]> git.ipfire.org Git - thirdparty/grsecurity-scrape.git/blame - test/changelog-test.txt
projects / thirdparty / grsecurity-scrape.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
Auto commit, 1 new patch{es}.
[thirdparty/grsecurity-scrape.git] / test / changelog-test.txt
CommitLineData
762f0ceb
PK		 1commit 95b5dcb3c01958502af00b0bc0da1d906aae11a2
2Merge: 438be0b 256aeaf
3Author: Brad Spengler <spender@grsecurity.net>
4Date: Sun Feb 7 08:29:33 2016 -0500
5
6 Merge branch 'pax-test' into grsec-test
7
8commit 256aeaf87c22de8edf1f03682a572c590ae07771
9Author: Brad Spengler <spender@grsecurity.net>
10Date: Sun Feb 7 08:29:09 2016 -0500
11
12 Update to pax-linux-4.3.5-test28.patch:
13 - fixed an integer truncation bug in numa_clear_kernel_node_hotplug caught by the size overflow plugin, reported by x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4374)
14 - spender fixed UDEREF on arm
15
16 arch/arm/Kconfig | 1 +
17 arch/arm/include/asm/domain.h | 21 ++++++++-
18 arch/arm/include/asm/futex.h | 9 ----
19 arch/arm/include/asm/thread_info.h | 3 +
20 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
21 arch/arm/kernel/entry-armv.S | 2 +-
22 arch/arm/kernel/process.c | 2 +-
23 arch/arm/mm/alignment.c | 8 ----
24 arch/x86/mm/numa.c | 2 +-
25 security/Kconfig | 1 -
26 10 files changed, 60 insertions(+), 70 deletions(-)
27
28commit 438be0bd112bd17942b2628c53054dc1007558a1
29Author: Brad Spengler <spender@grsecurity.net>
30Date: Sat Feb 6 19:50:31 2016 -0500
31
32 Fix a number of issues caused by the upstream merging of a UDEREF ripoff resulting in unbootable
33 ARM systems reported on the forums
34
35 arch/arm/Kconfig | 1 +
36 arch/arm/include/asm/domain.h | 21 ++++++++-
37 arch/arm/include/asm/futex.h | 9 ----
38 arch/arm/include/asm/thread_info.h | 3 +
39 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
40 arch/arm/kernel/entry-armv.S | 2 +-
41 arch/arm/kernel/process.c | 2 +-
42 arch/arm/mm/alignment.c | 8 ----
43 security/Kconfig | 1 -
44 9 files changed, 59 insertions(+), 69 deletions(-)
45
46commit 4ffdd5ef1f87e611af1efb4f251ada92abe9f4c0
47Author: Brad Spengler <spender@grsecurity.net>
48Date: Sat Feb 6 11:21:53 2016 -0500
49
50 Fix another compiler warning
51
52 net/ipv4/tcp_input.c | 2 ++
53 1 files changed, 2 insertions(+), 0 deletions(-)
54
55commit 30b5b7bc0fd67d458bdd5ab35e4689769eabd2ed
56Author: Brad Spengler <spender@grsecurity.net>
57Date: Sat Feb 6 11:16:12 2016 -0500
58
59 Fix two compiler warnings
60
61 kernel/pid.c | 5 ++---
62 kernel/ptrace.c | 3 ++-
63 2 files changed, 4 insertions(+), 4 deletions(-)
64
faedde92
PK		 65commit dda4d2a21914c480750f10bd55c6e3203d415d8d
66Author: Brad Spengler <spender@grsecurity.net>
67Date: Wed Feb 3 21:22:40 2016 -0500
68
69 Apply fix for integer truncation in NUMA init code, reported by
70 x14sg1 on the forums:
71 https://forums.grsecurity.net/viewtopic.php?f=3&t=4374
72
73 arch/x86/mm/numa.c | 2 +-
74 1 files changed, 1 insertions(+), 1 deletions(-)
75
76commit 477505f7c893cb6a2c3e22f83eefd9c985d7b3ca
77Merge: a781740 016d0d8
78Author: Brad Spengler <spender@grsecurity.net>
79Date: Wed Feb 3 21:20:58 2016 -0500
80
81 Merge branch 'pax-test' into grsec-test
82
83commit 016d0d81a8dd4be1304c82a68e0ccf425868f467
84Author: Brad Spengler <spender@grsecurity.net>
85Date: Wed Feb 3 21:20:10 2016 -0500
86
87 Update to pax-linux-4.3.5-test27.patch:
88 - fixed a bunch of potential REFCOUNT false positives, reported by Emese
89 - restored padding in fpregs_state for storing AVX-512 state in the future
90 - constified netlink_dump_control
91 - added const version of debug_gimple_stmt for gcc plugins, by Emese
92 - Emese fixed a bug in initify that could have initified too much
93 - Emese fixed a false positive intentional integer overflow in xfrm4_extract_header, reported by corsac
94
95 arch/x86/include/asm/fpu/types.h | 1 +
96 arch/x86/include/asm/mmu_context.h | 2 +-
97 block/blk-cgroup.c | 18 ++--
98 block/cfq-iosched.c | 4 +-
99 crypto/crypto_user.c | 8 ++-
100 drivers/acpi/apei/ghes.c | 6 +-
101 drivers/char/ipmi/ipmi_ssif.c | 12 ++--
102 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
103 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
104 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
105 drivers/infiniband/core/netlink.c | 5 +-
106 drivers/infiniband/hw/cxgb4/device.c | 6 +-
107 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
108 drivers/md/bcache/alloc.c | 2 +-
109 drivers/md/bcache/bcache.h | 10 +-
110 drivers/md/bcache/btree.c | 2 +-
111 drivers/md/bcache/io.c | 10 +-
112 drivers/md/bcache/journal.c | 2 +-
113 drivers/md/bcache/stats.c | 26 +++---
114 drivers/md/bcache/stats.h | 16 ++--
115 drivers/md/bcache/super.c | 2 +-
116 drivers/md/bcache/sysfs.c | 20 +++---
117 drivers/md/dm-cache-target.c | 98 ++++++++++++------------
118 drivers/md/dm-raid.c | 2 +-
119 drivers/md/md.c | 6 +-
120 drivers/md/md.h | 2 +-
121 drivers/md/raid1.c | 2 +-
122 drivers/md/raid10.c | 2 +-
123 drivers/md/raid5.c | 4 +-
124 drivers/media/pci/zoran/zoran.h | 1 -
125 drivers/media/pci/zoran/zoran_driver.c | 3 -
126 drivers/net/ethernet/sfc/selftest.c | 20 +++---
127 drivers/net/irda/vlsi_ir.c | 18 ++--
128 drivers/net/irda/vlsi_ir.h | 14 ++--
129 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
130 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
131 drivers/net/wireless/ath/carl9170/main.c | 10 +-
132 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
133 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
134 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
135 drivers/scsi/hptiop.c | 2 -
136 drivers/scsi/hptiop.h | 1 -
137 drivers/scsi/ipr.c | 6 +-
138 drivers/scsi/ipr.h | 2 +-
139 drivers/scsi/qla2xxx/qla_target.c | 10 +-
140 drivers/scsi/qla2xxx/qla_target.h | 2 +-
141 fs/btrfs/ctree.c | 2 +-
142 fs/btrfs/ctree.h | 4 +-
143 fs/btrfs/delayed-ref.c | 4 +-
144 fs/btrfs/disk-io.c | 4 +-
145 fs/btrfs/file.c | 4 +-
146 fs/btrfs/raid56.c | 32 ++++----
147 fs/btrfs/tests/btrfs-tests.c | 2 +-
148 fs/btrfs/transaction.c | 2 +-
149 fs/btrfs/tree-log.c | 8 +-
150 fs/btrfs/volumes.c | 14 ++--
151 fs/btrfs/volumes.h | 22 +++---
152 fs/jbd2/commit.c | 2 +-
153 fs/jbd2/transaction.c | 4 +-
154 fs/ocfs2/dlm/dlmcommon.h | 4 +-
155 fs/ocfs2/dlm/dlmdebug.c | 10 +-
156 fs/ocfs2/dlm/dlmdomain.c | 4 +-
157 fs/ocfs2/dlm/dlmmaster.c | 4 +-
158 include/acpi/ghes.h | 2 +-
159 include/linux/blk-cgroup.h | 24 +++---
160 include/linux/jbd2.h | 2 +-
161 include/linux/netlink.h | 12 ++--
162 include/net/cfg802154.h | 2 +-
163 include/net/mac80211.h | 2 +-
164 include/net/neighbour.h | 2 +-
165 kernel/rcu/tree_plugin.h | 4 +-
166 net/batman-adv/routing.c | 4 +-
167 net/batman-adv/soft-interface.c | 2 +-
168 net/batman-adv/translation-table.c | 14 ++--
169 net/batman-adv/types.h | 2 +-
170 net/core/neighbour.c | 14 ++--
171 net/core/rtnetlink.c | 2 +-
172 net/ipv4/arp.c | 2 +-
173 net/ipv4/inet_diag.c | 4 +-
174 net/ipv4/xfrm4_state.c | 4 +-
175 net/ipv6/ndisc.c | 2 +-
176 net/mac80211/cfg.c | 2 +-
177 net/mac80211/debugfs_key.c | 2 +-
178 net/mac80211/key.c | 4 +-
179 net/mac80211/tx.c | 2 +-
180 net/mac80211/wpa.c | 10 +-
181 net/mac802154/iface.c | 4 +-
182 net/netfilter/ipset/ip_set_core.c | 2 +-
183 net/netfilter/nf_conntrack_netlink.c | 22 +++---
184 net/netfilter/nf_tables_api.c | 13 ++--
185 net/netfilter/nfnetlink_acct.c | 7 +-
186 net/netfilter/nfnetlink_cthelper.c | 2 +-
187 net/netfilter/nfnetlink_cttimeout.c | 2 +-
188 net/netlink/af_netlink.c | 10 ++-
189 net/netlink/diag.c | 2 +-
190 net/netlink/genetlink.c | 14 ++--
191 net/packet/af_packet.c | 18 ++--
192 net/packet/diag.c | 2 +-
193 net/packet/internal.h | 6 +-
194 net/unix/diag.c | 2 +-
195 net/xfrm/xfrm_user.c | 2 +-
196 security/apparmor/include/policy.h | 2 +-
197 security/apparmor/policy.c | 4 +-
198 sound/core/seq/seq_clientmgr.c | 2 +-
199 sound/core/seq/seq_fifo.c | 6 +-
200 sound/core/seq/seq_fifo.h | 2 +-
201 tools/gcc/gcc-common.h | 24 ++++--
202 tools/gcc/initify_plugin.c | 7 +-
203 tools/lib/api/Makefile | 2 +-
204 109 files changed, 399 insertions(+), 391 deletions(-)
205
206commit a7817402ac837b1aee07fac42537a02097055098
207Author: Matt Fleming <matt@codeblueprint.co.uk>
208Date: Fri Jan 29 11:36:10 2016 +0000
209
210 x86/mm/pat: Avoid truncation when converting cpa->numpages to address
211
212 There are a couple of nasty truncation bugs lurking in the pageattr
213 code that can be triggered when mapping EFI regions, e.g. when we pass
214 a cpa->pgd pointer. Because cpa->numpages is a 32-bit value, shifting
215 left by PAGE_SHIFT will truncate the resultant address to 32-bits.
216
217 Viorel-Cătălin managed to trigger this bug on his Dell machine that
218 provides a ~5GB EFI region which requires 1236992 pages to be mapped.
219 When calling populate_pud() the end of the region gets calculated
220 incorrectly in the following buggy expression,
221
222 end = start + (cpa->numpages << PAGE_SHIFT);
223
224 And only 188416 pages are mapped. Next, populate_pud() gets invoked
225 for a second time because of the loop in __change_page_attr_set_clr(),
226 only this time no pages get mapped because shifting the remaining
227 number of pages (1048576) by PAGE_SHIFT is zero. At which point the
228 loop in __change_page_attr_set_clr() spins forever because we fail to
229 map progress.
230
231 Hitting this bug depends very much on the virtual address we pick to
232 map the large region at and how many pages we map on the initial run
233 through the loop. This explains why this issue was only recently hit
234 with the introduction of commit
235
236 a5caa209ba9c ("x86/efi: Fix boot crash by mapping EFI memmap
237 entries bottom-up at runtime, instead of top-down")
238
239 It's interesting to note that safe uses of cpa->numpages do exist in
240 the pageattr code. If instead of shifting ->numpages we multiply by
241 PAGE_SIZE, no truncation occurs because PAGE_SIZE is a UL value, and
242 so the result is unsigned long.
243
244 To avoid surprises when users try to convert very large cpa->numpages
245 values to addresses, change the data type from 'int' to 'unsigned
246 long', thereby making it suitable for shifting by PAGE_SHIFT without
247 any type casting.
248
249 The alternative would be to make liberal use of casting, but that is
250 far more likely to cause problems in the future when someone adds more
251 code and fails to cast properly; this bug was difficult enough to
252 track down in the first place.
253
254 Reported-and-tested-by: Viorel-Cătălin Răpițeanu <rapiteanu.catalin@gmail.com>
255 Acked-by: Borislav Petkov <bp@alien8.de>
256 Cc: Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com>
257 Cc: <stable@vger.kernel.org>
258 Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
259 Link: https://bugzilla.kernel.org/show_bug.cgi?id=110131
260 Link: http://lkml.kernel.org/r/1454067370-10374-1-git-send-email-matt@codeblueprint.co.uk
261 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
262
263 arch/x86/mm/pageattr.c | 4 ++--
264 1 files changed, 2 insertions(+), 2 deletions(-)
265
266commit 64dd9d7a67a742fda257cdd16510c29e695c34b5
267Author: Jan Beulich <JBeulich@suse.com>
268Date: Tue Jan 26 04:15:18 2016 -0700
269
270 x86/mm: Fix types used in pgprot cacheability flags translations
271
272 For PAE kernels "unsigned long" is not suitable to hold page protection
273 flags, since _PAGE_NX doesn't fit there. This is the reason for quite a
274 few W+X pages getting reported as insecure during boot (observed namely
275 for the entire initrd range).
276
277 Fixes: 281d4078be ("x86: Make page cache mode a real type")
278 Signed-off-by: Jan Beulich <jbeulich@suse.com>
279 Reviewed-by: Juergen Gross <JGross@suse.com>
280 Cc: stable@vger.kernel.org
281 Link: http://lkml.kernel.org/r/56A7635602000078000CAFF1@prv-mh.provo.novell.com
282 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
283
284 arch/x86/include/asm/pgtable_types.h | 6 ++----
285 1 files changed, 2 insertions(+), 4 deletions(-)
286
8bcb68a2
PK		 287commit bb9a3a9df0d8dfc96d521676e64c42b37ba22aea
288Merge: 682d661 f74425b
289Author: Brad Spengler <spender@grsecurity.net>
290Date: Sun Jan 31 15:06:25 2016 -0500
291
292 Merge branch 'pax-test' into grsec-test
293
294 Conflicts:
295 drivers/net/slip/slhc.c
296 include/linux/sched.h
297 net/unix/af_unix.c
298 sound/core/timer.c
299
300commit f74425b5705bfe52aff9e97659ef10c4a14176c3
301Merge: d14af1f 849a2d3
302Author: Brad Spengler <spender@grsecurity.net>
303Date: Sun Jan 31 15:02:55 2016 -0500
304
305 Merge branch 'linux-4.3.y' into pax-test
306
307 Conflicts:
308 arch/x86/include/asm/mmu_context.h
309
310commit 682d6611d75542e351c973c8dd74a99d3966c073
311Author: Brad Spengler <spender@grsecurity.net>
312Date: Sat Jan 30 13:05:03 2016 -0500
313
314 Based on a report from Mathias Krause, fix up a number of additional instances
315 of ulong overflow when passing in values to gr_learn_resource by saturating
316 to ULONG_MAX
317
318 mm/mlock.c | 11 ++++++++---
319 mm/mmap.c | 16 +++++++++++++---
320 2 files changed, 21 insertions(+), 6 deletions(-)
321
08314ea3
PK		 322commit adb52e95fb9ad4ac9c56cd5d47bd668f47c33096
323Author: Jann Horn <jann@thejh.net>
324Date: Sat Dec 26 06:00:48 2015 +0100
325
326 seccomp: always propagate NO_NEW_PRIVS on tsync
327
328 Before this patch, a process with some permissive seccomp filter
329 that was applied by root without NO_NEW_PRIVS was able to add
330 more filters to itself without setting NO_NEW_PRIVS by setting
331 the new filter from a throwaway thread with NO_NEW_PRIVS.
332
333 Signed-off-by: Jann Horn <jann@thejh.net>
334 Cc: stable@vger.kernel.org
335 Signed-off-by: Kees Cook <keescook@chromium.org>
336
337 kernel/seccomp.c | 22 +++++++++++-----------
338 1 files changed, 11 insertions(+), 11 deletions(-)
339
340commit b85450498a3bbf269441c8963d7574bb3079c838
341Merge: 59c216f d14af1f
342Author: Brad Spengler <spender@grsecurity.net>
343Date: Fri Jan 29 20:54:13 2016 -0500
344
345 Merge branch 'pax-test' into grsec-test
346
347commit d14af1f1dd66511f3f0674deee2b572972012b39
348Author: Brad Spengler <spender@grsecurity.net>
349Date: Fri Jan 29 20:53:51 2016 -0500
350
351 Update to pax-linux-4.3.4-test26.patch:
352 - Emese fixed a few intentional overflows introduced by gcc, reported by StalkR (https://forums.grsecurity.net/viewtopic.php?f=3&t=4370)
353
354 fs/cifs/file.c | 2 +-
355 fs/gfs2/file.c | 2 +-
356 .../size_overflow_plugin/intentional_overflow.c | 96 ++++++++++++++++++--
357 tools/gcc/size_overflow_plugin/size_overflow.h | 2 +
358 .../size_overflow_plugin/size_overflow_plugin.c | 4 +-
359 .../size_overflow_plugin/size_overflow_transform.c | 6 +-
360 .../size_overflow_transform_core.c | 5 +
361 7 files changed, 102 insertions(+), 15 deletions(-)
362
363commit 59c216f13587eacdd692386b7a403ae78ed84fb6
364Author: Brad Spengler <spender@grsecurity.net>
365Date: Wed Jan 27 17:57:21 2016 -0500
366
367 Fix a size_overflow report reported by Mathias Krause in our
368 truncation of an loff_t to an unsigned long when being passed
369 to gr_learn_resource() (as all resource checks are against unsigned long
370 values)
371
372 fs/attr.c | 5 ++++-
373 1 files changed, 4 insertions(+), 1 deletions(-)
374
589df999
PK		 375commit 70636c6ad60fc1db3af764ecc789b827b7497a97
376Author: Yuchung Cheng <ycheng@google.com>
377Date: Wed Jan 6 12:42:38 2016 -0800
378
379 tcp: fix zero cwnd in tcp_cwnd_reduction
380
381 Patch 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode
382 conditionally") introduced a bug that cwnd may become 0 when both
383 inflight and sndcnt are 0 (cwnd = inflight + sndcnt). This may lead
384 to a div-by-zero if the connection starts another cwnd reduction
385 phase by setting tp->prior_cwnd to the current cwnd (0) in
386 tcp_init_cwnd_reduction().
387
388 To prevent this we skip PRR operation when nothing is acked or
389 sacked. Then cwnd must be positive in all cases as long as ssthresh
390 is positive:
391
392 1) The proportional reduction mode
393 inflight > ssthresh > 0
394
395 2) The reduction bound mode
396 a) inflight == ssthresh > 0
397
398 b) inflight < ssthresh
399 sndcnt > 0 since newly_acked_sacked > 0 and inflight < ssthresh
400
401 Therefore in all cases inflight and sndcnt can not both be 0.
402 We check invalid tp->prior_cwnd to avoid potential div0 bugs.
403
404 In reality this bug is triggered only with a sequence of less common
405 events. For example, the connection is terminating an ECN-triggered
406 cwnd reduction with an inflight 0, then it receives reordered/old
407 ACKs or DSACKs from prior transmission (which acks nothing). Or the
408 connection is in fast recovery stage that marks everything lost,
409 but fails to retransmit due to local issues, then receives data
410 packets from other end which acks nothing.
411
412 Fixes: 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode conditionally")
413 Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name>
414 Signed-off-by: Yuchung Cheng <ycheng@google.com>
415 Signed-off-by: Neal Cardwell <ncardwell@google.com>
416 Signed-off-by: Eric Dumazet <edumazet@google.com>
417 Signed-off-by: David S. Miller <davem@davemloft.net>
418
419 net/ipv4/tcp_input.c | 3 +++
420 1 files changed, 3 insertions(+), 0 deletions(-)
421
422commit dac1da2bedbb43195d371c7a192cfeeb45683df0
423Author: Eric Dumazet <edumazet@google.com>
424Date: Sun Jan 24 13:53:50 2016 -0800
425
426 af_unix: fix struct pid memory leak
427
428 Dmitry reported a struct pid leak detected by a syzkaller program.
429
430 Bug happens in unix_stream_recvmsg() when we break the loop when a
431 signal is pending, without properly releasing scm.
432
433 Fixes: b3ca9b02b007 ("net: fix multithreaded signal handling in unix recv routines")
434 Reported-by: Dmitry Vyukov <dvyukov@google.com>
435 Signed-off-by: Eric Dumazet <edumazet@google.com>
436 Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com>
437 Signed-off-by: David S. Miller <davem@davemloft.net>
438
439 net/unix/af_unix.c | 1 +
440 1 files changed, 1 insertions(+), 0 deletions(-)
441
442commit 15cc47f127520d1ac0c1fe76d993c2c27f0f2571
443Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
444Date: Fri Jan 22 01:39:43 2016 +0100
445
446 pptp: fix illegal memory access caused by multiple bind()s
447
448 Several times already this has been reported as kasan reports caused by
449 syzkaller and trinity and people always looked at RCU races, but it is
450 much more simple. :)
451
452 In case we bind a pptp socket multiple times, we simply add it to
453 the callid_sock list but don't remove the old binding. Thus the old
454 socket stays in the bucket with unused call_id indexes and doesn't get
455 cleaned up. This causes various forms of kasan reports which were hard
456 to pinpoint.
457
458 Simply don't allow multiple binds and correct error handling in
459 pptp_bind. Also keep sk_state bits in place in pptp_connect.
460
461 Fixes: 00959ade36acad ("PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)")
462 Cc: Dmitry Kozlov <xeb@mail.ru>
463 Cc: Sasha Levin <sasha.levin@oracle.com>
464 Cc: Dmitry Vyukov <dvyukov@google.com>
465 Reported-by: Dmitry Vyukov <dvyukov@google.com>
466 Cc: Dave Jones <davej@codemonkey.org.uk>
467 Reported-by: Dave Jones <davej@codemonkey.org.uk>
468 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
469 Signed-off-by: David S. Miller <davem@davemloft.net>
470
471 drivers/net/ppp/pptp.c | 34 ++++++++++++++++++++++++----------
472 1 files changed, 24 insertions(+), 10 deletions(-)
473
474commit e2b7b8c66851c85188fa6dab2d2b2a6c85bc7332
475Author: Brad Spengler <spender@grsecurity.net>
476Date: Tue Jan 26 18:17:10 2016 -0500
477
478 Add info about cpupower/powertop to GRKERNSEC_KMEM, was present on our
479 wiki but was removed from the config help at some point
480
481 grsecurity/Kconfig | 3 +++
482 1 files changed, 3 insertions(+), 0 deletions(-)
483
484commit ce2e88efa000fc32bfcd84098f57c8ed8310fefc
485Author: Thomas Egerer <hakke_007@gmx.de>
486Date: Mon Jan 25 12:58:44 2016 +0100
487
488 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV
489
490 The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
491 to select CRYPTO_ECHAINIV in order to work properly. This solves the
492 issues caused by a misconfiguration as described in [1].
493 The original approach, patching crypto/Kconfig was turned down by
494 Herbert Xu [2].
495
496 [1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
497 [2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2
498
499 Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
500 Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
501 Signed-off-by: David S. Miller <davem@davemloft.net>
502
503 net/ipv4/Kconfig | 1 +
504 net/ipv6/Kconfig | 1 +
505 2 files changed, 2 insertions(+), 0 deletions(-)
506
507commit fca5a303155ea67d28aece0caf2b03ffc3b2668d
508Merge: 904114c 6339c1f
509Author: Brad Spengler <spender@grsecurity.net>
510Date: Tue Jan 26 18:08:40 2016 -0500
511
512 Merge branch 'pax-test' into grsec-test
513
514commit 6339c1f9a9beafd417bf9f04d4b257e62aeb45b7
515Author: Brad Spengler <spender@grsecurity.net>
516Date: Tue Jan 26 18:07:51 2016 -0500
517
518 Update to pax-linux-4.3.4-test25.patch:
519 - fixed incorrect handling of VM_DONTCOPY during fork that would trigger a consistency check in the vma mirroring logic, reported by Mathias Krause <minipli@googlemail.com>
520 - fixed init_new_context on !MODIFY_LDT_SYSCALL configs, reported by tjh (https://forums.grsecurity.net/viewtopic.php?f=3&t=4368)
521 - fixed a few REFCOUNT false positives in SNMP related statistics
522
523 arch/x86/Kconfig | 2 +-
524 arch/x86/include/asm/mmu_context.h | 17 +++++++++++++++++
525 include/net/snmp.h | 10 +++++-----
526 kernel/fork.c | 11 +++++++++--
527 net/ipv4/proc.c | 8 ++++----
528 net/ipv6/addrconf.c | 4 ++--
529 net/ipv6/proc.c | 10 +++++-----
530 7 files changed, 43 insertions(+), 19 deletions(-)
531
532commit 904114c2fce3fdff5d57e763da56a78960db4e19
533Author: Al Viro <viro@zeniv.linux.org.uk>
534Date: Fri Jan 22 18:08:52 2016 -0500
535
536 make sure that freeing shmem fast symlinks is RCU-delayed
537
538 Cc: stable@vger.kernel.org # v4.2+
539 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
540
541 include/linux/shmem_fs.h | 5 +----
542 mm/shmem.c | 9 ++++-----
543 2 files changed, 5 insertions(+), 9 deletions(-)
544
87ff3ca1
PK		 545commit ab86adee64312a2f827dd516cb199521327943ed
546Author: Sasha Levin <sasha.levin@oracle.com>
547Date: Mon Jan 18 19:23:51 2016 -0500
548
549 netfilter: nf_conntrack: use safer way to lock all buckets
550
551 When we need to lock all buckets in the connection hashtable we'd attempt to
552 lock 1024 spinlocks, which is way more preemption levels than supported by
553 the kernel. Furthermore, this behavior was hidden by checking if lockdep is
554 enabled, and if it was - use only 8 buckets(!).
555
556 Fix this by using a global lock and synchronize all buckets on it when we
557 need to lock them all. This is pretty heavyweight, but is only done when we
558 need to resize the hashtable, and that doesn't happen often enough (or at all).
559
560 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
561 Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
562 Reviewed-by: Florian Westphal <fw@strlen.de>
563 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
564
565 Conflicts:
566
567 net/netfilter/nfnetlink_cttimeout.c
568
569 include/net/netfilter/nf_conntrack_core.h | 8 ++----
570 net/netfilter/nf_conntrack_core.c | 38 +++++++++++++++++++++-------
571 net/netfilter/nf_conntrack_helper.c | 2 +-
572 net/netfilter/nf_conntrack_netlink.c | 2 +-
573 4 files changed, 33 insertions(+), 17 deletions(-)
574
575commit 37014723527225481c720484bb788a1a6358072f
576Author: Willy Tarreau <w@1wt.eu>
577Date: Mon Jan 18 16:36:09 2016 +0100
578
579 pipe: limit the per-user amount of pages allocated in pipes
580
581 On no-so-small systems, it is possible for a single process to cause an
582 OOM condition by filling large pipes with data that are never read. A
583 typical process filling 4000 pipes with 1 MB of data will use 4 GB of
584 memory. On small systems it may be tricky to set the pipe max size to
585 prevent this from happening.
586
587 This patch makes it possible to enforce a per-user soft limit above
588 which new pipes will be limited to a single page, effectively limiting
589 them to 4 kB each, as well as a hard limit above which no new pipes may
590 be created for this user. This has the effect of protecting the system
591 against memory abuse without hurting other users, and still allowing
592 pipes to work correctly though with less data at once.
593
594 The limit are controlled by two new sysctls : pipe-user-pages-soft, and
595 pipe-user-pages-hard. Both may be disabled by setting them to zero. The
596 default soft limit allows the default number of FDs per process (1024)
597 to create pipes of the default size (64kB), thus reaching a limit of 64MB
598 before starting to create only smaller pipes. With 256 processes limited
599 to 1024 FDs each, this results in 1024*64kB + (256*1024 - 1024) * 4kB =
600 1084 MB of memory allocated for a user. The hard limit is disabled by
601 default to avoid breaking existing applications that make intensive use
602 of pipes (eg: for splicing).
603
604 Reported-by: socketpair@gmail.com
605 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
606 Mitigates: CVE-2013-4312 (Linux 2.0+)
607 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
608 Signed-off-by: Willy Tarreau <w@1wt.eu>
609 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
610
611 Documentation/sysctl/fs.txt | 23 +++++++++++++++++++++
612 fs/pipe.c | 47 +++++++++++++++++++++++++++++++++++++++++-
613 include/linux/pipe_fs_i.h | 4 +++
614 include/linux/sched.h | 1 +
615 kernel/sysctl.c | 14 ++++++++++++
616 5 files changed, 87 insertions(+), 2 deletions(-)
617
618commit 51645fa198d194f746651dcfbc5f24a4cf8b9fb8
619Merge: 540f2af 7791ecb
620Author: Brad Spengler <spender@grsecurity.net>
621Date: Sat Jan 23 10:57:11 2016 -0500
622
623 Merge branch 'pax-test' into grsec-test
624
625commit 7791ecb84f840343a5646236fd0d34e1fb450793
626Merge: 470069c 399588c
627Author: Brad Spengler <spender@grsecurity.net>
628Date: Sat Jan 23 10:56:47 2016 -0500
629
630 Merge branch 'linux-4.3.y' into pax-test
631
1864a9b1
PK		 632commit 540f2affebd42cdc26a699208ab4f1cb0cb75e33
633Author: Brad Spengler <spender@grsecurity.net>
634Date: Tue Jan 19 21:18:47 2016 -0500
635
636 Update size_overflow hash table
637
638 .../size_overflow_plugin/size_overflow_hash.data | 4 +++-
639 1 files changed, 3 insertions(+), 1 deletions(-)
640
641commit 7e649765626a28437f573f0fbe7a51a04615f041
642Author: Brad Spengler <spender@grsecurity.net>
643Date: Tue Jan 19 20:29:46 2016 -0500
644
645 Backport fix from: https://lkml.org/lkml/2015/12/13/187
646
647 fs/ext4/extents.c | 2 +-
648 1 files changed, 1 insertions(+), 1 deletions(-)
649
650commit 53b859cd0a5f5b6ad54fe0c879dfedaa3c5a3005
651Author: Jann Horn <jann@thejh.net>
652Date: Tue Jan 5 18:27:30 2016 +0100
653
654 compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)
655
656 This replaces all code in fs/compat_ioctl.c that translated
657 ioctl arguments into a in-kernel structure, then performed
658 do_ioctl under set_fs(KERNEL_DS), with code that allocates
659 data on the user stack and can call the VFS ioctl handler
660 under USER_DS.
661
662 This is done as a hardening measure because the caller
663 does not know what kind of ioctl handler will be invoked,
664 only that no corresponding compat_ioctl handler exists and
665 what the ioctl command number is. The accidental
666 invocation of an unlocked_ioctl handler that unexpectedly
667 calls copy_to_user could be a severe security issue.
668
669 Signed-off-by: Jann Horn <jann@thejh.net>
670 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
671
672 Conflicts:
673
674 fs/compat_ioctl.c
675
676 fs/compat_ioctl.c | 130 ++++++++++++++++++++++++++++-------------------------
677 1 files changed, 68 insertions(+), 62 deletions(-)
678
679commit 3e89e770ae27e931cd1583f021abac41eeebc3e7
680Author: Al Viro <viro@zeniv.linux.org.uk>
681Date: Thu Jan 7 09:53:30 2016 -0500
682
683 compat_ioctl: don't pass fd around when not needed
684
685 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
686
687 fs/compat_ioctl.c | 103 ++++++++++++++++++++++++++--------------------------
688 fs/internal.h | 7 ++++
689 fs/ioctl.c | 4 +-
690 include/linux/fs.h | 2 -
691 4 files changed, 61 insertions(+), 55 deletions(-)
692
693commit 9d4e04082752d4d2d68445c4e6faf33a2613df55
694Author: Jann Horn <jann@thejh.net>
695Date: Tue Jan 5 18:27:29 2016 +0100
696
697 compat_ioctl: don't look up the fd twice
698
699 In code in fs/compat_ioctl.c that translates ioctl arguments
700 into a in-kernel structure, then performs sys_ioctl, possibly
701 under set_fs(KERNEL_DS), this commit changes the sys_ioctl
702 calls to do_ioctl calls. do_ioctl is a new function that does
703 the same thing as sys_ioctl, but doesn't look up the fd again.
704
705 This change is made to avoid (potential) security issues
706 because of ioctl handlers that accept one of the ioctl
707 commands I2C_FUNCS, VIDEO_GET_EVENT, MTIOCPOS, MTIOCGET,
708 TIOCGSERIAL, TIOCSSERIAL, RTC_IRQP_READ, RTC_EPOCH_READ.
709 This can happen for multiple reasons:
710
711 - The ioctl command number could be reused.
712 - The ioctl handler might not check the full ioctl
713 command. This is e.g. true for drm_ioctl.
714 - The ioctl handler is very special, e.g. cuse_file_ioctl
715
716 The real issue is that set_fs(KERNEL_DS) is used here,
717 but that's fixed in a separate commit
718 "compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)".
719
720 This change mitigates potential security issues by
721 preventing a race that permits invocation of
722 unlocked_ioctl handlers under KERNEL_DS through compat
723 code even if a corresponding compat_ioctl handler exists.
724
725 So far, no way has been identified to use this to damage
726 kernel memory without having CAP_SYS_ADMIN in the init ns
727 (with the capability, doing reads/writes at arbitrary
728 kernel addresses should be easy through CUSE's ioctl
729 handler with FUSE_IOCTL_UNRESTRICTED set).
730
731 [AV: two missed sys_ioctl() taken care of]
732
733 Signed-off-by: Jann Horn <jann@thejh.net>
734 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
735
736 fs/compat_ioctl.c | 122 +++++++++++++++++++++++++++++-----------------------
737 1 files changed, 68 insertions(+), 54 deletions(-)
738
739commit 5bf9e1ed4ebb278cd956ba142914fc04a024309c
740Author: Vasily Kulikov <segoon@openwall.com>
741Date: Fri Jan 15 16:57:55 2016 -0800
742
743 include/linux/poison.h: use POISON_POINTER_DELTA for poison pointers
744
745 TIMER_ENTRY_STATIC is defined as a poison pointers which
746 should point to nowhere. Redefine them using POISON_POINTER_DELTA
747 arithmetics to make sure they really point to non-mappable area declared
748 by the target architecture.
749
750 Signed-off-by: Vasily Kulikov <segoon@openwall.com>
751 Acked-by: Thomas Gleixner <tglx@linutronix.de>
752 Cc: Solar Designer <solar@openwall.com>
753 Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
754 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
755 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
756
757 Conflicts:
758
759 include/linux/poison.h
760
761 include/linux/poison.h | 2 +-
762 1 files changed, 1 insertions(+), 1 deletions(-)
763
764commit 60f2e0a05ab8f56c804a9334a23e2b446305d110
765Author: Brad Spengler <spender@grsecurity.net>
766Date: Tue Jan 19 19:41:44 2016 -0500
767
768 Fix ARM compilation, reported by Austin Sepp
769
770 grsecurity/grsec_sig.c | 1 +
771 1 files changed, 1 insertions(+), 0 deletions(-)
772
773commit e15383743443dc43460a2fd73e0db0b608610dca
774Author: Takashi Iwai <tiwai@suse.de>
775Date: Mon Jan 18 13:52:47 2016 +0100
776
777 ALSA: hrtimer: Fix stall by hrtimer_cancel()
778
779 hrtimer_cancel() waits for the completion from the callback, thus it
780 must not be called inside the callback itself. This was already a
781 problem in the past with ALSA hrtimer driver, and the early commit
782 [fcfdebe70759: ALSA: hrtimer - Fix lock-up] tried to address it.
783
784 However, the previous fix is still insufficient: it may still cause a
785 lockup when the ALSA timer instance reprograms itself in its callback.
786 Then it invokes the start function even in snd_timer_interrupt() that
787 is called in hrtimer callback itself, results in a CPU stall. This is
788 no hypothetical problem but actually triggered by syzkaller fuzzer.
789
790 This patch tries to fix the issue again. Now we call
791 hrtimer_try_to_cancel() at both start and stop functions so that it
792 won't fall into a deadlock, yet giving some chance to cancel the queue
793 if the functions have been called outside the callback. The proper
794 hrtimer_cancel() is called in anyway at closing, so this should be
795 enough.
796
797 Reported-and-tested-by: Dmitry Vyukov <dvyukov@google.com>
798 Cc: <stable@vger.kernel.org>
799 Signed-off-by: Takashi Iwai <tiwai@suse.de>
800
801 sound/core/hrtimer.c | 3 ++-
802 1 files changed, 2 insertions(+), 1 deletions(-)
803
804commit 12d874daf706e6e7c1ae709141859c809599297e
805Author: Takashi Iwai <tiwai@suse.de>
806Date: Tue Jan 12 12:38:02 2016 +0100
807
808 ALSA: seq: Fix missing NULL check at remove_events ioctl
809
810 snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear()
811 unconditionally even if there is no FIFO assigned, and this leads to
812 an Oops due to NULL dereference. The fix is just to add a proper NULL
813 check.
814
815 Reported-by: Dmitry Vyukov <dvyukov@google.com>
816 Tested-by: Dmitry Vyukov <dvyukov@google.com>
817 Cc: <stable@vger.kernel.org>
818 Signed-off-by: Takashi Iwai <tiwai@suse.de>
819
820 sound/core/seq/seq_clientmgr.c | 2 +-
821 1 files changed, 1 insertions(+), 1 deletions(-)
822
823commit 2eb0632df1351378946507e7ef7ba0682632a7b5
824Author: Takashi Iwai <tiwai@suse.de>
825Date: Tue Jan 12 15:36:27 2016 +0100
826
827 ALSA: seq: Fix race at timer setup and close
828
829 ALSA sequencer code has an open race between the timer setup ioctl and
830 the close of the client. This was triggered by syzkaller fuzzer, and
831 a use-after-free was caught there as a result.
832
833 This patch papers over it by adding a proper queue->timer_mutex lock
834 around the timer-related calls in the relevant code path.
835
836 Reported-by: Dmitry Vyukov <dvyukov@google.com>
837 Tested-by: Dmitry Vyukov <dvyukov@google.com>
838 Cc: <stable@vger.kernel.org>
839 Signed-off-by: Takashi Iwai <tiwai@suse.de>
840
841 sound/core/seq/seq_queue.c | 2 ++
842 1 files changed, 2 insertions(+), 0 deletions(-)
843
844commit b9e55ab955e59b4a636d78a748be90334a48b485
845Author: Takashi Iwai <tiwai@suse.de>
846Date: Thu Jan 14 16:30:58 2016 +0100
847
848 ALSA: timer: Harden slave timer list handling
849
850 A slave timer instance might be still accessible in a racy way while
851 operating the master instance as it lacks of locking. Since the
852 master operation is mostly protected with timer->lock, we should cope
853 with it while changing the slave instance, too. Also, some linked
854 lists (active_list and ack_list) of slave instances aren't unlinked
855 immediately at stopping or closing, and this may lead to unexpected
856 accesses.
857
858 This patch tries to address these issues. It adds spin lock of
859 timer->lock (either from master or slave, which is equivalent) in a
860 few places. For avoiding a deadlock, we ensure that the global
861 slave_active_lock is always locked at first before each timer lock.
862
863 Also, ack and active_list of slave instances are properly unlinked at
864 snd_timer_stop() and snd_timer_close().
865
866 Last but not least, remove the superfluous call of _snd_timer_stop()
867 at removing slave links. This is a noop, and calling it may confuse
868 readers wrt locking. Further cleanup will follow in a later patch.
869
870 Actually we've got reports of use-after-free by syzkaller fuzzer, and
871 this hopefully fixes these issues.
872
873 Reported-by: Dmitry Vyukov <dvyukov@google.com>
874 Cc: <stable@vger.kernel.org>
875 Signed-off-by: Takashi Iwai <tiwai@suse.de>
876
877 sound/core/timer.c | 18 ++++++++++++++----
878 1 files changed, 14 insertions(+), 4 deletions(-)
879
880commit f1ce0547bdfda1b42ae8a66c222f2a897cbe1586
881Author: Takashi Iwai <tiwai@suse.de>
882Date: Wed Jan 13 17:48:01 2016 +0100
883
884 ALSA: timer: Fix race among timer ioctls
885
886 ALSA timer ioctls have an open race and this may lead to a
887 use-after-free of timer instance object. A simplistic fix is to make
888 each ioctl exclusive. We have already tread_sem for controlling the
889 tread, and extend this as a global mutex to be applied to each ioctl.
890
891 The downside is, of course, the worse concurrency. But these ioctls
892 aren't to be parallel accessible, in anyway, so it should be fine to
893 serialize there.
894
895 Reported-by: Dmitry Vyukov <dvyukov@google.com>
896 Tested-by: Dmitry Vyukov <dvyukov@google.com>
897 Cc: <stable@vger.kernel.org>
898 Signed-off-by: Takashi Iwai <tiwai@suse.de>
899
900 sound/core/timer.c | 32 +++++++++++++++++++-------------
901 1 files changed, 19 insertions(+), 13 deletions(-)
902
903commit 8347d8461ed48a98f9c76cc3cfcdad8217d314bc
904Author: Takashi Iwai <tiwai@suse.de>
905Date: Wed Jan 13 21:35:06 2016 +0100
906
907 ALSA: timer: Fix double unlink of active_list
908
909 ALSA timer instance object has a couple of linked lists and they are
910 unlinked unconditionally at snd_timer_stop(). Meanwhile
911 snd_timer_interrupt() unlinks it, but it calls list_del() which leaves
912 the element list itself unchanged. This ends up with unlinking twice,
913 and it was caught by syzkaller fuzzer.
914
915 The fix is to use list_del_init() variant properly there, too.
916
917 Reported-by: Dmitry Vyukov <dvyukov@google.com>
918 Tested-by: Dmitry Vyukov <dvyukov@google.com>
919 Cc: <stable@vger.kernel.org>
920 Signed-off-by: Takashi Iwai <tiwai@suse.de>
921
922 sound/core/timer.c | 2 +-
923 1 files changed, 1 insertions(+), 1 deletions(-)
924
925commit 243aebb7ae71d6e11ea9880faa893d1d0d60cd75
926Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
927Date: Mon Jan 18 18:03:48 2016 +0100
928
929 ovs: limit ovs recursions in ovs_execute_actions to not corrupt stack
930
931 It was seen that defective configurations of openvswitch could overwrite
932 the STACK_END_MAGIC and cause a hard crash of the kernel because of too
933 many recursions within ovs.
934
935 This problem arises due to the high stack usage of openvswitch. The rest
936 of the kernel is fine with the current limit of 10 (RECURSION_LIMIT).
937
938 We use the already existing recursion counter in ovs_execute_actions to
939 implement an upper bound of 5 recursions.
940
941 Cc: Pravin Shelar <pshelar@ovn.org>
942 Cc: Simon Horman <simon.horman@netronome.com>
943 Cc: Eric Dumazet <eric.dumazet@gmail.com>
944 Cc: Simon Horman <simon.horman@netronome.com>
945 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
946 Signed-off-by: David S. Miller <davem@davemloft.net>
947
948 net/openvswitch/actions.c | 19 ++++++++++++++-----
949 1 files changed, 14 insertions(+), 5 deletions(-)
950
951commit 8080793479c6d5befe37a67b1dbd9e4e0a61af96
952Author: Ursula Braun <ursula.braun@de.ibm.com>
953Date: Tue Jan 19 10:41:33 2016 +0100
954
955 af_iucv: Validate socket address length in iucv_sock_bind()
956
957 Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
958 Reported-by: Dmitry Vyukov <dvyukov@google.com>
959 Reviewed-by: Evgeny Cherkashin <Eugene.Crosser@ru.ibm.com>
960 Signed-off-by: David S. Miller <davem@davemloft.net>
961
962 net/iucv/af_iucv.c | 3 +++
963 1 files changed, 3 insertions(+), 0 deletions(-)
964
965commit 50a383c1c91ed7409c3cbdd41e662d6891463d1b
966Author: Brad Spengler <spender@grsecurity.net>
967Date: Tue Jan 19 19:32:54 2016 -0500
968
969 Apply the same fix as everyone else for the recent keys vulnerability that is
970 unexploitable under PAX_REFCOUNT
971
972 Make a couple more changes that no one else can/will
973
974 include/linux/key-type.h | 4 ++--
975 ipc/msgutil.c | 4 ++--
976 security/keys/internal.h | 2 +-
977 security/keys/process_keys.c | 1 +
978 4 files changed, 6 insertions(+), 5 deletions(-)
979
82357c75
PK		 980commit b56c3a63f431c193400aee17543021950bd14bc4
981Merge: 38b1a3d 470069c
982Author: Brad Spengler <spender@grsecurity.net>
983Date: Sun Jan 17 18:30:19 2016 -0500
984
985 Merge branch 'pax-test' into grsec-test
986
987commit 470069cfedef2180313233d275be5901bd6d1135
988Author: Brad Spengler <spender@grsecurity.net>
989Date: Sun Jan 17 18:29:59 2016 -0500
990
991 Update to pax-linux-4.3.3-test22.patch:
992 - Emesed fixed a gcc induced intentional integer overflow in asix_rx_fixup_internal, reported by thomas callison caffrey
993 - fixed some more fallout from the drm_drivers constification, reported by Colin Childs and Toralf Foerster
994
995 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++++----------
996 drivers/gpu/drm/drm_pci.c | 3 +++
997 drivers/gpu/drm/gma500/psb_drv.c | 4 ----
998 drivers/gpu/drm/i915/i915_drv.c | 16 ++++++++--------
999 drivers/gpu/drm/nouveau/nouveau_drm.c | 6 +++---
1000 drivers/gpu/drm/radeon/radeon_drv.c | 4 +---
1001 drivers/net/usb/asix_common.c | 3 ++-
1002 include/drm/drmP.h | 1 +
1003 8 files changed, 22 insertions(+), 29 deletions(-)
1004
1005commit 38b1a3d676f407865c3d41840df8213c5ad639c1
1006Author: Brad Spengler <spender@grsecurity.net>
1007Date: Sun Jan 17 12:33:53 2016 -0500
1008
1009 As reported by Luis Ressel, the Kconfig help for GRKERNSEC_BRUTE
1010 mentioned banning execution of suid/sgid binaries, though the kernel
1011 source clearly only mentions banning execution of suid binaries. Since
1012 there's no reason for us to not ban execution of sgid binaries as well,
1013 make the implementation match the Kconfig description.
1014
1015 fs/exec.c | 4 ++--
1016 grsecurity/grsec_sig.c | 27 ++++++++++++++-------------
1017 include/linux/sched.h | 4 ++--
1018 3 files changed, 18 insertions(+), 17 deletions(-)
1019
15ddc79a
PK		 1020commit 8c3bcb7dbf7f606acfa0983e81f0f928da1f1ace
1021Merge: d141a86 ea4a835
1022Author: Brad Spengler <spender@grsecurity.net>
1023Date: Sat Jan 16 14:12:22 2016 -0500
1024
1025 Merge branch 'pax-test' into grsec-test
1026
1027 Conflicts:
1028 drivers/gpu/drm/i810/i810_drv.c
1029
1030commit ea4a835328ada6513ac013986764d6caea8cd348
1031Author: Brad Spengler <spender@grsecurity.net>
1032Date: Sat Jan 16 14:11:30 2016 -0500
1033
1034 Update to pax-linux-4.3.3-test21.patch:
1035 - fixed some fallout from the drm_drivers constification, reported by spender
1036
1037 drivers/gpu/drm/armada/armada_drv.c | 3 +--
1038 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
1039 drivers/gpu/drm/i810/i810_dma.c | 2 +-
1040 drivers/gpu/drm/i810/i810_drv.c | 6 +++++-
1041 drivers/gpu/drm/i810/i810_drv.h | 2 +-
1042 5 files changed, 8 insertions(+), 6 deletions(-)
1043
1044commit d141a86fd66194bc3f896b6809b189e2f12a9a83
1045Author: Brad Spengler <spender@grsecurity.net>
1046Date: Sat Jan 16 13:16:36 2016 -0500
1047
1048 compile fix
1049
1050 drivers/gpu/drm/i810/i810_dma.c | 2 +-
1051 drivers/gpu/drm/i810/i810_drv.c | 4 +++-
1052 drivers/gpu/drm/i810/i810_drv.h | 2 +-
1053 3 files changed, 5 insertions(+), 3 deletions(-)
1054
1055commit 0d9dc4b25ea32c14561bcfe6b5b24f1b00fe0270
1056Merge: 5fa135d bbda879
1057Author: Brad Spengler <spender@grsecurity.net>
1058Date: Sat Jan 16 12:59:22 2016 -0500
1059
1060 Merge branch 'pax-test' into grsec-test
1061
1062commit bbda87914edf63e27fb46670bf3a373f2b963c73
1063Author: Brad Spengler <spender@grsecurity.net>
1064Date: Sat Jan 16 12:58:04 2016 -0500
1065
1066 Update to pax-linux-4.3.3-test20.patch:
1067 - constified drm_driver
1068 - Emese fixed a special case in handling __func__ in the initify plugin
1069 - Emese fixed a false positive size overflow report in handling inbufBits, reported by Martin Filo (https://bugs.gentoo.org/show_bug.cgi?id=567048)
1070 - fixed regression that caused perf to not resolve kernel code addresses under KERNEXEC/i386, reported by minipli
1071
1072 arch/x86/kernel/cpu/perf_event.h | 2 +-
1073 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
1074 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
1075 arch/x86/kernel/uprobes.c | 2 +-
1076 arch/x86/mm/mpx.c | 2 +-
1077 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
1078 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 ++-
1079 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
1080 drivers/gpu/drm/drm_pci.c | 6 +-
1081 drivers/gpu/drm/gma500/psb_drv.c | 5 +-
1082 drivers/gpu/drm/i915/i915_dma.c | 2 +-
1083 drivers/gpu/drm/i915/i915_drv.c | 15 ++--
1084 drivers/gpu/drm/i915/i915_drv.h | 2 +-
1085 drivers/gpu/drm/i915/i915_irq.c | 88 ++++++++++----------
1086 drivers/gpu/drm/mga/mga_drv.c | 5 +-
1087 drivers/gpu/drm/mga/mga_drv.h | 2 +-
1088 drivers/gpu/drm/mga/mga_state.c | 2 +-
1089 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 ++--
1090 drivers/gpu/drm/qxl/qxl_drv.c | 8 ++-
1091 drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +-
1092 drivers/gpu/drm/r128/r128_drv.c | 4 +-
1093 drivers/gpu/drm/r128/r128_drv.h | 2 +-
1094 drivers/gpu/drm/r128/r128_state.c | 2 +-
1095 drivers/gpu/drm/radeon/radeon_drv.c | 17 +++-
1096 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
1097 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
1098 drivers/gpu/drm/radeon/radeon_state.c | 2 +-
1099 drivers/gpu/drm/savage/savage_bci.c | 2 +-
1100 drivers/gpu/drm/savage/savage_drv.c | 5 +-
1101 drivers/gpu/drm/savage/savage_drv.h | 2 +-
1102 drivers/gpu/drm/sis/sis_drv.c | 5 +-
1103 drivers/gpu/drm/sis/sis_drv.h | 2 +-
1104 drivers/gpu/drm/sis/sis_mm.c | 2 +-
1105 drivers/gpu/drm/via/via_dma.c | 2 +-
1106 drivers/gpu/drm/via/via_drv.c | 5 +-
1107 drivers/gpu/drm/via/via_drv.h | 2 +-
1108 include/drm/drmP.h | 2 +-
1109 mm/slab.c | 2 +-
1110 net/sunrpc/xprtrdma/svc_rdma.c | 6 +-
1111 tools/gcc/initify_plugin.c | 15 +++-
1112 .../disable_size_overflow_hash.data | 1 +
1113 .../size_overflow_plugin/size_overflow_hash.data | 3 +-
1114 42 files changed, 156 insertions(+), 110 deletions(-)
1115
1116commit 5fa135dc116350e0205c39ef65eaf6496ed2748a
1117Author: Brad Spengler <spender@grsecurity.net>
1118Date: Sat Jan 16 12:19:23 2016 -0500
1119
1120 compile fix
1121
1122 grsecurity/grsec_sig.c | 3 +--
1123 1 files changed, 1 insertions(+), 2 deletions(-)
1124
1125commit a9090fa58f33f75c7450fda5721a9b13625a47d9
1126Author: Brad Spengler <spender@grsecurity.net>
1127Date: Sat Jan 16 12:10:37 2016 -0500
1128
1129 As pointed out by Jann Horn, some distros are starting to circumvent
1130 previous assumptions about the attainability of a user to control
1131 multiple UIDs by handing out suid binaries that allow a user to run
1132 processes (including exploits) under a number of other pre-defined
1133 UIDs. As this could potentially be used to bypass GRKERNSEC_BRUTE
1134 (though it would have to involve some code path that doesn't involve
1135 locks) fix that here by ensuring no more than 8 users on a system can
1136 be banned before a reboot is required. If more are banned, a panic
1137 is triggered.
1138
1139 grsecurity/grsec_sig.c | 8 ++++++++
1140 1 files changed, 8 insertions(+), 0 deletions(-)
1141
1142commit a8d37776e9521c567ebff6730d49312f72435f08
1143Author: Eric Dumazet <edumazet@google.com>
1144Date: Thu Dec 3 11:12:07 2015 -0800
1145
1146 proc: add a reschedule point in proc_readfd_common()
1147
1148 User can pass an arbitrary large buffer to getdents().
1149
1150 It is typically a 32KB buffer used by libc scandir() implementation.
1151
1152 When scanning /proc/{pid}/fd, we can hold cpu way too long,
1153 so add a cond_resched() to be kind with other tasks.
1154
1155 We've seen latencies of more than 50ms on real workloads.
1156
1157 Signed-off-by: Eric Dumazet <edumazet@google.com>
1158 Cc: Alexander Viro <viro@zeniv.linux.org.uk>
1159 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
1160
1161 fs/proc/fd.c | 1 +
1162 1 files changed, 1 insertions(+), 0 deletions(-)
1163
1164commit 0adba75f8708f13b1f5d98ebe3fc2fb961e100c8
1165Author: Rabin Vincent <rabin@rab.in>
1166Date: Tue Jan 12 20:17:08 2016 +0100
1167
1168 net: bpf: reject invalid shifts
1169
1170 On ARM64, a BUG() is triggered in the eBPF JIT if a filter with a
1171 constant shift that can't be encoded in the immediate field of the
1172 UBFM/SBFM instructions is passed to the JIT. Since these shifts
1173 amounts, which are negative or >= regsize, are invalid, reject them in
1174 the eBPF verifier and the classic BPF filter checker, for all
1175 architectures.
1176
1177 Signed-off-by: Rabin Vincent <rabin@rab.in>
1178 Acked-by: Alexei Starovoitov <ast@kernel.org>
1179 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
1180 Signed-off-by: David S. Miller <davem@davemloft.net>
1181
1182 kernel/bpf/verifier.c | 10 ++++++++++
1183 net/core/filter.c | 5 +++++
1184 2 files changed, 15 insertions(+), 0 deletions(-)
1185
1186commit c248e115a73496625a1c64660d0eeefd67e55cbf
1187Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
1188Date: Fri Jan 8 11:00:54 2016 -0200
1189
1190 sctp: fix use-after-free in pr_debug statement
1191
1192 Dmitry Vyukov reported a use-after-free in the code expanded by the
1193 macro debug_post_sfx, which is caused by the use of the asoc pointer
1194 after it was freed within sctp_side_effect() scope.
1195
1196 This patch fixes it by allowing sctp_side_effect to clear that asoc
1197 pointer when the TCB is freed.
1198
1199 As Vlad explained, we also have to cover the SCTP_DISPOSITION_ABORT case
1200 because it will trigger DELETE_TCB too on that same loop.
1201
1202 Also, there were places issuing SCTP_CMD_INIT_FAILED and ASSOC_FAILED
1203 but returning SCTP_DISPOSITION_CONSUME, which would fool the scheme
1204 above. Fix it by returning SCTP_DISPOSITION_ABORT instead.
1205
1206 The macro is already prepared to handle such NULL pointer.
1207
1208 Reported-by: Dmitry Vyukov <dvyukov@google.com>
1209 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
1210 Acked-by: Vlad Yasevich <vyasevich@gmail.com>
1211 Signed-off-by: David S. Miller <davem@davemloft.net>
1212
1213 net/sctp/sm_sideeffect.c | 11 ++++++-----
1214 net/sctp/sm_statefuns.c | 17 ++++-------------
1215 2 files changed, 10 insertions(+), 18 deletions(-)
1216
1217commit 395ea8a9e73e184fc14153a033000bccf4213213
1218Author: willy tarreau <w@1wt.eu>
1219Date: Sun Jan 10 07:54:56 2016 +0100
1220
1221 unix: properly account for FDs passed over unix sockets
1222
1223 It is possible for a process to allocate and accumulate far more FDs than
1224 the process' limit by sending them over a unix socket then closing them
1225 to keep the process' fd count low.
1226
1227 This change addresses this problem by keeping track of the number of FDs
1228 in flight per user and preventing non-privileged processes from having
1229 more FDs in flight than their configured FD limit.
1230
1231 Reported-by: socketpair@gmail.com
1232 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
1233 Mitigates: CVE-2013-4312 (Linux 2.0+)
1234 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
1235 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
1236 Signed-off-by: Willy Tarreau <w@1wt.eu>
1237 Signed-off-by: David S. Miller <davem@davemloft.net>
1238
1239 include/linux/sched.h | 1 +
1240 net/unix/af_unix.c | 24 ++++++++++++++++++++----
1241 net/unix/garbage.c | 13 ++++++++-----
1242 3 files changed, 29 insertions(+), 9 deletions(-)
1243
1244commit cb207ab8fbd71dcfc4a49d533aba8085012543fd
1245Author: Sasha Levin <sasha.levin@oracle.com>
1246Date: Thu Jan 7 14:52:43 2016 -0500
1247
1248 net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
1249
1250 proc_dostring() needs an initialized destination string, while the one
1251 provided in proc_sctp_do_hmac_alg() contains stack garbage.
1252
1253 Thus, writing to cookie_hmac_alg would strlen() that garbage and end up
1254 accessing invalid memory.
1255
1256 Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic")
1257 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
1258 Signed-off-by: David S. Miller <davem@davemloft.net>
1259
1260 net/sctp/sysctl.c | 2 +-
1261 1 files changed, 1 insertions(+), 1 deletions(-)
1262
1263commit 4014e09faf0fe9054119624ccfff1236e886b554
1264Author: Quentin Casasnovas <quentin.casasnovas@oracle.com>
1265Date: Tue Nov 24 17:13:21 2015 -0500
1266
1267 RDS: fix race condition when sending a message on unbound socket
1268
1269 commit 8c7188b23474cca017b3ef354c4a58456f68303a upstream.
1270
1271 Sasha's found a NULL pointer dereference in the RDS connection code when
1272 sending a message to an apparently unbound socket. The problem is caused
1273 by the code checking if the socket is bound in rds_sendmsg(), which checks
1274 the rs_bound_addr field without taking a lock on the socket. This opens a
1275 race where rs_bound_addr is temporarily set but where the transport is not
1276 in rds_bind(), leading to a NULL pointer dereference when trying to
1277 dereference 'trans' in __rds_conn_create().
1278
1279 Vegard wrote a reproducer for this issue, so kindly ask him to share if
1280 you're interested.
1281
1282 I cannot reproduce the NULL pointer dereference using Vegard's reproducer
1283 with this patch, whereas I could without.
1284
1285 Complete earlier incomplete fix to CVE-2015-6937:
1286
1287 74e98eb08588 ("RDS: verify the underlying transport exists before creating a connection")
1288
1289 Cc: David S. Miller <davem@davemloft.net>
1290
1291 Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
1292 Reviewed-by: Sasha Levin <sasha.levin@oracle.com>
1293 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
1294 Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com>
1295 Signed-off-by: David S. Miller <davem@davemloft.net>
1296 Signed-off-by: Jiri Slaby <jslaby@suse.cz>
1297
1298 Conflicts:
1299
1300 net/rds/send.c
1301
1302 net/rds/connection.c | 6 ------
1303 1 files changed, 0 insertions(+), 6 deletions(-)
1304
1305commit 206df8d01104344d7588d801016a281a4cd25556
1306Author: Sasha Levin <sasha.levin@oracle.com>
1307Date: Tue Sep 8 10:53:40 2015 -0400
1308
1309 RDS: verify the underlying transport exists before creating a connection
1310
1311 There was no verification that an underlying transport exists when creating
1312 a connection, this would cause dereferencing a NULL ptr.
1313
1314 It might happen on sockets that weren't properly bound before attempting to
1315 send a message, which will cause a NULL ptr deref:
1316
1317 [135546.047719] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
1318 [135546.051270] Modules linked in:
1319 [135546.051781] CPU: 4 PID: 15650 Comm: trinity-c4 Not tainted 4.2.0-next-20150902-sasha-00041-gbaa1222-dirty #2527
1320 [135546.053217] task: ffff8800835bc000 ti: ffff8800bc708000 task.ti: ffff8800bc708000
1321 [135546.054291] RIP: __rds_conn_create (net/rds/connection.c:194)
1322 [135546.055666] RSP: 0018:ffff8800bc70fab0 EFLAGS: 00010202
1323 [135546.056457] RAX: dffffc0000000000 RBX: 0000000000000f2c RCX: ffff8800835bc000
1324 [135546.057494] RDX: 0000000000000007 RSI: ffff8800835bccd8 RDI: 0000000000000038
1325 [135546.058530] RBP: ffff8800bc70fb18 R08: 0000000000000001 R09: 0000000000000000
1326 [135546.059556] R10: ffffed014d7a3a23 R11: ffffed014d7a3a21 R12: 0000000000000000
1327 [135546.060614] R13: 0000000000000001 R14: ffff8801ec3d0000 R15: 0000000000000000
1328 [135546.061668] FS: 00007faad4ffb700(0000) GS:ffff880252000000(0000) knlGS:0000000000000000
1329 [135546.062836] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
1330 [135546.063682] CR2: 000000000000846a CR3: 000000009d137000 CR4: 00000000000006a0
1331 [135546.064723] Stack:
1332 [135546.065048] ffffffffafe2055c ffffffffafe23fc1 ffffed00493097bf ffff8801ec3d0008
1333 [135546.066247] 0000000000000000 00000000000000d0 0000000000000000 ac194a24c0586342
1334 [135546.067438] 1ffff100178e1f78 ffff880320581b00 ffff8800bc70fdd0 ffff880320581b00
1335 [135546.068629] Call Trace:
1336 [135546.069028] ? __rds_conn_create (include/linux/rcupdate.h:856 net/rds/connection.c:134)
1337 [135546.069989] ? rds_message_copy_from_user (net/rds/message.c:298)
1338 [135546.071021] rds_conn_create_outgoing (net/rds/connection.c:278)
1339 [135546.071981] rds_sendmsg (net/rds/send.c:1058)
1340 [135546.072858] ? perf_trace_lock (include/trace/events/lock.h:38)
1341 [135546.073744] ? lockdep_init (kernel/locking/lockdep.c:3298)
1342 [135546.074577] ? rds_send_drop_to (net/rds/send.c:976)
1343 [135546.075508] ? __might_fault (./arch/x86/include/asm/current.h:14 mm/memory.c:3795)
1344 [135546.076349] ? __might_fault (mm/memory.c:3795)
1345 [135546.077179] ? rds_send_drop_to (net/rds/send.c:976)
1346 [135546.078114] sock_sendmsg (net/socket.c:611 net/socket.c:620)
1347 [135546.078856] SYSC_sendto (net/socket.c:1657)
1348 [135546.079596] ? SYSC_connect (net/socket.c:1628)
1349 [135546.080510] ? trace_dump_stack (kernel/trace/trace.c:1926)
1350 [135546.081397] ? ring_buffer_unlock_commit (kernel/trace/ring_buffer.c:2479 kernel/trace/ring_buffer.c:2558 kernel/trace/ring_buffer.c:2674)
1351 [135546.082390] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
1352 [135546.083410] ? trace_event_raw_event_sys_enter (include/trace/events/syscalls.h:16)
1353 [135546.084481] ? do_audit_syscall_entry (include/trace/events/syscalls.h:16)
1354 [135546.085438] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
1355 [135546.085515] rds_ib_laddr_check(): addr 36.74.25.172 ret -99 node type -1
1356
1357 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
1358 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
1359 Signed-off-by: David S. Miller <davem@davemloft.net>
1360
1361 net/rds/connection.c | 6 ++++++
1362 1 files changed, 6 insertions(+), 0 deletions(-)
1363
1364commit 173fa03f05cf0ad485d49a42cbdee8844d3a689a
1365Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
1366Date: Tue Jan 5 20:32:47 2016 -0500
1367
1368 ftrace/module: Call clean up function when module init fails early
1369
1370 If the module init code fails after calling ftrace_module_init() and before
1371 calling do_init_module(), we can suffer from a memory leak. This is because
1372 ftrace_module_init() allocates pages to store the locations that ftrace
1373 hooks are placed in the module text. If do_init_module() fails, it still
1374 calls the MODULE_GOING notifiers which will tell ftrace to do a clean up of
1375 the pages it allocated for the module. But if load_module() fails before
1376 then, the pages allocated by ftrace_module_init() will never be freed.
1377
1378 Call ftrace_release_mod() on the module if load_module() fails before
1379 getting to do_init_module().
1380
1381 Link: http://lkml.kernel.org/r/567CEA31.1070507@intel.com
1382
1383 Reported-by: "Qiu, PeiyangX" <peiyangx.qiu@intel.com>
1384 Fixes: a949ae560a511 "ftrace/module: Hardcode ftrace_module_init() call into load_module()"
1385 Cc: stable@vger.kernel.org # v2.6.38+
1386 Acked-by: Rusty Russell <rusty@rustcorp.com.au>
1387 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
1388
1389 include/linux/ftrace.h | 1 +
1390 kernel/module.c | 6 ++++++
1391 2 files changed, 7 insertions(+), 0 deletions(-)
1392
1393commit 1e5a4a81a4c16c8ac2e264b88a02cc2f42ed0399
1394Author: Francesco Ruggeri <fruggeri@aristanetworks.com>
1395Date: Wed Jan 6 00:18:48 2016 -0800
1396
1397 net: possible use after free in dst_release
1398
1399 dst_release should not access dst->flags after decrementing
1400 __refcnt to 0. The dst_entry may be in dst_busy_list and
1401 dst_gc_task may dst_destroy it before dst_release gets a chance
1402 to access dst->flags.
1403
1404 Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()")
1405 Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
1406 Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
1407 Acked-by: Eric Dumazet <edumazet@google.com>
1408 Signed-off-by: David S. Miller <davem@davemloft.net>
1409
1410 net/core/dst.c | 3 ++-
1411 1 files changed, 2 insertions(+), 1 deletions(-)
1412
1413commit bfb0455793dd4e0f0b49d34a68b3249ab55565cc
1414Author: Alan <gnomes@lxorguk.ukuu.org.uk>
1415Date: Wed Jan 6 14:55:02 2016 +0000
1416
1417 mkiss: fix scribble on freed memory
1418
1419 commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
1420 scribble on free memory but added a new one which allows the user to
1421 scribble even more and user controlled data into freed space.
1422
1423 As with 6pack we need to halt the queue before we free the buffers, because
1424 the transmit logic is not protected by the semaphore.
1425
1426 Signed-off-by: Alan Cox <alan@linux.intel.com>
1427 Signed-off-by: David S. Miller <davem@davemloft.net>
1428
1429 drivers/net/hamradio/mkiss.c | 5 +++++
1430 1 files changed, 5 insertions(+), 0 deletions(-)
1431
1432commit 5cbbcbd32dc1949470f61d342503808fa9555276
1433Author: David Miller <davem@davemloft.net>
1434Date: Thu Dec 17 16:05:49 2015 -0500
1435
1436 mkiss: Fix use after free in mkiss_close().
1437
1438 Need to do the unregister_device() after all references to the driver
1439 private have been done.
1440
1441 Signed-off-by: David S. Miller <davem@davemloft.net>
1442
1443 drivers/net/hamradio/mkiss.c | 4 ++--
1444 1 files changed, 2 insertions(+), 2 deletions(-)
1445
1446commit b00171576794a98068e069a660f0991a6a5190ff
1447Author: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>
1448Date: Tue Jan 5 11:51:25 2016 +0000
1449
1450 6pack: fix free memory scribbles
1451
1452 commit acf673a3187edf72068ee2f92f4dc47d66baed47 fixed a user triggerable free
1453 memory scribble but in doing so replaced it with a different one that allows
1454 the user to control the data and scribble even more.
1455
1456 sixpack_close is called by the tty layer in tty context. The tty context is
1457 protected by sp_get() and sp_put(). However network layer activity via
1458 sp_xmit() is not protected this way. We must therefore stop the queue
1459 otherwise the user gets to dump a buffer mostly of their choice into freed
1460 kernel pages.
1461
1462 Signed-off-by: Alan Cox <alan@linux.intel.com>
1463 Signed-off-by: David S. Miller <davem@davemloft.net>
1464
1465 drivers/net/hamradio/6pack.c | 6 ++++++
1466 1 files changed, 6 insertions(+), 0 deletions(-)
1467
1468commit 5b64a833907cd230a3106aeba2304b2c1bcd116d
1469Author: David Miller <davem@davemloft.net>
1470Date: Thu Dec 17 16:05:32 2015 -0500
1471
1472 6pack: Fix use after free in sixpack_close().
1473
1474 Need to do the unregister_device() after all references to the driver
1475 private have been done.
1476
1477 Also we need to use del_timer_sync() for the timers so that we don't
1478 have any asynchronous references after the unregister.
1479
1480 Signed-off-by: David S. Miller <davem@davemloft.net>
1481
1482 drivers/net/hamradio/6pack.c | 8 ++++----
1483 1 files changed, 4 insertions(+), 4 deletions(-)
1484
1485commit 4f9d532742656b3613d579220fd10c78f24ba37b
1486Author: Rabin Vincent <rabin@rab.in>
1487Date: Tue Jan 5 16:23:07 2016 +0100
1488
1489 net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
1490
1491 The SKF_AD_ALU_XOR_X ancillary is not like the other ancillary data
1492 instructions since it XORs A with X while all the others replace A with
1493 some loaded value. All the BPF JITs fail to clear A if this is used as
1494 the first instruction in a filter. This was found using american fuzzy
1495 lop.
1496
1497 Add a helper to determine if A needs to be cleared given the first
1498 instruction in a filter, and use this in the JITs. Except for ARM, the
1499 rest have only been compile-tested.
1500
1501 Fixes: 3480593131e0 ("net: filter: get rid of BPF_S_* enum")
1502 Signed-off-by: Rabin Vincent <rabin@rab.in>
1503 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
1504 Acked-by: Alexei Starovoitov <ast@kernel.org>
1505 Signed-off-by: David S. Miller <davem@davemloft.net>
1506
1507 arch/arm/net/bpf_jit_32.c | 16 +---------------
1508 arch/mips/net/bpf_jit.c | 16 +---------------
1509 arch/powerpc/net/bpf_jit_comp.c | 13 ++-----------
1510 arch/sparc/net/bpf_jit_comp.c | 17 ++---------------
1511 include/linux/filter.h | 19 +++++++++++++++++++
1512 5 files changed, 25 insertions(+), 56 deletions(-)
1513
1514commit 570d88f8acfffda92b89ae2e1c47320d47256034
1515Author: John Fastabend <john.fastabend@gmail.com>
1516Date: Tue Jan 5 09:11:36 2016 -0800
1517
1518 net: sched: fix missing free per cpu on qstats
1519
1520 When a qdisc is using per cpu stats (currently just the ingress
1521 qdisc) only the bstats are being freed. This also free's the qstats.
1522
1523 Fixes: b0ab6f92752b9f9d8 ("net: sched: enable per cpu qstats")
1524 Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
1525 Acked-by: Eric Dumazet <edumazet@google.com>
1526 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
1527 Signed-off-by: David S. Miller <davem@davemloft.net>
1528
1529 net/sched/sch_generic.c | 4 +++-
1530 1 files changed, 3 insertions(+), 1 deletions(-)
1531
1532commit 32c0ebc51857ee83470a10dcb234d308a0ed1881
1533Author: Rabin Vincent <rabin@rab.in>
1534Date: Tue Jan 5 18:34:04 2016 +0100
1535
1536 ARM: net: bpf: fix zero right shift
1537
1538 The LSR instruction cannot be used to perform a zero right shift since a
1539 0 as the immediate value (imm5) in the LSR instruction encoding means
1540 that a shift of 32 is perfomed. See DecodeIMMShift() in the ARM ARM.
1541
1542 Make the JIT skip generation of the LSR if a zero-shift is requested.
1543
1544 This was found using american fuzzy lop.
1545
1546 Signed-off-by: Rabin Vincent <rabin@rab.in>
1547 Acked-by: Alexei Starovoitov <ast@kernel.org>
1548 Signed-off-by: David S. Miller <davem@davemloft.net>
1549
1550 arch/arm/net/bpf_jit_32.c | 3 ++-
1551 1 files changed, 2 insertions(+), 1 deletions(-)
1552
1553commit 51f5d291750285efa4d4bbe84e5ec23dc00c8d2d
1554Author: Brad Spengler <spender@grsecurity.net>
1555Date: Wed Jan 6 20:35:57 2016 -0500
1556
1557 Don't perform hidden lookups in RBAC against the directory of
1558 a file being opened with O_CREAT, reported by Karl Witt
1559
1560 Conflicts:
1561
1562 fs/namei.c
1563
1564 fs/namei.c | 3 ---
1565 1 files changed, 0 insertions(+), 3 deletions(-)
1566
4af7ec18
PK		 1567commit 5a8266a6b2769ccdb447256f95bc2577a73cccd1
1568Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
1569Date: Tue Jan 5 10:46:00 2016 +0100
1570
1571 bridge: Only call /sbin/bridge-stp for the initial network namespace
1572
1573 [I stole this patch from Eric Biederman. He wrote:]
1574
1575 > There is no defined mechanism to pass network namespace information
1576 > into /sbin/bridge-stp therefore don't even try to invoke it except
1577 > for bridge devices in the initial network namespace.
1578 >
1579 > It is possible for unprivileged users to cause /sbin/bridge-stp to be
1580 > invoked for any network device name which if /sbin/bridge-stp does not
1581 > guard against unreasonable arguments or being invoked twice on the
1582 > same network device could cause problems.
1583
1584 [Hannes: changed patch using netns_eq]
1585
1586 Cc: Eric W. Biederman <ebiederm@xmission.com>
1587 Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
1588 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
1589 Signed-off-by: David S. Miller <davem@davemloft.net>
1590
1591 net/bridge/br_stp_if.c | 5 ++++-
1592 1 files changed, 4 insertions(+), 1 deletions(-)
1593
1594commit 650d535cc39f0aeff2f57e60b6617be25d3ef48b
1595Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
1596Date: Wed Dec 23 16:28:40 2015 -0200
1597
1598 sctp: use GFP_USER for user-controlled kmalloc
1599
1600 Commit cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
1601 missed two other spots.
1602
1603 For connectx, as it's more likely to be used by kernel users of the API,
1604 it detects if GFP_USER should be used or not.
1605
1606 Fixes: cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
1607 Reported-by: Dmitry Vyukov <dvyukov@google.com>
1608 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
1609 Signed-off-by: David S. Miller <davem@davemloft.net>
1610
1611 net/sctp/socket.c | 9 ++++++---
1612 1 files changed, 6 insertions(+), 3 deletions(-)
1613
1614commit 5718a1f63c41fc156f729783423b002763779d04
1615Author: Florian Westphal <fw@strlen.de>
1616Date: Thu Dec 31 14:26:33 2015 +0100
1617
1618 connector: bump skb->users before callback invocation
1619
1620 Dmitry reports memleak with syskaller program.
1621 Problem is that connector bumps skb usecount but might not invoke callback.
1622
1623 So move skb_get to where we invoke the callback.
1624
1625 Reported-by: Dmitry Vyukov <dvyukov@google.com>
1626 Signed-off-by: Florian Westphal <fw@strlen.de>
1627 Signed-off-by: David S. Miller <davem@davemloft.net>
1628
1629 drivers/connector/connector.c | 11 +++--------
1630 1 files changed, 3 insertions(+), 8 deletions(-)
1631
1632commit 2e6372e6a97f8d642416899861f91777f44f13b7
1633Author: Rainer Weikusat <rweikusat@mobileactivedefense.com>
1634Date: Sun Jan 3 18:56:38 2016 +0000
1635
1636 af_unix: Fix splice-bind deadlock
1637
1638 On 2015/11/06, Dmitry Vyukov reported a deadlock involving the splice
1639 system call and AF_UNIX sockets,
1640
1641 http://lists.openwall.net/netdev/2015/11/06/24
1642
1643 The situation was analyzed as
1644
1645 (a while ago) A: socketpair()
1646 B: splice() from a pipe to /mnt/regular_file
1647 does sb_start_write() on /mnt
1648 C: try to freeze /mnt
1649 wait for B to finish with /mnt
1650 A: bind() try to bind our socket to /mnt/new_socket_name
1651 lock our socket, see it not bound yet
1652 decide that it needs to create something in /mnt
1653 try to do sb_start_write() on /mnt, block (it's
1654 waiting for C).
1655 D: splice() from the same pipe to our socket
1656 lock the pipe, see that socket is connected
1657 try to lock the socket, block waiting for A
1658 B: get around to actually feeding a chunk from
1659 pipe to file, try to lock the pipe. Deadlock.
1660
1661 on 2015/11/10 by Al Viro,
1662
1663 http://lists.openwall.net/netdev/2015/11/10/4
1664
1665 The patch fixes this by removing the kern_path_create related code from
1666 unix_mknod and executing it as part of unix_bind prior acquiring the
1667 readlock of the socket in question. This means that A (as used above)
1668 will sb_start_write on /mnt before it acquires the readlock, hence, it
1669 won't indirectly block B which first did a sb_start_write and then
1670 waited for a thread trying to acquire the readlock. Consequently, A
1671 being blocked by C waiting for B won't cause a deadlock anymore
1672 (effectively, both A and B acquire two locks in opposite order in the
1673 situation described above).
1674
1675 Dmitry Vyukov(<dvyukov@google.com>) tested the original patch.
1676
1677 Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
1678 Signed-off-by: David S. Miller <davem@davemloft.net>
1679
1680 Conflicts:
1681
1682 net/unix/af_unix.c
1683
1684 net/unix/af_unix.c | 70 +++++++++++++++++++++++++++++++--------------------
1685 1 files changed, 42 insertions(+), 28 deletions(-)
1686
1687commit 2e729e557c571f3253e32472cd7d382ac16cf1c3
1688Author: Qiu Peiyang <peiyangx.qiu@intel.com>
1689Date: Thu Dec 31 13:11:28 2015 +0800
1690
1691 tracing: Fix setting of start_index in find_next()
1692
1693 When we do cat /sys/kernel/debug/tracing/printk_formats, we hit kernel
1694 panic at t_show.
1695
1696 general protection fault: 0000 [#1] PREEMPT SMP
1697 CPU: 0 PID: 2957 Comm: sh Tainted: G W O 3.14.55-x86_64-01062-gd4acdc7 #2
1698 RIP: 0010:[<ffffffff811375b2>]
1699 [<ffffffff811375b2>] t_show+0x22/0xe0
1700 RSP: 0000:ffff88002b4ebe80 EFLAGS: 00010246
1701 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004
1702 RDX: 0000000000000004 RSI: ffffffff81fd26a6 RDI: ffff880032f9f7b1
1703 RBP: ffff88002b4ebe98 R08: 0000000000001000 R09: 000000000000ffec
1704 R10: 0000000000000000 R11: 000000000000000f R12: ffff880004d9b6c0
1705 R13: 7365725f6d706400 R14: ffff880004d9b6c0 R15: ffffffff82020570
1706 FS: 0000000000000000(0000) GS:ffff88003aa00000(0063) knlGS:00000000f776bc40
1707 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
1708 CR2: 00000000f6c02ff0 CR3: 000000002c2b3000 CR4: 00000000001007f0
1709 Call Trace:
1710 [<ffffffff811dc076>] seq_read+0x2f6/0x3e0
1711 [<ffffffff811b749b>] vfs_read+0x9b/0x160
1712 [<ffffffff811b7f69>] SyS_read+0x49/0xb0
1713 [<ffffffff81a3a4b9>] ia32_do_call+0x13/0x13
1714 ---[ end trace 5bd9eb630614861e ]---
1715 Kernel panic - not syncing: Fatal exception
1716
1717 When the first time find_next calls find_next_mod_format, it should
1718 iterate the trace_bprintk_fmt_list to find the first print format of
1719 the module. However in current code, start_index is smaller than *pos
1720 at first, and code will not iterate the list. Latter container_of will
1721 get the wrong address with former v, which will cause mod_fmt be a
1722 meaningless object and so is the returned mod_fmt->fmt.
1723
1724 This patch will fix it by correcting the start_index. After fixed,
1725 when the first time calls find_next_mod_format, start_index will be
1726 equal to *pos, and code will iterate the trace_bprintk_fmt_list to
1727 get the right module printk format, so is the returned mod_fmt->fmt.
1728
1729 Link: http://lkml.kernel.org/r/5684B900.9000309@intel.com
1730
1731 Cc: stable@vger.kernel.org # 3.12+
1732 Fixes: 102c9323c35a8 "tracing: Add __tracepoint_string() to export string pointers"
1733 Signed-off-by: Qiu Peiyang <peiyangx.qiu@intel.com>
1734 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
1735
1736 kernel/trace/trace_printk.c | 1 +
1737 1 files changed, 1 insertions(+), 0 deletions(-)
1738
1739commit 0994af4b1930f32aa493dc08145cd304f8bfc8f4
1740Author: Al Viro <viro@zeniv.linux.org.uk>
1741Date: Mon Dec 28 20:47:08 2015 -0500
1742
1743 [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
1744
1745 Cc: stable@vger.kernel.org # 3.15+
1746 Reviewed-by: Jeff Layton <jeff.layton@primarydata.com>
1747 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
1748
1749 arch/arm/kernel/sys_oabi-compat.c | 73 +++++++++++++++++++------------------
1750 1 files changed, 37 insertions(+), 36 deletions(-)
1751
1752commit 4ed030f65dcf3e6b0128032a49a7d75f947fa351
1753Merge: de243c2 3adc55a
1754Author: Brad Spengler <spender@grsecurity.net>
1755Date: Tue Jan 5 18:10:10 2016 -0500
1756
1757 Merge branch 'pax-test' into grsec-test
1758
1759commit 3adc55a5acfa429c2a7cc883aef08b960c0079b0
1760Author: Brad Spengler <spender@grsecurity.net>
1761Date: Tue Jan 5 18:08:53 2016 -0500
1762
1763 Update to pax-linux-4.3.3-test16.patch:
1764 - small cleanup in entry_64.S on x86
1765 - Emese fixed the initify plugin to recursively check variable initializers, reported by Rasmus Villemoes
1766 - fixed an integer truncation of a partially uninitialized value bug in em_pop_sreg, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4354)
1767 - fixed alternatives patching of call insns under KERNEXEC/i386, reported by fly_a320 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4305) and TTgrsec (https://forums.grsecurity.net/viewtopic.php?f=3&t=4353)
1768 - fixed a size overflow false positive that triggered in tcp_parse_options on arm, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350&p=15917#p15916)
1769 - fixed a boot crash on amd64 with KERNEXEC/OR and CONTEXT_TRACKING, reported by Klaus Kusche (https://bugs.gentoo.org/show_bug.cgi?id=570420)
1770
1771 arch/x86/entry/entry_64.S | 60 +++++-----
1772 arch/x86/kernel/alternative.c | 2 +-
1773 arch/x86/kvm/emulate.c | 4 +-
1774 tools/gcc/initify_plugin.c | 123 +++++++++----------
1775 .../disable_size_overflow_hash.data | 4 +-
1776 .../size_overflow_plugin/size_overflow_hash.data | 2 -
1777 6 files changed, 93 insertions(+), 102 deletions(-)
1778
1779commit de243c26efd0e423ca92db825af2c3f8eb1ca043
1780Author: Brad Spengler <spender@grsecurity.net>
1781Date: Tue Dec 29 18:01:24 2015 -0500
1782
1783 It was noticed during an internal audit that the code under GRKERNSEC_PROC_MEMMAP
1784 which aimed to enforce a 16MB minimum on RLIMIT_DATA for suid/sgid binaries only
1785 did so if RLIMIT_DATA was set lower than PAGE_SIZE.
1786
1787 This addition was only supplemental as GRKERNSEC_BRUTE is the main defense
1788 against suid/sgid attacks and the flaw above would only eliminate the extra
1789 entropy provided for the brk-managed heap, still leaving it with the minimum
1790 of 16-bit entropy for mmap on x86 and 28 on x64.
1791
1792 mm/mmap.c | 2 +-
1793 1 files changed, 1 insertions(+), 1 deletions(-)
1794
553f6f4b
PK		 1795commit 8e264cfe47e5f08cdc9ed009a630277206cd2534
1796Merge: 436201b 2584340
1797Author: Brad Spengler <spender@grsecurity.net>
1798Date: Mon Dec 28 20:30:01 2015 -0500
1799
1800 Merge branch 'pax-test' into grsec-test
1801
1802commit 2584340eab494e64ec1bf9eb5b0d1ae31f926306
1803Author: Brad Spengler <spender@grsecurity.net>
1804Date: Mon Dec 28 20:29:28 2015 -0500
1805
1806 Update to pax-linux-4.3.3-test14.patch:
1807 - fixed an integer sign conversion error in i2c_dw_pci_probe caught by the size overflow plugin, reported by Jean Lucas and ganymede (https://forums.grsecurity.net/viewtopic.php?f=3&t=4349)
1808 - fixed shutdown crash with tboot and KERNEXEC, reported by perfinion
1809 - fixed a few false positive and one real size overflow reports in hyperv, reported by hunger
1810 - fixed compile regressions on armv5, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350)
1811 - fixed an assert in the initify plugin that triggered in vic_register on arm
1812
1813 arch/arm/include/asm/atomic.h | 7 +++++--
1814 arch/arm/include/asm/domain.h | 5 ++---
1815 arch/x86/kernel/tboot.c | 14 +++++++++-----
1816 drivers/hv/channel.c | 4 +---
1817 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
1818 drivers/net/hyperv/rndis_filter.c | 3 +--
1819 fs/exec.c | 4 ++--
1820 include/linux/atomic.h | 15 ---------------
1821 net/core/skbuff.c | 3 ++-
1822 tools/gcc/initify_plugin.c | 4 +++-
1823 10 files changed, 26 insertions(+), 35 deletions(-)
1824
1825commit 436201b6626b488d173c8076447000077c27b84a
1826Author: David Howells <dhowells@redhat.com>
1827Date: Fri Dec 18 01:34:26 2015 +0000
1828
1829 KEYS: Fix race between read and revoke
1830
1831 This fixes CVE-2015-7550.
1832
1833 There's a race between keyctl_read() and keyctl_revoke(). If the revoke
1834 happens between keyctl_read() checking the validity of a key and the key's
1835 semaphore being taken, then the key type read method will see a revoked key.
1836
1837 This causes a problem for the user-defined key type because it assumes in
1838 its read method that there will always be a payload in a non-revoked key
1839 and doesn't check for a NULL pointer.
1840
1841 Fix this by making keyctl_read() check the validity of a key after taking
1842 semaphore instead of before.
1843
1844 I think the bug was introduced with the original keyrings code.
1845
1846 This was discovered by a multithreaded test program generated by syzkaller
1847 (http://github.com/google/syzkaller). Here's a cleaned up version:
1848
1849 #include <sys/types.h>
1850 #include <keyutils.h>
1851 #include <pthread.h>
1852 void *thr0(void *arg)
1853 {
1854 key_serial_t key = (unsigned long)arg;
1855 keyctl_revoke(key);
1856 return 0;
1857 }
1858 void *thr1(void *arg)
1859 {
1860 key_serial_t key = (unsigned long)arg;
1861 char buffer[16];
1862 keyctl_read(key, buffer, 16);
1863 return 0;
1864 }
1865 int main()
1866 {
1867 key_serial_t key = add_key("user", "%", "foo", 3, KEY_SPEC_USER_KEYRING);
1868 pthread_t th[5];
1869 pthread_create(&th[0], 0, thr0, (void *)(unsigned long)key);
1870 pthread_create(&th[1], 0, thr1, (void *)(unsigned long)key);
1871 pthread_create(&th[2], 0, thr0, (void *)(unsigned long)key);
1872 pthread_create(&th[3], 0, thr1, (void *)(unsigned long)key);
1873 pthread_join(th[0], 0);
1874 pthread_join(th[1], 0);
1875 pthread_join(th[2], 0);
1876 pthread_join(th[3], 0);
1877 return 0;
1878 }
1879
1880 Build as:
1881
1882 cc -o keyctl-race keyctl-race.c -lkeyutils -lpthread
1883
1884 Run as:
1885
1886 while keyctl-race; do :; done
1887
1888 as it may need several iterations to crash the kernel. The crash can be
1889 summarised as:
1890
1891 BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
1892 IP: [<ffffffff81279b08>] user_read+0x56/0xa3
1893 ...
1894 Call Trace:
1895 [<ffffffff81276aa9>] keyctl_read_key+0xb6/0xd7
1896 [<ffffffff81277815>] SyS_keyctl+0x83/0xe0
1897 [<ffffffff815dbb97>] entry_SYSCALL_64_fastpath+0x12/0x6f
1898
1899 Reported-by: Dmitry Vyukov <dvyukov@google.com>
1900 Signed-off-by: David Howells <dhowells@redhat.com>
1901 Tested-by: Dmitry Vyukov <dvyukov@google.com>
1902 Cc: stable@vger.kernel.org
1903 Signed-off-by: James Morris <james.l.morris@oracle.com>
1904
1905 security/keys/keyctl.c | 18 +++++++++---------
1906 1 files changed, 9 insertions(+), 9 deletions(-)
1907
4dac8ce1
PK		 1908commit 195cea04477025da4a2078bd3e1fb7c4e11206c2
1909Author: Brad Spengler <spender@grsecurity.net>
1910Date: Tue Dec 22 20:44:01 2015 -0500
1911
1912 Add new kernel command-line param: pax_size_overflow_report_only
1913 If a user triggers a size_overflow violation that makes it difficult
1914 to obtain the call trace without serial console/net console, they can
1915 use this option to provide that information to us
1916
1917 Documentation/kernel-parameters.txt | 5 +++++
1918 fs/exec.c | 12 +++++++++---
1919 init/main.c | 11 +++++++++++
1920 3 files changed, 25 insertions(+), 3 deletions(-)
1921
1922commit 4254a8da5851df8c08cdca5c392916e8c105408d
1923Author: WANG Cong <xiyou.wangcong@gmail.com>
1924Date: Mon Dec 21 10:55:45 2015 -0800
1925
1926 addrconf: always initialize sysctl table data
1927
1928 When sysctl performs restrict writes, it allows to write from
1929 a middle position of a sysctl file, which requires us to initialize
1930 the table data before calling proc_dostring() for the write case.
1931
1932 Fixes: 3d1bec99320d ("ipv6: introduce secret_stable to ipv6_devconf")
1933 Reported-by: Sasha Levin <sasha.levin@oracle.com>
1934 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
1935 Tested-by: Sasha Levin <sasha.levin@oracle.com>
1936 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
1937 Signed-off-by: David S. Miller <davem@davemloft.net>
1938
1939 net/ipv6/addrconf.c | 11 ++++-------
1940 1 files changed, 4 insertions(+), 7 deletions(-)
1941
1942commit f8002863fb06c363180637046947a78a6ccb3d33
1943Author: WANG Cong <xiyou.wangcong@gmail.com>
1944Date: Wed Dec 16 23:39:04 2015 -0800
1945
1946 net: check both type and procotol for tcp sockets
1947
1948 Dmitry reported the following out-of-bound access:
1949
1950 Call Trace:
1951 [<ffffffff816cec2e>] __asan_report_load4_noabort+0x3e/0x40
1952 mm/kasan/report.c:294
1953 [<ffffffff84affb14>] sock_setsockopt+0x1284/0x13d0 net/core/sock.c:880
1954 [< inline >] SYSC_setsockopt net/socket.c:1746
1955 [<ffffffff84aed7ee>] SyS_setsockopt+0x1fe/0x240 net/socket.c:1729
1956 [<ffffffff85c18c76>] entry_SYSCALL_64_fastpath+0x16/0x7a
1957 arch/x86/entry/entry_64.S:185
1958
1959 This is because we mistake a raw socket as a tcp socket.
1960 We should check both sk->sk_type and sk->sk_protocol to ensure
1961 it is a tcp socket.
1962
1963 Willem points out __skb_complete_tx_timestamp() needs to fix as well.
1964
1965 Reported-by: Dmitry Vyukov <dvyukov@google.com>
1966 Cc: Willem de Bruijn <willemdebruijn.kernel@gmail.com>
1967 Cc: Eric Dumazet <eric.dumazet@gmail.com>
1968 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
1969 Acked-by: Willem de Bruijn <willemb@google.com>
1970 Signed-off-by: David S. Miller <davem@davemloft.net>
1971
1972 net/core/skbuff.c | 3 ++-
1973 net/core/sock.c | 3 ++-
1974 2 files changed, 4 insertions(+), 2 deletions(-)
1975
1976commit bd6b3399804470a4ad8f34229469ca149dceba3d
1977Author: Colin Ian King <colin.king@canonical.com>
1978Date: Fri Dec 18 14:22:01 2015 -0800
1979
1980 proc: fix -ESRCH error when writing to /proc/$pid/coredump_filter
1981
1982 Writing to /proc/$pid/coredump_filter always returns -ESRCH because commit
1983 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") removed
1984 the setting of ret after the get_proc_task call and incorrectly left it as
1985 -ESRCH. Instead, return 0 when successful.
1986
1987 Example breakage:
1988
1989 echo 0 > /proc/self/coredump_filter
1990 bash: echo: write error: No such process
1991
1992 Fixes: 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()")
1993 Signed-off-by: Colin Ian King <colin.king@canonical.com>
1994 Acked-by: Kees Cook <keescook@chromium.org>
1995 Cc: <stable@vger.kernel.org> [4.3+]
1996 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
1997 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
1998
1999 fs/proc/base.c | 1 +
2000 1 files changed, 1 insertions(+), 0 deletions(-)
2001
2002commit b28aca2b99ed08546778355fb9402c503ff9b29e
2003Author: Junichi Nomura <j-nomura@ce.jp.nec.com>
2004Date: Tue Dec 22 10:23:44 2015 -0700
2005
2006 block: ensure to split after potentially bouncing a bio
2007
2008 blk_queue_bio() does split then bounce, which makes the segment
2009 counting based on pages before bouncing and could go wrong. Move
2010 the split to after bouncing, like we do for blk-mq, and the we
2011 fix the issue of having the bio count for segments be wrong.
2012
2013 Fixes: 54efd50bfd87 ("block: make generic_make_request handle arbitrarily sized bios")
2014 Cc: stable@vger.kernel.org
2015 Tested-by: Artem S. Tashkinov <t.artem@lycos.com>
2016 Signed-off-by: Jens Axboe <axboe@fb.com>
2017
2018 block/blk-core.c | 4 ++--
2019 1 files changed, 2 insertions(+), 2 deletions(-)
2020
2021commit e62a25e917a9e5b35ddd5b4f1b5e5e30fbd2e84c
2022Merge: f6f63ae ec72fa5
2023Author: Brad Spengler <spender@grsecurity.net>
2024Date: Tue Dec 22 19:46:26 2015 -0500
2025
2026 Merge branch 'pax-test' into grsec-test
2027
2028commit ec72fa5f8d9cb4e223bad1b8b5c2e1071c222f2a
2029Author: Brad Spengler <spender@grsecurity.net>
2030Date: Tue Dec 22 19:45:51 2015 -0500
2031
2032 Update to pax-linux-4.3.3-test13.patch:
2033 - Emese fixed a (probably) false positive integer truncation in xfs_da_grow_inode_int, reported by jdkbx (http://forums.grsecurity.net/viewtopic.php?f=3&t=4346)
2034 - fixed a size overflow in btrfs/try_merge_map, reported by Alex W (https://bugs.archlinux.org/task/47173) and mathias and dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4344)
2035
2036 arch/arm/mm/fault.c | 2 +-
2037 arch/x86/mm/fault.c | 2 +-
2038 fs/btrfs/extent_map.c | 8 ++++++--
2039 fs/xfs/libxfs/xfs_da_btree.c | 4 +++-
2040 4 files changed, 11 insertions(+), 5 deletions(-)
2041
2042commit f6f63ae154cd45028add1dc41957878060d77fbf
2043Author: Brad Spengler <spender@grsecurity.net>
2044Date: Thu Dec 17 18:43:44 2015 -0500
2045
2046 ptrace_has_cap() checks whether the current process should be
2047 treated as having a certain capability for ptrace checks
2048 against another process. Until now, this was equivalent to
2049 has_ns_capability(current, target_ns, CAP_SYS_PTRACE).
2050
2051 However, if a root-owned process wants to enter a user
2052 namespace for some reason without knowing who owns it and
2053 therefore can't change to the namespace owner's uid and gid
2054 before entering, as soon as it has entered the namespace,
2055 the namespace owner can attach to it via ptrace and thereby
2056 gain access to its uid and gid.
2057
2058 While it is possible for the entering process to switch to
2059 the uid of a claimed namespace owner before entering,
2060 causing the attempt to enter to fail if the claimed uid is
2061 wrong, this doesn't solve the problem of determining an
2062 appropriate gid.
2063
2064 With this change, the entering process can first enter the
2065 namespace and then safely inspect the namespace's
2066 properties, e.g. through /proc/self/{uid_map,gid_map},
2067 assuming that the namespace owner doesn't have access to
2068 uid 0.
2069 Signed-off-by: Jann Horn <jann@thejh.net>
2070
2071 kernel/ptrace.c | 30 +++++++++++++++++++++++++-----
2072 1 files changed, 25 insertions(+), 5 deletions(-)
2073
18339baf
PK		 2074commit e314f0fb63020f61543b401ff594e953c2c304e5
2075Author: tadeusz.struk@intel.com <tadeusz.struk@intel.com>
2076Date: Tue Dec 15 10:46:17 2015 -0800
2077
2078 net: fix uninitialized variable issue
2079
2080 msg_iocb needs to be initialized on the recv/recvfrom path.
2081 Otherwise afalg will wrongly interpret it as an async call.
2082
2083 Cc: stable@vger.kernel.org
2084 Reported-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
2085 Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com>
2086 Signed-off-by: David S. Miller <davem@davemloft.net>
2087
2088 net/socket.c | 1 +
2089 1 files changed, 1 insertions(+), 0 deletions(-)
2090
2091commit a3f56a43ad56b8fcaf04f6327636ed2f5970de3b
2092Merge: dfa764c 142edcf
2093Author: Brad Spengler <spender@grsecurity.net>
2094Date: Wed Dec 16 21:01:17 2015 -0500
2095
2096 Merge branch 'pax-test' into grsec-test
2097
2098commit 142edcf1005a57fb8887823565cf0bafad2f313c
2099Author: Brad Spengler <spender@grsecurity.net>
2100Date: Wed Dec 16 21:00:57 2015 -0500
2101
2102 Update to pax-linux-4.3.3-test12.patch:
2103 - Emese fixed a size overflow false positive in reiserfs/leaf_paste_entries, reported by Christian Apeltauer (https://bugs.gentoo.org/show_bug.cgi?id=568046)
2104 - fixed a bunch of int/size_t mismatches in the drivers/tty/n_tty.c code causing size overflow false positives, reported by Toralf Förster, mathias (https://forums.grsecurity.net/viewtopic.php?f=3&t=4342), N8Fear (https://forums.grsecurity.net/viewtopic.php?f=3&t=4341)
2105
2106 drivers/tty/n_tty.c | 16 ++++++++--------
2107 .../disable_size_overflow_hash.data | 2 ++
2108 .../size_overflow_plugin/size_overflow_hash.data | 6 ++----
2109 3 files changed, 12 insertions(+), 12 deletions(-)
2110
2111commit dfa764cc549892a5bfc1083cac78b99032cae577
2112Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
2113Date: Tue Dec 15 22:59:12 2015 +0100
2114
2115 ipv6: automatically enable stable privacy mode if stable_secret set
2116
2117 Bjørn reported that while we switch all interfaces to privacy stable mode
2118 when setting the secret, we don't set this mode for new interfaces. This
2119 does not make sense, so change this behaviour.
2120
2121 Fixes: 622c81d57b392cc ("ipv6: generation of stable privacy addresses for link-local and autoconf")
2122 Reported-by: Bjørn Mork <bjorn@mork.no>
2123 Cc: Bjørn Mork <bjorn@mork.no>
2124 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
2125 Signed-off-by: David S. Miller <davem@davemloft.net>
2126
2127 net/ipv6/addrconf.c | 6 ++++++
2128 1 files changed, 6 insertions(+), 0 deletions(-)
2129
2130commit c2815a1fee03f222273e77c14e43f960da06f35a
2131Author: Brad Spengler <spender@grsecurity.net>
2132Date: Wed Dec 16 13:03:38 2015 -0500
2133
2134 Work around upstream limitation on the number of thread info flags causing a compilation error
2135 Reported by fabled at http://forums.grsecurity.net/viewtopic.php?f=3&t=4339
2136
2137 arch/arm/kernel/entry-common.S | 8 ++++++--
2138 1 files changed, 6 insertions(+), 2 deletions(-)
2139
ab5bcff6 2140commit 8c9ae168e09ae49324d709d76d73d9fc4ca477e1
fee0510d 2141Author: Brad Spengler <spender@grsecurity.net>
ab5bcff6 2142Date: Tue Dec 15 19:03:41 2015 -0500
fee0510d 2143
ab5bcff6 2144 Initial import of grsecurity 3.1 for Linux 4.3.3
76e7c0f9 2145
6090327c 2146 Documentation/dontdiff | 2 +
e8242a6d 2147 Documentation/kernel-parameters.txt | 7 +
afe359a8 2148 Documentation/sysctl/kernel.txt | 15 +
a8b227b4 2149 Makefile | 18 +-
6090327c
PK		 2150 arch/alpha/include/asm/cache.h | 4 +-
2151 arch/alpha/kernel/osf_sys.c | 12 +-
ab5bcff6 2152 arch/arc/Kconfig | 1 +
6090327c 2153 arch/arm/Kconfig | 1 +
ab5bcff6
PK		 2154 arch/arm/Kconfig.debug | 1 +
2155 arch/arm/include/asm/thread_info.h | 7 +-
6090327c
PK		 2156 arch/arm/kernel/process.c | 4 +-
2157 arch/arm/kernel/ptrace.c | 9 +
2158 arch/arm/kernel/traps.c | 7 +-
2159 arch/arm/mm/Kconfig | 2 +-
2160 arch/arm/mm/fault.c | 40 +-
2161 arch/arm/mm/mmap.c | 8 +-
afe359a8 2162 arch/arm/net/bpf_jit_32.c | 51 +-
ab5bcff6 2163 arch/arm64/Kconfig.debug | 1 +
6090327c 2164 arch/avr32/include/asm/cache.h | 4 +-
ab5bcff6 2165 arch/blackfin/Kconfig.debug | 1 +
6090327c
PK		 2166 arch/blackfin/include/asm/cache.h | 3 +-
2167 arch/cris/include/arch-v10/arch/cache.h | 3 +-
2168 arch/cris/include/arch-v32/arch/cache.h | 3 +-
2169 arch/frv/include/asm/cache.h | 3 +-
2170 arch/frv/mm/elf-fdpic.c | 4 +-
2171 arch/hexagon/include/asm/cache.h | 6 +-
2172 arch/ia64/Kconfig | 1 +
2173 arch/ia64/include/asm/cache.h | 3 +-
2174 arch/ia64/kernel/sys_ia64.c | 2 +
2175 arch/ia64/mm/hugetlbpage.c | 2 +
2176 arch/m32r/include/asm/cache.h | 4 +-
2177 arch/m68k/include/asm/cache.h | 4 +-
2178 arch/metag/mm/hugetlbpage.c | 1 +
2179 arch/microblaze/include/asm/cache.h | 3 +-
2180 arch/mips/Kconfig | 1 +
2181 arch/mips/include/asm/cache.h | 3 +-
2182 arch/mips/include/asm/thread_info.h | 11 +-
da1216b9 2183 arch/mips/kernel/irq.c | 3 +
6090327c
PK		 2184 arch/mips/kernel/ptrace.c | 9 +
2185 arch/mips/mm/mmap.c | 4 +-
2186 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
2187 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
2188 arch/openrisc/include/asm/cache.h | 4 +-
2189 arch/parisc/include/asm/cache.h | 5 +-
2190 arch/parisc/kernel/sys_parisc.c | 4 +
2191 arch/powerpc/Kconfig | 1 +
ab5bcff6 2192 arch/powerpc/include/asm/cache.h | 4 +-
6090327c
PK		 2193 arch/powerpc/include/asm/thread_info.h | 5 +-
2194 arch/powerpc/kernel/Makefile | 2 +
2195 arch/powerpc/kernel/irq.c | 3 +
2196 arch/powerpc/kernel/process.c | 10 +-
2197 arch/powerpc/kernel/ptrace.c | 14 +
2198 arch/powerpc/kernel/traps.c | 5 +
6090327c 2199 arch/powerpc/mm/slice.c | 2 +-
ab5bcff6 2200 arch/s390/Kconfig.debug | 1 +
6090327c
PK		 2201 arch/s390/include/asm/cache.h | 4 +-
2202 arch/score/include/asm/cache.h | 4 +-
2203 arch/sh/include/asm/cache.h | 3 +-
2204 arch/sh/mm/mmap.c | 6 +-
2205 arch/sparc/include/asm/cache.h | 4 +-
0986ccbe
PK		 2206 arch/sparc/include/asm/pgalloc_64.h | 1 +
2207 arch/sparc/include/asm/thread_info_64.h | 8 +-
6090327c
PK		 2208 arch/sparc/kernel/process_32.c | 6 +-
2209 arch/sparc/kernel/process_64.c | 8 +-
2210 arch/sparc/kernel/ptrace_64.c | 14 +
2211 arch/sparc/kernel/sys_sparc_64.c | 8 +-
2212 arch/sparc/kernel/syscalls.S | 8 +-
2213 arch/sparc/kernel/traps_32.c | 8 +-
2214 arch/sparc/kernel/traps_64.c | 28 +-
2215 arch/sparc/kernel/unaligned_64.c | 2 +-
2216 arch/sparc/mm/fault_64.c | 2 +-
2217 arch/sparc/mm/hugetlbpage.c | 15 +-
2218 arch/tile/Kconfig | 1 +
2219 arch/tile/include/asm/cache.h | 3 +-
2220 arch/tile/mm/hugetlbpage.c | 2 +
2221 arch/um/include/asm/cache.h | 3 +-
2222 arch/unicore32/include/asm/cache.h | 6 +-
afe359a8 2223 arch/x86/Kconfig | 21 +
ab5bcff6
PK		 2224 arch/x86/Kconfig.debug | 2 +
2225 arch/x86/entry/common.c | 14 +
afe359a8
PK		 2226 arch/x86/entry/entry_32.S | 2 +-
2227 arch/x86/entry/entry_64.S | 2 +-
6090327c
PK		 2228 arch/x86/ia32/ia32_aout.c | 2 +
2229 arch/x86/include/asm/floppy.h | 20 +-
ab5bcff6 2230 arch/x86/include/asm/fpu/types.h | 69 +-
6090327c
PK		 2231 arch/x86/include/asm/io.h | 2 +-
2232 arch/x86/include/asm/page.h | 12 +-
2233 arch/x86/include/asm/paravirt_types.h | 23 +-
ab5bcff6
PK		 2234 arch/x86/include/asm/processor.h | 12 +-
2235 arch/x86/include/asm/thread_info.h | 6 +-
2236 arch/x86/include/asm/uaccess.h | 2 +-
a8b227b4 2237 arch/x86/kernel/dumpstack.c | 10 +-
6090327c
PK		 2238 arch/x86/kernel/dumpstack_32.c | 2 +-
2239 arch/x86/kernel/dumpstack_64.c | 2 +-
6090327c
PK		 2240 arch/x86/kernel/ioport.c | 13 +
2241 arch/x86/kernel/irq_32.c | 3 +
2242 arch/x86/kernel/irq_64.c | 4 +
afe359a8 2243 arch/x86/kernel/ldt.c | 18 +
6090327c 2244 arch/x86/kernel/msr.c | 10 +
ab5bcff6 2245 arch/x86/kernel/ptrace.c | 14 +
6090327c
PK		 2246 arch/x86/kernel/signal.c | 9 +-
2247 arch/x86/kernel/sys_i386_32.c | 9 +-
2248 arch/x86/kernel/sys_x86_64.c | 8 +-
2249 arch/x86/kernel/traps.c | 5 +
2250 arch/x86/kernel/verify_cpu.S | 1 +
ab5bcff6
PK		 2251 arch/x86/kernel/vm86_32.c | 15 +
2252 arch/x86/kvm/svm.c | 14 +-
6090327c
PK		 2253 arch/x86/mm/fault.c | 12 +-
2254 arch/x86/mm/hugetlbpage.c | 15 +-
2255 arch/x86/mm/init.c | 66 +-
2256 arch/x86/mm/init_32.c | 6 +-
0986ccbe 2257 arch/x86/net/bpf_jit_comp.c | 4 +
a8b227b4 2258 arch/x86/platform/efi/efi_64.c | 2 +-
6090327c
PK		 2259 arch/x86/xen/Kconfig | 1 +
2260 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
2261 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
ab5bcff6
PK		 2262 crypto/ablkcipher.c | 2 +-
2263 crypto/blkcipher.c | 2 +-
2264 crypto/scatterwalk.c | 10 +-
6090327c
PK		 2265 drivers/acpi/acpica/hwxfsleep.c | 11 +-
2266 drivers/acpi/custom_method.c | 4 +
2267 drivers/block/cciss.h | 30 +-
6090327c
PK		 2268 drivers/block/smart1,2.h | 40 +-
2269 drivers/cdrom/cdrom.c | 2 +-
2270 drivers/char/Kconfig | 4 +-
2271 drivers/char/genrtc.c | 1 +
ab5bcff6 2272 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
6090327c
PK		 2273 drivers/char/mem.c | 17 +
2274 drivers/char/random.c | 5 +-
2275 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
ab5bcff6
PK		 2276 drivers/crypto/nx/nx-aes-ccm.c | 2 +-
2277 drivers/crypto/nx/nx-aes-gcm.c | 2 +-
2278 drivers/crypto/talitos.c | 2 +-
6090327c 2279 drivers/firewire/ohci.c | 4 +
ab5bcff6
PK		 2280 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
2281 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
6090327c 2282 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
afe359a8 2283 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
6090327c 2284 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
6090327c
PK		 2285 drivers/hid/hid-wiimote-debug.c | 2 +-
2286 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
ab5bcff6 2287 drivers/iommu/Kconfig | 1 +
0986ccbe 2288 drivers/iommu/amd_iommu.c | 14 +-
6090327c
PK		 2289 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
2290 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
2291 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
ab5bcff6
PK		 2292 drivers/isdn/hisax/config.c | 2 +-
2293 drivers/isdn/hisax/hfc_pci.c | 2 +-
2294 drivers/isdn/hisax/hfc_sx.c | 2 +-
2295 drivers/isdn/hisax/q931.c | 6 +-
6090327c
PK		 2296 drivers/isdn/i4l/isdn_concap.c | 6 +-
2297 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
ab5bcff6 2298 drivers/md/bcache/Kconfig | 1 +
a8b227b4
PK		 2299 drivers/md/raid5.c | 8 +
2300 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
ab5bcff6
PK		 2301 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
2302 drivers/media/platform/vivid/vivid-osd.c | 1 +
6090327c 2303 drivers/media/radio/radio-cadet.c | 5 +-
a8b227b4
PK		 2304 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
2305 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
6090327c
PK		 2306 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
2307 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
2308 drivers/message/fusion/mptbase.c | 9 +
2309 drivers/misc/sgi-xp/xp_main.c | 12 +-
6090327c 2310 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
ab5bcff6
PK		 2311 drivers/net/ppp/pppoe.c | 14 +-
2312 drivers/net/ppp/pptp.c | 6 +
2313 drivers/net/slip/slhc.c | 3 +
6090327c 2314 drivers/net/wan/lmc/lmc_media.c | 97 +-
ab5bcff6 2315 drivers/net/wan/x25_asy.c | 6 +-
6090327c 2316 drivers/net/wan/z85230.c | 24 +-
ab5bcff6 2317 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
6090327c 2318 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
ab5bcff6 2319 drivers/pci/pci-sysfs.c | 2 +-
6090327c
PK		 2320 drivers/pci/proc.c | 9 +
2321 drivers/platform/x86/asus-wmi.c | 12 +
2322 drivers/rtc/rtc-dev.c | 3 +
2323 drivers/scsi/bfa/bfa_fcs.c | 19 +-
2324 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
2325 drivers/scsi/bfa/bfa_modules.h | 12 +-
e8242a6d 2326 drivers/scsi/hpsa.h | 40 +-
ab5bcff6 2327 drivers/staging/dgnc/dgnc_mgmt.c | 1 +
6090327c
PK		 2328 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
2329 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
ab5bcff6
PK		 2330 drivers/target/target_core_sbc.c | 17 +-
2331 drivers/target/target_core_transport.c | 14 +-
afe359a8 2332 drivers/tty/serial/uartlite.c | 4 +-
6090327c
PK		 2333 drivers/tty/sysrq.c | 2 +-
2334 drivers/tty/vt/keyboard.c | 22 +-
2335 drivers/uio/uio.c | 6 +-
2336 drivers/usb/core/hub.c | 5 +
a8b227b4
PK		 2337 drivers/usb/gadget/function/f_uac1.c | 1 +
2338 drivers/usb/gadget/function/u_uac1.c | 1 +
6090327c 2339 drivers/usb/host/hwa-hc.c | 9 +-
afe359a8 2340 drivers/usb/usbip/vhci_sysfs.c | 2 +-
6090327c
PK		 2341 drivers/video/fbdev/arcfb.c | 2 +-
2342 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
2343 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
2344 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
da1216b9 2345 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++-----
6090327c 2346 drivers/xen/xenfs/xenstored.c | 5 +
afe359a8
PK		 2347 firmware/Makefile | 2 +
2348 firmware/WHENCE | 20 +-
2349 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
da1216b9 2350 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
ab5bcff6 2351 fs/9p/vfs_inode.c | 4 +-
6090327c
PK		 2352 fs/attr.c | 1 +
2353 fs/autofs4/waitq.c | 9 +
2354 fs/binfmt_aout.c | 7 +
ab5bcff6 2355 fs/binfmt_elf.c | 50 +-
6090327c
PK		 2356 fs/compat.c | 20 +-
2357 fs/coredump.c | 17 +-
8cf17962 2358 fs/dcache.c | 3 +
da1216b9 2359 fs/debugfs/inode.c | 11 +-
ab5bcff6 2360 fs/exec.c | 219 +-
6090327c 2361 fs/ext2/balloc.c | 4 +-
0986ccbe 2362 fs/ext2/super.c | 8 +-
6090327c 2363 fs/ext4/balloc.c | 4 +-
0986ccbe 2364 fs/fcntl.c | 4 +
da1216b9 2365 fs/fhandle.c | 3 +-
6090327c
PK		 2366 fs/file.c | 4 +
2367 fs/filesystems.c | 4 +
e8242a6d 2368 fs/fs_struct.c | 20 +-
6090327c 2369 fs/hugetlbfs/inode.c | 5 +-
afe359a8 2370 fs/inode.c | 8 +-
8cf17962 2371 fs/kernfs/dir.c | 6 +
6090327c 2372 fs/mount.h | 4 +-
ab5bcff6 2373 fs/namei.c | 286 +-
8cf17962 2374 fs/namespace.c | 24 +
a8b227b4 2375 fs/nfsd/nfscache.c | 2 +-
6090327c 2376 fs/open.c | 38 +
ab5bcff6 2377 fs/overlayfs/inode.c | 11 +-
da1216b9 2378 fs/overlayfs/super.c | 6 +-
6090327c
PK		 2379 fs/pipe.c | 2 +-
2380 fs/posix_acl.c | 15 +-
2381 fs/proc/Kconfig | 10 +-
ab5bcff6
PK		 2382 fs/proc/array.c | 69 +-
2383 fs/proc/base.c | 186 +-
6090327c
PK		 2384 fs/proc/cmdline.c | 4 +
2385 fs/proc/devices.c | 4 +
2386 fs/proc/fd.c | 17 +-
e8242a6d 2387 fs/proc/generic.c | 64 +
6090327c 2388 fs/proc/inode.c | 17 +
0986ccbe 2389 fs/proc/internal.h | 11 +-
6090327c
PK		 2390 fs/proc/interrupts.c | 4 +
2391 fs/proc/kcore.c | 3 +
ab5bcff6
PK		 2392 fs/proc/meminfo.c | 7 +-
2393 fs/proc/namespaces.c | 4 +-
6090327c
PK		 2394 fs/proc/proc_net.c | 31 +
2395 fs/proc/proc_sysctl.c | 52 +-
2396 fs/proc/root.c | 8 +
2397 fs/proc/stat.c | 69 +-
e8242a6d 2398 fs/proc/task_mmu.c | 66 +-
6090327c
PK		 2399 fs/readdir.c | 19 +
2400 fs/reiserfs/item_ops.c | 24 +-
0986ccbe 2401 fs/reiserfs/super.c | 4 +
6090327c 2402 fs/select.c | 2 +
afe359a8 2403 fs/seq_file.c | 30 +-
ab5bcff6 2404 fs/splice.c | 8 +
6090327c 2405 fs/stat.c | 20 +-
e8242a6d 2406 fs/sysfs/dir.c | 30 +-
ab5bcff6 2407 fs/sysv/inode.c | 11 +-
6090327c 2408 fs/utimes.c | 7 +
8cf17962 2409 fs/xattr.c | 26 +-
da1216b9 2410 grsecurity/Kconfig | 1182 ++++
6090327c 2411 grsecurity/Makefile | 54 +
da1216b9 2412 grsecurity/gracl.c | 2757 +++++++++
6090327c 2413 grsecurity/gracl_alloc.c | 105 +
a8b227b4 2414 grsecurity/gracl_cap.c | 127 +
da1216b9 2415 grsecurity/gracl_compat.c | 269 +
afe359a8 2416 grsecurity/gracl_fs.c | 448 ++
da1216b9
PK		 2417 grsecurity/gracl_ip.c | 386 ++
2418 grsecurity/gracl_learn.c | 207 +
2419 grsecurity/gracl_policy.c | 1786 ++++++
6090327c 2420 grsecurity/gracl_res.c | 68 +
da1216b9 2421 grsecurity/gracl_segv.c | 304 +
6090327c
PK		 2422 grsecurity/gracl_shm.c | 40 +
2423 grsecurity/grsec_chdir.c | 19 +
da1216b9
PK		 2424 grsecurity/grsec_chroot.c | 467 ++
2425 grsecurity/grsec_disabled.c | 445 ++
2426 grsecurity/grsec_exec.c | 189 +
2427 grsecurity/grsec_fifo.c | 26 +
6090327c 2428 grsecurity/grsec_fork.c | 23 +
da1216b9 2429 grsecurity/grsec_init.c | 290 +
6090327c 2430 grsecurity/grsec_ipc.c | 48 +
afe359a8
PK		 2431 grsecurity/grsec_link.c | 65 +
2432 grsecurity/grsec_log.c | 340 +
6090327c
PK		 2433 grsecurity/grsec_mem.c | 48 +
2434 grsecurity/grsec_mount.c | 65 +
afe359a8 2435 grsecurity/grsec_pax.c | 47 +
6090327c
PK		 2436 grsecurity/grsec_proc.c | 20 +
2437 grsecurity/grsec_ptrace.c | 30 +
da1216b9
PK		 2438 grsecurity/grsec_sig.c | 236 +
2439 grsecurity/grsec_sock.c | 244 +
2440 grsecurity/grsec_sysctl.c | 488 ++
6090327c
PK		 2441 grsecurity/grsec_time.c | 16 +
2442 grsecurity/grsec_tpe.c | 78 +
2443 grsecurity/grsec_usb.c | 15 +
2444 grsecurity/grsum.c | 64 +
6090327c 2445 include/linux/binfmts.h | 5 +-
ab5bcff6 2446 include/linux/bitops.h | 2 +-
afe359a8
PK		 2447 include/linux/capability.h | 13 +
2448 include/linux/compiler-gcc.h | 5 +
6090327c
PK		 2449 include/linux/compiler.h | 8 +
2450 include/linux/cred.h | 8 +-
8cf17962 2451 include/linux/dcache.h | 5 +-
6090327c
PK		 2452 include/linux/fs.h | 24 +-
2453 include/linux/fs_struct.h | 2 +-
2454 include/linux/fsnotify.h | 6 +
da1216b9
PK		 2455 include/linux/gracl.h | 342 +
2456 include/linux/gracl_compat.h | 156 +
6090327c
PK		 2457 include/linux/gralloc.h | 9 +
2458 include/linux/grdefs.h | 140 +
da1216b9 2459 include/linux/grinternal.h | 230 +
8cf17962 2460 include/linux/grmsg.h | 118 +
ab5bcff6 2461 include/linux/grsecurity.h | 255 +
6090327c 2462 include/linux/grsock.h | 19 +
afe359a8 2463 include/linux/ipc.h | 2 +-
6090327c
PK		 2464 include/linux/ipc_namespace.h | 2 +-
2465 include/linux/kallsyms.h | 18 +-
2466 include/linux/kmod.h | 5 +
2467 include/linux/kobject.h | 2 +-
afe359a8 2468 include/linux/lsm_hooks.h | 4 +-
8cf17962 2469 include/linux/mm.h | 12 +
6090327c 2470 include/linux/mm_types.h | 4 +-
afe359a8 2471 include/linux/module.h | 5 +-
6090327c 2472 include/linux/mount.h | 2 +-
ab5bcff6 2473 include/linux/msg.h | 2 +-
6090327c
PK		 2474 include/linux/netfilter/xt_gradm.h | 9 +
2475 include/linux/path.h | 4 +-
2476 include/linux/perf_event.h | 13 +-
2477 include/linux/pid_namespace.h | 2 +-
8cf17962 2478 include/linux/printk.h | 2 +-
6090327c
PK		 2479 include/linux/proc_fs.h | 22 +-
2480 include/linux/proc_ns.h | 2 +-
ab5bcff6 2481 include/linux/ptrace.h | 24 +-
6090327c
PK		 2482 include/linux/random.h | 2 +-
2483 include/linux/rbtree_augmented.h | 4 +-
da1216b9 2484 include/linux/scatterlist.h | 12 +-
ab5bcff6
PK		 2485 include/linux/sched.h | 114 +-
2486 include/linux/security.h | 1 +
2487 include/linux/sem.h | 2 +-
6090327c 2488 include/linux/seq_file.h | 5 +
afe359a8 2489 include/linux/shm.h | 6 +-
6090327c
PK		 2490 include/linux/skbuff.h | 3 +
2491 include/linux/slab.h | 9 -
afe359a8 2492 include/linux/sysctl.h | 8 +-
6090327c
PK		 2493 include/linux/thread_info.h | 6 +-
2494 include/linux/tty.h | 2 +-
2495 include/linux/tty_driver.h | 4 +-
2496 include/linux/uidgid.h | 5 +
2497 include/linux/user_namespace.h | 2 +-
2498 include/linux/utsname.h | 2 +-
2499 include/linux/vermagic.h | 16 +-
ab5bcff6 2500 include/linux/vmalloc.h | 20 +-
6090327c 2501 include/net/af_unix.h | 2 +-
ab5bcff6 2502 include/net/dst.h | 33 +
6090327c
PK		 2503 include/net/ip.h | 2 +-
2504 include/net/neighbour.h | 2 +-
2505 include/net/net_namespace.h | 2 +-
ab5bcff6
PK		 2506 include/net/sock.h | 4 +-
2507 include/target/target_core_base.h | 2 +-
6090327c
PK		 2508 include/trace/events/fs.h | 53 +
2509 include/uapi/linux/personality.h | 1 +
ab5bcff6 2510 init/Kconfig | 4 +-
e8242a6d 2511 init/main.c | 35 +-
6090327c 2512 ipc/mqueue.c | 1 +
ab5bcff6
PK		 2513 ipc/msg.c | 3 +-
2514 ipc/sem.c | 3 +-
2515 ipc/shm.c | 26 +-
2516 ipc/util.c | 6 +
da1216b9 2517 kernel/auditsc.c | 2 +-
0986ccbe 2518 kernel/bpf/syscall.c | 8 +-
6090327c 2519 kernel/capability.c | 41 +-
0986ccbe 2520 kernel/cgroup.c | 5 +-
6090327c
PK		 2521 kernel/compat.c | 1 +
2522 kernel/configs.c | 11 +
afe359a8 2523 kernel/cred.c | 112 +-
ab5bcff6 2524 kernel/events/core.c | 16 +-
6090327c
PK		 2525 kernel/exit.c | 10 +-
2526 kernel/fork.c | 86 +-
ab5bcff6
PK		 2527 kernel/futex.c | 6 +-
2528 kernel/futex_compat.c | 2 +-
6090327c 2529 kernel/kallsyms.c | 9 +
ab5bcff6
PK		 2530 kernel/kcmp.c | 8 +-
2531 kernel/kexec_core.c | 2 +-
e8242a6d 2532 kernel/kmod.c | 95 +-
6090327c
PK		 2533 kernel/kprobes.c | 7 +-
2534 kernel/ksysfs.c | 2 +
2535 kernel/locking/lockdep_proc.c | 10 +-
afe359a8 2536 kernel/module.c | 108 +-
6090327c 2537 kernel/panic.c | 4 +-
ab5bcff6 2538 kernel/pid.c | 23 +-
6090327c 2539 kernel/power/Kconfig | 2 +
ab5bcff6
PK		 2540 kernel/printk/printk.c | 20 +-
2541 kernel/ptrace.c | 56 +-
6090327c
PK		 2542 kernel/resource.c | 10 +
2543 kernel/sched/core.c | 11 +-
2544 kernel/signal.c | 37 +-
a8b227b4 2545 kernel/sys.c | 64 +-
ab5bcff6 2546 kernel/sysctl.c | 172 +-
6090327c 2547 kernel/taskstats.c | 6 +
a8b227b4
PK		 2548 kernel/time/posix-timers.c | 8 +
2549 kernel/time/time.c | 5 +
6090327c 2550 kernel/time/timekeeping.c | 3 +
afe359a8 2551 kernel/time/timer_list.c | 13 +-
6090327c 2552 kernel/time/timer_stats.c | 10 +-
ab5bcff6 2553 kernel/trace/Kconfig | 2 +
0986ccbe 2554 kernel/trace/trace_syscalls.c | 8 +
6090327c 2555 kernel/user_namespace.c | 15 +
ab5bcff6
PK		 2556 lib/Kconfig.debug | 13 +-
2557 lib/Kconfig.kasan | 2 +-
6090327c
PK		 2558 lib/is_single_threaded.c | 3 +
2559 lib/list_debug.c | 65 +-
e8242a6d 2560 lib/nlattr.c | 2 +
6090327c 2561 lib/rbtree.c | 4 +-
afe359a8 2562 lib/vsprintf.c | 39 +-
6090327c 2563 localversion-grsec | 1 +
ab5bcff6 2564 mm/Kconfig | 8 +-
e8242a6d 2565 mm/Kconfig.debug | 1 +
6090327c
PK		 2566 mm/filemap.c | 1 +
2567 mm/kmemleak.c | 4 +-
da1216b9 2568 mm/memory.c | 2 +-
6090327c
PK		 2569 mm/mempolicy.c | 12 +-
2570 mm/migrate.c | 3 +-
2571 mm/mlock.c | 6 +-
e8242a6d 2572 mm/mmap.c | 93 +-
6090327c 2573 mm/mprotect.c | 8 +
ab5bcff6 2574 mm/oom_kill.c | 28 +-
e8242a6d 2575 mm/page_alloc.c | 2 +-
ab5bcff6
PK		 2576 mm/process_vm_access.c | 8 +-
2577 mm/shmem.c | 36 +-
2578 mm/slab.c | 14 +-
6090327c 2579 mm/slab_common.c | 2 +-
afe359a8
PK		 2580 mm/slob.c | 12 +
2581 mm/slub.c | 33 +-
6090327c 2582 mm/util.c | 3 +
ab5bcff6 2583 mm/vmalloc.c | 129 +-
6090327c
PK		 2584 mm/vmstat.c | 29 +-
2585 net/appletalk/atalk_proc.c | 2 +-
2586 net/atm/lec.c | 6 +-
2587 net/atm/mpoa_caches.c | 42 +-
ab5bcff6 2588 net/bluetooth/sco.c | 3 +
6090327c
PK		 2589 net/can/bcm.c | 2 +-
2590 net/can/proc.c | 2 +-
0986ccbe 2591 net/core/dev_ioctl.c | 7 +-
6090327c
PK		 2592 net/core/filter.c | 8 +-
2593 net/core/net-procfs.c | 17 +-
2594 net/core/pktgen.c | 2 +-
e8242a6d 2595 net/core/sock.c | 3 +-
0986ccbe 2596 net/core/sysctl_net_core.c | 2 +-
6090327c 2597 net/decnet/dn_dev.c | 2 +-
0986ccbe 2598 net/ipv4/devinet.c | 6 +-
ab5bcff6 2599 net/ipv4/inet_hashtables.c | 4 +
a8b227b4 2600 net/ipv4/ip_input.c | 7 +
6090327c
PK		 2601 net/ipv4/ip_sockglue.c | 3 +-
2602 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
ab5bcff6 2603 net/ipv4/netfilter/nf_nat_pptp.c | 2 +-
6090327c 2604 net/ipv4/route.c | 6 +-
da1216b9 2605 net/ipv4/tcp_input.c | 4 +-
ab5bcff6 2606 net/ipv4/tcp_ipv4.c | 29 +-
6090327c
PK		 2607 net/ipv4/tcp_minisocks.c | 9 +-
2608 net/ipv4/tcp_timer.c | 11 +
2609 net/ipv4/udp.c | 24 +
e8242a6d 2610 net/ipv6/addrconf.c | 13 +-
6090327c 2611 net/ipv6/proc.c | 2 +-
ab5bcff6 2612 net/ipv6/tcp_ipv6.c | 26 +-
6090327c
PK		 2613 net/ipv6/udp.c | 7 +
2614 net/ipx/ipx_proc.c | 2 +-
2615 net/irda/irproc.c | 2 +-
2616 net/llc/llc_proc.c | 2 +-
2617 net/netfilter/Kconfig | 10 +
2618 net/netfilter/Makefile | 1 +
2619 net/netfilter/nf_conntrack_core.c | 8 +
2620 net/netfilter/xt_gradm.c | 51 +
2621 net/netfilter/xt_hashlimit.c | 4 +-
2622 net/netfilter/xt_recent.c | 2 +-
ab5bcff6
PK		 2623 net/sched/sch_api.c | 2 +-
2624 net/sctp/socket.c | 4 +-
2625 net/socket.c | 75 +-
2626 net/sunrpc/Kconfig | 1 +
6090327c
PK		 2627 net/sunrpc/cache.c | 2 +-
2628 net/sunrpc/stats.c | 2 +-
2629 net/sysctl_net.c | 2 +-
e8242a6d 2630 net/unix/af_unix.c | 52 +-
6090327c
PK		 2631 net/vmw_vsock/vmci_transport_notify.c | 30 +-
2632 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
2633 net/x25/sysctl_net_x25.c | 2 +-
2634 net/x25/x25_proc.c | 2 +-
0986ccbe 2635 scripts/package/Makefile | 2 +-
ab5bcff6
PK		 2636 scripts/package/mkspec | 41 +-
2637 security/Kconfig | 369 +-
6090327c
PK		 2638 security/apparmor/file.c | 4 +-
2639 security/apparmor/lsm.c | 8 +-
ab5bcff6 2640 security/commoncap.c | 36 +-
6090327c 2641 security/min_addr.c | 2 +
ab5bcff6 2642 security/smack/smack_lsm.c | 8 +-
6090327c
PK		 2643 security/tomoyo/file.c | 12 +-
2644 security/tomoyo/mount.c | 4 +
da1216b9 2645 security/tomoyo/tomoyo.c | 20 +-
6090327c 2646 security/yama/Kconfig | 2 +-
ab5bcff6 2647 security/yama/yama_lsm.c | 4 +-
6090327c 2648 sound/synth/emux/emux_seq.c | 14 +-
e8242a6d
PK		 2649 sound/usb/line6/driver.c | 40 +-
2650 sound/usb/line6/toneport.c | 12 +-
6090327c
PK		 2651 tools/gcc/.gitignore | 1 +
2652 tools/gcc/Makefile | 12 +
2653 tools/gcc/gen-random-seed.sh | 8 +
afe359a8
PK		 2654 tools/gcc/randomize_layout_plugin.c | 930 +++
2655 tools/gcc/size_overflow_plugin/.gitignore | 1 +
ab5bcff6
PK		 2656 .../size_overflow_plugin/size_overflow_hash.data | 459 ++-
2657 511 files changed, 32631 insertions(+), 3196 deletions(-)
afe359a8 2658
ab5bcff6 2659commit a76adb92ce39aee8eec5a025c828030ad6135c6d
afe359a8 2660Author: Brad Spengler <spender@grsecurity.net>
ab5bcff6 2661Date: Tue Dec 15 14:31:49 2015 -0500
afe359a8 2662
ab5bcff6
PK		 2663 Update to pax-linux-4.3.3-test11.patch:
2664 - fixed a few compile regressions with the recent plugin changes, reported by spender
2665 - updated the size overflow hash table
76e7c0f9 2666
ab5bcff6
PK		 2667 tools/gcc/latent_entropy_plugin.c | 2 +-
2668 .../size_overflow_plugin/size_overflow_hash.data | 66 +++++++++++++++++---
2669 tools/gcc/stackleak_plugin.c | 2 +-
2670 tools/gcc/structleak_plugin.c | 6 +--
2671 4 files changed, 60 insertions(+), 16 deletions(-)
afe359a8 2672
ab5bcff6 2673commit f7284b1fc06628fcb2d35d2beecdea5454d46af9
afe359a8 2674Author: Brad Spengler <spender@grsecurity.net>
ab5bcff6 2675Date: Tue Dec 15 11:50:24 2015 -0500
afe359a8 2676
ab5bcff6 2677 Apply structleak ICE fix for gcc < 4.9
afe359a8 2678
ab5bcff6
PK		 2679 tools/gcc/structleak_plugin.c | 4 ++++
2680 1 files changed, 4 insertions(+), 0 deletions(-)
afe359a8 2681
ab5bcff6 2682commit 92fe3eb9fd10ec7f7334decab1526989669b0287
afe359a8 2683Author: Brad Spengler <spender@grsecurity.net>
ab5bcff6 2684Date: Tue Dec 15 07:57:06 2015 -0500
afe359a8 2685
ab5bcff6
PK		 2686 Update to pax-linux-4.3.1-test10.patch:
2687 - Emese fixed INDIRECT_REF and TARGET_MEM_REF handling in the initify plugin
2688 - Emese regenerated the size overflow hash tables for 4.3
2689 - fixed some compat syscall exit paths to restore r12 under KERNEXEC/or
2690 - the latent entropy, stackleak and structleak plugins no longer split the entry block unnecessarily
afe359a8 2691
ab5bcff6
PK		 2692 arch/x86/entry/entry_64.S | 2 +-
2693 arch/x86/entry/entry_64_compat.S | 15 +-
2694 scripts/package/builddeb | 2 +-
2695 tools/gcc/initify_plugin.c | 11 +-
2696 tools/gcc/latent_entropy_plugin.c | 20 +-
2697 .../disable_size_overflow_hash.data | 4 +
2698 .../size_overflow_plugin/size_overflow_hash.data | 5345 +++++++++++---------
2699 tools/gcc/stackleak_plugin.c | 26 +-
2700 tools/gcc/structleak_plugin.c | 21 +-
2701 9 files changed, 3079 insertions(+), 2367 deletions(-)
afe359a8 2702
ab5bcff6
PK		 2703commit 5bd245cb687319079c2f1c0d6a1170791ed1ed2c
2704Merge: b5847e6 3548341
afe359a8 2705Author: Brad Spengler <spender@grsecurity.net>
ab5bcff6 2706Date: Tue Dec 15 07:47:56 2015 -0500
afe359a8 2707
ab5bcff6
PK		 2708 Merge branch 'linux-4.3.y' into pax-4_3
2709
2710 Conflicts:
2711 net/unix/af_unix.c
afe359a8 2712
ab5bcff6 2713commit b5847e6a896c5d99191135ca4d7c3b6be8f116ff
afe359a8 2714Author: Brad Spengler <spender@grsecurity.net>
ab5bcff6 2715Date: Wed Dec 9 23:11:36 2015 -0500
afe359a8 2716
ab5bcff6
PK		 2717 Update to pax-linux-4.3.1-test9.patch:
2718 - fixed __get_user on x86 to lie less about the size of the load, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4332)
2719 - Emese fixed an intentional overflow caused by gcc, reported by saironiq (https://forums.grsecurity.net/viewtopic.php?f=3&t=4333)
2720 - Emese fixed a false positive overflow report in the forcedeth driver, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?t=4334)
2721 - Emese fixed a false positive overflow report in KVM's emulator, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4336)
2722 - Emese fixed the initify plugin to detect some captured use of __func__, reported by Rasmus Villemoes <linux@rasmusvillemoes.dk>
2723 - constrained shmmax and shmall to avoid triggering size overflow checks, reported by Mathias Krause <minipli@ld-linux.so>
2724 - the checker plugin can partially handle sparse's locking context annotations, it's context insensitive and thus not exactly useful for now, also see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59856
afe359a8 2725
ab5bcff6
PK		 2726 Makefile | 6 +
2727 arch/x86/include/asm/compat.h | 4 +
2728 arch/x86/include/asm/dma.h | 2 +
2729 arch/x86/include/asm/pmem.h | 2 +-
2730 arch/x86/include/asm/uaccess.h | 20 +-
2731 arch/x86/kernel/apic/vector.c | 6 +-
2732 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
2733 arch/x86/kernel/cpu/perf_event_intel.c | 28 +-
2734 arch/x86/kernel/head_64.S | 1 -
2735 arch/x86/kvm/i8259.c | 10 +-
2736 arch/x86/kvm/ioapic.c | 2 +
2737 arch/x86/kvm/x86.c | 2 +
2738 arch/x86/lib/usercopy_64.c | 2 +-
2739 arch/x86/mm/mpx.c | 4 +-
2740 arch/x86/mm/pageattr.c | 7 +
2741 drivers/base/devres.c | 4 +-
2742 drivers/base/power/runtime.c | 6 +-
2743 drivers/base/regmap/regmap.c | 4 +-
2744 drivers/block/drbd/drbd_receiver.c | 4 +-
2745 drivers/block/drbd/drbd_worker.c | 6 +-
2746 drivers/char/virtio_console.c | 6 +-
2747 drivers/md/dm.c | 12 +-
2748 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
2749 drivers/net/macvtap.c | 4 +-
2750 drivers/video/fbdev/core/fbmem.c | 10 +-
2751 fs/compat.c | 3 +-
2752 fs/coredump.c | 2 +-
2753 fs/dcache.c | 13 +-
2754 fs/fhandle.c | 2 +-
2755 fs/file.c | 14 +-
2756 fs/fs-writeback.c | 11 +-
2757 fs/overlayfs/copy_up.c | 2 +-
2758 fs/readdir.c | 3 +-
2759 fs/super.c | 3 +-
2760 include/linux/compiler.h | 36 ++-
2761 include/linux/rcupdate.h | 8 +
2762 include/linux/sched.h | 4 +-
2763 include/linux/seqlock.h | 10 +
2764 include/linux/spinlock.h | 17 +-
2765 include/linux/srcu.h | 5 +-
2766 include/linux/syscalls.h | 2 +-
2767 include/linux/writeback.h | 3 +-
2768 include/uapi/linux/swab.h | 6 +-
2769 ipc/ipc_sysctl.c | 6 +
2770 kernel/exit.c | 25 +-
2771 kernel/resource.c | 4 +-
2772 kernel/signal.c | 12 +-
2773 kernel/user.c | 2 +-
2774 kernel/workqueue.c | 6 +-
2775 lib/rhashtable.c | 4 +-
2776 net/compat.c | 2 +-
2777 net/ipv4/xfrm4_mode_transport.c | 2 +-
2778 security/keys/internal.h | 8 +-
2779 security/keys/keyring.c | 4 -
2780 sound/core/seq/seq_clientmgr.c | 8 +-
2781 sound/core/seq/seq_compat.c | 2 +-
2782 sound/core/seq/seq_memory.c | 6 +-
2783 tools/gcc/checker_plugin.c | 415 +++++++++++++++++++-
2784 tools/gcc/gcc-common.h | 1 +
2785 tools/gcc/initify_plugin.c | 33 ++-
2786 .../disable_size_overflow_hash.data | 1 +
2787 .../size_overflow_plugin/size_overflow_hash.data | 1 -
2788 62 files changed, 708 insertions(+), 140 deletions(-)
afe359a8 2789
ab5bcff6
PK		 2790commit f2634c2f6995f4231616f24ed016f890c701f939
2791Merge: 1241bff 5f8b236
afe359a8 2792Author: Brad Spengler <spender@grsecurity.net>
ab5bcff6 2793Date: Wed Dec 9 21:50:47 2015 -0500
afe359a8 2794
ab5bcff6
PK		 2795 Merge branch 'linux-4.3.y' into pax-4_3
2796
2797 Conflicts:
2798 arch/x86/kernel/fpu/xstate.c
2799 arch/x86/kernel/head_64.S
afe359a8 2800
ab5bcff6 2801commit 1241bff82e3d7dadb05de0a60b8d2822afc6547c
6090327c 2802Author: Brad Spengler <spender@grsecurity.net>
ab5bcff6 2803Date: Sun Dec 6 08:44:56 2015 -0500
76e7c0f9 2804
ab5bcff6
PK		 2805 Update to pax-linux-4.3-test8.patch:
2806 - fixed integer truncation check in md introduced by upstream commits 284ae7cab0f7335c9e0aa8992b28415ef1a54c7c and 58c0fed400603a802968b23ddf78f029c5a84e41, reported by BeiKed9o (https://forums.grsecurity.net/viewtopic.php?f=3&t=4328)
2807 - gcc plugin compilation problems will now also produce the output of the checking script to make diagnosis easier, reported by hunger
2808 - Emese fixed a false positive size overflow report in __vhost_add_used_n, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4329)
2809 - fixed a potential integer truncation error in the raid1 code caught by the size overflow plugin, reported by d1b (https://forums.grsecurity.net/viewtopic.php?f=3&t=4331)
2810
2811 Makefile | 5 +++
2812 drivers/md/md.c | 5 ++-
2813 drivers/md/raid1.c | 2 +-
2814 fs/proc/task_mmu.c | 3 ++
2815 .../disable_size_overflow_hash.data | 4 ++-
2816 .../size_overflow_plugin/intentional_overflow.c | 32 ++++++++++++++++---
2817 .../size_overflow_plugin/size_overflow_hash.data | 2 -
2818 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
2819 8 files changed, 43 insertions(+), 12 deletions(-)
afe359a8 2820
ab5bcff6 2821commit cce6a9f9bdd27096632ca1c0246dcc07f2eb1a18
afe359a8 2822Author: Brad Spengler <spender@grsecurity.net>
ab5bcff6 2823Date: Fri Dec 4 14:24:12 2015 -0500
afe359a8 2824
ab5bcff6 2825 Initial import of pax-linux-4.3-test7.patch
76e7c0f9 2826
6090327c 2827 Documentation/dontdiff | 47 +-
a8b227b4 2828 Documentation/kbuild/makefiles.txt | 39 +-
0986ccbe 2829 Documentation/kernel-parameters.txt | 28 +
da1216b9 2830 Makefile | 108 +-
6090327c
PK		 2831 arch/alpha/include/asm/atomic.h | 10 +
2832 arch/alpha/include/asm/elf.h | 7 +
2833 arch/alpha/include/asm/pgalloc.h | 6 +
2834 arch/alpha/include/asm/pgtable.h | 11 +
2835 arch/alpha/kernel/module.c | 2 +-
2836 arch/alpha/kernel/osf_sys.c | 8 +-
2837 arch/alpha/mm/fault.c | 141 +-
2838 arch/arm/Kconfig | 2 +-
ab5bcff6 2839 arch/arm/include/asm/atomic.h | 320 +-
6090327c
PK		 2840 arch/arm/include/asm/cache.h | 5 +-
2841 arch/arm/include/asm/cacheflush.h | 2 +-
2842 arch/arm/include/asm/checksum.h | 14 +-
afe359a8
PK		 2843 arch/arm/include/asm/cmpxchg.h | 4 +
2844 arch/arm/include/asm/cpuidle.h | 2 +-
ab5bcff6 2845 arch/arm/include/asm/domain.h | 22 +-
da1216b9 2846 arch/arm/include/asm/elf.h | 9 +-
6090327c
PK		 2847 arch/arm/include/asm/fncpy.h | 2 +
2848 arch/arm/include/asm/futex.h | 10 +
2849 arch/arm/include/asm/kmap_types.h | 2 +-
2850 arch/arm/include/asm/mach/dma.h | 2 +-
2851 arch/arm/include/asm/mach/map.h | 16 +-
2852 arch/arm/include/asm/outercache.h | 2 +-
2853 arch/arm/include/asm/page.h | 3 +-
8cf17962
PK		 2854 arch/arm/include/asm/pgalloc.h | 20 +
2855 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
6090327c 2856 arch/arm/include/asm/pgtable-2level.h | 3 +
0986ccbe 2857 arch/arm/include/asm/pgtable-3level.h | 3 +
6090327c 2858 arch/arm/include/asm/pgtable.h | 54 +-
6090327c 2859 arch/arm/include/asm/smp.h | 2 +-
a8b227b4 2860 arch/arm/include/asm/tls.h | 3 +
ab5bcff6 2861 arch/arm/include/asm/uaccess.h | 79 +-
6090327c 2862 arch/arm/include/uapi/asm/ptrace.h | 2 +-
ab5bcff6 2863 arch/arm/kernel/armksyms.c | 2 +-
afe359a8 2864 arch/arm/kernel/cpuidle.c | 2 +-
ab5bcff6 2865 arch/arm/kernel/entry-armv.S | 109 +-
6090327c 2866 arch/arm/kernel/entry-common.S | 40 +-
ab5bcff6 2867 arch/arm/kernel/entry-header.S | 55 +
6090327c 2868 arch/arm/kernel/fiq.c | 3 +
ab5bcff6 2869 arch/arm/kernel/module-plts.c | 7 +-
afe359a8 2870 arch/arm/kernel/module.c | 38 +-
6090327c 2871 arch/arm/kernel/patch.c | 2 +
da1216b9 2872 arch/arm/kernel/process.c | 90 +-
da1216b9 2873 arch/arm/kernel/reboot.c | 1 +
6090327c
PK		 2874 arch/arm/kernel/setup.c | 20 +-
2875 arch/arm/kernel/signal.c | 35 +-
2876 arch/arm/kernel/smp.c | 2 +-
2877 arch/arm/kernel/tcm.c | 4 +-
8cf17962 2878 arch/arm/kernel/vmlinux.lds.S | 6 +-
ab5bcff6 2879 arch/arm/kvm/arm.c | 8 +-
6090327c 2880 arch/arm/lib/copy_page.S | 1 +
6090327c
PK		 2881 arch/arm/lib/csumpartialcopyuser.S | 4 +-
2882 arch/arm/lib/delay.c | 2 +-
ab5bcff6 2883 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
da1216b9 2884 arch/arm/mach-exynos/suspend.c | 6 +-
a8b227b4 2885 arch/arm/mach-mvebu/coherency.c | 4 +-
6090327c 2886 arch/arm/mach-omap2/board-n8x0.c | 2 +-
6090327c 2887 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
e8242a6d 2888 arch/arm/mach-omap2/omap-smp.c | 1 +
6090327c
PK		 2889 arch/arm/mach-omap2/omap-wakeupgen.c | 2 +-
2890 arch/arm/mach-omap2/omap_device.c | 4 +-
2891 arch/arm/mach-omap2/omap_device.h | 4 +-
2892 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
2893 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
2894 arch/arm/mach-omap2/wd_timer.c | 6 +-
afe359a8 2895 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
6090327c 2896 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
e8242a6d
PK		 2897 arch/arm/mach-tegra/irq.c | 1 +
2898 arch/arm/mach-ux500/pm.c | 1 +
e8242a6d 2899 arch/arm/mach-zynq/platsmp.c | 1 +
0986ccbe 2900 arch/arm/mm/Kconfig | 6 +-
6090327c
PK		 2901 arch/arm/mm/alignment.c | 8 +
2902 arch/arm/mm/cache-l2x0.c | 2 +-
2903 arch/arm/mm/context.c | 10 +-
0986ccbe 2904 arch/arm/mm/fault.c | 146 +
6090327c 2905 arch/arm/mm/fault.h | 12 +
8cf17962 2906 arch/arm/mm/init.c | 39 +
6090327c
PK		 2907 arch/arm/mm/ioremap.c | 4 +-
2908 arch/arm/mm/mmap.c | 30 +-
ab5bcff6 2909 arch/arm/mm/mmu.c | 162 +-
0986ccbe 2910 arch/arm/net/bpf_jit_32.c | 3 +
6090327c
PK		 2911 arch/arm/plat-iop/setup.c | 2 +-
2912 arch/arm/plat-omap/sram.c | 2 +
e8242a6d 2913 arch/arm64/include/asm/atomic.h | 10 +
8cf17962 2914 arch/arm64/include/asm/percpu.h | 8 +-
e8242a6d 2915 arch/arm64/include/asm/pgalloc.h | 5 +
6090327c 2916 arch/arm64/include/asm/uaccess.h | 1 +
e8242a6d 2917 arch/arm64/mm/dma-mapping.c | 2 +-
6090327c
PK		 2918 arch/avr32/include/asm/elf.h | 8 +-
2919 arch/avr32/include/asm/kmap_types.h | 4 +-
2920 arch/avr32/mm/fault.c | 27 +
2921 arch/frv/include/asm/atomic.h | 10 +
2922 arch/frv/include/asm/kmap_types.h | 2 +-
2923 arch/frv/mm/elf-fdpic.c | 3 +-
a8b227b4 2924 arch/ia64/Makefile | 1 +
6090327c 2925 arch/ia64/include/asm/atomic.h | 10 +
6090327c
PK		 2926 arch/ia64/include/asm/elf.h | 7 +
2927 arch/ia64/include/asm/pgalloc.h | 12 +
2928 arch/ia64/include/asm/pgtable.h | 13 +-
2929 arch/ia64/include/asm/spinlock.h | 2 +-
2930 arch/ia64/include/asm/uaccess.h | 27 +-
8cf17962 2931 arch/ia64/kernel/module.c | 45 +-
6090327c
PK		 2932 arch/ia64/kernel/palinfo.c | 2 +-
2933 arch/ia64/kernel/sys_ia64.c | 7 +
2934 arch/ia64/kernel/vmlinux.lds.S | 2 +-
2935 arch/ia64/mm/fault.c | 32 +-
a8b227b4 2936 arch/ia64/mm/init.c | 15 +-
6090327c 2937 arch/m32r/lib/usercopy.c | 6 +
6090327c 2938 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
ab5bcff6 2939 arch/mips/include/asm/atomic.h | 368 +-
da1216b9 2940 arch/mips/include/asm/elf.h | 7 +
6090327c
PK		 2941 arch/mips/include/asm/exec.h | 2 +-
2942 arch/mips/include/asm/hw_irq.h | 2 +-
2943 arch/mips/include/asm/local.h | 57 +
2944 arch/mips/include/asm/page.h | 2 +-
2945 arch/mips/include/asm/pgalloc.h | 5 +
2946 arch/mips/include/asm/pgtable.h | 3 +
2947 arch/mips/include/asm/uaccess.h | 1 +
2948 arch/mips/kernel/binfmt_elfn32.c | 7 +
2949 arch/mips/kernel/binfmt_elfo32.c | 7 +
6090327c
PK		 2950 arch/mips/kernel/irq-gt641xx.c | 2 +-
2951 arch/mips/kernel/irq.c | 6 +-
2952 arch/mips/kernel/pm-cps.c | 2 +-
2953 arch/mips/kernel/process.c | 12 -
6090327c
PK		 2954 arch/mips/kernel/sync-r4k.c | 24 +-
2955 arch/mips/kernel/traps.c | 13 +-
2956 arch/mips/mm/fault.c | 25 +
2957 arch/mips/mm/mmap.c | 51 +-
6090327c
PK		 2958 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
2959 arch/mips/sni/rm200.c | 2 +-
2960 arch/mips/vr41xx/common/icu.c | 2 +-
2961 arch/mips/vr41xx/common/irq.c | 4 +-
2962 arch/parisc/include/asm/atomic.h | 10 +
2963 arch/parisc/include/asm/elf.h | 7 +
2964 arch/parisc/include/asm/pgalloc.h | 6 +
2965 arch/parisc/include/asm/pgtable.h | 11 +
2966 arch/parisc/include/asm/uaccess.h | 4 +-
2967 arch/parisc/kernel/module.c | 50 +-
2968 arch/parisc/kernel/sys_parisc.c | 15 +
2969 arch/parisc/kernel/traps.c | 4 +-
2970 arch/parisc/mm/fault.c | 140 +-
0986ccbe 2971 arch/powerpc/include/asm/atomic.h | 329 +-
da1216b9 2972 arch/powerpc/include/asm/elf.h | 12 +
6090327c
PK		 2973 arch/powerpc/include/asm/exec.h | 2 +-
2974 arch/powerpc/include/asm/kmap_types.h | 2 +-
0986ccbe 2975 arch/powerpc/include/asm/local.h | 46 +
6090327c
PK		 2976 arch/powerpc/include/asm/mman.h | 2 +-
2977 arch/powerpc/include/asm/page.h | 8 +-
2978 arch/powerpc/include/asm/page_64.h | 7 +-
2979 arch/powerpc/include/asm/pgalloc-64.h | 7 +
2980 arch/powerpc/include/asm/pgtable.h | 1 +
2981 arch/powerpc/include/asm/pte-hash32.h | 1 +
2982 arch/powerpc/include/asm/reg.h | 1 +
2983 arch/powerpc/include/asm/smp.h | 2 +-
0986ccbe 2984 arch/powerpc/include/asm/spinlock.h | 42 +-
6090327c 2985 arch/powerpc/include/asm/uaccess.h | 141 +-
8cf17962 2986 arch/powerpc/kernel/Makefile | 5 +
6090327c
PK		 2987 arch/powerpc/kernel/exceptions-64e.S | 4 +-
2988 arch/powerpc/kernel/exceptions-64s.S | 2 +-
2989 arch/powerpc/kernel/module_32.c | 15 +-
8cf17962 2990 arch/powerpc/kernel/process.c | 46 -
6090327c
PK		 2991 arch/powerpc/kernel/signal_32.c | 2 +-
2992 arch/powerpc/kernel/signal_64.c | 2 +-
0986ccbe 2993 arch/powerpc/kernel/traps.c | 21 +
6090327c 2994 arch/powerpc/kernel/vdso.c | 5 +-
6090327c 2995 arch/powerpc/lib/usercopy_64.c | 18 -
e8242a6d 2996 arch/powerpc/mm/fault.c | 56 +-
da1216b9 2997 arch/powerpc/mm/mmap.c | 16 +
6090327c
PK		 2998 arch/powerpc/mm/slice.c | 13 +-
2999 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
3000 arch/s390/include/asm/atomic.h | 10 +
da1216b9 3001 arch/s390/include/asm/elf.h | 7 +
6090327c
PK		 3002 arch/s390/include/asm/exec.h | 2 +-
3003 arch/s390/include/asm/uaccess.h | 13 +-
3004 arch/s390/kernel/module.c | 22 +-
e8242a6d 3005 arch/s390/kernel/process.c | 24 -
da1216b9 3006 arch/s390/mm/mmap.c | 16 +
6090327c
PK		 3007 arch/score/include/asm/exec.h | 2 +-
3008 arch/score/kernel/process.c | 5 -
3009 arch/sh/mm/mmap.c | 22 +-
0986ccbe 3010 arch/sparc/include/asm/atomic_64.h | 110 +-
6090327c
PK		 3011 arch/sparc/include/asm/cache.h | 2 +-
3012 arch/sparc/include/asm/elf_32.h | 7 +
3013 arch/sparc/include/asm/elf_64.h | 7 +
3014 arch/sparc/include/asm/pgalloc_32.h | 1 +
3015 arch/sparc/include/asm/pgalloc_64.h | 1 +
3016 arch/sparc/include/asm/pgtable.h | 4 +
3017 arch/sparc/include/asm/pgtable_32.h | 15 +-
3018 arch/sparc/include/asm/pgtsrmmu.h | 5 +
3019 arch/sparc/include/asm/setup.h | 4 +-
3020 arch/sparc/include/asm/spinlock_64.h | 35 +-
e8242a6d 3021 arch/sparc/include/asm/thread_info_32.h | 1 +
6090327c
PK		 3022 arch/sparc/include/asm/thread_info_64.h | 2 +
3023 arch/sparc/include/asm/uaccess.h | 1 +
e8242a6d
PK		 3024 arch/sparc/include/asm/uaccess_32.h | 28 +-
3025 arch/sparc/include/asm/uaccess_64.h | 24 +-
6090327c
PK		 3026 arch/sparc/kernel/Makefile | 2 +-
3027 arch/sparc/kernel/prom_common.c | 2 +-
3028 arch/sparc/kernel/smp_64.c | 8 +-
3029 arch/sparc/kernel/sys_sparc_32.c | 2 +-
3030 arch/sparc/kernel/sys_sparc_64.c | 52 +-
3031 arch/sparc/kernel/traps_64.c | 27 +-
3032 arch/sparc/lib/Makefile | 2 +-
0986ccbe
PK		 3033 arch/sparc/lib/atomic_64.S | 57 +-
3034 arch/sparc/lib/ksyms.c | 6 +-
6090327c
PK		 3035 arch/sparc/mm/Makefile | 2 +-
3036 arch/sparc/mm/fault_32.c | 292 +
8cf17962 3037 arch/sparc/mm/fault_64.c | 486 +
6090327c
PK		 3038 arch/sparc/mm/hugetlbpage.c | 22 +-
3039 arch/sparc/mm/init_64.c | 10 +-
3040 arch/tile/include/asm/atomic_64.h | 10 +
3041 arch/tile/include/asm/uaccess.h | 4 +-
3042 arch/um/Makefile | 4 +
3043 arch/um/include/asm/kmap_types.h | 2 +-
3044 arch/um/include/asm/page.h | 3 +
3045 arch/um/include/asm/pgtable-3level.h | 1 +
3046 arch/um/kernel/process.c | 16 -
afe359a8 3047 arch/x86/Kconfig | 15 +-
6090327c
PK		 3048 arch/x86/Kconfig.cpu | 6 +-
3049 arch/x86/Kconfig.debug | 4 +-
a8b227b4 3050 arch/x86/Makefile | 13 +-
6090327c
PK		 3051 arch/x86/boot/Makefile | 3 +
3052 arch/x86/boot/bitops.h | 4 +-
3053 arch/x86/boot/boot.h | 2 +-
3054 arch/x86/boot/compressed/Makefile | 3 +
3055 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
8cf17962 3056 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
6090327c
PK		 3057 arch/x86/boot/compressed/head_32.S | 4 +-
3058 arch/x86/boot/compressed/head_64.S | 12 +-
3059 arch/x86/boot/compressed/misc.c | 11 +-
3060 arch/x86/boot/cpucheck.c | 16 +-
3061 arch/x86/boot/header.S | 6 +-
3062 arch/x86/boot/memory.c | 2 +-
3063 arch/x86/boot/video-vesa.c | 1 +
3064 arch/x86/boot/video.c | 2 +-
3065 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
3066 arch/x86/crypto/aesni-intel_asm.S | 106 +-
3067 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
3068 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
3069 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
3070 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
3071 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
3072 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
da1216b9 3073 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +-
6090327c
PK		 3074 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
3075 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
3076 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
3077 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
3078 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
3079 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
3080 arch/x86/crypto/sha256-avx-asm.S | 2 +
3081 arch/x86/crypto/sha256-avx2-asm.S | 2 +
3082 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
3083 arch/x86/crypto/sha512-avx-asm.S | 2 +
3084 arch/x86/crypto/sha512-avx2-asm.S | 2 +
3085 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
3086 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
3087 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
3088 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
ab5bcff6
PK		 3089 arch/x86/entry/calling.h | 86 +-
3090 arch/x86/entry/common.c | 13 +-
3091 arch/x86/entry/entry_32.S | 351 +-
3092 arch/x86/entry/entry_64.S | 619 +-
afe359a8
PK		 3093 arch/x86/entry/entry_64_compat.S | 159 +-
3094 arch/x86/entry/thunk_64.S | 2 +
3095 arch/x86/entry/vdso/Makefile | 2 +-
ab5bcff6 3096 arch/x86/entry/vdso/vdso2c.h | 8 +-
afe359a8
PK		 3097 arch/x86/entry/vdso/vma.c | 41 +-
3098 arch/x86/entry/vsyscall/vsyscall_64.c | 16 +-
ab5bcff6 3099 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
0986ccbe 3100 arch/x86/ia32/ia32_signal.c | 23 +-
afe359a8 3101 arch/x86/ia32/sys_ia32.c | 42 +-
da1216b9 3102 arch/x86/include/asm/alternative-asm.h | 43 +-
6090327c
PK		 3103 arch/x86/include/asm/alternative.h | 4 +-
3104 arch/x86/include/asm/apic.h | 2 +-
3105 arch/x86/include/asm/apm.h | 4 +-
ab5bcff6 3106 arch/x86/include/asm/atomic.h | 230 +-
6090327c 3107 arch/x86/include/asm/atomic64_32.h | 100 +
0986ccbe 3108 arch/x86/include/asm/atomic64_64.h | 164 +-
6090327c 3109 arch/x86/include/asm/bitops.h | 18 +-
afe359a8 3110 arch/x86/include/asm/boot.h | 2 +-
6090327c 3111 arch/x86/include/asm/cache.h | 5 +-
6090327c
PK		 3112 arch/x86/include/asm/checksum_32.h | 12 +-
3113 arch/x86/include/asm/cmpxchg.h | 39 +
3114 arch/x86/include/asm/compat.h | 2 +-
afe359a8 3115 arch/x86/include/asm/cpufeature.h | 17 +-
6090327c
PK		 3116 arch/x86/include/asm/desc.h | 78 +-
3117 arch/x86/include/asm/desc_defs.h | 6 +
3118 arch/x86/include/asm/div64.h | 2 +-
da1216b9 3119 arch/x86/include/asm/elf.h | 33 +-
6090327c 3120 arch/x86/include/asm/emergency-restart.h | 2 +-
ab5bcff6
PK		 3121 arch/x86/include/asm/fpu/internal.h | 42 +-
3122 arch/x86/include/asm/fpu/types.h | 6 +-
6090327c
PK		 3123 arch/x86/include/asm/futex.h | 14 +-
3124 arch/x86/include/asm/hw_irq.h | 4 +-
3125 arch/x86/include/asm/i8259.h | 2 +-
afe359a8 3126 arch/x86/include/asm/io.h | 22 +-
6090327c
PK		 3127 arch/x86/include/asm/irqflags.h | 5 +
3128 arch/x86/include/asm/kprobes.h | 9 +-
3129 arch/x86/include/asm/local.h | 106 +-
3130 arch/x86/include/asm/mman.h | 15 +
afe359a8 3131 arch/x86/include/asm/mmu.h | 14 +-
ab5bcff6 3132 arch/x86/include/asm/mmu_context.h | 114 +-
6090327c
PK		 3133 arch/x86/include/asm/module.h | 17 +-
3134 arch/x86/include/asm/nmi.h | 19 +-
3135 arch/x86/include/asm/page.h | 1 +
afe359a8
PK		 3136 arch/x86/include/asm/page_32.h | 12 +-
3137 arch/x86/include/asm/page_64.h | 14 +-
6090327c
PK		 3138 arch/x86/include/asm/paravirt.h | 46 +-
3139 arch/x86/include/asm/paravirt_types.h | 15 +-
3140 arch/x86/include/asm/pgalloc.h | 23 +
3141 arch/x86/include/asm/pgtable-2level.h | 2 +
ab5bcff6 3142 arch/x86/include/asm/pgtable-3level.h | 7 +
da1216b9 3143 arch/x86/include/asm/pgtable.h | 128 +-
6090327c 3144 arch/x86/include/asm/pgtable_32.h | 14 +-
afe359a8 3145 arch/x86/include/asm/pgtable_32_types.h | 24 +-
ab5bcff6 3146 arch/x86/include/asm/pgtable_64.h | 23 +-
6090327c
PK		 3147 arch/x86/include/asm/pgtable_64_types.h | 5 +
3148 arch/x86/include/asm/pgtable_types.h | 26 +-
3149 arch/x86/include/asm/preempt.h | 2 +-
ab5bcff6
PK		 3150 arch/x86/include/asm/processor.h | 57 +-
3151 arch/x86/include/asm/ptrace.h | 13 +-
6090327c
PK		 3152 arch/x86/include/asm/realmode.h | 4 +-
3153 arch/x86/include/asm/reboot.h | 10 +-
3154 arch/x86/include/asm/rmwcc.h | 84 +-
3155 arch/x86/include/asm/rwsem.h | 60 +-
da1216b9
PK		 3156 arch/x86/include/asm/segment.h | 27 +-
3157 arch/x86/include/asm/smap.h | 43 +
6090327c 3158 arch/x86/include/asm/smp.h | 14 +-
6090327c
PK		 3159 arch/x86/include/asm/stackprotector.h | 4 +-
3160 arch/x86/include/asm/stacktrace.h | 32 +-
3161 arch/x86/include/asm/switch_to.h | 4 +-
afe359a8
PK		 3162 arch/x86/include/asm/sys_ia32.h | 6 +-
3163 arch/x86/include/asm/thread_info.h | 27 +-
3164 arch/x86/include/asm/tlbflush.h | 77 +-
e8242a6d 3165 arch/x86/include/asm/uaccess.h | 192 +-
8cf17962
PK		 3166 arch/x86/include/asm/uaccess_32.h | 28 +-
3167 arch/x86/include/asm/uaccess_64.h | 169 +-
6090327c
PK		 3168 arch/x86/include/asm/word-at-a-time.h | 2 +-
3169 arch/x86/include/asm/x86_init.h | 10 +-
3170 arch/x86/include/asm/xen/page.h | 2 +-
6090327c 3171 arch/x86/include/uapi/asm/e820.h | 2 +-
6090327c
PK		 3172 arch/x86/kernel/Makefile | 2 +-
3173 arch/x86/kernel/acpi/boot.c | 4 +-
3174 arch/x86/kernel/acpi/sleep.c | 4 +
3175 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
afe359a8 3176 arch/x86/kernel/alternative.c | 124 +-
6090327c 3177 arch/x86/kernel/apic/apic.c | 4 +-
ab5bcff6 3178 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
6090327c
PK		 3179 arch/x86/kernel/apic/apic_noop.c | 2 +-
3180 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
e8242a6d 3181 arch/x86/kernel/apic/io_apic.c | 8 +-
afe359a8 3182 arch/x86/kernel/apic/msi.c | 2 +-
ab5bcff6 3183 arch/x86/kernel/apic/probe_32.c | 4 +-
8cf17962 3184 arch/x86/kernel/apic/vector.c | 4 +-
ab5bcff6 3185 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
6090327c
PK		 3186 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
3187 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
e8242a6d 3188 arch/x86/kernel/apm_32.c | 21 +-
6090327c
PK		 3189 arch/x86/kernel/asm-offsets.c | 20 +
3190 arch/x86/kernel/asm-offsets_64.c | 1 +
3191 arch/x86/kernel/cpu/Makefile | 4 -
3192 arch/x86/kernel/cpu/amd.c | 2 +-
ab5bcff6 3193 arch/x86/kernel/cpu/bugs_64.c | 2 +
afe359a8 3194 arch/x86/kernel/cpu/common.c | 202 +-
da1216b9 3195 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
ab5bcff6 3196 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
6090327c
PK		 3197 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
3198 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
6090327c
PK		 3199 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
3200 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
3201 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
afe359a8 3202 arch/x86/kernel/cpu/perf_event.c | 10 +-
6090327c
PK		 3203 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
3204 arch/x86/kernel/cpu/perf_event_intel.c | 6 +-
da1216b9
PK		 3205 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
3206 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
3207 arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +-
6090327c
PK		 3208 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
3209 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
3210 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
6090327c
PK		 3211 arch/x86/kernel/crash_dump_64.c | 2 +-
3212 arch/x86/kernel/doublefault.c | 8 +-
da1216b9
PK		 3213 arch/x86/kernel/dumpstack.c | 24 +-
3214 arch/x86/kernel/dumpstack_32.c | 25 +-
8cf17962 3215 arch/x86/kernel/dumpstack_64.c | 62 +-
6090327c
PK		 3216 arch/x86/kernel/e820.c | 4 +-
3217 arch/x86/kernel/early_printk.c | 1 +
ab5bcff6
PK		 3218 arch/x86/kernel/espfix_64.c | 44 +-
3219 arch/x86/kernel/fpu/core.c | 24 +-
3220 arch/x86/kernel/fpu/init.c | 40 +-
afe359a8
PK		 3221 arch/x86/kernel/fpu/regset.c | 22 +-
3222 arch/x86/kernel/fpu/signal.c | 20 +-
3223 arch/x86/kernel/fpu/xstate.c | 8 +-
da1216b9 3224 arch/x86/kernel/ftrace.c | 18 +-
afe359a8
PK		 3225 arch/x86/kernel/head64.c | 14 +-
3226 arch/x86/kernel/head_32.S | 235 +-
ab5bcff6 3227 arch/x86/kernel/head_64.S | 173 +-
6090327c 3228 arch/x86/kernel/i386_ksyms_32.c | 12 +
6090327c
PK		 3229 arch/x86/kernel/i8259.c | 10 +-
3230 arch/x86/kernel/io_delay.c | 2 +-
3231 arch/x86/kernel/ioport.c | 2 +-
3232 arch/x86/kernel/irq.c | 8 +-
da1216b9 3233 arch/x86/kernel/irq_32.c | 45 +-
afe359a8 3234 arch/x86/kernel/jump_label.c | 10 +-
da1216b9
PK		 3235 arch/x86/kernel/kgdb.c | 21 +-
3236 arch/x86/kernel/kprobes/core.c | 28 +-
6090327c
PK		 3237 arch/x86/kernel/kprobes/opt.c | 16 +-
3238 arch/x86/kernel/ksysfs.c | 2 +-
ab5bcff6 3239 arch/x86/kernel/kvmclock.c | 20 +-
afe359a8 3240 arch/x86/kernel/ldt.c | 25 +
e8242a6d 3241 arch/x86/kernel/livepatch.c | 12 +-
6090327c 3242 arch/x86/kernel/machine_kexec_32.c | 6 +-
a8b227b4 3243 arch/x86/kernel/mcount_64.S | 19 +-
6090327c
PK		 3244 arch/x86/kernel/module.c | 78 +-
3245 arch/x86/kernel/msr.c | 2 +-
3246 arch/x86/kernel/nmi.c | 34 +-
3247 arch/x86/kernel/nmi_selftest.c | 4 +-
3248 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
3249 arch/x86/kernel/paravirt.c | 45 +-
8cf17962 3250 arch/x86/kernel/paravirt_patch_64.c | 8 +
6090327c
PK		 3251 arch/x86/kernel/pci-calgary_64.c | 2 +-
3252 arch/x86/kernel/pci-iommu_table.c | 2 +-
3253 arch/x86/kernel/pci-swiotlb.c | 2 +-
ab5bcff6
PK		 3254 arch/x86/kernel/process.c | 80 +-
3255 arch/x86/kernel/process_32.c | 29 +-
3256 arch/x86/kernel/process_64.c | 14 +-
6090327c
PK		 3257 arch/x86/kernel/ptrace.c | 20 +-
3258 arch/x86/kernel/pvclock.c | 8 +-
e8242a6d 3259 arch/x86/kernel/reboot.c | 44 +-
6090327c
PK		 3260 arch/x86/kernel/reboot_fixups_32.c | 2 +-
3261 arch/x86/kernel/relocate_kernel_64.S | 3 +-
afe359a8 3262 arch/x86/kernel/setup.c | 29 +-
6090327c
PK		 3263 arch/x86/kernel/setup_percpu.c | 29 +-
3264 arch/x86/kernel/signal.c | 17 +-
3265 arch/x86/kernel/smp.c | 2 +-
afe359a8
PK		 3266 arch/x86/kernel/smpboot.c | 29 +-
3267 arch/x86/kernel/step.c | 6 +-
6090327c
PK		 3268 arch/x86/kernel/sys_i386_32.c | 184 +
3269 arch/x86/kernel/sys_x86_64.c | 22 +-
da1216b9
PK		 3270 arch/x86/kernel/tboot.c | 14 +-
3271 arch/x86/kernel/time.c | 8 +-
6090327c
PK		 3272 arch/x86/kernel/tls.c | 7 +-
3273 arch/x86/kernel/tracepoint.c | 4 +-
da1216b9 3274 arch/x86/kernel/traps.c | 53 +-
6090327c 3275 arch/x86/kernel/tsc.c | 2 +-
da1216b9 3276 arch/x86/kernel/uprobes.c | 2 +-
6090327c 3277 arch/x86/kernel/vm86_32.c | 6 +-
ab5bcff6 3278 arch/x86/kernel/vmlinux.lds.S | 153 +-
6090327c
PK		 3279 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
3280 arch/x86/kernel/x86_init.c | 6 +-
6090327c 3281 arch/x86/kvm/cpuid.c | 21 +-
8cf17962 3282 arch/x86/kvm/emulate.c | 2 +-
6090327c
PK		 3283 arch/x86/kvm/lapic.c | 2 +-
3284 arch/x86/kvm/paging_tmpl.h | 2 +-
ab5bcff6
PK		 3285 arch/x86/kvm/svm.c | 10 +-
3286 arch/x86/kvm/vmx.c | 62 +-
3287 arch/x86/kvm/x86.c | 42 +-
6090327c
PK		 3288 arch/x86/lguest/boot.c | 3 +-
3289 arch/x86/lib/atomic64_386_32.S | 164 +
afe359a8 3290 arch/x86/lib/atomic64_cx8_32.S | 98 +-
ab5bcff6 3291 arch/x86/lib/checksum_32.S | 99 +-
da1216b9 3292 arch/x86/lib/clear_page_64.S | 3 +
0986ccbe 3293 arch/x86/lib/cmpxchg16b_emu.S | 3 +
afe359a8
PK		 3294 arch/x86/lib/copy_page_64.S | 14 +-
3295 arch/x86/lib/copy_user_64.S | 66 +-
3296 arch/x86/lib/csum-copy_64.S | 14 +-
6090327c
PK		 3297 arch/x86/lib/csum-wrappers_64.c | 8 +-
3298 arch/x86/lib/getuser.S | 74 +-
8cf17962 3299 arch/x86/lib/insn.c | 8 +-
6090327c 3300 arch/x86/lib/iomap_copy_64.S | 2 +
da1216b9
PK		 3301 arch/x86/lib/memcpy_64.S | 6 +
3302 arch/x86/lib/memmove_64.S | 3 +-
3303 arch/x86/lib/memset_64.S | 3 +
6090327c
PK		 3304 arch/x86/lib/mmx_32.c | 243 +-
3305 arch/x86/lib/msr-reg.S | 2 +
afe359a8 3306 arch/x86/lib/putuser.S | 87 +-
6090327c 3307 arch/x86/lib/rwsem.S | 6 +-
afe359a8 3308 arch/x86/lib/usercopy_32.c | 359 +-
da1216b9 3309 arch/x86/lib/usercopy_64.c | 20 +-
afe359a8
PK		 3310 arch/x86/math-emu/fpu_aux.c | 2 +-
3311 arch/x86/math-emu/fpu_entry.c | 4 +-
3312 arch/x86/math-emu/fpu_system.h | 2 +-
6090327c 3313 arch/x86/mm/Makefile | 4 +
afe359a8 3314 arch/x86/mm/extable.c | 26 +-
da1216b9 3315 arch/x86/mm/fault.c | 570 +-
6090327c 3316 arch/x86/mm/gup.c | 6 +-
ab5bcff6 3317 arch/x86/mm/highmem_32.c | 6 +
6090327c 3318 arch/x86/mm/hugetlbpage.c | 24 +-
ab5bcff6 3319 arch/x86/mm/init.c | 111 +-
6090327c 3320 arch/x86/mm/init_32.c | 111 +-
8cf17962 3321 arch/x86/mm/init_64.c | 46 +-
6090327c 3322 arch/x86/mm/iomap_32.c | 4 +
ab5bcff6 3323 arch/x86/mm/ioremap.c | 52 +-
6090327c 3324 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
da1216b9 3325 arch/x86/mm/mmap.c | 40 +-
6090327c
PK		 3326 arch/x86/mm/mmio-mod.c | 10 +-
3327 arch/x86/mm/numa.c | 2 +-
ab5bcff6 3328 arch/x86/mm/pageattr.c | 38 +-
afe359a8 3329 arch/x86/mm/pat.c | 12 +-
6090327c
PK		 3330 arch/x86/mm/pat_rbtree.c | 2 +-
3331 arch/x86/mm/pf_in.c | 10 +-
ab5bcff6 3332 arch/x86/mm/pgtable.c | 214 +-
6090327c 3333 arch/x86/mm/pgtable_32.c | 3 +
6090327c
PK		 3334 arch/x86/mm/setup_nx.c | 7 +
3335 arch/x86/mm/tlb.c | 4 +
3336 arch/x86/mm/uderef_64.c | 37 +
3337 arch/x86/net/bpf_jit.S | 11 +
8cf17962 3338 arch/x86/net/bpf_jit_comp.c | 13 +-
da1216b9 3339 arch/x86/oprofile/backtrace.c | 6 +-
6090327c
PK		 3340 arch/x86/oprofile/nmi_int.c | 8 +-
3341 arch/x86/oprofile/op_model_amd.c | 8 +-
3342 arch/x86/oprofile/op_model_ppro.c | 7 +-
3343 arch/x86/oprofile/op_x86_model.h | 2 +-
3344 arch/x86/pci/intel_mid_pci.c | 2 +-
3345 arch/x86/pci/irq.c | 8 +-
3346 arch/x86/pci/pcbios.c | 144 +-
3347 arch/x86/platform/efi/efi_32.c | 24 +
da1216b9 3348 arch/x86/platform/efi/efi_64.c | 26 +-
6090327c 3349 arch/x86/platform/efi/efi_stub_32.S | 64 +-
8cf17962 3350 arch/x86/platform/efi/efi_stub_64.S | 2 +
e8242a6d 3351 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
a8b227b4
PK		 3352 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
3353 arch/x86/platform/intel-mid/mfld.c | 4 +-
3354 arch/x86/platform/intel-mid/mrfl.c | 2 +-
e8242a6d 3355 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
6090327c
PK		 3356 arch/x86/platform/olpc/olpc_dt.c | 2 +-
3357 arch/x86/power/cpu.c | 11 +-
3358 arch/x86/realmode/init.c | 10 +-
3359 arch/x86/realmode/rm/Makefile | 3 +
3360 arch/x86/realmode/rm/header.S | 4 +-
da1216b9 3361 arch/x86/realmode/rm/reboot.S | 4 +
6090327c
PK		 3362 arch/x86/realmode/rm/trampoline_32.S | 12 +-
3363 arch/x86/realmode/rm/trampoline_64.S | 3 +-
3364 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
3365 arch/x86/tools/Makefile | 2 +-
afe359a8 3366 arch/x86/tools/relocs.c | 96 +-
6090327c
PK		 3367 arch/x86/um/mem_32.c | 2 +-
3368 arch/x86/um/tls_32.c | 2 +-
da1216b9 3369 arch/x86/xen/enlighten.c | 50 +-
ab5bcff6 3370 arch/x86/xen/mmu.c | 19 +-
da1216b9 3371 arch/x86/xen/smp.c | 16 +-
6090327c
PK		 3372 arch/x86/xen/xen-asm_32.S | 2 +-
3373 arch/x86/xen/xen-head.S | 11 +
3374 arch/x86/xen/xen-ops.h | 2 -
e8242a6d 3375 block/bio.c | 4 +-
6090327c
PK		 3376 block/blk-iopoll.c | 2 +-
3377 block/blk-map.c | 2 +-
3378 block/blk-softirq.c | 2 +-
3379 block/bsg.c | 12 +-
3380 block/compat_ioctl.c | 4 +-
3381 block/genhd.c | 9 +-
3382 block/partitions/efi.c | 8 +-
3383 block/scsi_ioctl.c | 29 +-
3384 crypto/cryptd.c | 4 +-
3385 crypto/pcrypt.c | 2 +-
ab5bcff6 3386 crypto/zlib.c | 12 +-
afe359a8 3387 drivers/acpi/acpi_video.c | 2 +-
6090327c
PK		 3388 drivers/acpi/apei/apei-internal.h | 2 +-
3389 drivers/acpi/apei/ghes.c | 4 +-
3390 drivers/acpi/bgrt.c | 6 +-
3391 drivers/acpi/blacklist.c | 4 +-
e8242a6d 3392 drivers/acpi/bus.c | 4 +-
0986ccbe 3393 drivers/acpi/device_pm.c | 4 +-
e8242a6d
PK		 3394 drivers/acpi/ec.c | 2 +-
3395 drivers/acpi/pci_slot.c | 2 +-
6090327c 3396 drivers/acpi/processor_idle.c | 2 +-
e8242a6d
PK		 3397 drivers/acpi/processor_pdc.c | 2 +-
3398 drivers/acpi/sleep.c | 2 +-
6090327c 3399 drivers/acpi/sysfs.c | 4 +-
e8242a6d 3400 drivers/acpi/thermal.c | 2 +-
afe359a8 3401 drivers/acpi/video_detect.c | 7 +-
6090327c
PK		 3402 drivers/ata/libata-core.c | 12 +-
3403 drivers/ata/libata-scsi.c | 2 +-
3404 drivers/ata/libata.h | 2 +-
3405 drivers/ata/pata_arasan_cf.c | 4 +-
3406 drivers/atm/adummy.c | 2 +-
3407 drivers/atm/ambassador.c | 8 +-
3408 drivers/atm/atmtcp.c | 14 +-
3409 drivers/atm/eni.c | 10 +-
3410 drivers/atm/firestream.c | 8 +-
3411 drivers/atm/fore200e.c | 14 +-
3412 drivers/atm/he.c | 18 +-
3413 drivers/atm/horizon.c | 4 +-
3414 drivers/atm/idt77252.c | 36 +-
3415 drivers/atm/iphase.c | 34 +-
3416 drivers/atm/lanai.c | 12 +-
3417 drivers/atm/nicstar.c | 46 +-
3418 drivers/atm/solos-pci.c | 4 +-
3419 drivers/atm/suni.c | 4 +-
3420 drivers/atm/uPD98402.c | 16 +-
3421 drivers/atm/zatm.c | 6 +-
3422 drivers/base/bus.c | 4 +-
3423 drivers/base/devtmpfs.c | 8 +-
3424 drivers/base/node.c | 2 +-
ab5bcff6 3425 drivers/base/platform-msi.c | 20 +-
da1216b9 3426 drivers/base/power/domain.c | 11 +-
6090327c
PK		 3427 drivers/base/power/sysfs.c | 2 +-
3428 drivers/base/power/wakeup.c | 8 +-
ab5bcff6 3429 drivers/base/regmap/regmap-debugfs.c | 11 +-
6090327c
PK		 3430 drivers/base/syscore.c | 4 +-
3431 drivers/block/cciss.c | 28 +-
3432 drivers/block/cciss.h | 2 +-
3433 drivers/block/cpqarray.c | 28 +-
3434 drivers/block/cpqarray.h | 2 +-
a8b227b4 3435 drivers/block/drbd/drbd_bitmap.c | 2 +-
8cf17962 3436 drivers/block/drbd/drbd_int.h | 8 +-
a8b227b4 3437 drivers/block/drbd/drbd_main.c | 12 +-
6090327c 3438 drivers/block/drbd/drbd_nl.c | 4 +-
a8b227b4
PK		 3439 drivers/block/drbd/drbd_receiver.c | 34 +-
3440 drivers/block/drbd/drbd_worker.c | 8 +-
6090327c 3441 drivers/block/pktcdvd.c | 4 +-
8cf17962 3442 drivers/block/rbd.c | 2 +-
6090327c 3443 drivers/bluetooth/btwilink.c | 2 +-
ab5bcff6 3444 drivers/bus/arm-cci.c | 12 +-
6090327c
PK		 3445 drivers/cdrom/cdrom.c | 11 +-
3446 drivers/cdrom/gdrom.c | 1 -
3447 drivers/char/agp/compat_ioctl.c | 2 +-
3448 drivers/char/agp/frontend.c | 4 +-
afe359a8 3449 drivers/char/agp/intel-gtt.c | 4 +-
6090327c 3450 drivers/char/hpet.c | 2 +-
6090327c
PK		 3451 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
3452 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
8cf17962 3453 drivers/char/mem.c | 47 +-
6090327c 3454 drivers/char/nvram.c | 2 +-
a8b227b4
PK		 3455 drivers/char/pcmcia/synclink_cs.c | 16 +-
3456 drivers/char/random.c | 12 +-
e8242a6d 3457 drivers/char/sonypi.c | 11 +-
6090327c 3458 drivers/char/tpm/tpm_acpi.c | 3 +-
ab5bcff6 3459 drivers/char/tpm/tpm_eventlog.c | 4 +-
6090327c
PK		 3460 drivers/char/virtio_console.c | 4 +-
3461 drivers/clk/clk-composite.c | 2 +-
da1216b9 3462 drivers/clk/samsung/clk.h | 2 +-
6090327c
PK		 3463 drivers/clk/socfpga/clk-gate.c | 9 +-
3464 drivers/clk/socfpga/clk-pll.c | 9 +-
ab5bcff6 3465 drivers/clk/ti/clk.c | 8 +-
6090327c 3466 drivers/cpufreq/acpi-cpufreq.c | 17 +-
8cf17962 3467 drivers/cpufreq/cpufreq-dt.c | 4 +-
ab5bcff6 3468 drivers/cpufreq/cpufreq.c | 30 +-
afe359a8 3469 drivers/cpufreq/cpufreq_governor.c | 2 +-
6090327c
PK		 3470 drivers/cpufreq/cpufreq_governor.h | 4 +-
3471 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
0986ccbe 3472 drivers/cpufreq/intel_pstate.c | 33 +-
6090327c
PK		 3473 drivers/cpufreq/p4-clockmod.c | 12 +-
3474 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
3475 drivers/cpufreq/speedstep-centrino.c | 7 +-
3476 drivers/cpuidle/driver.c | 2 +-
afe359a8 3477 drivers/cpuidle/dt_idle_states.c | 2 +-
6090327c
PK		 3478 drivers/cpuidle/governor.c | 2 +-
3479 drivers/cpuidle/sysfs.c | 2 +-
3480 drivers/crypto/hifn_795x.c | 4 +-
3481 drivers/devfreq/devfreq.c | 4 +-
3482 drivers/dma/sh/shdma-base.c | 4 +-
3483 drivers/dma/sh/shdmac.c | 2 +-
3484 drivers/edac/edac_device.c | 4 +-
da1216b9 3485 drivers/edac/edac_mc_sysfs.c | 2 +-
6090327c
PK		 3486 drivers/edac/edac_pci.c | 4 +-
3487 drivers/edac/edac_pci_sysfs.c | 22 +-
3488 drivers/edac/mce_amd.h | 2 +-
3489 drivers/firewire/core-card.c | 6 +-
3490 drivers/firewire/core-device.c | 2 +-
3491 drivers/firewire/core-transaction.c | 1 +
3492 drivers/firewire/core.h | 1 +
3493 drivers/firmware/dmi-id.c | 2 +-
afe359a8 3494 drivers/firmware/dmi_scan.c | 12 +-
6090327c
PK		 3495 drivers/firmware/efi/cper.c | 8 +-
3496 drivers/firmware/efi/efi.c | 12 +-
3497 drivers/firmware/efi/efivars.c | 2 +-
e8242a6d
PK		 3498 drivers/firmware/efi/runtime-map.c | 2 +-
3499 drivers/firmware/google/gsmi.c | 2 +-
3500 drivers/firmware/google/memconsole.c | 7 +-
3501 drivers/firmware/memmap.c | 2 +-
ab5bcff6 3502 drivers/firmware/psci.c | 2 +-
afe359a8 3503 drivers/gpio/gpio-davinci.c | 6 +-
6090327c
PK		 3504 drivers/gpio/gpio-em.c | 2 +-
3505 drivers/gpio/gpio-ich.c | 2 +-
afe359a8 3506 drivers/gpio/gpio-omap.c | 4 +-
6090327c
PK		 3507 drivers/gpio/gpio-rcar.c | 2 +-
3508 drivers/gpio/gpio-vr41xx.c | 2 +-
ab5bcff6 3509 drivers/gpio/gpiolib.c | 12 +-
afe359a8
PK		 3510 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
3511 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
3512 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
3513 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
3514 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
3515 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
3516 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
3517 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
3518 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
e8242a6d 3519 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
afe359a8 3520 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
6090327c 3521 drivers/gpu/drm/drm_crtc.c | 2 +-
a8b227b4 3522 drivers/gpu/drm/drm_drv.c | 2 +-
6090327c
PK		 3523 drivers/gpu/drm/drm_fops.c | 12 +-
3524 drivers/gpu/drm/drm_global.c | 14 +-
3525 drivers/gpu/drm/drm_info.c | 13 +-
3526 drivers/gpu/drm/drm_ioc32.c | 13 +-
a8b227b4 3527 drivers/gpu/drm/drm_ioctl.c | 2 +-
e8242a6d 3528 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
6090327c
PK		 3529 drivers/gpu/drm/i810/i810_drv.h | 4 +-
3530 drivers/gpu/drm/i915/i915_dma.c | 2 +-
3531 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
ab5bcff6
PK		 3532 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
3533 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
3534 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
6090327c 3535 drivers/gpu/drm/i915/intel_display.c | 26 +-
8cf17962 3536 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
6090327c 3537 drivers/gpu/drm/mga/mga_drv.h | 4 +-
da1216b9 3538 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
6090327c
PK		 3539 drivers/gpu/drm/mga/mga_irq.c | 8 +-
3540 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
3541 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
3542 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
3543 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
afe359a8 3544 drivers/gpu/drm/omapdrm/Makefile | 2 +-
6090327c
PK		 3545 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
3546 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
3547 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
3548 drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +-
3549 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
3550 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
3551 drivers/gpu/drm/r128/r128_cce.c | 2 +-
3552 drivers/gpu/drm/r128/r128_drv.h | 4 +-
da1216b9 3553 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
6090327c
PK		 3554 drivers/gpu/drm/r128/r128_irq.c | 4 +-
3555 drivers/gpu/drm/r128/r128_state.c | 4 +-
3556 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
3557 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
3558 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
da1216b9 3559 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
6090327c
PK		 3560 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
3561 drivers/gpu/drm/radeon/radeon_state.c | 4 +-
3562 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
3563 drivers/gpu/drm/tegra/dc.c | 2 +-
3564 drivers/gpu/drm/tegra/dsi.c | 2 +-
3565 drivers/gpu/drm/tegra/hdmi.c | 2 +-
afe359a8
PK		 3566 drivers/gpu/drm/tegra/sor.c | 7 +-
3567 drivers/gpu/drm/tilcdc/Makefile | 6 +-
6090327c 3568 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
0986ccbe
PK		 3569 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
3570 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
6090327c
PK		 3571 drivers/gpu/drm/udl/udl_fb.c | 1 -
3572 drivers/gpu/drm/via/via_drv.h | 4 +-
3573 drivers/gpu/drm/via/via_irq.c | 18 +-
3574 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
3575 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
6090327c
PK		 3576 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
3577 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
3578 drivers/gpu/vga/vga_switcheroo.c | 4 +-
3579 drivers/hid/hid-core.c | 4 +-
afe359a8 3580 drivers/hid/hid-sensor-custom.c | 2 +-
e8242a6d 3581 drivers/hv/channel.c | 2 +-
6090327c
PK		 3582 drivers/hv/hv.c | 4 +-
3583 drivers/hv/hv_balloon.c | 18 +-
3584 drivers/hv/hyperv_vmbus.h | 2 +-
e8242a6d 3585 drivers/hwmon/acpi_power_meter.c | 6 +-
6090327c
PK		 3586 drivers/hwmon/applesmc.c | 2 +-
3587 drivers/hwmon/asus_atk0110.c | 10 +-
3588 drivers/hwmon/coretemp.c | 2 +-
afe359a8 3589 drivers/hwmon/dell-smm-hwmon.c | 2 +-
6090327c
PK		 3590 drivers/hwmon/ibmaem.c | 2 +-
3591 drivers/hwmon/iio_hwmon.c | 2 +-
a8b227b4 3592 drivers/hwmon/nct6683.c | 6 +-
6090327c
PK		 3593 drivers/hwmon/nct6775.c | 6 +-
3594 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
3595 drivers/hwmon/sht15.c | 12 +-
3596 drivers/hwmon/via-cputemp.c | 2 +-
3597 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
6090327c
PK		 3598 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
3599 drivers/i2c/i2c-dev.c | 2 +-
3600 drivers/ide/ide-cd.c | 2 +-
ab5bcff6 3601 drivers/ide/ide-disk.c | 2 +-
6090327c 3602 drivers/iio/industrialio-core.c | 2 +-
afe359a8 3603 drivers/iio/magnetometer/ak8975.c | 2 +-
6090327c
PK		 3604 drivers/infiniband/core/cm.c | 32 +-
3605 drivers/infiniband/core/fmr_pool.c | 20 +-
e8242a6d 3606 drivers/infiniband/core/uverbs_cmd.c | 3 +
6090327c 3607 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
6090327c
PK		 3608 drivers/infiniband/hw/mlx4/mad.c | 2 +-
3609 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
3610 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
3611 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
3612 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
3613 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
3614 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
3615 drivers/infiniband/hw/nes/nes.c | 4 +-
3616 drivers/infiniband/hw/nes/nes.h | 40 +-
3617 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
3618 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
3619 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
3620 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
3621 drivers/infiniband/hw/qib/qib.h | 1 +
0986ccbe 3622 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
6090327c
PK		 3623 drivers/input/gameport/gameport.c | 4 +-
3624 drivers/input/input.c | 4 +-
3625 drivers/input/joystick/sidewinder.c | 1 +
3626 drivers/input/joystick/xpad.c | 4 +-
3627 drivers/input/misc/ims-pcu.c | 4 +-
3628 drivers/input/mouse/psmouse.h | 2 +-
3629 drivers/input/mousedev.c | 2 +-
3630 drivers/input/serio/serio.c | 4 +-
3631 drivers/input/serio/serio_raw.c | 4 +-
e8242a6d 3632 drivers/input/touchscreen/htcpen.c | 2 +-
ab5bcff6 3633 drivers/iommu/arm-smmu-v3.c | 2 +-
da1216b9
PK		 3634 drivers/iommu/arm-smmu.c | 43 +-
3635 drivers/iommu/io-pgtable-arm.c | 101 +-
3636 drivers/iommu/io-pgtable.c | 11 +-
3637 drivers/iommu/io-pgtable.h | 19 +-
0986ccbe 3638 drivers/iommu/iommu.c | 2 +-
da1216b9 3639 drivers/iommu/ipmmu-vmsa.c | 13 +-
afe359a8 3640 drivers/iommu/irq_remapping.c | 2 +-
da1216b9 3641 drivers/irqchip/irq-gic.c | 2 +-
ab5bcff6 3642 drivers/irqchip/irq-i8259.c | 2 +-
8cf17962 3643 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
6090327c
PK		 3644 drivers/irqchip/irq-renesas-irqc.c | 2 +-
3645 drivers/isdn/capi/capi.c | 10 +-
3646 drivers/isdn/gigaset/interface.c | 8 +-
3647 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
3648 drivers/isdn/hardware/avm/b1.c | 4 +-
3649 drivers/isdn/i4l/isdn_common.c | 2 +
3650 drivers/isdn/i4l/isdn_tty.c | 22 +-
3651 drivers/isdn/icn/icn.c | 2 +-
3652 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
6090327c
PK		 3653 drivers/lguest/core.c | 10 +-
3654 drivers/lguest/page_tables.c | 2 +-
3655 drivers/lguest/x86/core.c | 12 +-
3656 drivers/lguest/x86/switcher_32.S | 27 +-
3657 drivers/md/bcache/closure.h | 2 +-
3658 drivers/md/bitmap.c | 2 +-
3659 drivers/md/dm-ioctl.c | 2 +-
afe359a8 3660 drivers/md/dm-raid1.c | 18 +-
6090327c
PK		 3661 drivers/md/dm-stats.c | 6 +-
3662 drivers/md/dm-stripe.c | 10 +-
0986ccbe 3663 drivers/md/dm-table.c | 2 +-
6090327c
PK		 3664 drivers/md/dm-thin-metadata.c | 4 +-
3665 drivers/md/dm.c | 16 +-
3666 drivers/md/md.c | 26 +-
3667 drivers/md/md.h | 6 +-
3668 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
3669 drivers/md/persistent-data/dm-space-map.h | 1 +
3670 drivers/md/raid1.c | 4 +-
ab5bcff6 3671 drivers/md/raid10.c | 18 +-
e8242a6d 3672 drivers/md/raid5.c | 22 +-
6090327c
PK		 3673 drivers/media/dvb-core/dvbdev.c | 2 +-
3674 drivers/media/dvb-frontends/af9033.h | 2 +-
3675 drivers/media/dvb-frontends/dib3000.h | 2 +-
a8b227b4
PK		 3676 drivers/media/dvb-frontends/dib7000p.h | 2 +-
3677 drivers/media/dvb-frontends/dib8000.h | 2 +-
6090327c
PK		 3678 drivers/media/pci/cx88/cx88-video.c | 6 +-
3679 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
a8b227b4
PK		 3680 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
3681 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
3682 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
0986ccbe 3683 drivers/media/pci/tw68/tw68-core.c | 2 +-
6090327c
PK		 3684 drivers/media/platform/omap/omap_vout.c | 11 +-
3685 drivers/media/platform/s5p-tv/mixer.h | 2 +-
3686 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
3687 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
3688 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
3689 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
6090327c
PK		 3690 drivers/media/radio/radio-cadet.c | 2 +
3691 drivers/media/radio/radio-maxiradio.c | 2 +-
3692 drivers/media/radio/radio-shark.c | 2 +-
3693 drivers/media/radio/radio-shark2.c | 2 +-
3694 drivers/media/radio/radio-si476x.c | 2 +-
8cf17962 3695 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
0986ccbe 3696 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
6090327c
PK		 3697 drivers/media/v4l2-core/v4l2-device.c | 4 +-
3698 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
8cf17962 3699 drivers/memory/omap-gpmc.c | 21 +-
6090327c 3700 drivers/message/fusion/mptsas.c | 34 +-
6090327c 3701 drivers/mfd/ab8500-debugfs.c | 2 +-
e8242a6d 3702 drivers/mfd/kempld-core.c | 2 +-
6090327c
PK		 3703 drivers/mfd/max8925-i2c.c | 2 +-
3704 drivers/mfd/tps65910.c | 2 +-
3705 drivers/mfd/twl4030-irq.c | 9 +-
ab5bcff6
PK		 3706 drivers/mfd/wm5110-tables.c | 2 +-
3707 drivers/mfd/wm8998-tables.c | 2 +-
6090327c 3708 drivers/misc/c2port/core.c | 4 +-
6090327c
PK		 3709 drivers/misc/kgdbts.c | 4 +-
3710 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
3711 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
afe359a8 3712 drivers/misc/mic/scif/scif_rb.c | 8 +-
6090327c
PK		 3713 drivers/misc/sgi-gru/gruhandles.c | 4 +-
3714 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
3715 drivers/misc/sgi-gru/grutables.h | 154 +-
3716 drivers/misc/sgi-xp/xp.h | 2 +-
3717 drivers/misc/sgi-xp/xpc.h | 3 +-
da1216b9 3718 drivers/misc/sgi-xp/xpc_main.c | 2 +-
6090327c 3719 drivers/mmc/card/block.c | 2 +-
6090327c
PK		 3720 drivers/mmc/host/dw_mmc.h | 2 +-
3721 drivers/mmc/host/mmci.c | 4 +-
0986ccbe 3722 drivers/mmc/host/omap_hsmmc.c | 4 +-
6090327c
PK		 3723 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
3724 drivers/mmc/host/sdhci-s3c.c | 8 +-
3725 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
3726 drivers/mtd/nand/denali.c | 1 +
0986ccbe 3727 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
6090327c
PK		 3728 drivers/mtd/nftlmount.c | 1 +
3729 drivers/mtd/sm_ftl.c | 2 +-
3730 drivers/net/bonding/bond_netlink.c | 2 +-
0986ccbe 3731 drivers/net/caif/caif_hsi.c | 2 +-
6090327c 3732 drivers/net/can/Kconfig | 2 +-
0986ccbe
PK		 3733 drivers/net/can/dev.c | 2 +-
3734 drivers/net/can/vcan.c | 2 +-
3735 drivers/net/dummy.c | 2 +-
6090327c
PK		 3736 drivers/net/ethernet/8390/ax88796.c | 4 +-
3737 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
a8b227b4 3738 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
0986ccbe 3739 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
e8242a6d 3740 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
afe359a8
PK		 3741 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
3742 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
3743 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
3744 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
3745 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
a8b227b4 3746 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
afe359a8 3747 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
6090327c
PK		 3748 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
3749 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
3750 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
3751 drivers/net/ethernet/broadcom/tg3.h | 1 +
afe359a8
PK		 3752 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
3753 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
6090327c 3754 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
6090327c
PK		 3755 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
3756 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
3757 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
3758 drivers/net/ethernet/faraday/ftmac100.c | 2 +
3759 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
3760 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
0986ccbe 3761 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
ab5bcff6 3762 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
6090327c
PK		 3763 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
3764 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
3765 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
3766 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
3767 drivers/net/ethernet/realtek/r8169.c | 8 +-
3768 drivers/net/ethernet/sfc/ptp.c | 2 +-
3769 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
e8242a6d 3770 drivers/net/ethernet/via/via-rhine.c | 2 +-
ab5bcff6 3771 drivers/net/geneve.c | 2 +-
6090327c
PK		 3772 drivers/net/hyperv/hyperv_net.h | 2 +-
3773 drivers/net/hyperv/rndis_filter.c | 4 +-
0986ccbe 3774 drivers/net/ifb.c | 2 +-
afe359a8 3775 drivers/net/ipvlan/ipvlan_core.c | 2 +-
6090327c 3776 drivers/net/macvlan.c | 20 +-
0986ccbe
PK		 3777 drivers/net/macvtap.c | 6 +-
3778 drivers/net/nlmon.c | 2 +-
8cf17962 3779 drivers/net/phy/phy_device.c | 6 +-
6090327c
PK		 3780 drivers/net/ppp/ppp_generic.c | 4 +-
3781 drivers/net/slip/slhc.c | 2 +-
0986ccbe
PK		 3782 drivers/net/team/team.c | 4 +-
3783 drivers/net/tun.c | 7 +-
6090327c
PK		 3784 drivers/net/usb/hso.c | 23 +-
3785 drivers/net/usb/r8152.c | 2 +-
3786 drivers/net/usb/sierra_net.c | 4 +-
3787 drivers/net/virtio_net.c | 2 +-
ab5bcff6 3788 drivers/net/vrf.c | 2 +-
6090327c
PK		 3789 drivers/net/vxlan.c | 4 +-
3790 drivers/net/wimax/i2400m/rx.c | 2 +-
3791 drivers/net/wireless/airo.c | 2 +-
3792 drivers/net/wireless/at76c50x-usb.c | 2 +-
ab5bcff6 3793 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
6090327c
PK		 3794 drivers/net/wireless/ath/ath10k/htc.c | 7 +-
3795 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
a8b227b4
PK		 3796 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
3797 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
6090327c 3798 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
a8b227b4 3799 drivers/net/wireless/ath/ath9k/main.c | 22 +-
ab5bcff6 3800 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
6090327c
PK		 3801 drivers/net/wireless/b43/phy_lp.c | 2 +-
3802 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
3803 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
3804 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
3805 drivers/net/wireless/mac80211_hwsim.c | 28 +-
3806 drivers/net/wireless/rndis_wlan.c | 2 +-
3807 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
3808 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
3809 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
3810 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
3811 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
3812 drivers/nfc/nfcwilink.c | 2 +-
e8242a6d 3813 drivers/of/fdt.c | 4 +-
6090327c
PK		 3814 drivers/oprofile/buffer_sync.c | 8 +-
3815 drivers/oprofile/event_buffer.c | 2 +-
3816 drivers/oprofile/oprof.c | 2 +-
6090327c
PK		 3817 drivers/oprofile/oprofile_stats.c | 10 +-
3818 drivers/oprofile/oprofile_stats.h | 10 +-
3819 drivers/oprofile/oprofilefs.c | 6 +-
3820 drivers/oprofile/timer_int.c | 2 +-
3821 drivers/parport/procfs.c | 4 +-
e8242a6d 3822 drivers/pci/host/pci-host-generic.c | 24 +-
6090327c
PK		 3823 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
3824 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
3825 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
0986ccbe 3826 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
6090327c
PK		 3827 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
3828 drivers/pci/hotplug/pciehp_core.c | 2 +-
ab5bcff6 3829 drivers/pci/msi.c | 22 +-
6090327c
PK		 3830 drivers/pci/pci-sysfs.c | 6 +-
3831 drivers/pci/pci.h | 2 +-
3832 drivers/pci/pcie/aspm.c | 6 +-
e8242a6d 3833 drivers/pci/pcie/portdrv_pci.c | 2 +-
6090327c 3834 drivers/pci/probe.c | 2 +-
ab5bcff6 3835 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
afe359a8 3836 drivers/pinctrl/pinctrl-at91.c | 5 +-
e8242a6d 3837 drivers/platform/chrome/chromeos_pstore.c | 2 +-
6090327c 3838 drivers/platform/x86/alienware-wmi.c | 4 +-
e8242a6d
PK		 3839 drivers/platform/x86/compal-laptop.c | 2 +-
3840 drivers/platform/x86/hdaps.c | 2 +-
3841 drivers/platform/x86/ibm_rtl.c | 2 +-
3842 drivers/platform/x86/intel_oaktrail.c | 2 +-
3843 drivers/platform/x86/msi-laptop.c | 16 +-
6090327c 3844 drivers/platform/x86/msi-wmi.c | 2 +-
e8242a6d
PK		 3845 drivers/platform/x86/samsung-laptop.c | 2 +-
3846 drivers/platform/x86/samsung-q10.c | 2 +-
3847 drivers/platform/x86/sony-laptop.c | 14 +-
da1216b9 3848 drivers/platform/x86/thinkpad_acpi.c | 2 +-
6090327c 3849 drivers/pnp/pnpbios/bioscalls.c | 14 +-
e8242a6d 3850 drivers/pnp/pnpbios/core.c | 2 +-
6090327c
PK		 3851 drivers/power/pda_power.c | 7 +-
3852 drivers/power/power_supply.h | 4 +-
3853 drivers/power/power_supply_core.c | 7 +-
3854 drivers/power/power_supply_sysfs.c | 6 +-
afe359a8 3855 drivers/power/reset/at91-reset.c | 9 +-
6090327c
PK		 3856 drivers/powercap/powercap_sys.c | 136 +-
3857 drivers/ptp/ptp_private.h | 2 +-
3858 drivers/ptp/ptp_sysfs.c | 2 +-
3859 drivers/regulator/core.c | 4 +-
3860 drivers/regulator/max8660.c | 6 +-
afe359a8 3861 drivers/regulator/max8973-regulator.c | 16 +-
8cf17962 3862 drivers/regulator/mc13892-regulator.c | 8 +-
afe359a8 3863 drivers/rtc/rtc-armada38x.c | 7 +-
6090327c
PK		 3864 drivers/rtc/rtc-cmos.c | 4 +-
3865 drivers/rtc/rtc-ds1307.c | 2 +-
3866 drivers/rtc/rtc-m48t59.c | 4 +-
afe359a8
PK		 3867 drivers/rtc/rtc-test.c | 6 +-
3868 drivers/scsi/be2iscsi/be_main.c | 2 +-
6090327c
PK		 3869 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
3870 drivers/scsi/bfa/bfa_ioc.h | 4 +-
3871 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
3872 drivers/scsi/hosts.c | 4 +-
afe359a8 3873 drivers/scsi/hpsa.c | 38 +-
6090327c
PK		 3874 drivers/scsi/hpsa.h | 2 +-
3875 drivers/scsi/libfc/fc_exch.c | 50 +-
3876 drivers/scsi/libsas/sas_ata.c | 2 +-
3877 drivers/scsi/lpfc/lpfc.h | 8 +-
3878 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
3879 drivers/scsi/lpfc/lpfc_init.c | 6 +-
3880 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
ab5bcff6 3881 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
6090327c
PK		 3882 drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +-
3883 drivers/scsi/pmcraid.c | 20 +-
3884 drivers/scsi/pmcraid.h | 8 +-
3885 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
3886 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
3887 drivers/scsi/qla2xxx/qla_os.c | 6 +-
3888 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
3889 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
da1216b9 3890 drivers/scsi/scsi.c | 2 +-
8cf17962 3891 drivers/scsi/scsi_lib.c | 8 +-
6090327c 3892 drivers/scsi/scsi_sysfs.c | 2 +-
6090327c
PK		 3893 drivers/scsi/scsi_transport_fc.c | 8 +-
3894 drivers/scsi/scsi_transport_iscsi.c | 6 +-
3895 drivers/scsi/scsi_transport_srp.c | 6 +-
da1216b9 3896 drivers/scsi/sd.c | 6 +-
6090327c 3897 drivers/scsi/sg.c | 2 +-
afe359a8 3898 drivers/scsi/sr.c | 21 +-
0986ccbe 3899 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
6090327c
PK		 3900 drivers/spi/spi.c | 2 +-
3901 drivers/staging/android/timed_output.c | 6 +-
8cf17962 3902 drivers/staging/comedi/comedi_fops.c | 8 +-
e8242a6d
PK		 3903 drivers/staging/fbtft/fbtft-core.c | 2 +-
3904 drivers/staging/fbtft/fbtft.h | 2 +-
6090327c 3905 drivers/staging/gdm724x/gdm_tty.c | 2 +-
afe359a8
PK		 3906 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
3907 drivers/staging/iio/adc/ad7280a.c | 4 +-
6090327c
PK		 3908 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
3909 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
3910 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
3911 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
3912 drivers/staging/lustre/lustre/include/obd.h | 2 +-
ab5bcff6 3913 drivers/staging/octeon/ethernet-rx.c | 20 +-
6090327c 3914 drivers/staging/octeon/ethernet.c | 8 +-
ab5bcff6
PK		 3915 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
3916 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
6090327c 3917 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
6090327c 3918 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
afe359a8
PK		 3919 drivers/staging/sm750fb/sm750.c | 14 +-
3920 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
6090327c 3921 drivers/target/sbp/sbp_target.c | 4 +-
afe359a8 3922 drivers/thermal/cpu_cooling.c | 9 +-
0986ccbe 3923 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
8cf17962 3924 drivers/thermal/of-thermal.c | 17 +-
e8242a6d 3925 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
6090327c
PK		 3926 drivers/tty/cyclades.c | 6 +-
3927 drivers/tty/hvc/hvc_console.c | 14 +-
3928 drivers/tty/hvc/hvcs.c | 21 +-
3929 drivers/tty/hvc/hvsi.c | 22 +-
3930 drivers/tty/hvc/hvsi_lib.c | 4 +-
3931 drivers/tty/ipwireless/tty.c | 27 +-
3932 drivers/tty/moxa.c | 2 +-
3933 drivers/tty/n_gsm.c | 4 +-
ab5bcff6 3934 drivers/tty/n_tty.c | 3 +-
6090327c
PK		 3935 drivers/tty/pty.c | 4 +-
3936 drivers/tty/rocket.c | 6 +-
afe359a8
PK		 3937 drivers/tty/serial/8250/8250_core.c | 10 +-
3938 drivers/tty/serial/ifx6x60.c | 2 +-
6090327c
PK		 3939 drivers/tty/serial/ioc4_serial.c | 6 +-
3940 drivers/tty/serial/kgdb_nmi.c | 4 +-
3941 drivers/tty/serial/kgdboc.c | 32 +-
3942 drivers/tty/serial/msm_serial.c | 4 +-
3943 drivers/tty/serial/samsung.c | 9 +-
3944 drivers/tty/serial/serial_core.c | 8 +-
3945 drivers/tty/synclink.c | 34 +-
3946 drivers/tty/synclink_gt.c | 28 +-
3947 drivers/tty/synclinkmp.c | 34 +-
3948 drivers/tty/tty_io.c | 2 +-
3949 drivers/tty/tty_ldisc.c | 8 +-
3950 drivers/tty/tty_port.c | 22 +-
0986ccbe 3951 drivers/uio/uio.c | 13 +-
6090327c
PK		 3952 drivers/usb/atm/cxacru.c | 2 +-
3953 drivers/usb/atm/usbatm.c | 24 +-
ab5bcff6 3954 drivers/usb/class/cdc-acm.h | 2 +-
6090327c 3955 drivers/usb/core/devices.c | 6 +-
ab5bcff6 3956 drivers/usb/core/devio.c | 12 +-
6090327c 3957 drivers/usb/core/hcd.c | 4 +-
6090327c
PK		 3958 drivers/usb/core/sysfs.c | 2 +-
3959 drivers/usb/core/usb.c | 2 +-
6090327c 3960 drivers/usb/early/ehci-dbgp.c | 16 +-
a8b227b4 3961 drivers/usb/gadget/function/u_serial.c | 22 +-
afe359a8
PK		 3962 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
3963 drivers/usb/host/ehci-hcd.c | 2 +-
6090327c 3964 drivers/usb/host/ehci-hub.c | 4 +-
afe359a8
PK		 3965 drivers/usb/host/ehci-q.c | 4 +-
3966 drivers/usb/host/fotg210-hcd.c | 2 +-
3967 drivers/usb/host/fusbh200-hcd.c | 2 +-
3968 drivers/usb/host/hwa-hc.c | 2 +-
3969 drivers/usb/host/ohci-hcd.c | 2 +-
3970 drivers/usb/host/r8a66597.h | 2 +-
3971 drivers/usb/host/uhci-hcd.c | 2 +-
3972 drivers/usb/host/xhci-pci.c | 2 +-
3973 drivers/usb/host/xhci.c | 2 +-
6090327c
PK		 3974 drivers/usb/misc/appledisplay.c | 4 +-
3975 drivers/usb/serial/console.c | 8 +-
ab5bcff6 3976 drivers/usb/storage/transport.c | 2 +-
afe359a8 3977 drivers/usb/storage/usb.c | 2 +-
6090327c 3978 drivers/usb/storage/usb.h | 2 +-
a8b227b4
PK		 3979 drivers/usb/usbip/vhci.h | 2 +-
3980 drivers/usb/usbip/vhci_hcd.c | 6 +-
3981 drivers/usb/usbip/vhci_rx.c | 2 +-
6090327c
PK		 3982 drivers/usb/wusbcore/wa-hc.h | 4 +-
3983 drivers/usb/wusbcore/wa-xfer.c | 2 +-
3984 drivers/vfio/vfio.c | 2 +-
3985 drivers/vhost/vringh.c | 20 +-
3986 drivers/video/backlight/kb3886_bl.c | 2 +-
ab5bcff6 3987 drivers/video/console/fbcon.c | 2 +-
6090327c
PK		 3988 drivers/video/fbdev/aty/aty128fb.c | 2 +-
3989 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
3990 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
3991 drivers/video/fbdev/core/fb_defio.c | 6 +-
3992 drivers/video/fbdev/core/fbmem.c | 2 +-
3993 drivers/video/fbdev/hyperv_fb.c | 4 +-
3994 drivers/video/fbdev/i810/i810_accel.c | 1 +
afe359a8 3995 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
6090327c
PK		 3996 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
3997 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
3998 drivers/video/fbdev/omap2/dss/display.c | 8 +-
3999 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
4000 drivers/video/fbdev/smscufx.c | 4 +-
4001 drivers/video/fbdev/udlfb.c | 36 +-
4002 drivers/video/fbdev/uvesafb.c | 52 +-
4003 drivers/video/fbdev/vesafb.c | 58 +-
4004 drivers/video/fbdev/via/via_clock.h | 2 +-
e8242a6d 4005 drivers/xen/events/events_base.c | 6 +-
afe359a8 4006 drivers/xen/evtchn.c | 4 +-
6090327c
PK		 4007 fs/Kconfig.binfmt | 2 +-
4008 fs/afs/inode.c | 4 +-
4009 fs/aio.c | 2 +-
4010 fs/autofs4/waitq.c | 2 +-
4011 fs/befs/endian.h | 6 +-
4012 fs/binfmt_aout.c | 23 +-
ab5bcff6
PK		 4013 fs/binfmt_elf.c | 670 +-
4014 fs/binfmt_elf_fdpic.c | 4 +-
6090327c
PK		 4015 fs/block_dev.c | 2 +-
4016 fs/btrfs/ctree.c | 9 +-
ab5bcff6
PK		 4017 fs/btrfs/delayed-inode.c | 9 +-
4018 fs/btrfs/delayed-inode.h | 6 +-
4019 fs/btrfs/file.c | 10 +-
4020 fs/btrfs/inode.c | 14 +-
6090327c
PK		 4021 fs/btrfs/super.c | 2 +-
4022 fs/btrfs/sysfs.c | 2 +-
0986ccbe 4023 fs/btrfs/tests/free-space-tests.c | 8 +-
6090327c
PK		 4024 fs/btrfs/tree-log.h | 2 +-
4025 fs/buffer.c | 2 +-
4026 fs/cachefiles/bind.c | 6 +-
4027 fs/cachefiles/daemon.c | 8 +-
4028 fs/cachefiles/internal.h | 12 +-
4029 fs/cachefiles/namei.c | 2 +-
4030 fs/cachefiles/proc.c | 12 +-
afe359a8 4031 fs/ceph/dir.c | 12 +-
6090327c
PK		 4032 fs/ceph/super.c | 4 +-
4033 fs/cifs/cifs_debug.c | 12 +-
4034 fs/cifs/cifsfs.c | 8 +-
4035 fs/cifs/cifsglob.h | 54 +-
4036 fs/cifs/file.c | 10 +-
4037 fs/cifs/misc.c | 4 +-
4038 fs/cifs/smb1ops.c | 80 +-
4039 fs/cifs/smb2ops.c | 84 +-
4040 fs/cifs/smb2pdu.c | 3 +-
4041 fs/coda/cache.c | 10 +-
4042 fs/compat.c | 4 +-
4043 fs/compat_binfmt_elf.c | 2 +
4044 fs/compat_ioctl.c | 12 +-
4045 fs/configfs/dir.c | 10 +-
4046 fs/coredump.c | 16 +-
e8242a6d 4047 fs/dcache.c | 51 +-
6090327c
PK		 4048 fs/ecryptfs/inode.c | 2 +-
4049 fs/ecryptfs/miscdev.c | 2 +-
8cf17962 4050 fs/exec.c | 362 +-
6090327c 4051 fs/ext2/xattr.c | 5 +-
6090327c
PK		 4052 fs/ext4/ext4.h | 20 +-
4053 fs/ext4/mballoc.c | 44 +-
e8242a6d 4054 fs/ext4/resize.c | 16 +-
6090327c
PK		 4055 fs/ext4/super.c | 4 +-
4056 fs/ext4/xattr.c | 5 +-
4057 fs/fhandle.c | 3 +-
4058 fs/file.c | 4 +-
4059 fs/fs_struct.c | 8 +-
4060 fs/fscache/cookie.c | 40 +-
afe359a8 4061 fs/fscache/internal.h | 202 +-
6090327c 4062 fs/fscache/object.c | 26 +-
afe359a8 4063 fs/fscache/operation.c | 38 +-
6090327c 4064 fs/fscache/page.c | 110 +-
afe359a8 4065 fs/fscache/stats.c | 348 +-
6090327c
PK		 4066 fs/fuse/cuse.c | 10 +-
4067 fs/fuse/dev.c | 4 +-
e8242a6d
PK		 4068 fs/gfs2/glock.c | 22 +-
4069 fs/gfs2/glops.c | 4 +-
4070 fs/gfs2/quota.c | 6 +-
6090327c
PK		 4071 fs/hugetlbfs/inode.c | 13 +-
4072 fs/inode.c | 4 +-
4073 fs/jffs2/erase.c | 3 +-
4074 fs/jffs2/wbuf.c | 3 +-
4075 fs/jfs/super.c | 2 +-
4076 fs/kernfs/dir.c | 2 +-
e8242a6d 4077 fs/kernfs/file.c | 20 +-
afe359a8 4078 fs/libfs.c | 10 +-
6090327c 4079 fs/lockd/clntproc.c | 4 +-
afe359a8 4080 fs/namei.c | 16 +-
6090327c
PK		 4081 fs/namespace.c | 16 +-
4082 fs/nfs/callback_xdr.c | 2 +-
4083 fs/nfs/inode.c | 6 +-
4084 fs/nfsd/nfs4proc.c | 2 +-
4085 fs/nfsd/nfs4xdr.c | 2 +-
a8b227b4 4086 fs/nfsd/nfscache.c | 11 +-
6090327c 4087 fs/nfsd/vfs.c | 6 +-
a8b227b4 4088 fs/nls/nls_base.c | 26 +-
6090327c
PK		 4089 fs/nls/nls_euc-jp.c | 6 +-
4090 fs/nls/nls_koi8-ru.c | 6 +-
4091 fs/notify/fanotify/fanotify_user.c | 4 +-
4092 fs/notify/notification.c | 4 +-
4093 fs/ntfs/dir.c | 2 +-
6090327c
PK		 4094 fs/ntfs/super.c | 6 +-
4095 fs/ocfs2/localalloc.c | 2 +-
4096 fs/ocfs2/ocfs2.h | 10 +-
4097 fs/ocfs2/suballoc.c | 12 +-
4098 fs/ocfs2/super.c | 20 +-
da1216b9 4099 fs/pipe.c | 72 +-
6090327c
PK		 4100 fs/posix_acl.c | 4 +-
4101 fs/proc/array.c | 20 +
4102 fs/proc/base.c | 4 +-
e8242a6d 4103 fs/proc/kcore.c | 34 +-
6090327c
PK		 4104 fs/proc/meminfo.c | 2 +-
4105 fs/proc/nommu.c | 2 +-
afe359a8 4106 fs/proc/proc_sysctl.c | 26 +-
6090327c
PK		 4107 fs/proc/task_mmu.c | 39 +-
4108 fs/proc/task_nommu.c | 4 +-
4109 fs/proc/vmcore.c | 16 +-
4110 fs/qnx6/qnx6.h | 4 +-
4111 fs/quota/netlink.c | 4 +-
4112 fs/read_write.c | 2 +-
4113 fs/reiserfs/do_balan.c | 2 +-
4114 fs/reiserfs/procfs.c | 2 +-
4115 fs/reiserfs/reiserfs.h | 4 +-
4116 fs/seq_file.c | 4 +-
4117 fs/splice.c | 43 +-
da1216b9 4118 fs/squashfs/xattr.c | 12 +-
6090327c 4119 fs/sysv/sysv.h | 2 +-
afe359a8 4120 fs/tracefs/inode.c | 8 +-
6090327c
PK		 4121 fs/udf/misc.c | 2 +-
4122 fs/ufs/swab.h | 4 +-
ab5bcff6 4123 fs/userfaultfd.c | 2 +-
6090327c 4124 fs/xattr.c | 21 +
a8b227b4 4125 fs/xfs/libxfs/xfs_bmap.c | 2 +-
6090327c
PK		 4126 fs/xfs/xfs_dir2_readdir.c | 7 +-
4127 fs/xfs/xfs_ioctl.c | 2 +-
0986ccbe 4128 fs/xfs/xfs_linux.h | 4 +-
6090327c 4129 include/asm-generic/4level-fixup.h | 2 +
ab5bcff6 4130 include/asm-generic/atomic-long.h | 156 +-
6090327c 4131 include/asm-generic/atomic64.h | 12 +
6090327c
PK		 4132 include/asm-generic/bitops/__fls.h | 2 +-
4133 include/asm-generic/bitops/fls.h | 2 +-
4134 include/asm-generic/bitops/fls64.h | 4 +-
da1216b9 4135 include/asm-generic/bug.h | 6 +-
6090327c
PK		 4136 include/asm-generic/cache.h | 4 +-
4137 include/asm-generic/emergency-restart.h | 2 +-
4138 include/asm-generic/kmap_types.h | 4 +-
4139 include/asm-generic/local.h | 13 +
4140 include/asm-generic/pgtable-nopmd.h | 18 +-
4141 include/asm-generic/pgtable-nopud.h | 15 +-
4142 include/asm-generic/pgtable.h | 16 +
ab5bcff6 4143 include/asm-generic/sections.h | 1 +
6090327c 4144 include/asm-generic/uaccess.h | 16 +
ab5bcff6 4145 include/asm-generic/vmlinux.lds.h | 15 +-
6090327c
PK		 4146 include/crypto/algapi.h | 2 +-
4147 include/drm/drmP.h | 16 +-
4148 include/drm/drm_crtc_helper.h | 2 +-
afe359a8 4149 include/drm/drm_mm.h | 2 +-
6090327c 4150 include/drm/i915_pciids.h | 2 +-
afe359a8 4151 include/drm/intel-gtt.h | 4 +-
6090327c
PK		 4152 include/drm/ttm/ttm_memory.h | 2 +-
4153 include/drm/ttm/ttm_page_alloc.h | 1 +
4154 include/keys/asymmetric-subtype.h | 2 +-
4155 include/linux/atmdev.h | 4 +-
ab5bcff6 4156 include/linux/atomic.h | 17 +-
6090327c 4157 include/linux/audit.h | 2 +-
ab5bcff6 4158 include/linux/average.h | 2 +-
6090327c 4159 include/linux/binfmts.h | 3 +-
8cf17962 4160 include/linux/bitmap.h | 2 +-
afe359a8 4161 include/linux/bitops.h | 8 +-
6090327c
PK		 4162 include/linux/blkdev.h | 2 +-
4163 include/linux/blktrace_api.h | 2 +-
4164 include/linux/cache.h | 8 +
4165 include/linux/cdrom.h | 1 -
4166 include/linux/cleancache.h | 2 +-
4167 include/linux/clk-provider.h | 1 +
da1216b9 4168 include/linux/compat.h | 6 +-
afe359a8 4169 include/linux/compiler-gcc.h | 28 +-
ab5bcff6 4170 include/linux/compiler.h | 157 +-
6090327c
PK		 4171 include/linux/configfs.h | 2 +-
4172 include/linux/cpufreq.h | 3 +-
4173 include/linux/cpuidle.h | 5 +-
8cf17962 4174 include/linux/cpumask.h | 14 +-
afe359a8 4175 include/linux/crypto.h | 4 +-
6090327c 4176 include/linux/ctype.h | 2 +-
e8242a6d 4177 include/linux/dcache.h | 4 +-
6090327c
PK		 4178 include/linux/decompress/mm.h | 2 +-
4179 include/linux/devfreq.h | 2 +-
4180 include/linux/device.h | 7 +-
4181 include/linux/dma-mapping.h | 2 +-
6090327c
PK		 4182 include/linux/efi.h | 1 +
4183 include/linux/elf.h | 2 +
4184 include/linux/err.h | 4 +-
4185 include/linux/extcon.h | 2 +-
e8242a6d 4186 include/linux/fb.h | 3 +-
6090327c 4187 include/linux/fdtable.h | 2 +-
da1216b9 4188 include/linux/fs.h | 5 +-
6090327c 4189 include/linux/fs_struct.h | 2 +-
afe359a8 4190 include/linux/fscache-cache.h | 2 +-
6090327c
PK		 4191 include/linux/fscache.h | 2 +-
4192 include/linux/fsnotify.h | 2 +-
4193 include/linux/genhd.h | 4 +-
4194 include/linux/genl_magic_func.h | 2 +-
4195 include/linux/gfp.h | 12 +-
6090327c
PK		 4196 include/linux/highmem.h | 12 +
4197 include/linux/hwmon-sysfs.h | 6 +-
4198 include/linux/i2c.h | 1 +
6090327c
PK		 4199 include/linux/if_pppox.h | 2 +-
4200 include/linux/init.h | 12 +-
4201 include/linux/init_task.h | 7 +
4202 include/linux/interrupt.h | 6 +-
4203 include/linux/iommu.h | 2 +-
4204 include/linux/ioport.h | 2 +-
afe359a8
PK		 4205 include/linux/ipc.h | 2 +-
4206 include/linux/irq.h | 5 +-
8cf17962 4207 include/linux/irqdesc.h | 2 +-
afe359a8 4208 include/linux/irqdomain.h | 3 +
ab5bcff6 4209 include/linux/jiffies.h | 16 +-
6090327c
PK		 4210 include/linux/key-type.h | 2 +-
4211 include/linux/kgdb.h | 6 +-
8cf17962 4212 include/linux/kmemleak.h | 4 +-
6090327c
PK		 4213 include/linux/kobject.h | 3 +-
4214 include/linux/kobject_ns.h | 2 +-
4215 include/linux/kref.h | 2 +-
6090327c
PK		 4216 include/linux/libata.h | 2 +-
4217 include/linux/linkage.h | 1 +
4218 include/linux/list.h | 15 +
e8242a6d 4219 include/linux/lockref.h | 26 +-
6090327c
PK		 4220 include/linux/math64.h | 10 +-
4221 include/linux/mempolicy.h | 7 +
ab5bcff6 4222 include/linux/mm.h | 102 +-
6090327c
PK		 4223 include/linux/mm_types.h | 20 +
4224 include/linux/mmiotrace.h | 4 +-
4225 include/linux/mmzone.h | 2 +-
4226 include/linux/mod_devicetable.h | 4 +-
afe359a8 4227 include/linux/module.h | 69 +-
6090327c
PK		 4228 include/linux/moduleloader.h | 16 +
4229 include/linux/moduleparam.h | 4 +-
6090327c
PK		 4230 include/linux/net.h | 2 +-
4231 include/linux/netdevice.h | 7 +-
4232 include/linux/netfilter.h | 2 +-
4233 include/linux/netfilter/nfnetlink.h | 2 +-
a8b227b4 4234 include/linux/nls.h | 4 +-
6090327c
PK		 4235 include/linux/notifier.h | 3 +-
4236 include/linux/oprofile.h | 4 +-
4237 include/linux/padata.h | 2 +-
4238 include/linux/pci_hotplug.h | 3 +-
8cf17962 4239 include/linux/percpu.h | 2 +-
da1216b9 4240 include/linux/perf_event.h | 12 +-
6090327c
PK		 4241 include/linux/pipe_fs_i.h | 8 +-
4242 include/linux/pm.h | 1 +
4243 include/linux/pm_domain.h | 4 +-
4244 include/linux/pm_runtime.h | 2 +-
4245 include/linux/pnp.h | 2 +-
4246 include/linux/poison.h | 4 +-
4247 include/linux/power/smartreflex.h | 2 +-
4248 include/linux/ppp-comp.h | 2 +-
4249 include/linux/preempt.h | 21 +
4250 include/linux/proc_ns.h | 2 +-
ab5bcff6 4251 include/linux/psci.h | 2 +-
6090327c 4252 include/linux/quota.h | 2 +-
ab5bcff6 4253 include/linux/random.h | 19 +-
afe359a8 4254 include/linux/rculist.h | 16 +
6090327c
PK		 4255 include/linux/reboot.h | 14 +-
4256 include/linux/regset.h | 3 +-
4257 include/linux/relay.h | 2 +-
4258 include/linux/rio.h | 2 +-
4259 include/linux/rmap.h | 4 +-
ab5bcff6 4260 include/linux/sched.h | 72 +-
6090327c 4261 include/linux/sched/sysctl.h | 1 +
6090327c
PK		 4262 include/linux/semaphore.h | 2 +-
4263 include/linux/seq_file.h | 1 +
4264 include/linux/signal.h | 2 +-
ab5bcff6 4265 include/linux/skbuff.h | 12 +-
da1216b9 4266 include/linux/slab.h | 47 +-
6090327c
PK		 4267 include/linux/slab_def.h | 14 +-
4268 include/linux/slub_def.h | 2 +-
4269 include/linux/smp.h | 2 +
4270 include/linux/sock_diag.h | 2 +-
4271 include/linux/sonet.h | 2 +-
4272 include/linux/sunrpc/addr.h | 8 +-
4273 include/linux/sunrpc/clnt.h | 2 +-
4274 include/linux/sunrpc/svc.h | 2 +-
4275 include/linux/sunrpc/svc_rdma.h | 18 +-
4276 include/linux/sunrpc/svcauth.h | 2 +-
ab5bcff6 4277 include/linux/swapops.h | 10 +-
6090327c 4278 include/linux/swiotlb.h | 3 +-
da1216b9 4279 include/linux/syscalls.h | 21 +-
6090327c 4280 include/linux/syscore_ops.h | 2 +-
a8b227b4 4281 include/linux/sysctl.h | 3 +-
6090327c
PK		 4282 include/linux/sysfs.h | 9 +-
4283 include/linux/sysrq.h | 3 +-
afe359a8 4284 include/linux/tcp.h | 14 +-
6090327c
PK		 4285 include/linux/thread_info.h | 7 +
4286 include/linux/tty.h | 4 +-
4287 include/linux/tty_driver.h | 2 +-
4288 include/linux/tty_ldisc.h | 2 +-
4289 include/linux/types.h | 16 +
4290 include/linux/uaccess.h | 6 +-
0986ccbe 4291 include/linux/uio_driver.h | 2 +-
6090327c 4292 include/linux/unaligned/access_ok.h | 24 +-
ab5bcff6 4293 include/linux/usb.h | 12 +-
afe359a8 4294 include/linux/usb/hcd.h | 1 +
6090327c
PK		 4295 include/linux/usb/renesas_usbhs.h | 2 +-
4296 include/linux/vermagic.h | 21 +-
4297 include/linux/vga_switcheroo.h | 8 +-
4298 include/linux/vmalloc.h | 7 +-
4299 include/linux/vmstat.h | 24 +-
4300 include/linux/xattr.h | 5 +-
4301 include/linux/zlib.h | 3 +-
4302 include/media/v4l2-dev.h | 2 +-
4303 include/media/v4l2-device.h | 2 +-
4304 include/net/9p/transport.h | 2 +-
4305 include/net/bluetooth/l2cap.h | 2 +-
8cf17962 4306 include/net/bonding.h | 2 +-
6090327c
PK		 4307 include/net/caif/cfctrl.h | 6 +-
4308 include/net/flow.h | 2 +-
4309 include/net/genetlink.h | 2 +-
4310 include/net/gro_cells.h | 2 +-
4311 include/net/inet_connection_sock.h | 2 +-
afe359a8 4312 include/net/inet_sock.h | 2 +-
6090327c
PK		 4313 include/net/inetpeer.h | 2 +-
4314 include/net/ip_fib.h | 2 +-
4315 include/net/ip_vs.h | 8 +-
ab5bcff6 4316 include/net/ipv6.h | 2 +-
6090327c
PK		 4317 include/net/irda/ircomm_tty.h | 1 +
4318 include/net/iucv/af_iucv.h | 2 +-
4319 include/net/llc_c_ac.h | 2 +-
4320 include/net/llc_c_ev.h | 4 +-
4321 include/net/llc_c_st.h | 2 +-
4322 include/net/llc_s_ac.h | 2 +-
4323 include/net/llc_s_st.h | 2 +-
ab5bcff6 4324 include/net/mac80211.h | 4 +-
6090327c 4325 include/net/neighbour.h | 2 +-
afe359a8 4326 include/net/net_namespace.h | 18 +-
6090327c
PK		 4327 include/net/netlink.h | 2 +-
4328 include/net/netns/conntrack.h | 6 +-
4329 include/net/netns/ipv4.h | 4 +-
4330 include/net/netns/ipv6.h | 4 +-
4331 include/net/netns/xfrm.h | 2 +-
4332 include/net/ping.h | 2 +-
4333 include/net/protocol.h | 4 +-
4334 include/net/rtnetlink.h | 2 +-
4335 include/net/sctp/checksum.h | 4 +-
4336 include/net/sctp/sm.h | 4 +-
4337 include/net/sctp/structs.h | 2 +-
afe359a8 4338 include/net/sock.h | 12 +-
6090327c
PK		 4339 include/net/tcp.h | 8 +-
4340 include/net/xfrm.h | 13 +-
4341 include/rdma/iw_cm.h | 2 +-
4342 include/scsi/libfc.h | 3 +-
4343 include/scsi/scsi_device.h | 6 +-
da1216b9 4344 include/scsi/scsi_driver.h | 2 +-
6090327c 4345 include/scsi/scsi_transport_fc.h | 3 +-
afe359a8 4346 include/scsi/sg.h | 2 +-
6090327c
PK		 4347 include/sound/compress_driver.h | 2 +-
4348 include/sound/soc.h | 4 +-
6090327c
PK		 4349 include/trace/events/irq.h | 4 +-
4350 include/uapi/linux/a.out.h | 8 +
4351 include/uapi/linux/bcache.h | 5 +-
4352 include/uapi/linux/byteorder/little_endian.h | 28 +-
afe359a8 4353 include/uapi/linux/connector.h | 2 +-
6090327c
PK		 4354 include/uapi/linux/elf.h | 28 +
4355 include/uapi/linux/screen_info.h | 3 +-
4356 include/uapi/linux/swab.h | 6 +-
6090327c
PK		 4357 include/uapi/linux/xattr.h | 4 +
4358 include/video/udlfb.h | 8 +-
4359 include/video/uvesafb.h | 1 +
4360 init/Kconfig | 2 +-
4361 init/Makefile | 3 +
4362 init/do_mounts.c | 14 +-
4363 init/do_mounts.h | 8 +-
4364 init/do_mounts_initrd.c | 30 +-
4365 init/do_mounts_md.c | 6 +-
4366 init/init_task.c | 4 +
a8b227b4 4367 init/initramfs.c | 38 +-
afe359a8 4368 init/main.c | 30 +-
da1216b9 4369 ipc/compat.c | 4 +-
8cf17962 4370 ipc/ipc_sysctl.c | 8 +-
6090327c 4371 ipc/mq_sysctl.c | 4 +-
da1216b9 4372 ipc/sem.c | 4 +-
6090327c 4373 ipc/shm.c | 6 +
6090327c
PK		 4374 kernel/audit.c | 8 +-
4375 kernel/auditsc.c | 4 +-
8cf17962 4376 kernel/bpf/core.c | 7 +-
6090327c
PK		 4377 kernel/capability.c | 3 +
4378 kernel/compat.c | 38 +-
4379 kernel/debug/debug_core.c | 16 +-
4380 kernel/debug/kdb/kdb_main.c | 4 +-
da1216b9 4381 kernel/events/core.c | 26 +-
6090327c
PK		 4382 kernel/events/internal.h | 10 +-
4383 kernel/events/uprobes.c | 2 +-
4384 kernel/exit.c | 2 +-
ab5bcff6 4385 kernel/fork.c | 167 +-
6090327c
PK		 4386 kernel/futex.c | 11 +-
4387 kernel/futex_compat.c | 2 +-
4388 kernel/gcov/base.c | 7 +-
8cf17962 4389 kernel/irq/manage.c | 2 +-
ab5bcff6 4390 kernel/irq/msi.c | 19 +-
8cf17962 4391 kernel/irq/spurious.c | 2 +-
6090327c 4392 kernel/jump_label.c | 5 +
0986ccbe 4393 kernel/kallsyms.c | 37 +-
6090327c
PK		 4394 kernel/kexec.c | 3 +-
4395 kernel/kmod.c | 8 +-
4396 kernel/kprobes.c | 4 +-
4397 kernel/ksysfs.c | 2 +-
4398 kernel/locking/lockdep.c | 7 +-
6090327c
PK		 4399 kernel/locking/mutex-debug.c | 12 +-
4400 kernel/locking/mutex-debug.h | 4 +-
4401 kernel/locking/mutex.c | 6 +-
afe359a8 4402 kernel/module.c | 422 +-
6090327c
PK		 4403 kernel/notifier.c | 17 +-
4404 kernel/padata.c | 4 +-
4405 kernel/panic.c | 5 +-
4406 kernel/pid.c | 2 +-
4407 kernel/pid_namespace.c | 2 +-
6090327c
PK		 4408 kernel/power/process.c | 12 +-
4409 kernel/profile.c | 14 +-
4410 kernel/ptrace.c | 8 +-
0986ccbe 4411 kernel/rcu/rcutorture.c | 60 +-
6090327c 4412 kernel/rcu/tiny.c | 4 +-
ab5bcff6
PK		 4413 kernel/rcu/tree.c | 44 +-
4414 kernel/rcu/tree.h | 14 +-
afe359a8 4415 kernel/rcu/tree_plugin.h | 14 +-
ab5bcff6 4416 kernel/rcu/tree_trace.c | 12 +-
6090327c 4417 kernel/sched/auto_group.c | 4 +-
6090327c 4418 kernel/sched/core.c | 45 +-
afe359a8 4419 kernel/sched/fair.c | 2 +-
6090327c
PK		 4420 kernel/sched/sched.h | 2 +-
4421 kernel/signal.c | 12 +-
4422 kernel/smpboot.c | 4 +-
4423 kernel/softirq.c | 12 +-
4424 kernel/sys.c | 10 +-
4425 kernel/sysctl.c | 34 +-
4426 kernel/time/alarmtimer.c | 2 +-
a8b227b4
PK		 4427 kernel/time/posix-cpu-timers.c | 4 +-
4428 kernel/time/posix-timers.c | 24 +-
ab5bcff6 4429 kernel/time/timer.c | 2 +-
6090327c 4430 kernel/time/timer_stats.c | 10 +-
6090327c 4431 kernel/trace/blktrace.c | 6 +-
0986ccbe 4432 kernel/trace/ftrace.c | 15 +-
e8242a6d 4433 kernel/trace/ring_buffer.c | 96 +-
6090327c
PK		 4434 kernel/trace/trace.c | 2 +-
4435 kernel/trace/trace.h | 2 +-
4436 kernel/trace/trace_clock.c | 4 +-
4437 kernel/trace/trace_events.c | 1 -
0986ccbe 4438 kernel/trace/trace_functions_graph.c | 4 +-
6090327c 4439 kernel/trace/trace_mmiotrace.c | 8 +-
a8b227b4
PK		 4440 kernel/trace/trace_output.c | 10 +-
4441 kernel/trace/trace_seq.c | 2 +-
6090327c
PK		 4442 kernel/trace/trace_stack.c | 2 +-
4443 kernel/user_namespace.c | 2 +-
4444 kernel/utsname_sysctl.c | 2 +-
4445 kernel/watchdog.c | 2 +-
ab5bcff6 4446 kernel/workqueue.c | 2 +-
6090327c
PK		 4447 lib/Kconfig.debug | 8 +-
4448 lib/Makefile | 2 +-
ab5bcff6 4449 lib/bitmap.c | 8 +-
6090327c
PK		 4450 lib/bug.c | 2 +
4451 lib/debugobjects.c | 2 +-
da1216b9
PK		 4452 lib/decompress_bunzip2.c | 3 +-
4453 lib/decompress_unlzma.c | 4 +-
6090327c
PK		 4454 lib/div64.c | 4 +-
4455 lib/dma-debug.c | 4 +-
6090327c
PK		 4456 lib/inflate.c | 2 +-
4457 lib/ioremap.c | 4 +-
4458 lib/kobject.c | 4 +-
4459 lib/list_debug.c | 126 +-
e8242a6d 4460 lib/lockref.c | 44 +-
6090327c
PK		 4461 lib/percpu-refcount.c | 2 +-
4462 lib/radix-tree.c | 2 +-
4463 lib/random32.c | 2 +-
4464 lib/show_mem.c | 2 +-
4465 lib/strncpy_from_user.c | 2 +-
4466 lib/strnlen_user.c | 2 +-
4467 lib/swiotlb.c | 2 +-
4468 lib/usercopy.c | 6 +
4469 lib/vsprintf.c | 12 +-
4470 mm/Kconfig | 6 +-
4471 mm/backing-dev.c | 4 +-
ab5bcff6 4472 mm/debug.c | 3 +
6090327c 4473 mm/filemap.c | 2 +-
6090327c 4474 mm/gup.c | 13 +-
ab5bcff6 4475 mm/highmem.c | 6 +-
6090327c 4476 mm/hugetlb.c | 70 +-
ab5bcff6 4477 mm/internal.h | 1 +
6090327c 4478 mm/maccess.c | 4 +-
e8242a6d 4479 mm/madvise.c | 37 +
ab5bcff6
PK		 4480 mm/memory-failure.c | 6 +-
4481 mm/memory.c | 424 +-
6090327c
PK		 4482 mm/mempolicy.c | 25 +
4483 mm/mlock.c | 15 +-
e8242a6d 4484 mm/mm_init.c | 2 +-
da1216b9 4485 mm/mmap.c | 582 +-
0986ccbe 4486 mm/mprotect.c | 137 +-
ab5bcff6 4487 mm/mremap.c | 39 +-
6090327c
PK		 4488 mm/nommu.c | 21 +-
4489 mm/page-writeback.c | 2 +-
afe359a8 4490 mm/page_alloc.c | 49 +-
6090327c
PK		 4491 mm/percpu.c | 2 +-
4492 mm/process_vm_access.c | 14 +-
8cf17962 4493 mm/rmap.c | 45 +-
6090327c 4494 mm/shmem.c | 19 +-
8cf17962 4495 mm/slab.c | 109 +-
0986ccbe 4496 mm/slab.h | 22 +-
8cf17962
PK		 4497 mm/slab_common.c | 86 +-
4498 mm/slob.c | 218 +-
afe359a8 4499 mm/slub.c | 102 +-
6090327c
PK		 4500 mm/sparse-vmemmap.c | 4 +-
4501 mm/sparse.c | 2 +-
da1216b9 4502 mm/swap.c | 2 +
6090327c
PK		 4503 mm/swapfile.c | 12 +-
4504 mm/util.c | 6 +
ab5bcff6 4505 mm/vmalloc.c | 114 +-
6090327c
PK		 4506 mm/vmstat.c | 12 +-
4507 net/8021q/vlan.c | 5 +-
0986ccbe 4508 net/8021q/vlan_netlink.c | 2 +-
6090327c
PK		 4509 net/9p/mod.c | 4 +-
4510 net/9p/trans_fd.c | 2 +-
4511 net/atm/atm_misc.c | 8 +-
4512 net/atm/lec.h | 2 +-
4513 net/atm/proc.c | 6 +-
4514 net/atm/resources.c | 4 +-
4515 net/ax25/sysctl_net_ax25.c | 2 +-
4516 net/batman-adv/bat_iv_ogm.c | 8 +-
4517 net/batman-adv/fragmentation.c | 2 +-
0986ccbe 4518 net/batman-adv/soft-interface.c | 8 +-
6090327c
PK		 4519 net/batman-adv/types.h | 6 +-
4520 net/bluetooth/hci_sock.c | 2 +-
4521 net/bluetooth/l2cap_core.c | 6 +-
4522 net/bluetooth/l2cap_sock.c | 12 +-
4523 net/bluetooth/rfcomm/sock.c | 4 +-
4524 net/bluetooth/rfcomm/tty.c | 4 +-
0986ccbe 4525 net/bridge/br_netlink.c | 2 +-
6090327c
PK		 4526 net/bridge/netfilter/ebtables.c | 6 +-
4527 net/caif/cfctrl.c | 11 +-
0986ccbe 4528 net/caif/chnl_net.c | 2 +-
6090327c
PK		 4529 net/can/af_can.c | 2 +-
4530 net/can/gw.c | 6 +-
4531 net/ceph/messenger.c | 4 +-
8cf17962 4532 net/compat.c | 24 +-
6090327c 4533 net/core/datagram.c | 2 +-
da1216b9 4534 net/core/dev.c | 16 +-
6090327c 4535 net/core/filter.c | 2 +-
e8242a6d 4536 net/core/flow.c | 6 +-
6090327c
PK		 4537 net/core/neighbour.c | 4 +-
4538 net/core/net-sysfs.c | 2 +-
4539 net/core/net_namespace.c | 8 +-
4540 net/core/netpoll.c | 4 +-
4541 net/core/rtnetlink.c | 15 +-
ab5bcff6 4542 net/core/scm.c | 14 +-
6090327c 4543 net/core/skbuff.c | 8 +-
afe359a8
PK		 4544 net/core/sock.c | 28 +-
4545 net/core/sock_diag.c | 15 +-
8cf17962 4546 net/core/sysctl_net_core.c | 22 +-
6090327c
PK		 4547 net/decnet/af_decnet.c | 1 +
4548 net/decnet/sysctl_net_decnet.c | 4 +-
afe359a8 4549 net/dsa/dsa.c | 2 +-
0986ccbe 4550 net/hsr/hsr_netlink.c | 2 +-
e8242a6d
PK		 4551 net/ieee802154/6lowpan/core.c | 2 +-
4552 net/ieee802154/6lowpan/reassembly.c | 14 +-
0986ccbe 4553 net/ipv4/af_inet.c | 2 +-
6090327c
PK		 4554 net/ipv4/devinet.c | 18 +-
4555 net/ipv4/fib_frontend.c | 6 +-
4556 net/ipv4/fib_semantics.c | 2 +-
afe359a8
PK		 4557 net/ipv4/inet_connection_sock.c | 4 +-
4558 net/ipv4/inet_timewait_sock.c | 2 +-
6090327c
PK		 4559 net/ipv4/inetpeer.c | 2 +-
4560 net/ipv4/ip_fragment.c | 15 +-
4561 net/ipv4/ip_gre.c | 6 +-
4562 net/ipv4/ip_sockglue.c | 2 +-
4563 net/ipv4/ip_vti.c | 4 +-
4564 net/ipv4/ipconfig.c | 6 +-
4565 net/ipv4/ipip.c | 4 +-
4566 net/ipv4/netfilter/arp_tables.c | 12 +-
4567 net/ipv4/netfilter/ip_tables.c | 12 +-
0986ccbe 4568 net/ipv4/ping.c | 14 +-
6090327c
PK		 4569 net/ipv4/raw.c | 14 +-
4570 net/ipv4/route.c | 32 +-
4571 net/ipv4/sysctl_net_ipv4.c | 22 +-
afe359a8 4572 net/ipv4/tcp_input.c | 6 +-
6090327c
PK		 4573 net/ipv4/tcp_probe.c | 2 +-
4574 net/ipv4/udp.c | 10 +-
4575 net/ipv4/xfrm4_policy.c | 18 +-
ab5bcff6 4576 net/ipv6/addrconf.c | 18 +-
6090327c
PK		 4577 net/ipv6/af_inet6.c | 2 +-
4578 net/ipv6/datagram.c | 2 +-
4579 net/ipv6/icmp.c | 2 +-
0986ccbe 4580 net/ipv6/ip6_fib.c | 4 +-
6090327c
PK		 4581 net/ipv6/ip6_gre.c | 10 +-
4582 net/ipv6/ip6_tunnel.c | 4 +-
4583 net/ipv6/ip6_vti.c | 4 +-
4584 net/ipv6/ipv6_sockglue.c | 2 +-
4585 net/ipv6/netfilter/ip6_tables.c | 12 +-
4586 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
4587 net/ipv6/ping.c | 33 +-
4588 net/ipv6/raw.c | 17 +-
4589 net/ipv6/reassembly.c | 13 +-
4590 net/ipv6/route.c | 2 +-
4591 net/ipv6/sit.c | 4 +-
4592 net/ipv6/sysctl_net_ipv6.c | 2 +-
4593 net/ipv6/udp.c | 6 +-
ab5bcff6 4594 net/ipv6/xfrm6_policy.c | 17 +-
6090327c
PK		 4595 net/irda/ircomm/ircomm_tty.c | 18 +-
4596 net/iucv/af_iucv.c | 4 +-
4597 net/iucv/iucv.c | 2 +-
4598 net/key/af_key.c | 4 +-
4599 net/l2tp/l2tp_eth.c | 38 +-
e8242a6d
PK		 4600 net/l2tp/l2tp_ip.c | 2 +-
4601 net/l2tp/l2tp_ip6.c | 2 +-
6090327c
PK		 4602 net/mac80211/cfg.c | 8 +-
4603 net/mac80211/ieee80211_i.h | 3 +-
afe359a8 4604 net/mac80211/iface.c | 20 +-
6090327c 4605 net/mac80211/main.c | 2 +-
da1216b9 4606 net/mac80211/pm.c | 4 +-
6090327c 4607 net/mac80211/rate.c | 2 +-
da1216b9 4608 net/mac80211/sta_info.c | 2 +-
e8242a6d 4609 net/mac80211/util.c | 8 +-
da1216b9 4610 net/mpls/af_mpls.c | 6 +-
6090327c
PK		 4611 net/netfilter/ipset/ip_set_core.c | 2 +-
4612 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
4613 net/netfilter/ipvs/ip_vs_core.c | 4 +-
4614 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
4615 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
4616 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
4617 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
4618 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
4619 net/netfilter/nf_conntrack_acct.c | 2 +-
4620 net/netfilter/nf_conntrack_ecache.c | 2 +-
4621 net/netfilter/nf_conntrack_helper.c | 2 +-
4622 net/netfilter/nf_conntrack_proto.c | 2 +-
4623 net/netfilter/nf_conntrack_standalone.c | 2 +-
4624 net/netfilter/nf_conntrack_timestamp.c | 2 +-
4625 net/netfilter/nf_log.c | 10 +-
4626 net/netfilter/nf_sockopt.c | 4 +-
4627 net/netfilter/nfnetlink_log.c | 4 +-
e8242a6d 4628 net/netfilter/nft_compat.c | 9 +-
6090327c
PK		 4629 net/netfilter/xt_statistic.c | 8 +-
4630 net/netlink/af_netlink.c | 4 +-
0986ccbe 4631 net/openvswitch/vport-internal_dev.c | 2 +-
da1216b9 4632 net/packet/af_packet.c | 8 +-
6090327c
PK		 4633 net/phonet/pep.c | 6 +-
4634 net/phonet/socket.c | 2 +-
4635 net/phonet/sysctl.c | 2 +-
4636 net/rds/cong.c | 6 +-
4637 net/rds/ib.h | 2 +-
4638 net/rds/ib_cm.c | 2 +-
4639 net/rds/ib_recv.c | 4 +-
4640 net/rds/iw.h | 2 +-
4641 net/rds/iw_cm.c | 2 +-
4642 net/rds/iw_recv.c | 4 +-
4643 net/rds/rds.h | 2 +-
4644 net/rds/tcp.c | 2 +-
4645 net/rds/tcp_send.c | 2 +-
4646 net/rxrpc/af_rxrpc.c | 2 +-
4647 net/rxrpc/ar-ack.c | 14 +-
4648 net/rxrpc/ar-call.c | 2 +-
4649 net/rxrpc/ar-connection.c | 2 +-
4650 net/rxrpc/ar-connevent.c | 2 +-
4651 net/rxrpc/ar-input.c | 4 +-
4652 net/rxrpc/ar-internal.h | 8 +-
4653 net/rxrpc/ar-local.c | 2 +-
4654 net/rxrpc/ar-output.c | 4 +-
4655 net/rxrpc/ar-peer.c | 2 +-
4656 net/rxrpc/ar-proc.c | 4 +-
4657 net/rxrpc/ar-transport.c | 2 +-
4658 net/rxrpc/rxkad.c | 4 +-
4659 net/sched/sch_generic.c | 4 +-
4660 net/sctp/ipv6.c | 6 +-
4661 net/sctp/protocol.c | 10 +-
4662 net/sctp/sm_sideeffect.c | 2 +-
4663 net/sctp/socket.c | 21 +-
4664 net/sctp/sysctl.c | 10 +-
8cf17962 4665 net/socket.c | 18 +-
6090327c
PK		 4666 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
4667 net/sunrpc/clnt.c | 4 +-
4668 net/sunrpc/sched.c | 4 +-
4669 net/sunrpc/svc.c | 4 +-
ab5bcff6 4670 net/sunrpc/svcauth_unix.c | 2 +-
6090327c
PK		 4671 net/sunrpc/xprtrdma/svc_rdma.c | 38 +-
4672 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
4673 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
4674 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
e8242a6d 4675 net/tipc/netlink_compat.c | 12 +-
6090327c 4676 net/tipc/subscr.c | 2 +-
8cf17962 4677 net/unix/af_unix.c | 7 +-
6090327c
PK		 4678 net/unix/sysctl_net_unix.c | 2 +-
4679 net/wireless/wext-core.c | 19 +-
4680 net/xfrm/xfrm_policy.c | 16 +-
4681 net/xfrm/xfrm_state.c | 33 +-
4682 net/xfrm/xfrm_sysctl.c | 2 +-
8cf17962 4683 scripts/Kbuild.include | 2 +-
6090327c
PK		 4684 scripts/Makefile.build | 2 +-
4685 scripts/Makefile.clean | 3 +-
ab5bcff6 4686 scripts/Makefile.host | 69 +-
6090327c 4687 scripts/basic/fixdep.c | 12 +-
afe359a8
PK		 4688 scripts/dtc/checks.c | 14 +-
4689 scripts/dtc/data.c | 6 +-
4690 scripts/dtc/flattree.c | 8 +-
4691 scripts/dtc/livetree.c | 4 +-
a8b227b4 4692 scripts/gcc-plugin.sh | 51 +
6090327c 4693 scripts/headers_install.sh | 1 +
afe359a8
PK		 4694 scripts/kallsyms.c | 4 +-
4695 scripts/kconfig/lkc.h | 5 +-
4696 scripts/kconfig/menu.c | 2 +-
4697 scripts/kconfig/symbol.c | 6 +-
6090327c
PK		 4698 scripts/link-vmlinux.sh | 2 +-
4699 scripts/mod/file2alias.c | 14 +-
4700 scripts/mod/modpost.c | 25 +-
4701 scripts/mod/modpost.h | 6 +-
4702 scripts/mod/sumversion.c | 2 +-
4703 scripts/module-common.lds | 4 +
4704 scripts/package/builddeb | 1 +
4705 scripts/pnmtologo.c | 6 +-
4706 scripts/sortextable.h | 6 +-
a8b227b4 4707 scripts/tags.sh | 2 +-
ab5bcff6 4708 security/Kconfig | 692 +-
6090327c
PK		 4709 security/integrity/ima/ima.h | 4 +-
4710 security/integrity/ima/ima_api.c | 2 +-
4711 security/integrity/ima/ima_fs.c | 4 +-
4712 security/integrity/ima/ima_queue.c | 2 +-
6090327c 4713 security/keys/key.c | 18 +-
6090327c 4714 security/selinux/avc.c | 6 +-
6090327c 4715 security/selinux/include/xfrm.h | 2 +-
afe359a8 4716 security/yama/yama_lsm.c | 2 +-
6090327c
PK		 4717 sound/aoa/codecs/onyx.c | 7 +-
4718 sound/aoa/codecs/onyx.h | 1 +
4719 sound/core/oss/pcm_oss.c | 18 +-
4720 sound/core/pcm_compat.c | 2 +-
4721 sound/core/pcm_native.c | 4 +-
6090327c
PK		 4722 sound/core/sound.c | 2 +-
4723 sound/drivers/mts64.c | 14 +-
4724 sound/drivers/opl4/opl4_lib.c | 2 +-
4725 sound/drivers/portman2x4.c | 3 +-
4726 sound/firewire/amdtp.c | 4 +-
4727 sound/firewire/amdtp.h | 4 +-
4728 sound/firewire/isight.c | 10 +-
4729 sound/firewire/scs1x.c | 8 +-
4730 sound/oss/sb_audio.c | 2 +-
4731 sound/oss/swarm_cs4297a.c | 6 +-
8cf17962 4732 sound/pci/hda/hda_codec.c | 2 +-
6090327c
PK		 4733 sound/pci/ymfpci/ymfpci.h | 2 +-
4734 sound/pci/ymfpci/ymfpci_main.c | 12 +-
ab5bcff6 4735 sound/soc/codecs/sti-sas.c | 10 +-
8cf17962 4736 sound/soc/soc-ac97.c | 6 +-
e8242a6d 4737 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
da1216b9 4738 tools/gcc/Makefile | 42 +
6090327c 4739 tools/gcc/checker_plugin.c | 150 +
e8242a6d 4740 tools/gcc/colorize_plugin.c | 215 +
ab5bcff6
PK		 4741 tools/gcc/constify_plugin.c | 571 +
4742 tools/gcc/gcc-common.h | 812 +
4743 tools/gcc/initify_plugin.c | 552 +
e8242a6d 4744 tools/gcc/kallocstat_plugin.c | 188 +
ab5bcff6 4745 tools/gcc/kernexec_plugin.c | 549 +
afe359a8
PK		 4746 tools/gcc/latent_entropy_plugin.c | 470 +
4747 tools/gcc/size_overflow_plugin/.gitignore | 2 +
ab5bcff6
PK		 4748 tools/gcc/size_overflow_plugin/Makefile | 28 +
4749 .../disable_size_overflow_hash.data |12422 ++++++++++++
afe359a8 4750 .../generate_size_overflow_hash.sh | 103 +
ab5bcff6
PK		 4751 .../insert_size_overflow_asm.c | 416 +
4752 .../size_overflow_plugin/intentional_overflow.c | 1010 +
8cf17962 4753 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
ab5bcff6
PK		 4754 tools/gcc/size_overflow_plugin/size_overflow.h | 323 +
4755 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
4756 .../size_overflow_plugin/size_overflow_hash.data |20735 ++++++++++++++++++++
6090327c 4757 .../size_overflow_hash_aux.data | 92 +
ab5bcff6 4758 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 ++
afe359a8
PK		 4759 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
4760 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
ab5bcff6
PK		 4761 .../size_overflow_plugin_hash.c | 352 +
4762 .../size_overflow_plugin/size_overflow_transform.c | 749 +
4763 .../size_overflow_transform_core.c | 1010 +
afe359a8 4764 tools/gcc/stackleak_plugin.c | 436 +
e8242a6d 4765 tools/gcc/structleak_plugin.c | 287 +
6090327c
PK		 4766 tools/include/linux/compiler.h | 8 +
4767 tools/lib/api/Makefile | 2 +-
4768 tools/perf/util/include/asm/alternative-asm.h | 3 +
4769 tools/virtio/linux/uaccess.h | 2 +-
ab5bcff6
PK		 4770 virt/kvm/kvm_main.c | 42 +-
4771 1944 files changed, 66925 insertions(+), 8949 deletions(-)
Unofficial grsecurity patch archive (https://github.com/slashbeast/grsecurity-scrape)