]>
Commit | Line | Data |
---|---|---|
016549e8 PK |
1 | commit 5988c8dba8a5da45e35d71f4a8fec34c267258c5 |
2 | Author: Brad Spengler <spender@grsecurity.net> | |
3 | Date: Mon Apr 25 20:40:53 2016 -0400 | |
4 | ||
5 | Fix DoS in n_tty_receive_buf_common reported by marcan at: | |
6 | https://forums.grsecurity.net/viewtopic.php?t=4342&p=16222 | |
7 | and via lengthy diatribe on Twitter: | |
8 | https://twitter.com/marcan42/status/724740708104474626 | |
9 | https://twitter.com/marcan42/status/724740985146609664 | |
10 | https://twitter.com/marcan42/status/724741270325760000 | |
11 | https://twitter.com/marcan42/status/724742465199050752 | |
12 | https://twitter.com/marcan42/status/724745886794833920 | |
13 | https://twitter.com/marcan42/status/724749571495075840 | |
14 | https://twitter.com/marcan42/status/724746427285409796 | |
15 | https://twitter.com/marcan42/status/724743150263095296 | |
16 | https://twitter.com/marcan42/status/724757473433808896 | |
17 | ||
18 | Fix it correctly instead of using the incorrect fix suggested | |
19 | by marcan (aka "try reading the code next time") | |
20 | The original code was meant to fix an integer truncation issue | |
21 | that would also have caused a SIZE_OVERFLOW "DoS". | |
22 | ||
23 | drivers/tty/n_tty.c | 9 +++++---- | |
24 | 1 file changed, 5 insertions(+), 4 deletions(-) | |
25 | ||
26 | commit 5459ff57d8987389fa17d5d6f55b70a789347c2f | |
27 | Author: Brad Spengler <spender@grsecurity.net> | |
28 | Date: Mon Apr 25 19:52:33 2016 -0400 | |
29 | ||
30 | Avoid overflow in environ_read() caught by SIZE_OVERFLOW, | |
31 | reported by jotik at: | |
32 | https://forums.grsecurity.net/viewtopic.php?t=4363&p=16217 | |
33 | patch from Mathias Krause | |
34 | ||
35 | fs/proc/base.c | 2 +- | |
36 | 1 file changed, 1 insertion(+), 1 deletion(-) | |
37 | ||
38 | commit 24a5c92e147af1e739e9eeca020c61ad2674e784 | |
39 | Author: Jiri Benc <jbenc@redhat.com> | |
40 | Date: Fri Apr 22 13:09:13 2016 +0200 | |
41 | ||
42 | cxgbi: fix uninitialized flowi6 | |
43 | ||
44 | ip6_route_output looks into different fields in the passed flowi6 structure, | |
45 | yet cxgbi passes garbage in nearly all those fields. Zero the structure out | |
46 | first. | |
47 | ||
48 | Fixes: fc8d0590d9142 ("libcxgbi: Add ipv6 api to driver") | |
49 | Signed-off-by: Jiri Benc <jbenc@redhat.com> | |
50 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
51 | ||
52 | drivers/scsi/cxgbi/libcxgbi.c | 1 + | |
53 | 1 file changed, 1 insertion(+) | |
54 | ||
55 | commit ec65caa32652841a5be21d6e73146921af16d7a8 | |
56 | Author: Brad Spengler <spender@grsecurity.net> | |
57 | Date: Wed Apr 20 20:59:43 2016 -0400 | |
58 | ||
59 | Make /proc/sched_debug only readable by root, mentioned in | |
60 | recent NCC Group paper on Linux containers | |
61 | ||
62 | kernel/sched/debug.c | 4 ++++ | |
63 | 1 file changed, 4 insertions(+) | |
64 | ||
f77f28a9 PK |
65 | commit 7957d30730bb26a4aef54ab484dc3b4108f1fdb1 |
66 | Merge: 463149f ff26083 | |
67 | Author: Brad Spengler <spender@grsecurity.net> | |
68 | Date: Wed Apr 20 17:55:53 2016 -0400 | |
69 | ||
70 | Merge branch 'pax-test' into grsec-test | |
71 | ||
72 | commit ff260839e610d2bc1b0c579edd7deb0028198f01 | |
73 | Author: Brad Spengler <spender@grsecurity.net> | |
74 | Date: Wed Apr 20 17:55:24 2016 -0400 | |
75 | ||
76 | Update to pax-linux-4.4.8-test14.patch: | |
77 | - Emese fixed some CodingStyle issues in the latent entropy plugin | |
78 | - fixed some build problems on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394) | |
79 | ||
80 | arch/mips/include/asm/cache.h | 3 ++- | |
81 | arch/mips/lib/ashldi3.c | 21 ++++++++++++++------- | |
82 | arch/mips/lib/ashrdi3.c | 19 +++++++++++++------ | |
83 | arch/mips/lib/libgcc.h | 12 +++++++++--- | |
84 | drivers/idle/intel_idle.c | 6 ++++-- | |
85 | tools/gcc/latent_entropy_plugin.c | 29 +++++++++++++++-------------- | |
86 | 6 files changed, 57 insertions(+), 33 deletions(-) | |
87 | ||
88 | commit 463149f47a64db4b26a13009f83ed73d393a209c | |
89 | Author: Xiaodong Liu <xiaodong.liu@intel.com> | |
90 | Date: Tue Apr 12 09:45:51 2016 +0000 | |
91 | ||
92 | crypto: sha1-mb - use corrcet pointer while completing jobs | |
93 | ||
94 | In sha_complete_job, incorrect mcryptd_hash_request_ctx pointer is used | |
95 | when check and complete other jobs. If the memory of first completed req | |
96 | is freed, while still completing other jobs in the func, kernel will | |
97 | crash since NULL pointer is assigned to RIP. | |
98 | ||
99 | Cc: <stable@vger.kernel.org> | |
100 | Signed-off-by: Xiaodong Liu <xiaodong.liu@intel.com> | |
101 | Acked-by: Tim Chen <tim.c.chen@linux.intel.com> | |
102 | Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> | |
103 | ||
104 | arch/x86/crypto/sha-mb/sha1_mb.c | 4 ++-- | |
105 | 1 file changed, 2 insertions(+), 2 deletions(-) | |
106 | ||
107 | commit b4e6484e67b917afb77478cab1260f41dbbc92fc | |
108 | Author: Tom Lendacky <thomas.lendacky@amd.com> | |
109 | Date: Wed Apr 13 10:52:25 2016 -0500 | |
110 | ||
111 | crypto: ccp - Prevent information leakage on export | |
112 | ||
113 | Prevent information from leaking to userspace by doing a memset to 0 of | |
114 | the export state structure before setting the structure values and copying | |
115 | it. This prevents un-initialized padding areas from being copied into the | |
116 | export area. | |
117 | ||
118 | Cc: <stable@vger.kernel.org> # 3.14.x- | |
119 | Reported-by: Ben Hutchings <ben@decadent.org.uk> | |
120 | Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com> | |
121 | Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> | |
122 | ||
123 | drivers/crypto/ccp/ccp-crypto-aes-cmac.c | 3 +++ | |
124 | drivers/crypto/ccp/ccp-crypto-sha.c | 3 +++ | |
125 | 2 files changed, 6 insertions(+) | |
126 | ||
127 | commit 7d7e961d3f4e4614b22518d8e410e6cf4108f1b0 | |
128 | Author: Konstantin Khlebnikov <khlebnikov@yandex-team.ru> | |
129 | Date: Mon Apr 18 14:33:54 2016 +0300 | |
130 | ||
131 | net/mlx4_en: allocate non 0-order pages for RX ring with __GFP_NOMEMALLOC | |
132 | ||
133 | High order pages are optional here since commit 51151a16a60f ("mlx4: allow | |
134 | order-0 memory allocations in RX path"), so here is no reason for depleting | |
135 | reserves. Generic __netdev_alloc_frag() implements the same logic. | |
136 | ||
137 | Signed-off-by: Konstantin Khlebnikov <khlebnikov@yandex-team.ru> | |
138 | Acked-by: Eric Dumazet <edumazet@google.com> | |
139 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
140 | ||
141 | drivers/net/ethernet/mellanox/mlx4/en_rx.c | 2 +- | |
142 | 1 file changed, 1 insertion(+), 1 deletion(-) | |
143 | ||
144 | commit 6b80edde2edc7fd055f9be8ec42b88abbe328639 | |
145 | Author: Ignat Korchagin <ignat.korchagin@gmail.com> | |
146 | Date: Thu Mar 17 18:00:29 2016 +0000 | |
147 | ||
148 | USB: usbip: fix potential out-of-bounds write | |
149 | ||
150 | Fix potential out-of-bounds write to urb->transfer_buffer | |
151 | usbip handles network communication directly in the kernel. When receiving a | |
152 | packet from its peer, usbip code parses headers according to protocol. As | |
153 | part of this parsing urb->actual_length is filled. Since the input for | |
154 | urb->actual_length comes from the network, it should be treated as untrusted. | |
155 | Any entity controlling the network may put any value in the input and the | |
156 | preallocated urb->transfer_buffer may not be large enough to hold the data. | |
157 | Thus, the malicious entity is able to write arbitrary data to kernel memory. | |
158 | ||
159 | Signed-off-by: Ignat Korchagin <ignat.korchagin@gmail.com> | |
160 | Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> | |
161 | ||
162 | drivers/usb/usbip/usbip_common.c | 11 +++++++++++ | |
163 | 1 file changed, 11 insertions(+) | |
164 | ||
165 | commit 0ce101ec9e74c2cfcd28cbcd18b0626e3d9a2482 | |
166 | Merge: d60a24d f5fe5fd | |
167 | Author: Brad Spengler <spender@grsecurity.net> | |
168 | Date: Wed Apr 20 17:35:58 2016 -0400 | |
169 | ||
170 | Merge branch 'pax-test' into grsec-test | |
171 | ||
172 | commit f5fe5fddf49f1b81a2a3bb43b1e0a8c087aba438 | |
173 | Merge: a107ba2 8c9aef0 | |
174 | Author: Brad Spengler <spender@grsecurity.net> | |
175 | Date: Wed Apr 20 17:35:29 2016 -0400 | |
176 | ||
177 | Merge branch 'linux-4.4.y' into pax-test | |
178 | ||
179 | commit d60a24d6e4f61072d0bd1dc12be1177181fa8c2b | |
180 | Author: Brad Spengler <spender@grsecurity.net> | |
181 | Date: Mon Apr 18 17:48:10 2016 -0400 | |
182 | ||
183 | fix cast for constify change, reported by pipacs | |
184 | ||
185 | drivers/idle/intel_idle.c | 4 ++-- | |
186 | 1 file changed, 2 insertions(+), 2 deletions(-) | |
187 | ||
b1eb623d PK |
188 | commit 1d376287aeba7a53c91d5ee49ef0a11d02193964 |
189 | Author: Brad Spengler <spender@grsecurity.net> | |
190 | Date: Fri Apr 15 21:31:07 2016 -0400 | |
191 | ||
192 | Use proper type for function pointer | |
193 | ||
194 | drivers/gpu/drm/gma500/mdfld_dsi_output.c | 6 +++--- | |
195 | 1 file changed, 3 insertions(+), 3 deletions(-) | |
196 | ||
197 | commit 0a4104a2fa32904102fac07245426d78a1e9dfab | |
198 | Author: Brad Spengler <spender@grsecurity.net> | |
199 | Date: Fri Apr 15 21:24:04 2016 -0400 | |
200 | ||
201 | Fix skylake cstates compat with constify | |
202 | ||
203 | drivers/idle/intel_idle.c | 6 ++++-- | |
204 | 1 file changed, 4 insertions(+), 2 deletions(-) | |
205 | ||
206 | commit f433f8fd372253c9e78e307afe5b800c5ab0ea61 | |
207 | Author: Brad Spengler <spender@grsecurity.net> | |
208 | Date: Fri Apr 15 21:10:44 2016 -0400 | |
209 | ||
210 | Update size_overflow hash table | |
211 | ||
212 | tools/gcc/size_overflow_plugin/size_overflow_hash.data | 3 ++- | |
213 | 1 file changed, 2 insertions(+), 1 deletion(-) | |
214 | ||
215 | commit ef7804da81cb3c6b6a4c985a3c14ee230a03f26a | |
216 | Author: Brad Spengler <spender@grsecurity.net> | |
217 | Date: Fri Apr 15 20:52:37 2016 -0400 | |
218 | ||
219 | compile fix | |
220 | ||
221 | fs/coredump.c | 3 --- | |
222 | 1 file changed, 3 deletions(-) | |
223 | ||
224 | commit 967224da52bd98d078b1237aea5ec9e622238fba | |
225 | Merge: 92771d6 a107ba2 | |
226 | Author: Brad Spengler <spender@grsecurity.net> | |
227 | Date: Fri Apr 15 20:30:23 2016 -0400 | |
228 | ||
229 | Merge branch 'pax-test' into grsec-test | |
230 | ||
231 | commit a107ba25214d9694eb836fb04c782ad694977b91 | |
232 | Merge: 4d8fc00 b40108b | |
233 | Author: Brad Spengler <spender@grsecurity.net> | |
234 | Date: Fri Apr 15 20:18:26 2016 -0400 | |
235 | ||
236 | Merge branch 'linux-4.4.y' into pax-test | |
237 | ||
46a7b6df PK |
238 | commit 92771d60677d68e8f6ea7a91ff34dd6e24b6d4cf |
239 | Author: Brad Spengler <spender@grsecurity.net> | |
240 | Date: Sun Apr 10 07:18:03 2016 -0400 | |
241 | ||
242 | From: Mathias Krause <minipli@googlemail.com> | |
243 | To: "David S. Miller" <davem@davemloft.net> | |
244 | Cc: netdev@vger.kernel.org, "Eric W. Biederman" <ebiederm@xmission.com>, Pavel | |
245 | Emelyanov <xemul@parallels.com> | |
246 | Subject: [PATCH net] packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag | |
247 | interface | |
248 | ||
249 | Because we miss to wipe the remainder of i->addr[] in packet_mc_add(), | |
250 | pdiag_put_mclist() leaks uninitialized heap bytes via the | |
251 | PACKET_DIAG_MCLIST netlink attribute. | |
252 | ||
253 | Fix this by explicitly memset(0)ing the remaining bytes in i->addr[]. | |
254 | ||
255 | Fixes: eea68e2f1a00 ("packet: Report socket mclist info via diag module") | |
256 | Signed-off-by: Mathias Krause <minipli@googlemail.com> | |
257 | Cc: Eric W. Biederman <ebiederm@xmission.com> | |
258 | Cc: Pavel Emelyanov <xemul@parallels.com> | |
259 | --- | |
260 | The bug itself precedes commit eea68e2f1a00 but the list wasn't exposed | |
261 | to userland before the introduction of the packet_diag interface. | |
262 | Therefore the "Fixes:" line on that commit. | |
263 | ||
264 | net/packet/af_packet.c | 1 + | |
265 | 1 file changed, 1 insertion(+) | |
266 | ||
267 | commit 4286ce3f9e9db4d68870af46ae1d5f9b90b920dd | |
268 | Author: Jakub Sitnicki <jkbs@redhat.com> | |
269 | Date: Tue Apr 5 18:41:08 2016 +0200 | |
270 | ||
271 | ipv6: Count in extension headers in skb->network_header | |
272 | ||
273 | When sending a UDPv6 message longer than MTU, account for the length | |
274 | of fragmentable IPv6 extension headers in skb->network_header offset. | |
275 | Same as we do in alloc_new_skb path in __ip6_append_data(). | |
276 | ||
277 | This ensures that later on __ip6_make_skb() will make space in | |
278 | headroom for fragmentable extension headers: | |
279 | ||
280 | /* move skb->data to ip header from ext header */ | |
281 | if (skb->data < skb_network_header(skb)) | |
282 | __skb_pull(skb, skb_network_offset(skb)); | |
283 | ||
284 | Prevents a splat due to skb_under_panic: | |
285 | ||
286 | skbuff: skb_under_panic: text:ffffffff8143397b len:2126 put:14 \ | |
287 | head:ffff880005bacf50 data:ffff880005bacf4a tail:0x48 end:0xc0 dev:lo | |
288 | ------------[ cut here ]------------ | |
289 | kernel BUG at net/core/skbuff.c:104! | |
290 | invalid opcode: 0000 [#1] KASAN | |
291 | CPU: 0 PID: 160 Comm: reproducer Not tainted 4.6.0-rc2 #65 | |
292 | [...] | |
293 | Call Trace: | |
294 | [<ffffffff813eb7b9>] skb_push+0x79/0x80 | |
295 | [<ffffffff8143397b>] eth_header+0x2b/0x100 | |
296 | [<ffffffff8141e0d0>] neigh_resolve_output+0x210/0x310 | |
297 | [<ffffffff814eab77>] ip6_finish_output2+0x4a7/0x7c0 | |
298 | [<ffffffff814efe3a>] ip6_output+0x16a/0x280 | |
299 | [<ffffffff815440c1>] ip6_local_out+0xb1/0xf0 | |
300 | [<ffffffff814f1115>] ip6_send_skb+0x45/0xd0 | |
301 | [<ffffffff81518836>] udp_v6_send_skb+0x246/0x5d0 | |
302 | [<ffffffff8151985e>] udpv6_sendmsg+0xa6e/0x1090 | |
303 | [...] | |
304 | ||
305 | Reported-by: Ji Jianwen <jiji@redhat.com> | |
306 | Signed-off-by: Jakub Sitnicki <jkbs@redhat.com> | |
307 | Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
308 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
309 | ||
310 | net/ipv6/ip6_output.c | 8 ++++---- | |
311 | 1 file changed, 4 insertions(+), 4 deletions(-) | |
312 | ||
313 | commit 638dad49a9ba3d86f627adb58b2f4636ed253685 | |
314 | Author: Thadeu Lima de Souza Cascardo <cascardo@redhat.com> | |
315 | Date: Fri Apr 1 17:17:50 2016 -0300 | |
316 | ||
317 | ip6_tunnel: set rtnl_link_ops before calling register_netdevice | |
318 | ||
319 | When creating an ip6tnl tunnel with ip tunnel, rtnl_link_ops is not set | |
320 | before ip6_tnl_create2 is called. When register_netdevice is called, there | |
321 | is no linkinfo attribute in the NEWLINK message because of that. | |
322 | ||
323 | Setting rtnl_link_ops before calling register_netdevice fixes that. | |
324 | ||
325 | Fixes: 0b112457229d ("ip6tnl: add support of link creation via rtnl") | |
326 | Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@redhat.com> | |
327 | Acked-by: Nicolas Dichtel <nicolas.dichtel@6wind.com> | |
328 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
329 | ||
330 | net/ipv6/ip6_tunnel.c | 2 +- | |
331 | 1 file changed, 1 insertion(+), 1 deletion(-) | |
332 | ||
333 | commit 14146a0bfaf2ced0055fe549c8fa0941c61e2457 | |
334 | Author: Brad Spengler <spender@grsecurity.net> | |
335 | Date: Tue Apr 5 21:12:44 2016 -0400 | |
336 | ||
337 | Code cleanups to RANDSTRUCT based on feedback from the PaX Team | |
338 | ||
339 | tools/gcc/randomize_layout_plugin.c | 18 ++++++++++++------ | |
340 | 1 file changed, 12 insertions(+), 6 deletions(-) | |
341 | ||
342 | commit 3f7dea5e59b0bb34f6bdb628c87251f0105b3d57 | |
343 | Author: Brad Spengler <spender@grsecurity.net> | |
344 | Date: Sun Apr 3 20:10:10 2016 -0400 | |
345 | ||
346 | Fix RANDSTRUCT support on ARM | |
347 | ||
348 | tools/gcc/randomize_layout_plugin.c | 54 +++++++++++++++++++++++++++++++++++-- | |
349 | 1 file changed, 52 insertions(+), 2 deletions(-) | |
350 | ||
fa63dc7d PK |
351 | commit bd893a75ab49f6ea5a216eb334471507337118ba |
352 | Merge: 87b7f1d 4d8fc00 | |
353 | Author: Brad Spengler <spender@grsecurity.net> | |
354 | Date: Sat Apr 2 11:54:20 2016 -0400 | |
355 | ||
356 | Merge branch 'pax-test' into grsec-test | |
357 | ||
358 | commit 4d8fc00c0066b1921e233123b346efe6ffb27691 | |
359 | Author: Brad Spengler <spender@grsecurity.net> | |
360 | Date: Sat Apr 2 11:53:53 2016 -0400 | |
361 | ||
362 | Update to pax-linux-4.4.6-test13.patch: | |
363 | - fixed a REFCOUNT related compile regression on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394) | |
364 | - worked around an integer signedness mixup in md causing a size overflow false positive, reported by Étienne Buira (https://bugs.gentoo.org/show_bug.cgi?id=578502) | |
365 | ||
366 | arch/mips/include/asm/atomic.h | 4 ---- | |
367 | tools/gcc/size_overflow_plugin/disable_size_overflow_hash.data | 1 + | |
368 | tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 - | |
369 | 3 files changed, 1 insertion(+), 5 deletions(-) | |
370 | ||
371 | commit 87b7f1d200023ba826b9d552834a2ee85e67526c | |
372 | Merge: 3335266 3abdad0 | |
373 | Author: Brad Spengler <spender@grsecurity.net> | |
374 | Date: Sat Apr 2 11:19:17 2016 -0400 | |
375 | ||
376 | Merge branch 'pax-test' into grsec-test | |
377 | ||
378 | commit 3abdad0c3b436c076c88289f07a250b811d6f79d | |
379 | Author: Brad Spengler <spender@grsecurity.net> | |
380 | Date: Sat Apr 2 11:12:56 2016 -0400 | |
381 | ||
382 | Update to pax-linux-4.4.6-test12.patch: | |
383 | - fixed vmalloc_fault on i386/PAE to use the correct percpu userland pgd table/entry | |
384 | - fixed a size overflow false positive report in pptp, reported by Pinkbyte (https://forums.grsecurity.net/viewtopic.php?f=3&t=4437) | |
385 | - fixed a size overflow false positive report in tbf_segment, reported by audiocricket (https://forums.grsecurity.net/viewtopic.php?f=3&t=4438) | |
386 | - Emese fixed the x86 vdso32 CFLAGS to omit the gcc plugins | |
387 | - Emese simplified the gcc plugin related make rules, suggested by Masahiro Yamada | |
388 | - André Fabian Silva Delgado fixed a compile regression on arm, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4435) | |
389 | - fixed an integer sign conversion error in nfs_super_set_maxbytes caught by the size overflow plugin, reported by Alexey Dvoichenkov <xale@hyperplane.net> | |
390 | - fixed a size overflow false positive in squashfs, reported by Mathias Krause <minipli@ld-linux.so> | |
391 | - fixed a size overflow false positive in xfrm6_transport_output, reported by marcan (https://forums.grsecurity.net/viewtopic.php?f=3&t=4426) | |
392 | - fixed an integer truncation bug in elf_kcore_store_hdr caught by the size overflow plugin | |
393 | - fixed a gratuitous userland dereference in the amd64 stack walker | |
394 | - added latent entropy gathering to a few more functions | |
395 | - constified a few smp_hotplug_thread instances | |
396 | ||
397 | arch/x86/entry/vdso/Makefile | 1 + | |
398 | arch/x86/include/asm/cpufeature.h | 1 - | |
399 | arch/x86/kernel/dumpstack_64.c | 17 ++++++----------- | |
400 | arch/x86/kernel/head_32.S | 6 +++--- | |
401 | arch/x86/mm/fault.c | 2 +- | |
402 | drivers/iommu/arm-smmu.c | 2 +- | |
403 | drivers/net/ppp/pptp.c | 1 + | |
404 | drivers/staging/rdma/ehca/ehca_irq.c | 2 +- | |
405 | fs/nfs/internal.h | 5 +++-- | |
406 | fs/proc/kcore.c | 2 +- | |
407 | kernel/module.c | 6 +++--- | |
408 | kernel/rcu/tree.c | 2 +- | |
409 | kernel/softirq.c | 2 +- | |
410 | kernel/stop_machine.c | 2 +- | |
411 | net/ipv6/xfrm6_mode_transport.c | 2 +- | |
412 | net/sched/sch_tbf.c | 9 ++++++--- | |
413 | scripts/Makefile.gcc-plugins | 13 +++---------- | |
414 | scripts/Makefile.host | 3 +-- | |
415 | .../disable_size_overflow_hash.data | 4 +++- | |
416 | tools/gcc/size_overflow_plugin/size_overflow_hash.data | 6 ++---- | |
417 | 20 files changed, 40 insertions(+), 48 deletions(-) | |
418 | ||
419 | commit 3335266d5bec9bc01580736c0a7026ed96cf25e5 | |
420 | Author: Mika Penttilä <mika.penttila@nextfour.com> | |
421 | Date: Mon Feb 22 17:56:52 2016 +0100 | |
422 | ||
423 | ARM: 8544/1: set_memory_xx fixes | |
424 | ||
425 | Allow zero size updates. This makes set_memory_xx() consistent with x86, s390 and arm64 and makes apply_to_page_range() not to BUG() when loading modules. | |
426 | ||
427 | Signed-off-by: Mika Penttilä mika.penttila@nextfour.com | |
428 | Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk> | |
429 | ||
430 | arch/arm/mm/pageattr.c | 3 +++ | |
431 | 1 file changed, 3 insertions(+) | |
432 | ||
433 | commit d6d6499b22c0e5593a16f41c516041b23fbf9eeb | |
434 | Author: Josh Boyer <jwboyer@fedoraproject.org> | |
435 | Date: Mon Mar 14 10:42:38 2016 -0400 | |
436 | ||
437 | USB: iowarrior: fix oops with malicious USB descriptors | |
438 | ||
439 | The iowarrior driver expects at least one valid endpoint. If given | |
440 | malicious descriptors that specify 0 for the number of endpoints, | |
441 | it will crash in the probe function. Ensure there is at least | |
442 | one endpoint on the interface before using it. | |
443 | ||
444 | The full report of this issue can be found here: | |
445 | http://seclists.org/bugtraq/2016/Mar/87 | |
446 | ||
447 | Reported-by: Ralf Spenneberg <ralf@spenneberg.net> | |
448 | Cc: stable <stable@vger.kernel.org> | |
449 | Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org> | |
450 | Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> | |
451 | ||
452 | drivers/usb/misc/iowarrior.c | 6 ++++++ | |
453 | 1 file changed, 6 insertions(+) | |
454 | ||
455 | commit 79a1fb47ab1245e81040bcd45b3e44e65d282684 | |
456 | Author: Oliver Neukum <oneukum@suse.com> | |
457 | Date: Tue Mar 15 10:14:04 2016 +0100 | |
458 | ||
459 | USB: cdc-acm: more sanity checking | |
460 | ||
461 | An attack has become available which pretends to be a quirky | |
462 | device circumventing normal sanity checks and crashes the kernel | |
463 | by an insufficient number of interfaces. This patch adds a check | |
464 | to the code path for quirky devices. | |
465 | ||
466 | Signed-off-by: Oliver Neukum <ONeukum@suse.com> | |
467 | CC: stable@vger.kernel.org | |
468 | Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> | |
469 | ||
470 | drivers/usb/class/cdc-acm.c | 3 +++ | |
471 | 1 file changed, 3 insertions(+) | |
472 | ||
473 | commit 6ee21acdf0da6602671cb50edeca0abfba3955f7 | |
474 | Author: Oliver Neukum <oneukum@suse.com> | |
475 | Date: Wed Mar 16 13:26:17 2016 +0100 | |
476 | ||
477 | USB: usb_driver_claim_interface: add sanity checking | |
478 | ||
479 | Attacks that trick drivers into passing a NULL pointer | |
480 | to usb_driver_claim_interface() using forged descriptors are | |
481 | known. This thwarts them by sanity checking. | |
482 | ||
483 | Signed-off-by: Oliver Neukum <ONeukum@suse.com> | |
484 | CC: stable@vger.kernel.org | |
485 | Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> | |
486 | ||
487 | drivers/usb/core/driver.c | 6 +++++- | |
488 | 1 file changed, 5 insertions(+), 1 deletion(-) | |
489 | ||
490 | commit 44247834ddab762509eaaf5c742e15bfadcd9d94 | |
491 | Author: Paolo Bonzini <pbonzini@redhat.com> | |
492 | Date: Mon Mar 21 10:15:25 2016 +0100 | |
493 | ||
494 | KVM: fix spin_lock_init order on x86 | |
495 | ||
496 | Moving the initialization earlier is needed in 4.6 because | |
497 | kvm_arch_init_vm is now using mmu_lock, causing lockdep to | |
498 | complain: | |
499 | ||
500 | [ 284.440294] INFO: trying to register non-static key. | |
501 | [ 284.445259] the code is fine but needs lockdep annotation. | |
502 | [ 284.450736] turning off the locking correctness validator. | |
503 | ... | |
504 | [ 284.528318] [<ffffffff810aecc3>] lock_acquire+0xd3/0x240 | |
505 | [ 284.533733] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm] | |
506 | [ 284.541467] [<ffffffff81715581>] _raw_spin_lock+0x41/0x80 | |
507 | [ 284.546960] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm] | |
508 | [ 284.554707] [<ffffffffa0305aa0>] kvm_page_track_register_notifier+0x20/0x60 [kvm] | |
509 | [ 284.562281] [<ffffffffa02ece70>] kvm_mmu_init_vm+0x20/0x30 [kvm] | |
510 | [ 284.568381] [<ffffffffa02dbf7a>] kvm_arch_init_vm+0x1ea/0x200 [kvm] | |
511 | [ 284.574740] [<ffffffffa02bff3f>] kvm_dev_ioctl+0xbf/0x4d0 [kvm] | |
512 | ||
513 | However, it also helps fixing a preexisting problem, which is why this | |
514 | patch is also good for stable kernels: kvm_create_vm was incrementing | |
515 | current->mm->mm_count but not decrementing it at the out_err label (in | |
516 | case kvm_init_mmu_notifier failed). The new initialization order makes | |
517 | it possible to add the required mmdrop without adding a new error label. | |
518 | ||
519 | Cc: stable@vger.kernel.org | |
520 | Reported-by: Borislav Petkov <bp@alien8.de> | |
521 | Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> | |
522 | ||
523 | virt/kvm/kvm_main.c | 21 +++++++++++---------- | |
524 | 1 file changed, 11 insertions(+), 10 deletions(-) | |
525 | ||
526 | commit 9d0cf281d74a9fe490f3ba5ca3d0e57eac066e1c | |
527 | Author: Paolo Bonzini <pbonzini@redhat.com> | |
528 | Date: Fri Mar 18 16:53:42 2016 +0100 | |
529 | ||
530 | KVM: VMX: avoid guest hang on invalid invvpid instruction | |
531 | ||
532 | A guest executing an invalid invvpid instruction would hang | |
533 | because the instruction pointer was not updated. | |
534 | ||
535 | Reported-by: jmontleo@redhat.com | |
536 | Tested-by: jmontleo@redhat.com | |
537 | Cc: stable@vger.kernel.org | |
538 | Fixes: 99b83ac893b84ed1a62ad6d1f2b6cc32026b9e85 | |
539 | Reviewed-by: David Matlack <dmatlack@google.com> | |
540 | Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> | |
541 | ||
542 | arch/x86/kvm/vmx.c | 1 + | |
543 | 1 file changed, 1 insertion(+) | |
544 | ||
545 | commit 602caaece277e5e21ae43771398bbf7778061beb | |
546 | Author: Paolo Bonzini <pbonzini@redhat.com> | |
547 | Date: Fri Mar 18 16:53:29 2016 +0100 | |
548 | ||
549 | KVM: VMX: avoid guest hang on invalid invept instruction | |
550 | ||
551 | A guest executing an invalid invept instruction would hang | |
552 | because the instruction pointer was not updated. | |
553 | ||
554 | Cc: stable@vger.kernel.org | |
555 | Fixes: bfd0a56b90005f8c8a004baf407ad90045c2b11e | |
556 | Reviewed-by: David Matlack <dmatlack@google.com> | |
557 | Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> | |
558 | ||
559 | arch/x86/kvm/vmx.c | 1 + | |
560 | 1 file changed, 1 insertion(+) | |
561 | ||
562 | commit 3309ac82d6596de8abc6ea51dd0a942416da1cc1 | |
563 | Author: Jann Horn <jann@thejh.net> | |
564 | Date: Tue Mar 22 14:25:36 2016 -0700 | |
565 | ||
566 | fs/coredump: prevent fsuid=0 dumps into user-controlled directories | |
567 | ||
568 | This commit fixes the following security hole affecting systems where | |
569 | all of the following conditions are fulfilled: | |
570 | ||
571 | - The fs.suid_dumpable sysctl is set to 2. | |
572 | - The kernel.core_pattern sysctl's value starts with "/". (Systems | |
573 | where kernel.core_pattern starts with "|/" are not affected.) | |
574 | - Unprivileged user namespace creation is permitted. (This is | |
575 | true on Linux >=3.8, but some distributions disallow it by | |
576 | default using a distro patch.) | |
577 | ||
578 | Under these conditions, if a program executes under secure exec rules, | |
579 | causing it to run with the SUID_DUMP_ROOT flag, then unshares its user | |
580 | namespace, changes its root directory and crashes, the coredump will be | |
581 | written using fsuid=0 and a path derived from kernel.core_pattern - but | |
582 | this path is interpreted relative to the root directory of the process, | |
583 | allowing the attacker to control where a coredump will be written with | |
584 | root privileges. | |
585 | ||
586 | To fix the security issue, always interpret core_pattern for dumps that | |
587 | are written under SUID_DUMP_ROOT relative to the root directory of init. | |
588 | ||
589 | Signed-off-by: Jann Horn <jann@thejh.net> | |
590 | Acked-by: Kees Cook <keescook@chromium.org> | |
591 | Cc: Al Viro <viro@zeniv.linux.org.uk> | |
592 | Cc: "Eric W. Biederman" <ebiederm@xmission.com> | |
593 | Cc: Andy Lutomirski <luto@kernel.org> | |
594 | Cc: Oleg Nesterov <oleg@redhat.com> | |
595 | Cc: <stable@vger.kernel.org> | |
596 | Signed-off-by: Andrew Morton <akpm@linux-foundation.org> | |
597 | Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> | |
598 | ||
599 | arch/um/drivers/mconsole_kern.c | 2 +- | |
600 | fs/coredump.c | 31 +++++++++++++++++++++++++++---- | |
601 | fs/fhandle.c | 2 +- | |
602 | fs/open.c | 6 ++---- | |
603 | include/linux/fs.h | 2 +- | |
604 | kernel/sysctl_binary.c | 2 +- | |
605 | 6 files changed, 33 insertions(+), 12 deletions(-) | |
606 | ||
607 | commit a7c8d3c91a3e50d0873942f09afbb5071382d5e7 | |
608 | Author: Takashi Iwai <tiwai@suse.de> | |
609 | Date: Fri Apr 1 12:28:16 2016 +0200 | |
610 | ||
611 | ALSA: timer: Use mod_timer() for rearming the system timer | |
612 | ||
613 | ALSA system timer backend stops the timer via del_timer() without sync | |
614 | and leaves del_timer_sync() at the close instead. This is because of | |
615 | the restriction by the design of ALSA timer: namely, the stop callback | |
616 | may be called from the timer handler, and calling the sync shall lead | |
617 | to a hangup. However, this also triggers a kernel BUG() when the | |
618 | timer is rearmed immediately after stopping without sync: | |
619 | kernel BUG at kernel/time/timer.c:966! | |
620 | Call Trace: | |
621 | <IRQ> | |
622 | [<ffffffff8239c94e>] snd_timer_s_start+0x13e/0x1a0 | |
623 | [<ffffffff8239e1f4>] snd_timer_interrupt+0x504/0xec0 | |
624 | [<ffffffff8122fca0>] ? debug_check_no_locks_freed+0x290/0x290 | |
625 | [<ffffffff8239ec64>] snd_timer_s_function+0xb4/0x120 | |
626 | [<ffffffff81296b72>] call_timer_fn+0x162/0x520 | |
627 | [<ffffffff81296add>] ? call_timer_fn+0xcd/0x520 | |
628 | [<ffffffff8239ebb0>] ? snd_timer_interrupt+0xec0/0xec0 | |
629 | .... | |
630 | ||
631 | It's the place where add_timer() checks the pending timer. It's clear | |
632 | that this may happen after the immediate restart without sync in our | |
633 | cases. | |
634 | ||
635 | So, the workaround here is just to use mod_timer() instead of | |
636 | add_timer(). This looks like a band-aid fix, but it's a right move, | |
637 | as snd_timer_interrupt() takes care of the continuous rearm of timer. | |
638 | ||
639 | Reported-by: Jiri Slaby <jslaby@suse.cz> | |
640 | Cc: <stable@vger.kernel.org> | |
641 | Signed-off-by: Takashi Iwai <tiwai@suse.de> | |
642 | ||
643 | sound/core/timer.c | 4 ++-- | |
644 | 1 file changed, 2 insertions(+), 2 deletions(-) | |
645 | ||
646 | commit 2de05c5fc90b461d78a54a7240b664a068844c8c | |
647 | Author: Daniel Vetter <daniel.vetter@ffwll.ch> | |
648 | Date: Wed Mar 30 11:40:43 2016 +0200 | |
649 | ||
650 | drm/udl: Use unlocked gem unreferencing | |
651 | ||
652 | For drm_gem_object_unreference callers are required to hold | |
653 | dev->struct_mutex, which these paths don't. Enforcing this requirement | |
654 | has become a bit more strict with | |
655 | ||
656 | commit ef4c6270bf2867e2f8032e9614d1a8cfc6c71663 | |
657 | Author: Daniel Vetter <daniel.vetter@ffwll.ch> | |
658 | Date: Thu Oct 15 09:36:25 2015 +0200 | |
659 | ||
660 | drm/gem: Check locking in drm_gem_object_unreference | |
661 | ||
662 | Cc: stable@vger.kernel.org | |
663 | Signed-off-by: Daniel Vetter <daniel.vetter@intel.com> | |
664 | Signed-off-by: Dave Airlie <airlied@redhat.com> | |
665 | ||
666 | drivers/gpu/drm/udl/udl_fb.c | 2 +- | |
667 | drivers/gpu/drm/udl/udl_gem.c | 2 +- | |
668 | 2 files changed, 2 insertions(+), 2 deletions(-) | |
669 | ||
670 | commit c8153b6b1731b8fee33966dd8d148643240f1dc0 | |
671 | Author: Jan Kara <jack@suse.com> | |
672 | Date: Mon Dec 7 14:34:49 2015 -0500 | |
673 | ||
674 | ext4: fix races of writeback with punch hole and zero range | |
675 | ||
676 | When doing delayed allocation, update of on-disk inode size is postponed | |
677 | until IO submission time. However hole punch or zero range fallocate | |
678 | calls can end up discarding the tail page cache page and thus on-disk | |
679 | inode size would never be properly updated. | |
680 | ||
681 | Make sure the on-disk inode size is updated before truncating page | |
682 | cache. | |
683 | ||
684 | Signed-off-by: Jan Kara <jack@suse.com> | |
685 | Signed-off-by: Theodore Ts'o <tytso@mit.edu> | |
686 | ||
687 | fs/ext4/ext4.h | 3 +++ | |
688 | fs/ext4/extents.c | 5 +++++ | |
689 | fs/ext4/inode.c | 35 ++++++++++++++++++++++++++++++++++- | |
690 | 3 files changed, 42 insertions(+), 1 deletion(-) | |
691 | ||
692 | commit d64beb441579f2667e99eb9d4d6e83deb88bf59b | |
693 | Author: Jan Kara <jack@suse.com> | |
694 | Date: Mon Dec 7 14:31:11 2015 -0500 | |
695 | ||
696 | ext4: fix races between buffered IO and collapse / insert range | |
697 | ||
698 | Current code implementing FALLOC_FL_COLLAPSE_RANGE and | |
699 | FALLOC_FL_INSERT_RANGE is prone to races with buffered writes and page | |
700 | faults. If buffered write or write via mmap manages to squeeze between | |
701 | filemap_write_and_wait_range() and truncate_pagecache() in the fallocate | |
702 | implementations, the written data is simply discarded by | |
703 | truncate_pagecache() although it should have been shifted. | |
704 | ||
705 | Fix the problem by moving filemap_write_and_wait_range() call inside | |
706 | i_mutex and i_mmap_sem. That way we are protected against races with | |
707 | both buffered writes and page faults. | |
708 | ||
709 | Signed-off-by: Jan Kara <jack@suse.com> | |
710 | Signed-off-by: Theodore Ts'o <tytso@mit.edu> | |
711 | ||
712 | fs/ext4/extents.c | 59 +++++++++++++++++++++++++++++-------------------------- | |
713 | 1 file changed, 31 insertions(+), 28 deletions(-) | |
714 | ||
715 | commit b1ae49aa4dad39233b16456e0765a23ba4e0546c | |
716 | Author: Jan Kara <jack@suse.com> | |
717 | Date: Mon Dec 7 14:29:17 2015 -0500 | |
718 | ||
719 | ext4: move unlocked dio protection from ext4_alloc_file_blocks() | |
720 | ||
721 | Currently ext4_alloc_file_blocks() was handling protection against | |
722 | unlocked DIO. However we now need to sometimes call it under i_mmap_sem | |
723 | and sometimes not and DIO protection ranks above it (although strictly | |
724 | speaking this cannot currently create any deadlocks). Also | |
725 | ext4_zero_range() was actually getting & releasing unlocked DIO | |
726 | protection twice in some cases. Luckily it didn't introduce any real bug | |
727 | but it was a land mine waiting to be stepped on. So move DIO protection | |
728 | out from ext4_alloc_file_blocks() into the two callsites. | |
729 | ||
730 | Signed-off-by: Jan Kara <jack@suse.com> | |
731 | Signed-off-by: Theodore Ts'o <tytso@mit.edu> | |
732 | ||
733 | fs/ext4/extents.c | 21 ++++++++++----------- | |
734 | 1 file changed, 10 insertions(+), 11 deletions(-) | |
735 | ||
736 | commit f9329a4ec30a26f0fababf809c5f1a3ef851b625 | |
737 | Author: Jan Kara <jack@suse.com> | |
738 | Date: Mon Dec 7 14:28:03 2015 -0500 | |
739 | ||
740 | ext4: fix races between page faults and hole punching | |
741 | ||
742 | Currently, page faults and hole punching are completely unsynchronized. | |
743 | This can result in page fault faulting in a page into a range that we | |
744 | are punching after truncate_pagecache_range() has been called and thus | |
745 | we can end up with a page mapped to disk blocks that will be shortly | |
746 | freed. Filesystem corruption will shortly follow. Note that the same | |
747 | race is avoided for truncate by checking page fault offset against | |
748 | i_size but there isn't similar mechanism available for punching holes. | |
749 | ||
750 | Fix the problem by creating new rw semaphore i_mmap_sem in inode and | |
751 | grab it for writing over truncate, hole punching, and other functions | |
752 | removing blocks from extent tree and for read over page faults. We | |
753 | cannot easily use i_data_sem for this since that ranks below transaction | |
754 | start and we need something ranking above it so that it can be held over | |
755 | the whole truncate / hole punching operation. Also remove various | |
756 | workarounds we had in the code to reduce race window when page fault | |
757 | could have created pages with stale mapping information. | |
758 | ||
759 | Signed-off-by: Jan Kara <jack@suse.com> | |
760 | Signed-off-by: Theodore Ts'o <tytso@mit.edu> | |
761 | ||
762 | fs/ext4/ext4.h | 10 +++++++++ | |
763 | fs/ext4/extents.c | 54 ++++++++++++++++++++++++-------------------- | |
764 | fs/ext4/file.c | 66 ++++++++++++++++++++++++++++++++++++++++++++++-------- | |
765 | fs/ext4/inode.c | 36 +++++++++++++++++++++-------- | |
766 | fs/ext4/super.c | 1 + | |
767 | fs/ext4/truncate.h | 2 ++ | |
768 | 6 files changed, 127 insertions(+), 42 deletions(-) | |
769 | ||
770 | commit 572a615b85c1d5c8aeea4ffd24ab428775a1cca9 | |
771 | Author: Guenter Roeck <linux@roeck-us.net> | |
772 | Date: Sat Mar 26 12:28:05 2016 -0700 | |
773 | ||
774 | hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiated | |
775 | ||
776 | arm:pxa_defconfig can result in the following crash if the max1111 driver | |
777 | is not instantiated. | |
778 | ||
779 | Unhandled fault: page domain fault (0x01b) at 0x00000000 | |
780 | pgd = c0004000 | |
781 | [00000000] *pgd=00000000 | |
782 | Internal error: : 1b [#1] PREEMPT ARM | |
783 | Modules linked in: | |
784 | CPU: 0 PID: 300 Comm: kworker/0:1 Not tainted 4.5.0-01301-g1701f680407c #10 | |
785 | Hardware name: SHARP Akita | |
786 | Workqueue: events sharpsl_charge_toggle | |
787 | task: c390a000 ti: c391e000 task.ti: c391e000 | |
788 | PC is at max1111_read_channel+0x20/0x30 | |
789 | LR is at sharpsl_pm_pxa_read_max1111+0x2c/0x3c | |
790 | pc : [<c03aaab0>] lr : [<c0024b50>] psr: 20000013 | |
791 | ... | |
792 | [<c03aaab0>] (max1111_read_channel) from [<c0024b50>] | |
793 | (sharpsl_pm_pxa_read_max1111+0x2c/0x3c) | |
794 | [<c0024b50>] (sharpsl_pm_pxa_read_max1111) from [<c00262e0>] | |
795 | (spitzpm_read_devdata+0x5c/0xc4) | |
796 | [<c00262e0>] (spitzpm_read_devdata) from [<c0024094>] | |
797 | (sharpsl_check_battery_temp+0x78/0x110) | |
798 | [<c0024094>] (sharpsl_check_battery_temp) from [<c0024f9c>] | |
799 | (sharpsl_charge_toggle+0x48/0x110) | |
800 | [<c0024f9c>] (sharpsl_charge_toggle) from [<c004429c>] | |
801 | (process_one_work+0x14c/0x48c) | |
802 | [<c004429c>] (process_one_work) from [<c0044618>] (worker_thread+0x3c/0x5d4) | |
803 | [<c0044618>] (worker_thread) from [<c004a238>] (kthread+0xd0/0xec) | |
804 | [<c004a238>] (kthread) from [<c000a670>] (ret_from_fork+0x14/0x24) | |
805 | ||
806 | This can occur because the SPI controller driver (SPI_PXA2XX) is built as | |
807 | module and thus not necessarily loaded. While building SPI_PXA2XX into the | |
808 | kernel would make the problem disappear, it appears prudent to ensure that | |
809 | the driver is instantiated before accessing its data structures. | |
810 | ||
811 | Cc: Arnd Bergmann <arnd@arndb.de> | |
812 | Cc: stable@vger.kernel.org | |
813 | Signed-off-by: Guenter Roeck <linux@roeck-us.net> | |
814 | ||
815 | drivers/hwmon/max1111.c | 6 ++++++ | |
816 | 1 file changed, 6 insertions(+) | |
817 | ||
818 | commit f75f1af7a0b4be055855ca5120ee78174f3370f2 | |
819 | Author: Nicolai Stange <nicstange@gmail.com> | |
820 | Date: Sun Mar 20 23:23:46 2016 +0100 | |
821 | ||
822 | PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument | |
823 | ||
824 | Despite what the DocBook comment to pkcs7_validate_trust() says, the | |
825 | *_trusted argument is never set to false. | |
826 | ||
827 | pkcs7_validate_trust() only positively sets *_trusted upon encountering | |
828 | a trusted PKCS#7 SignedInfo block. | |
829 | ||
830 | This is quite unfortunate since its callers, system_verify_data() for | |
831 | example, depend on pkcs7_validate_trust() clearing *_trusted on non-trust. | |
832 | ||
833 | Indeed, UBSAN splats when attempting to load the uninitialized local | |
834 | variable 'trusted' from system_verify_data() in pkcs7_validate_trust(): | |
835 | ||
836 | UBSAN: Undefined behaviour in crypto/asymmetric_keys/pkcs7_trust.c:194:14 | |
837 | load of value 82 is not a valid value for type '_Bool' | |
838 | [...] | |
839 | Call Trace: | |
840 | [<ffffffff818c4d35>] dump_stack+0xbc/0x117 | |
841 | [<ffffffff818c4c79>] ? _atomic_dec_and_lock+0x169/0x169 | |
842 | [<ffffffff8194113b>] ubsan_epilogue+0xd/0x4e | |
843 | [<ffffffff819419fa>] __ubsan_handle_load_invalid_value+0x111/0x158 | |
844 | [<ffffffff819418e9>] ? val_to_string.constprop.12+0xcf/0xcf | |
845 | [<ffffffff818334a4>] ? x509_request_asymmetric_key+0x114/0x370 | |
846 | [<ffffffff814b83f0>] ? kfree+0x220/0x370 | |
847 | [<ffffffff818312c2>] ? public_key_verify_signature_2+0x32/0x50 | |
848 | [<ffffffff81835e04>] pkcs7_validate_trust+0x524/0x5f0 | |
849 | [<ffffffff813c391a>] system_verify_data+0xca/0x170 | |
850 | [<ffffffff813c3850>] ? top_trace_array+0x9b/0x9b | |
851 | [<ffffffff81510b29>] ? __vfs_read+0x279/0x3d0 | |
852 | [<ffffffff8129372f>] mod_verify_sig+0x1ff/0x290 | |
853 | [...] | |
854 | ||
855 | The implication is that pkcs7_validate_trust() effectively grants trust | |
856 | when it really shouldn't have. | |
857 | ||
858 | Fix this by explicitly setting *_trusted to false at the very beginning | |
859 | of pkcs7_validate_trust(). | |
860 | ||
861 | Cc: <stable@vger.kernel.org> | |
862 | Signed-off-by: Nicolai Stange <nicstange@gmail.com> | |
863 | Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> | |
864 | ||
865 | crypto/asymmetric_keys/pkcs7_trust.c | 2 ++ | |
866 | 1 file changed, 2 insertions(+) | |
867 | ||
868 | commit 1052826f7352ccc98167129b0b83222f45d50046 | |
869 | Author: Florian Westphal <fw@strlen.de> | |
870 | Date: Tue Mar 22 18:02:49 2016 +0100 | |
871 | ||
872 | netfilter: x_tables: validate e->target_offset early | |
873 | ||
874 | We should check that e->target_offset is sane before | |
875 | mark_source_chains gets called since it will fetch the target entry | |
876 | for loop detection. | |
877 | ||
878 | Signed-off-by: Florian Westphal <fw@strlen.de> | |
879 | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |
880 | ||
881 | net/ipv4/netfilter/arp_tables.c | 17 ++++++++--------- | |
882 | net/ipv4/netfilter/ip_tables.c | 17 ++++++++--------- | |
883 | net/ipv6/netfilter/ip6_tables.c | 17 ++++++++--------- | |
884 | 3 files changed, 24 insertions(+), 27 deletions(-) | |
885 | ||
886 | commit b35d19509e8dab157214e46dd24314663ccf554f | |
887 | Author: Florian Westphal <fw@strlen.de> | |
888 | Date: Tue Mar 22 18:02:50 2016 +0100 | |
889 | ||
890 | netfilter: x_tables: make sure e->next_offset covers remaining blob size | |
891 | ||
892 | Otherwise this function may read data beyond the ruleset blob. | |
893 | ||
894 | Signed-off-by: Florian Westphal <fw@strlen.de> | |
895 | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |
896 | ||
897 | net/ipv4/netfilter/arp_tables.c | 6 ++++-- | |
898 | net/ipv4/netfilter/ip_tables.c | 6 ++++-- | |
899 | net/ipv6/netfilter/ip6_tables.c | 6 ++++-- | |
900 | 3 files changed, 12 insertions(+), 6 deletions(-) | |
901 | ||
902 | commit 4d7642ed66b69140733a7b51fcd6d37ce4d4514c | |
903 | Author: Florian Westphal <fw@strlen.de> | |
904 | Date: Tue Mar 22 18:02:52 2016 +0100 | |
905 | ||
906 | netfilter: x_tables: fix unconditional helper | |
907 | ||
908 | Ben Hawkes says: | |
909 | ||
910 | In the mark_source_chains function (net/ipv4/netfilter/ip_tables.c) it | |
911 | is possible for a user-supplied ipt_entry structure to have a large | |
912 | next_offset field. This field is not bounds checked prior to writing a | |
913 | counter value at the supplied offset. | |
914 | ||
915 | Problem is that mark_source_chains should not have been called -- | |
916 | the rule doesn't have a next entry, so its supposed to return | |
917 | an absolute verdict of either ACCEPT or DROP. | |
918 | ||
919 | However, the function conditional() doesn't work as the name implies. | |
920 | It only checks that the rule is using wildcard address matching. | |
921 | ||
922 | However, an unconditional rule must also not be using any matches | |
923 | (no -m args). | |
924 | ||
925 | The underflow validator only checked the addresses, therefore | |
926 | passing the 'unconditional absolute verdict' test, while | |
927 | mark_source_chains also tested for presence of matches, and thus | |
928 | proceeeded to the next (not-existent) rule. | |
929 | ||
930 | Unify this so that all the callers have same idea of 'unconditional rule'. | |
931 | ||
932 | Reported-by: Ben Hawkes <hawkes@google.com> | |
933 | Signed-off-by: Florian Westphal <fw@strlen.de> | |
934 | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |
935 | ||
936 | net/ipv4/netfilter/arp_tables.c | 18 +++++++++--------- | |
937 | net/ipv4/netfilter/ip_tables.c | 23 +++++++++++------------ | |
938 | net/ipv6/netfilter/ip6_tables.c | 23 +++++++++++------------ | |
939 | 3 files changed, 31 insertions(+), 33 deletions(-) | |
940 | ||
941 | commit e3e51682563f1453dfc4b9ef88b29af4d1a78e78 | |
942 | Author: Pablo Neira Ayuso <pablo@netfilter.org> | |
943 | Date: Thu Mar 24 21:29:53 2016 +0100 | |
944 | ||
945 | netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES | |
946 | ||
947 | Make sure the table names via getsockopt GET_ENTRIES is nul-terminated | |
948 | in ebtables and all the x_tables variants and their respective compat | |
949 | code. Uncovered by KASAN. | |
950 | ||
951 | Reported-by: Baozeng Ding <sploving1@gmail.com> | |
952 | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |
953 | ||
954 | net/bridge/netfilter/ebtables.c | 4 ++++ | |
955 | net/ipv4/netfilter/arp_tables.c | 2 ++ | |
956 | net/ipv4/netfilter/ip_tables.c | 2 ++ | |
957 | net/ipv6/netfilter/ip6_tables.c | 2 ++ | |
958 | 4 files changed, 10 insertions(+) | |
959 | ||
960 | commit 7742471b674597627f8f608f6a89c6e5bbd6533d | |
961 | Author: Nicolai Stange <nicstange@gmail.com> | |
962 | Date: Fri Mar 25 14:22:14 2016 -0700 | |
963 | ||
964 | mm/filemap: generic_file_read_iter(): check for zero reads unconditionally | |
965 | ||
966 | If | |
967 | - generic_file_read_iter() gets called with a zero read length, | |
968 | - the read offset is at a page boundary, | |
969 | - IOCB_DIRECT is not set | |
970 | - and the page in question hasn't made it into the page cache yet, | |
971 | then do_generic_file_read() will trigger a readahead with a req_size hint | |
972 | of zero. | |
973 | ||
974 | Since roundup_pow_of_two(0) is undefined, UBSAN reports | |
975 | ||
976 | UBSAN: Undefined behaviour in include/linux/log2.h:63:13 | |
977 | shift exponent 64 is too large for 64-bit type 'long unsigned int' | |
978 | CPU: 3 PID: 1017 Comm: sa1 Tainted: G L 4.5.0-next-20160318+ #14 | |
979 | [...] | |
980 | Call Trace: | |
981 | [...] | |
982 | [<ffffffff813ef61a>] ondemand_readahead+0x3aa/0x3d0 | |
983 | [<ffffffff813ef61a>] ? ondemand_readahead+0x3aa/0x3d0 | |
984 | [<ffffffff813c73bd>] ? find_get_entry+0x2d/0x210 | |
985 | [<ffffffff813ef9c3>] page_cache_sync_readahead+0x63/0xa0 | |
986 | [<ffffffff813cc04d>] do_generic_file_read+0x80d/0xf90 | |
987 | [<ffffffff813cc955>] generic_file_read_iter+0x185/0x420 | |
988 | [...] | |
989 | [<ffffffff81510b06>] __vfs_read+0x256/0x3d0 | |
990 | [...] | |
991 | ||
992 | when get_init_ra_size() gets called from ondemand_readahead(). | |
993 | ||
994 | The net effect is that the initial readahead size is arch dependent for | |
995 | requested read lengths of zero: for example, since | |
996 | ||
997 | 1UL << (sizeof(unsigned long) * 8) | |
998 | ||
999 | evaluates to 1 on x86 while its result is 0 on ARMv7, the initial readahead | |
1000 | size becomes 4 on the former and 0 on the latter. | |
1001 | ||
1002 | What's more, whether or not the file access timestamp is updated for zero | |
1003 | length reads is decided differently for the two cases of IOCB_DIRECT | |
1004 | being set or cleared: in the first case, generic_file_read_iter() | |
1005 | explicitly skips updating that timestamp while in the latter case, it is | |
1006 | always updated through the call to do_generic_file_read(). | |
1007 | ||
1008 | According to POSIX, zero length reads "do not modify the last data access | |
1009 | timestamp" and thus, the IOCB_DIRECT behaviour is POSIXly correct. | |
1010 | ||
1011 | Let generic_file_read_iter() unconditionally check the requested read | |
1012 | length at its entry and return immediately with success if it is zero. | |
1013 | ||
1014 | Signed-off-by: Nicolai Stange <nicstange@gmail.com> | |
1015 | Cc: Al Viro <viro@zeniv.linux.org.uk> | |
1016 | Reviewed-by: Jan Kara <jack@suse.cz> | |
1017 | Signed-off-by: Andrew Morton <akpm@linux-foundation.org> | |
1018 | Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> | |
1019 | ||
1020 | mm/filemap.c | 7 ++++--- | |
1021 | 1 file changed, 4 insertions(+), 3 deletions(-) | |
1022 | ||
1023 | commit 604785419da498d7e876a0191b2e11626db706bb | |
1024 | Author: Oliver Neukum <oneukum@suse.com> | |
1025 | Date: Thu Mar 17 14:00:17 2016 -0700 | |
1026 | ||
1027 | Input: ims-pcu - sanity check against missing interfaces | |
1028 | ||
1029 | A malicious device missing interface can make the driver oops. | |
1030 | Add sanity checking. | |
1031 | ||
1032 | Signed-off-by: Oliver Neukum <ONeukum@suse.com> | |
1033 | CC: stable@vger.kernel.org | |
1034 | Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com> | |
1035 | ||
1036 | drivers/input/misc/ims-pcu.c | 4 ++++ | |
1037 | 1 file changed, 4 insertions(+) | |
1038 | ||
1039 | commit 24c3f4f6652f07eb2c3deea1488ff4de00592e80 | |
1040 | Author: Vladis Dronov <vdronov@redhat.com> | |
1041 | Date: Wed Mar 23 11:53:46 2016 -0700 | |
1042 | ||
1043 | Input: ati_remote2 - fix crashes on detecting device with invalid descriptor | |
1044 | ||
1045 | The ati_remote2 driver expects at least two interfaces with one | |
1046 | endpoint each. If given malicious descriptor that specify one | |
1047 | interface or no endpoints, it will crash in the probe function. | |
1048 | Ensure there is at least two interfaces and one endpoint for each | |
1049 | interface before using it. | |
1050 | ||
1051 | The full disclosure: http://seclists.org/bugtraq/2016/Mar/90 | |
1052 | ||
1053 | Reported-by: Ralf Spenneberg <ralf@spenneberg.net> | |
1054 | Signed-off-by: Vladis Dronov <vdronov@redhat.com> | |
1055 | Cc: stable@vger.kernel.org | |
1056 | Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com> | |
1057 | ||
1058 | drivers/input/misc/ati_remote2.c | 36 ++++++++++++++++++++++++++++++------ | |
1059 | 1 file changed, 30 insertions(+), 6 deletions(-) | |
1060 | ||
1061 | commit 262df604d00e72a4b930fbf7fe3a770f0196a5a5 | |
1062 | Author: Oliver Neukum <oneukum@suse.com> | |
1063 | Date: Wed Mar 23 14:36:56 2016 -0700 | |
1064 | ||
1065 | Input: sur40 - fix DMA on stack | |
1066 | ||
1067 | During the initialisation the driver uses a buffer on the stack for DMA. | |
1068 | That violates the cache coherency rules. The fix is to allocate the buffer | |
1069 | with kmalloc(). | |
1070 | ||
1071 | Signed-off-by: Oliver Neukum <ONeukum@suse.com> | |
1072 | Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com> | |
1073 | ||
1074 | drivers/input/touchscreen/sur40.c | 21 ++++++++++++++------- | |
1075 | 1 file changed, 14 insertions(+), 7 deletions(-) | |
1076 | ||
1077 | commit 015dd03669b2ab646723f6b123377e4ef5694a10 | |
1078 | Author: Haiyang Zhang <haiyangz@microsoft.com> | |
1079 | Date: Wed Mar 23 09:43:10 2016 -0700 | |
1080 | ||
1081 | hv_netvsc: Fix the array sizes to be max supported channels | |
1082 | ||
1083 | The VRSS_CHANNEL_MAX is the max number of channels supported by Hyper-V | |
1084 | hosts. We use it for the related array sizes instead of using NR_CPUS, | |
1085 | which may be set to several thousands. | |
1086 | This patch reduces possible memory allocation failures. | |
1087 | ||
1088 | Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com> | |
1089 | Reviewed-by: K. Y. Srinivasan <kys@microsoft.com> | |
1090 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
1091 | ||
1092 | drivers/net/hyperv/hyperv_net.h | 7 ++++--- | |
1093 | drivers/net/hyperv/rndis_filter.c | 4 ++-- | |
1094 | 2 files changed, 6 insertions(+), 5 deletions(-) | |
1095 | ||
1096 | commit a850a78d6393ef22a970266cbbefdf3dba0267b5 | |
1097 | Author: Haiyang Zhang <haiyangz@microsoft.com> | |
1098 | Date: Wed Mar 23 09:43:09 2016 -0700 | |
1099 | ||
1100 | hv_netvsc: Fix accessing freed memory in netvsc_change_mtu() | |
1101 | ||
1102 | struct netvsc_device is freed in rndis_filter_device_remove(). So we save | |
1103 | the nvdev->num_chn into a temp variable for later usage. | |
1104 | ||
1105 | (Please also include this patch into stable branch.) | |
1106 | ||
1107 | Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com> | |
1108 | Reviewed-by: K. Y. Srinivasan <kys@microsoft.com> | |
1109 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
1110 | ||
1111 | drivers/net/hyperv/netvsc_drv.c | 5 ++++- | |
1112 | 1 file changed, 4 insertions(+), 1 deletion(-) | |
1113 | ||
1114 | commit 7409626e43fe871cede30ac926425938f3ccddaf | |
1115 | Author: Guillaume Nault <g.nault@alphalink.fr> | |
1116 | Date: Wed Mar 23 16:38:55 2016 +0100 | |
1117 | ||
1118 | ppp: take reference on channels netns | |
1119 | ||
1120 | Let channels hold a reference on their network namespace. | |
1121 | Some channel types, like ppp_async and ppp_synctty, can have their | |
1122 | userspace controller running in a different namespace. Therefore they | |
1123 | can't rely on them to preclude their netns from being removed from | |
1124 | under them. | |
1125 | ||
1126 | ================================================================== | |
1127 | BUG: KASAN: use-after-free in ppp_unregister_channel+0x372/0x3a0 at | |
1128 | addr ffff880064e217e0 | |
1129 | Read of size 8 by task syz-executor/11581 | |
1130 | ============================================================================= | |
1131 | BUG net_namespace (Not tainted): kasan: bad access detected | |
1132 | ----------------------------------------------------------------------------- | |
1133 | ||
1134 | Disabling lock debugging due to kernel taint | |
1135 | INFO: Allocated in copy_net_ns+0x6b/0x1a0 age=92569 cpu=3 pid=6906 | |
1136 | [< none >] ___slab_alloc+0x4c7/0x500 kernel/mm/slub.c:2440 | |
1137 | [< none >] __slab_alloc+0x4c/0x90 kernel/mm/slub.c:2469 | |
1138 | [< inline >] slab_alloc_node kernel/mm/slub.c:2532 | |
1139 | [< inline >] slab_alloc kernel/mm/slub.c:2574 | |
1140 | [< none >] kmem_cache_alloc+0x23a/0x2b0 kernel/mm/slub.c:2579 | |
1141 | [< inline >] kmem_cache_zalloc kernel/include/linux/slab.h:597 | |
1142 | [< inline >] net_alloc kernel/net/core/net_namespace.c:325 | |
1143 | [< none >] copy_net_ns+0x6b/0x1a0 kernel/net/core/net_namespace.c:360 | |
1144 | [< none >] create_new_namespaces+0x2f6/0x610 kernel/kernel/nsproxy.c:95 | |
1145 | [< none >] copy_namespaces+0x297/0x320 kernel/kernel/nsproxy.c:150 | |
1146 | [< none >] copy_process.part.35+0x1bf4/0x5760 kernel/kernel/fork.c:1451 | |
1147 | [< inline >] copy_process kernel/kernel/fork.c:1274 | |
1148 | [< none >] _do_fork+0x1bc/0xcb0 kernel/kernel/fork.c:1723 | |
1149 | [< inline >] SYSC_clone kernel/kernel/fork.c:1832 | |
1150 | [< none >] SyS_clone+0x37/0x50 kernel/kernel/fork.c:1826 | |
1151 | [< none >] entry_SYSCALL_64_fastpath+0x16/0x7a kernel/arch/x86/entry/entry_64.S:185 | |
1152 | ||
1153 | INFO: Freed in net_drop_ns+0x67/0x80 age=575 cpu=2 pid=2631 | |
1154 | [< none >] __slab_free+0x1fc/0x320 kernel/mm/slub.c:2650 | |
1155 | [< inline >] slab_free kernel/mm/slub.c:2805 | |
1156 | [< none >] kmem_cache_free+0x2a0/0x330 kernel/mm/slub.c:2814 | |
1157 | [< inline >] net_free kernel/net/core/net_namespace.c:341 | |
1158 | [< none >] net_drop_ns+0x67/0x80 kernel/net/core/net_namespace.c:348 | |
1159 | [< none >] cleanup_net+0x4e5/0x600 kernel/net/core/net_namespace.c:448 | |
1160 | [< none >] process_one_work+0x794/0x1440 kernel/kernel/workqueue.c:2036 | |
1161 | [< none >] worker_thread+0xdb/0xfc0 kernel/kernel/workqueue.c:2170 | |
1162 | [< none >] kthread+0x23f/0x2d0 kernel/drivers/block/aoe/aoecmd.c:1303 | |
1163 | [< none >] ret_from_fork+0x3f/0x70 kernel/arch/x86/entry/entry_64.S:468 | |
1164 | INFO: Slab 0xffffea0001938800 objects=3 used=0 fp=0xffff880064e20000 | |
1165 | flags=0x5fffc0000004080 | |
1166 | INFO: Object 0xffff880064e20000 @offset=0 fp=0xffff880064e24200 | |
1167 | ||
1168 | CPU: 1 PID: 11581 Comm: syz-executor Tainted: G B 4.4.0+ | |
1169 | Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS | |
1170 | rel-1.8.2-0-g33fbe13 by qemu-project.org 04/01/2014 | |
1171 | 00000000ffffffff ffff8800662c7790 ffffffff8292049d ffff88003e36a300 | |
1172 | ffff880064e20000 ffff880064e20000 ffff8800662c77c0 ffffffff816f2054 | |
1173 | ffff88003e36a300 ffffea0001938800 ffff880064e20000 0000000000000000 | |
1174 | Call Trace: | |
1175 | [< inline >] __dump_stack kernel/lib/dump_stack.c:15 | |
1176 | [<ffffffff8292049d>] dump_stack+0x6f/0xa2 kernel/lib/dump_stack.c:50 | |
1177 | [<ffffffff816f2054>] print_trailer+0xf4/0x150 kernel/mm/slub.c:654 | |
1178 | [<ffffffff816f875f>] object_err+0x2f/0x40 kernel/mm/slub.c:661 | |
1179 | [< inline >] print_address_description kernel/mm/kasan/report.c:138 | |
1180 | [<ffffffff816fb0c5>] kasan_report_error+0x215/0x530 kernel/mm/kasan/report.c:236 | |
1181 | [< inline >] kasan_report kernel/mm/kasan/report.c:259 | |
1182 | [<ffffffff816fb4de>] __asan_report_load8_noabort+0x3e/0x40 kernel/mm/kasan/report.c:280 | |
1183 | [< inline >] ? ppp_pernet kernel/include/linux/compiler.h:218 | |
1184 | [<ffffffff83ad71b2>] ? ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392 | |
1185 | [< inline >] ppp_pernet kernel/include/linux/compiler.h:218 | |
1186 | [<ffffffff83ad71b2>] ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392 | |
1187 | [< inline >] ? ppp_pernet kernel/drivers/net/ppp/ppp_generic.c:293 | |
1188 | [<ffffffff83ad6f26>] ? ppp_unregister_channel+0xe6/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392 | |
1189 | [<ffffffff83ae18f3>] ppp_asynctty_close+0xa3/0x130 kernel/drivers/net/ppp/ppp_async.c:241 | |
1190 | [<ffffffff83ae1850>] ? async_lcp_peek+0x5b0/0x5b0 kernel/drivers/net/ppp/ppp_async.c:1000 | |
1191 | [<ffffffff82c33239>] tty_ldisc_close.isra.1+0x99/0xe0 kernel/drivers/tty/tty_ldisc.c:478 | |
1192 | [<ffffffff82c332c0>] tty_ldisc_kill+0x40/0x170 kernel/drivers/tty/tty_ldisc.c:744 | |
1193 | [<ffffffff82c34943>] tty_ldisc_release+0x1b3/0x260 kernel/drivers/tty/tty_ldisc.c:772 | |
1194 | [<ffffffff82c1ef21>] tty_release+0xac1/0x13e0 kernel/drivers/tty/tty_io.c:1901 | |
1195 | [<ffffffff82c1e460>] ? release_tty+0x320/0x320 kernel/drivers/tty/tty_io.c:1688 | |
1196 | [<ffffffff8174de36>] __fput+0x236/0x780 kernel/fs/file_table.c:208 | |
1197 | [<ffffffff8174e405>] ____fput+0x15/0x20 kernel/fs/file_table.c:244 | |
1198 | [<ffffffff813595ab>] task_work_run+0x16b/0x200 kernel/kernel/task_work.c:115 | |
1199 | [< inline >] exit_task_work kernel/include/linux/task_work.h:21 | |
1200 | [<ffffffff81307105>] do_exit+0x8b5/0x2c60 kernel/kernel/exit.c:750 | |
1201 | [<ffffffff813fdd20>] ? debug_check_no_locks_freed+0x290/0x290 kernel/kernel/locking/lockdep.c:4123 | |
1202 | [<ffffffff81306850>] ? mm_update_next_owner+0x6f0/0x6f0 kernel/kernel/exit.c:357 | |
1203 | [<ffffffff813215e6>] ? __dequeue_signal+0x136/0x470 kernel/kernel/signal.c:550 | |
1204 | [<ffffffff8132067b>] ? recalc_sigpending_tsk+0x13b/0x180 kernel/kernel/signal.c:145 | |
1205 | [<ffffffff81309628>] do_group_exit+0x108/0x330 kernel/kernel/exit.c:880 | |
1206 | [<ffffffff8132b9d4>] get_signal+0x5e4/0x14f0 kernel/kernel/signal.c:2307 | |
1207 | [< inline >] ? kretprobe_table_lock kernel/kernel/kprobes.c:1113 | |
1208 | [<ffffffff8151d355>] ? kprobe_flush_task+0xb5/0x450 kernel/kernel/kprobes.c:1158 | |
1209 | [<ffffffff8115f7d3>] do_signal+0x83/0x1c90 kernel/arch/x86/kernel/signal.c:712 | |
1210 | [<ffffffff8151d2a0>] ? recycle_rp_inst+0x310/0x310 kernel/include/linux/list.h:655 | |
1211 | [<ffffffff8115f750>] ? setup_sigcontext+0x780/0x780 kernel/arch/x86/kernel/signal.c:165 | |
1212 | [<ffffffff81380864>] ? finish_task_switch+0x424/0x5f0 kernel/kernel/sched/core.c:2692 | |
1213 | [< inline >] ? finish_lock_switch kernel/kernel/sched/sched.h:1099 | |
1214 | [<ffffffff81380560>] ? finish_task_switch+0x120/0x5f0 kernel/kernel/sched/core.c:2678 | |
1215 | [< inline >] ? context_switch kernel/kernel/sched/core.c:2807 | |
1216 | [<ffffffff85d794e9>] ? __schedule+0x919/0x1bd0 kernel/kernel/sched/core.c:3283 | |
1217 | [<ffffffff81003901>] exit_to_usermode_loop+0xf1/0x1a0 kernel/arch/x86/entry/common.c:247 | |
1218 | [< inline >] prepare_exit_to_usermode kernel/arch/x86/entry/common.c:282 | |
1219 | [<ffffffff810062ef>] syscall_return_slowpath+0x19f/0x210 kernel/arch/x86/entry/common.c:344 | |
1220 | [<ffffffff85d88022>] int_ret_from_sys_call+0x25/0x9f kernel/arch/x86/entry/entry_64.S:281 | |
1221 | Memory state around the buggy address: | |
1222 | ffff880064e21680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb | |
1223 | ffff880064e21700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb | |
1224 | >ffff880064e21780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb | |
1225 | ^ | |
1226 | ffff880064e21800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb | |
1227 | ffff880064e21880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb | |
1228 | ================================================================== | |
1229 | ||
1230 | Fixes: 273ec51dd7ce ("net: ppp_generic - introduce net-namespace functionality v2") | |
1231 | Reported-by: Baozeng Ding <sploving1@gmail.com> | |
1232 | Signed-off-by: Guillaume Nault <g.nault@alphalink.fr> | |
1233 | Reviewed-by: Cyrill Gorcunov <gorcunov@openvz.org> | |
1234 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
1235 | ||
1236 | drivers/net/ppp/ppp_generic.c | 4 +++- | |
1237 | 1 file changed, 3 insertions(+), 1 deletion(-) | |
1238 | ||
1239 | commit bfb890c1ac9d29b377f6bec4a5aab51d053114c4 | |
1240 | Author: Herbert Xu <herbert@gondor.apana.org.au> | |
1241 | Date: Wed Mar 16 17:06:01 2016 +0800 | |
1242 | ||
1243 | eCryptfs: Use skcipher and shash | |
1244 | ||
1245 | eCryptfs: Fix null pointer dereference on kzalloc error path | |
1246 | ||
1247 | The conversion to skcipher and shash added a couple of null pointer | |
1248 | dereference bugs on the kzalloc failure path. This patch fixes them. | |
1249 | ||
1250 | Fixes: 3095e8e366b4 ("eCryptfs: Use skcipher and shash") | |
1251 | Reported-by: Dan Carpenter <dan.carpenter@oracle.com> | |
1252 | Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> | |
1253 | ||
1254 | fs/ecryptfs/keystore.c | 6 ++---- | |
1255 | 1 file changed, 2 insertions(+), 4 deletions(-) | |
1256 | ||
1257 | commit 58a8421ae537e0609c4ff59bf6b11be869a43cc6 | |
1258 | Author: Boris BREZILLON <boris.brezillon@free-electrons.com> | |
1259 | Date: Thu Mar 17 10:21:34 2016 +0100 | |
1260 | ||
1261 | crypto: marvell/cesa - fix memory leak | |
1262 | ||
1263 | Crypto requests are not guaranteed to be finalized (->final() call), | |
1264 | and can be freed at any moment, without getting any notification from | |
1265 | the core. This can lead to memory leaks of the ->cache buffer. | |
1266 | ||
1267 | Make this buffer part of the request object, and allocate an extra buffer | |
1268 | from the DMA cache pool when doing DMA operations. | |
1269 | ||
1270 | As a side effect, this patch also fixes another bug related to cache | |
1271 | allocation and DMA operations. When the core allocates a new request and | |
1272 | import an existing state, a cache buffer can be allocated (depending | |
1273 | on the state). The problem is, at that very moment, we don't know yet | |
1274 | whether the request will use DMA or not, and since everything is | |
1275 | likely to be initialized to zero, mv_cesa_ahash_alloc_cache() thinks it | |
1276 | should allocate a buffer for standard operation. But when | |
1277 | mv_cesa_ahash_free_cache() is called, req->type has been set to | |
1278 | CESA_DMA_REQ in the meantime, thus leading to an invalind dma_pool_free() | |
1279 | call (the buffer passed in argument has not been allocated from the pool). | |
1280 | ||
1281 | Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com> | |
1282 | Reported-by: Gregory CLEMENT <gregory.clement@free-electrons.com> | |
1283 | Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> | |
1284 | ||
1285 | drivers/crypto/marvell/cesa.h | 3 +- | |
1286 | drivers/crypto/marvell/hash.c | 86 +++++++++---------------------------------- | |
1287 | 2 files changed, 20 insertions(+), 69 deletions(-) | |
1288 | ||
1289 | commit 1ec604f99895b9c37f26a692ff83a7da02d667fd | |
1290 | Author: Boris BREZILLON <boris.brezillon@free-electrons.com> | |
1291 | Date: Thu Mar 17 10:21:35 2016 +0100 | |
1292 | ||
1293 | crypto: marvell/cesa - initialize hash states | |
1294 | ||
1295 | ->export() might be called before we have done an update operation, | |
1296 | and in this case the ->state field is left uninitialized. | |
1297 | Put the correct default value when initializing the request. | |
1298 | ||
1299 | Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com> | |
1300 | Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> | |
1301 | ||
1302 | drivers/crypto/marvell/hash.c | 20 ++++++++++++++++++++ | |
1303 | 1 file changed, 20 insertions(+) | |
1304 | ||
1305 | commit 23879f055d23e82c2f78cceca22c33e631973977 | |
1306 | Author: David S. Miller <davem@davemloft.net> | |
1307 | Date: Sun Mar 13 23:28:00 2016 -0400 | |
1308 | ||
1309 | ipv4: Don't do expensive useless work during inetdev destroy. | |
1310 | ||
1311 | When an inetdev is destroyed, every address assigned to the interface | |
1312 | is removed. And in this scenerio we do two pointless things which can | |
1313 | be very expensive if the number of assigned interfaces is large: | |
1314 | ||
1315 | 1) Address promotion. We are deleting all addresses, so there is no | |
1316 | point in doing this. | |
1317 | ||
1318 | 2) A full nf conntrack table purge for every address. We only need to | |
1319 | do this once, as is already caught by the existing | |
1320 | masq_dev_notifier so masq_inet_event() can skip this. | |
1321 | ||
1322 | Reported-by: Solar Designer <solar@openwall.com> | |
1323 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
1324 | Tested-by: Cyrill Gorcunov <gorcunov@openvz.org> | |
1325 | ||
1326 | net/ipv4/devinet.c | 4 ++++ | |
1327 | net/ipv4/fib_frontend.c | 4 ++++ | |
1328 | net/ipv4/netfilter/nf_nat_masquerade_ipv4.c | 12 ++++++++++-- | |
1329 | 3 files changed, 18 insertions(+), 2 deletions(-) | |
1330 | ||
1331 | commit 60394231e840e884024592a76a6c5612433d3756 | |
1332 | Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com> | |
1333 | Date: Tue Mar 8 10:34:28 2016 -0300 | |
1334 | ||
1335 | sctp: fix copying more bytes than expected in sctp_add_bind_addr | |
1336 | ||
1337 | Dmitry reported that sctp_add_bind_addr may read more bytes than | |
1338 | expected in case the parameter is a IPv4 addr supplied by the user | |
1339 | through calls such as sctp_bindx_add(), because it always copies | |
1340 | sizeof(union sctp_addr) while the buffer may be just a struct | |
1341 | sockaddr_in, which is smaller. | |
1342 | ||
1343 | This patch then fixes it by limiting the memcpy to the min between the | |
1344 | union size and a (new parameter) provided addr size. Where possible this | |
1345 | parameter still is the size of that union, except for reading from | |
1346 | user-provided buffers, which then it accounts for protocol type. | |
1347 | ||
1348 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
1349 | Tested-by: Dmitry Vyukov <dvyukov@google.com> | |
1350 | Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com> | |
1351 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
1352 | ||
1353 | include/net/sctp/structs.h | 2 +- | |
1354 | net/sctp/bind_addr.c | 14 ++++++++------ | |
1355 | net/sctp/protocol.c | 1 + | |
1356 | net/sctp/sm_make_chunk.c | 3 ++- | |
1357 | net/sctp/socket.c | 4 +++- | |
1358 | 5 files changed, 15 insertions(+), 9 deletions(-) | |
1359 | ||
1360 | commit 9831caa50e1453818c5ec618890291f028b7992f | |
1361 | Author: Brad Spengler <spender@grsecurity.net> | |
1362 | Date: Mon Mar 28 19:20:28 2016 -0400 | |
1363 | ||
1364 | Also allow /bin/false as needed by systemd | |
1365 | ||
1366 | kernel/kmod.c | 2 +- | |
1367 | 1 file changed, 1 insertion(+), 1 deletion(-) | |
1368 | ||
8da00c6e PK |
1369 | commit bb38a61b496a3f09f4d7b93d2f0fe15476918147 |
1370 | Author: Brad Spengler <spender@grsecurity.net> | |
1371 | Date: Tue Mar 22 16:59:43 2016 -0400 | |
1372 | ||
1373 | Fix size_overflow FP reported by marcan at: | |
1374 | https://forums.grsecurity.net/viewtopic.php?f=3&t=4426 | |
1375 | ||
1376 | net/ipv6/xfrm6_mode_transport.c | 2 +- | |
1377 | 1 file changed, 1 insertion(+), 1 deletion(-) | |
1378 | ||
e727c85f PK |
1379 | commit 523a36a9c845da3051e58c6767c2e1a0f640998a |
1380 | Merge: 0d0ec9e c0b77a7 | |
1381 | Author: Brad Spengler <spender@grsecurity.net> | |
1382 | Date: Wed Mar 16 20:20:40 2016 -0400 | |
1383 | ||
1384 | Merge branch 'pax-test' into grsec-test | |
1385 | ||
1386 | commit c0b77a7cb578199f0b7dc90768a13ca6c044aba9 | |
1387 | Merge: 10d57c1 0d19123 | |
1388 | Author: Brad Spengler <spender@grsecurity.net> | |
1389 | Date: Wed Mar 16 20:20:27 2016 -0400 | |
1390 | ||
1391 | Merge branch 'linux-4.4.y' into pax-test | |
1392 | ||
327d9782 PK |
1393 | commit 0d0ec9ee83144ab839710a01cfd746bd78257394 |
1394 | Author: Brad Spengler <spender@grsecurity.net> | |
1395 | Date: Mon Mar 14 20:15:47 2016 -0400 | |
1396 | ||
1397 | Invert logic to clean up code | |
1398 | ||
1399 | fs/namei.c | 32 +++++++------------------------- | |
1400 | grsecurity/grsec_chroot.c | 10 +++++----- | |
1401 | 2 files changed, 12 insertions(+), 30 deletions(-) | |
1402 | ||
1403 | commit 39e0e623c84863af7b3ace759b583ff938fde2b7 | |
1404 | Author: Brad Spengler <spender@grsecurity.net> | |
1405 | Date: Mon Mar 14 19:59:36 2016 -0400 | |
1406 | ||
1407 | compile fix | |
1408 | ||
1409 | fs/namei.c | 5 ++--- | |
1410 | 1 file changed, 2 insertions(+), 3 deletions(-) | |
1411 | ||
1412 | commit 2b3ad8bc095fea829275b7fcc7e5671677b8ed33 | |
1413 | Author: Brad Spengler <spender@grsecurity.net> | |
1414 | Date: Mon Mar 14 19:57:53 2016 -0400 | |
1415 | ||
1416 | Also handle renames | |
1417 | ||
1418 | fs/namei.c | 9 +++++++++ | |
1419 | 1 file changed, 9 insertions(+) | |
1420 | ||
1421 | commit 54dfd13b19743d4a340de0cd5683b5bde44e7d9c | |
1422 | Author: Brad Spengler <spender@grsecurity.net> | |
1423 | Date: Mon Mar 14 19:45:56 2016 -0400 | |
1424 | ||
1425 | Add additional check to cover lookup family of functions | |
1426 | ||
1427 | fs/namei.c | 9 +++++++++ | |
1428 | 1 file changed, 9 insertions(+) | |
1429 | ||
1430 | commit c3df846baa7873fb99401136f220676b87452918 | |
1431 | Author: Brad Spengler <spender@grsecurity.net> | |
1432 | Date: Mon Mar 14 18:42:37 2016 -0400 | |
1433 | ||
1434 | compile fix | |
1435 | ||
1436 | fs/namei.c | 2 +- | |
1437 | 1 file changed, 1 insertion(+), 1 deletion(-) | |
1438 | ||
1439 | commit 384ea9c0ef9df4298dfa3a71948c08e70f1092bf | |
1440 | Author: Brad Spengler <spender@grsecurity.net> | |
1441 | Date: Mon Mar 14 18:34:40 2016 -0400 | |
1442 | ||
1443 | Fix recent chroot check on the create side, as reported by | |
1444 | Toralf Foerster | |
1445 | ||
1446 | fs/namei.c | 26 ++++++++++++++++---------- | |
1447 | 1 file changed, 16 insertions(+), 10 deletions(-) | |
1448 | ||
0a6f4ec8 PK |
1449 | commit 82e7dc61a626c47887d392ff9cd35b104f01fd25 |
1450 | Author: Paolo Bonzini <pbonzini@redhat.com> | |
1451 | Date: Tue Mar 8 12:13:39 2016 +0100 | |
1452 | ||
1453 | KVM: MMU: fix ept=0/pte.u=1/pte.w=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0 combo | |
1454 | ||
1455 | Yes, all of these are needed. :) This is admittedly a bit odd, but | |
1456 | kvm-unit-tests access.flat tests this if you run it with "-cpu host" | |
1457 | and of course ept=0. | |
1458 | ||
1459 | KVM runs the guest with CR0.WP=1, so it must handle supervisor writes | |
1460 | specially when pte.u=1/pte.w=0/CR0.WP=0. Such writes cause a fault | |
1461 | when U=1 and W=0 in the SPTE, but they must succeed because CR0.WP=0. | |
1462 | When KVM gets the fault, it sets U=0 and W=1 in the shadow PTE and | |
1463 | restarts execution. This will still cause a user write to fault, while | |
1464 | supervisor writes will succeed. User reads will fault spuriously now, | |
1465 | and KVM will then flip U and W again in the SPTE (U=1, W=0). User reads | |
1466 | will be enabled and supervisor writes disabled, going back to the | |
1467 | originary situation where supervisor writes fault spuriously. | |
1468 | ||
1469 | When SMEP is in effect, however, U=0 will enable kernel execution of | |
1470 | this page. To avoid this, KVM also sets NX=1 in the shadow PTE together | |
1471 | with U=0. If the guest has not enabled NX, the result is a continuous | |
1472 | stream of page faults due to the NX bit being reserved. | |
1473 | ||
1474 | The fix is to force EFER.NX=1 even if the CPU is taking care of the EFER | |
1475 | switch. (All machines with SMEP have the CPU_LOAD_IA32_EFER vm-entry | |
1476 | control, so they do not use user-return notifiers for EFER---if they did, | |
1477 | EFER.NX would be forced to the same value as the host). | |
1478 | ||
1479 | There is another bug in the reserved bit check, which I've split to a | |
1480 | separate patch for easier application to stable kernels. | |
1481 | ||
1482 | Cc: stable@vger.kernel.org | |
1483 | Cc: Andy Lutomirski <luto@amacapital.net> | |
1484 | Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.intel.com> | |
1485 | Fixes: f6577a5fa15d82217ca73c74cd2dcbc0f6c781dd | |
1486 | Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> | |
1487 | ||
1488 | Documentation/virtual/kvm/mmu.txt | 3 ++- | |
1489 | arch/x86/kvm/vmx.c | 36 +++++++++++++++++++++++------------- | |
1490 | 2 files changed, 25 insertions(+), 14 deletions(-) | |
1491 | ||
1492 | commit 802a88e57b141e9643e93afb7805813ad8da22f3 | |
1493 | Author: Paolo Bonzini <pbonzini@redhat.com> | |
1494 | Date: Wed Mar 9 14:28:02 2016 +0100 | |
1495 | ||
1496 | KVM: MMU: fix reserved bit check for ept=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0 | |
1497 | ||
1498 | KVM has special logic to handle pages with pte.u=1 and pte.w=0 when | |
1499 | CR0.WP=1. These pages' SPTEs flip continuously between two states: | |
1500 | U=1/W=0 (user and supervisor reads allowed, supervisor writes not allowed) | |
1501 | and U=0/W=1 (supervisor reads and writes allowed, user writes not allowed). | |
1502 | ||
1503 | When SMEP is in effect, however, U=0 will enable kernel execution of | |
1504 | this page. To avoid this, KVM also sets NX=1 in the shadow PTE together | |
1505 | with U=0, making the two states U=1/W=0/NX=gpte.NX and U=0/W=1/NX=1. | |
1506 | When guest EFER has the NX bit cleared, the reserved bit check thinks | |
1507 | that the latter state is invalid; teach it that the smep_andnot_wp case | |
1508 | will also use the NX bit of SPTEs. | |
1509 | ||
1510 | Cc: stable@vger.kernel.org | |
1511 | Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.inel.com> | |
1512 | Fixes: c258b62b264fdc469b6d3610a907708068145e3b | |
1513 | Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> | |
1514 | ||
1515 | arch/x86/kvm/mmu.c | 4 +++- | |
1516 | 1 file changed, 3 insertions(+), 1 deletion(-) | |
1517 | ||
1518 | commit 3925851224428c1d2bca32cf33821befb947c4f3 | |
1519 | Author: Ming Lei <ming.lei@canonical.com> | |
1520 | Date: Sat Mar 12 22:56:19 2016 +0800 | |
1521 | ||
1522 | block: don't optimize for non-cloned bio in bio_get_last_bvec() | |
1523 | ||
1524 | For !BIO_CLONED bio, we can use .bi_vcnt safely, but it | |
1525 | doesn't mean we can just simply return .bi_io_vec[.bi_vcnt - 1] | |
1526 | because the start postion may have been moved in the middle of | |
1527 | the bvec, such as splitting in the middle of bvec. | |
1528 | ||
1529 | Fixes: 7bcd79ac50d9(block: bio: introduce helpers to get the 1st and last bvec) | |
1530 | Cc: stable@vger.kernel.org | |
1531 | Reported-by: Kent Overstreet <kent.overstreet@gmail.com> | |
1532 | Signed-off-by: Ming Lei <ming.lei@canonical.com> | |
1533 | Signed-off-by: Jens Axboe <axboe@fb.com> | |
1534 | ||
1535 | include/linux/bio.h | 5 ----- | |
1536 | 1 file changed, 5 deletions(-) | |
1537 | ||
1538 | commit db541463b4a0926bebdbac743c8736fb9e903d58 | |
1539 | Author: Borislav Petkov <bp@alien8.de> | |
1540 | Date: Fri Mar 11 12:32:06 2016 +0100 | |
1541 | ||
1542 | x86/fpu: Fix eager-FPU handling on legacy FPU machines | |
1543 | ||
1544 | i486 derived cores like Intel Quark support only the very old, | |
1545 | legacy x87 FPU (FSAVE/FRSTOR, CPUID bit FXSR is not set), and | |
1546 | our FPU code wasn't handling the saving and restoring there | |
1547 | properly in the 'eagerfpu' case. | |
1548 | ||
1549 | So after we made eagerfpu the default for all CPU types: | |
1550 | ||
1551 | 58122bf1d856 x86/fpu: Default eagerfpu=on on all CPUs | |
1552 | ||
1553 | these old FPU designs broke. First, Andy Shevchenko reported a splat: | |
1554 | ||
1555 | WARNING: CPU: 0 PID: 823 at arch/x86/include/asm/fpu/internal.h:163 fpu__clear+0x8c/0x160 | |
1556 | ||
1557 | which was us trying to execute FXRSTOR on those machines even though | |
1558 | they don't support it. | |
1559 | ||
1560 | After taking care of that, Bryan O'Donoghue reported that a simple FPU | |
1561 | test still failed because we weren't initializing the FPU state properly | |
1562 | on those machines. | |
1563 | ||
1564 | Take care of all that. | |
1565 | ||
1566 | Reported-and-tested-by: Bryan O'Donoghue <pure.logic@nexus-software.ie> | |
1567 | Reported-by: Andy Shevchenko <andy.shevchenko@gmail.com> | |
1568 | Signed-off-by: Borislav Petkov <bp@suse.de> | |
1569 | Acked-by: Linus Torvalds <torvalds@linux-foundation.org> | |
1570 | Cc: Andrew Morton <akpm@linux-foundation.org> | |
1571 | Cc: Andy Lutomirski <luto@amacapital.net> | |
1572 | Cc: Borislav Petkov <bp@alien8.de> | |
1573 | Cc: Brian Gerst <brgerst@gmail.com> | |
1574 | Cc: Dave Hansen <dave.hansen@linux.intel.com> | |
1575 | Cc: Denys Vlasenko <dvlasenk@redhat.com> | |
1576 | Cc: Fenghua Yu <fenghua.yu@intel.com> | |
1577 | Cc: H. Peter Anvin <hpa@zytor.com> | |
1578 | Cc: Oleg Nesterov <oleg@redhat.com> | |
1579 | Cc: Peter Zijlstra <peterz@infradead.org> | |
1580 | Cc: Quentin Casasnovas <quentin.casasnovas@oracle.com> | |
1581 | Cc: Thomas Gleixner <tglx@linutronix.de> | |
1582 | Cc: Yu-cheng <yu-cheng.yu@intel.com> | |
1583 | Link: http://lkml.kernel.org/r/20160311113206.GD4312@pd.tnic | |
1584 | Signed-off-by: Ingo Molnar <mingo@kernel.org> | |
1585 | ||
1586 | arch/x86/kernel/fpu/core.c | 4 +++- | |
1587 | arch/x86/kernel/fpu/init.c | 2 +- | |
1588 | 2 files changed, 4 insertions(+), 2 deletions(-) | |
1589 | ||
1590 | commit 8fed14e935cb62d2d46e99793d728dc7760dcc87 | |
1591 | Author: Brad Spengler <spender@grsecurity.net> | |
1592 | Date: Sun Mar 13 11:35:56 2016 -0400 | |
1593 | ||
1594 | Compile fixes | |
1595 | ||
1596 | fs/namei.c | 2 +- | |
1597 | grsecurity/grsec_chroot.c | 2 +- | |
1598 | include/linux/grsecurity.h | 2 +- | |
1599 | 3 files changed, 3 insertions(+), 3 deletions(-) | |
1600 | ||
1601 | commit aab25a3496c4683c5858056960010119fb7d9a5a | |
1602 | Author: Brad Spengler <spender@grsecurity.net> | |
1603 | Date: Sun Mar 13 10:53:59 2016 -0400 | |
1604 | ||
1605 | Use fput instead of put_filp() | |
1606 | ||
1607 | fs/namei.c | 4 ++-- | |
1608 | 1 file changed, 2 insertions(+), 2 deletions(-) | |
1609 | ||
1610 | commit 928ddec9dfe5415dff82d941c3b3e76ee6f48761 | |
1611 | Author: Brad Spengler <spender@grsecurity.net> | |
1612 | Date: Sun Mar 13 10:30:54 2016 -0400 | |
1613 | ||
1614 | Update MPROTECT_COMPAT config description, disable by default | |
1615 | ||
1616 | security/Kconfig | 18 ++++++------------ | |
1617 | 1 file changed, 6 insertions(+), 12 deletions(-) | |
1618 | ||
1619 | commit 4cc29af2e81e7a4bdfab1afedfdedca6e23362d5 | |
1620 | Author: Brad Spengler <spender@grsecurity.net> | |
1621 | Date: Sun Mar 13 10:35:55 2016 -0400 | |
1622 | ||
1623 | As reported by Jann Horn, chroot scenarios where the chrooting application | |
1624 | brings in a directory fd can be used to access any file outside of the chroot | |
1625 | via *at syscalls. To maintain compatibility with Chromium and other apps, | |
1626 | we specifically only disallow relative accesses off a directory fd when the | |
1627 | final path is not located under that directory described by the fd and exists | |
1628 | outside of the chroot. This additional restriction will exist under the | |
1629 | current GRKERNSEC_CHROOT_FCHDIR option. | |
1630 | ||
1631 | fs/namei.c | 9 +++++++++ | |
1632 | grsecurity/Kconfig | 10 ++++++---- | |
1633 | grsecurity/grsec_chroot.c | 39 +++++++++++++++++++++++++++++++++++++++ | |
1634 | include/linux/grmsg.h | 1 + | |
1635 | include/linux/grsecurity.h | 1 + | |
1636 | 5 files changed, 56 insertions(+), 4 deletions(-) | |
1637 | ||
0d4fa83c PK |
1638 | commit 7d02a991213f0b07a3677dcc93cdafc3ac309142 |
1639 | Author: Brad Spengler <spender@grsecurity.net> | |
1640 | Date: Thu Mar 10 22:17:16 2016 -0500 | |
1641 | ||
1642 | Update size_overflow hash table | |
1643 | ||
1644 | tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 + | |
1645 | 1 file changed, 1 insertion(+) | |
1646 | ||
1647 | commit 29f25ddda6a5625340df26beb394279fefea2b49 | |
1648 | Author: Brad Spengler <spender@grsecurity.net> | |
1649 | Date: Thu Mar 10 22:16:04 2016 -0500 | |
1650 | ||
1651 | Fix module support | |
1652 | ||
1653 | kernel/module.c | 3 ++- | |
1654 | 1 file changed, 2 insertions(+), 1 deletion(-) | |
1655 | ||
1656 | commit b057a45636b626e7eaf03077ed0916b95fea054c | |
1657 | Merge: ba5ee94 10d57c1 | |
1658 | Author: Brad Spengler <spender@grsecurity.net> | |
1659 | Date: Thu Mar 10 21:36:10 2016 -0500 | |
1660 | ||
1661 | Merge branch 'pax-test' into grsec-test | |
1662 | ||
1663 | commit 10d57c107e7fabffbe616b14efab73df585576c2 | |
1664 | Merge: 1cbae46 62e2195 | |
1665 | Author: Brad Spengler <spender@grsecurity.net> | |
1666 | Date: Thu Mar 10 21:34:58 2016 -0500 | |
1667 | ||
1668 | Update to pax-linux-4.4.5-test9.patch: | |
1669 | - fixed an integer signedness mixup in the old select syscall caught by the size overflow plugin, by Mathias Krause <minipli@ld-linux.so> | |
1670 | - Emese cleaned up a few unnecessary type casts in the size overflow plugin | |
1671 | - fixed the initify plugin to not trigger a compiler assert with gcc 6 in LTO mode | |
1672 | - compile the x86 vdso without plugins, reported by Emese | |
1673 | - fixed a REFCOUNT/arm compile error, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4410) | |
1674 | - fixed gcc-common.h for gcc 6, reported by psturm (https://forums.grsecurity.net/viewtopic.php?f=3&t=4394) | |
1675 | ||
1676 | Merge branch 'linux-4.4.y' into pax-test | |
1677 | ||
771bc04e PK |
1678 | commit ba5ee94199b11c1429559a08c2158677dd8f1761 |
1679 | Author: Brad Spengler <spender@grsecurity.net> | |
1680 | Date: Thu Mar 3 20:20:19 2016 -0500 | |
1681 | ||
1682 | Update size_overflow hash table | |
1683 | ||
1684 | tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 + | |
1685 | 1 file changed, 1 insertion(+) | |
1686 | ||
1687 | commit 50a5cd726362f0988b81a54d4c962acf8fd34a70 | |
1688 | Merge: 335c04c 1cbae46 | |
1689 | Author: Brad Spengler <spender@grsecurity.net> | |
1690 | Date: Thu Mar 3 20:04:00 2016 -0500 | |
1691 | ||
1692 | Merge branch 'pax-test' into grsec-test | |
1693 | ||
1694 | commit 1cbae46efa0b111ef2d46502f8d34c4c572a0e00 | |
1695 | Merge: a51cdb8 c252409 | |
1696 | Author: Brad Spengler <spender@grsecurity.net> | |
1697 | Date: Thu Mar 3 19:57:43 2016 -0500 | |
1698 | ||
1699 | Merge branch 'linux-4.4.y' into pax-test | |
1700 | ||
2f278bcf PK |
1701 | commit 335c04c8146a696a6101a9c69dbd47f11383549e |
1702 | Merge: 897877e a51cdb8 | |
1703 | Author: Brad Spengler <spender@grsecurity.net> | |
1704 | Date: Tue Mar 1 17:57:24 2016 -0500 | |
1705 | ||
1706 | Merge branch 'pax-test' into grsec-test | |
1707 | ||
1708 | commit a51cdb83569b450858737a30d2be043d87d7ddc1 | |
1709 | Author: Brad Spengler <spender@grsecurity.net> | |
1710 | Date: Tue Mar 1 17:56:43 2016 -0500 | |
1711 | ||
1712 | Update to pax-linux-4.4.3-test6.patch: | |
1713 | - spender fixed the cftype constification fallout, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4391) | |
1714 | - fixed a few section mismatches on notifier_block variables | |
1715 | - fixed a few REFCOUNT false positives found by Emese's plugin | |
1716 | - constified hypervisor_x86 | |
1717 | ||
1718 | arch/x86/include/asm/hypervisor.h | 2 +- | |
1719 | arch/x86/kernel/cpu/mshyperv.c | 2 +- | |
1720 | arch/x86/kernel/cpu/vmware.c | 2 +- | |
1721 | arch/x86/kernel/kvm.c | 2 +- | |
1722 | drivers/lightnvm/rrpc.c | 4 ++-- | |
1723 | drivers/lightnvm/rrpc.h | 2 +- | |
1724 | drivers/net/can/led.c | 2 +- | |
1725 | drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +- | |
1726 | drivers/net/ethernet/rocker/rocker.c | 4 ++-- | |
1727 | drivers/net/ipvlan/ipvlan_main.c | 6 +++--- | |
1728 | drivers/net/vrf.c | 2 +- | |
1729 | drivers/staging/rtl8188eu/core/rtw_mlme_ext.c | 12 ++++++------ | |
1730 | drivers/staging/rtl8188eu/include/rtw_mlme_ext.h | 2 +- | |
1731 | drivers/staging/rtl8723au/core/rtw_mlme_ext.c | 12 ++++++------ | |
1732 | drivers/staging/rtl8723au/include/drv_types.h | 2 +- | |
1733 | drivers/staging/rtl8723au/include/rtw_mlme_ext.h | 2 +- | |
1734 | drivers/staging/rtl8723au/include/usb_ops.h | 4 ++-- | |
1735 | drivers/thermal/x86_pkg_temp_thermal.c | 2 +- | |
1736 | fs/proc/kcore.c | 2 +- | |
1737 | mm/hugetlb_cgroup.c | 8 ++++---- | |
1738 | mm/mm_init.c | 2 +- | |
1739 | mm/slub.c | 2 +- | |
1740 | net/mac802154/iface.c | 2 +- | |
1741 | 23 files changed, 41 insertions(+), 41 deletions(-) | |
1742 | ||
8d96b2b0 PK |
1743 | commit 897877e79629a0b854e98cb666a9d898256d45a7 |
1744 | Merge: 1ffa5d5 4f4b213 | |
1745 | Author: Brad Spengler <spender@grsecurity.net> | |
1746 | Date: Sun Feb 28 20:54:59 2016 -0500 | |
1747 | ||
1748 | Merge branch 'pax-test' into grsec-test | |
1749 | ||
1750 | commit 4f4b21342a4a4f87c01f7909406e6b5f4c9dadbf | |
1751 | Author: Brad Spengler <spender@grsecurity.net> | |
1752 | Date: Sun Feb 28 20:54:06 2016 -0500 | |
1753 | ||
1754 | Update to pax-linux-4.4.3-test5.patch: | |
1755 | - constified xfrm_mgr and cftype, by Mathias Krause <minipli@ld-linux.so> | |
1756 | - Emese fixed a few checkpatch reports on the gcc plugin generator headers | |
1757 | - Emese fixed a false positive size overflow report in get_next_ino, reported by KARBOWSKI Piotr <piotr.karbowski@gmail.com> | |
1758 | - added a generator for SIMPLE_IPA passes as well | |
1759 | ||
1760 | include/linux/cgroup-defs.h | 2 +- | |
1761 | include/linux/hugetlb.h | 2 +- | |
1762 | include/linux/hugetlb_cgroup.h | 11 ++ | |
1763 | include/net/xfrm.h | 2 +- | |
1764 | kernel/cgroup.c | 29 ++-- | |
1765 | mm/hugetlb.c | 55 ++++++- | |
1766 | mm/hugetlb_cgroup.c | 60 ++----- | |
1767 | mm/mmap.c | 38 ++--- | |
1768 | net/xfrm/xfrm_state.c | 4 +- | |
1769 | tools/gcc/constify_plugin.c | 5 +- | |
1770 | tools/gcc/gcc-common.h | 42 +++-- | |
1771 | tools/gcc/gcc-generate-gimple-pass.h | 27 ++-- | |
1772 | tools/gcc/gcc-generate-ipa-pass.h | 43 ++--- | |
1773 | tools/gcc/gcc-generate-rtl-pass.h | 27 ++-- | |
1774 | tools/gcc/gcc-generate-simple_ipa-pass.h | 173 +++++++++++++++++++++ | |
1775 | tools/gcc/size_overflow_plugin/.gitignore | 1 + | |
1776 | .../disable_size_overflow_hash.data | 7 +- | |
1777 | .../size_overflow_plugin/size_overflow_hash.data | 3 - | |
1778 | 18 files changed, 385 insertions(+), 146 deletions(-) | |
1779 | ||
1780 | commit 1ffa5d50a2161311d46b56fdef734f309503cb80 | |
1781 | Author: Brad Spengler <spender@grsecurity.net> | |
1782 | Date: Sun Feb 28 20:43:02 2016 -0500 | |
1783 | ||
1784 | Make suid/sgid bruteforce prevention also apply to binaries with fscaps | |
1785 | enabled | |
1786 | ||
1787 | grsecurity/grsec_sig.c | 3 +-- | |
1788 | 1 file changed, 1 insertion(+), 2 deletions(-) | |
1789 | ||
1790 | commit cfdb373a77c88d01c1539e605e28143af5981571 | |
1791 | Author: Brad Spengler <spender@grsecurity.net> | |
1792 | Date: Sun Feb 28 19:12:39 2016 -0500 | |
1793 | ||
1794 | compile fix | |
1795 | ||
1796 | grsecurity/gracl_segv.c | 2 +- | |
1797 | grsecurity/grsec_sig.c | 2 +- | |
1798 | 2 files changed, 2 insertions(+), 2 deletions(-) | |
1799 | ||
1800 | commit 67d5160f8c1ee12ee4da1e7ad57f8688fcc77b53 | |
1801 | Author: Brad Spengler <spender@grsecurity.net> | |
1802 | Date: Sun Feb 28 18:24:50 2016 -0500 | |
1803 | ||
1804 | Update the daemon check in handling of anti-bruteforcing of suid binaries | |
1805 | by GRKERNSEC_BRUTE to prevent a bypass reported by Jann Horn where one | |
1806 | could create unprivileged copies of the suid binary via ptrace, inject | |
1807 | code into them, and fork+exec a privileged copy. A crash then in the | |
1808 | privileged copy would trigger the daemon detection which could be avoided | |
1809 | by simply terminating the original process. Defeat this by using our | |
1810 | is_privileged_binary() function against the task's mm->binfmt->file to detect | |
1811 | an fscaps-enabled or suid/sgid binary being involved. | |
1812 | ||
1813 | Also update the RBAC RES_CRASH code to use is_privileged_binary(). | |
1814 | ||
1815 | grsecurity/gracl_segv.c | 15 +-------------- | |
1816 | grsecurity/grsec_sig.c | 3 ++- | |
1817 | 2 files changed, 3 insertions(+), 15 deletions(-) | |
1818 | ||
1819 | commit 7382ec22b0c9627c674ccbb00210276d26f219e3 | |
1820 | Author: Brad Spengler <spender@grsecurity.net> | |
1821 | Date: Sun Feb 28 15:06:32 2016 -0500 | |
1822 | ||
1823 | Fix a GRKERNSEC_PTRACE_READEXEC bypass reported by Jann Horn where one | |
1824 | could dump out an unreadable suid binary by creating a script that used | |
1825 | that binary as an interpreter. | |
1826 | ||
1827 | fs/exec.c | 14 +++++++++----- | |
1828 | 1 file changed, 9 insertions(+), 5 deletions(-) | |
1829 | ||
1830 | commit 3e60eddebe1c59b97c0b5432506bf8e13d84e8e6 | |
1831 | Merge: 2d35d52 8327ee6 | |
1832 | Author: Brad Spengler <spender@grsecurity.net> | |
1833 | Date: Thu Feb 25 18:44:11 2016 -0500 | |
1834 | ||
1835 | Merge branch 'pax-test' into grsec-test | |
1836 | ||
1837 | Conflicts: | |
1838 | fs/proc/base.c | |
1839 | kernel/ptrace.c | |
1840 | mm/process_vm_access.c | |
1841 | ||
1842 | commit 8327ee64e5e24ae6a3446dd96b95d5185f70e1f6 | |
1843 | Merge: 09d53c7 2134d97 | |
1844 | Author: Brad Spengler <spender@grsecurity.net> | |
1845 | Date: Thu Feb 25 18:36:46 2016 -0500 | |
1846 | ||
1847 | Merge branch 'linux-4.4.y' into pax-test | |
1848 | ||
1849 | Conflicts: | |
1850 | mm/mmap.c | |
1851 | ||
1852 | commit 2d35d5276f3feb0c053209f8c3a77b1f55f9d96b | |
1853 | Author: Brad Spengler <spender@grsecurity.net> | |
1854 | Date: Wed Feb 24 07:59:12 2016 -0500 | |
1855 | ||
1856 | Remove /proc/pid/map_files which we had previously prevented via | |
1857 | an inverted dependency on checkpoint/restart, but clearly should have | |
1858 | guarded independently as upstream in 4.3 enabled it regardless of checkpoint/ | |
1859 | restart support. It can be used since 4.3 as an ASLR leak under RBAC to | |
1860 | processes of the same UID. Thanks to Mathias Krause for the report! | |
1861 | ||
1862 | fs/proc/base.c | 2 ++ | |
1863 | 1 file changed, 2 insertions(+) | |
1864 | ||
407eaf84 PK |
1865 | commit e4f1e517092222aa28179b20e14c0ddfb2796049 |
1866 | Author: Brad Spengler <spender@grsecurity.net> | |
1867 | Date: Thu Feb 18 19:32:39 2016 -0500 | |
1868 | ||
1869 | Update size_overflow hash table | |
1870 | ||
8d96b2b0 PK |
1871 | .../size_overflow_plugin/size_overflow_hash.data | 158 +++++++++++++++++---- |
1872 | 1 file changed, 131 insertions(+), 27 deletions(-) | |
407eaf84 PK |
1873 | |
1874 | commit d5f895ddfa903d0d70425b8c3d7ef649c7e6943b | |
1875 | Author: Brad Spengler <spender@grsecurity.net> | |
1876 | Date: Thu Feb 18 18:52:37 2016 -0500 | |
1877 | ||
1878 | Update size_overflow hash table | |
1879 | ||
8d96b2b0 PK |
1880 | .../size_overflow_plugin/size_overflow_hash.data | 293 +++++++++++++++++---- |
1881 | 1 file changed, 237 insertions(+), 56 deletions(-) | |
407eaf84 PK |
1882 | |
1883 | commit 9d198df724c306c36e254fe19d0957fb608c3fa2 | |
1884 | Author: Brad Spengler <spender@grsecurity.net> | |
1885 | Date: Thu Feb 18 18:23:03 2016 -0500 | |
1886 | ||
1887 | compile fix | |
1888 | ||
8d96b2b0 PK |
1889 | tools/gcc/randomize_layout_plugin.c | 2 +- |
1890 | 1 file changed, 1 insertion(+), 1 deletion(-) | |
407eaf84 PK |
1891 | |
1892 | commit 024d2af98b755712daff6ed7c49af921da4e8883 | |
1893 | Author: Brad Spengler <spender@grsecurity.net> | |
1894 | Date: Thu Feb 18 18:19:47 2016 -0500 | |
1895 | ||
1896 | compile fix | |
1897 | ||
8d96b2b0 PK |
1898 | tools/gcc/randomize_layout_plugin.c | 2 +- |
1899 | 1 file changed, 1 insertion(+), 1 deletion(-) | |
407eaf84 PK |
1900 | |
1901 | commit 14a7b3bb5c3d8c6ef70c3e0842a5adc7f0f3e2c8 | |
1902 | Author: Brad Spengler <spender@grsecurity.net> | |
1903 | Date: Thu Feb 18 18:16:32 2016 -0500 | |
1904 | ||
1905 | compile fix | |
1906 | ||
8d96b2b0 PK |
1907 | tools/gcc/randomize_layout_plugin.c | 9 +++++---- |
1908 | 1 file changed, 5 insertions(+), 4 deletions(-) | |
407eaf84 PK |
1909 | |
1910 | commit 9b2d0ee62bc66858c274f256c0502cbcbd34b2bf | |
1911 | Author: Brad Spengler <spender@grsecurity.net> | |
1912 | Date: Thu Feb 18 17:54:51 2016 -0500 | |
1913 | ||
1914 | Compile fix | |
1915 | ||
8d96b2b0 PK |
1916 | tools/gcc/randomize_layout_plugin.c | 2 +- |
1917 | 1 file changed, 1 insertion(+), 1 deletion(-) | |
407eaf84 PK |
1918 | |
1919 | commit 13823395101c4228ecded4b624583389ee13bfb3 | |
1920 | Author: Brad Spengler <spender@grsecurity.net> | |
1921 | Date: Thu Feb 18 17:35:21 2016 -0500 | |
1922 | ||
1923 | compile fix | |
1924 | ||
8d96b2b0 PK |
1925 | Makefile | 5 +---- |
1926 | 1 file changed, 1 insertion(+), 4 deletions(-) | |
407eaf84 PK |
1927 | |
1928 | commit 0316a42a37e67b0bc8a545c7a8b63db2d25f1ab0 | |
1929 | Merge: 45cbb7e 09d53c7 | |
1930 | Author: Brad Spengler <spender@grsecurity.net> | |
1931 | Date: Thu Feb 18 16:40:51 2016 -0500 | |
1932 | ||
1933 | Merge branch 'pax-test' into grsec-test | |
1934 | ||
1935 | Conflicts: | |
1936 | Makefile | |
1937 | include/linux/genl_magic_struct.h | |
1938 | scripts/mod/modpost.c | |
1939 | tools/gcc/size_overflow_plugin/size_overflow_hash.data | |
1940 | ||
1941 | commit 09d53c74140e87e886a28980cedbb7e771f2a356 | |
1942 | Author: Brad Spengler <spender@grsecurity.net> | |
1943 | Date: Thu Feb 18 16:24:02 2016 -0500 | |
1944 | ||
1945 | Update to pax-linux-4.4.2-test4.patch: | |
1946 | - fixed the initialization of ipc_namespace.shm_ctlmax to prevent the size overflow plugin from catching an integer truncation when calling shmem_kernel_file_setup, reported by Mathias Krause <minipli@ld-linux.so> | |
1947 | - moved gcc plugin related makefile bits into a separate file, by Emese | |
1948 | - changed modpost to report writable function pointers separately | |
1949 | - increased the size of mem_cgroup.numainfo_events to avoid a wraparound caught by REFCOUNT, reported by alexey vlasov | |
1950 | - reduced the size of the compat syscall entry points on amd64 | |
1951 | - fixed an integer signedness mixup in drbd caught by the size overflow plugin, reported by iamb and gaima (https://forums.grsecurity.net/viewtopic.php?f=3&t=4366) | |
1952 | - Emese regenerated the size overflow hash table for 4.4 | |
1953 | - all plugins now use the new pass generator headers | |
1954 | ||
8d96b2b0 PK |
1955 | Makefile | 73 +- |
1956 | arch/x86/entry/entry_64.S | 2 +- | |
1957 | arch/x86/entry/entry_64_compat.S | 48 +- | |
1958 | fs/exec.c | 3 + | |
1959 | include/linux/genl_magic_struct.h | 4 +- | |
1960 | include/linux/memcontrol.h | 2 +- | |
1961 | ipc/shm.c | 2 +- | |
1962 | mm/memcontrol.c | 6 +- | |
1963 | scripts/Makefile.extrawarn | 4 + | |
1964 | scripts/Makefile.gcc-plugins | 69 + | |
1965 | scripts/mod/modpost.c | 15 +- | |
1966 | tools/gcc/checker_plugin.c | 71 +- | |
1967 | tools/gcc/colorize_plugin.c | 65 +- | |
1968 | tools/gcc/constify_plugin.c | 65 +- | |
1969 | tools/gcc/gcc-generate-gimple-pass.h | 172 + | |
1970 | tools/gcc/gcc-generate-ipa-pass.h | 286 + | |
1971 | tools/gcc/gcc-generate-rtl-pass.h | 172 + | |
1972 | tools/gcc/initify_plugin.c | 74 +- | |
1973 | tools/gcc/kallocstat_plugin.c | 65 +- | |
1974 | tools/gcc/kernexec_plugin.c | 184 +- | |
1975 | tools/gcc/latent_entropy_plugin.c | 71 +- | |
1976 | tools/gcc/randomize_layout_seed.h | 1 - | |
1977 | .../disable_size_overflow_hash.h | 152601 ------------------ | |
1978 | .../insert_size_overflow_asm.c | 71 +- | |
1979 | .../size_overflow_plugin/intentional_overflow.c | 6 +- | |
1980 | tools/gcc/size_overflow_plugin/size_overflow.h | 20 +- | |
1981 | .../size_overflow_plugin/size_overflow_hash.data | 2898 +- | |
1982 | tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 94 +- | |
1983 | .../size_overflow_plugin/size_overflow_plugin.c | 14 +- | |
1984 | .../size_overflow_plugin/size_overflow_transform.c | 2 +- | |
1985 | .../size_overflow_transform_core.c | 2 +- | |
1986 | tools/gcc/stackleak_plugin.c | 132 +- | |
1987 | tools/gcc/structleak_plugin.c | 67 +- | |
407eaf84 PK |
1988 | 33 files changed, 2238 insertions(+), 155123 deletions(-) |
1989 | ||
1990 | commit 45cbb7e015a18625dafb019246e13e8cf3a18ace | |
1991 | Merge: 3b5448b 0c85110 | |
1992 | Author: Brad Spengler <spender@grsecurity.net> | |
1993 | Date: Wed Feb 17 19:11:25 2016 -0500 | |
1994 | ||
1995 | Merge branch 'pax-test' into grsec-test | |
1996 | ||
1997 | commit 0c851109f683896aaff8a310bbfa943272b47516 | |
1998 | Merge: 6cb4f49 1cb8570 | |
1999 | Author: Brad Spengler <spender@grsecurity.net> | |
2000 | Date: Wed Feb 17 19:11:21 2016 -0500 | |
2001 | ||
2002 | Merge branch 'linux-4.4.y' into pax-test | |
2003 | ||
2004 | commit 3b5448bd1d85025d19b2587902e4264eb212a0a3 | |
2005 | Author: Brad Spengler <spender@grsecurity.net> | |
2006 | Date: Mon Feb 15 18:02:40 2016 -0500 | |
2007 | ||
2008 | Fix a drbd bug reported by iamb on the forums: | |
2009 | https://forums.grsecurity.net/viewtopic.php?f=3&t=4366#p16032 | |
2010 | which caused a size_overflow report | |
2011 | ||
8d96b2b0 PK |
2012 | include/linux/genl_magic_struct.h | 4 ++-- |
2013 | 1 file changed, 2 insertions(+), 2 deletions(-) | |
407eaf84 PK |
2014 | |
2015 | commit 061fcd0e74441189a87bfe13b55fb02b98f7d7c0 | |
2016 | Author: Brad Spengler <spender@grsecurity.net> | |
2017 | Date: Mon Feb 15 13:20:38 2016 -0500 | |
2018 | ||
2019 | compile fix | |
2020 | ||
8d96b2b0 PK |
2021 | drivers/staging/wilc1000/host_interface.h | 1 + |
2022 | 1 file changed, 1 insertion(+) | |
407eaf84 PK |
2023 | |
2024 | commit 675f2dcbdd4ea3293eea9c42f0cc427b1c903fc8 | |
2025 | Author: Brad Spengler <spender@grsecurity.net> | |
2026 | Date: Mon Feb 15 12:54:52 2016 -0500 | |
2027 | ||
2028 | Update size_overflow hash table | |
2029 | ||
8d96b2b0 PK |
2030 | .../size_overflow_plugin/size_overflow_hash.data | 21 +++++++++++++++++---- |
2031 | 1 file changed, 17 insertions(+), 4 deletions(-) | |
407eaf84 PK |
2032 | |
2033 | commit c8c50394f0c9f2e9baaeb884a29be2057cadbf7b | |
2034 | Author: Brad Spengler <spender@grsecurity.net> | |
2035 | Date: Mon Feb 15 12:53:54 2016 -0500 | |
2036 | ||
2037 | compile fix | |
2038 | ||
8d96b2b0 PK |
2039 | drivers/staging/wilc1000/wilc_spi.c | 1 - |
2040 | drivers/staging/wilc1000/wilc_wlan.h | 2 +- | |
2041 | 2 files changed, 1 insertion(+), 2 deletions(-) | |
407eaf84 PK |
2042 | |
2043 | commit a9dd4481db099082967585be8e153899e5fd24c7 | |
2044 | Author: Brad Spengler <spender@grsecurity.net> | |
2045 | Date: Mon Feb 15 12:52:32 2016 -0500 | |
2046 | ||
2047 | compile fix | |
2048 | ||
8d96b2b0 PK |
2049 | fs/proc/fd.c | 2 -- |
2050 | 1 file changed, 2 deletions(-) | |
407eaf84 PK |
2051 | |
2052 | commit 5acb4fa0063460807096429f073181d1c5a3e566 | |
2053 | Author: Brad Spengler <spender@grsecurity.net> | |
2054 | Date: Mon Feb 15 12:32:13 2016 -0500 | |
2055 | ||
2056 | Update size_overflow hash table | |
2057 | ||
8d96b2b0 PK |
2058 | .../size_overflow_plugin/size_overflow_hash.data | 224 +++++++++++++++++---- |
2059 | 1 file changed, 182 insertions(+), 42 deletions(-) | |
407eaf84 PK |
2060 | |
2061 | commit c0bac9ff9af7ef753740622b5736684a32b49a9f | |
2062 | Author: Brad Spengler <spender@grsecurity.net> | |
2063 | Date: Mon Feb 15 12:31:16 2016 -0500 | |
2064 | ||
2065 | compile fix | |
2066 | ||
8d96b2b0 PK |
2067 | drivers/staging/wilc1000/wilc_spi.c | 1 + |
2068 | 1 file changed, 1 insertion(+) | |
407eaf84 PK |
2069 | |
2070 | commit 2f89ebdee131f6a6c85e611e5b993d4b19bc2673 | |
2071 | Author: Brad Spengler <spender@grsecurity.net> | |
2072 | Date: Mon Feb 15 12:28:36 2016 -0500 | |
2073 | ||
2074 | RANDSTRUCT compile fix | |
2075 | ||
8d96b2b0 PK |
2076 | drivers/staging/wilc1000/wilc_spi.c | 32 ++++++++++++++++---------------- |
2077 | 1 file changed, 16 insertions(+), 16 deletions(-) | |
407eaf84 PK |
2078 | |
2079 | commit 693be5d7f5b783f451499bbe83162aeb0f27a09f | |
2080 | Author: Brad Spengler <spender@grsecurity.net> | |
2081 | Date: Mon Feb 15 12:24:49 2016 -0500 | |
2082 | ||
2083 | RANDSTRUCT compile fix | |
2084 | ||
8d96b2b0 PK |
2085 | drivers/staging/wilc1000/wilc_sdio.c | 34 +++++++++++++++++----------------- |
2086 | 1 file changed, 17 insertions(+), 17 deletions(-) | |
407eaf84 PK |
2087 | |
2088 | commit bdf3dcd665c1a8ef9b69ad6525760c5160ec19a2 | |
2089 | Author: Hariprasad S <hariprasad@chelsio.com> | |
2090 | Date: Fri Dec 11 13:59:17 2015 +0530 | |
2091 | ||
2092 | iw_cxgb3: Fix incorrectly returning error on success | |
2093 | ||
2094 | The cxgb3_*_send() functions return NET_XMIT_ values, which are | |
2095 | positive integers values. So don't treat positive return values | |
2096 | as an error. | |
2097 | ||
2098 | Signed-off-by: Steve Wise <swise@opengridcomputing.com> | |
2099 | Signed-off-by: Hariprasad Shenai <hariprasad@chelsio.com> | |
2100 | Signed-off-by: Doug Ledford <dledford@redhat.com> | |
2101 | ||
8d96b2b0 PK |
2102 | drivers/infiniband/hw/cxgb3/iwch_cm.c | 4 ++-- |
2103 | 1 file changed, 2 insertions(+), 2 deletions(-) | |
407eaf84 PK |
2104 | |
2105 | commit 8705fe372dc21046ca3fc55381b70cffb4c60207 | |
2106 | Author: Daniel Borkmann <daniel@iogearbox.net> | |
2107 | Date: Wed Feb 10 16:47:11 2016 +0100 | |
2108 | ||
2109 | bpf: fix branch offset adjustment on backjumps after patching ctx expansion | |
2110 | ||
2111 | When ctx access is used, the kernel often needs to expand/rewrite | |
2112 | instructions, so after that patching, branch offsets have to be | |
2113 | adjusted for both forward and backward jumps in the new eBPF program, | |
2114 | but for backward jumps it fails to account the delta. Meaning, for | |
2115 | example, if the expansion happens exactly on the insn that sits at | |
2116 | the jump target, it doesn't fix up the back jump offset. | |
2117 | ||
2118 | Analysis on what the check in adjust_branches() is currently doing: | |
2119 | ||
2120 | /* adjust offset of jmps if necessary */ | |
2121 | if (i < pos && i + insn->off + 1 > pos) | |
2122 | insn->off += delta; | |
2123 | else if (i > pos && i + insn->off + 1 < pos) | |
2124 | insn->off -= delta; | |
2125 | ||
2126 | First condition (forward jumps): | |
2127 | ||
2128 | Before: After: | |
2129 | ||
2130 | insns[0] insns[0] | |
2131 | insns[1] <--- i/insn insns[1] <--- i/insn | |
2132 | insns[2] <--- pos insns[P] <--- pos | |
2133 | insns[3] insns[P] `------| delta | |
2134 | insns[4] <--- target_X insns[P] `-----| | |
2135 | insns[5] insns[3] | |
2136 | insns[4] <--- target_X | |
2137 | insns[5] | |
2138 | ||
2139 | First case is if we cross pos-boundary and the jump instruction was | |
2140 | before pos. This is handeled correctly. I.e. if i == pos, then this | |
2141 | would mean our jump that we currently check was the patchlet itself | |
2142 | that we just injected. Since such patchlets are self-contained and | |
2143 | have no awareness of any insns before or after the patched one, the | |
2144 | delta is correctly not adjusted. Also, for the second condition in | |
2145 | case of i + insn->off + 1 == pos, means we jump to that newly patched | |
2146 | instruction, so no offset adjustment are needed. That part is correct. | |
2147 | ||
2148 | Second condition (backward jumps): | |
2149 | ||
2150 | Before: After: | |
2151 | ||
2152 | insns[0] insns[0] | |
2153 | insns[1] <--- target_X insns[1] <--- target_X | |
2154 | insns[2] <--- pos <-- target_Y insns[P] <--- pos <-- target_Y | |
2155 | insns[3] insns[P] `------| delta | |
2156 | insns[4] <--- i/insn insns[P] `-----| | |
2157 | insns[5] insns[3] | |
2158 | insns[4] <--- i/insn | |
2159 | insns[5] | |
2160 | ||
2161 | Second interesting case is where we cross pos-boundary and the jump | |
2162 | instruction was after pos. Backward jump with i == pos would be | |
2163 | impossible and pose a bug somewhere in the patchlet, so the first | |
2164 | condition checking i > pos is okay only by itself. However, i + | |
2165 | insn->off + 1 < pos does not always work as intended to trigger the | |
2166 | adjustment. It works when jump targets would be far off where the | |
2167 | delta wouldn't matter. But, for example, where the fixed insn->off | |
2168 | before pointed to pos (target_Y), it now points to pos + delta, so | |
2169 | that additional room needs to be taken into account for the check. | |
2170 | This means that i) both tests here need to be adjusted into pos + delta, | |
2171 | and ii) for the second condition, the test needs to be <= as pos | |
2172 | itself can be a target in the backjump, too. | |
2173 | ||
2174 | Fixes: 9bac3d6d548e ("bpf: allow extended BPF programs access skb fields") | |
2175 | Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> | |
2176 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
2177 | ||
8d96b2b0 PK |
2178 | kernel/bpf/verifier.c | 2 +- |
2179 | 1 file changed, 1 insertion(+), 1 deletion(-) | |
407eaf84 PK |
2180 | |
2181 | commit 61b513b644116e77313addf65970db58f4981608 | |
2182 | Author: Ryan Ware <ware@linux.intel.com> | |
2183 | Date: Thu Feb 11 15:58:44 2016 -0800 | |
2184 | ||
2185 | EVM: Use crypto_memneq() for digest comparisons | |
2186 | ||
2187 | This patch fixes vulnerability CVE-2016-2085. The problem exists | |
2188 | because the vm_verify_hmac() function includes a use of memcmp(). | |
2189 | Unfortunately, this allows timing side channel attacks; specifically | |
2190 | a MAC forgery complexity drop from 2^128 to 2^12. This patch changes | |
2191 | the memcmp() to the cryptographically safe crypto_memneq(). | |
2192 | ||
2193 | Reported-by: Xiaofei Rex Guo <xiaofei.rex.guo@intel.com> | |
2194 | Signed-off-by: Ryan Ware <ware@linux.intel.com> | |
2195 | Cc: stable@vger.kernel.org | |
2196 | Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com> | |
2197 | Signed-off-by: James Morris <james.l.morris@oracle.com> | |
2198 | ||
8d96b2b0 PK |
2199 | security/integrity/evm/evm_main.c | 3 ++- |
2200 | 1 file changed, 2 insertions(+), 1 deletion(-) | |
407eaf84 PK |
2201 | |
2202 | commit 970b961e7d0684624f9c69f0b4367d5c76b65a63 | |
2203 | Author: Michael McConville <mmcco@mykolab.com> | |
2204 | Date: Fri Feb 5 20:46:25 2016 -0500 | |
2205 | ||
2206 | dscc4: Undefined signed int shift | |
2207 | ||
2208 | My analysis in the below mail applies, although the second part is | |
2209 | unnecessary because i isn't used in arithmetic operations here: | |
2210 | ||
2211 | https://marc.info/?l=openbsd-tech&m=145377854103866&w=2 | |
2212 | ||
2213 | Thanks for your time. | |
2214 | ||
2215 | Signed-off-by: Michael McConville <mmcco@mykolab.com> | |
2216 | Acked-by: Francois Romieu <romieu@fr.zoreil.com> | |
2217 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
2218 | ||
8d96b2b0 PK |
2219 | drivers/net/wan/dscc4.c | 2 +- |
2220 | 1 file changed, 1 insertion(+), 1 deletion(-) | |
407eaf84 PK |
2221 | |
2222 | commit d843df24b6680b600e87ebfea3b7b198b90b5a2a | |
2223 | Author: Andrey Konovalov <andreyknvl@gmail.com> | |
2224 | Date: Sat Feb 13 11:08:06 2016 +0300 | |
2225 | ||
2226 | ALSA: usb-audio: avoid freeing umidi object twice | |
2227 | ||
2228 | The 'umidi' object will be free'd on the error path by snd_usbmidi_free() | |
2229 | when tearing down the rawmidi interface. So we shouldn't try to free it | |
2230 | in snd_usbmidi_create() after having registered the rawmidi interface. | |
2231 | ||
2232 | Found by KASAN. | |
2233 | ||
2234 | Signed-off-by: Andrey Konovalov <andreyknvl@gmail.com> | |
2235 | Acked-by: Clemens Ladisch <clemens@ladisch.de> | |
2236 | Cc: <stable@vger.kernel.org> | |
2237 | Signed-off-by: Takashi Iwai <tiwai@suse.de> | |
2238 | ||
8d96b2b0 PK |
2239 | sound/usb/midi.c | 1 - |
2240 | 1 file changed, 1 deletion(-) | |
407eaf84 PK |
2241 | |
2242 | commit ed3a8ab1976674d56e258da93639e61f1446e703 | |
2243 | Author: zengtao <prime.zeng@huawei.com> | |
2244 | Date: Tue Feb 2 11:38:34 2016 +0800 | |
2245 | ||
2246 | cputime: Prevent 32bit overflow in time[val|spec]_to_cputime() | |
2247 | ||
2248 | The datatype __kernel_time_t is u32 on 32bit platform, so its subject to | |
2249 | overflows in the timeval/timespec to cputime conversion. | |
2250 | ||
2251 | Currently the following functions are affected: | |
2252 | 1. setitimer() | |
2253 | 2. timer_create/timer_settime() | |
2254 | 3. sys_clock_nanosleep | |
2255 | ||
2256 | This can happen on MIPS32 and ARM32 with "Full dynticks CPU time accounting" | |
2257 | enabled, which is required for CONFIG_NO_HZ_FULL. | |
2258 | ||
2259 | Enforce u64 conversion to prevent the overflow. | |
2260 | ||
2261 | Fixes: 31c1fc818715 ("ARM: Kconfig: allow full nohz CPU accounting") | |
2262 | Signed-off-by: zengtao <prime.zeng@huawei.com> | |
2263 | Reviewed-by: Arnd Bergmann <arnd@arndb.de> | |
2264 | Cc: <fweisbec@gmail.com> | |
2265 | Cc: stable@vger.kernel.org | |
2266 | Link: http://lkml.kernel.org/r/1454384314-154784-1-git-send-email-prime.zeng@huawei.com | |
2267 | Signed-off-by: Thomas Gleixner <tglx@linutronix.de> | |
2268 | ||
8d96b2b0 PK |
2269 | include/asm-generic/cputime_nsecs.h | 5 +++-- |
2270 | 1 file changed, 3 insertions(+), 2 deletions(-) | |
407eaf84 PK |
2271 | |
2272 | commit bf8a2de485da37d73850e7cfa31967b7798b6ce0 | |
2273 | Author: Brad Spengler <spender@grsecurity.net> | |
2274 | Date: Mon Feb 15 11:55:18 2016 -0500 | |
2275 | ||
2276 | Fix building with allnoconfig, don't make our added DATA_TO_TEXT mismatch warnings | |
2277 | count as actual mismatches | |
2278 | ||
8d96b2b0 PK |
2279 | scripts/mod/modpost.c | 3 ++- |
2280 | 1 file changed, 2 insertions(+), 1 deletion(-) | |
407eaf84 PK |
2281 | |
2282 | commit c9d82b6d0f1a2484fea0a516989dbdc6c55e5693 | |
2283 | Author: Brad Spengler <spender@grsecurity.net> | |
2284 | Date: Mon Feb 15 11:44:36 2016 -0500 | |
2285 | ||
2286 | Compile fix | |
2287 | ||
8d96b2b0 PK |
2288 | tools/gcc/randomize_layout_seed.h | 1 - |
2289 | 1 file changed, 1 deletion(-) | |
407eaf84 PK |
2290 | |
2291 | commit fb68cbb98732e6801e8fc8d1da1f1195e51ff077 | |
2292 | Author: Brad Spengler <spender@grsecurity.net> | |
2293 | Date: Mon Feb 15 11:27:32 2016 -0500 | |
2294 | ||
2295 | disable USELIB | |
2296 | ||
8d96b2b0 PK |
2297 | init/Kconfig | 3 ++- |
2298 | 1 file changed, 2 insertions(+), 1 deletion(-) | |
407eaf84 PK |
2299 | |
2300 | commit cbda9a44b7f92161eb1e444bf7fe2bbcbedaae65 | |
2301 | Author: Brad Spengler <spender@grsecurity.net> | |
2302 | Date: Mon Feb 15 11:23:56 2016 -0500 | |
2303 | ||
2304 | compile fix | |
2305 | ||
8d96b2b0 PK |
2306 | fs/proc/fd.c | 2 +- |
2307 | 1 file changed, 1 insertion(+), 1 deletion(-) | |
407eaf84 PK |
2308 | |
2309 | commit 5cf0a2e87ab7105d1ba01f55f7636fa2e1fa4bb4 | |
2310 | Author: Brad Spengler <spender@grsecurity.net> | |
2311 | Date: Mon Feb 15 11:19:26 2016 -0500 | |
2312 | ||
2313 | Initial import of grsecurity for Linux 4.4.1 | |
2314 | ||
2315 | Documentation/dontdiff | 2 + | |
2316 | Documentation/kernel-parameters.txt | 11 + | |
2317 | Documentation/sysctl/fs.txt | 23 + | |
2318 | Documentation/sysctl/kernel.txt | 15 + | |
2319 | Makefile | 18 +- | |
2320 | arch/alpha/include/asm/cache.h | 4 +- | |
2321 | arch/alpha/kernel/osf_sys.c | 12 +- | |
2322 | arch/arc/Kconfig | 1 + | |
2323 | arch/arm/Kconfig | 1 + | |
2324 | arch/arm/Kconfig.debug | 1 + | |
2325 | arch/arm/include/asm/thread_info.h | 7 +- | |
2326 | arch/arm/kernel/entry-common.S | 8 +- | |
2327 | arch/arm/kernel/process.c | 4 +- | |
2328 | arch/arm/kernel/ptrace.c | 9 + | |
2329 | arch/arm/kernel/traps.c | 7 +- | |
2330 | arch/arm/mm/Kconfig | 4 +- | |
2331 | arch/arm/mm/fault.c | 40 +- | |
2332 | arch/arm/mm/mmap.c | 8 +- | |
2333 | arch/arm/net/bpf_jit_32.c | 51 +- | |
2334 | arch/arm64/Kconfig.debug | 1 + | |
2335 | arch/avr32/include/asm/cache.h | 4 +- | |
2336 | arch/blackfin/Kconfig.debug | 1 + | |
2337 | arch/blackfin/include/asm/cache.h | 3 +- | |
2338 | arch/cris/include/arch-v10/arch/cache.h | 3 +- | |
2339 | arch/cris/include/arch-v32/arch/cache.h | 3 +- | |
2340 | arch/frv/include/asm/cache.h | 3 +- | |
2341 | arch/frv/mm/elf-fdpic.c | 4 +- | |
2342 | arch/hexagon/include/asm/cache.h | 6 +- | |
2343 | arch/ia64/Kconfig | 1 + | |
2344 | arch/ia64/include/asm/cache.h | 3 +- | |
2345 | arch/ia64/kernel/sys_ia64.c | 2 + | |
2346 | arch/ia64/mm/hugetlbpage.c | 2 + | |
2347 | arch/m32r/include/asm/cache.h | 4 +- | |
2348 | arch/m68k/include/asm/cache.h | 4 +- | |
2349 | arch/metag/mm/hugetlbpage.c | 1 + | |
2350 | arch/microblaze/include/asm/cache.h | 3 +- | |
2351 | arch/mips/Kconfig | 1 + | |
2352 | arch/mips/include/asm/cache.h | 3 +- | |
2353 | arch/mips/include/asm/thread_info.h | 11 +- | |
2354 | arch/mips/kernel/irq.c | 3 + | |
2355 | arch/mips/kernel/ptrace.c | 9 + | |
2356 | arch/mips/mm/mmap.c | 4 +- | |
2357 | arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +- | |
2358 | arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +- | |
2359 | arch/openrisc/include/asm/cache.h | 4 +- | |
2360 | arch/parisc/include/asm/cache.h | 3 + | |
2361 | arch/parisc/kernel/sys_parisc.c | 4 + | |
2362 | arch/powerpc/Kconfig | 1 + | |
2363 | arch/powerpc/include/asm/cache.h | 4 +- | |
2364 | arch/powerpc/include/asm/thread_info.h | 5 +- | |
2365 | arch/powerpc/kernel/Makefile | 2 + | |
2366 | arch/powerpc/kernel/irq.c | 3 + | |
2367 | arch/powerpc/kernel/process.c | 10 +- | |
2368 | arch/powerpc/kernel/ptrace.c | 14 + | |
2369 | arch/powerpc/kernel/traps.c | 5 + | |
2370 | arch/powerpc/mm/slice.c | 2 +- | |
2371 | arch/s390/Kconfig.debug | 1 + | |
2372 | arch/s390/include/asm/cache.h | 4 +- | |
2373 | arch/score/include/asm/cache.h | 4 +- | |
2374 | arch/sh/include/asm/cache.h | 3 +- | |
2375 | arch/sh/mm/mmap.c | 6 +- | |
2376 | arch/sparc/include/asm/cache.h | 4 +- | |
2377 | arch/sparc/include/asm/pgalloc_64.h | 1 + | |
2378 | arch/sparc/include/asm/thread_info_64.h | 8 +- | |
2379 | arch/sparc/kernel/process_32.c | 6 +- | |
2380 | arch/sparc/kernel/process_64.c | 8 +- | |
2381 | arch/sparc/kernel/ptrace_64.c | 14 + | |
2382 | arch/sparc/kernel/sys_sparc_64.c | 8 +- | |
2383 | arch/sparc/kernel/syscalls.S | 8 +- | |
2384 | arch/sparc/kernel/traps_32.c | 8 +- | |
2385 | arch/sparc/kernel/traps_64.c | 28 +- | |
2386 | arch/sparc/kernel/unaligned_64.c | 2 +- | |
2387 | arch/sparc/mm/fault_64.c | 2 +- | |
2388 | arch/sparc/mm/hugetlbpage.c | 15 +- | |
2389 | arch/tile/Kconfig | 1 + | |
2390 | arch/tile/include/asm/cache.h | 3 +- | |
2391 | arch/tile/mm/hugetlbpage.c | 2 + | |
2392 | arch/um/include/asm/cache.h | 3 +- | |
2393 | arch/unicore32/include/asm/cache.h | 6 +- | |
2394 | arch/x86/Kconfig | 21 + | |
2395 | arch/x86/Kconfig.debug | 2 + | |
2396 | arch/x86/entry/common.c | 14 + | |
2397 | arch/x86/entry/entry_32.S | 2 +- | |
2398 | arch/x86/entry/entry_64.S | 2 +- | |
2399 | arch/x86/ia32/ia32_aout.c | 2 + | |
2400 | arch/x86/include/asm/floppy.h | 20 +- | |
2401 | arch/x86/include/asm/fpu/types.h | 69 +- | |
2402 | arch/x86/include/asm/io.h | 2 +- | |
2403 | arch/x86/include/asm/page.h | 12 +- | |
2404 | arch/x86/include/asm/paravirt_types.h | 23 +- | |
2405 | arch/x86/include/asm/pgtable_types.h | 6 +- | |
2406 | arch/x86/include/asm/processor.h | 12 +- | |
2407 | arch/x86/include/asm/thread_info.h | 6 +- | |
2408 | arch/x86/include/asm/uaccess.h | 2 +- | |
2409 | arch/x86/kernel/dumpstack.c | 10 +- | |
2410 | arch/x86/kernel/dumpstack_32.c | 2 +- | |
2411 | arch/x86/kernel/dumpstack_64.c | 2 +- | |
2412 | arch/x86/kernel/ioport.c | 13 + | |
2413 | arch/x86/kernel/irq_32.c | 3 + | |
2414 | arch/x86/kernel/irq_64.c | 4 + | |
2415 | arch/x86/kernel/ldt.c | 18 + | |
2416 | arch/x86/kernel/msr.c | 10 + | |
2417 | arch/x86/kernel/ptrace.c | 14 + | |
2418 | arch/x86/kernel/signal.c | 9 +- | |
2419 | arch/x86/kernel/sys_i386_32.c | 9 +- | |
2420 | arch/x86/kernel/sys_x86_64.c | 8 +- | |
2421 | arch/x86/kernel/traps.c | 5 + | |
2422 | arch/x86/kernel/verify_cpu.S | 1 + | |
2423 | arch/x86/kernel/vm86_32.c | 15 + | |
2424 | arch/x86/mm/fault.c | 12 +- | |
2425 | arch/x86/mm/hugetlbpage.c | 15 +- | |
2426 | arch/x86/mm/init.c | 66 +- | |
2427 | arch/x86/mm/init_32.c | 6 +- | |
2428 | arch/x86/mm/pageattr.c | 4 +- | |
2429 | arch/x86/net/bpf_jit_comp.c | 4 + | |
2430 | arch/x86/platform/efi/efi_64.c | 2 +- | |
2431 | arch/x86/xen/Kconfig | 1 + | |
2432 | arch/xtensa/variants/dc232b/include/variant/core.h | 2 +- | |
2433 | arch/xtensa/variants/fsf/include/variant/core.h | 3 +- | |
2434 | crypto/scatterwalk.c | 10 +- | |
2435 | drivers/acpi/acpica/hwxfsleep.c | 11 +- | |
2436 | drivers/acpi/custom_method.c | 4 + | |
2437 | drivers/block/cciss.h | 30 +- | |
2438 | drivers/block/smart1,2.h | 40 +- | |
2439 | drivers/cdrom/cdrom.c | 2 +- | |
2440 | drivers/char/Kconfig | 4 +- | |
2441 | drivers/char/genrtc.c | 1 + | |
2442 | drivers/char/mem.c | 17 + | |
2443 | drivers/char/random.c | 5 +- | |
2444 | drivers/cpufreq/sparc-us3-cpufreq.c | 2 - | |
2445 | drivers/firewire/ohci.c | 4 + | |
2446 | drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +- | |
2447 | drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +- | |
2448 | drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +- | |
2449 | drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +- | |
2450 | drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +- | |
2451 | drivers/hid/hid-wiimote-debug.c | 2 +- | |
2452 | drivers/infiniband/hw/nes/nes_cm.c | 22 +- | |
2453 | drivers/iommu/Kconfig | 1 + | |
2454 | drivers/iommu/amd_iommu.c | 14 +- | |
2455 | drivers/isdn/gigaset/bas-gigaset.c | 32 +- | |
2456 | drivers/isdn/gigaset/ser-gigaset.c | 32 +- | |
2457 | drivers/isdn/gigaset/usb-gigaset.c | 32 +- | |
2458 | drivers/isdn/i4l/isdn_concap.c | 6 +- | |
2459 | drivers/isdn/i4l/isdn_x25iface.c | 16 +- | |
2460 | drivers/md/bcache/Kconfig | 1 + | |
2461 | drivers/md/raid5.c | 8 + | |
2462 | drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +- | |
2463 | drivers/media/platform/sti/c8sectpfe/Kconfig | 1 + | |
2464 | drivers/media/radio/radio-cadet.c | 5 +- | |
2465 | drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +- | |
2466 | drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +- | |
2467 | drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +- | |
2468 | drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +- | |
2469 | drivers/message/fusion/mptbase.c | 9 + | |
2470 | drivers/misc/sgi-xp/xp_main.c | 12 +- | |
2471 | drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +- | |
2472 | drivers/net/ppp/pptp.c | 34 +- | |
2473 | drivers/net/wan/lmc/lmc_media.c | 97 +- | |
2474 | drivers/net/wan/z85230.c | 24 +- | |
2475 | drivers/net/wireless/ath/ath9k/Kconfig | 1 - | |
2476 | drivers/net/wireless/zd1211rw/zd_usb.c | 2 +- | |
2477 | drivers/pci/proc.c | 9 + | |
2478 | drivers/platform/x86/asus-wmi.c | 12 + | |
2479 | drivers/rtc/rtc-dev.c | 3 + | |
2480 | drivers/scsi/bfa/bfa_fcs.c | 19 +- | |
2481 | drivers/scsi/bfa/bfa_fcs_lport.c | 29 +- | |
2482 | drivers/scsi/bfa/bfa_modules.h | 12 +- | |
2483 | drivers/scsi/hpsa.h | 40 +- | |
2484 | drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +- | |
2485 | drivers/staging/lustre/lustre/libcfs/module.c | 10 +- | |
2486 | drivers/tty/serial/uartlite.c | 4 +- | |
2487 | drivers/tty/sysrq.c | 2 +- | |
2488 | drivers/tty/tty_io.c | 4 + | |
2489 | drivers/tty/vt/keyboard.c | 22 +- | |
2490 | drivers/uio/uio.c | 6 +- | |
2491 | drivers/usb/core/hub.c | 5 + | |
2492 | drivers/usb/gadget/function/f_uac1.c | 1 + | |
2493 | drivers/usb/gadget/function/u_uac1.c | 1 + | |
2494 | drivers/usb/host/hwa-hc.c | 9 +- | |
2495 | drivers/usb/usbip/vhci_sysfs.c | 2 +- | |
2496 | drivers/video/fbdev/arcfb.c | 2 +- | |
2497 | drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +- | |
2498 | drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +- | |
2499 | drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +- | |
8d96b2b0 | 2500 | drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++---- |
407eaf84 PK |
2501 | drivers/xen/xenfs/xenstored.c | 5 + |
2502 | firmware/Makefile | 2 + | |
2503 | firmware/WHENCE | 20 +- | |
2504 | firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++ | |
2505 | firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++ | |
2506 | fs/attr.c | 4 + | |
2507 | fs/autofs4/waitq.c | 9 + | |
2508 | fs/binfmt_aout.c | 7 + | |
2509 | fs/binfmt_elf.c | 40 +- | |
2510 | fs/compat.c | 20 +- | |
2511 | fs/compat_ioctl.c | 253 +- | |
2512 | fs/coredump.c | 17 +- | |
2513 | fs/dcache.c | 3 + | |
2514 | fs/debugfs/inode.c | 11 +- | |
2515 | fs/exec.c | 231 +- | |
2516 | fs/ext2/balloc.c | 4 +- | |
2517 | fs/ext2/super.c | 8 +- | |
2518 | fs/ext4/balloc.c | 4 +- | |
2519 | fs/ext4/extents.c | 2 +- | |
2520 | fs/fcntl.c | 4 + | |
2521 | fs/fhandle.c | 3 +- | |
2522 | fs/file.c | 4 + | |
2523 | fs/filesystems.c | 4 + | |
2524 | fs/fs_struct.c | 20 +- | |
2525 | fs/hugetlbfs/inode.c | 24 +- | |
2526 | fs/inode.c | 8 +- | |
2527 | fs/internal.h | 7 + | |
2528 | fs/ioctl.c | 4 +- | |
2529 | fs/kernfs/dir.c | 6 + | |
2530 | fs/mount.h | 4 +- | |
2531 | fs/namei.c | 283 +- | |
2532 | fs/namespace.c | 24 + | |
2533 | fs/nfsd/nfscache.c | 2 +- | |
2534 | fs/open.c | 38 + | |
2535 | fs/overlayfs/inode.c | 3 + | |
2536 | fs/overlayfs/super.c | 6 +- | |
2537 | fs/pipe.c | 49 +- | |
2538 | fs/posix_acl.c | 15 +- | |
2539 | fs/proc/Kconfig | 10 +- | |
2540 | fs/proc/array.c | 69 +- | |
2541 | fs/proc/base.c | 186 +- | |
2542 | fs/proc/cmdline.c | 4 + | |
2543 | fs/proc/devices.c | 4 + | |
2544 | fs/proc/fd.c | 12 +- | |
2545 | fs/proc/generic.c | 64 + | |
2546 | fs/proc/inode.c | 17 + | |
2547 | fs/proc/internal.h | 11 +- | |
2548 | fs/proc/interrupts.c | 4 + | |
2549 | fs/proc/kcore.c | 3 + | |
2550 | fs/proc/namespaces.c | 4 +- | |
2551 | fs/proc/proc_net.c | 31 + | |
2552 | fs/proc/proc_sysctl.c | 52 +- | |
2553 | fs/proc/root.c | 8 + | |
2554 | fs/proc/stat.c | 69 +- | |
2555 | fs/proc/task_mmu.c | 66 +- | |
2556 | fs/readdir.c | 19 + | |
2557 | fs/reiserfs/item_ops.c | 24 +- | |
2558 | fs/reiserfs/super.c | 4 + | |
2559 | fs/select.c | 2 + | |
2560 | fs/seq_file.c | 30 +- | |
2561 | fs/stat.c | 20 +- | |
2562 | fs/sysfs/dir.c | 30 +- | |
2563 | fs/utimes.c | 7 + | |
2564 | fs/xattr.c | 26 +- | |
2565 | grsecurity/Kconfig | 1203 ++++ | |
2566 | grsecurity/Makefile | 54 + | |
2567 | grsecurity/gracl.c | 2757 +++++++++ | |
2568 | grsecurity/gracl_alloc.c | 105 + | |
2569 | grsecurity/gracl_cap.c | 127 + | |
2570 | grsecurity/gracl_compat.c | 269 + | |
2571 | grsecurity/gracl_fs.c | 448 ++ | |
2572 | grsecurity/gracl_ip.c | 386 ++ | |
2573 | grsecurity/gracl_learn.c | 207 + | |
2574 | grsecurity/gracl_policy.c | 1786 ++++++ | |
2575 | grsecurity/gracl_res.c | 68 + | |
2576 | grsecurity/gracl_segv.c | 304 + | |
2577 | grsecurity/gracl_shm.c | 40 + | |
2578 | grsecurity/grsec_chdir.c | 19 + | |
2579 | grsecurity/grsec_chroot.c | 467 ++ | |
2580 | grsecurity/grsec_disabled.c | 445 ++ | |
2581 | grsecurity/grsec_exec.c | 189 + | |
2582 | grsecurity/grsec_fifo.c | 26 + | |
2583 | grsecurity/grsec_fork.c | 23 + | |
2584 | grsecurity/grsec_init.c | 294 + | |
2585 | grsecurity/grsec_ipc.c | 48 + | |
2586 | grsecurity/grsec_link.c | 65 + | |
2587 | grsecurity/grsec_log.c | 340 + | |
2588 | grsecurity/grsec_mem.c | 48 + | |
2589 | grsecurity/grsec_mount.c | 65 + | |
2590 | grsecurity/grsec_pax.c | 47 + | |
2591 | grsecurity/grsec_proc.c | 20 + | |
2592 | grsecurity/grsec_ptrace.c | 30 + | |
2593 | grsecurity/grsec_sig.c | 245 + | |
2594 | grsecurity/grsec_sock.c | 244 + | |
2595 | grsecurity/grsec_sysctl.c | 497 ++ | |
2596 | grsecurity/grsec_time.c | 16 + | |
2597 | grsecurity/grsec_tpe.c | 78 + | |
2598 | grsecurity/grsec_tty.c | 18 + | |
2599 | grsecurity/grsec_usb.c | 15 + | |
2600 | grsecurity/grsum.c | 54 + | |
2601 | include/linux/binfmts.h | 5 +- | |
2602 | include/linux/capability.h | 13 + | |
2603 | include/linux/compiler-gcc.h | 5 + | |
2604 | include/linux/compiler.h | 8 + | |
2605 | include/linux/cred.h | 8 +- | |
2606 | include/linux/dcache.h | 5 +- | |
2607 | include/linux/fs.h | 26 +- | |
2608 | include/linux/fs_struct.h | 2 +- | |
2609 | include/linux/fsnotify.h | 6 + | |
8d96b2b0 | 2610 | include/linux/gracl.h | 342 ++ |
407eaf84 PK |
2611 | include/linux/gracl_compat.h | 156 + |
2612 | include/linux/gralloc.h | 9 + | |
2613 | include/linux/grdefs.h | 140 + | |
2614 | include/linux/grinternal.h | 231 + | |
2615 | include/linux/grmsg.h | 119 + | |
2616 | include/linux/grsecurity.h | 258 + | |
2617 | include/linux/grsock.h | 19 + | |
2618 | include/linux/ipc.h | 2 +- | |
2619 | include/linux/ipc_namespace.h | 2 +- | |
2620 | include/linux/kallsyms.h | 18 +- | |
2621 | include/linux/key-type.h | 4 +- | |
2622 | include/linux/kmod.h | 5 + | |
2623 | include/linux/kobject.h | 2 +- | |
2624 | include/linux/lsm_hooks.h | 4 +- | |
2625 | include/linux/mm.h | 12 + | |
2626 | include/linux/mm_types.h | 4 +- | |
2627 | include/linux/module.h | 5 +- | |
2628 | include/linux/mount.h | 2 +- | |
2629 | include/linux/msg.h | 2 +- | |
2630 | include/linux/netfilter/xt_gradm.h | 9 + | |
2631 | include/linux/path.h | 4 +- | |
2632 | include/linux/perf_event.h | 13 +- | |
2633 | include/linux/pid_namespace.h | 2 +- | |
2634 | include/linux/pipe_fs_i.h | 4 + | |
2635 | include/linux/poison.h | 2 +- | |
2636 | include/linux/printk.h | 2 +- | |
2637 | include/linux/proc_fs.h | 22 +- | |
2638 | include/linux/proc_ns.h | 2 +- | |
2639 | include/linux/ptrace.h | 24 +- | |
2640 | include/linux/radix-tree.h | 22 +- | |
2641 | include/linux/random.h | 2 +- | |
2642 | include/linux/rbtree_augmented.h | 4 +- | |
2643 | include/linux/scatterlist.h | 12 +- | |
2644 | include/linux/sched.h | 115 +- | |
2645 | include/linux/security.h | 1 + | |
2646 | include/linux/sem.h | 2 +- | |
2647 | include/linux/seq_file.h | 5 + | |
2648 | include/linux/shm.h | 6 +- | |
2649 | include/linux/shmem_fs.h | 5 +- | |
2650 | include/linux/skbuff.h | 3 + | |
2651 | include/linux/slab.h | 9 - | |
2652 | include/linux/sysctl.h | 8 +- | |
2653 | include/linux/thread_info.h | 6 +- | |
2654 | include/linux/tty.h | 2 +- | |
2655 | include/linux/tty_driver.h | 4 +- | |
2656 | include/linux/uidgid.h | 5 + | |
2657 | include/linux/user_namespace.h | 2 +- | |
2658 | include/linux/utsname.h | 2 +- | |
2659 | include/linux/vermagic.h | 16 +- | |
2660 | include/linux/vmalloc.h | 8 + | |
2661 | include/net/af_unix.h | 6 +- | |
2662 | include/net/ip.h | 2 +- | |
2663 | include/net/neighbour.h | 2 +- | |
2664 | include/net/net_namespace.h | 2 +- | |
2665 | include/net/netfilter/nf_conntrack_core.h | 8 +- | |
2666 | include/net/scm.h | 1 + | |
2667 | include/net/sock.h | 2 +- | |
2668 | include/trace/events/fs.h | 53 + | |
2669 | include/uapi/linux/personality.h | 1 + | |
2670 | init/Kconfig | 2 + | |
2671 | init/main.c | 46 +- | |
2672 | ipc/mqueue.c | 1 + | |
2673 | ipc/msg.c | 3 +- | |
2674 | ipc/msgutil.c | 4 +- | |
2675 | ipc/sem.c | 3 +- | |
2676 | ipc/shm.c | 26 +- | |
2677 | ipc/util.c | 6 + | |
2678 | kernel/auditsc.c | 2 +- | |
2679 | kernel/bpf/syscall.c | 10 +- | |
2680 | kernel/capability.c | 41 +- | |
2681 | kernel/cgroup.c | 5 +- | |
2682 | kernel/compat.c | 1 + | |
2683 | kernel/configs.c | 11 + | |
2684 | kernel/cred.c | 112 +- | |
2685 | kernel/events/core.c | 16 +- | |
2686 | kernel/exit.c | 10 +- | |
2687 | kernel/fork.c | 86 +- | |
2688 | kernel/futex.c | 6 +- | |
2689 | kernel/futex_compat.c | 2 +- | |
2690 | kernel/kallsyms.c | 9 + | |
2691 | kernel/kcmp.c | 8 +- | |
2692 | kernel/kexec_core.c | 2 +- | |
2693 | kernel/kmod.c | 96 +- | |
2694 | kernel/kprobes.c | 9 +- | |
2695 | kernel/ksysfs.c | 2 + | |
2696 | kernel/locking/lockdep_proc.c | 10 +- | |
2697 | kernel/module.c | 108 +- | |
2698 | kernel/panic.c | 4 +- | |
2699 | kernel/pid.c | 18 +- | |
2700 | kernel/power/Kconfig | 2 + | |
2701 | kernel/printk/printk.c | 7 +- | |
2702 | kernel/ptrace.c | 89 +- | |
2703 | kernel/resource.c | 10 + | |
2704 | kernel/sched/core.c | 11 +- | |
2705 | kernel/seccomp.c | 22 +- | |
2706 | kernel/signal.c | 37 +- | |
2707 | kernel/sys.c | 64 +- | |
2708 | kernel/sysctl.c | 186 +- | |
2709 | kernel/taskstats.c | 6 + | |
2710 | kernel/time/posix-timers.c | 8 + | |
2711 | kernel/time/time.c | 5 + | |
2712 | kernel/time/timekeeping.c | 3 + | |
2713 | kernel/time/timer_list.c | 13 +- | |
2714 | kernel/time/timer_stats.c | 10 +- | |
2715 | kernel/trace/Kconfig | 2 + | |
2716 | kernel/trace/trace_syscalls.c | 8 + | |
2717 | kernel/user_namespace.c | 15 + | |
2718 | lib/Kconfig.debug | 13 +- | |
2719 | lib/Kconfig.kasan | 2 +- | |
2720 | lib/is_single_threaded.c | 3 + | |
2721 | lib/list_debug.c | 65 +- | |
2722 | lib/nlattr.c | 2 + | |
2723 | lib/radix-tree.c | 12 +- | |
2724 | lib/rbtree.c | 4 +- | |
2725 | lib/vsprintf.c | 39 +- | |
2726 | localversion-grsec | 1 + | |
2727 | mm/Kconfig | 8 +- | |
2728 | mm/Kconfig.debug | 1 + | |
2729 | mm/filemap.c | 1 + | |
2730 | mm/kmemleak.c | 4 +- | |
2731 | mm/memory.c | 2 +- | |
2732 | mm/mempolicy.c | 12 +- | |
2733 | mm/migrate.c | 3 +- | |
2734 | mm/mlock.c | 11 +- | |
2735 | mm/mmap.c | 103 +- | |
2736 | mm/mprotect.c | 8 + | |
2737 | mm/oom_kill.c | 4 + | |
2738 | mm/page_alloc.c | 2 +- | |
2739 | mm/process_vm_access.c | 8 +- | |
2740 | mm/shmem.c | 11 +- | |
2741 | mm/slab.c | 14 +- | |
2742 | mm/slab_common.c | 2 +- | |
2743 | mm/slob.c | 12 + | |
2744 | mm/slub.c | 33 +- | |
2745 | mm/util.c | 3 + | |
2746 | mm/vmalloc.c | 82 +- | |
2747 | mm/vmstat.c | 29 +- | |
2748 | net/appletalk/atalk_proc.c | 2 +- | |
2749 | net/atm/lec.c | 6 +- | |
2750 | net/atm/mpoa_caches.c | 42 +- | |
2751 | net/can/bcm.c | 2 +- | |
2752 | net/can/proc.c | 2 +- | |
2753 | net/core/dev_ioctl.c | 7 +- | |
2754 | net/core/filter.c | 8 +- | |
2755 | net/core/net-procfs.c | 17 +- | |
2756 | net/core/pktgen.c | 2 +- | |
2757 | net/core/scm.c | 7 + | |
2758 | net/core/sock.c | 3 +- | |
2759 | net/core/sysctl_net_core.c | 2 +- | |
2760 | net/decnet/dn_dev.c | 2 +- | |
2761 | net/ipv4/Kconfig | 1 + | |
2762 | net/ipv4/devinet.c | 6 +- | |
2763 | net/ipv4/inet_hashtables.c | 4 + | |
2764 | net/ipv4/ip_input.c | 7 + | |
2765 | net/ipv4/ip_sockglue.c | 3 +- | |
2766 | net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +- | |
2767 | net/ipv4/route.c | 6 +- | |
2768 | net/ipv4/tcp_input.c | 6 +- | |
2769 | net/ipv4/tcp_ipv4.c | 24 +- | |
2770 | net/ipv4/tcp_minisocks.c | 9 +- | |
2771 | net/ipv4/tcp_timer.c | 11 + | |
2772 | net/ipv4/udp.c | 24 + | |
2773 | net/ipv6/Kconfig | 1 + | |
2774 | net/ipv6/addrconf.c | 13 +- | |
2775 | net/ipv6/proc.c | 2 +- | |
2776 | net/ipv6/tcp_ipv6.c | 23 +- | |
2777 | net/ipv6/udp.c | 7 + | |
2778 | net/ipx/ipx_proc.c | 2 +- | |
2779 | net/irda/irproc.c | 2 +- | |
2780 | net/iucv/af_iucv.c | 3 + | |
2781 | net/llc/llc_proc.c | 2 +- | |
2782 | net/netfilter/Kconfig | 10 + | |
2783 | net/netfilter/Makefile | 1 + | |
2784 | net/netfilter/nf_conntrack_core.c | 46 +- | |
2785 | net/netfilter/nf_conntrack_helper.c | 2 +- | |
2786 | net/netfilter/nf_conntrack_netlink.c | 2 +- | |
2787 | net/netfilter/xt_gradm.c | 51 + | |
2788 | net/netfilter/xt_hashlimit.c | 4 +- | |
2789 | net/netfilter/xt_recent.c | 2 +- | |
2790 | net/openvswitch/actions.c | 19 +- | |
2791 | net/sctp/sm_sideeffect.c | 11 +- | |
2792 | net/sctp/sm_statefuns.c | 17 +- | |
2793 | net/socket.c | 75 +- | |
2794 | net/sunrpc/Kconfig | 1 + | |
2795 | net/sunrpc/cache.c | 2 +- | |
2796 | net/sunrpc/stats.c | 2 +- | |
2797 | net/sysctl_net.c | 2 +- | |
2798 | net/unix/af_unix.c | 57 +- | |
2799 | net/unix/garbage.c | 8 +- | |
2800 | net/vmw_vsock/vmci_transport_notify.c | 30 +- | |
2801 | net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +- | |
2802 | net/x25/sysctl_net_x25.c | 2 +- | |
2803 | net/x25/x25_proc.c | 2 +- | |
2804 | scripts/package/Makefile | 2 +- | |
2805 | scripts/package/mkspec | 41 +- | |
2806 | security/Kconfig | 369 +- | |
2807 | security/apparmor/file.c | 4 +- | |
2808 | security/apparmor/lsm.c | 8 +- | |
2809 | security/commoncap.c | 36 +- | |
2810 | security/keys/internal.h | 2 +- | |
2811 | security/min_addr.c | 2 + | |
2812 | security/smack/smack_lsm.c | 8 +- | |
2813 | security/tomoyo/file.c | 12 +- | |
2814 | security/tomoyo/mount.c | 4 + | |
2815 | security/tomoyo/tomoyo.c | 20 +- | |
2816 | security/yama/Kconfig | 2 +- | |
2817 | security/yama/yama_lsm.c | 4 +- | |
2818 | sound/core/timer.c | 4 +- | |
2819 | sound/synth/emux/emux_seq.c | 14 +- | |
2820 | sound/usb/line6/driver.c | 40 +- | |
2821 | sound/usb/line6/toneport.c | 12 +- | |
2822 | tools/gcc/.gitignore | 1 + | |
2823 | tools/gcc/Makefile | 12 + | |
2824 | tools/gcc/gen-random-seed.sh | 8 + | |
2825 | tools/gcc/randomize_layout_plugin.c | 930 +++ | |
2826 | tools/gcc/size_overflow_plugin/.gitignore | 1 + | |
8d96b2b0 | 2827 | .../size_overflow_plugin/size_overflow_hash.data | 463 +- |
407eaf84 PK |
2828 | 513 files changed, 33007 insertions(+), 3251 deletions(-) |
2829 | ||
2830 | commit 6cb4f49b6a55cf16ae82685e1ab9b74c95b2f743 | |
2831 | Author: Brad Spengler <spender@grsecurity.net> | |
2832 | Date: Mon Feb 15 10:51:41 2016 -0500 | |
2833 | ||
2834 | Initial import of pax-linux-4.4.1-test3.patch | |
2835 | ||
8d96b2b0 PK |
2836 | Documentation/dontdiff | 46 +- |
2837 | Documentation/kbuild/makefiles.txt | 39 +- | |
2838 | Documentation/kernel-parameters.txt | 28 + | |
2839 | Makefile | 119 +- | |
2840 | arch/alpha/include/asm/atomic.h | 10 + | |
2841 | arch/alpha/include/asm/elf.h | 7 + | |
2842 | arch/alpha/include/asm/pgalloc.h | 6 + | |
2843 | arch/alpha/include/asm/pgtable.h | 11 + | |
2844 | arch/alpha/kernel/module.c | 2 +- | |
2845 | arch/alpha/kernel/osf_sys.c | 8 +- | |
2846 | arch/alpha/mm/fault.c | 141 +- | |
2847 | arch/arm/Kconfig | 3 +- | |
2848 | arch/arm/include/asm/atomic.h | 323 +- | |
2849 | arch/arm/include/asm/cache.h | 5 +- | |
2850 | arch/arm/include/asm/cacheflush.h | 2 +- | |
2851 | arch/arm/include/asm/checksum.h | 14 +- | |
2852 | arch/arm/include/asm/cmpxchg.h | 4 + | |
2853 | arch/arm/include/asm/cpuidle.h | 2 +- | |
2854 | arch/arm/include/asm/domain.h | 42 +- | |
2855 | arch/arm/include/asm/elf.h | 9 +- | |
2856 | arch/arm/include/asm/fncpy.h | 2 + | |
2857 | arch/arm/include/asm/futex.h | 1 + | |
2858 | arch/arm/include/asm/kmap_types.h | 2 +- | |
2859 | arch/arm/include/asm/mach/dma.h | 2 +- | |
2860 | arch/arm/include/asm/mach/map.h | 16 +- | |
2861 | arch/arm/include/asm/outercache.h | 2 +- | |
2862 | arch/arm/include/asm/page.h | 3 +- | |
2863 | arch/arm/include/asm/pgalloc.h | 20 + | |
2864 | arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +- | |
2865 | arch/arm/include/asm/pgtable-2level.h | 3 + | |
2866 | arch/arm/include/asm/pgtable-3level.h | 3 + | |
2867 | arch/arm/include/asm/pgtable.h | 54 +- | |
2868 | arch/arm/include/asm/smp.h | 2 +- | |
2869 | arch/arm/include/asm/thread_info.h | 3 + | |
2870 | arch/arm/include/asm/tls.h | 3 + | |
2871 | arch/arm/include/asm/uaccess.h | 113 +- | |
2872 | arch/arm/include/uapi/asm/ptrace.h | 2 +- | |
2873 | arch/arm/kernel/armksyms.c | 2 +- | |
2874 | arch/arm/kernel/cpuidle.c | 2 +- | |
2875 | arch/arm/kernel/entry-armv.S | 109 +- | |
2876 | arch/arm/kernel/entry-common.S | 40 +- | |
2877 | arch/arm/kernel/entry-header.S | 55 + | |
2878 | arch/arm/kernel/fiq.c | 3 + | |
2879 | arch/arm/kernel/module-plts.c | 7 +- | |
2880 | arch/arm/kernel/module.c | 38 +- | |
2881 | arch/arm/kernel/patch.c | 2 + | |
2882 | arch/arm/kernel/process.c | 92 +- | |
2883 | arch/arm/kernel/reboot.c | 1 + | |
2884 | arch/arm/kernel/setup.c | 20 +- | |
2885 | arch/arm/kernel/signal.c | 35 +- | |
2886 | arch/arm/kernel/smp.c | 2 +- | |
2887 | arch/arm/kernel/tcm.c | 4 +- | |
2888 | arch/arm/kernel/vmlinux.lds.S | 6 +- | |
2889 | arch/arm/kvm/arm.c | 8 +- | |
2890 | arch/arm/lib/copy_page.S | 1 + | |
2891 | arch/arm/lib/csumpartialcopyuser.S | 4 +- | |
2892 | arch/arm/lib/delay.c | 2 +- | |
2893 | arch/arm/lib/uaccess_with_memcpy.c | 4 +- | |
2894 | arch/arm/mach-exynos/suspend.c | 6 +- | |
2895 | arch/arm/mach-mvebu/coherency.c | 4 +- | |
2896 | arch/arm/mach-omap2/board-n8x0.c | 2 +- | |
2897 | arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +- | |
2898 | arch/arm/mach-omap2/omap-smp.c | 1 + | |
2899 | arch/arm/mach-omap2/omap_device.c | 4 +- | |
2900 | arch/arm/mach-omap2/omap_device.h | 4 +- | |
2901 | arch/arm/mach-omap2/omap_hwmod.c | 4 +- | |
2902 | arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +- | |
2903 | arch/arm/mach-omap2/wd_timer.c | 6 +- | |
2904 | arch/arm/mach-shmobile/platsmp-apmu.c | 5 +- | |
2905 | arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +- | |
2906 | arch/arm/mach-tegra/irq.c | 1 + | |
2907 | arch/arm/mach-ux500/pm.c | 1 + | |
2908 | arch/arm/mach-zynq/platsmp.c | 1 + | |
2909 | arch/arm/mm/Kconfig | 6 +- | |
2910 | arch/arm/mm/cache-l2x0.c | 2 +- | |
2911 | arch/arm/mm/context.c | 10 +- | |
2912 | arch/arm/mm/fault.c | 146 + | |
2913 | arch/arm/mm/fault.h | 12 + | |
2914 | arch/arm/mm/init.c | 39 + | |
2915 | arch/arm/mm/ioremap.c | 4 +- | |
2916 | arch/arm/mm/mmap.c | 30 +- | |
2917 | arch/arm/mm/mmu.c | 162 +- | |
2918 | arch/arm/net/bpf_jit_32.c | 3 + | |
2919 | arch/arm/plat-iop/setup.c | 2 +- | |
2920 | arch/arm/plat-omap/sram.c | 2 + | |
2921 | arch/arm64/include/asm/atomic.h | 10 + | |
2922 | arch/arm64/include/asm/percpu.h | 8 +- | |
2923 | arch/arm64/include/asm/pgalloc.h | 5 + | |
2924 | arch/arm64/include/asm/uaccess.h | 1 + | |
2925 | arch/arm64/mm/dma-mapping.c | 2 +- | |
2926 | arch/avr32/include/asm/elf.h | 8 +- | |
2927 | arch/avr32/include/asm/kmap_types.h | 4 +- | |
2928 | arch/avr32/mm/fault.c | 27 + | |
2929 | arch/frv/include/asm/atomic.h | 10 + | |
2930 | arch/frv/include/asm/kmap_types.h | 2 +- | |
2931 | arch/frv/mm/elf-fdpic.c | 3 +- | |
2932 | arch/ia64/Makefile | 1 + | |
2933 | arch/ia64/include/asm/atomic.h | 10 + | |
2934 | arch/ia64/include/asm/elf.h | 7 + | |
2935 | arch/ia64/include/asm/pgalloc.h | 12 + | |
2936 | arch/ia64/include/asm/pgtable.h | 13 +- | |
2937 | arch/ia64/include/asm/spinlock.h | 2 +- | |
2938 | arch/ia64/include/asm/uaccess.h | 27 +- | |
2939 | arch/ia64/kernel/module.c | 45 +- | |
2940 | arch/ia64/kernel/palinfo.c | 2 +- | |
2941 | arch/ia64/kernel/sys_ia64.c | 7 + | |
2942 | arch/ia64/kernel/vmlinux.lds.S | 2 +- | |
2943 | arch/ia64/mm/fault.c | 32 +- | |
2944 | arch/ia64/mm/init.c | 15 +- | |
2945 | arch/m32r/lib/usercopy.c | 6 + | |
2946 | arch/mips/cavium-octeon/dma-octeon.c | 2 +- | |
2947 | arch/mips/include/asm/atomic.h | 368 +- | |
2948 | arch/mips/include/asm/elf.h | 7 + | |
2949 | arch/mips/include/asm/exec.h | 2 +- | |
2950 | arch/mips/include/asm/hw_irq.h | 2 +- | |
2951 | arch/mips/include/asm/local.h | 57 + | |
2952 | arch/mips/include/asm/page.h | 2 +- | |
2953 | arch/mips/include/asm/pgalloc.h | 5 + | |
2954 | arch/mips/include/asm/pgtable.h | 3 + | |
2955 | arch/mips/include/asm/uaccess.h | 1 + | |
2956 | arch/mips/kernel/binfmt_elfn32.c | 7 + | |
2957 | arch/mips/kernel/binfmt_elfo32.c | 7 + | |
2958 | arch/mips/kernel/irq-gt641xx.c | 2 +- | |
2959 | arch/mips/kernel/irq.c | 6 +- | |
2960 | arch/mips/kernel/pm-cps.c | 2 +- | |
2961 | arch/mips/kernel/process.c | 12 - | |
2962 | arch/mips/kernel/sync-r4k.c | 24 +- | |
2963 | arch/mips/kernel/traps.c | 13 +- | |
2964 | arch/mips/mm/fault.c | 25 + | |
2965 | arch/mips/mm/mmap.c | 51 +- | |
2966 | arch/mips/sgi-ip27/ip27-nmi.c | 6 +- | |
2967 | arch/mips/sni/rm200.c | 2 +- | |
2968 | arch/mips/vr41xx/common/icu.c | 2 +- | |
2969 | arch/mips/vr41xx/common/irq.c | 4 +- | |
2970 | arch/parisc/include/asm/atomic.h | 10 + | |
2971 | arch/parisc/include/asm/elf.h | 7 + | |
2972 | arch/parisc/include/asm/pgalloc.h | 6 + | |
2973 | arch/parisc/include/asm/pgtable.h | 11 + | |
2974 | arch/parisc/include/asm/uaccess.h | 4 +- | |
2975 | arch/parisc/kernel/module.c | 50 +- | |
2976 | arch/parisc/kernel/sys_parisc.c | 15 + | |
2977 | arch/parisc/kernel/traps.c | 4 +- | |
2978 | arch/parisc/mm/fault.c | 140 +- | |
2979 | arch/powerpc/include/asm/atomic.h | 329 +- | |
2980 | arch/powerpc/include/asm/elf.h | 12 + | |
2981 | arch/powerpc/include/asm/exec.h | 2 +- | |
2982 | arch/powerpc/include/asm/kmap_types.h | 2 +- | |
2983 | arch/powerpc/include/asm/local.h | 46 + | |
2984 | arch/powerpc/include/asm/mman.h | 2 +- | |
2985 | arch/powerpc/include/asm/page.h | 8 +- | |
2986 | arch/powerpc/include/asm/page_64.h | 7 +- | |
2987 | arch/powerpc/include/asm/pgalloc-64.h | 7 + | |
2988 | arch/powerpc/include/asm/pgtable.h | 1 + | |
2989 | arch/powerpc/include/asm/pte-hash32.h | 1 + | |
2990 | arch/powerpc/include/asm/reg.h | 1 + | |
2991 | arch/powerpc/include/asm/smp.h | 2 +- | |
2992 | arch/powerpc/include/asm/spinlock.h | 42 +- | |
2993 | arch/powerpc/include/asm/uaccess.h | 141 +- | |
2994 | arch/powerpc/kernel/Makefile | 5 + | |
2995 | arch/powerpc/kernel/exceptions-64e.S | 4 +- | |
2996 | arch/powerpc/kernel/exceptions-64s.S | 2 +- | |
2997 | arch/powerpc/kernel/module_32.c | 15 +- | |
2998 | arch/powerpc/kernel/process.c | 46 - | |
2999 | arch/powerpc/kernel/signal_32.c | 2 +- | |
3000 | arch/powerpc/kernel/signal_64.c | 2 +- | |
3001 | arch/powerpc/kernel/traps.c | 21 + | |
3002 | arch/powerpc/kernel/vdso.c | 5 +- | |
3003 | arch/powerpc/lib/usercopy_64.c | 18 - | |
3004 | arch/powerpc/mm/fault.c | 56 +- | |
3005 | arch/powerpc/mm/mmap.c | 16 + | |
3006 | arch/powerpc/mm/slice.c | 13 +- | |
3007 | arch/powerpc/platforms/cell/spufs/file.c | 4 +- | |
3008 | arch/s390/include/asm/atomic.h | 10 + | |
3009 | arch/s390/include/asm/elf.h | 7 + | |
3010 | arch/s390/include/asm/exec.h | 2 +- | |
3011 | arch/s390/include/asm/uaccess.h | 13 +- | |
3012 | arch/s390/kernel/module.c | 22 +- | |
3013 | arch/s390/kernel/process.c | 20 - | |
3014 | arch/s390/mm/mmap.c | 16 + | |
3015 | arch/score/include/asm/exec.h | 2 +- | |
3016 | arch/score/kernel/process.c | 5 - | |
3017 | arch/sh/mm/mmap.c | 22 +- | |
3018 | arch/sparc/include/asm/atomic_64.h | 110 +- | |
3019 | arch/sparc/include/asm/cache.h | 2 +- | |
3020 | arch/sparc/include/asm/elf_32.h | 7 + | |
3021 | arch/sparc/include/asm/elf_64.h | 7 + | |
3022 | arch/sparc/include/asm/pgalloc_32.h | 1 + | |
3023 | arch/sparc/include/asm/pgalloc_64.h | 1 + | |
3024 | arch/sparc/include/asm/pgtable.h | 4 + | |
3025 | arch/sparc/include/asm/pgtable_32.h | 15 +- | |
3026 | arch/sparc/include/asm/pgtsrmmu.h | 5 + | |
3027 | arch/sparc/include/asm/setup.h | 4 +- | |
3028 | arch/sparc/include/asm/spinlock_64.h | 35 +- | |
3029 | arch/sparc/include/asm/thread_info_32.h | 1 + | |
3030 | arch/sparc/include/asm/thread_info_64.h | 2 + | |
3031 | arch/sparc/include/asm/uaccess.h | 1 + | |
3032 | arch/sparc/include/asm/uaccess_32.h | 28 +- | |
3033 | arch/sparc/include/asm/uaccess_64.h | 24 +- | |
3034 | arch/sparc/kernel/Makefile | 2 +- | |
3035 | arch/sparc/kernel/prom_common.c | 2 +- | |
3036 | arch/sparc/kernel/smp_64.c | 8 +- | |
3037 | arch/sparc/kernel/sys_sparc_32.c | 2 +- | |
3038 | arch/sparc/kernel/sys_sparc_64.c | 52 +- | |
3039 | arch/sparc/kernel/traps_64.c | 27 +- | |
3040 | arch/sparc/lib/Makefile | 2 +- | |
3041 | arch/sparc/lib/atomic_64.S | 57 +- | |
3042 | arch/sparc/lib/ksyms.c | 6 +- | |
3043 | arch/sparc/mm/Makefile | 2 +- | |
3044 | arch/sparc/mm/fault_32.c | 292 + | |
3045 | arch/sparc/mm/fault_64.c | 486 + | |
3046 | arch/sparc/mm/hugetlbpage.c | 22 +- | |
3047 | arch/sparc/mm/init_64.c | 10 +- | |
3048 | arch/tile/include/asm/atomic_64.h | 10 + | |
3049 | arch/tile/include/asm/uaccess.h | 4 +- | |
3050 | arch/um/Makefile | 4 + | |
3051 | arch/um/include/asm/kmap_types.h | 2 +- | |
3052 | arch/um/include/asm/page.h | 3 + | |
3053 | arch/um/include/asm/pgtable-3level.h | 1 + | |
3054 | arch/um/kernel/process.c | 16 - | |
3055 | arch/x86/Kconfig | 26 +- | |
3056 | arch/x86/Kconfig.cpu | 6 +- | |
3057 | arch/x86/Kconfig.debug | 4 +- | |
3058 | arch/x86/Makefile | 13 +- | |
3059 | arch/x86/boot/Makefile | 3 + | |
3060 | arch/x86/boot/bitops.h | 4 +- | |
3061 | arch/x86/boot/boot.h | 2 +- | |
3062 | arch/x86/boot/compressed/Makefile | 3 + | |
3063 | arch/x86/boot/compressed/efi_stub_32.S | 16 +- | |
3064 | arch/x86/boot/compressed/efi_thunk_64.S | 4 +- | |
3065 | arch/x86/boot/compressed/head_32.S | 4 +- | |
3066 | arch/x86/boot/compressed/head_64.S | 12 +- | |
3067 | arch/x86/boot/compressed/misc.c | 11 +- | |
3068 | arch/x86/boot/cpucheck.c | 16 +- | |
3069 | arch/x86/boot/header.S | 6 +- | |
3070 | arch/x86/boot/memory.c | 2 +- | |
3071 | arch/x86/boot/video-vesa.c | 1 + | |
3072 | arch/x86/boot/video.c | 2 +- | |
3073 | arch/x86/crypto/aes-x86_64-asm_64.S | 4 + | |
3074 | arch/x86/crypto/aesni-intel_asm.S | 106 +- | |
3075 | arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 + | |
3076 | arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 + | |
3077 | arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 + | |
3078 | arch/x86/crypto/camellia-x86_64-asm_64.S | 7 + | |
3079 | arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +- | |
3080 | arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +- | |
3081 | arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 2 + | |
3082 | arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 + | |
3083 | arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 + | |
3084 | arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 + | |
3085 | arch/x86/crypto/serpent-avx2-asm_64.S | 9 + | |
3086 | arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 + | |
3087 | arch/x86/crypto/sha1_ssse3_asm.S | 10 +- | |
3088 | arch/x86/crypto/sha256-avx-asm.S | 2 + | |
3089 | arch/x86/crypto/sha256-avx2-asm.S | 2 + | |
3090 | arch/x86/crypto/sha256-ssse3-asm.S | 2 + | |
3091 | arch/x86/crypto/sha512-avx-asm.S | 2 + | |
3092 | arch/x86/crypto/sha512-avx2-asm.S | 2 + | |
3093 | arch/x86/crypto/sha512-ssse3-asm.S | 2 + | |
3094 | arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +- | |
3095 | arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 + | |
3096 | arch/x86/crypto/twofish-x86_64-asm_64.S | 3 + | |
3097 | arch/x86/entry/calling.h | 86 +- | |
3098 | arch/x86/entry/common.c | 28 +- | |
3099 | arch/x86/entry/entry_32.S | 311 +- | |
3100 | arch/x86/entry/entry_64.S | 625 +- | |
3101 | arch/x86/entry/entry_64_compat.S | 67 +- | |
3102 | arch/x86/entry/thunk_64.S | 2 + | |
3103 | arch/x86/entry/vdso/Makefile | 2 +- | |
3104 | arch/x86/entry/vdso/vdso2c.h | 8 +- | |
3105 | arch/x86/entry/vdso/vma.c | 37 +- | |
3106 | arch/x86/entry/vsyscall/vsyscall_64.c | 20 +- | |
3107 | arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +- | |
3108 | arch/x86/ia32/ia32_signal.c | 23 +- | |
3109 | arch/x86/ia32/sys_ia32.c | 42 +- | |
3110 | arch/x86/include/asm/alternative-asm.h | 43 +- | |
3111 | arch/x86/include/asm/alternative.h | 4 +- | |
3112 | arch/x86/include/asm/apic.h | 2 +- | |
3113 | arch/x86/include/asm/apm.h | 4 +- | |
3114 | arch/x86/include/asm/atomic.h | 230 +- | |
3115 | arch/x86/include/asm/atomic64_32.h | 100 + | |
3116 | arch/x86/include/asm/atomic64_64.h | 164 +- | |
3117 | arch/x86/include/asm/bitops.h | 18 +- | |
3118 | arch/x86/include/asm/boot.h | 2 +- | |
3119 | arch/x86/include/asm/cache.h | 5 +- | |
3120 | arch/x86/include/asm/checksum_32.h | 12 +- | |
3121 | arch/x86/include/asm/cmpxchg.h | 39 + | |
3122 | arch/x86/include/asm/compat.h | 4 + | |
3123 | arch/x86/include/asm/cpufeature.h | 17 +- | |
3124 | arch/x86/include/asm/desc.h | 78 +- | |
3125 | arch/x86/include/asm/desc_defs.h | 6 + | |
3126 | arch/x86/include/asm/div64.h | 2 +- | |
3127 | arch/x86/include/asm/dma.h | 2 + | |
3128 | arch/x86/include/asm/elf.h | 33 +- | |
3129 | arch/x86/include/asm/emergency-restart.h | 2 +- | |
3130 | arch/x86/include/asm/fpu/internal.h | 42 +- | |
3131 | arch/x86/include/asm/fpu/types.h | 5 +- | |
3132 | arch/x86/include/asm/futex.h | 14 +- | |
3133 | arch/x86/include/asm/hw_irq.h | 4 +- | |
3134 | arch/x86/include/asm/i8259.h | 2 +- | |
3135 | arch/x86/include/asm/io.h | 22 +- | |
3136 | arch/x86/include/asm/irqflags.h | 5 + | |
3137 | arch/x86/include/asm/kprobes.h | 9 +- | |
3138 | arch/x86/include/asm/local.h | 106 +- | |
3139 | arch/x86/include/asm/mman.h | 15 + | |
3140 | arch/x86/include/asm/mmu.h | 14 +- | |
3141 | arch/x86/include/asm/mmu_context.h | 133 +- | |
3142 | arch/x86/include/asm/module.h | 17 +- | |
3143 | arch/x86/include/asm/nmi.h | 19 +- | |
3144 | arch/x86/include/asm/page.h | 1 + | |
3145 | arch/x86/include/asm/page_32.h | 12 +- | |
3146 | arch/x86/include/asm/page_64.h | 14 +- | |
3147 | arch/x86/include/asm/paravirt.h | 46 +- | |
3148 | arch/x86/include/asm/paravirt_types.h | 15 +- | |
3149 | arch/x86/include/asm/pgalloc.h | 23 + | |
3150 | arch/x86/include/asm/pgtable-2level.h | 2 + | |
3151 | arch/x86/include/asm/pgtable-3level.h | 7 + | |
3152 | arch/x86/include/asm/pgtable.h | 126 +- | |
3153 | arch/x86/include/asm/pgtable_32.h | 14 +- | |
3154 | arch/x86/include/asm/pgtable_32_types.h | 24 +- | |
3155 | arch/x86/include/asm/pgtable_64.h | 23 +- | |
3156 | arch/x86/include/asm/pgtable_64_types.h | 5 + | |
3157 | arch/x86/include/asm/pgtable_types.h | 26 +- | |
3158 | arch/x86/include/asm/pmem.h | 2 +- | |
3159 | arch/x86/include/asm/preempt.h | 2 +- | |
3160 | arch/x86/include/asm/processor.h | 57 +- | |
3161 | arch/x86/include/asm/ptrace.h | 15 +- | |
3162 | arch/x86/include/asm/realmode.h | 4 +- | |
3163 | arch/x86/include/asm/reboot.h | 10 +- | |
3164 | arch/x86/include/asm/rmwcc.h | 84 +- | |
3165 | arch/x86/include/asm/rwsem.h | 60 +- | |
3166 | arch/x86/include/asm/segment.h | 27 +- | |
3167 | arch/x86/include/asm/smap.h | 43 + | |
3168 | arch/x86/include/asm/smp.h | 14 +- | |
3169 | arch/x86/include/asm/stackprotector.h | 4 +- | |
3170 | arch/x86/include/asm/stacktrace.h | 34 +- | |
3171 | arch/x86/include/asm/switch_to.h | 4 +- | |
3172 | arch/x86/include/asm/sys_ia32.h | 6 +- | |
3173 | arch/x86/include/asm/thread_info.h | 27 +- | |
3174 | arch/x86/include/asm/tlbflush.h | 77 +- | |
3175 | arch/x86/include/asm/uaccess.h | 210 +- | |
3176 | arch/x86/include/asm/uaccess_32.h | 28 +- | |
3177 | arch/x86/include/asm/uaccess_64.h | 169 +- | |
3178 | arch/x86/include/asm/word-at-a-time.h | 2 +- | |
3179 | arch/x86/include/asm/x86_init.h | 10 +- | |
3180 | arch/x86/include/asm/xen/page.h | 2 +- | |
3181 | arch/x86/include/uapi/asm/e820.h | 2 +- | |
3182 | arch/x86/kernel/Makefile | 2 +- | |
3183 | arch/x86/kernel/acpi/boot.c | 4 +- | |
3184 | arch/x86/kernel/acpi/sleep.c | 4 + | |
3185 | arch/x86/kernel/acpi/wakeup_32.S | 6 +- | |
3186 | arch/x86/kernel/alternative.c | 124 +- | |
3187 | arch/x86/kernel/apic/apic.c | 4 +- | |
3188 | arch/x86/kernel/apic/apic_flat_64.c | 6 +- | |
3189 | arch/x86/kernel/apic/apic_noop.c | 2 +- | |
3190 | arch/x86/kernel/apic/bigsmp_32.c | 2 +- | |
3191 | arch/x86/kernel/apic/io_apic.c | 8 +- | |
3192 | arch/x86/kernel/apic/msi.c | 2 +- | |
3193 | arch/x86/kernel/apic/probe_32.c | 4 +- | |
3194 | arch/x86/kernel/apic/vector.c | 2 + | |
3195 | arch/x86/kernel/apic/x2apic_cluster.c | 2 +- | |
3196 | arch/x86/kernel/apic/x2apic_phys.c | 2 +- | |
3197 | arch/x86/kernel/apic/x2apic_uv_x.c | 2 +- | |
3198 | arch/x86/kernel/apm_32.c | 21 +- | |
3199 | arch/x86/kernel/asm-offsets.c | 20 + | |
3200 | arch/x86/kernel/asm-offsets_64.c | 1 + | |
3201 | arch/x86/kernel/cpu/Makefile | 4 - | |
3202 | arch/x86/kernel/cpu/amd.c | 2 +- | |
3203 | arch/x86/kernel/cpu/bugs_64.c | 2 + | |
3204 | arch/x86/kernel/cpu/common.c | 202 +- | |
3205 | arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +- | |
3206 | arch/x86/kernel/cpu/mcheck/mce.c | 34 +- | |
3207 | arch/x86/kernel/cpu/mcheck/p5.c | 3 + | |
3208 | arch/x86/kernel/cpu/mcheck/winchip.c | 3 + | |
3209 | arch/x86/kernel/cpu/microcode/intel.c | 4 +- | |
3210 | arch/x86/kernel/cpu/mtrr/generic.c | 6 +- | |
3211 | arch/x86/kernel/cpu/mtrr/main.c | 2 +- | |
3212 | arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +- | |
3213 | arch/x86/kernel/cpu/perf_event.c | 10 +- | |
3214 | arch/x86/kernel/cpu/perf_event.h | 2 +- | |
3215 | arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +- | |
3216 | arch/x86/kernel/cpu/perf_event_intel.c | 34 +- | |
3217 | arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +- | |
3218 | arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +- | |
3219 | arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +- | |
3220 | arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +- | |
3221 | arch/x86/kernel/cpu/perf_event_intel_pt.c | 42 +- | |
3222 | arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +- | |
3223 | arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +- | |
3224 | arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +- | |
3225 | arch/x86/kernel/crash_dump_64.c | 2 +- | |
3226 | arch/x86/kernel/doublefault.c | 8 +- | |
3227 | arch/x86/kernel/dumpstack.c | 24 +- | |
3228 | arch/x86/kernel/dumpstack_32.c | 25 +- | |
3229 | arch/x86/kernel/dumpstack_64.c | 62 +- | |
3230 | arch/x86/kernel/e820.c | 4 +- | |
3231 | arch/x86/kernel/early_printk.c | 1 + | |
3232 | arch/x86/kernel/espfix_64.c | 44 +- | |
3233 | arch/x86/kernel/fpu/core.c | 24 +- | |
3234 | arch/x86/kernel/fpu/init.c | 40 +- | |
3235 | arch/x86/kernel/fpu/regset.c | 22 +- | |
3236 | arch/x86/kernel/fpu/signal.c | 20 +- | |
3237 | arch/x86/kernel/fpu/xstate.c | 6 +- | |
3238 | arch/x86/kernel/ftrace.c | 18 +- | |
3239 | arch/x86/kernel/head64.c | 14 +- | |
3240 | arch/x86/kernel/head_32.S | 235 +- | |
3241 | arch/x86/kernel/head_64.S | 173 +- | |
3242 | arch/x86/kernel/i386_ksyms_32.c | 12 + | |
3243 | arch/x86/kernel/i8259.c | 10 +- | |
3244 | arch/x86/kernel/io_delay.c | 2 +- | |
3245 | arch/x86/kernel/ioport.c | 2 +- | |
3246 | arch/x86/kernel/irq.c | 8 +- | |
3247 | arch/x86/kernel/irq_32.c | 45 +- | |
3248 | arch/x86/kernel/jump_label.c | 10 +- | |
3249 | arch/x86/kernel/kgdb.c | 21 +- | |
3250 | arch/x86/kernel/kprobes/core.c | 28 +- | |
3251 | arch/x86/kernel/kprobes/opt.c | 16 +- | |
3252 | arch/x86/kernel/ksysfs.c | 2 +- | |
3253 | arch/x86/kernel/kvmclock.c | 20 +- | |
3254 | arch/x86/kernel/ldt.c | 25 + | |
3255 | arch/x86/kernel/livepatch.c | 11 +- | |
3256 | arch/x86/kernel/machine_kexec_32.c | 6 +- | |
3257 | arch/x86/kernel/mcount_64.S | 19 +- | |
3258 | arch/x86/kernel/module.c | 78 +- | |
3259 | arch/x86/kernel/msr.c | 2 +- | |
3260 | arch/x86/kernel/nmi.c | 34 +- | |
3261 | arch/x86/kernel/nmi_selftest.c | 4 +- | |
3262 | arch/x86/kernel/paravirt-spinlocks.c | 2 +- | |
3263 | arch/x86/kernel/paravirt.c | 45 +- | |
3264 | arch/x86/kernel/paravirt_patch_64.c | 8 + | |
3265 | arch/x86/kernel/pci-calgary_64.c | 2 +- | |
3266 | arch/x86/kernel/pci-iommu_table.c | 2 +- | |
3267 | arch/x86/kernel/pci-swiotlb.c | 2 +- | |
3268 | arch/x86/kernel/process.c | 80 +- | |
3269 | arch/x86/kernel/process_32.c | 29 +- | |
3270 | arch/x86/kernel/process_64.c | 14 +- | |
3271 | arch/x86/kernel/ptrace.c | 20 +- | |
3272 | arch/x86/kernel/pvclock.c | 8 +- | |
3273 | arch/x86/kernel/reboot.c | 44 +- | |
3274 | arch/x86/kernel/reboot_fixups_32.c | 2 +- | |
3275 | arch/x86/kernel/relocate_kernel_64.S | 3 +- | |
3276 | arch/x86/kernel/setup.c | 29 +- | |
3277 | arch/x86/kernel/setup_percpu.c | 29 +- | |
3278 | arch/x86/kernel/signal.c | 17 +- | |
3279 | arch/x86/kernel/smp.c | 2 +- | |
3280 | arch/x86/kernel/smpboot.c | 29 +- | |
3281 | arch/x86/kernel/step.c | 6 +- | |
3282 | arch/x86/kernel/sys_i386_32.c | 184 + | |
3283 | arch/x86/kernel/sys_x86_64.c | 22 +- | |
3284 | arch/x86/kernel/tboot.c | 22 +- | |
3285 | arch/x86/kernel/time.c | 8 +- | |
3286 | arch/x86/kernel/tls.c | 7 +- | |
3287 | arch/x86/kernel/tracepoint.c | 4 +- | |
3288 | arch/x86/kernel/traps.c | 53 +- | |
3289 | arch/x86/kernel/tsc.c | 2 +- | |
3290 | arch/x86/kernel/uprobes.c | 4 +- | |
3291 | arch/x86/kernel/vm86_32.c | 6 +- | |
3292 | arch/x86/kernel/vmlinux.lds.S | 153 +- | |
3293 | arch/x86/kernel/x8664_ksyms_64.c | 6 +- | |
3294 | arch/x86/kernel/x86_init.c | 6 +- | |
3295 | arch/x86/kvm/cpuid.c | 21 +- | |
3296 | arch/x86/kvm/emulate.c | 6 +- | |
3297 | arch/x86/kvm/i8259.c | 10 +- | |
3298 | arch/x86/kvm/ioapic.c | 2 + | |
3299 | arch/x86/kvm/lapic.c | 2 +- | |
3300 | arch/x86/kvm/paging_tmpl.h | 2 +- | |
3301 | arch/x86/kvm/svm.c | 10 +- | |
3302 | arch/x86/kvm/vmx.c | 62 +- | |
3303 | arch/x86/kvm/x86.c | 44 +- | |
3304 | arch/x86/lguest/boot.c | 3 +- | |
3305 | arch/x86/lib/atomic64_386_32.S | 164 + | |
3306 | arch/x86/lib/atomic64_cx8_32.S | 98 +- | |
3307 | arch/x86/lib/checksum_32.S | 99 +- | |
3308 | arch/x86/lib/clear_page_64.S | 3 + | |
3309 | arch/x86/lib/cmpxchg16b_emu.S | 3 + | |
3310 | arch/x86/lib/copy_page_64.S | 14 +- | |
3311 | arch/x86/lib/copy_user_64.S | 66 +- | |
3312 | arch/x86/lib/csum-copy_64.S | 14 +- | |
3313 | arch/x86/lib/csum-wrappers_64.c | 8 +- | |
3314 | arch/x86/lib/getuser.S | 74 +- | |
3315 | arch/x86/lib/insn.c | 8 +- | |
3316 | arch/x86/lib/iomap_copy_64.S | 2 + | |
3317 | arch/x86/lib/memcpy_64.S | 6 + | |
3318 | arch/x86/lib/memmove_64.S | 3 +- | |
3319 | arch/x86/lib/memset_64.S | 3 + | |
3320 | arch/x86/lib/mmx_32.c | 243 +- | |
3321 | arch/x86/lib/msr-reg.S | 2 + | |
3322 | arch/x86/lib/putuser.S | 87 +- | |
3323 | arch/x86/lib/rwsem.S | 6 +- | |
3324 | arch/x86/lib/usercopy_32.c | 359 +- | |
3325 | arch/x86/lib/usercopy_64.c | 22 +- | |
3326 | arch/x86/math-emu/fpu_aux.c | 2 +- | |
3327 | arch/x86/math-emu/fpu_entry.c | 4 +- | |
3328 | arch/x86/math-emu/fpu_system.h | 2 +- | |
3329 | arch/x86/mm/Makefile | 4 + | |
3330 | arch/x86/mm/extable.c | 26 +- | |
3331 | arch/x86/mm/fault.c | 570 +- | |
3332 | arch/x86/mm/gup.c | 6 +- | |
3333 | arch/x86/mm/highmem_32.c | 6 + | |
3334 | arch/x86/mm/hugetlbpage.c | 24 +- | |
3335 | arch/x86/mm/init.c | 111 +- | |
3336 | arch/x86/mm/init_32.c | 111 +- | |
3337 | arch/x86/mm/init_64.c | 46 +- | |
3338 | arch/x86/mm/iomap_32.c | 4 + | |
3339 | arch/x86/mm/ioremap.c | 52 +- | |
3340 | arch/x86/mm/kmemcheck/kmemcheck.c | 4 +- | |
3341 | arch/x86/mm/mmap.c | 40 +- | |
3342 | arch/x86/mm/mmio-mod.c | 10 +- | |
3343 | arch/x86/mm/mpx.c | 6 +- | |
3344 | arch/x86/mm/numa.c | 4 +- | |
3345 | arch/x86/mm/pageattr.c | 42 +- | |
3346 | arch/x86/mm/pat.c | 12 +- | |
3347 | arch/x86/mm/pat_rbtree.c | 2 +- | |
3348 | arch/x86/mm/pf_in.c | 10 +- | |
3349 | arch/x86/mm/pgtable.c | 214 +- | |
3350 | arch/x86/mm/pgtable_32.c | 3 + | |
3351 | arch/x86/mm/setup_nx.c | 7 + | |
3352 | arch/x86/mm/tlb.c | 4 + | |
3353 | arch/x86/mm/uderef_64.c | 37 + | |
3354 | arch/x86/net/bpf_jit.S | 11 + | |
3355 | arch/x86/net/bpf_jit_comp.c | 13 +- | |
3356 | arch/x86/oprofile/backtrace.c | 6 +- | |
3357 | arch/x86/oprofile/nmi_int.c | 8 +- | |
3358 | arch/x86/oprofile/op_model_amd.c | 8 +- | |
3359 | arch/x86/oprofile/op_model_ppro.c | 7 +- | |
3360 | arch/x86/oprofile/op_x86_model.h | 2 +- | |
3361 | arch/x86/pci/intel_mid_pci.c | 2 +- | |
3362 | arch/x86/pci/irq.c | 8 +- | |
3363 | arch/x86/pci/pcbios.c | 144 +- | |
3364 | arch/x86/platform/efi/efi_32.c | 24 + | |
3365 | arch/x86/platform/efi/efi_64.c | 26 +- | |
3366 | arch/x86/platform/efi/efi_stub_32.S | 64 +- | |
3367 | arch/x86/platform/efi/efi_stub_64.S | 2 + | |
3368 | arch/x86/platform/intel-mid/intel-mid.c | 5 +- | |
3369 | arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +- | |
3370 | arch/x86/platform/intel-mid/mfld.c | 4 +- | |
3371 | arch/x86/platform/intel-mid/mrfl.c | 2 +- | |
3372 | arch/x86/platform/intel-quark/imr_selftest.c | 2 +- | |
3373 | arch/x86/platform/olpc/olpc_dt.c | 2 +- | |
3374 | arch/x86/power/cpu.c | 11 +- | |
3375 | arch/x86/realmode/init.c | 10 +- | |
3376 | arch/x86/realmode/rm/Makefile | 3 + | |
3377 | arch/x86/realmode/rm/header.S | 4 +- | |
3378 | arch/x86/realmode/rm/reboot.S | 4 + | |
3379 | arch/x86/realmode/rm/trampoline_32.S | 12 +- | |
3380 | arch/x86/realmode/rm/trampoline_64.S | 3 +- | |
3381 | arch/x86/realmode/rm/wakeup_asm.S | 5 +- | |
3382 | arch/x86/tools/Makefile | 2 +- | |
3383 | arch/x86/tools/relocs.c | 96 +- | |
3384 | arch/x86/um/mem_32.c | 2 +- | |
3385 | arch/x86/um/tls_32.c | 2 +- | |
3386 | arch/x86/xen/enlighten.c | 50 +- | |
3387 | arch/x86/xen/mmu.c | 19 +- | |
3388 | arch/x86/xen/smp.c | 16 +- | |
3389 | arch/x86/xen/xen-asm_32.S | 2 +- | |
3390 | arch/x86/xen/xen-head.S | 11 + | |
3391 | arch/x86/xen/xen-ops.h | 2 - | |
3392 | block/bio.c | 4 +- | |
3393 | block/blk-cgroup.c | 18 +- | |
3394 | block/blk-iopoll.c | 2 +- | |
3395 | block/blk-map.c | 2 +- | |
3396 | block/blk-softirq.c | 2 +- | |
3397 | block/bsg.c | 12 +- | |
3398 | block/cfq-iosched.c | 4 +- | |
3399 | block/compat_ioctl.c | 4 +- | |
3400 | block/genhd.c | 9 +- | |
3401 | block/partitions/efi.c | 8 +- | |
3402 | block/scsi_ioctl.c | 29 +- | |
3403 | crypto/cryptd.c | 4 +- | |
3404 | crypto/crypto_user.c | 8 +- | |
3405 | crypto/pcrypt.c | 2 +- | |
3406 | crypto/zlib.c | 12 +- | |
3407 | drivers/acpi/acpi_video.c | 2 +- | |
3408 | drivers/acpi/apei/apei-internal.h | 2 +- | |
3409 | drivers/acpi/apei/ghes.c | 10 +- | |
3410 | drivers/acpi/bgrt.c | 6 +- | |
3411 | drivers/acpi/blacklist.c | 4 +- | |
3412 | drivers/acpi/bus.c | 4 +- | |
3413 | drivers/acpi/device_pm.c | 4 +- | |
3414 | drivers/acpi/ec.c | 2 +- | |
3415 | drivers/acpi/pci_slot.c | 2 +- | |
3416 | drivers/acpi/processor_idle.c | 2 +- | |
3417 | drivers/acpi/processor_pdc.c | 2 +- | |
3418 | drivers/acpi/sleep.c | 2 +- | |
3419 | drivers/acpi/sysfs.c | 4 +- | |
3420 | drivers/acpi/thermal.c | 2 +- | |
3421 | drivers/acpi/video_detect.c | 7 +- | |
3422 | drivers/ata/libata-core.c | 12 +- | |
3423 | drivers/ata/libata-scsi.c | 2 +- | |
3424 | drivers/ata/libata.h | 2 +- | |
3425 | drivers/ata/pata_arasan_cf.c | 4 +- | |
3426 | drivers/atm/adummy.c | 2 +- | |
3427 | drivers/atm/ambassador.c | 8 +- | |
3428 | drivers/atm/atmtcp.c | 14 +- | |
3429 | drivers/atm/eni.c | 10 +- | |
3430 | drivers/atm/firestream.c | 8 +- | |
3431 | drivers/atm/fore200e.c | 14 +- | |
3432 | drivers/atm/he.c | 18 +- | |
3433 | drivers/atm/horizon.c | 4 +- | |
3434 | drivers/atm/idt77252.c | 36 +- | |
3435 | drivers/atm/iphase.c | 34 +- | |
3436 | drivers/atm/lanai.c | 12 +- | |
3437 | drivers/atm/nicstar.c | 46 +- | |
3438 | drivers/atm/solos-pci.c | 4 +- | |
3439 | drivers/atm/suni.c | 4 +- | |
3440 | drivers/atm/uPD98402.c | 16 +- | |
3441 | drivers/atm/zatm.c | 6 +- | |
3442 | drivers/base/bus.c | 4 +- | |
3443 | drivers/base/devres.c | 4 +- | |
3444 | drivers/base/devtmpfs.c | 8 +- | |
3445 | drivers/base/node.c | 2 +- | |
3446 | drivers/base/platform-msi.c | 20 +- | |
3447 | drivers/base/power/domain.c | 7 +- | |
3448 | drivers/base/power/runtime.c | 6 +- | |
3449 | drivers/base/power/sysfs.c | 2 +- | |
3450 | drivers/base/power/wakeup.c | 8 +- | |
3451 | drivers/base/regmap/regmap-debugfs.c | 4 +- | |
3452 | drivers/base/regmap/regmap.c | 4 +- | |
3453 | drivers/base/syscore.c | 4 +- | |
3454 | drivers/block/cciss.c | 28 +- | |
3455 | drivers/block/cciss.h | 2 +- | |
3456 | drivers/block/cpqarray.c | 28 +- | |
3457 | drivers/block/cpqarray.h | 2 +- | |
3458 | drivers/block/drbd/drbd_bitmap.c | 2 +- | |
3459 | drivers/block/drbd/drbd_int.h | 8 +- | |
3460 | drivers/block/drbd/drbd_main.c | 12 +- | |
3461 | drivers/block/drbd/drbd_nl.c | 4 +- | |
3462 | drivers/block/drbd/drbd_receiver.c | 38 +- | |
3463 | drivers/block/drbd/drbd_worker.c | 14 +- | |
3464 | drivers/block/pktcdvd.c | 4 +- | |
3465 | drivers/block/rbd.c | 2 +- | |
3466 | drivers/bluetooth/btwilink.c | 2 +- | |
3467 | drivers/bus/arm-cci.c | 12 +- | |
3468 | drivers/cdrom/cdrom.c | 11 +- | |
3469 | drivers/cdrom/gdrom.c | 1 - | |
3470 | drivers/char/agp/compat_ioctl.c | 2 +- | |
3471 | drivers/char/agp/frontend.c | 4 +- | |
3472 | drivers/char/agp/intel-gtt.c | 4 +- | |
3473 | drivers/char/hpet.c | 2 +- | |
3474 | drivers/char/ipmi/ipmi_msghandler.c | 8 +- | |
3475 | drivers/char/ipmi/ipmi_si_intf.c | 8 +- | |
3476 | drivers/char/ipmi/ipmi_ssif.c | 12 +- | |
3477 | drivers/char/mem.c | 47 +- | |
3478 | drivers/char/nvram.c | 2 +- | |
3479 | drivers/char/pcmcia/synclink_cs.c | 16 +- | |
3480 | drivers/char/random.c | 12 +- | |
3481 | drivers/char/sonypi.c | 11 +- | |
3482 | drivers/char/tpm/tpm_acpi.c | 3 +- | |
3483 | drivers/char/tpm/tpm_eventlog.c | 5 +- | |
3484 | drivers/char/virtio_console.c | 6 +- | |
3485 | drivers/clk/clk-composite.c | 2 +- | |
3486 | drivers/clk/samsung/clk.h | 2 +- | |
3487 | drivers/clk/socfpga/clk-gate.c | 9 +- | |
3488 | drivers/clk/socfpga/clk-pll.c | 9 +- | |
3489 | drivers/clk/ti/clk.c | 8 +- | |
3490 | drivers/cpufreq/acpi-cpufreq.c | 17 +- | |
3491 | drivers/cpufreq/cpufreq-dt.c | 4 +- | |
3492 | drivers/cpufreq/cpufreq.c | 30 +- | |
3493 | drivers/cpufreq/cpufreq_governor.c | 2 +- | |
3494 | drivers/cpufreq/cpufreq_governor.h | 4 +- | |
3495 | drivers/cpufreq/cpufreq_ondemand.c | 10 +- | |
3496 | drivers/cpufreq/intel_pstate.c | 38 +- | |
3497 | drivers/cpufreq/p4-clockmod.c | 12 +- | |
3498 | drivers/cpufreq/sparc-us3-cpufreq.c | 67 +- | |
3499 | drivers/cpufreq/speedstep-centrino.c | 7 +- | |
3500 | drivers/cpuidle/driver.c | 2 +- | |
3501 | drivers/cpuidle/dt_idle_states.c | 2 +- | |
3502 | drivers/cpuidle/governor.c | 2 +- | |
3503 | drivers/cpuidle/sysfs.c | 2 +- | |
3504 | drivers/crypto/hifn_795x.c | 4 +- | |
3505 | drivers/devfreq/devfreq.c | 4 +- | |
3506 | drivers/dma/sh/shdma-base.c | 4 +- | |
3507 | drivers/dma/sh/shdmac.c | 2 +- | |
3508 | drivers/edac/edac_device.c | 4 +- | |
3509 | drivers/edac/edac_mc_sysfs.c | 2 +- | |
3510 | drivers/edac/edac_pci.c | 4 +- | |
3511 | drivers/edac/edac_pci_sysfs.c | 22 +- | |
3512 | drivers/edac/mce_amd.h | 2 +- | |
3513 | drivers/firewire/core-card.c | 6 +- | |
3514 | drivers/firewire/core-device.c | 2 +- | |
3515 | drivers/firewire/core-transaction.c | 1 + | |
3516 | drivers/firewire/core.h | 1 + | |
3517 | drivers/firmware/dmi-id.c | 2 +- | |
3518 | drivers/firmware/dmi_scan.c | 12 +- | |
3519 | drivers/firmware/efi/cper.c | 8 +- | |
3520 | drivers/firmware/efi/efi.c | 12 +- | |
3521 | drivers/firmware/efi/efivars.c | 2 +- | |
3522 | drivers/firmware/efi/runtime-map.c | 2 +- | |
3523 | drivers/firmware/google/gsmi.c | 2 +- | |
3524 | drivers/firmware/google/memconsole.c | 7 +- | |
3525 | drivers/firmware/memmap.c | 2 +- | |
3526 | drivers/firmware/psci.c | 2 +- | |
3527 | drivers/gpio/gpio-davinci.c | 6 +- | |
3528 | drivers/gpio/gpio-em.c | 2 +- | |
3529 | drivers/gpio/gpio-ich.c | 2 +- | |
3530 | drivers/gpio/gpio-omap.c | 4 +- | |
3531 | drivers/gpio/gpio-rcar.c | 2 +- | |
3532 | drivers/gpio/gpio-vr41xx.c | 2 +- | |
3533 | drivers/gpio/gpiolib.c | 12 +- | |
3534 | drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +- | |
3535 | drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +- | |
3536 | drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 18 +- | |
3537 | drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +- | |
3538 | drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +- | |
3539 | drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +- | |
3540 | .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +- | |
3541 | .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +- | |
3542 | .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +- | |
3543 | .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +- | |
3544 | drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +- | |
3545 | drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +- | |
3546 | drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +- | |
3547 | .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +- | |
3548 | drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +- | |
3549 | drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +- | |
3550 | drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +- | |
3551 | drivers/gpu/drm/armada/armada_drv.c | 3 +- | |
3552 | drivers/gpu/drm/drm_crtc.c | 2 +- | |
3553 | drivers/gpu/drm/drm_drv.c | 2 +- | |
3554 | drivers/gpu/drm/drm_fops.c | 12 +- | |
3555 | drivers/gpu/drm/drm_global.c | 14 +- | |
3556 | drivers/gpu/drm/drm_info.c | 13 +- | |
3557 | drivers/gpu/drm/drm_ioc32.c | 13 +- | |
3558 | drivers/gpu/drm/drm_ioctl.c | 2 +- | |
3559 | drivers/gpu/drm/drm_pci.c | 9 +- | |
3560 | drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 - | |
3561 | drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +- | |
3562 | drivers/gpu/drm/gma500/psb_drv.c | 1 - | |
3563 | drivers/gpu/drm/i810/i810_dma.c | 2 +- | |
3564 | drivers/gpu/drm/i810/i810_drv.c | 6 +- | |
3565 | drivers/gpu/drm/i810/i810_drv.h | 6 +- | |
3566 | drivers/gpu/drm/i915/i915_dma.c | 4 +- | |
3567 | drivers/gpu/drm/i915/i915_drv.c | 7 +- | |
3568 | drivers/gpu/drm/i915/i915_drv.h | 2 +- | |
3569 | drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +- | |
3570 | drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +- | |
3571 | drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +- | |
3572 | drivers/gpu/drm/i915/i915_ioc32.c | 10 +- | |
3573 | drivers/gpu/drm/i915/i915_irq.c | 88 +- | |
3574 | drivers/gpu/drm/i915/intel_display.c | 26 +- | |
3575 | drivers/gpu/drm/imx/imx-drm-core.c | 2 +- | |
3576 | drivers/gpu/drm/mga/mga_drv.c | 5 +- | |
3577 | drivers/gpu/drm/mga/mga_drv.h | 6 +- | |
3578 | drivers/gpu/drm/mga/mga_ioc32.c | 10 +- | |
3579 | drivers/gpu/drm/mga/mga_irq.c | 8 +- | |
3580 | drivers/gpu/drm/mga/mga_state.c | 2 +- | |
3581 | drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +- | |
3582 | drivers/gpu/drm/nouveau/nouveau_drm.c | 13 +- | |
3583 | drivers/gpu/drm/nouveau/nouveau_drm.h | 1 - | |
3584 | drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +- | |
3585 | drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +- | |
3586 | drivers/gpu/drm/omapdrm/Makefile | 2 +- | |
3587 | drivers/gpu/drm/qxl/qxl_cmd.c | 12 +- | |
3588 | drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +- | |
3589 | drivers/gpu/drm/qxl/qxl_drv.c | 8 +- | |
3590 | drivers/gpu/drm/qxl/qxl_drv.h | 8 +- | |
3591 | drivers/gpu/drm/qxl/qxl_ioctl.c | 12 +- | |
3592 | drivers/gpu/drm/qxl/qxl_irq.c | 16 +- | |
3593 | drivers/gpu/drm/qxl/qxl_ttm.c | 38 +- | |
3594 | drivers/gpu/drm/r128/r128_cce.c | 2 +- | |
3595 | drivers/gpu/drm/r128/r128_drv.c | 4 +- | |
3596 | drivers/gpu/drm/r128/r128_drv.h | 6 +- | |
3597 | drivers/gpu/drm/r128/r128_ioc32.c | 10 +- | |
3598 | drivers/gpu/drm/r128/r128_irq.c | 4 +- | |
3599 | drivers/gpu/drm/r128/r128_state.c | 6 +- | |
3600 | drivers/gpu/drm/radeon/mkregtable.c | 4 +- | |
3601 | drivers/gpu/drm/radeon/radeon_device.c | 2 +- | |
3602 | drivers/gpu/drm/radeon/radeon_drv.c | 17 +- | |
3603 | drivers/gpu/drm/radeon/radeon_drv.h | 4 +- | |
3604 | drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +- | |
3605 | drivers/gpu/drm/radeon/radeon_irq.c | 6 +- | |
3606 | drivers/gpu/drm/radeon/radeon_kms.c | 2 +- | |
3607 | drivers/gpu/drm/radeon/radeon_state.c | 6 +- | |
3608 | drivers/gpu/drm/radeon/radeon_ttm.c | 4 +- | |
3609 | drivers/gpu/drm/savage/savage_bci.c | 2 +- | |
3610 | drivers/gpu/drm/savage/savage_drv.c | 5 +- | |
3611 | drivers/gpu/drm/savage/savage_drv.h | 2 +- | |
3612 | drivers/gpu/drm/sis/sis_drv.c | 5 +- | |
3613 | drivers/gpu/drm/sis/sis_drv.h | 2 +- | |
3614 | drivers/gpu/drm/sis/sis_mm.c | 2 +- | |
3615 | drivers/gpu/drm/tegra/dc.c | 2 +- | |
3616 | drivers/gpu/drm/tegra/dsi.c | 2 +- | |
3617 | drivers/gpu/drm/tegra/hdmi.c | 2 +- | |
3618 | drivers/gpu/drm/tegra/sor.c | 7 +- | |
3619 | drivers/gpu/drm/tilcdc/Makefile | 6 +- | |
3620 | drivers/gpu/drm/ttm/ttm_memory.c | 4 +- | |
3621 | drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +- | |
3622 | drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +- | |
3623 | drivers/gpu/drm/udl/udl_fb.c | 1 - | |
3624 | drivers/gpu/drm/via/via_dma.c | 2 +- | |
3625 | drivers/gpu/drm/via/via_drv.c | 5 +- | |
3626 | drivers/gpu/drm/via/via_drv.h | 6 +- | |
3627 | drivers/gpu/drm/via/via_irq.c | 18 +- | |
3628 | drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +- | |
3629 | drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +- | |
3630 | drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +- | |
3631 | drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +- | |
3632 | drivers/gpu/vga/vga_switcheroo.c | 4 +- | |
3633 | drivers/hid/hid-core.c | 4 +- | |
3634 | drivers/hid/hid-sensor-custom.c | 2 +- | |
3635 | drivers/hv/channel.c | 6 +- | |
3636 | drivers/hv/hv.c | 4 +- | |
3637 | drivers/hv/hv_balloon.c | 18 +- | |
3638 | drivers/hv/hyperv_vmbus.h | 2 +- | |
3639 | drivers/hwmon/acpi_power_meter.c | 6 +- | |
3640 | drivers/hwmon/applesmc.c | 2 +- | |
3641 | drivers/hwmon/asus_atk0110.c | 10 +- | |
3642 | drivers/hwmon/coretemp.c | 2 +- | |
3643 | drivers/hwmon/dell-smm-hwmon.c | 2 +- | |
3644 | drivers/hwmon/ibmaem.c | 2 +- | |
3645 | drivers/hwmon/iio_hwmon.c | 2 +- | |
3646 | drivers/hwmon/nct6683.c | 6 +- | |
3647 | drivers/hwmon/nct6775.c | 6 +- | |
3648 | drivers/hwmon/pmbus/pmbus_core.c | 10 +- | |
3649 | drivers/hwmon/sht15.c | 12 +- | |
3650 | drivers/hwmon/via-cputemp.c | 2 +- | |
3651 | drivers/i2c/busses/i2c-amd756-s4882.c | 2 +- | |
3652 | drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +- | |
3653 | drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +- | |
3654 | drivers/i2c/i2c-dev.c | 2 +- | |
3655 | drivers/ide/ide-cd.c | 2 +- | |
3656 | drivers/ide/ide-disk.c | 2 +- | |
3657 | drivers/iio/industrialio-core.c | 2 +- | |
3658 | drivers/iio/magnetometer/ak8975.c | 2 +- | |
3659 | drivers/infiniband/core/cm.c | 32 +- | |
3660 | drivers/infiniband/core/fmr_pool.c | 20 +- | |
3661 | drivers/infiniband/core/netlink.c | 5 +- | |
3662 | drivers/infiniband/core/uverbs_cmd.c | 3 + | |
3663 | drivers/infiniband/hw/cxgb4/device.c | 6 +- | |
3664 | drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +- | |
3665 | drivers/infiniband/hw/cxgb4/mem.c | 4 +- | |
3666 | drivers/infiniband/hw/mlx4/mad.c | 2 +- | |
3667 | drivers/infiniband/hw/mlx4/mcg.c | 2 +- | |
3668 | drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +- | |
3669 | drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +- | |
3670 | drivers/infiniband/hw/mthca/mthca_main.c | 2 +- | |
3671 | drivers/infiniband/hw/mthca/mthca_mr.c | 6 +- | |
3672 | drivers/infiniband/hw/mthca/mthca_provider.c | 2 +- | |
3673 | drivers/infiniband/hw/nes/nes.c | 4 +- | |
3674 | drivers/infiniband/hw/nes/nes.h | 40 +- | |
3675 | drivers/infiniband/hw/nes/nes_cm.c | 62 +- | |
3676 | drivers/infiniband/hw/nes/nes_mgt.c | 8 +- | |
3677 | drivers/infiniband/hw/nes/nes_nic.c | 40 +- | |
3678 | drivers/infiniband/hw/nes/nes_verbs.c | 10 +- | |
3679 | drivers/infiniband/hw/qib/qib.h | 1 + | |
3680 | drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +- | |
3681 | drivers/input/evdev.c | 2 +- | |
3682 | drivers/input/gameport/gameport.c | 4 +- | |
3683 | drivers/input/input.c | 4 +- | |
3684 | drivers/input/joystick/sidewinder.c | 1 + | |
3685 | drivers/input/misc/ims-pcu.c | 4 +- | |
3686 | drivers/input/mouse/psmouse.h | 2 +- | |
3687 | drivers/input/mousedev.c | 2 +- | |
3688 | drivers/input/serio/serio.c | 4 +- | |
3689 | drivers/input/serio/serio_raw.c | 4 +- | |
3690 | drivers/input/touchscreen/htcpen.c | 2 +- | |
3691 | drivers/iommu/arm-smmu-v3.c | 2 +- | |
3692 | drivers/iommu/arm-smmu.c | 43 +- | |
3693 | drivers/iommu/io-pgtable-arm.c | 101 +- | |
3694 | drivers/iommu/io-pgtable.c | 11 +- | |
3695 | drivers/iommu/io-pgtable.h | 19 +- | |
3696 | drivers/iommu/iommu.c | 2 +- | |
3697 | drivers/iommu/ipmmu-vmsa.c | 13 +- | |
3698 | drivers/iommu/irq_remapping.c | 2 +- | |
3699 | drivers/irqchip/irq-gic.c | 2 +- | |
3700 | drivers/irqchip/irq-i8259.c | 2 +- | |
3701 | drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +- | |
3702 | drivers/isdn/capi/capi.c | 10 +- | |
3703 | drivers/isdn/gigaset/interface.c | 8 +- | |
3704 | drivers/isdn/gigaset/usb-gigaset.c | 2 +- | |
3705 | drivers/isdn/hardware/avm/b1.c | 4 +- | |
3706 | drivers/isdn/i4l/isdn_common.c | 2 + | |
3707 | drivers/isdn/i4l/isdn_tty.c | 22 +- | |
3708 | drivers/isdn/icn/icn.c | 2 +- | |
3709 | drivers/isdn/mISDN/dsp_cmx.c | 2 +- | |
3710 | drivers/lguest/core.c | 10 +- | |
3711 | drivers/lguest/page_tables.c | 2 +- | |
3712 | drivers/lguest/x86/core.c | 12 +- | |
3713 | drivers/lguest/x86/switcher_32.S | 27 +- | |
3714 | drivers/md/bcache/alloc.c | 2 +- | |
3715 | drivers/md/bcache/bcache.h | 10 +- | |
3716 | drivers/md/bcache/btree.c | 2 +- | |
3717 | drivers/md/bcache/closure.h | 2 +- | |
3718 | drivers/md/bcache/io.c | 10 +- | |
3719 | drivers/md/bcache/journal.c | 2 +- | |
3720 | drivers/md/bcache/stats.c | 26 +- | |
3721 | drivers/md/bcache/stats.h | 16 +- | |
3722 | drivers/md/bcache/super.c | 2 +- | |
3723 | drivers/md/bcache/sysfs.c | 20 +- | |
3724 | drivers/md/bitmap.c | 2 +- | |
3725 | drivers/md/dm-cache-target.c | 98 +- | |
3726 | drivers/md/dm-ioctl.c | 2 +- | |
3727 | drivers/md/dm-raid.c | 2 +- | |
3728 | drivers/md/dm-raid1.c | 18 +- | |
3729 | drivers/md/dm-stats.c | 6 +- | |
3730 | drivers/md/dm-stripe.c | 10 +- | |
3731 | drivers/md/dm-table.c | 2 +- | |
3732 | drivers/md/dm-thin-metadata.c | 4 +- | |
3733 | drivers/md/dm.c | 28 +- | |
3734 | drivers/md/md.c | 37 +- | |
3735 | drivers/md/md.h | 8 +- | |
3736 | drivers/md/persistent-data/dm-space-map-metadata.c | 4 +- | |
3737 | drivers/md/persistent-data/dm-space-map.h | 1 + | |
3738 | drivers/md/raid1.c | 8 +- | |
3739 | drivers/md/raid10.c | 20 +- | |
3740 | drivers/md/raid5.c | 26 +- | |
3741 | drivers/media/dvb-core/dvbdev.c | 2 +- | |
3742 | drivers/media/dvb-frontends/af9033.h | 2 +- | |
3743 | drivers/media/dvb-frontends/dib3000.h | 2 +- | |
3744 | drivers/media/dvb-frontends/dib7000p.h | 2 +- | |
3745 | drivers/media/dvb-frontends/dib8000.h | 2 +- | |
3746 | drivers/media/pci/cx88/cx88-video.c | 6 +- | |
3747 | drivers/media/pci/ivtv/ivtv-driver.c | 2 +- | |
3748 | drivers/media/pci/solo6x10/solo6x10-core.c | 2 +- | |
3749 | drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +- | |
3750 | drivers/media/pci/solo6x10/solo6x10.h | 2 +- | |
3751 | drivers/media/pci/tw68/tw68-core.c | 2 +- | |
3752 | drivers/media/pci/zoran/zoran.h | 1 - | |
3753 | drivers/media/pci/zoran/zoran_driver.c | 3 - | |
3754 | drivers/media/platform/omap/omap_vout.c | 11 +- | |
3755 | drivers/media/platform/s5p-tv/mixer.h | 2 +- | |
3756 | drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +- | |
3757 | drivers/media/platform/s5p-tv/mixer_reg.c | 2 +- | |
3758 | drivers/media/platform/s5p-tv/mixer_video.c | 24 +- | |
3759 | drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +- | |
3760 | drivers/media/radio/radio-cadet.c | 2 + | |
3761 | drivers/media/radio/radio-maxiradio.c | 2 +- | |
3762 | drivers/media/radio/radio-shark.c | 2 +- | |
3763 | drivers/media/radio/radio-shark2.c | 2 +- | |
3764 | drivers/media/radio/radio-si476x.c | 2 +- | |
3765 | drivers/media/radio/wl128x/fmdrv_common.c | 2 +- | |
3766 | drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +- | |
3767 | drivers/media/v4l2-core/v4l2-device.c | 4 +- | |
3768 | drivers/media/v4l2-core/v4l2-ioctl.c | 13 +- | |
3769 | drivers/memory/omap-gpmc.c | 21 +- | |
3770 | drivers/message/fusion/mptsas.c | 34 +- | |
3771 | drivers/mfd/ab8500-debugfs.c | 2 +- | |
3772 | drivers/mfd/kempld-core.c | 2 +- | |
3773 | drivers/mfd/max8925-i2c.c | 2 +- | |
3774 | drivers/mfd/tps65910.c | 2 +- | |
3775 | drivers/mfd/twl4030-irq.c | 9 +- | |
3776 | drivers/misc/c2port/core.c | 4 +- | |
3777 | drivers/misc/kgdbts.c | 4 +- | |
3778 | drivers/misc/lis3lv02d/lis3lv02d.c | 8 +- | |
3779 | drivers/misc/lis3lv02d/lis3lv02d.h | 2 +- | |
3780 | drivers/misc/mic/scif/scif_api.c | 10 +- | |
3781 | drivers/misc/mic/scif/scif_rb.c | 8 +- | |
3782 | drivers/misc/sgi-gru/gruhandles.c | 4 +- | |
3783 | drivers/misc/sgi-gru/gruprocfs.c | 8 +- | |
3784 | drivers/misc/sgi-gru/grutables.h | 158 +- | |
3785 | drivers/misc/sgi-xp/xp.h | 2 +- | |
3786 | drivers/misc/sgi-xp/xpc.h | 3 +- | |
3787 | drivers/misc/sgi-xp/xpc_main.c | 2 +- | |
3788 | drivers/mmc/host/dw_mmc.h | 2 +- | |
3789 | drivers/mmc/host/mmci.c | 4 +- | |
3790 | drivers/mmc/host/omap_hsmmc.c | 4 +- | |
3791 | drivers/mmc/host/sdhci-esdhc-imx.c | 7 +- | |
3792 | drivers/mmc/host/sdhci-s3c.c | 8 +- | |
3793 | drivers/mtd/chips/cfi_cmdset_0020.c | 2 +- | |
3794 | drivers/mtd/nand/denali.c | 1 + | |
3795 | drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +- | |
3796 | drivers/mtd/nftlmount.c | 1 + | |
3797 | drivers/mtd/sm_ftl.c | 2 +- | |
3798 | drivers/net/bonding/bond_netlink.c | 2 +- | |
3799 | drivers/net/caif/caif_hsi.c | 2 +- | |
3800 | drivers/net/can/Kconfig | 2 +- | |
3801 | drivers/net/can/dev.c | 2 +- | |
3802 | drivers/net/can/vcan.c | 2 +- | |
3803 | drivers/net/dummy.c | 2 +- | |
3804 | drivers/net/ethernet/8390/ax88796.c | 4 +- | |
3805 | drivers/net/ethernet/altera/altera_tse_main.c | 4 +- | |
3806 | drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +- | |
3807 | drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +- | |
3808 | drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +- | |
3809 | drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +- | |
3810 | drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +- | |
3811 | drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +- | |
3812 | drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +- | |
3813 | drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +- | |
3814 | drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +- | |
3815 | drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +- | |
3816 | drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +- | |
3817 | drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +- | |
3818 | drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +- | |
3819 | drivers/net/ethernet/broadcom/tg3.h | 1 + | |
3820 | drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +- | |
3821 | drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +- | |
3822 | drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +- | |
3823 | drivers/net/ethernet/dec/tulip/de4x5.c | 4 +- | |
3824 | drivers/net/ethernet/emulex/benet/be_main.c | 2 +- | |
3825 | drivers/net/ethernet/faraday/ftgmac100.c | 2 + | |
3826 | drivers/net/ethernet/faraday/ftmac100.c | 2 + | |
3827 | drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +- | |
3828 | drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +- | |
3829 | drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +- | |
3830 | drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +- | |
3831 | drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +- | |
3832 | drivers/net/ethernet/nvidia/forcedeth.c | 4 +- | |
3833 | .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +- | |
3834 | .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +- | |
3835 | .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +- | |
3836 | drivers/net/ethernet/realtek/r8169.c | 8 +- | |
3837 | drivers/net/ethernet/sfc/ptp.c | 2 +- | |
3838 | drivers/net/ethernet/sfc/selftest.c | 20 +- | |
3839 | drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +- | |
3840 | drivers/net/ethernet/via/via-rhine.c | 2 +- | |
3841 | drivers/net/geneve.c | 2 +- | |
3842 | drivers/net/hyperv/hyperv_net.h | 2 +- | |
3843 | drivers/net/hyperv/rndis_filter.c | 7 +- | |
3844 | drivers/net/ifb.c | 2 +- | |
3845 | drivers/net/ipvlan/ipvlan_core.c | 2 +- | |
3846 | drivers/net/irda/vlsi_ir.c | 18 +- | |
3847 | drivers/net/irda/vlsi_ir.h | 14 +- | |
3848 | drivers/net/macvlan.c | 20 +- | |
3849 | drivers/net/macvtap.c | 10 +- | |
3850 | drivers/net/nlmon.c | 2 +- | |
3851 | drivers/net/phy/phy_device.c | 6 +- | |
3852 | drivers/net/ppp/ppp_generic.c | 4 +- | |
3853 | drivers/net/slip/slhc.c | 2 +- | |
3854 | drivers/net/team/team.c | 4 +- | |
3855 | drivers/net/tun.c | 7 +- | |
3856 | drivers/net/usb/hso.c | 23 +- | |
3857 | drivers/net/usb/r8152.c | 2 +- | |
3858 | drivers/net/usb/sierra_net.c | 4 +- | |
3859 | drivers/net/virtio_net.c | 2 +- | |
3860 | drivers/net/vrf.c | 2 +- | |
3861 | drivers/net/vxlan.c | 4 +- | |
3862 | drivers/net/wimax/i2400m/rx.c | 2 +- | |
3863 | drivers/net/wireless/airo.c | 2 +- | |
3864 | drivers/net/wireless/at76c50x-usb.c | 2 +- | |
3865 | drivers/net/wireless/ath/ath10k/ce.c | 6 +- | |
3866 | drivers/net/wireless/ath/ath10k/htc.h | 4 +- | |
3867 | drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +- | |
3868 | drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +- | |
3869 | drivers/net/wireless/ath/ath9k/hw.h | 4 +- | |
3870 | drivers/net/wireless/ath/ath9k/main.c | 22 +- | |
3871 | drivers/net/wireless/ath/carl9170/carl9170.h | 6 +- | |
3872 | drivers/net/wireless/ath/carl9170/debug.c | 6 +- | |
3873 | drivers/net/wireless/ath/carl9170/main.c | 10 +- | |
3874 | drivers/net/wireless/ath/carl9170/tx.c | 4 +- | |
3875 | drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +- | |
3876 | drivers/net/wireless/b43/phy_lp.c | 2 +- | |
3877 | drivers/net/wireless/iwlegacy/3945-mac.c | 4 +- | |
3878 | drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +- | |
3879 | drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +- | |
3880 | drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +- | |
3881 | drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +- | |
3882 | drivers/net/wireless/mac80211_hwsim.c | 28 +- | |
3883 | drivers/net/wireless/rt2x00/rt2x00.h | 2 +- | |
3884 | drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +- | |
3885 | drivers/net/wireless/ti/wl1251/sdio.c | 12 +- | |
3886 | drivers/net/wireless/ti/wl12xx/main.c | 8 +- | |
3887 | drivers/net/wireless/ti/wl18xx/main.c | 6 +- | |
3888 | drivers/of/fdt.c | 4 +- | |
3889 | drivers/oprofile/buffer_sync.c | 8 +- | |
3890 | drivers/oprofile/event_buffer.c | 2 +- | |
3891 | drivers/oprofile/oprof.c | 2 +- | |
3892 | drivers/oprofile/oprofile_stats.c | 10 +- | |
3893 | drivers/oprofile/oprofile_stats.h | 10 +- | |
3894 | drivers/oprofile/oprofilefs.c | 6 +- | |
3895 | drivers/oprofile/timer_int.c | 2 +- | |
3896 | drivers/parport/procfs.c | 4 +- | |
3897 | drivers/pci/host/pci-host-generic.c | 2 +- | |
3898 | drivers/pci/hotplug/acpiphp_ibm.c | 4 +- | |
3899 | drivers/pci/hotplug/cpcihp_generic.c | 6 +- | |
3900 | drivers/pci/hotplug/cpcihp_zt5550.c | 14 +- | |
3901 | drivers/pci/hotplug/cpqphp_nvram.c | 2 + | |
3902 | drivers/pci/hotplug/pci_hotplug_core.c | 6 +- | |
3903 | drivers/pci/hotplug/pciehp_core.c | 2 +- | |
3904 | drivers/pci/msi.c | 22 +- | |
3905 | drivers/pci/pci-sysfs.c | 6 +- | |
3906 | drivers/pci/pci.h | 2 +- | |
3907 | drivers/pci/pcie/aspm.c | 6 +- | |
3908 | drivers/pci/pcie/portdrv_pci.c | 2 +- | |
3909 | drivers/pci/probe.c | 2 +- | |
3910 | drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +- | |
3911 | drivers/pinctrl/pinctrl-at91.c | 5 +- | |
3912 | drivers/platform/chrome/chromeos_pstore.c | 2 +- | |
3913 | drivers/platform/x86/alienware-wmi.c | 4 +- | |
3914 | drivers/platform/x86/compal-laptop.c | 2 +- | |
3915 | drivers/platform/x86/hdaps.c | 2 +- | |
3916 | drivers/platform/x86/ibm_rtl.c | 2 +- | |
3917 | drivers/platform/x86/intel_oaktrail.c | 2 +- | |
3918 | drivers/platform/x86/msi-laptop.c | 16 +- | |
3919 | drivers/platform/x86/msi-wmi.c | 2 +- | |
3920 | drivers/platform/x86/samsung-laptop.c | 2 +- | |
3921 | drivers/platform/x86/samsung-q10.c | 2 +- | |
3922 | drivers/platform/x86/sony-laptop.c | 14 +- | |
3923 | drivers/platform/x86/thinkpad_acpi.c | 2 +- | |
3924 | drivers/pnp/pnpbios/bioscalls.c | 14 +- | |
3925 | drivers/pnp/pnpbios/core.c | 2 +- | |
3926 | drivers/power/pda_power.c | 7 +- | |
3927 | drivers/power/power_supply.h | 4 +- | |
3928 | drivers/power/power_supply_core.c | 7 +- | |
3929 | drivers/power/power_supply_sysfs.c | 6 +- | |
3930 | drivers/power/reset/at91-reset.c | 5 +- | |
3931 | drivers/powercap/powercap_sys.c | 136 +- | |
3932 | drivers/ptp/ptp_private.h | 2 +- | |
3933 | drivers/ptp/ptp_sysfs.c | 2 +- | |
3934 | drivers/regulator/core.c | 4 +- | |
3935 | drivers/regulator/max8660.c | 6 +- | |
3936 | drivers/regulator/max8973-regulator.c | 16 +- | |
3937 | drivers/regulator/mc13892-regulator.c | 8 +- | |
3938 | drivers/rtc/rtc-armada38x.c | 7 +- | |
3939 | drivers/rtc/rtc-cmos.c | 4 +- | |
3940 | drivers/rtc/rtc-ds1307.c | 2 +- | |
3941 | drivers/rtc/rtc-m48t59.c | 4 +- | |
3942 | drivers/rtc/rtc-rv8803.c | 15 +- | |
3943 | drivers/rtc/rtc-test.c | 6 +- | |
3944 | drivers/scsi/bfa/bfa_fcpim.h | 2 +- | |
3945 | drivers/scsi/bfa/bfa_ioc.h | 4 +- | |
3946 | drivers/scsi/fcoe/fcoe_sysfs.c | 12 +- | |
3947 | drivers/scsi/hosts.c | 4 +- | |
3948 | drivers/scsi/hpsa.c | 38 +- | |
3949 | drivers/scsi/hpsa.h | 2 +- | |
3950 | drivers/scsi/hptiop.c | 2 - | |
3951 | drivers/scsi/hptiop.h | 1 - | |
3952 | drivers/scsi/ipr.c | 6 +- | |
3953 | drivers/scsi/ipr.h | 2 +- | |
3954 | drivers/scsi/libfc/fc_exch.c | 50 +- | |
3955 | drivers/scsi/libsas/sas_ata.c | 2 +- | |
3956 | drivers/scsi/lpfc/lpfc.h | 8 +- | |
3957 | drivers/scsi/lpfc/lpfc_debugfs.c | 18 +- | |
3958 | drivers/scsi/lpfc/lpfc_init.c | 6 +- | |
3959 | drivers/scsi/lpfc/lpfc_scsi.c | 10 +- | |
3960 | drivers/scsi/megaraid/megaraid_sas.h | 2 +- | |
3961 | drivers/scsi/pmcraid.c | 20 +- | |
3962 | drivers/scsi/pmcraid.h | 8 +- | |
3963 | drivers/scsi/qla2xxx/qla_attr.c | 4 +- | |
3964 | drivers/scsi/qla2xxx/qla_gbl.h | 4 +- | |
3965 | drivers/scsi/qla2xxx/qla_os.c | 6 +- | |
3966 | drivers/scsi/qla2xxx/qla_target.c | 10 +- | |
3967 | drivers/scsi/qla2xxx/qla_target.h | 2 +- | |
3968 | drivers/scsi/qla4xxx/ql4_def.h | 2 +- | |
3969 | drivers/scsi/qla4xxx/ql4_os.c | 6 +- | |
3970 | drivers/scsi/scsi.c | 2 +- | |
3971 | drivers/scsi/scsi_lib.c | 8 +- | |
3972 | drivers/scsi/scsi_sysfs.c | 2 +- | |
3973 | drivers/scsi/scsi_transport_fc.c | 8 +- | |
3974 | drivers/scsi/scsi_transport_iscsi.c | 6 +- | |
3975 | drivers/scsi/scsi_transport_srp.c | 6 +- | |
3976 | drivers/scsi/sd.c | 6 +- | |
3977 | drivers/scsi/sg.c | 2 +- | |
3978 | drivers/scsi/sr.c | 21 +- | |
3979 | drivers/soc/tegra/fuse/fuse-tegra.c | 2 +- | |
3980 | drivers/spi/spi.c | 2 +- | |
3981 | drivers/staging/android/timed_output.c | 6 +- | |
3982 | drivers/staging/comedi/comedi_fops.c | 8 +- | |
3983 | drivers/staging/fbtft/fbtft-core.c | 2 +- | |
3984 | drivers/staging/fbtft/fbtft.h | 2 +- | |
3985 | drivers/staging/gdm724x/gdm_tty.c | 2 +- | |
3986 | drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +- | |
3987 | drivers/staging/iio/adc/ad7280a.c | 4 +- | |
3988 | drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +- | |
3989 | drivers/staging/lustre/lnet/selftest/framework.c | 4 - | |
3990 | drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +- | |
3991 | drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +- | |
3992 | drivers/staging/lustre/lustre/include/obd.h | 2 +- | |
3993 | drivers/staging/octeon/ethernet-rx.c | 20 +- | |
3994 | drivers/staging/octeon/ethernet.c | 8 +- | |
3995 | drivers/staging/rdma/ipath/ipath_rc.c | 6 +- | |
3996 | drivers/staging/rdma/ipath/ipath_ruc.c | 6 +- | |
3997 | drivers/staging/rtl8188eu/include/hal_intf.h | 2 +- | |
3998 | drivers/staging/rtl8712/rtl871x_io.h | 2 +- | |
3999 | drivers/staging/sm750fb/sm750.c | 14 +- | |
4000 | drivers/staging/unisys/visorbus/visorbus_private.h | 4 +- | |
4001 | drivers/target/sbp/sbp_target.c | 4 +- | |
4002 | drivers/thermal/cpu_cooling.c | 9 +- | |
4003 | drivers/thermal/devfreq_cooling.c | 19 +- | |
4004 | drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +- | |
4005 | drivers/thermal/of-thermal.c | 17 +- | |
4006 | drivers/thermal/x86_pkg_temp_thermal.c | 2 +- | |
4007 | drivers/tty/cyclades.c | 6 +- | |
4008 | drivers/tty/hvc/hvc_console.c | 14 +- | |
4009 | drivers/tty/hvc/hvcs.c | 21 +- | |
4010 | drivers/tty/hvc/hvsi.c | 22 +- | |
4011 | drivers/tty/hvc/hvsi_lib.c | 4 +- | |
4012 | drivers/tty/ipwireless/tty.c | 27 +- | |
4013 | drivers/tty/moxa.c | 2 +- | |
4014 | drivers/tty/n_gsm.c | 4 +- | |
4015 | drivers/tty/n_tty.c | 19 +- | |
4016 | drivers/tty/pty.c | 4 +- | |
4017 | drivers/tty/rocket.c | 6 +- | |
4018 | drivers/tty/serial/8250/8250_core.c | 10 +- | |
4019 | drivers/tty/serial/ifx6x60.c | 2 +- | |
4020 | drivers/tty/serial/ioc4_serial.c | 6 +- | |
4021 | drivers/tty/serial/kgdb_nmi.c | 4 +- | |
4022 | drivers/tty/serial/kgdboc.c | 32 +- | |
4023 | drivers/tty/serial/msm_serial.c | 4 +- | |
4024 | drivers/tty/serial/samsung.c | 9 +- | |
4025 | drivers/tty/serial/serial_core.c | 8 +- | |
4026 | drivers/tty/synclink.c | 34 +- | |
4027 | drivers/tty/synclink_gt.c | 28 +- | |
4028 | drivers/tty/synclinkmp.c | 34 +- | |
4029 | drivers/tty/tty_io.c | 2 +- | |
4030 | drivers/tty/tty_ldisc.c | 8 +- | |
4031 | drivers/tty/tty_port.c | 22 +- | |
4032 | drivers/uio/uio.c | 13 +- | |
4033 | drivers/usb/atm/cxacru.c | 2 +- | |
4034 | drivers/usb/atm/usbatm.c | 24 +- | |
4035 | drivers/usb/class/cdc-acm.h | 2 +- | |
4036 | drivers/usb/core/devices.c | 6 +- | |
4037 | drivers/usb/core/devio.c | 12 +- | |
4038 | drivers/usb/core/hcd.c | 4 +- | |
4039 | drivers/usb/core/sysfs.c | 2 +- | |
4040 | drivers/usb/core/usb.c | 2 +- | |
4041 | drivers/usb/early/ehci-dbgp.c | 16 +- | |
4042 | drivers/usb/gadget/function/u_serial.c | 22 +- | |
4043 | drivers/usb/gadget/udc/dummy_hcd.c | 2 +- | |
4044 | drivers/usb/host/ehci-hcd.c | 2 +- | |
4045 | drivers/usb/host/ehci-hub.c | 4 +- | |
4046 | drivers/usb/host/ehci-q.c | 4 +- | |
4047 | drivers/usb/host/fotg210-hcd.c | 2 +- | |
4048 | drivers/usb/host/hwa-hc.c | 2 +- | |
4049 | drivers/usb/host/ohci-hcd.c | 2 +- | |
4050 | drivers/usb/host/r8a66597.h | 2 +- | |
4051 | drivers/usb/host/uhci-hcd.c | 2 +- | |
4052 | drivers/usb/host/xhci-pci.c | 2 +- | |
4053 | drivers/usb/host/xhci.c | 2 +- | |
4054 | drivers/usb/misc/appledisplay.c | 4 +- | |
4055 | drivers/usb/serial/console.c | 8 +- | |
4056 | drivers/usb/storage/transport.c | 2 +- | |
4057 | drivers/usb/storage/usb.c | 2 +- | |
4058 | drivers/usb/storage/usb.h | 2 +- | |
4059 | drivers/usb/usbip/vhci.h | 2 +- | |
4060 | drivers/usb/usbip/vhci_hcd.c | 6 +- | |
4061 | drivers/usb/usbip/vhci_rx.c | 2 +- | |
4062 | drivers/usb/wusbcore/wa-hc.h | 4 +- | |
4063 | drivers/usb/wusbcore/wa-xfer.c | 2 +- | |
4064 | drivers/vhost/vringh.c | 20 +- | |
4065 | drivers/video/backlight/kb3886_bl.c | 2 +- | |
4066 | drivers/video/console/fbcon.c | 2 +- | |
4067 | drivers/video/fbdev/aty/aty128fb.c | 2 +- | |
4068 | drivers/video/fbdev/aty/atyfb_base.c | 8 +- | |
4069 | drivers/video/fbdev/aty/mach64_cursor.c | 5 +- | |
4070 | drivers/video/fbdev/core/fb_defio.c | 6 +- | |
4071 | drivers/video/fbdev/core/fbmem.c | 12 +- | |
4072 | drivers/video/fbdev/hyperv_fb.c | 4 +- | |
4073 | drivers/video/fbdev/i810/i810_accel.c | 1 + | |
4074 | drivers/video/fbdev/matrox/matroxfb_base.c | 2 +- | |
4075 | drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +- | |
4076 | drivers/video/fbdev/nvidia/nvidia.c | 27 +- | |
4077 | drivers/video/fbdev/omap2/dss/display.c | 8 +- | |
4078 | drivers/video/fbdev/s1d13xxxfb.c | 6 +- | |
4079 | drivers/video/fbdev/smscufx.c | 4 +- | |
4080 | drivers/video/fbdev/udlfb.c | 36 +- | |
4081 | drivers/video/fbdev/uvesafb.c | 52 +- | |
4082 | drivers/video/fbdev/vesafb.c | 58 +- | |
4083 | drivers/video/fbdev/via/via_clock.h | 2 +- | |
4084 | drivers/xen/events/events_base.c | 6 +- | |
4085 | fs/Kconfig.binfmt | 2 +- | |
4086 | fs/afs/inode.c | 4 +- | |
4087 | fs/aio.c | 2 +- | |
4088 | fs/autofs4/waitq.c | 2 +- | |
4089 | fs/befs/endian.h | 6 +- | |
4090 | fs/binfmt_aout.c | 23 +- | |
4091 | fs/binfmt_elf.c | 670 +- | |
4092 | fs/binfmt_elf_fdpic.c | 4 +- | |
4093 | fs/block_dev.c | 2 +- | |
4094 | fs/btrfs/ctree.c | 11 +- | |
4095 | fs/btrfs/ctree.h | 4 +- | |
4096 | fs/btrfs/delayed-inode.c | 9 +- | |
4097 | fs/btrfs/delayed-inode.h | 6 +- | |
4098 | fs/btrfs/delayed-ref.c | 4 +- | |
4099 | fs/btrfs/disk-io.c | 4 +- | |
4100 | fs/btrfs/extent_map.c | 8 +- | |
4101 | fs/btrfs/file.c | 4 +- | |
4102 | fs/btrfs/inode.c | 14 +- | |
4103 | fs/btrfs/raid56.c | 32 +- | |
4104 | fs/btrfs/super.c | 2 +- | |
4105 | fs/btrfs/sysfs.c | 2 +- | |
4106 | fs/btrfs/tests/btrfs-tests.c | 2 +- | |
4107 | fs/btrfs/tests/free-space-tests.c | 8 +- | |
4108 | fs/btrfs/transaction.c | 2 +- | |
4109 | fs/btrfs/tree-log.c | 8 +- | |
4110 | fs/btrfs/tree-log.h | 2 +- | |
4111 | fs/btrfs/volumes.c | 14 +- | |
4112 | fs/btrfs/volumes.h | 22 +- | |
4113 | fs/buffer.c | 2 +- | |
4114 | fs/cachefiles/bind.c | 6 +- | |
4115 | fs/cachefiles/daemon.c | 8 +- | |
4116 | fs/cachefiles/internal.h | 12 +- | |
4117 | fs/cachefiles/namei.c | 2 +- | |
4118 | fs/cachefiles/proc.c | 12 +- | |
4119 | fs/ceph/dir.c | 12 +- | |
4120 | fs/ceph/super.c | 4 +- | |
4121 | fs/cifs/cifs_debug.c | 12 +- | |
4122 | fs/cifs/cifsfs.c | 8 +- | |
4123 | fs/cifs/cifsglob.h | 54 +- | |
4124 | fs/cifs/file.c | 12 +- | |
4125 | fs/cifs/misc.c | 4 +- | |
4126 | fs/cifs/smb1ops.c | 80 +- | |
4127 | fs/cifs/smb2ops.c | 84 +- | |
4128 | fs/cifs/smb2pdu.c | 3 +- | |
4129 | fs/coda/cache.c | 10 +- | |
4130 | fs/compat.c | 7 +- | |
4131 | fs/compat_binfmt_elf.c | 2 + | |
4132 | fs/compat_ioctl.c | 12 +- | |
4133 | fs/configfs/dir.c | 10 +- | |
4134 | fs/coredump.c | 18 +- | |
4135 | fs/dcache.c | 64 +- | |
4136 | fs/ecryptfs/inode.c | 2 +- | |
4137 | fs/ecryptfs/miscdev.c | 2 +- | |
4138 | fs/exec.c | 362 +- | |
4139 | fs/ext2/xattr.c | 5 +- | |
4140 | fs/ext4/ext4.h | 20 +- | |
4141 | fs/ext4/mballoc.c | 44 +- | |
4142 | fs/ext4/resize.c | 16 +- | |
4143 | fs/ext4/super.c | 2 +- | |
4144 | fs/ext4/sysfs.c | 2 +- | |
4145 | fs/ext4/xattr.c | 5 +- | |
4146 | fs/fhandle.c | 5 +- | |
4147 | fs/file.c | 18 +- | |
4148 | fs/fs-writeback.c | 11 +- | |
4149 | fs/fs_struct.c | 8 +- | |
4150 | fs/fscache/cookie.c | 40 +- | |
4151 | fs/fscache/internal.h | 202 +- | |
4152 | fs/fscache/object.c | 26 +- | |
4153 | fs/fscache/operation.c | 38 +- | |
4154 | fs/fscache/page.c | 110 +- | |
4155 | fs/fscache/stats.c | 348 +- | |
4156 | fs/fuse/cuse.c | 10 +- | |
4157 | fs/fuse/dev.c | 4 +- | |
4158 | fs/gfs2/file.c | 2 +- | |
4159 | fs/gfs2/glock.c | 22 +- | |
4160 | fs/gfs2/glops.c | 4 +- | |
4161 | fs/gfs2/quota.c | 6 +- | |
4162 | fs/hugetlbfs/inode.c | 13 +- | |
4163 | fs/inode.c | 4 +- | |
4164 | fs/jbd2/commit.c | 2 +- | |
4165 | fs/jbd2/transaction.c | 4 +- | |
4166 | fs/jffs2/erase.c | 3 +- | |
4167 | fs/jffs2/wbuf.c | 3 +- | |
4168 | fs/jfs/super.c | 2 +- | |
4169 | fs/kernfs/dir.c | 2 +- | |
4170 | fs/kernfs/file.c | 20 +- | |
4171 | fs/libfs.c | 10 +- | |
4172 | fs/lockd/clntproc.c | 4 +- | |
4173 | fs/namei.c | 16 +- | |
4174 | fs/namespace.c | 16 +- | |
4175 | fs/nfs/callback_xdr.c | 2 +- | |
4176 | fs/nfs/inode.c | 6 +- | |
4177 | fs/nfsd/nfs4proc.c | 2 +- | |
4178 | fs/nfsd/nfs4xdr.c | 2 +- | |
4179 | fs/nfsd/nfscache.c | 11 +- | |
4180 | fs/nfsd/vfs.c | 6 +- | |
4181 | fs/nls/nls_base.c | 26 +- | |
4182 | fs/nls/nls_euc-jp.c | 6 +- | |
4183 | fs/nls/nls_koi8-ru.c | 6 +- | |
4184 | fs/notify/fanotify/fanotify_user.c | 4 +- | |
4185 | fs/notify/notification.c | 4 +- | |
4186 | fs/ntfs/dir.c | 2 +- | |
4187 | fs/ntfs/super.c | 6 +- | |
4188 | fs/ocfs2/dlm/dlmcommon.h | 4 +- | |
4189 | fs/ocfs2/dlm/dlmdebug.c | 10 +- | |
4190 | fs/ocfs2/dlm/dlmdomain.c | 4 +- | |
4191 | fs/ocfs2/dlm/dlmmaster.c | 4 +- | |
4192 | fs/ocfs2/localalloc.c | 2 +- | |
4193 | fs/ocfs2/ocfs2.h | 10 +- | |
4194 | fs/ocfs2/suballoc.c | 12 +- | |
4195 | fs/ocfs2/super.c | 20 +- | |
4196 | fs/overlayfs/copy_up.c | 2 +- | |
4197 | fs/pipe.c | 72 +- | |
4198 | fs/posix_acl.c | 4 +- | |
4199 | fs/proc/array.c | 20 + | |
4200 | fs/proc/base.c | 4 +- | |
4201 | fs/proc/kcore.c | 34 +- | |
4202 | fs/proc/meminfo.c | 2 +- | |
4203 | fs/proc/nommu.c | 2 +- | |
4204 | fs/proc/proc_sysctl.c | 26 +- | |
4205 | fs/proc/task_mmu.c | 42 +- | |
4206 | fs/proc/task_nommu.c | 4 +- | |
4207 | fs/proc/vmcore.c | 16 +- | |
4208 | fs/qnx6/qnx6.h | 4 +- | |
4209 | fs/quota/netlink.c | 4 +- | |
4210 | fs/read_write.c | 2 +- | |
4211 | fs/readdir.c | 3 +- | |
4212 | fs/reiserfs/do_balan.c | 2 +- | |
4213 | fs/reiserfs/procfs.c | 2 +- | |
4214 | fs/reiserfs/reiserfs.h | 4 +- | |
4215 | fs/seq_file.c | 4 +- | |
4216 | fs/splice.c | 43 +- | |
4217 | fs/squashfs/xattr.c | 12 +- | |
4218 | fs/super.c | 3 +- | |
4219 | fs/sysv/sysv.h | 2 +- | |
4220 | fs/tracefs/inode.c | 8 +- | |
4221 | fs/udf/misc.c | 2 +- | |
4222 | fs/ufs/swab.h | 4 +- | |
4223 | fs/userfaultfd.c | 2 +- | |
4224 | fs/xattr.c | 21 + | |
4225 | fs/xfs/libxfs/xfs_bmap.c | 2 +- | |
4226 | fs/xfs/libxfs/xfs_da_btree.c | 4 +- | |
4227 | fs/xfs/xfs_dir2_readdir.c | 7 +- | |
4228 | fs/xfs/xfs_ioctl.c | 2 +- | |
4229 | fs/xfs/xfs_linux.h | 4 +- | |
4230 | include/acpi/ghes.h | 2 +- | |
4231 | include/asm-generic/4level-fixup.h | 2 + | |
4232 | include/asm-generic/atomic-long.h | 176 +- | |
4233 | include/asm-generic/atomic64.h | 12 + | |
4234 | include/asm-generic/bitops/__fls.h | 2 +- | |
4235 | include/asm-generic/bitops/fls.h | 2 +- | |
4236 | include/asm-generic/bitops/fls64.h | 4 +- | |
4237 | include/asm-generic/bug.h | 6 +- | |
4238 | include/asm-generic/cache.h | 4 +- | |
4239 | include/asm-generic/emergency-restart.h | 2 +- | |
4240 | include/asm-generic/kmap_types.h | 4 +- | |
4241 | include/asm-generic/local.h | 13 + | |
4242 | include/asm-generic/pgtable-nopmd.h | 18 +- | |
4243 | include/asm-generic/pgtable-nopud.h | 15 +- | |
4244 | include/asm-generic/pgtable.h | 16 + | |
4245 | include/asm-generic/sections.h | 1 + | |
4246 | include/asm-generic/uaccess.h | 16 + | |
4247 | include/asm-generic/vmlinux.lds.h | 15 +- | |
4248 | include/crypto/algapi.h | 2 +- | |
4249 | include/drm/drmP.h | 19 +- | |
4250 | include/drm/drm_crtc_helper.h | 2 +- | |
4251 | include/drm/drm_mm.h | 2 +- | |
4252 | include/drm/i915_pciids.h | 2 +- | |
4253 | include/drm/intel-gtt.h | 4 +- | |
4254 | include/drm/ttm/ttm_memory.h | 2 +- | |
4255 | include/drm/ttm/ttm_page_alloc.h | 1 + | |
4256 | include/keys/asymmetric-subtype.h | 2 +- | |
4257 | include/linux/atmdev.h | 4 +- | |
4258 | include/linux/atomic.h | 2 +- | |
4259 | include/linux/audit.h | 2 +- | |
4260 | include/linux/average.h | 2 +- | |
4261 | include/linux/binfmts.h | 3 +- | |
4262 | include/linux/bitmap.h | 2 +- | |
4263 | include/linux/bitops.h | 8 +- | |
4264 | include/linux/blk-cgroup.h | 24 +- | |
4265 | include/linux/blkdev.h | 2 +- | |
4266 | include/linux/blktrace_api.h | 2 +- | |
4267 | include/linux/cache.h | 8 + | |
4268 | include/linux/cdrom.h | 1 - | |
4269 | include/linux/cleancache.h | 2 +- | |
4270 | include/linux/clk-provider.h | 1 + | |
4271 | include/linux/compat.h | 6 +- | |
4272 | include/linux/compiler-gcc.h | 28 +- | |
4273 | include/linux/compiler.h | 193 +- | |
4274 | include/linux/configfs.h | 2 +- | |
4275 | include/linux/cpufreq.h | 3 +- | |
4276 | include/linux/cpuidle.h | 5 +- | |
4277 | include/linux/cpumask.h | 14 +- | |
4278 | include/linux/crypto.h | 4 +- | |
4279 | include/linux/ctype.h | 2 +- | |
4280 | include/linux/dcache.h | 4 +- | |
4281 | include/linux/decompress/mm.h | 2 +- | |
4282 | include/linux/devfreq.h | 2 +- | |
4283 | include/linux/device.h | 7 +- | |
4284 | include/linux/dma-mapping.h | 2 +- | |
4285 | include/linux/efi.h | 1 + | |
4286 | include/linux/elf.h | 2 + | |
4287 | include/linux/err.h | 4 +- | |
4288 | include/linux/extcon.h | 2 +- | |
4289 | include/linux/fb.h | 3 +- | |
4290 | include/linux/fdtable.h | 2 +- | |
4291 | include/linux/fs.h | 5 +- | |
4292 | include/linux/fs_struct.h | 2 +- | |
4293 | include/linux/fscache-cache.h | 2 +- | |
4294 | include/linux/fscache.h | 2 +- | |
4295 | include/linux/fsnotify.h | 2 +- | |
4296 | include/linux/genhd.h | 4 +- | |
4297 | include/linux/genl_magic_func.h | 2 +- | |
4298 | include/linux/gfp.h | 12 +- | |
4299 | include/linux/highmem.h | 12 + | |
4300 | include/linux/hwmon-sysfs.h | 6 +- | |
4301 | include/linux/i2c.h | 1 + | |
4302 | include/linux/if_pppox.h | 2 +- | |
4303 | include/linux/init.h | 12 +- | |
4304 | include/linux/init_task.h | 7 + | |
4305 | include/linux/interrupt.h | 6 +- | |
4306 | include/linux/iommu.h | 2 +- | |
4307 | include/linux/ioport.h | 2 +- | |
4308 | include/linux/ipc.h | 2 +- | |
4309 | include/linux/irq.h | 5 +- | |
4310 | include/linux/irqdesc.h | 2 +- | |
4311 | include/linux/irqdomain.h | 3 + | |
4312 | include/linux/jbd2.h | 2 +- | |
4313 | include/linux/jiffies.h | 16 +- | |
4314 | include/linux/key-type.h | 2 +- | |
4315 | include/linux/kgdb.h | 6 +- | |
4316 | include/linux/kmemleak.h | 4 +- | |
4317 | include/linux/kobject.h | 3 +- | |
4318 | include/linux/kobject_ns.h | 2 +- | |
4319 | include/linux/kref.h | 2 +- | |
4320 | include/linux/libata.h | 2 +- | |
4321 | include/linux/linkage.h | 1 + | |
4322 | include/linux/list.h | 15 + | |
4323 | include/linux/lockref.h | 26 +- | |
4324 | include/linux/math64.h | 10 +- | |
4325 | include/linux/mempolicy.h | 7 + | |
4326 | include/linux/mm.h | 102 +- | |
4327 | include/linux/mm_types.h | 20 + | |
4328 | include/linux/mmiotrace.h | 4 +- | |
4329 | include/linux/mmzone.h | 2 +- | |
4330 | include/linux/mod_devicetable.h | 4 +- | |
4331 | include/linux/module.h | 69 +- | |
4332 | include/linux/moduleloader.h | 16 + | |
4333 | include/linux/moduleparam.h | 4 +- | |
4334 | include/linux/net.h | 2 +- | |
4335 | include/linux/netdevice.h | 7 +- | |
4336 | include/linux/netfilter.h | 2 +- | |
4337 | include/linux/netfilter/nfnetlink.h | 2 +- | |
4338 | include/linux/netlink.h | 12 +- | |
4339 | include/linux/nls.h | 4 +- | |
4340 | include/linux/notifier.h | 3 +- | |
4341 | include/linux/oprofile.h | 4 +- | |
4342 | include/linux/padata.h | 2 +- | |
4343 | include/linux/pci_hotplug.h | 3 +- | |
4344 | include/linux/percpu.h | 2 +- | |
4345 | include/linux/perf_event.h | 12 +- | |
4346 | include/linux/pipe_fs_i.h | 8 +- | |
4347 | include/linux/pm.h | 1 + | |
4348 | include/linux/pm_domain.h | 2 +- | |
4349 | include/linux/pm_runtime.h | 2 +- | |
4350 | include/linux/pnp.h | 2 +- | |
4351 | include/linux/poison.h | 4 +- | |
4352 | include/linux/power/smartreflex.h | 2 +- | |
4353 | include/linux/ppp-comp.h | 2 +- | |
4354 | include/linux/preempt.h | 21 + | |
4355 | include/linux/proc_ns.h | 2 +- | |
4356 | include/linux/psci.h | 2 +- | |
4357 | include/linux/quota.h | 2 +- | |
4358 | include/linux/random.h | 19 +- | |
4359 | include/linux/rculist.h | 16 + | |
4360 | include/linux/rcupdate.h | 8 + | |
4361 | include/linux/reboot.h | 14 +- | |
4362 | include/linux/regset.h | 3 +- | |
4363 | include/linux/relay.h | 2 +- | |
4364 | include/linux/rio.h | 2 +- | |
4365 | include/linux/rmap.h | 4 +- | |
4366 | include/linux/sched.h | 76 +- | |
4367 | include/linux/sched/sysctl.h | 1 + | |
4368 | include/linux/scif.h | 2 +- | |
4369 | include/linux/semaphore.h | 2 +- | |
4370 | include/linux/seq_file.h | 1 + | |
4371 | include/linux/seqlock.h | 10 + | |
4372 | include/linux/signal.h | 2 +- | |
4373 | include/linux/skbuff.h | 12 +- | |
4374 | include/linux/slab.h | 47 +- | |
4375 | include/linux/slab_def.h | 14 +- | |
4376 | include/linux/slub_def.h | 2 +- | |
4377 | include/linux/smp.h | 2 + | |
4378 | include/linux/sock_diag.h | 2 +- | |
4379 | include/linux/sonet.h | 2 +- | |
4380 | include/linux/spinlock.h | 17 +- | |
4381 | include/linux/srcu.h | 5 +- | |
4382 | include/linux/sunrpc/addr.h | 8 +- | |
4383 | include/linux/sunrpc/clnt.h | 2 +- | |
4384 | include/linux/sunrpc/svc.h | 2 +- | |
4385 | include/linux/sunrpc/svc_rdma.h | 18 +- | |
4386 | include/linux/sunrpc/svcauth.h | 2 +- | |
4387 | include/linux/swapops.h | 10 +- | |
4388 | include/linux/swiotlb.h | 3 +- | |
4389 | include/linux/syscalls.h | 23 +- | |
4390 | include/linux/syscore_ops.h | 2 +- | |
4391 | include/linux/sysctl.h | 3 +- | |
4392 | include/linux/sysfs.h | 9 +- | |
4393 | include/linux/sysrq.h | 3 +- | |
4394 | include/linux/tcp.h | 14 +- | |
4395 | include/linux/thread_info.h | 7 + | |
4396 | include/linux/tty.h | 4 +- | |
4397 | include/linux/tty_driver.h | 2 +- | |
4398 | include/linux/tty_ldisc.h | 2 +- | |
4399 | include/linux/types.h | 16 + | |
4400 | include/linux/uaccess.h | 2 +- | |
4401 | include/linux/uio_driver.h | 2 +- | |
4402 | include/linux/unaligned/access_ok.h | 24 +- | |
4403 | include/linux/usb.h | 12 +- | |
4404 | include/linux/usb/hcd.h | 1 + | |
4405 | include/linux/usb/renesas_usbhs.h | 2 +- | |
4406 | include/linux/vermagic.h | 21 +- | |
4407 | include/linux/vga_switcheroo.h | 8 +- | |
4408 | include/linux/vmalloc.h | 7 +- | |
4409 | include/linux/vmstat.h | 24 +- | |
4410 | include/linux/writeback.h | 3 +- | |
4411 | include/linux/xattr.h | 5 +- | |
4412 | include/linux/zlib.h | 3 +- | |
4413 | include/media/v4l2-dev.h | 2 +- | |
4414 | include/media/v4l2-device.h | 2 +- | |
4415 | include/net/9p/transport.h | 2 +- | |
4416 | include/net/bluetooth/l2cap.h | 2 +- | |
4417 | include/net/bonding.h | 2 +- | |
4418 | include/net/caif/cfctrl.h | 6 +- | |
4419 | include/net/cfg802154.h | 2 +- | |
4420 | include/net/flow.h | 2 +- | |
4421 | include/net/genetlink.h | 2 +- | |
4422 | include/net/gro_cells.h | 2 +- | |
4423 | include/net/inet_connection_sock.h | 2 +- | |
4424 | include/net/inet_sock.h | 2 +- | |
4425 | include/net/inetpeer.h | 2 +- | |
4426 | include/net/ip_fib.h | 2 +- | |
4427 | include/net/ip_vs.h | 8 +- | |
4428 | include/net/ipv6.h | 2 +- | |
4429 | include/net/irda/ircomm_tty.h | 1 + | |
4430 | include/net/iucv/af_iucv.h | 2 +- | |
4431 | include/net/llc_c_ac.h | 2 +- | |
4432 | include/net/llc_c_ev.h | 4 +- | |
4433 | include/net/llc_c_st.h | 2 +- | |
4434 | include/net/llc_s_ac.h | 2 +- | |
4435 | include/net/llc_s_st.h | 2 +- | |
4436 | include/net/mac80211.h | 6 +- | |
4437 | include/net/neighbour.h | 4 +- | |
4438 | include/net/net_namespace.h | 18 +- | |
4439 | include/net/netlink.h | 2 +- | |
4440 | include/net/netns/conntrack.h | 6 +- | |
4441 | include/net/netns/ipv4.h | 4 +- | |
4442 | include/net/netns/ipv6.h | 4 +- | |
4443 | include/net/netns/xfrm.h | 2 +- | |
4444 | include/net/ping.h | 2 +- | |
4445 | include/net/protocol.h | 4 +- | |
4446 | include/net/rtnetlink.h | 2 +- | |
4447 | include/net/sctp/checksum.h | 4 +- | |
4448 | include/net/sctp/sm.h | 4 +- | |
4449 | include/net/sctp/structs.h | 2 +- | |
4450 | include/net/snmp.h | 10 +- | |
4451 | include/net/sock.h | 12 +- | |
4452 | include/net/tcp.h | 8 +- | |
4453 | include/net/xfrm.h | 13 +- | |
4454 | include/rdma/iw_cm.h | 2 +- | |
4455 | include/scsi/libfc.h | 3 +- | |
4456 | include/scsi/scsi_device.h | 6 +- | |
4457 | include/scsi/scsi_driver.h | 2 +- | |
4458 | include/scsi/scsi_transport_fc.h | 3 +- | |
4459 | include/scsi/sg.h | 2 +- | |
4460 | include/sound/compress_driver.h | 2 +- | |
4461 | include/sound/soc.h | 4 +- | |
4462 | include/trace/events/irq.h | 4 +- | |
4463 | include/uapi/linux/a.out.h | 8 + | |
4464 | include/uapi/linux/bcache.h | 5 +- | |
4465 | include/uapi/linux/byteorder/little_endian.h | 28 +- | |
4466 | include/uapi/linux/connector.h | 2 +- | |
4467 | include/uapi/linux/elf.h | 28 + | |
4468 | include/uapi/linux/screen_info.h | 2 +- | |
4469 | include/uapi/linux/swab.h | 6 +- | |
4470 | include/uapi/linux/xattr.h | 4 + | |
4471 | include/video/udlfb.h | 8 +- | |
4472 | include/video/uvesafb.h | 1 + | |
4473 | init/Kconfig | 2 +- | |
4474 | init/Makefile | 3 + | |
4475 | init/do_mounts.c | 14 +- | |
4476 | init/do_mounts.h | 8 +- | |
4477 | init/do_mounts_initrd.c | 30 +- | |
4478 | init/do_mounts_md.c | 6 +- | |
4479 | init/init_task.c | 4 + | |
4480 | init/initramfs.c | 38 +- | |
4481 | init/main.c | 30 +- | |
4482 | ipc/compat.c | 4 +- | |
4483 | ipc/ipc_sysctl.c | 14 +- | |
4484 | ipc/mq_sysctl.c | 4 +- | |
4485 | ipc/sem.c | 4 +- | |
4486 | ipc/shm.c | 6 + | |
4487 | kernel/audit.c | 8 +- | |
4488 | kernel/auditsc.c | 4 +- | |
4489 | kernel/bpf/core.c | 7 +- | |
4490 | kernel/capability.c | 3 + | |
4491 | kernel/compat.c | 38 +- | |
4492 | kernel/debug/debug_core.c | 16 +- | |
4493 | kernel/debug/kdb/kdb_main.c | 4 +- | |
4494 | kernel/events/core.c | 30 +- | |
4495 | kernel/events/internal.h | 10 +- | |
4496 | kernel/events/uprobes.c | 2 +- | |
4497 | kernel/exit.c | 27 +- | |
4498 | kernel/fork.c | 175 +- | |
4499 | kernel/futex.c | 11 +- | |
4500 | kernel/futex_compat.c | 2 +- | |
4501 | kernel/gcov/base.c | 7 +- | |
4502 | kernel/irq/manage.c | 2 +- | |
4503 | kernel/irq/msi.c | 19 +- | |
4504 | kernel/irq/spurious.c | 2 +- | |
4505 | kernel/jump_label.c | 5 + | |
4506 | kernel/kallsyms.c | 37 +- | |
4507 | kernel/kexec.c | 3 +- | |
4508 | kernel/kmod.c | 8 +- | |
4509 | kernel/kprobes.c | 4 +- | |
4510 | kernel/ksysfs.c | 2 +- | |
4511 | kernel/locking/lockdep.c | 7 +- | |
4512 | kernel/locking/mutex-debug.c | 12 +- | |
4513 | kernel/locking/mutex-debug.h | 4 +- | |
4514 | kernel/locking/mutex.c | 6 +- | |
4515 | kernel/module.c | 422 +- | |
4516 | kernel/notifier.c | 17 +- | |
4517 | kernel/padata.c | 4 +- | |
4518 | kernel/panic.c | 5 +- | |
4519 | kernel/pid.c | 2 +- | |
4520 | kernel/pid_namespace.c | 2 +- | |
4521 | kernel/power/process.c | 12 +- | |
4522 | kernel/profile.c | 14 +- | |
4523 | kernel/ptrace.c | 8 +- | |
4524 | kernel/rcu/rcutorture.c | 60 +- | |
4525 | kernel/rcu/tiny.c | 4 +- | |
4526 | kernel/rcu/tree.c | 42 +- | |
4527 | kernel/rcu/tree.h | 16 +- | |
4528 | kernel/rcu/tree_plugin.h | 18 +- | |
4529 | kernel/rcu/tree_trace.c | 14 +- | |
4530 | kernel/resource.c | 4 +- | |
4531 | kernel/sched/auto_group.c | 4 +- | |
4532 | kernel/sched/core.c | 45 +- | |
4533 | kernel/sched/fair.c | 2 +- | |
4534 | kernel/sched/sched.h | 2 +- | |
4535 | kernel/signal.c | 24 +- | |
4536 | kernel/smpboot.c | 4 +- | |
4537 | kernel/softirq.c | 12 +- | |
4538 | kernel/sys.c | 10 +- | |
4539 | kernel/sysctl.c | 34 +- | |
4540 | kernel/time/alarmtimer.c | 2 +- | |
4541 | kernel/time/posix-cpu-timers.c | 4 +- | |
4542 | kernel/time/posix-timers.c | 24 +- | |
4543 | kernel/time/timer.c | 2 +- | |
4544 | kernel/time/timer_stats.c | 10 +- | |
4545 | kernel/trace/blktrace.c | 6 +- | |
4546 | kernel/trace/ftrace.c | 15 +- | |
4547 | kernel/trace/ring_buffer.c | 96 +- | |
4548 | kernel/trace/trace.c | 2 +- | |
4549 | kernel/trace/trace.h | 2 +- | |
4550 | kernel/trace/trace_clock.c | 4 +- | |
4551 | kernel/trace/trace_events.c | 1 - | |
4552 | kernel/trace/trace_functions_graph.c | 4 +- | |
4553 | kernel/trace/trace_mmiotrace.c | 8 +- | |
4554 | kernel/trace/trace_output.c | 10 +- | |
4555 | kernel/trace/trace_seq.c | 2 +- | |
4556 | kernel/trace/trace_stack.c | 2 +- | |
4557 | kernel/user.c | 2 +- | |
4558 | kernel/user_namespace.c | 2 +- | |
4559 | kernel/utsname_sysctl.c | 2 +- | |
4560 | kernel/watchdog.c | 2 +- | |
4561 | kernel/workqueue.c | 8 +- | |
4562 | lib/Kconfig.debug | 8 +- | |
4563 | lib/Makefile | 2 +- | |
4564 | lib/bitmap.c | 8 +- | |
4565 | lib/bug.c | 2 + | |
4566 | lib/debugobjects.c | 2 +- | |
4567 | lib/decompress_bunzip2.c | 3 +- | |
4568 | lib/decompress_unlzma.c | 4 +- | |
4569 | lib/div64.c | 4 +- | |
4570 | lib/dma-debug.c | 4 +- | |
4571 | lib/inflate.c | 2 +- | |
4572 | lib/ioremap.c | 4 +- | |
4573 | lib/kobject.c | 4 +- | |
4574 | lib/list_debug.c | 126 +- | |
4575 | lib/lockref.c | 44 +- | |
4576 | lib/percpu-refcount.c | 2 +- | |
4577 | lib/radix-tree.c | 2 +- | |
4578 | lib/random32.c | 2 +- | |
4579 | lib/rhashtable.c | 4 +- | |
4580 | lib/show_mem.c | 2 +- | |
4581 | lib/strncpy_from_user.c | 2 +- | |
4582 | lib/strnlen_user.c | 2 +- | |
4583 | lib/swiotlb.c | 2 +- | |
4584 | lib/usercopy.c | 6 + | |
4585 | lib/vsprintf.c | 12 +- | |
4586 | mm/Kconfig | 6 +- | |
4587 | mm/backing-dev.c | 4 +- | |
4588 | mm/debug.c | 3 + | |
4589 | mm/filemap.c | 2 +- | |
4590 | mm/gup.c | 13 +- | |
4591 | mm/highmem.c | 6 +- | |
4592 | mm/hugetlb.c | 70 +- | |
4593 | mm/internal.h | 1 + | |
4594 | mm/maccess.c | 12 +- | |
4595 | mm/madvise.c | 37 + | |
4596 | mm/memory-failure.c | 6 +- | |
4597 | mm/memory.c | 424 +- | |
4598 | mm/mempolicy.c | 25 + | |
4599 | mm/mlock.c | 18 +- | |
4600 | mm/mm_init.c | 2 +- | |
4601 | mm/mmap.c | 582 +- | |
4602 | mm/mprotect.c | 137 +- | |
4603 | mm/mremap.c | 39 +- | |
4604 | mm/nommu.c | 21 +- | |
4605 | mm/page-writeback.c | 2 +- | |
4606 | mm/page_alloc.c | 50 +- | |
4607 | mm/percpu.c | 2 +- | |
4608 | mm/process_vm_access.c | 14 +- | |
4609 | mm/rmap.c | 45 +- | |
4610 | mm/shmem.c | 19 +- | |
4611 | mm/slab.c | 111 +- | |
4612 | mm/slab.h | 22 +- | |
4613 | mm/slab_common.c | 86 +- | |
4614 | mm/slob.c | 218 +- | |
4615 | mm/slub.c | 109 +- | |
4616 | mm/sparse-vmemmap.c | 4 +- | |
4617 | mm/sparse.c | 2 +- | |
4618 | mm/swap.c | 2 + | |
4619 | mm/swapfile.c | 12 +- | |
4620 | mm/util.c | 6 + | |
4621 | mm/vmalloc.c | 114 +- | |
4622 | mm/vmstat.c | 12 +- | |
4623 | net/8021q/vlan.c | 5 +- | |
4624 | net/8021q/vlan_netlink.c | 2 +- | |
4625 | net/9p/mod.c | 4 +- | |
4626 | net/9p/trans_fd.c | 2 +- | |
4627 | net/atm/atm_misc.c | 8 +- | |
4628 | net/atm/lec.h | 2 +- | |
4629 | net/atm/proc.c | 6 +- | |
4630 | net/atm/resources.c | 4 +- | |
4631 | net/ax25/sysctl_net_ax25.c | 2 +- | |
4632 | net/batman-adv/bat_iv_ogm.c | 8 +- | |
4633 | net/batman-adv/fragmentation.c | 2 +- | |
4634 | net/batman-adv/routing.c | 4 +- | |
4635 | net/batman-adv/soft-interface.c | 10 +- | |
4636 | net/batman-adv/translation-table.c | 14 +- | |
4637 | net/batman-adv/types.h | 8 +- | |
4638 | net/bluetooth/hci_sock.c | 2 +- | |
4639 | net/bluetooth/l2cap_core.c | 6 +- | |
4640 | net/bluetooth/l2cap_sock.c | 12 +- | |
4641 | net/bluetooth/rfcomm/sock.c | 4 +- | |
4642 | net/bluetooth/rfcomm/tty.c | 4 +- | |
4643 | net/bridge/br_netlink.c | 2 +- | |
4644 | net/bridge/netfilter/ebtables.c | 6 +- | |
4645 | net/caif/cfctrl.c | 11 +- | |
4646 | net/caif/chnl_net.c | 2 +- | |
4647 | net/can/af_can.c | 2 +- | |
4648 | net/can/gw.c | 6 +- | |
4649 | net/ceph/messenger.c | 4 +- | |
4650 | net/compat.c | 26 +- | |
4651 | net/core/datagram.c | 2 +- | |
4652 | net/core/dev.c | 16 +- | |
4653 | net/core/filter.c | 2 +- | |
4654 | net/core/flow.c | 6 +- | |
4655 | net/core/neighbour.c | 18 +- | |
4656 | net/core/net-sysfs.c | 2 +- | |
4657 | net/core/net_namespace.c | 8 +- | |
4658 | net/core/netpoll.c | 4 +- | |
4659 | net/core/rtnetlink.c | 17 +- | |
4660 | net/core/scm.c | 12 +- | |
4661 | net/core/skbuff.c | 11 +- | |
4662 | net/core/sock.c | 28 +- | |
4663 | net/core/sock_diag.c | 15 +- | |
4664 | net/core/sysctl_net_core.c | 22 +- | |
4665 | net/decnet/af_decnet.c | 1 + | |
4666 | net/decnet/sysctl_net_decnet.c | 4 +- | |
4667 | net/dsa/dsa.c | 2 +- | |
4668 | net/hsr/hsr_netlink.c | 2 +- | |
4669 | net/ieee802154/6lowpan/core.c | 2 +- | |
4670 | net/ieee802154/6lowpan/reassembly.c | 14 +- | |
4671 | net/ipv4/af_inet.c | 2 +- | |
4672 | net/ipv4/arp.c | 2 +- | |
4673 | net/ipv4/devinet.c | 18 +- | |
4674 | net/ipv4/fib_frontend.c | 6 +- | |
4675 | net/ipv4/fib_semantics.c | 2 +- | |
4676 | net/ipv4/inet_connection_sock.c | 4 +- | |
4677 | net/ipv4/inet_diag.c | 4 +- | |
4678 | net/ipv4/inet_timewait_sock.c | 2 +- | |
4679 | net/ipv4/inetpeer.c | 2 +- | |
4680 | net/ipv4/ip_fragment.c | 15 +- | |
4681 | net/ipv4/ip_gre.c | 6 +- | |
4682 | net/ipv4/ip_sockglue.c | 2 +- | |
4683 | net/ipv4/ip_vti.c | 4 +- | |
4684 | net/ipv4/ipconfig.c | 6 +- | |
4685 | net/ipv4/ipip.c | 4 +- | |
4686 | net/ipv4/netfilter/arp_tables.c | 12 +- | |
4687 | net/ipv4/netfilter/ip_tables.c | 12 +- | |
4688 | net/ipv4/ping.c | 14 +- | |
4689 | net/ipv4/proc.c | 8 +- | |
4690 | net/ipv4/raw.c | 14 +- | |
4691 | net/ipv4/route.c | 32 +- | |
4692 | net/ipv4/sysctl_net_ipv4.c | 22 +- | |
4693 | net/ipv4/tcp_input.c | 6 +- | |
4694 | net/ipv4/tcp_probe.c | 2 +- | |
4695 | net/ipv4/udp.c | 10 +- | |
4696 | net/ipv4/xfrm4_mode_transport.c | 2 +- | |
4697 | net/ipv4/xfrm4_policy.c | 17 +- | |
4698 | net/ipv4/xfrm4_state.c | 4 +- | |
4699 | net/ipv6/addrconf.c | 22 +- | |
4700 | net/ipv6/af_inet6.c | 2 +- | |
4701 | net/ipv6/datagram.c | 2 +- | |
4702 | net/ipv6/icmp.c | 2 +- | |
4703 | net/ipv6/ip6_fib.c | 4 +- | |
4704 | net/ipv6/ip6_gre.c | 10 +- | |
4705 | net/ipv6/ip6_tunnel.c | 4 +- | |
4706 | net/ipv6/ip6_vti.c | 4 +- | |
4707 | net/ipv6/ipv6_sockglue.c | 2 +- | |
4708 | net/ipv6/ndisc.c | 2 +- | |
4709 | net/ipv6/netfilter/ip6_tables.c | 12 +- | |
4710 | net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +- | |
4711 | net/ipv6/ping.c | 33 +- | |
4712 | net/ipv6/proc.c | 10 +- | |
4713 | net/ipv6/raw.c | 17 +- | |
4714 | net/ipv6/reassembly.c | 13 +- | |
4715 | net/ipv6/route.c | 2 +- | |
4716 | net/ipv6/sit.c | 4 +- | |
4717 | net/ipv6/sysctl_net_ipv6.c | 2 +- | |
4718 | net/ipv6/udp.c | 6 +- | |
4719 | net/ipv6/xfrm6_policy.c | 17 +- | |
4720 | net/irda/ircomm/ircomm_tty.c | 18 +- | |
4721 | net/iucv/af_iucv.c | 4 +- | |
4722 | net/iucv/iucv.c | 2 +- | |
4723 | net/key/af_key.c | 4 +- | |
4724 | net/l2tp/l2tp_eth.c | 38 +- | |
4725 | net/l2tp/l2tp_ip.c | 2 +- | |
4726 | net/l2tp/l2tp_ip6.c | 2 +- | |
4727 | net/mac80211/cfg.c | 10 +- | |
4728 | net/mac80211/debugfs_key.c | 4 +- | |
4729 | net/mac80211/ieee80211_i.h | 3 +- | |
4730 | net/mac80211/iface.c | 20 +- | |
4731 | net/mac80211/key.c | 4 +- | |
4732 | net/mac80211/main.c | 2 +- | |
4733 | net/mac80211/pm.c | 4 +- | |
4734 | net/mac80211/rate.c | 2 +- | |
4735 | net/mac80211/sta_info.c | 2 +- | |
4736 | net/mac80211/tx.c | 2 +- | |
4737 | net/mac80211/util.c | 8 +- | |
4738 | net/mac80211/wpa.c | 10 +- | |
4739 | net/mac802154/iface.c | 4 +- | |
4740 | net/mpls/af_mpls.c | 6 +- | |
4741 | net/netfilter/ipset/ip_set_core.c | 4 +- | |
4742 | net/netfilter/ipvs/ip_vs_conn.c | 6 +- | |
4743 | net/netfilter/ipvs/ip_vs_core.c | 4 +- | |
4744 | net/netfilter/ipvs/ip_vs_ctl.c | 14 +- | |
4745 | net/netfilter/ipvs/ip_vs_lblc.c | 2 +- | |
4746 | net/netfilter/ipvs/ip_vs_lblcr.c | 2 +- | |
4747 | net/netfilter/ipvs/ip_vs_sync.c | 6 +- | |
4748 | net/netfilter/ipvs/ip_vs_xmit.c | 4 +- | |
4749 | net/netfilter/nf_conntrack_acct.c | 2 +- | |
4750 | net/netfilter/nf_conntrack_ecache.c | 2 +- | |
4751 | net/netfilter/nf_conntrack_helper.c | 2 +- | |
4752 | net/netfilter/nf_conntrack_netlink.c | 22 +- | |
4753 | net/netfilter/nf_conntrack_proto.c | 2 +- | |
4754 | net/netfilter/nf_conntrack_standalone.c | 2 +- | |
4755 | net/netfilter/nf_conntrack_timestamp.c | 2 +- | |
4756 | net/netfilter/nf_log.c | 10 +- | |
4757 | net/netfilter/nf_sockopt.c | 4 +- | |
4758 | net/netfilter/nf_tables_api.c | 13 +- | |
4759 | net/netfilter/nfnetlink_acct.c | 7 +- | |
4760 | net/netfilter/nfnetlink_cthelper.c | 2 +- | |
4761 | net/netfilter/nfnetlink_cttimeout.c | 2 +- | |
4762 | net/netfilter/nfnetlink_log.c | 4 +- | |
4763 | net/netfilter/nft_compat.c | 9 +- | |
4764 | net/netfilter/xt_statistic.c | 8 +- | |
4765 | net/netlink/af_netlink.c | 14 +- | |
4766 | net/netlink/diag.c | 2 +- | |
4767 | net/netlink/genetlink.c | 14 +- | |
4768 | net/openvswitch/vport-internal_dev.c | 2 +- | |
4769 | net/packet/af_packet.c | 26 +- | |
4770 | net/packet/diag.c | 2 +- | |
4771 | net/packet/internal.h | 6 +- | |
4772 | net/phonet/pep.c | 6 +- | |
4773 | net/phonet/socket.c | 2 +- | |
4774 | net/phonet/sysctl.c | 2 +- | |
4775 | net/rds/cong.c | 6 +- | |
4776 | net/rds/ib.h | 2 +- | |
4777 | net/rds/ib_cm.c | 2 +- | |
4778 | net/rds/ib_recv.c | 4 +- | |
4779 | net/rds/iw.h | 2 +- | |
4780 | net/rds/iw_cm.c | 2 +- | |
4781 | net/rds/iw_recv.c | 4 +- | |
4782 | net/rds/rds.h | 2 +- | |
4783 | net/rds/tcp.c | 2 +- | |
4784 | net/rds/tcp_send.c | 2 +- | |
4785 | net/rxrpc/af_rxrpc.c | 2 +- | |
4786 | net/rxrpc/ar-ack.c | 14 +- | |
4787 | net/rxrpc/ar-call.c | 2 +- | |
4788 | net/rxrpc/ar-connection.c | 2 +- | |
4789 | net/rxrpc/ar-connevent.c | 2 +- | |
4790 | net/rxrpc/ar-input.c | 4 +- | |
4791 | net/rxrpc/ar-internal.h | 8 +- | |
4792 | net/rxrpc/ar-local.c | 2 +- | |
4793 | net/rxrpc/ar-output.c | 4 +- | |
4794 | net/rxrpc/ar-peer.c | 2 +- | |
4795 | net/rxrpc/ar-proc.c | 4 +- | |
4796 | net/rxrpc/ar-transport.c | 2 +- | |
4797 | net/rxrpc/rxkad.c | 4 +- | |
4798 | net/sched/sch_generic.c | 4 +- | |
4799 | net/sctp/ipv6.c | 6 +- | |
4800 | net/sctp/protocol.c | 10 +- | |
4801 | net/sctp/sm_sideeffect.c | 2 +- | |
4802 | net/sctp/socket.c | 21 +- | |
4803 | net/sctp/sysctl.c | 10 +- | |
4804 | net/socket.c | 18 +- | |
4805 | net/sunrpc/auth_gss/svcauth_gss.c | 4 +- | |
4806 | net/sunrpc/clnt.c | 4 +- | |
4807 | net/sunrpc/sched.c | 4 +- | |
4808 | net/sunrpc/svc.c | 4 +- | |
4809 | net/sunrpc/svcauth_unix.c | 2 +- | |
4810 | net/sunrpc/xprtrdma/svc_rdma.c | 44 +- | |
4811 | net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +- | |
4812 | net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +- | |
4813 | net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +- | |
4814 | net/tipc/netlink_compat.c | 12 +- | |
4815 | net/tipc/subscr.c | 2 +- | |
4816 | net/unix/diag.c | 2 +- | |
4817 | net/unix/sysctl_net_unix.c | 2 +- | |
4818 | net/wireless/wext-core.c | 19 +- | |
4819 | net/xfrm/xfrm_policy.c | 16 +- | |
4820 | net/xfrm/xfrm_state.c | 33 +- | |
4821 | net/xfrm/xfrm_sysctl.c | 2 +- | |
4822 | net/xfrm/xfrm_user.c | 2 +- | |
4823 | scripts/Kbuild.include | 2 +- | |
4824 | scripts/Makefile.build | 2 +- | |
4825 | scripts/Makefile.clean | 3 +- | |
4826 | scripts/Makefile.host | 69 +- | |
4827 | scripts/basic/fixdep.c | 12 +- | |
4828 | scripts/dtc/checks.c | 14 +- | |
4829 | scripts/dtc/data.c | 6 +- | |
4830 | scripts/dtc/flattree.c | 8 +- | |
4831 | scripts/dtc/livetree.c | 4 +- | |
4832 | scripts/gcc-plugin.sh | 51 + | |
4833 | scripts/headers_install.sh | 1 + | |
4834 | scripts/kallsyms.c | 4 +- | |
4835 | scripts/kconfig/lkc.h | 5 +- | |
4836 | scripts/kconfig/menu.c | 2 +- | |
4837 | scripts/kconfig/symbol.c | 6 +- | |
4838 | scripts/link-vmlinux.sh | 2 +- | |
4839 | scripts/mod/file2alias.c | 14 +- | |
4840 | scripts/mod/modpost.c | 25 +- | |
4841 | scripts/mod/modpost.h | 6 +- | |
4842 | scripts/mod/sumversion.c | 2 +- | |
4843 | scripts/module-common.lds | 4 + | |
4844 | scripts/package/builddeb | 1 + | |
4845 | scripts/pnmtologo.c | 6 +- | |
4846 | scripts/sortextable.h | 6 +- | |
4847 | scripts/tags.sh | 2 +- | |
4848 | security/Kconfig | 691 +- | |
4849 | security/apparmor/include/policy.h | 2 +- | |
4850 | security/apparmor/policy.c | 4 +- | |
4851 | security/integrity/ima/ima.h | 4 +- | |
4852 | security/integrity/ima/ima_api.c | 2 +- | |
4853 | security/integrity/ima/ima_fs.c | 4 +- | |
4854 | security/integrity/ima/ima_queue.c | 2 +- | |
4855 | security/keys/internal.h | 8 +- | |
4856 | security/keys/key.c | 18 +- | |
4857 | security/keys/keyring.c | 4 - | |
4858 | security/selinux/avc.c | 6 +- | |
4859 | security/selinux/include/xfrm.h | 2 +- | |
4860 | security/yama/yama_lsm.c | 2 +- | |
4861 | sound/aoa/codecs/onyx.c | 7 +- | |
4862 | sound/aoa/codecs/onyx.h | 1 + | |
4863 | sound/core/oss/pcm_oss.c | 18 +- | |
4864 | sound/core/pcm_compat.c | 2 +- | |
4865 | sound/core/pcm_native.c | 4 +- | |
4866 | sound/core/seq/seq_clientmgr.c | 10 +- | |
4867 | sound/core/seq/seq_compat.c | 2 +- | |
4868 | sound/core/seq/seq_fifo.c | 6 +- | |
4869 | sound/core/seq/seq_fifo.h | 2 +- | |
4870 | sound/core/seq/seq_memory.c | 6 +- | |
4871 | sound/core/sound.c | 2 +- | |
4872 | sound/drivers/mts64.c | 14 +- | |
4873 | sound/drivers/opl4/opl4_lib.c | 2 +- | |
4874 | sound/drivers/portman2x4.c | 3 +- | |
4875 | sound/firewire/amdtp-am824.c | 2 +- | |
4876 | sound/firewire/amdtp-stream.c | 4 +- | |
4877 | sound/firewire/amdtp-stream.h | 2 +- | |
4878 | sound/firewire/digi00x/amdtp-dot.c | 2 +- | |
4879 | sound/firewire/isight.c | 10 +- | |
4880 | sound/firewire/scs1x.c | 8 +- | |
4881 | sound/oss/sb_audio.c | 2 +- | |
4882 | sound/oss/swarm_cs4297a.c | 6 +- | |
4883 | sound/pci/hda/hda_codec.c | 2 +- | |
4884 | sound/pci/ymfpci/ymfpci.h | 2 +- | |
4885 | sound/pci/ymfpci/ymfpci_main.c | 12 +- | |
4886 | sound/soc/codecs/sti-sas.c | 10 +- | |
4887 | sound/soc/intel/skylake/skl-sst-dsp.h | 4 +- | |
4888 | sound/soc/soc-ac97.c | 6 +- | |
4889 | sound/soc/xtensa/xtfpga-i2s.c | 2 +- | |
4890 | tools/gcc/Makefile | 42 + | |
4891 | tools/gcc/checker_plugin.c | 549 + | |
4892 | tools/gcc/colorize_plugin.c | 215 + | |
4893 | tools/gcc/constify_plugin.c | 571 + | |
4894 | tools/gcc/gcc-common.h | 819 + | |
4895 | tools/gcc/initify_plugin.c | 591 + | |
4896 | tools/gcc/kallocstat_plugin.c | 188 + | |
4897 | tools/gcc/kernexec_plugin.c | 549 + | |
4898 | tools/gcc/latent_entropy_plugin.c | 474 + | |
4899 | tools/gcc/randomize_layout_seed.h | 1 + | |
4900 | tools/gcc/size_overflow_plugin/.gitignore | 2 + | |
4901 | tools/gcc/size_overflow_plugin/Makefile | 28 + | |
4902 | .../disable_size_overflow_hash.data | 12434 ++ | |
4903 | .../disable_size_overflow_hash.h | 152601 ++++++++++++++++++ | |
4904 | .../generate_size_overflow_hash.sh | 103 + | |
4905 | .../insert_size_overflow_asm.c | 416 + | |
4906 | .../size_overflow_plugin/intentional_overflow.c | 1116 + | |
4907 | .../size_overflow_plugin/remove_unnecessary_dup.c | 137 + | |
4908 | tools/gcc/size_overflow_plugin/size_overflow.h | 325 + | |
4909 | .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 + | |
4910 | .../size_overflow_plugin/size_overflow_hash.data | 21454 +++ | |
4911 | .../size_overflow_hash_aux.data | 92 + | |
4912 | tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 + | |
4913 | .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 + | |
4914 | .../size_overflow_plugin/size_overflow_plugin.c | 318 + | |
4915 | .../size_overflow_plugin_hash.c | 352 + | |
4916 | .../size_overflow_plugin/size_overflow_transform.c | 745 + | |
4917 | .../size_overflow_transform_core.c | 1015 + | |
4918 | tools/gcc/stackleak_plugin.c | 444 + | |
4919 | tools/gcc/structleak_plugin.c | 290 + | |
4920 | tools/include/linux/compiler.h | 8 + | |
4921 | tools/perf/util/include/asm/alternative-asm.h | 3 + | |
4922 | tools/virtio/linux/uaccess.h | 2 +- | |
4923 | virt/kvm/kvm_main.c | 42 +- | |
4924 | 2088 files changed, 221599 insertions(+), 9618 deletions(-) | |
a8495855 PK |
4925 | commit 87790bbd0d8dc2bd7fd86cb947e32886db9e9766 |
4926 | Author: Matthew Wilcox <willy@linux.intel.com> | |
4927 | Date: Tue Feb 2 16:57:52 2016 -0800 | |
4928 | ||
4929 | radix-tree: fix race in gang lookup | |
4930 | ||
4931 | If the indirect_ptr bit is set on a slot, that indicates we need to redo | |
4932 | the lookup. Introduce a new function radix_tree_iter_retry() which | |
4933 | forces the loop to retry the lookup by setting 'slot' to NULL and | |
4934 | turning the iterator back to point at the problematic entry. | |
4935 | ||
4936 | This is a pretty rare problem to hit at the moment; the lookup has to | |
4937 | race with a grow of the radix tree from a height of 0. The consequences | |
4938 | of hitting this race are that gang lookup could return a pointer to a | |
4939 | radix_tree_node instead of a pointer to whatever the user had inserted | |
4940 | in the tree. | |
4941 | ||
4942 | Fixes: cebbd29e1c2f ("radix-tree: rewrite gang lookup using iterator") | |
4943 | Signed-off-by: Matthew Wilcox <willy@linux.intel.com> | |
4944 | Cc: Hugh Dickins <hughd@google.com> | |
4945 | Cc: Ohad Ben-Cohen <ohad@wizery.com> | |
4946 | Cc: Konstantin Khlebnikov <khlebnikov@openvz.org> | |
4947 | Cc: <stable@vger.kernel.org> | |
4948 | Signed-off-by: Andrew Morton <akpm@linux-foundation.org> | |
4949 | Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> | |
4950 | ||
4951 | include/linux/radix-tree.h | 16 ++++++++++++++++ | |
4952 | lib/radix-tree.c | 12 ++++++++++-- | |
4953 | 2 files changed, 26 insertions(+), 2 deletions(-) | |
4954 | ||
4955 | commit bf628043b4589c910919a0f221ae7f42aa8cea93 | |
4956 | Author: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
4957 | Date: Wed Feb 3 02:11:03 2016 +0100 | |
4958 | ||
4959 | unix: correctly track in-flight fds in sending process user_struct | |
4960 | ||
4961 | The commit referenced in the Fixes tag incorrectly accounted the number | |
4962 | of in-flight fds over a unix domain socket to the original opener | |
4963 | of the file-descriptor. This allows another process to arbitrary | |
4964 | deplete the original file-openers resource limit for the maximum of | |
4965 | open files. Instead the sending processes and its struct cred should | |
4966 | be credited. | |
4967 | ||
4968 | To do so, we add a reference counted struct user_struct pointer to the | |
4969 | scm_fp_list and use it to account for the number of inflight unix fds. | |
4970 | ||
4971 | Fixes: 712f4aad406bb1 ("unix: properly account for FDs passed over unix sockets") | |
4972 | Reported-by: David Herrmann <dh.herrmann@gmail.com> | |
4973 | Cc: David Herrmann <dh.herrmann@gmail.com> | |
4974 | Cc: Willy Tarreau <w@1wt.eu> | |
4975 | Cc: Linus Torvalds <torvalds@linux-foundation.org> | |
4976 | Suggested-by: Linus Torvalds <torvalds@linux-foundation.org> | |
4977 | Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
4978 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
4979 | ||
4980 | include/net/af_unix.h | 4 ++-- | |
4981 | include/net/scm.h | 1 + | |
4982 | net/core/scm.c | 7 +++++++ | |
4983 | net/unix/af_unix.c | 4 ++-- | |
4984 | net/unix/garbage.c | 8 ++++---- | |
4985 | 5 files changed, 16 insertions(+), 8 deletions(-) | |
4986 | ||
4987 | commit e830db443ff78d70b7b63536e688d73907face0c | |
4988 | Author: Mike Kravetz <mike.kravetz@oracle.com> | |
4989 | Date: Fri Jan 15 16:57:37 2016 -0800 | |
4990 | ||
4991 | fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list() | |
4992 | ||
4993 | Hillf Danton noticed bugs in the hugetlb_vmtruncate_list routine. The | |
4994 | argument end is of type pgoff_t. It was being converted to a vaddr | |
4995 | offset and passed to unmap_hugepage_range. However, end was also being | |
4996 | used as an argument to the vma_interval_tree_foreach controlling loop. | |
4997 | In addition, the conversion of end to vaddr offset was incorrect. | |
4998 | ||
4999 | hugetlb_vmtruncate_list is called as part of a file truncate or | |
5000 | fallocate hole punch operation. | |
5001 | ||
5002 | When truncating a hugetlbfs file, this bug could prevent some pages from | |
5003 | being unmapped. This is possible if there are multiple vmas mapping the | |
5004 | file, and there is a sufficiently sized hole between the mappings. The | |
5005 | size of the hole between two vmas (A,B) must be such that the starting | |
5006 | virtual address of B is greater than (ending virtual address of A << | |
5007 | PAGE_SHIFT). In this case, the pages in B would not be unmapped. If | |
5008 | pages are not properly unmapped during truncate, the following BUG is | |
5009 | hit: | |
5010 | ||
5011 | kernel BUG at fs/hugetlbfs/inode.c:428! | |
5012 | ||
5013 | In the fallocate hole punch case, this bug could prevent pages from | |
5014 | being unmapped as in the truncate case. However, for hole punch the | |
5015 | result is that unmapped pages will not be removed during the operation. | |
5016 | For hole punch, it is also possible that more pages than desired will be | |
5017 | unmapped. This unnecessary unmapping will cause page faults to | |
5018 | reestablish the mappings on subsequent page access. | |
5019 | ||
5020 | Fixes: 1bfad99ab (" hugetlbfs: hugetlb_vmtruncate_list() needs to take a range")Reported-by: Hillf Danton <hillf.zj@alibaba-inc.com> | |
5021 | Signed-off-by: Mike Kravetz <mike.kravetz@oracle.com> | |
5022 | Cc: Hugh Dickins <hughd@google.com> | |
5023 | Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com> | |
5024 | Cc: Davidlohr Bueso <dave@stgolabs.net> | |
5025 | Cc: Dave Hansen <dave.hansen@linux.intel.com> | |
5026 | Cc: <stable@vger.kernel.org> [4.3] | |
5027 | Signed-off-by: Andrew Morton <akpm@linux-foundation.org> | |
5028 | Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> | |
5029 | ||
5030 | fs/hugetlbfs/inode.c | 19 +++++++++++-------- | |
5031 | 1 files changed, 11 insertions(+), 8 deletions(-) | |
5032 | ||
5033 | commit cdb3ba4a9113b779347387f3b6c6ea72dd4db12f | |
5034 | Author: Takashi Iwai <tiwai@suse.de> | |
5035 | Date: Thu Feb 4 17:06:13 2016 +0100 | |
5036 | ||
5037 | ALSA: timer: Fix leftover link at closing | |
5038 | ||
5039 | In ALSA timer core, the active timer instance is managed in | |
5040 | active_list linked list. Each element is added / removed dynamically | |
5041 | at timer start, stop and in timer interrupt. The problem is that | |
5042 | snd_timer_interrupt() has a thinko and leaves the element in | |
5043 | active_list when it's the last opened element. This eventually leads | |
5044 | to list corruption or use-after-free error. | |
5045 | ||
5046 | This hasn't been revealed because we used to delete the list forcibly | |
5047 | in snd_timer_stop() in the past. However, the recent fix avoids the | |
5048 | double-stop behavior (in commit [f784beb75ce8: ALSA: timer: Fix link | |
5049 | corruption due to double start or stop]), and this leak hits reality. | |
5050 | ||
5051 | This patch fixes the link management in snd_timer_interrupt(). Now it | |
5052 | simply unlinks no matter which stream is. | |
5053 | ||
5054 | BugLink: http://lkml.kernel.org/r/CACT4Y+Yy2aukHP-EDp8-ziNqNNmb-NTf=jDWXMP7jB8HDa2vng@mail.gmail.com | |
5055 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
5056 | Cc: <stable@vger.kernel.org> | |
5057 | Signed-off-by: Takashi Iwai <tiwai@suse.de> | |
5058 | ||
5059 | sound/core/timer.c | 4 ++-- | |
5060 | 1 files changed, 2 insertions(+), 2 deletions(-) | |
5061 | ||
5062 | commit 47d9647902f6a2f46a2be1e0140ba0f6f8c06008 | |
5063 | Author: Konstantin Khlebnikov <koct9i@gmail.com> | |
5064 | Date: Fri Feb 5 15:37:01 2016 -0800 | |
5065 | ||
5066 | radix-tree: fix oops after radix_tree_iter_retry | |
5067 | ||
5068 | Helper radix_tree_iter_retry() resets next_index to the current index. | |
5069 | In following radix_tree_next_slot current chunk size becomes zero. This | |
5070 | isn't checked and it tries to dereference null pointer in slot. | |
5071 | ||
5072 | Tagged iterator is fine because retry happens only at slot 0 where tag | |
5073 | bitmask in iter->tags is filled with single bit. | |
5074 | ||
5075 | Fixes: 46437f9a554f ("radix-tree: fix race in gang lookup") | |
5076 | Signed-off-by: Konstantin Khlebnikov <koct9i@gmail.com> | |
5077 | Cc: Matthew Wilcox <willy@linux.intel.com> | |
5078 | Cc: Hugh Dickins <hughd@google.com> | |
5079 | Cc: Ohad Ben-Cohen <ohad@wizery.com> | |
5080 | Cc: Jeremiah Mahler <jmmahler@gmail.com> | |
5081 | Cc: <stable@vger.kernel.org> | |
5082 | Signed-off-by: Andrew Morton <akpm@linux-foundation.org> | |
5083 | Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> | |
5084 | ||
5085 | include/linux/radix-tree.h | 6 +++--- | |
5086 | 1 files changed, 3 insertions(+), 3 deletions(-) | |
5087 | ||
762f0ceb PK |
5088 | commit 95b5dcb3c01958502af00b0bc0da1d906aae11a2 |
5089 | Merge: 438be0b 256aeaf | |
5090 | Author: Brad Spengler <spender@grsecurity.net> | |
5091 | Date: Sun Feb 7 08:29:33 2016 -0500 | |
5092 | ||
5093 | Merge branch 'pax-test' into grsec-test | |
5094 | ||
5095 | commit 256aeaf87c22de8edf1f03682a572c590ae07771 | |
5096 | Author: Brad Spengler <spender@grsecurity.net> | |
5097 | Date: Sun Feb 7 08:29:09 2016 -0500 | |
5098 | ||
5099 | Update to pax-linux-4.3.5-test28.patch: | |
5100 | - fixed an integer truncation bug in numa_clear_kernel_node_hotplug caught by the size overflow plugin, reported by x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4374) | |
5101 | - spender fixed UDEREF on arm | |
5102 | ||
5103 | arch/arm/Kconfig | 1 + | |
5104 | arch/arm/include/asm/domain.h | 21 ++++++++- | |
5105 | arch/arm/include/asm/futex.h | 9 ---- | |
5106 | arch/arm/include/asm/thread_info.h | 3 + | |
5107 | arch/arm/include/asm/uaccess.h | 81 +++++++++++++++--------------------- | |
5108 | arch/arm/kernel/entry-armv.S | 2 +- | |
5109 | arch/arm/kernel/process.c | 2 +- | |
5110 | arch/arm/mm/alignment.c | 8 ---- | |
5111 | arch/x86/mm/numa.c | 2 +- | |
5112 | security/Kconfig | 1 - | |
5113 | 10 files changed, 60 insertions(+), 70 deletions(-) | |
5114 | ||
5115 | commit 438be0bd112bd17942b2628c53054dc1007558a1 | |
5116 | Author: Brad Spengler <spender@grsecurity.net> | |
5117 | Date: Sat Feb 6 19:50:31 2016 -0500 | |
5118 | ||
5119 | Fix a number of issues caused by the upstream merging of a UDEREF ripoff resulting in unbootable | |
5120 | ARM systems reported on the forums | |
5121 | ||
5122 | arch/arm/Kconfig | 1 + | |
5123 | arch/arm/include/asm/domain.h | 21 ++++++++- | |
5124 | arch/arm/include/asm/futex.h | 9 ---- | |
5125 | arch/arm/include/asm/thread_info.h | 3 + | |
5126 | arch/arm/include/asm/uaccess.h | 81 +++++++++++++++--------------------- | |
5127 | arch/arm/kernel/entry-armv.S | 2 +- | |
5128 | arch/arm/kernel/process.c | 2 +- | |
5129 | arch/arm/mm/alignment.c | 8 ---- | |
5130 | security/Kconfig | 1 - | |
5131 | 9 files changed, 59 insertions(+), 69 deletions(-) | |
5132 | ||
5133 | commit 4ffdd5ef1f87e611af1efb4f251ada92abe9f4c0 | |
5134 | Author: Brad Spengler <spender@grsecurity.net> | |
5135 | Date: Sat Feb 6 11:21:53 2016 -0500 | |
5136 | ||
5137 | Fix another compiler warning | |
5138 | ||
5139 | net/ipv4/tcp_input.c | 2 ++ | |
5140 | 1 files changed, 2 insertions(+), 0 deletions(-) | |
5141 | ||
5142 | commit 30b5b7bc0fd67d458bdd5ab35e4689769eabd2ed | |
5143 | Author: Brad Spengler <spender@grsecurity.net> | |
5144 | Date: Sat Feb 6 11:16:12 2016 -0500 | |
5145 | ||
5146 | Fix two compiler warnings | |
5147 | ||
5148 | kernel/pid.c | 5 ++--- | |
5149 | kernel/ptrace.c | 3 ++- | |
5150 | 2 files changed, 4 insertions(+), 4 deletions(-) | |
5151 | ||
faedde92 PK |
5152 | commit dda4d2a21914c480750f10bd55c6e3203d415d8d |
5153 | Author: Brad Spengler <spender@grsecurity.net> | |
5154 | Date: Wed Feb 3 21:22:40 2016 -0500 | |
5155 | ||
5156 | Apply fix for integer truncation in NUMA init code, reported by | |
5157 | x14sg1 on the forums: | |
5158 | https://forums.grsecurity.net/viewtopic.php?f=3&t=4374 | |
5159 | ||
5160 | arch/x86/mm/numa.c | 2 +- | |
5161 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
5162 | ||
5163 | commit 477505f7c893cb6a2c3e22f83eefd9c985d7b3ca | |
5164 | Merge: a781740 016d0d8 | |
5165 | Author: Brad Spengler <spender@grsecurity.net> | |
5166 | Date: Wed Feb 3 21:20:58 2016 -0500 | |
5167 | ||
5168 | Merge branch 'pax-test' into grsec-test | |
5169 | ||
5170 | commit 016d0d81a8dd4be1304c82a68e0ccf425868f467 | |
5171 | Author: Brad Spengler <spender@grsecurity.net> | |
5172 | Date: Wed Feb 3 21:20:10 2016 -0500 | |
5173 | ||
5174 | Update to pax-linux-4.3.5-test27.patch: | |
5175 | - fixed a bunch of potential REFCOUNT false positives, reported by Emese | |
5176 | - restored padding in fpregs_state for storing AVX-512 state in the future | |
5177 | - constified netlink_dump_control | |
5178 | - added const version of debug_gimple_stmt for gcc plugins, by Emese | |
5179 | - Emese fixed a bug in initify that could have initified too much | |
5180 | - Emese fixed a false positive intentional integer overflow in xfrm4_extract_header, reported by corsac | |
5181 | ||
5182 | arch/x86/include/asm/fpu/types.h | 1 + | |
5183 | arch/x86/include/asm/mmu_context.h | 2 +- | |
5184 | block/blk-cgroup.c | 18 ++-- | |
5185 | block/cfq-iosched.c | 4 +- | |
5186 | crypto/crypto_user.c | 8 ++- | |
5187 | drivers/acpi/apei/ghes.c | 6 +- | |
5188 | drivers/char/ipmi/ipmi_ssif.c | 12 ++-- | |
5189 | drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +- | |
5190 | drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +- | |
5191 | drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +- | |
5192 | drivers/infiniband/core/netlink.c | 5 +- | |
5193 | drivers/infiniband/hw/cxgb4/device.c | 6 +- | |
5194 | drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +- | |
5195 | drivers/md/bcache/alloc.c | 2 +- | |
5196 | drivers/md/bcache/bcache.h | 10 +- | |
5197 | drivers/md/bcache/btree.c | 2 +- | |
5198 | drivers/md/bcache/io.c | 10 +- | |
5199 | drivers/md/bcache/journal.c | 2 +- | |
5200 | drivers/md/bcache/stats.c | 26 +++--- | |
5201 | drivers/md/bcache/stats.h | 16 ++-- | |
5202 | drivers/md/bcache/super.c | 2 +- | |
5203 | drivers/md/bcache/sysfs.c | 20 +++--- | |
5204 | drivers/md/dm-cache-target.c | 98 ++++++++++++------------ | |
5205 | drivers/md/dm-raid.c | 2 +- | |
5206 | drivers/md/md.c | 6 +- | |
5207 | drivers/md/md.h | 2 +- | |
5208 | drivers/md/raid1.c | 2 +- | |
5209 | drivers/md/raid10.c | 2 +- | |
5210 | drivers/md/raid5.c | 4 +- | |
5211 | drivers/media/pci/zoran/zoran.h | 1 - | |
5212 | drivers/media/pci/zoran/zoran_driver.c | 3 - | |
5213 | drivers/net/ethernet/sfc/selftest.c | 20 +++--- | |
5214 | drivers/net/irda/vlsi_ir.c | 18 ++-- | |
5215 | drivers/net/irda/vlsi_ir.h | 14 ++-- | |
5216 | drivers/net/wireless/ath/carl9170/carl9170.h | 6 +- | |
5217 | drivers/net/wireless/ath/carl9170/debug.c | 6 +- | |
5218 | drivers/net/wireless/ath/carl9170/main.c | 10 +- | |
5219 | drivers/net/wireless/ath/carl9170/tx.c | 4 +- | |
5220 | drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +- | |
5221 | drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +- | |
5222 | drivers/scsi/hptiop.c | 2 - | |
5223 | drivers/scsi/hptiop.h | 1 - | |
5224 | drivers/scsi/ipr.c | 6 +- | |
5225 | drivers/scsi/ipr.h | 2 +- | |
5226 | drivers/scsi/qla2xxx/qla_target.c | 10 +- | |
5227 | drivers/scsi/qla2xxx/qla_target.h | 2 +- | |
5228 | fs/btrfs/ctree.c | 2 +- | |
5229 | fs/btrfs/ctree.h | 4 +- | |
5230 | fs/btrfs/delayed-ref.c | 4 +- | |
5231 | fs/btrfs/disk-io.c | 4 +- | |
5232 | fs/btrfs/file.c | 4 +- | |
5233 | fs/btrfs/raid56.c | 32 ++++---- | |
5234 | fs/btrfs/tests/btrfs-tests.c | 2 +- | |
5235 | fs/btrfs/transaction.c | 2 +- | |
5236 | fs/btrfs/tree-log.c | 8 +- | |
5237 | fs/btrfs/volumes.c | 14 ++-- | |
5238 | fs/btrfs/volumes.h | 22 +++--- | |
5239 | fs/jbd2/commit.c | 2 +- | |
5240 | fs/jbd2/transaction.c | 4 +- | |
5241 | fs/ocfs2/dlm/dlmcommon.h | 4 +- | |
5242 | fs/ocfs2/dlm/dlmdebug.c | 10 +- | |
5243 | fs/ocfs2/dlm/dlmdomain.c | 4 +- | |
5244 | fs/ocfs2/dlm/dlmmaster.c | 4 +- | |
5245 | include/acpi/ghes.h | 2 +- | |
5246 | include/linux/blk-cgroup.h | 24 +++--- | |
5247 | include/linux/jbd2.h | 2 +- | |
5248 | include/linux/netlink.h | 12 ++-- | |
5249 | include/net/cfg802154.h | 2 +- | |
5250 | include/net/mac80211.h | 2 +- | |
5251 | include/net/neighbour.h | 2 +- | |
5252 | kernel/rcu/tree_plugin.h | 4 +- | |
5253 | net/batman-adv/routing.c | 4 +- | |
5254 | net/batman-adv/soft-interface.c | 2 +- | |
5255 | net/batman-adv/translation-table.c | 14 ++-- | |
5256 | net/batman-adv/types.h | 2 +- | |
5257 | net/core/neighbour.c | 14 ++-- | |
5258 | net/core/rtnetlink.c | 2 +- | |
5259 | net/ipv4/arp.c | 2 +- | |
5260 | net/ipv4/inet_diag.c | 4 +- | |
5261 | net/ipv4/xfrm4_state.c | 4 +- | |
5262 | net/ipv6/ndisc.c | 2 +- | |
5263 | net/mac80211/cfg.c | 2 +- | |
5264 | net/mac80211/debugfs_key.c | 2 +- | |
5265 | net/mac80211/key.c | 4 +- | |
5266 | net/mac80211/tx.c | 2 +- | |
5267 | net/mac80211/wpa.c | 10 +- | |
5268 | net/mac802154/iface.c | 4 +- | |
5269 | net/netfilter/ipset/ip_set_core.c | 2 +- | |
5270 | net/netfilter/nf_conntrack_netlink.c | 22 +++--- | |
5271 | net/netfilter/nf_tables_api.c | 13 ++-- | |
5272 | net/netfilter/nfnetlink_acct.c | 7 +- | |
5273 | net/netfilter/nfnetlink_cthelper.c | 2 +- | |
5274 | net/netfilter/nfnetlink_cttimeout.c | 2 +- | |
5275 | net/netlink/af_netlink.c | 10 ++- | |
5276 | net/netlink/diag.c | 2 +- | |
5277 | net/netlink/genetlink.c | 14 ++-- | |
5278 | net/packet/af_packet.c | 18 ++-- | |
5279 | net/packet/diag.c | 2 +- | |
5280 | net/packet/internal.h | 6 +- | |
5281 | net/unix/diag.c | 2 +- | |
5282 | net/xfrm/xfrm_user.c | 2 +- | |
5283 | security/apparmor/include/policy.h | 2 +- | |
5284 | security/apparmor/policy.c | 4 +- | |
5285 | sound/core/seq/seq_clientmgr.c | 2 +- | |
5286 | sound/core/seq/seq_fifo.c | 6 +- | |
5287 | sound/core/seq/seq_fifo.h | 2 +- | |
5288 | tools/gcc/gcc-common.h | 24 ++++-- | |
5289 | tools/gcc/initify_plugin.c | 7 +- | |
5290 | tools/lib/api/Makefile | 2 +- | |
5291 | 109 files changed, 399 insertions(+), 391 deletions(-) | |
5292 | ||
5293 | commit a7817402ac837b1aee07fac42537a02097055098 | |
5294 | Author: Matt Fleming <matt@codeblueprint.co.uk> | |
5295 | Date: Fri Jan 29 11:36:10 2016 +0000 | |
5296 | ||
5297 | x86/mm/pat: Avoid truncation when converting cpa->numpages to address | |
5298 | ||
5299 | There are a couple of nasty truncation bugs lurking in the pageattr | |
5300 | code that can be triggered when mapping EFI regions, e.g. when we pass | |
5301 | a cpa->pgd pointer. Because cpa->numpages is a 32-bit value, shifting | |
5302 | left by PAGE_SHIFT will truncate the resultant address to 32-bits. | |
5303 | ||
5304 | Viorel-Cătălin managed to trigger this bug on his Dell machine that | |
5305 | provides a ~5GB EFI region which requires 1236992 pages to be mapped. | |
5306 | When calling populate_pud() the end of the region gets calculated | |
5307 | incorrectly in the following buggy expression, | |
5308 | ||
5309 | end = start + (cpa->numpages << PAGE_SHIFT); | |
5310 | ||
5311 | And only 188416 pages are mapped. Next, populate_pud() gets invoked | |
5312 | for a second time because of the loop in __change_page_attr_set_clr(), | |
5313 | only this time no pages get mapped because shifting the remaining | |
5314 | number of pages (1048576) by PAGE_SHIFT is zero. At which point the | |
5315 | loop in __change_page_attr_set_clr() spins forever because we fail to | |
5316 | map progress. | |
5317 | ||
5318 | Hitting this bug depends very much on the virtual address we pick to | |
5319 | map the large region at and how many pages we map on the initial run | |
5320 | through the loop. This explains why this issue was only recently hit | |
5321 | with the introduction of commit | |
5322 | ||
5323 | a5caa209ba9c ("x86/efi: Fix boot crash by mapping EFI memmap | |
5324 | entries bottom-up at runtime, instead of top-down") | |
5325 | ||
5326 | It's interesting to note that safe uses of cpa->numpages do exist in | |
5327 | the pageattr code. If instead of shifting ->numpages we multiply by | |
5328 | PAGE_SIZE, no truncation occurs because PAGE_SIZE is a UL value, and | |
5329 | so the result is unsigned long. | |
5330 | ||
5331 | To avoid surprises when users try to convert very large cpa->numpages | |
5332 | values to addresses, change the data type from 'int' to 'unsigned | |
5333 | long', thereby making it suitable for shifting by PAGE_SHIFT without | |
5334 | any type casting. | |
5335 | ||
5336 | The alternative would be to make liberal use of casting, but that is | |
5337 | far more likely to cause problems in the future when someone adds more | |
5338 | code and fails to cast properly; this bug was difficult enough to | |
5339 | track down in the first place. | |
5340 | ||
5341 | Reported-and-tested-by: Viorel-Cătălin Răpițeanu <rapiteanu.catalin@gmail.com> | |
5342 | Acked-by: Borislav Petkov <bp@alien8.de> | |
5343 | Cc: Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com> | |
5344 | Cc: <stable@vger.kernel.org> | |
5345 | Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk> | |
5346 | Link: https://bugzilla.kernel.org/show_bug.cgi?id=110131 | |
5347 | Link: http://lkml.kernel.org/r/1454067370-10374-1-git-send-email-matt@codeblueprint.co.uk | |
5348 | Signed-off-by: Thomas Gleixner <tglx@linutronix.de> | |
5349 | ||
5350 | arch/x86/mm/pageattr.c | 4 ++-- | |
5351 | 1 files changed, 2 insertions(+), 2 deletions(-) | |
5352 | ||
5353 | commit 64dd9d7a67a742fda257cdd16510c29e695c34b5 | |
5354 | Author: Jan Beulich <JBeulich@suse.com> | |
5355 | Date: Tue Jan 26 04:15:18 2016 -0700 | |
5356 | ||
5357 | x86/mm: Fix types used in pgprot cacheability flags translations | |
5358 | ||
5359 | For PAE kernels "unsigned long" is not suitable to hold page protection | |
5360 | flags, since _PAGE_NX doesn't fit there. This is the reason for quite a | |
5361 | few W+X pages getting reported as insecure during boot (observed namely | |
5362 | for the entire initrd range). | |
5363 | ||
5364 | Fixes: 281d4078be ("x86: Make page cache mode a real type") | |
5365 | Signed-off-by: Jan Beulich <jbeulich@suse.com> | |
5366 | Reviewed-by: Juergen Gross <JGross@suse.com> | |
5367 | Cc: stable@vger.kernel.org | |
5368 | Link: http://lkml.kernel.org/r/56A7635602000078000CAFF1@prv-mh.provo.novell.com | |
5369 | Signed-off-by: Thomas Gleixner <tglx@linutronix.de> | |
5370 | ||
5371 | arch/x86/include/asm/pgtable_types.h | 6 ++---- | |
5372 | 1 files changed, 2 insertions(+), 4 deletions(-) | |
5373 | ||
8bcb68a2 PK |
5374 | commit bb9a3a9df0d8dfc96d521676e64c42b37ba22aea |
5375 | Merge: 682d661 f74425b | |
5376 | Author: Brad Spengler <spender@grsecurity.net> | |
5377 | Date: Sun Jan 31 15:06:25 2016 -0500 | |
5378 | ||
5379 | Merge branch 'pax-test' into grsec-test | |
5380 | ||
5381 | Conflicts: | |
5382 | drivers/net/slip/slhc.c | |
5383 | include/linux/sched.h | |
5384 | net/unix/af_unix.c | |
5385 | sound/core/timer.c | |
5386 | ||
5387 | commit f74425b5705bfe52aff9e97659ef10c4a14176c3 | |
5388 | Merge: d14af1f 849a2d3 | |
5389 | Author: Brad Spengler <spender@grsecurity.net> | |
5390 | Date: Sun Jan 31 15:02:55 2016 -0500 | |
5391 | ||
5392 | Merge branch 'linux-4.3.y' into pax-test | |
5393 | ||
5394 | Conflicts: | |
5395 | arch/x86/include/asm/mmu_context.h | |
5396 | ||
5397 | commit 682d6611d75542e351c973c8dd74a99d3966c073 | |
5398 | Author: Brad Spengler <spender@grsecurity.net> | |
5399 | Date: Sat Jan 30 13:05:03 2016 -0500 | |
5400 | ||
5401 | Based on a report from Mathias Krause, fix up a number of additional instances | |
5402 | of ulong overflow when passing in values to gr_learn_resource by saturating | |
5403 | to ULONG_MAX | |
5404 | ||
5405 | mm/mlock.c | 11 ++++++++--- | |
5406 | mm/mmap.c | 16 +++++++++++++--- | |
5407 | 2 files changed, 21 insertions(+), 6 deletions(-) | |
5408 | ||
08314ea3 PK |
5409 | commit adb52e95fb9ad4ac9c56cd5d47bd668f47c33096 |
5410 | Author: Jann Horn <jann@thejh.net> | |
5411 | Date: Sat Dec 26 06:00:48 2015 +0100 | |
5412 | ||
5413 | seccomp: always propagate NO_NEW_PRIVS on tsync | |
5414 | ||
5415 | Before this patch, a process with some permissive seccomp filter | |
5416 | that was applied by root without NO_NEW_PRIVS was able to add | |
5417 | more filters to itself without setting NO_NEW_PRIVS by setting | |
5418 | the new filter from a throwaway thread with NO_NEW_PRIVS. | |
5419 | ||
5420 | Signed-off-by: Jann Horn <jann@thejh.net> | |
5421 | Cc: stable@vger.kernel.org | |
5422 | Signed-off-by: Kees Cook <keescook@chromium.org> | |
5423 | ||
5424 | kernel/seccomp.c | 22 +++++++++++----------- | |
5425 | 1 files changed, 11 insertions(+), 11 deletions(-) | |
5426 | ||
5427 | commit b85450498a3bbf269441c8963d7574bb3079c838 | |
5428 | Merge: 59c216f d14af1f | |
5429 | Author: Brad Spengler <spender@grsecurity.net> | |
5430 | Date: Fri Jan 29 20:54:13 2016 -0500 | |
5431 | ||
5432 | Merge branch 'pax-test' into grsec-test | |
5433 | ||
5434 | commit d14af1f1dd66511f3f0674deee2b572972012b39 | |
5435 | Author: Brad Spengler <spender@grsecurity.net> | |
5436 | Date: Fri Jan 29 20:53:51 2016 -0500 | |
5437 | ||
5438 | Update to pax-linux-4.3.4-test26.patch: | |
5439 | - Emese fixed a few intentional overflows introduced by gcc, reported by StalkR (https://forums.grsecurity.net/viewtopic.php?f=3&t=4370) | |
5440 | ||
5441 | fs/cifs/file.c | 2 +- | |
5442 | fs/gfs2/file.c | 2 +- | |
5443 | .../size_overflow_plugin/intentional_overflow.c | 96 ++++++++++++++++++-- | |
5444 | tools/gcc/size_overflow_plugin/size_overflow.h | 2 + | |
5445 | .../size_overflow_plugin/size_overflow_plugin.c | 4 +- | |
5446 | .../size_overflow_plugin/size_overflow_transform.c | 6 +- | |
5447 | .../size_overflow_transform_core.c | 5 + | |
5448 | 7 files changed, 102 insertions(+), 15 deletions(-) | |
5449 | ||
5450 | commit 59c216f13587eacdd692386b7a403ae78ed84fb6 | |
5451 | Author: Brad Spengler <spender@grsecurity.net> | |
5452 | Date: Wed Jan 27 17:57:21 2016 -0500 | |
5453 | ||
5454 | Fix a size_overflow report reported by Mathias Krause in our | |
5455 | truncation of an loff_t to an unsigned long when being passed | |
5456 | to gr_learn_resource() (as all resource checks are against unsigned long | |
5457 | values) | |
5458 | ||
5459 | fs/attr.c | 5 ++++- | |
5460 | 1 files changed, 4 insertions(+), 1 deletions(-) | |
5461 | ||
589df999 PK |
5462 | commit 70636c6ad60fc1db3af764ecc789b827b7497a97 |
5463 | Author: Yuchung Cheng <ycheng@google.com> | |
5464 | Date: Wed Jan 6 12:42:38 2016 -0800 | |
5465 | ||
5466 | tcp: fix zero cwnd in tcp_cwnd_reduction | |
5467 | ||
5468 | Patch 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode | |
5469 | conditionally") introduced a bug that cwnd may become 0 when both | |
5470 | inflight and sndcnt are 0 (cwnd = inflight + sndcnt). This may lead | |
5471 | to a div-by-zero if the connection starts another cwnd reduction | |
5472 | phase by setting tp->prior_cwnd to the current cwnd (0) in | |
5473 | tcp_init_cwnd_reduction(). | |
5474 | ||
5475 | To prevent this we skip PRR operation when nothing is acked or | |
5476 | sacked. Then cwnd must be positive in all cases as long as ssthresh | |
5477 | is positive: | |
5478 | ||
5479 | 1) The proportional reduction mode | |
5480 | inflight > ssthresh > 0 | |
5481 | ||
5482 | 2) The reduction bound mode | |
5483 | a) inflight == ssthresh > 0 | |
5484 | ||
5485 | b) inflight < ssthresh | |
5486 | sndcnt > 0 since newly_acked_sacked > 0 and inflight < ssthresh | |
5487 | ||
5488 | Therefore in all cases inflight and sndcnt can not both be 0. | |
5489 | We check invalid tp->prior_cwnd to avoid potential div0 bugs. | |
5490 | ||
5491 | In reality this bug is triggered only with a sequence of less common | |
5492 | events. For example, the connection is terminating an ECN-triggered | |
5493 | cwnd reduction with an inflight 0, then it receives reordered/old | |
5494 | ACKs or DSACKs from prior transmission (which acks nothing). Or the | |
5495 | connection is in fast recovery stage that marks everything lost, | |
5496 | but fails to retransmit due to local issues, then receives data | |
5497 | packets from other end which acks nothing. | |
5498 | ||
5499 | Fixes: 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode conditionally") | |
5500 | Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name> | |
5501 | Signed-off-by: Yuchung Cheng <ycheng@google.com> | |
5502 | Signed-off-by: Neal Cardwell <ncardwell@google.com> | |
5503 | Signed-off-by: Eric Dumazet <edumazet@google.com> | |
5504 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
5505 | ||
5506 | net/ipv4/tcp_input.c | 3 +++ | |
5507 | 1 files changed, 3 insertions(+), 0 deletions(-) | |
5508 | ||
5509 | commit dac1da2bedbb43195d371c7a192cfeeb45683df0 | |
5510 | Author: Eric Dumazet <edumazet@google.com> | |
5511 | Date: Sun Jan 24 13:53:50 2016 -0800 | |
5512 | ||
5513 | af_unix: fix struct pid memory leak | |
5514 | ||
5515 | Dmitry reported a struct pid leak detected by a syzkaller program. | |
5516 | ||
5517 | Bug happens in unix_stream_recvmsg() when we break the loop when a | |
5518 | signal is pending, without properly releasing scm. | |
5519 | ||
5520 | Fixes: b3ca9b02b007 ("net: fix multithreaded signal handling in unix recv routines") | |
5521 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
5522 | Signed-off-by: Eric Dumazet <edumazet@google.com> | |
5523 | Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com> | |
5524 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
5525 | ||
5526 | net/unix/af_unix.c | 1 + | |
5527 | 1 files changed, 1 insertions(+), 0 deletions(-) | |
5528 | ||
5529 | commit 15cc47f127520d1ac0c1fe76d993c2c27f0f2571 | |
5530 | Author: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
5531 | Date: Fri Jan 22 01:39:43 2016 +0100 | |
5532 | ||
5533 | pptp: fix illegal memory access caused by multiple bind()s | |
5534 | ||
5535 | Several times already this has been reported as kasan reports caused by | |
5536 | syzkaller and trinity and people always looked at RCU races, but it is | |
5537 | much more simple. :) | |
5538 | ||
5539 | In case we bind a pptp socket multiple times, we simply add it to | |
5540 | the callid_sock list but don't remove the old binding. Thus the old | |
5541 | socket stays in the bucket with unused call_id indexes and doesn't get | |
5542 | cleaned up. This causes various forms of kasan reports which were hard | |
5543 | to pinpoint. | |
5544 | ||
5545 | Simply don't allow multiple binds and correct error handling in | |
5546 | pptp_bind. Also keep sk_state bits in place in pptp_connect. | |
5547 | ||
5548 | Fixes: 00959ade36acad ("PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)") | |
5549 | Cc: Dmitry Kozlov <xeb@mail.ru> | |
5550 | Cc: Sasha Levin <sasha.levin@oracle.com> | |
5551 | Cc: Dmitry Vyukov <dvyukov@google.com> | |
5552 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
5553 | Cc: Dave Jones <davej@codemonkey.org.uk> | |
5554 | Reported-by: Dave Jones <davej@codemonkey.org.uk> | |
5555 | Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
5556 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
5557 | ||
5558 | drivers/net/ppp/pptp.c | 34 ++++++++++++++++++++++++---------- | |
5559 | 1 files changed, 24 insertions(+), 10 deletions(-) | |
5560 | ||
5561 | commit e2b7b8c66851c85188fa6dab2d2b2a6c85bc7332 | |
5562 | Author: Brad Spengler <spender@grsecurity.net> | |
5563 | Date: Tue Jan 26 18:17:10 2016 -0500 | |
5564 | ||
5565 | Add info about cpupower/powertop to GRKERNSEC_KMEM, was present on our | |
5566 | wiki but was removed from the config help at some point | |
5567 | ||
5568 | grsecurity/Kconfig | 3 +++ | |
5569 | 1 files changed, 3 insertions(+), 0 deletions(-) | |
5570 | ||
5571 | commit ce2e88efa000fc32bfcd84098f57c8ed8310fefc | |
5572 | Author: Thomas Egerer <hakke_007@gmx.de> | |
5573 | Date: Mon Jan 25 12:58:44 2016 +0100 | |
5574 | ||
5575 | ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV | |
5576 | ||
5577 | The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have | |
5578 | to select CRYPTO_ECHAINIV in order to work properly. This solves the | |
5579 | issues caused by a misconfiguration as described in [1]. | |
5580 | The original approach, patching crypto/Kconfig was turned down by | |
5581 | Herbert Xu [2]. | |
5582 | ||
5583 | [1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html | |
5584 | [2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2 | |
5585 | ||
5586 | Signed-off-by: Thomas Egerer <hakke_007@gmx.de> | |
5587 | Acked-by: Herbert Xu <herbert@gondor.apana.org.au> | |
5588 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
5589 | ||
5590 | net/ipv4/Kconfig | 1 + | |
5591 | net/ipv6/Kconfig | 1 + | |
5592 | 2 files changed, 2 insertions(+), 0 deletions(-) | |
5593 | ||
5594 | commit fca5a303155ea67d28aece0caf2b03ffc3b2668d | |
5595 | Merge: 904114c 6339c1f | |
5596 | Author: Brad Spengler <spender@grsecurity.net> | |
5597 | Date: Tue Jan 26 18:08:40 2016 -0500 | |
5598 | ||
5599 | Merge branch 'pax-test' into grsec-test | |
5600 | ||
5601 | commit 6339c1f9a9beafd417bf9f04d4b257e62aeb45b7 | |
5602 | Author: Brad Spengler <spender@grsecurity.net> | |
5603 | Date: Tue Jan 26 18:07:51 2016 -0500 | |
5604 | ||
5605 | Update to pax-linux-4.3.4-test25.patch: | |
5606 | - fixed incorrect handling of VM_DONTCOPY during fork that would trigger a consistency check in the vma mirroring logic, reported by Mathias Krause <minipli@googlemail.com> | |
5607 | - fixed init_new_context on !MODIFY_LDT_SYSCALL configs, reported by tjh (https://forums.grsecurity.net/viewtopic.php?f=3&t=4368) | |
5608 | - fixed a few REFCOUNT false positives in SNMP related statistics | |
5609 | ||
5610 | arch/x86/Kconfig | 2 +- | |
5611 | arch/x86/include/asm/mmu_context.h | 17 +++++++++++++++++ | |
5612 | include/net/snmp.h | 10 +++++----- | |
5613 | kernel/fork.c | 11 +++++++++-- | |
5614 | net/ipv4/proc.c | 8 ++++---- | |
5615 | net/ipv6/addrconf.c | 4 ++-- | |
5616 | net/ipv6/proc.c | 10 +++++----- | |
5617 | 7 files changed, 43 insertions(+), 19 deletions(-) | |
5618 | ||
5619 | commit 904114c2fce3fdff5d57e763da56a78960db4e19 | |
5620 | Author: Al Viro <viro@zeniv.linux.org.uk> | |
5621 | Date: Fri Jan 22 18:08:52 2016 -0500 | |
5622 | ||
5623 | make sure that freeing shmem fast symlinks is RCU-delayed | |
5624 | ||
5625 | Cc: stable@vger.kernel.org # v4.2+ | |
5626 | Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> | |
5627 | ||
5628 | include/linux/shmem_fs.h | 5 +---- | |
5629 | mm/shmem.c | 9 ++++----- | |
5630 | 2 files changed, 5 insertions(+), 9 deletions(-) | |
5631 | ||
87ff3ca1 PK |
5632 | commit ab86adee64312a2f827dd516cb199521327943ed |
5633 | Author: Sasha Levin <sasha.levin@oracle.com> | |
5634 | Date: Mon Jan 18 19:23:51 2016 -0500 | |
5635 | ||
5636 | netfilter: nf_conntrack: use safer way to lock all buckets | |
5637 | ||
5638 | When we need to lock all buckets in the connection hashtable we'd attempt to | |
5639 | lock 1024 spinlocks, which is way more preemption levels than supported by | |
5640 | the kernel. Furthermore, this behavior was hidden by checking if lockdep is | |
5641 | enabled, and if it was - use only 8 buckets(!). | |
5642 | ||
5643 | Fix this by using a global lock and synchronize all buckets on it when we | |
5644 | need to lock them all. This is pretty heavyweight, but is only done when we | |
5645 | need to resize the hashtable, and that doesn't happen often enough (or at all). | |
5646 | ||
5647 | Signed-off-by: Sasha Levin <sasha.levin@oracle.com> | |
5648 | Acked-by: Jesper Dangaard Brouer <brouer@redhat.com> | |
5649 | Reviewed-by: Florian Westphal <fw@strlen.de> | |
5650 | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |
5651 | ||
5652 | Conflicts: | |
5653 | ||
5654 | net/netfilter/nfnetlink_cttimeout.c | |
5655 | ||
5656 | include/net/netfilter/nf_conntrack_core.h | 8 ++---- | |
5657 | net/netfilter/nf_conntrack_core.c | 38 +++++++++++++++++++++------- | |
5658 | net/netfilter/nf_conntrack_helper.c | 2 +- | |
5659 | net/netfilter/nf_conntrack_netlink.c | 2 +- | |
5660 | 4 files changed, 33 insertions(+), 17 deletions(-) | |
5661 | ||
5662 | commit 37014723527225481c720484bb788a1a6358072f | |
5663 | Author: Willy Tarreau <w@1wt.eu> | |
5664 | Date: Mon Jan 18 16:36:09 2016 +0100 | |
5665 | ||
5666 | pipe: limit the per-user amount of pages allocated in pipes | |
5667 | ||
5668 | On no-so-small systems, it is possible for a single process to cause an | |
5669 | OOM condition by filling large pipes with data that are never read. A | |
5670 | typical process filling 4000 pipes with 1 MB of data will use 4 GB of | |
5671 | memory. On small systems it may be tricky to set the pipe max size to | |
5672 | prevent this from happening. | |
5673 | ||
5674 | This patch makes it possible to enforce a per-user soft limit above | |
5675 | which new pipes will be limited to a single page, effectively limiting | |
5676 | them to 4 kB each, as well as a hard limit above which no new pipes may | |
5677 | be created for this user. This has the effect of protecting the system | |
5678 | against memory abuse without hurting other users, and still allowing | |
5679 | pipes to work correctly though with less data at once. | |
5680 | ||
5681 | The limit are controlled by two new sysctls : pipe-user-pages-soft, and | |
5682 | pipe-user-pages-hard. Both may be disabled by setting them to zero. The | |
5683 | default soft limit allows the default number of FDs per process (1024) | |
5684 | to create pipes of the default size (64kB), thus reaching a limit of 64MB | |
5685 | before starting to create only smaller pipes. With 256 processes limited | |
5686 | to 1024 FDs each, this results in 1024*64kB + (256*1024 - 1024) * 4kB = | |
5687 | 1084 MB of memory allocated for a user. The hard limit is disabled by | |
5688 | default to avoid breaking existing applications that make intensive use | |
5689 | of pipes (eg: for splicing). | |
5690 | ||
5691 | Reported-by: socketpair@gmail.com | |
5692 | Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> | |
5693 | Mitigates: CVE-2013-4312 (Linux 2.0+) | |
5694 | Suggested-by: Linus Torvalds <torvalds@linux-foundation.org> | |
5695 | Signed-off-by: Willy Tarreau <w@1wt.eu> | |
5696 | Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> | |
5697 | ||
5698 | Documentation/sysctl/fs.txt | 23 +++++++++++++++++++++ | |
5699 | fs/pipe.c | 47 +++++++++++++++++++++++++++++++++++++++++- | |
5700 | include/linux/pipe_fs_i.h | 4 +++ | |
5701 | include/linux/sched.h | 1 + | |
5702 | kernel/sysctl.c | 14 ++++++++++++ | |
5703 | 5 files changed, 87 insertions(+), 2 deletions(-) | |
5704 | ||
5705 | commit 51645fa198d194f746651dcfbc5f24a4cf8b9fb8 | |
5706 | Merge: 540f2af 7791ecb | |
5707 | Author: Brad Spengler <spender@grsecurity.net> | |
5708 | Date: Sat Jan 23 10:57:11 2016 -0500 | |
5709 | ||
5710 | Merge branch 'pax-test' into grsec-test | |
5711 | ||
5712 | commit 7791ecb84f840343a5646236fd0d34e1fb450793 | |
5713 | Merge: 470069c 399588c | |
5714 | Author: Brad Spengler <spender@grsecurity.net> | |
5715 | Date: Sat Jan 23 10:56:47 2016 -0500 | |
5716 | ||
5717 | Merge branch 'linux-4.3.y' into pax-test | |
5718 | ||
1864a9b1 PK |
5719 | commit 540f2affebd42cdc26a699208ab4f1cb0cb75e33 |
5720 | Author: Brad Spengler <spender@grsecurity.net> | |
5721 | Date: Tue Jan 19 21:18:47 2016 -0500 | |
5722 | ||
5723 | Update size_overflow hash table | |
5724 | ||
5725 | .../size_overflow_plugin/size_overflow_hash.data | 4 +++- | |
5726 | 1 files changed, 3 insertions(+), 1 deletions(-) | |
5727 | ||
5728 | commit 7e649765626a28437f573f0fbe7a51a04615f041 | |
5729 | Author: Brad Spengler <spender@grsecurity.net> | |
5730 | Date: Tue Jan 19 20:29:46 2016 -0500 | |
5731 | ||
5732 | Backport fix from: https://lkml.org/lkml/2015/12/13/187 | |
5733 | ||
5734 | fs/ext4/extents.c | 2 +- | |
5735 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
5736 | ||
5737 | commit 53b859cd0a5f5b6ad54fe0c879dfedaa3c5a3005 | |
5738 | Author: Jann Horn <jann@thejh.net> | |
5739 | Date: Tue Jan 5 18:27:30 2016 +0100 | |
5740 | ||
5741 | compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS) | |
5742 | ||
5743 | This replaces all code in fs/compat_ioctl.c that translated | |
5744 | ioctl arguments into a in-kernel structure, then performed | |
5745 | do_ioctl under set_fs(KERNEL_DS), with code that allocates | |
5746 | data on the user stack and can call the VFS ioctl handler | |
5747 | under USER_DS. | |
5748 | ||
5749 | This is done as a hardening measure because the caller | |
5750 | does not know what kind of ioctl handler will be invoked, | |
5751 | only that no corresponding compat_ioctl handler exists and | |
5752 | what the ioctl command number is. The accidental | |
5753 | invocation of an unlocked_ioctl handler that unexpectedly | |
5754 | calls copy_to_user could be a severe security issue. | |
5755 | ||
5756 | Signed-off-by: Jann Horn <jann@thejh.net> | |
5757 | Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> | |
5758 | ||
5759 | Conflicts: | |
5760 | ||
5761 | fs/compat_ioctl.c | |
5762 | ||
5763 | fs/compat_ioctl.c | 130 ++++++++++++++++++++++++++++------------------------- | |
5764 | 1 files changed, 68 insertions(+), 62 deletions(-) | |
5765 | ||
5766 | commit 3e89e770ae27e931cd1583f021abac41eeebc3e7 | |
5767 | Author: Al Viro <viro@zeniv.linux.org.uk> | |
5768 | Date: Thu Jan 7 09:53:30 2016 -0500 | |
5769 | ||
5770 | compat_ioctl: don't pass fd around when not needed | |
5771 | ||
5772 | Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> | |
5773 | ||
5774 | fs/compat_ioctl.c | 103 ++++++++++++++++++++++++++-------------------------- | |
5775 | fs/internal.h | 7 ++++ | |
5776 | fs/ioctl.c | 4 +- | |
5777 | include/linux/fs.h | 2 - | |
5778 | 4 files changed, 61 insertions(+), 55 deletions(-) | |
5779 | ||
5780 | commit 9d4e04082752d4d2d68445c4e6faf33a2613df55 | |
5781 | Author: Jann Horn <jann@thejh.net> | |
5782 | Date: Tue Jan 5 18:27:29 2016 +0100 | |
5783 | ||
5784 | compat_ioctl: don't look up the fd twice | |
5785 | ||
5786 | In code in fs/compat_ioctl.c that translates ioctl arguments | |
5787 | into a in-kernel structure, then performs sys_ioctl, possibly | |
5788 | under set_fs(KERNEL_DS), this commit changes the sys_ioctl | |
5789 | calls to do_ioctl calls. do_ioctl is a new function that does | |
5790 | the same thing as sys_ioctl, but doesn't look up the fd again. | |
5791 | ||
5792 | This change is made to avoid (potential) security issues | |
5793 | because of ioctl handlers that accept one of the ioctl | |
5794 | commands I2C_FUNCS, VIDEO_GET_EVENT, MTIOCPOS, MTIOCGET, | |
5795 | TIOCGSERIAL, TIOCSSERIAL, RTC_IRQP_READ, RTC_EPOCH_READ. | |
5796 | This can happen for multiple reasons: | |
5797 | ||
5798 | - The ioctl command number could be reused. | |
5799 | - The ioctl handler might not check the full ioctl | |
5800 | command. This is e.g. true for drm_ioctl. | |
5801 | - The ioctl handler is very special, e.g. cuse_file_ioctl | |
5802 | ||
5803 | The real issue is that set_fs(KERNEL_DS) is used here, | |
5804 | but that's fixed in a separate commit | |
5805 | "compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)". | |
5806 | ||
5807 | This change mitigates potential security issues by | |
5808 | preventing a race that permits invocation of | |
5809 | unlocked_ioctl handlers under KERNEL_DS through compat | |
5810 | code even if a corresponding compat_ioctl handler exists. | |
5811 | ||
5812 | So far, no way has been identified to use this to damage | |
5813 | kernel memory without having CAP_SYS_ADMIN in the init ns | |
5814 | (with the capability, doing reads/writes at arbitrary | |
5815 | kernel addresses should be easy through CUSE's ioctl | |
5816 | handler with FUSE_IOCTL_UNRESTRICTED set). | |
5817 | ||
5818 | [AV: two missed sys_ioctl() taken care of] | |
5819 | ||
5820 | Signed-off-by: Jann Horn <jann@thejh.net> | |
5821 | Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> | |
5822 | ||
5823 | fs/compat_ioctl.c | 122 +++++++++++++++++++++++++++++----------------------- | |
5824 | 1 files changed, 68 insertions(+), 54 deletions(-) | |
5825 | ||
5826 | commit 5bf9e1ed4ebb278cd956ba142914fc04a024309c | |
5827 | Author: Vasily Kulikov <segoon@openwall.com> | |
5828 | Date: Fri Jan 15 16:57:55 2016 -0800 | |
5829 | ||
5830 | include/linux/poison.h: use POISON_POINTER_DELTA for poison pointers | |
5831 | ||
5832 | TIMER_ENTRY_STATIC is defined as a poison pointers which | |
5833 | should point to nowhere. Redefine them using POISON_POINTER_DELTA | |
5834 | arithmetics to make sure they really point to non-mappable area declared | |
5835 | by the target architecture. | |
5836 | ||
5837 | Signed-off-by: Vasily Kulikov <segoon@openwall.com> | |
5838 | Acked-by: Thomas Gleixner <tglx@linutronix.de> | |
5839 | Cc: Solar Designer <solar@openwall.com> | |
5840 | Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com> | |
5841 | Signed-off-by: Andrew Morton <akpm@linux-foundation.org> | |
5842 | Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> | |
5843 | ||
5844 | Conflicts: | |
5845 | ||
5846 | include/linux/poison.h | |
5847 | ||
5848 | include/linux/poison.h | 2 +- | |
5849 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
5850 | ||
5851 | commit 60f2e0a05ab8f56c804a9334a23e2b446305d110 | |
5852 | Author: Brad Spengler <spender@grsecurity.net> | |
5853 | Date: Tue Jan 19 19:41:44 2016 -0500 | |
5854 | ||
5855 | Fix ARM compilation, reported by Austin Sepp | |
5856 | ||
5857 | grsecurity/grsec_sig.c | 1 + | |
5858 | 1 files changed, 1 insertions(+), 0 deletions(-) | |
5859 | ||
5860 | commit e15383743443dc43460a2fd73e0db0b608610dca | |
5861 | Author: Takashi Iwai <tiwai@suse.de> | |
5862 | Date: Mon Jan 18 13:52:47 2016 +0100 | |
5863 | ||
5864 | ALSA: hrtimer: Fix stall by hrtimer_cancel() | |
5865 | ||
5866 | hrtimer_cancel() waits for the completion from the callback, thus it | |
5867 | must not be called inside the callback itself. This was already a | |
5868 | problem in the past with ALSA hrtimer driver, and the early commit | |
5869 | [fcfdebe70759: ALSA: hrtimer - Fix lock-up] tried to address it. | |
5870 | ||
5871 | However, the previous fix is still insufficient: it may still cause a | |
5872 | lockup when the ALSA timer instance reprograms itself in its callback. | |
5873 | Then it invokes the start function even in snd_timer_interrupt() that | |
5874 | is called in hrtimer callback itself, results in a CPU stall. This is | |
5875 | no hypothetical problem but actually triggered by syzkaller fuzzer. | |
5876 | ||
5877 | This patch tries to fix the issue again. Now we call | |
5878 | hrtimer_try_to_cancel() at both start and stop functions so that it | |
5879 | won't fall into a deadlock, yet giving some chance to cancel the queue | |
5880 | if the functions have been called outside the callback. The proper | |
5881 | hrtimer_cancel() is called in anyway at closing, so this should be | |
5882 | enough. | |
5883 | ||
5884 | Reported-and-tested-by: Dmitry Vyukov <dvyukov@google.com> | |
5885 | Cc: <stable@vger.kernel.org> | |
5886 | Signed-off-by: Takashi Iwai <tiwai@suse.de> | |
5887 | ||
5888 | sound/core/hrtimer.c | 3 ++- | |
5889 | 1 files changed, 2 insertions(+), 1 deletions(-) | |
5890 | ||
5891 | commit 12d874daf706e6e7c1ae709141859c809599297e | |
5892 | Author: Takashi Iwai <tiwai@suse.de> | |
5893 | Date: Tue Jan 12 12:38:02 2016 +0100 | |
5894 | ||
5895 | ALSA: seq: Fix missing NULL check at remove_events ioctl | |
5896 | ||
5897 | snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear() | |
5898 | unconditionally even if there is no FIFO assigned, and this leads to | |
5899 | an Oops due to NULL dereference. The fix is just to add a proper NULL | |
5900 | check. | |
5901 | ||
5902 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
5903 | Tested-by: Dmitry Vyukov <dvyukov@google.com> | |
5904 | Cc: <stable@vger.kernel.org> | |
5905 | Signed-off-by: Takashi Iwai <tiwai@suse.de> | |
5906 | ||
5907 | sound/core/seq/seq_clientmgr.c | 2 +- | |
5908 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
5909 | ||
5910 | commit 2eb0632df1351378946507e7ef7ba0682632a7b5 | |
5911 | Author: Takashi Iwai <tiwai@suse.de> | |
5912 | Date: Tue Jan 12 15:36:27 2016 +0100 | |
5913 | ||
5914 | ALSA: seq: Fix race at timer setup and close | |
5915 | ||
5916 | ALSA sequencer code has an open race between the timer setup ioctl and | |
5917 | the close of the client. This was triggered by syzkaller fuzzer, and | |
5918 | a use-after-free was caught there as a result. | |
5919 | ||
5920 | This patch papers over it by adding a proper queue->timer_mutex lock | |
5921 | around the timer-related calls in the relevant code path. | |
5922 | ||
5923 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
5924 | Tested-by: Dmitry Vyukov <dvyukov@google.com> | |
5925 | Cc: <stable@vger.kernel.org> | |
5926 | Signed-off-by: Takashi Iwai <tiwai@suse.de> | |
5927 | ||
5928 | sound/core/seq/seq_queue.c | 2 ++ | |
5929 | 1 files changed, 2 insertions(+), 0 deletions(-) | |
5930 | ||
5931 | commit b9e55ab955e59b4a636d78a748be90334a48b485 | |
5932 | Author: Takashi Iwai <tiwai@suse.de> | |
5933 | Date: Thu Jan 14 16:30:58 2016 +0100 | |
5934 | ||
5935 | ALSA: timer: Harden slave timer list handling | |
5936 | ||
5937 | A slave timer instance might be still accessible in a racy way while | |
5938 | operating the master instance as it lacks of locking. Since the | |
5939 | master operation is mostly protected with timer->lock, we should cope | |
5940 | with it while changing the slave instance, too. Also, some linked | |
5941 | lists (active_list and ack_list) of slave instances aren't unlinked | |
5942 | immediately at stopping or closing, and this may lead to unexpected | |
5943 | accesses. | |
5944 | ||
5945 | This patch tries to address these issues. It adds spin lock of | |
5946 | timer->lock (either from master or slave, which is equivalent) in a | |
5947 | few places. For avoiding a deadlock, we ensure that the global | |
5948 | slave_active_lock is always locked at first before each timer lock. | |
5949 | ||
5950 | Also, ack and active_list of slave instances are properly unlinked at | |
5951 | snd_timer_stop() and snd_timer_close(). | |
5952 | ||
5953 | Last but not least, remove the superfluous call of _snd_timer_stop() | |
5954 | at removing slave links. This is a noop, and calling it may confuse | |
5955 | readers wrt locking. Further cleanup will follow in a later patch. | |
5956 | ||
5957 | Actually we've got reports of use-after-free by syzkaller fuzzer, and | |
5958 | this hopefully fixes these issues. | |
5959 | ||
5960 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
5961 | Cc: <stable@vger.kernel.org> | |
5962 | Signed-off-by: Takashi Iwai <tiwai@suse.de> | |
5963 | ||
5964 | sound/core/timer.c | 18 ++++++++++++++---- | |
5965 | 1 files changed, 14 insertions(+), 4 deletions(-) | |
5966 | ||
5967 | commit f1ce0547bdfda1b42ae8a66c222f2a897cbe1586 | |
5968 | Author: Takashi Iwai <tiwai@suse.de> | |
5969 | Date: Wed Jan 13 17:48:01 2016 +0100 | |
5970 | ||
5971 | ALSA: timer: Fix race among timer ioctls | |
5972 | ||
5973 | ALSA timer ioctls have an open race and this may lead to a | |
5974 | use-after-free of timer instance object. A simplistic fix is to make | |
5975 | each ioctl exclusive. We have already tread_sem for controlling the | |
5976 | tread, and extend this as a global mutex to be applied to each ioctl. | |
5977 | ||
5978 | The downside is, of course, the worse concurrency. But these ioctls | |
5979 | aren't to be parallel accessible, in anyway, so it should be fine to | |
5980 | serialize there. | |
5981 | ||
5982 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
5983 | Tested-by: Dmitry Vyukov <dvyukov@google.com> | |
5984 | Cc: <stable@vger.kernel.org> | |
5985 | Signed-off-by: Takashi Iwai <tiwai@suse.de> | |
5986 | ||
5987 | sound/core/timer.c | 32 +++++++++++++++++++------------- | |
5988 | 1 files changed, 19 insertions(+), 13 deletions(-) | |
5989 | ||
5990 | commit 8347d8461ed48a98f9c76cc3cfcdad8217d314bc | |
5991 | Author: Takashi Iwai <tiwai@suse.de> | |
5992 | Date: Wed Jan 13 21:35:06 2016 +0100 | |
5993 | ||
5994 | ALSA: timer: Fix double unlink of active_list | |
5995 | ||
5996 | ALSA timer instance object has a couple of linked lists and they are | |
5997 | unlinked unconditionally at snd_timer_stop(). Meanwhile | |
5998 | snd_timer_interrupt() unlinks it, but it calls list_del() which leaves | |
5999 | the element list itself unchanged. This ends up with unlinking twice, | |
6000 | and it was caught by syzkaller fuzzer. | |
6001 | ||
6002 | The fix is to use list_del_init() variant properly there, too. | |
6003 | ||
6004 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
6005 | Tested-by: Dmitry Vyukov <dvyukov@google.com> | |
6006 | Cc: <stable@vger.kernel.org> | |
6007 | Signed-off-by: Takashi Iwai <tiwai@suse.de> | |
6008 | ||
6009 | sound/core/timer.c | 2 +- | |
6010 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
6011 | ||
6012 | commit 243aebb7ae71d6e11ea9880faa893d1d0d60cd75 | |
6013 | Author: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
6014 | Date: Mon Jan 18 18:03:48 2016 +0100 | |
6015 | ||
6016 | ovs: limit ovs recursions in ovs_execute_actions to not corrupt stack | |
6017 | ||
6018 | It was seen that defective configurations of openvswitch could overwrite | |
6019 | the STACK_END_MAGIC and cause a hard crash of the kernel because of too | |
6020 | many recursions within ovs. | |
6021 | ||
6022 | This problem arises due to the high stack usage of openvswitch. The rest | |
6023 | of the kernel is fine with the current limit of 10 (RECURSION_LIMIT). | |
6024 | ||
6025 | We use the already existing recursion counter in ovs_execute_actions to | |
6026 | implement an upper bound of 5 recursions. | |
6027 | ||
6028 | Cc: Pravin Shelar <pshelar@ovn.org> | |
6029 | Cc: Simon Horman <simon.horman@netronome.com> | |
6030 | Cc: Eric Dumazet <eric.dumazet@gmail.com> | |
6031 | Cc: Simon Horman <simon.horman@netronome.com> | |
6032 | Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
6033 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6034 | ||
6035 | net/openvswitch/actions.c | 19 ++++++++++++++----- | |
6036 | 1 files changed, 14 insertions(+), 5 deletions(-) | |
6037 | ||
6038 | commit 8080793479c6d5befe37a67b1dbd9e4e0a61af96 | |
6039 | Author: Ursula Braun <ursula.braun@de.ibm.com> | |
6040 | Date: Tue Jan 19 10:41:33 2016 +0100 | |
6041 | ||
6042 | af_iucv: Validate socket address length in iucv_sock_bind() | |
6043 | ||
6044 | Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com> | |
6045 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
6046 | Reviewed-by: Evgeny Cherkashin <Eugene.Crosser@ru.ibm.com> | |
6047 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6048 | ||
6049 | net/iucv/af_iucv.c | 3 +++ | |
6050 | 1 files changed, 3 insertions(+), 0 deletions(-) | |
6051 | ||
6052 | commit 50a383c1c91ed7409c3cbdd41e662d6891463d1b | |
6053 | Author: Brad Spengler <spender@grsecurity.net> | |
6054 | Date: Tue Jan 19 19:32:54 2016 -0500 | |
6055 | ||
6056 | Apply the same fix as everyone else for the recent keys vulnerability that is | |
6057 | unexploitable under PAX_REFCOUNT | |
6058 | ||
6059 | Make a couple more changes that no one else can/will | |
6060 | ||
6061 | include/linux/key-type.h | 4 ++-- | |
6062 | ipc/msgutil.c | 4 ++-- | |
6063 | security/keys/internal.h | 2 +- | |
6064 | security/keys/process_keys.c | 1 + | |
6065 | 4 files changed, 6 insertions(+), 5 deletions(-) | |
6066 | ||
82357c75 PK |
6067 | commit b56c3a63f431c193400aee17543021950bd14bc4 |
6068 | Merge: 38b1a3d 470069c | |
6069 | Author: Brad Spengler <spender@grsecurity.net> | |
6070 | Date: Sun Jan 17 18:30:19 2016 -0500 | |
6071 | ||
6072 | Merge branch 'pax-test' into grsec-test | |
6073 | ||
6074 | commit 470069cfedef2180313233d275be5901bd6d1135 | |
6075 | Author: Brad Spengler <spender@grsecurity.net> | |
6076 | Date: Sun Jan 17 18:29:59 2016 -0500 | |
6077 | ||
6078 | Update to pax-linux-4.3.3-test22.patch: | |
6079 | - Emesed fixed a gcc induced intentional integer overflow in asix_rx_fixup_internal, reported by thomas callison caffrey | |
6080 | - fixed some more fallout from the drm_drivers constification, reported by Colin Childs and Toralf Foerster | |
6081 | ||
6082 | drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++++---------- | |
6083 | drivers/gpu/drm/drm_pci.c | 3 +++ | |
6084 | drivers/gpu/drm/gma500/psb_drv.c | 4 ---- | |
6085 | drivers/gpu/drm/i915/i915_drv.c | 16 ++++++++-------- | |
6086 | drivers/gpu/drm/nouveau/nouveau_drm.c | 6 +++--- | |
6087 | drivers/gpu/drm/radeon/radeon_drv.c | 4 +--- | |
6088 | drivers/net/usb/asix_common.c | 3 ++- | |
6089 | include/drm/drmP.h | 1 + | |
6090 | 8 files changed, 22 insertions(+), 29 deletions(-) | |
6091 | ||
6092 | commit 38b1a3d676f407865c3d41840df8213c5ad639c1 | |
6093 | Author: Brad Spengler <spender@grsecurity.net> | |
6094 | Date: Sun Jan 17 12:33:53 2016 -0500 | |
6095 | ||
6096 | As reported by Luis Ressel, the Kconfig help for GRKERNSEC_BRUTE | |
6097 | mentioned banning execution of suid/sgid binaries, though the kernel | |
6098 | source clearly only mentions banning execution of suid binaries. Since | |
6099 | there's no reason for us to not ban execution of sgid binaries as well, | |
6100 | make the implementation match the Kconfig description. | |
6101 | ||
6102 | fs/exec.c | 4 ++-- | |
6103 | grsecurity/grsec_sig.c | 27 ++++++++++++++------------- | |
6104 | include/linux/sched.h | 4 ++-- | |
6105 | 3 files changed, 18 insertions(+), 17 deletions(-) | |
6106 | ||
15ddc79a PK |
6107 | commit 8c3bcb7dbf7f606acfa0983e81f0f928da1f1ace |
6108 | Merge: d141a86 ea4a835 | |
6109 | Author: Brad Spengler <spender@grsecurity.net> | |
6110 | Date: Sat Jan 16 14:12:22 2016 -0500 | |
6111 | ||
6112 | Merge branch 'pax-test' into grsec-test | |
6113 | ||
6114 | Conflicts: | |
6115 | drivers/gpu/drm/i810/i810_drv.c | |
6116 | ||
6117 | commit ea4a835328ada6513ac013986764d6caea8cd348 | |
6118 | Author: Brad Spengler <spender@grsecurity.net> | |
6119 | Date: Sat Jan 16 14:11:30 2016 -0500 | |
6120 | ||
6121 | Update to pax-linux-4.3.3-test21.patch: | |
6122 | - fixed some fallout from the drm_drivers constification, reported by spender | |
6123 | ||
6124 | drivers/gpu/drm/armada/armada_drv.c | 3 +-- | |
6125 | drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 - | |
6126 | drivers/gpu/drm/i810/i810_dma.c | 2 +- | |
6127 | drivers/gpu/drm/i810/i810_drv.c | 6 +++++- | |
6128 | drivers/gpu/drm/i810/i810_drv.h | 2 +- | |
6129 | 5 files changed, 8 insertions(+), 6 deletions(-) | |
6130 | ||
6131 | commit d141a86fd66194bc3f896b6809b189e2f12a9a83 | |
6132 | Author: Brad Spengler <spender@grsecurity.net> | |
6133 | Date: Sat Jan 16 13:16:36 2016 -0500 | |
6134 | ||
6135 | compile fix | |
6136 | ||
6137 | drivers/gpu/drm/i810/i810_dma.c | 2 +- | |
6138 | drivers/gpu/drm/i810/i810_drv.c | 4 +++- | |
6139 | drivers/gpu/drm/i810/i810_drv.h | 2 +- | |
6140 | 3 files changed, 5 insertions(+), 3 deletions(-) | |
6141 | ||
6142 | commit 0d9dc4b25ea32c14561bcfe6b5b24f1b00fe0270 | |
6143 | Merge: 5fa135d bbda879 | |
6144 | Author: Brad Spengler <spender@grsecurity.net> | |
6145 | Date: Sat Jan 16 12:59:22 2016 -0500 | |
6146 | ||
6147 | Merge branch 'pax-test' into grsec-test | |
6148 | ||
6149 | commit bbda87914edf63e27fb46670bf3a373f2b963c73 | |
6150 | Author: Brad Spengler <spender@grsecurity.net> | |
6151 | Date: Sat Jan 16 12:58:04 2016 -0500 | |
6152 | ||
6153 | Update to pax-linux-4.3.3-test20.patch: | |
6154 | - constified drm_driver | |
6155 | - Emese fixed a special case in handling __func__ in the initify plugin | |
6156 | - Emese fixed a false positive size overflow report in handling inbufBits, reported by Martin Filo (https://bugs.gentoo.org/show_bug.cgi?id=567048) | |
6157 | - fixed regression that caused perf to not resolve kernel code addresses under KERNEXEC/i386, reported by minipli | |
6158 | ||
6159 | arch/x86/kernel/cpu/perf_event.h | 2 +- | |
6160 | arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +- | |
6161 | arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +- | |
6162 | arch/x86/kernel/uprobes.c | 2 +- | |
6163 | arch/x86/mm/mpx.c | 2 +- | |
6164 | drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +- | |
6165 | drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 ++- | |
6166 | drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +- | |
6167 | drivers/gpu/drm/drm_pci.c | 6 +- | |
6168 | drivers/gpu/drm/gma500/psb_drv.c | 5 +- | |
6169 | drivers/gpu/drm/i915/i915_dma.c | 2 +- | |
6170 | drivers/gpu/drm/i915/i915_drv.c | 15 ++-- | |
6171 | drivers/gpu/drm/i915/i915_drv.h | 2 +- | |
6172 | drivers/gpu/drm/i915/i915_irq.c | 88 ++++++++++---------- | |
6173 | drivers/gpu/drm/mga/mga_drv.c | 5 +- | |
6174 | drivers/gpu/drm/mga/mga_drv.h | 2 +- | |
6175 | drivers/gpu/drm/mga/mga_state.c | 2 +- | |
6176 | drivers/gpu/drm/nouveau/nouveau_drm.c | 13 ++-- | |
6177 | drivers/gpu/drm/qxl/qxl_drv.c | 8 ++- | |
6178 | drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +- | |
6179 | drivers/gpu/drm/r128/r128_drv.c | 4 +- | |
6180 | drivers/gpu/drm/r128/r128_drv.h | 2 +- | |
6181 | drivers/gpu/drm/r128/r128_state.c | 2 +- | |
6182 | drivers/gpu/drm/radeon/radeon_drv.c | 17 +++- | |
6183 | drivers/gpu/drm/radeon/radeon_drv.h | 2 +- | |
6184 | drivers/gpu/drm/radeon/radeon_kms.c | 2 +- | |
6185 | drivers/gpu/drm/radeon/radeon_state.c | 2 +- | |
6186 | drivers/gpu/drm/savage/savage_bci.c | 2 +- | |
6187 | drivers/gpu/drm/savage/savage_drv.c | 5 +- | |
6188 | drivers/gpu/drm/savage/savage_drv.h | 2 +- | |
6189 | drivers/gpu/drm/sis/sis_drv.c | 5 +- | |
6190 | drivers/gpu/drm/sis/sis_drv.h | 2 +- | |
6191 | drivers/gpu/drm/sis/sis_mm.c | 2 +- | |
6192 | drivers/gpu/drm/via/via_dma.c | 2 +- | |
6193 | drivers/gpu/drm/via/via_drv.c | 5 +- | |
6194 | drivers/gpu/drm/via/via_drv.h | 2 +- | |
6195 | include/drm/drmP.h | 2 +- | |
6196 | mm/slab.c | 2 +- | |
6197 | net/sunrpc/xprtrdma/svc_rdma.c | 6 +- | |
6198 | tools/gcc/initify_plugin.c | 15 +++- | |
6199 | .../disable_size_overflow_hash.data | 1 + | |
6200 | .../size_overflow_plugin/size_overflow_hash.data | 3 +- | |
6201 | 42 files changed, 156 insertions(+), 110 deletions(-) | |
6202 | ||
6203 | commit 5fa135dc116350e0205c39ef65eaf6496ed2748a | |
6204 | Author: Brad Spengler <spender@grsecurity.net> | |
6205 | Date: Sat Jan 16 12:19:23 2016 -0500 | |
6206 | ||
6207 | compile fix | |
6208 | ||
6209 | grsecurity/grsec_sig.c | 3 +-- | |
6210 | 1 files changed, 1 insertions(+), 2 deletions(-) | |
6211 | ||
6212 | commit a9090fa58f33f75c7450fda5721a9b13625a47d9 | |
6213 | Author: Brad Spengler <spender@grsecurity.net> | |
6214 | Date: Sat Jan 16 12:10:37 2016 -0500 | |
6215 | ||
6216 | As pointed out by Jann Horn, some distros are starting to circumvent | |
6217 | previous assumptions about the attainability of a user to control | |
6218 | multiple UIDs by handing out suid binaries that allow a user to run | |
6219 | processes (including exploits) under a number of other pre-defined | |
6220 | UIDs. As this could potentially be used to bypass GRKERNSEC_BRUTE | |
6221 | (though it would have to involve some code path that doesn't involve | |
6222 | locks) fix that here by ensuring no more than 8 users on a system can | |
6223 | be banned before a reboot is required. If more are banned, a panic | |
6224 | is triggered. | |
6225 | ||
6226 | grsecurity/grsec_sig.c | 8 ++++++++ | |
6227 | 1 files changed, 8 insertions(+), 0 deletions(-) | |
6228 | ||
6229 | commit a8d37776e9521c567ebff6730d49312f72435f08 | |
6230 | Author: Eric Dumazet <edumazet@google.com> | |
6231 | Date: Thu Dec 3 11:12:07 2015 -0800 | |
6232 | ||
6233 | proc: add a reschedule point in proc_readfd_common() | |
6234 | ||
6235 | User can pass an arbitrary large buffer to getdents(). | |
6236 | ||
6237 | It is typically a 32KB buffer used by libc scandir() implementation. | |
6238 | ||
6239 | When scanning /proc/{pid}/fd, we can hold cpu way too long, | |
6240 | so add a cond_resched() to be kind with other tasks. | |
6241 | ||
6242 | We've seen latencies of more than 50ms on real workloads. | |
6243 | ||
6244 | Signed-off-by: Eric Dumazet <edumazet@google.com> | |
6245 | Cc: Alexander Viro <viro@zeniv.linux.org.uk> | |
6246 | Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> | |
6247 | ||
6248 | fs/proc/fd.c | 1 + | |
6249 | 1 files changed, 1 insertions(+), 0 deletions(-) | |
6250 | ||
6251 | commit 0adba75f8708f13b1f5d98ebe3fc2fb961e100c8 | |
6252 | Author: Rabin Vincent <rabin@rab.in> | |
6253 | Date: Tue Jan 12 20:17:08 2016 +0100 | |
6254 | ||
6255 | net: bpf: reject invalid shifts | |
6256 | ||
6257 | On ARM64, a BUG() is triggered in the eBPF JIT if a filter with a | |
6258 | constant shift that can't be encoded in the immediate field of the | |
6259 | UBFM/SBFM instructions is passed to the JIT. Since these shifts | |
6260 | amounts, which are negative or >= regsize, are invalid, reject them in | |
6261 | the eBPF verifier and the classic BPF filter checker, for all | |
6262 | architectures. | |
6263 | ||
6264 | Signed-off-by: Rabin Vincent <rabin@rab.in> | |
6265 | Acked-by: Alexei Starovoitov <ast@kernel.org> | |
6266 | Acked-by: Daniel Borkmann <daniel@iogearbox.net> | |
6267 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6268 | ||
6269 | kernel/bpf/verifier.c | 10 ++++++++++ | |
6270 | net/core/filter.c | 5 +++++ | |
6271 | 2 files changed, 15 insertions(+), 0 deletions(-) | |
6272 | ||
6273 | commit c248e115a73496625a1c64660d0eeefd67e55cbf | |
6274 | Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com> | |
6275 | Date: Fri Jan 8 11:00:54 2016 -0200 | |
6276 | ||
6277 | sctp: fix use-after-free in pr_debug statement | |
6278 | ||
6279 | Dmitry Vyukov reported a use-after-free in the code expanded by the | |
6280 | macro debug_post_sfx, which is caused by the use of the asoc pointer | |
6281 | after it was freed within sctp_side_effect() scope. | |
6282 | ||
6283 | This patch fixes it by allowing sctp_side_effect to clear that asoc | |
6284 | pointer when the TCB is freed. | |
6285 | ||
6286 | As Vlad explained, we also have to cover the SCTP_DISPOSITION_ABORT case | |
6287 | because it will trigger DELETE_TCB too on that same loop. | |
6288 | ||
6289 | Also, there were places issuing SCTP_CMD_INIT_FAILED and ASSOC_FAILED | |
6290 | but returning SCTP_DISPOSITION_CONSUME, which would fool the scheme | |
6291 | above. Fix it by returning SCTP_DISPOSITION_ABORT instead. | |
6292 | ||
6293 | The macro is already prepared to handle such NULL pointer. | |
6294 | ||
6295 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
6296 | Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com> | |
6297 | Acked-by: Vlad Yasevich <vyasevich@gmail.com> | |
6298 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6299 | ||
6300 | net/sctp/sm_sideeffect.c | 11 ++++++----- | |
6301 | net/sctp/sm_statefuns.c | 17 ++++------------- | |
6302 | 2 files changed, 10 insertions(+), 18 deletions(-) | |
6303 | ||
6304 | commit 395ea8a9e73e184fc14153a033000bccf4213213 | |
6305 | Author: willy tarreau <w@1wt.eu> | |
6306 | Date: Sun Jan 10 07:54:56 2016 +0100 | |
6307 | ||
6308 | unix: properly account for FDs passed over unix sockets | |
6309 | ||
6310 | It is possible for a process to allocate and accumulate far more FDs than | |
6311 | the process' limit by sending them over a unix socket then closing them | |
6312 | to keep the process' fd count low. | |
6313 | ||
6314 | This change addresses this problem by keeping track of the number of FDs | |
6315 | in flight per user and preventing non-privileged processes from having | |
6316 | more FDs in flight than their configured FD limit. | |
6317 | ||
6318 | Reported-by: socketpair@gmail.com | |
6319 | Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> | |
6320 | Mitigates: CVE-2013-4312 (Linux 2.0+) | |
6321 | Suggested-by: Linus Torvalds <torvalds@linux-foundation.org> | |
6322 | Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
6323 | Signed-off-by: Willy Tarreau <w@1wt.eu> | |
6324 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6325 | ||
6326 | include/linux/sched.h | 1 + | |
6327 | net/unix/af_unix.c | 24 ++++++++++++++++++++---- | |
6328 | net/unix/garbage.c | 13 ++++++++----- | |
6329 | 3 files changed, 29 insertions(+), 9 deletions(-) | |
6330 | ||
6331 | commit cb207ab8fbd71dcfc4a49d533aba8085012543fd | |
6332 | Author: Sasha Levin <sasha.levin@oracle.com> | |
6333 | Date: Thu Jan 7 14:52:43 2016 -0500 | |
6334 | ||
6335 | net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory | |
6336 | ||
6337 | proc_dostring() needs an initialized destination string, while the one | |
6338 | provided in proc_sctp_do_hmac_alg() contains stack garbage. | |
6339 | ||
6340 | Thus, writing to cookie_hmac_alg would strlen() that garbage and end up | |
6341 | accessing invalid memory. | |
6342 | ||
6343 | Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic") | |
6344 | Signed-off-by: Sasha Levin <sasha.levin@oracle.com> | |
6345 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6346 | ||
6347 | net/sctp/sysctl.c | 2 +- | |
6348 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
6349 | ||
6350 | commit 4014e09faf0fe9054119624ccfff1236e886b554 | |
6351 | Author: Quentin Casasnovas <quentin.casasnovas@oracle.com> | |
6352 | Date: Tue Nov 24 17:13:21 2015 -0500 | |
6353 | ||
6354 | RDS: fix race condition when sending a message on unbound socket | |
6355 | ||
6356 | commit 8c7188b23474cca017b3ef354c4a58456f68303a upstream. | |
6357 | ||
6358 | Sasha's found a NULL pointer dereference in the RDS connection code when | |
6359 | sending a message to an apparently unbound socket. The problem is caused | |
6360 | by the code checking if the socket is bound in rds_sendmsg(), which checks | |
6361 | the rs_bound_addr field without taking a lock on the socket. This opens a | |
6362 | race where rs_bound_addr is temporarily set but where the transport is not | |
6363 | in rds_bind(), leading to a NULL pointer dereference when trying to | |
6364 | dereference 'trans' in __rds_conn_create(). | |
6365 | ||
6366 | Vegard wrote a reproducer for this issue, so kindly ask him to share if | |
6367 | you're interested. | |
6368 | ||
6369 | I cannot reproduce the NULL pointer dereference using Vegard's reproducer | |
6370 | with this patch, whereas I could without. | |
6371 | ||
6372 | Complete earlier incomplete fix to CVE-2015-6937: | |
6373 | ||
6374 | 74e98eb08588 ("RDS: verify the underlying transport exists before creating a connection") | |
6375 | ||
6376 | Cc: David S. Miller <davem@davemloft.net> | |
6377 | ||
6378 | Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com> | |
6379 | Reviewed-by: Sasha Levin <sasha.levin@oracle.com> | |
6380 | Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com> | |
6381 | Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com> | |
6382 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6383 | Signed-off-by: Jiri Slaby <jslaby@suse.cz> | |
6384 | ||
6385 | Conflicts: | |
6386 | ||
6387 | net/rds/send.c | |
6388 | ||
6389 | net/rds/connection.c | 6 ------ | |
6390 | 1 files changed, 0 insertions(+), 6 deletions(-) | |
6391 | ||
6392 | commit 206df8d01104344d7588d801016a281a4cd25556 | |
6393 | Author: Sasha Levin <sasha.levin@oracle.com> | |
6394 | Date: Tue Sep 8 10:53:40 2015 -0400 | |
6395 | ||
6396 | RDS: verify the underlying transport exists before creating a connection | |
6397 | ||
6398 | There was no verification that an underlying transport exists when creating | |
6399 | a connection, this would cause dereferencing a NULL ptr. | |
6400 | ||
6401 | It might happen on sockets that weren't properly bound before attempting to | |
6402 | send a message, which will cause a NULL ptr deref: | |
6403 | ||
6404 | [135546.047719] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN | |
6405 | [135546.051270] Modules linked in: | |
6406 | [135546.051781] CPU: 4 PID: 15650 Comm: trinity-c4 Not tainted 4.2.0-next-20150902-sasha-00041-gbaa1222-dirty #2527 | |
6407 | [135546.053217] task: ffff8800835bc000 ti: ffff8800bc708000 task.ti: ffff8800bc708000 | |
6408 | [135546.054291] RIP: __rds_conn_create (net/rds/connection.c:194) | |
6409 | [135546.055666] RSP: 0018:ffff8800bc70fab0 EFLAGS: 00010202 | |
6410 | [135546.056457] RAX: dffffc0000000000 RBX: 0000000000000f2c RCX: ffff8800835bc000 | |
6411 | [135546.057494] RDX: 0000000000000007 RSI: ffff8800835bccd8 RDI: 0000000000000038 | |
6412 | [135546.058530] RBP: ffff8800bc70fb18 R08: 0000000000000001 R09: 0000000000000000 | |
6413 | [135546.059556] R10: ffffed014d7a3a23 R11: ffffed014d7a3a21 R12: 0000000000000000 | |
6414 | [135546.060614] R13: 0000000000000001 R14: ffff8801ec3d0000 R15: 0000000000000000 | |
6415 | [135546.061668] FS: 00007faad4ffb700(0000) GS:ffff880252000000(0000) knlGS:0000000000000000 | |
6416 | [135546.062836] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b | |
6417 | [135546.063682] CR2: 000000000000846a CR3: 000000009d137000 CR4: 00000000000006a0 | |
6418 | [135546.064723] Stack: | |
6419 | [135546.065048] ffffffffafe2055c ffffffffafe23fc1 ffffed00493097bf ffff8801ec3d0008 | |
6420 | [135546.066247] 0000000000000000 00000000000000d0 0000000000000000 ac194a24c0586342 | |
6421 | [135546.067438] 1ffff100178e1f78 ffff880320581b00 ffff8800bc70fdd0 ffff880320581b00 | |
6422 | [135546.068629] Call Trace: | |
6423 | [135546.069028] ? __rds_conn_create (include/linux/rcupdate.h:856 net/rds/connection.c:134) | |
6424 | [135546.069989] ? rds_message_copy_from_user (net/rds/message.c:298) | |
6425 | [135546.071021] rds_conn_create_outgoing (net/rds/connection.c:278) | |
6426 | [135546.071981] rds_sendmsg (net/rds/send.c:1058) | |
6427 | [135546.072858] ? perf_trace_lock (include/trace/events/lock.h:38) | |
6428 | [135546.073744] ? lockdep_init (kernel/locking/lockdep.c:3298) | |
6429 | [135546.074577] ? rds_send_drop_to (net/rds/send.c:976) | |
6430 | [135546.075508] ? __might_fault (./arch/x86/include/asm/current.h:14 mm/memory.c:3795) | |
6431 | [135546.076349] ? __might_fault (mm/memory.c:3795) | |
6432 | [135546.077179] ? rds_send_drop_to (net/rds/send.c:976) | |
6433 | [135546.078114] sock_sendmsg (net/socket.c:611 net/socket.c:620) | |
6434 | [135546.078856] SYSC_sendto (net/socket.c:1657) | |
6435 | [135546.079596] ? SYSC_connect (net/socket.c:1628) | |
6436 | [135546.080510] ? trace_dump_stack (kernel/trace/trace.c:1926) | |
6437 | [135546.081397] ? ring_buffer_unlock_commit (kernel/trace/ring_buffer.c:2479 kernel/trace/ring_buffer.c:2558 kernel/trace/ring_buffer.c:2674) | |
6438 | [135546.082390] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749) | |
6439 | [135546.083410] ? trace_event_raw_event_sys_enter (include/trace/events/syscalls.h:16) | |
6440 | [135546.084481] ? do_audit_syscall_entry (include/trace/events/syscalls.h:16) | |
6441 | [135546.085438] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749) | |
6442 | [135546.085515] rds_ib_laddr_check(): addr 36.74.25.172 ret -99 node type -1 | |
6443 | ||
6444 | Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com> | |
6445 | Signed-off-by: Sasha Levin <sasha.levin@oracle.com> | |
6446 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6447 | ||
6448 | net/rds/connection.c | 6 ++++++ | |
6449 | 1 files changed, 6 insertions(+), 0 deletions(-) | |
6450 | ||
6451 | commit 173fa03f05cf0ad485d49a42cbdee8844d3a689a | |
6452 | Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org> | |
6453 | Date: Tue Jan 5 20:32:47 2016 -0500 | |
6454 | ||
6455 | ftrace/module: Call clean up function when module init fails early | |
6456 | ||
6457 | If the module init code fails after calling ftrace_module_init() and before | |
6458 | calling do_init_module(), we can suffer from a memory leak. This is because | |
6459 | ftrace_module_init() allocates pages to store the locations that ftrace | |
6460 | hooks are placed in the module text. If do_init_module() fails, it still | |
6461 | calls the MODULE_GOING notifiers which will tell ftrace to do a clean up of | |
6462 | the pages it allocated for the module. But if load_module() fails before | |
6463 | then, the pages allocated by ftrace_module_init() will never be freed. | |
6464 | ||
6465 | Call ftrace_release_mod() on the module if load_module() fails before | |
6466 | getting to do_init_module(). | |
6467 | ||
6468 | Link: http://lkml.kernel.org/r/567CEA31.1070507@intel.com | |
6469 | ||
6470 | Reported-by: "Qiu, PeiyangX" <peiyangx.qiu@intel.com> | |
6471 | Fixes: a949ae560a511 "ftrace/module: Hardcode ftrace_module_init() call into load_module()" | |
6472 | Cc: stable@vger.kernel.org # v2.6.38+ | |
6473 | Acked-by: Rusty Russell <rusty@rustcorp.com.au> | |
6474 | Signed-off-by: Steven Rostedt <rostedt@goodmis.org> | |
6475 | ||
6476 | include/linux/ftrace.h | 1 + | |
6477 | kernel/module.c | 6 ++++++ | |
6478 | 2 files changed, 7 insertions(+), 0 deletions(-) | |
6479 | ||
6480 | commit 1e5a4a81a4c16c8ac2e264b88a02cc2f42ed0399 | |
6481 | Author: Francesco Ruggeri <fruggeri@aristanetworks.com> | |
6482 | Date: Wed Jan 6 00:18:48 2016 -0800 | |
6483 | ||
6484 | net: possible use after free in dst_release | |
6485 | ||
6486 | dst_release should not access dst->flags after decrementing | |
6487 | __refcnt to 0. The dst_entry may be in dst_busy_list and | |
6488 | dst_gc_task may dst_destroy it before dst_release gets a chance | |
6489 | to access dst->flags. | |
6490 | ||
6491 | Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()") | |
6492 | Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst") | |
6493 | Signed-off-by: Francesco Ruggeri <fruggeri@arista.com> | |
6494 | Acked-by: Eric Dumazet <edumazet@google.com> | |
6495 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6496 | ||
6497 | net/core/dst.c | 3 ++- | |
6498 | 1 files changed, 2 insertions(+), 1 deletions(-) | |
6499 | ||
6500 | commit bfb0455793dd4e0f0b49d34a68b3249ab55565cc | |
6501 | Author: Alan <gnomes@lxorguk.ukuu.org.uk> | |
6502 | Date: Wed Jan 6 14:55:02 2016 +0000 | |
6503 | ||
6504 | mkiss: fix scribble on freed memory | |
6505 | ||
6506 | commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable | |
6507 | scribble on free memory but added a new one which allows the user to | |
6508 | scribble even more and user controlled data into freed space. | |
6509 | ||
6510 | As with 6pack we need to halt the queue before we free the buffers, because | |
6511 | the transmit logic is not protected by the semaphore. | |
6512 | ||
6513 | Signed-off-by: Alan Cox <alan@linux.intel.com> | |
6514 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6515 | ||
6516 | drivers/net/hamradio/mkiss.c | 5 +++++ | |
6517 | 1 files changed, 5 insertions(+), 0 deletions(-) | |
6518 | ||
6519 | commit 5cbbcbd32dc1949470f61d342503808fa9555276 | |
6520 | Author: David Miller <davem@davemloft.net> | |
6521 | Date: Thu Dec 17 16:05:49 2015 -0500 | |
6522 | ||
6523 | mkiss: Fix use after free in mkiss_close(). | |
6524 | ||
6525 | Need to do the unregister_device() after all references to the driver | |
6526 | private have been done. | |
6527 | ||
6528 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6529 | ||
6530 | drivers/net/hamradio/mkiss.c | 4 ++-- | |
6531 | 1 files changed, 2 insertions(+), 2 deletions(-) | |
6532 | ||
6533 | commit b00171576794a98068e069a660f0991a6a5190ff | |
6534 | Author: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk> | |
6535 | Date: Tue Jan 5 11:51:25 2016 +0000 | |
6536 | ||
6537 | 6pack: fix free memory scribbles | |
6538 | ||
6539 | commit acf673a3187edf72068ee2f92f4dc47d66baed47 fixed a user triggerable free | |
6540 | memory scribble but in doing so replaced it with a different one that allows | |
6541 | the user to control the data and scribble even more. | |
6542 | ||
6543 | sixpack_close is called by the tty layer in tty context. The tty context is | |
6544 | protected by sp_get() and sp_put(). However network layer activity via | |
6545 | sp_xmit() is not protected this way. We must therefore stop the queue | |
6546 | otherwise the user gets to dump a buffer mostly of their choice into freed | |
6547 | kernel pages. | |
6548 | ||
6549 | Signed-off-by: Alan Cox <alan@linux.intel.com> | |
6550 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6551 | ||
6552 | drivers/net/hamradio/6pack.c | 6 ++++++ | |
6553 | 1 files changed, 6 insertions(+), 0 deletions(-) | |
6554 | ||
6555 | commit 5b64a833907cd230a3106aeba2304b2c1bcd116d | |
6556 | Author: David Miller <davem@davemloft.net> | |
6557 | Date: Thu Dec 17 16:05:32 2015 -0500 | |
6558 | ||
6559 | 6pack: Fix use after free in sixpack_close(). | |
6560 | ||
6561 | Need to do the unregister_device() after all references to the driver | |
6562 | private have been done. | |
6563 | ||
6564 | Also we need to use del_timer_sync() for the timers so that we don't | |
6565 | have any asynchronous references after the unregister. | |
6566 | ||
6567 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6568 | ||
6569 | drivers/net/hamradio/6pack.c | 8 ++++---- | |
6570 | 1 files changed, 4 insertions(+), 4 deletions(-) | |
6571 | ||
6572 | commit 4f9d532742656b3613d579220fd10c78f24ba37b | |
6573 | Author: Rabin Vincent <rabin@rab.in> | |
6574 | Date: Tue Jan 5 16:23:07 2016 +0100 | |
6575 | ||
6576 | net: filter: make JITs zero A for SKF_AD_ALU_XOR_X | |
6577 | ||
6578 | The SKF_AD_ALU_XOR_X ancillary is not like the other ancillary data | |
6579 | instructions since it XORs A with X while all the others replace A with | |
6580 | some loaded value. All the BPF JITs fail to clear A if this is used as | |
6581 | the first instruction in a filter. This was found using american fuzzy | |
6582 | lop. | |
6583 | ||
6584 | Add a helper to determine if A needs to be cleared given the first | |
6585 | instruction in a filter, and use this in the JITs. Except for ARM, the | |
6586 | rest have only been compile-tested. | |
6587 | ||
6588 | Fixes: 3480593131e0 ("net: filter: get rid of BPF_S_* enum") | |
6589 | Signed-off-by: Rabin Vincent <rabin@rab.in> | |
6590 | Acked-by: Daniel Borkmann <daniel@iogearbox.net> | |
6591 | Acked-by: Alexei Starovoitov <ast@kernel.org> | |
6592 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6593 | ||
6594 | arch/arm/net/bpf_jit_32.c | 16 +--------------- | |
6595 | arch/mips/net/bpf_jit.c | 16 +--------------- | |
6596 | arch/powerpc/net/bpf_jit_comp.c | 13 ++----------- | |
6597 | arch/sparc/net/bpf_jit_comp.c | 17 ++--------------- | |
6598 | include/linux/filter.h | 19 +++++++++++++++++++ | |
6599 | 5 files changed, 25 insertions(+), 56 deletions(-) | |
6600 | ||
6601 | commit 570d88f8acfffda92b89ae2e1c47320d47256034 | |
6602 | Author: John Fastabend <john.fastabend@gmail.com> | |
6603 | Date: Tue Jan 5 09:11:36 2016 -0800 | |
6604 | ||
6605 | net: sched: fix missing free per cpu on qstats | |
6606 | ||
6607 | When a qdisc is using per cpu stats (currently just the ingress | |
6608 | qdisc) only the bstats are being freed. This also free's the qstats. | |
6609 | ||
6610 | Fixes: b0ab6f92752b9f9d8 ("net: sched: enable per cpu qstats") | |
6611 | Signed-off-by: John Fastabend <john.r.fastabend@intel.com> | |
6612 | Acked-by: Eric Dumazet <edumazet@google.com> | |
6613 | Acked-by: Daniel Borkmann <daniel@iogearbox.net> | |
6614 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6615 | ||
6616 | net/sched/sch_generic.c | 4 +++- | |
6617 | 1 files changed, 3 insertions(+), 1 deletions(-) | |
6618 | ||
6619 | commit 32c0ebc51857ee83470a10dcb234d308a0ed1881 | |
6620 | Author: Rabin Vincent <rabin@rab.in> | |
6621 | Date: Tue Jan 5 18:34:04 2016 +0100 | |
6622 | ||
6623 | ARM: net: bpf: fix zero right shift | |
6624 | ||
6625 | The LSR instruction cannot be used to perform a zero right shift since a | |
6626 | 0 as the immediate value (imm5) in the LSR instruction encoding means | |
6627 | that a shift of 32 is perfomed. See DecodeIMMShift() in the ARM ARM. | |
6628 | ||
6629 | Make the JIT skip generation of the LSR if a zero-shift is requested. | |
6630 | ||
6631 | This was found using american fuzzy lop. | |
6632 | ||
6633 | Signed-off-by: Rabin Vincent <rabin@rab.in> | |
6634 | Acked-by: Alexei Starovoitov <ast@kernel.org> | |
6635 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6636 | ||
6637 | arch/arm/net/bpf_jit_32.c | 3 ++- | |
6638 | 1 files changed, 2 insertions(+), 1 deletions(-) | |
6639 | ||
6640 | commit 51f5d291750285efa4d4bbe84e5ec23dc00c8d2d | |
6641 | Author: Brad Spengler <spender@grsecurity.net> | |
6642 | Date: Wed Jan 6 20:35:57 2016 -0500 | |
6643 | ||
6644 | Don't perform hidden lookups in RBAC against the directory of | |
6645 | a file being opened with O_CREAT, reported by Karl Witt | |
6646 | ||
6647 | Conflicts: | |
6648 | ||
6649 | fs/namei.c | |
6650 | ||
6651 | fs/namei.c | 3 --- | |
6652 | 1 files changed, 0 insertions(+), 3 deletions(-) | |
6653 | ||
4af7ec18 PK |
6654 | commit 5a8266a6b2769ccdb447256f95bc2577a73cccd1 |
6655 | Author: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
6656 | Date: Tue Jan 5 10:46:00 2016 +0100 | |
6657 | ||
6658 | bridge: Only call /sbin/bridge-stp for the initial network namespace | |
6659 | ||
6660 | [I stole this patch from Eric Biederman. He wrote:] | |
6661 | ||
6662 | > There is no defined mechanism to pass network namespace information | |
6663 | > into /sbin/bridge-stp therefore don't even try to invoke it except | |
6664 | > for bridge devices in the initial network namespace. | |
6665 | > | |
6666 | > It is possible for unprivileged users to cause /sbin/bridge-stp to be | |
6667 | > invoked for any network device name which if /sbin/bridge-stp does not | |
6668 | > guard against unreasonable arguments or being invoked twice on the | |
6669 | > same network device could cause problems. | |
6670 | ||
6671 | [Hannes: changed patch using netns_eq] | |
6672 | ||
6673 | Cc: Eric W. Biederman <ebiederm@xmission.com> | |
6674 | Signed-off-by: Eric W. Biederman <ebiederm@xmission.com> | |
6675 | Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
6676 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6677 | ||
6678 | net/bridge/br_stp_if.c | 5 ++++- | |
6679 | 1 files changed, 4 insertions(+), 1 deletions(-) | |
6680 | ||
6681 | commit 650d535cc39f0aeff2f57e60b6617be25d3ef48b | |
6682 | Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com> | |
6683 | Date: Wed Dec 23 16:28:40 2015 -0200 | |
6684 | ||
6685 | sctp: use GFP_USER for user-controlled kmalloc | |
6686 | ||
6687 | Commit cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc") | |
6688 | missed two other spots. | |
6689 | ||
6690 | For connectx, as it's more likely to be used by kernel users of the API, | |
6691 | it detects if GFP_USER should be used or not. | |
6692 | ||
6693 | Fixes: cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc") | |
6694 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
6695 | Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com> | |
6696 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6697 | ||
6698 | net/sctp/socket.c | 9 ++++++--- | |
6699 | 1 files changed, 6 insertions(+), 3 deletions(-) | |
6700 | ||
6701 | commit 5718a1f63c41fc156f729783423b002763779d04 | |
6702 | Author: Florian Westphal <fw@strlen.de> | |
6703 | Date: Thu Dec 31 14:26:33 2015 +0100 | |
6704 | ||
6705 | connector: bump skb->users before callback invocation | |
6706 | ||
6707 | Dmitry reports memleak with syskaller program. | |
6708 | Problem is that connector bumps skb usecount but might not invoke callback. | |
6709 | ||
6710 | So move skb_get to where we invoke the callback. | |
6711 | ||
6712 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
6713 | Signed-off-by: Florian Westphal <fw@strlen.de> | |
6714 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6715 | ||
6716 | drivers/connector/connector.c | 11 +++-------- | |
6717 | 1 files changed, 3 insertions(+), 8 deletions(-) | |
6718 | ||
6719 | commit 2e6372e6a97f8d642416899861f91777f44f13b7 | |
6720 | Author: Rainer Weikusat <rweikusat@mobileactivedefense.com> | |
6721 | Date: Sun Jan 3 18:56:38 2016 +0000 | |
6722 | ||
6723 | af_unix: Fix splice-bind deadlock | |
6724 | ||
6725 | On 2015/11/06, Dmitry Vyukov reported a deadlock involving the splice | |
6726 | system call and AF_UNIX sockets, | |
6727 | ||
6728 | http://lists.openwall.net/netdev/2015/11/06/24 | |
6729 | ||
6730 | The situation was analyzed as | |
6731 | ||
6732 | (a while ago) A: socketpair() | |
6733 | B: splice() from a pipe to /mnt/regular_file | |
6734 | does sb_start_write() on /mnt | |
6735 | C: try to freeze /mnt | |
6736 | wait for B to finish with /mnt | |
6737 | A: bind() try to bind our socket to /mnt/new_socket_name | |
6738 | lock our socket, see it not bound yet | |
6739 | decide that it needs to create something in /mnt | |
6740 | try to do sb_start_write() on /mnt, block (it's | |
6741 | waiting for C). | |
6742 | D: splice() from the same pipe to our socket | |
6743 | lock the pipe, see that socket is connected | |
6744 | try to lock the socket, block waiting for A | |
6745 | B: get around to actually feeding a chunk from | |
6746 | pipe to file, try to lock the pipe. Deadlock. | |
6747 | ||
6748 | on 2015/11/10 by Al Viro, | |
6749 | ||
6750 | http://lists.openwall.net/netdev/2015/11/10/4 | |
6751 | ||
6752 | The patch fixes this by removing the kern_path_create related code from | |
6753 | unix_mknod and executing it as part of unix_bind prior acquiring the | |
6754 | readlock of the socket in question. This means that A (as used above) | |
6755 | will sb_start_write on /mnt before it acquires the readlock, hence, it | |
6756 | won't indirectly block B which first did a sb_start_write and then | |
6757 | waited for a thread trying to acquire the readlock. Consequently, A | |
6758 | being blocked by C waiting for B won't cause a deadlock anymore | |
6759 | (effectively, both A and B acquire two locks in opposite order in the | |
6760 | situation described above). | |
6761 | ||
6762 | Dmitry Vyukov(<dvyukov@google.com>) tested the original patch. | |
6763 | ||
6764 | Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com> | |
6765 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
6766 | ||
6767 | Conflicts: | |
6768 | ||
6769 | net/unix/af_unix.c | |
6770 | ||
6771 | net/unix/af_unix.c | 70 +++++++++++++++++++++++++++++++-------------------- | |
6772 | 1 files changed, 42 insertions(+), 28 deletions(-) | |
6773 | ||
6774 | commit 2e729e557c571f3253e32472cd7d382ac16cf1c3 | |
6775 | Author: Qiu Peiyang <peiyangx.qiu@intel.com> | |
6776 | Date: Thu Dec 31 13:11:28 2015 +0800 | |
6777 | ||
6778 | tracing: Fix setting of start_index in find_next() | |
6779 | ||
6780 | When we do cat /sys/kernel/debug/tracing/printk_formats, we hit kernel | |
6781 | panic at t_show. | |
6782 | ||
6783 | general protection fault: 0000 [#1] PREEMPT SMP | |
6784 | CPU: 0 PID: 2957 Comm: sh Tainted: G W O 3.14.55-x86_64-01062-gd4acdc7 #2 | |
6785 | RIP: 0010:[<ffffffff811375b2>] | |
6786 | [<ffffffff811375b2>] t_show+0x22/0xe0 | |
6787 | RSP: 0000:ffff88002b4ebe80 EFLAGS: 00010246 | |
6788 | RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 | |
6789 | RDX: 0000000000000004 RSI: ffffffff81fd26a6 RDI: ffff880032f9f7b1 | |
6790 | RBP: ffff88002b4ebe98 R08: 0000000000001000 R09: 000000000000ffec | |
6791 | R10: 0000000000000000 R11: 000000000000000f R12: ffff880004d9b6c0 | |
6792 | R13: 7365725f6d706400 R14: ffff880004d9b6c0 R15: ffffffff82020570 | |
6793 | FS: 0000000000000000(0000) GS:ffff88003aa00000(0063) knlGS:00000000f776bc40 | |
6794 | CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 | |
6795 | CR2: 00000000f6c02ff0 CR3: 000000002c2b3000 CR4: 00000000001007f0 | |
6796 | Call Trace: | |
6797 | [<ffffffff811dc076>] seq_read+0x2f6/0x3e0 | |
6798 | [<ffffffff811b749b>] vfs_read+0x9b/0x160 | |
6799 | [<ffffffff811b7f69>] SyS_read+0x49/0xb0 | |
6800 | [<ffffffff81a3a4b9>] ia32_do_call+0x13/0x13 | |
6801 | ---[ end trace 5bd9eb630614861e ]--- | |
6802 | Kernel panic - not syncing: Fatal exception | |
6803 | ||
6804 | When the first time find_next calls find_next_mod_format, it should | |
6805 | iterate the trace_bprintk_fmt_list to find the first print format of | |
6806 | the module. However in current code, start_index is smaller than *pos | |
6807 | at first, and code will not iterate the list. Latter container_of will | |
6808 | get the wrong address with former v, which will cause mod_fmt be a | |
6809 | meaningless object and so is the returned mod_fmt->fmt. | |
6810 | ||
6811 | This patch will fix it by correcting the start_index. After fixed, | |
6812 | when the first time calls find_next_mod_format, start_index will be | |
6813 | equal to *pos, and code will iterate the trace_bprintk_fmt_list to | |
6814 | get the right module printk format, so is the returned mod_fmt->fmt. | |
6815 | ||
6816 | Link: http://lkml.kernel.org/r/5684B900.9000309@intel.com | |
6817 | ||
6818 | Cc: stable@vger.kernel.org # 3.12+ | |
6819 | Fixes: 102c9323c35a8 "tracing: Add __tracepoint_string() to export string pointers" | |
6820 | Signed-off-by: Qiu Peiyang <peiyangx.qiu@intel.com> | |
6821 | Signed-off-by: Steven Rostedt <rostedt@goodmis.org> | |
6822 | ||
6823 | kernel/trace/trace_printk.c | 1 + | |
6824 | 1 files changed, 1 insertions(+), 0 deletions(-) | |
6825 | ||
6826 | commit 0994af4b1930f32aa493dc08145cd304f8bfc8f4 | |
6827 | Author: Al Viro <viro@zeniv.linux.org.uk> | |
6828 | Date: Mon Dec 28 20:47:08 2015 -0500 | |
6829 | ||
6830 | [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64() | |
6831 | ||
6832 | Cc: stable@vger.kernel.org # 3.15+ | |
6833 | Reviewed-by: Jeff Layton <jeff.layton@primarydata.com> | |
6834 | Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> | |
6835 | ||
6836 | arch/arm/kernel/sys_oabi-compat.c | 73 +++++++++++++++++++------------------ | |
6837 | 1 files changed, 37 insertions(+), 36 deletions(-) | |
6838 | ||
6839 | commit 4ed030f65dcf3e6b0128032a49a7d75f947fa351 | |
6840 | Merge: de243c2 3adc55a | |
6841 | Author: Brad Spengler <spender@grsecurity.net> | |
6842 | Date: Tue Jan 5 18:10:10 2016 -0500 | |
6843 | ||
6844 | Merge branch 'pax-test' into grsec-test | |
6845 | ||
6846 | commit 3adc55a5acfa429c2a7cc883aef08b960c0079b0 | |
6847 | Author: Brad Spengler <spender@grsecurity.net> | |
6848 | Date: Tue Jan 5 18:08:53 2016 -0500 | |
6849 | ||
6850 | Update to pax-linux-4.3.3-test16.patch: | |
6851 | - small cleanup in entry_64.S on x86 | |
6852 | - Emese fixed the initify plugin to recursively check variable initializers, reported by Rasmus Villemoes | |
6853 | - fixed an integer truncation of a partially uninitialized value bug in em_pop_sreg, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4354) | |
6854 | - fixed alternatives patching of call insns under KERNEXEC/i386, reported by fly_a320 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4305) and TTgrsec (https://forums.grsecurity.net/viewtopic.php?f=3&t=4353) | |
6855 | - fixed a size overflow false positive that triggered in tcp_parse_options on arm, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350&p=15917#p15916) | |
6856 | - fixed a boot crash on amd64 with KERNEXEC/OR and CONTEXT_TRACKING, reported by Klaus Kusche (https://bugs.gentoo.org/show_bug.cgi?id=570420) | |
6857 | ||
6858 | arch/x86/entry/entry_64.S | 60 +++++----- | |
6859 | arch/x86/kernel/alternative.c | 2 +- | |
6860 | arch/x86/kvm/emulate.c | 4 +- | |
6861 | tools/gcc/initify_plugin.c | 123 +++++++++---------- | |
6862 | .../disable_size_overflow_hash.data | 4 +- | |
6863 | .../size_overflow_plugin/size_overflow_hash.data | 2 - | |
6864 | 6 files changed, 93 insertions(+), 102 deletions(-) | |
6865 | ||
6866 | commit de243c26efd0e423ca92db825af2c3f8eb1ca043 | |
6867 | Author: Brad Spengler <spender@grsecurity.net> | |
6868 | Date: Tue Dec 29 18:01:24 2015 -0500 | |
6869 | ||
6870 | It was noticed during an internal audit that the code under GRKERNSEC_PROC_MEMMAP | |
6871 | which aimed to enforce a 16MB minimum on RLIMIT_DATA for suid/sgid binaries only | |
6872 | did so if RLIMIT_DATA was set lower than PAGE_SIZE. | |
6873 | ||
6874 | This addition was only supplemental as GRKERNSEC_BRUTE is the main defense | |
6875 | against suid/sgid attacks and the flaw above would only eliminate the extra | |
6876 | entropy provided for the brk-managed heap, still leaving it with the minimum | |
6877 | of 16-bit entropy for mmap on x86 and 28 on x64. | |
6878 | ||
6879 | mm/mmap.c | 2 +- | |
6880 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
6881 | ||
553f6f4b PK |
6882 | commit 8e264cfe47e5f08cdc9ed009a630277206cd2534 |
6883 | Merge: 436201b 2584340 | |
6884 | Author: Brad Spengler <spender@grsecurity.net> | |
6885 | Date: Mon Dec 28 20:30:01 2015 -0500 | |
6886 | ||
6887 | Merge branch 'pax-test' into grsec-test | |
6888 | ||
6889 | commit 2584340eab494e64ec1bf9eb5b0d1ae31f926306 | |
6890 | Author: Brad Spengler <spender@grsecurity.net> | |
6891 | Date: Mon Dec 28 20:29:28 2015 -0500 | |
6892 | ||
6893 | Update to pax-linux-4.3.3-test14.patch: | |
6894 | - fixed an integer sign conversion error in i2c_dw_pci_probe caught by the size overflow plugin, reported by Jean Lucas and ganymede (https://forums.grsecurity.net/viewtopic.php?f=3&t=4349) | |
6895 | - fixed shutdown crash with tboot and KERNEXEC, reported by perfinion | |
6896 | - fixed a few false positive and one real size overflow reports in hyperv, reported by hunger | |
6897 | - fixed compile regressions on armv5, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350) | |
6898 | - fixed an assert in the initify plugin that triggered in vic_register on arm | |
6899 | ||
6900 | arch/arm/include/asm/atomic.h | 7 +++++-- | |
6901 | arch/arm/include/asm/domain.h | 5 ++--- | |
6902 | arch/x86/kernel/tboot.c | 14 +++++++++----- | |
6903 | drivers/hv/channel.c | 4 +--- | |
6904 | drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +- | |
6905 | drivers/net/hyperv/rndis_filter.c | 3 +-- | |
6906 | fs/exec.c | 4 ++-- | |
6907 | include/linux/atomic.h | 15 --------------- | |
6908 | net/core/skbuff.c | 3 ++- | |
6909 | tools/gcc/initify_plugin.c | 4 +++- | |
6910 | 10 files changed, 26 insertions(+), 35 deletions(-) | |
6911 | ||
6912 | commit 436201b6626b488d173c8076447000077c27b84a | |
6913 | Author: David Howells <dhowells@redhat.com> | |
6914 | Date: Fri Dec 18 01:34:26 2015 +0000 | |
6915 | ||
6916 | KEYS: Fix race between read and revoke | |
6917 | ||
6918 | This fixes CVE-2015-7550. | |
6919 | ||
6920 | There's a race between keyctl_read() and keyctl_revoke(). If the revoke | |
6921 | happens between keyctl_read() checking the validity of a key and the key's | |
6922 | semaphore being taken, then the key type read method will see a revoked key. | |
6923 | ||
6924 | This causes a problem for the user-defined key type because it assumes in | |
6925 | its read method that there will always be a payload in a non-revoked key | |
6926 | and doesn't check for a NULL pointer. | |
6927 | ||
6928 | Fix this by making keyctl_read() check the validity of a key after taking | |
6929 | semaphore instead of before. | |
6930 | ||
6931 | I think the bug was introduced with the original keyrings code. | |
6932 | ||
6933 | This was discovered by a multithreaded test program generated by syzkaller | |
6934 | (http://github.com/google/syzkaller). Here's a cleaned up version: | |
6935 | ||
6936 | #include <sys/types.h> | |
6937 | #include <keyutils.h> | |
6938 | #include <pthread.h> | |
6939 | void *thr0(void *arg) | |
6940 | { | |
6941 | key_serial_t key = (unsigned long)arg; | |
6942 | keyctl_revoke(key); | |
6943 | return 0; | |
6944 | } | |
6945 | void *thr1(void *arg) | |
6946 | { | |
6947 | key_serial_t key = (unsigned long)arg; | |
6948 | char buffer[16]; | |
6949 | keyctl_read(key, buffer, 16); | |
6950 | return 0; | |
6951 | } | |
6952 | int main() | |
6953 | { | |
6954 | key_serial_t key = add_key("user", "%", "foo", 3, KEY_SPEC_USER_KEYRING); | |
6955 | pthread_t th[5]; | |
6956 | pthread_create(&th[0], 0, thr0, (void *)(unsigned long)key); | |
6957 | pthread_create(&th[1], 0, thr1, (void *)(unsigned long)key); | |
6958 | pthread_create(&th[2], 0, thr0, (void *)(unsigned long)key); | |
6959 | pthread_create(&th[3], 0, thr1, (void *)(unsigned long)key); | |
6960 | pthread_join(th[0], 0); | |
6961 | pthread_join(th[1], 0); | |
6962 | pthread_join(th[2], 0); | |
6963 | pthread_join(th[3], 0); | |
6964 | return 0; | |
6965 | } | |
6966 | ||
6967 | Build as: | |
6968 | ||
6969 | cc -o keyctl-race keyctl-race.c -lkeyutils -lpthread | |
6970 | ||
6971 | Run as: | |
6972 | ||
6973 | while keyctl-race; do :; done | |
6974 | ||
6975 | as it may need several iterations to crash the kernel. The crash can be | |
6976 | summarised as: | |
6977 | ||
6978 | BUG: unable to handle kernel NULL pointer dereference at 0000000000000010 | |
6979 | IP: [<ffffffff81279b08>] user_read+0x56/0xa3 | |
6980 | ... | |
6981 | Call Trace: | |
6982 | [<ffffffff81276aa9>] keyctl_read_key+0xb6/0xd7 | |
6983 | [<ffffffff81277815>] SyS_keyctl+0x83/0xe0 | |
6984 | [<ffffffff815dbb97>] entry_SYSCALL_64_fastpath+0x12/0x6f | |
6985 | ||
6986 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
6987 | Signed-off-by: David Howells <dhowells@redhat.com> | |
6988 | Tested-by: Dmitry Vyukov <dvyukov@google.com> | |
6989 | Cc: stable@vger.kernel.org | |
6990 | Signed-off-by: James Morris <james.l.morris@oracle.com> | |
6991 | ||
6992 | security/keys/keyctl.c | 18 +++++++++--------- | |
6993 | 1 files changed, 9 insertions(+), 9 deletions(-) | |
6994 | ||
4dac8ce1 PK |
6995 | commit 195cea04477025da4a2078bd3e1fb7c4e11206c2 |
6996 | Author: Brad Spengler <spender@grsecurity.net> | |
6997 | Date: Tue Dec 22 20:44:01 2015 -0500 | |
6998 | ||
6999 | Add new kernel command-line param: pax_size_overflow_report_only | |
7000 | If a user triggers a size_overflow violation that makes it difficult | |
7001 | to obtain the call trace without serial console/net console, they can | |
7002 | use this option to provide that information to us | |
7003 | ||
7004 | Documentation/kernel-parameters.txt | 5 +++++ | |
7005 | fs/exec.c | 12 +++++++++--- | |
7006 | init/main.c | 11 +++++++++++ | |
7007 | 3 files changed, 25 insertions(+), 3 deletions(-) | |
7008 | ||
7009 | commit 4254a8da5851df8c08cdca5c392916e8c105408d | |
7010 | Author: WANG Cong <xiyou.wangcong@gmail.com> | |
7011 | Date: Mon Dec 21 10:55:45 2015 -0800 | |
7012 | ||
7013 | addrconf: always initialize sysctl table data | |
7014 | ||
7015 | When sysctl performs restrict writes, it allows to write from | |
7016 | a middle position of a sysctl file, which requires us to initialize | |
7017 | the table data before calling proc_dostring() for the write case. | |
7018 | ||
7019 | Fixes: 3d1bec99320d ("ipv6: introduce secret_stable to ipv6_devconf") | |
7020 | Reported-by: Sasha Levin <sasha.levin@oracle.com> | |
7021 | Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
7022 | Tested-by: Sasha Levin <sasha.levin@oracle.com> | |
7023 | Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com> | |
7024 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
7025 | ||
7026 | net/ipv6/addrconf.c | 11 ++++------- | |
7027 | 1 files changed, 4 insertions(+), 7 deletions(-) | |
7028 | ||
7029 | commit f8002863fb06c363180637046947a78a6ccb3d33 | |
7030 | Author: WANG Cong <xiyou.wangcong@gmail.com> | |
7031 | Date: Wed Dec 16 23:39:04 2015 -0800 | |
7032 | ||
7033 | net: check both type and procotol for tcp sockets | |
7034 | ||
7035 | Dmitry reported the following out-of-bound access: | |
7036 | ||
7037 | Call Trace: | |
7038 | [<ffffffff816cec2e>] __asan_report_load4_noabort+0x3e/0x40 | |
7039 | mm/kasan/report.c:294 | |
7040 | [<ffffffff84affb14>] sock_setsockopt+0x1284/0x13d0 net/core/sock.c:880 | |
7041 | [< inline >] SYSC_setsockopt net/socket.c:1746 | |
7042 | [<ffffffff84aed7ee>] SyS_setsockopt+0x1fe/0x240 net/socket.c:1729 | |
7043 | [<ffffffff85c18c76>] entry_SYSCALL_64_fastpath+0x16/0x7a | |
7044 | arch/x86/entry/entry_64.S:185 | |
7045 | ||
7046 | This is because we mistake a raw socket as a tcp socket. | |
7047 | We should check both sk->sk_type and sk->sk_protocol to ensure | |
7048 | it is a tcp socket. | |
7049 | ||
7050 | Willem points out __skb_complete_tx_timestamp() needs to fix as well. | |
7051 | ||
7052 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
7053 | Cc: Willem de Bruijn <willemdebruijn.kernel@gmail.com> | |
7054 | Cc: Eric Dumazet <eric.dumazet@gmail.com> | |
7055 | Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com> | |
7056 | Acked-by: Willem de Bruijn <willemb@google.com> | |
7057 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
7058 | ||
7059 | net/core/skbuff.c | 3 ++- | |
7060 | net/core/sock.c | 3 ++- | |
7061 | 2 files changed, 4 insertions(+), 2 deletions(-) | |
7062 | ||
7063 | commit bd6b3399804470a4ad8f34229469ca149dceba3d | |
7064 | Author: Colin Ian King <colin.king@canonical.com> | |
7065 | Date: Fri Dec 18 14:22:01 2015 -0800 | |
7066 | ||
7067 | proc: fix -ESRCH error when writing to /proc/$pid/coredump_filter | |
7068 | ||
7069 | Writing to /proc/$pid/coredump_filter always returns -ESRCH because commit | |
7070 | 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") removed | |
7071 | the setting of ret after the get_proc_task call and incorrectly left it as | |
7072 | -ESRCH. Instead, return 0 when successful. | |
7073 | ||
7074 | Example breakage: | |
7075 | ||
7076 | echo 0 > /proc/self/coredump_filter | |
7077 | bash: echo: write error: No such process | |
7078 | ||
7079 | Fixes: 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") | |
7080 | Signed-off-by: Colin Ian King <colin.king@canonical.com> | |
7081 | Acked-by: Kees Cook <keescook@chromium.org> | |
7082 | Cc: <stable@vger.kernel.org> [4.3+] | |
7083 | Signed-off-by: Andrew Morton <akpm@linux-foundation.org> | |
7084 | Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> | |
7085 | ||
7086 | fs/proc/base.c | 1 + | |
7087 | 1 files changed, 1 insertions(+), 0 deletions(-) | |
7088 | ||
7089 | commit b28aca2b99ed08546778355fb9402c503ff9b29e | |
7090 | Author: Junichi Nomura <j-nomura@ce.jp.nec.com> | |
7091 | Date: Tue Dec 22 10:23:44 2015 -0700 | |
7092 | ||
7093 | block: ensure to split after potentially bouncing a bio | |
7094 | ||
7095 | blk_queue_bio() does split then bounce, which makes the segment | |
7096 | counting based on pages before bouncing and could go wrong. Move | |
7097 | the split to after bouncing, like we do for blk-mq, and the we | |
7098 | fix the issue of having the bio count for segments be wrong. | |
7099 | ||
7100 | Fixes: 54efd50bfd87 ("block: make generic_make_request handle arbitrarily sized bios") | |
7101 | Cc: stable@vger.kernel.org | |
7102 | Tested-by: Artem S. Tashkinov <t.artem@lycos.com> | |
7103 | Signed-off-by: Jens Axboe <axboe@fb.com> | |
7104 | ||
7105 | block/blk-core.c | 4 ++-- | |
7106 | 1 files changed, 2 insertions(+), 2 deletions(-) | |
7107 | ||
7108 | commit e62a25e917a9e5b35ddd5b4f1b5e5e30fbd2e84c | |
7109 | Merge: f6f63ae ec72fa5 | |
7110 | Author: Brad Spengler <spender@grsecurity.net> | |
7111 | Date: Tue Dec 22 19:46:26 2015 -0500 | |
7112 | ||
7113 | Merge branch 'pax-test' into grsec-test | |
7114 | ||
7115 | commit ec72fa5f8d9cb4e223bad1b8b5c2e1071c222f2a | |
7116 | Author: Brad Spengler <spender@grsecurity.net> | |
7117 | Date: Tue Dec 22 19:45:51 2015 -0500 | |
7118 | ||
7119 | Update to pax-linux-4.3.3-test13.patch: | |
7120 | - Emese fixed a (probably) false positive integer truncation in xfs_da_grow_inode_int, reported by jdkbx (http://forums.grsecurity.net/viewtopic.php?f=3&t=4346) | |
7121 | - fixed a size overflow in btrfs/try_merge_map, reported by Alex W (https://bugs.archlinux.org/task/47173) and mathias and dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4344) | |
7122 | ||
7123 | arch/arm/mm/fault.c | 2 +- | |
7124 | arch/x86/mm/fault.c | 2 +- | |
7125 | fs/btrfs/extent_map.c | 8 ++++++-- | |
7126 | fs/xfs/libxfs/xfs_da_btree.c | 4 +++- | |
7127 | 4 files changed, 11 insertions(+), 5 deletions(-) | |
7128 | ||
7129 | commit f6f63ae154cd45028add1dc41957878060d77fbf | |
7130 | Author: Brad Spengler <spender@grsecurity.net> | |
7131 | Date: Thu Dec 17 18:43:44 2015 -0500 | |
7132 | ||
7133 | ptrace_has_cap() checks whether the current process should be | |
7134 | treated as having a certain capability for ptrace checks | |
7135 | against another process. Until now, this was equivalent to | |
7136 | has_ns_capability(current, target_ns, CAP_SYS_PTRACE). | |
7137 | ||
7138 | However, if a root-owned process wants to enter a user | |
7139 | namespace for some reason without knowing who owns it and | |
7140 | therefore can't change to the namespace owner's uid and gid | |
7141 | before entering, as soon as it has entered the namespace, | |
7142 | the namespace owner can attach to it via ptrace and thereby | |
7143 | gain access to its uid and gid. | |
7144 | ||
7145 | While it is possible for the entering process to switch to | |
7146 | the uid of a claimed namespace owner before entering, | |
7147 | causing the attempt to enter to fail if the claimed uid is | |
7148 | wrong, this doesn't solve the problem of determining an | |
7149 | appropriate gid. | |
7150 | ||
7151 | With this change, the entering process can first enter the | |
7152 | namespace and then safely inspect the namespace's | |
7153 | properties, e.g. through /proc/self/{uid_map,gid_map}, | |
7154 | assuming that the namespace owner doesn't have access to | |
7155 | uid 0. | |
7156 | Signed-off-by: Jann Horn <jann@thejh.net> | |
7157 | ||
7158 | kernel/ptrace.c | 30 +++++++++++++++++++++++++----- | |
7159 | 1 files changed, 25 insertions(+), 5 deletions(-) | |
7160 | ||
18339baf PK |
7161 | commit e314f0fb63020f61543b401ff594e953c2c304e5 |
7162 | Author: tadeusz.struk@intel.com <tadeusz.struk@intel.com> | |
7163 | Date: Tue Dec 15 10:46:17 2015 -0800 | |
7164 | ||
7165 | net: fix uninitialized variable issue | |
7166 | ||
7167 | msg_iocb needs to be initialized on the recv/recvfrom path. | |
7168 | Otherwise afalg will wrongly interpret it as an async call. | |
7169 | ||
7170 | Cc: stable@vger.kernel.org | |
7171 | Reported-by: Harald Freudenberger <freude@linux.vnet.ibm.com> | |
7172 | Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com> | |
7173 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
7174 | ||
7175 | net/socket.c | 1 + | |
7176 | 1 files changed, 1 insertions(+), 0 deletions(-) | |
7177 | ||
7178 | commit a3f56a43ad56b8fcaf04f6327636ed2f5970de3b | |
7179 | Merge: dfa764c 142edcf | |
7180 | Author: Brad Spengler <spender@grsecurity.net> | |
7181 | Date: Wed Dec 16 21:01:17 2015 -0500 | |
7182 | ||
7183 | Merge branch 'pax-test' into grsec-test | |
7184 | ||
7185 | commit 142edcf1005a57fb8887823565cf0bafad2f313c | |
7186 | Author: Brad Spengler <spender@grsecurity.net> | |
7187 | Date: Wed Dec 16 21:00:57 2015 -0500 | |
7188 | ||
7189 | Update to pax-linux-4.3.3-test12.patch: | |
7190 | - Emese fixed a size overflow false positive in reiserfs/leaf_paste_entries, reported by Christian Apeltauer (https://bugs.gentoo.org/show_bug.cgi?id=568046) | |
7191 | - fixed a bunch of int/size_t mismatches in the drivers/tty/n_tty.c code causing size overflow false positives, reported by Toralf Förster, mathias (https://forums.grsecurity.net/viewtopic.php?f=3&t=4342), N8Fear (https://forums.grsecurity.net/viewtopic.php?f=3&t=4341) | |
7192 | ||
7193 | drivers/tty/n_tty.c | 16 ++++++++-------- | |
7194 | .../disable_size_overflow_hash.data | 2 ++ | |
7195 | .../size_overflow_plugin/size_overflow_hash.data | 6 ++---- | |
7196 | 3 files changed, 12 insertions(+), 12 deletions(-) | |
7197 | ||
7198 | commit dfa764cc549892a5bfc1083cac78b99032cae577 | |
7199 | Author: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
7200 | Date: Tue Dec 15 22:59:12 2015 +0100 | |
7201 | ||
7202 | ipv6: automatically enable stable privacy mode if stable_secret set | |
7203 | ||
7204 | Bjørn reported that while we switch all interfaces to privacy stable mode | |
7205 | when setting the secret, we don't set this mode for new interfaces. This | |
7206 | does not make sense, so change this behaviour. | |
7207 | ||
7208 | Fixes: 622c81d57b392cc ("ipv6: generation of stable privacy addresses for link-local and autoconf") | |
7209 | Reported-by: Bjørn Mork <bjorn@mork.no> | |
7210 | Cc: Bjørn Mork <bjorn@mork.no> | |
7211 | Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
7212 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
7213 | ||
7214 | net/ipv6/addrconf.c | 6 ++++++ | |
7215 | 1 files changed, 6 insertions(+), 0 deletions(-) | |
7216 | ||
7217 | commit c2815a1fee03f222273e77c14e43f960da06f35a | |
7218 | Author: Brad Spengler <spender@grsecurity.net> | |
7219 | Date: Wed Dec 16 13:03:38 2015 -0500 | |
7220 | ||
7221 | Work around upstream limitation on the number of thread info flags causing a compilation error | |
7222 | Reported by fabled at http://forums.grsecurity.net/viewtopic.php?f=3&t=4339 | |
7223 | ||
7224 | arch/arm/kernel/entry-common.S | 8 ++++++-- | |
7225 | 1 files changed, 6 insertions(+), 2 deletions(-) | |
7226 | ||
ab5bcff6 | 7227 | commit 8c9ae168e09ae49324d709d76d73d9fc4ca477e1 |
fee0510d | 7228 | Author: Brad Spengler <spender@grsecurity.net> |
ab5bcff6 | 7229 | Date: Tue Dec 15 19:03:41 2015 -0500 |
fee0510d | 7230 | |
ab5bcff6 | 7231 | Initial import of grsecurity 3.1 for Linux 4.3.3 |
76e7c0f9 | 7232 | |
6090327c | 7233 | Documentation/dontdiff | 2 + |
e8242a6d | 7234 | Documentation/kernel-parameters.txt | 7 + |
afe359a8 | 7235 | Documentation/sysctl/kernel.txt | 15 + |
a8b227b4 | 7236 | Makefile | 18 +- |
6090327c PK |
7237 | arch/alpha/include/asm/cache.h | 4 +- |
7238 | arch/alpha/kernel/osf_sys.c | 12 +- | |
ab5bcff6 | 7239 | arch/arc/Kconfig | 1 + |
6090327c | 7240 | arch/arm/Kconfig | 1 + |
ab5bcff6 PK |
7241 | arch/arm/Kconfig.debug | 1 + |
7242 | arch/arm/include/asm/thread_info.h | 7 +- | |
6090327c PK |
7243 | arch/arm/kernel/process.c | 4 +- |
7244 | arch/arm/kernel/ptrace.c | 9 + | |
7245 | arch/arm/kernel/traps.c | 7 +- | |
7246 | arch/arm/mm/Kconfig | 2 +- | |
7247 | arch/arm/mm/fault.c | 40 +- | |
7248 | arch/arm/mm/mmap.c | 8 +- | |
afe359a8 | 7249 | arch/arm/net/bpf_jit_32.c | 51 +- |
ab5bcff6 | 7250 | arch/arm64/Kconfig.debug | 1 + |
6090327c | 7251 | arch/avr32/include/asm/cache.h | 4 +- |
ab5bcff6 | 7252 | arch/blackfin/Kconfig.debug | 1 + |
6090327c PK |
7253 | arch/blackfin/include/asm/cache.h | 3 +- |
7254 | arch/cris/include/arch-v10/arch/cache.h | 3 +- | |
7255 | arch/cris/include/arch-v32/arch/cache.h | 3 +- | |
7256 | arch/frv/include/asm/cache.h | 3 +- | |
7257 | arch/frv/mm/elf-fdpic.c | 4 +- | |
7258 | arch/hexagon/include/asm/cache.h | 6 +- | |
7259 | arch/ia64/Kconfig | 1 + | |
7260 | arch/ia64/include/asm/cache.h | 3 +- | |
7261 | arch/ia64/kernel/sys_ia64.c | 2 + | |
7262 | arch/ia64/mm/hugetlbpage.c | 2 + | |
7263 | arch/m32r/include/asm/cache.h | 4 +- | |
7264 | arch/m68k/include/asm/cache.h | 4 +- | |
7265 | arch/metag/mm/hugetlbpage.c | 1 + | |
7266 | arch/microblaze/include/asm/cache.h | 3 +- | |
7267 | arch/mips/Kconfig | 1 + | |
7268 | arch/mips/include/asm/cache.h | 3 +- | |
7269 | arch/mips/include/asm/thread_info.h | 11 +- | |
da1216b9 | 7270 | arch/mips/kernel/irq.c | 3 + |
6090327c PK |
7271 | arch/mips/kernel/ptrace.c | 9 + |
7272 | arch/mips/mm/mmap.c | 4 +- | |
7273 | arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +- | |
7274 | arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +- | |
7275 | arch/openrisc/include/asm/cache.h | 4 +- | |
7276 | arch/parisc/include/asm/cache.h | 5 +- | |
7277 | arch/parisc/kernel/sys_parisc.c | 4 + | |
7278 | arch/powerpc/Kconfig | 1 + | |
ab5bcff6 | 7279 | arch/powerpc/include/asm/cache.h | 4 +- |
6090327c PK |
7280 | arch/powerpc/include/asm/thread_info.h | 5 +- |
7281 | arch/powerpc/kernel/Makefile | 2 + | |
7282 | arch/powerpc/kernel/irq.c | 3 + | |
7283 | arch/powerpc/kernel/process.c | 10 +- | |
7284 | arch/powerpc/kernel/ptrace.c | 14 + | |
7285 | arch/powerpc/kernel/traps.c | 5 + | |
6090327c | 7286 | arch/powerpc/mm/slice.c | 2 +- |
ab5bcff6 | 7287 | arch/s390/Kconfig.debug | 1 + |
6090327c PK |
7288 | arch/s390/include/asm/cache.h | 4 +- |
7289 | arch/score/include/asm/cache.h | 4 +- | |
7290 | arch/sh/include/asm/cache.h | 3 +- | |
7291 | arch/sh/mm/mmap.c | 6 +- | |
7292 | arch/sparc/include/asm/cache.h | 4 +- | |
0986ccbe PK |
7293 | arch/sparc/include/asm/pgalloc_64.h | 1 + |
7294 | arch/sparc/include/asm/thread_info_64.h | 8 +- | |
6090327c PK |
7295 | arch/sparc/kernel/process_32.c | 6 +- |
7296 | arch/sparc/kernel/process_64.c | 8 +- | |
7297 | arch/sparc/kernel/ptrace_64.c | 14 + | |
7298 | arch/sparc/kernel/sys_sparc_64.c | 8 +- | |
7299 | arch/sparc/kernel/syscalls.S | 8 +- | |
7300 | arch/sparc/kernel/traps_32.c | 8 +- | |
7301 | arch/sparc/kernel/traps_64.c | 28 +- | |
7302 | arch/sparc/kernel/unaligned_64.c | 2 +- | |
7303 | arch/sparc/mm/fault_64.c | 2 +- | |
7304 | arch/sparc/mm/hugetlbpage.c | 15 +- | |
7305 | arch/tile/Kconfig | 1 + | |
7306 | arch/tile/include/asm/cache.h | 3 +- | |
7307 | arch/tile/mm/hugetlbpage.c | 2 + | |
7308 | arch/um/include/asm/cache.h | 3 +- | |
7309 | arch/unicore32/include/asm/cache.h | 6 +- | |
afe359a8 | 7310 | arch/x86/Kconfig | 21 + |
ab5bcff6 PK |
7311 | arch/x86/Kconfig.debug | 2 + |
7312 | arch/x86/entry/common.c | 14 + | |
afe359a8 PK |
7313 | arch/x86/entry/entry_32.S | 2 +- |
7314 | arch/x86/entry/entry_64.S | 2 +- | |
6090327c PK |
7315 | arch/x86/ia32/ia32_aout.c | 2 + |
7316 | arch/x86/include/asm/floppy.h | 20 +- | |
ab5bcff6 | 7317 | arch/x86/include/asm/fpu/types.h | 69 +- |
6090327c PK |
7318 | arch/x86/include/asm/io.h | 2 +- |
7319 | arch/x86/include/asm/page.h | 12 +- | |
7320 | arch/x86/include/asm/paravirt_types.h | 23 +- | |
ab5bcff6 PK |
7321 | arch/x86/include/asm/processor.h | 12 +- |
7322 | arch/x86/include/asm/thread_info.h | 6 +- | |
7323 | arch/x86/include/asm/uaccess.h | 2 +- | |
a8b227b4 | 7324 | arch/x86/kernel/dumpstack.c | 10 +- |
6090327c PK |
7325 | arch/x86/kernel/dumpstack_32.c | 2 +- |
7326 | arch/x86/kernel/dumpstack_64.c | 2 +- | |
6090327c PK |
7327 | arch/x86/kernel/ioport.c | 13 + |
7328 | arch/x86/kernel/irq_32.c | 3 + | |
7329 | arch/x86/kernel/irq_64.c | 4 + | |
afe359a8 | 7330 | arch/x86/kernel/ldt.c | 18 + |
6090327c | 7331 | arch/x86/kernel/msr.c | 10 + |
ab5bcff6 | 7332 | arch/x86/kernel/ptrace.c | 14 + |
6090327c PK |
7333 | arch/x86/kernel/signal.c | 9 +- |
7334 | arch/x86/kernel/sys_i386_32.c | 9 +- | |
7335 | arch/x86/kernel/sys_x86_64.c | 8 +- | |
7336 | arch/x86/kernel/traps.c | 5 + | |
7337 | arch/x86/kernel/verify_cpu.S | 1 + | |
ab5bcff6 PK |
7338 | arch/x86/kernel/vm86_32.c | 15 + |
7339 | arch/x86/kvm/svm.c | 14 +- | |
6090327c PK |
7340 | arch/x86/mm/fault.c | 12 +- |
7341 | arch/x86/mm/hugetlbpage.c | 15 +- | |
7342 | arch/x86/mm/init.c | 66 +- | |
7343 | arch/x86/mm/init_32.c | 6 +- | |
0986ccbe | 7344 | arch/x86/net/bpf_jit_comp.c | 4 + |
a8b227b4 | 7345 | arch/x86/platform/efi/efi_64.c | 2 +- |
6090327c PK |
7346 | arch/x86/xen/Kconfig | 1 + |
7347 | arch/xtensa/variants/dc232b/include/variant/core.h | 2 +- | |
7348 | arch/xtensa/variants/fsf/include/variant/core.h | 3 +- | |
ab5bcff6 PK |
7349 | crypto/ablkcipher.c | 2 +- |
7350 | crypto/blkcipher.c | 2 +- | |
7351 | crypto/scatterwalk.c | 10 +- | |
6090327c PK |
7352 | drivers/acpi/acpica/hwxfsleep.c | 11 +- |
7353 | drivers/acpi/custom_method.c | 4 + | |
7354 | drivers/block/cciss.h | 30 +- | |
6090327c PK |
7355 | drivers/block/smart1,2.h | 40 +- |
7356 | drivers/cdrom/cdrom.c | 2 +- | |
7357 | drivers/char/Kconfig | 4 +- | |
7358 | drivers/char/genrtc.c | 1 + | |
ab5bcff6 | 7359 | drivers/char/ipmi/ipmi_si_intf.c | 8 +- |
6090327c PK |
7360 | drivers/char/mem.c | 17 + |
7361 | drivers/char/random.c | 5 +- | |
7362 | drivers/cpufreq/sparc-us3-cpufreq.c | 2 - | |
ab5bcff6 PK |
7363 | drivers/crypto/nx/nx-aes-ccm.c | 2 +- |
7364 | drivers/crypto/nx/nx-aes-gcm.c | 2 +- | |
7365 | drivers/crypto/talitos.c | 2 +- | |
6090327c | 7366 | drivers/firewire/ohci.c | 4 + |
ab5bcff6 PK |
7367 | drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +- |
7368 | drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +- | |
6090327c | 7369 | drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +- |
afe359a8 | 7370 | drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +- |
6090327c | 7371 | drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +- |
6090327c PK |
7372 | drivers/hid/hid-wiimote-debug.c | 2 +- |
7373 | drivers/infiniband/hw/nes/nes_cm.c | 22 +- | |
ab5bcff6 | 7374 | drivers/iommu/Kconfig | 1 + |
0986ccbe | 7375 | drivers/iommu/amd_iommu.c | 14 +- |
6090327c PK |
7376 | drivers/isdn/gigaset/bas-gigaset.c | 32 +- |
7377 | drivers/isdn/gigaset/ser-gigaset.c | 32 +- | |
7378 | drivers/isdn/gigaset/usb-gigaset.c | 32 +- | |
ab5bcff6 PK |
7379 | drivers/isdn/hisax/config.c | 2 +- |
7380 | drivers/isdn/hisax/hfc_pci.c | 2 +- | |
7381 | drivers/isdn/hisax/hfc_sx.c | 2 +- | |
7382 | drivers/isdn/hisax/q931.c | 6 +- | |
6090327c PK |
7383 | drivers/isdn/i4l/isdn_concap.c | 6 +- |
7384 | drivers/isdn/i4l/isdn_x25iface.c | 16 +- | |
ab5bcff6 | 7385 | drivers/md/bcache/Kconfig | 1 + |
a8b227b4 PK |
7386 | drivers/md/raid5.c | 8 + |
7387 | drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +- | |
ab5bcff6 PK |
7388 | drivers/media/platform/sti/c8sectpfe/Kconfig | 1 + |
7389 | drivers/media/platform/vivid/vivid-osd.c | 1 + | |
6090327c | 7390 | drivers/media/radio/radio-cadet.c | 5 +- |
a8b227b4 PK |
7391 | drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +- |
7392 | drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +- | |
6090327c PK |
7393 | drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +- |
7394 | drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +- | |
7395 | drivers/message/fusion/mptbase.c | 9 + | |
7396 | drivers/misc/sgi-xp/xp_main.c | 12 +- | |
6090327c | 7397 | drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +- |
ab5bcff6 PK |
7398 | drivers/net/ppp/pppoe.c | 14 +- |
7399 | drivers/net/ppp/pptp.c | 6 + | |
7400 | drivers/net/slip/slhc.c | 3 + | |
6090327c | 7401 | drivers/net/wan/lmc/lmc_media.c | 97 +- |
ab5bcff6 | 7402 | drivers/net/wan/x25_asy.c | 6 +- |
6090327c | 7403 | drivers/net/wan/z85230.c | 24 +- |
ab5bcff6 | 7404 | drivers/net/wireless/ath/ath9k/Kconfig | 1 - |
6090327c | 7405 | drivers/net/wireless/zd1211rw/zd_usb.c | 2 +- |
ab5bcff6 | 7406 | drivers/pci/pci-sysfs.c | 2 +- |
6090327c PK |
7407 | drivers/pci/proc.c | 9 + |
7408 | drivers/platform/x86/asus-wmi.c | 12 + | |
7409 | drivers/rtc/rtc-dev.c | 3 + | |
7410 | drivers/scsi/bfa/bfa_fcs.c | 19 +- | |
7411 | drivers/scsi/bfa/bfa_fcs_lport.c | 29 +- | |
7412 | drivers/scsi/bfa/bfa_modules.h | 12 +- | |
e8242a6d | 7413 | drivers/scsi/hpsa.h | 40 +- |
ab5bcff6 | 7414 | drivers/staging/dgnc/dgnc_mgmt.c | 1 + |
6090327c PK |
7415 | drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +- |
7416 | drivers/staging/lustre/lustre/libcfs/module.c | 10 +- | |
ab5bcff6 PK |
7417 | drivers/target/target_core_sbc.c | 17 +- |
7418 | drivers/target/target_core_transport.c | 14 +- | |
afe359a8 | 7419 | drivers/tty/serial/uartlite.c | 4 +- |
6090327c PK |
7420 | drivers/tty/sysrq.c | 2 +- |
7421 | drivers/tty/vt/keyboard.c | 22 +- | |
7422 | drivers/uio/uio.c | 6 +- | |
7423 | drivers/usb/core/hub.c | 5 + | |
a8b227b4 PK |
7424 | drivers/usb/gadget/function/f_uac1.c | 1 + |
7425 | drivers/usb/gadget/function/u_uac1.c | 1 + | |
6090327c | 7426 | drivers/usb/host/hwa-hc.c | 9 +- |
afe359a8 | 7427 | drivers/usb/usbip/vhci_sysfs.c | 2 +- |
6090327c PK |
7428 | drivers/video/fbdev/arcfb.c | 2 +- |
7429 | drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +- | |
7430 | drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +- | |
7431 | drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +- | |
da1216b9 | 7432 | drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++----- |
6090327c | 7433 | drivers/xen/xenfs/xenstored.c | 5 + |
afe359a8 PK |
7434 | firmware/Makefile | 2 + |
7435 | firmware/WHENCE | 20 +- | |
7436 | firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++ | |
da1216b9 | 7437 | firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++ |
ab5bcff6 | 7438 | fs/9p/vfs_inode.c | 4 +- |
6090327c PK |
7439 | fs/attr.c | 1 + |
7440 | fs/autofs4/waitq.c | 9 + | |
7441 | fs/binfmt_aout.c | 7 + | |
ab5bcff6 | 7442 | fs/binfmt_elf.c | 50 +- |
6090327c PK |
7443 | fs/compat.c | 20 +- |
7444 | fs/coredump.c | 17 +- | |
8cf17962 | 7445 | fs/dcache.c | 3 + |
da1216b9 | 7446 | fs/debugfs/inode.c | 11 +- |
ab5bcff6 | 7447 | fs/exec.c | 219 +- |
6090327c | 7448 | fs/ext2/balloc.c | 4 +- |
0986ccbe | 7449 | fs/ext2/super.c | 8 +- |
6090327c | 7450 | fs/ext4/balloc.c | 4 +- |
0986ccbe | 7451 | fs/fcntl.c | 4 + |
da1216b9 | 7452 | fs/fhandle.c | 3 +- |
6090327c PK |
7453 | fs/file.c | 4 + |
7454 | fs/filesystems.c | 4 + | |
e8242a6d | 7455 | fs/fs_struct.c | 20 +- |
6090327c | 7456 | fs/hugetlbfs/inode.c | 5 +- |
afe359a8 | 7457 | fs/inode.c | 8 +- |
8cf17962 | 7458 | fs/kernfs/dir.c | 6 + |
6090327c | 7459 | fs/mount.h | 4 +- |
ab5bcff6 | 7460 | fs/namei.c | 286 +- |
8cf17962 | 7461 | fs/namespace.c | 24 + |
a8b227b4 | 7462 | fs/nfsd/nfscache.c | 2 +- |
6090327c | 7463 | fs/open.c | 38 + |
ab5bcff6 | 7464 | fs/overlayfs/inode.c | 11 +- |
da1216b9 | 7465 | fs/overlayfs/super.c | 6 +- |
6090327c PK |
7466 | fs/pipe.c | 2 +- |
7467 | fs/posix_acl.c | 15 +- | |
7468 | fs/proc/Kconfig | 10 +- | |
ab5bcff6 PK |
7469 | fs/proc/array.c | 69 +- |
7470 | fs/proc/base.c | 186 +- | |
6090327c PK |
7471 | fs/proc/cmdline.c | 4 + |
7472 | fs/proc/devices.c | 4 + | |
7473 | fs/proc/fd.c | 17 +- | |
e8242a6d | 7474 | fs/proc/generic.c | 64 + |
6090327c | 7475 | fs/proc/inode.c | 17 + |
0986ccbe | 7476 | fs/proc/internal.h | 11 +- |
6090327c PK |
7477 | fs/proc/interrupts.c | 4 + |
7478 | fs/proc/kcore.c | 3 + | |
ab5bcff6 PK |
7479 | fs/proc/meminfo.c | 7 +- |
7480 | fs/proc/namespaces.c | 4 +- | |
6090327c PK |
7481 | fs/proc/proc_net.c | 31 + |
7482 | fs/proc/proc_sysctl.c | 52 +- | |
7483 | fs/proc/root.c | 8 + | |
7484 | fs/proc/stat.c | 69 +- | |
e8242a6d | 7485 | fs/proc/task_mmu.c | 66 +- |
6090327c PK |
7486 | fs/readdir.c | 19 + |
7487 | fs/reiserfs/item_ops.c | 24 +- | |
0986ccbe | 7488 | fs/reiserfs/super.c | 4 + |
6090327c | 7489 | fs/select.c | 2 + |
afe359a8 | 7490 | fs/seq_file.c | 30 +- |
ab5bcff6 | 7491 | fs/splice.c | 8 + |
6090327c | 7492 | fs/stat.c | 20 +- |
e8242a6d | 7493 | fs/sysfs/dir.c | 30 +- |
ab5bcff6 | 7494 | fs/sysv/inode.c | 11 +- |
6090327c | 7495 | fs/utimes.c | 7 + |
8cf17962 | 7496 | fs/xattr.c | 26 +- |
da1216b9 | 7497 | grsecurity/Kconfig | 1182 ++++ |
6090327c | 7498 | grsecurity/Makefile | 54 + |
da1216b9 | 7499 | grsecurity/gracl.c | 2757 +++++++++ |
6090327c | 7500 | grsecurity/gracl_alloc.c | 105 + |
a8b227b4 | 7501 | grsecurity/gracl_cap.c | 127 + |
da1216b9 | 7502 | grsecurity/gracl_compat.c | 269 + |
afe359a8 | 7503 | grsecurity/gracl_fs.c | 448 ++ |
da1216b9 PK |
7504 | grsecurity/gracl_ip.c | 386 ++ |
7505 | grsecurity/gracl_learn.c | 207 + | |
7506 | grsecurity/gracl_policy.c | 1786 ++++++ | |
6090327c | 7507 | grsecurity/gracl_res.c | 68 + |
da1216b9 | 7508 | grsecurity/gracl_segv.c | 304 + |
6090327c PK |
7509 | grsecurity/gracl_shm.c | 40 + |
7510 | grsecurity/grsec_chdir.c | 19 + | |
da1216b9 PK |
7511 | grsecurity/grsec_chroot.c | 467 ++ |
7512 | grsecurity/grsec_disabled.c | 445 ++ | |
7513 | grsecurity/grsec_exec.c | 189 + | |
7514 | grsecurity/grsec_fifo.c | 26 + | |
6090327c | 7515 | grsecurity/grsec_fork.c | 23 + |
da1216b9 | 7516 | grsecurity/grsec_init.c | 290 + |
6090327c | 7517 | grsecurity/grsec_ipc.c | 48 + |
afe359a8 PK |
7518 | grsecurity/grsec_link.c | 65 + |
7519 | grsecurity/grsec_log.c | 340 + | |
6090327c PK |
7520 | grsecurity/grsec_mem.c | 48 + |
7521 | grsecurity/grsec_mount.c | 65 + | |
afe359a8 | 7522 | grsecurity/grsec_pax.c | 47 + |
6090327c PK |
7523 | grsecurity/grsec_proc.c | 20 + |
7524 | grsecurity/grsec_ptrace.c | 30 + | |
da1216b9 PK |
7525 | grsecurity/grsec_sig.c | 236 + |
7526 | grsecurity/grsec_sock.c | 244 + | |
7527 | grsecurity/grsec_sysctl.c | 488 ++ | |
6090327c PK |
7528 | grsecurity/grsec_time.c | 16 + |
7529 | grsecurity/grsec_tpe.c | 78 + | |
7530 | grsecurity/grsec_usb.c | 15 + | |
7531 | grsecurity/grsum.c | 64 + | |
6090327c | 7532 | include/linux/binfmts.h | 5 +- |
ab5bcff6 | 7533 | include/linux/bitops.h | 2 +- |
afe359a8 PK |
7534 | include/linux/capability.h | 13 + |
7535 | include/linux/compiler-gcc.h | 5 + | |
6090327c PK |
7536 | include/linux/compiler.h | 8 + |
7537 | include/linux/cred.h | 8 +- | |
8cf17962 | 7538 | include/linux/dcache.h | 5 +- |
6090327c PK |
7539 | include/linux/fs.h | 24 +- |
7540 | include/linux/fs_struct.h | 2 +- | |
7541 | include/linux/fsnotify.h | 6 + | |
da1216b9 PK |
7542 | include/linux/gracl.h | 342 + |
7543 | include/linux/gracl_compat.h | 156 + | |
6090327c PK |
7544 | include/linux/gralloc.h | 9 + |
7545 | include/linux/grdefs.h | 140 + | |
da1216b9 | 7546 | include/linux/grinternal.h | 230 + |
8cf17962 | 7547 | include/linux/grmsg.h | 118 + |
ab5bcff6 | 7548 | include/linux/grsecurity.h | 255 + |
6090327c | 7549 | include/linux/grsock.h | 19 + |
afe359a8 | 7550 | include/linux/ipc.h | 2 +- |
6090327c PK |
7551 | include/linux/ipc_namespace.h | 2 +- |
7552 | include/linux/kallsyms.h | 18 +- | |
7553 | include/linux/kmod.h | 5 + | |
7554 | include/linux/kobject.h | 2 +- | |
afe359a8 | 7555 | include/linux/lsm_hooks.h | 4 +- |
8cf17962 | 7556 | include/linux/mm.h | 12 + |
6090327c | 7557 | include/linux/mm_types.h | 4 +- |
afe359a8 | 7558 | include/linux/module.h | 5 +- |
6090327c | 7559 | include/linux/mount.h | 2 +- |
ab5bcff6 | 7560 | include/linux/msg.h | 2 +- |
6090327c PK |
7561 | include/linux/netfilter/xt_gradm.h | 9 + |
7562 | include/linux/path.h | 4 +- | |
7563 | include/linux/perf_event.h | 13 +- | |
7564 | include/linux/pid_namespace.h | 2 +- | |
8cf17962 | 7565 | include/linux/printk.h | 2 +- |
6090327c PK |
7566 | include/linux/proc_fs.h | 22 +- |
7567 | include/linux/proc_ns.h | 2 +- | |
ab5bcff6 | 7568 | include/linux/ptrace.h | 24 +- |
6090327c PK |
7569 | include/linux/random.h | 2 +- |
7570 | include/linux/rbtree_augmented.h | 4 +- | |
da1216b9 | 7571 | include/linux/scatterlist.h | 12 +- |
ab5bcff6 PK |
7572 | include/linux/sched.h | 114 +- |
7573 | include/linux/security.h | 1 + | |
7574 | include/linux/sem.h | 2 +- | |
6090327c | 7575 | include/linux/seq_file.h | 5 + |
afe359a8 | 7576 | include/linux/shm.h | 6 +- |
6090327c PK |
7577 | include/linux/skbuff.h | 3 + |
7578 | include/linux/slab.h | 9 - | |
afe359a8 | 7579 | include/linux/sysctl.h | 8 +- |
6090327c PK |
7580 | include/linux/thread_info.h | 6 +- |
7581 | include/linux/tty.h | 2 +- | |
7582 | include/linux/tty_driver.h | 4 +- | |
7583 | include/linux/uidgid.h | 5 + | |
7584 | include/linux/user_namespace.h | 2 +- | |
7585 | include/linux/utsname.h | 2 +- | |
7586 | include/linux/vermagic.h | 16 +- | |
ab5bcff6 | 7587 | include/linux/vmalloc.h | 20 +- |
6090327c | 7588 | include/net/af_unix.h | 2 +- |
ab5bcff6 | 7589 | include/net/dst.h | 33 + |
6090327c PK |
7590 | include/net/ip.h | 2 +- |
7591 | include/net/neighbour.h | 2 +- | |
7592 | include/net/net_namespace.h | 2 +- | |
ab5bcff6 PK |
7593 | include/net/sock.h | 4 +- |
7594 | include/target/target_core_base.h | 2 +- | |
6090327c PK |
7595 | include/trace/events/fs.h | 53 + |
7596 | include/uapi/linux/personality.h | 1 + | |
ab5bcff6 | 7597 | init/Kconfig | 4 +- |
e8242a6d | 7598 | init/main.c | 35 +- |
6090327c | 7599 | ipc/mqueue.c | 1 + |
ab5bcff6 PK |
7600 | ipc/msg.c | 3 +- |
7601 | ipc/sem.c | 3 +- | |
7602 | ipc/shm.c | 26 +- | |
7603 | ipc/util.c | 6 + | |
da1216b9 | 7604 | kernel/auditsc.c | 2 +- |
0986ccbe | 7605 | kernel/bpf/syscall.c | 8 +- |
6090327c | 7606 | kernel/capability.c | 41 +- |
0986ccbe | 7607 | kernel/cgroup.c | 5 +- |
6090327c PK |
7608 | kernel/compat.c | 1 + |
7609 | kernel/configs.c | 11 + | |
afe359a8 | 7610 | kernel/cred.c | 112 +- |
ab5bcff6 | 7611 | kernel/events/core.c | 16 +- |
6090327c PK |
7612 | kernel/exit.c | 10 +- |
7613 | kernel/fork.c | 86 +- | |
ab5bcff6 PK |
7614 | kernel/futex.c | 6 +- |
7615 | kernel/futex_compat.c | 2 +- | |
6090327c | 7616 | kernel/kallsyms.c | 9 + |
ab5bcff6 PK |
7617 | kernel/kcmp.c | 8 +- |
7618 | kernel/kexec_core.c | 2 +- | |
e8242a6d | 7619 | kernel/kmod.c | 95 +- |
6090327c PK |
7620 | kernel/kprobes.c | 7 +- |
7621 | kernel/ksysfs.c | 2 + | |
7622 | kernel/locking/lockdep_proc.c | 10 +- | |
afe359a8 | 7623 | kernel/module.c | 108 +- |
6090327c | 7624 | kernel/panic.c | 4 +- |
ab5bcff6 | 7625 | kernel/pid.c | 23 +- |
6090327c | 7626 | kernel/power/Kconfig | 2 + |
ab5bcff6 PK |
7627 | kernel/printk/printk.c | 20 +- |
7628 | kernel/ptrace.c | 56 +- | |
6090327c PK |
7629 | kernel/resource.c | 10 + |
7630 | kernel/sched/core.c | 11 +- | |
7631 | kernel/signal.c | 37 +- | |
a8b227b4 | 7632 | kernel/sys.c | 64 +- |
ab5bcff6 | 7633 | kernel/sysctl.c | 172 +- |
6090327c | 7634 | kernel/taskstats.c | 6 + |
a8b227b4 PK |
7635 | kernel/time/posix-timers.c | 8 + |
7636 | kernel/time/time.c | 5 + | |
6090327c | 7637 | kernel/time/timekeeping.c | 3 + |
afe359a8 | 7638 | kernel/time/timer_list.c | 13 +- |
6090327c | 7639 | kernel/time/timer_stats.c | 10 +- |
ab5bcff6 | 7640 | kernel/trace/Kconfig | 2 + |
0986ccbe | 7641 | kernel/trace/trace_syscalls.c | 8 + |
6090327c | 7642 | kernel/user_namespace.c | 15 + |
ab5bcff6 PK |
7643 | lib/Kconfig.debug | 13 +- |
7644 | lib/Kconfig.kasan | 2 +- | |
6090327c PK |
7645 | lib/is_single_threaded.c | 3 + |
7646 | lib/list_debug.c | 65 +- | |
e8242a6d | 7647 | lib/nlattr.c | 2 + |
6090327c | 7648 | lib/rbtree.c | 4 +- |
afe359a8 | 7649 | lib/vsprintf.c | 39 +- |
6090327c | 7650 | localversion-grsec | 1 + |
ab5bcff6 | 7651 | mm/Kconfig | 8 +- |
e8242a6d | 7652 | mm/Kconfig.debug | 1 + |
6090327c PK |
7653 | mm/filemap.c | 1 + |
7654 | mm/kmemleak.c | 4 +- | |
da1216b9 | 7655 | mm/memory.c | 2 +- |
6090327c PK |
7656 | mm/mempolicy.c | 12 +- |
7657 | mm/migrate.c | 3 +- | |
7658 | mm/mlock.c | 6 +- | |
e8242a6d | 7659 | mm/mmap.c | 93 +- |
6090327c | 7660 | mm/mprotect.c | 8 + |
ab5bcff6 | 7661 | mm/oom_kill.c | 28 +- |
e8242a6d | 7662 | mm/page_alloc.c | 2 +- |
ab5bcff6 PK |
7663 | mm/process_vm_access.c | 8 +- |
7664 | mm/shmem.c | 36 +- | |
7665 | mm/slab.c | 14 +- | |
6090327c | 7666 | mm/slab_common.c | 2 +- |
afe359a8 PK |
7667 | mm/slob.c | 12 + |
7668 | mm/slub.c | 33 +- | |
6090327c | 7669 | mm/util.c | 3 + |
ab5bcff6 | 7670 | mm/vmalloc.c | 129 +- |
6090327c PK |
7671 | mm/vmstat.c | 29 +- |
7672 | net/appletalk/atalk_proc.c | 2 +- | |
7673 | net/atm/lec.c | 6 +- | |
7674 | net/atm/mpoa_caches.c | 42 +- | |
ab5bcff6 | 7675 | net/bluetooth/sco.c | 3 + |
6090327c PK |
7676 | net/can/bcm.c | 2 +- |
7677 | net/can/proc.c | 2 +- | |
0986ccbe | 7678 | net/core/dev_ioctl.c | 7 +- |
6090327c PK |
7679 | net/core/filter.c | 8 +- |
7680 | net/core/net-procfs.c | 17 +- | |
7681 | net/core/pktgen.c | 2 +- | |
e8242a6d | 7682 | net/core/sock.c | 3 +- |
0986ccbe | 7683 | net/core/sysctl_net_core.c | 2 +- |
6090327c | 7684 | net/decnet/dn_dev.c | 2 +- |
0986ccbe | 7685 | net/ipv4/devinet.c | 6 +- |
ab5bcff6 | 7686 | net/ipv4/inet_hashtables.c | 4 + |
a8b227b4 | 7687 | net/ipv4/ip_input.c | 7 + |
6090327c PK |
7688 | net/ipv4/ip_sockglue.c | 3 +- |
7689 | net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +- | |
ab5bcff6 | 7690 | net/ipv4/netfilter/nf_nat_pptp.c | 2 +- |
6090327c | 7691 | net/ipv4/route.c | 6 +- |
da1216b9 | 7692 | net/ipv4/tcp_input.c | 4 +- |
ab5bcff6 | 7693 | net/ipv4/tcp_ipv4.c | 29 +- |
6090327c PK |
7694 | net/ipv4/tcp_minisocks.c | 9 +- |
7695 | net/ipv4/tcp_timer.c | 11 + | |
7696 | net/ipv4/udp.c | 24 + | |
e8242a6d | 7697 | net/ipv6/addrconf.c | 13 +- |
6090327c | 7698 | net/ipv6/proc.c | 2 +- |
ab5bcff6 | 7699 | net/ipv6/tcp_ipv6.c | 26 +- |
6090327c PK |
7700 | net/ipv6/udp.c | 7 + |
7701 | net/ipx/ipx_proc.c | 2 +- | |
7702 | net/irda/irproc.c | 2 +- | |
7703 | net/llc/llc_proc.c | 2 +- | |
7704 | net/netfilter/Kconfig | 10 + | |
7705 | net/netfilter/Makefile | 1 + | |
7706 | net/netfilter/nf_conntrack_core.c | 8 + | |
7707 | net/netfilter/xt_gradm.c | 51 + | |
7708 | net/netfilter/xt_hashlimit.c | 4 +- | |
7709 | net/netfilter/xt_recent.c | 2 +- | |
ab5bcff6 PK |
7710 | net/sched/sch_api.c | 2 +- |
7711 | net/sctp/socket.c | 4 +- | |
7712 | net/socket.c | 75 +- | |
7713 | net/sunrpc/Kconfig | 1 + | |
6090327c PK |
7714 | net/sunrpc/cache.c | 2 +- |
7715 | net/sunrpc/stats.c | 2 +- | |
7716 | net/sysctl_net.c | 2 +- | |
e8242a6d | 7717 | net/unix/af_unix.c | 52 +- |
6090327c PK |
7718 | net/vmw_vsock/vmci_transport_notify.c | 30 +- |
7719 | net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +- | |
7720 | net/x25/sysctl_net_x25.c | 2 +- | |
7721 | net/x25/x25_proc.c | 2 +- | |
0986ccbe | 7722 | scripts/package/Makefile | 2 +- |
ab5bcff6 PK |
7723 | scripts/package/mkspec | 41 +- |
7724 | security/Kconfig | 369 +- | |
6090327c PK |
7725 | security/apparmor/file.c | 4 +- |
7726 | security/apparmor/lsm.c | 8 +- | |
ab5bcff6 | 7727 | security/commoncap.c | 36 +- |
6090327c | 7728 | security/min_addr.c | 2 + |
ab5bcff6 | 7729 | security/smack/smack_lsm.c | 8 +- |
6090327c PK |
7730 | security/tomoyo/file.c | 12 +- |
7731 | security/tomoyo/mount.c | 4 + | |
da1216b9 | 7732 | security/tomoyo/tomoyo.c | 20 +- |
6090327c | 7733 | security/yama/Kconfig | 2 +- |
ab5bcff6 | 7734 | security/yama/yama_lsm.c | 4 +- |
6090327c | 7735 | sound/synth/emux/emux_seq.c | 14 +- |
e8242a6d PK |
7736 | sound/usb/line6/driver.c | 40 +- |
7737 | sound/usb/line6/toneport.c | 12 +- | |
6090327c PK |
7738 | tools/gcc/.gitignore | 1 + |
7739 | tools/gcc/Makefile | 12 + | |
7740 | tools/gcc/gen-random-seed.sh | 8 + | |
afe359a8 PK |
7741 | tools/gcc/randomize_layout_plugin.c | 930 +++ |
7742 | tools/gcc/size_overflow_plugin/.gitignore | 1 + | |
ab5bcff6 PK |
7743 | .../size_overflow_plugin/size_overflow_hash.data | 459 ++- |
7744 | 511 files changed, 32631 insertions(+), 3196 deletions(-) | |
afe359a8 | 7745 | |
ab5bcff6 | 7746 | commit a76adb92ce39aee8eec5a025c828030ad6135c6d |
afe359a8 | 7747 | Author: Brad Spengler <spender@grsecurity.net> |
ab5bcff6 | 7748 | Date: Tue Dec 15 14:31:49 2015 -0500 |
afe359a8 | 7749 | |
ab5bcff6 PK |
7750 | Update to pax-linux-4.3.3-test11.patch: |
7751 | - fixed a few compile regressions with the recent plugin changes, reported by spender | |
7752 | - updated the size overflow hash table | |
76e7c0f9 | 7753 | |
ab5bcff6 PK |
7754 | tools/gcc/latent_entropy_plugin.c | 2 +- |
7755 | .../size_overflow_plugin/size_overflow_hash.data | 66 +++++++++++++++++--- | |
7756 | tools/gcc/stackleak_plugin.c | 2 +- | |
7757 | tools/gcc/structleak_plugin.c | 6 +-- | |
7758 | 4 files changed, 60 insertions(+), 16 deletions(-) | |
afe359a8 | 7759 | |
ab5bcff6 | 7760 | commit f7284b1fc06628fcb2d35d2beecdea5454d46af9 |
afe359a8 | 7761 | Author: Brad Spengler <spender@grsecurity.net> |
ab5bcff6 | 7762 | Date: Tue Dec 15 11:50:24 2015 -0500 |
afe359a8 | 7763 | |
ab5bcff6 | 7764 | Apply structleak ICE fix for gcc < 4.9 |
afe359a8 | 7765 | |
ab5bcff6 PK |
7766 | tools/gcc/structleak_plugin.c | 4 ++++ |
7767 | 1 files changed, 4 insertions(+), 0 deletions(-) | |
afe359a8 | 7768 | |
ab5bcff6 | 7769 | commit 92fe3eb9fd10ec7f7334decab1526989669b0287 |
afe359a8 | 7770 | Author: Brad Spengler <spender@grsecurity.net> |
ab5bcff6 | 7771 | Date: Tue Dec 15 07:57:06 2015 -0500 |
afe359a8 | 7772 | |
ab5bcff6 PK |
7773 | Update to pax-linux-4.3.1-test10.patch: |
7774 | - Emese fixed INDIRECT_REF and TARGET_MEM_REF handling in the initify plugin | |
7775 | - Emese regenerated the size overflow hash tables for 4.3 | |
7776 | - fixed some compat syscall exit paths to restore r12 under KERNEXEC/or | |
7777 | - the latent entropy, stackleak and structleak plugins no longer split the entry block unnecessarily | |
afe359a8 | 7778 | |
ab5bcff6 PK |
7779 | arch/x86/entry/entry_64.S | 2 +- |
7780 | arch/x86/entry/entry_64_compat.S | 15 +- | |
7781 | scripts/package/builddeb | 2 +- | |
7782 | tools/gcc/initify_plugin.c | 11 +- | |
7783 | tools/gcc/latent_entropy_plugin.c | 20 +- | |
7784 | .../disable_size_overflow_hash.data | 4 + | |
7785 | .../size_overflow_plugin/size_overflow_hash.data | 5345 +++++++++++--------- | |
7786 | tools/gcc/stackleak_plugin.c | 26 +- | |
7787 | tools/gcc/structleak_plugin.c | 21 +- | |
7788 | 9 files changed, 3079 insertions(+), 2367 deletions(-) | |
afe359a8 | 7789 | |
ab5bcff6 PK |
7790 | commit 5bd245cb687319079c2f1c0d6a1170791ed1ed2c |
7791 | Merge: b5847e6 3548341 | |
afe359a8 | 7792 | Author: Brad Spengler <spender@grsecurity.net> |
ab5bcff6 | 7793 | Date: Tue Dec 15 07:47:56 2015 -0500 |
afe359a8 | 7794 | |
ab5bcff6 PK |
7795 | Merge branch 'linux-4.3.y' into pax-4_3 |
7796 | ||
7797 | Conflicts: | |
7798 | net/unix/af_unix.c | |
afe359a8 | 7799 | |
ab5bcff6 | 7800 | commit b5847e6a896c5d99191135ca4d7c3b6be8f116ff |
afe359a8 | 7801 | Author: Brad Spengler <spender@grsecurity.net> |
ab5bcff6 | 7802 | Date: Wed Dec 9 23:11:36 2015 -0500 |
afe359a8 | 7803 | |
ab5bcff6 PK |
7804 | Update to pax-linux-4.3.1-test9.patch: |
7805 | - fixed __get_user on x86 to lie less about the size of the load, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4332) | |
7806 | - Emese fixed an intentional overflow caused by gcc, reported by saironiq (https://forums.grsecurity.net/viewtopic.php?f=3&t=4333) | |
7807 | - Emese fixed a false positive overflow report in the forcedeth driver, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?t=4334) | |
7808 | - Emese fixed a false positive overflow report in KVM's emulator, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4336) | |
7809 | - Emese fixed the initify plugin to detect some captured use of __func__, reported by Rasmus Villemoes <linux@rasmusvillemoes.dk> | |
7810 | - constrained shmmax and shmall to avoid triggering size overflow checks, reported by Mathias Krause <minipli@ld-linux.so> | |
7811 | - the checker plugin can partially handle sparse's locking context annotations, it's context insensitive and thus not exactly useful for now, also see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59856 | |
afe359a8 | 7812 | |
ab5bcff6 PK |
7813 | Makefile | 6 + |
7814 | arch/x86/include/asm/compat.h | 4 + | |
7815 | arch/x86/include/asm/dma.h | 2 + | |
7816 | arch/x86/include/asm/pmem.h | 2 +- | |
7817 | arch/x86/include/asm/uaccess.h | 20 +- | |
7818 | arch/x86/kernel/apic/vector.c | 6 +- | |
7819 | arch/x86/kernel/cpu/mtrr/generic.c | 6 +- | |
7820 | arch/x86/kernel/cpu/perf_event_intel.c | 28 +- | |
7821 | arch/x86/kernel/head_64.S | 1 - | |
7822 | arch/x86/kvm/i8259.c | 10 +- | |
7823 | arch/x86/kvm/ioapic.c | 2 + | |
7824 | arch/x86/kvm/x86.c | 2 + | |
7825 | arch/x86/lib/usercopy_64.c | 2 +- | |
7826 | arch/x86/mm/mpx.c | 4 +- | |
7827 | arch/x86/mm/pageattr.c | 7 + | |
7828 | drivers/base/devres.c | 4 +- | |
7829 | drivers/base/power/runtime.c | 6 +- | |
7830 | drivers/base/regmap/regmap.c | 4 +- | |
7831 | drivers/block/drbd/drbd_receiver.c | 4 +- | |
7832 | drivers/block/drbd/drbd_worker.c | 6 +- | |
7833 | drivers/char/virtio_console.c | 6 +- | |
7834 | drivers/md/dm.c | 12 +- | |
7835 | drivers/net/ethernet/nvidia/forcedeth.c | 4 +- | |
7836 | drivers/net/macvtap.c | 4 +- | |
7837 | drivers/video/fbdev/core/fbmem.c | 10 +- | |
7838 | fs/compat.c | 3 +- | |
7839 | fs/coredump.c | 2 +- | |
7840 | fs/dcache.c | 13 +- | |
7841 | fs/fhandle.c | 2 +- | |
7842 | fs/file.c | 14 +- | |
7843 | fs/fs-writeback.c | 11 +- | |
7844 | fs/overlayfs/copy_up.c | 2 +- | |
7845 | fs/readdir.c | 3 +- | |
7846 | fs/super.c | 3 +- | |
7847 | include/linux/compiler.h | 36 ++- | |
7848 | include/linux/rcupdate.h | 8 + | |
7849 | include/linux/sched.h | 4 +- | |
7850 | include/linux/seqlock.h | 10 + | |
7851 | include/linux/spinlock.h | 17 +- | |
7852 | include/linux/srcu.h | 5 +- | |
7853 | include/linux/syscalls.h | 2 +- | |
7854 | include/linux/writeback.h | 3 +- | |
7855 | include/uapi/linux/swab.h | 6 +- | |
7856 | ipc/ipc_sysctl.c | 6 + | |
7857 | kernel/exit.c | 25 +- | |
7858 | kernel/resource.c | 4 +- | |
7859 | kernel/signal.c | 12 +- | |
7860 | kernel/user.c | 2 +- | |
7861 | kernel/workqueue.c | 6 +- | |
7862 | lib/rhashtable.c | 4 +- | |
7863 | net/compat.c | 2 +- | |
7864 | net/ipv4/xfrm4_mode_transport.c | 2 +- | |
7865 | security/keys/internal.h | 8 +- | |
7866 | security/keys/keyring.c | 4 - | |
7867 | sound/core/seq/seq_clientmgr.c | 8 +- | |
7868 | sound/core/seq/seq_compat.c | 2 +- | |
7869 | sound/core/seq/seq_memory.c | 6 +- | |
7870 | tools/gcc/checker_plugin.c | 415 +++++++++++++++++++- | |
7871 | tools/gcc/gcc-common.h | 1 + | |
7872 | tools/gcc/initify_plugin.c | 33 ++- | |
7873 | .../disable_size_overflow_hash.data | 1 + | |
7874 | .../size_overflow_plugin/size_overflow_hash.data | 1 - | |
7875 | 62 files changed, 708 insertions(+), 140 deletions(-) | |
afe359a8 | 7876 | |
ab5bcff6 PK |
7877 | commit f2634c2f6995f4231616f24ed016f890c701f939 |
7878 | Merge: 1241bff 5f8b236 | |
afe359a8 | 7879 | Author: Brad Spengler <spender@grsecurity.net> |
ab5bcff6 | 7880 | Date: Wed Dec 9 21:50:47 2015 -0500 |
afe359a8 | 7881 | |
ab5bcff6 PK |
7882 | Merge branch 'linux-4.3.y' into pax-4_3 |
7883 | ||
7884 | Conflicts: | |
7885 | arch/x86/kernel/fpu/xstate.c | |
7886 | arch/x86/kernel/head_64.S | |
afe359a8 | 7887 | |
ab5bcff6 | 7888 | commit 1241bff82e3d7dadb05de0a60b8d2822afc6547c |
6090327c | 7889 | Author: Brad Spengler <spender@grsecurity.net> |
ab5bcff6 | 7890 | Date: Sun Dec 6 08:44:56 2015 -0500 |
76e7c0f9 | 7891 | |
ab5bcff6 PK |
7892 | Update to pax-linux-4.3-test8.patch: |
7893 | - fixed integer truncation check in md introduced by upstream commits 284ae7cab0f7335c9e0aa8992b28415ef1a54c7c and 58c0fed400603a802968b23ddf78f029c5a84e41, reported by BeiKed9o (https://forums.grsecurity.net/viewtopic.php?f=3&t=4328) | |
7894 | - gcc plugin compilation problems will now also produce the output of the checking script to make diagnosis easier, reported by hunger | |
7895 | - Emese fixed a false positive size overflow report in __vhost_add_used_n, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4329) | |
7896 | - fixed a potential integer truncation error in the raid1 code caught by the size overflow plugin, reported by d1b (https://forums.grsecurity.net/viewtopic.php?f=3&t=4331) | |
7897 | ||
7898 | Makefile | 5 +++ | |
7899 | drivers/md/md.c | 5 ++- | |
7900 | drivers/md/raid1.c | 2 +- | |
7901 | fs/proc/task_mmu.c | 3 ++ | |
7902 | .../disable_size_overflow_hash.data | 4 ++- | |
7903 | .../size_overflow_plugin/intentional_overflow.c | 32 ++++++++++++++++--- | |
7904 | .../size_overflow_plugin/size_overflow_hash.data | 2 - | |
7905 | .../size_overflow_plugin/size_overflow_plugin.c | 2 +- | |
7906 | 8 files changed, 43 insertions(+), 12 deletions(-) | |
afe359a8 | 7907 | |
ab5bcff6 | 7908 | commit cce6a9f9bdd27096632ca1c0246dcc07f2eb1a18 |
afe359a8 | 7909 | Author: Brad Spengler <spender@grsecurity.net> |
ab5bcff6 | 7910 | Date: Fri Dec 4 14:24:12 2015 -0500 |
afe359a8 | 7911 | |
ab5bcff6 | 7912 | Initial import of pax-linux-4.3-test7.patch |
76e7c0f9 | 7913 | |
6090327c | 7914 | Documentation/dontdiff | 47 +- |
a8b227b4 | 7915 | Documentation/kbuild/makefiles.txt | 39 +- |
0986ccbe | 7916 | Documentation/kernel-parameters.txt | 28 + |
da1216b9 | 7917 | Makefile | 108 +- |
6090327c PK |
7918 | arch/alpha/include/asm/atomic.h | 10 + |
7919 | arch/alpha/include/asm/elf.h | 7 + | |
7920 | arch/alpha/include/asm/pgalloc.h | 6 + | |
7921 | arch/alpha/include/asm/pgtable.h | 11 + | |
7922 | arch/alpha/kernel/module.c | 2 +- | |
7923 | arch/alpha/kernel/osf_sys.c | 8 +- | |
7924 | arch/alpha/mm/fault.c | 141 +- | |
7925 | arch/arm/Kconfig | 2 +- | |
ab5bcff6 | 7926 | arch/arm/include/asm/atomic.h | 320 +- |
6090327c PK |
7927 | arch/arm/include/asm/cache.h | 5 +- |
7928 | arch/arm/include/asm/cacheflush.h | 2 +- | |
7929 | arch/arm/include/asm/checksum.h | 14 +- | |
afe359a8 PK |
7930 | arch/arm/include/asm/cmpxchg.h | 4 + |
7931 | arch/arm/include/asm/cpuidle.h | 2 +- | |
ab5bcff6 | 7932 | arch/arm/include/asm/domain.h | 22 +- |
da1216b9 | 7933 | arch/arm/include/asm/elf.h | 9 +- |
6090327c PK |
7934 | arch/arm/include/asm/fncpy.h | 2 + |
7935 | arch/arm/include/asm/futex.h | 10 + | |
7936 | arch/arm/include/asm/kmap_types.h | 2 +- | |
7937 | arch/arm/include/asm/mach/dma.h | 2 +- | |
7938 | arch/arm/include/asm/mach/map.h | 16 +- | |
7939 | arch/arm/include/asm/outercache.h | 2 +- | |
7940 | arch/arm/include/asm/page.h | 3 +- | |
8cf17962 PK |
7941 | arch/arm/include/asm/pgalloc.h | 20 + |
7942 | arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +- | |
6090327c | 7943 | arch/arm/include/asm/pgtable-2level.h | 3 + |
0986ccbe | 7944 | arch/arm/include/asm/pgtable-3level.h | 3 + |
6090327c | 7945 | arch/arm/include/asm/pgtable.h | 54 +- |
6090327c | 7946 | arch/arm/include/asm/smp.h | 2 +- |
a8b227b4 | 7947 | arch/arm/include/asm/tls.h | 3 + |
ab5bcff6 | 7948 | arch/arm/include/asm/uaccess.h | 79 +- |
6090327c | 7949 | arch/arm/include/uapi/asm/ptrace.h | 2 +- |
ab5bcff6 | 7950 | arch/arm/kernel/armksyms.c | 2 +- |
afe359a8 | 7951 | arch/arm/kernel/cpuidle.c | 2 +- |
ab5bcff6 | 7952 | arch/arm/kernel/entry-armv.S | 109 +- |
6090327c | 7953 | arch/arm/kernel/entry-common.S | 40 +- |
ab5bcff6 | 7954 | arch/arm/kernel/entry-header.S | 55 + |
6090327c | 7955 | arch/arm/kernel/fiq.c | 3 + |
ab5bcff6 | 7956 | arch/arm/kernel/module-plts.c | 7 +- |
afe359a8 | 7957 | arch/arm/kernel/module.c | 38 +- |
6090327c | 7958 | arch/arm/kernel/patch.c | 2 + |
da1216b9 | 7959 | arch/arm/kernel/process.c | 90 +- |
da1216b9 | 7960 | arch/arm/kernel/reboot.c | 1 + |
6090327c PK |
7961 | arch/arm/kernel/setup.c | 20 +- |
7962 | arch/arm/kernel/signal.c | 35 +- | |
7963 | arch/arm/kernel/smp.c | 2 +- | |
7964 | arch/arm/kernel/tcm.c | 4 +- | |
8cf17962 | 7965 | arch/arm/kernel/vmlinux.lds.S | 6 +- |
ab5bcff6 | 7966 | arch/arm/kvm/arm.c | 8 +- |
6090327c | 7967 | arch/arm/lib/copy_page.S | 1 + |
6090327c PK |
7968 | arch/arm/lib/csumpartialcopyuser.S | 4 +- |
7969 | arch/arm/lib/delay.c | 2 +- | |
ab5bcff6 | 7970 | arch/arm/lib/uaccess_with_memcpy.c | 4 +- |
da1216b9 | 7971 | arch/arm/mach-exynos/suspend.c | 6 +- |
a8b227b4 | 7972 | arch/arm/mach-mvebu/coherency.c | 4 +- |
6090327c | 7973 | arch/arm/mach-omap2/board-n8x0.c | 2 +- |
6090327c | 7974 | arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +- |
e8242a6d | 7975 | arch/arm/mach-omap2/omap-smp.c | 1 + |
6090327c PK |
7976 | arch/arm/mach-omap2/omap-wakeupgen.c | 2 +- |
7977 | arch/arm/mach-omap2/omap_device.c | 4 +- | |
7978 | arch/arm/mach-omap2/omap_device.h | 4 +- | |
7979 | arch/arm/mach-omap2/omap_hwmod.c | 4 +- | |
7980 | arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +- | |
7981 | arch/arm/mach-omap2/wd_timer.c | 6 +- | |
afe359a8 | 7982 | arch/arm/mach-shmobile/platsmp-apmu.c | 5 +- |
6090327c | 7983 | arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +- |
e8242a6d PK |
7984 | arch/arm/mach-tegra/irq.c | 1 + |
7985 | arch/arm/mach-ux500/pm.c | 1 + | |
e8242a6d | 7986 | arch/arm/mach-zynq/platsmp.c | 1 + |
0986ccbe | 7987 | arch/arm/mm/Kconfig | 6 +- |
6090327c PK |
7988 | arch/arm/mm/alignment.c | 8 + |
7989 | arch/arm/mm/cache-l2x0.c | 2 +- | |
7990 | arch/arm/mm/context.c | 10 +- | |
0986ccbe | 7991 | arch/arm/mm/fault.c | 146 + |
6090327c | 7992 | arch/arm/mm/fault.h | 12 + |
8cf17962 | 7993 | arch/arm/mm/init.c | 39 + |
6090327c PK |
7994 | arch/arm/mm/ioremap.c | 4 +- |
7995 | arch/arm/mm/mmap.c | 30 +- | |
ab5bcff6 | 7996 | arch/arm/mm/mmu.c | 162 +- |
0986ccbe | 7997 | arch/arm/net/bpf_jit_32.c | 3 + |
6090327c PK |
7998 | arch/arm/plat-iop/setup.c | 2 +- |
7999 | arch/arm/plat-omap/sram.c | 2 + | |
e8242a6d | 8000 | arch/arm64/include/asm/atomic.h | 10 + |
8cf17962 | 8001 | arch/arm64/include/asm/percpu.h | 8 +- |
e8242a6d | 8002 | arch/arm64/include/asm/pgalloc.h | 5 + |
6090327c | 8003 | arch/arm64/include/asm/uaccess.h | 1 + |
e8242a6d | 8004 | arch/arm64/mm/dma-mapping.c | 2 +- |
6090327c PK |
8005 | arch/avr32/include/asm/elf.h | 8 +- |
8006 | arch/avr32/include/asm/kmap_types.h | 4 +- | |
8007 | arch/avr32/mm/fault.c | 27 + | |
8008 | arch/frv/include/asm/atomic.h | 10 + | |
8009 | arch/frv/include/asm/kmap_types.h | 2 +- | |
8010 | arch/frv/mm/elf-fdpic.c | 3 +- | |
a8b227b4 | 8011 | arch/ia64/Makefile | 1 + |
6090327c | 8012 | arch/ia64/include/asm/atomic.h | 10 + |
6090327c PK |
8013 | arch/ia64/include/asm/elf.h | 7 + |
8014 | arch/ia64/include/asm/pgalloc.h | 12 + | |
8015 | arch/ia64/include/asm/pgtable.h | 13 +- | |
8016 | arch/ia64/include/asm/spinlock.h | 2 +- | |
8017 | arch/ia64/include/asm/uaccess.h | 27 +- | |
8cf17962 | 8018 | arch/ia64/kernel/module.c | 45 +- |
6090327c PK |
8019 | arch/ia64/kernel/palinfo.c | 2 +- |
8020 | arch/ia64/kernel/sys_ia64.c | 7 + | |
8021 | arch/ia64/kernel/vmlinux.lds.S | 2 +- | |
8022 | arch/ia64/mm/fault.c | 32 +- | |
a8b227b4 | 8023 | arch/ia64/mm/init.c | 15 +- |
6090327c | 8024 | arch/m32r/lib/usercopy.c | 6 + |
6090327c | 8025 | arch/mips/cavium-octeon/dma-octeon.c | 2 +- |
ab5bcff6 | 8026 | arch/mips/include/asm/atomic.h | 368 +- |
da1216b9 | 8027 | arch/mips/include/asm/elf.h | 7 + |
6090327c PK |
8028 | arch/mips/include/asm/exec.h | 2 +- |
8029 | arch/mips/include/asm/hw_irq.h | 2 +- | |
8030 | arch/mips/include/asm/local.h | 57 + | |
8031 | arch/mips/include/asm/page.h | 2 +- | |
8032 | arch/mips/include/asm/pgalloc.h | 5 + | |
8033 | arch/mips/include/asm/pgtable.h | 3 + | |
8034 | arch/mips/include/asm/uaccess.h | 1 + | |
8035 | arch/mips/kernel/binfmt_elfn32.c | 7 + | |
8036 | arch/mips/kernel/binfmt_elfo32.c | 7 + | |
6090327c PK |
8037 | arch/mips/kernel/irq-gt641xx.c | 2 +- |
8038 | arch/mips/kernel/irq.c | 6 +- | |
8039 | arch/mips/kernel/pm-cps.c | 2 +- | |
8040 | arch/mips/kernel/process.c | 12 - | |
6090327c PK |
8041 | arch/mips/kernel/sync-r4k.c | 24 +- |
8042 | arch/mips/kernel/traps.c | 13 +- | |
8043 | arch/mips/mm/fault.c | 25 + | |
8044 | arch/mips/mm/mmap.c | 51 +- | |
6090327c PK |
8045 | arch/mips/sgi-ip27/ip27-nmi.c | 6 +- |
8046 | arch/mips/sni/rm200.c | 2 +- | |
8047 | arch/mips/vr41xx/common/icu.c | 2 +- | |
8048 | arch/mips/vr41xx/common/irq.c | 4 +- | |
8049 | arch/parisc/include/asm/atomic.h | 10 + | |
8050 | arch/parisc/include/asm/elf.h | 7 + | |
8051 | arch/parisc/include/asm/pgalloc.h | 6 + | |
8052 | arch/parisc/include/asm/pgtable.h | 11 + | |
8053 | arch/parisc/include/asm/uaccess.h | 4 +- | |
8054 | arch/parisc/kernel/module.c | 50 +- | |
8055 | arch/parisc/kernel/sys_parisc.c | 15 + | |
8056 | arch/parisc/kernel/traps.c | 4 +- | |
8057 | arch/parisc/mm/fault.c | 140 +- | |
0986ccbe | 8058 | arch/powerpc/include/asm/atomic.h | 329 +- |
da1216b9 | 8059 | arch/powerpc/include/asm/elf.h | 12 + |
6090327c PK |
8060 | arch/powerpc/include/asm/exec.h | 2 +- |
8061 | arch/powerpc/include/asm/kmap_types.h | 2 +- | |
0986ccbe | 8062 | arch/powerpc/include/asm/local.h | 46 + |
6090327c PK |
8063 | arch/powerpc/include/asm/mman.h | 2 +- |
8064 | arch/powerpc/include/asm/page.h | 8 +- | |
8065 | arch/powerpc/include/asm/page_64.h | 7 +- | |
8066 | arch/powerpc/include/asm/pgalloc-64.h | 7 + | |
8067 | arch/powerpc/include/asm/pgtable.h | 1 + | |
8068 | arch/powerpc/include/asm/pte-hash32.h | 1 + | |
8069 | arch/powerpc/include/asm/reg.h | 1 + | |
8070 | arch/powerpc/include/asm/smp.h | 2 +- | |
0986ccbe | 8071 | arch/powerpc/include/asm/spinlock.h | 42 +- |
6090327c | 8072 | arch/powerpc/include/asm/uaccess.h | 141 +- |
8cf17962 | 8073 | arch/powerpc/kernel/Makefile | 5 + |
6090327c PK |
8074 | arch/powerpc/kernel/exceptions-64e.S | 4 +- |
8075 | arch/powerpc/kernel/exceptions-64s.S | 2 +- | |
8076 | arch/powerpc/kernel/module_32.c | 15 +- | |
8cf17962 | 8077 | arch/powerpc/kernel/process.c | 46 - |
6090327c PK |
8078 | arch/powerpc/kernel/signal_32.c | 2 +- |
8079 | arch/powerpc/kernel/signal_64.c | 2 +- | |
0986ccbe | 8080 | arch/powerpc/kernel/traps.c | 21 + |
6090327c | 8081 | arch/powerpc/kernel/vdso.c | 5 +- |
6090327c | 8082 | arch/powerpc/lib/usercopy_64.c | 18 - |
e8242a6d | 8083 | arch/powerpc/mm/fault.c | 56 +- |
da1216b9 | 8084 | arch/powerpc/mm/mmap.c | 16 + |
6090327c PK |
8085 | arch/powerpc/mm/slice.c | 13 +- |
8086 | arch/powerpc/platforms/cell/spufs/file.c | 4 +- | |
8087 | arch/s390/include/asm/atomic.h | 10 + | |
da1216b9 | 8088 | arch/s390/include/asm/elf.h | 7 + |
6090327c PK |
8089 | arch/s390/include/asm/exec.h | 2 +- |
8090 | arch/s390/include/asm/uaccess.h | 13 +- | |
8091 | arch/s390/kernel/module.c | 22 +- | |
e8242a6d | 8092 | arch/s390/kernel/process.c | 24 - |
da1216b9 | 8093 | arch/s390/mm/mmap.c | 16 + |
6090327c PK |
8094 | arch/score/include/asm/exec.h | 2 +- |
8095 | arch/score/kernel/process.c | 5 - | |
8096 | arch/sh/mm/mmap.c | 22 +- | |
0986ccbe | 8097 | arch/sparc/include/asm/atomic_64.h | 110 +- |
6090327c PK |
8098 | arch/sparc/include/asm/cache.h | 2 +- |
8099 | arch/sparc/include/asm/elf_32.h | 7 + | |
8100 | arch/sparc/include/asm/elf_64.h | 7 + | |
8101 | arch/sparc/include/asm/pgalloc_32.h | 1 + | |
8102 | arch/sparc/include/asm/pgalloc_64.h | 1 + | |
8103 | arch/sparc/include/asm/pgtable.h | 4 + | |
8104 | arch/sparc/include/asm/pgtable_32.h | 15 +- | |
8105 | arch/sparc/include/asm/pgtsrmmu.h | 5 + | |
8106 | arch/sparc/include/asm/setup.h | 4 +- | |
8107 | arch/sparc/include/asm/spinlock_64.h | 35 +- | |
e8242a6d | 8108 | arch/sparc/include/asm/thread_info_32.h | 1 + |
6090327c PK |
8109 | arch/sparc/include/asm/thread_info_64.h | 2 + |
8110 | arch/sparc/include/asm/uaccess.h | 1 + | |
e8242a6d PK |
8111 | arch/sparc/include/asm/uaccess_32.h | 28 +- |
8112 | arch/sparc/include/asm/uaccess_64.h | 24 +- | |
6090327c PK |
8113 | arch/sparc/kernel/Makefile | 2 +- |
8114 | arch/sparc/kernel/prom_common.c | 2 +- | |
8115 | arch/sparc/kernel/smp_64.c | 8 +- | |
8116 | arch/sparc/kernel/sys_sparc_32.c | 2 +- | |
8117 | arch/sparc/kernel/sys_sparc_64.c | 52 +- | |
8118 | arch/sparc/kernel/traps_64.c | 27 +- | |
8119 | arch/sparc/lib/Makefile | 2 +- | |
0986ccbe PK |
8120 | arch/sparc/lib/atomic_64.S | 57 +- |
8121 | arch/sparc/lib/ksyms.c | 6 +- | |
6090327c PK |
8122 | arch/sparc/mm/Makefile | 2 +- |
8123 | arch/sparc/mm/fault_32.c | 292 + | |
8cf17962 | 8124 | arch/sparc/mm/fault_64.c | 486 + |
6090327c PK |
8125 | arch/sparc/mm/hugetlbpage.c | 22 +- |
8126 | arch/sparc/mm/init_64.c | 10 +- | |
8127 | arch/tile/include/asm/atomic_64.h | 10 + | |
8128 | arch/tile/include/asm/uaccess.h | 4 +- | |
8129 | arch/um/Makefile | 4 + | |
8130 | arch/um/include/asm/kmap_types.h | 2 +- | |
8131 | arch/um/include/asm/page.h | 3 + | |
8132 | arch/um/include/asm/pgtable-3level.h | 1 + | |
8133 | arch/um/kernel/process.c | 16 - | |
afe359a8 | 8134 | arch/x86/Kconfig | 15 +- |
6090327c PK |
8135 | arch/x86/Kconfig.cpu | 6 +- |
8136 | arch/x86/Kconfig.debug | 4 +- | |
a8b227b4 | 8137 | arch/x86/Makefile | 13 +- |
6090327c PK |
8138 | arch/x86/boot/Makefile | 3 + |
8139 | arch/x86/boot/bitops.h | 4 +- | |
8140 | arch/x86/boot/boot.h | 2 +- | |
8141 | arch/x86/boot/compressed/Makefile | 3 + | |
8142 | arch/x86/boot/compressed/efi_stub_32.S | 16 +- | |
8cf17962 | 8143 | arch/x86/boot/compressed/efi_thunk_64.S | 4 +- |
6090327c PK |
8144 | arch/x86/boot/compressed/head_32.S | 4 +- |
8145 | arch/x86/boot/compressed/head_64.S | 12 +- | |
8146 | arch/x86/boot/compressed/misc.c | 11 +- | |
8147 | arch/x86/boot/cpucheck.c | 16 +- | |
8148 | arch/x86/boot/header.S | 6 +- | |
8149 | arch/x86/boot/memory.c | 2 +- | |
8150 | arch/x86/boot/video-vesa.c | 1 + | |
8151 | arch/x86/boot/video.c | 2 +- | |
8152 | arch/x86/crypto/aes-x86_64-asm_64.S | 4 + | |
8153 | arch/x86/crypto/aesni-intel_asm.S | 106 +- | |
8154 | arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 + | |
8155 | arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 + | |
8156 | arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 + | |
8157 | arch/x86/crypto/camellia-x86_64-asm_64.S | 7 + | |
8158 | arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +- | |
8159 | arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +- | |
da1216b9 | 8160 | arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +- |
6090327c PK |
8161 | arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 + |
8162 | arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 + | |
8163 | arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 + | |
8164 | arch/x86/crypto/serpent-avx2-asm_64.S | 9 + | |
8165 | arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 + | |
8166 | arch/x86/crypto/sha1_ssse3_asm.S | 10 +- | |
8167 | arch/x86/crypto/sha256-avx-asm.S | 2 + | |
8168 | arch/x86/crypto/sha256-avx2-asm.S | 2 + | |
8169 | arch/x86/crypto/sha256-ssse3-asm.S | 2 + | |
8170 | arch/x86/crypto/sha512-avx-asm.S | 2 + | |
8171 | arch/x86/crypto/sha512-avx2-asm.S | 2 + | |
8172 | arch/x86/crypto/sha512-ssse3-asm.S | 2 + | |
8173 | arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +- | |
8174 | arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 + | |
8175 | arch/x86/crypto/twofish-x86_64-asm_64.S | 3 + | |
ab5bcff6 PK |
8176 | arch/x86/entry/calling.h | 86 +- |
8177 | arch/x86/entry/common.c | 13 +- | |
8178 | arch/x86/entry/entry_32.S | 351 +- | |
8179 | arch/x86/entry/entry_64.S | 619 +- | |
afe359a8 PK |
8180 | arch/x86/entry/entry_64_compat.S | 159 +- |
8181 | arch/x86/entry/thunk_64.S | 2 + | |
8182 | arch/x86/entry/vdso/Makefile | 2 +- | |
ab5bcff6 | 8183 | arch/x86/entry/vdso/vdso2c.h | 8 +- |
afe359a8 PK |
8184 | arch/x86/entry/vdso/vma.c | 41 +- |
8185 | arch/x86/entry/vsyscall/vsyscall_64.c | 16 +- | |
ab5bcff6 | 8186 | arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +- |
0986ccbe | 8187 | arch/x86/ia32/ia32_signal.c | 23 +- |
afe359a8 | 8188 | arch/x86/ia32/sys_ia32.c | 42 +- |
da1216b9 | 8189 | arch/x86/include/asm/alternative-asm.h | 43 +- |
6090327c PK |
8190 | arch/x86/include/asm/alternative.h | 4 +- |
8191 | arch/x86/include/asm/apic.h | 2 +- | |
8192 | arch/x86/include/asm/apm.h | 4 +- | |
ab5bcff6 | 8193 | arch/x86/include/asm/atomic.h | 230 +- |
6090327c | 8194 | arch/x86/include/asm/atomic64_32.h | 100 + |
0986ccbe | 8195 | arch/x86/include/asm/atomic64_64.h | 164 +- |
6090327c | 8196 | arch/x86/include/asm/bitops.h | 18 +- |
afe359a8 | 8197 | arch/x86/include/asm/boot.h | 2 +- |
6090327c | 8198 | arch/x86/include/asm/cache.h | 5 +- |
6090327c PK |
8199 | arch/x86/include/asm/checksum_32.h | 12 +- |
8200 | arch/x86/include/asm/cmpxchg.h | 39 + | |
8201 | arch/x86/include/asm/compat.h | 2 +- | |
afe359a8 | 8202 | arch/x86/include/asm/cpufeature.h | 17 +- |
6090327c PK |
8203 | arch/x86/include/asm/desc.h | 78 +- |
8204 | arch/x86/include/asm/desc_defs.h | 6 + | |
8205 | arch/x86/include/asm/div64.h | 2 +- | |
da1216b9 | 8206 | arch/x86/include/asm/elf.h | 33 +- |
6090327c | 8207 | arch/x86/include/asm/emergency-restart.h | 2 +- |
ab5bcff6 PK |
8208 | arch/x86/include/asm/fpu/internal.h | 42 +- |
8209 | arch/x86/include/asm/fpu/types.h | 6 +- | |
6090327c PK |
8210 | arch/x86/include/asm/futex.h | 14 +- |
8211 | arch/x86/include/asm/hw_irq.h | 4 +- | |
8212 | arch/x86/include/asm/i8259.h | 2 +- | |
afe359a8 | 8213 | arch/x86/include/asm/io.h | 22 +- |
6090327c PK |
8214 | arch/x86/include/asm/irqflags.h | 5 + |
8215 | arch/x86/include/asm/kprobes.h | 9 +- | |
8216 | arch/x86/include/asm/local.h | 106 +- | |
8217 | arch/x86/include/asm/mman.h | 15 + | |
afe359a8 | 8218 | arch/x86/include/asm/mmu.h | 14 +- |
ab5bcff6 | 8219 | arch/x86/include/asm/mmu_context.h | 114 +- |
6090327c PK |
8220 | arch/x86/include/asm/module.h | 17 +- |
8221 | arch/x86/include/asm/nmi.h | 19 +- | |
8222 | arch/x86/include/asm/page.h | 1 + | |
afe359a8 PK |
8223 | arch/x86/include/asm/page_32.h | 12 +- |
8224 | arch/x86/include/asm/page_64.h | 14 +- | |
6090327c PK |
8225 | arch/x86/include/asm/paravirt.h | 46 +- |
8226 | arch/x86/include/asm/paravirt_types.h | 15 +- | |
8227 | arch/x86/include/asm/pgalloc.h | 23 + | |
8228 | arch/x86/include/asm/pgtable-2level.h | 2 + | |
ab5bcff6 | 8229 | arch/x86/include/asm/pgtable-3level.h | 7 + |
da1216b9 | 8230 | arch/x86/include/asm/pgtable.h | 128 +- |
6090327c | 8231 | arch/x86/include/asm/pgtable_32.h | 14 +- |
afe359a8 | 8232 | arch/x86/include/asm/pgtable_32_types.h | 24 +- |
ab5bcff6 | 8233 | arch/x86/include/asm/pgtable_64.h | 23 +- |
6090327c PK |
8234 | arch/x86/include/asm/pgtable_64_types.h | 5 + |
8235 | arch/x86/include/asm/pgtable_types.h | 26 +- | |
8236 | arch/x86/include/asm/preempt.h | 2 +- | |
ab5bcff6 PK |
8237 | arch/x86/include/asm/processor.h | 57 +- |
8238 | arch/x86/include/asm/ptrace.h | 13 +- | |
6090327c PK |
8239 | arch/x86/include/asm/realmode.h | 4 +- |
8240 | arch/x86/include/asm/reboot.h | 10 +- | |
8241 | arch/x86/include/asm/rmwcc.h | 84 +- | |
8242 | arch/x86/include/asm/rwsem.h | 60 +- | |
da1216b9 PK |
8243 | arch/x86/include/asm/segment.h | 27 +- |
8244 | arch/x86/include/asm/smap.h | 43 + | |
6090327c | 8245 | arch/x86/include/asm/smp.h | 14 +- |
6090327c PK |
8246 | arch/x86/include/asm/stackprotector.h | 4 +- |
8247 | arch/x86/include/asm/stacktrace.h | 32 +- | |
8248 | arch/x86/include/asm/switch_to.h | 4 +- | |
afe359a8 PK |
8249 | arch/x86/include/asm/sys_ia32.h | 6 +- |
8250 | arch/x86/include/asm/thread_info.h | 27 +- | |
8251 | arch/x86/include/asm/tlbflush.h | 77 +- | |
e8242a6d | 8252 | arch/x86/include/asm/uaccess.h | 192 +- |
8cf17962 PK |
8253 | arch/x86/include/asm/uaccess_32.h | 28 +- |
8254 | arch/x86/include/asm/uaccess_64.h | 169 +- | |
6090327c PK |
8255 | arch/x86/include/asm/word-at-a-time.h | 2 +- |
8256 | arch/x86/include/asm/x86_init.h | 10 +- | |
8257 | arch/x86/include/asm/xen/page.h | 2 +- | |
6090327c | 8258 | arch/x86/include/uapi/asm/e820.h | 2 +- |
6090327c PK |
8259 | arch/x86/kernel/Makefile | 2 +- |
8260 | arch/x86/kernel/acpi/boot.c | 4 +- | |
8261 | arch/x86/kernel/acpi/sleep.c | 4 + | |
8262 | arch/x86/kernel/acpi/wakeup_32.S | 6 +- | |
afe359a8 | 8263 | arch/x86/kernel/alternative.c | 124 +- |
6090327c | 8264 | arch/x86/kernel/apic/apic.c | 4 +- |
ab5bcff6 | 8265 | arch/x86/kernel/apic/apic_flat_64.c | 6 +- |
6090327c PK |
8266 | arch/x86/kernel/apic/apic_noop.c | 2 +- |
8267 | arch/x86/kernel/apic/bigsmp_32.c | 2 +- | |
e8242a6d | 8268 | arch/x86/kernel/apic/io_apic.c | 8 +- |
afe359a8 | 8269 | arch/x86/kernel/apic/msi.c | 2 +- |
ab5bcff6 | 8270 | arch/x86/kernel/apic/probe_32.c | 4 +- |
8cf17962 | 8271 | arch/x86/kernel/apic/vector.c | 4 +- |
ab5bcff6 | 8272 | arch/x86/kernel/apic/x2apic_cluster.c | 2 +- |
6090327c PK |
8273 | arch/x86/kernel/apic/x2apic_phys.c | 2 +- |
8274 | arch/x86/kernel/apic/x2apic_uv_x.c | 2 +- | |
e8242a6d | 8275 | arch/x86/kernel/apm_32.c | 21 +- |
6090327c PK |
8276 | arch/x86/kernel/asm-offsets.c | 20 + |
8277 | arch/x86/kernel/asm-offsets_64.c | 1 + | |
8278 | arch/x86/kernel/cpu/Makefile | 4 - | |
8279 | arch/x86/kernel/cpu/amd.c | 2 +- | |
ab5bcff6 | 8280 | arch/x86/kernel/cpu/bugs_64.c | 2 + |
afe359a8 | 8281 | arch/x86/kernel/cpu/common.c | 202 +- |
da1216b9 | 8282 | arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +- |
ab5bcff6 | 8283 | arch/x86/kernel/cpu/mcheck/mce.c | 34 +- |
6090327c PK |
8284 | arch/x86/kernel/cpu/mcheck/p5.c | 3 + |
8285 | arch/x86/kernel/cpu/mcheck/winchip.c | 3 + | |
6090327c PK |
8286 | arch/x86/kernel/cpu/microcode/intel.c | 4 +- |
8287 | arch/x86/kernel/cpu/mtrr/main.c | 2 +- | |
8288 | arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +- | |
afe359a8 | 8289 | arch/x86/kernel/cpu/perf_event.c | 10 +- |
6090327c PK |
8290 | arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +- |
8291 | arch/x86/kernel/cpu/perf_event_intel.c | 6 +- | |
da1216b9 PK |
8292 | arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +- |
8293 | arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +- | |
8294 | arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +- | |
6090327c PK |
8295 | arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +- |
8296 | arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +- | |
8297 | arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +- | |
6090327c PK |
8298 | arch/x86/kernel/crash_dump_64.c | 2 +- |
8299 | arch/x86/kernel/doublefault.c | 8 +- | |
da1216b9 PK |
8300 | arch/x86/kernel/dumpstack.c | 24 +- |
8301 | arch/x86/kernel/dumpstack_32.c | 25 +- | |
8cf17962 | 8302 | arch/x86/kernel/dumpstack_64.c | 62 +- |
6090327c PK |
8303 | arch/x86/kernel/e820.c | 4 +- |
8304 | arch/x86/kernel/early_printk.c | 1 + | |
ab5bcff6 PK |
8305 | arch/x86/kernel/espfix_64.c | 44 +- |
8306 | arch/x86/kernel/fpu/core.c | 24 +- | |
8307 | arch/x86/kernel/fpu/init.c | 40 +- | |
afe359a8 PK |
8308 | arch/x86/kernel/fpu/regset.c | 22 +- |
8309 | arch/x86/kernel/fpu/signal.c | 20 +- | |
8310 | arch/x86/kernel/fpu/xstate.c | 8 +- | |
da1216b9 | 8311 | arch/x86/kernel/ftrace.c | 18 +- |
afe359a8 PK |
8312 | arch/x86/kernel/head64.c | 14 +- |
8313 | arch/x86/kernel/head_32.S | 235 +- | |
ab5bcff6 | 8314 | arch/x86/kernel/head_64.S | 173 +- |
6090327c | 8315 | arch/x86/kernel/i386_ksyms_32.c | 12 + |
6090327c PK |
8316 | arch/x86/kernel/i8259.c | 10 +- |
8317 | arch/x86/kernel/io_delay.c | 2 +- | |
8318 | arch/x86/kernel/ioport.c | 2 +- | |
8319 | arch/x86/kernel/irq.c | 8 +- | |
da1216b9 | 8320 | arch/x86/kernel/irq_32.c | 45 +- |
afe359a8 | 8321 | arch/x86/kernel/jump_label.c | 10 +- |
da1216b9 PK |
8322 | arch/x86/kernel/kgdb.c | 21 +- |
8323 | arch/x86/kernel/kprobes/core.c | 28 +- | |
6090327c PK |
8324 | arch/x86/kernel/kprobes/opt.c | 16 +- |
8325 | arch/x86/kernel/ksysfs.c | 2 +- | |
ab5bcff6 | 8326 | arch/x86/kernel/kvmclock.c | 20 +- |
afe359a8 | 8327 | arch/x86/kernel/ldt.c | 25 + |
e8242a6d | 8328 | arch/x86/kernel/livepatch.c | 12 +- |
6090327c | 8329 | arch/x86/kernel/machine_kexec_32.c | 6 +- |
a8b227b4 | 8330 | arch/x86/kernel/mcount_64.S | 19 +- |
6090327c PK |
8331 | arch/x86/kernel/module.c | 78 +- |
8332 | arch/x86/kernel/msr.c | 2 +- | |
8333 | arch/x86/kernel/nmi.c | 34 +- | |
8334 | arch/x86/kernel/nmi_selftest.c | 4 +- | |
8335 | arch/x86/kernel/paravirt-spinlocks.c | 2 +- | |
8336 | arch/x86/kernel/paravirt.c | 45 +- | |
8cf17962 | 8337 | arch/x86/kernel/paravirt_patch_64.c | 8 + |
6090327c PK |
8338 | arch/x86/kernel/pci-calgary_64.c | 2 +- |
8339 | arch/x86/kernel/pci-iommu_table.c | 2 +- | |
8340 | arch/x86/kernel/pci-swiotlb.c | 2 +- | |
ab5bcff6 PK |
8341 | arch/x86/kernel/process.c | 80 +- |
8342 | arch/x86/kernel/process_32.c | 29 +- | |
8343 | arch/x86/kernel/process_64.c | 14 +- | |
6090327c PK |
8344 | arch/x86/kernel/ptrace.c | 20 +- |
8345 | arch/x86/kernel/pvclock.c | 8 +- | |
e8242a6d | 8346 | arch/x86/kernel/reboot.c | 44 +- |
6090327c PK |
8347 | arch/x86/kernel/reboot_fixups_32.c | 2 +- |
8348 | arch/x86/kernel/relocate_kernel_64.S | 3 +- | |
afe359a8 | 8349 | arch/x86/kernel/setup.c | 29 +- |
6090327c PK |
8350 | arch/x86/kernel/setup_percpu.c | 29 +- |
8351 | arch/x86/kernel/signal.c | 17 +- | |
8352 | arch/x86/kernel/smp.c | 2 +- | |
afe359a8 PK |
8353 | arch/x86/kernel/smpboot.c | 29 +- |
8354 | arch/x86/kernel/step.c | 6 +- | |
6090327c PK |
8355 | arch/x86/kernel/sys_i386_32.c | 184 + |
8356 | arch/x86/kernel/sys_x86_64.c | 22 +- | |
da1216b9 PK |
8357 | arch/x86/kernel/tboot.c | 14 +- |
8358 | arch/x86/kernel/time.c | 8 +- | |
6090327c PK |
8359 | arch/x86/kernel/tls.c | 7 +- |
8360 | arch/x86/kernel/tracepoint.c | 4 +- | |
da1216b9 | 8361 | arch/x86/kernel/traps.c | 53 +- |
6090327c | 8362 | arch/x86/kernel/tsc.c | 2 +- |
da1216b9 | 8363 | arch/x86/kernel/uprobes.c | 2 +- |
6090327c | 8364 | arch/x86/kernel/vm86_32.c | 6 +- |
ab5bcff6 | 8365 | arch/x86/kernel/vmlinux.lds.S | 153 +- |
6090327c PK |
8366 | arch/x86/kernel/x8664_ksyms_64.c | 6 +- |
8367 | arch/x86/kernel/x86_init.c | 6 +- | |
6090327c | 8368 | arch/x86/kvm/cpuid.c | 21 +- |
8cf17962 | 8369 | arch/x86/kvm/emulate.c | 2 +- |
6090327c PK |
8370 | arch/x86/kvm/lapic.c | 2 +- |
8371 | arch/x86/kvm/paging_tmpl.h | 2 +- | |
ab5bcff6 PK |
8372 | arch/x86/kvm/svm.c | 10 +- |
8373 | arch/x86/kvm/vmx.c | 62 +- | |
8374 | arch/x86/kvm/x86.c | 42 +- | |
6090327c PK |
8375 | arch/x86/lguest/boot.c | 3 +- |
8376 | arch/x86/lib/atomic64_386_32.S | 164 + | |
afe359a8 | 8377 | arch/x86/lib/atomic64_cx8_32.S | 98 +- |
ab5bcff6 | 8378 | arch/x86/lib/checksum_32.S | 99 +- |
da1216b9 | 8379 | arch/x86/lib/clear_page_64.S | 3 + |
0986ccbe | 8380 | arch/x86/lib/cmpxchg16b_emu.S | 3 + |
afe359a8 PK |
8381 | arch/x86/lib/copy_page_64.S | 14 +- |
8382 | arch/x86/lib/copy_user_64.S | 66 +- | |
8383 | arch/x86/lib/csum-copy_64.S | 14 +- | |
6090327c PK |
8384 | arch/x86/lib/csum-wrappers_64.c | 8 +- |
8385 | arch/x86/lib/getuser.S | 74 +- | |
8cf17962 | 8386 | arch/x86/lib/insn.c | 8 +- |
6090327c | 8387 | arch/x86/lib/iomap_copy_64.S | 2 + |
da1216b9 PK |
8388 | arch/x86/lib/memcpy_64.S | 6 + |
8389 | arch/x86/lib/memmove_64.S | 3 +- | |
8390 | arch/x86/lib/memset_64.S | 3 + | |
6090327c PK |
8391 | arch/x86/lib/mmx_32.c | 243 +- |
8392 | arch/x86/lib/msr-reg.S | 2 + | |
afe359a8 | 8393 | arch/x86/lib/putuser.S | 87 +- |
6090327c | 8394 | arch/x86/lib/rwsem.S | 6 +- |
afe359a8 | 8395 | arch/x86/lib/usercopy_32.c | 359 +- |
da1216b9 | 8396 | arch/x86/lib/usercopy_64.c | 20 +- |
afe359a8 PK |
8397 | arch/x86/math-emu/fpu_aux.c | 2 +- |
8398 | arch/x86/math-emu/fpu_entry.c | 4 +- | |
8399 | arch/x86/math-emu/fpu_system.h | 2 +- | |
6090327c | 8400 | arch/x86/mm/Makefile | 4 + |
afe359a8 | 8401 | arch/x86/mm/extable.c | 26 +- |
da1216b9 | 8402 | arch/x86/mm/fault.c | 570 +- |
6090327c | 8403 | arch/x86/mm/gup.c | 6 +- |
ab5bcff6 | 8404 | arch/x86/mm/highmem_32.c | 6 + |
6090327c | 8405 | arch/x86/mm/hugetlbpage.c | 24 +- |
ab5bcff6 | 8406 | arch/x86/mm/init.c | 111 +- |
6090327c | 8407 | arch/x86/mm/init_32.c | 111 +- |
8cf17962 | 8408 | arch/x86/mm/init_64.c | 46 +- |
6090327c | 8409 | arch/x86/mm/iomap_32.c | 4 + |
ab5bcff6 | 8410 | arch/x86/mm/ioremap.c | 52 +- |
6090327c | 8411 | arch/x86/mm/kmemcheck/kmemcheck.c | 4 +- |
da1216b9 | 8412 | arch/x86/mm/mmap.c | 40 +- |
6090327c PK |
8413 | arch/x86/mm/mmio-mod.c | 10 +- |
8414 | arch/x86/mm/numa.c | 2 +- | |
ab5bcff6 | 8415 | arch/x86/mm/pageattr.c | 38 +- |
afe359a8 | 8416 | arch/x86/mm/pat.c | 12 +- |
6090327c PK |
8417 | arch/x86/mm/pat_rbtree.c | 2 +- |
8418 | arch/x86/mm/pf_in.c | 10 +- | |
ab5bcff6 | 8419 | arch/x86/mm/pgtable.c | 214 +- |
6090327c | 8420 | arch/x86/mm/pgtable_32.c | 3 + |
6090327c PK |
8421 | arch/x86/mm/setup_nx.c | 7 + |
8422 | arch/x86/mm/tlb.c | 4 + | |
8423 | arch/x86/mm/uderef_64.c | 37 + | |
8424 | arch/x86/net/bpf_jit.S | 11 + | |
8cf17962 | 8425 | arch/x86/net/bpf_jit_comp.c | 13 +- |
da1216b9 | 8426 | arch/x86/oprofile/backtrace.c | 6 +- |
6090327c PK |
8427 | arch/x86/oprofile/nmi_int.c | 8 +- |
8428 | arch/x86/oprofile/op_model_amd.c | 8 +- | |
8429 | arch/x86/oprofile/op_model_ppro.c | 7 +- | |
8430 | arch/x86/oprofile/op_x86_model.h | 2 +- | |
8431 | arch/x86/pci/intel_mid_pci.c | 2 +- | |
8432 | arch/x86/pci/irq.c | 8 +- | |
8433 | arch/x86/pci/pcbios.c | 144 +- | |
8434 | arch/x86/platform/efi/efi_32.c | 24 + | |
da1216b9 | 8435 | arch/x86/platform/efi/efi_64.c | 26 +- |
6090327c | 8436 | arch/x86/platform/efi/efi_stub_32.S | 64 +- |
8cf17962 | 8437 | arch/x86/platform/efi/efi_stub_64.S | 2 + |
e8242a6d | 8438 | arch/x86/platform/intel-mid/intel-mid.c | 5 +- |
a8b227b4 PK |
8439 | arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +- |
8440 | arch/x86/platform/intel-mid/mfld.c | 4 +- | |
8441 | arch/x86/platform/intel-mid/mrfl.c | 2 +- | |
e8242a6d | 8442 | arch/x86/platform/intel-quark/imr_selftest.c | 2 +- |
6090327c PK |
8443 | arch/x86/platform/olpc/olpc_dt.c | 2 +- |
8444 | arch/x86/power/cpu.c | 11 +- | |
8445 | arch/x86/realmode/init.c | 10 +- | |
8446 | arch/x86/realmode/rm/Makefile | 3 + | |
8447 | arch/x86/realmode/rm/header.S | 4 +- | |
da1216b9 | 8448 | arch/x86/realmode/rm/reboot.S | 4 + |
6090327c PK |
8449 | arch/x86/realmode/rm/trampoline_32.S | 12 +- |
8450 | arch/x86/realmode/rm/trampoline_64.S | 3 +- | |
8451 | arch/x86/realmode/rm/wakeup_asm.S | 5 +- | |
8452 | arch/x86/tools/Makefile | 2 +- | |
afe359a8 | 8453 | arch/x86/tools/relocs.c | 96 +- |
6090327c PK |
8454 | arch/x86/um/mem_32.c | 2 +- |
8455 | arch/x86/um/tls_32.c | 2 +- | |
da1216b9 | 8456 | arch/x86/xen/enlighten.c | 50 +- |
ab5bcff6 | 8457 | arch/x86/xen/mmu.c | 19 +- |
da1216b9 | 8458 | arch/x86/xen/smp.c | 16 +- |
6090327c PK |
8459 | arch/x86/xen/xen-asm_32.S | 2 +- |
8460 | arch/x86/xen/xen-head.S | 11 + | |
8461 | arch/x86/xen/xen-ops.h | 2 - | |
e8242a6d | 8462 | block/bio.c | 4 +- |
6090327c PK |
8463 | block/blk-iopoll.c | 2 +- |
8464 | block/blk-map.c | 2 +- | |
8465 | block/blk-softirq.c | 2 +- | |
8466 | block/bsg.c | 12 +- | |
8467 | block/compat_ioctl.c | 4 +- | |
8468 | block/genhd.c | 9 +- | |
8469 | block/partitions/efi.c | 8 +- | |
8470 | block/scsi_ioctl.c | 29 +- | |
8471 | crypto/cryptd.c | 4 +- | |
8472 | crypto/pcrypt.c | 2 +- | |
ab5bcff6 | 8473 | crypto/zlib.c | 12 +- |
afe359a8 | 8474 | drivers/acpi/acpi_video.c | 2 +- |
6090327c PK |
8475 | drivers/acpi/apei/apei-internal.h | 2 +- |
8476 | drivers/acpi/apei/ghes.c | 4 +- | |
8477 | drivers/acpi/bgrt.c | 6 +- | |
8478 | drivers/acpi/blacklist.c | 4 +- | |
e8242a6d | 8479 | drivers/acpi/bus.c | 4 +- |
0986ccbe | 8480 | drivers/acpi/device_pm.c | 4 +- |
e8242a6d PK |
8481 | drivers/acpi/ec.c | 2 +- |
8482 | drivers/acpi/pci_slot.c | 2 +- | |
6090327c | 8483 | drivers/acpi/processor_idle.c | 2 +- |
e8242a6d PK |
8484 | drivers/acpi/processor_pdc.c | 2 +- |
8485 | drivers/acpi/sleep.c | 2 +- | |
6090327c | 8486 | drivers/acpi/sysfs.c | 4 +- |
e8242a6d | 8487 | drivers/acpi/thermal.c | 2 +- |
afe359a8 | 8488 | drivers/acpi/video_detect.c | 7 +- |
6090327c PK |
8489 | drivers/ata/libata-core.c | 12 +- |
8490 | drivers/ata/libata-scsi.c | 2 +- | |
8491 | drivers/ata/libata.h | 2 +- | |
8492 | drivers/ata/pata_arasan_cf.c | 4 +- | |
8493 | drivers/atm/adummy.c | 2 +- | |
8494 | drivers/atm/ambassador.c | 8 +- | |
8495 | drivers/atm/atmtcp.c | 14 +- | |
8496 | drivers/atm/eni.c | 10 +- | |
8497 | drivers/atm/firestream.c | 8 +- | |
8498 | drivers/atm/fore200e.c | 14 +- | |
8499 | drivers/atm/he.c | 18 +- | |
8500 | drivers/atm/horizon.c | 4 +- | |
8501 | drivers/atm/idt77252.c | 36 +- | |
8502 | drivers/atm/iphase.c | 34 +- | |
8503 | drivers/atm/lanai.c | 12 +- | |
8504 | drivers/atm/nicstar.c | 46 +- | |
8505 | drivers/atm/solos-pci.c | 4 +- | |
8506 | drivers/atm/suni.c | 4 +- | |
8507 | drivers/atm/uPD98402.c | 16 +- | |
8508 | drivers/atm/zatm.c | 6 +- | |
8509 | drivers/base/bus.c | 4 +- | |
8510 | drivers/base/devtmpfs.c | 8 +- | |
8511 | drivers/base/node.c | 2 +- | |
ab5bcff6 | 8512 | drivers/base/platform-msi.c | 20 +- |
da1216b9 | 8513 | drivers/base/power/domain.c | 11 +- |
6090327c PK |
8514 | drivers/base/power/sysfs.c | 2 +- |
8515 | drivers/base/power/wakeup.c | 8 +- | |
ab5bcff6 | 8516 | drivers/base/regmap/regmap-debugfs.c | 11 +- |
6090327c PK |
8517 | drivers/base/syscore.c | 4 +- |
8518 | drivers/block/cciss.c | 28 +- | |
8519 | drivers/block/cciss.h | 2 +- | |
8520 | drivers/block/cpqarray.c | 28 +- | |
8521 | drivers/block/cpqarray.h | 2 +- | |
a8b227b4 | 8522 | drivers/block/drbd/drbd_bitmap.c | 2 +- |
8cf17962 | 8523 | drivers/block/drbd/drbd_int.h | 8 +- |
a8b227b4 | 8524 | drivers/block/drbd/drbd_main.c | 12 +- |
6090327c | 8525 | drivers/block/drbd/drbd_nl.c | 4 +- |
a8b227b4 PK |
8526 | drivers/block/drbd/drbd_receiver.c | 34 +- |
8527 | drivers/block/drbd/drbd_worker.c | 8 +- | |
6090327c | 8528 | drivers/block/pktcdvd.c | 4 +- |
8cf17962 | 8529 | drivers/block/rbd.c | 2 +- |
6090327c | 8530 | drivers/bluetooth/btwilink.c | 2 +- |
ab5bcff6 | 8531 | drivers/bus/arm-cci.c | 12 +- |
6090327c PK |
8532 | drivers/cdrom/cdrom.c | 11 +- |
8533 | drivers/cdrom/gdrom.c | 1 - | |
8534 | drivers/char/agp/compat_ioctl.c | 2 +- | |
8535 | drivers/char/agp/frontend.c | 4 +- | |
afe359a8 | 8536 | drivers/char/agp/intel-gtt.c | 4 +- |
6090327c | 8537 | drivers/char/hpet.c | 2 +- |
6090327c PK |
8538 | drivers/char/ipmi/ipmi_msghandler.c | 8 +- |
8539 | drivers/char/ipmi/ipmi_si_intf.c | 8 +- | |
8cf17962 | 8540 | drivers/char/mem.c | 47 +- |
6090327c | 8541 | drivers/char/nvram.c | 2 +- |
a8b227b4 PK |
8542 | drivers/char/pcmcia/synclink_cs.c | 16 +- |
8543 | drivers/char/random.c | 12 +- | |
e8242a6d | 8544 | drivers/char/sonypi.c | 11 +- |
6090327c | 8545 | drivers/char/tpm/tpm_acpi.c | 3 +- |
ab5bcff6 | 8546 | drivers/char/tpm/tpm_eventlog.c | 4 +- |
6090327c PK |
8547 | drivers/char/virtio_console.c | 4 +- |
8548 | drivers/clk/clk-composite.c | 2 +- | |
da1216b9 | 8549 | drivers/clk/samsung/clk.h | 2 +- |
6090327c PK |
8550 | drivers/clk/socfpga/clk-gate.c | 9 +- |
8551 | drivers/clk/socfpga/clk-pll.c | 9 +- | |
ab5bcff6 | 8552 | drivers/clk/ti/clk.c | 8 +- |
6090327c | 8553 | drivers/cpufreq/acpi-cpufreq.c | 17 +- |
8cf17962 | 8554 | drivers/cpufreq/cpufreq-dt.c | 4 +- |
ab5bcff6 | 8555 | drivers/cpufreq/cpufreq.c | 30 +- |
afe359a8 | 8556 | drivers/cpufreq/cpufreq_governor.c | 2 +- |
6090327c PK |
8557 | drivers/cpufreq/cpufreq_governor.h | 4 +- |
8558 | drivers/cpufreq/cpufreq_ondemand.c | 10 +- | |
0986ccbe | 8559 | drivers/cpufreq/intel_pstate.c | 33 +- |
6090327c PK |
8560 | drivers/cpufreq/p4-clockmod.c | 12 +- |
8561 | drivers/cpufreq/sparc-us3-cpufreq.c | 67 +- | |
8562 | drivers/cpufreq/speedstep-centrino.c | 7 +- | |
8563 | drivers/cpuidle/driver.c | 2 +- | |
afe359a8 | 8564 | drivers/cpuidle/dt_idle_states.c | 2 +- |
6090327c PK |
8565 | drivers/cpuidle/governor.c | 2 +- |
8566 | drivers/cpuidle/sysfs.c | 2 +- | |
8567 | drivers/crypto/hifn_795x.c | 4 +- | |
8568 | drivers/devfreq/devfreq.c | 4 +- | |
8569 | drivers/dma/sh/shdma-base.c | 4 +- | |
8570 | drivers/dma/sh/shdmac.c | 2 +- | |
8571 | drivers/edac/edac_device.c | 4 +- | |
da1216b9 | 8572 | drivers/edac/edac_mc_sysfs.c | 2 +- |
6090327c PK |
8573 | drivers/edac/edac_pci.c | 4 +- |
8574 | drivers/edac/edac_pci_sysfs.c | 22 +- | |
8575 | drivers/edac/mce_amd.h | 2 +- | |
8576 | drivers/firewire/core-card.c | 6 +- | |
8577 | drivers/firewire/core-device.c | 2 +- | |
8578 | drivers/firewire/core-transaction.c | 1 + | |
8579 | drivers/firewire/core.h | 1 + | |
8580 | drivers/firmware/dmi-id.c | 2 +- | |
afe359a8 | 8581 | drivers/firmware/dmi_scan.c | 12 +- |
6090327c PK |
8582 | drivers/firmware/efi/cper.c | 8 +- |
8583 | drivers/firmware/efi/efi.c | 12 +- | |
8584 | drivers/firmware/efi/efivars.c | 2 +- | |
e8242a6d PK |
8585 | drivers/firmware/efi/runtime-map.c | 2 +- |
8586 | drivers/firmware/google/gsmi.c | 2 +- | |
8587 | drivers/firmware/google/memconsole.c | 7 +- | |
8588 | drivers/firmware/memmap.c | 2 +- | |
ab5bcff6 | 8589 | drivers/firmware/psci.c | 2 +- |
afe359a8 | 8590 | drivers/gpio/gpio-davinci.c | 6 +- |
6090327c PK |
8591 | drivers/gpio/gpio-em.c | 2 +- |
8592 | drivers/gpio/gpio-ich.c | 2 +- | |
afe359a8 | 8593 | drivers/gpio/gpio-omap.c | 4 +- |
6090327c PK |
8594 | drivers/gpio/gpio-rcar.c | 2 +- |
8595 | drivers/gpio/gpio-vr41xx.c | 2 +- | |
ab5bcff6 | 8596 | drivers/gpio/gpiolib.c | 12 +- |
afe359a8 PK |
8597 | drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +- |
8598 | drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +- | |
8599 | drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +- | |
8600 | .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +- | |
8601 | .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +- | |
8602 | .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +- | |
8603 | .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +- | |
8604 | drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +- | |
8605 | drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +- | |
e8242a6d | 8606 | drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +- |
afe359a8 | 8607 | .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +- |
6090327c | 8608 | drivers/gpu/drm/drm_crtc.c | 2 +- |
a8b227b4 | 8609 | drivers/gpu/drm/drm_drv.c | 2 +- |
6090327c PK |
8610 | drivers/gpu/drm/drm_fops.c | 12 +- |
8611 | drivers/gpu/drm/drm_global.c | 14 +- | |
8612 | drivers/gpu/drm/drm_info.c | 13 +- | |
8613 | drivers/gpu/drm/drm_ioc32.c | 13 +- | |
a8b227b4 | 8614 | drivers/gpu/drm/drm_ioctl.c | 2 +- |
e8242a6d | 8615 | drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +- |
6090327c PK |
8616 | drivers/gpu/drm/i810/i810_drv.h | 4 +- |
8617 | drivers/gpu/drm/i915/i915_dma.c | 2 +- | |
8618 | drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +- | |
ab5bcff6 PK |
8619 | drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +- |
8620 | drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +- | |
8621 | drivers/gpu/drm/i915/i915_ioc32.c | 10 +- | |
6090327c | 8622 | drivers/gpu/drm/i915/intel_display.c | 26 +- |
8cf17962 | 8623 | drivers/gpu/drm/imx/imx-drm-core.c | 2 +- |
6090327c | 8624 | drivers/gpu/drm/mga/mga_drv.h | 4 +- |
da1216b9 | 8625 | drivers/gpu/drm/mga/mga_ioc32.c | 10 +- |
6090327c PK |
8626 | drivers/gpu/drm/mga/mga_irq.c | 8 +- |
8627 | drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +- | |
8628 | drivers/gpu/drm/nouveau/nouveau_drm.h | 1 - | |
8629 | drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +- | |
8630 | drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +- | |
afe359a8 | 8631 | drivers/gpu/drm/omapdrm/Makefile | 2 +- |
6090327c PK |
8632 | drivers/gpu/drm/qxl/qxl_cmd.c | 12 +- |
8633 | drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +- | |
8634 | drivers/gpu/drm/qxl/qxl_drv.h | 8 +- | |
8635 | drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +- | |
8636 | drivers/gpu/drm/qxl/qxl_irq.c | 16 +- | |
8637 | drivers/gpu/drm/qxl/qxl_ttm.c | 38 +- | |
8638 | drivers/gpu/drm/r128/r128_cce.c | 2 +- | |
8639 | drivers/gpu/drm/r128/r128_drv.h | 4 +- | |
da1216b9 | 8640 | drivers/gpu/drm/r128/r128_ioc32.c | 10 +- |
6090327c PK |
8641 | drivers/gpu/drm/r128/r128_irq.c | 4 +- |
8642 | drivers/gpu/drm/r128/r128_state.c | 4 +- | |
8643 | drivers/gpu/drm/radeon/mkregtable.c | 4 +- | |
8644 | drivers/gpu/drm/radeon/radeon_device.c | 2 +- | |
8645 | drivers/gpu/drm/radeon/radeon_drv.h | 2 +- | |
da1216b9 | 8646 | drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +- |
6090327c PK |
8647 | drivers/gpu/drm/radeon/radeon_irq.c | 6 +- |
8648 | drivers/gpu/drm/radeon/radeon_state.c | 4 +- | |
8649 | drivers/gpu/drm/radeon/radeon_ttm.c | 4 +- | |
8650 | drivers/gpu/drm/tegra/dc.c | 2 +- | |
8651 | drivers/gpu/drm/tegra/dsi.c | 2 +- | |
8652 | drivers/gpu/drm/tegra/hdmi.c | 2 +- | |
afe359a8 PK |
8653 | drivers/gpu/drm/tegra/sor.c | 7 +- |
8654 | drivers/gpu/drm/tilcdc/Makefile | 6 +- | |
6090327c | 8655 | drivers/gpu/drm/ttm/ttm_memory.c | 4 +- |
0986ccbe PK |
8656 | drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +- |
8657 | drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +- | |
6090327c PK |
8658 | drivers/gpu/drm/udl/udl_fb.c | 1 - |
8659 | drivers/gpu/drm/via/via_drv.h | 4 +- | |
8660 | drivers/gpu/drm/via/via_irq.c | 18 +- | |
8661 | drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +- | |
8662 | drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +- | |
6090327c PK |
8663 | drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +- |
8664 | drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +- | |
8665 | drivers/gpu/vga/vga_switcheroo.c | 4 +- | |
8666 | drivers/hid/hid-core.c | 4 +- | |
afe359a8 | 8667 | drivers/hid/hid-sensor-custom.c | 2 +- |
e8242a6d | 8668 | drivers/hv/channel.c | 2 +- |
6090327c PK |
8669 | drivers/hv/hv.c | 4 +- |
8670 | drivers/hv/hv_balloon.c | 18 +- | |
8671 | drivers/hv/hyperv_vmbus.h | 2 +- | |
e8242a6d | 8672 | drivers/hwmon/acpi_power_meter.c | 6 +- |
6090327c PK |
8673 | drivers/hwmon/applesmc.c | 2 +- |
8674 | drivers/hwmon/asus_atk0110.c | 10 +- | |
8675 | drivers/hwmon/coretemp.c | 2 +- | |
afe359a8 | 8676 | drivers/hwmon/dell-smm-hwmon.c | 2 +- |
6090327c PK |
8677 | drivers/hwmon/ibmaem.c | 2 +- |
8678 | drivers/hwmon/iio_hwmon.c | 2 +- | |
a8b227b4 | 8679 | drivers/hwmon/nct6683.c | 6 +- |
6090327c PK |
8680 | drivers/hwmon/nct6775.c | 6 +- |
8681 | drivers/hwmon/pmbus/pmbus_core.c | 10 +- | |
8682 | drivers/hwmon/sht15.c | 12 +- | |
8683 | drivers/hwmon/via-cputemp.c | 2 +- | |
8684 | drivers/i2c/busses/i2c-amd756-s4882.c | 2 +- | |
6090327c PK |
8685 | drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +- |
8686 | drivers/i2c/i2c-dev.c | 2 +- | |
8687 | drivers/ide/ide-cd.c | 2 +- | |
ab5bcff6 | 8688 | drivers/ide/ide-disk.c | 2 +- |
6090327c | 8689 | drivers/iio/industrialio-core.c | 2 +- |
afe359a8 | 8690 | drivers/iio/magnetometer/ak8975.c | 2 +- |
6090327c PK |
8691 | drivers/infiniband/core/cm.c | 32 +- |
8692 | drivers/infiniband/core/fmr_pool.c | 20 +- | |
e8242a6d | 8693 | drivers/infiniband/core/uverbs_cmd.c | 3 + |
6090327c | 8694 | drivers/infiniband/hw/cxgb4/mem.c | 4 +- |
6090327c PK |
8695 | drivers/infiniband/hw/mlx4/mad.c | 2 +- |
8696 | drivers/infiniband/hw/mlx4/mcg.c | 2 +- | |
8697 | drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +- | |
8698 | drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +- | |
8699 | drivers/infiniband/hw/mthca/mthca_main.c | 2 +- | |
8700 | drivers/infiniband/hw/mthca/mthca_mr.c | 6 +- | |
8701 | drivers/infiniband/hw/mthca/mthca_provider.c | 2 +- | |
8702 | drivers/infiniband/hw/nes/nes.c | 4 +- | |
8703 | drivers/infiniband/hw/nes/nes.h | 40 +- | |
8704 | drivers/infiniband/hw/nes/nes_cm.c | 62 +- | |
8705 | drivers/infiniband/hw/nes/nes_mgt.c | 8 +- | |
8706 | drivers/infiniband/hw/nes/nes_nic.c | 40 +- | |
8707 | drivers/infiniband/hw/nes/nes_verbs.c | 10 +- | |
8708 | drivers/infiniband/hw/qib/qib.h | 1 + | |
0986ccbe | 8709 | drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +- |
6090327c PK |
8710 | drivers/input/gameport/gameport.c | 4 +- |
8711 | drivers/input/input.c | 4 +- | |
8712 | drivers/input/joystick/sidewinder.c | 1 + | |
8713 | drivers/input/joystick/xpad.c | 4 +- | |
8714 | drivers/input/misc/ims-pcu.c | 4 +- | |
8715 | drivers/input/mouse/psmouse.h | 2 +- | |
8716 | drivers/input/mousedev.c | 2 +- | |
8717 | drivers/input/serio/serio.c | 4 +- | |
8718 | drivers/input/serio/serio_raw.c | 4 +- | |
e8242a6d | 8719 | drivers/input/touchscreen/htcpen.c | 2 +- |
ab5bcff6 | 8720 | drivers/iommu/arm-smmu-v3.c | 2 +- |
da1216b9 PK |
8721 | drivers/iommu/arm-smmu.c | 43 +- |
8722 | drivers/iommu/io-pgtable-arm.c | 101 +- | |
8723 | drivers/iommu/io-pgtable.c | 11 +- | |
8724 | drivers/iommu/io-pgtable.h | 19 +- | |
0986ccbe | 8725 | drivers/iommu/iommu.c | 2 +- |
da1216b9 | 8726 | drivers/iommu/ipmmu-vmsa.c | 13 +- |
afe359a8 | 8727 | drivers/iommu/irq_remapping.c | 2 +- |
da1216b9 | 8728 | drivers/irqchip/irq-gic.c | 2 +- |
ab5bcff6 | 8729 | drivers/irqchip/irq-i8259.c | 2 +- |
8cf17962 | 8730 | drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +- |
6090327c PK |
8731 | drivers/irqchip/irq-renesas-irqc.c | 2 +- |
8732 | drivers/isdn/capi/capi.c | 10 +- | |
8733 | drivers/isdn/gigaset/interface.c | 8 +- | |
8734 | drivers/isdn/gigaset/usb-gigaset.c | 2 +- | |
8735 | drivers/isdn/hardware/avm/b1.c | 4 +- | |
8736 | drivers/isdn/i4l/isdn_common.c | 2 + | |
8737 | drivers/isdn/i4l/isdn_tty.c | 22 +- | |
8738 | drivers/isdn/icn/icn.c | 2 +- | |
8739 | drivers/isdn/mISDN/dsp_cmx.c | 2 +- | |
6090327c PK |
8740 | drivers/lguest/core.c | 10 +- |
8741 | drivers/lguest/page_tables.c | 2 +- | |
8742 | drivers/lguest/x86/core.c | 12 +- | |
8743 | drivers/lguest/x86/switcher_32.S | 27 +- | |
8744 | drivers/md/bcache/closure.h | 2 +- | |
8745 | drivers/md/bitmap.c | 2 +- | |
8746 | drivers/md/dm-ioctl.c | 2 +- | |
afe359a8 | 8747 | drivers/md/dm-raid1.c | 18 +- |
6090327c PK |
8748 | drivers/md/dm-stats.c | 6 +- |
8749 | drivers/md/dm-stripe.c | 10 +- | |
0986ccbe | 8750 | drivers/md/dm-table.c | 2 +- |
6090327c PK |
8751 | drivers/md/dm-thin-metadata.c | 4 +- |
8752 | drivers/md/dm.c | 16 +- | |
8753 | drivers/md/md.c | 26 +- | |
8754 | drivers/md/md.h | 6 +- | |
8755 | drivers/md/persistent-data/dm-space-map-metadata.c | 4 +- | |
8756 | drivers/md/persistent-data/dm-space-map.h | 1 + | |
8757 | drivers/md/raid1.c | 4 +- | |
ab5bcff6 | 8758 | drivers/md/raid10.c | 18 +- |
e8242a6d | 8759 | drivers/md/raid5.c | 22 +- |
6090327c PK |
8760 | drivers/media/dvb-core/dvbdev.c | 2 +- |
8761 | drivers/media/dvb-frontends/af9033.h | 2 +- | |
8762 | drivers/media/dvb-frontends/dib3000.h | 2 +- | |
a8b227b4 PK |
8763 | drivers/media/dvb-frontends/dib7000p.h | 2 +- |
8764 | drivers/media/dvb-frontends/dib8000.h | 2 +- | |
6090327c PK |
8765 | drivers/media/pci/cx88/cx88-video.c | 6 +- |
8766 | drivers/media/pci/ivtv/ivtv-driver.c | 2 +- | |
a8b227b4 PK |
8767 | drivers/media/pci/solo6x10/solo6x10-core.c | 2 +- |
8768 | drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +- | |
8769 | drivers/media/pci/solo6x10/solo6x10.h | 2 +- | |
0986ccbe | 8770 | drivers/media/pci/tw68/tw68-core.c | 2 +- |
6090327c PK |
8771 | drivers/media/platform/omap/omap_vout.c | 11 +- |
8772 | drivers/media/platform/s5p-tv/mixer.h | 2 +- | |
8773 | drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +- | |
8774 | drivers/media/platform/s5p-tv/mixer_reg.c | 2 +- | |
8775 | drivers/media/platform/s5p-tv/mixer_video.c | 24 +- | |
8776 | drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +- | |
6090327c PK |
8777 | drivers/media/radio/radio-cadet.c | 2 + |
8778 | drivers/media/radio/radio-maxiradio.c | 2 +- | |
8779 | drivers/media/radio/radio-shark.c | 2 +- | |
8780 | drivers/media/radio/radio-shark2.c | 2 +- | |
8781 | drivers/media/radio/radio-si476x.c | 2 +- | |
8cf17962 | 8782 | drivers/media/radio/wl128x/fmdrv_common.c | 2 +- |
0986ccbe | 8783 | drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +- |
6090327c PK |
8784 | drivers/media/v4l2-core/v4l2-device.c | 4 +- |
8785 | drivers/media/v4l2-core/v4l2-ioctl.c | 13 +- | |
8cf17962 | 8786 | drivers/memory/omap-gpmc.c | 21 +- |
6090327c | 8787 | drivers/message/fusion/mptsas.c | 34 +- |
6090327c | 8788 | drivers/mfd/ab8500-debugfs.c | 2 +- |
e8242a6d | 8789 | drivers/mfd/kempld-core.c | 2 +- |
6090327c PK |
8790 | drivers/mfd/max8925-i2c.c | 2 +- |
8791 | drivers/mfd/tps65910.c | 2 +- | |
8792 | drivers/mfd/twl4030-irq.c | 9 +- | |
ab5bcff6 PK |
8793 | drivers/mfd/wm5110-tables.c | 2 +- |
8794 | drivers/mfd/wm8998-tables.c | 2 +- | |
6090327c | 8795 | drivers/misc/c2port/core.c | 4 +- |
6090327c PK |
8796 | drivers/misc/kgdbts.c | 4 +- |
8797 | drivers/misc/lis3lv02d/lis3lv02d.c | 8 +- | |
8798 | drivers/misc/lis3lv02d/lis3lv02d.h | 2 +- | |
afe359a8 | 8799 | drivers/misc/mic/scif/scif_rb.c | 8 +- |
6090327c PK |
8800 | drivers/misc/sgi-gru/gruhandles.c | 4 +- |
8801 | drivers/misc/sgi-gru/gruprocfs.c | 8 +- | |
8802 | drivers/misc/sgi-gru/grutables.h | 154 +- | |
8803 | drivers/misc/sgi-xp/xp.h | 2 +- | |
8804 | drivers/misc/sgi-xp/xpc.h | 3 +- | |
da1216b9 | 8805 | drivers/misc/sgi-xp/xpc_main.c | 2 +- |
6090327c | 8806 | drivers/mmc/card/block.c | 2 +- |
6090327c PK |
8807 | drivers/mmc/host/dw_mmc.h | 2 +- |
8808 | drivers/mmc/host/mmci.c | 4 +- | |
0986ccbe | 8809 | drivers/mmc/host/omap_hsmmc.c | 4 +- |
6090327c PK |
8810 | drivers/mmc/host/sdhci-esdhc-imx.c | 7 +- |
8811 | drivers/mmc/host/sdhci-s3c.c | 8 +- | |
8812 | drivers/mtd/chips/cfi_cmdset_0020.c | 2 +- | |
8813 | drivers/mtd/nand/denali.c | 1 + | |
0986ccbe | 8814 | drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +- |
6090327c PK |
8815 | drivers/mtd/nftlmount.c | 1 + |
8816 | drivers/mtd/sm_ftl.c | 2 +- | |
8817 | drivers/net/bonding/bond_netlink.c | 2 +- | |
0986ccbe | 8818 | drivers/net/caif/caif_hsi.c | 2 +- |
6090327c | 8819 | drivers/net/can/Kconfig | 2 +- |
0986ccbe PK |
8820 | drivers/net/can/dev.c | 2 +- |
8821 | drivers/net/can/vcan.c | 2 +- | |
8822 | drivers/net/dummy.c | 2 +- | |
6090327c PK |
8823 | drivers/net/ethernet/8390/ax88796.c | 4 +- |
8824 | drivers/net/ethernet/altera/altera_tse_main.c | 4 +- | |
a8b227b4 | 8825 | drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +- |
0986ccbe | 8826 | drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +- |
e8242a6d | 8827 | drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +- |
afe359a8 PK |
8828 | drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +- |
8829 | drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +- | |
8830 | drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +- | |
8831 | drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +- | |
8832 | drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +- | |
a8b227b4 | 8833 | drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +- |
afe359a8 | 8834 | drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +- |
6090327c PK |
8835 | drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +- |
8836 | drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +- | |
8837 | drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +- | |
8838 | drivers/net/ethernet/broadcom/tg3.h | 1 + | |
afe359a8 PK |
8839 | drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +- |
8840 | drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +- | |
6090327c | 8841 | drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +- |
6090327c PK |
8842 | drivers/net/ethernet/dec/tulip/de4x5.c | 4 +- |
8843 | drivers/net/ethernet/emulex/benet/be_main.c | 2 +- | |
8844 | drivers/net/ethernet/faraday/ftgmac100.c | 2 + | |
8845 | drivers/net/ethernet/faraday/ftmac100.c | 2 + | |
8846 | drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +- | |
8847 | drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +- | |
0986ccbe | 8848 | drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +- |
ab5bcff6 | 8849 | drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +- |
6090327c PK |
8850 | drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +- |
8851 | .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +- | |
8852 | .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +- | |
8853 | .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +- | |
8854 | drivers/net/ethernet/realtek/r8169.c | 8 +- | |
8855 | drivers/net/ethernet/sfc/ptp.c | 2 +- | |
8856 | drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +- | |
e8242a6d | 8857 | drivers/net/ethernet/via/via-rhine.c | 2 +- |
ab5bcff6 | 8858 | drivers/net/geneve.c | 2 +- |
6090327c PK |
8859 | drivers/net/hyperv/hyperv_net.h | 2 +- |
8860 | drivers/net/hyperv/rndis_filter.c | 4 +- | |
0986ccbe | 8861 | drivers/net/ifb.c | 2 +- |
afe359a8 | 8862 | drivers/net/ipvlan/ipvlan_core.c | 2 +- |
6090327c | 8863 | drivers/net/macvlan.c | 20 +- |
0986ccbe PK |
8864 | drivers/net/macvtap.c | 6 +- |
8865 | drivers/net/nlmon.c | 2 +- | |
8cf17962 | 8866 | drivers/net/phy/phy_device.c | 6 +- |
6090327c PK |
8867 | drivers/net/ppp/ppp_generic.c | 4 +- |
8868 | drivers/net/slip/slhc.c | 2 +- | |
0986ccbe PK |
8869 | drivers/net/team/team.c | 4 +- |
8870 | drivers/net/tun.c | 7 +- | |
6090327c PK |
8871 | drivers/net/usb/hso.c | 23 +- |
8872 | drivers/net/usb/r8152.c | 2 +- | |
8873 | drivers/net/usb/sierra_net.c | 4 +- | |
8874 | drivers/net/virtio_net.c | 2 +- | |
ab5bcff6 | 8875 | drivers/net/vrf.c | 2 +- |
6090327c PK |
8876 | drivers/net/vxlan.c | 4 +- |
8877 | drivers/net/wimax/i2400m/rx.c | 2 +- | |
8878 | drivers/net/wireless/airo.c | 2 +- | |
8879 | drivers/net/wireless/at76c50x-usb.c | 2 +- | |
ab5bcff6 | 8880 | drivers/net/wireless/ath/ath10k/ce.c | 6 +- |
6090327c PK |
8881 | drivers/net/wireless/ath/ath10k/htc.c | 7 +- |
8882 | drivers/net/wireless/ath/ath10k/htc.h | 4 +- | |
a8b227b4 PK |
8883 | drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +- |
8884 | drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +- | |
6090327c | 8885 | drivers/net/wireless/ath/ath9k/hw.h | 4 +- |
a8b227b4 | 8886 | drivers/net/wireless/ath/ath9k/main.c | 22 +- |
ab5bcff6 | 8887 | drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +- |
6090327c PK |
8888 | drivers/net/wireless/b43/phy_lp.c | 2 +- |
8889 | drivers/net/wireless/iwlegacy/3945-mac.c | 4 +- | |
8890 | drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +- | |
8891 | drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +- | |
8892 | drivers/net/wireless/mac80211_hwsim.c | 28 +- | |
8893 | drivers/net/wireless/rndis_wlan.c | 2 +- | |
8894 | drivers/net/wireless/rt2x00/rt2x00.h | 2 +- | |
8895 | drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +- | |
8896 | drivers/net/wireless/ti/wl1251/sdio.c | 12 +- | |
8897 | drivers/net/wireless/ti/wl12xx/main.c | 8 +- | |
8898 | drivers/net/wireless/ti/wl18xx/main.c | 6 +- | |
8899 | drivers/nfc/nfcwilink.c | 2 +- | |
e8242a6d | 8900 | drivers/of/fdt.c | 4 +- |
6090327c PK |
8901 | drivers/oprofile/buffer_sync.c | 8 +- |
8902 | drivers/oprofile/event_buffer.c | 2 +- | |
8903 | drivers/oprofile/oprof.c | 2 +- | |
6090327c PK |
8904 | drivers/oprofile/oprofile_stats.c | 10 +- |
8905 | drivers/oprofile/oprofile_stats.h | 10 +- | |
8906 | drivers/oprofile/oprofilefs.c | 6 +- | |
8907 | drivers/oprofile/timer_int.c | 2 +- | |
8908 | drivers/parport/procfs.c | 4 +- | |
e8242a6d | 8909 | drivers/pci/host/pci-host-generic.c | 24 +- |
6090327c PK |
8910 | drivers/pci/hotplug/acpiphp_ibm.c | 4 +- |
8911 | drivers/pci/hotplug/cpcihp_generic.c | 6 +- | |
8912 | drivers/pci/hotplug/cpcihp_zt5550.c | 14 +- | |
0986ccbe | 8913 | drivers/pci/hotplug/cpqphp_nvram.c | 2 + |
6090327c PK |
8914 | drivers/pci/hotplug/pci_hotplug_core.c | 6 +- |
8915 | drivers/pci/hotplug/pciehp_core.c | 2 +- | |
ab5bcff6 | 8916 | drivers/pci/msi.c | 22 +- |
6090327c PK |
8917 | drivers/pci/pci-sysfs.c | 6 +- |
8918 | drivers/pci/pci.h | 2 +- | |
8919 | drivers/pci/pcie/aspm.c | 6 +- | |
e8242a6d | 8920 | drivers/pci/pcie/portdrv_pci.c | 2 +- |
6090327c | 8921 | drivers/pci/probe.c | 2 +- |
ab5bcff6 | 8922 | drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +- |
afe359a8 | 8923 | drivers/pinctrl/pinctrl-at91.c | 5 +- |
e8242a6d | 8924 | drivers/platform/chrome/chromeos_pstore.c | 2 +- |
6090327c | 8925 | drivers/platform/x86/alienware-wmi.c | 4 +- |
e8242a6d PK |
8926 | drivers/platform/x86/compal-laptop.c | 2 +- |
8927 | drivers/platform/x86/hdaps.c | 2 +- | |
8928 | drivers/platform/x86/ibm_rtl.c | 2 +- | |
8929 | drivers/platform/x86/intel_oaktrail.c | 2 +- | |
8930 | drivers/platform/x86/msi-laptop.c | 16 +- | |
6090327c | 8931 | drivers/platform/x86/msi-wmi.c | 2 +- |
e8242a6d PK |
8932 | drivers/platform/x86/samsung-laptop.c | 2 +- |
8933 | drivers/platform/x86/samsung-q10.c | 2 +- | |
8934 | drivers/platform/x86/sony-laptop.c | 14 +- | |
da1216b9 | 8935 | drivers/platform/x86/thinkpad_acpi.c | 2 +- |
6090327c | 8936 | drivers/pnp/pnpbios/bioscalls.c | 14 +- |
e8242a6d | 8937 | drivers/pnp/pnpbios/core.c | 2 +- |
6090327c PK |
8938 | drivers/power/pda_power.c | 7 +- |
8939 | drivers/power/power_supply.h | 4 +- | |
8940 | drivers/power/power_supply_core.c | 7 +- | |
8941 | drivers/power/power_supply_sysfs.c | 6 +- | |
afe359a8 | 8942 | drivers/power/reset/at91-reset.c | 9 +- |
6090327c PK |
8943 | drivers/powercap/powercap_sys.c | 136 +- |
8944 | drivers/ptp/ptp_private.h | 2 +- | |
8945 | drivers/ptp/ptp_sysfs.c | 2 +- | |
8946 | drivers/regulator/core.c | 4 +- | |
8947 | drivers/regulator/max8660.c | 6 +- | |
afe359a8 | 8948 | drivers/regulator/max8973-regulator.c | 16 +- |
8cf17962 | 8949 | drivers/regulator/mc13892-regulator.c | 8 +- |
afe359a8 | 8950 | drivers/rtc/rtc-armada38x.c | 7 +- |
6090327c PK |
8951 | drivers/rtc/rtc-cmos.c | 4 +- |
8952 | drivers/rtc/rtc-ds1307.c | 2 +- | |
8953 | drivers/rtc/rtc-m48t59.c | 4 +- | |
afe359a8 PK |
8954 | drivers/rtc/rtc-test.c | 6 +- |
8955 | drivers/scsi/be2iscsi/be_main.c | 2 +- | |
6090327c PK |
8956 | drivers/scsi/bfa/bfa_fcpim.h | 2 +- |
8957 | drivers/scsi/bfa/bfa_ioc.h | 4 +- | |
8958 | drivers/scsi/fcoe/fcoe_sysfs.c | 12 +- | |
8959 | drivers/scsi/hosts.c | 4 +- | |
afe359a8 | 8960 | drivers/scsi/hpsa.c | 38 +- |
6090327c PK |
8961 | drivers/scsi/hpsa.h | 2 +- |
8962 | drivers/scsi/libfc/fc_exch.c | 50 +- | |
8963 | drivers/scsi/libsas/sas_ata.c | 2 +- | |
8964 | drivers/scsi/lpfc/lpfc.h | 8 +- | |
8965 | drivers/scsi/lpfc/lpfc_debugfs.c | 18 +- | |
8966 | drivers/scsi/lpfc/lpfc_init.c | 6 +- | |
8967 | drivers/scsi/lpfc/lpfc_scsi.c | 10 +- | |
ab5bcff6 | 8968 | drivers/scsi/megaraid/megaraid_sas.h | 2 +- |
6090327c PK |
8969 | drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +- |
8970 | drivers/scsi/pmcraid.c | 20 +- | |
8971 | drivers/scsi/pmcraid.h | 8 +- | |
8972 | drivers/scsi/qla2xxx/qla_attr.c | 4 +- | |
8973 | drivers/scsi/qla2xxx/qla_gbl.h | 4 +- | |
8974 | drivers/scsi/qla2xxx/qla_os.c | 6 +- | |
8975 | drivers/scsi/qla4xxx/ql4_def.h | 2 +- | |
8976 | drivers/scsi/qla4xxx/ql4_os.c | 6 +- | |
da1216b9 | 8977 | drivers/scsi/scsi.c | 2 +- |
8cf17962 | 8978 | drivers/scsi/scsi_lib.c | 8 +- |
6090327c | 8979 | drivers/scsi/scsi_sysfs.c | 2 +- |
6090327c PK |
8980 | drivers/scsi/scsi_transport_fc.c | 8 +- |
8981 | drivers/scsi/scsi_transport_iscsi.c | 6 +- | |
8982 | drivers/scsi/scsi_transport_srp.c | 6 +- | |
da1216b9 | 8983 | drivers/scsi/sd.c | 6 +- |
6090327c | 8984 | drivers/scsi/sg.c | 2 +- |
afe359a8 | 8985 | drivers/scsi/sr.c | 21 +- |
0986ccbe | 8986 | drivers/soc/tegra/fuse/fuse-tegra.c | 2 +- |
6090327c PK |
8987 | drivers/spi/spi.c | 2 +- |
8988 | drivers/staging/android/timed_output.c | 6 +- | |
8cf17962 | 8989 | drivers/staging/comedi/comedi_fops.c | 8 +- |
e8242a6d PK |
8990 | drivers/staging/fbtft/fbtft-core.c | 2 +- |
8991 | drivers/staging/fbtft/fbtft.h | 2 +- | |
6090327c | 8992 | drivers/staging/gdm724x/gdm_tty.c | 2 +- |
afe359a8 PK |
8993 | drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +- |
8994 | drivers/staging/iio/adc/ad7280a.c | 4 +- | |
6090327c PK |
8995 | drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +- |
8996 | drivers/staging/lustre/lnet/selftest/framework.c | 4 - | |
8997 | drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +- | |
8998 | drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +- | |
8999 | drivers/staging/lustre/lustre/include/obd.h | 2 +- | |
ab5bcff6 | 9000 | drivers/staging/octeon/ethernet-rx.c | 20 +- |
6090327c | 9001 | drivers/staging/octeon/ethernet.c | 8 +- |
ab5bcff6 PK |
9002 | drivers/staging/rdma/ipath/ipath_rc.c | 6 +- |
9003 | drivers/staging/rdma/ipath/ipath_ruc.c | 6 +- | |
6090327c | 9004 | drivers/staging/rtl8188eu/include/hal_intf.h | 2 +- |
6090327c | 9005 | drivers/staging/rtl8712/rtl871x_io.h | 2 +- |
afe359a8 PK |
9006 | drivers/staging/sm750fb/sm750.c | 14 +- |
9007 | drivers/staging/unisys/visorbus/visorbus_private.h | 4 +- | |
6090327c | 9008 | drivers/target/sbp/sbp_target.c | 4 +- |
afe359a8 | 9009 | drivers/thermal/cpu_cooling.c | 9 +- |
0986ccbe | 9010 | drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +- |
8cf17962 | 9011 | drivers/thermal/of-thermal.c | 17 +- |
e8242a6d | 9012 | drivers/thermal/x86_pkg_temp_thermal.c | 2 +- |
6090327c PK |
9013 | drivers/tty/cyclades.c | 6 +- |
9014 | drivers/tty/hvc/hvc_console.c | 14 +- | |
9015 | drivers/tty/hvc/hvcs.c | 21 +- | |
9016 | drivers/tty/hvc/hvsi.c | 22 +- | |
9017 | drivers/tty/hvc/hvsi_lib.c | 4 +- | |
9018 | drivers/tty/ipwireless/tty.c | 27 +- | |
9019 | drivers/tty/moxa.c | 2 +- | |
9020 | drivers/tty/n_gsm.c | 4 +- | |
ab5bcff6 | 9021 | drivers/tty/n_tty.c | 3 +- |
6090327c PK |
9022 | drivers/tty/pty.c | 4 +- |
9023 | drivers/tty/rocket.c | 6 +- | |
afe359a8 PK |
9024 | drivers/tty/serial/8250/8250_core.c | 10 +- |
9025 | drivers/tty/serial/ifx6x60.c | 2 +- | |
6090327c PK |
9026 | drivers/tty/serial/ioc4_serial.c | 6 +- |
9027 | drivers/tty/serial/kgdb_nmi.c | 4 +- | |
9028 | drivers/tty/serial/kgdboc.c | 32 +- | |
9029 | drivers/tty/serial/msm_serial.c | 4 +- | |
9030 | drivers/tty/serial/samsung.c | 9 +- | |
9031 | drivers/tty/serial/serial_core.c | 8 +- | |
9032 | drivers/tty/synclink.c | 34 +- | |
9033 | drivers/tty/synclink_gt.c | 28 +- | |
9034 | drivers/tty/synclinkmp.c | 34 +- | |
9035 | drivers/tty/tty_io.c | 2 +- | |
9036 | drivers/tty/tty_ldisc.c | 8 +- | |
9037 | drivers/tty/tty_port.c | 22 +- | |
0986ccbe | 9038 | drivers/uio/uio.c | 13 +- |
6090327c PK |
9039 | drivers/usb/atm/cxacru.c | 2 +- |
9040 | drivers/usb/atm/usbatm.c | 24 +- | |
ab5bcff6 | 9041 | drivers/usb/class/cdc-acm.h | 2 +- |
6090327c | 9042 | drivers/usb/core/devices.c | 6 +- |
ab5bcff6 | 9043 | drivers/usb/core/devio.c | 12 +- |
6090327c | 9044 | drivers/usb/core/hcd.c | 4 +- |
6090327c PK |
9045 | drivers/usb/core/sysfs.c | 2 +- |
9046 | drivers/usb/core/usb.c | 2 +- | |
6090327c | 9047 | drivers/usb/early/ehci-dbgp.c | 16 +- |
a8b227b4 | 9048 | drivers/usb/gadget/function/u_serial.c | 22 +- |
afe359a8 PK |
9049 | drivers/usb/gadget/udc/dummy_hcd.c | 2 +- |
9050 | drivers/usb/host/ehci-hcd.c | 2 +- | |
6090327c | 9051 | drivers/usb/host/ehci-hub.c | 4 +- |
afe359a8 PK |
9052 | drivers/usb/host/ehci-q.c | 4 +- |
9053 | drivers/usb/host/fotg210-hcd.c | 2 +- | |
9054 | drivers/usb/host/fusbh200-hcd.c | 2 +- | |
9055 | drivers/usb/host/hwa-hc.c | 2 +- | |
9056 | drivers/usb/host/ohci-hcd.c | 2 +- | |
9057 | drivers/usb/host/r8a66597.h | 2 +- | |
9058 | drivers/usb/host/uhci-hcd.c | 2 +- | |
9059 | drivers/usb/host/xhci-pci.c | 2 +- | |
9060 | drivers/usb/host/xhci.c | 2 +- | |
6090327c PK |
9061 | drivers/usb/misc/appledisplay.c | 4 +- |
9062 | drivers/usb/serial/console.c | 8 +- | |
ab5bcff6 | 9063 | drivers/usb/storage/transport.c | 2 +- |
afe359a8 | 9064 | drivers/usb/storage/usb.c | 2 +- |
6090327c | 9065 | drivers/usb/storage/usb.h | 2 +- |
a8b227b4 PK |
9066 | drivers/usb/usbip/vhci.h | 2 +- |
9067 | drivers/usb/usbip/vhci_hcd.c | 6 +- | |
9068 | drivers/usb/usbip/vhci_rx.c | 2 +- | |
6090327c PK |
9069 | drivers/usb/wusbcore/wa-hc.h | 4 +- |
9070 | drivers/usb/wusbcore/wa-xfer.c | 2 +- | |
9071 | drivers/vfio/vfio.c | 2 +- | |
9072 | drivers/vhost/vringh.c | 20 +- | |
9073 | drivers/video/backlight/kb3886_bl.c | 2 +- | |
ab5bcff6 | 9074 | drivers/video/console/fbcon.c | 2 +- |
6090327c PK |
9075 | drivers/video/fbdev/aty/aty128fb.c | 2 +- |
9076 | drivers/video/fbdev/aty/atyfb_base.c | 8 +- | |
9077 | drivers/video/fbdev/aty/mach64_cursor.c | 5 +- | |
9078 | drivers/video/fbdev/core/fb_defio.c | 6 +- | |
9079 | drivers/video/fbdev/core/fbmem.c | 2 +- | |
9080 | drivers/video/fbdev/hyperv_fb.c | 4 +- | |
9081 | drivers/video/fbdev/i810/i810_accel.c | 1 + | |
afe359a8 | 9082 | drivers/video/fbdev/matrox/matroxfb_base.c | 2 +- |
6090327c PK |
9083 | drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +- |
9084 | drivers/video/fbdev/nvidia/nvidia.c | 27 +- | |
9085 | drivers/video/fbdev/omap2/dss/display.c | 8 +- | |
9086 | drivers/video/fbdev/s1d13xxxfb.c | 6 +- | |
9087 | drivers/video/fbdev/smscufx.c | 4 +- | |
9088 | drivers/video/fbdev/udlfb.c | 36 +- | |
9089 | drivers/video/fbdev/uvesafb.c | 52 +- | |
9090 | drivers/video/fbdev/vesafb.c | 58 +- | |
9091 | drivers/video/fbdev/via/via_clock.h | 2 +- | |
e8242a6d | 9092 | drivers/xen/events/events_base.c | 6 +- |
afe359a8 | 9093 | drivers/xen/evtchn.c | 4 +- |
6090327c PK |
9094 | fs/Kconfig.binfmt | 2 +- |
9095 | fs/afs/inode.c | 4 +- | |
9096 | fs/aio.c | 2 +- | |
9097 | fs/autofs4/waitq.c | 2 +- | |
9098 | fs/befs/endian.h | 6 +- | |
9099 | fs/binfmt_aout.c | 23 +- | |
ab5bcff6 PK |
9100 | fs/binfmt_elf.c | 670 +- |
9101 | fs/binfmt_elf_fdpic.c | 4 +- | |
6090327c PK |
9102 | fs/block_dev.c | 2 +- |
9103 | fs/btrfs/ctree.c | 9 +- | |
ab5bcff6 PK |
9104 | fs/btrfs/delayed-inode.c | 9 +- |
9105 | fs/btrfs/delayed-inode.h | 6 +- | |
9106 | fs/btrfs/file.c | 10 +- | |
9107 | fs/btrfs/inode.c | 14 +- | |
6090327c PK |
9108 | fs/btrfs/super.c | 2 +- |
9109 | fs/btrfs/sysfs.c | 2 +- | |
0986ccbe | 9110 | fs/btrfs/tests/free-space-tests.c | 8 +- |
6090327c PK |
9111 | fs/btrfs/tree-log.h | 2 +- |
9112 | fs/buffer.c | 2 +- | |
9113 | fs/cachefiles/bind.c | 6 +- | |
9114 | fs/cachefiles/daemon.c | 8 +- | |
9115 | fs/cachefiles/internal.h | 12 +- | |
9116 | fs/cachefiles/namei.c | 2 +- | |
9117 | fs/cachefiles/proc.c | 12 +- | |
afe359a8 | 9118 | fs/ceph/dir.c | 12 +- |
6090327c PK |
9119 | fs/ceph/super.c | 4 +- |
9120 | fs/cifs/cifs_debug.c | 12 +- | |
9121 | fs/cifs/cifsfs.c | 8 +- | |
9122 | fs/cifs/cifsglob.h | 54 +- | |
9123 | fs/cifs/file.c | 10 +- | |
9124 | fs/cifs/misc.c | 4 +- | |
9125 | fs/cifs/smb1ops.c | 80 +- | |
9126 | fs/cifs/smb2ops.c | 84 +- | |
9127 | fs/cifs/smb2pdu.c | 3 +- | |
9128 | fs/coda/cache.c | 10 +- | |
9129 | fs/compat.c | 4 +- | |
9130 | fs/compat_binfmt_elf.c | 2 + | |
9131 | fs/compat_ioctl.c | 12 +- | |
9132 | fs/configfs/dir.c | 10 +- | |
9133 | fs/coredump.c | 16 +- | |
e8242a6d | 9134 | fs/dcache.c | 51 +- |
6090327c PK |
9135 | fs/ecryptfs/inode.c | 2 +- |
9136 | fs/ecryptfs/miscdev.c | 2 +- | |
8cf17962 | 9137 | fs/exec.c | 362 +- |
6090327c | 9138 | fs/ext2/xattr.c | 5 +- |
6090327c PK |
9139 | fs/ext4/ext4.h | 20 +- |
9140 | fs/ext4/mballoc.c | 44 +- | |
e8242a6d | 9141 | fs/ext4/resize.c | 16 +- |
6090327c PK |
9142 | fs/ext4/super.c | 4 +- |
9143 | fs/ext4/xattr.c | 5 +- | |
9144 | fs/fhandle.c | 3 +- | |
9145 | fs/file.c | 4 +- | |
9146 | fs/fs_struct.c | 8 +- | |
9147 | fs/fscache/cookie.c | 40 +- | |
afe359a8 | 9148 | fs/fscache/internal.h | 202 +- |
6090327c | 9149 | fs/fscache/object.c | 26 +- |
afe359a8 | 9150 | fs/fscache/operation.c | 38 +- |
6090327c | 9151 | fs/fscache/page.c | 110 +- |
afe359a8 | 9152 | fs/fscache/stats.c | 348 +- |
6090327c PK |
9153 | fs/fuse/cuse.c | 10 +- |
9154 | fs/fuse/dev.c | 4 +- | |
e8242a6d PK |
9155 | fs/gfs2/glock.c | 22 +- |
9156 | fs/gfs2/glops.c | 4 +- | |
9157 | fs/gfs2/quota.c | 6 +- | |
6090327c PK |
9158 | fs/hugetlbfs/inode.c | 13 +- |
9159 | fs/inode.c | 4 +- | |
9160 | fs/jffs2/erase.c | 3 +- | |
9161 | fs/jffs2/wbuf.c | 3 +- | |
9162 | fs/jfs/super.c | 2 +- | |
9163 | fs/kernfs/dir.c | 2 +- | |
e8242a6d | 9164 | fs/kernfs/file.c | 20 +- |
afe359a8 | 9165 | fs/libfs.c | 10 +- |
6090327c | 9166 | fs/lockd/clntproc.c | 4 +- |
afe359a8 | 9167 | fs/namei.c | 16 +- |
6090327c PK |
9168 | fs/namespace.c | 16 +- |
9169 | fs/nfs/callback_xdr.c | 2 +- | |
9170 | fs/nfs/inode.c | 6 +- | |
9171 | fs/nfsd/nfs4proc.c | 2 +- | |
9172 | fs/nfsd/nfs4xdr.c | 2 +- | |
a8b227b4 | 9173 | fs/nfsd/nfscache.c | 11 +- |
6090327c | 9174 | fs/nfsd/vfs.c | 6 +- |
a8b227b4 | 9175 | fs/nls/nls_base.c | 26 +- |
6090327c PK |
9176 | fs/nls/nls_euc-jp.c | 6 +- |
9177 | fs/nls/nls_koi8-ru.c | 6 +- | |
9178 | fs/notify/fanotify/fanotify_user.c | 4 +- | |
9179 | fs/notify/notification.c | 4 +- | |
9180 | fs/ntfs/dir.c | 2 +- | |
6090327c PK |
9181 | fs/ntfs/super.c | 6 +- |
9182 | fs/ocfs2/localalloc.c | 2 +- | |
9183 | fs/ocfs2/ocfs2.h | 10 +- | |
9184 | fs/ocfs2/suballoc.c | 12 +- | |
9185 | fs/ocfs2/super.c | 20 +- | |
da1216b9 | 9186 | fs/pipe.c | 72 +- |
6090327c PK |
9187 | fs/posix_acl.c | 4 +- |
9188 | fs/proc/array.c | 20 + | |
9189 | fs/proc/base.c | 4 +- | |
e8242a6d | 9190 | fs/proc/kcore.c | 34 +- |
6090327c PK |
9191 | fs/proc/meminfo.c | 2 +- |
9192 | fs/proc/nommu.c | 2 +- | |
afe359a8 | 9193 | fs/proc/proc_sysctl.c | 26 +- |
6090327c PK |
9194 | fs/proc/task_mmu.c | 39 +- |
9195 | fs/proc/task_nommu.c | 4 +- | |
9196 | fs/proc/vmcore.c | 16 +- | |
9197 | fs/qnx6/qnx6.h | 4 +- | |
9198 | fs/quota/netlink.c | 4 +- | |
9199 | fs/read_write.c | 2 +- | |
9200 | fs/reiserfs/do_balan.c | 2 +- | |
9201 | fs/reiserfs/procfs.c | 2 +- | |
9202 | fs/reiserfs/reiserfs.h | 4 +- | |
9203 | fs/seq_file.c | 4 +- | |
9204 | fs/splice.c | 43 +- | |
da1216b9 | 9205 | fs/squashfs/xattr.c | 12 +- |
6090327c | 9206 | fs/sysv/sysv.h | 2 +- |
afe359a8 | 9207 | fs/tracefs/inode.c | 8 +- |
6090327c PK |
9208 | fs/udf/misc.c | 2 +- |
9209 | fs/ufs/swab.h | 4 +- | |
ab5bcff6 | 9210 | fs/userfaultfd.c | 2 +- |
6090327c | 9211 | fs/xattr.c | 21 + |
a8b227b4 | 9212 | fs/xfs/libxfs/xfs_bmap.c | 2 +- |
6090327c PK |
9213 | fs/xfs/xfs_dir2_readdir.c | 7 +- |
9214 | fs/xfs/xfs_ioctl.c | 2 +- | |
0986ccbe | 9215 | fs/xfs/xfs_linux.h | 4 +- |
6090327c | 9216 | include/asm-generic/4level-fixup.h | 2 + |
ab5bcff6 | 9217 | include/asm-generic/atomic-long.h | 156 +- |
6090327c | 9218 | include/asm-generic/atomic64.h | 12 + |
6090327c PK |
9219 | include/asm-generic/bitops/__fls.h | 2 +- |
9220 | include/asm-generic/bitops/fls.h | 2 +- | |
9221 | include/asm-generic/bitops/fls64.h | 4 +- | |
da1216b9 | 9222 | include/asm-generic/bug.h | 6 +- |
6090327c PK |
9223 | include/asm-generic/cache.h | 4 +- |
9224 | include/asm-generic/emergency-restart.h | 2 +- | |
9225 | include/asm-generic/kmap_types.h | 4 +- | |
9226 | include/asm-generic/local.h | 13 + | |
9227 | include/asm-generic/pgtable-nopmd.h | 18 +- | |
9228 | include/asm-generic/pgtable-nopud.h | 15 +- | |
9229 | include/asm-generic/pgtable.h | 16 + | |
ab5bcff6 | 9230 | include/asm-generic/sections.h | 1 + |
6090327c | 9231 | include/asm-generic/uaccess.h | 16 + |
ab5bcff6 | 9232 | include/asm-generic/vmlinux.lds.h | 15 +- |
6090327c PK |
9233 | include/crypto/algapi.h | 2 +- |
9234 | include/drm/drmP.h | 16 +- | |
9235 | include/drm/drm_crtc_helper.h | 2 +- | |
afe359a8 | 9236 | include/drm/drm_mm.h | 2 +- |
6090327c | 9237 | include/drm/i915_pciids.h | 2 +- |
afe359a8 | 9238 | include/drm/intel-gtt.h | 4 +- |
6090327c PK |
9239 | include/drm/ttm/ttm_memory.h | 2 +- |
9240 | include/drm/ttm/ttm_page_alloc.h | 1 + | |
9241 | include/keys/asymmetric-subtype.h | 2 +- | |
9242 | include/linux/atmdev.h | 4 +- | |
ab5bcff6 | 9243 | include/linux/atomic.h | 17 +- |
6090327c | 9244 | include/linux/audit.h | 2 +- |
ab5bcff6 | 9245 | include/linux/average.h | 2 +- |
6090327c | 9246 | include/linux/binfmts.h | 3 +- |
8cf17962 | 9247 | include/linux/bitmap.h | 2 +- |
afe359a8 | 9248 | include/linux/bitops.h | 8 +- |
6090327c PK |
9249 | include/linux/blkdev.h | 2 +- |
9250 | include/linux/blktrace_api.h | 2 +- | |
9251 | include/linux/cache.h | 8 + | |
9252 | include/linux/cdrom.h | 1 - | |
9253 | include/linux/cleancache.h | 2 +- | |
9254 | include/linux/clk-provider.h | 1 + | |
da1216b9 | 9255 | include/linux/compat.h | 6 +- |
afe359a8 | 9256 | include/linux/compiler-gcc.h | 28 +- |
ab5bcff6 | 9257 | include/linux/compiler.h | 157 +- |
6090327c PK |
9258 | include/linux/configfs.h | 2 +- |
9259 | include/linux/cpufreq.h | 3 +- | |
9260 | include/linux/cpuidle.h | 5 +- | |
8cf17962 | 9261 | include/linux/cpumask.h | 14 +- |
afe359a8 | 9262 | include/linux/crypto.h | 4 +- |
6090327c | 9263 | include/linux/ctype.h | 2 +- |
e8242a6d | 9264 | include/linux/dcache.h | 4 +- |
6090327c PK |
9265 | include/linux/decompress/mm.h | 2 +- |
9266 | include/linux/devfreq.h | 2 +- | |
9267 | include/linux/device.h | 7 +- | |
9268 | include/linux/dma-mapping.h | 2 +- | |
6090327c PK |
9269 | include/linux/efi.h | 1 + |
9270 | include/linux/elf.h | 2 + | |
9271 | include/linux/err.h | 4 +- | |
9272 | include/linux/extcon.h | 2 +- | |
e8242a6d | 9273 | include/linux/fb.h | 3 +- |
6090327c | 9274 | include/linux/fdtable.h | 2 +- |
da1216b9 | 9275 | include/linux/fs.h | 5 +- |
6090327c | 9276 | include/linux/fs_struct.h | 2 +- |
afe359a8 | 9277 | include/linux/fscache-cache.h | 2 +- |
6090327c PK |
9278 | include/linux/fscache.h | 2 +- |
9279 | include/linux/fsnotify.h | 2 +- | |
9280 | include/linux/genhd.h | 4 +- | |
9281 | include/linux/genl_magic_func.h | 2 +- | |
9282 | include/linux/gfp.h | 12 +- | |
6090327c PK |
9283 | include/linux/highmem.h | 12 + |
9284 | include/linux/hwmon-sysfs.h | 6 +- | |
9285 | include/linux/i2c.h | 1 + | |
6090327c PK |
9286 | include/linux/if_pppox.h | 2 +- |
9287 | include/linux/init.h | 12 +- | |
9288 | include/linux/init_task.h | 7 + | |
9289 | include/linux/interrupt.h | 6 +- | |
9290 | include/linux/iommu.h | 2 +- | |
9291 | include/linux/ioport.h | 2 +- | |
afe359a8 PK |
9292 | include/linux/ipc.h | 2 +- |
9293 | include/linux/irq.h | 5 +- | |
8cf17962 | 9294 | include/linux/irqdesc.h | 2 +- |
afe359a8 | 9295 | include/linux/irqdomain.h | 3 + |
ab5bcff6 | 9296 | include/linux/jiffies.h | 16 +- |
6090327c PK |
9297 | include/linux/key-type.h | 2 +- |
9298 | include/linux/kgdb.h | 6 +- | |
8cf17962 | 9299 | include/linux/kmemleak.h | 4 +- |
6090327c PK |
9300 | include/linux/kobject.h | 3 +- |
9301 | include/linux/kobject_ns.h | 2 +- | |
9302 | include/linux/kref.h | 2 +- | |
6090327c PK |
9303 | include/linux/libata.h | 2 +- |
9304 | include/linux/linkage.h | 1 + | |
9305 | include/linux/list.h | 15 + | |
e8242a6d | 9306 | include/linux/lockref.h | 26 +- |
6090327c PK |
9307 | include/linux/math64.h | 10 +- |
9308 | include/linux/mempolicy.h | 7 + | |
ab5bcff6 | 9309 | include/linux/mm.h | 102 +- |
6090327c PK |
9310 | include/linux/mm_types.h | 20 + |
9311 | include/linux/mmiotrace.h | 4 +- | |
9312 | include/linux/mmzone.h | 2 +- | |
9313 | include/linux/mod_devicetable.h | 4 +- | |
afe359a8 | 9314 | include/linux/module.h | 69 +- |
6090327c PK |
9315 | include/linux/moduleloader.h | 16 + |
9316 | include/linux/moduleparam.h | 4 +- | |
6090327c PK |
9317 | include/linux/net.h | 2 +- |
9318 | include/linux/netdevice.h | 7 +- | |
9319 | include/linux/netfilter.h | 2 +- | |
9320 | include/linux/netfilter/nfnetlink.h | 2 +- | |
a8b227b4 | 9321 | include/linux/nls.h | 4 +- |
6090327c PK |
9322 | include/linux/notifier.h | 3 +- |
9323 | include/linux/oprofile.h | 4 +- | |
9324 | include/linux/padata.h | 2 +- | |
9325 | include/linux/pci_hotplug.h | 3 +- | |
8cf17962 | 9326 | include/linux/percpu.h | 2 +- |
da1216b9 | 9327 | include/linux/perf_event.h | 12 +- |
6090327c PK |
9328 | include/linux/pipe_fs_i.h | 8 +- |
9329 | include/linux/pm.h | 1 + | |
9330 | include/linux/pm_domain.h | 4 +- | |
9331 | include/linux/pm_runtime.h | 2 +- | |
9332 | include/linux/pnp.h | 2 +- | |
9333 | include/linux/poison.h | 4 +- | |
9334 | include/linux/power/smartreflex.h | 2 +- | |
9335 | include/linux/ppp-comp.h | 2 +- | |
9336 | include/linux/preempt.h | 21 + | |
9337 | include/linux/proc_ns.h | 2 +- | |
ab5bcff6 | 9338 | include/linux/psci.h | 2 +- |
6090327c | 9339 | include/linux/quota.h | 2 +- |
ab5bcff6 | 9340 | include/linux/random.h | 19 +- |
afe359a8 | 9341 | include/linux/rculist.h | 16 + |
6090327c PK |
9342 | include/linux/reboot.h | 14 +- |
9343 | include/linux/regset.h | 3 +- | |
9344 | include/linux/relay.h | 2 +- | |
9345 | include/linux/rio.h | 2 +- | |
9346 | include/linux/rmap.h | 4 +- | |
ab5bcff6 | 9347 | include/linux/sched.h | 72 +- |
6090327c | 9348 | include/linux/sched/sysctl.h | 1 + |
6090327c PK |
9349 | include/linux/semaphore.h | 2 +- |
9350 | include/linux/seq_file.h | 1 + | |
9351 | include/linux/signal.h | 2 +- | |
ab5bcff6 | 9352 | include/linux/skbuff.h | 12 +- |
da1216b9 | 9353 | include/linux/slab.h | 47 +- |
6090327c PK |
9354 | include/linux/slab_def.h | 14 +- |
9355 | include/linux/slub_def.h | 2 +- | |
9356 | include/linux/smp.h | 2 + | |
9357 | include/linux/sock_diag.h | 2 +- | |
9358 | include/linux/sonet.h | 2 +- | |
9359 | include/linux/sunrpc/addr.h | 8 +- | |
9360 | include/linux/sunrpc/clnt.h | 2 +- | |
9361 | include/linux/sunrpc/svc.h | 2 +- | |
9362 | include/linux/sunrpc/svc_rdma.h | 18 +- | |
9363 | include/linux/sunrpc/svcauth.h | 2 +- | |
ab5bcff6 | 9364 | include/linux/swapops.h | 10 +- |
6090327c | 9365 | include/linux/swiotlb.h | 3 +- |
da1216b9 | 9366 | include/linux/syscalls.h | 21 +- |
6090327c | 9367 | include/linux/syscore_ops.h | 2 +- |
a8b227b4 | 9368 | include/linux/sysctl.h | 3 +- |
6090327c PK |
9369 | include/linux/sysfs.h | 9 +- |
9370 | include/linux/sysrq.h | 3 +- | |
afe359a8 | 9371 | include/linux/tcp.h | 14 +- |
6090327c PK |
9372 | include/linux/thread_info.h | 7 + |
9373 | include/linux/tty.h | 4 +- | |
9374 | include/linux/tty_driver.h | 2 +- | |
9375 | include/linux/tty_ldisc.h | 2 +- | |
9376 | include/linux/types.h | 16 + | |
9377 | include/linux/uaccess.h | 6 +- | |
0986ccbe | 9378 | include/linux/uio_driver.h | 2 +- |
6090327c | 9379 | include/linux/unaligned/access_ok.h | 24 +- |
ab5bcff6 | 9380 | include/linux/usb.h | 12 +- |
afe359a8 | 9381 | include/linux/usb/hcd.h | 1 + |
6090327c PK |
9382 | include/linux/usb/renesas_usbhs.h | 2 +- |
9383 | include/linux/vermagic.h | 21 +- | |
9384 | include/linux/vga_switcheroo.h | 8 +- | |
9385 | include/linux/vmalloc.h | 7 +- | |
9386 | include/linux/vmstat.h | 24 +- | |
9387 | include/linux/xattr.h | 5 +- | |
9388 | include/linux/zlib.h | 3 +- | |
9389 | include/media/v4l2-dev.h | 2 +- | |
9390 | include/media/v4l2-device.h | 2 +- | |
9391 | include/net/9p/transport.h | 2 +- | |
9392 | include/net/bluetooth/l2cap.h | 2 +- | |
8cf17962 | 9393 | include/net/bonding.h | 2 +- |
6090327c PK |
9394 | include/net/caif/cfctrl.h | 6 +- |
9395 | include/net/flow.h | 2 +- | |
9396 | include/net/genetlink.h | 2 +- | |
9397 | include/net/gro_cells.h | 2 +- | |
9398 | include/net/inet_connection_sock.h | 2 +- | |
afe359a8 | 9399 | include/net/inet_sock.h | 2 +- |
6090327c PK |
9400 | include/net/inetpeer.h | 2 +- |
9401 | include/net/ip_fib.h | 2 +- | |
9402 | include/net/ip_vs.h | 8 +- | |
ab5bcff6 | 9403 | include/net/ipv6.h | 2 +- |
6090327c PK |
9404 | include/net/irda/ircomm_tty.h | 1 + |
9405 | include/net/iucv/af_iucv.h | 2 +- | |
9406 | include/net/llc_c_ac.h | 2 +- | |
9407 | include/net/llc_c_ev.h | 4 +- | |
9408 | include/net/llc_c_st.h | 2 +- | |
9409 | include/net/llc_s_ac.h | 2 +- | |
9410 | include/net/llc_s_st.h | 2 +- | |
ab5bcff6 | 9411 | include/net/mac80211.h | 4 +- |
6090327c | 9412 | include/net/neighbour.h | 2 +- |
afe359a8 | 9413 | include/net/net_namespace.h | 18 +- |
6090327c PK |
9414 | include/net/netlink.h | 2 +- |
9415 | include/net/netns/conntrack.h | 6 +- | |
9416 | include/net/netns/ipv4.h | 4 +- | |
9417 | include/net/netns/ipv6.h | 4 +- | |
9418 | include/net/netns/xfrm.h | 2 +- | |
9419 | include/net/ping.h | 2 +- | |
9420 | include/net/protocol.h | 4 +- | |
9421 | include/net/rtnetlink.h | 2 +- | |
9422 | include/net/sctp/checksum.h | 4 +- | |
9423 | include/net/sctp/sm.h | 4 +- | |
9424 | include/net/sctp/structs.h | 2 +- | |
afe359a8 | 9425 | include/net/sock.h | 12 +- |
6090327c PK |
9426 | include/net/tcp.h | 8 +- |
9427 | include/net/xfrm.h | 13 +- | |
9428 | include/rdma/iw_cm.h | 2 +- | |
9429 | include/scsi/libfc.h | 3 +- | |
9430 | include/scsi/scsi_device.h | 6 +- | |
da1216b9 | 9431 | include/scsi/scsi_driver.h | 2 +- |
6090327c | 9432 | include/scsi/scsi_transport_fc.h | 3 +- |
afe359a8 | 9433 | include/scsi/sg.h | 2 +- |
6090327c PK |
9434 | include/sound/compress_driver.h | 2 +- |
9435 | include/sound/soc.h | 4 +- | |
6090327c PK |
9436 | include/trace/events/irq.h | 4 +- |
9437 | include/uapi/linux/a.out.h | 8 + | |
9438 | include/uapi/linux/bcache.h | 5 +- | |
9439 | include/uapi/linux/byteorder/little_endian.h | 28 +- | |
afe359a8 | 9440 | include/uapi/linux/connector.h | 2 +- |
6090327c PK |
9441 | include/uapi/linux/elf.h | 28 + |
9442 | include/uapi/linux/screen_info.h | 3 +- | |
9443 | include/uapi/linux/swab.h | 6 +- | |
6090327c PK |
9444 | include/uapi/linux/xattr.h | 4 + |
9445 | include/video/udlfb.h | 8 +- | |
9446 | include/video/uvesafb.h | 1 + | |
9447 | init/Kconfig | 2 +- | |
9448 | init/Makefile | 3 + | |
9449 | init/do_mounts.c | 14 +- | |
9450 | init/do_mounts.h | 8 +- | |
9451 | init/do_mounts_initrd.c | 30 +- | |
9452 | init/do_mounts_md.c | 6 +- | |
9453 | init/init_task.c | 4 + | |
a8b227b4 | 9454 | init/initramfs.c | 38 +- |
afe359a8 | 9455 | init/main.c | 30 +- |
da1216b9 | 9456 | ipc/compat.c | 4 +- |
8cf17962 | 9457 | ipc/ipc_sysctl.c | 8 +- |
6090327c | 9458 | ipc/mq_sysctl.c | 4 +- |
da1216b9 | 9459 | ipc/sem.c | 4 +- |
6090327c | 9460 | ipc/shm.c | 6 + |
6090327c PK |
9461 | kernel/audit.c | 8 +- |
9462 | kernel/auditsc.c | 4 +- | |
8cf17962 | 9463 | kernel/bpf/core.c | 7 +- |
6090327c PK |
9464 | kernel/capability.c | 3 + |
9465 | kernel/compat.c | 38 +- | |
9466 | kernel/debug/debug_core.c | 16 +- | |
9467 | kernel/debug/kdb/kdb_main.c | 4 +- | |
da1216b9 | 9468 | kernel/events/core.c | 26 +- |
6090327c PK |
9469 | kernel/events/internal.h | 10 +- |
9470 | kernel/events/uprobes.c | 2 +- | |
9471 | kernel/exit.c | 2 +- | |
ab5bcff6 | 9472 | kernel/fork.c | 167 +- |
6090327c PK |
9473 | kernel/futex.c | 11 +- |
9474 | kernel/futex_compat.c | 2 +- | |
9475 | kernel/gcov/base.c | 7 +- | |
8cf17962 | 9476 | kernel/irq/manage.c | 2 +- |
ab5bcff6 | 9477 | kernel/irq/msi.c | 19 +- |
8cf17962 | 9478 | kernel/irq/spurious.c | 2 +- |
6090327c | 9479 | kernel/jump_label.c | 5 + |
0986ccbe | 9480 | kernel/kallsyms.c | 37 +- |
6090327c PK |
9481 | kernel/kexec.c | 3 +- |
9482 | kernel/kmod.c | 8 +- | |
9483 | kernel/kprobes.c | 4 +- | |
9484 | kernel/ksysfs.c | 2 +- | |
9485 | kernel/locking/lockdep.c | 7 +- | |
6090327c PK |
9486 | kernel/locking/mutex-debug.c | 12 +- |
9487 | kernel/locking/mutex-debug.h | 4 +- | |
9488 | kernel/locking/mutex.c | 6 +- | |
afe359a8 | 9489 | kernel/module.c | 422 +- |
6090327c PK |
9490 | kernel/notifier.c | 17 +- |
9491 | kernel/padata.c | 4 +- | |
9492 | kernel/panic.c | 5 +- | |
9493 | kernel/pid.c | 2 +- | |
9494 | kernel/pid_namespace.c | 2 +- | |
6090327c PK |
9495 | kernel/power/process.c | 12 +- |
9496 | kernel/profile.c | 14 +- | |
9497 | kernel/ptrace.c | 8 +- | |
0986ccbe | 9498 | kernel/rcu/rcutorture.c | 60 +- |
6090327c | 9499 | kernel/rcu/tiny.c | 4 +- |
ab5bcff6 PK |
9500 | kernel/rcu/tree.c | 44 +- |
9501 | kernel/rcu/tree.h | 14 +- | |
afe359a8 | 9502 | kernel/rcu/tree_plugin.h | 14 +- |
ab5bcff6 | 9503 | kernel/rcu/tree_trace.c | 12 +- |
6090327c | 9504 | kernel/sched/auto_group.c | 4 +- |
6090327c | 9505 | kernel/sched/core.c | 45 +- |
afe359a8 | 9506 | kernel/sched/fair.c | 2 +- |
6090327c PK |
9507 | kernel/sched/sched.h | 2 +- |
9508 | kernel/signal.c | 12 +- | |
9509 | kernel/smpboot.c | 4 +- | |
9510 | kernel/softirq.c | 12 +- | |
9511 | kernel/sys.c | 10 +- | |
9512 | kernel/sysctl.c | 34 +- | |
9513 | kernel/time/alarmtimer.c | 2 +- | |
a8b227b4 PK |
9514 | kernel/time/posix-cpu-timers.c | 4 +- |
9515 | kernel/time/posix-timers.c | 24 +- | |
ab5bcff6 | 9516 | kernel/time/timer.c | 2 +- |
6090327c | 9517 | kernel/time/timer_stats.c | 10 +- |
6090327c | 9518 | kernel/trace/blktrace.c | 6 +- |
0986ccbe | 9519 | kernel/trace/ftrace.c | 15 +- |
e8242a6d | 9520 | kernel/trace/ring_buffer.c | 96 +- |
6090327c PK |
9521 | kernel/trace/trace.c | 2 +- |
9522 | kernel/trace/trace.h | 2 +- | |
9523 | kernel/trace/trace_clock.c | 4 +- | |
9524 | kernel/trace/trace_events.c | 1 - | |
0986ccbe | 9525 | kernel/trace/trace_functions_graph.c | 4 +- |
6090327c | 9526 | kernel/trace/trace_mmiotrace.c | 8 +- |
a8b227b4 PK |
9527 | kernel/trace/trace_output.c | 10 +- |
9528 | kernel/trace/trace_seq.c | 2 +- | |
6090327c PK |
9529 | kernel/trace/trace_stack.c | 2 +- |
9530 | kernel/user_namespace.c | 2 +- | |
9531 | kernel/utsname_sysctl.c | 2 +- | |
9532 | kernel/watchdog.c | 2 +- | |
ab5bcff6 | 9533 | kernel/workqueue.c | 2 +- |
6090327c PK |
9534 | lib/Kconfig.debug | 8 +- |
9535 | lib/Makefile | 2 +- | |
ab5bcff6 | 9536 | lib/bitmap.c | 8 +- |
6090327c PK |
9537 | lib/bug.c | 2 + |
9538 | lib/debugobjects.c | 2 +- | |
da1216b9 PK |
9539 | lib/decompress_bunzip2.c | 3 +- |
9540 | lib/decompress_unlzma.c | 4 +- | |
6090327c PK |
9541 | lib/div64.c | 4 +- |
9542 | lib/dma-debug.c | 4 +- | |
6090327c PK |
9543 | lib/inflate.c | 2 +- |
9544 | lib/ioremap.c | 4 +- | |
9545 | lib/kobject.c | 4 +- | |
9546 | lib/list_debug.c | 126 +- | |
e8242a6d | 9547 | lib/lockref.c | 44 +- |
6090327c PK |
9548 | lib/percpu-refcount.c | 2 +- |
9549 | lib/radix-tree.c | 2 +- | |
9550 | lib/random32.c | 2 +- | |
9551 | lib/show_mem.c | 2 +- | |
9552 | lib/strncpy_from_user.c | 2 +- | |
9553 | lib/strnlen_user.c | 2 +- | |
9554 | lib/swiotlb.c | 2 +- | |
9555 | lib/usercopy.c | 6 + | |
9556 | lib/vsprintf.c | 12 +- | |
9557 | mm/Kconfig | 6 +- | |
9558 | mm/backing-dev.c | 4 +- | |
ab5bcff6 | 9559 | mm/debug.c | 3 + |
6090327c | 9560 | mm/filemap.c | 2 +- |
6090327c | 9561 | mm/gup.c | 13 +- |
ab5bcff6 | 9562 | mm/highmem.c | 6 +- |
6090327c | 9563 | mm/hugetlb.c | 70 +- |
ab5bcff6 | 9564 | mm/internal.h | 1 + |
6090327c | 9565 | mm/maccess.c | 4 +- |
e8242a6d | 9566 | mm/madvise.c | 37 + |
ab5bcff6 PK |
9567 | mm/memory-failure.c | 6 +- |
9568 | mm/memory.c | 424 +- | |
6090327c PK |
9569 | mm/mempolicy.c | 25 + |
9570 | mm/mlock.c | 15 +- | |
e8242a6d | 9571 | mm/mm_init.c | 2 +- |
da1216b9 | 9572 | mm/mmap.c | 582 +- |
0986ccbe | 9573 | mm/mprotect.c | 137 +- |
ab5bcff6 | 9574 | mm/mremap.c | 39 +- |
6090327c PK |
9575 | mm/nommu.c | 21 +- |
9576 | mm/page-writeback.c | 2 +- | |
afe359a8 | 9577 | mm/page_alloc.c | 49 +- |
6090327c PK |
9578 | mm/percpu.c | 2 +- |
9579 | mm/process_vm_access.c | 14 +- | |
8cf17962 | 9580 | mm/rmap.c | 45 +- |
6090327c | 9581 | mm/shmem.c | 19 +- |
8cf17962 | 9582 | mm/slab.c | 109 +- |
0986ccbe | 9583 | mm/slab.h | 22 +- |
8cf17962 PK |
9584 | mm/slab_common.c | 86 +- |
9585 | mm/slob.c | 218 +- | |
afe359a8 | 9586 | mm/slub.c | 102 +- |
6090327c PK |
9587 | mm/sparse-vmemmap.c | 4 +- |
9588 | mm/sparse.c | 2 +- | |
da1216b9 | 9589 | mm/swap.c | 2 + |
6090327c PK |
9590 | mm/swapfile.c | 12 +- |
9591 | mm/util.c | 6 + | |
ab5bcff6 | 9592 | mm/vmalloc.c | 114 +- |
6090327c PK |
9593 | mm/vmstat.c | 12 +- |
9594 | net/8021q/vlan.c | 5 +- | |
0986ccbe | 9595 | net/8021q/vlan_netlink.c | 2 +- |
6090327c PK |
9596 | net/9p/mod.c | 4 +- |
9597 | net/9p/trans_fd.c | 2 +- | |
9598 | net/atm/atm_misc.c | 8 +- | |
9599 | net/atm/lec.h | 2 +- | |
9600 | net/atm/proc.c | 6 +- | |
9601 | net/atm/resources.c | 4 +- | |
9602 | net/ax25/sysctl_net_ax25.c | 2 +- | |
9603 | net/batman-adv/bat_iv_ogm.c | 8 +- | |
9604 | net/batman-adv/fragmentation.c | 2 +- | |
0986ccbe | 9605 | net/batman-adv/soft-interface.c | 8 +- |
6090327c PK |
9606 | net/batman-adv/types.h | 6 +- |
9607 | net/bluetooth/hci_sock.c | 2 +- | |
9608 | net/bluetooth/l2cap_core.c | 6 +- | |
9609 | net/bluetooth/l2cap_sock.c | 12 +- | |
9610 | net/bluetooth/rfcomm/sock.c | 4 +- | |
9611 | net/bluetooth/rfcomm/tty.c | 4 +- | |
0986ccbe | 9612 | net/bridge/br_netlink.c | 2 +- |
6090327c PK |
9613 | net/bridge/netfilter/ebtables.c | 6 +- |
9614 | net/caif/cfctrl.c | 11 +- | |
0986ccbe | 9615 | net/caif/chnl_net.c | 2 +- |
6090327c PK |
9616 | net/can/af_can.c | 2 +- |
9617 | net/can/gw.c | 6 +- | |
9618 | net/ceph/messenger.c | 4 +- | |
8cf17962 | 9619 | net/compat.c | 24 +- |
6090327c | 9620 | net/core/datagram.c | 2 +- |
da1216b9 | 9621 | net/core/dev.c | 16 +- |
6090327c | 9622 | net/core/filter.c | 2 +- |
e8242a6d | 9623 | net/core/flow.c | 6 +- |
6090327c PK |
9624 | net/core/neighbour.c | 4 +- |
9625 | net/core/net-sysfs.c | 2 +- | |
9626 | net/core/net_namespace.c | 8 +- | |
9627 | net/core/netpoll.c | 4 +- | |
9628 | net/core/rtnetlink.c | 15 +- | |
ab5bcff6 | 9629 | net/core/scm.c | 14 +- |
6090327c | 9630 | net/core/skbuff.c | 8 +- |
afe359a8 PK |
9631 | net/core/sock.c | 28 +- |
9632 | net/core/sock_diag.c | 15 +- | |
8cf17962 | 9633 | net/core/sysctl_net_core.c | 22 +- |
6090327c PK |
9634 | net/decnet/af_decnet.c | 1 + |
9635 | net/decnet/sysctl_net_decnet.c | 4 +- | |
afe359a8 | 9636 | net/dsa/dsa.c | 2 +- |
0986ccbe | 9637 | net/hsr/hsr_netlink.c | 2 +- |
e8242a6d PK |
9638 | net/ieee802154/6lowpan/core.c | 2 +- |
9639 | net/ieee802154/6lowpan/reassembly.c | 14 +- | |
0986ccbe | 9640 | net/ipv4/af_inet.c | 2 +- |
6090327c PK |
9641 | net/ipv4/devinet.c | 18 +- |
9642 | net/ipv4/fib_frontend.c | 6 +- | |
9643 | net/ipv4/fib_semantics.c | 2 +- | |
afe359a8 PK |
9644 | net/ipv4/inet_connection_sock.c | 4 +- |
9645 | net/ipv4/inet_timewait_sock.c | 2 +- | |
6090327c PK |
9646 | net/ipv4/inetpeer.c | 2 +- |
9647 | net/ipv4/ip_fragment.c | 15 +- | |
9648 | net/ipv4/ip_gre.c | 6 +- | |
9649 | net/ipv4/ip_sockglue.c | 2 +- | |
9650 | net/ipv4/ip_vti.c | 4 +- | |
9651 | net/ipv4/ipconfig.c | 6 +- | |
9652 | net/ipv4/ipip.c | 4 +- | |
9653 | net/ipv4/netfilter/arp_tables.c | 12 +- | |
9654 | net/ipv4/netfilter/ip_tables.c | 12 +- | |
0986ccbe | 9655 | net/ipv4/ping.c | 14 +- |
6090327c PK |
9656 | net/ipv4/raw.c | 14 +- |
9657 | net/ipv4/route.c | 32 +- | |
9658 | net/ipv4/sysctl_net_ipv4.c | 22 +- | |
afe359a8 | 9659 | net/ipv4/tcp_input.c | 6 +- |
6090327c PK |
9660 | net/ipv4/tcp_probe.c | 2 +- |
9661 | net/ipv4/udp.c | 10 +- | |
9662 | net/ipv4/xfrm4_policy.c | 18 +- | |
ab5bcff6 | 9663 | net/ipv6/addrconf.c | 18 +- |
6090327c PK |
9664 | net/ipv6/af_inet6.c | 2 +- |
9665 | net/ipv6/datagram.c | 2 +- | |
9666 | net/ipv6/icmp.c | 2 +- | |
0986ccbe | 9667 | net/ipv6/ip6_fib.c | 4 +- |
6090327c PK |
9668 | net/ipv6/ip6_gre.c | 10 +- |
9669 | net/ipv6/ip6_tunnel.c | 4 +- | |
9670 | net/ipv6/ip6_vti.c | 4 +- | |
9671 | net/ipv6/ipv6_sockglue.c | 2 +- | |
9672 | net/ipv6/netfilter/ip6_tables.c | 12 +- | |
9673 | net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +- | |
9674 | net/ipv6/ping.c | 33 +- | |
9675 | net/ipv6/raw.c | 17 +- | |
9676 | net/ipv6/reassembly.c | 13 +- | |
9677 | net/ipv6/route.c | 2 +- | |
9678 | net/ipv6/sit.c | 4 +- | |
9679 | net/ipv6/sysctl_net_ipv6.c | 2 +- | |
9680 | net/ipv6/udp.c | 6 +- | |
ab5bcff6 | 9681 | net/ipv6/xfrm6_policy.c | 17 +- |
6090327c PK |
9682 | net/irda/ircomm/ircomm_tty.c | 18 +- |
9683 | net/iucv/af_iucv.c | 4 +- | |
9684 | net/iucv/iucv.c | 2 +- | |
9685 | net/key/af_key.c | 4 +- | |
9686 | net/l2tp/l2tp_eth.c | 38 +- | |
e8242a6d PK |
9687 | net/l2tp/l2tp_ip.c | 2 +- |
9688 | net/l2tp/l2tp_ip6.c | 2 +- | |
6090327c PK |
9689 | net/mac80211/cfg.c | 8 +- |
9690 | net/mac80211/ieee80211_i.h | 3 +- | |
afe359a8 | 9691 | net/mac80211/iface.c | 20 +- |
6090327c | 9692 | net/mac80211/main.c | 2 +- |
da1216b9 | 9693 | net/mac80211/pm.c | 4 +- |
6090327c | 9694 | net/mac80211/rate.c | 2 +- |
da1216b9 | 9695 | net/mac80211/sta_info.c | 2 +- |
e8242a6d | 9696 | net/mac80211/util.c | 8 +- |
da1216b9 | 9697 | net/mpls/af_mpls.c | 6 +- |
6090327c PK |
9698 | net/netfilter/ipset/ip_set_core.c | 2 +- |
9699 | net/netfilter/ipvs/ip_vs_conn.c | 6 +- | |
9700 | net/netfilter/ipvs/ip_vs_core.c | 4 +- | |
9701 | net/netfilter/ipvs/ip_vs_ctl.c | 14 +- | |
9702 | net/netfilter/ipvs/ip_vs_lblc.c | 2 +- | |
9703 | net/netfilter/ipvs/ip_vs_lblcr.c | 2 +- | |
9704 | net/netfilter/ipvs/ip_vs_sync.c | 6 +- | |
9705 | net/netfilter/ipvs/ip_vs_xmit.c | 4 +- | |
9706 | net/netfilter/nf_conntrack_acct.c | 2 +- | |
9707 | net/netfilter/nf_conntrack_ecache.c | 2 +- | |
9708 | net/netfilter/nf_conntrack_helper.c | 2 +- | |
9709 | net/netfilter/nf_conntrack_proto.c | 2 +- | |
9710 | net/netfilter/nf_conntrack_standalone.c | 2 +- | |
9711 | net/netfilter/nf_conntrack_timestamp.c | 2 +- | |
9712 | net/netfilter/nf_log.c | 10 +- | |
9713 | net/netfilter/nf_sockopt.c | 4 +- | |
9714 | net/netfilter/nfnetlink_log.c | 4 +- | |
e8242a6d | 9715 | net/netfilter/nft_compat.c | 9 +- |
6090327c PK |
9716 | net/netfilter/xt_statistic.c | 8 +- |
9717 | net/netlink/af_netlink.c | 4 +- | |
0986ccbe | 9718 | net/openvswitch/vport-internal_dev.c | 2 +- |
da1216b9 | 9719 | net/packet/af_packet.c | 8 +- |
6090327c PK |
9720 | net/phonet/pep.c | 6 +- |
9721 | net/phonet/socket.c | 2 +- | |
9722 | net/phonet/sysctl.c | 2 +- | |
9723 | net/rds/cong.c | 6 +- | |
9724 | net/rds/ib.h | 2 +- | |
9725 | net/rds/ib_cm.c | 2 +- | |
9726 | net/rds/ib_recv.c | 4 +- | |
9727 | net/rds/iw.h | 2 +- | |
9728 | net/rds/iw_cm.c | 2 +- | |
9729 | net/rds/iw_recv.c | 4 +- | |
9730 | net/rds/rds.h | 2 +- | |
9731 | net/rds/tcp.c | 2 +- | |
9732 | net/rds/tcp_send.c | 2 +- | |
9733 | net/rxrpc/af_rxrpc.c | 2 +- | |
9734 | net/rxrpc/ar-ack.c | 14 +- | |
9735 | net/rxrpc/ar-call.c | 2 +- | |
9736 | net/rxrpc/ar-connection.c | 2 +- | |
9737 | net/rxrpc/ar-connevent.c | 2 +- | |
9738 | net/rxrpc/ar-input.c | 4 +- | |
9739 | net/rxrpc/ar-internal.h | 8 +- | |
9740 | net/rxrpc/ar-local.c | 2 +- | |
9741 | net/rxrpc/ar-output.c | 4 +- | |
9742 | net/rxrpc/ar-peer.c | 2 +- | |
9743 | net/rxrpc/ar-proc.c | 4 +- | |
9744 | net/rxrpc/ar-transport.c | 2 +- | |
9745 | net/rxrpc/rxkad.c | 4 +- | |
9746 | net/sched/sch_generic.c | 4 +- | |
9747 | net/sctp/ipv6.c | 6 +- | |
9748 | net/sctp/protocol.c | 10 +- | |
9749 | net/sctp/sm_sideeffect.c | 2 +- | |
9750 | net/sctp/socket.c | 21 +- | |
9751 | net/sctp/sysctl.c | 10 +- | |
8cf17962 | 9752 | net/socket.c | 18 +- |
6090327c PK |
9753 | net/sunrpc/auth_gss/svcauth_gss.c | 4 +- |
9754 | net/sunrpc/clnt.c | 4 +- | |
9755 | net/sunrpc/sched.c | 4 +- | |
9756 | net/sunrpc/svc.c | 4 +- | |
ab5bcff6 | 9757 | net/sunrpc/svcauth_unix.c | 2 +- |
6090327c PK |
9758 | net/sunrpc/xprtrdma/svc_rdma.c | 38 +- |
9759 | net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +- | |
9760 | net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +- | |
9761 | net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +- | |
e8242a6d | 9762 | net/tipc/netlink_compat.c | 12 +- |
6090327c | 9763 | net/tipc/subscr.c | 2 +- |
8cf17962 | 9764 | net/unix/af_unix.c | 7 +- |
6090327c PK |
9765 | net/unix/sysctl_net_unix.c | 2 +- |
9766 | net/wireless/wext-core.c | 19 +- | |
9767 | net/xfrm/xfrm_policy.c | 16 +- | |
9768 | net/xfrm/xfrm_state.c | 33 +- | |
9769 | net/xfrm/xfrm_sysctl.c | 2 +- | |
8cf17962 | 9770 | scripts/Kbuild.include | 2 +- |
6090327c PK |
9771 | scripts/Makefile.build | 2 +- |
9772 | scripts/Makefile.clean | 3 +- | |
ab5bcff6 | 9773 | scripts/Makefile.host | 69 +- |
6090327c | 9774 | scripts/basic/fixdep.c | 12 +- |
afe359a8 PK |
9775 | scripts/dtc/checks.c | 14 +- |
9776 | scripts/dtc/data.c | 6 +- | |
9777 | scripts/dtc/flattree.c | 8 +- | |
9778 | scripts/dtc/livetree.c | 4 +- | |
a8b227b4 | 9779 | scripts/gcc-plugin.sh | 51 + |
6090327c | 9780 | scripts/headers_install.sh | 1 + |
afe359a8 PK |
9781 | scripts/kallsyms.c | 4 +- |
9782 | scripts/kconfig/lkc.h | 5 +- | |
9783 | scripts/kconfig/menu.c | 2 +- | |
9784 | scripts/kconfig/symbol.c | 6 +- | |
6090327c PK |
9785 | scripts/link-vmlinux.sh | 2 +- |
9786 | scripts/mod/file2alias.c | 14 +- | |
9787 | scripts/mod/modpost.c | 25 +- | |
9788 | scripts/mod/modpost.h | 6 +- | |
9789 | scripts/mod/sumversion.c | 2 +- | |
9790 | scripts/module-common.lds | 4 + | |
9791 | scripts/package/builddeb | 1 + | |
9792 | scripts/pnmtologo.c | 6 +- | |
9793 | scripts/sortextable.h | 6 +- | |
a8b227b4 | 9794 | scripts/tags.sh | 2 +- |
ab5bcff6 | 9795 | security/Kconfig | 692 +- |
6090327c PK |
9796 | security/integrity/ima/ima.h | 4 +- |
9797 | security/integrity/ima/ima_api.c | 2 +- | |
9798 | security/integrity/ima/ima_fs.c | 4 +- | |
9799 | security/integrity/ima/ima_queue.c | 2 +- | |
6090327c | 9800 | security/keys/key.c | 18 +- |
6090327c | 9801 | security/selinux/avc.c | 6 +- |
6090327c | 9802 | security/selinux/include/xfrm.h | 2 +- |
afe359a8 | 9803 | security/yama/yama_lsm.c | 2 +- |
6090327c PK |
9804 | sound/aoa/codecs/onyx.c | 7 +- |
9805 | sound/aoa/codecs/onyx.h | 1 + | |
9806 | sound/core/oss/pcm_oss.c | 18 +- | |
9807 | sound/core/pcm_compat.c | 2 +- | |
9808 | sound/core/pcm_native.c | 4 +- | |
6090327c PK |
9809 | sound/core/sound.c | 2 +- |
9810 | sound/drivers/mts64.c | 14 +- | |
9811 | sound/drivers/opl4/opl4_lib.c | 2 +- | |
9812 | sound/drivers/portman2x4.c | 3 +- | |
9813 | sound/firewire/amdtp.c | 4 +- | |
9814 | sound/firewire/amdtp.h | 4 +- | |
9815 | sound/firewire/isight.c | 10 +- | |
9816 | sound/firewire/scs1x.c | 8 +- | |
9817 | sound/oss/sb_audio.c | 2 +- | |
9818 | sound/oss/swarm_cs4297a.c | 6 +- | |
8cf17962 | 9819 | sound/pci/hda/hda_codec.c | 2 +- |
6090327c PK |
9820 | sound/pci/ymfpci/ymfpci.h | 2 +- |
9821 | sound/pci/ymfpci/ymfpci_main.c | 12 +- | |
ab5bcff6 | 9822 | sound/soc/codecs/sti-sas.c | 10 +- |
8cf17962 | 9823 | sound/soc/soc-ac97.c | 6 +- |
e8242a6d | 9824 | sound/soc/xtensa/xtfpga-i2s.c | 2 +- |
da1216b9 | 9825 | tools/gcc/Makefile | 42 + |
6090327c | 9826 | tools/gcc/checker_plugin.c | 150 + |
e8242a6d | 9827 | tools/gcc/colorize_plugin.c | 215 + |
ab5bcff6 PK |
9828 | tools/gcc/constify_plugin.c | 571 + |
9829 | tools/gcc/gcc-common.h | 812 + | |
9830 | tools/gcc/initify_plugin.c | 552 + | |
e8242a6d | 9831 | tools/gcc/kallocstat_plugin.c | 188 + |
ab5bcff6 | 9832 | tools/gcc/kernexec_plugin.c | 549 + |
afe359a8 PK |
9833 | tools/gcc/latent_entropy_plugin.c | 470 + |
9834 | tools/gcc/size_overflow_plugin/.gitignore | 2 + | |
ab5bcff6 PK |
9835 | tools/gcc/size_overflow_plugin/Makefile | 28 + |
9836 | .../disable_size_overflow_hash.data |12422 ++++++++++++ | |
afe359a8 | 9837 | .../generate_size_overflow_hash.sh | 103 + |
ab5bcff6 PK |
9838 | .../insert_size_overflow_asm.c | 416 + |
9839 | .../size_overflow_plugin/intentional_overflow.c | 1010 + | |
8cf17962 | 9840 | .../size_overflow_plugin/remove_unnecessary_dup.c | 137 + |
ab5bcff6 PK |
9841 | tools/gcc/size_overflow_plugin/size_overflow.h | 323 + |
9842 | .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 + | |
9843 | .../size_overflow_plugin/size_overflow_hash.data |20735 ++++++++++++++++++++ | |
6090327c | 9844 | .../size_overflow_hash_aux.data | 92 + |
ab5bcff6 | 9845 | tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 ++ |
afe359a8 PK |
9846 | .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 + |
9847 | .../size_overflow_plugin/size_overflow_plugin.c | 318 + | |
ab5bcff6 PK |
9848 | .../size_overflow_plugin_hash.c | 352 + |
9849 | .../size_overflow_plugin/size_overflow_transform.c | 749 + | |
9850 | .../size_overflow_transform_core.c | 1010 + | |
afe359a8 | 9851 | tools/gcc/stackleak_plugin.c | 436 + |
e8242a6d | 9852 | tools/gcc/structleak_plugin.c | 287 + |
6090327c PK |
9853 | tools/include/linux/compiler.h | 8 + |
9854 | tools/lib/api/Makefile | 2 +- | |
9855 | tools/perf/util/include/asm/alternative-asm.h | 3 + | |
9856 | tools/virtio/linux/uaccess.h | 2 +- | |
ab5bcff6 PK |
9857 | virt/kvm/kvm_main.c | 42 +- |
9858 | 1944 files changed, 66925 insertions(+), 8949 deletions(-) |