16510 commit 2584340eab494e64ec1bf9eb5b0d1ae31f926306
16511 Author: Brad Spengler <spender@grsecurity.net>
16512 Date: Mon Dec 28 20:29:28 2015 -0500
16513
16514 Update to pax-linux-4.3.3-test14.patch:
16515 - fixed an integer sign conversion error in i2c_dw_pci_probe caught by the size overflow plugin, reported by Jean Lucas and ganymede (https://forums.grsecurity.net/viewtopic.php?f=3&t=4349)
16516 - fixed shutdown crash with tboot and KERNEXEC, reported by perfinion
16517 - fixed a few false positive and one real size overflow reports in hyperv, reported by hunger
16518 - fixed compile regressions on armv5, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350)
16519 - fixed an assert in the initify plugin that triggered in vic_register on arm
16520
16521 arch/arm/include/asm/atomic.h | 7 +++++--
16522 arch/arm/include/asm/domain.h | 5 ++---
16523 arch/x86/kernel/tboot.c | 14 +++++++++-----
16524 drivers/hv/channel.c | 4 +---
16525 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
16526 drivers/net/hyperv/rndis_filter.c | 3 +--
16527 fs/exec.c | 4 ++--
16528 include/linux/atomic.h | 15 ---------------
16529 net/core/skbuff.c | 3 ++-
16530 tools/gcc/initify_plugin.c | 4 +++-
16531 10 files changed, 26 insertions(+), 35 deletions(-)
16532
16533 commit 436201b6626b488d173c8076447000077c27b84a
16534 Author: David Howells <dhowells@redhat.com>
16535 Date: Fri Dec 18 01:34:26 2015 +0000
16536
16537 KEYS: Fix race between read and revoke
16538
16539 This fixes CVE-2015-7550.
16540
16541 There's a race between keyctl_read() and keyctl_revoke(). If the revoke
16542 happens between keyctl_read() checking the validity of a key and the key's
16543 semaphore being taken, then the key type read method will see a revoked key.
16544
16545 This causes a problem for the user-defined key type because it assumes in
16546 its read method that there will always be a payload in a non-revoked key
16547 and doesn't check for a NULL pointer.
16548
16549 Fix this by making keyctl_read() check the validity of a key after taking
16550 semaphore instead of before.
16551
16552 I think the bug was introduced with the original keyrings code.
16553
16554 This was discovered by a multithreaded test program generated by syzkaller
16555 (http://github.com/google/syzkaller). Here's a cleaned up version:
16556
16557 #include <sys/types.h>
16558 #include <keyutils.h>
16559 #include <pthread.h>
16560 void *thr0(void *arg)
16561 {
16562 key_serial_t key = (unsigned long)arg;
16563 keyctl_revoke(key);
16564 return 0;
16565 }
16566 void *thr1(void *arg)
16567 {
16568 key_serial_t key = (unsigned long)arg;
16569 char buffer[16];
16570 keyctl_read(key, buffer, 16);
16571 return 0;
16572 }
16573 int main()
16574 {
16575 key_serial_t key = add_key("user", "%", "foo", 3, KEY_SPEC_USER_KEYRING);
16576 pthread_t th[5];
16577 pthread_create(&th[0], 0, thr0, (void *)(unsigned long)key);
16578 pthread_create(&th[1], 0, thr1, (void *)(unsigned long)key);
16579 pthread_create(&th[2], 0, thr0, (void *)(unsigned long)key);
16580 pthread_create(&th[3], 0, thr1, (void *)(unsigned long)key);
16581 pthread_join(th[0], 0);
16582 pthread_join(th[1], 0);
16583 pthread_join(th[2], 0);
16584 pthread_join(th[3], 0);
16585 return 0;
16586 }
16587
16588 Build as:
16589
16590 cc -o keyctl-race keyctl-race.c -lkeyutils -lpthread
16591
16592 Run as:
16593
16594 while keyctl-race; do :; done
16595
16596 as it may need several iterations to crash the kernel. The crash can be
16597 summarised as:
16598
16599 BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
16600 IP: [<ffffffff81279b08>] user_read+0x56/0xa3
16601 ...
16602 Call Trace:
16603 [<ffffffff81276aa9>] keyctl_read_key+0xb6/0xd7
16604 [<ffffffff81277815>] SyS_keyctl+0x83/0xe0
16605 [<ffffffff815dbb97>] entry_SYSCALL_64_fastpath+0x12/0x6f
16606
16607 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16608 Signed-off-by: David Howells <dhowells@redhat.com>
16609 Tested-by: Dmitry Vyukov <dvyukov@google.com>
16610 Cc: stable@vger.kernel.org
16611 Signed-off-by: James Morris <james.l.morris@oracle.com>
16612
16613 security/keys/keyctl.c | 18 +++++++++---------
16614 1 files changed, 9 insertions(+), 9 deletions(-)
16615
16616 commit 195cea04477025da4a2078bd3e1fb7c4e11206c2
16617 Author: Brad Spengler <spender@grsecurity.net>
16618 Date: Tue Dec 22 20:44:01 2015 -0500
16619
16620 Add new kernel command-line param: pax_size_overflow_report_only
16621 If a user triggers a size_overflow violation that makes it difficult
16622 to obtain the call trace without serial console/net console, they can
16623 use this option to provide that information to us
16624
16625 Documentation/kernel-parameters.txt | 5 +++++
16626 fs/exec.c | 12 +++++++++---
16627 init/main.c | 11 +++++++++++
16628 3 files changed, 25 insertions(+), 3 deletions(-)
16629
16630 commit 4254a8da5851df8c08cdca5c392916e8c105408d
16631 Author: WANG Cong <xiyou.wangcong@gmail.com>
16632 Date: Mon Dec 21 10:55:45 2015 -0800
16633
16634 addrconf: always initialize sysctl table data
16635
16636 When sysctl performs restrict writes, it allows to write from
16637 a middle position of a sysctl file, which requires us to initialize
16638 the table data before calling proc_dostring() for the write case.
16639
16640 Fixes: 3d1bec99320d ("ipv6: introduce secret_stable to ipv6_devconf")
16641 Reported-by: Sasha Levin <sasha.levin@oracle.com>
16642 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16643 Tested-by: Sasha Levin <sasha.levin@oracle.com>
16644 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
16645 Signed-off-by: David S. Miller <davem@davemloft.net>
16646
16647 net/ipv6/addrconf.c | 11 ++++-------
16648 1 files changed, 4 insertions(+), 7 deletions(-)
16649
16650 commit f8002863fb06c363180637046947a78a6ccb3d33
16651 Author: WANG Cong <xiyou.wangcong@gmail.com>
16652 Date: Wed Dec 16 23:39:04 2015 -0800
16653
16654 net: check both type and procotol for tcp sockets
16655
16656 Dmitry reported the following out-of-bound access:
16657
16658 Call Trace:
16659 [<ffffffff816cec2e>] __asan_report_load4_noabort+0x3e/0x40
16660 mm/kasan/report.c:294
16661 [<ffffffff84affb14>] sock_setsockopt+0x1284/0x13d0 net/core/sock.c:880
16662 [< inline >] SYSC_setsockopt net/socket.c:1746
16663 [<ffffffff84aed7ee>] SyS_setsockopt+0x1fe/0x240 net/socket.c:1729
16664 [<ffffffff85c18c76>] entry_SYSCALL_64_fastpath+0x16/0x7a
16665 arch/x86/entry/entry_64.S:185
16666
16667 This is because we mistake a raw socket as a tcp socket.
16668 We should check both sk->sk_type and sk->sk_protocol to ensure
16669 it is a tcp socket.
16670
16671 Willem points out __skb_complete_tx_timestamp() needs to fix as well.
16672
16673 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16674 Cc: Willem de Bruijn <willemdebruijn.kernel@gmail.com>
16675 Cc: Eric Dumazet <eric.dumazet@gmail.com>
16676 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
16677 Acked-by: Willem de Bruijn <willemb@google.com>
16678 Signed-off-by: David S. Miller <davem@davemloft.net>
16679
16680 net/core/skbuff.c | 3 ++-
16681 net/core/sock.c | 3 ++-
16682 2 files changed, 4 insertions(+), 2 deletions(-)
16683
16684 commit bd6b3399804470a4ad8f34229469ca149dceba3d
16685 Author: Colin Ian King <colin.king@canonical.com>
16686 Date: Fri Dec 18 14:22:01 2015 -0800
16687
16688 proc: fix -ESRCH error when writing to /proc/$pid/coredump_filter
16689
16690 Writing to /proc/$pid/coredump_filter always returns -ESRCH because commit
16691 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") removed
16692 the setting of ret after the get_proc_task call and incorrectly left it as
16693 -ESRCH. Instead, return 0 when successful.
16694
16695 Example breakage:
16696
16697 echo 0 > /proc/self/coredump_filter
16698 bash: echo: write error: No such process
16699
16700 Fixes: 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()")
16701 Signed-off-by: Colin Ian King <colin.king@canonical.com>
16702 Acked-by: Kees Cook <keescook@chromium.org>
16703 Cc: <stable@vger.kernel.org> [4.3+]
16704 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
16705 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
16706
16707 fs/proc/base.c | 1 +
16708 1 files changed, 1 insertions(+), 0 deletions(-)
16709
16710 commit b28aca2b99ed08546778355fb9402c503ff9b29e
16711 Author: Junichi Nomura <j-nomura@ce.jp.nec.com>
16712 Date: Tue Dec 22 10:23:44 2015 -0700
16713
16714 block: ensure to split after potentially bouncing a bio
16715
16716 blk_queue_bio() does split then bounce, which makes the segment
16717 counting based on pages before bouncing and could go wrong. Move
16718 the split to after bouncing, like we do for blk-mq, and the we
16719 fix the issue of having the bio count for segments be wrong.
16720
16721 Fixes: 54efd50bfd87 ("block: make generic_make_request handle arbitrarily sized bios")
16722 Cc: stable@vger.kernel.org
16723 Tested-by: Artem S. Tashkinov <t.artem@lycos.com>
16724 Signed-off-by: Jens Axboe <axboe@fb.com>
16725
16726 block/blk-core.c | 4 ++--
16727 1 files changed, 2 insertions(+), 2 deletions(-)
16728
16729 commit e62a25e917a9e5b35ddd5b4f1b5e5e30fbd2e84c
16730 Merge: f6f63ae ec72fa5
16731 Author: Brad Spengler <spender@grsecurity.net>
16732 Date: Tue Dec 22 19:46:26 2015 -0500
16733
16734 Merge branch 'pax-test' into grsec-test
16735
16736 commit ec72fa5f8d9cb4e223bad1b8b5c2e1071c222f2a
16737 Author: Brad Spengler <spender@grsecurity.net>
16738 Date: Tue Dec 22 19:45:51 2015 -0500
16739
16740 Update to pax-linux-4.3.3-test13.patch:
16741 - Emese fixed a (probably) false positive integer truncation in xfs_da_grow_inode_int, reported by jdkbx (http://forums.grsecurity.net/viewtopic.php?f=3&t=4346)
16742 - fixed a size overflow in btrfs/try_merge_map, reported by Alex W (https://bugs.archlinux.org/task/47173) and mathias and dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4344)
16743
16744 arch/arm/mm/fault.c | 2 +-
16745 arch/x86/mm/fault.c | 2 +-
16746 fs/btrfs/extent_map.c | 8 ++++++--
16747 fs/xfs/libxfs/xfs_da_btree.c | 4 +++-
16748 4 files changed, 11 insertions(+), 5 deletions(-)
16749
16750 commit f6f63ae154cd45028add1dc41957878060d77fbf
16751 Author: Brad Spengler <spender@grsecurity.net>
16752 Date: Thu Dec 17 18:43:44 2015 -0500
16753
16754 ptrace_has_cap() checks whether the current process should be
16755 treated as having a certain capability for ptrace checks
16756 against another process. Until now, this was equivalent to
16757 has_ns_capability(current, target_ns, CAP_SYS_PTRACE).
16758
16759 However, if a root-owned process wants to enter a user
16760 namespace for some reason without knowing who owns it and
16761 therefore can't change to the namespace owner's uid and gid
16762 before entering, as soon as it has entered the namespace,
16763 the namespace owner can attach to it via ptrace and thereby
16764 gain access to its uid and gid.
16765
16766 While it is possible for the entering process to switch to
16767 the uid of a claimed namespace owner before entering,
16768 causing the attempt to enter to fail if the claimed uid is
16769 wrong, this doesn't solve the problem of determining an
16770 appropriate gid.
16771
16772 With this change, the entering process can first enter the
16773 namespace and then safely inspect the namespace's
16774 properties, e.g. through /proc/self/{uid_map,gid_map},
16775 assuming that the namespace owner doesn't have access to
16776 uid 0.
16777 Signed-off-by: Jann Horn <jann@thejh.net>
16778
16779 kernel/ptrace.c | 30 +++++++++++++++++++++++++-----
16780 1 files changed, 25 insertions(+), 5 deletions(-)
16781
16782 commit e314f0fb63020f61543b401ff594e953c2c304e5
16783 Author: tadeusz.struk@intel.com <tadeusz.struk@intel.com>
16784 Date: Tue Dec 15 10:46:17 2015 -0800
16785
16786 net: fix uninitialized variable issue
16787
16788 msg_iocb needs to be initialized on the recv/recvfrom path.
16789 Otherwise afalg will wrongly interpret it as an async call.
16790
16791 Cc: stable@vger.kernel.org
16792 Reported-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
16793 Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com>
16794 Signed-off-by: David S. Miller <davem@davemloft.net>
16795
16796 net/socket.c | 1 +
16797 1 files changed, 1 insertions(+), 0 deletions(-)
16798
16799 commit a3f56a43ad56b8fcaf04f6327636ed2f5970de3b
16800 Merge: dfa764c 142edcf
16801 Author: Brad Spengler <spender@grsecurity.net>
16802 Date: Wed Dec 16 21:01:17 2015 -0500
16803
16804 Merge branch 'pax-test' into grsec-test
16805
16806 commit 142edcf1005a57fb8887823565cf0bafad2f313c
16807 Author: Brad Spengler <spender@grsecurity.net>
16808 Date: Wed Dec 16 21:00:57 2015 -0500
16809
16810 Update to pax-linux-4.3.3-test12.patch:
16811 - Emese fixed a size overflow false positive in reiserfs/leaf_paste_entries, reported by Christian Apeltauer (https://bugs.gentoo.org/show_bug.cgi?id=568046)
16812 - fixed a bunch of int/size_t mismatches in the drivers/tty/n_tty.c code causing size overflow false positives, reported by Toralf Förster, mathias (https://forums.grsecurity.net/viewtopic.php?f=3&t=4342), N8Fear (https://forums.grsecurity.net/viewtopic.php?f=3&t=4341)
16813
16814 drivers/tty/n_tty.c | 16 ++++++++--------
16815 .../disable_size_overflow_hash.data | 2 ++
16816 .../size_overflow_plugin/size_overflow_hash.data | 6 ++----
16817 3 files changed, 12 insertions(+), 12 deletions(-)
16818
16819 commit dfa764cc549892a5bfc1083cac78b99032cae577
16820 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
16821 Date: Tue Dec 15 22:59:12 2015 +0100
16822
16823 ipv6: automatically enable stable privacy mode if stable_secret set
16824
16825 Bjørn reported that while we switch all interfaces to privacy stable mode
16826 when setting the secret, we don't set this mode for new interfaces. This
16827 does not make sense, so change this behaviour.
16828
16829 Fixes: 622c81d57b392cc ("ipv6: generation of stable privacy addresses for link-local and autoconf")
16830 Reported-by: Bjørn Mork <bjorn@mork.no>
16831 Cc: Bjørn Mork <bjorn@mork.no>
16832 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16833 Signed-off-by: David S. Miller <davem@davemloft.net>
16834
16835 net/ipv6/addrconf.c | 6 ++++++
16836 1 files changed, 6 insertions(+), 0 deletions(-)
16837
16838 commit c2815a1fee03f222273e77c14e43f960da06f35a
16839 Author: Brad Spengler <spender@grsecurity.net>
16840 Date: Wed Dec 16 13:03:38 2015 -0500
16841
16842 Work around upstream limitation on the number of thread info flags causing a compilation error
16843 Reported by fabled at http://forums.grsecurity.net/viewtopic.php?f=3&t=4339
16844
16845 arch/arm/kernel/entry-common.S | 8 ++++++--
16846 1 files changed, 6 insertions(+), 2 deletions(-)
16847
16848 commit 8c9ae168e09ae49324d709d76d73d9fc4ca477e1
16849 Author: Brad Spengler <spender@grsecurity.net>
16850 Date: Tue Dec 15 19:03:41 2015 -0500
16851
16852 Initial import of grsecurity 3.1 for Linux 4.3.3
16853
16854 Documentation/dontdiff | 2 +
16855 Documentation/kernel-parameters.txt | 7 +
16856 Documentation/sysctl/kernel.txt | 15 +
16857 Makefile | 18 +-
16858 arch/alpha/include/asm/cache.h | 4 +-
16859 arch/alpha/kernel/osf_sys.c | 12 +-
16860 arch/arc/Kconfig | 1 +
16861 arch/arm/Kconfig | 1 +
16862 arch/arm/Kconfig.debug | 1 +
16863 arch/arm/include/asm/thread_info.h | 7 +-
16864 arch/arm/kernel/process.c | 4 +-
16865 arch/arm/kernel/ptrace.c | 9 +
16866 arch/arm/kernel/traps.c | 7 +-
16867 arch/arm/mm/Kconfig | 2 +-
16868 arch/arm/mm/fault.c | 40 +-
16869 arch/arm/mm/mmap.c | 8 +-
16870 arch/arm/net/bpf_jit_32.c | 51 +-
16871 arch/arm64/Kconfig.debug | 1 +
16872 arch/avr32/include/asm/cache.h | 4 +-
16873 arch/blackfin/Kconfig.debug | 1 +
16874 arch/blackfin/include/asm/cache.h | 3 +-
16875 arch/cris/include/arch-v10/arch/cache.h | 3 +-
16876 arch/cris/include/arch-v32/arch/cache.h | 3 +-
16877 arch/frv/include/asm/cache.h | 3 +-
16878 arch/frv/mm/elf-fdpic.c | 4 +-
16879 arch/hexagon/include/asm/cache.h | 6 +-
16880 arch/ia64/Kconfig | 1 +
16881 arch/ia64/include/asm/cache.h | 3 +-
16882 arch/ia64/kernel/sys_ia64.c | 2 +
16883 arch/ia64/mm/hugetlbpage.c | 2 +
16884 arch/m32r/include/asm/cache.h | 4 +-
16885 arch/m68k/include/asm/cache.h | 4 +-
16886 arch/metag/mm/hugetlbpage.c | 1 +
16887 arch/microblaze/include/asm/cache.h | 3 +-
16888 arch/mips/Kconfig | 1 +
16889 arch/mips/include/asm/cache.h | 3 +-
16890 arch/mips/include/asm/thread_info.h | 11 +-
16891 arch/mips/kernel/irq.c | 3 +
16892 arch/mips/kernel/ptrace.c | 9 +
16893 arch/mips/mm/mmap.c | 4 +-
16894 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
16895 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
16896 arch/openrisc/include/asm/cache.h | 4 +-
16897 arch/parisc/include/asm/cache.h | 5 +-
16898 arch/parisc/kernel/sys_parisc.c | 4 +
16899 arch/powerpc/Kconfig | 1 +
16900 arch/powerpc/include/asm/cache.h | 4 +-
16901 arch/powerpc/include/asm/thread_info.h | 5 +-
16902 arch/powerpc/kernel/Makefile | 2 +
16903 arch/powerpc/kernel/irq.c | 3 +
16904 arch/powerpc/kernel/process.c | 10 +-
16905 arch/powerpc/kernel/ptrace.c | 14 +
16906 arch/powerpc/kernel/traps.c | 5 +
16907 arch/powerpc/mm/slice.c | 2 +-
16908 arch/s390/Kconfig.debug | 1 +
16909 arch/s390/include/asm/cache.h | 4 +-
16910 arch/score/include/asm/cache.h | 4 +-
16911 arch/sh/include/asm/cache.h | 3 +-
16912 arch/sh/mm/mmap.c | 6 +-
16913 arch/sparc/include/asm/cache.h | 4 +-
16914 arch/sparc/include/asm/pgalloc_64.h | 1 +
16915 arch/sparc/include/asm/thread_info_64.h | 8 +-
16916 arch/sparc/kernel/process_32.c | 6 +-
16917 arch/sparc/kernel/process_64.c | 8 +-
16918 arch/sparc/kernel/ptrace_64.c | 14 +
16919 arch/sparc/kernel/sys_sparc_64.c | 8 +-
16920 arch/sparc/kernel/syscalls.S | 8 +-
16921 arch/sparc/kernel/traps_32.c | 8 +-
16922 arch/sparc/kernel/traps_64.c | 28 +-
16923 arch/sparc/kernel/unaligned_64.c | 2 +-
16924 arch/sparc/mm/fault_64.c | 2 +-
16925 arch/sparc/mm/hugetlbpage.c | 15 +-
16926 arch/tile/Kconfig | 1 +
16927 arch/tile/include/asm/cache.h | 3 +-
16928 arch/tile/mm/hugetlbpage.c | 2 +
16929 arch/um/include/asm/cache.h | 3 +-
16930 arch/unicore32/include/asm/cache.h | 6 +-
16931 arch/x86/Kconfig | 21 +
16932 arch/x86/Kconfig.debug | 2 +
16933 arch/x86/entry/common.c | 14 +
16934 arch/x86/entry/entry_32.S | 2 +-
16935 arch/x86/entry/entry_64.S | 2 +-
16936 arch/x86/ia32/ia32_aout.c | 2 +
16937 arch/x86/include/asm/floppy.h | 20 +-
16938 arch/x86/include/asm/fpu/types.h | 69 +-
16939 arch/x86/include/asm/io.h | 2 +-
16940 arch/x86/include/asm/page.h | 12 +-
16941 arch/x86/include/asm/paravirt_types.h | 23 +-
16942 arch/x86/include/asm/processor.h | 12 +-
16943 arch/x86/include/asm/thread_info.h | 6 +-
16944 arch/x86/include/asm/uaccess.h | 2 +-
16945 arch/x86/kernel/dumpstack.c | 10 +-
16946 arch/x86/kernel/dumpstack_32.c | 2 +-
16947 arch/x86/kernel/dumpstack_64.c | 2 +-
16948 arch/x86/kernel/ioport.c | 13 +
16949 arch/x86/kernel/irq_32.c | 3 +
16950 arch/x86/kernel/irq_64.c | 4 +
16951 arch/x86/kernel/ldt.c | 18 +
16952 arch/x86/kernel/msr.c | 10 +
16953 arch/x86/kernel/ptrace.c | 14 +
16954 arch/x86/kernel/signal.c | 9 +-
16955 arch/x86/kernel/sys_i386_32.c | 9 +-
16956 arch/x86/kernel/sys_x86_64.c | 8 +-
16957 arch/x86/kernel/traps.c | 5 +
16958 arch/x86/kernel/verify_cpu.S | 1 +
16959 arch/x86/kernel/vm86_32.c | 15 +
16960 arch/x86/kvm/svm.c | 14 +-
16961 arch/x86/mm/fault.c | 12 +-
16962 arch/x86/mm/hugetlbpage.c | 15 +-
16963 arch/x86/mm/init.c | 66 +-
16964 arch/x86/mm/init_32.c | 6 +-
16965 arch/x86/net/bpf_jit_comp.c | 4 +
16966 arch/x86/platform/efi/efi_64.c | 2 +-
16967 arch/x86/xen/Kconfig | 1 +
16968 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
16969 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
16970 crypto/ablkcipher.c | 2 +-
16971 crypto/blkcipher.c | 2 +-
16972 crypto/scatterwalk.c | 10 +-
16973 drivers/acpi/acpica/hwxfsleep.c | 11 +-
16974 drivers/acpi/custom_method.c | 4 +
16975 drivers/block/cciss.h | 30 +-
16976 drivers/block/smart1,2.h | 40 +-
16977 drivers/cdrom/cdrom.c | 2 +-
16978 drivers/char/Kconfig | 4 +-
16979 drivers/char/genrtc.c | 1 +
16980 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
16981 drivers/char/mem.c | 17 +
16982 drivers/char/random.c | 5 +-
16983 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
16984 drivers/crypto/nx/nx-aes-ccm.c | 2 +-
16985 drivers/crypto/nx/nx-aes-gcm.c | 2 +-
16986 drivers/crypto/talitos.c | 2 +-
16987 drivers/firewire/ohci.c | 4 +
16988 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
16989 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
16990 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
16991 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
16992 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
16993 drivers/hid/hid-wiimote-debug.c | 2 +-
16994 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
16995 drivers/iommu/Kconfig | 1 +
16996 drivers/iommu/amd_iommu.c | 14 +-
16997 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
16998 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
16999 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
17000 drivers/isdn/hisax/config.c | 2 +-
17001 drivers/isdn/hisax/hfc_pci.c | 2 +-
17002 drivers/isdn/hisax/hfc_sx.c | 2 +-
17003 drivers/isdn/hisax/q931.c | 6 +-
17004 drivers/isdn/i4l/isdn_concap.c | 6 +-
17005 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
17006 drivers/md/bcache/Kconfig | 1 +
17007 drivers/md/raid5.c | 8 +
17008 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
17009 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
17010 drivers/media/platform/vivid/vivid-osd.c | 1 +
17011 drivers/media/radio/radio-cadet.c | 5 +-
17012 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
17013 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
17014 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
17015 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
17016 drivers/message/fusion/mptbase.c | 9 +
17017 drivers/misc/sgi-xp/xp_main.c | 12 +-
17018 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
17019 drivers/net/ppp/pppoe.c | 14 +-
17020 drivers/net/ppp/pptp.c | 6 +
17021 drivers/net/slip/slhc.c | 3 +
17022 drivers/net/wan/lmc/lmc_media.c | 97 +-
17023 drivers/net/wan/x25_asy.c | 6 +-
17024 drivers/net/wan/z85230.c | 24 +-
17025 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
17026 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
17027 drivers/pci/pci-sysfs.c | 2 +-
17028 drivers/pci/proc.c | 9 +
17029 drivers/platform/x86/asus-wmi.c | 12 +
17030 drivers/rtc/rtc-dev.c | 3 +
17031 drivers/scsi/bfa/bfa_fcs.c | 19 +-
17032 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
17033 drivers/scsi/bfa/bfa_modules.h | 12 +-
17034 drivers/scsi/hpsa.h | 40 +-
17035 drivers/staging/dgnc/dgnc_mgmt.c | 1 +
17036 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
17037 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
17038 drivers/target/target_core_sbc.c | 17 +-
17039 drivers/target/target_core_transport.c | 14 +-
17040 drivers/tty/serial/uartlite.c | 4 +-
17041 drivers/tty/sysrq.c | 2 +-
17042 drivers/tty/vt/keyboard.c | 22 +-
17043 drivers/uio/uio.c | 6 +-
17044 drivers/usb/core/hub.c | 5 +
17045 drivers/usb/gadget/function/f_uac1.c | 1 +
17046 drivers/usb/gadget/function/u_uac1.c | 1 +
17047 drivers/usb/host/hwa-hc.c | 9 +-
17048 drivers/usb/usbip/vhci_sysfs.c | 2 +-
17049 drivers/video/fbdev/arcfb.c | 2 +-
17050 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
17051 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
17052 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
17053 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++-----
17054 drivers/xen/xenfs/xenstored.c | 5 +
17055 firmware/Makefile | 2 +
17056 firmware/WHENCE | 20 +-
17057 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
17058 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
17059 fs/9p/vfs_inode.c | 4 +-
17060 fs/attr.c | 1 +
17061 fs/autofs4/waitq.c | 9 +
17062 fs/binfmt_aout.c | 7 +
17063 fs/binfmt_elf.c | 50 +-
17064 fs/compat.c | 20 +-
17065 fs/coredump.c | 17 +-
17066 fs/dcache.c | 3 +
17067 fs/debugfs/inode.c | 11 +-
17068 fs/exec.c | 219 +-
17069 fs/ext2/balloc.c | 4 +-
17070 fs/ext2/super.c | 8 +-
17071 fs/ext4/balloc.c | 4 +-
17072 fs/fcntl.c | 4 +
17073 fs/fhandle.c | 3 +-
17074 fs/file.c | 4 +
17075 fs/filesystems.c | 4 +
17076 fs/fs_struct.c | 20 +-
17077 fs/hugetlbfs/inode.c | 5 +-
17078 fs/inode.c | 8 +-
17079 fs/kernfs/dir.c | 6 +
17080 fs/mount.h | 4 +-
17081 fs/namei.c | 286 +-
17082 fs/namespace.c | 24 +
17083 fs/nfsd/nfscache.c | 2 +-
17084 fs/open.c | 38 +
17085 fs/overlayfs/inode.c | 11 +-
17086 fs/overlayfs/super.c | 6 +-
17087 fs/pipe.c | 2 +-
17088 fs/posix_acl.c | 15 +-
17089 fs/proc/Kconfig | 10 +-
17090 fs/proc/array.c | 69 +-
17091 fs/proc/base.c | 186 +-
17092 fs/proc/cmdline.c | 4 +
17093 fs/proc/devices.c | 4 +
17094 fs/proc/fd.c | 17 +-
17095 fs/proc/generic.c | 64 +
17096 fs/proc/inode.c | 17 +
17097 fs/proc/internal.h | 11 +-
17098 fs/proc/interrupts.c | 4 +
17099 fs/proc/kcore.c | 3 +
17100 fs/proc/meminfo.c | 7 +-
17101 fs/proc/namespaces.c | 4 +-
17102 fs/proc/proc_net.c | 31 +
17103 fs/proc/proc_sysctl.c | 52 +-
17104 fs/proc/root.c | 8 +
17105 fs/proc/stat.c | 69 +-
17106 fs/proc/task_mmu.c | 66 +-
17107 fs/readdir.c | 19 +
17108 fs/reiserfs/item_ops.c | 24 +-
17109 fs/reiserfs/super.c | 4 +
17110 fs/select.c | 2 +
17111 fs/seq_file.c | 30 +-
17112 fs/splice.c | 8 +
17113 fs/stat.c | 20 +-
17114 fs/sysfs/dir.c | 30 +-
17115 fs/sysv/inode.c | 11 +-
17116 fs/utimes.c | 7 +
17117 fs/xattr.c | 26 +-
17118 grsecurity/Kconfig | 1182 ++++
17119 grsecurity/Makefile | 54 +
17120 grsecurity/gracl.c | 2757 +++++++++
17121 grsecurity/gracl_alloc.c | 105 +
17122 grsecurity/gracl_cap.c | 127 +
17123 grsecurity/gracl_compat.c | 269 +
17124 grsecurity/gracl_fs.c | 448 ++
17125 grsecurity/gracl_ip.c | 386 ++
17126 grsecurity/gracl_learn.c | 207 +
17127 grsecurity/gracl_policy.c | 1786 ++++++
17128 grsecurity/gracl_res.c | 68 +
17129 grsecurity/gracl_segv.c | 304 +
17130 grsecurity/gracl_shm.c | 40 +
17131 grsecurity/grsec_chdir.c | 19 +
17132 grsecurity/grsec_chroot.c | 467 ++
17133 grsecurity/grsec_disabled.c | 445 ++
17134 grsecurity/grsec_exec.c | 189 +
17135 grsecurity/grsec_fifo.c | 26 +
17136 grsecurity/grsec_fork.c | 23 +
17137 grsecurity/grsec_init.c | 290 +
17138 grsecurity/grsec_ipc.c | 48 +
17139 grsecurity/grsec_link.c | 65 +
17140 grsecurity/grsec_log.c | 340 +
17141 grsecurity/grsec_mem.c | 48 +
17142 grsecurity/grsec_mount.c | 65 +
17143 grsecurity/grsec_pax.c | 47 +
17144 grsecurity/grsec_proc.c | 20 +
17145 grsecurity/grsec_ptrace.c | 30 +
17146 grsecurity/grsec_sig.c | 236 +
17147 grsecurity/grsec_sock.c | 244 +
17148 grsecurity/grsec_sysctl.c | 488 ++
17149 grsecurity/grsec_time.c | 16 +
17150 grsecurity/grsec_tpe.c | 78 +
17151 grsecurity/grsec_usb.c | 15 +
17152 grsecurity/grsum.c | 64 +
17153 include/linux/binfmts.h | 5 +-
17154 include/linux/bitops.h | 2 +-
17155 include/linux/capability.h | 13 +
17156 include/linux/compiler-gcc.h | 5 +
17157 include/linux/compiler.h | 8 +
17158 include/linux/cred.h | 8 +-
17159 include/linux/dcache.h | 5 +-
17160 include/linux/fs.h | 24 +-
17161 include/linux/fs_struct.h | 2 +-
17162 include/linux/fsnotify.h | 6 +
17163 include/linux/gracl.h | 342 +
17164 include/linux/gracl_compat.h | 156 +
17165 include/linux/gralloc.h | 9 +
17166 include/linux/grdefs.h | 140 +
17167 include/linux/grinternal.h | 230 +
17168 include/linux/grmsg.h | 118 +
17169 include/linux/grsecurity.h | 255 +
17170 include/linux/grsock.h | 19 +
17171 include/linux/ipc.h | 2 +-
17172 include/linux/ipc_namespace.h | 2 +-
17173 include/linux/kallsyms.h | 18 +-
17174 include/linux/kmod.h | 5 +
17175 include/linux/kobject.h | 2 +-
17176 include/linux/lsm_hooks.h | 4 +-
17177 include/linux/mm.h | 12 +
17178 include/linux/mm_types.h | 4 +-
17179 include/linux/module.h | 5 +-
17180 include/linux/mount.h | 2 +-
17181 include/linux/msg.h | 2 +-
17182 include/linux/netfilter/xt_gradm.h | 9 +
17183 include/linux/path.h | 4 +-
17184 include/linux/perf_event.h | 13 +-
17185 include/linux/pid_namespace.h | 2 +-
17186 include/linux/printk.h | 2 +-
17187 include/linux/proc_fs.h | 22 +-
17188 include/linux/proc_ns.h | 2 +-
17189 include/linux/ptrace.h | 24 +-
17190 include/linux/random.h | 2 +-
17191 include/linux/rbtree_augmented.h | 4 +-
17192 include/linux/scatterlist.h | 12 +-
17193 include/linux/sched.h | 114 +-
17194 include/linux/security.h | 1 +
17195 include/linux/sem.h | 2 +-
17196 include/linux/seq_file.h | 5 +
17197 include/linux/shm.h | 6 +-
17198 include/linux/skbuff.h | 3 +
17199 include/linux/slab.h | 9 -
17200 include/linux/sysctl.h | 8 +-
17201 include/linux/thread_info.h | 6 +-
17202 include/linux/tty.h | 2 +-
17203 include/linux/tty_driver.h | 4 +-
17204 include/linux/uidgid.h | 5 +
17205 include/linux/user_namespace.h | 2 +-
17206 include/linux/utsname.h | 2 +-
17207 include/linux/vermagic.h | 16 +-
17208 include/linux/vmalloc.h | 20 +-
17209 include/net/af_unix.h | 2 +-
17210 include/net/dst.h | 33 +
17211 include/net/ip.h | 2 +-
17212 include/net/neighbour.h | 2 +-
17213 include/net/net_namespace.h | 2 +-
17214 include/net/sock.h | 4 +-
17215 include/target/target_core_base.h | 2 +-
17216 include/trace/events/fs.h | 53 +
17217 include/uapi/linux/personality.h | 1 +
17218 init/Kconfig | 4 +-
17219 init/main.c | 35 +-
17220 ipc/mqueue.c | 1 +
17221 ipc/msg.c | 3 +-
17222 ipc/sem.c | 3 +-
17223 ipc/shm.c | 26 +-
17224 ipc/util.c | 6 +
17225 kernel/auditsc.c | 2 +-
17226 kernel/bpf/syscall.c | 8 +-
17227 kernel/capability.c | 41 +-
17228 kernel/cgroup.c | 5 +-
17229 kernel/compat.c | 1 +
17230 kernel/configs.c | 11 +
17231 kernel/cred.c | 112 +-
17232 kernel/events/core.c | 16 +-
17233 kernel/exit.c | 10 +-
17234 kernel/fork.c | 86 +-
17235 kernel/futex.c | 6 +-
17236 kernel/futex_compat.c | 2 +-
17237 kernel/kallsyms.c | 9 +
17238 kernel/kcmp.c | 8 +-
17239 kernel/kexec_core.c | 2 +-
17240 kernel/kmod.c | 95 +-
17241 kernel/kprobes.c | 7 +-
17242 kernel/ksysfs.c | 2 +
17243 kernel/locking/lockdep_proc.c | 10 +-
17244 kernel/module.c | 108 +-
17245 kernel/panic.c | 4 +-
17246 kernel/pid.c | 23 +-
17247 kernel/power/Kconfig | 2 +
17248 kernel/printk/printk.c | 20 +-
17249 kernel/ptrace.c | 56 +-
17250 kernel/resource.c | 10 +
17251 kernel/sched/core.c | 11 +-
17252 kernel/signal.c | 37 +-
17253 kernel/sys.c | 64 +-
17254 kernel/sysctl.c | 172 +-
17255 kernel/taskstats.c | 6 +
17256 kernel/time/posix-timers.c | 8 +
17257 kernel/time/time.c | 5 +
17258 kernel/time/timekeeping.c | 3 +
17259 kernel/time/timer_list.c | 13 +-
17260 kernel/time/timer_stats.c | 10 +-
17261 kernel/trace/Kconfig | 2 +
17262 kernel/trace/trace_syscalls.c | 8 +
17263 kernel/user_namespace.c | 15 +
17264 lib/Kconfig.debug | 13 +-
17265 lib/Kconfig.kasan | 2 +-
17266 lib/is_single_threaded.c | 3 +
17267 lib/list_debug.c | 65 +-
17268 lib/nlattr.c | 2 +
17269 lib/rbtree.c | 4 +-
17270 lib/vsprintf.c | 39 +-
17271 localversion-grsec | 1 +
17272 mm/Kconfig | 8 +-
17273 mm/Kconfig.debug | 1 +
17274 mm/filemap.c | 1 +
17275 mm/kmemleak.c | 4 +-
17276 mm/memory.c | 2 +-
17277 mm/mempolicy.c | 12 +-
17278 mm/migrate.c | 3 +-
17279 mm/mlock.c | 6 +-
17280 mm/mmap.c | 93 +-
17281 mm/mprotect.c | 8 +
17282 mm/oom_kill.c | 28 +-
17283 mm/page_alloc.c | 2 +-
17284 mm/process_vm_access.c | 8 +-
17285 mm/shmem.c | 36 +-
17286 mm/slab.c | 14 +-
17287 mm/slab_common.c | 2 +-
17288 mm/slob.c | 12 +
17289 mm/slub.c | 33 +-
17290 mm/util.c | 3 +
17291 mm/vmalloc.c | 129 +-
17292 mm/vmstat.c | 29 +-
17293 net/appletalk/atalk_proc.c | 2 +-
17294 net/atm/lec.c | 6 +-
17295 net/atm/mpoa_caches.c | 42 +-
17296 net/bluetooth/sco.c | 3 +
17297 net/can/bcm.c | 2 +-
17298 net/can/proc.c | 2 +-
17299 net/core/dev_ioctl.c | 7 +-
17300 net/core/filter.c | 8 +-
17301 net/core/net-procfs.c | 17 +-
17302 net/core/pktgen.c | 2 +-
17303 net/core/sock.c | 3 +-
17304 net/core/sysctl_net_core.c | 2 +-
17305 net/decnet/dn_dev.c | 2 +-
17306 net/ipv4/devinet.c | 6 +-
17307 net/ipv4/inet_hashtables.c | 4 +
17308 net/ipv4/ip_input.c | 7 +
17309 net/ipv4/ip_sockglue.c | 3 +-
17310 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
17311 net/ipv4/netfilter/nf_nat_pptp.c | 2 +-
17312 net/ipv4/route.c | 6 +-
17313 net/ipv4/tcp_input.c | 4 +-
17314 net/ipv4/tcp_ipv4.c | 29 +-
17315 net/ipv4/tcp_minisocks.c | 9 +-
17316 net/ipv4/tcp_timer.c | 11 +
17317 net/ipv4/udp.c | 24 +
17318 net/ipv6/addrconf.c | 13 +-
17319 net/ipv6/proc.c | 2 +-
17320 net/ipv6/tcp_ipv6.c | 26 +-
17321 net/ipv6/udp.c | 7 +
17322 net/ipx/ipx_proc.c | 2 +-
17323 net/irda/irproc.c | 2 +-
17324 net/llc/llc_proc.c | 2 +-
17325 net/netfilter/Kconfig | 10 +
17326 net/netfilter/Makefile | 1 +
17327 net/netfilter/nf_conntrack_core.c | 8 +
17328 net/netfilter/xt_gradm.c | 51 +
17329 net/netfilter/xt_hashlimit.c | 4 +-
17330 net/netfilter/xt_recent.c | 2 +-
17331 net/sched/sch_api.c | 2 +-
17332 net/sctp/socket.c | 4 +-
17333 net/socket.c | 75 +-
17334 net/sunrpc/Kconfig | 1 +
17335 net/sunrpc/cache.c | 2 +-
17336 net/sunrpc/stats.c | 2 +-
17337 net/sysctl_net.c | 2 +-
17338 net/unix/af_unix.c | 52 +-
17339 net/vmw_vsock/vmci_transport_notify.c | 30 +-
17340 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
17341 net/x25/sysctl_net_x25.c | 2 +-
17342 net/x25/x25_proc.c | 2 +-
17343 scripts/package/Makefile | 2 +-
17344 scripts/package/mkspec | 41 +-
17345 security/Kconfig | 369 +-
17346 security/apparmor/file.c | 4 +-
17347 security/apparmor/lsm.c | 8 +-
17348 security/commoncap.c | 36 +-
17349 security/min_addr.c | 2 +
17350 security/smack/smack_lsm.c | 8 +-
17351 security/tomoyo/file.c | 12 +-
17352 security/tomoyo/mount.c | 4 +
17353 security/tomoyo/tomoyo.c | 20 +-
17354 security/yama/Kconfig | 2 +-
17355 security/yama/yama_lsm.c | 4 +-
17356 sound/synth/emux/emux_seq.c | 14 +-
17357 sound/usb/line6/driver.c | 40 +-
17358 sound/usb/line6/toneport.c | 12 +-
17359 tools/gcc/.gitignore | 1 +
17360 tools/gcc/Makefile | 12 +
17361 tools/gcc/gen-random-seed.sh | 8 +
17362 tools/gcc/randomize_layout_plugin.c | 930 +++
17363 tools/gcc/size_overflow_plugin/.gitignore | 1 +
17364 .../size_overflow_plugin/size_overflow_hash.data | 459 ++-
17365 511 files changed, 32631 insertions(+), 3196 deletions(-)
17366
17367 commit a76adb92ce39aee8eec5a025c828030ad6135c6d
17368 Author: Brad Spengler <spender@grsecurity.net>
17369 Date: Tue Dec 15 14:31:49 2015 -0500
17370
17371 Update to pax-linux-4.3.3-test11.patch:
17372 - fixed a few compile regressions with the recent plugin changes, reported by spender
17373 - updated the size overflow hash table
17374
17375 tools/gcc/latent_entropy_plugin.c | 2 +-
17376 .../size_overflow_plugin/size_overflow_hash.data | 66 +++++++++++++++++---
17377 tools/gcc/stackleak_plugin.c | 2 +-
17378 tools/gcc/structleak_plugin.c | 6 +--
17379 4 files changed, 60 insertions(+), 16 deletions(-)
17380
17381 commit f7284b1fc06628fcb2d35d2beecdea5454d46af9
17382 Author: Brad Spengler <spender@grsecurity.net>
17383 Date: Tue Dec 15 11:50:24 2015 -0500
17384
17385 Apply structleak ICE fix for gcc < 4.9
17386
17387 tools/gcc/structleak_plugin.c | 4 ++++
17388 1 files changed, 4 insertions(+), 0 deletions(-)
17389
17390 commit 92fe3eb9fd10ec7f7334decab1526989669b0287
17391 Author: Brad Spengler <spender@grsecurity.net>
17392 Date: Tue Dec 15 07:57:06 2015 -0500
17393
17394 Update to pax-linux-4.3.1-test10.patch:
17395 - Emese fixed INDIRECT_REF and TARGET_MEM_REF handling in the initify plugin
17396 - Emese regenerated the size overflow hash tables for 4.3
17397 - fixed some compat syscall exit paths to restore r12 under KERNEXEC/or
17398 - the latent entropy, stackleak and structleak plugins no longer split the entry block unnecessarily
17399
17400 arch/x86/entry/entry_64.S | 2 +-
17401 arch/x86/entry/entry_64_compat.S | 15 +-
17402 scripts/package/builddeb | 2 +-
17403 tools/gcc/initify_plugin.c | 11 +-
17404 tools/gcc/latent_entropy_plugin.c | 20 +-
17405 .../disable_size_overflow_hash.data | 4 +
17406 .../size_overflow_plugin/size_overflow_hash.data | 5345 +++++++++++---------
17407 tools/gcc/stackleak_plugin.c | 26 +-
17408 tools/gcc/structleak_plugin.c | 21 +-
17409 9 files changed, 3079 insertions(+), 2367 deletions(-)
17410
17411 commit 5bd245cb687319079c2f1c0d6a1170791ed1ed2c
17412 Merge: b5847e6 3548341
17413 Author: Brad Spengler <spender@grsecurity.net>
17414 Date: Tue Dec 15 07:47:56 2015 -0500
17415
17416 Merge branch 'linux-4.3.y' into pax-4_3
17417
17418 Conflicts:
17419 net/unix/af_unix.c
17420
17421 commit b5847e6a896c5d99191135ca4d7c3b6be8f116ff
17422 Author: Brad Spengler <spender@grsecurity.net>
17423 Date: Wed Dec 9 23:11:36 2015 -0500
17424
17425 Update to pax-linux-4.3.1-test9.patch:
17426 - fixed __get_user on x86 to lie less about the size of the load, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4332)
17427 - Emese fixed an intentional overflow caused by gcc, reported by saironiq (https://forums.grsecurity.net/viewtopic.php?f=3&t=4333)
17428 - Emese fixed a false positive overflow report in the forcedeth driver, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?t=4334)
17429 - Emese fixed a false positive overflow report in KVM's emulator, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4336)
17430 - Emese fixed the initify plugin to detect some captured use of __func__, reported by Rasmus Villemoes <linux@rasmusvillemoes.dk>
17431 - constrained shmmax and shmall to avoid triggering size overflow checks, reported by Mathias Krause <minipli@ld-linux.so>
17432 - the checker plugin can partially handle sparse's locking context annotations, it's context insensitive and thus not exactly useful for now, also see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59856
17433
17434 Makefile | 6 +
17435 arch/x86/include/asm/compat.h | 4 +
17436 arch/x86/include/asm/dma.h | 2 +
17437 arch/x86/include/asm/pmem.h | 2 +-
17438 arch/x86/include/asm/uaccess.h | 20 +-
17439 arch/x86/kernel/apic/vector.c | 6 +-
17440 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
17441 arch/x86/kernel/cpu/perf_event_intel.c | 28 +-
17442 arch/x86/kernel/head_64.S | 1 -
17443 arch/x86/kvm/i8259.c | 10 +-
17444 arch/x86/kvm/ioapic.c | 2 +
17445 arch/x86/kvm/x86.c | 2 +
17446 arch/x86/lib/usercopy_64.c | 2 +-
17447 arch/x86/mm/mpx.c | 4 +-
17448 arch/x86/mm/pageattr.c | 7 +
17449 drivers/base/devres.c | 4 +-
17450 drivers/base/power/runtime.c | 6 +-
17451 drivers/base/regmap/regmap.c | 4 +-
17452 drivers/block/drbd/drbd_receiver.c | 4 +-
17453 drivers/block/drbd/drbd_worker.c | 6 +-
17454 drivers/char/virtio_console.c | 6 +-
17455 drivers/md/dm.c | 12 +-
17456 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
17457 drivers/net/macvtap.c | 4 +-
17458 drivers/video/fbdev/core/fbmem.c | 10 +-
17459 fs/compat.c | 3 +-
17460 fs/coredump.c | 2 +-
17461 fs/dcache.c | 13 +-
17462 fs/fhandle.c | 2 +-
17463 fs/file.c | 14 +-
17464 fs/fs-writeback.c | 11 +-
17465 fs/overlayfs/copy_up.c | 2 +-
17466 fs/readdir.c | 3 +-
17467 fs/super.c | 3 +-
17468 include/linux/compiler.h | 36 ++-
17469 include/linux/rcupdate.h | 8 +
17470 include/linux/sched.h | 4 +-
17471 include/linux/seqlock.h | 10 +
17472 include/linux/spinlock.h | 17 +-
17473 include/linux/srcu.h | 5 +-
17474 include/linux/syscalls.h | 2 +-
17475 include/linux/writeback.h | 3 +-
17476 include/uapi/linux/swab.h | 6 +-
17477 ipc/ipc_sysctl.c | 6 +
17478 kernel/exit.c | 25 +-
17479 kernel/resource.c | 4 +-
17480 kernel/signal.c | 12 +-
17481 kernel/user.c | 2 +-
17482 kernel/workqueue.c | 6 +-
17483 lib/rhashtable.c | 4 +-
17484 net/compat.c | 2 +-
17485 net/ipv4/xfrm4_mode_transport.c | 2 +-
17486 security/keys/internal.h | 8 +-
17487 security/keys/keyring.c | 4 -
17488 sound/core/seq/seq_clientmgr.c | 8 +-
17489 sound/core/seq/seq_compat.c | 2 +-
17490 sound/core/seq/seq_memory.c | 6 +-
17491 tools/gcc/checker_plugin.c | 415 +++++++++++++++++++-
17492 tools/gcc/gcc-common.h | 1 +
17493 tools/gcc/initify_plugin.c | 33 ++-
17494 .../disable_size_overflow_hash.data | 1 +
17495 .../size_overflow_plugin/size_overflow_hash.data | 1 -
17496 62 files changed, 708 insertions(+), 140 deletions(-)
17497
17498 commit f2634c2f6995f4231616f24ed016f890c701f939
17499 Merge: 1241bff 5f8b236
17500 Author: Brad Spengler <spender@grsecurity.net>
17501 Date: Wed Dec 9 21:50:47 2015 -0500
17502
17503 Merge branch 'linux-4.3.y' into pax-4_3
17504
17505 Conflicts:
17506 arch/x86/kernel/fpu/xstate.c
17507 arch/x86/kernel/head_64.S
17508
17509 commit 1241bff82e3d7dadb05de0a60b8d2822afc6547c
17510 Author: Brad Spengler <spender@grsecurity.net>
17511 Date: Sun Dec 6 08:44:56 2015 -0500
17512
17513 Update to pax-linux-4.3-test8.patch:
17514 - fixed integer truncation check in md introduced by upstream commits 284ae7cab0f7335c9e0aa8992b28415ef1a54c7c and 58c0fed400603a802968b23ddf78f029c5a84e41, reported by BeiKed9o (https://forums.grsecurity.net/viewtopic.php?f=3&t=4328)
17515 - gcc plugin compilation problems will now also produce the output of the checking script to make diagnosis easier, reported by hunger
17516 - Emese fixed a false positive size overflow report in __vhost_add_used_n, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4329)
17517 - fixed a potential integer truncation error in the raid1 code caught by the size overflow plugin, reported by d1b (https://forums.grsecurity.net/viewtopic.php?f=3&t=4331)
17518
17519 Makefile | 5 +++
17520 drivers/md/md.c | 5 ++-
17521 drivers/md/raid1.c | 2 +-
17522 fs/proc/task_mmu.c | 3 ++
17523 .../disable_size_overflow_hash.data | 4 ++-
17524 .../size_overflow_plugin/intentional_overflow.c | 32 ++++++++++++++++---
17525 .../size_overflow_plugin/size_overflow_hash.data | 2 -
17526 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
17527 8 files changed, 43 insertions(+), 12 deletions(-)
17528
17529 commit cce6a9f9bdd27096632ca1c0246dcc07f2eb1a18
17530 Author: Brad Spengler <spender@grsecurity.net>
17531 Date: Fri Dec 4 14:24:12 2015 -0500
17532
17533 Initial import of pax-linux-4.3-test7.patch
17534
17535 Documentation/dontdiff | 47 +-
17536 Documentation/kbuild/makefiles.txt | 39 +-
17537 Documentation/kernel-parameters.txt | 28 +
17538 Makefile | 108 +-
17539 arch/alpha/include/asm/atomic.h | 10 +
17540 arch/alpha/include/asm/elf.h | 7 +
17541 arch/alpha/include/asm/pgalloc.h | 6 +
17542 arch/alpha/include/asm/pgtable.h | 11 +
17543 arch/alpha/kernel/module.c | 2 +-
17544 arch/alpha/kernel/osf_sys.c | 8 +-
17545 arch/alpha/mm/fault.c | 141 +-
17546 arch/arm/Kconfig | 2 +-
17547 arch/arm/include/asm/atomic.h | 320 +-
17548 arch/arm/include/asm/cache.h | 5 +-
17549 arch/arm/include/asm/cacheflush.h | 2 +-
17550 arch/arm/include/asm/checksum.h | 14 +-
17551 arch/arm/include/asm/cmpxchg.h | 4 +
17552 arch/arm/include/asm/cpuidle.h | 2 +-
17553 arch/arm/include/asm/domain.h | 22 +-
17554 arch/arm/include/asm/elf.h | 9 +-
17555 arch/arm/include/asm/fncpy.h | 2 +
17556 arch/arm/include/asm/futex.h | 10 +
17557 arch/arm/include/asm/kmap_types.h | 2 +-
17558 arch/arm/include/asm/mach/dma.h | 2 +-
17559 arch/arm/include/asm/mach/map.h | 16 +-
17560 arch/arm/include/asm/outercache.h | 2 +-
17561 arch/arm/include/asm/page.h | 3 +-
17562 arch/arm/include/asm/pgalloc.h | 20 +
17563 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
17564 arch/arm/include/asm/pgtable-2level.h | 3 +
17565 arch/arm/include/asm/pgtable-3level.h | 3 +
17566 arch/arm/include/asm/pgtable.h | 54 +-
17567 arch/arm/include/asm/smp.h | 2 +-
17568 arch/arm/include/asm/tls.h | 3 +
17569 arch/arm/include/asm/uaccess.h | 79 +-
17570 arch/arm/include/uapi/asm/ptrace.h | 2 +-
17571 arch/arm/kernel/armksyms.c | 2 +-
17572 arch/arm/kernel/cpuidle.c | 2 +-
17573 arch/arm/kernel/entry-armv.S | 109 +-
17574 arch/arm/kernel/entry-common.S | 40 +-
17575 arch/arm/kernel/entry-header.S | 55 +
17576 arch/arm/kernel/fiq.c | 3 +
17577 arch/arm/kernel/module-plts.c | 7 +-
17578 arch/arm/kernel/module.c | 38 +-
17579 arch/arm/kernel/patch.c | 2 +
17580 arch/arm/kernel/process.c | 90 +-
17581 arch/arm/kernel/reboot.c | 1 +
17582 arch/arm/kernel/setup.c | 20 +-
17583 arch/arm/kernel/signal.c | 35 +-
17584 arch/arm/kernel/smp.c | 2 +-
17585 arch/arm/kernel/tcm.c | 4 +-
17586 arch/arm/kernel/vmlinux.lds.S | 6 +-
17587 arch/arm/kvm/arm.c | 8 +-
17588 arch/arm/lib/copy_page.S | 1 +
17589 arch/arm/lib/csumpartialcopyuser.S | 4 +-
17590 arch/arm/lib/delay.c | 2 +-
17591 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
17592 arch/arm/mach-exynos/suspend.c | 6 +-
17593 arch/arm/mach-mvebu/coherency.c | 4 +-
17594 arch/arm/mach-omap2/board-n8x0.c | 2 +-
17595 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
17596 arch/arm/mach-omap2/omap-smp.c | 1 +
17597 arch/arm/mach-omap2/omap-wakeupgen.c | 2 +-
17598 arch/arm/mach-omap2/omap_device.c | 4 +-
17599 arch/arm/mach-omap2/omap_device.h | 4 +-
17600 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
17601 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
17602 arch/arm/mach-omap2/wd_timer.c | 6 +-
17603 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
17604 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
17605 arch/arm/mach-tegra/irq.c | 1 +
17606 arch/arm/mach-ux500/pm.c | 1 +
17607 arch/arm/mach-zynq/platsmp.c | 1 +
17608 arch/arm/mm/Kconfig | 6 +-
17609 arch/arm/mm/alignment.c | 8 +
17610 arch/arm/mm/cache-l2x0.c | 2 +-
17611 arch/arm/mm/context.c | 10 +-
17612 arch/arm/mm/fault.c | 146 +
17613 arch/arm/mm/fault.h | 12 +
17614 arch/arm/mm/init.c | 39 +
17615 arch/arm/mm/ioremap.c | 4 +-
17616 arch/arm/mm/mmap.c | 30 +-
17617 arch/arm/mm/mmu.c | 162 +-
17618 arch/arm/net/bpf_jit_32.c | 3 +
17619 arch/arm/plat-iop/setup.c | 2 +-
17620 arch/arm/plat-omap/sram.c | 2 +
17621 arch/arm64/include/asm/atomic.h | 10 +
17622 arch/arm64/include/asm/percpu.h | 8 +-
17623 arch/arm64/include/asm/pgalloc.h | 5 +
17624 arch/arm64/include/asm/uaccess.h | 1 +
17625 arch/arm64/mm/dma-mapping.c | 2 +-
17626 arch/avr32/include/asm/elf.h | 8 +-
17627 arch/avr32/include/asm/kmap_types.h | 4 +-
17628 arch/avr32/mm/fault.c | 27 +
17629 arch/frv/include/asm/atomic.h | 10 +
17630 arch/frv/include/asm/kmap_types.h | 2 +-
17631 arch/frv/mm/elf-fdpic.c | 3 +-
17632 arch/ia64/Makefile | 1 +
17633 arch/ia64/include/asm/atomic.h | 10 +
17634 arch/ia64/include/asm/elf.h | 7 +
17635 arch/ia64/include/asm/pgalloc.h | 12 +
17636 arch/ia64/include/asm/pgtable.h | 13 +-
17637 arch/ia64/include/asm/spinlock.h | 2 +-
17638 arch/ia64/include/asm/uaccess.h | 27 +-
17639 arch/ia64/kernel/module.c | 45 +-
17640 arch/ia64/kernel/palinfo.c | 2 +-
17641 arch/ia64/kernel/sys_ia64.c | 7 +
17642 arch/ia64/kernel/vmlinux.lds.S | 2 +-
17643 arch/ia64/mm/fault.c | 32 +-
17644 arch/ia64/mm/init.c | 15 +-
17645 arch/m32r/lib/usercopy.c | 6 +
17646 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
17647 arch/mips/include/asm/atomic.h | 368 +-
17648 arch/mips/include/asm/elf.h | 7 +
17649 arch/mips/include/asm/exec.h | 2 +-
17650 arch/mips/include/asm/hw_irq.h | 2 +-
17651 arch/mips/include/asm/local.h | 57 +
17652 arch/mips/include/asm/page.h | 2 +-
17653 arch/mips/include/asm/pgalloc.h | 5 +
17654 arch/mips/include/asm/pgtable.h | 3 +
17655 arch/mips/include/asm/uaccess.h | 1 +
17656 arch/mips/kernel/binfmt_elfn32.c | 7 +
17657 arch/mips/kernel/binfmt_elfo32.c | 7 +
17658 arch/mips/kernel/irq-gt641xx.c | 2 +-
17659 arch/mips/kernel/irq.c | 6 +-
17660 arch/mips/kernel/pm-cps.c | 2 +-
17661 arch/mips/kernel/process.c | 12 -
17662 arch/mips/kernel/sync-r4k.c | 24 +-
17663 arch/mips/kernel/traps.c | 13 +-
17664 arch/mips/mm/fault.c | 25 +
17665 arch/mips/mm/mmap.c | 51 +-
17666 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
17667 arch/mips/sni/rm200.c | 2 +-
17668 arch/mips/vr41xx/common/icu.c | 2 +-
17669 arch/mips/vr41xx/common/irq.c | 4 +-
17670 arch/parisc/include/asm/atomic.h | 10 +
17671 arch/parisc/include/asm/elf.h | 7 +
17672 arch/parisc/include/asm/pgalloc.h | 6 +
17673 arch/parisc/include/asm/pgtable.h | 11 +
17674 arch/parisc/include/asm/uaccess.h | 4 +-
17675 arch/parisc/kernel/module.c | 50 +-
17676 arch/parisc/kernel/sys_parisc.c | 15 +
17677 arch/parisc/kernel/traps.c | 4 +-
17678 arch/parisc/mm/fault.c | 140 +-
17679 arch/powerpc/include/asm/atomic.h | 329 +-
17680 arch/powerpc/include/asm/elf.h | 12 +
17681 arch/powerpc/include/asm/exec.h | 2 +-
17682 arch/powerpc/include/asm/kmap_types.h | 2 +-
17683 arch/powerpc/include/asm/local.h | 46 +
17684 arch/powerpc/include/asm/mman.h | 2 +-
17685 arch/powerpc/include/asm/page.h | 8 +-
17686 arch/powerpc/include/asm/page_64.h | 7 +-
17687 arch/powerpc/include/asm/pgalloc-64.h | 7 +
17688 arch/powerpc/include/asm/pgtable.h | 1 +
17689 arch/powerpc/include/asm/pte-hash32.h | 1 +
17690 arch/powerpc/include/asm/reg.h | 1 +
17691 arch/powerpc/include/asm/smp.h | 2 +-
17692 arch/powerpc/include/asm/spinlock.h | 42 +-
17693 arch/powerpc/include/asm/uaccess.h | 141 +-
17694 arch/powerpc/kernel/Makefile | 5 +
17695 arch/powerpc/kernel/exceptions-64e.S | 4 +-
17696 arch/powerpc/kernel/exceptions-64s.S | 2 +-
17697 arch/powerpc/kernel/module_32.c | 15 +-
17698 arch/powerpc/kernel/process.c | 46 -
17699 arch/powerpc/kernel/signal_32.c | 2 +-
17700 arch/powerpc/kernel/signal_64.c | 2 +-
17701 arch/powerpc/kernel/traps.c | 21 +
17702 arch/powerpc/kernel/vdso.c | 5 +-
17703 arch/powerpc/lib/usercopy_64.c | 18 -
17704 arch/powerpc/mm/fault.c | 56 +-
17705 arch/powerpc/mm/mmap.c | 16 +
17706 arch/powerpc/mm/slice.c | 13 +-
17707 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
17708 arch/s390/include/asm/atomic.h | 10 +
17709 arch/s390/include/asm/elf.h | 7 +
17710 arch/s390/include/asm/exec.h | 2 +-
17711 arch/s390/include/asm/uaccess.h | 13 +-
17712 arch/s390/kernel/module.c | 22 +-
17713 arch/s390/kernel/process.c | 24 -
17714 arch/s390/mm/mmap.c | 16 +
17715 arch/score/include/asm/exec.h | 2 +-
17716 arch/score/kernel/process.c | 5 -
17717 arch/sh/mm/mmap.c | 22 +-
17718 arch/sparc/include/asm/atomic_64.h | 110 +-
17719 arch/sparc/include/asm/cache.h | 2 +-
17720 arch/sparc/include/asm/elf_32.h | 7 +
17721 arch/sparc/include/asm/elf_64.h | 7 +
17722 arch/sparc/include/asm/pgalloc_32.h | 1 +
17723 arch/sparc/include/asm/pgalloc_64.h | 1 +
17724 arch/sparc/include/asm/pgtable.h | 4 +
17725 arch/sparc/include/asm/pgtable_32.h | 15 +-
17726 arch/sparc/include/asm/pgtsrmmu.h | 5 +
17727 arch/sparc/include/asm/setup.h | 4 +-
17728 arch/sparc/include/asm/spinlock_64.h | 35 +-
17729 arch/sparc/include/asm/thread_info_32.h | 1 +
17730 arch/sparc/include/asm/thread_info_64.h | 2 +
17731 arch/sparc/include/asm/uaccess.h | 1 +
17732 arch/sparc/include/asm/uaccess_32.h | 28 +-
17733 arch/sparc/include/asm/uaccess_64.h | 24 +-
17734 arch/sparc/kernel/Makefile | 2 +-
17735 arch/sparc/kernel/prom_common.c | 2 +-
17736 arch/sparc/kernel/smp_64.c | 8 +-
17737 arch/sparc/kernel/sys_sparc_32.c | 2 +-
17738 arch/sparc/kernel/sys_sparc_64.c | 52 +-
17739 arch/sparc/kernel/traps_64.c | 27 +-
17740 arch/sparc/lib/Makefile | 2 +-
17741 arch/sparc/lib/atomic_64.S | 57 +-
17742 arch/sparc/lib/ksyms.c | 6 +-
17743 arch/sparc/mm/Makefile | 2 +-
17744 arch/sparc/mm/fault_32.c | 292 +
17745 arch/sparc/mm/fault_64.c | 486 +
17746 arch/sparc/mm/hugetlbpage.c | 22 +-
17747 arch/sparc/mm/init_64.c | 10 +-
17748 arch/tile/include/asm/atomic_64.h | 10 +
17749 arch/tile/include/asm/uaccess.h | 4 +-
17750 arch/um/Makefile | 4 +
17751 arch/um/include/asm/kmap_types.h | 2 +-
17752 arch/um/include/asm/page.h | 3 +
17753 arch/um/include/asm/pgtable-3level.h | 1 +
17754 arch/um/kernel/process.c | 16 -
17755 arch/x86/Kconfig | 15 +-
17756 arch/x86/Kconfig.cpu | 6 +-
17757 arch/x86/Kconfig.debug | 4 +-
17758 arch/x86/Makefile | 13 +-
17759 arch/x86/boot/Makefile | 3 +
17760 arch/x86/boot/bitops.h | 4 +-
17761 arch/x86/boot/boot.h | 2 +-
17762 arch/x86/boot/compressed/Makefile | 3 +
17763 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
17764 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
17765 arch/x86/boot/compressed/head_32.S | 4 +-
17766 arch/x86/boot/compressed/head_64.S | 12 +-
17767 arch/x86/boot/compressed/misc.c | 11 +-
17768 arch/x86/boot/cpucheck.c | 16 +-
17769 arch/x86/boot/header.S | 6 +-
17770 arch/x86/boot/memory.c | 2 +-
17771 arch/x86/boot/video-vesa.c | 1 +
17772 arch/x86/boot/video.c | 2 +-
17773 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
17774 arch/x86/crypto/aesni-intel_asm.S | 106 +-
17775 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
17776 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
17777 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
17778 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
17779 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
17780 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
17781 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +-
17782 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
17783 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
17784 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
17785 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
17786 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
17787 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
17788 arch/x86/crypto/sha256-avx-asm.S | 2 +
17789 arch/x86/crypto/sha256-avx2-asm.S | 2 +
17790 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
17791 arch/x86/crypto/sha512-avx-asm.S | 2 +
17792 arch/x86/crypto/sha512-avx2-asm.S | 2 +
17793 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
17794 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
17795 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
17796 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
17797 arch/x86/entry/calling.h | 86 +-
17798 arch/x86/entry/common.c | 13 +-
17799 arch/x86/entry/entry_32.S | 351 +-
17800 arch/x86/entry/entry_64.S | 619 +-
17801 arch/x86/entry/entry_64_compat.S | 159 +-
17802 arch/x86/entry/thunk_64.S | 2 +
17803 arch/x86/entry/vdso/Makefile | 2 +-
17804 arch/x86/entry/vdso/vdso2c.h | 8 +-
17805 arch/x86/entry/vdso/vma.c | 41 +-
17806 arch/x86/entry/vsyscall/vsyscall_64.c | 16 +-
17807 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
17808 arch/x86/ia32/ia32_signal.c | 23 +-
17809 arch/x86/ia32/sys_ia32.c | 42 +-
17810 arch/x86/include/asm/alternative-asm.h | 43 +-
17811 arch/x86/include/asm/alternative.h | 4 +-
17812 arch/x86/include/asm/apic.h | 2 +-
17813 arch/x86/include/asm/apm.h | 4 +-
17814 arch/x86/include/asm/atomic.h | 230 +-
17815 arch/x86/include/asm/atomic64_32.h | 100 +
17816 arch/x86/include/asm/atomic64_64.h | 164 +-
17817 arch/x86/include/asm/bitops.h | 18 +-
17818 arch/x86/include/asm/boot.h | 2 +-
17819 arch/x86/include/asm/cache.h | 5 +-
17820 arch/x86/include/asm/checksum_32.h | 12 +-
17821 arch/x86/include/asm/cmpxchg.h | 39 +
17822 arch/x86/include/asm/compat.h | 2 +-
17823 arch/x86/include/asm/cpufeature.h | 17 +-
17824 arch/x86/include/asm/desc.h | 78 +-
17825 arch/x86/include/asm/desc_defs.h | 6 +
17826 arch/x86/include/asm/div64.h | 2 +-
17827 arch/x86/include/asm/elf.h | 33 +-
17828 arch/x86/include/asm/emergency-restart.h | 2 +-
17829 arch/x86/include/asm/fpu/internal.h | 42 +-
17830 arch/x86/include/asm/fpu/types.h | 6 +-
17831 arch/x86/include/asm/futex.h | 14 +-
17832 arch/x86/include/asm/hw_irq.h | 4 +-
17833 arch/x86/include/asm/i8259.h | 2 +-
17834 arch/x86/include/asm/io.h | 22 +-
17835 arch/x86/include/asm/irqflags.h | 5 +
17836 arch/x86/include/asm/kprobes.h | 9 +-
17837 arch/x86/include/asm/local.h | 106 +-
17838 arch/x86/include/asm/mman.h | 15 +
17839 arch/x86/include/asm/mmu.h | 14 +-
17840 arch/x86/include/asm/mmu_context.h | 114 +-
17841 arch/x86/include/asm/module.h | 17 +-
17842 arch/x86/include/asm/nmi.h | 19 +-
17843 arch/x86/include/asm/page.h | 1 +
17844 arch/x86/include/asm/page_32.h | 12 +-
17845 arch/x86/include/asm/page_64.h | 14 +-
17846 arch/x86/include/asm/paravirt.h | 46 +-
17847 arch/x86/include/asm/paravirt_types.h | 15 +-
17848 arch/x86/include/asm/pgalloc.h | 23 +
17849 arch/x86/include/asm/pgtable-2level.h | 2 +
17850 arch/x86/include/asm/pgtable-3level.h | 7 +
17851 arch/x86/include/asm/pgtable.h | 128 +-
17852 arch/x86/include/asm/pgtable_32.h | 14 +-
17853 arch/x86/include/asm/pgtable_32_types.h | 24 +-
17854 arch/x86/include/asm/pgtable_64.h | 23 +-
17855 arch/x86/include/asm/pgtable_64_types.h | 5 +
17856 arch/x86/include/asm/pgtable_types.h | 26 +-
17857 arch/x86/include/asm/preempt.h | 2 +-
17858 arch/x86/include/asm/processor.h | 57 +-
17859 arch/x86/include/asm/ptrace.h | 13 +-
17860 arch/x86/include/asm/realmode.h | 4 +-
17861 arch/x86/include/asm/reboot.h | 10 +-
17862 arch/x86/include/asm/rmwcc.h | 84 +-
17863 arch/x86/include/asm/rwsem.h | 60 +-
17864 arch/x86/include/asm/segment.h | 27 +-
17865 arch/x86/include/asm/smap.h | 43 +
17866 arch/x86/include/asm/smp.h | 14 +-
17867 arch/x86/include/asm/stackprotector.h | 4 +-
17868 arch/x86/include/asm/stacktrace.h | 32 +-
17869 arch/x86/include/asm/switch_to.h | 4 +-
17870 arch/x86/include/asm/sys_ia32.h | 6 +-
17871 arch/x86/include/asm/thread_info.h | 27 +-
17872 arch/x86/include/asm/tlbflush.h | 77 +-
17873 arch/x86/include/asm/uaccess.h | 192 +-
17874 arch/x86/include/asm/uaccess_32.h | 28 +-
17875 arch/x86/include/asm/uaccess_64.h | 169 +-
17876 arch/x86/include/asm/word-at-a-time.h | 2 +-
17877 arch/x86/include/asm/x86_init.h | 10 +-
17878 arch/x86/include/asm/xen/page.h | 2 +-
17879 arch/x86/include/uapi/asm/e820.h | 2 +-
17880 arch/x86/kernel/Makefile | 2 +-
17881 arch/x86/kernel/acpi/boot.c | 4 +-
17882 arch/x86/kernel/acpi/sleep.c | 4 +
17883 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
17884 arch/x86/kernel/alternative.c | 124 +-
17885 arch/x86/kernel/apic/apic.c | 4 +-
17886 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
17887 arch/x86/kernel/apic/apic_noop.c | 2 +-
17888 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
17889 arch/x86/kernel/apic/io_apic.c | 8 +-
17890 arch/x86/kernel/apic/msi.c | 2 +-
17891 arch/x86/kernel/apic/probe_32.c | 4 +-
17892 arch/x86/kernel/apic/vector.c | 4 +-
17893 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
17894 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
17895 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
17896 arch/x86/kernel/apm_32.c | 21 +-
17897 arch/x86/kernel/asm-offsets.c | 20 +
17898 arch/x86/kernel/asm-offsets_64.c | 1 +
17899 arch/x86/kernel/cpu/Makefile | 4 -
17900 arch/x86/kernel/cpu/amd.c | 2 +-
17901 arch/x86/kernel/cpu/bugs_64.c | 2 +
17902 arch/x86/kernel/cpu/common.c | 202 +-
17903 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
17904 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
17905 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
17906 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
17907 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
17908 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
17909 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
17910 arch/x86/kernel/cpu/perf_event.c | 10 +-
17911 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
17912 arch/x86/kernel/cpu/perf_event_intel.c | 6 +-
17913 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
17914 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
17915 arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +-
17916 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
17917 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
17918 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
17919 arch/x86/kernel/crash_dump_64.c | 2 +-
17920 arch/x86/kernel/doublefault.c | 8 +-
17921 arch/x86/kernel/dumpstack.c | 24 +-
17922 arch/x86/kernel/dumpstack_32.c | 25 +-
17923 arch/x86/kernel/dumpstack_64.c | 62 +-
17924 arch/x86/kernel/e820.c | 4 +-
17925 arch/x86/kernel/early_printk.c | 1 +
17926 arch/x86/kernel/espfix_64.c | 44 +-
17927 arch/x86/kernel/fpu/core.c | 24 +-
17928 arch/x86/kernel/fpu/init.c | 40 +-
17929 arch/x86/kernel/fpu/regset.c | 22 +-
17930 arch/x86/kernel/fpu/signal.c | 20 +-
17931 arch/x86/kernel/fpu/xstate.c | 8 +-
17932 arch/x86/kernel/ftrace.c | 18 +-
17933 arch/x86/kernel/head64.c | 14 +-
17934 arch/x86/kernel/head_32.S | 235 +-
17935 arch/x86/kernel/head_64.S | 173 +-
17936 arch/x86/kernel/i386_ksyms_32.c | 12 +
17937 arch/x86/kernel/i8259.c | 10 +-
17938 arch/x86/kernel/io_delay.c | 2 +-
17939 arch/x86/kernel/ioport.c | 2 +-
17940 arch/x86/kernel/irq.c | 8 +-
17941 arch/x86/kernel/irq_32.c | 45 +-
17942 arch/x86/kernel/jump_label.c | 10 +-
17943 arch/x86/kernel/kgdb.c | 21 +-
17944 arch/x86/kernel/kprobes/core.c | 28 +-
17945 arch/x86/kernel/kprobes/opt.c | 16 +-
17946 arch/x86/kernel/ksysfs.c | 2 +-
17947 arch/x86/kernel/kvmclock.c | 20 +-
17948 arch/x86/kernel/ldt.c | 25 +
17949 arch/x86/kernel/livepatch.c | 12 +-
17950 arch/x86/kernel/machine_kexec_32.c | 6 +-
17951 arch/x86/kernel/mcount_64.S | 19 +-
17952 arch/x86/kernel/module.c | 78 +-
17953 arch/x86/kernel/msr.c | 2 +-
17954 arch/x86/kernel/nmi.c | 34 +-
17955 arch/x86/kernel/nmi_selftest.c | 4 +-
17956 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
17957 arch/x86/kernel/paravirt.c | 45 +-
17958 arch/x86/kernel/paravirt_patch_64.c | 8 +
17959 arch/x86/kernel/pci-calgary_64.c | 2 +-
17960 arch/x86/kernel/pci-iommu_table.c | 2 +-
17961 arch/x86/kernel/pci-swiotlb.c | 2 +-
17962 arch/x86/kernel/process.c | 80 +-
17963 arch/x86/kernel/process_32.c | 29 +-
17964 arch/x86/kernel/process_64.c | 14 +-
17965 arch/x86/kernel/ptrace.c | 20 +-
17966 arch/x86/kernel/pvclock.c | 8 +-
17967 arch/x86/kernel/reboot.c | 44 +-
17968 arch/x86/kernel/reboot_fixups_32.c | 2 +-
17969 arch/x86/kernel/relocate_kernel_64.S | 3 +-
17970 arch/x86/kernel/setup.c | 29 +-
17971 arch/x86/kernel/setup_percpu.c | 29 +-
17972 arch/x86/kernel/signal.c | 17 +-
17973 arch/x86/kernel/smp.c | 2 +-
17974 arch/x86/kernel/smpboot.c | 29 +-
17975 arch/x86/kernel/step.c | 6 +-
17976 arch/x86/kernel/sys_i386_32.c | 184 +
17977 arch/x86/kernel/sys_x86_64.c | 22 +-
17978 arch/x86/kernel/tboot.c | 14 +-
17979 arch/x86/kernel/time.c | 8 +-
17980 arch/x86/kernel/tls.c | 7 +-
17981 arch/x86/kernel/tracepoint.c | 4 +-
17982 arch/x86/kernel/traps.c | 53 +-
17983 arch/x86/kernel/tsc.c | 2 +-
17984 arch/x86/kernel/uprobes.c | 2 +-
17985 arch/x86/kernel/vm86_32.c | 6 +-
17986 arch/x86/kernel/vmlinux.lds.S | 153 +-
17987 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
17988 arch/x86/kernel/x86_init.c | 6 +-
17989 arch/x86/kvm/cpuid.c | 21 +-
17990 arch/x86/kvm/emulate.c | 2 +-
17991 arch/x86/kvm/lapic.c | 2 +-
17992 arch/x86/kvm/paging_tmpl.h | 2 +-
17993 arch/x86/kvm/svm.c | 10 +-
17994 arch/x86/kvm/vmx.c | 62 +-
17995 arch/x86/kvm/x86.c | 42 +-
17996 arch/x86/lguest/boot.c | 3 +-
17997 arch/x86/lib/atomic64_386_32.S | 164 +
17998 arch/x86/lib/atomic64_cx8_32.S | 98 +-
17999 arch/x86/lib/checksum_32.S | 99 +-
18000 arch/x86/lib/clear_page_64.S | 3 +
18001 arch/x86/lib/cmpxchg16b_emu.S | 3 +
18002 arch/x86/lib/copy_page_64.S | 14 +-
18003 arch/x86/lib/copy_user_64.S | 66 +-
18004 arch/x86/lib/csum-copy_64.S | 14 +-
18005 arch/x86/lib/csum-wrappers_64.c | 8 +-
18006 arch/x86/lib/getuser.S | 74 +-
18007 arch/x86/lib/insn.c | 8 +-
18008 arch/x86/lib/iomap_copy_64.S | 2 +
18009 arch/x86/lib/memcpy_64.S | 6 +
18010 arch/x86/lib/memmove_64.S | 3 +-
18011 arch/x86/lib/memset_64.S | 3 +
18012 arch/x86/lib/mmx_32.c | 243 +-
18013 arch/x86/lib/msr-reg.S | 2 +
18014 arch/x86/lib/putuser.S | 87 +-
18015 arch/x86/lib/rwsem.S | 6 +-
18016 arch/x86/lib/usercopy_32.c | 359 +-
18017 arch/x86/lib/usercopy_64.c | 20 +-
18018 arch/x86/math-emu/fpu_aux.c | 2 +-
18019 arch/x86/math-emu/fpu_entry.c | 4 +-
18020 arch/x86/math-emu/fpu_system.h | 2 +-
18021 arch/x86/mm/Makefile | 4 +
18022 arch/x86/mm/extable.c | 26 +-
18023 arch/x86/mm/fault.c | 570 +-
18024 arch/x86/mm/gup.c | 6 +-
18025 arch/x86/mm/highmem_32.c | 6 +
18026 arch/x86/mm/hugetlbpage.c | 24 +-
18027 arch/x86/mm/init.c | 111 +-
18028 arch/x86/mm/init_32.c | 111 +-
18029 arch/x86/mm/init_64.c | 46 +-
18030 arch/x86/mm/iomap_32.c | 4 +
18031 arch/x86/mm/ioremap.c | 52 +-
18032 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
18033 arch/x86/mm/mmap.c | 40 +-
18034 arch/x86/mm/mmio-mod.c | 10 +-
18035 arch/x86/mm/numa.c | 2 +-
18036 arch/x86/mm/pageattr.c | 38 +-
18037 arch/x86/mm/pat.c | 12 +-
18038 arch/x86/mm/pat_rbtree.c | 2 +-
18039 arch/x86/mm/pf_in.c | 10 +-
18040 arch/x86/mm/pgtable.c | 214 +-
18041 arch/x86/mm/pgtable_32.c | 3 +
18042 arch/x86/mm/setup_nx.c | 7 +
18043 arch/x86/mm/tlb.c | 4 +
18044 arch/x86/mm/uderef_64.c | 37 +
18045 arch/x86/net/bpf_jit.S | 11 +
18046 arch/x86/net/bpf_jit_comp.c | 13 +-
18047 arch/x86/oprofile/backtrace.c | 6 +-
18048 arch/x86/oprofile/nmi_int.c | 8 +-
18049 arch/x86/oprofile/op_model_amd.c | 8 +-
18050 arch/x86/oprofile/op_model_ppro.c | 7 +-
18051 arch/x86/oprofile/op_x86_model.h | 2 +-
18052 arch/x86/pci/intel_mid_pci.c | 2 +-
18053 arch/x86/pci/irq.c | 8 +-
18054 arch/x86/pci/pcbios.c | 144 +-
18055 arch/x86/platform/efi/efi_32.c | 24 +
18056 arch/x86/platform/efi/efi_64.c | 26 +-
18057 arch/x86/platform/efi/efi_stub_32.S | 64 +-
18058 arch/x86/platform/efi/efi_stub_64.S | 2 +
18059 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
18060 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
18061 arch/x86/platform/intel-mid/mfld.c | 4 +-
18062 arch/x86/platform/intel-mid/mrfl.c | 2 +-
18063 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
18064 arch/x86/platform/olpc/olpc_dt.c | 2 +-
18065 arch/x86/power/cpu.c | 11 +-
18066 arch/x86/realmode/init.c | 10 +-
18067 arch/x86/realmode/rm/Makefile | 3 +
18068 arch/x86/realmode/rm/header.S | 4 +-
18069 arch/x86/realmode/rm/reboot.S | 4 +
18070 arch/x86/realmode/rm/trampoline_32.S | 12 +-
18071 arch/x86/realmode/rm/trampoline_64.S | 3 +-
18072 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
18073 arch/x86/tools/Makefile | 2 +-
18074 arch/x86/tools/relocs.c | 96 +-
18075 arch/x86/um/mem_32.c | 2 +-
18076 arch/x86/um/tls_32.c | 2 +-
18077 arch/x86/xen/enlighten.c | 50 +-
18078 arch/x86/xen/mmu.c | 19 +-
18079 arch/x86/xen/smp.c | 16 +-
18080 arch/x86/xen/xen-asm_32.S | 2 +-
18081 arch/x86/xen/xen-head.S | 11 +
18082 arch/x86/xen/xen-ops.h | 2 -
18083 block/bio.c | 4 +-
18084 block/blk-iopoll.c | 2 +-
18085 block/blk-map.c | 2 +-
18086 block/blk-softirq.c | 2 +-
18087 block/bsg.c | 12 +-
18088 block/compat_ioctl.c | 4 +-
18089 block/genhd.c | 9 +-
18090 block/partitions/efi.c | 8 +-
18091 block/scsi_ioctl.c | 29 +-
18092 crypto/cryptd.c | 4 +-
18093 crypto/pcrypt.c | 2 +-
18094 crypto/zlib.c | 12 +-
18095 drivers/acpi/acpi_video.c | 2 +-
18096 drivers/acpi/apei/apei-internal.h | 2 +-
18097 drivers/acpi/apei/ghes.c | 4 +-
18098 drivers/acpi/bgrt.c | 6 +-
18099 drivers/acpi/blacklist.c | 4 +-
18100 drivers/acpi/bus.c | 4 +-
18101 drivers/acpi/device_pm.c | 4 +-
18102 drivers/acpi/ec.c | 2 +-
18103 drivers/acpi/pci_slot.c | 2 +-
18104 drivers/acpi/processor_idle.c | 2 +-
18105 drivers/acpi/processor_pdc.c | 2 +-
18106 drivers/acpi/sleep.c | 2 +-
18107 drivers/acpi/sysfs.c | 4 +-
18108 drivers/acpi/thermal.c | 2 +-
18109 drivers/acpi/video_detect.c | 7 +-
18110 drivers/ata/libata-core.c | 12 +-
18111 drivers/ata/libata-scsi.c | 2 +-
18112 drivers/ata/libata.h | 2 +-
18113 drivers/ata/pata_arasan_cf.c | 4 +-
18114 drivers/atm/adummy.c | 2 +-
18115 drivers/atm/ambassador.c | 8 +-
18116 drivers/atm/atmtcp.c | 14 +-
18117 drivers/atm/eni.c | 10 +-
18118 drivers/atm/firestream.c | 8 +-
18119 drivers/atm/fore200e.c | 14 +-
18120 drivers/atm/he.c | 18 +-
18121 drivers/atm/horizon.c | 4 +-
18122 drivers/atm/idt77252.c | 36 +-
18123 drivers/atm/iphase.c | 34 +-
18124 drivers/atm/lanai.c | 12 +-
18125 drivers/atm/nicstar.c | 46 +-
18126 drivers/atm/solos-pci.c | 4 +-
18127 drivers/atm/suni.c | 4 +-
18128 drivers/atm/uPD98402.c | 16 +-
18129 drivers/atm/zatm.c | 6 +-
18130 drivers/base/bus.c | 4 +-
18131 drivers/base/devtmpfs.c | 8 +-
18132 drivers/base/node.c | 2 +-
18133 drivers/base/platform-msi.c | 20 +-
18134 drivers/base/power/domain.c | 11 +-
18135 drivers/base/power/sysfs.c | 2 +-
18136 drivers/base/power/wakeup.c | 8 +-
18137 drivers/base/regmap/regmap-debugfs.c | 11 +-
18138 drivers/base/syscore.c | 4 +-
18139 drivers/block/cciss.c | 28 +-
18140 drivers/block/cciss.h | 2 +-
18141 drivers/block/cpqarray.c | 28 +-
18142 drivers/block/cpqarray.h | 2 +-
18143 drivers/block/drbd/drbd_bitmap.c | 2 +-
18144 drivers/block/drbd/drbd_int.h | 8 +-
18145 drivers/block/drbd/drbd_main.c | 12 +-
18146 drivers/block/drbd/drbd_nl.c | 4 +-
18147 drivers/block/drbd/drbd_receiver.c | 34 +-
18148 drivers/block/drbd/drbd_worker.c | 8 +-
18149 drivers/block/pktcdvd.c | 4 +-
18150 drivers/block/rbd.c | 2 +-
18151 drivers/bluetooth/btwilink.c | 2 +-
18152 drivers/bus/arm-cci.c | 12 +-
18153 drivers/cdrom/cdrom.c | 11 +-
18154 drivers/cdrom/gdrom.c | 1 -
18155 drivers/char/agp/compat_ioctl.c | 2 +-
18156 drivers/char/agp/frontend.c | 4 +-
18157 drivers/char/agp/intel-gtt.c | 4 +-
18158 drivers/char/hpet.c | 2 +-
18159 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
18160 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
18161 drivers/char/mem.c | 47 +-
18162 drivers/char/nvram.c | 2 +-
18163 drivers/char/pcmcia/synclink_cs.c | 16 +-
18164 drivers/char/random.c | 12 +-
18165 drivers/char/sonypi.c | 11 +-
18166 drivers/char/tpm/tpm_acpi.c | 3 +-
18167 drivers/char/tpm/tpm_eventlog.c | 4 +-
18168 drivers/char/virtio_console.c | 4 +-
18169 drivers/clk/clk-composite.c | 2 +-
18170 drivers/clk/samsung/clk.h | 2 +-
18171 drivers/clk/socfpga/clk-gate.c | 9 +-
18172 drivers/clk/socfpga/clk-pll.c | 9 +-
18173 drivers/clk/ti/clk.c | 8 +-
18174 drivers/cpufreq/acpi-cpufreq.c | 17 +-
18175 drivers/cpufreq/cpufreq-dt.c | 4 +-
18176 drivers/cpufreq/cpufreq.c | 30 +-
18177 drivers/cpufreq/cpufreq_governor.c | 2 +-
18178 drivers/cpufreq/cpufreq_governor.h | 4 +-
18179 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
18180 drivers/cpufreq/intel_pstate.c | 33 +-
18181 drivers/cpufreq/p4-clockmod.c | 12 +-
18182 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
18183 drivers/cpufreq/speedstep-centrino.c | 7 +-
18184 drivers/cpuidle/driver.c | 2 +-
18185 drivers/cpuidle/dt_idle_states.c | 2 +-
18186 drivers/cpuidle/governor.c | 2 +-
18187 drivers/cpuidle/sysfs.c | 2 +-
18188 drivers/crypto/hifn_795x.c | 4 +-
18189 drivers/devfreq/devfreq.c | 4 +-
18190 drivers/dma/sh/shdma-base.c | 4 +-
18191 drivers/dma/sh/shdmac.c | 2 +-
18192 drivers/edac/edac_device.c | 4 +-
18193 drivers/edac/edac_mc_sysfs.c | 2 +-
18194 drivers/edac/edac_pci.c | 4 +-
18195 drivers/edac/edac_pci_sysfs.c | 22 +-
18196 drivers/edac/mce_amd.h | 2 +-
18197 drivers/firewire/core-card.c | 6 +-
18198 drivers/firewire/core-device.c | 2 +-
18199 drivers/firewire/core-transaction.c | 1 +
18200 drivers/firewire/core.h | 1 +
18201 drivers/firmware/dmi-id.c | 2 +-
18202 drivers/firmware/dmi_scan.c | 12 +-
18203 drivers/firmware/efi/cper.c | 8 +-
18204 drivers/firmware/efi/efi.c | 12 +-
18205 drivers/firmware/efi/efivars.c | 2 +-
18206 drivers/firmware/efi/runtime-map.c | 2 +-
18207 drivers/firmware/google/gsmi.c | 2 +-
18208 drivers/firmware/google/memconsole.c | 7 +-
18209 drivers/firmware/memmap.c | 2 +-
18210 drivers/firmware/psci.c | 2 +-
18211 drivers/gpio/gpio-davinci.c | 6 +-
18212 drivers/gpio/gpio-em.c | 2 +-
18213 drivers/gpio/gpio-ich.c | 2 +-
18214 drivers/gpio/gpio-omap.c | 4 +-
18215 drivers/gpio/gpio-rcar.c | 2 +-
18216 drivers/gpio/gpio-vr41xx.c | 2 +-
18217 drivers/gpio/gpiolib.c | 12 +-
18218 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
18219 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
18220 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
18221 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
18222 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
18223 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
18224 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
18225 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
18226 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
18227 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
18228 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
18229 drivers/gpu/drm/drm_crtc.c | 2 +-
18230 drivers/gpu/drm/drm_drv.c | 2 +-
18231 drivers/gpu/drm/drm_fops.c | 12 +-
18232 drivers/gpu/drm/drm_global.c | 14 +-
18233 drivers/gpu/drm/drm_info.c | 13 +-
18234 drivers/gpu/drm/drm_ioc32.c | 13 +-
18235 drivers/gpu/drm/drm_ioctl.c | 2 +-
18236 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
18237 drivers/gpu/drm/i810/i810_drv.h | 4 +-
18238 drivers/gpu/drm/i915/i915_dma.c | 2 +-
18239 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
18240 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
18241 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
18242 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
18243 drivers/gpu/drm/i915/intel_display.c | 26 +-
18244 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
18245 drivers/gpu/drm/mga/mga_drv.h | 4 +-
18246 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
18247 drivers/gpu/drm/mga/mga_irq.c | 8 +-
18248 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
18249 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
18250 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
18251 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
18252 drivers/gpu/drm/omapdrm/Makefile | 2 +-
18253 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
18254 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
18255 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
18256 drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +-
18257 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
18258 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
18259 drivers/gpu/drm/r128/r128_cce.c | 2 +-
18260 drivers/gpu/drm/r128/r128_drv.h | 4 +-
18261 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
18262 drivers/gpu/drm/r128/r128_irq.c | 4 +-
18263 drivers/gpu/drm/r128/r128_state.c | 4 +-
18264 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
18265 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
18266 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
18267 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
18268 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
18269 drivers/gpu/drm/radeon/radeon_state.c | 4 +-
18270 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
18271 drivers/gpu/drm/tegra/dc.c | 2 +-
18272 drivers/gpu/drm/tegra/dsi.c | 2 +-
18273 drivers/gpu/drm/tegra/hdmi.c | 2 +-
18274 drivers/gpu/drm/tegra/sor.c | 7 +-
18275 drivers/gpu/drm/tilcdc/Makefile | 6 +-
18276 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
18277 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
18278 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
18279 drivers/gpu/drm/udl/udl_fb.c | 1 -
18280 drivers/gpu/drm/via/via_drv.h | 4 +-
18281 drivers/gpu/drm/via/via_irq.c | 18 +-
18282 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
18283 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
18284 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
18285 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
18286 drivers/gpu/vga/vga_switcheroo.c | 4 +-
18287 drivers/hid/hid-core.c | 4 +-
18288 drivers/hid/hid-sensor-custom.c | 2 +-
18289 drivers/hv/channel.c | 2 +-
18290 drivers/hv/hv.c | 4 +-
18291 drivers/hv/hv_balloon.c | 18 +-
18292 drivers/hv/hyperv_vmbus.h | 2 +-
18293 drivers/hwmon/acpi_power_meter.c | 6 +-
18294 drivers/hwmon/applesmc.c | 2 +-
18295 drivers/hwmon/asus_atk0110.c | 10 +-
18296 drivers/hwmon/coretemp.c | 2 +-
18297 drivers/hwmon/dell-smm-hwmon.c | 2 +-
18298 drivers/hwmon/ibmaem.c | 2 +-
18299 drivers/hwmon/iio_hwmon.c | 2 +-
18300 drivers/hwmon/nct6683.c | 6 +-
18301 drivers/hwmon/nct6775.c | 6 +-
18302 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
18303 drivers/hwmon/sht15.c | 12 +-
18304 drivers/hwmon/via-cputemp.c | 2 +-
18305 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
18306 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
18307 drivers/i2c/i2c-dev.c | 2 +-
18308 drivers/ide/ide-cd.c | 2 +-
18309 drivers/ide/ide-disk.c | 2 +-
18310 drivers/iio/industrialio-core.c | 2 +-
18311 drivers/iio/magnetometer/ak8975.c | 2 +-
18312 drivers/infiniband/core/cm.c | 32 +-
18313 drivers/infiniband/core/fmr_pool.c | 20 +-
18314 drivers/infiniband/core/uverbs_cmd.c | 3 +
18315 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
18316 drivers/infiniband/hw/mlx4/mad.c | 2 +-
18317 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
18318 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
18319 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
18320 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
18321 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
18322 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
18323 drivers/infiniband/hw/nes/nes.c | 4 +-
18324 drivers/infiniband/hw/nes/nes.h | 40 +-
18325 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
18326 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
18327 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
18328 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
18329 drivers/infiniband/hw/qib/qib.h | 1 +
18330 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
18331 drivers/input/gameport/gameport.c | 4 +-
18332 drivers/input/input.c | 4 +-
18333 drivers/input/joystick/sidewinder.c | 1 +
18334 drivers/input/joystick/xpad.c | 4 +-
18335 drivers/input/misc/ims-pcu.c | 4 +-
18336 drivers/input/mouse/psmouse.h | 2 +-
18337 drivers/input/mousedev.c | 2 +-
18338 drivers/input/serio/serio.c | 4 +-
18339 drivers/input/serio/serio_raw.c | 4 +-
18340 drivers/input/touchscreen/htcpen.c | 2 +-
18341 drivers/iommu/arm-smmu-v3.c | 2 +-
18342 drivers/iommu/arm-smmu.c | 43 +-
18343 drivers/iommu/io-pgtable-arm.c | 101 +-
18344 drivers/iommu/io-pgtable.c | 11 +-
18345 drivers/iommu/io-pgtable.h | 19 +-
18346 drivers/iommu/iommu.c | 2 +-
18347 drivers/iommu/ipmmu-vmsa.c | 13 +-
18348 drivers/iommu/irq_remapping.c | 2 +-
18349 drivers/irqchip/irq-gic.c | 2 +-
18350 drivers/irqchip/irq-i8259.c | 2 +-
18351 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
18352 drivers/irqchip/irq-renesas-irqc.c | 2 +-
18353 drivers/isdn/capi/capi.c | 10 +-
18354 drivers/isdn/gigaset/interface.c | 8 +-
18355 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
18356 drivers/isdn/hardware/avm/b1.c | 4 +-
18357 drivers/isdn/i4l/isdn_common.c | 2 +
18358 drivers/isdn/i4l/isdn_tty.c | 22 +-
18359 drivers/isdn/icn/icn.c | 2 +-
18360 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
18361 drivers/lguest/core.c | 10 +-
18362 drivers/lguest/page_tables.c | 2 +-
18363 drivers/lguest/x86/core.c | 12 +-
18364 drivers/lguest/x86/switcher_32.S | 27 +-
18365 drivers/md/bcache/closure.h | 2 +-
18366 drivers/md/bitmap.c | 2 +-
18367 drivers/md/dm-ioctl.c | 2 +-
18368 drivers/md/dm-raid1.c | 18 +-
18369 drivers/md/dm-stats.c | 6 +-
18370 drivers/md/dm-stripe.c | 10 +-
18371 drivers/md/dm-table.c | 2 +-
18372 drivers/md/dm-thin-metadata.c | 4 +-
18373 drivers/md/dm.c | 16 +-
18374 drivers/md/md.c | 26 +-
18375 drivers/md/md.h | 6 +-
18376 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
18377 drivers/md/persistent-data/dm-space-map.h | 1 +
18378 drivers/md/raid1.c | 4 +-
18379 drivers/md/raid10.c | 18 +-
18380 drivers/md/raid5.c | 22 +-
18381 drivers/media/dvb-core/dvbdev.c | 2 +-
18382 drivers/media/dvb-frontends/af9033.h | 2 +-
18383 drivers/media/dvb-frontends/dib3000.h | 2 +-
18384 drivers/media/dvb-frontends/dib7000p.h | 2 +-
18385 drivers/media/dvb-frontends/dib8000.h | 2 +-
18386 drivers/media/pci/cx88/cx88-video.c | 6 +-
18387 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
18388 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
18389 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
18390 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
18391 drivers/media/pci/tw68/tw68-core.c | 2 +-
18392 drivers/media/platform/omap/omap_vout.c | 11 +-
18393 drivers/media/platform/s5p-tv/mixer.h | 2 +-
18394 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
18395 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
18396 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
18397 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
18398 drivers/media/radio/radio-cadet.c | 2 +
18399 drivers/media/radio/radio-maxiradio.c | 2 +-
18400 drivers/media/radio/radio-shark.c | 2 +-
18401 drivers/media/radio/radio-shark2.c | 2 +-
18402 drivers/media/radio/radio-si476x.c | 2 +-
18403 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
18404 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
18405 drivers/media/v4l2-core/v4l2-device.c | 4 +-
18406 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
18407 drivers/memory/omap-gpmc.c | 21 +-
18408 drivers/message/fusion/mptsas.c | 34 +-
18409 drivers/mfd/ab8500-debugfs.c | 2 +-
18410 drivers/mfd/kempld-core.c | 2 +-
18411 drivers/mfd/max8925-i2c.c | 2 +-
18412 drivers/mfd/tps65910.c | 2 +-
18413 drivers/mfd/twl4030-irq.c | 9 +-
18414 drivers/mfd/wm5110-tables.c | 2 +-
18415 drivers/mfd/wm8998-tables.c | 2 +-
18416 drivers/misc/c2port/core.c | 4 +-
18417 drivers/misc/kgdbts.c | 4 +-
18418 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
18419 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
18420 drivers/misc/mic/scif/scif_rb.c | 8 +-
18421 drivers/misc/sgi-gru/gruhandles.c | 4 +-
18422 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
18423 drivers/misc/sgi-gru/grutables.h | 154 +-
18424 drivers/misc/sgi-xp/xp.h | 2 +-
18425 drivers/misc/sgi-xp/xpc.h | 3 +-
18426 drivers/misc/sgi-xp/xpc_main.c | 2 +-
18427 drivers/mmc/card/block.c | 2 +-
18428 drivers/mmc/host/dw_mmc.h | 2 +-
18429 drivers/mmc/host/mmci.c | 4 +-
18430 drivers/mmc/host/omap_hsmmc.c | 4 +-
18431 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
18432 drivers/mmc/host/sdhci-s3c.c | 8 +-
18433 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
18434 drivers/mtd/nand/denali.c | 1 +
18435 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
18436 drivers/mtd/nftlmount.c | 1 +
18437 drivers/mtd/sm_ftl.c | 2 +-
18438 drivers/net/bonding/bond_netlink.c | 2 +-
18439 drivers/net/caif/caif_hsi.c | 2 +-
18440 drivers/net/can/Kconfig | 2 +-
18441 drivers/net/can/dev.c | 2 +-
18442 drivers/net/can/vcan.c | 2 +-
18443 drivers/net/dummy.c | 2 +-
18444 drivers/net/ethernet/8390/ax88796.c | 4 +-
18445 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
18446 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
18447 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
18448 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
18449 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
18450 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
18451 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
18452 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
18453 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
18454 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
18455 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
18456 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
18457 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
18458 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
18459 drivers/net/ethernet/broadcom/tg3.h | 1 +
18460 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
18461 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
18462 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
18463 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
18464 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
18465 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
18466 drivers/net/ethernet/faraday/ftmac100.c | 2 +
18467 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
18468 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
18469 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
18470 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
18471 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
18472 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
18473 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
18474 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
18475 drivers/net/ethernet/realtek/r8169.c | 8 +-
18476 drivers/net/ethernet/sfc/ptp.c | 2 +-
18477 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
18478 drivers/net/ethernet/via/via-rhine.c | 2 +-
18479 drivers/net/geneve.c | 2 +-
18480 drivers/net/hyperv/hyperv_net.h | 2 +-
18481 drivers/net/hyperv/rndis_filter.c | 4 +-
18482 drivers/net/ifb.c | 2 +-
18483 drivers/net/ipvlan/ipvlan_core.c | 2 +-
18484 drivers/net/macvlan.c | 20 +-
18485 drivers/net/macvtap.c | 6 +-
18486 drivers/net/nlmon.c | 2 +-
18487 drivers/net/phy/phy_device.c | 6 +-
18488 drivers/net/ppp/ppp_generic.c | 4 +-
18489 drivers/net/slip/slhc.c | 2 +-
18490 drivers/net/team/team.c | 4 +-
18491 drivers/net/tun.c | 7 +-
18492 drivers/net/usb/hso.c | 23 +-
18493 drivers/net/usb/r8152.c | 2 +-
18494 drivers/net/usb/sierra_net.c | 4 +-
18495 drivers/net/virtio_net.c | 2 +-
18496 drivers/net/vrf.c | 2 +-
18497 drivers/net/vxlan.c | 4 +-
18498 drivers/net/wimax/i2400m/rx.c | 2 +-
18499 drivers/net/wireless/airo.c | 2 +-
18500 drivers/net/wireless/at76c50x-usb.c | 2 +-
18501 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
18502 drivers/net/wireless/ath/ath10k/htc.c | 7 +-
18503 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
18504 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
18505 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
18506 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
18507 drivers/net/wireless/ath/ath9k/main.c | 22 +-
18508 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
18509 drivers/net/wireless/b43/phy_lp.c | 2 +-
18510 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
18511 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
18512 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
18513 drivers/net/wireless/mac80211_hwsim.c | 28 +-
18514 drivers/net/wireless/rndis_wlan.c | 2 +-
18515 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
18516 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
18517 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
18518 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
18519 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
18520 drivers/nfc/nfcwilink.c | 2 +-
18521 drivers/of/fdt.c | 4 +-
18522 drivers/oprofile/buffer_sync.c | 8 +-
18523 drivers/oprofile/event_buffer.c | 2 +-
18524 drivers/oprofile/oprof.c | 2 +-
18525 drivers/oprofile/oprofile_stats.c | 10 +-
18526 drivers/oprofile/oprofile_stats.h | 10 +-
18527 drivers/oprofile/oprofilefs.c | 6 +-
18528 drivers/oprofile/timer_int.c | 2 +-
18529 drivers/parport/procfs.c | 4 +-
18530 drivers/pci/host/pci-host-generic.c | 24 +-
18531 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
18532 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
18533 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
18534 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
18535 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
18536 drivers/pci/hotplug/pciehp_core.c | 2 +-
18537 drivers/pci/msi.c | 22 +-
18538 drivers/pci/pci-sysfs.c | 6 +-
18539 drivers/pci/pci.h | 2 +-
18540 drivers/pci/pcie/aspm.c | 6 +-
18541 drivers/pci/pcie/portdrv_pci.c | 2 +-
18542 drivers/pci/probe.c | 2 +-
18543 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
18544 drivers/pinctrl/pinctrl-at91.c | 5 +-
18545 drivers/platform/chrome/chromeos_pstore.c | 2 +-
18546 drivers/platform/x86/alienware-wmi.c | 4 +-
18547 drivers/platform/x86/compal-laptop.c | 2 +-
18548 drivers/platform/x86/hdaps.c | 2 +-
18549 drivers/platform/x86/ibm_rtl.c | 2 +-
18550 drivers/platform/x86/intel_oaktrail.c | 2 +-
18551 drivers/platform/x86/msi-laptop.c | 16 +-
18552 drivers/platform/x86/msi-wmi.c | 2 +-
18553 drivers/platform/x86/samsung-laptop.c | 2 +-
18554 drivers/platform/x86/samsung-q10.c | 2 +-
18555 drivers/platform/x86/sony-laptop.c | 14 +-
18556 drivers/platform/x86/thinkpad_acpi.c | 2 +-
18557 drivers/pnp/pnpbios/bioscalls.c | 14 +-
18558 drivers/pnp/pnpbios/core.c | 2 +-
18559 drivers/power/pda_power.c | 7 +-
18560 drivers/power/power_supply.h | 4 +-
18561 drivers/power/power_supply_core.c | 7 +-
18562 drivers/power/power_supply_sysfs.c | 6 +-
18563 drivers/power/reset/at91-reset.c | 9 +-
18564 drivers/powercap/powercap_sys.c | 136 +-
18565 drivers/ptp/ptp_private.h | 2 +-
18566 drivers/ptp/ptp_sysfs.c | 2 +-
18567 drivers/regulator/core.c | 4 +-
18568 drivers/regulator/max8660.c | 6 +-
18569 drivers/regulator/max8973-regulator.c | 16 +-
18570 drivers/regulator/mc13892-regulator.c | 8 +-
18571 drivers/rtc/rtc-armada38x.c | 7 +-
18572 drivers/rtc/rtc-cmos.c | 4 +-
18573 drivers/rtc/rtc-ds1307.c | 2 +-
18574 drivers/rtc/rtc-m48t59.c | 4 +-
18575 drivers/rtc/rtc-test.c | 6 +-
18576 drivers/scsi/be2iscsi/be_main.c | 2 +-
18577 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
18578 drivers/scsi/bfa/bfa_ioc.h | 4 +-
18579 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
18580 drivers/scsi/hosts.c | 4 +-
18581 drivers/scsi/hpsa.c | 38 +-
18582 drivers/scsi/hpsa.h | 2 +-
18583 drivers/scsi/libfc/fc_exch.c | 50 +-
18584 drivers/scsi/libsas/sas_ata.c | 2 +-
18585 drivers/scsi/lpfc/lpfc.h | 8 +-
18586 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
18587 drivers/scsi/lpfc/lpfc_init.c | 6 +-
18588 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
18589 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
18590 drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +-
18591 drivers/scsi/pmcraid.c | 20 +-
18592 drivers/scsi/pmcraid.h | 8 +-
18593 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
18594 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
18595 drivers/scsi/qla2xxx/qla_os.c | 6 +-
18596 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
18597 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
18598 drivers/scsi/scsi.c | 2 +-
18599 drivers/scsi/scsi_lib.c | 8 +-
18600 drivers/scsi/scsi_sysfs.c | 2 +-
18601 drivers/scsi/scsi_transport_fc.c | 8 +-
18602 drivers/scsi/scsi_transport_iscsi.c | 6 +-
18603 drivers/scsi/scsi_transport_srp.c | 6 +-
18604 drivers/scsi/sd.c | 6 +-
18605 drivers/scsi/sg.c | 2 +-
18606 drivers/scsi/sr.c | 21 +-
18607 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
18608 drivers/spi/spi.c | 2 +-
18609 drivers/staging/android/timed_output.c | 6 +-
18610 drivers/staging/comedi/comedi_fops.c | 8 +-
18611 drivers/staging/fbtft/fbtft-core.c | 2 +-
18612 drivers/staging/fbtft/fbtft.h | 2 +-
18613 drivers/staging/gdm724x/gdm_tty.c | 2 +-
18614 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
18615 drivers/staging/iio/adc/ad7280a.c | 4 +-
18616 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
18617 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
18618 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
18619 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
18620 drivers/staging/lustre/lustre/include/obd.h | 2 +-
18621 drivers/staging/octeon/ethernet-rx.c | 20 +-
18622 drivers/staging/octeon/ethernet.c | 8 +-
18623 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
18624 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
18625 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
18626 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
18627 drivers/staging/sm750fb/sm750.c | 14 +-
18628 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
18629 drivers/target/sbp/sbp_target.c | 4 +-
18630 drivers/thermal/cpu_cooling.c | 9 +-
18631 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
18632 drivers/thermal/of-thermal.c | 17 +-
18633 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
18634 drivers/tty/cyclades.c | 6 +-
18635 drivers/tty/hvc/hvc_console.c | 14 +-
18636 drivers/tty/hvc/hvcs.c | 21 +-
18637 drivers/tty/hvc/hvsi.c | 22 +-
18638 drivers/tty/hvc/hvsi_lib.c | 4 +-
18639 drivers/tty/ipwireless/tty.c | 27 +-
18640 drivers/tty/moxa.c | 2 +-
18641 drivers/tty/n_gsm.c | 4 +-
18642 drivers/tty/n_tty.c | 3 +-
18643 drivers/tty/pty.c | 4 +-
18644 drivers/tty/rocket.c | 6 +-
18645 drivers/tty/serial/8250/8250_core.c | 10 +-
18646 drivers/tty/serial/ifx6x60.c | 2 +-
18647 drivers/tty/serial/ioc4_serial.c | 6 +-
18648 drivers/tty/serial/kgdb_nmi.c | 4 +-
18649 drivers/tty/serial/kgdboc.c | 32 +-
18650 drivers/tty/serial/msm_serial.c | 4 +-
18651 drivers/tty/serial/samsung.c | 9 +-
18652 drivers/tty/serial/serial_core.c | 8 +-
18653 drivers/tty/synclink.c | 34 +-
18654 drivers/tty/synclink_gt.c | 28 +-
18655 drivers/tty/synclinkmp.c | 34 +-
18656 drivers/tty/tty_io.c | 2 +-
18657 drivers/tty/tty_ldisc.c | 8 +-
18658 drivers/tty/tty_port.c | 22 +-
18659 drivers/uio/uio.c | 13 +-
18660 drivers/usb/atm/cxacru.c | 2 +-
18661 drivers/usb/atm/usbatm.c | 24 +-
18662 drivers/usb/class/cdc-acm.h | 2 +-
18663 drivers/usb/core/devices.c | 6 +-
18664 drivers/usb/core/devio.c | 12 +-
18665 drivers/usb/core/hcd.c | 4 +-
18666 drivers/usb/core/sysfs.c | 2 +-
18667 drivers/usb/core/usb.c | 2 +-
18668 drivers/usb/early/ehci-dbgp.c | 16 +-
18669 drivers/usb/gadget/function/u_serial.c | 22 +-
18670 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
18671 drivers/usb/host/ehci-hcd.c | 2 +-
18672 drivers/usb/host/ehci-hub.c | 4 +-
18673 drivers/usb/host/ehci-q.c | 4 +-
18674 drivers/usb/host/fotg210-hcd.c | 2 +-
18675 drivers/usb/host/fusbh200-hcd.c | 2 +-
18676 drivers/usb/host/hwa-hc.c | 2 +-
18677 drivers/usb/host/ohci-hcd.c | 2 +-
18678 drivers/usb/host/r8a66597.h | 2 +-
18679 drivers/usb/host/uhci-hcd.c | 2 +-
18680 drivers/usb/host/xhci-pci.c | 2 +-
18681 drivers/usb/host/xhci.c | 2 +-
18682 drivers/usb/misc/appledisplay.c | 4 +-
18683 drivers/usb/serial/console.c | 8 +-
18684 drivers/usb/storage/transport.c | 2 +-
18685 drivers/usb/storage/usb.c | 2 +-
18686 drivers/usb/storage/usb.h | 2 +-
18687 drivers/usb/usbip/vhci.h | 2 +-
18688 drivers/usb/usbip/vhci_hcd.c | 6 +-
18689 drivers/usb/usbip/vhci_rx.c | 2 +-
18690 drivers/usb/wusbcore/wa-hc.h | 4 +-
18691 drivers/usb/wusbcore/wa-xfer.c | 2 +-
18692 drivers/vfio/vfio.c | 2 +-
18693 drivers/vhost/vringh.c | 20 +-
18694 drivers/video/backlight/kb3886_bl.c | 2 +-
18695 drivers/video/console/fbcon.c | 2 +-
18696 drivers/video/fbdev/aty/aty128fb.c | 2 +-
18697 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
18698 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
18699 drivers/video/fbdev/core/fb_defio.c | 6 +-
18700 drivers/video/fbdev/core/fbmem.c | 2 +-
18701 drivers/video/fbdev/hyperv_fb.c | 4 +-
18702 drivers/video/fbdev/i810/i810_accel.c | 1 +
18703 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
18704 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
18705 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
18706 drivers/video/fbdev/omap2/dss/display.c | 8 +-
18707 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
18708 drivers/video/fbdev/smscufx.c | 4 +-
18709 drivers/video/fbdev/udlfb.c | 36 +-
18710 drivers/video/fbdev/uvesafb.c | 52 +-
18711 drivers/video/fbdev/vesafb.c | 58 +-
18712 drivers/video/fbdev/via/via_clock.h | 2 +-
18713 drivers/xen/events/events_base.c | 6 +-
18714 drivers/xen/evtchn.c | 4 +-
18715 fs/Kconfig.binfmt | 2 +-
18716 fs/afs/inode.c | 4 +-
18717 fs/aio.c | 2 +-
18718 fs/autofs4/waitq.c | 2 +-
18719 fs/befs/endian.h | 6 +-
18720 fs/binfmt_aout.c | 23 +-
18721 fs/binfmt_elf.c | 670 +-
18722 fs/binfmt_elf_fdpic.c | 4 +-
18723 fs/block_dev.c | 2 +-
18724 fs/btrfs/ctree.c | 9 +-
18725 fs/btrfs/delayed-inode.c | 9 +-
18726 fs/btrfs/delayed-inode.h | 6 +-
18727 fs/btrfs/file.c | 10 +-
18728 fs/btrfs/inode.c | 14 +-
18729 fs/btrfs/super.c | 2 +-
18730 fs/btrfs/sysfs.c | 2 +-
18731 fs/btrfs/tests/free-space-tests.c | 8 +-
18732 fs/btrfs/tree-log.h | 2 +-
18733 fs/buffer.c | 2 +-
18734 fs/cachefiles/bind.c | 6 +-
18735 fs/cachefiles/daemon.c | 8 +-
18736 fs/cachefiles/internal.h | 12 +-
18737 fs/cachefiles/namei.c | 2 +-
18738 fs/cachefiles/proc.c | 12 +-
18739 fs/ceph/dir.c | 12 +-
18740 fs/ceph/super.c | 4 +-
18741 fs/cifs/cifs_debug.c | 12 +-
18742 fs/cifs/cifsfs.c | 8 +-
18743 fs/cifs/cifsglob.h | 54 +-
18744 fs/cifs/file.c | 10 +-
18745 fs/cifs/misc.c | 4 +-
18746 fs/cifs/smb1ops.c | 80 +-
18747 fs/cifs/smb2ops.c | 84 +-
18748 fs/cifs/smb2pdu.c | 3 +-
18749 fs/coda/cache.c | 10 +-
18750 fs/compat.c | 4 +-
18751 fs/compat_binfmt_elf.c | 2 +
18752 fs/compat_ioctl.c | 12 +-
18753 fs/configfs/dir.c | 10 +-
18754 fs/coredump.c | 16 +-
18755 fs/dcache.c | 51 +-
18756 fs/ecryptfs/inode.c | 2 +-
18757 fs/ecryptfs/miscdev.c | 2 +-
18758 fs/exec.c | 362 +-
18759 fs/ext2/xattr.c | 5 +-
18760 fs/ext4/ext4.h | 20 +-
18761 fs/ext4/mballoc.c | 44 +-
18762 fs/ext4/resize.c | 16 +-
18763 fs/ext4/super.c | 4 +-
18764 fs/ext4/xattr.c | 5 +-
18765 fs/fhandle.c | 3 +-
18766 fs/file.c | 4 +-
18767 fs/fs_struct.c | 8 +-
18768 fs/fscache/cookie.c | 40 +-
18769 fs/fscache/internal.h | 202 +-
18770 fs/fscache/object.c | 26 +-
18771 fs/fscache/operation.c | 38 +-
18772 fs/fscache/page.c | 110 +-
18773 fs/fscache/stats.c | 348 +-
18774 fs/fuse/cuse.c | 10 +-
18775 fs/fuse/dev.c | 4 +-
18776 fs/gfs2/glock.c | 22 +-
18777 fs/gfs2/glops.c | 4 +-
18778 fs/gfs2/quota.c | 6 +-
18779 fs/hugetlbfs/inode.c | 13 +-
18780 fs/inode.c | 4 +-
18781 fs/jffs2/erase.c | 3 +-
18782 fs/jffs2/wbuf.c | 3 +-
18783 fs/jfs/super.c | 2 +-
18784 fs/kernfs/dir.c | 2 +-
18785 fs/kernfs/file.c | 20 +-
18786 fs/libfs.c | 10 +-
18787 fs/lockd/clntproc.c | 4 +-
18788 fs/namei.c | 16 +-
18789 fs/namespace.c | 16 +-
18790 fs/nfs/callback_xdr.c | 2 +-
18791 fs/nfs/inode.c | 6 +-
18792 fs/nfsd/nfs4proc.c | 2 +-
18793 fs/nfsd/nfs4xdr.c | 2 +-
18794 fs/nfsd/nfscache.c | 11 +-
18795 fs/nfsd/vfs.c | 6 +-
18796 fs/nls/nls_base.c | 26 +-
18797 fs/nls/nls_euc-jp.c | 6 +-
18798 fs/nls/nls_koi8-ru.c | 6 +-
18799 fs/notify/fanotify/fanotify_user.c | 4 +-
18800 fs/notify/notification.c | 4 +-
18801 fs/ntfs/dir.c | 2 +-
18802 fs/ntfs/super.c | 6 +-
18803 fs/ocfs2/localalloc.c | 2 +-
18804 fs/ocfs2/ocfs2.h | 10 +-
18805 fs/ocfs2/suballoc.c | 12 +-
18806 fs/ocfs2/super.c | 20 +-
18807 fs/pipe.c | 72 +-
18808 fs/posix_acl.c | 4 +-
18809 fs/proc/array.c | 20 +
18810 fs/proc/base.c | 4 +-
18811 fs/proc/kcore.c | 34 +-
18812 fs/proc/meminfo.c | 2 +-
18813 fs/proc/nommu.c | 2 +-
18814 fs/proc/proc_sysctl.c | 26 +-
18815 fs/proc/task_mmu.c | 39 +-
18816 fs/proc/task_nommu.c | 4 +-
18817 fs/proc/vmcore.c | 16 +-
18818 fs/qnx6/qnx6.h | 4 +-
18819 fs/quota/netlink.c | 4 +-
18820 fs/read_write.c | 2 +-
18821 fs/reiserfs/do_balan.c | 2 +-
18822 fs/reiserfs/procfs.c | 2 +-
18823 fs/reiserfs/reiserfs.h | 4 +-
18824 fs/seq_file.c | 4 +-
18825 fs/splice.c | 43 +-
18826 fs/squashfs/xattr.c | 12 +-
18827 fs/sysv/sysv.h | 2 +-
18828 fs/tracefs/inode.c | 8 +-
18829 fs/udf/misc.c | 2 +-
18830 fs/ufs/swab.h | 4 +-
18831 fs/userfaultfd.c | 2 +-
18832 fs/xattr.c | 21 +
18833 fs/xfs/libxfs/xfs_bmap.c | 2 +-
18834 fs/xfs/xfs_dir2_readdir.c | 7 +-
18835 fs/xfs/xfs_ioctl.c | 2 +-
18836 fs/xfs/xfs_linux.h | 4 +-
18837 include/asm-generic/4level-fixup.h | 2 +
18838 include/asm-generic/atomic-long.h | 156 +-
18839 include/asm-generic/atomic64.h | 12 +
18840 include/asm-generic/bitops/__fls.h | 2 +-
18841 include/asm-generic/bitops/fls.h | 2 +-
18842 include/asm-generic/bitops/fls64.h | 4 +-
18843 include/asm-generic/bug.h | 6 +-
18844 include/asm-generic/cache.h | 4 +-
18845 include/asm-generic/emergency-restart.h | 2 +-
18846 include/asm-generic/kmap_types.h | 4 +-
18847 include/asm-generic/local.h | 13 +
18848 include/asm-generic/pgtable-nopmd.h | 18 +-
18849 include/asm-generic/pgtable-nopud.h | 15 +-
18850 include/asm-generic/pgtable.h | 16 +
18851 include/asm-generic/sections.h | 1 +
18852 include/asm-generic/uaccess.h | 16 +
18853 include/asm-generic/vmlinux.lds.h | 15 +-
18854 include/crypto/algapi.h | 2 +-
18855 include/drm/drmP.h | 16 +-
18856 include/drm/drm_crtc_helper.h | 2 +-
18857 include/drm/drm_mm.h | 2 +-
18858 include/drm/i915_pciids.h | 2 +-
18859 include/drm/intel-gtt.h | 4 +-
18860 include/drm/ttm/ttm_memory.h | 2 +-
18861 include/drm/ttm/ttm_page_alloc.h | 1 +
18862 include/keys/asymmetric-subtype.h | 2 +-
18863 include/linux/atmdev.h | 4 +-
18864 include/linux/atomic.h | 17 +-
18865 include/linux/audit.h | 2 +-
18866 include/linux/average.h | 2 +-
18867 include/linux/binfmts.h | 3 +-
18868 include/linux/bitmap.h | 2 +-
18869 include/linux/bitops.h | 8 +-
18870 include/linux/blkdev.h | 2 +-
18871 include/linux/blktrace_api.h | 2 +-
18872 include/linux/cache.h | 8 +
18873 include/linux/cdrom.h | 1 -
18874 include/linux/cleancache.h | 2 +-
18875 include/linux/clk-provider.h | 1 +
18876 include/linux/compat.h | 6 +-
18877 include/linux/compiler-gcc.h | 28 +-
18878 include/linux/compiler.h | 157 +-
18879 include/linux/configfs.h | 2 +-
18880 include/linux/cpufreq.h | 3 +-
18881 include/linux/cpuidle.h | 5 +-
18882 include/linux/cpumask.h | 14 +-
18883 include/linux/crypto.h | 4 +-
18884 include/linux/ctype.h | 2 +-
18885 include/linux/dcache.h | 4 +-
18886 include/linux/decompress/mm.h | 2 +-
18887 include/linux/devfreq.h | 2 +-
18888 include/linux/device.h | 7 +-
18889 include/linux/dma-mapping.h | 2 +-
18890 include/linux/efi.h | 1 +
18891 include/linux/elf.h | 2 +
18892 include/linux/err.h | 4 +-
18893 include/linux/extcon.h | 2 +-
18894 include/linux/fb.h | 3 +-
18895 include/linux/fdtable.h | 2 +-
18896 include/linux/fs.h | 5 +-
18897 include/linux/fs_struct.h | 2 +-
18898 include/linux/fscache-cache.h | 2 +-
18899 include/linux/fscache.h | 2 +-
18900 include/linux/fsnotify.h | 2 +-
18901 include/linux/genhd.h | 4 +-
18902 include/linux/genl_magic_func.h | 2 +-
18903 include/linux/gfp.h | 12 +-
18904 include/linux/highmem.h | 12 +
18905 include/linux/hwmon-sysfs.h | 6 +-
18906 include/linux/i2c.h | 1 +
18907 include/linux/if_pppox.h | 2 +-
18908 include/linux/init.h | 12 +-
18909 include/linux/init_task.h | 7 +
18910 include/linux/interrupt.h | 6 +-
18911 include/linux/iommu.h | 2 +-
18912 include/linux/ioport.h | 2 +-
18913 include/linux/ipc.h | 2 +-
18914 include/linux/irq.h | 5 +-
18915 include/linux/irqdesc.h | 2 +-
18916 include/linux/irqdomain.h | 3 +
18917 include/linux/jiffies.h | 16 +-
18918 include/linux/key-type.h | 2 +-
18919 include/linux/kgdb.h | 6 +-
18920 include/linux/kmemleak.h | 4 +-
18921 include/linux/kobject.h | 3 +-
18922 include/linux/kobject_ns.h | 2 +-
18923 include/linux/kref.h | 2 +-
18924 include/linux/libata.h | 2 +-
18925 include/linux/linkage.h | 1 +
18926 include/linux/list.h | 15 +
18927 include/linux/lockref.h | 26 +-
18928 include/linux/math64.h | 10 +-
18929 include/linux/mempolicy.h | 7 +
18930 include/linux/mm.h | 102 +-
18931 include/linux/mm_types.h | 20 +
18932 include/linux/mmiotrace.h | 4 +-
18933 include/linux/mmzone.h | 2 +-
18934 include/linux/mod_devicetable.h | 4 +-
18935 include/linux/module.h | 69 +-
18936 include/linux/moduleloader.h | 16 +
18937 include/linux/moduleparam.h | 4 +-
18938 include/linux/net.h | 2 +-
18939 include/linux/netdevice.h | 7 +-
18940 include/linux/netfilter.h | 2 +-
18941 include/linux/netfilter/nfnetlink.h | 2 +-
18942 include/linux/nls.h | 4 +-
18943 include/linux/notifier.h | 3 +-
18944 include/linux/oprofile.h | 4 +-
18945 include/linux/padata.h | 2 +-
18946 include/linux/pci_hotplug.h | 3 +-
18947 include/linux/percpu.h | 2 +-
18948 include/linux/perf_event.h | 12 +-
18949 include/linux/pipe_fs_i.h | 8 +-
18950 include/linux/pm.h | 1 +
18951 include/linux/pm_domain.h | 4 +-
18952 include/linux/pm_runtime.h | 2 +-
18953 include/linux/pnp.h | 2 +-
18954 include/linux/poison.h | 4 +-
18955 include/linux/power/smartreflex.h | 2 +-
18956 include/linux/ppp-comp.h | 2 +-
18957 include/linux/preempt.h | 21 +
18958 include/linux/proc_ns.h | 2 +-
18959 include/linux/psci.h | 2 +-
18960 include/linux/quota.h | 2 +-
18961 include/linux/random.h | 19 +-
18962 include/linux/rculist.h | 16 +
18963 include/linux/reboot.h | 14 +-
18964 include/linux/regset.h | 3 +-
18965 include/linux/relay.h | 2 +-
18966 include/linux/rio.h | 2 +-
18967 include/linux/rmap.h | 4 +-
18968 include/linux/sched.h | 72 +-
18969 include/linux/sched/sysctl.h | 1 +
18970 include/linux/semaphore.h | 2 +-
18971 include/linux/seq_file.h | 1 +
18972 include/linux/signal.h | 2 +-
18973 include/linux/skbuff.h | 12 +-
18974 include/linux/slab.h | 47 +-
18975 include/linux/slab_def.h | 14 +-
18976 include/linux/slub_def.h | 2 +-
18977 include/linux/smp.h | 2 +
18978 include/linux/sock_diag.h | 2 +-
18979 include/linux/sonet.h | 2 +-
18980 include/linux/sunrpc/addr.h | 8 +-
18981 include/linux/sunrpc/clnt.h | 2 +-
18982 include/linux/sunrpc/svc.h | 2 +-
18983 include/linux/sunrpc/svc_rdma.h | 18 +-
18984 include/linux/sunrpc/svcauth.h | 2 +-
18985 include/linux/swapops.h | 10 +-
18986 include/linux/swiotlb.h | 3 +-
18987 include/linux/syscalls.h | 21 +-
18988 include/linux/syscore_ops.h | 2 +-
18989 include/linux/sysctl.h | 3 +-
18990 include/linux/sysfs.h | 9 +-
18991 include/linux/sysrq.h | 3 +-
18992 include/linux/tcp.h | 14 +-
18993 include/linux/thread_info.h | 7 +
18994 include/linux/tty.h | 4 +-
18995 include/linux/tty_driver.h | 2 +-
18996 include/linux/tty_ldisc.h | 2 +-
18997 include/linux/types.h | 16 +
18998 include/linux/uaccess.h | 6 +-
18999 include/linux/uio_driver.h | 2 +-
19000 include/linux/unaligned/access_ok.h | 24 +-
19001 include/linux/usb.h | 12 +-
19002 include/linux/usb/hcd.h | 1 +
19003 include/linux/usb/renesas_usbhs.h | 2 +-
19004 include/linux/vermagic.h | 21 +-
19005 include/linux/vga_switcheroo.h | 8 +-
19006 include/linux/vmalloc.h | 7 +-
19007 include/linux/vmstat.h | 24 +-
19008 include/linux/xattr.h | 5 +-
19009 include/linux/zlib.h | 3 +-
19010 include/media/v4l2-dev.h | 2 +-
19011 include/media/v4l2-device.h | 2 +-
19012 include/net/9p/transport.h | 2 +-
19013 include/net/bluetooth/l2cap.h | 2 +-
19014 include/net/bonding.h | 2 +-
19015 include/net/caif/cfctrl.h | 6 +-
19016 include/net/flow.h | 2 +-
19017 include/net/genetlink.h | 2 +-
19018 include/net/gro_cells.h | 2 +-
19019 include/net/inet_connection_sock.h | 2 +-
19020 include/net/inet_sock.h | 2 +-
19021 include/net/inetpeer.h | 2 +-
19022 include/net/ip_fib.h | 2 +-
19023 include/net/ip_vs.h | 8 +-
19024 include/net/ipv6.h | 2 +-
19025 include/net/irda/ircomm_tty.h | 1 +
19026 include/net/iucv/af_iucv.h | 2 +-
19027 include/net/llc_c_ac.h | 2 +-
19028 include/net/llc_c_ev.h | 4 +-
19029 include/net/llc_c_st.h | 2 +-
19030 include/net/llc_s_ac.h | 2 +-
19031 include/net/llc_s_st.h | 2 +-
19032 include/net/mac80211.h | 4 +-
19033 include/net/neighbour.h | 2 +-
19034 include/net/net_namespace.h | 18 +-
19035 include/net/netlink.h | 2 +-
19036 include/net/netns/conntrack.h | 6 +-
19037 include/net/netns/ipv4.h | 4 +-
19038 include/net/netns/ipv6.h | 4 +-
19039 include/net/netns/xfrm.h | 2 +-
19040 include/net/ping.h | 2 +-
19041 include/net/protocol.h | 4 +-
19042 include/net/rtnetlink.h | 2 +-
19043 include/net/sctp/checksum.h | 4 +-
19044 include/net/sctp/sm.h | 4 +-
19045 include/net/sctp/structs.h | 2 +-
19046 include/net/sock.h | 12 +-
19047 include/net/tcp.h | 8 +-
19048 include/net/xfrm.h | 13 +-
19049 include/rdma/iw_cm.h | 2 +-
19050 include/scsi/libfc.h | 3 +-
19051 include/scsi/scsi_device.h | 6 +-
19052 include/scsi/scsi_driver.h | 2 +-
19053 include/scsi/scsi_transport_fc.h | 3 +-
19054 include/scsi/sg.h | 2 +-
19055 include/sound/compress_driver.h | 2 +-
19056 include/sound/soc.h | 4 +-
19057 include/trace/events/irq.h | 4 +-
19058 include/uapi/linux/a.out.h | 8 +
19059 include/uapi/linux/bcache.h | 5 +-
19060 include/uapi/linux/byteorder/little_endian.h | 28 +-
19061 include/uapi/linux/connector.h | 2 +-
19062 include/uapi/linux/elf.h | 28 +
19063 include/uapi/linux/screen_info.h | 3 +-
19064 include/uapi/linux/swab.h | 6 +-
19065 include/uapi/linux/xattr.h | 4 +
19066 include/video/udlfb.h | 8 +-
19067 include/video/uvesafb.h | 1 +
19068 init/Kconfig | 2 +-
19069 init/Makefile | 3 +
19070 init/do_mounts.c | 14 +-
19071 init/do_mounts.h | 8 +-
19072 init/do_mounts_initrd.c | 30 +-
19073 init/do_mounts_md.c | 6 +-
19074 init/init_task.c | 4 +
19075 init/initramfs.c | 38 +-
19076 init/main.c | 30 +-
19077 ipc/compat.c | 4 +-
19078 ipc/ipc_sysctl.c | 8 +-
19079 ipc/mq_sysctl.c | 4 +-
19080 ipc/sem.c | 4 +-
19081 ipc/shm.c | 6 +
19082 kernel/audit.c | 8 +-
19083 kernel/auditsc.c | 4 +-
19084 kernel/bpf/core.c | 7 +-
19085 kernel/capability.c | 3 +
19086 kernel/compat.c | 38 +-
19087 kernel/debug/debug_core.c | 16 +-
19088 kernel/debug/kdb/kdb_main.c | 4 +-
19089 kernel/events/core.c | 26 +-
19090 kernel/events/internal.h | 10 +-
19091 kernel/events/uprobes.c | 2 +-
19092 kernel/exit.c | 2 +-
19093 kernel/fork.c | 167 +-
19094 kernel/futex.c | 11 +-
19095 kernel/futex_compat.c | 2 +-
19096 kernel/gcov/base.c | 7 +-
19097 kernel/irq/manage.c | 2 +-
19098 kernel/irq/msi.c | 19 +-
19099 kernel/irq/spurious.c | 2 +-
19100 kernel/jump_label.c | 5 +
19101 kernel/kallsyms.c | 37 +-
19102 kernel/kexec.c | 3 +-
19103 kernel/kmod.c | 8 +-
19104 kernel/kprobes.c | 4 +-
19105 kernel/ksysfs.c | 2 +-
19106 kernel/locking/lockdep.c | 7 +-
19107 kernel/locking/mutex-debug.c | 12 +-
19108 kernel/locking/mutex-debug.h | 4 +-
19109 kernel/locking/mutex.c | 6 +-
19110 kernel/module.c | 422 +-
19111 kernel/notifier.c | 17 +-
19112 kernel/padata.c | 4 +-
19113 kernel/panic.c | 5 +-
19114 kernel/pid.c | 2 +-
19115 kernel/pid_namespace.c | 2 +-
19116 kernel/power/process.c | 12 +-
19117 kernel/profile.c | 14 +-
19118 kernel/ptrace.c | 8 +-
19119 kernel/rcu/rcutorture.c | 60 +-
19120 kernel/rcu/tiny.c | 4 +-
19121 kernel/rcu/tree.c | 44 +-
19122 kernel/rcu/tree.h | 14 +-
19123 kernel/rcu/tree_plugin.h | 14 +-
19124 kernel/rcu/tree_trace.c | 12 +-
19125 kernel/sched/auto_group.c | 4 +-
19126 kernel/sched/core.c | 45 +-
19127 kernel/sched/fair.c | 2 +-
19128 kernel/sched/sched.h | 2 +-
19129 kernel/signal.c | 12 +-
19130 kernel/smpboot.c | 4 +-
19131 kernel/softirq.c | 12 +-
19132 kernel/sys.c | 10 +-
19133 kernel/sysctl.c | 34 +-
19134 kernel/time/alarmtimer.c | 2 +-
19135 kernel/time/posix-cpu-timers.c | 4 +-
19136 kernel/time/posix-timers.c | 24 +-
19137 kernel/time/timer.c | 2 +-
19138 kernel/time/timer_stats.c | 10 +-
19139 kernel/trace/blktrace.c | 6 +-
19140 kernel/trace/ftrace.c | 15 +-
19141 kernel/trace/ring_buffer.c | 96 +-
19142 kernel/trace/trace.c | 2 +-
19143 kernel/trace/trace.h | 2 +-
19144 kernel/trace/trace_clock.c | 4 +-
19145 kernel/trace/trace_events.c | 1 -
19146 kernel/trace/trace_functions_graph.c | 4 +-
19147 kernel/trace/trace_mmiotrace.c | 8 +-
19148 kernel/trace/trace_output.c | 10 +-
19149 kernel/trace/trace_seq.c | 2 +-
19150 kernel/trace/trace_stack.c | 2 +-
19151 kernel/user_namespace.c | 2 +-
19152 kernel/utsname_sysctl.c | 2 +-
19153 kernel/watchdog.c | 2 +-
19154 kernel/workqueue.c | 2 +-
19155 lib/Kconfig.debug | 8 +-
19156 lib/Makefile | 2 +-
19157 lib/bitmap.c | 8 +-
19158 lib/bug.c | 2 +
19159 lib/debugobjects.c | 2 +-
19160 lib/decompress_bunzip2.c | 3 +-
19161 lib/decompress_unlzma.c | 4 +-
19162 lib/div64.c | 4 +-
19163 lib/dma-debug.c | 4 +-
19164 lib/inflate.c | 2 +-
19165 lib/ioremap.c | 4 +-
19166 lib/kobject.c | 4 +-
19167 lib/list_debug.c | 126 +-
19168 lib/lockref.c | 44 +-
19169 lib/percpu-refcount.c | 2 +-
19170 lib/radix-tree.c | 2 +-
19171 lib/random32.c | 2 +-
19172 lib/show_mem.c | 2 +-
19173 lib/strncpy_from_user.c | 2 +-
19174 lib/strnlen_user.c | 2 +-
19175 lib/swiotlb.c | 2 +-
19176 lib/usercopy.c | 6 +
19177 lib/vsprintf.c | 12 +-
19178 mm/Kconfig | 6 +-
19179 mm/backing-dev.c | 4 +-
19180 mm/debug.c | 3 +
19181 mm/filemap.c | 2 +-
19182 mm/gup.c | 13 +-
19183 mm/highmem.c | 6 +-
19184 mm/hugetlb.c | 70 +-
19185 mm/internal.h | 1 +
19186 mm/maccess.c | 4 +-
19187 mm/madvise.c | 37 +
19188 mm/memory-failure.c | 6 +-
19189 mm/memory.c | 424 +-
19190 mm/mempolicy.c | 25 +
19191 mm/mlock.c | 15 +-
19192 mm/mm_init.c | 2 +-
19193 mm/mmap.c | 582 +-
19194 mm/mprotect.c | 137 +-
19195 mm/mremap.c | 39 +-
19196 mm/nommu.c | 21 +-
19197 mm/page-writeback.c | 2 +-
19198 mm/page_alloc.c | 49 +-
19199 mm/percpu.c | 2 +-
19200 mm/process_vm_access.c | 14 +-
19201 mm/rmap.c | 45 +-
19202 mm/shmem.c | 19 +-
19203 mm/slab.c | 109 +-
19204 mm/slab.h | 22 +-
19205 mm/slab_common.c | 86 +-
19206 mm/slob.c | 218 +-
19207 mm/slub.c | 102 +-
19208 mm/sparse-vmemmap.c | 4 +-
19209 mm/sparse.c | 2 +-
19210 mm/swap.c | 2 +
19211 mm/swapfile.c | 12 +-
19212 mm/util.c | 6 +
19213 mm/vmalloc.c | 114 +-
19214 mm/vmstat.c | 12 +-
19215 net/8021q/vlan.c | 5 +-
19216 net/8021q/vlan_netlink.c | 2 +-
19217 net/9p/mod.c | 4 +-
19218 net/9p/trans_fd.c | 2 +-
19219 net/atm/atm_misc.c | 8 +-
19220 net/atm/lec.h | 2 +-
19221 net/atm/proc.c | 6 +-
19222 net/atm/resources.c | 4 +-
19223 net/ax25/sysctl_net_ax25.c | 2 +-
19224 net/batman-adv/bat_iv_ogm.c | 8 +-
19225 net/batman-adv/fragmentation.c | 2 +-
19226 net/batman-adv/soft-interface.c | 8 +-
19227 net/batman-adv/types.h | 6 +-
19228 net/bluetooth/hci_sock.c | 2 +-
19229 net/bluetooth/l2cap_core.c | 6 +-
19230 net/bluetooth/l2cap_sock.c | 12 +-
19231 net/bluetooth/rfcomm/sock.c | 4 +-
19232 net/bluetooth/rfcomm/tty.c | 4 +-
19233 net/bridge/br_netlink.c | 2 +-
19234 net/bridge/netfilter/ebtables.c | 6 +-
19235 net/caif/cfctrl.c | 11 +-
19236 net/caif/chnl_net.c | 2 +-
19237 net/can/af_can.c | 2 +-
19238 net/can/gw.c | 6 +-
19239 net/ceph/messenger.c | 4 +-
19240 net/compat.c | 24 +-
19241 net/core/datagram.c | 2 +-
19242 net/core/dev.c | 16 +-
19243 net/core/filter.c | 2 +-
19244 net/core/flow.c | 6 +-
19245 net/core/neighbour.c | 4 +-
19246 net/core/net-sysfs.c | 2 +-
19247 net/core/net_namespace.c | 8 +-
19248 net/core/netpoll.c | 4 +-
19249 net/core/rtnetlink.c | 15 +-
19250 net/core/scm.c | 14 +-
19251 net/core/skbuff.c | 8 +-
19252 net/core/sock.c | 28 +-
19253 net/core/sock_diag.c | 15 +-
19254 net/core/sysctl_net_core.c | 22 +-
19255 net/decnet/af_decnet.c | 1 +
19256 net/decnet/sysctl_net_decnet.c | 4 +-
19257 net/dsa/dsa.c | 2 +-
19258 net/hsr/hsr_netlink.c | 2 +-
19259 net/ieee802154/6lowpan/core.c | 2 +-
19260 net/ieee802154/6lowpan/reassembly.c | 14 +-
19261 net/ipv4/af_inet.c | 2 +-
19262 net/ipv4/devinet.c | 18 +-
19263 net/ipv4/fib_frontend.c | 6 +-
19264 net/ipv4/fib_semantics.c | 2 +-
19265 net/ipv4/inet_connection_sock.c | 4 +-
19266 net/ipv4/inet_timewait_sock.c | 2 +-
19267 net/ipv4/inetpeer.c | 2 +-
19268 net/ipv4/ip_fragment.c | 15 +-
19269 net/ipv4/ip_gre.c | 6 +-
19270 net/ipv4/ip_sockglue.c | 2 +-
19271 net/ipv4/ip_vti.c | 4 +-
19272 net/ipv4/ipconfig.c | 6 +-
19273 net/ipv4/ipip.c | 4 +-
19274 net/ipv4/netfilter/arp_tables.c | 12 +-
19275 net/ipv4/netfilter/ip_tables.c | 12 +-
19276 net/ipv4/ping.c | 14 +-
19277 net/ipv4/raw.c | 14 +-
19278 net/ipv4/route.c | 32 +-
19279 net/ipv4/sysctl_net_ipv4.c | 22 +-
19280 net/ipv4/tcp_input.c | 6 +-
19281 net/ipv4/tcp_probe.c | 2 +-
19282 net/ipv4/udp.c | 10 +-
19283 net/ipv4/xfrm4_policy.c | 18 +-
19284 net/ipv6/addrconf.c | 18 +-
19285 net/ipv6/af_inet6.c | 2 +-
19286 net/ipv6/datagram.c | 2 +-
19287 net/ipv6/icmp.c | 2 +-
19288 net/ipv6/ip6_fib.c | 4 +-
19289 net/ipv6/ip6_gre.c | 10 +-
19290 net/ipv6/ip6_tunnel.c | 4 +-
19291 net/ipv6/ip6_vti.c | 4 +-
19292 net/ipv6/ipv6_sockglue.c | 2 +-
19293 net/ipv6/netfilter/ip6_tables.c | 12 +-
19294 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
19295 net/ipv6/ping.c | 33 +-
19296 net/ipv6/raw.c | 17 +-
19297 net/ipv6/reassembly.c | 13 +-
19298 net/ipv6/route.c | 2 +-
19299 net/ipv6/sit.c | 4 +-
19300 net/ipv6/sysctl_net_ipv6.c | 2 +-
19301 net/ipv6/udp.c | 6 +-
19302 net/ipv6/xfrm6_policy.c | 17 +-
19303 net/irda/ircomm/ircomm_tty.c | 18 +-
19304 net/iucv/af_iucv.c | 4 +-
19305 net/iucv/iucv.c | 2 +-
19306 net/key/af_key.c | 4 +-
19307 net/l2tp/l2tp_eth.c | 38 +-
19308 net/l2tp/l2tp_ip.c | 2 +-
19309 net/l2tp/l2tp_ip6.c | 2 +-
19310 net/mac80211/cfg.c | 8 +-
19311 net/mac80211/ieee80211_i.h | 3 +-
19312 net/mac80211/iface.c | 20 +-
19313 net/mac80211/main.c | 2 +-
19314 net/mac80211/pm.c | 4 +-
19315 net/mac80211/rate.c | 2 +-
19316 net/mac80211/sta_info.c | 2 +-
19317 net/mac80211/util.c | 8 +-
19318 net/mpls/af_mpls.c | 6 +-
19319 net/netfilter/ipset/ip_set_core.c | 2 +-
19320 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
19321 net/netfilter/ipvs/ip_vs_core.c | 4 +-
19322 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
19323 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
19324 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
19325 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
19326 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
19327 net/netfilter/nf_conntrack_acct.c | 2 +-
19328 net/netfilter/nf_conntrack_ecache.c | 2 +-
19329 net/netfilter/nf_conntrack_helper.c | 2 +-
19330 net/netfilter/nf_conntrack_proto.c | 2 +-
19331 net/netfilter/nf_conntrack_standalone.c | 2 +-
19332 net/netfilter/nf_conntrack_timestamp.c | 2 +-
19333 net/netfilter/nf_log.c | 10 +-
19334 net/netfilter/nf_sockopt.c | 4 +-
19335 net/netfilter/nfnetlink_log.c | 4 +-
19336 net/netfilter/nft_compat.c | 9 +-
19337 net/netfilter/xt_statistic.c | 8 +-
19338 net/netlink/af_netlink.c | 4 +-
19339 net/openvswitch/vport-internal_dev.c | 2 +-
19340 net/packet/af_packet.c | 8 +-
19341 net/phonet/pep.c | 6 +-
19342 net/phonet/socket.c | 2 +-
19343 net/phonet/sysctl.c | 2 +-
19344 net/rds/cong.c | 6 +-
19345 net/rds/ib.h | 2 +-
19346 net/rds/ib_cm.c | 2 +-
19347 net/rds/ib_recv.c | 4 +-
19348 net/rds/iw.h | 2 +-
19349 net/rds/iw_cm.c | 2 +-
19350 net/rds/iw_recv.c | 4 +-
19351 net/rds/rds.h | 2 +-
19352 net/rds/tcp.c | 2 +-
19353 net/rds/tcp_send.c | 2 +-
19354 net/rxrpc/af_rxrpc.c | 2 +-
19355 net/rxrpc/ar-ack.c | 14 +-
19356 net/rxrpc/ar-call.c | 2 +-
19357 net/rxrpc/ar-connection.c | 2 +-
19358 net/rxrpc/ar-connevent.c | 2 +-
19359 net/rxrpc/ar-input.c | 4 +-
19360 net/rxrpc/ar-internal.h | 8 +-
19361 net/rxrpc/ar-local.c | 2 +-
19362 net/rxrpc/ar-output.c | 4 +-
19363 net/rxrpc/ar-peer.c | 2 +-
19364 net/rxrpc/ar-proc.c | 4 +-
19365 net/rxrpc/ar-transport.c | 2 +-
19366 net/rxrpc/rxkad.c | 4 +-
19367 net/sched/sch_generic.c | 4 +-
19368 net/sctp/ipv6.c | 6 +-
19369 net/sctp/protocol.c | 10 +-
19370 net/sctp/sm_sideeffect.c | 2 +-
19371 net/sctp/socket.c | 21 +-
19372 net/sctp/sysctl.c | 10 +-
19373 net/socket.c | 18 +-
19374 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
19375 net/sunrpc/clnt.c | 4 +-
19376 net/sunrpc/sched.c | 4 +-
19377 net/sunrpc/svc.c | 4 +-
19378 net/sunrpc/svcauth_unix.c | 2 +-
19379 net/sunrpc/xprtrdma/svc_rdma.c | 38 +-
19380 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
19381 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
19382 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
19383 net/tipc/netlink_compat.c | 12 +-
19384 net/tipc/subscr.c | 2 +-
19385 net/unix/af_unix.c | 7 +-
19386 net/unix/sysctl_net_unix.c | 2 +-
19387 net/wireless/wext-core.c | 19 +-
19388 net/xfrm/xfrm_policy.c | 16 +-
19389 net/xfrm/xfrm_state.c | 33 +-
19390 net/xfrm/xfrm_sysctl.c | 2 +-
19391 scripts/Kbuild.include | 2 +-
19392 scripts/Makefile.build | 2 +-
19393 scripts/Makefile.clean | 3 +-
19394 scripts/Makefile.host | 69 +-
19395 scripts/basic/fixdep.c | 12 +-
19396 scripts/dtc/checks.c | 14 +-
19397 scripts/dtc/data.c | 6 +-
19398 scripts/dtc/flattree.c | 8 +-
19399 scripts/dtc/livetree.c | 4 +-
19400 scripts/gcc-plugin.sh | 51 +
19401 scripts/headers_install.sh | 1 +
19402 scripts/kallsyms.c | 4 +-
19403 scripts/kconfig/lkc.h | 5 +-
19404 scripts/kconfig/menu.c | 2 +-
19405 scripts/kconfig/symbol.c | 6 +-
19406 scripts/link-vmlinux.sh | 2 +-
19407 scripts/mod/file2alias.c | 14 +-
19408 scripts/mod/modpost.c | 25 +-
19409 scripts/mod/modpost.h | 6 +-
19410 scripts/mod/sumversion.c | 2 +-
19411 scripts/module-common.lds | 4 +
19412 scripts/package/builddeb | 1 +
19413 scripts/pnmtologo.c | 6 +-
19414 scripts/sortextable.h | 6 +-
19415 scripts/tags.sh | 2 +-
19416 security/Kconfig | 692 +-
19417 security/integrity/ima/ima.h | 4 +-
19418 security/integrity/ima/ima_api.c | 2 +-
19419 security/integrity/ima/ima_fs.c | 4 +-
19420 security/integrity/ima/ima_queue.c | 2 +-
19421 security/keys/key.c | 18 +-
19422 security/selinux/avc.c | 6 +-
19423 security/selinux/include/xfrm.h | 2 +-
19424 security/yama/yama_lsm.c | 2 +-
19425 sound/aoa/codecs/onyx.c | 7 +-
19426 sound/aoa/codecs/onyx.h | 1 +
19427 sound/core/oss/pcm_oss.c | 18 +-
19428 sound/core/pcm_compat.c | 2 +-
19429 sound/core/pcm_native.c | 4 +-
19430 sound/core/sound.c | 2 +-
19431 sound/drivers/mts64.c | 14 +-
19432 sound/drivers/opl4/opl4_lib.c | 2 +-
19433 sound/drivers/portman2x4.c | 3 +-
19434 sound/firewire/amdtp.c | 4 +-
19435 sound/firewire/amdtp.h | 4 +-
19436 sound/firewire/isight.c | 10 +-
19437 sound/firewire/scs1x.c | 8 +-
19438 sound/oss/sb_audio.c | 2 +-
19439 sound/oss/swarm_cs4297a.c | 6 +-
19440 sound/pci/hda/hda_codec.c | 2 +-
19441 sound/pci/ymfpci/ymfpci.h | 2 +-
19442 sound/pci/ymfpci/ymfpci_main.c | 12 +-
19443 sound/soc/codecs/sti-sas.c | 10 +-
19444 sound/soc/soc-ac97.c | 6 +-
19445 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
19446 tools/gcc/Makefile | 42 +
19447 tools/gcc/checker_plugin.c | 150 +
19448 tools/gcc/colorize_plugin.c | 215 +
19449 tools/gcc/constify_plugin.c | 571 +
19450 tools/gcc/gcc-common.h | 812 +
19451 tools/gcc/initify_plugin.c | 552 +
19452 tools/gcc/kallocstat_plugin.c | 188 +
19453 tools/gcc/kernexec_plugin.c | 549 +
19454 tools/gcc/latent_entropy_plugin.c | 470 +
19455 tools/gcc/size_overflow_plugin/.gitignore | 2 +
19456 tools/gcc/size_overflow_plugin/Makefile | 28 +
19457 .../disable_size_overflow_hash.data |12422 ++++++++++++
19458 .../generate_size_overflow_hash.sh | 103 +
19459 .../insert_size_overflow_asm.c | 416 +
19460 .../size_overflow_plugin/intentional_overflow.c | 1010 +
19461 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
19462 tools/gcc/size_overflow_plugin/size_overflow.h | 323 +
19463 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
19464 .../size_overflow_plugin/size_overflow_hash.data |20735 ++++++++++++++++++++
19465 .../size_overflow_hash_aux.data | 92 +
19466 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 ++
19467 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
19468 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
19469 .../size_overflow_plugin_hash.c | 352 +
19470 .../size_overflow_plugin/size_overflow_transform.c | 749 +
19471 .../size_overflow_transform_core.c | 1010 +
19472 tools/gcc/stackleak_plugin.c | 436 +
19473 tools/gcc/structleak_plugin.c | 287 +
19474 tools/include/linux/compiler.h | 8 +
19475 tools/lib/api/Makefile | 2 +-
19476 tools/perf/util/include/asm/alternative-asm.h | 3 +
19477 tools/virtio/linux/uaccess.h | 2 +-
19478 virt/kvm/kvm_main.c | 42 +-
19479 1944 files changed, 66925 insertions(+), 8949 deletions(-)